Skip to content

ci(OMN-13309): wire no-plugin-daemon-classes validator as required CI gate - #1336

Merged
jonahgabriel merged 3 commits into
devfrom
jonah/omn-13309-no-plugin-daemon-ci-gate
Jun 25, 2026
Merged

jonahgabriel merged 3 commits into
devfrom
jonah/omn-13309-no-plugin-daemon-ci-gate

Conversation

@jonahgabriel

@jonahgabriel jonahgabriel commented Jun 25, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Wires the canonical no-plugin-daemon-classes validator as a required server-side CI gate on omnibase_core. This closes the last open DoD item of OMN-13309 (W9 of the validator-standardization remediation plan).

Background — why this PR exists

The W9 validator implementation (omnibase_core.validators.no_plugin_daemon_classes + ModelPluginLifecycleFinding + unit tests) already landed via core#1280 (OMN-13284) and is:

  • exported as a remote pre-commit hook in omnibase_core/.pre-commit-hooks.yaml
  • consumed remotely by omnibase_infra, omnimarket, and omniclaude

The earlier attempt at this work (core#1268) bundled an unrelated routing-authority refactor and was closed unmerged (mergedAt=null, closed 2026-06-19). The one remaining W9 DoD gap was enforcement: the validator existed only as a pre-commit hook, never as a CI gate. Per Operating Rule #5 ("enforcement, not detection"), a pre-commit-only check is advisory and bypassable.

What this PR adds

  • .github/workflows/validator-no-plugin-daemon-classes.yml — standalone CI gate with a unique, requirable status-check context (no-plugin-daemon-classes), mirroring the validator-runtime-profiles.yml (OMN-13330) / receipt-honesty.yml (OMN-13328) pattern. Runs (1) the validator unit tests, (2) a self-scan of core's own src/ (must exit 0).
  • tests/unit/validators/test_no_plugin_daemon_classes.py::test_omnibase_core_src_tree_is_clean — a self-scan regression that pins the exact contract the CI gate's self-scan step relies on. Proven to fail on an injected PluginRogueDaemon and pass when clean.

Proof

  • uv run pytest tests/unit/validators/test_no_plugin_daemon_classes.py -v -> 9 passed
  • uv run python -m omnibase_core.validators.no_plugin_daemon_classes src/ -> exit 0
  • uv run mypy --strict on changed surface -> clean
  • pre-commit run --files ... -> all hooks pass

OMN-13309

Evidence-Source: OCC#3102
Evidence-Ticket: OMN-13309

… gate

W9 of the validator-standardization remediation plan. The canonical Plugin*
lifecycle guard (omnibase_core.validators.no_plugin_daemon_classes, landed via
core#1280 / OMN-13284) was exported as a remote pre-commit hook and consumed by
omnibase_infra, omnimarket, and omniclaude, but was never wired as a server-side
CI gate on omnibase_core itself.

Per Operating Rule #5 (enforcement, not detection), a pre-commit-only check is
advisory and bypassable. This adds the standalone validator-no-plugin-daemon-classes.yml
workflow with a unique, requirable status-check context (no-plugin-daemon-classes),
mirroring the validator-runtime-profiles.yml / receipt-honesty.yml pattern. The
job runs the validator unit tests and self-scans core's own src/ tree (must exit 0).

Adds test_omnibase_core_src_tree_is_clean — a self-scan regression that pins the
exact contract the CI gate's self-scan step relies on, so a future Plugin*
lifecycle class added to core src fails the unit test and the CI gate together.

The closed core#1268 attempted this W9 work but bundled an unrelated routing-
authority refactor and was closed unmerged; the validator implementation has
since landed via core#1280. This PR closes the remaining DoD gap: the CI gate.
@coderabbitai

coderabbitai Bot commented Jun 25, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

@jonahgabriel, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 12 minutes and 49 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a483d1db-ecbe-42be-9f60-84ea8a54a99a

📥 Commits

Reviewing files that changed from the base of the PR and between 0e0d2ee and 54dc260.

📒 Files selected for processing (2)
  • .github/workflows/validator-no-plugin-daemon-classes.yml
  • tests/unit/validators/test_no_plugin_daemon_classes.py
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch jonah/omn-13309-no-plugin-daemon-ci-gate

Comment @coderabbitai help to get the list of available commands.

@jonahgabriel
jonahgabriel enabled auto-merge June 25, 2026 06:50
@jonahgabriel
jonahgabriel added this pull request to the merge queue Jun 25, 2026
Merged via the queue into dev with commit 5386e90 Jun 25, 2026
115 checks passed
@jonahgabriel
jonahgabriel deleted the jonah/omn-13309-no-plugin-daemon-ci-gate branch June 25, 2026 08:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant