chore: release v2.0.0-pre.20260614235428

.agents/specs/SPEC-040-sqlite-backed-loaf-operational-state.md

@@ -47,7 +47,7 @@ SPEC-010 deliberately introduced `TASKS.json` as structured metadata because dir
 
 ## Solution Direction
 
-Introduce a project-scoped SQLite store for Loaf operational state, stored outside the repository under XDG paths and accessed only through the Loaf CLI.
+Introduce a single SQLite store for Loaf operational state, stored outside the repository under XDG paths, partitioned by stable project ID, and accessed only through the Loaf CLI.
 
 The SQLite state layer starts in Go. ADR-014 makes Go the intended home for Loaf's stateful runtime and lower-dependency command surface. The existing TypeScript CLI remains a compatibility implementation during migration, but new SQLite-backed runtime work should not deepen the Node/TypeScript dependency footprint.
 
@@ -393,7 +393,7 @@ Decision criteria:
   not sufficient; SQLite driver upgrades also need release-note review because
   embedded SQLite code may carry non-Go vulnerability context.
 - **Testability:** Track A must include a real SQLite smoke test that opens the
-  project database, applies migrations, writes a row, reads it back, and runs
+  global project-partitioned database, applies migrations, writes a row, reads it back, and runs
   with `CGO_ENABLED=0`.
 
 Implementation constraints for Track A:
@@ -449,8 +449,8 @@ Implementation constraints for Track A:
 
 ## Open Questions
 
-- [x] Exact XDG split: should the project database live under `$XDG_STATE_HOME/loaf/` or `$XDG_DATA_HOME/loaf/`? Decision: SQLite operational state lives under `$XDG_STATE_HOME/loaf/projects/<project-id>/loaf.sqlite`, with platform fallbacks handled by the Go `PathResolver`; it is state, not portable user data.
-- [x] How should project identity be derived for moved repositories: absolute path hash, git remote, git common-dir, explicit project UUID, or a combination? Decision: SPEC-040 hashes the resolved canonical project root. Git linked worktrees resolve through `git-common-dir` to the main checkout root, so sibling worktrees share state. Move-stable project UUIDs remain future migration work.
+- [x] Exact XDG split: should the database live under `$XDG_STATE_HOME/loaf/` or `$XDG_DATA_HOME/loaf/`? Decision: SQLite operational state lives in one global database at `$XDG_DATA_HOME/loaf/loaf.sqlite`, with rows partitioned by project ID and platform fallbacks handled by the Go `PathResolver`.
+- [x] How should project identity be derived for moved repositories: absolute path hash, git remote, git common-dir, explicit project UUID, or a combination? Decision: new projects get a generated stable project ID stored in SQLite, plus a friendly name and path mapping. Legacy path hashes remain only as an adoption key for imported/migrated rows. Use `loaf project rename <name>` for friendly-name changes and `loaf project move --from <old-path>` when a checkout path changes.
 - [x] What is the exact TypeScript delegation mechanism for unmigrated commands: subprocess to bundled JS, embedded assets, or npm-package-local path? Decision: the Go front controller runs a subprocess through `node dist-cli/index.js`, resolving the bundled script from the working tree/project root/executable-relative paths, with `LOAF_LEGACY_CLI` as an override for development.
 - [x] Should Markdown compatibility views be generated automatically after every mutation, or only by explicit export commands? Decision: SQLite-backed commands do not write repository Markdown as a side effect. Compatibility Markdown remains import/fallback input, and reviewable views are produced by explicit export/report commands unless a later compatibility task deliberately adds a generated view command.
 - [x] What is the minimum session transcript row shape that works across Claude Code, Codex, OpenCode, Cursor, Gemini, and Amp? Decision: store structured session rows plus journal summaries/pointers first: session alias, harness session ID, branch, status, optional source, and journal rows with type, scope, message, observed branch/worktree/harness ID, and nullable session/spec/task links. Raw transcript capture stays harness-native/out of scope until redaction controls are designed.
@@ -460,7 +460,7 @@ Implementation constraints for Track A:
 
 ## Test Conditions
 
-- [x] `loaf state init` creates a project-scoped SQLite database outside the repository and prints its path without creating secrets.
+- [x] `loaf state init` creates the global project-partitioned SQLite database outside the repository and prints its path without creating secrets.
 - [x] The public `loaf` command can dispatch Go-native `state` commands while unmigrated commands still delegate to the existing TypeScript CLI.
 - [x] Build and test workflows prove the Go runtime and TypeScript compatibility bridge can coexist without exposing two public command names.
 - [x] `loaf state path` prints the same path from the main worktree and linked worktrees for the same project.

