release: v0.7.0 — Quartz Maturity (Stable) — Documentation Portal

.github/dependabot.yml

@@ -1,12 +1,51 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 version: 2
 updates:
+  # npm dependencies (Docusaurus, React, Tailwind, etc.)
   - package-ecosystem: npm
     directory: /
     schedule:
       interval: weekly
+      day: monday
     open-pull-requests-limit: 10
     labels:
       - dependencies
       - automated
     commit-message:
       prefix: "chore(deps)"
+    groups:
+      docusaurus-all:
+        patterns:
+          - "@docusaurus/*"
+          - "docusaurus*"
+        update-types:
+          - minor
+          - patch
+      react-ecosystem:
+        patterns:
+          - "react"
+          - "react-dom"
+          - "@types/react*"
+        update-types:
+          - minor
+          - patch
+
+  # GitHub Actions
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - github-actions
+    commit-message:
+      prefix: "ci(deps)"
+    groups:
+      actions-all:
+        update-types:
+          - minor
+          - patch

.github/workflows/ci.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 name: docs-ci
 
 on:
@@ -44,45 +47,58 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  validate:
-    name: Validate (Node ${{ matrix.node }})
+  verify:
+    name: Verify (ubuntu-latest, Node LTS)
     runs-on: ubuntu-latest
-    env:
-      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-    strategy:
-      fail-fast: false
-      matrix:
-        node: [22, 24]
+    defaults:
+      run:
+        shell: bash
 
     steps:
-      - name: Checkout
+      - uses: actions/checkout@v6
+
+      - name: Determine Zenzic Core Branch (Parity or Fallback)
+        id: resolve-branch
+        shell: bash
+        run: |
+          TARGET_BRANCH="${{ github.base_ref || github.ref_name }}"
+          echo "Target branch is: $TARGET_BRANCH"
+
+          if git ls-remote --exit-code --heads https://github.com/PythonWoods/zenzic.git "$TARGET_BRANCH" > /dev/null 2>&1; then
+            echo "Branch $TARGET_BRANCH exists in core. Using it."
+            echo "CORE_REF=$TARGET_BRANCH" >> $GITHUB_ENV
+          else
+            echo "Branch $TARGET_BRANCH not found in core. Falling back to main."
+            echo "CORE_REF=main" >> $GITHUB_ENV
+          fi
+
+      - name: Checkout local zenzic (unreleased)
         uses: actions/checkout@v6
+        with:
+          repository: PythonWoods/zenzic
+          ref: ${{ env.CORE_REF }}
+          path: _zenzic_core
+
+      - name: Install just
+        uses: taiki-e/install-action@just
 
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: ${{ matrix.node }}
+          node-version: '24'
           cache: npm
 
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.1.0
+
       - name: Install dependencies
         run: npm ci
 
-      - name: Typecheck
-        run: npm run typecheck
-
-      - name: Build documentation
-        run: npm run build
-
-  sentinel:
-    name: Zenzic Sentinel Audit
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v7
-
-      - name: Zenzic Documentation Audit
-        run: uvx zenzic check all --engine docusaurus --strict
+      - name: Run unified verification
+        shell: bash
+        env:
+          ZENZIC_PROJECT_PATH: ./_zenzic_core
+          PYTHONUTF8: '1'
+          # ZRT-010 — Sovereign Parity: Pre-Launch Guard lives in justfile.
+          # Local and CI run identical 'just check' invocations.
+        run: just verify

.github/workflows/codeql.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 name: codeql
 
 on:

.github/workflows/dependency-review.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 name: dependency-review
 
 on:

.github/workflows/npm-audit.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 name: npm-audit
 
 on:

.github/workflows/release-docs.yml

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 name: release-docs
 
 on:

.github/workflows/release.yml

@@ -0,0 +1,50 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+name: release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Build docs and create GitHub Release
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Build docs
+        run: npm run build
+
+      - name: Archive build output
+        run: tar -czf "docs-${{ github.ref_name }}.tar.gz" build
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: docs-${{ github.ref_name }}.tar.gz
+          generate_release_notes: true

.gitignore

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
+# SPDX-License-Identifier: Apache-2.0
+
 # Dependencies
 /node_modules
 
@@ -10,6 +13,8 @@
 .cache-loader
 *.tsbuildinfo
 .eslintcache
+_zenzic_core/
+__pycache__/
 
 # Misc
 .DS_Store
@@ -21,11 +26,27 @@
 .env.development.local
 .env.test.local
 .env.production.local
+.zenzic.local.toml
 *.log
 
-# Drafts (dev.to articles, internal notes)
+# Drafts (editorial, internal notes)
 /drafts
 
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
+
+# EPOCH 4 — draft vault (git-ignored, local reference only)
+.draft/
+
+# --- Ephemeral Artifacts (Machine Silence) ---
+zenzic-results.sarif
+coverage.json
+coverage.xml
+.coverage
+.coverage.*
+mutmut*
+.mutmut-cache/
+.pytest_cache/
+.nox/
+.hypothesis/

.markdownlint-cli2.jsonc

@@ -11,15 +11,18 @@
     "i18n/**/*.md",
     "i18n/**/*.mdx"
   ],
-  "ignores": [
-    "node_modules/**",
-    "build/**",
-    ".docusaurus/**"
-  ],
+  "gitignore": true,
   "config": {
     "default": true,
     "MD013": false,
+    "MD024": { "siblings_only": true },
+    "MD025": { "front_matter_title": "" },
     "MD033": false,
-    "MD041": false
+    "MD036": false,
+    "MD037": false,
+    "MD041": false,
+    "MD003": { "style": "atx" },
+    "MD010": { "code_blocks": false },
+    "MD046": false
   }
 }