Realse v0.2.0

.github/workflows/ci.yml

@@ -37,9 +37,22 @@ jobs:
         run: cargo fmt --check
       - name: clippy
         run: cargo clippy --all-targets -- -D warnings
-      - name: 'test (unix: full suite incl. native legs)'
-        if: runner.os != 'Windows'
-        run: cargo test --all
+      - name: 'test (PR: fast suite — VM legs only)'
+        if: runner.os != 'Windows' && github.event_name == 'pull_request'
+        # PR signal in minutes: unit + e2e (VM) + VM-only parity.
+        run: ./scripts/test-fast.sh
+      - name: 'test (PR: batched native parity)'
+        if: runner.os != 'Windows' && github.event_name == 'pull_request'
+        # All batchable strict fixtures' native legs in ~4 clang builds
+        # (same programs, same flags, demuxed per file). Individuals run
+        # VM-only inside test-fast.sh above.
+        run: ZZ_BATCH_NATIVE=1 cargo test -p zz_cli --test batched_parity
+      - name: 'test (merge: full suite, strict natives via batch)'
+        if: runner.os != 'Windows' && github.event_name != 'pull_request'
+        # `ZZ_BATCH_NATIVE=1`: strict-success natives run batched
+        # (same programs, same flags); quad, error, and known-failure
+        # natives stay individual. Full coverage, no duplicated builds.
+        run: ZZ_BATCH_NATIVE=1 cargo test --all
       - name: 'test (windows: VM-only, native backend unsupported)'
         if: runner.os == 'Windows'
         # The native backend is POSIX/Linux-only (epoll/fork AOT server, no

.github/workflows/docker-publish.yml

@@ -19,6 +19,11 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      version:
+        description: "Version to package without leading v (default: Cargo.toml; needed to rebuild an older tag's image)"
+        required: false
+        default: ""
 
 env:
   CARGO_TERM_COLOR: always
@@ -41,6 +46,8 @@ jobs:
         run: |
           if [ "${{ github.event_name }}" = "release" ]; then
             TAG="${{ github.event.release.tag_name }}"
+          elif [ -n "${{ inputs.version }}" ]; then
+            TAG="v${{ inputs.version }}"
           else
             # Manual dispatch: version comes from the tree (normally main).
             TAG="v$(grep -m1 '^version = ' Cargo.toml | cut -d'"' -f2)"

