Add clang-tidy support

.clang-tidy

@@ -0,0 +1,36 @@
+Checks: >
+  -*,
+  bugprone-*,
+  performance-*,
+  modernize-*,
+  readability-misleading-indentation,
+  readability-redundant-smartptr-get,
+  -bugprone-easily-swappable-parameters,
+  -modernize-use-trailing-return-type,
+  -modernize-avoid-c-arrays,
+  -modernize-use-auto,
+  -modernize-use-nodiscard,
+  -performance-enum-size,
+  -readability-braces-around-statements,
+
+# These warnings have determined to be critical and are as such treated as errors
+WarningsAsErrors: >
+  clang-analyzer-*,
+  bugprone-use-after-move,
+  bugprone-dangling-handle,
+  bugprone-infinite-loop,
+  bugprone-narrowing-conversions,
+  bugprone-undefined-memory-manipulation,
+  bugprone-move-forwarding-reference,
+  bugprone-incorrect-roundings,
+  bugprone-sizeof-expression,
+  bugprone-string-literal-with-embedded-nul,
+  bugprone-suspicious-memset-usage,
+
+HeaderFilterRegex: '(include/livekit|src|bridge/(include|src)|examples)'
+
+FormatStyle: file
+
+CheckOptions:
+  - key: modernize-use-nullptr.NullMacros
+    value: 'NULL'

.github/workflows/builds.yml

@@ -37,6 +37,7 @@ on:
 
 permissions:
   contents: read
+  actions: read
   packages: read
 
 env:
@@ -64,23 +65,23 @@ jobs:
         include:
           - os: ubuntu-latest
             name: linux-x64
-            build_cmd: ./build.sh release-tests && ./build.sh release-examples
+            build_cmd: ./build.sh release-all
             build_dir: build-release
           - os: ubuntu-24.04-arm
             name: linux-arm64
-            build_cmd: ./build.sh release-tests && ./build.sh release-examples
+            build_cmd: ./build.sh release-all
             build_dir: build-release
           - os: macos-latest
             name: macos-arm64
-            build_cmd: ./build.sh release-tests && ./build.sh release-examples
+            build_cmd: ./build.sh release-all
             build_dir: build-release
           - os: macos-latest
             name: macos-x64
-            build_cmd: ./build.sh release-tests && ./build.sh release-examples --macos-arch x86_64
+            build_cmd: ./build.sh release-all --macos-arch x86_64
             build_dir: build-release
           - os: windows-latest
             name: windows-x64
-            build_cmd: .\build.cmd release-tests && .\build.cmd release-examples
+            build_cmd: .\build.cmd release-all
             build_dir: build-release
 
     name: Build (${{ matrix.name }})
@@ -545,3 +546,86 @@ jobs:
             cmake -S . -B build -DLIVEKIT_LOCAL_SDK_DIR=/opt/livekit-sdk
             cmake --build build --parallel
           '
+
+  clang-tidy:
+    name: clang-tidy
+    runs-on: ubuntu-latest
+    continue-on-error: false
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - name: Checkout (with submodules)
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          submodules: recursive
+          fetch-depth: 1
+
+      - name: Install dependencies
+        run: |
+          set -eux
+          sudo apt-get update
+          sudo apt-get install -y \
+            build-essential cmake ninja-build pkg-config \
+            llvm-dev libclang-dev clang clang-tidy \
+            libva-dev libdrm-dev libgbm-dev libx11-dev libgl1-mesa-dev \
+            libxext-dev libxcomposite-dev libxdamage-dev libxfixes-dev \
+            libxrandr-dev libxi-dev libxkbcommon-dev \
+            libasound2-dev libpulse-dev \
+            libssl-dev \
+            libprotobuf-dev protobuf-compiler \
+            libabsl-dev \
+            libwayland-dev libdecor-0-dev \
+            libspdlog-dev
+
+      - name: Install Rust (stable)
+        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
+        with:
+          toolchain: stable
+
+      - name: Set Linux build environment
+        run: |
+          echo "CXXFLAGS=-Wno-deprecated-declarations" >> $GITHUB_ENV
+          echo "CFLAGS=-Wno-deprecated-declarations" >> $GITHUB_ENV
+          LLVM_VERSION=$(llvm-config --version | cut -d. -f1)
+          echo "LIBCLANG_PATH=/usr/lib/llvm-${LLVM_VERSION}/lib" >> $GITHUB_ENV
+
+      - name: CMake configure
+        run: cmake --preset linux-release-all
+
+      - name: Generate protobuf headers
+        run: cmake --build build-release --target livekit_proto
+
+      - name: Run clang-tidy
+        uses: cpp-linter/cpp-linter-action@77c390c5ba9c947ebc185a3e49cc754f1558abb5 # v2.18.0
+        id: linter
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          style: ''
+          tidy-checks: ''
+          database: build-release
+          files-changed-only: false
+          lines-changed-only: false
+          extensions: 'c,cpp,cc,cxx'
+          ignore: 'build-*|cpp-example-collection|client-sdk-rust|vcpkg_installed|src/tests|bridge/tests|src/room_event_converter.cpp'
+          file-annotations: true
+          thread-comments: update
+          step-summary: true
+          tidy-review: true
+          passive-reviews: true
+          no-lgtm: true
+          jobs: 0   # 0 == use all available CPU cores
+
+      - name: Check warning thresholds
+        env:
+          TIDY_FINDINGS: ${{ steps.linter.outputs.clang-tidy-checks-failed }}
+          MAX_TIDY_FINDINGS: '0'
+        run: |
+          echo "clang-tidy findings: ${TIDY_FINDINGS}"
+          if [ "${TIDY_FINDINGS}" -gt "${MAX_TIDY_FINDINGS}" ]; then
+            echo "::warning::clang-tidy found ${TIDY_FINDINGS} issue(s), threshold is ${MAX_TIDY_FINDINGS}"
+            exit 1
+          fi
+          echo "clang-tidy findings within threshold"

