Standardize contributor tasks and verify website output

.github/readme-source.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "sha256": "693e46871f6a4831dd8a781de9dc91885be081d5a5d123632882349bdf746da1",
+  "sha256": "c4b61dc7a9d76fb5320a4ffd9763a01524021bd78f63250cddf71ff269e677a8",
   "history": {
     "forbidden_commits": [
       "5e7eba20575e7194b6cb91a498f3a69d35e1e786"

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Set up development tools
-      uses: nicodes/tools/setup@f412061a7a3f0914db9e09d1159e69504aee8706
+      uses: nicodes/tools/setup@a1c0321f3b4917a7e99eca42e241e46670f6e1e1
       env:
         GH_TOKEN: ${{ github.token }}
       timeout-minutes: 5

.github/workflows/dependency-policy.yml

@@ -48,7 +48,7 @@ jobs:
       env:
         GH_TOKEN: ${{ github.token }}
       timeout-minutes: 7
-      uses: nicodes/tools/dependencies@f412061a7a3f0914db9e09d1159e69504aee8706
+      uses: nicodes/tools/dependencies@a1c0321f3b4917a7e99eca42e241e46670f6e1e1
       with:
         apply: 'true'
         output: ${{ runner.temp }}/dependency-report.json

README.md

@@ -1,4 +1,4 @@
-<!-- Generated from private documentation source. Do not edit directly. Source SHA256: aee76a8d361a0fbfb82a4416ffe5ba433d946f128459d8f5ea9dca9db7c3d2d2 -->
+<!-- Generated from private documentation source. Do not edit directly. Source SHA256: f8f3c13b727c31a7fadbd2ed1e80ef5d1fbaafda852acd3be0e3060c156f9131 -->
 
 # fieldsofrevik-web
 
@@ -27,3 +27,7 @@ mise run check
 Build commands record source and exact regular output hashes. Declared tests produce evidence from the current verification session in `.artifacts/verification`.
 
 `mise run dev` owns the checkout’s foreground process tree. Dependency preparation and the application use an isolated local environment through the pinned optional ghenv CLI; no account is needed. Startup refuses changes to the native task policy during preparation. `mise run stop` stops only that checkout, and `mise run clean` refuses cleanup while its session is active.
+
+## Contributor task interface
+
+Contributor tool versions and task entry points live in the native Mise configuration. Use `mise run lint` for source checks, `mise run test` for the applicable behavioral tests, and `mise run check` for the complete supported gate. `mise run clean` removes declared generated outputs while preserving source, credentials and retained data. Use `mise run dev` and `mise run stop` for this checkout's owned local session.

mise.toml

@@ -16,7 +16,7 @@ run = "python3 \"$TOOLS_ROOT/helpers/verification.py\" build --name build --arti
 depends = ["install"]
 
 [tasks."artifact-check"]
-run = ["bash scripts/test-site.sh"]
+run = ["bash scripts/test-site.sh", "python3 \"$TOOLS_ROOT/helpers/site-contract.py\" dist"]
 depends = ["build"]
 
 [tasks."dev"]
@@ -27,7 +27,7 @@ tools = {"github:nicodes/ghenv" = "v0.4.0"}
 run = "python3 \"$TOOLS_ROOT/helpers/dev.py\" clean --state .artifacts/dev -- mise run _clean"
 
 [tasks."check"]
-run = [{"task" = "install"}, {"task" = "build"}, {"task" = "artifact-check"}]
+run = [{task = "install"}, {task = "lint"}, {task = "build"}, {task = "artifact-check"}]
 
 [tasks."_build"]
 run = ["bun run build"]
@@ -37,5 +37,12 @@ hide = true
 run = "python3 \"$TOOLS_ROOT/helpers/dev.py\" stop --state .artifacts/dev"
 
 [tasks."_clean"]
-run = ["bun -e 'const fs=require('\"'\"'node:fs'\"'\"');for(const p of ['\"'\"'dist'\"'\"','\"'\"'.astro'\"'\"'])fs.rmSync(p,{recursive:true,force:true})'"]
+run = "python3 \"$TOOLS_ROOT/helpers/clean.py\" --path dist --path .astro"
 hide = true
+
+[tasks."lint"]
+run = ["bash -n scripts/*.sh"]
+
+[tasks."test"]
+run = "mise run artifact-check"
+depends = ["build"]