fix: agent-ci.yml — handle repos without lockfile

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: groupthinking

.github/workflows/agent-ci.yml

@@ -8,7 +8,7 @@ on:
   issues:
     types: [opened, labeled]
   schedule:
-    - cron: '0 6 * * 1'  # Weekly Monday 6am audit
+    - cron: '0 6 * * 1'
 
 permissions:
   contents: write
@@ -30,7 +30,7 @@ jobs:
       has_tests: ${{ steps.detect.outputs.has_tests }}
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Detect Framework
         id: detect
         run: |
@@ -41,32 +41,46 @@ jobs:
             else echo "framework=node" >> $GITHUB_OUTPUT; fi
             if grep -q '"test"' package.json; then echo "has_tests=true" >> $GITHUB_OUTPUT
             else echo "has_tests=false" >> $GITHUB_OUTPUT; fi
+            if [ -f "package-lock.json" ] || [ -f "yarn.lock" ] || [ -f "pnpm-lock.yaml" ]; then
+              echo "has_lockfile=true" >> $GITHUB_OUTPUT
+            else
+              echo "has_lockfile=false" >> $GITHUB_OUTPUT
+            fi
           elif [ -f "requirements.txt" ] || [ -f "pyproject.toml" ]; then
             echo "framework=python" >> $GITHUB_OUTPUT
             if [ -d "tests" ] || [ -d "test" ]; then echo "has_tests=true" >> $GITHUB_OUTPUT
             else echo "has_tests=false" >> $GITHUB_OUTPUT; fi
+            echo "has_lockfile=false" >> $GITHUB_OUTPUT
           elif [ -f "go.mod" ]; then
             echo "framework=go" >> $GITHUB_OUTPUT
             echo "has_tests=true" >> $GITHUB_OUTPUT
+            echo "has_lockfile=false" >> $GITHUB_OUTPUT
           else
             echo "framework=static" >> $GITHUB_OUTPUT
             echo "has_tests=false" >> $GITHUB_OUTPUT
+            echo "has_lockfile=false" >> $GITHUB_OUTPUT
           fi
-      
-      - name: Setup Node
-        if: contains(fromJSON('["nextjs","react","vue","node"]'), steps.detect.outputs.framework)
+
+      - name: Setup Node (with cache)
+        if: contains(fromJSON('["nextjs","react","vue","node"]'), steps.detect.outputs.framework) && steps.detect.outputs.has_lockfile == 'true'
         uses: actions/setup-node@v4
         with:
           node-version: '22'
           cache: 'npm'
-      
+
+      - name: Setup Node (no cache)
+        if: contains(fromJSON('["nextjs","react","vue","node"]'), steps.detect.outputs.framework) && steps.detect.outputs.has_lockfile == 'false'
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
       - name: Install & Build (Node)
         if: contains(fromJSON('["nextjs","react","vue","node"]'), steps.detect.outputs.framework)
         run: |
           npm ci --ignore-scripts 2>/dev/null || npm install
           npm run build --if-present
         continue-on-error: true
-      
+
       - name: Test (Node)
         if: contains(fromJSON('["nextjs","react","vue","node"]'), steps.detect.outputs.framework) && steps.detect.outputs.has_tests == 'true'
         run: npm test -- --passWithNoTests 2>/dev/null || npm test
@@ -77,7 +91,7 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: '3.12'
-      
+
       - name: Install & Test (Python)
         if: steps.detect.outputs.framework == 'python'
         run: |