make pre-commit and GA smarter

Author: izaac

.githooks/pre-commit

@@ -8,30 +8,50 @@ exec 1>&2
 
 echo "Running Pre-Commit Hooks..."
 
-# Get staged nix files
+# Get staged files
 STAGED_NIX_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep '\.nix$' || true)
+STAGED_MD_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep '\.md$' || true)
+LOCK_CHANGED=$(git diff --cached --name-only --diff-filter=ACM | grep 'flake\.lock$' || true)
 
+# --- NIX CHECKS ---
 if [ -n "$STAGED_NIX_FILES" ]; then
-    echo "Formatting..."
+    echo "Processing Nix files..."
+    echo " -> Formatting..."
     nix run nixpkgs#alejandra -- -q $STAGED_NIX_FILES
 
-    echo "Checking for dead code..."
+    echo " -> Checking for dead code..."
     nix run nixpkgs#deadnix -- -e $STAGED_NIX_FILES
 
-    echo "Running statix..."
-    # Statix requires single files
+    echo " -> Running statix..."
     for file in $STAGED_NIX_FILES; do
-        echo " -> $file"
+        echo "    - $file"
         nix run nixpkgs#statix -- fix "$file"
     done
 
     # Re-stage formatted files
     git add $STAGED_NIX_FILES
 fi
 
-echo "Running nix flake check..."
-nix flake check
+if [ -n "$STAGED_NIX_FILES" ] || [ -n "$LOCK_CHANGED" ]; then
+    echo "Running nix flake check..."
+    nix flake check
+fi
+
+# --- MARKDOWN CHECKS ---
+if [ -n "$STAGED_MD_FILES" ]; then
+    echo "Processing Markdown files..."
+    echo " -> Formatting..."
+    nix run nixpkgs#prettier -- --write $STAGED_MD_FILES --ignore-path .gitignore
+    
+    echo " -> Linting..."
+    # We run lint on the whole repo to be safe, but only if md files changed
+    nix run nixpkgs#markdownlint-cli2 -- '**/*.md' '#.direnv' '#result' '#.git'
+    
+    # Re-stage formatted files
+    git add $STAGED_MD_FILES
+fi
 
+# --- AI TRACE SCAN ---
 echo "Scanning for AI traces..."
 if command -v ai-trace-scan &>/dev/null; then
     ai-trace-scan --staged --quiet

.github/workflows/check.yml

@@ -2,23 +2,45 @@ name: Cave-Check
 on:
   push:
     branches: [main]
+    paths:
+      - "**/*.nix"
+      - "**/*.md"
+      - "flake.lock"
   pull_request:
     branches: [main]
+    paths:
+      - "**/*.nix"
+      - "**/*.md"
+      - "flake.lock"
+
 jobs:
   check-stones:
     runs-on: ubuntu-latest
     steps:
       - name: Fetch Cave
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
       - name: Build Fire (Nix)
         uses: cachix/install-nix-action@ba0dd844c9180cbf77aa72a116d6fbc515d0e87b # v27
         with:
           nix_path: nixpkgs=channel:nixos-unstable
+
+      - name: Get Changed Files
+        id: changed-files
+        uses: tj-actions/changed-files@dcc7a0cba800f454d79dea4b963bd225b9ab999c # v45.0.5
+
       - name: Magic Eye (nix flake check)
+        if: steps.changed-files.outputs.any_modified == 'true' && (contains(steps.changed-files.outputs.all_modified_files, '.nix') || contains(steps.changed-files.outputs.all_modified_files, 'flake.lock'))
         run: nix flake check
+
       - name: Stone Linter (statix)
+        if: steps.changed-files.outputs.any_modified == 'true' && contains(steps.changed-files.outputs.all_modified_files, '.nix')
         run: nix run nixpkgs#statix -- check .
+
       - name: Polish Stones (Prettier)
+        if: steps.changed-files.outputs.any_modified == 'true' && contains(steps.changed-files.outputs.all_modified_files, '.md')
         run: nix run nixpkgs#prettier -- --check '**/*.md' --ignore-path .gitignore
+
       - name: Wash Stones (markdownlint)
+        if: steps.changed-files.outputs.any_modified == 'true' && contains(steps.changed-files.outputs.all_modified_files, '.md')
         run: nix run nixpkgs#markdownlint-cli2 -- '**/*.md' '#.direnv' '#result' '#.git'

.github/workflows/mirror.yml

@@ -7,11 +7,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Fetch Cave
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Mirror Move
-        uses: pixta-dev/repository-mirroring-action@v1
+        uses: pixta-dev/repository-mirroring-action@4833250ef80ca3d066cf6660fb0090066966099a # v1.1.1
         with:
           target_repo_url: git@codeberg.org:izaac/nixos-config.git
           ssh_private_key: ${{ secrets.CODEBERG_SSH_KEY }}