.github/workflows: add Blacksmith testbox configuration

[carderne]

Blacksmith Testboxes let your agents run CI against local changes, instantly.

This PR adds .github/workflows/code-quality-testbox.yml and the blacksmith-testbox agent skill (.claude/skills/blacksmith-testbox/SKILL.md).

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2975adb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: ee87b5b1-0b33-41b1-99a5-93a7e92079f9

📥 Commits

Reviewing files that changed from the base of the PR and between 0119cf8 and 2975adb.

📒 Files selected for processing (2)

• .claude/skills/blacksmith-testbox/SKILL.md
• .github/workflows/code-quality-testbox.yml

---

Walkthrough

A new Markdown skill document is added at .claude/skills/blacksmith-testbox/SKILL.md covering the full Blacksmith Testbox CLI workflow: installation, non-interactive authentication, warmup, run, download, delta-sync behavior, readiness/polling, and testbox lifecycle management. A companion GitHub Actions workflow .github/workflows/code-quality-testbox.yml is added that triggers on manual dispatch (with a required testbox_id input) and on pull requests touching workflow files, running formatting (oxfmt) and linting (oxlint) checks inside a Testbox session.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch blacksmith-testbox-18bd8bfc9ef1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thanks for your contribution! We require all external PRs to be opened in draft status first so you can address CodeRabbit review comments and ensure CI passes before requesting a review. Please re-open this PR as a draft. See CONTRIBUTING.md for details.

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🚩 Workflow triggers on all workflow file changes, not just its own

The pull_request trigger at .github/workflows/code-quality-testbox.yml:10-11 uses paths: '.github/workflows/**', meaning any PR that modifies any workflow file (not just this one) will trigger this testbox workflow. This is likely intentional to validate the testbox workflow itself stays functional, but it does add an extra CI job to every workflow-touching PR. The existing code-quality.yml is a workflow_call (reusable workflow) so it doesn't have this path-trigger pattern to compare against.

---

Was this helpful? React with 👍 or 👎 to provide feedback.