Land app/v3 on dev: one trunk (draft until the hand gates pass)

.github/windows-native-tests.txt

@@ -0,0 +1,33 @@
+# Tests the `windows native tests` job (ci.yml) runs on windows-latest: one line per package,
+# "<package> <go test -run regex>". Every name here passed natively on Windows 11 when it was added.
+# Add a test once it passes on Windows; remove one only with the change that makes it not apply.
+# cmd/codeaf is absent until its test files compile for Windows (syscall.Mkfifo/Kill in fixtures).
+cmd/codeaf-demo-home ^(TestTheDemoHomeFillsEveryPlace|TestTheDemoHomesLedgersStayInsideTheirOwnDays)$
+internal/appwire ^(TestHealthCheckAnswersTheEnginesFacts|TestSetupFolderTakesFullPathsOfEveryPlatform|TestSetupMethodsAnswerTheirShapes|TestSetupMethodsRefuseBadParams|TestSetupStepIsANumberOrDone|TestTheSchemaSaysSetupIsThreeSteps)$
+internal/automation ^(TestAClockLeavesForANewerWindowsEnvironment|TestASlotIsSkippedWhileItsLastRunIsStillGoing|TestAWindowBeingOpenedIsNeverCountedAway|TestAppQuitHelperLifetime|TestClockSaysADueReminder|TestClockSaysAMissedReminderLate|TestClockStopsWorkWhenTheLastWindowCloses|TestDeletingAnAutomationStopsItsRun|TestOnceWatchFinishesAfterItSpeaks|TestOnlyOneClockAtATime|TestPresenceCountsTheWindowsThatAreHeld|TestPresenceSweepsAWindowNobodyHolds|TestPublishContract4ReminderFiresAndReleasesItsWindow|TestStopRequestStopsARun|TestUnsureOrFailedJudgmentIsCouldntCheck|TestUntrustedWorkAsksAndTheLadderClimbs|TestWatchSpeaksOnTheChangeAndIsQuietWhileItHolds|TestWatchWorkGetsTheEvidence|TestWorkOutcomesAreFactsNotGuesses|TestWorkRunsTwoAtATime|TestWorkThatRunsOutOfTimeIsIncomplete)$
+internal/cellindex ^(TestRefreshBringsInTheRowsOfTurnsMadeSinceTheOlderCopy|TestRefreshDoesNotRebookALegacyTurnAggregate|TestUsageAliasRowIdentity)$
+internal/delegate ^(TestALaunchAtTheEndOfALongHistoryIsReadInBoundedMemory|TestALaunchReadsOnlyItsOwnLines|TestALaunchsCallsAreCountedOnlyWhenEveryOneWasRead|TestContractWindowsDelegateStopsOrphanAfterLeaderExit|TestEveryActionOfALaunchIsReachableByPagingInItsCanonicalWords|TestOnlyTheEndingLineCarriesEndingFacts|TestTheEndLineAndTheShownEndingAreGoldenOnTheWire|TestTheEndLineOnDiskHoldsTheCapAndReadsBack|TestTheEndingKeepsNothingOffTheListAndNothingOfTheWrongShape)$
+internal/exec ^(TestContractWindowsServiceStop|TestContractWindowsUnverifiedJobWait|TestTextContractHeadlessEditWrite|TestTextContractHeadlessOutput|TestTextContractShellEnvironment)$
+internal/exec/bare ^(TestBashBasicOutput|TestBashNonZeroExit|TestBashTimeout|TestTextContractBashOutput|TestTextContractReadEditWriteEncoding|TestTextContractReadWithoutUTF16BOM)$
+internal/executor ^(TestLocalCleanExitLeavesNoServices|TestLocalReportsExitCode|TestLocalRunsAndCapturesOutput|TestLocalTimesOutAndKillsTheGroup)$
+internal/factory/run ^(TestCheckFailKeepsTail|TestCheckIgnoresSteer|TestCheckPass|TestCheckStripsKeys|TestCheckTimeout)$
+internal/factory/serve ^(TestAccessTokenSessionDiesWithTheRow|TestAnAsleepComputerClaimsOnlyItsOwnersJobs|TestConcurrentSamePersonJoinsCountOnce|TestGivingBackAUseIgnoresAnExpiredSessionOfTheSamePerson|TestGivingBackAUseKeepsAnotherLiveSessionOfTheSamePerson|TestLateRepoDisagreementNeverSpendsAUseOrLeavesASession|TestLegacyGetCheckStillPolls|TestLinkCardPrecedenceAndAlreadyIn|TestNoVisibleRepoDeniedAndCancelledSignInsSpendNothing|TestOnlyTheOperatorMakesOrRevokesLinks|TestPostCheckPollsOnlyTheCallersFlow|TestRefusedLateRepoCheckNeverReachesTheDisk|TestRevokingAHumanLinkStopsNewPeopleAndKeepsThoseWhoJoined|TestSessionOfAPersonGivenBackIsNotUsable|TestUpToNLinkSpendsOneUsePerPersonAndNeverMore)$
