fix: validate config files deeply

[edhor1608]

Validate config files deeply in loadRuleset and loadExportProfiles

• Replaces shallow top-level key checks in loadRuleset and loadExportProfiles with full recursive validation of all nested fields.
• Adds type, range, and allowlist checks for every field across all modes, orientations, and surfaces (e.g. crf_default in [0,51], risk_level in [low,medium,high], resolutions as NxN).
• Both functions now throw descriptive errors with the offending JSON path (e.g. Invalid ruleset at profiles.reliable.feed.portrait: resolution must match NxN).
• Behavioral Change: configs that previously loaded successfully with missing or malformed nested fields will now throw at load time.

^{Macroscope summarized 6833fd9.}

Summary by CodeRabbit

• Bug Fixes

  • Configuration files now undergo comprehensive validation at load time with deterministic error messages that clearly identify invalid nested structures, values, and field constraints.

• Tests

  • Added tests for nested configuration validation of export profiles and rulesets to ensure constraint enforcement.

[coderabbitai]

📝 Walkthrough

Walkthrough

Config loading validation was enhanced across export profiles and rulesets. The loadExportProfiles function now validates the entire parsed JSON structure, including required top-level objects (image, video, version), per-mode/per-orientation image profiles, and per-mode/per-surface video profiles with typed field checks. Similarly, loadRuleset was refactored with dedicated validation routines to enforce required keys, per-mode/per-orientation profile rule fields, and white_canvas constraints. New internal validation helpers were introduced for record checking, enum membership, and resolution format validation. Error messages now specify the exact nested key path and constraint violation. Tests were added to verify error reporting for invalid nested fields. Documentation was updated to record these changes.

---

Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

• Ignore

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Docstring Coverage	❌ Error	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix: validate config files deeply' directly and clearly summarizes the main change: comprehensive nested validation of configuration files in loadRuleset and loadExportProfiles.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch repo-refresh-config-validation

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch repo-refresh-config-validation

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[edhor1608]

• test: update report workflow snapshots #55
• feat: add consistent cli help #54
• refactor: split media inspector parsers #53
• test: replace bulky pixel snapshots #52
• fix: cap benchmark confidence to measured evidence #51
• feat: add upload workflow report checks #50
• chore: quiet lint gate output #49
• test: isolate integration output files #48
• fix: validate config files deeply #47 👈 (View in Graphite)
• refactor: route media subprocesses through adapter #46
• refactor: share CLI argument parsing #45
• chore: replace legacy agent guide #44
• fix: load export profiles from module path #43
• chore: add repo refresh onboarding and CI #42
• fix: harden config and image helper loading #41
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.