v0.12.0

.github/workflows/ci.yml

@@ -32,6 +32,39 @@ jobs:
           VERSION="$(node -p "require('./package.json').version")"
           git ls-remote --exit-code https://github.com/jaiphlang/jaiph.git "refs/tags/v${VERSION}"
 
+  k8s-manifest:
+    name: Validate Kubernetes deploy manifest
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # `kubectl apply --dry-run=client` still needs an API server for resource
+      # discovery (RESTMapper), so provision a throwaway kind cluster for it.
+      # The same cluster then backs the real deploy test below.
+      - name: Create kind cluster
+        uses: helm/kind-action@v1
+        with:
+          cluster_name: jaiph-e2e
+
+      # Fast schema gate — cheap, but only proves the manifest parses.
+      - name: Dry-run apply the standalone deploy manifest
+        run: kubectl apply --dry-run=client -f docs/deploy/k8s.yaml
+
+      - name: Build runtime image for the deploy test
+        run: docker build -t jaiph-e2e-runtime:local -f runtime/Dockerfile .
+
+      # Real deployment contract: external Secret gate, pod hardening
+      # (non-root, no privilege escalation, dropped caps, no SA token,
+      # read-only rootfs), an authenticated HTTP run, and its journal on the
+      # writable runs volume.
+      - name: Deploy and exercise the manifest on kind
+        run: |
+          JAIPH_E2E_SKIP_INSTALL=1 \
+          JAIPH_E2E_KIND_CLUSTER=jaiph-e2e \
+          JAIPH_E2E_DOCKER_IMAGE=jaiph-e2e-runtime:local \
+          bash e2e/tests/150_k8s_deploy.sh
+
   e2e:
     name: E2E (${{ matrix.os }}, ${{ matrix.label }})
     runs-on: ${{ matrix.os }}

.github/workflows/setup-jaiph-action.yml

@@ -0,0 +1,40 @@
+name: setup-jaiph action
+
+# Path-filtered so core PRs do not run this. Exercises the composite action from
+# this repo on the runners it advertises (Linux + macOS) against the nightly
+# release so it does not bitrot.
+on:
+  push:
+    paths:
+      - "actions/setup-jaiph/**"
+      - "docs/install"
+      - ".github/workflows/setup-jaiph-action.yml"
+
+jobs:
+  setup-jaiph:
+    name: Install nightly and run jaiph
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install jaiph
+        id: setup
+        uses: ./actions/setup-jaiph
+        with:
+          version: nightly
+
+      # jaiph must be on PATH for subsequent steps, and the action's output must
+      # match what the CLI reports directly.
+      - name: Verify jaiph is on PATH
+        shell: bash
+        run: |
+          which jaiph
+          got="$(jaiph --version)"
+          echo "on PATH: ${got}"
+          echo "action output: ${{ steps.setup.outputs.version }}"
+          [ "${got}" = "${{ steps.setup.outputs.version }}" ]

.github/workflows/vscode-plugin.yml

@@ -0,0 +1,43 @@
+name: VS Code plugin
+
+# Path-filtered so core PRs do not rebuild the extension by default. Runs when
+# the plugin tree changes, or when the compile command it depends on changes
+# (the diagnostics tests invoke the real `jaiph compile --json` contract).
+on:
+  push:
+    paths:
+      - "plugins/vscode/**"
+      - "src/cli/commands/compile.ts"
+      - ".github/workflows/vscode-plugin.yml"
+
+jobs:
+  vscode-plugin:
+    name: Compile, grammar & diagnostics tests, package
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+
+      # The plugin's diagnostics tests run the real monorepo CLI, so build it.
+      - name: Build the jaiph CLI
+        run: |
+          npm ci
+          npm run build
+
+      - name: Install plugin dependencies
+        run: npm ci
+        working-directory: plugins/vscode
+
+      - name: Typecheck, compile, grammar & diagnostics tests
+        run: npm test
+        working-directory: plugins/vscode
+
+      - name: Package the extension
+        run: npm run package
+        working-directory: plugins/vscode

.github/workflows/zed-plugin.yml

@@ -0,0 +1,33 @@
+name: Zed plugin
+
+# Path-filtered so core PRs do not rebuild the extension by default. Runs when
+# the Zed extension tree or the Tree-sitter grammar it pins changes.
+on:
+  push:
+    paths:
+      - "plugins/zed/**"
+      - "grammars/tree-sitter-jaiph/**"
+      - ".github/workflows/zed-plugin.yml"
+
+jobs:
+  zed-plugin:
+    name: Grammar generate & highlight query-check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install plugin dependencies
+        run: npm install
+        working-directory: plugins/zed
+
+      # Regenerates the grammar from grammar.js and query-checks the shipped
+      # highlights.scm / injections.scm against the fixtures.
+      - name: Grammar & highlight query-check
+        run: npm test
+        working-directory: plugins/zed

.gitignore

@@ -29,8 +29,10 @@ jaiph.key
 
 # OS/editor files
 .DS_Store
-.vscode/
+# Only the repo-root editor folder — do not blanket-ignore plugins/vscode/.vscode/
+/.vscode/
 *.swp
+*.vsix
 
 .jaiph/runs/
 .jaiph/*.jaiph.map

.jaiph/docs_parity.jh

@@ -2,7 +2,7 @@
 
 config {
   agent.backend = "claude"
-  agent.model = "opus"
+  agent.model = "fable"
   agent.claude_flags = "--permission-mode bypassPermissions"
 }