feat: add release scripts

.direnv/bin/nix-direnv-reload

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -e
+if [[ ! -d "/Users/eric/Projects/repo-lib" ]]; then
+  echo "Cannot find source directory; Did you move it?"
+  echo "(Looking for "/Users/eric/Projects/repo-lib")"
+  echo 'Cannot force reload with this script - use "direnv reload" manually and then try again'
+  exit 1
+fi
+
+# rebuild the cache forcefully
+_nix_direnv_force_reload=1 direnv exec "/Users/eric/Projects/repo-lib" true
+
+# Update the mtime for .envrc.
+# This will cause direnv to reload again - but without re-building.
+touch "/Users/eric/Projects/repo-lib/.envrc"
+
+# Also update the timestamp of whatever profile_rc we have.
+# This makes sure that we know we are up to date.
+touch -r "/Users/eric/Projects/repo-lib/.envrc" "/Users/eric/Projects/repo-lib/.direnv"/*.rc

.direnv/flake-inputs/7f0478ddr51i3r708dpkljnvmzwc2fhn-source

@@ -0,0 +1 @@
+/nix/store/7f0478ddr51i3r708dpkljnvmzwc2fhn-source

.direnv/flake-inputs/affmc6lhad8f6q3iaa3iydcdjwr8lwgp-source

@@ -0,0 +1 @@
+/nix/store/affmc6lhad8f6q3iaa3iydcdjwr8lwgp-source

.direnv/flake-inputs/g5v3sgqy6a0fsmas7mnapc196flrplix-source

@@ -0,0 +1 @@
+/nix/store/g5v3sgqy6a0fsmas7mnapc196flrplix-source

.direnv/flake-inputs/jzfmmjnq1cip816awnliw7ir69pcyg00-source

@@ -0,0 +1 @@
+/nix/store/jzfmmjnq1cip816awnliw7ir69pcyg00-source

.direnv/flake-inputs/kx00h535s3jzb9803vnylxllij3zhix5-source

@@ -0,0 +1 @@
+/nix/store/kx00h535s3jzb9803vnylxllij3zhix5-source

.direnv/flake-inputs/ngdfag0pfs1h54pbjs9ywah4zhqsphf1-source

@@ -0,0 +1 @@
+/nix/store/ngdfag0pfs1h54pbjs9ywah4zhqsphf1-source

.direnv/flake-inputs/nk13680f34w3q01a1q69c48my6fi7cxz-source

@@ -0,0 +1 @@
+/nix/store/nk13680f34w3q01a1q69c48my6fi7cxz-source

.direnv/flake-inputs/yxj1dm8kga6jnlrln3n1yallj5wmdfdd-source

@@ -0,0 +1 @@
+/nix/store/yxj1dm8kga6jnlrln3n1yallj5wmdfdd-source

.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa

@@ -0,0 +1 @@
+/nix/store/z0l8kpc3h9g8npmd6cc4mqrc36sm3lv4-nix-shell-env

.envrc

@@ -0,0 +1 @@
+use flake

.pre-commit-config.yaml

@@ -1 +1 @@
-/nix/store/041b74mcfyxy04kjz4pcmra2k3nzh5di-pre-commit-config.json
+/nix/store/z5la91hb82z8853gvrx91j36ny62hxgn-pre-commit-config.json

flake.nix

@@ -147,9 +147,14 @@
             inherit system;
             extraPackages = with pkgs; [
               nixfmt
+              shfmt
               gitlint
               gitleaks
             ];
+            formatters = {
+              shfmt.enable = true;
+            };
+
             tools = [
               {
                 name = "Nix";

