Merge branch 'termux'

Author: capocasa

.github/workflows/termux.yml

@@ -0,0 +1,64 @@
+name: Termux (Android arm64)
+
+on:
+  push:
+    branches: [main]
+    tags: ['[0-9]+.[0-9]+.[0-9]+']
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-22.04
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: jiro4989/setup-nim-action@v2
+        with:
+          nim-version: stable
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          parent-nim-install-directory: $HOME
+          nim-install-directory: nim-toolchain
+
+      - name: Install dependencies
+        run: |
+          nimble install -y https://github.com/capocasa/sandwall
+          nimble install -y --depsOnly
+
+      - name: Download Android NDK
+        # The main binary builds for Termux via NDK cross-compile. No
+        # -d:termux: that links -landroid-glob (a Termux package for
+        # pre-API-28 devices); targeting API 28+ gets glob natively.
+        # OpenSSL is dlopen'ed at runtime (Termux's openssl package
+        # provides libssl.so.3), so no TLS libs are linked here.
+        run: |
+          curl -fsSL -o ndk.zip https://dl.google.com/android/repository/android-ndk-r26c-linux.zip
+          unzip -q ndk.zip
+          echo "NDK_CLANG=$PWD/android-ndk-r26c/toolchains/llvm/prebuilt/linux-x86_64/bin/aarch64-linux-android28-clang" >> "$GITHUB_ENV"
+
+      - name: Build (cross, --os:android --cpu:arm64)
+        run: |
+          nim c -d:release --os:android --cpu:arm64 -d:ssl -d:testPlainHttp \
+            --clang.exe:"$NDK_CLANG" --clang.linkerexe:"$NDK_CLANG" \
+            -o:3code-android src/threecode.nim
+          file 3code-android
+
+      - name: Package
+        run: |
+          mkdir -p 3code-termux-arm64
+          cp 3code-android 3code-termux-arm64/3code
+          ./3code -v > 3code-termux-arm64/VERSION
+          cp README.md LICENSE 3code-termux-arm64/
+          tar czf 3code-termux-arm64.tar.gz 3code-termux-arm64
+
+      - name: Upload artifact (GitHub Actions)
+        uses: actions/upload-artifact@v4
+        with:
+          name: 3code-termux-arm64
+          path: 3code-termux-arm64.tar.gz
+
+      - name: Upload artifact to 3code.capocasa.dev
+        if: github.ref == 'refs/heads/main'
+        run: |
+          curl -f -H "Authorization: Bearer ${{ secrets.RELEASE_SECRET }}" -F "file=@3code-termux-arm64.tar.gz" \
+            https://3code.capocasa.dev/main/builds/upload.nim

docs/manual.md

@@ -83,17 +83,19 @@ irm https://3code.capocasa.dev/install.ps1 | iex
 
 ### Termux (Android arm64)
 
-No prebuilt binary for Android; build from source inside Termux:
+The CI ships a prebuilt Termux binary (`3code-termux-arm64.tar.gz`), or
+build from source inside Termux:
 
 ```
 pkg install nim git openssl
 nimble install https://github.com/capocasa/3code
 ```
 
+The binary needs Termux's OpenSSL for TLS (`pkg install openssl`).
 Notes: the Landlock sandbox and desktop notifications are not available
 on Android; both degrade gracefully (in-process path checks still
 apply, notifications no-op). Auto-update is disabled — update with
-`nimble install` again.
+`nimble install` again or re-download the tarball.
 
 ### Enter your API key
 

tests/tty/test_slurp_resize_reasoning.nim

@@ -4,6 +4,15 @@
 ## this; it surfaces against live reasoning providers (hy3, glm-5.x) and was
 ## first reported around the flake/test-flakiness refactor.
 ##
+discard """
+  disabled: "win"
+  ## Fails under ConPTY: the spinner's 80ms ticks plus resize bursts
+  ## hit the same throughput class of failure as test_spinner_race_stress
+  ## — committed scrollback rows are wiped in place while ConPTY is
+  ## still draining. Linux/macOS render paths pass; the slurp regression
+  ## is covered there.
+"""
+##
 ## Root cause: `beginEditorRedraw` (engine.nim) walked up one extra row
 ## for a 400ms window after every SIGWINCH via `resizeRecent()`. The comment
 ## claimed the extra row "sits inside the volatile region (the always-reserved