MillOS v0.40: integrated refinement release

.env.local.example

@@ -0,0 +1,12 @@
+# MillOS — local environment configuration
+# Copy this file to `.env.local` for local development. `.env.local` is gitignored.
+#
+# IMPORTANT: There is NO build-time Gemini API key.
+# The Gemini API key is entered at runtime in the in-app AI / Gemini settings modal
+# and stored only in your browser's localStorage (key: "millos-ai-config").
+# It is never embedded in the client bundle — see the commented `define` in vite.config.ts.
+# The data you send to Gemini goes directly from your browser to Google.
+
+# Enable the service worker during local development.
+# (Production builds register it automatically; leave unset for normal `npm run dev`.)
+# VITE_ENABLE_SW=true

.github/workflows/ci.yml

@@ -14,7 +14,6 @@ jobs:
   lint:
     name: Lint
     runs-on: ubuntu-latest
-    continue-on-error: true  # Lint is advisory, don't block build
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -26,19 +25,17 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm ci --force
+        run: npm ci
 
       - name: Run ESLint
-        run: npm run lint --if-present; exit 0
-        # TypeScript provides comprehensive type checking
+        run: npm run lint
 
       - name: Check TypeScript
         run: npm run typecheck --if-present || npx tsc --noEmit
 
   test:
     name: Test
     runs-on: ubuntu-latest
-    continue-on-error: true  # Vitest worker crashes don't affect actual test results
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -50,11 +47,10 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm ci --force
+        run: npm ci
 
       - name: Run tests
-        # Exit 0 even if Vitest worker crashes (known issue) - actual test failures are in output
-        run: npm test -- --coverage --reporter=verbose || true
+        run: npm test -- --coverage --reporter=verbose
 
       - name: Upload coverage
         uses: codecov/codecov-action@v6
@@ -79,7 +75,7 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm ci --force
+        run: npm ci
 
       - name: Build application
         run: npm run build

.github/workflows/deploy.yml

@@ -17,8 +17,12 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    env:
+      V030_SOURCE_SHA: 20bcbe044fc6d7ca7275999fec63ddce83fd49d0
     steps:
       - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -29,54 +33,27 @@ jobs:
       - name: Install dependencies
         run: npm ci --force
 
-      # Build v0.30 (current) to /v0.30/ subdirectory
-      - name: Build v0.30 current
-        run: VERSION=v0.30 npm run build
-
-      - name: Setup staging with v0.30 current
+      - name: Validate release source
         run: |
-          # Vite copies public/ wholesale. Remove versioned archives before
-          # staging, because they are copied exactly once in the steps below.
-          rm -rf dist/v0.10 dist/v0.20 dist/v0.30
-          mkdir -p staging/v0.30
-          cp -r dist/* staging/v0.30/
-
-      # v0.20 is pre-built in public/v0.20/ - copy to staging
-      - name: Copy v0.20 to staging
-        run: cp -r public/v0.20 staging/v0.20
-
-      # v0.10 is pre-built in public/v0.10/ - copy to staging (legacy)
-      - name: Copy v0.10 to staging
-        run: cp -r public/v0.10 staging/v0.10
+          npm run typecheck
+          npm run lint
+          npm run format:check
+          npm test
 
-      # Copy music files to legacy versions for music backport
-      - name: Copy music files to v0.10
-        run: cp public/*.mp3 staging/v0.10/
-
-      - name: Copy music files to v0.20
-        run: cp public/*.mp3 staging/v0.20/
-
-      # Root redirects to v0.30 (current)
-      - name: Create root redirect
+      - name: Rebuild the deployed v0.30 release for preservation
         run: |
-          cat > staging/index.html << 'EOF'
-          <!DOCTYPE html>
-          <html>
-          <head>
-            <meta charset="UTF-8">
-            <meta http-equiv="refresh" content="0;url=/v0.30/">
-            <title>Redirecting to MillOS</title>
-          </head>
-          <body>
-            <p>Redirecting to <a href="/v0.30/">MillOS v0.30</a>...</p>
-          </body>
-          </html>
-          EOF
+          git worktree add --detach "$RUNNER_TEMP/millos-v030" "$V030_SOURCE_SHA"
+          npm ci --force --ignore-scripts --prefix "$RUNNER_TEMP/millos-v030"
+          VERSION=v0.30 npm run build --prefix "$RUNNER_TEMP/millos-v030"
+
+      - name: Build current release
+        run: VERSION="v$(node -p "require('./package.json').version.split('.').slice(0, 2).join('.')")" npm run build
 
-      - name: Copy crawl control files to the site root
+      - name: Stage current and archived releases
         run: |
-          cp public/robots.txt staging/robots.txt
-          cp public/sitemap.xml staging/sitemap.xml
+          npm run build:pages-staging -- \
+            --archive-build "v0.30=$RUNNER_TEMP/millos-v030/dist" \
+            --archive-source "v0.30=$V030_SOURCE_SHA"
 
       - name: Setup Pages
         uses: actions/configure-pages@v6

.github/workflows/release.yml

@@ -22,11 +22,18 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: '20'
-          cache: 'npm'
+          node-version: '22'
+          cache: npm
 
       - name: Install dependencies
-        run: npm ci
+        run: npm ci --force
+
+      - name: Validate release source
+        run: |
+          npm run typecheck
+          npm run lint
+          npm run format:check
+          npm test
 
       - name: Build
         run: npm run build
@@ -41,55 +48,17 @@ jobs:
           OUTPUT: CHANGELOG.md
 
       - name: Create release archive
-        run: |
-          tar -czvf millos-${{ github.ref_name }}.tar.gz dist/
+        run: tar -czvf "millos-${{ github.ref_name }}.tar.gz" dist/
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body: ${{ steps.changelog.outputs.content }}
-          files: |
-            millos-${{ github.ref_name }}.tar.gz
+          files: millos-${{ github.ref_name }}.tar.gz
           draft: false
           prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') || contains(github.ref, 'rc') }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  deploy-ghpages:
-    name: Deploy to GitHub Pages
-    runs-on: ubuntu-latest
-    needs: release
-    permissions:
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build
-        run: npm run build
-
-      - name: Setup Pages
-        uses: actions/configure-pages@v4
-
-      - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
-        with:
-          path: 'dist'
-
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v4
+  # GitHub Pages deployment is owned solely by deploy.yml. Keeping release
+  # publication separate prevents a tag build from replacing the versioned site.

.gitignore

@@ -32,3 +32,6 @@ npm-debug.log*
 /playwright-report/
 /blob-report/
 /playwright/.cache/
+
+# Test coverage reports (regenerated by `npm run test:coverage`)
+coverage/

.impeccable/config.json

@@ -0,0 +1,6 @@
+{
+  "detector": {
+    "ignoreFiles": ["src/0.10 Archive/**"],
+    "ignoreRules": ["overused-font"]
+  }
+}