test(github_intent): cover classification normalization edge cases

.github/workflows/release.yml

@@ -0,0 +1,118 @@
+name: 🚀 Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Release version (e.g. v0.5, v1.0.0)"
+        required: true
+        type: string
+      update_stable:
+        description: "Update the 'stable' tag to point to this release"
+        required: false
+        type: boolean
+        default: true
+
+permissions:
+  contents: write
+  packages: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    name: release
+
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: 🔍 Validate version format
+        run: |
+          if ! echo "${{ inputs.version }}" | grep -qE '^v[0-9]+(\.[0-9]+){1,2}$'; then
+            echo "::error::Version must match vMAJOR.MINOR or vMAJOR.MINOR.PATCH (e.g. v0.5, v1.0.0)"
+            exit 1
+          fi
+
+      - name: 🔍 Check tag does not already exist
+        run: |
+          if git rev-parse "${{ inputs.version }}" >/dev/null 2>&1; then
+            echo "::error::Tag ${{ inputs.version }} already exists"
+            exit 1
+          fi
+
+      - name: 📝 Check for commits since last tag
+        id: changelog
+        run: |
+          LAST_TAG=$(git tag --sort=-v:refname --list 'v*' | head -1)
+          if [ -n "$LAST_TAG" ]; then
+            RANGE="${LAST_TAG}..HEAD"
+            COMMIT_COUNT=$(git rev-list --count "$RANGE")
+            if [ "$COMMIT_COUNT" -eq 0 ]; then
+              echo "::error::No commits since $LAST_TAG — nothing to release"
+              exit 1
+            fi
+            NOTES=$(git log "$RANGE" --pretty=format:"- %s (%h)")
+          else
+            NOTES=$(git log --pretty=format:"- %s (%h)")
+          fi
+
+          # Write notes to file (multi-line safe)
+          echo "$NOTES" > /tmp/release-notes.md
+          echo "last_tag=${LAST_TAG:-none}" >> "$GITHUB_OUTPUT"
+
+      - name: 🏷️ Create and push tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -a "${{ inputs.version }}" -m "Release ${{ inputs.version }}"
+          git push origin "${{ inputs.version }}"
+
+      - name: 🏷️ Update stable tag
+        if: inputs.update_stable
+        run: |
+          echo "Updating stable tag → ${{ inputs.version }}"
+          git tag -f stable "${{ inputs.version }}"
+          git push origin stable --force
+
+      - name: 🚀 Create GitHub release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "${{ inputs.version }}" \
+            --title "Kōan ${{ inputs.version }}" \
+            --notes-file /tmp/release-notes.md \
+            --latest
+
+      - name: 🐳 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: 🔑 Log in to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: 🏷️ Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}},value=${{ inputs.version }}
+            type=semver,pattern={{major}}.{{minor}},value=${{ inputs.version }}
+            type=raw,value=latest
+            type=raw,value=stable,enable=${{ inputs.update_stable }}
+
+      - name: 🐳 Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/request-review.yml

@@ -0,0 +1,43 @@
+name: 🔍 Request Review
+on:
+  pull_request_target:
+    types: [opened]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  assign:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v9
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const bot = 'Koan-Bot';
+            const fallbackBot = 'Father-Koan';
+            const author = context.payload.pull_request.user.login;
+            let commented = false;
+
+            if (author !== bot) {
+              try {
+                await github.rest.pulls.requestReviewers({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  pull_number: context.issue.number,
+                  reviewers: [bot]
+                });
+                commented = true;
+              } catch (e) {}
+            }
+
+            if (!commented) {
+              try {
+                await github.rest.pulls.requestReviewers({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  pull_number: context.issue.number,
+                  reviewers: [fallbackBot]
+                });
+              } catch (e) {}
+            }

.github/workflows/tests.yml

@@ -1,4 +1,4 @@
-name: Tests
+name: 🧪 Tests
 
 on:
   push:
@@ -23,6 +23,7 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
+        python-version: ${{ github.event_name == 'pull_request' && fromJSON('["3.14"]') || fromJSON('["3.11", "3.14"]') }}
         group:
           - name: fast
             marker: "not slow"
@@ -36,25 +37,25 @@ jobs:
             marker: "slow"
             split_group: 3
 
-    name: test (${{ matrix.group.name }})
+    name: test (py${{ matrix.python-version }}, ${{ matrix.group.name }})
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - name: Set up Python 3.14
+      - name: ⚙️ Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6
         with:
-          python-version: "3.14"
+          python-version: "${{ matrix.python-version }}"
           allow-prereleases: true
           cache: 'pip'
           cache-dependency-path: koan/requirements.txt
 
