From df73303c6b6610df40d93a9e0b675d5baaff3691 Mon Sep 17 00:00:00 2001
From: Hunter Garrett <hunter@hunterbecton.com>
Date: Fri, 28 Aug 2026 18:20:56 -0400
Subject: [PATCH] ci: run root vp check and drop persisted credentials (BON-18,
 BON-19)

Root vp check, the command in the CLAUDE.md review checklist, failed on
main because apps/docs/components/logo.tsx was never formatted. The two
other files BON-18 listed were fixed by later PRs. CI never caught it:
the per-app check jobs run tsc, and only the bones package runs vp
check. A new "Repo: Format & Lint" job runs vp check from the root, so
format and lint cover every package and app. The per-app tsc jobs stay.

Every checkout step in ci.yml now sets persist-credentials: false. No
job there runs authenticated git after checkout. release.yml keeps the
default because changesets/action pushes the version branch and the
release step pushes the tag.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml      | 46 +++++++++++++++++++++++++++++++++++
 apps/docs/components/logo.tsx |  7 +-----
 2 files changed, 47 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6cadcb7..87844be 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,6 +10,24 @@ permissions:
   contents: read
 
 jobs:
+  # ── Whole repo ─────────────────────────────────────────────
+  repo-check:
+    name: "Repo: Format & Lint"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          cache: true
+
+      - name: Run format and lint checks across the workspace
+        run: vp check
+
   # ── Bones library ──────────────────────────────────────────
   bones-check:
     name: "Bones: Lint, Format & Types"
@@ -17,6 +35,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -32,6 +52,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -47,6 +69,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -62,6 +86,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -91,6 +117,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -109,6 +137,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -127,6 +157,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -146,6 +178,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -164,6 +198,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -183,6 +219,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -201,6 +239,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -219,6 +259,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -235,6 +277,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
@@ -253,6 +297,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Setup Vite+
         uses: voidzero-dev/setup-vp@v1
diff --git a/apps/docs/components/logo.tsx b/apps/docs/components/logo.tsx
index 30c9bad..0db4c08 100644
--- a/apps/docs/components/logo.tsx
+++ b/apps/docs/components/logo.tsx
@@ -1,11 +1,6 @@
 export function Logo(props: React.SVGProps<SVGSVGElement>) {
   return (
-    <svg
-      viewBox="0 0 70 70"
-      fill="none"
-      xmlns="http://www.w3.org/2000/svg"
-      {...props}
-    >
+    <svg viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg" {...props}>
       <path
         d="M12.3148 39.6993C-3.81021 36.5743 -1.36758 52.8636 4.31479 56.3243C8.47105 58.8555 9.34604 54.6055 11.346 51.1368C12.921 48.7618 14.5856 49.1263 15.221 49.6055C17.3148 50.8867 12.7523 53.0743 11.8773 57.0743C10.6898 69.0742 19.8773 69.7618 21.6898 69.7618C31.0648 70.6368 30.6898 61.3868 30.3773 57.0743C29.6273 48.1992 34.8773 44.9493 41.9398 36.5118C49.5023 28.6368 54.5648 30.3243 55.6898 30.3243C63.3773 31.9493 65.0023 30.1993 66.3148 28.6993C72.2148 21.4493 67.1065 15.3451 63.8148 13.1993C60.2614 10.8828 61.4045 13.1993 59.2523 16.6368C54.7523 23.8243 51.5023 19.4493 52.4398 17.9493C53.283 16.6001 63.0648 7.07427 52.4398 1.82427C43.9398 -2.37573 38.3148 1.2223 38.3148 7.07427C37.8143 19.0221 38.6004 17.5183 36.8148 21.4493C34.2493 27.0973 25.1898 35.3243 21.6898 37.6993C18.8898 39.5993 14.8918 40.1987 12.3148 39.6993Z"
         fill="currentColor"