fix: repair Goal execution and validation failures #1016
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================================ | |
| # 🔍 CI · Typecheck | |
| # ---------------------------------------------------------------------------- | |
| # Purpose : TypeScript type checking across all packages (bun typecheck), | |
| # oxlint warning ratchet, and the DAG core behavior/coverage gate | |
| # Trigger : Push to `main`/`dev`, PRs targeting `main`/`dev`, manual dispatch | |
| # Jobs : typecheck — single Linux runner, `bun run lint` + `bun typecheck` | |
| # Gate : Required status check on BOTH `dev` and `main` rulesets. The DAG | |
| # core gate protects state-machine and persistence changes before | |
| # they merge to dev; the full suite still gates dev → main. | |
| # Notes : No push trigger on feat/* or fix/* (frequent changes); PRs cover | |
| # them. | |
| # ============================================================================ | |
| name: 🔍 CI · Typecheck | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - dev | |
| pull_request: | |
| # ready_for_review matters: the SpecGit Acceptance verdict requires | |
| # required-check runs that started at/after the draft→ready transition | |
| # (#315 anchor). Without this type a ready transition finds only stale | |
| # pre-ready runs and the gate times out waiting for fresh ones. | |
| types: [opened, synchronize, reopened, ready_for_review] | |
| branches: | |
| - main | |
| - dev | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| typecheck: | |
| name: Typecheck | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 | |
| - name: Setup Bun | |
| uses: ./.github/actions/setup-bun | |
| - name: Run lint | |
| run: bun run lint | |
| - name: Run typecheck | |
| run: bun typecheck | |
| - name: Run DAG core behavior and coverage gate | |
| working-directory: packages/opencode | |
| run: bun run test:dag-core | |
| timeout-minutes: 10 | |
| # #498 B1: archive integrity boundary of the `oc` installer — SHA256SUMS | |
| # must be verified before extraction and fail closed on mismatch. | |
| # Zero network (stub curl); portable across bash hosts. | |
| - name: Run oc install boundary tests | |
| run: bash script/oc-install-boundary.test.sh | |
| timeout-minutes: 5 |