Add hermetic config-schema validation for JSON and YAML files

.claude/settings.json

@@ -1,4 +1,5 @@
 {
+  "$schema": "https://www.schemastore.org/claude-code-settings.json",
   "hooks": {
     "SessionStart": [
       {

.fallowrc.json

@@ -1,5 +1,14 @@
 {
   "$schema": "https://raw.githubusercontent.com/fallow-rs/fallow/main/schema.json",
-  "ignoreDependencies": ["@typescript/native", "oxc-transform-react"],
-  "dynamicallyLoaded": ["vitest-setup.ts"]
+  "ignoreDependencies": [
+    "@typescript/native",
+    "oxc-transform-react",
+    "ajv",
+    "ajv-draft-04",
+    "ajv-formats",
+    "jsonc-parser",
+    "yaml"
+  ],
+  "dynamicallyLoaded": ["vitest-setup.ts"],
+  "ignorePatterns": ["scripts/**"]
 }

.github/dependabot.yml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://www.schemastore.org/dependabot-2.0.json
 version: 2
 updates:
   - package-ecosystem: "npm" # covers pnpm; auto-detects pnpm-lock.yaml

.github/workflows/ci.yml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
 name: CI
 
 on:
@@ -47,6 +48,10 @@ jobs:
       - name: Lint CSS
         run: pnpm lint:css
 
+      - name: Validate config schemas
+        # Validates every tracked JSON/YAML file that references a schema against it.
+        run: pnpm validate:schemas
+
       - name: Format check
         run: pnpm format:check
 

.github/workflows/update-pnpm.yml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
 name: Update pnpm
 
 # Opens a PR to bump the pnpm version pinned in package.json's "packageManager"

lefthook.yml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/evilmartians/lefthook/master/schema.json
 pre-commit:
   parallel: true
   jobs:
@@ -10,6 +11,8 @@ pre-commit:
     - run: pnpm exec oxfmt --no-error-on-unmatched-pattern '{staged_files}'
       glob: "*.{ts,tsx,js,jsx,json,jsonc,css,md,yaml,yml,html}"
       stage_fixed: true
+    - run: node scripts/validate-schemas.ts '{staged_files}'
+      glob: "*.{json,jsonc,yml,yaml}"
     - run: pnpm check
       glob: "*.{ts,tsx}"
     - run: pnpm fallow

oxfmt.config.ts

@@ -5,5 +5,5 @@ export default defineConfig({
   jsdoc: true,
   sortImports: true,
   sortTailwindcss: { stylesheet: "src/styles.css" },
-  ignorePatterns: [".claude/**", "src/routeTree.gen.ts", "pnpm-lock.yaml"],
+  ignorePatterns: [".claude/**", "schemas/**", "src/routeTree.gen.ts", "pnpm-lock.yaml"],
 });

package.json

@@ -16,6 +16,8 @@
     "lint": "oxlint --type-aware",
     "lint:ci": "oxlint --type-aware --format=github",
     "lint:css": "stylelint \"**/*.css\"",
+    "validate:schemas": "node scripts/validate-schemas.ts",
+    "schemas:update": "node scripts/update-schemas.ts",
     "format": "oxfmt .",
     "format:check": "oxfmt --check .",
     "check": "tsc --noEmit",
@@ -47,13 +49,17 @@
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitejs/plugin-react": "^6.1.1",
     "@vitest/coverage-v8": "^4.1.11",
+    "ajv": "^8.20.0",
+    "ajv-draft-04": "^1.0.0",
+    "ajv-formats": "^3.0.1",
     "eslint-plugin-check-file": "^3.3.1",
     "eslint-plugin-playwright": "^2.12.0",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-you-might-not-need-an-effect": "^1.0.2",
     "eslint-plugin-testing-library": "^7.16.2",
     "fallow": "^2.104.0",
     "jsdom": "^29.1.1",
+    "jsonc-parser": "^3.3.1",
     "lefthook": "^2.1.9",
     "nitro": "latest",
     "oxc-transform-react": "~0.145.0",
@@ -66,7 +72,8 @@
     "typescript": "npm:@typescript/typescript6@^6.0.2",
     "vite": "^8.0.16",
     "vitest": "^4.1.11",
-    "vitest-axe": "^0.1.0"
+    "vitest-axe": "^0.1.0",
+    "yaml": "^2.9.0"
   },
   "packageManager": "[email protected]"
 }