feat: ship Opus 4.6 + Sonnet 4.6 as default model config with 200K context

.gitallowed

@@ -0,0 +1 @@
+123456789012

.github/workflows/pack-tests.yml

@@ -0,0 +1,63 @@
+name: Pack tests
+
+on:
+  push:
+    branches: [main, 'feature/**']
+    paths:
+      - 'packs/**'
+      - 'tests/**'
+      - 'scripts/**'
+      - 'deploy/**'
+      - 'install.sh'
+      - '.github/workflows/pack-tests.yml'
+  pull_request:
+    paths:
+      - 'packs/**'
+      - 'tests/**'
+      - 'scripts/**'
+      - 'deploy/**'
+      - 'install.sh'
+
+permissions:
+  contents: read
+
+jobs:
+  discover:
+    runs-on: ubuntu-latest
+    outputs:
+      tests: ${{ steps.find.outputs.tests }}
+      has_tests: ${{ steps.find.outputs.has_tests }}
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Discover test scripts
+        id: find
+        run: |
+          # Find all test.sh files in packs/ and tests/ by naming convention
+          tests=$(find packs/*/test.sh tests/test-*.sh -type f 2>/dev/null | jq -Rsc 'split("\n") | map(select(length > 0))')
+          echo "tests=${tests}" >> "$GITHUB_OUTPUT"
+          if [[ "$tests" == "[]" ]]; then
+            echo "has_tests=false" >> "$GITHUB_OUTPUT"
+            echo "No test scripts found"
+          else
+            echo "has_tests=true" >> "$GITHUB_OUTPUT"
+            echo "Found tests: ${tests}"
+          fi
+
+  test:
+    needs: discover
+    if: needs.discover.outputs.has_tests == 'true'
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        test: ${{ fromJson(needs.discover.outputs.tests) }}
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Run ${{ matrix.test }}
+        run: |
+          chmod +x "${{ matrix.test }}"
+          bash "${{ matrix.test }}"
+        env:
+          CI: "true"

.github/workflows/secret-scan.yml

@@ -10,7 +10,7 @@ jobs:
   git-secrets:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/stamp-version.yml

@@ -11,7 +11,7 @@ jobs:
   stamp:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/validate.yml

@@ -0,0 +1,47 @@
+name: Validate
+
+on:
+  push:
+    branches: [main, 'feature/**']
+    paths:
+      - 'deploy/terraform/**'
+      - 'deploy/cloudformation/**'
+      - 'install.sh'
+      - 'uninstall.sh'
+      - '.github/workflows/validate.yml'
+  pull_request:
+    paths:
+      - 'deploy/terraform/**'
+      - 'deploy/cloudformation/**'
+      - 'install.sh'
+      - 'uninstall.sh'
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Bash syntax check
+        run: |
+          bash -n install.sh
+          bash -n uninstall.sh
+          echo "Bash syntax OK"
+
+      - name: ShellCheck
+        run: |
+          shellcheck --severity=error install.sh uninstall.sh || true
+
+      - uses: hashicorp/setup-terraform@v3
+
+      - name: Terraform fmt check
+        run: terraform fmt -check -diff deploy/terraform/
+
+      - name: Terraform validate
+        run: |
+          cd deploy/terraform
+          terraform init -backend=false -input=false
+          terraform validate

.github/workflows/version-bump.yml

@@ -15,7 +15,7 @@ jobs:
     # Skip if this commit was made by the bot (prevent infinite loop)
     if: "!contains(github.event.head_commit.message, '[skip ci]')"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}