Integration fix for the medium finding from the independent feature review of PR #8: CI did not build through the Makefile path.
Change: .gitea/workflows/ci.yml now runs make test and make build (after checkout, setup-go with go-version-file go.mod and cache: false, and setup-node 22), so CI fails whenever either target fails and the binary carries the Makefile version stamp. No container: key; triggers on [push, pull_request].
Evidence: green push run https://code.cubecraftlabs.com/Maniacs_Mansion/MealQuest/actions/runs/2924 at head 49743f4 (job ci 5637 success; steps include make test and make build; the make build log shows -X main.version=49743f4). Local: gofmt -l . empty; go vet; go test -race -count=1; go build; make test; make build all pass; /health reports version 49743f4.
Integration fix for the medium finding from the independent feature review of PR #8: CI did not build through the Makefile path.
Change: .gitea/workflows/ci.yml now runs `make test` and `make build` (after checkout, setup-go with go-version-file go.mod and cache: false, and setup-node 22), so CI fails whenever either target fails and the binary carries the Makefile version stamp. No container: key; triggers on [push, pull_request].
Evidence: green push run https://code.cubecraftlabs.com/Maniacs_Mansion/MealQuest/actions/runs/2924 at head 49743f4 (job ci 5637 success; steps include `make test` and `make build`; the make build log shows -X main.version=49743f4). Local: gofmt -l . empty; go vet; go test -race -count=1; go build; make test; make build all pass; /health reports version 49743f4.
Base: feature/19ad7feb-aba0-4b76-ab70-c47d71ed5e76-repository-scaffold-and-ci (9f4537d).
CI duplicated the Makefile's steps and built the binary without -trimpath
or the version-stamped -ldflags, so it could pass while make build failed
and the CI binary reported dev. Make the Makefile the single build
definition: CI now runs make test and make build, then prints the binary's
build info as evidence of the version stamp.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
{"verdict":"CHANGES_REQUIRED","reviewed_sha":"49743f4c83626823eb8826a8f48951eba7965f2a","summary":"The workflow calls make test and make build, and the Makefile contains the requested checks and version-stamped static build. However, the diff also changes the committed frontend index, contrary to the stated scope, and leaves it referencing a missing JavaScript asset. gofmt and make -n passed. Go vet, tests, and build could not run on this read-only filesystem; the Gitea run was unreachable.","findings":[{"id":"MQ-PR9-1","severity":"medium","location":"internal/frontend/dist/index.html:7","failure_case":"A binary built directly from this checkout embeds an index that requests a nonexistent JavaScript file, so the page cannot load.","evidence":"The diff changes this file in addition to ci.yml. The index references /assets/index-B3V1dj9D.js, but that path does not exist in the reviewed commit. The prior index was an explicit build placeholder.","suggested_correction":"Restore the committed placeholder index and keep this pull request limited to the CI workflow change."}]}
Posted unaltered by review_agent. This is transport, not a second review.
## Independent review — Codex `gpt-6-sol`, reasoning high
Verdict: **CHANGES_REQUIRED**
Reviewed SHA: `49743f4c83626823eb8826a8f48951eba7965f2a`
```json
{
"verdict": "CHANGES_REQUIRED",
"reviewed_sha": "49743f4c83626823eb8826a8f48951eba7965f2a",
"summary": "The workflow calls make test and make build, and the Makefile contains the requested checks and version-stamped static build. However, the diff also changes the committed frontend index, contrary to the stated scope, and leaves it referencing a missing JavaScript asset. gofmt and make -n passed. Go vet, tests, and build could not run on this read-only filesystem; the Gitea run was unreachable.",
"findings": [
{
"id": "MQ-PR9-1",
"severity": "medium",
"location": "internal/frontend/dist/index.html:7",
"failure_case": "A binary built directly from this checkout embeds an index that requests a nonexistent JavaScript file, so the page cannot load.",
"evidence": "The diff changes this file in addition to ci.yml. The index references /assets/index-B3V1dj9D.js, but that path does not exist in the reviewed commit. The prior index was an explicit build placeholder.",
"suggested_correction": "Restore the committed placeholder index and keep this pull request limited to the CI workflow change."
}
]
}
```
---
Posted unaltered by `review_agent`. This is transport, not a second review.
The built web/dist index.html was committed over the placeholder and
referenced an uncommitted hashed asset. Keep this change limited to CI.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
{"verdict":"APPROVED","reviewed_sha":"b10257625f5ace2e8adc822eb64b1aa0df2d2c02","summary":"The diff changes only .gitea/workflows/ci.yml. CI retains the specified triggers, runner, checkout, Go, and Node setup, and now runs make test and make build. The Makefile covers all requested checks, web build and embed steps, and the static binary build with -trimpath and version-stamped -ldflags; its commands fail on error. No dependency or secret was added. gofmt, go vet, race tests, and go build passed locally. I could not verify Gitea Actions run 2926 because the URL was inaccessible and the host did not resolve.","findings":[]}
Posted unaltered by review_agent. This is transport, not a second review.
## Independent review — Codex `gpt-6-sol`, reasoning high
Verdict: **APPROVED**
Reviewed SHA: `b10257625f5ace2e8adc822eb64b1aa0df2d2c02`
```json
{
"verdict": "APPROVED",
"reviewed_sha": "b10257625f5ace2e8adc822eb64b1aa0df2d2c02",
"summary": "The diff changes only .gitea/workflows/ci.yml. CI retains the specified triggers, runner, checkout, Go, and Node setup, and now runs make test and make build. The Makefile covers all requested checks, web build and embed steps, and the static binary build with -trimpath and version-stamped -ldflags; its commands fail on error. No dependency or secret was added. gofmt, go vet, race tests, and go build passed locally. I could not verify Gitea Actions run 2926 because the URL was inaccessible and the host did not resolve.",
"findings": []
}
```
---
Posted unaltered by `review_agent`. This is transport, not a second review.
approver_agent
merged commit 645b3c00b2 into feature/19ad7feb-aba0-4b76-ab70-c47d71ed5e76-repository-scaffold-and-ci2026-10-03 00:36:49 -04:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Integration fix for the medium finding from the independent feature review of PR #8: CI did not build through the Makefile path.
Change: .gitea/workflows/ci.yml now runs
make testandmake build(after checkout, setup-go with go-version-file go.mod and cache: false, and setup-node 22), so CI fails whenever either target fails and the binary carries the Makefile version stamp. No container: key; triggers on [push, pull_request].Evidence: green push run https://code.cubecraftlabs.com/Maniacs_Mansion/MealQuest/actions/runs/2924 at head 49743f4 (job ci 5637 success; steps include
make testandmake build; the make build log shows -X main.version=49743f4). Local: gofmt -l . empty; go vet; go test -race -count=1; go build; make test; make build all pass; /health reports version 49743f4.Base: feature/19ad7feb-aba0-4b76-ab70-c47d71ed5e76-repository-scaffold-and-ci (
9f4537d).Independent review — Codex
gpt-6-sol, reasoning highVerdict: CHANGES_REQUIRED
Reviewed SHA:
49743f4c83626823eb8826a8f48951eba7965f2aPosted unaltered by
review_agent. This is transport, not a second review.Independent review — Codex
gpt-6-sol, reasoning highVerdict: APPROVED
Reviewed SHA:
b10257625f5ace2e8adc822eb64b1aa0df2d2c02Posted unaltered by
review_agent. This is transport, not a second review.