+internal/factory/verification ^(TestRecognizedCheckIsTheDescendantEvidenceBoundary|TestSnapshotTimeoutKillsItsPipeHoldingChildren)$
+internal/fsreplace ^(TestA4SyncDirectoryKeepsErrorsAndSupportsNativeStorage|TestIntFixContractADirectoryRename|TestIntFixContractARenamesLinkItself|TestIntFixContractAReplacementKeepsHeldGeneration|TestIntFixContractAWindowsRenameKeepsLockedFilesAndErrors|TestK3ReplacementKeepsTheDestinationUntilSuccess|TestK3WindowsEditorLockRetries|TestPublishContract123OpenHandlesAllowReplacementAndRemoval|TestPublishContract1SyncOpenedDirectory|TestPublishContract23OpenAndRemoveKeepNativeErrors|TestPublishContract2WindowsRemoveRetriesAndKeepsErrors)$
+internal/head ^(TestAJobReachesTheFileItsOwnLeafWrote|TestArtifactReadKeepsBothEndsAndMarksWhatItElided|TestFoldedJobStaysFindableAndReadable|TestOpenReadsAFileWholeAndPagesIt|TestReadOpensNothingTheGraphDoesNotPointAt|TestReadReachesTheAnswerTheResultOnlyNames|TestReadRefusesARecordedPathThatLinksOutOfItsDirectory|TestReadingAFileJournalsNothing|TestTextContractReadNativeSummaryPath|TestTheBeltCanOpenTheFileTheResultOnlyNames|TestTheDeliveryTurnReadsTheFileTheResultOnlyPointsAt)$
+internal/opener ^(TestWindowsOpenerUsesFileProtocolHandler)$
+internal/processgroup ^(TestContract2ProcessLifetime|TestContractWindowsCancelDuringLaunch|TestContractWindowsEngineLifetime|TestContractWindowsInheritedLaunch|TestContractWindowsNestedJob|TestContractWindowsOrphanedTreeStop)$
+internal/raftdirectory ^(TestR18R19R20R21ScriptedWorkerHandoff)$
+internal/remote ^(TestAWindowHelloHoldsTheMachinesPresenceWhileItIsAttached)$
+internal/resident ^(TestServiceStopAndStartupReadoption|TestServiceSupervisorCapsAutoRestartAndRests|TestServiceSupervisorHealthFailureAndQuietAttention|TestServiceSupervisorHealthOKAndSuccessfulRestart|TestTextContractHealthShell)$
+internal/run ^(TestRunFactoryCarriesDailyAuthority)$
+internal/service ^(TestAChangeTheFileCannotKeepIsUndone|TestAChangedCheckUnderAYesIsNotSlippedIn|TestACleanExitRestartsOnlyUnderAlways|TestAFencedOwnerStartsNothingNew|TestAFileCodeafDidNotWriteIsRefused|TestAFoldedEpisodeStillSaysItHappened|TestALaunchTheFileCannotRecordRunsNothing|TestAListenerThatClosesOrBlocksDoesNotHoldClose|TestAPersonsRestartNeitherSpendsNorRefillsTheBudget|TestAPolicyChangeAppliesAtTheNextFailure|TestAPortAlreadyAnsweringIsSaidAndNothingIsStarted|TestAQuitLeavesItRunningAndTheNextCodeafTakesItBack|TestARecycledPIDIsNeverTakenBackOrSignalled|TestARemovalTheArchiveCannotKeepRemovesNothing|TestAReopenKeepsAProcessThatIsStillOursInAnyState|TestARepairIsRefusedBeforeAnythingHappens|TestARepairKeepsThePersonsPolicyForAnAlreadyApprovedSpec|TestARepairRunsTheChangedCommandOnTheSameRow|TestARepairTheFileCannotKeepPutsEverythingBack|TestARepairedServiceIsTakenBackAsRepaired|TestARowNeverAliasesTheRecord|TestAStopDuringTheGraceIsTheSameStop|TestAStopIgnoredSendsSigkillAfterTheGrace|TestAStopThatCannotEndItKeepsItOwned|TestAYesTheFileCannotKeepStartsNothing|TestAfterARebootOnlyARestartingPolicyStartsAgain|TestAnAutomaticRestartThatCannotStopRestsAndKeepsTheProcess|TestAnEpisodesResolutionIsWrittenOnce|TestAnUnreadableBootProvesNoReboot|TestCloseLeavesServicesRunningAndStopAllEndsThem|TestCloseRacingEveryVerbLeavesNothingBehind|TestConcurrentActionsSettleConsistently|TestConsentIsForTheExactCommandFolderAndCheck|TestEventsCarryNoCredentialAndOneLinePerEpisode|TestLargeShortLineTailKeepsChronologicalSuffix|TestMetadataBudgetRejectsBeforeOverwritingTheReadableStore|TestMissingIdentityIsNotRunning|TestOldSlowServicesCannotPermanentlyStarveNewerServices|TestOneAgentNeverSeesOrTouchesAnothersServices|TestOnlyAChangedSpecStartsWithAWholeBudget|TestOutputIsReadInBoundedPages|TestOutputPageIsAContiguousPrefixAcrossTheByteCap|TestOutputPartialMarksOnlyAPageCutShortOfTheEnd|TestPolicyNeverShowsTheStateAndRestartsNothing|TestRemoveDropsOnlyAServiceWithNoProcess|TestRemovedOutputRetainsRotationDisclosureAfterReopen|TestRestartCannotLaunchASecondProcessWhenTheOldOneCannotStop|TestStopAllSaysWhatItCouldNotStop|TestStopEndsItAndNothingRestartsIt|TestStopOwnerWaitEndsWithItsContext|TestStopOwnerWaitProvesItsOwnersGoneAndLeavesOthers|TestTenHealthyMinutesStartTheCountAgain|TestTheBudgetIsThreeRestartsInTenMinutes|TestTheLastRowAfterAStopIsNotStopping|TestTheOriginalsExitStillCountsAfterAFailedReplacement|TestTheSupervisorKeepsOneTimerForEveryService|TestThreeFailedChecksRestartAndOnePassRecovers)$
+internal/session ^(TestACommandLookFailsOnAFailingPipeStage|TestACommandLookKeepsTheExitAndHidesTheKeys|TestAJobStoppedByThePersonSettlesAsStoppedAndNotAsFailed|TestAJobsChatSpendsEveryCallOnTheJobAndTheLedgerOnce|TestAStoppedJobsPublishedNoticeCarriesJobStopped|TestAnInterruptDiscardsTheRacedYes|TestAnInterruptLeavesABackgroundCommandRunning|TestAnInterruptedCommandIsNeverPromoted|TestAnInterruptedDesignSettlesAndIsNeverRunAsAnOrdinaryTask|TestAnInterruptedProposalTakesItsCardBackDown|TestAnInterruptedRowRaisesNoMarkNothingCanAnswer|TestAnInterruptedRunRowSurvivesTheNextCheckpoint|TestAnInterruptedSummaryEndsAsInterrupted|TestAnInterruptedTurnIsNotCheckpointed|TestAnInterruptedTurnsMoneyIsOnTheLedgerAndTheMeterAlike|TestCancelOnAnUnknownJobAndOnOneAlreadyOverAnswersTheWayTheOtherBranchesDo|TestCancelledHelperRetryBooksEachAttemptOnce|TestCloseForDeletionStopsKeptServices|TestContract1ManagedJobWaitsForItsTreeAfterLeaderExit|TestContract3UnkillableJobIsNeverReportedStopped|TestConversationDeleteCanRetryCleanupAfterJournalMoved|TestConversationDeleteFreshManagerScopeIsRecheckedBeforeStopping|TestConversationDeleteManagerRequiresPriorAssignment|TestConversationDeleteOptionalGlobalManagerKeepsTeamsAndAllowsRecreation|TestConversationDeleteRefusalPreservesTranscriptAndMemberships|TestConversationDeleteRemovesJournalFileSymlinkMemberships|TestConversationDeleteRemovesOwnedCheckReceiptsOnly|TestConversationDeleteRetryPreservesCapturedManagerAliases|TestConversationDeleteSerializesConcurrentCallersAndRetainsTombstone|TestConversationDeleteStaleOwnerRequestIsDiscarded|TestConversationDeleteStopsOwnerPreservesHistoryAndPreventsRecreation|TestConversationDeletionPreservesSavedMemoriesAndTheirSourceIdentity|TestDefaultProfileDailyAuthorityStaysLive|TestJobBudgetNamesTheFactoryJobOnLedgerRows|TestJobsKillEndsSleeperWithoutSelfReport|TestKilledTaskKeepsItsBranch|TestPublishContract5UsageSurvivesReplacement|TestTaskConstructorsCarryDailyAuthority|TestTextContractAppendEncoding|TestTextContractBackgroundOutput)$
+internal/shell ^(TestContract6WindowsProcessFacts|TestStartFailureWindowsCommandLineLimit|TestStartFailureWindowsSecurityBlock|TestUnixDoorArgv|TestWindowsCwdLongOutputAndExit|TestWindowsExplicitRelativePath|TestWindowsGitShimResolution|TestWindowsKnownGitLayoutsNeverProbe|TestWindowsListPath|TestWindowsListPathBindsRelativeNames|TestWindowsListPathUsesNativeAbsoluteRules|TestWindowsOverrideCacheAndRefusal|TestWindowsOverrideRefusalSentences|TestWindowsRelativeOverrideCacheFollowsDirectory|TestWindowsResolutionRules|TestWindowsSingleParse|TestWindowsWSLPredicate)$
