[WRONG BRANCH] release: promote dev to main for v2.31.0

.github/actions/setup-project-bun/action.yml

@@ -0,0 +1,30 @@
+name: Setup project Bun
+description: >-
+  Install the Bun runtime for a job. Installs the version declared in
+  package.json (dependencies.bun), keeping the runtime SOT in one place so
+  version bumps only touch package.json and bun.lock.
+
+outputs:
+  version:
+    description: The resolved Bun version string.
+    value: ${{ steps.resolve.outputs.version }}
+
+runs:
+  using: composite
+  steps:
+    - name: Resolve project Bun version
+      id: resolve
+      shell: bash
+      run: |
+        version="$(node -p "require('./package.json').dependencies.bun")"
+        if [ -z "$version" ]; then
+          echo "::error::Could not resolve Bun version from package.json"
+          exit 1
+        fi
+        echo "version=$version" >> "$GITHUB_OUTPUT"
+        echo "Using Bun $version from package.json"
+
+    - name: Setup Bun
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+      with:
+        bun-version: ${{ steps.resolve.outputs.version }}

.github/workflows/ci.yml

@@ -268,10 +268,8 @@ jobs:
           # residue. Matches the convention already used by the other workflows.
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       # The GUI install is NOT optional here, however unrelated it looks to a
       # test shard. Several files under tests/ import JSX-bearing modules from
@@ -315,10 +313,8 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: |
@@ -356,10 +352,8 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: |
@@ -393,10 +387,8 @@ jobs:
           # residue. Matches the convention already used by the other workflows.
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: |
@@ -463,10 +455,8 @@ jobs:
           # residue. Matches the convention already used by the other workflows.
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: |
@@ -598,10 +588,8 @@ jobs:
           # residue. Matches the convention already used by the other workflows.
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: |
@@ -674,10 +662,8 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       - name: Install dependencies
         run: bun install --frozen-lockfile

.github/workflows/release.yml

@@ -97,10 +97,8 @@ jobs:
           fi
 
       # opencodex is bun-native (the prepublishOnly audit, GUI build, and typecheck run under bun).
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - name: Setup project Bun
+        uses: ./.github/actions/setup-project-bun
 
       # node + npm perform the actual publish. registry-url points npm at the public registry.
       - name: Setup Node

.github/workflows/service-lifecycle.yml

@@ -39,9 +39,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - uses: ./.github/actions/setup-project-bun
 
       - run: bun install --frozen-lockfile
 
@@ -161,9 +159,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - uses: ./.github/actions/setup-project-bun
 
       - run: bun install --frozen-lockfile
 
@@ -241,9 +237,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
-        with:
-          bun-version: 1.3.14
+      - uses: ./.github/actions/setup-project-bun
 
       - run: bun install --frozen-lockfile
 

README.md

@@ -58,12 +58,12 @@ ocx start                            # or `ocx service` to run it in the backgro
 ```
 
 <details>
-<summary>Install from source (latest dev, Bun canary)</summary>
+<summary>Install from source (latest dev)</summary>
 
 **macOS / Linux:**
 
 ```bash
-curl -fsSL https://bun.sh/install | bash && ~/.bun/bin/bun upgrade --canary
+curl -fsSL https://bun.sh/install | bash
 git clone https://github.com/lidge-jun/opencodex.git
 cd opencodex && ~/.bun/bin/bun install
 ~/.bun/bin/bun run src/cli/index.ts start
@@ -72,13 +72,13 @@ cd opencodex && ~/.bun/bin/bun install
 **Windows (PowerShell):**
 
 ```powershell
-irm bun.sh/install.ps1 | iex; bun upgrade --canary
+irm bun.sh/install.ps1 | iex
 git clone https://github.com/lidge-jun/opencodex.git
 cd opencodex; bun install
 bun run src/cli/index.ts start
 ```
 
-Source install runs the latest `dev` branch with Bun canary. Memory ownership
+Source install runs the latest `dev` branch. Memory ownership
 patches, runtime GC improvements, and unreleased fixes are available here before
 they reach the npm package.
 
