6.0.0

.github/workflows/ci.yml

@@ -4,7 +4,7 @@ on:
   pull_request:
     branches: [main, dev]
   push:
-    branches: [main, dev]
+    branches: [main]
 
 concurrency:
   group: ci-${{ github.ref }}
@@ -15,33 +15,61 @@ jobs:
     name: Test & Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
-          cache-dependency-path: src/mcp/go.sum
+          go-version: '1.25'
+          cache-dependency-path: go.sum
+
+      - name: Prepare desktop embed placeholder
+        run: |
+          mkdir -p desktop/frontend/dist
+          printf 'ci placeholder\n' > desktop/frontend/dist/.ci-placeholder
 
       - name: Check go mod tidy
-        working-directory: src/mcp
         run: |
           go mod tidy
           git diff --exit-code go.mod go.sum || (echo "go.mod/go.sum not tidy — run 'go mod tidy'" && exit 1)
 
-      - name: Run tests
-        working-directory: src/mcp
-        run: go test -v -race -coverprofile=coverage.out ./...
+      - name: Run race tests
+        run: go test -v -race $(go list ./... | grep -v /desktop)
+
+      - name: Collect coverage
+        run: |
+          packages=$(go list ./... | grep -v /desktop)
+          profile=coverage.out
+          tmp_profile=$(mktemp)
+          found_test_package=false
+
+          echo 'mode: set' > "$profile"
+
+          while IFS= read -r pkg; do
+            dir=$(go list -f '{{.Dir}}' "$pkg")
+            if ! find "$dir" -maxdepth 1 -name '*_test.go' | grep -q .; then
+              continue
+            fi
+
+            go test -v -coverprofile="$tmp_profile" "$pkg"
+            tail -n +2 "$tmp_profile" >> "$profile"
+            found_test_package=true
+          done <<EOF
+          $packages
+          EOF
+
+          if [ "$found_test_package" = false ]; then
+            echo "no test packages found for coverage collection" >&2
+            exit 1
+          fi
 
       - name: Build binary
-        working-directory: src/mcp
-        run: go build -o quint-code -trimpath .
+        run: go build -o haft -trimpath ./cmd/haft/
 
       - name: Smoke test — binary starts and responds to MCP initialize
-        working-directory: src/mcp
         run: |
-          RESPONSE=$(echo '{"jsonrpc":"2.0","method":"initialize","id":1,"params":{}}' | timeout 5 ./quint-code serve 2>/dev/null || true)
+          RESPONSE=$(echo '{"jsonrpc":"2.0","method":"initialize","id":1,"params":{}}' | timeout 5 ./haft serve 2>/dev/null || true)
           if echo "$RESPONSE" | grep -q '"protocolVersion"'; then
             echo "Smoke test passed: MCP server responds correctly"
           else
@@ -51,27 +79,31 @@ jobs:
           fi
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
-          file: src/mcp/coverage.out
+          file: coverage.out
           fail_ci_if_error: false
         continue-on-error: true
 
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
-          cache-dependency-path: src/mcp/go.sum
+          go-version: '1.25'
+          cache-dependency-path: go.sum
+
+      - name: Prepare desktop embed placeholder
+        run: |
+          mkdir -p desktop/frontend/dist
+          printf 'ci placeholder\n' > desktop/frontend/dist/.ci-placeholder
 
       - uses: golangci/golangci-lint-action@v7
         with:
-          version: v2.1.6
-          working-directory: src/mcp
+          version: v2.11.4
           args: --timeout=5m

.github/workflows/install-test.yml

@@ -12,33 +12,32 @@ jobs:
     name: Install (Linux)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - name: Test install.sh (source build fallback)
-        run: |
-          # No release exists for this commit, so install.sh falls back to source build
-          # This tests: clone, go build, PATH detection
-          bash install.sh
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '1.25'
+
+      - name: Build haft
+        run: go build -o haft -trimpath ./cmd/haft/
 
       - name: Verify binary works
         run: |
-          export PATH="$HOME/.local/bin:$PATH"
-          quint-code --help || quint-code version || echo "Binary runs"
+          ./haft version || echo "Binary runs"
 
   install-macos:
     name: Install (macOS)
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
+          go-version: '1.25'
 
-      - name: Test install.sh (source build fallback)
-        run: bash install.sh
+      - name: Build haft
+        run: go build -o haft -trimpath ./cmd/haft/
 
       - name: Verify binary works
         run: |
-          export PATH="$HOME/.local/bin:$PATH"
-          quint-code --help || quint-code version || echo "Binary runs"
+          ./haft version || echo "Binary runs"

.github/workflows/release.yml

@@ -13,34 +13,46 @@ jobs:
     name: Pre-release tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
-          cache-dependency-path: src/mcp/go.sum
+          go-version: '1.25'
+          cache-dependency-path: go.sum
+
+      - name: Prepare desktop embed placeholder
+        run: |
+          mkdir -p desktop/frontend/dist
+          printf 'ci placeholder\n' > desktop/frontend/dist/.ci-placeholder
 
