@arii/boomtick-mcp 0.3.3

package/actions/impact-analysis/action.yml

@@ -0,0 +1,385 @@
+name: BoomTick Impact Analysis
+description: Comprehensive deployment impact analysis, diffing, AI reviews, and reporting
+inputs:
+  github_token:
+    description: 'GitHub token'
+    required: true
+  gemini_api_key:
+    description: 'Gemini API key'
+    required: true
+  pr_number:
+    description: 'PR number'
+    required: true
+  jules_api_key:
+    description: 'Jules API key required for authenticating with the Jules API to send impact analysis results. Ensure this key is stored securely and not exposed in logs.'
+    required: true
+runs:
+  using: composite
+  steps:
+    - uses: ./mcp/actions/setup
+
+    - run: pnpm install --frozen-lockfile --prefer-offline
+      shell: bash
+
+    - name: Deployment Impact Analysis
+      id: impact_analysis
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if ! node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:analysis']) process.exit(1)" 2>/dev/null; then
+          echo "⚠️ Skipping: impact:analysis script not found in package.json"
+          echo "has_impact=false" >> "$GITHUB_OUTPUT"
+          exit 0
+        fi
+
+        pnpm run impact:analysis
+
+        # Determine has_impact based on generated report
+        if [ -f artifacts/impact-analysis/impact.json ]; then
+          ROUTES_COUNT=$(jq '.routes | length' artifacts/impact-analysis/impact.json 2>/dev/null || echo "0")
+          FILES_COUNT=$(jq '.changedFiles | length' artifacts/impact-analysis/impact.json 2>/dev/null || echo "0")
+          if [ "$ROUTES_COUNT" -gt 0 ] || [ "$FILES_COUNT" -gt 0 ]; then
+             echo "has_impact=true" >> "$GITHUB_OUTPUT"
+          else
+             echo "has_impact=false" >> "$GITHUB_OUTPUT"
+          fi
+        else
+          echo "has_impact=true" >> "$GITHUB_OUTPUT"
+        fi
+      shell: bash
+
+    - name: Build Main
+      if: steps.impact_analysis.outputs.has_impact == 'true'
+      env:
+        DISABLE_MINIFY: true
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:build-main']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:build-main
+        else
+          echo "⚠️ Skipping: impact:build-main script not found"
+        fi
+      shell: bash
+
+    - name: Build PR
+      if: steps.impact_analysis.outputs.has_impact == 'true'
+      env:
+        VITE_BASE_PATH: /
+        DISABLE_MINIFY: true
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['build:review']) process.exit(1)" 2>/dev/null; then
+          pnpm run build:review
+        else
+          echo "⚠️ Skipping: build:review script not found"
+        fi
+      shell: bash
+
+    - name: Code review agent
+      if: always() && github.event_name == 'pull_request' && steps.impact_analysis.outputs.has_impact == 'true'
+      continue-on-error: true
+      env:
+        GEMINI_API_KEY: ${{ inputs.gemini_api_key }}
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:gemini-code-review']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:gemini-code-review
+        else
+          echo "⚠️ Skipping: impact:gemini-code-review script not found"
+        fi
+      shell: bash
+
+    - name: Code review github models agent
+      if: always() && github.event_name == 'pull_request' && steps.impact_analysis.outputs.has_impact == 'true'
+      continue-on-error: true
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:github-models-code-review']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:github-models-code-review
+        else
+          echo "⚠️ Skipping: impact:github-models-code-review script not found"
+        fi
+      shell: bash
+
+    - name: Visual Diff
+      if: steps.impact_analysis.outputs.has_impact == 'true'
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:visual-diff']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:visual-diff
+        else
+          echo "⚠️ Skipping: impact:visual-diff script not found"
+        fi
+      shell: bash
+
+    - name: DOM Diff
+      if: steps.impact_analysis.outputs.has_impact == 'true'
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:dom-diff']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:dom-diff
