Trim the test suite, close coverage gaps, and parallelize CI

[TheGreatAxios]

Summary

• Tests pin only behavior: content, brand, and animation-frame pins plus duplicate coverage are gone, and the freed budget funds coverage on load-bearing paths. The suite drops from 6,263 to 6,252 cases while adding tests for the auto shell policy wrapper bypasses, torn session journal recovery, exec close cancellation, session queue ordering, and MCP reconnect schema drift.
• The three flaky subagent mount-gate tests (plus a structurally identical fourth) are fixed at the root: they slept through a hardcoded retry backoff against a refused connection; a local 401 server fails the send on attempt one, dropping each probe from ~1.8s to ~0.3s with zero fixed sleeps.
• CI runs one static-analysis job (format, lint, typecheck), a decoupled build job, and a two-shard test matrix that still goes through the projects-dir guard with the same seed. Critical path drops from ~118s to ~95-100s.
• A lint rule (corbits/no-content-pin-tests) with its own behavioral tests keeps content-pin tests from regrowing; AGENTS.md states the bar: a test earns its place only if a real behavior change can fail it.
• The check gate now pins the shard path union and the seeded shard script, so sharding can never silently drop part of the suite.

Verification

• bun run check passes: lint (including the new rule), typecheck, build, and the guarded suite at 6,252 pass / 0 fail (seed 424242).
• Baseline from recent runs on main: 114-123s total, critical path 111-118s. Restructured: shards of ~78s and ~25s, critical path ~95-100s.
• Flake note: a pre-existing family of load-dependent 5s timeouts in git/filesystem and TUI I/O tests rotates run-to-run on a loaded machine; every flagged test passes in isolation. Not introduced by this branch.
• CI job names change (prettier, eslint, typecheck, build-and-test become static-analysis, build, test); main has no branch protection configured, so no required-check migration is needed.

Fixes CL-7514
Fixes CL-7515
Fixes CL-7513
Fixes CL-7516

[linear-code]

CL-7514

CL-7515

CL-7513

CL-7516

[TheGreatAxios]

Greybeard · Comment

The bar is sound (tests pin behavior, not copy); the lint heuristic and the trim both over-own it.

Findings

• scripts/eval-capability.test.ts / scripts/eval-public-swe-one.test.ts — unique CLI coverage (parseArgs, mapPool, effort validation) deleted because those files were outside bun run test path list. Suite membership owns "this test runs," not deletion. Enroll them under ./src, ./tests, or ./evals (or add ./scripts to the suite). Do not delete the contracts.
• tests/unit/tui/tool-formatter-web-brand.test.ts (deleted) / src/tui/tool-formatter.ts:54 — setActiveWebProviderBrand into humanizeToolName (branded web tool names; non-web tools unchanged) is product behavior. No remaining test covers it. Restore.
• scripts/eslint-rules/no-content-pin-tests.ts / AGENTS.md:38 — error-level shape match is the wrong owner of a semantic bar. It cannot tell copy from plugin identity, frontmatter flags, or fork-boundary policy; its own tests treat manifest.id === "corbits-skills" as a wording pin (tests/unit/eslint-rules/no-content-pin-tests.test.ts:32). Evidence it already distorts: tests/unit/corbits-skills-catalog.test.ts was rewritten into violation collectors to evade expect(skill).not.toContain(...). AGENTS.md already owns the bar. Drop the rule, or keep it as a documented heuristic that is not the definition of "behavioral."
• AGENTS.md:52 — still says bun run test is "the same suite CI runs." CI now shards via test:paths (package.json:36, .github/workflows/ci.yml test matrix). Path-union (tests/unit/check-gate.test.ts:47) is not the same isolation domain: mock.module leaks across ./src vs ./tests no longer fail in CI (CL-6967). Tell the truth: local bun run test remains the one-process suite; CI shards for wall clock.
• package.json:36 — test:paths with zero args is bun test over the whole tree, including vendor/. The vendor-exclusion constraint lives only on the test script. Fail closed (require paths, or alias to test).

Notes

Palette hex/ANSI pins, splash copy, and animation-frame pins were correctly dropped. Duplicate faremeter / inference-abort / consumeStream copies were real duplicates. The 401-not-sleep mount-gate fix owns flake at the retry classifier. New coverage (git-global-config wrappers, torn base JSONL, exec close, session-queue race, MCP schema drift) is the right spend of the freed budget. YAML paths: completeness is fail-closed today and brittle the moment another paths: key appears.