       - name: Run tests
-        working-directory: src/mcp
-        run: go test -race ./...
+        run: go test -race $(go list ./... | grep -v /desktop)
 
   release:
     name: Release
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '1.25'
+          cache-dependency-path: go.sum
+
+      - uses: actions/setup-node@v6
         with:
-          go-version: '1.24'
-          cache-dependency-path: src/mcp/go.sum
+          node-version: '24'
+          cache: 'npm'
+          cache-dependency-path: |
+            desktop/frontend/package-lock.json
+            tui/package-lock.json
 
       - uses: goreleaser/goreleaser-action@v6
         with:

.github/workflows/update-fpf.yml

@@ -13,14 +13,14 @@ jobs:
   update-fpf:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           submodules: true
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
+          go-version: '1.25'
 
       - name: Get current submodule commit
         id: current
@@ -51,10 +51,9 @@ jobs:
 
       - name: Rebuild FTS5 index
         if: steps.check.outputs.changed == 'true'
-        working-directory: src/mcp
         run: |
           NEW_SHA=${{ steps.check.outputs.new_sha }}
-          go run ./cmd/indexer/ ../../data/FPF/FPF-Spec.md ./cmd/fpf.db "$NEW_SHA"
+          go run ./cmd/indexer/ data/FPF/FPF-Spec.md internal/cli/fpf.db "$NEW_SHA"
 
       - name: Create pull request
         if: steps.check.outputs.changed == 'true'
@@ -69,7 +68,7 @@ jobs:
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
           git checkout -b "$BRANCH"
-          git add data/FPF src/mcp/cmd/fpf.db
+          git add data/FPF internal/cli/fpf.db
           git commit -m "chore: update FPF spec index to ${SHORT}
 
           FPF upstream: ${OLD_SHORT} → ${SHORT}
@@ -83,7 +82,7 @@ jobs:
 
           Submodule \`data/FPF\` updated to [\`${SHORT}\`](https://github.com/ailev/FPF/commit/$NEW_SHA).
 
-          FTS5 index rebuilt: \`src/mcp/cmd/fpf.db\`
+          FTS5 index rebuilt: \`internal/cli/fpf.db\`
 
           **Previous:** [\`${OLD_SHORT}\`](https://github.com/ailev/FPF/commit/$OLD_SHA)
           **New:** [\`${SHORT}\`](https://github.com/ailev/FPF/commit/$NEW_SHA)" \

.gitignore

@@ -1,9 +1,32 @@
 .quint
+.haft
 .context
 .mcp.json
-.codex/config.toml
 quint-mcp.json
 src/mcp/quint-code
 src/mcp/quint-mcp
 TODO.md
-skills
+/skills/
+/haft
+
+.DS_Store
+.task/
+tmp/
+__pycache__/
+node_modules/
+dist/
+build/
+.cache/
+*.log
+coverage.out
+
+.claude/
+.codex/
+.crush/
+.cursor/
+.zenflow/
+desktop/desktop
+.zenflow/
+.zenflow/**
+DESIGN.md
+.playwright-mcp/

.golangci.yml

@@ -0,0 +1,77 @@
+version: "2"
+
+run:
+  timeout: 5m
+  tests: false
+
+linters:
+  enable:
+    - errcheck
+    - govet
+    - ineffassign
+    - staticcheck
+    - unused
+    - misspell
+    - unconvert
+    - gosec
+    - bodyclose
+    - gocritic
+    - nolintlint
+  settings:
+    misspell:
+      locale: US
+    gocritic:
+      disabled-checks:
+        - ifElseChain
+        - singleCaseSwitch
+        - elseif
+    nolintlint:
+      require-explanation: true
+      require-specific: true
+    gosec:
+      excludes:
+        - G301 # directory permissions 0755 — fine for user-facing dirs
+        - G302 # file permissions 0644 — fine for user-facing files
+        - G204 # subprocess with variable — we call quint/git as subprocess intentionally
+        - G304 # file inclusion via variable — we read user-specified paths intentionally
+        - G306 # WriteFile permissions 0644 — fine for markdown/config files
+        - G703 # path traversal — we construct paths from project root intentionally
+  exclusions:
+    paths:
+      - desktop/
+    rules:
+      - linters:
+          - errcheck
+        source: "Send[A-Z][A-Za-z]+\\("
+      - linters:
+          - errcheck
+        source: "os\\.Stderr\\.WriteString\\("
+      - linters:
+          - errcheck
+        source: "syscall\\.Syscall6?\\("
+      - linters:
+          - staticcheck
+        text: "QF1003"
+      - linters:
+          - staticcheck
+        text: "QF1012"
+      - linters:
+          - errcheck
+        source: "defer .*(Close|Rollback)\\(\\)"
+      - path: internal/provider/openai.go
+        linters:
+          - gosec
+        text: "G117:"
+      - path: internal/cli/login.go
+        linters:
+          - gosec
+        text: "G117:"
+      - path: internal/cli/term_echo_linux.go
+        linters:
+          - gosec
+        text: "G115:"
+
+formatters:
+  enable:
+    - gofmt
+    - goimports