Real-usable wave 1: runtime correctness, node-like CLI, TypeScript, test262 gate, latest deps

.github/workflows/ci.yml

@@ -5,7 +5,8 @@
 #
 # This gate only checks the Rust workspace, so it runs only when Rust-relevant
 # files change (paths allowlist below). Changes to the JS/TS monorepo
-# (package.json, apps/**, packages/**, scripts/**) and docs do NOT trigger it.
+# (package.json, apps/**, packages/**, scripts/**) and docs do NOT trigger it,
+# except scripts/test262-fetch.sh, which pins the test262 checkout.
 
 name: CI
 
@@ -21,6 +22,8 @@ on:
       - "rustfmt.toml"
       - "deny.toml"
       - "_typos.toml"
+      - "tests/test262/**"
+      - "scripts/test262-fetch.sh"
       - ".github/workflows/ci.yml"
   pull_request:
     paths: *rust-paths
@@ -34,13 +37,13 @@ jobs:
     name: rust (fmt + clippy + test + deny + shear + typos)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      # Toolchain is pinned to 1.96.0 (matches rust-toolchain.toml / MSRV).
-      - name: Install toolchain 1.96.0
+      # Toolchain is pinned to 1.99.1 (matches rust-toolchain.toml / MSRV).
+      - name: Install toolchain 1.99.1
         uses: dtolnay/rust-toolchain@master
         with:
-          toolchain: 1.96.0
+          toolchain: 1.99.1
           components: rustfmt, clippy
 
       - name: Cache cargo build
@@ -76,5 +79,37 @@ jobs:
       - name: Supply-chain (cargo-deny)
         run: cargo deny check
 
+  test262:
+    name: test262 (baseline regression gate)
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install toolchain 1.99.1
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: 1.99.1
+
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
+
+      # The pinned test262 SHA lives in the fetch script, so key on its hash.
+      - name: Cache test262 checkout
+        uses: actions/cache@v6
+        with:
+          path: .tmp/test262
+          key: test262-${{ hashFiles('scripts/test262-fetch.sh') }}
+
+      - name: Fetch test262
+        run: bash scripts/test262-fetch.sh
+
+      - name: Build jsc (release)
+        run: cargo build --release -p jsc
+
+      # Fails if any test passing in tests/test262/baseline.txt regressed.
+      - name: Check against baseline
+        run: cargo run --release -p jsc-test262 -- --check
+
   # NOTE: portable musl / multi-platform release binaries are built by
   # release.yml on `v*` tags (and manual dispatch), not on every push.

.github/workflows/release.yml

@@ -26,12 +26,12 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - name: Install toolchain 1.96.0 (+ musl target)
+      - name: Install toolchain 1.99.1 (+ musl target)
         uses: dtolnay/rust-toolchain@master
         with:
-          toolchain: 1.96.0
+          toolchain: 1.99.1
           targets: x86_64-unknown-linux-musl
 
       - name: Install musl tools

.github/workflows/web.yml

@@ -1,9 +1,24 @@
 name: Web
 
 # Frontend/JS-side quality gate for the monorepo (packages/jsc + apps/jsc-web).
-# MANUAL only — run it from the Actions tab (workflow_dispatch) when you want to
-# check the JS/TS side. The push/PR Rust gate lives in ci.yml.
+# Runs on push to main and on pull requests when JS/TS or wasm inputs change
+# (paths allowlist below), and manually via workflow_dispatch. The Rust
+# workspace gate lives in ci.yml.
 on:
+  push:
+    branches: [main]
+    paths: &web-paths
+      - "crates/**"
+      - "packages/**"
+      - "apps/**"
+      - "scripts/**"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - "package.json"
+      - "bun.lock"
+      - ".github/workflows/web.yml"
+  pull_request:
+    paths: *web-paths
   workflow_dispatch:
 
 env:
@@ -14,14 +29,14 @@ jobs:
     name: biome + typecheck + build + test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # The @cdlab/jsc package loads a wasm-bindgen artifact that is gitignored,
       # so build it first (needs Rust + wasm-pack).
-      - name: Install toolchain 1.96.0 (+ wasm target)
+      - name: Install toolchain 1.99.1 (+ wasm target)
         uses: dtolnay/rust-toolchain@master
         with:
-          toolchain: 1.96.0
+          toolchain: 1.99.1
           targets: wasm32-unknown-unknown
 
       - uses: Swatinem/rust-cache@v2

.gitignore

@@ -202,3 +202,6 @@ apps/*/dist/
 # bun / vite caches
 .vite/
 *.tsbuildinfo
+
+# Local scratch: test262 checkout (scripts/test262-fetch.sh) and other tool output
+.tmp/