setup pre-commit checks

Author: ascii-dev

.bazelversion

@@ -1 +1 @@
-8.4.2
+8.4.2

.clang-format

@@ -0,0 +1,3 @@
+BasedOnStyle: Google
+IndentWidth: 2
+ColumnLimit: 100

.github/workflows/ci.yml

@@ -7,31 +7,75 @@ on:
     branches: [ "main" ]
 
 jobs:
-  test:
-    name: Build & Test
+# --- JOB 1: LINTING (The Style Police) ---
+  # This runs fast. If it fails, we don't bother building.
+  lint:
+    name: Lint & Format
     runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install Poetry
+        run: pip install poetry
+
+      - name: Add Export Plugin to Poetry
+        run: poetry self add "poetry-plugin-export"
+
+      - name: Install pre-commit
+        run: pip install pre-commit
+
+      # Runs all hooks defined in .pre-commit-config.yaml
+      # Checks every file in the repo.
+      - name: Run pre-commit
+        run: pre-commit run --all-files
+
+  # --- JOB 2: BUILD & TEST ---
+  test:
+    name: Test (${{ matrix.os }})
+    needs: lint # Wait for lint to pass
+    runs-on: ${{ matrix.os }}
+
+    strategy:
+      fail-fast: false # If Linux fails, let macOS finish so we see all errors
+      matrix:
+        os: [ubuntu-latest, macos-latest]
 
     steps:
-      # 1. Checkout
       - name: Checkout repo
         uses: actions/checkout@v4
 
-      # 2. Setup Python
-      - name: Setup Python 3.11
+      - name: Setup Python
         uses: actions/setup-python@v5
         with:
           python-version: '3.11'
 
-      # 3. Setup Bazel (The Modern Way)
-      # This installs Bazelisk AND handles the build cache automatically.
       - name: Setup Bazel
         uses: bazel-contrib/[email protected]
         with:
-          # Uses .bazelversion file automatically
           bazelisk-cache: true
           disk-cache: true
           repository-cache: true
 
-      # 4. Run Tests
-      - name: Run Tests
+      # 1. Standard Test Run
+      # Runs all tests in standard mode.
+      - name: Run All Tests (Standard)
         run: bazel test //... --test_output=errors
+
+      # 2. Memory Safety Run (AddressSanitizer) - Linux Only
+      # Catches buffer overflows and memory leaks.
+      - name: Run Tests with AddressSanitizer (ASan)
+        if: runner.os == 'Linux'
+        run: |
+          bazel test //... \
+            --test_output=errors \
+            --copt=-fsanitize=address \
+            --linkopt=-fsanitize=address \
+            --copt=-g \
+            --copt=-O1 \
+            --copt=-fno-omit-frame-pointer

.idea/bazelVersionCache.xml

@@ -0,0 +1,46 @@
+# See https://pre-commit.com for more information
+# To update hooks: pre-commit autoupdate
+
+repos:
+  # --- 1. Generic File Fixes ---
+  # These keep the repo clean and prevent silly merge conflicts.
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: check-yaml
+      - id: check-toml
+      - id: check-merge-conflict
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: check-added-large-files
+
+  # --- 2. Python Linting & Formatting (Ruff) ---
+  # This replaces Black, Isort, and Flake8 with a single, fast tool.
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.4.4
+    hooks:
+      - id: ruff
+        args: [--fix]
+      - id: ruff-format
+
+  # --- 3. C/C++ Formatting (Clang-Format) ---
+  # This enforces the Google C Style Guide automatically.
+  # It will format .c, .h, and .cc (test) files.
+  - repo: https://github.com/pre-commit/mirrors-clang-format
+    rev: v18.1.5
+    hooks:
+      - id: clang-format
+        types_or: [c, c++]
+
+  # --- 4. The "Poetry Bridge" ---
+  # This automatically updates requirements_lock.txt whenever poetry.lock changes.
+  # Keeps Bazel in sync with Poetry.
+  - repo: local
+    hooks:
+      - id: poetry-export
+        name: poetry-export
+        entry: poetry export --with dev --without-hashes --format=requirements.txt --output requirements_lock.txt
+        language: system
+        # Only runs if poetry.lock changes
+        files: ^poetry\.lock$
+        pass_filenames: false