+        else
+          echo "⚠️ Skipping: impact:dom-diff script not found"
+        fi
+      shell: bash
+
+    - name: Check if visual changes exist
+      if: steps.impact_analysis.outputs.has_impact == 'true'
+      id: check_visuals
+      env:
+        VISUAL_DIFF_THRESHOLD: 1.5
+      run: |
+        SCRIPT_PATH=""
+        if [ -f "scripts/check-visual-changes.ts" ]; then
+          SCRIPT_PATH="scripts/check-visual-changes.ts"
+        elif [ -f "${{ github.action_path }}/../../../scripts/check-visual-changes.ts" ]; then
+          SCRIPT_PATH="${{ github.action_path }}/../../../scripts/check-visual-changes.ts"
+        fi
+
+        if [[ -n "$SCRIPT_PATH" && ( "$SCRIPT_PATH" == *"/scripts/check-visual-changes.ts" || "$SCRIPT_PATH" == "scripts/check-visual-changes.ts" ) ]]; then
+          RESOLVED_PATH=$(realpath "$SCRIPT_PATH")
+          if [[ -f "$RESOLVED_PATH" && "$RESOLVED_PATH" == *"/scripts/check-visual-changes.ts" ]]; then
+            echo "Executing check-visual-changes.ts at: $RESOLVED_PATH"
+            pnpm exec tsx "$RESOLVED_PATH" >> "$GITHUB_OUTPUT"
+          else
+            echo "❌ Error: Resolved path validation failed for $RESOLVED_PATH. Defaulting changed_routes=0"
+            echo "changed_routes=0" >> "$GITHUB_OUTPUT"
+          fi
+        else
+          echo "⚠️ Skipping: check-visual-changes.ts script not found or validation failed. Defaulting changed_routes=0"
+          echo "changed_routes=0" >> "$GITHUB_OUTPUT"
+        fi
+      shell: bash
+
+    - name: Visual review agent
+      if: always() && steps.check_visuals.outputs.changed_routes != '0' && steps.check_visuals.outputs.changed_routes != ''
+      env:
+        GEMINI_API_KEY: ${{ inputs.gemini_api_key }}
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:gemini-review']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:gemini-review
+        else
+          echo "⚠️ Skipping: impact:gemini-review script not found"
+        fi
+      shell: bash
+
+    - name: Visual review github models agent
+      if: always() && steps.check_visuals.outputs.changed_routes != '0' && steps.check_visuals.outputs.changed_routes != ''
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+      run: |
+        if node -e "const pkg = require('./package.json'); if (!pkg.scripts || !pkg.scripts['impact:github-models-review']) process.exit(1)" 2>/dev/null; then
+          pnpm run impact:github-models-review
+        else
+          echo "⚠️ Skipping: impact:github-models-review script not found"
+        fi
+      shell: bash
+
+    - name: Report Summary
+      if: always()
+      run: |
+        if [ -f artifacts/deployment-review.md ]; then
+          cat artifacts/deployment-review.md >> "$GITHUB_STEP_SUMMARY"
+          {
+            echo "IMPACT_BODY<<EOF"
+            cat artifacts/deployment-review.md
+            echo "EOF"
+          } >> "$GITHUB_ENV"
+        elif [ -f artifacts/impact-analysis/impact.md ]; then
+          cat artifacts/impact-analysis/impact.md >> "$GITHUB_STEP_SUMMARY"
+          {
+            echo "IMPACT_BODY<<EOF"
+            cat artifacts/impact-analysis/impact.md
+            echo "EOF"
+          } >> "$GITHUB_ENV"
+        else
+          {
+            echo "## Deployment Impact Analysis"
+            echo "No impact report found."
+          } >> "$GITHUB_STEP_SUMMARY"
+          {
+            echo "IMPACT_BODY<<EOF"
+            echo "No impact report found."
+            echo "EOF"
+          } >> "$GITHUB_ENV"
+        fi
+
+        if [ -f artifacts/gemini-review.md ]; then
+          { echo ""; cat artifacts/gemini-review.md; } >> "$GITHUB_STEP_SUMMARY"
+        fi
+        if [ -f artifacts/github-models-review.md ]; then
+          { echo ""; cat artifacts/github-models-review.md; } >> "$GITHUB_STEP_SUMMARY"
+        fi
+        if [ -f artifacts/gemini-code-review.md ]; then
+          { echo ""; cat artifacts/gemini-code-review.md; } >> "$GITHUB_STEP_SUMMARY"
+        fi
+        if [ -f artifacts/github-models-code-review.md ]; then
+          { echo ""; cat artifacts/github-models-code-review.md; } >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        FAILED=0
+        # Expected verdicts: gemini-code-review, github-models-code-review
+        # Visual reviews are expected only if visual changes exist
+        EXPECTED_REVIEWS=""
+        if [ "${{ steps.impact_analysis.outputs.has_impact }}" == "true" ]; then
+          if [ "${{ github.event_name }}" == "pull_request" ]; then
+            EXPECTED_REVIEWS="gemini-code-review github-models-code-review"
+          fi
+          if [ "${{ steps.check_visuals.outputs.changed_routes }}" != "0" ] && [ "${{ steps.check_visuals.outputs.changed_routes }}" != "" ]; then
+            EXPECTED_REVIEWS="$EXPECTED_REVIEWS gemini-review github-models-review"
+          fi
+        fi
+
+        for r in $EXPECTED_REVIEWS; do
+          f="artifacts/$r-verdict.json"
+          if [ ! -f "$f" ]; then
+            echo "❌ Expected review verdict file missing: $f. The review script may have crashed." >&2
+            FAILED=1
+            continue
+          fi
+
+          PASSED=$(jq -r '.passed | if type == "null" or type == "nan" then "error" else . end' "$f" 2>/dev/null || echo "error")
+          VERDICT=$(jq -r '.llmVerdict | if type == "null" or type == "nan" then "unknown" else . end' "$f" 2>/dev/null || echo "unknown")
+          HIGH=$(jq -r '.highCount | if type == "null" or type == "nan" then "0" else . end' "$f" 2>/dev/null || echo "0")
+
+          if [[ "$VERDICT" == "warn" ]]; then
+             # Only allow specific safe-skip reasons for warnings to pass CI
+             IS_TRUNCATED=$(jq -r '.isTruncated // .truncated // "false"' "$f" 2>/dev/null)
+             SKIP_REASON=$(jq -r '.skipReason // "NONE"' "$f" 2>/dev/null)
+
+             if [[ "$IS_TRUNCATED" == "true" || "$SKIP_REASON" == *"MISSING_API_KEY"* || "$SKIP_REASON" == *"RATE_LIMIT"* || "$SKIP_REASON" == *"UNHANDLED_ERROR"* || "$SKIP_REASON" == *"TRUNCATED"* || "$SKIP_REASON" == *"PARSE_ERROR"* || "$SKIP_REASON" == "NONE" ]]; then
+                echo "⚠️ Review Warning: Legitimate skip/truncation ($f, reason: $SKIP_REASON, truncated: $IS_TRUNCATED). Manual review recommended."
+             else
+                echo "❌ Review failed: Unexpected warning state ($f, reason: $SKIP_REASON)" >&2
+                FAILED=1
+             fi
+          fi
+
+          if [[ "$PASSED" == "false" || "$VERDICT" == "fail" ]]; then
+            echo "❌ Review failed: $HIGH HIGH severity issues found ($f)" >&2
+            FAILED=1
+          elif [ "$PASSED" = "error" ]; then
+            echo "❌ Review failed: Could not parse verdict file ($f). Review may be malformed." >&2
+            FAILED=1
+          fi
+        done
+        exit $FAILED
+      shell: bash
+
+    - name: Parse Jules session ID from PR description
+      if: always()
+      id: parse_jules
+      env:
+        PR_BODY: ${{ github.event.pull_request.body }}
+      run: |
+        TASK_ID=$(echo "$PR_BODY" | grep -oP 'jules\.google\.com/task/\K[0-9]+' | head -1 || true)
+        if [ -z "$TASK_ID" ]; then
+          echo "No Jules task ID found in PR description. Skipping."
+          exit 0
+        fi
+        echo "Found Jules task ID: $TASK_ID"
+        echo "task_id=$TASK_ID" >> "$GITHUB_OUTPUT"
+      shell: bash
+
+    - name: Send impact analysis to Jules session
+      if: always() && steps.parse_jules.outputs.task_id != ''
+      env:
+        TASK_ID: ${{ steps.parse_jules.outputs.task_id }}
+        JULES_API_KEY: ${{ inputs.jules_api_key }}
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+        PR_NUMBER: ${{ inputs.pr_number }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+      run: |
+        if [ -f "scripts/send-jules-impact.py" ]; then
+          python3 scripts/send-jules-impact.py
+        elif [ -f "${{ github.action_path }}/../../../scripts/send-jules-impact.py" ]; then
+          python3 "${{ github.action_path }}/../../../scripts/send-jules-impact.py"
+        else
+          echo "⚠️ Skipping: send-jules-impact.py script not found"
+        fi
+      shell: bash
+
+    - name: Update Impact Analysis Feedback (Final Result)
+      if: always()
+      uses: ./mcp/actions/update-pr-comment
+      with:
+        github_token: ${{ inputs.github_token }}
+        status_line: '✅ **Impact Analysis Complete**'
+        impact_body: ${{ env.IMPACT_BODY }}
+
+    - name: Merge AI Logs into Artifacts
+      if: always()
+      run: |
+        # Ensure log directories exist
+        mkdir -p .boomtick/logs/ai
+        mkdir -p artifacts/logs/ai
+
+        # Sync from the TS logger location to the workspace log location expected by Python CLI
+        # Try both submodule and standalone paths
+        for log_dir in "cli/logs/ai"; do
+          if [ -d "$log_dir" ] && [ "$(ls -A "$log_dir" 2>/dev/null)" ]; then
+            cp -r "$log_dir"/* .boomtick/logs/ai/ 2>/dev/null || true
+          fi
+        done
+
+        # Sync to artifacts for upload
+        if [ -d .boomtick/logs/ai ] && [ "$(ls -A .boomtick/logs/ai 2>/dev/null)" ]; then
+          cp -r .boomtick/logs/ai/* artifacts/logs/ai/ 2>/dev/null || true
+        fi
+      shell: bash
+
+    - name: Upload Deployment Review Artifacts
+      if: always()
+      uses: actions/upload-artifact@v7 # nosemgrep: yaml.github-actions.security.github-actions-mutable-action-tag.github-actions-mutable-action-tag
+      with:
+        name: deployment-review
+        path: artifacts/
+
+    - name: Verify CI Metrics
+      if: always()
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+      run: |
+        # Resolve CLI dir for PYTHONPATH
+        if [ -d "cli" ]; then
+          export PYTHONPATH="cli:$PYTHONPATH"
+        fi
+
+        mkdir -p .boomtick/logs/ai
+        python3 -m dev_tools.cli gh summary-report >> "$GITHUB_STEP_SUMMARY"
+        if ! python3 -m dev_tools.cli gh verify-metrics; then
+          echo "CI Metrics verification failed."
+          exit 1
+        fi
+      shell: bash

package/actions/lint-typecheck/action.yml

@@ -0,0 +1,19 @@
+name: BoomTick Lint & Typecheck
+description: Runs linting and typechecking via project gate
+inputs:
+  target:
+    description: 'Target to check (root or boomtick-mcp)'
+    required: true
+  github_token:
+    description: 'GitHub token'
+    required: true
+runs:
+  using: composite
+  steps:
+    - uses: ./mcp/actions/setup
+
+    - name: Run Project Gate
+      uses: ./mcp/actions/run-project-gate
+      with:
+        target: ${{ inputs.target }}
+        github_token: ${{ inputs.github_token }}

package/actions/run-project-gate/action.yml

@@ -0,0 +1,163 @@
+name: "Run Project Gate"
+description: "Abstracted logic for building and testing monorepo sub-projects"
+inputs:
+  target:
+    description: "Target project to validate (e.g., 'root', 'boomtick-mcp')"
+    required: true
+  github_token:
+    description: "GitHub token for API access (e.g., ratchet-any)"
+    required: false
+
+runs:
+  using: "composite"
+  steps:
+    - name: Resolve Project Paths
+      id: resolve-paths
+      shell: bash
+      env:
+        TARGET: ${{ inputs.target }}
+      run: |
+        # Use centralized script for CLI path resolution
+        if [ -f "scripts/resolve-cli.sh" ]; then
+          CLI_PATH=$(bash scripts/resolve-cli.sh | sed "s|$(pwd)/||")
+        elif [ -f "boomtick-pkg/scripts/resolve-cli.sh" ]; then
+          CLI_PATH=$(bash boomtick-pkg/scripts/resolve-cli.sh | sed "s|$(pwd)/||")
+        elif [ -f "boomtick/scripts/resolve-cli.sh" ]; then
+          CLI_PATH=$(bash boomtick/scripts/resolve-cli.sh | sed "s|$(pwd)/||")
+        elif [ -d "boomtick-pkg/cli" ]; then
+          CLI_PATH="boomtick-pkg/cli"
+        elif [ -d "boomtick/cli" ]; then
+          CLI_PATH="boomtick/cli"
+        elif [ -d "cli" ]; then
+          CLI_PATH="cli"
+        else
+          CLI_PATH="cli"
+        fi
+        echo "CLI_PATH=$CLI_PATH" >> "$GITHUB_OUTPUT"
+
+        case "$TARGET" in
+          root)
+            echo "FILTER_PATH=." >> "$GITHUB_OUTPUT"
+            ;;
+          boomtick-mcp)
+            if [ -d "mcp" ]; then
+              echo "FILTER_PATH=./mcp" >> "$GITHUB_OUTPUT"
+            else
+              echo "FILTER_PATH=./mcp" >> "$GITHUB_OUTPUT"
+            fi
+            ;;
+          *)
+            echo "::error::Invalid target: $TARGET. Must be 'root' or 'boomtick-mcp'."
