Continuous integration
The repository CI runs on pull requests and pushes to main. It is fail-closed and does not deploy
or merge.
Checks
Section titled “Checks”The workflow installs dependencies with npm ci, runs backend and UI typechecks, runs the Vitest
suite, builds the UI and scans for secret patterns. A non-zero check blocks the workflow.
The Goal validation runner uses the same categories for the managed project: diff check, secret scan, project-layout-aware typechecks, tests and UI build where applicable. Failed output is stored as bounded artifacts and summarized into the next correction context.
Permissions and reproducibility
Section titled “Permissions and reproducibility”The workflow grants contents: read, uses a concurrency group to cancel superseded runs and caches
dependencies from package-lock.json. Changes to the runtime should include focused tests and the
full validation commands relevant to the change.