release: development → main (OG fix + MCP/CLI Eden + foundation refactors)

.bun-version

@@ -0,0 +1 @@
+1.3.14

.github/workflows/builds.yml

@@ -0,0 +1,310 @@
+name: Builds
+
+# Build packrat apps on every PR. Currently web only (guides + landing); native
+# builds (Expo / macOS) may slot in here later under the same workflow.
+#
+# Gives us inspectable build signal (post counts, OG image counts, `out/`
+# artifact) independent of the Cloudflare Pages dashboard, so a stale
+# `lib/content.ts` or a missing OG image surfaces directly in PR checks.
+#
+# Each job:
+#   1. Installs deps with the private @packrat-ai/nativewindui token.
+#   2. Runs `bun run --cwd apps/<name> build`.
+#   3. Surfaces post count + OG image count + `out/` size as a GitHub Step
+#      Summary so reviewers see it without clicking through to logs.
+#   4. Uploads `out/` as a downloadable artifact (7-day retention).
+
+on:
+  pull_request:
+    branches: ['**']
+    paths:
+      - 'apps/guides/**'
+      - 'apps/landing/**'
+      - 'packages/web-ui/**'
+      - 'package.json'
+      - 'bun.lock'
+      - '.github/workflows/builds.yml'
+  push:
+    branches: ['main', 'development']
+    paths:
+      - 'apps/guides/**'
+      - 'apps/landing/**'
+      - 'packages/web-ui/**'
+      - 'package.json'
+      - 'bun.lock'
+      - '.github/workflows/builds.yml'
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  guides:
+    name: Builds (guides)
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        env:
+          PACKRAT_NATIVEWIND_UI_GITHUB_TOKEN: ${{ secrets.PACKRAT_NATIVEWIND_UI_GITHUB_TOKEN }}
+        run: bun install --frozen-lockfile
+
+      - name: Build guides app
+        id: build
+        run: |
+          set -o pipefail
+          bun run --cwd apps/guides build 2>&1 | tee /tmp/guides-build.log
+
+      - name: Validate OG meta in built HTML
+        # Parse out/index.html + every out/guide/<slug>.html and assert the
+        # OG / Twitter meta tags expected by social previewers (LinkedIn,
+        # FB, microlink). A regression here — missing meta tag, relative
+        # og:image, wrong twitter:card — fails the workflow before the
+        # artifact is uploaded so reviewers see the failure on the PR check.
+        run: bun run --cwd apps/guides test:og-meta
+
+      - name: Lighthouse CI
+        # Runs `lhci autorun` against the already-built `out/` directory
+        # (staticDistDir in .lighthouserc.js). Error pages (404/500) are
+        # excluded via assertMatrix. Real failures fail the workflow so
+        # regressions are caught at PR time.
+        id: lhci
+        run: bun run --cwd apps/guides lighthouse:ci 2>&1 | tee /tmp/guides-lhci.log
+
+      - name: Summarize Lighthouse scores
+        if: always()
+        run: |
+          set -euo pipefail
+          LOG=/tmp/guides-lhci.log
+          {
+            echo ""
+            echo "## Guides Lighthouse CI"
+            echo ""
+            if [ -f "$LOG" ]; then
+              if grep -q "All results processed!" "$LOG" 2>/dev/null; then
+                echo '<details><summary>LHCI output (tail)</summary>'
+                echo ''
+                echo '```'
+                tail -n 80 "$LOG"
+                echo '```'
+                echo '</details>'
+              else
+                echo '> LHCI did not finish cleanly — see job log.'
+                echo ''
+                echo '```'
+                tail -n 60 "$LOG" 2>/dev/null || echo '(no log)'
+                echo '```'
+              fi
+            else
+              echo '> No LHCI log captured.'
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Summarize build output
+        if: always()
+        run: |
+          set -euo pipefail
+          GUIDES_DIR="apps/guides"
+          OUT_DIR="${GUIDES_DIR}/out"
+          OG_DIR="${GUIDES_DIR}/public/og"
+          CONTENT_FILE="${GUIDES_DIR}/lib/content.ts"
+          POSTS_DIR="${GUIDES_DIR}/content/posts"
+
+          mdx_count=$(find "$POSTS_DIR" -maxdepth 1 -name '*.mdx' 2>/dev/null | wc -l | tr -d ' ')
+          content_count=0
+          if [ -f "$CONTENT_FILE" ]; then
+            # Tolerate both `slug:` and `"slug":` shapes — build-content has emitted both.
+            content_count=$(grep -cE '^[[:space:]]+"?slug"?[[:space:]]*:' "$CONTENT_FILE" || true)
+          fi
+          og_count=0
+          if [ -d "$OG_DIR" ]; then
+            og_count=$(find "$OG_DIR" -maxdepth 1 -name '*.png' 2>/dev/null | wc -l | tr -d ' ')
+          fi
+          out_size="(missing)"
+          out_html=0
+          if [ -d "$OUT_DIR" ]; then
+            out_size=$(du -sh "$OUT_DIR" 2>/dev/null | cut -f1)
+            out_html=$(find "$OUT_DIR" -maxdepth 3 -name '*.html' 2>/dev/null | wc -l | tr -d ' ')
+          fi
+          root_og="missing"
+          if [ -f "${GUIDES_DIR}/public/og-image.png" ]; then
+            root_og="ok ($(stat -c%s "${GUIDES_DIR}/public/og-image.png" 2>/dev/null || stat -f%z "${GUIDES_DIR}/public/og-image.png") bytes)"
+          fi
+
+          {
+            echo "## Guides build summary"
+            echo ""
+            echo "| Metric | Value |"
+            echo "|---|---|"
+            echo "| MDX source files (\`content/posts/*.mdx\`) | $mdx_count |"
+            echo "| Posts in \`lib/content.ts\` | $content_count |"
+            echo "| Per-post OG PNGs (\`public/og/*.png\`) | $og_count |"
