v0.9.5

.github/workflows/release.yml

@@ -0,0 +1,204 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+    branches:
+      - nightly
+  workflow_dispatch:
+
+jobs:
+  ci-gate:
+    name: Wait for CI to pass on this ref
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Wait for CI workflow conclusion on ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          # Poll up to 60 minutes for the matching CI run on this SHA.
+          for i in $(seq 1 120); do
+            json="$(gh run list --workflow CI --commit "${GITHUB_SHA}" --limit 1 --json status,conclusion 2>/dev/null || echo '[]')"
+            count="$(echo "${json}" | jq 'length')"
+            if [ "${count}" -eq 0 ]; then
+              echo "[${i}/120] No CI run yet for ${GITHUB_SHA}"
+              sleep 30
+              continue
+            fi
+            status="$(echo "${json}" | jq -r '.[0].status')"
+            conclusion="$(echo "${json}" | jq -r '.[0].conclusion')"
+            if [ "${status}" = "completed" ]; then
+              if [ "${conclusion}" = "success" ]; then
+                echo "CI succeeded for ${GITHUB_SHA}."
+                exit 0
+              fi
+              echo "CI for ${GITHUB_SHA} completed with conclusion: ${conclusion}"
+              exit 1
+            fi
+            echo "[${i}/120] CI status=${status}"
+            sleep 30
+          done
+          echo "Timed out waiting for CI on ${GITHUB_SHA}."
+          exit 1
+
+  build:
+    name: Build ${{ matrix.os }}-${{ matrix.arch }}
+    needs: ci-gate
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        include:
+          - target: bun-darwin-arm64
+            os: darwin
+            arch: arm64
+          - target: bun-darwin-x64
+            os: darwin
+            arch: x64
+          - target: bun-linux-x64
+            os: linux
+            arch: x64
+          - target: bun-linux-arm64
+            os: linux
+            arch: arm64
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build TypeScript + embed assets
+        run: npm run build
+
+      - name: Cross-compile standalone binary for ${{ matrix.target }}
+        run: |
+          set -euo pipefail
+          bun build --compile --target=${{ matrix.target }} ./src/cli.ts --outfile "jaiph-${{ matrix.os }}-${{ matrix.arch }}"
+          ls -la "jaiph-${{ matrix.os }}-${{ matrix.arch }}"
+
+      - name: Upload binary artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: jaiph-${{ matrix.os }}-${{ matrix.arch }}
+          path: jaiph-${{ matrix.os }}-${{ matrix.arch }}
+          if-no-files-found: error
+          retention-days: 7
+
+  release:
+    name: Publish release assets
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Resolve tag and channel
+        id: meta
+        run: |
+          set -euo pipefail
+          case "${GITHUB_REF}" in
+            refs/tags/v*)
+              tag="${GITHUB_REF_NAME}"; channel="stable" ;;
+            refs/heads/nightly|refs/tags/nightly)
+              tag="nightly"; channel="nightly" ;;
+            *)
+              echo "Unsupported ref for release: ${GITHUB_REF}" >&2; exit 1 ;;
+          esac
+          echo "tag=${tag}" >> "${GITHUB_OUTPUT}"
+          echo "channel=${channel}" >> "${GITHUB_OUTPUT}"
+
+      - name: Download binary artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: release-assets
+          merge-multiple: true
+
+      - name: Generate SHA256SUMS
+        working-directory: release-assets
+        run: |
+          set -euo pipefail
+          ls -la
+          rm -f SHA256SUMS
+          sha256sum jaiph-darwin-arm64 jaiph-darwin-x64 jaiph-linux-x64 jaiph-linux-arm64 > SHA256SUMS
+          cat SHA256SUMS
+
+      - name: Sanity gate (linux-x64 --version)
+        working-directory: release-assets
+        run: |
+          set -euo pipefail
+          chmod +x jaiph-linux-x64
+          got="$(./jaiph-linux-x64 --version)"
+          echo "got: ${got}"
+          if [ "${{ steps.meta.outputs.channel }}" = "stable" ]; then
+            tag="${{ steps.meta.outputs.tag }}"
+            expected="jaiph ${tag#v}"
+            if [ "${got}" != "${expected}" ]; then
+              echo "Version sanity check failed: expected '${expected}', got '${got}'" >&2
+              exit 1
+            fi
+          else
+            if ! printf '%s\n' "${got}" | grep -Eq '^jaiph [0-9]+\.[0-9]+\.[0-9]+'; then
+              echo "Version sanity check failed: '${got}' does not look like a jaiph version" >&2
+              exit 1
+            fi
+          fi
+
+      - name: Publish stable release ${{ steps.meta.outputs.tag }}
+        if: steps.meta.outputs.channel == 'stable'
+        working-directory: release-assets
+        run: |
+          set -euo pipefail
+          tag="${{ steps.meta.outputs.tag }}"
+          if gh release view "${tag}" >/dev/null 2>&1; then
+            gh release upload "${tag}" --clobber \
+              jaiph-darwin-arm64 jaiph-darwin-x64 \
+              jaiph-linux-x64 jaiph-linux-arm64 \
+              SHA256SUMS
+          else
+            gh release create "${tag}" \
+              --title "${tag}" \
+              --notes "Jaiph ${tag} — standalone binaries (darwin/linux × arm64/x64) plus SHA256SUMS." \
+              jaiph-darwin-arm64 jaiph-darwin-x64 \
+              jaiph-linux-x64 jaiph-linux-arm64 \
+              SHA256SUMS
+          fi
+
+      - name: Publish nightly prerelease
+        if: steps.meta.outputs.channel == 'nightly'
+        working-directory: release-assets
+        run: |
+          set -euo pipefail
+          if gh release view nightly >/dev/null 2>&1; then
+            gh release upload nightly --clobber \
+              jaiph-darwin-arm64 jaiph-darwin-x64 \
+              jaiph-linux-x64 jaiph-linux-arm64 \
+              SHA256SUMS
+          else
+            gh release create nightly \
+              --title "Nightly" \
+              --notes "Rolling nightly prerelease — standalone binaries built from the latest \`nightly\` branch." \
+              --prerelease \
+              --target "${GITHUB_SHA}" \
+              jaiph-darwin-arm64 jaiph-darwin-x64 \
+              jaiph-linux-x64 jaiph-linux-arm64 \
+              SHA256SUMS
+          fi

