Skip to content

Commit 574534f

Browse files
hyperpolymathhyperpolymath
authored
Merge branch 'main' into fix/empty-linter-pattern-never-matched
2 parents 5f992d9 + c341429 commit 574534f

63 files changed

Lines changed: 1439 additions & 266 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.claude/CLAUDE.md‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -107,8 +107,8 @@ package definitions (not metadata files) and must NOT be deleted.
107107
| **Chapel** | Optional parallel proof dispatch | Wired via Cargo `chapel` feature |
108108
| **Guile Scheme** | Guix package definitions (`guix.scm`, `manifests/*.scm`) | `.scm` metadata files are deprecated — see below |
109109
| **Bash/POSIX Shell** | Build scripts, CI glue | Keep minimal |
110-
| **AffineScript** | UI components (TEA architecture, compiled to typed-wasm / wasm, served via Deno) | Replaces AffineScript per `docs/ROADMAP.md`; migration in progress at `src/affinescript/` |
111-
| **Bun** | Runtime for compiled AffineScript-TEA UI | Replaces Node/npm/Deno |
110+
| **AffineScript** | TEA sources in `src/ui/tea/`; static shell in `src/ui/public/` | The compile pipeline is unavailable; `build-ui` fails explicitly |
111+
| **Bun** | Estate JavaScript runtime | The legacy serve recipes still require migration; open `src/ui/public/prove.html` directly for the working static UI |
112112
| **JavaScript** | Build tooling only (Tailwind config, test harness) | Not for business logic |
113113
| **OCaml** | AffineScript compiler host | Decision locked — AffineScript selected for UI |
114114
| **Nickel** | Configuration language | Used across `configs/`, `echidna-playground/contractiles/k9/`, `.machine_readable/`, `echidnabot/config/` (11+ `.ncl` files) |
@@ -127,7 +127,7 @@ package definitions (not metadata files) and must NOT be deleted.
127127

128128
### Enforcement Rules
129129

130-
1. **No new TypeScript or ReScript files** - Use AffineScript-TEA; migrate existing `src/affinescript/` to AffineScript per `docs/ROADMAP.md`
130+
1. **No new TypeScript or ReScript files** - Use AffineScript-TEA sources in `src/ui/tea/`; the compiled UI pipeline is not yet wired
131131
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
132132
3. **`bun install --production --frozen-lockfile` for production deps** - resolved from `package.json` and pinned via `bun.lock`; `--frozen-lockfile` makes a lockfile mismatch a build failure rather than a silent re-resolve
133133
4. **No Go code** - Use Rust instead