@@ -208,7 +208,7 @@ Qwen Cloud, SiliconFlow, and more. Full list: `ocx init` or the
 ocx init                       # interactive setup (writes config, wires Codex, offers the shim)
 ocx start [--port 10100]       # start the proxy in the foreground
 ocx stop                       # stop + restore native Codex
-ocx service [install|start|stop|status|uninstall|remove]  # background service
+ocx service [install|repair|restart|start|stop|status|uninstall|remove]  # background service
 ocx codex-shim install         # start the proxy on demand whenever `codex` launches
 ocx health [--json]            # check immediate proxy liveness
 ocx ready [--json] [--wait [--timeout <seconds>]]  # check post-sync readiness

devlog/_fin/260814_bun14-preview-dev/000_plan.md

@@ -0,0 +1,43 @@
+# 000 — bun14-preview-dev: Plan
+
+## Objective
+
+Build preview-dev = dev + Bun 1.4 product candidate stack. When Bun 1.4.0
+ships to npm, the only change is dependency version bump — all compatibility
+patches, CI qualification, and memory/stream/worker improvements are already
+landed and verified on the canary.
+
+## Loop-spec
+
+- Loop archetype: spec-satisfaction (CI green + typecheck + memory gate)
+- Write scope: src/, .github/, scripts/runtime/, tests/, devlog/, package.json, bun.lock
+- Out of scope: npm publish, release.yml preview-dev gate, main/preview promotion, Go runtime, gui/
+- Budget: unbounded token, sol medium subagents
+
+## Work-phase map
+
+| WP | Doc | Slice | Depends on |
+|----|-----|-------|------------|
+| 1 | 010 | CI composite action + preview-dev qualification | — |
+| 2 | 020 | Bundle Bun 1.4.0-canary.1 | — |
+| 3 | 030 | Runtime provenance recording | 020 |
+| 4 | 040 | Memory comparison harness | 020 |
+| 5 | 050 | Stream caps revision gate | 020 |
+| 6 | 060 | Exact byte queue + global relay budget | 050 |
+| 7 | 070 | Fetch body cancel on retry/failure | 020 |
+| 8 | 080 | Worker settle skip on Bun 1.4 | 020 |
+| 9 | 090 | Isolate teardown proof | 080 |
+| 10 | 100 | Promotion + rollback docs | all |
+
+## Accept criteria
+
+- c-ci-sot: No hardcoded bun-version in .github/workflows/ (grep returns empty)
+- c-bundle: package.json bun=1.4.0-canary.1, typecheck clean
+- c-provenance: qualified-bun.json + runtime test pass
+- c-memory: compare-bun-memory.ts exists with wave definitions
+- c-stream-caps: bunHasAsyncPullCancelFix returns true for verified revision
+- c-byte-queue: Explicit queue + per-stream/global caps in relay
+- c-fetch-cancel: disposeResponseBody in all error paths
+- c-worker: storageWorkerOsJoinSettleMs returns 0 for qualified Bun 1.4
+- c-isolate: CI has consolidated + split forms
+- c-docs: Promotion doc with rollback steps

devlog/_fin/260814_bun14-preview-dev/010_ci_composite.md

@@ -0,0 +1,41 @@
+# 010 — CI: Source Bun version from package.json
+
+## Files
+
+### NEW: .github/actions/setup-project-bun/action.yml
+Composite action that reads `dependencies.bun` from package.json and sets up Bun.
+
+```yaml
+name: Setup project Bun
+description: Install the Bun version declared in package.json
+runs:
+  using: composite
+  steps:
+    - name: Resolve project Bun version
+      id: project-bun
+      shell: bash
+      run: |
+        version="$(node -p "require('./package.json').dependencies.bun")"
+        test -n "$version"
+        echo "version=$version" >> "$GITHUB_OUTPUT"
+    - name: Setup Bun
+      uses: oven-sh/setup-bun@v2
+      with:
+        bun-version: ${{ steps.project-bun.outputs.version }}
+```
+
+### MODIFY: .github/workflows/ci.yml
+- Replace all 7 occurrences of `bun-version: 1.3.14` with composite action ref
+- Add `preview-dev` to push.branches
+
+### MODIFY: .github/workflows/service-lifecycle.yml
+- Replace all 3 occurrences of `bun-version: 1.3.14` with composite action ref
+
+### MODIFY: .github/workflows/release.yml
+- Replace `bun-version: 1.3.14` with composite action ref (release stays main/preview only)
+
+## Verification
+```bash
+grep -r 'bun-version: 1.3.14' .github/ # must return empty
+```
+