Release Panini 1.1.8

.gitattributes

@@ -0,0 +1,3 @@
+# Shell scripts must stay LF so they run on the Linux/macOS CI runners
+# (a CRLF script breaks `bash` with a bad-interpreter / syntax error).
+*.sh text eol=lf

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Report a problem with the CLAN SDK, CLI, or Viewer
+title: "[Bug] "
+labels: bug
+assignees: ''
+---
+
+## Description
+
+A clear and concise description of what the bug is.
+
+## Steps to reproduce
+
+1. Run `clan ...`
+2. Open file `...`
+3. See error
+
+## Expected behavior
+
+What you expected to happen.
+
+## Actual behavior
+
+What actually happened. Include the full error message / stack trace if any.
+
+## Environment
+
+- Component: SDK / CLI / Viewer
+- Version (`clan --version` or crate version):
+- OS:
+- Rust version (`rustc --version`, if building from source):
+- Node version (`node --version`, for the Viewer):
+
+## Additional context
+
+A `.clan` file, screenshots, or logs that help reproduce the issue.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,33 @@
+---
+name: Feature request
+about: Suggest an idea or enhancement for CLAN
+title: "[Feature] "
+labels: enhancement
+assignees: ''
+---
+
+## Problem
+
+What problem are you trying to solve? Is your request related to a limitation
+in the spec, SDK, CLI, or Viewer?
+
+## Proposed solution
+
+A clear and concise description of what you want to happen.
+
+## Alternatives considered
+
+Any alternative solutions or features you've considered.
+
+## Scope
+
+Which component(s) would this affect?
+
+- [ ] Spec (`CLAN-SPEC.md`)
+- [ ] SDK (`clan-sdk`)
+- [ ] CLI (`clan-cli`)
+- [ ] Viewer (`clan-viewer`)
+
+## Additional context
+
+Examples, mockups, or references that clarify the request.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,27 @@
+## Summary
+
+Briefly describe what this PR changes and why.
+
+## Related issues
+
+Closes #
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Refactor / performance
+- [ ] Documentation
+- [ ] Build / packaging / CI
+
+## Checklist
+
+- [ ] `cargo build` passes
+- [ ] `cargo test` passes
+- [ ] `cargo clippy` reports no new warnings
+- [ ] Docs / CHANGELOG updated if needed
+- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md)
+
+## Notes for reviewers
+
+Anything reviewers should pay particular attention to.

.github/scripts/set-version.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# Set the workspace version — the single source of truth for the `clan` CLI
+# version and (via tauri.conf.json's omitted version → Cargo fallback) every
+# desktop bundle. Called from the release workflow with the pushed tag.
+#
+# Usage: set-version.sh <version>   e.g. set-version.sh 1.1.4
+#
+# Portable across the Linux/macOS/Windows GitHub runners: uses only bash + awk
+# (Git Bash on Windows ships awk), so it needs no extra tooling to install.
+set -euo pipefail
+
+version="${1:?usage: set-version.sh <version>}"
+version="${version#v}"
+
+case "$version" in
+  [0-9]*.[0-9]*.[0-9]*) ;;
+  *) echo "error: '$version' is not a semver version" >&2; exit 1 ;;
+esac
+
+root="$(cd "$(dirname "$0")/../.." && pwd)"
+cargo_toml="$root/Cargo.toml"
+
+# Replace the first `version = "..."` line inside the [workspace.package] table
+# only, leaving every other section untouched.
+awk -v ver="$version" '
+  /^\[/ { in_pkg = ($0 == "[workspace.package]") }
+  in_pkg && !done && /^[[:space:]]*version[[:space:]]*=/ {
+    sub(/"[^"]*"/, "\"" ver "\""); done = 1
+  }
+  { print }
+  END { if (!done) { print "error: version line not found in [workspace.package]" > "/dev/stderr"; exit 1 } }
+' "$cargo_toml" > "$cargo_toml.tmp"
+mv "$cargo_toml.tmp" "$cargo_toml"
+
+echo "set workspace version to $version"

.github/workflows/ci.yml

@@ -0,0 +1,103 @@
+name: CI
+
+on:
+  push:
+    branches: [ main, 'feature/**' ]
+  pull_request:
+
+# Cancel superseded runs on the same ref (e.g. force-pushes to a PR branch).
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  rust:
+    name: Rust — fmt · clippy · test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
+
+      # Core library + CLI only. The Tauri app's Rust (app/src-tauri) needs
+      # GTK/WebKit system deps and is compiled in the desktop/release build.
+      - name: Format
+        run: cargo fmt -p clan-sdk -p clan-cli -- --check
+
+      # Clippy reports lints but does not block the build (no `-D warnings`)
+      # while pre-existing lint debt is paid down. Tighten later by adding
+      # `-- -D warnings` once the backlog is clear.
+      - name: Clippy
+        run: cargo clippy -p clan-sdk -p clan-cli --all-targets
+
+      - name: Test
+        run: cargo test -p clan-sdk -p clan-cli --all-targets
+
+  frontend:
+    name: Frontend — lint · tsc · build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: app
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: app/.nvmrc
+          cache: npm
+          cache-dependency-path: app/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      # `npm run build` is `tsc -b && vite build`, so this covers the
+      # TypeScript type-check gate as well as the production build.
+      - name: Type-check & build
+        run: npm run build
+
+  conformance:
+    name: CLI conformance harness
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
+
+      - name: Install Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Build clan CLI (release)
+        run: cargo build -p clan-cli --release
+
+      # Deterministic black-box assertions against the built binary.
+      # Exits non-zero on the number of hard failures.
+      - name: Run conformance harness
+        run: node test-sandbox/pipeline/conformance.mjs --clan "${{ github.workspace }}/target/release/clan"
+
+      - name: Upload conformance report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: conformance-report
+          path: conformance.json
+          if-no-files-found: warn