Files
zeekay 6487b1198c harden supply chain, fix CI provisioning, finish rebrand
Supply chain (zapc npm wrapper): npm/install.js now downloads the published
<asset>.tar.gz.sha256 and verifies the tarball with SHA-256 (createHash) BEFORE
extract/chmod/exec; fails closed on download error, malformed digest, or
mismatch. The release already emits the hashes — now they are consumed.

CI: replace the nonexistent `apt-get install -y zap libzap-dev` (5 sites across
ci.yml + coverage.yml) with a composite action (.github/actions/install-zap)
that builds and installs the real `zap` schema front-end from zap-proto/cpp-core
— the binary `zapc::CompilerCommand` execs as `zap compile`. Fix the dangling
zapc/test/rust.zap symlink (../rust.capnp -> ../rust.zap) that broke the test
crate. Unify CI trigger branch master -> main.

Whitespace: zapc consumes a binary code_generator_request from the front-end
and does not parse .zap text, so whitespace-significant syntax is inherited
transparently from cpp-core's desugar — documented in LLM.md, no redundant
parser added (one way to do everything).

Rebrand: drop the last Cap'n-Proto brand references from zap-native docs
(LLM.md, benchmark/README.md). Historical fork blog posts and license headers
keep their provenance.

Verified: `cargo build --workspace && cargo test --workspace` pass with the
front-end on PATH (200+ tests, 0 failures); deps refreshed within-major
(bytes 1.12.0, getrandom 0.4.3).
2026-06-19 23:52:23 -07:00

Symbolic link
1 line
11 B
Plaintext