From 61cd99a8b44e7650d826686197b8344ccf5d5018 Mon Sep 17 00:00:00 2001
From: Paavo Pokkinen <paavo@modernpath.ai>
Date: Wed, 7 Oct 2026 04:03:17 +0300
Subject: [PATCH] ci: run on stacked PRs and add a macOS test job

The Seatbelt sandbox paths (agent and tool profiles, the runtime-dir
denies, F9) are exercised only by tests that apply a real profile, and
the Linux job never reaches them. Stacked PRs were skipped because CI
ran only for PRs into main.
---
 .github/workflows/ci.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8d47d06..07d06ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,7 +4,6 @@ on:
   push:
     branches: [main]
   pull_request:
-    branches: [main]
 
 env:
   CARGO_TERM_COLOR: always
@@ -36,6 +35,16 @@ jobs:
       - uses: Swatinem/rust-cache@v2
       - run: cargo test
 
+  test-macos:
+    name: Test (macOS)
+    runs-on: macos-latest
+    needs: check
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo test
+
   fmt:
     name: Format
     runs-on: ubuntu-latest