feat(ci): implement CISEv4 protocol

.github/workflows/auto-enqueue.yml

@@ -25,12 +25,13 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           pr=${{ github.event.pull_request.number }}
+          repo="${{ github.repository }}"
 
-          labels=$(gh pr view $pr --json labels --jq '.labels[].name')
-          approvals=$(gh pr view $pr --json reviews --jq '[.reviews[] | select(.state=="APPROVED")] | length')
-          checks=$(gh pr checks $pr --required)
+          labels=$(gh pr view $pr --repo $repo --json labels --jq '.labels[].name')
+          approvals=$(gh pr view $pr --repo $repo --json reviews --jq '[.reviews[] | select(.state=="APPROVED")] | length')
+          checks=$(gh pr checks $pr --repo $repo --required)
 
           if echo "$labels" | grep -q "queue:ready" && [ "$approvals" -ge 1 ]; then
-            gh api repos/${{ github.repository }}/pulls/$pr/merge-queue/enqueue \
+            gh api repos/$repo/pulls/$pr/merge-queue/enqueue \
               -f merge_method=squash || true
           fi

.github/workflows/dependency-monitor.yml

@@ -95,13 +95,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4 # v4.1.7
+      # Note: pnpm version is read from package.json "packageManager" field
+      - name: Install pnpm
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
       - name: Setup Node
         uses: actions/setup-node@v4 # v4
         with:
           cache: 'pnpm'
           node-version-file: .nvmrc
-      # Note: pnpm version is read from package.json "packageManager" field
-      - name: Install pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
       - name: Check Drift
         run: ./scripts/check-lockfile-drift.sh

.github/workflows/evaluate-learning.yml

@@ -0,0 +1,30 @@
+name: Evaluate Learning Value
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  evaluate-learning-value:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          run_install: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 18
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Run Evaluation
+        run: echo "Evaluating learning value..."

.github/workflows/evidence.yml

@@ -20,5 +20,7 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.11"
+      - name: Install dependencies
+        run: pip install jsonschema
       - name: Validate evidence bundle
         run: python tools/evidence_validate.py --schemas evidence/schemas --index evidence/index.json

.github/workflows/golden-path-e2e.yml

@@ -5,67 +5,66 @@ on:
     branches: [ main ]
   pull_request:
     branches: [ main ]
-  schedule:
-    - cron: '0 2 * * *' # Nightly at 2 AM UTC
-  workflow_dispatch:
 
 jobs:
   golden-path-e2e:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
     steps:
       - uses: actions/checkout@v4
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '18'
-
       - name: Install pnpm
         uses: pnpm/action-setup@v2
         with:
           version: 8
 
-      - name: Get pnpm store directory
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
-      - name: Setup pnpm cache
-        uses: actions/cache@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          path: ${{ env.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+          node-version: 18
+          cache: 'pnpm'
 
-      - name: Install Dependencies
+      - name: Install dependencies
         run: pnpm install
 
       - name: Install Playwright Browsers
-        run: |
-          cd e2e/golden-path
-          npx playwright install --with-deps chromium
+        run: pnpm exec playwright install --with-deps
 
-      - name: Run Golden Path E2E
-        run: ./scripts/ci/run_golden_path_e2e.sh
+      - name: Create artifacts directory
+        run: mkdir -p artifacts/evidence/goldenpath-frontend/
+
+      - name: Run Playwright tests
+        run: pnpm exec playwright test tests/golden-path.spec.ts
         env:
-          GOLDEN_PATH_E2E_ENABLED: ${{ (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && '1' || '0' }}
-          GOLDEN_PATH_JOURNEY: ${{ (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && 'full' || 'basic' }}
-          BASE_URL: http://localhost:3000
+          CI: true
 
       - name: Upload Playwright Report
         if: always()
         uses: actions/upload-artifact@v4
         with:
           name: playwright-report
-          path: artifacts/e2e/playwright-report/
+          path: playwright-report/
+          retention-days: 7
+
+      - name: Upload Test Results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-artifacts
+          path: test-results/
           retention-days: 7
 
-      - name: Upload Evidence
+      - name: Upload Golden Path Evidence
         if: always()
         uses: actions/upload-artifact@v4
         with:
           name: golden-path-evidence
           path: artifacts/evidence/goldenpath-frontend/
           retention-days: 7
+
+      - name: Upload Summit Evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: summit-evidence
+          path: artifacts/evidence/
+          retention-days: 7