CMakePresets.json

@@ -207,6 +207,32 @@
         "LIVEKIT_BUILD_TESTS": "OFF"
       }
     },
+    {
+      "name": "windows-release-all",
+      "displayName": "Windows x64 Release with Tests + Examples",
+      "description": "Build for Windows x64 Release with tests and examples",
+      "inherits": "windows-base",
+      "binaryDir": "${sourceDir}/build-release",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Release",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON",
+        "VCPKG_MANIFEST_FEATURES": "examples"
+      }
+    },
+    {
+      "name": "windows-debug-all",
+      "displayName": "Windows x64 Debug with Tests + Examples",
+      "description": "Build for Windows x64 Debug with tests and examples",
+      "inherits": "windows-base",
+      "binaryDir": "${sourceDir}/build-debug",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Debug",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON",
+        "VCPKG_MANIFEST_FEATURES": "examples"
+      }
+    },
     {
       "name": "windows-release-tests",
       "displayName": "Windows x64 Release with Tests",
@@ -231,6 +257,30 @@
         "LIVEKIT_BUILD_TESTS": "ON"
       }
     },
+    {
+      "name": "linux-release-all",
+      "displayName": "Linux Release with Tests + Examples",
+      "description": "Build for Linux Release with tests and examples",
+      "inherits": "linux-base",
+      "binaryDir": "${sourceDir}/build-release",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Release",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON"
+      }
+    },
+    {
+      "name": "linux-debug-all",
+      "displayName": "Linux Debug with Tests + Examples",
+      "description": "Build for Linux Debug with tests and examples",
+      "inherits": "linux-base",
+      "binaryDir": "${sourceDir}/build-debug",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Debug",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON"
+      }
+    },
     {
       "name": "linux-release-tests",
       "displayName": "Linux Release with Tests",
@@ -255,6 +305,30 @@
         "LIVEKIT_BUILD_TESTS": "ON"
       }
     },
+    {
+      "name": "macos-release-all",
+      "displayName": "macOS Release with Tests + Examples",
+      "description": "Build for macOS Release with tests and examples",
+      "inherits": "macos-base",
+      "binaryDir": "${sourceDir}/build-release",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Release",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON"
+      }
+    },
+    {
+      "name": "macos-debug-all",
+      "displayName": "macOS Debug with Tests + Examples",
+      "description": "Build for macOS Debug with tests and examples",
+      "inherits": "macos-base",
+      "binaryDir": "${sourceDir}/build-debug",
+      "cacheVariables": {
+        "CMAKE_BUILD_TYPE": "Debug",
+        "LIVEKIT_BUILD_EXAMPLES": "ON",
+        "LIVEKIT_BUILD_TESTS": "ON"
+      }
+    },
     {
       "name": "macos-release-tests",
       "displayName": "macOS Release with Tests",
@@ -333,6 +407,32 @@
       "name": "macos-debug-examples",
       "configurePreset": "macos-debug-examples"
     },
+    {
+      "name": "windows-release-all",
+      "configurePreset": "windows-release-all",
+      "configuration": "Release"
+    },
+    {
+      "name": "windows-debug-all",
+      "configurePreset": "windows-debug-all",
+      "configuration": "Debug"
+    },
+    {
+      "name": "linux-release-all",
+      "configurePreset": "linux-release-all"
+    },
+    {
+      "name": "linux-debug-all",
+      "configurePreset": "linux-debug-all"
+    },
+    {
+      "name": "macos-release-all",
+      "configurePreset": "macos-release-all"
+    },
+    {
+      "name": "macos-debug-all",
+      "configurePreset": "macos-debug-all"
+    },
     {
       "name": "windows-release-tests",
       "configurePreset": "windows-release-tests",