+internal/store ^(TestAFileNamedByTwoProducersIsCarriedOnce|TestAProductPastTheCeilingClipsAndSpillsToAReadableHandle|TestAReaderDecidingAShapeGetsTheAccountAndNotTheProduct|TestPublishContract5SpendIncludesCurrentClockTick|TestSpendBetweenAndByJobAnswerAWindow|TestTextContractSummaryNativePaths|TestTheEdgeCarriesTheProductAndNotTheAnnouncementOfIt)$
+internal/summarypath ^(TestTextContractSummaryPath|TestTextContractSummaryWindowsPaths)$
+internal/syncsetup ^(TestJoinedClusterStatusDoesNotReopenTheMemberStore|TestNativeNonLeaderAndAbsentMemberQuitIsQuiet|TestR16CommittedRevocationInvalidatesPeerView|TestR20WorkerProcessCutsNeverReplayTools|TestR23OpenLearnerDiscardsDelayedPushAfterOff|TestR23PersonalLearnerStopsAtEveryUse|TestR25PersonalLeaderLargeLegacyRequests|TestR26R27C30OpenLearnerIdleAndStateWake|TestR6PersonalLeaderDirectoryConformance|TestR6PersonalLeadershipCommittedRefusalAcknowledged|TestR6PersonalLeadershipLostReplyResumesSignedRequest|TestR6PersonalLeadershipRestartResumesSavedRequest|TestR6R13R27PersonalLeaderKeepsMaximumPublicCommand|TestR6R15R18PersonalLeaderOriginalWorkerIngressAndThinStore|TestR6R16PersonalLeaderSkipsRevokedLearner|TestR6R25PersonalLeaderDirectoryIsolation|TestR6R9R23PersonalMemberProductionLifecycle|TestR7PersonalLeaderFallbackAndNoAutomaticRegain|TestR8PersonalLeaderAndAnchorLossNeverCreatesSecondCluster|TestR9PersonalHomeInstallsSnapshotChunksAndLog|TestR9PersonalHomesJoinAsDurableLearners|TestR9R23LocalHomeFollowerSharesTheOwnedLearner|TestR9R23PersonalLearnerRefreshesColdRouterGeneration|TestR9R27PersonalCatchupResumesWithoutEmptyPolling|TestTakeLedgerDuringLateAccounting|TestTakeLedgerLegacyCallsAndIdenticalCalls|TestTakeLedgerQueuedOrSettledLiveCall|TestTakeLedgerRemoteIdentityCombinations)$
+internal/taskcopy ^(TestCachedFullHistoryRejectsNoncanonicalContainer|TestColdLegacyFullHistorySecretsRefuseComposition|TestPortableSnapshotCarriesImmutableCreationBaseline|TestSealDoesNotDiscardUnpreparedColdTaskCarry|TestWorkspaceDirectoryMetadataCannotOmitPayloadParents)$
+internal/taskdoor ^(TestAcknowledgedAttemptReplayProtectionIsBounded|TestAnAbandonedRunningAttemptCannotRecreateItsJournal|TestAnAckRemovesTheAttempt|TestAnAttemptStartedAgainAfterItsAckNeverRunsAgain)$
+internal/taskstorage ^(TestEnsureClearsUncreatedVerificationReservation|TestEnsureRecoversOnlyJournaledVerificationContainer|TestEnsureRefusesVerificationSymlinkWithoutClearingJournal|TestEnsureRejectsForgedVerificationContainer|TestInterruptedRetirementPreservesUnexpectedNewBytes|TestInterruptedRetirementRestoresMissingFiles|TestMissingSavedBytesCannotBecomeFreshCopy|TestParkAndReopenKeepsExactWorkAndIdentity|TestRecreatedWorkspaceIsNeverOverwritten)$
+internal/tui3 ^(TestALatePreviewCannotMisrouteAPressInThePane|TestANarrowTerminalGivesTheSheetTheWholeWindow|TestAPathShapeIsTheOnlyThingThatBrowses|TestAPressOutsideTheSheetReachesNothing|TestAShortTerminalStillDrawsTheWayOut|TestClosingTheSheetAsksForTheWholeScreenBack|TestContextModalLateralPressCannotChooseOrConfirm|TestContextModalLateralWheelAndHoverStayOnBackdrop|TestFolderPickerWaitsForTheTypedDirectoryBeforeConfirming|TestSelectionHoverAndMarksAreToldApart|TestTextContractFolderDriveCase|TestTextContractFolderNativePaths|TestTheBackdropNeitherScrollsNorLights|TestTheBackdropSurvivesOnBothSidesOfTheSheet|TestTheCancelTargetLeavesHavingChangedNothing|TestTheCaretIsInTheSheetsBox|TestTheFrameAfterACloseHoldsNoCellOfTheSheet|TestTheSheetHoldsAtThePlainFloor|TestTheSheetIsBoundedAndFramedOnAWideTerminal|TestTheSheetNamesItselfAndBothWaysOut|TestTheSheetNeverClaimsARowTheTerminalDoesNotHave|TestTypingAPathMorphsTheListIntoColumns)$

