.pre-commit-config.yaml

# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

default_install_hook_types: [pre-commit, pre-push, commit-msg]

repos:
  - repo: https://github.com/astral-sh/ruff-pre-commit
    # Ruff version.
    rev: v0.15.7
    hooks:
      # Run the linter.
      - id: ruff
        args: [--fix]
        exclude: "sdk/python|.*\\.ipynb$"
      # Run the formatter.
      - id: ruff-format
        exclude: "sdk/python"
  - repo: local
    hooks:
      - id: ty
        name: Run ty typechecks
        entry: bash tools/lint/run-ty-check.sh
        language: system
        pass_filenames: false
        types: [python]
  - repo: local
    hooks:
      - id: openapi-generator
        # Generate openapi spec for platform
        name: Generate NeMo Platform OpenAPI Specification
        language: system
        entry: bash script/generate-openapi-spec.sh
        pass_filenames: false
        # The list below does necessarily need to be comprehensive.
        # The more comprehensive the list, the lower the likelihood of pushing changes without OpenAPI spec updates,
        # which results in failed CI pipelines.
        files: |
          (?x)^(
              # NMP Common schemas
              packages/nmp_common/src/nmp_common/datamodel/.*|
              packages/nmp_common/src/nmp_common/api/.*|

              # Individual microservices
              services/evaluator/src/evaluator/api/.*|
              services/guardrails/src/guardrails/api/.*|
              services/core/infrastructure/jobs/src/jobs/api/.*|

              # First-party plugins — each plugin's spec lands in plugins/<dir>/openapi/openapi.yaml.
              # pyproject.toml is included because [tool.nemo.openapi] there controls opt-in.
              plugins/[^/]+/src/.*|
              plugins/[^/]+/pyproject\.toml|
          )$

        stages: [manual]

  - repo: local
    hooks:
      - id: config-reference-docs
        name: Check config reference doc is up to date
        entry: bash -c 'uv run generate-config-docs && git diff --exit-code docs/set-up/config-reference.mdx'
        language: system
        pass_filenames: false
        files: |
          (?x)^(
            script/generate_config_docs\.py|
            packages/nmp_common/.*|
            services/.*/src/.*/config\.py|
            docs/set-up/config-reference\.mdx
          )$

  - repo: https://github.com/norwoodj/helm-docs
    # The container itself is 'latest' no matter what here
    rev: v1.14.2
    hooks:
      - id: helm-docs
        files: |
          (?x)^(
            k8s/helm/values\.yaml|
            k8s/helm/Chart\.yaml|
            k8s/helm/helm-docs-template/nemo-helm-readme\.md\.gotmpl
          )$
        args:
          - --chart-search-root=k8s/helm/
          - --template-files=k8s/helm/helm-docs-template/nemo-helm-readme.md.gotmpl

  - repo: local
    hooks:
      - id: uv-lock
        name: Run uv lock with platform uv
        entry: bash script/uv-lock.sh
        language: system
        files: 'pyproject\.toml$'
        pass_filenames: false
        verbose: true
      - id: uv-lock-check
        name: Check for uv.lock drift
        entry: git diff --exit-code uv.lock
        language: system
        files: 'pyproject\.toml$'
        pass_filenames: false
        verbose: true
      - id: uv-version-consistency
        name: Check CI and Flox uv versions
        entry: ./tools/lint/check-uv-version.sh
        language: system
        files: '^(Makefile|pyproject\.toml|\.github/workflows/.*\.ya?ml|tools/python/\.flox/env/manifest\.toml)$'
        pass_filenames: false
      - id: python-version-consistency
        name: Check Make and Flox Python versions
        entry: ./tools/lint/check-python-version.sh
        language: system
        files: '^(Makefile|tools/python/\.flox/env/manifest\.toml)$'
        pass_filenames: false
      - id: node-version-consistency
        name: Check Node.js and pnpm versions
        entry: ./tools/lint/check-node-version.sh
        language: system
        files: '^(Makefile|\.nvmrc|web/package\.json|tools/nodejs/\.flox/env/manifest\.toml|\.github/workflows/ci\.yaml|\.github/actions/build-nemo-platform-wheel/action\.yaml)$'
        pass_filenames: false
      - id: copyright-fix
        name: Fix copyright headers
        entry: uv run python tools/lint/copyright_fixer.py
        language: system
        pass_filenames: false
        files: '(^|/)(Dockerfile(\.|$)|Makefile$|.*\.Dockerfile$|.*\.(py|ts|tsx|js|jsx|mjs|cjs|css|md|mdx|ya?ml|toml|sh|bash|rego|hcl|j2|jinja|tpl)$|.*\.(dockerignore|gitignore|gitattributes|helmignore|prettierignore|cursorignore|copyrightignore)$|.*\.env(\..*)?$)'
      - id: check-signoff
        name: Check commit is signed off (DCO)
        entry: "grep -qE '^Signed-off-by: .+ <.+>'"
        language: system
        stages: [commit-msg]
        always_run: true

  # Studio
  - repo: local
    hooks:
      - id: studio-lint-staged
        name: Run UI lint-staged
        entry: bash -c '[ -n "$CI" ] && exit 0; command -v pnpm >/dev/null 2>&1 || { echo "pnpm not installed, skipping lint-staged (see web/README.md for setup)"; exit 0; }; cd web && pnpm lint-staged'
        language: system
        files: ^web/
        pass_filenames: false
        stages: [pre-commit]
  - repo: local
    hooks:
      - id: studio-typecheck
        name: Run UI typecheck
        entry: bash -c '[ -n "$CI" ] && exit 0; command -v pnpm >/dev/null 2>&1 || { echo "pnpm not installed, skipping typecheck (see web/README.md for setup)"; exit 0; }; cd web && pnpm --filter="...[origin/main]" run --parallel --if-present typecheck'
        language: system
        files: ^web/
        pass_filenames: false
        stages: [pre-push]

  - repo: local
    hooks:
      - id: no-nmp-common-in-plugins
        name: Plugins must not import from nmp-common
        # If this fails: check whether the function/class you need already exists in
        # nemo_platform_plugin (packages/nemo_platform_plugin). If it does, import
        # from there instead. If it doesn't, move the code from nmp_common into
        # nemo_platform_plugin so plugins can access it without depending on nmp_common.
        entry: 'from nmp\.common|from nmp_common|import nmp\.common|import nmp_common'
        language: pygrep
        files: ^plugins/.*\.py$
        exclude: __pycache__

  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-merge-conflict
        args:
          - --assume-in-merge
# Flox
  - repo: local
    hooks:
      - id: flox-lock-consistency
        name: Check Flox locks
        entry: ./tools/lint/check-flox-locks.sh
        language: system
        files: '(^\.flox/env/manifest\.toml$|^tools/[^/]+/\.flox/env/manifest\.toml$)'
        pass_filenames: false
        stages: [pre-commit]