+            exit 1
+            ;;
+        esac
+
+    - name: Validate Runtime
+      if: inputs.target == 'root'
+      run: |
+        echo "::group::Validate Runtime"
+        trap 'echo "::endgroup::"' EXIT
+        pnpm run check:runtime-files
+        pnpm run doctor
+      shell: bash
+
+    - name: pnpm install
+      env:
+        TARGET: ${{ inputs.target }}
+        FILTER_PATH: ${{ steps.resolve-paths.outputs.FILTER_PATH }}
+      run: |
+        echo "::group::pnpm install"
+        trap 'echo "::endgroup::"' EXIT
+        if [ "$TARGET" = "root" ]; then
+          pnpm install --frozen-lockfile --engine-strict=false
+        else
+          pnpm install --frozen-lockfile --filter "$FILTER_PATH" --engine-strict=false
+        fi
+      shell: bash
+
+    - name: Verify lockfile integrity (root only)
+      if: inputs.target == 'root'
+      run: |
+        if ! git diff --quiet pnpm-lock.yaml; then
+          echo "::error::pnpm-lock.yaml is out of date. Run pnpm install and commit."
+          exit 1
+        fi
+      shell: bash
+
+    - name: Lint
+      if: inputs.target == 'root'
+      run: |
+        pnpm run verify:schemas
+        pnpm run lint
+      shell: bash
+
+    - name: Type-check / Build
+      env:
+        TARGET: ${{ inputs.target }}
+        CLI_PATH: ${{ steps.resolve-paths.outputs.CLI_PATH }}
+        FILTER_PATH: ${{ steps.resolve-paths.outputs.FILTER_PATH }}
+      run: |
+        if [ "$TARGET" = "boomtick-mcp" ]; then
+          PYTHONPATH="$CLI_PATH" python3 "$CLI_PATH/dev_tools/schema_gen.py"
+          npx tsx "$FILTER_PATH/scripts/sync-contracts.ts"
+          pnpm --filter "$FILTER_PATH" run sync:mcp-schemas
+        fi
+
+        if [ "$TARGET" = "root" ]; then
+          pnpm run type-check
+        else
+          pnpm --filter "$FILTER_PATH" run build
+        fi
+      shell: bash
+
+    - name: Python Linting
+      if: inputs.target == 'root'
+      continue-on-error: true
+      run: |
+        echo "::group::Python Linting"
+        trap 'echo "::endgroup::"' EXIT
+        if [ -f "requirements-dev.txt" ]; then
+          pip install -r requirements-dev.txt
+        fi
+        pnpm run lint:python
+        pnpm run type-check:python
+      shell: bash
+
+    - name: Run Unit Tests
+      env:
+        TARGET: ${{ inputs.target }}
+        FILTER_PATH: ${{ steps.resolve-paths.outputs.FILTER_PATH }}
+      run: |
+        if [ "$TARGET" = "root" ]; then
+          pnpm test
+        else
+          pnpm --filter "$FILTER_PATH" run test
+        fi
+      shell: bash
+
+    - name: Run CLI Unit Tests
+      if: inputs.target == 'root' || inputs.target == 'boomtick-mcp'
+      env:
+        CLI_PATH: ${{ steps.resolve-paths.outputs.CLI_PATH }}
+      run: |
+        echo "::group::Pytest"
+        trap 'echo "::endgroup::"' EXIT
+        PYTHONPATH="$CLI_PATH:$CLI_PATH/dev_tools" python3 -m pytest "$CLI_PATH/tests/"
+      shell: bash
+
+    - name: Check for dead code
+      if: inputs.target == 'root'
+      run: pnpm run knip
+      shell: bash
+
+    - name: TypeScript 'any' Ratchet
+      if: inputs.target == 'root'
+      run: |
+        echo "::group::Ratchet Any"
+        trap 'echo "::endgroup::"' EXIT
+        export PYTHONPATH="${{ steps.resolve-paths.outputs.CLI_PATH }}:${{ steps.resolve-paths.outputs.CLI_PATH }}/dev_tools"
+        export PATH="$HOME/.local/bin:/github/home/.local/bin:$PATH"
+        python3 -m dev_tools.cli gh ratchet-any
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
+      shell: bash

package/actions/setup/action.yml

@@ -0,0 +1,15 @@
+name: BoomTick Setup
+description: Comprehensive setup including checkout, node/pnpm, workspace, and MCP build
+runs:
+  using: composite
+  steps:
+    - name: Configure Git Safe Directory
+      run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      shell: bash
+
+    - name: Setup Workspace
+      uses: ./mcp/actions/setup-workspace
+
+    - name: Verify setup
+      run: python3 -m dev_tools.cli doctor
+      shell: bash