.github/workflows/ci-full.yml

@@ -71,7 +71,7 @@ jobs:
   full-tests-shard:
     name: full tests ${{ matrix.shard }}/3
     runs-on: ubuntu-latest
-    timeout-minutes: 60
+    timeout-minutes: 75
     strategy:
       fail-fast: false
       matrix:
@@ -112,7 +112,10 @@ jobs:
           # still dies at -p 1, it is not, and the package that was running is
           # the suspect by name. The shards keep the wall clock acceptable
           # while each one runs serial.
-          make test TEST_FLAGS='-p 1' PKGS="$pkgs"
+          # cmd/codeaf took 1325 s on this runner (2026-11-05), past the
+          # Makefile's 15m. 35m gives it about 1.6 times that; the shard
+          # around it took 45 minutes, so the job limit is 75.
+          make test TEST_TIMEOUT=35m TEST_FLAGS='-p 1' PKGS="$pkgs"
 
   # ONE NAME FOR THE THREE, for the same reason cross build has one below: a
   # branch rule can only require a name it can spell, and a matrix's legs are

.github/workflows/ci.yml

@@ -34,6 +34,7 @@ on:
   pull_request:
     branches:
       - dev
+      - app/v3
       - santos/dev2
   # Also on the push, because a merge of two individually-green branches can
   # still be red, and the merge is exactly the moment nobody is watching.
@@ -230,6 +231,57 @@ jobs:
           path: ${{ steps.cache-paths.outputs.modules }}
           key: ${{ steps.module-cache.outputs.cache-primary-key }}
 
