Promote develop to main — PR1+PR2 token engine

.github/pull_request_template.md

@@ -0,0 +1,19 @@
+## Linked issue
+
+Closes #<!-- REQUIRED: link to an open issue. PRs without a linked issue will not be merged. -->
+
+## Summary
+
+<!-- What does this PR do? 2-3 bullets. -->
+
+## Test plan
+
+- [ ] `cargo test` passes
+- [ ] `bash bench/run.sh` — all fixtures ≥30% reduction, ≤100ms latency
+- [ ] `bash bench/run_context.sh` — all context scenarios pass (if touching context engine)
+
+## Checklist
+
+- [ ] Issue is linked above
+- [ ] CI is green
+- [ ] No `Co-Authored-By:` trailers in commit messages

.github/workflows/ci.yml

@@ -15,3 +15,5 @@ jobs:
           cp target/release/squeez "$HOME/.claude/squeez/bin/squeez"
       - name: Run benchmarks
         run: bash bench/run.sh
+      - name: Run context-engine benchmarks
+        run: bash bench/run_context.sh

.github/workflows/cleanup-branches.yml

@@ -0,0 +1,33 @@
+name: Delete branch after merge
+
+on:
+  pull_request:
+    types: [closed]
+
+jobs:
+  delete-branch:
+    if: github.event.pull_request.merged == true && github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Delete merged branch
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const branch = context.payload.pull_request.head.ref;
+            const protected = ['main', 'develop'];
+            if (protected.includes(branch)) {
+              console.log(`Skipping protected branch: ${branch}`);
+              return;
+            }
+            try {
+              await github.rest.git.deleteRef({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                ref: `heads/${branch}`,
+              });
+              console.log(`Deleted branch: ${branch}`);
+            } catch (e) {
+              console.log(`Branch already deleted or not found: ${branch}`);
+            }

.github/workflows/no-claude-trailer.yml

@@ -0,0 +1,24 @@
+name: No Claude trailer
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  check-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Fail if any commit has Claude Co-Authored-By trailer
+        run: |
+          base="${{ github.event.pull_request.base.sha }}"
+          head="${{ github.event.pull_request.head.sha }}"
+          bad=$(git log "$base".."$head" --format="%B" | grep -iE "^Co-Authored-By:.*noreply@anthropic\.com" || true)
+          if [ -n "$bad" ]; then
+            echo "ERROR: commit messages contain Claude Co-Authored-By trailers."
+            echo "Remove them with: git rebase -i <base> and edit the commit messages."
+            exit 1
+          fi
+          echo "No Claude trailers found — OK"

.github/workflows/pr-checks.yml

@@ -0,0 +1,26 @@
+name: PR Checks
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+
+jobs:
+  require-linked-issue:
+    if: github.base_ref == 'develop' || github.base_ref == 'main'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check for linked issue
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const body = context.payload.pull_request.body || '';
+            // Accept "Closes #N", "Fixes #N", "Resolves #N" (case-insensitive)
+            const linked = /(?:closes|fixes|resolves)\s+#\d+/i.test(body);
+            if (!linked) {
+              core.setFailed(
+                'This PR has no linked issue.\n' +
+                'Add "Closes #<issue-number>" to the PR description before merging.'
+              );
+            } else {
+              console.log('Linked issue found — OK');
+            }

.github/workflows/promote-develop.yml

@@ -0,0 +1,54 @@
+name: Promote develop to main
+on:
+  push:
+    branches: [develop]
+permissions:
+  contents: write
+  pull-requests: write
+jobs:
+  create_pr:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create or update PR to main (using PAT)
+        if: ${{ secrets.PR_CREATION_TOKEN != '' }}
+        uses: actions/github-script@v6
+        with:
+          github-token: ${{ secrets.PR_CREATION_TOKEN }}
+          script: |
+            const prTitle = 'Promote develop to main';
+            const prBody = 'Automated PR to propose changes from develop to main. Review and merge according to repo policy.';
+            const { data: prs } = await github.rest.pulls.list({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              state: 'open',
+              head: `${context.repo.owner}:develop`,
+              base: 'main',
+            });
+            if (prs.length === 0) {
+              await github.rest.pulls.create({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                title: prTitle,
+                head: 'develop',
+                base: 'main',
+                body: prBody,
+              });
+            } else {
+              const pr = prs[0];
+              await github.rest.pulls.update({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                pull_number: pr.number,
+                title: prTitle,
+                body: prBody,
+              });
+            }
+
+      - name: Skip automatic promotion (no token)
+        if: ${{ secrets.PR_CREATION_TOKEN == '' }}
+        run: |
+          echo "Automatic promotion to main skipped: PR_CREATION_TOKEN secret not set."
+          echo "To enable automatic promotion, either:"
+          echo "  1) Enable 'Allow GitHub Actions to create and approve pull requests' in the repository Settings → Actions → General (recommended), or"
+          echo "  2) Create a Personal Access Token (PAT) with 'repo' scope and add it as a repository secret named 'PR_CREATION_TOKEN'."
+          echo "Create secret via GH CLI: gh secret set PR_CREATION_TOKEN --body '<your-token>'"

.github/workflows/release.yml

@@ -62,8 +62,23 @@ jobs:
           name: squeez-linux-aarch64
           path: squeez-linux-aarch64
 
+  build-windows-x86_64:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Build
+        run: cargo build --release --target x86_64-pc-windows-msvc
+      - name: Rename binary
+        run: mv target/x86_64-pc-windows-msvc/release/squeez.exe squeez-windows-x86_64.exe
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: squeez-windows-x86_64
+          path: squeez-windows-x86_64.exe
+
   release:
-    needs: [build-macos, build-linux-x86_64, build-linux-aarch64]
+    needs: [build-macos, build-linux-x86_64, build-linux-aarch64, build-windows-x86_64]
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -75,11 +90,13 @@ jobs:
           cd squeez-macos-universal && sha256sum squeez-macos-universal > ../checksums.sha256 && cd ..
           cd squeez-linux-x86_64 && sha256sum squeez-linux-x86_64 >> ../checksums.sha256 && cd ..
           cd squeez-linux-aarch64 && sha256sum squeez-linux-aarch64 >> ../checksums.sha256 && cd ..
+          cd squeez-windows-x86_64 && sha256sum squeez-windows-x86_64.exe >> ../checksums.sha256 && cd ..
       - name: Upload to release
         uses: softprops/action-gh-release@v1
         with:
           files: |
             squeez-macos-universal/squeez-macos-universal
             squeez-linux-x86_64/squeez-linux-x86_64
             squeez-linux-aarch64/squeez-linux-aarch64
+            squeez-windows-x86_64/squeez-windows-x86_64.exe
             checksums.sha256

.gitignore

@@ -2,3 +2,10 @@
 /bin/
 *.DS_Store
 .omc/
+docs/
+.worktrees/
+
+# Bench reports (regenerated on every run)
+bench/report.md
+bench/report_context.md
+

Cargo.toml

@@ -12,6 +12,8 @@ name = "squeez"
 path = "src/lib.rs"
 
 [dependencies]
+
+[target.'cfg(unix)'.dependencies]
 libc = "0.2"
 
 [profile.release]