ci: add file hygiene workflow and canonical config templates

.allstar/binary_artifacts.yaml

@@ -1,5 +1,5 @@
 # These binaries are intentionally included in the repository because they are
-# required for build tooling or platform-specific runtime components.  
+# required for build tooling or platform-specific runtime components.
 # No additional binary artifacts are permitted beyond this list.
 
 optConfig:

.editorconfig

@@ -0,0 +1,21 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 2
+
+[*.swift]
+indent_size = 4
+
+[*.{rs,go}]
+indent_size = 4
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab

.git-blame-ignore-revs

@@ -3,3 +3,7 @@
 
 # Scala Steward: Reformat with scalafmt 3.8.3
 a9110aafdb5e6d26522ee297ab8cb357601ff091
+
+# style: auto-fix and manually resolve all lint errors across the repo
+# Mass formatting — markdownlint, yamllint, shellcheck. No logic changes.
+03b3786ee9c3124d13715b5113eb439265aa89c3

.gitattributes

@@ -0,0 +1,46 @@
+# Normalize all text files to LF
+* text=auto eol=lf
+
+# Scripts -- must be LF (executed in Docker/Linux)
+*.sh text eol=lf
+*.bash text eol=lf
+
+# Data/config
+*.sql text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+*.json text eol=lf
+*.toml text eol=lf
+*.properties text eol=lf
+
+# Source code
+*.scala text eol=lf
+*.kt text eol=lf
+*.kts text eol=lf
+*.java text eol=lf
+*.swift text eol=lf
+*.ts text eol=lf
+*.js text eol=lf
+*.rs text eol=lf
+*.go text eol=lf
+
+# Docs
+*.md text eol=lf
+*.txt text eol=lf
+
+# Docker
+Dockerfile text eol=lf
+docker-compose*.yml text eol=lf
+
+# Binary -- never touch
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.jar binary
+*.zip binary
+*.tar.gz binary
+*.woff binary
+*.woff2 binary
+*.ttf binary

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,11 +1,14 @@
 ### Description
+
 Summarize the changes you're submitting in a few sentences, including Jira ticket ATL-xxxx if applicable.
 Link to any discussion, related issues and bug reports to give the context to help the reviewer understand the PR.
 
 ### Alternatives Considered (optional)
+
 Link to existing ADR (Architecture Decision Record), if any. If relevant, describe other approaches explored and the selected approach. Documenting why the methods were not selected will create a knowledge base for future reference, helping prevent others from revisiting less optimal ideas.
 
 ### Checklist
+
 - [ ] My PR follows the [contribution guidelines](https://github.com/hyperledger-identus/cloud-agent/blob/main/CONTRIBUTING.md) of this project
 - [ ] My PR is free of third-party dependencies that don't comply with the [Allowlist](https://toc.hyperledger.org/governing-documents/allowed-third-party-license-policy.html#approved-licenses-for-allowlist)
 - [ ] I have commented my code, particularly in hard-to-understand areas

.github/dependabot.yml

@@ -71,4 +71,4 @@ updates:
     groups:
       pip-demo-deps:
         patterns:
-          - "*"
+          - "*"

.github/workflows/file-hygiene.yml

@@ -0,0 +1,10 @@
+name: File Hygiene
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  lint:
+    uses: hyperledger-identus/.github/.github/workflows/lint-files.yml@f2c9e417fa46f69b015a9cdbaafdfb9e52e4ed60 # main

.markdownlint-cli2.yaml

@@ -0,0 +1,9 @@
+ignores:
+  - ".claude/**"
+  - "node_modules/**"
+  - "**/node_modules/**"
+  - "target/**"
+  - "tmp/**"
+  - "atala-prism/**"
+  - "cloud-agent/client/**"
+  - "tests/integration-tests/tmp/**"

.markdownlint.yml

@@ -0,0 +1,44 @@
+# markdownlint configuration
+# https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md
+
+default: true
+
+# Allow long lines (common in tables, URLs, and generated content)
+MD013: false
+
+# Allow multiple top-level headings (common in multi-section docs)
+MD025: false
+
+# Allow inline HTML (needed for badges, details/summary, etc.)
+MD033: false
+
+# Allow duplicate headings (common in CHANGELOG files with repeated version patterns)
+MD024: false
+
+# Allow first line to be HTML (centered logos in READMEs)
+MD041: false
+
+# Disable ordered list prefix check (lists broken by code blocks/paragraphs
+# restart numbering which triggers false positives)
+MD029: false
+
+# Allow heading level jumps (common in CHANGELOG.md files)
+MD001: false
+
+# Allow emphasis used as heading (common in generated changelogs)
+MD036: false
+
+# Allow empty links (common in generated API docs)
+MD042: false
+
+# Allow code blocks without language (legacy docs)
+MD040: false
+
+# Allow indented code blocks (mixed style in existing docs)
+MD046: false
+
+# Allow non-descriptive link text like "here" (legacy docs)
+MD059: false
+
+# Allow images without alt text (legacy docs)
+MD045: false

.markdownlintignore

@@ -0,0 +1,6 @@
+.claude/
+node_modules/
+target/
+tmp/
+atala-prism/
+cloud-agent/client/

.shellcheckrc

@@ -0,0 +1,5 @@
+# SC2221/SC2222: Case pattern overlap (catch-all before specific) — intentional
+# in argument parsing where -* and --* are both handled together
+# SC2034: Unused variable — false positive for vars exported via env to docker-compose
+# SC3045: POSIX ulimit — in generated gradlew file
+disable=SC2221,SC2222,SC2034,SC3045

.yamllint.yml

@@ -1,18 +1,49 @@
-###########################################
-# These are the rules used for            #
-# linting all the yaml files in the stack #
-# NOTE:                                   #
-# You can disable line with:              #
-# # yamllint disable-line                 #
-###########################################
+---
 extends: default
+
 rules:
-  new-lines:
-    level: warning
-    type: unix
-  line-length:
-    max: 600
-  comments:
-    min-spaces-from-content: 1 # Used to follow prettier standard: https://github.com/prettier/prettier/pull/10926
-    level: warning
+  # Allow long lines (common in CI workflows and docker-compose)
+  line-length: disable
+
+  # Allow truthy values like 'on' (used in GitHub Actions triggers)
+  truthy:
+    allowed-values: ["true", "false", "yes", "no", "on"]
+
+  # Relaxed comment indentation
+  comments-indentation: disable
+
+  # Allow YAML files without document start marker (---)
   document-start: disable
+
+  # Allow spaces inside brackets (common in Docker Compose port mappings)
+  brackets:
+    min-spaces-inside: 0
+    max-spaces-inside: 1
+
+  # Allow spaces inside braces (common in compose environment vars)
+  braces:
+    min-spaces-inside: 0
+    max-spaces-inside: 1
+
+  # Relax comment spacing (allow 1 space before inline comments)
+  comments:
+    min-spaces-from-content: 1
+
+  # Relax indentation to allow 2-space variants
+  indentation:
+    spaces: consistent
+    indent-sequences: whatever
+
+  # Allow blank lines at end of file
+  empty-lines:
+    max-end: 1
+
+ignore: |
+  # Helm templates contain Go templating that breaks YAML syntax
+  infrastructure/charts/
+  # Large OpenAPI spec has its own validation
+  cloud-agent/service/api/http/
+  # Build artifacts
+  target/
+  node_modules/
+  .claude/