fix(ci): stabilize bun dependency and e2e flows

Author: skulidropek

.github/workflows/checking-dependencies.yml

@@ -18,8 +18,4 @@ jobs:
       - run: bun run --cwd packages/app build
 
       - name: Dist deps prune (lint)
-        run: |
-          bun x @prover-coder-ai/dist-deps-prune scan \
-            --package ./packages/app/package.json \
-            --prune-dev true \
-            --silent
+        run: bun run check:dist-deps-prune

bun.lock

@@ -0,0 +1,2 @@
+[install]
+linkWorkspacePackages = true

bunfig.toml

@@ -18,6 +18,7 @@
     "api:test": "bun run --filter @effect-template/api test",
     "api:typecheck": "bun run --filter @effect-template/api typecheck",
     "check": "bun run --filter @prover-coder-ai/docker-git check && bun run --filter @effect-template/lib typecheck",
+    "check:dist-deps-prune": "bun node_modules/@prover-coder-ai/dist-deps-prune/dist/main.js scan --package ./packages/app/package.json --prune-dev true --silent",
     "changeset": "changeset",
     "changeset-publish": "bun -e \"if (!process.env.NPM_TOKEN) { console.log('Skipping publish: NPM_TOKEN is not set'); process.exit(0); }\" && changeset publish",
     "changeset-version": "changeset version",
@@ -43,7 +44,8 @@
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.6.0",
-    "@changesets/cli": "^2.30.0"
+    "@changesets/cli": "^2.30.0",
+    "@prover-coder-ai/dist-deps-prune": "^1.0.17"
   },
   "trustedDependencies": [
     "@parcel/watcher",

package.json

@@ -85,7 +85,7 @@ mkdir -p "$ROOT/.orch/auth/codex"
 
 # Seed a fake (but structurally valid) Codex auth.json so the entrypoint can
 # auto-connect OpenCode without manual /connect.
-bun <<'BUN' > "$ROOT/.orch/auth/codex/auth.json"
+bun - <<'BUN' > "$ROOT/.orch/auth/codex/auth.json"
 const now = Math.floor(Date.now() / 1000)
 const b64 = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url")
 const jwt = (payload) => `${b64({ alg: "none", typ: "JWT" })}.${b64(payload)}.sig`

scripts/e2e/opencode-autoconnect.sh

@@ -92,7 +92,7 @@ dg_write_docker_host_file "$ROOT/authorized_keys" 644 < "$SSH_PUB_KEY"
 
 # Seed a structurally valid auth.json so the shared Codex volume must be created
 # and wired into the container runtime.
-bun <<'BUN' | dg_write_docker_host_file "$ROOT/.orch/auth/codex/auth.json" 600
+bun - <<'BUN' | dg_write_docker_host_file "$ROOT/.orch/auth/codex/auth.json" 600
 const now = Math.floor(Date.now() / 1000)
 const b64 = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url")
 const jwt = (payload) => `${b64({ alg: "none", typ: "JWT" })}.${b64(payload)}.sig`
@@ -151,7 +151,7 @@ docker exec -u dev "$CONTAINER_NAME" bash -lc "test -d '$TARGET_DIR/.git'" \
   || fail "expected cloned repo at: $TARGET_DIR"
 
 MOUNTS_JSON="$(docker inspect --format '{{json .Mounts}}' "$CONTAINER_NAME")"
-MOUNTS_JSON="$MOUNTS_JSON" HOME_VOLUME_NAME="$VOLUME_NAME" bun <<'BUN'
+MOUNTS_JSON="$MOUNTS_JSON" HOME_VOLUME_NAME="$VOLUME_NAME" bun - <<'BUN'
 const mounts = JSON.parse(process.env.MOUNTS_JSON)
 const byDestination = new Map(mounts.map((mount) => [mount.Destination, mount]))