CI Hardening: 19 opportunities identified (5 quick wins)

[diberry]

CI Hardening — 19 Opportunities Identified

Flight audited all 15 workflows on bradygaster/squad and identified 19 hardening opportunities.

Full analysis: docs/proposals/ci-hardening-opportunities.md

Priority: P0

Quick Wins (2-3 hours, high impact)

1. Retry logic on npm install — eliminates ~20-30% of transient CI failures
2. Job timeout tuning — prevents 6-hour hangs on stuck jobs
3. npm cache optimization — 30-40% speedup on install steps
4. Conditional docs quality checks — skip on code-only PRs (10-15% faster)
5. Publish secret validation — fail fast on misconfiguration

Short-term (5-6 hours, medium ROI)

• Lockfile stability in preflight
• Consolidate duplicate steps (create composite action)
• Ralph cron review
• API rate limit monitoring
• Registry health checks

Backlog (strategic, higher complexity)

• Cross-platform CI (Windows/macOS/Linux matrix)
• Security scanning (SAST + npm audit)
• Performance regression detection
• E2E CLI integration tests
• Flaky test quarantine system

Routing

• Booster owns implementation (CI/CD Engineer)
• FIDO monitors for flaky test patterns (Quality Owner)
• Flight approves + triages Phase 3 against v1.0 roadmap

Files Needing Changes

File	Changes	Effort
squad-ci.yml	Add npm cache, retry, timeout, conditional Playwright	30 min
squad-npm-publish.yml	Add retry, secret validation	20 min
squad-insider-publish.yml	Add retry in matrix	15 min
ci-rerun.yml	Add npm cache	15 min

[github-actions]

🏗️ Squad Triage — Flight (Lead)

Issue: #121 — CI Hardening: 19 opportunities identified (5 quick wins)
Assigned to: FIDO (Quality Owner)
Reason: Issue relates to testing/quality work

@copilot evaluation: 🔴 Not suitable — issue involves work outside the coding agent's capability profile.

Team roster:

• Flight (Lead) → label: squad:flight
• Procedures (Prompt Engineer) → label: squad:procedures
• EECOM (Core Dev) → label: squad:eecom
• FIDO (Quality Owner) → label: squad:fido
• PAO (DevRel) → label: squad:pao
• CAPCOM (SDK Expert) → label: squad:capcom
• CONTROL (TypeScript Engineer) → label: squad:control
• Surgeon (Release Manager) → label: squad:surgeon
• Booster (CI/CD Engineer) → label: squad:booster
• GNC (Node.js Runtime) → label: squad:gnc
• Network (Distribution) → label: squad:network
• RETRO (Security) → label: squad:retro
• INCO (CLI UX & Visual Design) → label: squad:inco
• GUIDO (VS Code Extension) → label: squad:guido
• Telemetry (Aspire & Observability) → label: squad:telemetry
• VOX (REPL & Interactive Shell) → label: squad:vox
• DSKY (TUI Engineer) → label: squad:dsky
• Sims (E2E Test Engineer) → label: squad:sims
• Handbook (SDK Usability) → label: squad:handbook
• Ralph (Work Monitor) → label: squad:ralph
• @copilot (Coding Agent) → label: squad:copilot

To reassign, remove the current squad:* label and add the correct one.

[github-actions]

⚠️ No squad member found matching label squad:archive. Check .squad/team.md (or .ai-team/team.md) for valid member names.

[diberry]

Closing: work completed upstream or no longer relevant. See diberry/project-dina#22 cleanup audit.