ci: fix llmgate replace, MinIO service, and parser lint findings

Three related fixes surfaced by the first CI run:

- go.mod: drop the `replace github.com/hallelx2/llmgate => ../llmgate`
  directive and depend on the now-tagged v0.1.0 from the proxy. CI
  doesn't have a sibling working copy to replace into.

- ci.yml: MinIO can't run as a `services:` container because Actions
  doesn't expose a way to pass the `server /data` command the image
  needs. Start it with `docker run` in a step instead, wait for
  health, then create the bucket with minio/mc. Also switches the
  image from bitnami/minio (which moved to a paid catalog) to the
  upstream quay.io/minio/minio.

- pkg/parser/markdown.go: fix two pre-existing staticcheck findings
  that the new lint job surfaced. SA1019: replace the deprecated
  goldmark Heading.Text(src) with a dedicated headingText helper
  that walks inline children. S1040: drop a redundant type assertion
  to ast.Node.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: hallelx2

.github/workflows/ci.yml

@@ -64,18 +64,6 @@ jobs:
           --health-interval 5s
           --health-timeout 5s
           --health-retries 10
-      minio:
-        image: bitnami/minio:latest
-        env:
-          MINIO_ROOT_USER: minioadmin
-          MINIO_ROOT_PASSWORD: minioadmin
-          MINIO_DEFAULT_BUCKETS: vle-test
-        ports: ["9000:9000"]
-        options: >-
-          --health-cmd "curl -f http://localhost:9000/minio/health/live || exit 1"
-          --health-interval 5s
-          --health-timeout 5s
-          --health-retries 20
     steps:
       - uses: actions/checkout@v6
 
@@ -85,6 +73,28 @@ jobs:
           go-version: "1.25"
           cache: true
 
+      # MinIO can't run as a `services:` container because GitHub Actions
+      # doesn't expose a way to pass the required `server /data` command.
+      # Start it in a step instead, wait for health, create the bucket.
+      - name: Start MinIO
+        run: |
+          docker run -d --name minio \
+            -p 9000:9000 \
+            -e MINIO_ROOT_USER=minioadmin \
+            -e MINIO_ROOT_PASSWORD=minioadmin \
+            quay.io/minio/minio:latest server /data
+          for i in {1..30}; do
+            if curl -sf http://localhost:9000/minio/health/live > /dev/null; then
+              echo "MinIO ready"
+              break
+            fi
+            echo "waiting for MinIO ($i)..."
+            sleep 2
+          done
+          docker run --rm --network host \
+            -e MC_HOST_local=http://minioadmin:minioadmin@localhost:9000 \
+            quay.io/minio/mc mb -p local/vle-test
+
       - name: Run integration tests
         env:
           TEST_DATABASE_URL: postgres://vle:vle@localhost:5432/vle_test?sslmode=disable

go.mod

@@ -10,7 +10,7 @@ require (
 	github.com/aws/smithy-go v1.25.0
 	github.com/go-chi/chi/v5 v5.2.5
 	github.com/google/uuid v1.6.0
-	github.com/hallelx2/llmgate v0.0.0-00010101000000-000000000000
+	github.com/hallelx2/llmgate v0.1.0
 	github.com/jackc/pgx/v5 v5.9.2
 	github.com/ledongthuc/pdf v0.0.0-20250511090121-5959a4027728
 	github.com/riverqueue/river v0.35.0
@@ -21,11 +21,6 @@ require (
 	gopkg.in/yaml.v3 v3.0.1
 )
 
-// Local development: point llmgate at the sibling working copy until
-// the first tagged release is published. Remove this once llmgate has
-// a real version.
-replace github.com/hallelx2/llmgate => ../llmgate
-
 require (
 	cloud.google.com/go v0.116.0 // indirect
 	cloud.google.com/go/ai v0.7.0 // indirect

go.sum

@@ -80,6 +80,8 @@ github.com/googleapis/enterprise-certificate-proxy v0.3.4 h1:XYIDZApgAnrN1c855gT
 github.com/googleapis/enterprise-certificate-proxy v0.3.4/go.mod h1:YKe7cfqYXjKGpGvmSg28/fFvhNzinZQm8DGnaburhGA=
 github.com/googleapis/gax-go/v2 v2.14.1 h1:hb0FFeiPaQskmvakKu5EbCbpntQn48jyHuvrkurSS/Q=
 github.com/googleapis/gax-go/v2 v2.14.1/go.mod h1:Hb/NubMaVM88SrNkvl8X/o8XWwDJEPqouaLeN2IUxoA=
+github.com/hallelx2/llmgate v0.1.0 h1:cU4o016k33d8ugCwGc4xO+XAO2OaNCa+mVv4koxq7Mc=
+github.com/hallelx2/llmgate v0.1.0/go.mod h1:MK2Ol/5CIweTQ2/9eSiTJ5g/KSSuobNZL9TD3s57JxY=
 github.com/jackc/pgerrcode v0.0.0-20240316143900-6e2875d9b438 h1:Dj0L5fhJ9F82ZJyVOmBx6msDp/kfd1t9GRfny/mfJA0=
 github.com/jackc/pgerrcode v0.0.0-20240316143900-6e2875d9b438/go.mod h1:a/s9Lp5W7n/DD0VrVoyJ00FbP2ytTPDVOivvn2bMlds=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=

pkg/parser/markdown.go

@@ -60,7 +60,7 @@ func (m *Markdown) Parse(_ context.Context, r io.Reader) (*ParsedDoc, error) {
 	// anything else, append its rendered text to the current bucket.
 	for n := doc.FirstChild(); n != nil; n = n.NextSibling() {
 		if h, ok := n.(*ast.Heading); ok {
-			title := strings.TrimSpace(string(h.Text(src)))
+			title := strings.TrimSpace(headingText(h, src))
 			current = &flat{level: h.Level, title: title}
 			flats = append(flats, current)
 			continue
@@ -148,9 +148,28 @@ func appendNodeText(buf *strings.Builder, n ast.Node, src []byte) {
 
 	// Paragraph-ish block boundaries: add a blank line after block nodes
 	// so the flattened text still reads.
-	if _, ok := n.(ast.Node); ok && n.Type() == ast.TypeBlock {
+	if n.Type() == ast.TypeBlock {
 		if !bytes.HasSuffix([]byte(buf.String()), []byte("\n\n")) {
 			buf.WriteString("\n\n")
 		}
 	}
 }
+
+// headingText extracts the flattened text of a heading by walking its
+// inline children. Replaces the deprecated Heading.Text(src) API.
+func headingText(h *ast.Heading, src []byte) string {
+	var buf bytes.Buffer
+	for c := h.FirstChild(); c != nil; c = c.NextSibling() {
+		if t, ok := c.(*ast.Text); ok {
+			buf.Write(t.Segment.Value(src))
+			continue
+		}
+		// Recurse for wrapping inlines (emphasis, links, code spans, etc.)
+		for gc := c.FirstChild(); gc != nil; gc = gc.NextSibling() {
+			if t, ok := gc.(*ast.Text); ok {
+				buf.Write(t.Segment.Value(src))
+			}
+		}
+	}
+	return buf.String()
+}