diff --git a/.gitattributes b/.gitattributes
index 7bfd22535a87fbe320445a05dfc92406f93aa4e9..4ba7d92a897f5abc60afe52f47b75dcf32e46d6f 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -5,3 +5,6 @@ clib/stb_image.h linguist-vendored
*.json linguist-detectable=false
*.html linguist-detectable=false
public/** linguist-documentation
+
+# Golden snapshot files must be LF on all platforms.
+tui/testdata/golden/*.txt text eol=lf
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
new file mode 100644
index 0000000000000000000000000000000000000000..59bc8b49e55e2fcb3aab8d4f27ca3ed244b6c83c
--- /dev/null
+++ b/.github/workflows/benchmarks.yml
@@ -0,0 +1,106 @@
+name: Benchmarks
+
+on:
+ pull_request:
+ branches: [master]
+ push:
+ branches: [master]
+
+permissions:
+ contents: read
+
+jobs:
+ benchmark:
+ runs-on: ubuntu-latest
+ timeout-minutes: 30
+ steps:
+ - name: Checkout PR
+ uses: actions/checkout@v6
+ with:
+ fetch-depth: 0
+
+ - name: Set up Go
+ uses: actions/setup-go@v6
+ with:
+ go-version: "1.26.3"
+
+ - name: Install system dependencies
+ run: sudo apt-get update && sudo apt-get install -y libpcsclite-dev
+
+ - name: Install benchstat
+ run: go install golang.org/x/perf/cmd/benchstat@latest
+
+ - name: Resolve base ref
+ id: base
+ run: |
+ if [ "${{ github.event_name }}" = "pull_request" ]; then
+ echo "ref=${{ github.event.pull_request.base.sha }}" >> "$GITHUB_OUTPUT"
+ else
+ echo "ref=${{ github.event.before }}" >> "$GITHUB_OUTPUT"
+ fi
+
+ - name: Benchmark PR
+ run: |
+ go test -run=^$ -bench=. -benchmem -benchtime=3x -count=6 ./backend/ ./tui/ \
+ | tee new.txt
+
+ - name: Checkout base
+ run: git checkout ${{ steps.base.outputs.ref }}
+
+ - name: Benchmark base
+ run: |
+ go test -run=^$ -bench=. -benchmem -benchtime=3x -count=6 ./backend/ ./tui/ \
+ | tee old.txt || echo "base benchmarks failed" > old.txt
+
+ - name: Restore PR checkout
+ run: git checkout ${{ github.sha }}
+
+ - name: Compare with benchstat
+ run: |
+ set +e
+ benchstat old.txt new.txt | tee benchstat.txt
+
+ - name: Classify result
+ run: |
+ python3 - <<'PY' > verdict.txt
+ import re
+ worse, better = 0, 0
+ with open("benchstat.txt") as f:
+ for line in f:
+ m = re.search(r"([-+]?\d+\.\d+)%", line)
+ if not m:
+ continue
+ delta = float(m.group(1))
+ if "ns/op" in line or "B/op" in line or "allocs/op" in line:
+ if delta > 3:
+ worse += 1
+ elif delta < -3:
+ better += 1
+ status = "neutral"
+ if worse > 0 and worse >= better:
+ status = "regression"
+ elif better > 0:
+ status = "improvement"
+ print(f"status={status}")
+ print(f"worse={worse}")
+ print(f"better={better}")
+ PY
+ cat verdict.txt
+
+ - name: Record PR metadata
+ if: github.event_name == 'pull_request'
+ run: |
+ echo "${{ github.event.pull_request.number }}" > pr-number.txt
+
+ - name: Upload artifacts
+ if: always()
+ uses: actions/upload-artifact@v4
+ with:
+ name: benchmarks
+ path: |
+ old.txt
+ new.txt
+ benchstat.txt
+ verdict.txt
+ pr-number.txt
+ if-no-files-found: ignore
diff --git a/.github/workflows/bot-bench-comment.yml b/.github/workflows/bot-bench-comment.yml
new file mode 100644
index 0000000000000000000000000000000000000000..229328aaa20f4e2fbde32ed516e29ae3b13abb18
--- /dev/null
+++ b/.github/workflows/bot-bench-comment.yml
@@ -0,0 +1,116 @@
+name: Bot - Benchmark PR Comment
+
+on:
+ workflow_run:
+ workflows: ["Benchmarks"]
+ types: [completed]
+
+permissions:
+ contents: read
+ pull-requests: write
+ actions: read
+
+jobs:
+ comment:
+ if: github.event.workflow_run.event == 'pull_request'
+ runs-on: ubuntu-latest
+ steps:
+ - name: Download benchmarks artifact
+ uses: actions/github-script@v7
+ with:
+ script: |
+ const run_id = context.payload.workflow_run.id;
+ const { data: list } = await github.rest.actions.listWorkflowRunArtifacts({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ run_id,
+ });
+ const art = list.artifacts.find(a => a.name === 'benchmarks');
+ if (!art) {
+ core.setFailed('benchmarks artifact missing');
+ return;
+ }
+ const dl = await github.rest.actions.downloadArtifact({
+ owner: context.repo.owner,
+ repo: context.repo.repo,
+ artifact_id: art.id,
+ archive_format: 'zip',
+ });
+ const fs = require('fs');
+ fs.writeFileSync('benchmarks.zip', Buffer.from(dl.data));
+
+ - name: Unzip
+ run: |
+ mkdir -p bench
+ unzip -o benchmarks.zip -d bench
+ ls -la bench
+
+ - name: Post comment
+ uses: actions/github-script@v7
+ with:
+ github-token: ${{ secrets.HOMEBREW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+ script: |
+ const fs = require('fs');
+ const read = (p, fallback = '') => {
+ try { return fs.readFileSync(p, 'utf8'); } catch (_) { return fallback; }
+ };
+
+ const prRaw = read('bench/pr-number.txt').trim();
+ const pr_number = parseInt(prRaw, 10);
+ if (!pr_number) {
+ core.info('no PR number recorded; skipping');
+ return;
+ }
+
+ const report = read('bench/benchstat.txt', '(empty)');
+ const verdict = read('bench/verdict.txt');
+ const parse = key => {
+ const m = verdict.match(new RegExp("^" + key + "=(.+)$", "m"));
+ return m ? m[1].trim() : '';
+ };
+ const status = parse('status') || 'neutral';
+ const worse = parse('worse') || '0';
+ const better = parse('better') || '0';
+
+ const headers = {
+ regression: "### Benchmark report — regression detected",
+ improvement: "### Benchmark report — improvement detected",
+ neutral: "### Benchmark report — no significant change",
+ };
+ const body = [
+ headers[status] || headers.neutral,
+ `Metrics worse: **${worse}** · better: **${better}** (threshold: ±3%).`,
+ "",
+ "benchstat output
",
+ "",
+ "```",
+ report.trim() || "(empty)",
+ "```",
+ "",
+ "