‎.github/workflows/actions.lock‎

Lines changed: 23 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ workflows:
1313
- 'actions/checkout@v7.0.1'
1414
'.github/workflows/cargo-audit.yml':
1515
- 'actions/checkout@v7.0.1'
16-
- 'dtolnay/rust-toolchain@stable'
16+
- 'dtolnay/rust-toolchain@master'
1717
'.github/workflows/cflite_batch.yml':
1818
- 'google/clusterfuzzlite@v1'
1919
'.github/workflows/cflite_pr.yml':
@@ -22,7 +22,7 @@ workflows:
2222
- 'actions/checkout@v7.0.1'
2323
- 'actions/download-artifact@v8.0.1'
2424
- 'actions/upload-artifact@v7.0.1'
25-
- 'dtolnay/rust-toolchain@stable'
25+
- 'dtolnay/rust-toolchain@master'
2626
- 'mlugg/setup-zig@v2.2.1'
2727
- 'swatinem/rust-cache@v2.9.2'
2828
'.github/workflows/codeql.yml':
@@ -36,7 +36,7 @@ workflows:
3636
- 'actions/checkout@v7.0.1'
3737
'.github/workflows/formal-verification.yml':
3838
- 'actions/checkout@v7.0.1'
39-
- 'dtolnay/rust-toolchain@stable'
39+
- 'dtolnay/rust-toolchain@master'
4040
- 'swatinem/rust-cache@v2.9.2'
4141
'.github/workflows/generator-generic-ossf-slsa3-publish.yml':
4242
- 'actions/checkout@v7.0.1'
@@ -51,30 +51,38 @@ workflows:
5151
'.github/workflows/labels.yml': []
5252
'.github/workflows/live-provers.yml':
5353
- 'actions/checkout@v7.0.1'
54-
- 'dtolnay/rust-toolchain@stable'
54+
- 'dtolnay/rust-toolchain@master'
5555
- 'swatinem/rust-cache@v2.9.2'
5656
'.github/workflows/mirror.yml': []
5757
'.github/workflows/mvp-smoke.yml':
5858
- 'actions/checkout@v7.0.1'
59-
- 'dtolnay/rust-toolchain@stable'
59+
- 'dtolnay/rust-toolchain@master'
6060
- 'swatinem/rust-cache@v2.9.2'
6161
- 'taiki-e/install-action@v2.86.4'
6262
'.github/workflows/pages.yml':
6363
- 'actions/checkout@v7.0.1'
6464
- 'actions/deploy-pages@v5.0.0'
6565
- 'actions/upload-pages-artifact@v5.0.0'
66+
'.github/workflows/proof-safety.yml':
67+
- 'actions/checkout@v7.0.1'
68+
- 'swatinem/rust-cache@v2.9.2'
6669
'.github/workflows/rust-ci.yml': []
70+
'.github/workflows/rust-native-reusable.yml':
71+
- 'actions/checkout@v7.0.1'
72+
- 'dtolnay/rust-toolchain@master'
73+
- 'goto-bus-stop/setup-zig@v2.2.1'
74+
- 'swatinem/rust-cache@v2.9.2'
6775
'.github/workflows/s4-loop.yml':
6876
- 'actions/checkout@v7.0.1'
69-
- 'dtolnay/rust-toolchain@stable'
77+
- 'dtolnay/rust-toolchain@master'
7078
- 'swatinem/rust-cache@v2.9.2'
7179
- 'taiki-e/install-action@v2.86.4'
7280
'.github/workflows/scorecard.yml': []
7381
'.github/workflows/secret-scanner.yml': []
7482
'.github/workflows/security-scan.yml': []
7583
'.github/workflows/server-boot-gate.yml':
7684
- 'actions/checkout@v7.0.1'
77-
- 'dtolnay/rust-toolchain@stable'
85+
- 'dtolnay/rust-toolchain@master'
7886
- 'swatinem/rust-cache@v2.9.2'
7987
'.github/workflows/spark-theatre-gate.yml': []
8088
'.github/workflows/verification-proofs-cron.yml':
@@ -131,9 +139,9 @@ dependencies:
131139
repo_id: 496012378
132140
uses:
133141
- 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
134-
'dtolnay/rust-toolchain@stable':
135-
ref: 'stable'
136-
commit: 'sha1-4360b52568e2003a75bf9bc1d59f33a8e3fc893c'
142+
'dtolnay/rust-toolchain@master':
143+
ref: 'master'
144+
commit: 'sha1-d1031067263f94b142dd6c0ce24c5eb9d02d52a0'
137145
owner_id: 1940490
138146
repo_id: 260749683
139147
'github/codeql-action@v4.37.7':
@@ -146,6 +154,11 @@ dependencies:
146154
commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1'
147155
owner_id: 1342004
148156
repo_id: 400046858
157+
'goto-bus-stop/setup-zig@v2.2.1':
158+
ref: 'v2.2.1'
159+
commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406'
160+
owner_id: 1006268
161+
repo_id: 212984112
149162
'haskell-actions/setup@v2.12.0':
150163
ref: 'v2.12.0'
151164
commit: 'sha1-6037f33647c3f17758a2356c80fc4a53d7e0685d'

‎.github/workflows/agda-meta-checker.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
# CI workflow for ECHIDNA Agda meta-checker
56
# Type-checks all formal proofs verifying trust pipeline correctness
67

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
name: BoJ Server Build Trigger
56
on:
67
push:

‎.github/workflows/bridge-gate.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
# Copyright (c) 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
56
#
67
# bridge-gate.yml -- merge-orchestration CVE/bump gate.

‎.github/workflows/cargo-audit.yml‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
56
#
67
# cargo-audit.yml — Dependency vulnerability scanning for Rust projects.
@@ -47,7 +48,9 @@ jobs:
4748
4849
- name: Install Rust toolchain
4950
if: steps.detect.outputs.present == 'true'
50-
uses: dtolnay/rust-toolchain@stable
51+
uses: dtolnay/rust-toolchain@master
52+
with:
53+
toolchain: stable
5154

5255
- name: Install cargo-audit
5356
if: steps.detect.outputs.present == 'true'

‎.github/workflows/cflite_batch.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
name: ClusterFuzzLite batch fuzzing
56
on:
67
schedule:

‎.github/workflows/cflite_pr.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
name: ClusterFuzzLite PR fuzzing
56
on:
67
pull_request:

‎.github/workflows/chapel-ci.yml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,5 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
3-
# This workflow is managed by gh actions-lock.
43
name: Chapel Accelerator CI
54

65
on:
@@ -149,7 +148,7 @@ jobs:
149148
- uses: actions/checkout@v7.0.1
150149

151150
- name: Install Rust toolchain
152-
uses: dtolnay/rust-toolchain@stable
151+
uses: dtolnay/rust-toolchain@master
153152
with:
154153
toolchain: stable
155154

@@ -203,7 +202,7 @@ jobs:
203202
version: 0.14.0
204203

205204
- name: Install Rust
206-
uses: dtolnay/rust-toolchain@stable
205+
uses: dtolnay/rust-toolchain@master
207206
with:
208207
toolchain: stable
209208

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
# SPDX-License-Identifier: AGPL-3.0-or-later
22
# This workflow is managed by gh actions-lock.
33
# This workflow is managed by gh actions-lock.
4+
# This workflow is managed by gh actions-lock.
45
name: CodeQL Security Analysis
56

67
on:

0 commit comments

Comments
 (0)