.github/workflows/release.yml

@@ -12,8 +12,17 @@ name: release
 # dispatch. Push-to-main is deliberately NOT a trigger: every merge
 # already ran CI, and re-running here would duplicate it.
 #
+# Downstream trigger contract: docker-publish and aur-publish listen for
+# `release: published`, and GitHub does NOT fire that event when the
+# Release is created with GITHUB_TOKEN (token-authenticated API activity
+# never triggers new workflow runs — anti-recursion rule). So the tag +
+# Release below are created with a user PAT (`RELEASE_TOKEN` secret,
+# Contents read+write on this repo). Without it the Release still cuts
+# fine, but docker/AUR will never fire — check the step logs for the
+# explicit warning.
+#
 # Flow: resolve version -> skip if released -> sync Cargo.lock ->
-# build zips (x86_64 + aarch64, in parallel) -> create Release WITH
+# build zips (linux + macos, in parallel) -> create Release WITH
 # the zips attached (single shot, so `release: published` consumers
 # never see a half-ready Release).
 #
@@ -148,22 +157,30 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   build-assets:
-    name: build release zip (${{ matrix.ziparch }})
+    name: build release zip (${{ matrix.os }}-${{ matrix.arch }})
     needs: [cut]
     # Same CI gate as `cut` (a skipped `cut` leaves `skip` empty, which
     # `!= 'true'` would wrongly pass — belt and suspenders).
     if: ${{ (github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success') && needs.cut.outputs.skip != 'true' }}
     runs-on: ${{ matrix.runner }}
     strategy:
-      # One arch failing must not cancel the other: we want both logs.
+      # One target failing must not cancel the others: we want all logs.
       # The publish step refuses to cut the Release with a zip missing.
       fail-fast: false
       matrix:
         include:
-          - ziparch: x86_64
+          - os: linux
+            arch: x86_64
             runner: ubuntu-latest
-          - ziparch: aarch64
+          - os: linux
+            arch: aarch64
             runner: ubuntu-24.04-arm
+          - os: macos
+            arch: aarch64
+            runner: macos-14
+          - os: macos
+            arch: x86_64
+            runner: macos-13
     steps:
       - uses: actions/checkout@v4
         with:
@@ -172,8 +189,12 @@ jobs:
           ref: main
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
-      - name: install native deps
+      - name: install native deps (linux)
+        if: matrix.os == 'linux'
         run: sudo apt-get update && sudo apt-get install -y clang libcurl4-openssl-dev libsqlite3-dev zip unzip
+      - name: install native deps (macos)
+        if: matrix.os == 'macos'
+        run: brew install zip unzip
       - name: build + zip
         run: |
           PKGVER="${{ needs.cut.outputs.pkgver }}"
@@ -187,8 +208,12 @@ jobs:
           cargo build --release --locked -p zz_cli -p zz_lsp
           ./target/release/zz --version
           test -x ./target/release/zz-lsp
-          strip target/release/zz target/release/zz-lsp
-          ZIP="zz-$PKGVER-linux-${{ matrix.ziparch }}.zip"
+          if [ "${{ matrix.os }}" = "macos" ]; then
+            strip -x target/release/zz target/release/zz-lsp
+          else
+            strip target/release/zz target/release/zz-lsp
+          fi
+          ZIP="zz-$PKGVER-${{ matrix.os }}-${{ matrix.arch }}.zip"
           rm -rf dist "$ZIP"
           mkdir -p dist
           cp target/release/zz target/release/zz-lsp LICENSE README.md dist/
@@ -197,7 +222,7 @@ jobs:
       - name: upload zip artifact
         uses: actions/upload-artifact@v4
         with:
-          name: release-zip-${{ matrix.ziparch }}
+          name: release-zip-${{ matrix.os }}-${{ matrix.arch }}
           path: zz-*.zip
           if-no-files-found: error
 
@@ -217,6 +242,13 @@ jobs:
         with:
           pattern: release-zip-*
           merge-multiple: true
+      - name: resolve release token
+        run: |
+          if [ -z "${{ secrets.RELEASE_TOKEN }}" ]; then
+            echo "::warning::RELEASE_TOKEN secret is not set — falling back to GITHUB_TOKEN. The Release will cut, but docker-publish/aur-publish will NOT trigger (GitHub suppresses workflow runs from token-created releases). Add a PAT with Contents read+write as RELEASE_TOKEN to enable the chain."
+          else
+            echo "using RELEASE_TOKEN (user PAT): downstream release workflows will trigger"
+          fi
       - name: create tag + release with assets (if missing)
         run: |
           TAG="${{ needs.cut.outputs.tag }}"
@@ -233,14 +265,21 @@ jobs:
           fi
           ls -la zz-*.zip
           test -f "zz-${{ needs.cut.outputs.pkgver }}-linux-x86_64.zip" \
-            || { echo "error: x86_64 zip missing, refusing half-ready release." >&2; exit 1; }
+            || { echo "error: linux x86_64 zip missing, refusing half-ready release." >&2; exit 1; }
           test -f "zz-${{ needs.cut.outputs.pkgver }}-linux-aarch64.zip" \
-            || { echo "error: aarch64 zip missing, refusing half-ready release." >&2; exit 1; }
+            || { echo "error: linux aarch64 zip missing, refusing half-ready release." >&2; exit 1; }
+          test -f "zz-${{ needs.cut.outputs.pkgver }}-macos-aarch64.zip" \
+            || { echo "error: macos aarch64 zip missing, refusing half-ready release." >&2; exit 1; }
+          test -f "zz-${{ needs.cut.outputs.pkgver }}-macos-x86_64.zip" \
+            || { echo "error: macos x86_64 zip missing, refusing half-ready release." >&2; exit 1; }
           gh release create "$TAG" \
             --target "main" \
             --title "$TAG" \
             --generate-notes \
             zz-*.zip
           echo "created release $TAG with prebuilt zips"
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # User PAT when present so the `release: published` event is
+          # genuine and downstream workflows fire; GITHUB_TOKEN fallback
+          # cuts the Release but triggers nothing (see warning above).
+          GH_TOKEN: ${{ secrets.RELEASE_TOKEN != '' && secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}

