Fix GraphQL query issue and add strict checks

Author: fatalcoder524

.github/actions/action.yml

@@ -610,8 +610,8 @@ runs:
           
           # Determine which SUSFS ref to use
           KERNEL_KEY="${{ env.ANDROID_VER }}-${{ env.KERNEL_VER }}"
-          if [ -z "$SUSFS_INPUT" ] || [ "$SUSFS_INPUT" = "next" ] || [ "$SUSFS_INPUT" = "unknown" ]; then
-            # Empty, "next" or "unknown": use kernel-specific default
+          if [ -z "$SUSFS_INPUT" ]; then
+            # use kernel-specific default
             SUSFS_BRANCH="${DEFAULT_SUSFS[$KERNEL_KEY]:-gki-android15-6.6}"
             echo "ℹ️  Using default SUSFS branch for $KERNEL_KEY: $SUSFS_BRANCH"
           else

.github/workflows/build-kernel-release.yml

@@ -190,7 +190,7 @@ jobs:
             repository(owner: $owner, name: $name) {
               hb: ref(qualifiedName: "refs/heads/" $ref) { t: target { ... on Commit { o: oid } } }
               ht: ref(qualifiedName: "refs/tags/" $ref) { t: target { ... on Commit { o: oid } } }
-              hr: ref(qualifiedName: $ref) { t: target { ... on Commit { o: oid } } }
+              ho: object(expression: $ref) { ... on Commit { o: oid } }
             }
           }'
           
@@ -215,24 +215,18 @@ jobs:
           done
           
           if [ $RETRY_COUNT -eq $MAX_RETRIES ]; then
-            echo "::error::Failed to resolve $ksu_type hash after $MAX_RETRIES attempts."
-            # Optional: Fallback to passthrough if it looks like a SHA, otherwise fail
-            if [[ "$ksu_ref" =~ ^[0-9a-f]{40}$ ]]; then
-              resolved_sha="$ksu_ref"
-            else
-              exit 1
-            fi
-          else
-            # 6. Parse result if successful
-            resolved_sha=$(echo "$RESULT" | jq -r '.data.repository | (.hb.t.o // .ht.t.o // .hr.t.o // "unknown")')
+            echo "::error::GitHub API unreachable. Cannot validate $ksu_ref"
+            exit 1
           fi
           
-          if [[ "$resolved_sha" == "unknown" && "$ksu_ref" =~ ^[0-9a-f]{40}$ ]]; then
-            resolved_sha="$ksu_ref"
+          resolved_sha=$(echo "$RESULT" | jq -r '.data.repository | (.hb.t.o // .ht.t.o // .ho.o // "unknown")')
+          
+          if [ "$resolved_sha" == "unknown" ]; then
+            echo "::error::Ref/Hash '$ksu_ref' does not exist in $KSU_REPO_OWNER/$KSU_REPO_NAME"
+            exit 1
           fi
           
           echo "  ✅ Resolved: $ksu_type/$ksu_ref → $resolved_sha"
-          
           echo "ksu_resolved_hash=$resolved_sha" >> "$GITHUB_OUTPUT"