fix: stabilize CI runner compatibility and governance docs

.github/workflows/ci.yml

@@ -13,7 +13,6 @@ concurrency:
 
 permissions:
   contents: read
-  pull-requests: read
 
 jobs:
   quality:
@@ -70,12 +69,3 @@ jobs:
             ${{ runner.os }}-bun-
       - run: bun install --frozen-lockfile
       - run: bun run pack:check
-
-  dependency-review:
-    if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/dependency-review-action@v4

docs/en/pull-request-guide.md

@@ -26,10 +26,10 @@ Use `.github/PULL_REQUEST_TEMPLATE.md` and include:
 
 ## Review Expectations
 
-- at least one approval is required on `main`
-- code owner review is required by branch protection
+- pull requests are required for `main`
 - required CI checks must pass before merge
-- stale approvals are dismissed when the PR changes
+- conversations must be resolved before merge
+- history must remain linear and force-pushes are blocked on `main`
 
 ## Merge Guidance
 

docs/tr/pr-kilavuzu.md

@@ -24,10 +24,10 @@ bun run ci:verify
 
 ## Inceleme Kurallari
 
-- `main` branch'i icin en az bir onay gerekir
-- code owner incelemesi branch protection ile istenir
+- `main` branch'i icin pull request zorunludur
 - zorunlu CI kontrolleri gecmeden merge yapilamaz
-- PR degistiginde eski onaylar gecersiz olur
+- tum konusmalar cozulmeden merge yapilamaz
+- `main` branch'inde lineer history korunur ve force-push engellenir
 
 ## Merge Rehberi
 

src/index.ts

@@ -39,6 +39,11 @@ function extractGoal(parts: Array<{ type?: string; text?: string }>): string {
 async function runPipeline(ctx: PipelineStageContext): Promise<void> {
   for (;;) {
     const pipeline = getPipelineBySession(ctx.db, ctx.sessionID)
+
+    if (pipeline) {
+      ctx.pipelineId = pipeline.id
+    }
+
     const state = pipeline?.state ?? "intake"
 
     if (state === "blocked" || state === "completed" || state === "failed") {

tests/helpers/test-utils.ts

@@ -1,19 +1,28 @@
 import { Database } from "bun:sqlite"
 import type { PluginInput } from "@opencode-ai/plugin"
 import type { ToolContext } from "@opencode-ai/plugin/tool"
+import { mkdtempSync } from "node:fs"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
 
 import { initializeDatabase } from "../../src/state/database.js"
 
+function createTempProjectDirectory(): string {
+  return mkdtempSync(join(tmpdir(), "opencode-ceo-test-"))
+}
+
 export function createTestDatabase(): Database {
   const db = new Database(":memory:")
   initializeDatabase(db)
   return db
 }
 
 export function createMockPluginInput(): Pick<PluginInput, "directory" | "worktree" | "client"> {
+	const directory = createTempProjectDirectory()
+
 	return {
-		directory: "/tmp/test-project",
-		worktree: "/tmp/test-project",
+		directory,
+		worktree: directory,
 		client: {
 			session: {
 				create: async () => ({ data: { id: "mock-session-id" } }),
@@ -34,22 +43,27 @@ export function createMockPluginInput(): Pick<PluginInput, "directory" | "worktr
 }
 
 export function createMockToolContext() {
+	const directory = createTempProjectDirectory()
+
 	return {
 		sessionID: "mock-session-id",
-		directory: "/tmp/test-project",
+		directory: directory,
 		ask: async (_request: unknown) => {},
 	}
 }
 
 export function createMockToolExecutionContext(
 	overrides: Partial<ToolContext> = {},
 ): ToolContext {
+	const directory = overrides.directory ?? createTempProjectDirectory()
+	const worktree = overrides.worktree ?? directory
+
 	return {
 		sessionID: "mock-session-id",
 		messageID: "mock-message-id",
 		agent: "ceo",
-		directory: "/tmp/test-project",
-		worktree: "/tmp/test-project",
+		directory,
+		worktree,
 		abort: new AbortController().signal,
 		metadata() {},
 		ask: async () => {},

tests/unit/github/git-utils.test.ts

@@ -1,7 +1,7 @@
 import { afterEach, describe, expect, test } from "bun:test"
 import { mkdtempSync, rmSync } from "node:fs"
 import { tmpdir } from "node:os"
-import { join } from "node:path"
+import { join, resolve } from "node:path"
 import { $ } from "bun"
 
 import {
@@ -13,7 +13,7 @@ import {
 } from "../../../src/github/git-utils.ts"
 
 const testDirectories: string[] = []
-const projectDirectory = "/home/ugur/Projects/opencode-ceo"
+const projectDirectory = resolve(import.meta.dir, "../../..")
 
 function createTempDirectory(prefix: string): string {
   const directory = mkdtempSync(join(tmpdir(), prefix))
@@ -54,8 +54,10 @@ describe("git-utils", () => {
   })
 
   test("getCurrentBranch returns a non-empty branch name", async () => {
-    expect(await getCurrentBranch(projectDirectory)).not.toHaveLength(0)
-  })
+		const directory = await createGitRepo("opencode-ceo-current-branch-")
+
+		expect(await getCurrentBranch(directory)).not.toHaveLength(0)
+	})
 
   test("hasRemote resolves to a boolean without throwing", async () => {
     const result = await hasRemote(projectDirectory)