tracedecay/.github/workflows/plugin-validation.yml at master · ScriptedAlchemy/tracedecay · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
# Schema/lint layer for the shipped agent plugin bundles. Mirrors:
# https://github.com/cursor/plugins/blob/main/.github/workflows/validate-plugins.yml
#
# Rust contract tests already run in ci.yml. Keep this workflow to schema checks
# and the SDK-backed MCP smoke, which needs a built binary plus npx.
name: Plugin Validation

on:
  pull_request:
    paths:
      - "plugin/**"
      - "tests/fixtures/cursor-schemas/**"
      - "tests/agent_suite/*plugin*"
      - "tests/agent_suite/*skill*"
      - "scripts/mcp-conformance-smoke.sh"
      - "src/serve.rs"
      - "src/main.rs"
      - "src/lib.rs"
      - "src/mcp/**"
      - "Cargo.toml"
      - "Cargo.lock"
      - ".github/workflows/plugin-validation.yml"

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  manifest-schema:
    name: Manifest schema
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v7

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install ajv-cli
        run: npm install --no-save ajv-cli@5.0.0 ajv-formats@2.1.1

      - name: Compile vendored schemas
        run: |
          npx --no-install ajv compile --spec=draft7 -c ajv-formats \
            -s tests/fixtures/cursor-schemas/plugin.schema.json \
            -s tests/fixtures/cursor-schemas/marketplace.schema.json \
            -s tests/fixtures/cursor-schemas/mcp.schema.json \
            -s tests/fixtures/cursor-schemas/hooks.schema.json

      - name: Validate Cursor plugin manifest
        run: |
          npx --no-install ajv validate --spec=draft7 -c ajv-formats --errors=text \
            -s tests/fixtures/cursor-schemas/plugin.schema.json \
            -d plugin/.cursor-plugin/plugin.json

      - name: Check bundle JSON files parse
        run: |
          set -euo pipefail
          find plugin -name '*.json' -print0 |
            while IFS= read -r -d '' f; do
              python3 -c "import json,sys; json.load(open(sys.argv[1]))" "$f" \
                || { echo "invalid JSON: $f" >&2; exit 1; }
              echo "ok: $f"
            done

  claude-native-validation:
    name: Claude native plugin validation
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v7

      - name: Install Claude Code
        run: |
          curl -fsSL https://claude.ai/install.sh | bash
          echo "$HOME/.local/bin" >> "$GITHUB_PATH"

      - name: Validate Claude plugin bundle
        run: claude plugin validate plugin --strict

  # Uses MCP Inspector's TypeScript SDK client to cover stdio handshake and
  # schema compatibility beyond the in-repo Rust MCP tests.
  mcp-conformance-smoke:
    name: MCP conformance smoke
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v7

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2

      - name: Build tracedecay
        run: cargo build --bin tracedecay --locked

      - name: Run MCP conformance smoke
        run: scripts/mcp-conformance-smoke.sh
        env:
          TRACEDECAY_BIN: target/debug/tracedecay