packages/release/release.nix

@@ -0,0 +1,56 @@
+# release.nix
+{
+  pkgs,
+  readVersion,
+  writeVersion,
+  postVersion ? "",
+  versionFiles ? [ ],
+  channels ? [
+    "alpha"
+    "beta"
+    "rc"
+    "internal"
+  ],
+  extraRuntimeInputs ? [ ],
+}:
+let
+  channelList = pkgs.lib.concatStringsSep " " channels;
+
+  versionFilesScript = pkgs.lib.concatMapStrings (f: ''
+    mkdir -p "$(dirname "${f.path}")"
+    ${f.content} > "${f.path}"
+    log "Generated version file: ${f.path}"
+  '') versionFiles;
+
+  script =
+    builtins.replaceStrings
+      [
+        "__CHANNEL_LIST__"
+        "__VERSION_FILES__"
+        "__READ_VERSION__"
+        "__WRITE_VERSION__"
+        "__POST_VERSION__"
+      ]
+      [
+        channelList
+        versionFilesScript
+        readVersion
+        writeVersion
+        postVersion
+      ]
+      (builtins.readFile ./release.sh);
+in
+pkgs.writeShellApplication {
+  name = "release";
+  runtimeInputs =
+    with pkgs;
+    [
+      git
+      gnugrep
+      gawk
+      gnused
+      coreutils
+    ]
+    ++ extraRuntimeInputs;
+  text = script;
+}

