From b1c1d116d278982854a620aee3db583fd4b1caf2 Mon Sep 17 00:00:00 2001
From: Teodor Calin <teodor@vulturelabs.io>
Date: Fri, 29 May 2026 12:18:04 -0700
Subject: [PATCH 1/2] fix(ci): checkout pilot-protocol/common so go test
 resolves replace path

Same pattern as pilot-protocol/{examples,handshake,libpilot,runtime}: ci.yml
needs to checkout the common sibling so the ../common replace directive in
go.mod actually resolves at build time.

Closes PILOT-349.
---
 .github/workflows/ci.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a62a907..f3446c7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,6 +24,12 @@ jobs:
           repository: TeoSlayer/pilotprotocol
           path: web4
 
+      - name: Checkout common
+        uses: actions/checkout@v4
+        with:
+          repository: pilot-protocol/common
+          path: common
+
       - uses: actions/setup-go@v5
         with:
           go-version: '1.25'

From 80e8227a25ecc3f4abf1e0bc68453fc11af4e4de Mon Sep 17 00:00:00 2001
From: Teodor Calin <teodor@vulturelabs.io>
Date: Fri, 29 May 2026 12:40:39 -0700
Subject: [PATCH 2/2] fix(ci): run go mod tidy before tests to absorb
 transitive deps

---
 .github/workflows/ci.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f3446c7..fc9a176 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,6 +36,10 @@ jobs:
           cache: true
           cache-dependency-path: webhook/go.sum
 
+      - name: Tidy (webhook) go.mod (absorb sibling drift)
+        working-directory: webhook
+        run: go mod tidy
+
       - name: Run tests with coverage
         working-directory: webhook
         run: go test -race -coverprofile=coverage.out -covermode=atomic ./...