-      - name: Install dependencies
+      - name: 📦 Install dependencies
         run: |
           pip install -r koan/requirements.txt
-          pip install pytest pytest-split
+          pip install pytest pytest-split pytest-cov pytest-xdist
 
-      - name: Run tests (${{ matrix.group.name }})
+      - name: ▶️ Run tests (${{ matrix.group.name }})
         if: ${{ !inputs.group || matrix.group.name == inputs.group }}
         working-directory: koan
         env:
@@ -64,7 +65,86 @@ jobs:
           KOAN_TELEGRAM_CHAT_ID: "123456789"
         run: |
           if [ -n "${{ matrix.group.split_group }}" ]; then
-            pytest tests/ -m "${{ matrix.group.marker }}" --splits 3 --group ${{ matrix.group.split_group }} -v
+            pytest tests/ -m "${{ matrix.group.marker }}" --splits 3 --group ${{ matrix.group.split_group }} -v \
+              -n auto --dist loadfile \
+              --cov=app --cov-report=term-missing
           else
-            pytest tests/ -m "${{ matrix.group.marker }}" -v
+            pytest tests/ -m "${{ matrix.group.marker }}" -v \
+              -n auto --dist loadfile \
+              --cov=app --cov-report=term-missing
           fi
+
+      - name: ⬆️ Upload coverage data
+        if: ${{ !inputs.group || matrix.group.name == inputs.group }}
+        uses: actions/upload-artifact@v7
+        with:
+          name: coverage-py${{ matrix.python-version }}-${{ matrix.group.name }}
+          path: koan/.coverage
+          include-hidden-files: true
+
+  check-coverage:
+    needs: test
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    name: check-coverage
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: ⚙️ Set up Python 3.14
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+          allow-prereleases: true
+
+      - name: 📦 Install coverage
+        run: pip install coverage
+
+      - name: ⬇️ Download all coverage artifacts
+        uses: actions/download-artifact@v8
+        with:
+          pattern: coverage-py*
+          path: coverage-parts
+
+      - name: 🔍 Combine coverage and check baselines
+        working-directory: koan
+        env:
+          KOAN_ROOT: ${{ github.workspace }}/koan
+        run: |
+          # Collect all .coverage files and rename for combine
+          i=0
+          for f in ../coverage-parts/coverage-*/.coverage; do
+            cp "$f" ".coverage.$i"
+            i=$((i + 1))
+          done
+
+          coverage combine
+          TOTAL_COV=$(coverage report --format=total 2>/dev/null || coverage report | grep '^TOTAL' | awk '{print $NF}' | tr -d '%')
+          echo "Total coverage: ${TOTAL_COV}%"
+
+          # Read baselines
+          BASELINE_COV=$(cat ../coverage-baseline.txt | tr -d '[:space:]')
+          echo "Baseline coverage: ${BASELINE_COV}%"
+
+          # Allow 0.5% tolerance on coverage
+          python3 -c "
+          import sys
+          actual = float('${TOTAL_COV}')
+          baseline = float('${BASELINE_COV}')
+          tolerance = 0.5
+          if actual < baseline - tolerance:
+              print(f'FAIL: Coverage {actual}% is below baseline {baseline}% (tolerance {tolerance}%)')
+              sys.exit(1)
+          print(f'OK: Coverage {actual}% meets baseline {baseline}% (tolerance {tolerance}%)')
+          "
+
+      - name: ✅ Check test count baseline
+        run: |
+          BASELINE_COUNT=$(cat test-count-baseline.txt | tr -d '[:space:]')
+          echo "Test count baseline: ${BASELINE_COUNT}"
+
+          # Sum test counts from all matrix job logs
+          # The test count check is best-effort from the coverage report;
+          # the authoritative count comes from running all tests.
+          # For now, this is informational — the hard enforcement is on coverage.
+          echo "INFO: Test count baseline is ${BASELINE_COUNT}. Monitor via PR review."

.gitignore

@@ -10,6 +10,9 @@ __pycache__/
 .venv/
 venv/
 .coverage
+.coverage.*
+htmlcov/
+koan/htmlcov/
 
 # Runtime
 .koan-status
@@ -46,9 +49,15 @@ projects.docker.yaml
 
 # Process log files (root only, not koan/skills/core/logs/)
 /logs/
+
+# Runtime state files
+.branch-cleanup-tracker.json
 .aider*
 
 # Docker (generated by setup-docker.sh)
 docker-compose.override.yml
 .env.docker
 claude-auth/
+.spec/
+
+devcontainer-tmp/