.gitignore

@@ -16,6 +16,10 @@ bench/native/bench_loop
 bench/native/bench_str
 bench/native/_go/main
 bench/native/.bin
+# move-append elision harness: generated corpus + built binaries
+# (regenerate deterministically via gen_corpus.py, seed 7)
+bench/move_append/corpus/
+bench/move_append/bin/
 bench/native/categories/*
 !bench/native/categories/*.zz
 benchmarks/arena_bench
@@ -33,3 +37,5 @@ bench/performance_check/RESULTS.md
 # AUR render output (local only, CI regenerates per release)
 packaging/aur/out/
 packaging/aur/tmp/
+
+tests/fuzz/__pycache__/

CONTRIBUTING.md

@@ -0,0 +1,51 @@
+# Contributing to ZZ
+
+Thanks for helping. Keep it simple.
+
+## Setup
+
+```bash
+git clone https://github.com/zaidejjo/zz
+cd zz
+cargo install --path crates/zz_cli
+```
+
+Requires stable Rust.
+
+## Workflow
+
+```bash
+cargo test -p zz_frontend     # single crate, fast loop
+./scripts/test-fast.sh        # fast suite (skips native legs + plugin e2e)
+cargo test --all              # full suite (slow, CI equivalent)
+cargo clippy --all-targets -- -D warnings
+cargo fmt --check
+```
+
+CI enforces zero clippy warnings and clean `cargo fmt`.
+
+## PRs
+
+1. Fork, branch from `main`, keep the diff focused.
+2. Add a `.zz` fixture under `tests/fixtures/` for user-facing changes and register it in `crates/zz_cli/tests/e2e.rs`.
+3. Update docs on the website repo when behavior changes.
+4. Make sure tests, clippy, and fmt pass before requesting review.
+
+## Project layout
+
+```
+zz_frontend → zz_checker → zz_stdlib → zz_cli
+                   |                       |
+                   v                       v
+             zz_runtime ──────────────→ zz_lsp
+```
+
+- `zz_frontend`: lexer, parser, AST, formatter.
+- `zz_checker`: type checker with inference.
+- `zz_runtime`: interpreter + VM.
+- `zz_stdlib`: native functions (keep `funcs.rs` type signatures and `natives.rs` implementations in sync).
+- `zz_cli`: `zz` binary. `zz_lsp`: `zz-lsp` binary.
+
+## License
+
+By contributing you agree your changes are Apache-2.0 licensed.

Cargo.toml

@@ -1,9 +1,9 @@
 [workspace]
 resolver = "2"
-members = ["crates/zz_frontend", "crates/zz_checker", "crates/zz_hir", "crates/zz_runtime", "crates/zz_stdlib", "crates/zz_codegen", "crates/zz_cli", "crates/zz_fmt", "crates/zz_lsp", "crates/zz_native_rt", "crates/zz_pm", "crates/zz_plugin"]
+members = ["crates/zz_frontend", "crates/zz_checker", "crates/zz_hir", "crates/zz_arena", "crates/zz_runtime", "crates/zz_ir", "crates/zz_stdlib", "crates/zz_codegen", "crates/zz_cli", "crates/zz_fmt", "crates/zz_lsp", "crates/zz_native_rt", "crates/zz_pm", "crates/zz_plugin"]
 
 [workspace.package]
-version = "0.1.6"
+version = "0.2.0"
 edition = "2021"
 license = "Apache-2.0"
 
@@ -18,6 +18,7 @@ dirs = "6"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 tar = "0.4"
+lzma-rs = "0.3"
 flate2 = "1"
 ureq = "3"
 base64 = "0.22"