.agents/tasks/TASK-196-state-status-doctor-diagnostics.md

@@ -30,15 +30,15 @@ completed_at: '2026-05-28T17:08:01Z'
 
 Add the approved `github.com/ncruces/go-sqlite3/driver` dependency and wire the
 first real storage lifecycle commands. `loaf state init` should create the
-project-scoped SQLite database outside the repository and apply Go-owned schema
+global project-partitioned SQLite database outside the repository and apply Go-owned schema
 migrations. `loaf state status` and `loaf state doctor` should report the
 resolved project root, intended database path, DB presence, schema version, and
 Markdown fallback state.
 
 ## Acceptance Criteria
 
 - [x] `github.com/ncruces/go-sqlite3` is pinned in `go.mod`/`go.sum`.
-- [x] `loaf state init` creates the project-scoped SQLite database outside the repository.
+- [x] `loaf state init` creates the global project-partitioned SQLite database outside the repository.
 - [x] `state init` applies the ordered Go-owned migrations and records checksums in `schema_migrations`.
 - [x] `state init` is idempotent and detects migration checksum drift.
 - [x] `loaf state status` prints project root, database path, database presence, mode, and schema version.

.agents/tasks/TASK-234-state-init-safety-proof.md

@@ -16,7 +16,7 @@ files:
 verify: >-
   go test ./internal/state ./internal/cli && go test ./...
 done: >-
-  Tests prove `loaf state init` creates a project-scoped SQLite database outside
+  Tests prove `loaf state init` creates a global project-partitioned SQLite database outside
   the repository, prints the database path, avoids repository `.agents` writes,
   and initializes a schema without secret-storage columns.
 ---

.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Loaf - An Opinionated Agentic Framework",
-    "version": "2.0.0-dev.49"
+    "version": "2.0.0-pre.20260614235428"
   },
   "plugins": [
     {
       "name": "loaf",
       "description": "Loaf - An Opinionated Agentic Framework",
       "source": "./plugins/loaf",
-      "version": "2.0.0-dev.49",
+      "version": "2.0.0-pre.20260614235428",
       "license": "MIT",
       "repository": "https://github.com/levifig/loaf"
     }

.github/workflows/release.yml

@@ -0,0 +1,126 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to publish, for example v2.0.0-dev.49'
+        required: true
+      update_tap:
+        description: 'Update levifig/homebrew-tap after uploading assets'
+        required: true
+        default: 'true'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Resolve release ref
+        id: release
+        shell: bash
+        run: |
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            tag="${{ inputs.tag }}"
+          else
+            tag="${GITHUB_REF_NAME}"
+          fi
+          if [[ -z "$tag" || "$tag" != v* ]]; then
+            echo "Release tag must start with v." >&2
+            exit 1
+          fi
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+          echo "ref=refs/tags/$tag" >> "$GITHUB_OUTPUT"
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.release.outputs.ref }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Verify release version
+        id: version
+        shell: bash
+        run: |
+          version="$(node -p "require('./package.json').version")"
+          expected_tag="v$version"
+          if [[ "${{ steps.release.outputs.tag }}" != "$expected_tag" ]]; then
+            echo "Tag ${{ steps.release.outputs.tag }} does not match package version $version." >&2
+            exit 1
+          fi
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+
+      - name: Build release targets
+        run: npm run build:release
+
+      - name: Verify tests
+        run: go test ./...
+
+      - name: Package release archives
+        run: npm run package:release
+
+      - name: Upload release assets
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ steps.release.outputs.tag }}
+        shell: bash
+        run: |
+          if gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
+            gh release upload "$RELEASE_TAG" dist/release/* --clobber
+          else
+            gh release create "$RELEASE_TAG" dist/release/* --title "$RELEASE_TAG" --generate-notes
+          fi
+
+      - name: Checkout Homebrew tap
+        if: ${{ github.event_name != 'workflow_dispatch' || inputs.update_tap == 'true' }}
+        uses: actions/checkout@v4
+        with:
+          repository: levifig/homebrew-tap
+          path: homebrew-tap
+          token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+
+      - name: Update Homebrew formula
+        if: ${{ github.event_name != 'workflow_dispatch' || inputs.update_tap == 'true' }}
+        run: |
+          node cli/scripts/update-homebrew-formula.mjs \
+            --formula homebrew-tap/Formula/loaf.rb \
+            --checksums dist/release/checksums.txt \
+            --version "${{ steps.version.outputs.version }}" \
+            --repo levifig/loaf
+
+      - name: Commit Homebrew tap update
+        if: ${{ github.event_name != 'workflow_dispatch' || inputs.update_tap == 'true' }}
+        working-directory: homebrew-tap
+        shell: bash
+        run: |
+          if git diff --quiet -- Formula/loaf.rb; then
+            echo "Homebrew formula already current."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add Formula/loaf.rb
+          git commit -m "chore: update loaf to ${{ steps.version.outputs.version }}"
+          git push

.gitignore

@@ -14,6 +14,7 @@ dist-cli/
 # Temporary backups
 dist-backup/
 plugins-backup/
+dist/release/
 
 # OS files
 .DS_Store