feat: add chore TaskType + CI deploy to GHCR

- Add 'chore' to TaskType union, governance config, and frontend badges
- Add defensive fallback in resolveGovernance() for unknown task types
- Fix missing 'chore' in database.ts inferTaskTypeFromContent()
- New deploy workflow: build Docker images and push to ghcr.io on push to main
- Update docker-compose to pull pre-built images from GHCR

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Dchuong03

.github/workflows/deploy.yml

@@ -0,0 +1,53 @@
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'packages/**'
+      - 'docker/**'
+      - 'pnpm-lock.yaml'
+
+jobs:
+  build-push:
+    name: Build & Push ${{ matrix.service }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    strategy:
+      matrix:
+        service: [api-server, mcp-server]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract version
+        id: version
+        run: echo "version=$(node -p 'require(\"./package.json\").version')" >> "$GITHUB_OUTPUT"
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/junixlabs/sidstack-${{ matrix.service }}
+          tags: |
+            type=raw,value=latest
+            type=sha,prefix=sha-,format=short
+            type=raw,value=v${{ steps.version.outputs.version }}
+
+      - name: Build & push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/${{ matrix.service }}/Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

docker/deploy/docker-compose.yml

@@ -3,9 +3,7 @@
 
 services:
   api-server:
-    build:
-      context: ../../
-      dockerfile: docker/api-server/Dockerfile
+    image: ghcr.io/junixlabs/sidstack-api-server:latest
     container_name: sidstack-api
     ports:
       - "127.0.0.1:19432:19432"
@@ -29,9 +27,7 @@ services:
       start_period: 10s
 
   mcp-server:
-    build:
-      context: ../../
-      dockerfile: docker/mcp-server/Dockerfile
+    image: ghcr.io/junixlabs/sidstack-mcp-server:latest
     container_name: sidstack-mcp
     ports:
       - "127.0.0.1:19433:19433"

packages/shared/src/database.ts

@@ -4085,7 +4085,7 @@ export class SidStackDB {
     const prefixMatch = title.match(/^\[(\w+)\]/);
     if (prefixMatch) {
       const prefix = prefixMatch[1].toLowerCase();
-      const validTypes: TaskType[] = ['feature', 'bugfix', 'refactor', 'test', 'docs', 'infra', 'security', 'perf', 'debt', 'spike'];
+      const validTypes: TaskType[] = ['feature', 'bugfix', 'refactor', 'test', 'docs', 'infra', 'security', 'perf', 'debt', 'spike', 'chore'];
       if (validTypes.includes(prefix as TaskType)) {
         return prefix as TaskType;
       }

packages/shared/src/governance.ts

@@ -19,11 +19,12 @@ export type TaskType =
   | 'security'   // Security-related
   | 'perf'       // Performance optimization
   | 'debt'       // Technical debt cleanup
-  | 'spike';     // Research/investigation
+  | 'spike'      // Research/investigation
+  | 'chore';     // Routine maintenance
 
 export const TASK_TYPES: TaskType[] = [
   'feature', 'bugfix', 'refactor', 'test', 'docs',
-  'infra', 'security', 'perf', 'debt', 'spike'
+  'infra', 'security', 'perf', 'debt', 'spike', 'chore'
 ];
 
 export function isValidTaskType(type: string): type is TaskType {
@@ -168,6 +169,13 @@ export const TASK_TYPE_GOVERNANCE: Record<TaskType, GovernanceConfig> = {
     requiredCriteria: false,
     reviewRequired: false,
   },
+  chore: {
+    principles: ['task-management'],
+    skills: [],
+    qualityGates: [],
+    requiredCriteria: false,
+    reviewRequired: false,
+  },
 };
 
 /**
@@ -184,6 +192,7 @@ export const MIN_PROGRESS_UPDATES: Record<TaskType, number> = {
   perf: 3,       // Profile, optimize, verify
   debt: 2,       // Start, complete
   spike: 1,      // Complete with findings
+  chore: 1,      // Complete
 };
 
 // ============================================================================
@@ -202,6 +211,15 @@ export interface ModuleGovernance {
   };
 }
 
+const FALLBACK_GOVERNANCE: TaskGovernance = {
+  principles: ['task-management'],
+  skills: [],
+  patterns: [],
+  qualityGates: [],
+  requiredCriteria: false,
+  reviewRequired: false,
+};
+
 /**
  * Resolve governance for a task based on task type and optional module
  */
@@ -211,6 +229,11 @@ export function resolveGovernance(
 ): TaskGovernance {
   const config = TASK_TYPE_GOVERNANCE[taskType];
 
+  // Defensive fallback for unknown task types (runtime safety for untyped callers)
+  if (!config) {
+    return FALLBACK_GOVERNANCE;
+  }
+
   // Build quality gates with commands
   const qualityGates: QualityGate[] = config.qualityGates.map(gateId => ({
     id: gateId,

src/components/tasks/badges/TaskTypeBadge.tsx

@@ -9,6 +9,7 @@ import {
   Zap,
   Wrench,
   Microscope,
+  ClipboardList,
 } from "lucide-react";
 import { type ReactNode } from "react";
 
@@ -31,6 +32,7 @@ const TASK_TYPE_CONFIG: Record<TaskType, { bgVar: string; textVar: string; icon:
   perf:     { bgVar: "var(--task-perf-bg)",     textVar: "var(--task-perf)",     icon: <Zap className="w-3 h-3" /> },
   debt:     { bgVar: "var(--task-debt-bg)",     textVar: "var(--task-debt)",     icon: <Wrench className="w-3 h-3" /> },
   spike:    { bgVar: "var(--task-spike-bg)",    textVar: "var(--task-spike)",    icon: <Microscope className="w-3 h-3" /> },
+  chore:    { bgVar: "var(--task-infra-bg)",    textVar: "var(--task-infra)",    icon: <ClipboardList className="w-3 h-3" /> },
 };
 
 export function TaskTypeBadge({ taskType, showIcon = false }: TaskTypeBadgeProps) {

src/stores/taskStore.ts

@@ -13,7 +13,7 @@ import { create } from "zustand";
 
 export type TaskStatus = "pending" | "review" | "in_progress" | "completed" | "blocked" | "failed" | "cancelled";
 export type TaskPriority = "low" | "medium" | "high";
-export type TaskType = "feature" | "bugfix" | "refactor" | "test" | "docs" | "infra" | "security" | "perf" | "debt" | "spike";
+export type TaskType = "feature" | "bugfix" | "refactor" | "test" | "docs" | "infra" | "security" | "perf" | "debt" | "spike" | "chore";
 export type ViewMode = "list" | "tree" | "kanban" | "timeline";
 
 export interface AcceptanceCriterion {