packages/release/release.sh

@@ -0,0 +1,328 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ROOT_DIR="$(git rev-parse --show-toplevel)"
+GITLINT_FILE="$ROOT_DIR/.gitlint"
+START_HEAD=""
+CREATED_TAG=""
+
+# ── logging ────────────────────────────────────────────────────────────────
+
+log() { echo "[release] $*"; }
+
+usage() {
+  local cmd
+  cmd="$(basename "$0")"
+  printf '%s\n' \
+    "Usage:" \
+    "  ${cmd} [major|minor|patch] [stable|${channelList}]" \
+    "  ${cmd} set <version>" \
+    "" \
+    "Bump types:" \
+    "  (none)            bump patch, keep current channel" \
+    "  major/minor/patch bump the given part, keep current channel" \
+    "  stable / full     remove prerelease suffix" \
+    "  ${channelList}    switch channel (bumps prerelease number if same base+channel)" \
+    "" \
+    "Examples:" \
+    "  ${cmd}                 # patch bump on current channel" \
+    "  ${cmd} minor           # minor bump on current channel" \
+    "  ${cmd} patch beta      # patch bump, switch to beta channel" \
+    "  ${cmd} rc              # switch to rc channel" \
+    "  ${cmd} stable          # promote to stable release" \
+    "  ${cmd} set 1.2.3" \
+    "  ${cmd} set 1.2.3-beta.1"
+}
+
+# ── git ────────────────────────────────────────────────────────────────────
+
+require_clean_git() {
+  if ! git diff --quiet || ! git diff --cached --quiet; then
+    echo "Error: git working tree is not clean. Commit or stash changes first." >&2
+    exit 1
+  fi
+}
+
+revert_on_failure() {
+  local status=$?
+  if [[ -n $START_HEAD ]]; then
+    log "Release failed — reverting to $START_HEAD"
+    git reset --hard "$START_HEAD"
+  fi
+  if [[ -n $CREATED_TAG ]]; then
+    git tag -d "$CREATED_TAG" >/dev/null 2>&1 || true
+  fi
+  exit $status
+}
+
+# ── version parsing ────────────────────────────────────────────────────────
+
+parse_base_version() {
+  local v="$1"
+  if [[ ! $v =~ ^([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
+    echo "Error: invalid base version '$v' (expected x.y.z)" >&2
+    exit 1
+  fi
+  MAJOR="''${BASH_REMATCH[1]}"
+  MINOR="''${BASH_REMATCH[2]}"
+  PATCH="''${BASH_REMATCH[3]}"
+}
+
+parse_full_version() {
+  local v="$1"
+  CHANNEL="stable"
+  PRERELEASE_NUM=""
+
+  if [[ $v =~ ^([0-9]+\.[0-9]+\.[0-9]+)-([a-zA-Z]+)\.([0-9]+)$ ]]; then
+    BASE_VERSION="''${BASH_REMATCH[1]}"
+    CHANNEL="''${BASH_REMATCH[2]}"
+    PRERELEASE_NUM="''${BASH_REMATCH[3]}"
+  elif [[ $v =~ ^([0-9]+\.[0-9]+\.[0-9]+)$ ]]; then
+    BASE_VERSION="''${BASH_REMATCH[1]}"
+  else
+    echo "Error: invalid version '$v' (expected x.y.z or x.y.z-channel.N)" >&2
+    exit 1
+  fi
+  parse_base_version "$BASE_VERSION"
+}
+
+validate_channel() {
+  local ch="$1"
+  [[ $ch == "stable" ]] && return 0
+  local valid_channels="${channelList}"
+  for c in $valid_channels; do
+    [[ $ch == "$c" ]] && return 0
+  done
+  echo "Error: unknown channel '$ch'. Valid channels: stable $valid_channels" >&2
+  exit 1
+}
+
+version_cmp() {
+  # Returns: 0 if equal, 1 if v1 > v2, 2 if v1 < v2
+  # Stable > prerelease for same base version
+  local v1="$1" v2="$2"
+  [[ $v1 == "$v2" ]] && return 0
+
+  local base1="" pre1="" base2="" pre2=""
+  if [[ $v1 =~ ^([0-9]+\.[0-9]+\.[0-9]+)-(.+)$ ]]; then
+    base1="''${BASH_REMATCH[1]}"
+    pre1="''${BASH_REMATCH[2]}"
+  else
+    base1="$v1"
+  fi
+  if [[ $v2 =~ ^([0-9]+\.[0-9]+\.[0-9]+)-(.+)$ ]]; then
+    base2="''${BASH_REMATCH[1]}"
+    pre2="''${BASH_REMATCH[2]}"
+  else
+    base2="$v2"
+  fi
+
+  if [[ $base1 != "$base2" ]]; then
+    local highest_base
+    highest_base=$(printf '%s\n%s\n' "$base1" "$base2" | sort -V | tail -n1)
+    [[ $highest_base == "$base1" ]] && return 1 || return 2
+  fi
+
+  [[ -z $pre1 && -n $pre2 ]] && return 1 # stable > prerelease
+  [[ -n $pre1 && -z $pre2 ]] && return 2 # prerelease < stable
+  [[ -z $pre1 && -z $pre2 ]] && return 0 # both stable
+
+  local highest_pre
+  highest_pre=$(printf '%s\n%s\n' "$pre1" "$pre2" | sort -V | tail -n1)
+  [[ $highest_pre == "$pre1" ]] && return 1 || return 2
+}
+
+bump_base_version() {
+  case "$1" in
+  major)
+    MAJOR=$((MAJOR + 1))
+    MINOR=0
+    PATCH=0
+    ;;
+  minor)
+    MINOR=$((MINOR + 1))
+    PATCH=0
+    ;;
+  patch) PATCH=$((PATCH + 1)) ;;
+  *)
+    echo "Error: unknown bump part '$1'" >&2
+    exit 1
+    ;;
+  esac
+  BASE_VERSION="''${MAJOR}.''${MINOR}.''${PATCH}"
+}
+
+compute_full_version() {
