feat(cli): add canyonos validate, backed by the contract checks in core

[userAugustos]

What was done

canyonos validate checks a ported project with the platform's own rules, so the checks can no longer drift from the code.

The skill directory, canyonos build's call to the old validator and the docs are untouched here; the next PR removes the validator from the skill and points it at canyonos validate / canyonos test.

How to test it

uv sync --frozen --all-packages
uv run --active --frozen pytest packages/core/tests packages/cli/tests tests -q
uv run --active --frozen ruff check . && uv run --active --frozen ruff format --check .
uv run --active --frozen ty check
bun run test

Build a .car from examples/helloworld (config/global_controller.yaml and the agent YAMLs under .car/config/, agents/ and workflow/ under .car/app/), then from the directory holding it:

$ canyonos validate
✓ .car: clean.
$ echo $?
0

Make ExampleAgent.hello an async def:

CAR-ADAPTER-ASYNC  app/agents/example_agent.py:10
    `ExampleAgent.hello` is `async def`
      The executor calls method(**args) with no await, so Redis receives
      '<coroutine object ...>'. Keep the signature synchronous and call
      asyncio.run(...) inside the body.

✗ 1 error(s).

Mistype an entrypoint in the manifest:

CAR-ENTRYPOINT-MISSING  config/global_controller.yaml
    agents[0].entrypoint: app/agents/exmaple_agent.py does not exist

Declare an argument type: List[str]:

CAR-SCHEMA  config/example_agent.yaml:8
    agent.functions[0].arguments[0].type: 'List[str]' is not a builtin type; ...

Each exits 1. Also: canyonos validate --json; with Docker and no local core install, the same command runs inside the core image; canyonos test --rebuild deploys fresh even while a deploy is already running.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (1)

• main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a16456d1-367b-43e7-a6f0-9aa57eb30407

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}