+            echo "| Root \`public/og-image.png\` | $root_og |"
+            echo "| Static HTML pages in \`out/\` | $out_html |"
+            echo "| \`out/\` directory size | $out_size |"
+            echo ""
+            if [ "$mdx_count" -gt 0 ] && [ "$content_count" -lt "$mdx_count" ]; then
+              echo "> WARNING: \`lib/content.ts\` reports fewer posts than there are MDX files on disk."
+              echo "> This indicates \`build-content\` did not run (or ran before MDX changes were committed)."
+              echo "> See PR #2436."
+            fi
+            if [ "$mdx_count" -gt 0 ] && [ "$og_count" -lt "$mdx_count" ]; then
+              echo "> WARNING: fewer OG images than MDX files — \`generate-og-images\` may have read a stale \`lib/content.ts\`."
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload Lighthouse reports (guides)
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: guides-lighthouse
+          path: apps/guides/.lighthouseci
+          retention-days: 14
+          if-no-files-found: warn
+
+      - name: Upload guides static export
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: guides-out
+          path: apps/guides/out
+          retention-days: 7
+          if-no-files-found: warn
+
+      - name: Upload guides build log
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: guides-build-log
+          path: /tmp/guides-build.log
+          retention-days: 7
+          if-no-files-found: ignore
+
+  landing:
+    name: Builds (landing)
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        env:
+          PACKRAT_NATIVEWIND_UI_GITHUB_TOKEN: ${{ secrets.PACKRAT_NATIVEWIND_UI_GITHUB_TOKEN }}
+        run: bun install --frozen-lockfile
+
+      - name: Build landing app
+        id: build
+        run: |
+          set -o pipefail
+          bun run --cwd apps/landing build 2>&1 | tee /tmp/landing-build.log
+
+      - name: Validate OG meta in built HTML
+        # Parse every out/*.html + out/<slug>/index.html and assert the
+        # OG / Twitter meta tags every social previewer (LinkedIn, FB,
+        # microlink, Slack) expects. Catches relative og:image URLs,
+        # missing twitter:card, and similar regressions before the
+        # artifact is uploaded.
+        run: bun run --cwd apps/landing test:og-meta
+
+      - name: Lighthouse CI
+        # Runs `lhci autorun` against the already-built `out/` directory.
+        # Budgets in .lighthouserc.js: perf >=0.8, a11y/best-practices/seo
+        # >=0.9, LCP <2500ms, CLS <0.1. Error pages (404/500) are excluded
+        # via assertMatrix. Real failures fail the workflow.
+        id: lhci
+        run: bun run --cwd apps/landing lighthouse:ci 2>&1 | tee /tmp/landing-lhci.log
+
+      - name: Summarize Lighthouse scores
+        if: always()
+        run: |
+          set -euo pipefail
+          LOG=/tmp/landing-lhci.log
+          {
+            echo ""
+            echo "## Landing Lighthouse CI"
+            echo ""
+            if [ -f "$LOG" ]; then
+              if grep -q "All results processed!" "$LOG" 2>/dev/null; then
+                echo '<details><summary>LHCI output (tail)</summary>'
+                echo ''
+                echo '```'
+                tail -n 80 "$LOG"
+                echo '```'
+                echo '</details>'
+              else
+                echo '> LHCI did not finish cleanly — see job log.'
+                echo ''
+                echo '```'
+                tail -n 60 "$LOG" 2>/dev/null || echo '(no log)'
+                echo '```'
+              fi
+            else
+              echo '> No LHCI log captured.'
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Summarize build output
+        if: always()
+        run: |
+          set -euo pipefail
+          OUT_DIR="apps/landing/out"
+          out_size="(missing)"
+          out_html=0
+          if [ -d "$OUT_DIR" ]; then
+            out_size=$(du -sh "$OUT_DIR" 2>/dev/null | cut -f1)
+            out_html=$(find "$OUT_DIR" -maxdepth 3 -name '*.html' 2>/dev/null | wc -l | tr -d ' ')
+          fi
+          root_og="missing"
+          if [ -f "apps/landing/public/og-image.png" ]; then
+            root_og="ok ($(stat -c%s apps/landing/public/og-image.png 2>/dev/null || stat -f%z apps/landing/public/og-image.png) bytes)"
+          fi
+          {
+            echo "## Landing build summary"
+            echo ""
+            echo "| Metric | Value |"
+            echo "|---|---|"
+            echo "| Static HTML pages in \`out/\` | $out_html |"
+            echo "| \`out/\` directory size | $out_size |"
+            echo "| Root \`public/og-image.png\` | $root_og |"
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload Lighthouse reports (landing)
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: landing-lighthouse
+          path: apps/landing/.lighthouseci
+          retention-days: 14
+          if-no-files-found: warn
+
+      - name: Upload landing static export
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: landing-out
+          path: apps/landing/out
+          retention-days: 7
+          if-no-files-found: warn
+
+      - name: Upload landing build log
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: landing-build-log
+          path: /tmp/landing-build.log
+          retention-days: 7
+          if-no-files-found: ignore