refactor: deslop coverage_boost_test.go + upgrade CI (#4)

* [iroha] Mocked execution response

* [iroha] fix: replace inline \n with proper line splits

* [iroha] chore: drop bubbles/bubbletea, promote deps to direct

* [iroha] Mocked execution response

* [iroha] feat: sync hw cursor to sw cursor for IME alignment

* [iroha] Mocked execution response

* [iroha] feat: pass cursor position from model to renderer

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] fix: pass old state to notifyStateChange correctly

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* [iroha] fix: unify pet frame methods and add new states

* [iroha] Mocked execution response

* [iroha] Mocked execution response

* feat: comprehensive test coverage + Claude Code deep research alignment

Test coverage improvements across all packages (agent, llm, tui, config):
- Agent: 90+ new test files covering runner, hooks, MCP, memory, compaction,
  subagent, watchdog, IPC, bridge, LSP, skills, team, web tools, permissions
- LLM: adapter tests, OpenAI/Anthropic continuation, retry, coverage boost
- TUI: component tests (chat, confirm, input, status, slash menu), view render
  tests, history tests, app table tests, raw input tests
- Config: config wizard tests, full config roundtrip tests

Feature additions aligned with Claude Code architecture research:
- Auto-continuation system (adapter-level max_tokens escalation, continuation prompts)
- Compaction 4-layer pipeline (toolResultBudget → snipCompact → microCompact → autoCompact)
- Subagent recursive spawn prevention + 30-iteration limit
- Hook recursive guard + event expansion (12 → 20 events)
- YoloClassifier LLM auto-approval with 3-layer defense against prompt injection
- MCPTransport interface extraction (StdioTransport + HTTPTransport over HTTP+SSE)
- OAuth 2.0 + PKCE flow (manual-copy primary, env var bypass, file-based token storage)
- Memory LLM side-query selection with per-file budget (4096 bytes)
- Tool pool change-signal rebuild (/mcp reload, plugins.json mtime detection)
- ADK state placeholder sanitization in prompt builder
- Runner cleanup: remove unused WithStateDelta, nil guards on hooks

Anti-slop cleanup: removed redundant ListTools RPC, fixed mtime to use time.Time,
cleaned test data leak in AGENTS.md.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* test: add 67 tests for schedule, worktree, memory, file_search, pool, skills, shell handlers

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* refactor: deslop coverage_boost_test.go — extract SSE helpers, delete stale coverage files

Extract 6 test helpers (sseServer, openAISSEServer, captureBodyServer,
capturePathServer, captureBodySSEServer, captureBodyOpenAISSE) to replace
25 inline httptest.NewServer boilerplate blocks. Remove AI section
dividers, empty test, and consolidate ioReadAll. Add *.out and
coverage.* to .gitignore. Delete 4 stale coverage output files.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* ci: upgrade CI pipeline with vet, coverage, security scan

- Add parallel build/vet/lint/test/coverage/vuln jobs
- Add govulncheck for vulnerability scanning
- Add codecov integration for coverage reporting
- Add cache: true to all Go setup steps
- Add pre-release test gate in release workflow

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat: add community health files and supply chain security

- Add CODE_OF_CONDUCT.md (bilingual, based on Contributor Covenant)
- Add CODEOWNERS for code review ownership routing
- Add dependabot.yml for weekly Go module + GitHub Actions updates
- Add issue template config.yml with discussion link
- Add dependency-review.yml workflow for PR supply chain checks

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* refactor: linter deslop cleanup - final pass

Apply remaining golangci-lint fixes and revert renderer.go cover
incompatibility. New baseline: 89.5% average coverage.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix: upgrade golang.org/x/net to v0.55.0 (6 CVEs)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Akiwayne <akiwayne@Akiwaynes-MacBook-Air-2.local>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: 3 people