+  # NATIVE WINDOWS, ADVISORY FOR NOW. Until November 2026 no test ever ran on
+  # Windows: the engine cross-built for it and nothing more, and shared code that
+  # assumed POSIX (rename over an open file, process groups, login shells, `/`
+  # paths) went unnoticed while the Windows desk failed every session. This job
+  # runs, on a real Windows runner, the named tests in
+  # .github/windows-native-tests.txt that pass there: process trees stopped as a
+  # whole, state files replaced while held, reminders, spending, native paths,
+  # UTF-16 and line endings. It is not yet part of `check`; once it has stayed
+  # green for a while it should be.
+  windows:
+    name: windows native tests
+    runs-on: windows-latest
+    timeout-minutes: 45
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - name: Stage furrow for windows/amd64
+        run: go run ./internal/furrowbin/cmd/fetch -goos=windows -goarch=amd64
+      - name: Native tests
+        env:
+          CODEAF_TELEMETRY: "off"
+          DO_NOT_TRACK: "1"
+          CODEAF_NO_UPDATE_CHECK: "1"
+          CODEAF_MODEL_POOL: "off"
+          CODEAF_SYNC_URL: "off"
+        run: |
+          set -uo pipefail
+          # A home, profile and temp folder of the run's own, short enough for
+          # Windows paths, so no test reads the runner's real profile.
+          root="$RUNNER_TEMP/w"
+          mkdir -p "$root/home/AppData/Local" "$root/home/AppData/Roaming" "$root/codeaf" "$root/tmp"
+          export HOME="$root/home"
+          USERPROFILE="$(cygpath -w "$root/home")"; export USERPROFILE
+          LOCALAPPDATA="$(cygpath -w "$root/home/AppData/Local")"; export LOCALAPPDATA
+          APPDATA="$(cygpath -w "$root/home/AppData/Roaming")"; export APPDATA
+          CODEAF_HOME="$(cygpath -w "$root/codeaf")"; export CODEAF_HOME
+          TMP="$(cygpath -w "$root/tmp")"; TEMP="$TMP"; export TMP TEMP
+          failed=""
+          while read -r pkg pattern; do
+            case "$pkg" in ''|'#'*) continue ;; esac
+            echo "::group::$pkg"
+            go test -count=1 -p 2 -timeout 15m -run "$pattern" "./$pkg" || failed="$failed $pkg"
+            echo "::endgroup::"
+          done < .github/windows-native-tests.txt
+          if [ -n "$failed" ]; then echo "::error::failed on Windows:$failed"; exit 1; fi
+
   # The selector does no compilation unless module files changed. A docs-only
   # change creates no test runner; the light gate and the aggregate still run.
   select:
@@ -322,7 +374,7 @@ jobs:
           mkdir -p "$TMPDIR"
           # -p 2 permits concurrent compilation/testing in rest on the public
           # 4-vCPU / 16-GB runner, leaving headroom for the linker. tui3 and
-          # session use four shards; codeaf runs its suite without sharding.
+          # session and codeaf use four shards.
           ./scripts/touched-verdict.sh run --base "$BASE" --shards 4 --report "$TMPDIR/$LEG.json" $PACKAGES
       - uses: actions/upload-artifact@v4
         if: always()

.github/workflows/release.yml

@@ -217,12 +217,19 @@ jobs:
         env:
           TAG: ${{ needs.prepare.outputs.tag }}
           CGO_ENABLED: "0"
+          # The GitHub OAuth app of the first run's browser sign-in; not a
+          # secret. Unset leaves that sign-in out of the build.
+          CODEAF_GITHUB_CLIENT_ID: ${{ vars.CODEAF_GITHUB_CLIENT_ID }}
         run: |
           set -euo pipefail
           mkdir -p dist
           go generate ./internal/manual
           built_at="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
           buildinfo_package="$(go list -m)/internal/buildinfo"
+          github_stamp=""
+          if [ -n "${CODEAF_GITHUB_CLIENT_ID:-}" ]; then
+            github_stamp="-X $(go list -m)/internal/factory/github.clientID=${CODEAF_GITHUB_CLIENT_ID}"
+          fi
           targets=(
             "darwin amd64"
             "darwin arm64"
@@ -242,7 +249,7 @@ jobs:
             GOOS="$goos" GOARCH="$goarch" go build \
               -tags=codeaf_packed_manual \
               -trimpath \
-              -ldflags="-s -w -X ${buildinfo_package}.rev=${TAG} -X ${buildinfo_package}.dirty=false -X ${buildinfo_package}.builtAt=${built_at}" \
+              -ldflags="-s -w -X ${buildinfo_package}.rev=${TAG} -X ${buildinfo_package}.dirty=false -X ${buildinfo_package}.builtAt=${built_at} ${github_stamp}" \
               -o "dist/codeaf-${goos}-${goarch}${extension}" \
               ./cmd/codeaf
           done

.gitignore

@@ -43,6 +43,9 @@ internal/manual/pages.pack.gz
 .furrow/
 bench/idle-surface/runs/
 work/
+# The desktop app's garbled sidecars (`make app-sidecar`), built for a bundle
+# and never committed.
+/dist/
 
 # hosted relay dev install (wrangler, miniflare)
 relay/hosted/node_modules