+  if [[ $CHANNEL == "stable" || -z $CHANNEL ]]; then
+    FULL_VERSION="$BASE_VERSION"
+  else
+    FULL_VERSION="''${BASE_VERSION}-''${CHANNEL}.''${PRERELEASE_NUM:-1}"
+  fi
+  export BASE_VERSION CHANNEL PRERELEASE_NUM FULL_VERSION
+}
+
+# ── gitlint ────────────────────────────────────────────────────────────────
+
+get_gitlint_title_regex() {
+  [[ ! -f $GITLINT_FILE ]] && return 0
+  awk '
+    /^\[title-match-regex\]$/ { in_section=1; next }
+    /^\[/ { in_section=0 }
+    in_section && /^regex=/ { sub(/^regex=/, ""); print; exit }
+  ' "$GITLINT_FILE"
+}
+
+validate_commit_message() {
+  local msg="$1"
+  local regex
+  regex="$(get_gitlint_title_regex)"
+  if [[ -n $regex && ! $msg =~ $regex ]]; then
+    echo "Error: commit message does not match .gitlint title-match-regex" >&2
+    echo "Regex:   $regex" >&2
+    echo "Message: $msg" >&2
+    exit 1
+  fi
+}
+
+# ── version file generation ────────────────────────────────────────────────
+
+generate_version_files() {
+  ${versionFilesScript}
+}
+
+# ── user-provided hooks ────────────────────────────────────────────────────
+
+do_read_version() {
+  ${readVersion}
+}
+
+do_write_version() {
+  ${writeVersion}
+}
+
+do_post_version() {
+  ${postVersion}
+}
+
+# ── main ───────────────────────────────────────────────────────────────────
+
+main() {
+  [[ ''${1-} == "-h" || ''${1-} == "--help" ]] && usage && exit 0
+
+  require_clean_git
+  START_HEAD="$(git rev-parse HEAD)"
+  trap revert_on_failure ERR
+
+  local raw_version
+  raw_version="$(do_read_version)"
+  parse_full_version "$raw_version"
+
+  log "Current: base=$BASE_VERSION channel=$CHANNEL pre=''${PRERELEASE_NUM:-}"
+
+  local action="''${1-}"
+  shift || true
+
+  if [[ $action == "set" ]]; then
+    local newv="''${1-}"
+    [[ -z $newv ]] && echo "Error: 'set' requires a version argument" >&2 && exit 1
+    compute_full_version
+    local current_full="$FULL_VERSION"
+    parse_full_version "$newv"
+    validate_channel "$CHANNEL"
+    compute_full_version
+    local cmp_status=0
+    version_cmp "$FULL_VERSION" "$current_full" || cmp_status=$?
+    case $cmp_status in
+    0)
+      echo "Version $FULL_VERSION is already current; nothing to do." >&2
+      exit 1
+      ;;
+    2)
+      echo "Error: $FULL_VERSION is lower than current $current_full" >&2
+      exit 1
+      ;;
+    esac
+
+  else
+    local part="" target_channel=""
+
+    case "$action" in
+    "") part="patch" ;;
+    major | minor | patch)
+      part="$action"
+      target_channel="''${1-}"
+      ;;
+    stable | full)
+      [[ -n ''${1-} ]] && echo "Error: '$action' takes no second argument" >&2 && usage && exit 1
+      target_channel="stable"
+      ;;
+    *)
+      # check if action is a valid channel
+      local is_channel=0
+      for c in ${channelList}; do
+        [[ $action == "$c" ]] && is_channel=1 && break
+      done
+      if [[ $is_channel == 1 ]]; then
+        [[ -n ''${1-} ]] && echo "Error: channel-only bump takes no second argument" >&2 && usage && exit 1
+        target_channel="$action"
+      else
+        echo "Error: unknown argument '$action'" >&2
+        usage
+        exit 1
+      fi
+      ;;
+    esac
+
+    [[ -z $target_channel ]] && target_channel="$CHANNEL"
+    [[ $target_channel == "full" ]] && target_channel="stable"
+    validate_channel "$target_channel"
+
+    local old_base="$BASE_VERSION" old_channel="$CHANNEL" old_pre="$PRERELEASE_NUM"
+    [[ -n $part ]] && bump_base_version "$part"
+
+    if [[ $target_channel == "stable" ]]; then
+      CHANNEL="stable"
+      PRERELEASE_NUM=""
+    else
+      if [[ $BASE_VERSION == "$old_base" && $target_channel == "$old_channel" && -n $old_pre ]]; then
+        PRERELEASE_NUM=$((old_pre + 1))
+      else
+        PRERELEASE_NUM=1
+      fi
+      CHANNEL="$target_channel"
+    fi
+  fi
+
+  compute_full_version
+  log "Releasing $FULL_VERSION"
+
+  do_write_version
+  log "Updated version source"
+
+  generate_version_files
+
+  do_post_version
+  log "Post-version hook done"
+
+  (cd "$ROOT_DIR" && nix fmt)
+  log "Formatted files"
+
+  git add -A
+  local commit_msg="chore(release): v$FULL_VERSION"
+  validate_commit_message "$commit_msg"
+  git commit -m "$commit_msg"
+  log "Created commit"
+
+  git tag "v$FULL_VERSION"
+  CREATED_TAG="v$FULL_VERSION"
+  log "Tagged v$FULL_VERSION"
+
+  git push
+  git push --tags
+  log "Done — released v$FULL_VERSION"
+
+  trap - ERR
+}
+
+main "$@"