Mermaid PR architecture-diff action (level-1 default, nested opt-in)

.github/workflows/release-major-tag.yml

@@ -0,0 +1,41 @@
+name: Move major version tag
+
+# Marketplace actions are pinned by consumers as `@v1`, a *moving* major tag that
+# should always point at the newest v1.x.x release. This re-points it on every
+# published (non-pre) release, e.g. publishing v1.4.2 moves `v1` -> v1.4.2.
+#
+# First release is still manual (cut a `vX.Y.Z` release once); after that `vX`
+# is maintained here automatically.
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  major-tag:
+    if: github.event.release.prerelease == false
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.release.tag_name }}
+
+      - name: Re-point major tag at ${{ github.event.release.tag_name }}
+        env:
+          TAG: ${{ github.event.release.tag_name }}
+        run: |
+          set -euo pipefail
+          ver="${TAG#v}"
+          if ! printf '%s' "$ver" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+$'; then
+            echo "::notice::Tag '$TAG' is not a clean vMAJOR.MINOR.PATCH release (prerelease/suffix); skipping major-tag move."
+            exit 0
+          fi
+          major="v${ver%%.*}"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag -fa "$major" -m "Update ${major} to ${TAG}"
+          git push origin "refs/tags/${major}" --force
+          echo "::notice::${major} now points at ${TAG}"

.github/workflows/test.yml

@@ -0,0 +1,40 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  unittest:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+      - name: Run unit tests (stdlib only)
+        run: python -m unittest discover -s tests -v
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+      - name: Install shellcheck
+        run: sudo apt-get update && sudo apt-get install -y shellcheck
+      - name: Install actionlint
+        run: go install github.com/rhysd/actionlint/cmd/actionlint@v1.7.7
+      - name: Run actionlint
+        run: actionlint
+      - name: Run shellcheck
+        run: shellcheck scripts/run_local.sh

.gitignore

@@ -2,6 +2,24 @@
 test_response.json
 test_codeboarding/
 
+# Local test harness output (scripts/run_local.sh)
+.cb-local/
+
+# Dependencies
+node_modules/
+
+# Python generated files
+__pycache__/
+*.py[cod]
+
+# CodeBoarding generated cache/log artifacts
+.codeboarding/static_analysis.pkl
+.codeboarding/static_analysis.sha
+.codeboarding/logs/
+.codeboarding/health/*
+!.codeboarding/health/
+!.codeboarding/health/health_report.json
+
 # Environment files
 .env