fix(ci): harden dependency audit and clarify workflow names

.github/workflows/dependency-health.yml → .github/workflows/dependency-review.yml

@@ -1,4 +1,4 @@
-name: Dependency Health
+name: Review Development Dependencies
 
 on:
   workflow_dispatch:
@@ -11,18 +11,19 @@ permissions:
 
 jobs:
   dependency-health:
+    name: Audit Development Dependencies
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Setup Python
+      - name: Set up Python
         uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
-      - name: Setup uv
+      - name: Set up uv
         uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false

.github/workflows/publish.yml

@@ -1,4 +1,4 @@
-name: Publish
+name: Release Publish and Repair
 
 on:
   push:
@@ -31,6 +31,7 @@ permissions:
 
 jobs:
   publish:
+    name: Build and Publish Release Artifacts
     runs-on: ubuntu-latest
 
     steps:
@@ -40,17 +41,17 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_tag || github.ref }}
 
-      - name: Setup Python
+      - name: Set up Python
         uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
-      - name: Setup uv
+      - name: Set up uv
         uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false
 
-      - name: Run regression baseline
+      - name: Run default regression baseline
         run: bash ./scripts/doctor.sh
 
       - name: Export runtime requirements for vulnerability audit
@@ -94,10 +95,10 @@ jobs:
           print(f"Validated release version: {version}")
           PY
 
-      - name: Smoke test wheel install
+      - name: Smoke test wheel artifact
         run: bash ./scripts/smoke_test_built_cli.sh dist/opencode_a2a-*.whl
 
-      - name: Smoke test sdist install
+      - name: Smoke test sdist artifact
         run: bash ./scripts/smoke_test_built_cli.sh dist/opencode_a2a-*.tar.gz
 
       - name: Publish to PyPI

.github/workflows/ci.yml → .github/workflows/validate.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Validate PRs and Main
 
 on:
   pull_request:
@@ -11,29 +11,30 @@ permissions:
 
 jobs:
   quality-gate:
+    name: Validate Default Toolchain
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Setup Python
+      - name: Set up Python
         uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
-      - name: Setup uv
+      - name: Set up uv
         uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false
 
-      - name: Sync Dependencies
+      - name: Sync locked dependencies
         run: uv sync --all-extras --frozen
 
-      - name: Run pre-commit
+      - name: Run lint checks
         run: bash ./scripts/lint.sh
 
-      - name: Run pytest
+      - name: Run test suite
         run: uv run pytest
 
       - name: Enforce coverage policy
@@ -60,6 +61,7 @@ jobs:
         run: bash ./scripts/smoke_test_built_cli.sh dist/opencode_a2a-*.tar.gz
 
   runtime-matrix:
+    name: Validate Runtime Matrix (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -70,18 +72,18 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Setup Python
+      - name: Set up Python
         uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
-      - name: Setup uv
+      - name: Set up uv
         uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false
 
-      - name: Sync Dependencies
+      - name: Sync locked dependencies
         run: uv sync --all-extras --frozen
 
-      - name: Run pytest runtime matrix
+      - name: Run runtime regression tests
         run: uv run pytest --no-cov

pyproject.toml

@@ -40,6 +40,7 @@ dev = [
     "mypy>=1.19.1,<2.0",
     "pip-audit>=2.9,<3.0",
     "pre-commit>=4.5.1,<5.0",
+    "pygments>=2.20.0,<3.0",
     "pytest>=8.0,<10.0",
     "pytest-asyncio>=0.23,<2.0",
     "pytest-cov>=7.0.0,<8.0.0",