README.md

@@ -480,15 +480,48 @@ In some cases, you may need to perform a full clean that deletes all build artif
 ./build.sh clean-all
 ```
 
-### Clang format
-CPP SDK is using clang C++ format
+## Quality Checks
+
+This SDK leverages various tools and checks to ensure the highest quality of the code.
+
+### Clang Tools
+
+- `clang-tidy`: static analysis checks to catch common C++ pitfalls. See [.clang-tidy](./.clang-tidy) for the list of current checks (enforced in CI on PR)
+- `clang-format`: (coming soon) code formatting and style consistency
+
+> **Note**: clang-tidy is not currently supported on Windows for this project because the Visual Studio CMake generator does not produce the compile_commands.json database that clang-tidy requires.
+
+To run locally, first install the following:
+
+**macOS:**
+
 ```bash
-brew install clang-format
+# macOS
+brew install llvm
 ```
 
+This installs `clang-format`, `clang-tidy`, and `run-clang-tidy`. Homebrew may ask you to add `/opt/homebrew/opt/llvm/bin` to your `PATH`.
+
+**Linux:**
+
+```bash
+# Ubuntu / Debian:
+sudo apt-get install clang-format clang-tidy clang-tools
+```
+
+To run:
+
+1. Run a build script command, such that `compile_command.json` is present at the root of the repository
+2. Run:
+
+```bash
+clang-tidy -p . src/*.cpp
+```
+
+### Memory Checks
 
-#### Memory Checks
 Run valgrind on various examples or tests to check for memory leaks and other issues.
+
 ```bash
 valgrind --leak-check=full ./build-debug/bin/livekit_integration_tests
 valgrind --leak-check=full ./build-debug/bin/livekit_stress_tests

bridge/include/livekit_bridge/rpc_constants.h

@@ -20,7 +20,6 @@
 #pragma once
 
 #include <string>
-
 #ifdef _WIN32
 #ifdef livekit_bridge_EXPORTS
 #define LIVEKIT_BRIDGE_API __declspec(dllexport)
@@ -31,15 +30,12 @@
 #define LIVEKIT_BRIDGE_API
 #endif
 
-namespace livekit_bridge {
-namespace rpc {
-
 /// Built-in RPC method name used by remote track control.
 /// Allows remote participants to mute or unmute tracks
 /// published by this bridge. Must be called after connect().
 /// Audio/video tracks support mute and unmute. Data tracks
 /// only support mute and unmute.
-namespace track_control {
+namespace livekit_bridge::rpc::track_control {
 
 enum class Action { kActionMute, kActionUnmute };
 
@@ -60,6 +56,4 @@ LIVEKIT_BRIDGE_API extern const char *const kResponseOk;
 LIVEKIT_BRIDGE_API std::string formatPayload(const char *action,
                                              const std::string &track_name);
 
-} // namespace track_control
-} // namespace rpc
-} // namespace livekit_bridge
+} // namespace livekit_bridge::rpc::track_control

bridge/src/rpc_constants.cpp

@@ -16,9 +16,7 @@
 
 #include "livekit_bridge/rpc_constants.h"
 
-namespace livekit_bridge {
-namespace rpc {
-namespace track_control {
+namespace livekit_bridge::rpc::track_control {
 
 const char *const kMethod = "lk.bridge.track-control";
 const char *const kActionMute = "mute";
@@ -36,6 +34,4 @@ std::string formatPayload(const char *action, const std::string &track_name) {
   return payload;
 }
 
-} // namespace track_control
-} // namespace rpc
-} // namespace livekit_bridge
+} // namespace livekit_bridge::rpc::track_control