.gitignore

@@ -9,6 +9,10 @@ docs/.bundle/
 dist/
 .tmp/
 
+# Generated by tools/embed-assets.js from package.json's `version` field, so
+# the CLI version lives in only one place in tree (package.json).
+src/version.ts
+
 # logs
 *.log
 npm-debug.log*

.jaiph/architect_review.jh

@@ -1,6 +1,7 @@
 #!/usr/bin/env jaiph
 
 import "jaiphlang/queue" as queue
+import "./lib_common.jh" as common
 
 config {
   agent.backend = "cursor"
@@ -10,29 +11,8 @@ config {
   # agent.claude_flags = "--permission-mode bypassPermissions"
 }
 
-script first_line_str = `printf '%s\n' "$1" | head -n 1`
-
-script rest_lines_str = `printf '%s\n' "$1" | tail -n +2`
-
-script arg_nonempty = `[ -n "$1" ]`
-
-script str_equals = `[ "$1" = "$2" ]`
-
-script mkdir_p_simple = `mkdir -p "$1"`
-
-script jaiph_tmp_dir = `printf '%s\n' "$JAIPH_WORKSPACE/.jaiph/tmp"`
-
 script jaiph_review_body_file = `printf '%s\n' "$JAIPH_WORKSPACE/.jaiph/tmp/architect_review_body.txt"`
 
-# Writes UTF-8 text to a path (path, then content).
-script save_string_to_file = ```python3
-import sys
-if len(sys.argv) < 3:
-    sys.exit(2)
-path, content = sys.argv[1], sys.argv[2]
-open(path, "w", encoding="utf-8").write(content)
-```
-
 # Packed as: first line = verdict, rest = updated_description (must stay top-level:
 # const … = prompt """…""" is not supported inside ensure … catch — see parseRecoverStatement).
 workflow architect_agent_review(task) {
@@ -93,31 +73,31 @@ workflow architect_agent_review(task) {
 }
 
 workflow review_one_header(header) {
-  run arg_nonempty(header) catch (err) {
+  run common.arg_nonempty(header) catch (err) {
     return ""
   }
   const task = run queue.get_task_by_header(header)
   ensure queue.task_is_dev_ready(task) catch (err) {
     const packed = run architect_agent_review(task)
-    const verdict = run first_line_str(packed)
-    const updated_description = run rest_lines_str(packed)
+    const verdict = run common.first_line_str(packed)
+    const updated_description = run common.rest_lines_str(packed)
     const body_file = run jaiph_review_body_file()
-    run mkdir_p_simple(run jaiph_tmp_dir())
-    run str_equals(verdict, "dev-ready") catch (err) {
-      run arg_nonempty(updated_description) catch (err) {
+    run common.mkdir_p_simple(run common.jaiph_tmp_dir())
+    run common.str_equals(verdict, "dev-ready") catch (err) {
+      run common.arg_nonempty(updated_description) catch (err) {
         fail "needs-work requires a non-empty updated_description (questions for the author)."
       }
-      run save_string_to_file(body_file, updated_description)
+      run common.save_string_to_file(body_file, updated_description)
       run queue.set_task_description_from_file(header, body_file)
       log "Needs work (description updated): ${header}"
       return ""
     }
-    run arg_nonempty(updated_description) catch (err) {
+    run common.arg_nonempty(updated_description) catch (err) {
       run queue.mark_task_dev_ready(header)
       log "Marked dev-ready: ${header}"
       return ""
     }
-    run save_string_to_file(body_file, updated_description)
+    run common.save_string_to_file(body_file, updated_description)
     run queue.set_task_description_from_file(header, body_file)
     run queue.mark_task_dev_ready(header)
     log "Marked dev-ready: ${header}"
@@ -128,25 +108,25 @@ workflow review_one_header(header) {
 
 workflow process_headers_recursive(header, remaining) {
   run review_one_header(header)
-  run arg_nonempty(remaining) catch (err) {
+  run common.arg_nonempty(remaining) catch (err) {
     return ""
   }
-  const next = run first_line_str(remaining)
-  const rest = run rest_lines_str(remaining)
+  const next = run common.first_line_str(remaining)
+  const rest = run common.rest_lines_str(remaining)
   run process_headers_recursive(next, rest)
 }
 
 workflow maybe_process_headers(first, rest) {
-  run arg_nonempty(first) catch (err) {
+  run common.arg_nonempty(first) catch (err) {
     return ""
   }
   run process_headers_recursive(first, rest)
 }
 
 workflow default() {
   const headers = run queue.get_all_task_headers()
-  const first = run first_line_str(headers)
-  const rest = run rest_lines_str(headers)
+  const first = run common.first_line_str(headers)
+  const rest = run common.rest_lines_str(headers)
   run maybe_process_headers(first, rest)
   ensure queue.all_dev_ready() catch (err) {
     fail "One or more tasks need work. Review the agent output above."