Merge remote-tracking branch 'origin/main' into feat/telemetry-quality-signal

# Conflicts:
#	.github/meta/commit.txt

Author: anandgupta42

.github/workflows/ci.yml

@@ -329,6 +329,53 @@ jobs:
           DBT_E2E_VERSIONS: "1.8,1.10,1.11"
           DBT_RESOLVE_SCENARIOS: "venv,uv,system"
 
+  # ---------------------------------------------------------------------------
+  # Verdaccio sanity suite — tests the real `npm install -g` flow.
+  # Only on push to main (too slow for PRs, needs Docker Compose).
+  # Catches publish-pipeline bugs: missing files, broken symlinks, wrong bin
+  # field, dependency resolution failures, postinstall script issues.
+  # ---------------------------------------------------------------------------
+  sanity-verdaccio:
+    name: Sanity (Verdaccio)
+    needs: changes
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - uses: oven-sh/setup-bun@ecf28ddc73e819eb6fa29df6b34ef8921c743461 # v2
+        with:
+          bun-version: "1.3.10"
+
+      - name: Cache Bun dependencies
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ~/.bun/install/cache
+          key: bun-${{ runner.os }}-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            bun-${{ runner.os }}-
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build CLI binary
+        run: bun run packages/opencode/script/build.ts --target-index=1
+        env:
+          OPENCODE_VERSION: 0.0.0-sanity-${{ github.sha }}
+          MODELS_DEV_API_JSON: test/tool/fixtures/models-api.json
+
+      - name: Build dbt-tools
+        run: bun run build
+        working-directory: packages/dbt-tools
+
+      - name: Run Verdaccio sanity suite
+        run: |
+          docker compose -f test/sanity/docker-compose.verdaccio.yml up \
+            --build --abort-on-container-exit --exit-code-from sanity
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+
   marker-guard:
     name: Marker Guard
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -125,9 +125,54 @@ jobs:
           path: packages/opencode/dist/
           compression-level: 1
 
+  # ---------------------------------------------------------------------------
+  # Verdaccio sanity suite — tests the real `npm install -g` flow BEFORE
+  # publishing to npm. Catches broken symlinks, missing files, postinstall
+  # failures, and dependency resolution issues that smoke tests miss.
+  # ---------------------------------------------------------------------------
+  sanity-verdaccio:
+    name: Sanity (Verdaccio)
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - uses: oven-sh/setup-bun@ecf28ddc73e819eb6fa29df6b34ef8921c743461 # v2
+        with:
+          bun-version: "1.3.10"
+
+      - name: Cache Bun dependencies
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ~/.bun/install/cache
+          key: bun-${{ runner.os }}-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            bun-${{ runner.os }}-
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Download linux-x64 build artifact
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: dist-linux-x64
+          path: packages/opencode/dist/
+
+      - name: Build dbt-tools
+        run: bun run build
+        working-directory: packages/dbt-tools
+
+      - name: Run Verdaccio sanity suite
+        run: |
+          docker compose -f test/sanity/docker-compose.verdaccio.yml up \
+            --build --abort-on-container-exit --exit-code-from sanity
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+
   publish-npm:
     name: Publish to npm
-    needs: build
+    needs: [build, sanity-verdaccio]
     runs-on: ubuntu-latest
     timeout-minutes: 60
     permissions: