IVE — full 22-point spec + attention primitives

.github/workflows/ci.yml

@@ -0,0 +1,74 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+
+jobs:
+  daemon:
+    name: daemon (Rust)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: install pyright (workstream D) + semgrep (workstream E)
+        run: pip install pyright semgrep
+      - run: cargo fmt --all -- --check
+      - run: cargo test --release --all
+      - name: fixture integration
+        run: ./test/run_fixtures.sh
+
+  extension:
+    name: extension + webview (TS)
+    runs-on: ubuntu-latest
+    needs: daemon
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo build --release -p ive-daemon
+
+      - name: install webview deps
+        run: |
+          cd webview && npm ci
+      - name: webview test + build
+        run: |
+          cd webview && npm test && npm run build
+      - name: webview e2e (Playwright)
+        run: |
+          cd webview
+          npx playwright install --with-deps chromium
+          npx playwright test
+
+      - name: install extension deps
+        run: |
+          cd extension && npm ci
+      - name: extension typecheck
+        run: |
+          cd extension && npx tsc --noEmit
+      - name: extension unit tests
+        env:
+          IVE_DAEMON_PATH: ${{ github.workspace }}/target/release/ive-daemon
+        run: |
+          cd extension && npx vitest run
+      - name: extension build
+        run: |
+          cd extension && node esbuild.mjs
+
+      - name: install mcp deps
+        run: |
+          cd mcp && npm ci
+      - name: mcp typecheck + build
+        run: |
+          cd mcp && npx tsc --noEmit && node esbuild.mjs
+      - name: mcp e2e (drives daemon via MCP stdio)
+        run: |
+          cd mcp && npx vitest run

.github/workflows/release.yml

@@ -0,0 +1,137 @@
+name: Release
+
+# Produces the analyzer pack (ive-daemon binary) and the VSIX, then
+# publishes both to a GitHub Release. Per spec §10 (workstream I) and
+# §2 ("first-run analyzer-pack installer"), the extension is small and
+# the daemon ships alongside — users download the pack on first run.
+#
+# Triggers:
+# - tag push matching `v*` → full release
+# - manual `workflow_dispatch` → dry-run artefacts, no release draft
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  daemon:
+    name: daemon (${{ matrix.target }})
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+            archive: tar.gz
+          - os: macos-latest
+            target: aarch64-apple-darwin
+            archive: tar.gz
+          - os: macos-latest
+            target: x86_64-apple-darwin
+            archive: tar.gz
+          - os: windows-latest
+            target: x86_64-pc-windows-msvc
+            archive: zip
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo test --release
+      - run: cargo build --release --target ${{ matrix.target }} -p ive-daemon
+      - name: package daemon
+        shell: bash
+        run: |
+          set -euo pipefail
+          out="ive-daemon-${{ matrix.target }}"
+          mkdir -p "$out"
+          if [[ "${{ matrix.target }}" == *-windows-* ]]; then
+            cp "target/${{ matrix.target }}/release/ive-daemon.exe" "$out/"
+          else
+            cp "target/${{ matrix.target }}/release/ive-daemon" "$out/"
+          fi
+          cp -r rules "$out/"
+          cp LICENSE "$out/"
+          cp README.md "$out/"
+          if [[ "${{ matrix.archive }}" == "zip" ]]; then
+            7z a "${out}.zip" "$out"
+          else
+            tar czf "${out}.tar.gz" "$out"
+          fi
+      - uses: actions/upload-artifact@v4
+        with:
+          name: daemon-${{ matrix.target }}
+          path: |
+            ive-daemon-${{ matrix.target }}.${{ matrix.archive }}
+
+  extension:
+    name: extension (VSIX)
+    runs-on: ubuntu-latest
+    needs: daemon
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - name: build daemon (linux; used by extension tests)
+        run: cargo build --release -p ive-daemon
+      - name: webview install + test + build
+        run: |
+          cd webview
+          npm ci
+          npm test
+          npm run build
+      - name: extension install + test + package
+        env:
+          IVE_DAEMON_PATH: ${{ github.workspace }}/target/release/ive-daemon
+        run: |
+          cd extension
+          npm ci
+          npx tsc --noEmit
+          npx vitest run
+          node esbuild.mjs
+          npx vsce package --no-yarn --out ../ive.vsix
+      - uses: actions/upload-artifact@v4
+        with:
+          name: vsix
+          path: ive.vsix
+
+  release:
+    name: draft release
+    runs-on: ubuntu-latest
+    needs: [daemon, extension]
+    if: startsWith(github.ref, 'refs/tags/v')
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
+        with:
+          path: dist
+      - name: flatten artefacts
+        run: |
+          mkdir -p release-assets
+          find dist -maxdepth 2 -type f \( -name '*.tar.gz' -o -name '*.zip' -o -name 'ive.vsix' \) -exec cp {} release-assets/ \;
+          ls -lh release-assets/
+      - name: draft GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: release-assets/*
+          draft: true
+          generate_release_notes: true
+          body: |
+            IVE ${{ github.ref_name }}
+
+            Built from commit ${{ github.sha }}.
+
+            - `ive.vsix` — VSCode extension bundle (install with `code --install-extension ive.vsix`)
+            - `ive-daemon-<platform>.*` — analyzer pack (daemon binary + rules). On first launch the extension downloads this to `~/.ive/` (workstream I) — you can drop it there yourself to skip the download.
+
+            See CHANGELOG.md in this tag for what changed.

.gitignore

@@ -1,8 +1,28 @@
+# Rust
+/target/
+**/*.rs.bk
+
+# Node
 node_modules/
 dist/
-.ive/
-.claude/
-coverage/
+out/
 *.vsix
-webview/node_modules/
+coverage/
+.vite/
+
+# Playwright
+test-results/
+playwright-report/
+playwright/.cache/
+webview/e2e/screenshots/
+
+# IVE runtime state
+.ive/
+
+# Staged release assets (populated by extension/esbuild.mjs)
+extension/LICENSE
+extension/resources/
+
+# Editor / OS
 .DS_Store
+.claude/

.vscode/launch.json

@@ -5,9 +5,32 @@
       "name": "Run Extension",
       "type": "extensionHost",
       "request": "launch",
-      "args": ["--extensionDevelopmentPath=${workspaceFolder}"],
-      "outFiles": ["${workspaceFolder}/dist/**/*.js"],
-      "preLaunchTask": "npm: build"
+      "args": [
+        "--extensionDevelopmentPath=${workspaceFolder}/extension"
+      ],
+      "outFiles": [
+        "${workspaceFolder}/extension/dist/**/*.js"
+      ],
+      "preLaunchTask": "build:all",
+      "env": {
+        "IVE_DAEMON_PATH": "${workspaceFolder}/target/release/ive-daemon"
+      }
+    },
+    {
+      "name": "Run Extension + Fixture Workspace",
+      "type": "extensionHost",
+      "request": "launch",
+      "args": [
+        "--extensionDevelopmentPath=${workspaceFolder}/extension",
+        "${workspaceFolder}/test/fixtures/ai-slop/python"
+      ],
+      "outFiles": [
+        "${workspaceFolder}/extension/dist/**/*.js"
+      ],
+      "preLaunchTask": "build:all",
+      "env": {
+        "IVE_DAEMON_PATH": "${workspaceFolder}/target/release/ive-daemon"
+      }
     }
   ]
 }

.vscode/tasks.json

@@ -2,19 +2,57 @@
   "version": "2.0.0",
   "tasks": [
     {
-      "type": "npm",
-      "script": "build",
+      "label": "build:daemon",
+      "type": "shell",
+      "command": "cargo build --release",
       "group": "build",
-      "label": "npm: build",
-      "problemMatcher": ["$tsc"]
+      "problemMatcher": ["$rustc"]
     },
     {
-      "type": "npm",
-      "script": "watch",
-      "isBackground": true,
+      "label": "build:webview",
+      "type": "shell",
+      "command": "npm run build",
+      "options": { "cwd": "${workspaceFolder}/webview" },
+      "group": "build",
+      "problemMatcher": []
+    },
+    {
+      "label": "build:extension",
+      "type": "shell",
+      "command": "node esbuild.mjs",
+      "options": { "cwd": "${workspaceFolder}/extension" },
       "group": "build",
-      "label": "npm: watch",
-      "problemMatcher": ["$tsc-watch"]
+      "problemMatcher": []
+    },
+    {
+      "label": "build:all",
+      "dependsOrder": "sequence",
+      "dependsOn": ["build:daemon", "build:webview", "build:extension"],
+      "group": { "kind": "build", "isDefault": true },
+      "problemMatcher": []
+    },
+    {
+      "label": "watch:webview",
+      "type": "shell",
+      "command": "npm run dev",
+      "options": { "cwd": "${workspaceFolder}/webview" },
+      "isBackground": true,
+      "problemMatcher": []
+    },
+    {
+      "label": "watch:extension",
+      "type": "shell",
+      "command": "node esbuild.mjs --watch",
+      "options": { "cwd": "${workspaceFolder}/extension" },
+      "isBackground": true,
+      "problemMatcher": []
+    },
+    {
+      "label": "test:all",
+      "type": "shell",
+      "command": "cargo test --release && cd webview && npx vitest run && cd ../extension && npx vitest run",
+      "group": "test",
+      "problemMatcher": []
     }
   ]
 }