Merge pull request #4 from CipherOcto/next [skip release]

fix: ci changes plus governance docs [skip release]

Author: mmacedoeu

.github/dependabot.yml

@@ -0,0 +1,75 @@
+# Dependabot Configuration
+# Automated dependency updates
+
+version: 2
+updates:
+  # Rust dependencies
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "mmacedoeu"
+    labels:
+      - "dependencies"
+      - "rust"
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"
+    groups:
+      # Group all dev dependencies together
+      dev-dependencies:
+        patterns:
+          - "dev-dependencies"
+        exclude-patterns:
+          - "*"
+      # Group prod dependencies together
+      dependencies:
+        patterns:
+          - "dependencies"
+        exclude-patterns:
+          - "*"
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "ci"
+      - "dependencies"
+    commit-message:
+      prefix: "chore(ci)"
+      include: "scope"
+
+  # npm dependencies (if any)
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "javascript"
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"
+
+  # Python dependencies (if any)
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"

.github/labeler.yml

@@ -0,0 +1,77 @@
+# PR Auto-Label Configuration
+# Labels are applied based on changed files
+
+# Agent-related changes
+agent:
+  - crates/octo-ai/**
+  - crates/octo-runtime/**
+  - crates/agents/**
+
+# Protocol/network layer
+protocol:
+  - crates/octo-network/**
+  - crates/octo-p2p/**
+  - crates/blockchain/**
+
+# Runtime/execution
+runtime:
+  - crates/octo-runtime/**
+  - crates/octo-sandbox/**
+  - crates/executor/**
+
+# Core infrastructure
+core:
+  - crates/octo-core/**
+  - crates/octo-registry/**
+  - crates/octo-identity/**
+
+# CLI tools
+cli:
+  - crates/octo-cli/**
+  - crates/repl/**
+
+# Documentation
+docs:
+  - docs/**
+  - **/*.md
+  - .github/**/*.md
+
+# CI/CD
+ci:
+  - .github/workflows/**
+  - .github/actions/**
+
+# Smart contracts
+contracts:
+  - contracts/**
+
+# Developer tooling
+tooling:
+  - scripts/**
+  - tools/**
+  - dev/**
+
+# AI/ML
+ai:
+  - crates/ai/**
+  - crates/inference/**
+  - crates/ml/**
+
+# Security
+security:
+  - crates/crypto/**
+  - crates/security/**
+
+# Testing
+testing:
+  - tests/**
+  - **/*_test.rs
+  - **/tests/**
+
+# Dependencies
+dependencies:
+  - Cargo.toml
+  - Cargo.lock
+  - package.json
+  - requirements.txt
+  - **/Cargo.toml

.github/workflows/ci.yml

@@ -8,6 +8,7 @@ on:
     branches: [next, feat/**, agent/**, research/**, hotfix/**]
   pull_request:
     branches: [main, next]
+  merge_group:
 
 jobs:
   build-test:

.github/workflows/coverage.yml

@@ -0,0 +1,45 @@
+# Code Coverage
+# Track test coverage over time
+
+name: Coverage
+
+on:
+  push:
+    branches: [main, next]
+  pull_request:
+
+jobs:
+  coverage:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: llvm-tools-preview
+
+      - uses: taiki-e/install-action@cargo-llvm-cov
+
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Generate coverage
+        run: cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info
+
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@v4
+        continue-on-error: true
+        with:
+          files: ./lcov.info
+          fail_ci_if_error: false
+          token: ${{ secrets.CODECOV_TOKEN }}
+          verbose: true
+
+      - name: Generate coverage summary
+        run: |
+          cargo llvm-cov --all-features --workspace --summary
+
+      - name: Check coverage threshold
+        run: |
+          COVERAGE=$(cargo llvm-cov --all-features --workspace --summary --output-format=json | jq '.regions.covered')
+          echo "Coverage: ${COVERAGE}%"

.github/workflows/labels.yml

@@ -0,0 +1,51 @@
+# Auto-Label Pull Requests
+# Classify PRs automatically based on changed files and size
+
+name: Auto-Label PRs
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  # Label by file type
+  type-label:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - uses: actions/labeler@v5
+        with:
+          configuration-path: .github/labeler.yml
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          sync-labels: true
+
+  # Label by size (lines changed)
+  size-label:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: coverwalletcode/size-label-action@v3.0.0
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          xs_max: '10'
+          s_max: '50'
+          m_max: '200'
+          l_max: '500'
+          xl_max: '1000'
+          fail_if_xl: 'false'
+          message_if_xl: 'This PR is XXL (very large)! Please consider splitting into smaller PRs.'
+          sizes: |
+            label:XS, max_lines:10
+            label:S, max_lines:50
+            label:M, max_lines:200
+            label:L, max_lines:500
+            label:XL, max_lines:1000
+            label:XXL

.github/workflows/lint.yml

@@ -8,6 +8,7 @@ on:
     branches: [main, next]
   push:
     branches: [next, feat/**, agent/**, research/**, hotfix/**]
+  merge_group:
 
 jobs:
   lint:

.github/workflows/rust.yml

@@ -5,6 +5,7 @@ on:
     branches: [next, feat/**, agent/**, research/**, hotfix/**]
   pull_request:
     branches: [main, next]
+  merge_group:
 
 env:
   CARGO_TERM_COLOR: always
@@ -40,7 +41,7 @@ jobs:
   msrv:
     name: Check MSRV
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
+    if: github.event_name == 'pull_request' || github.event_name == 'merge_group'
 
     steps:
       - uses: actions/checkout@v4

.github/workflows/security.yml

@@ -8,6 +8,7 @@ on:
     branches: [next, feat/**, agent/**, research/**, hotfix/**]
   pull_request:
     branches: [main, next]
+  merge_group:
   schedule:
     - cron: "0 3 * * 1"