Bend 2.0.28

[Lorenzobattistela]

The version bump and the changelog entry for 2.0.28, which covers the 21 commits since 2.0.27. The changelog is uncapped in gates/repo.ts (Infinity): it only grows, one entry per release.

What 2.0.28 carries

• Bend killed with SIGKILL on macOS (Apple Silicon) after updating via install.sh #1025: the macOS bend has a valid signature. The release script re-signs the macOS binaries ad hoc and verifies them (bend-lang.com Fix: Clone repo by HTTP method #38, merged).
• Package names of any length: the hub decides, not the CLI #1053: package names are 1 to 64 characters. The hub decides about short names; prod's /publish-check now answers with the auction link, or "is reserved".
• A name is words joined by dots, a namespace is the file's real path, a C id is unique, and every clash is refused #1042: names and namespaces cannot collide. This closes A constructor name reused by a later definition bypasses #905 and admits Empty #994, C backend rejects case-distinct constructors because both names become the same CID macro #989, Names resolve to keys other files register under the importer's namespace: an app file can rewrite what LAWS.bend says, or make PROOF.bend check different code than bend main.bend runs #1002 and A local file can take a hub package's 0x… namespace: ../0x<hash>/f.bend from a subdirectory is loaded locally but named like the package #1005, and it breaks two kinds of existing code (tested on 2.0.27 vs main):
  • A JS effect written for 2.0.27 fails with "no effect registers ". It must now call io_eff(CID(Name), …), and the entry says so.
  • Programs that relied on a name clash no longer check: a name declared in two files, a module redeclaring a Base name, an alias given twice.
• The verdict walks from every law, whichever file fills it, so an unsafe fill in an imported file is listed #1033: an unsafe fill in an imported file is listed (One @unsafe law fill in a file PROOF.bend imports silently proves every law: bend PROOF.bend prints a clean "All terms check." (regression from #848) #1001).
• New effects: Process.run (Add bounded Process.run effect #1030) and IO.thread_count (IO.thread_count answers the worker pool's size, and 1 on the JS lanes #1048).
• Nat.read compares its bound as fifteen digits, so a checked read of 7 finishes #1009: a checked Nat.read finishes (Nat.read("7") in a checked equality never finishes: every digit is compared against a unary 2^48 - 1 #1008).
• Smaller fixes and simplifications: fix(loader): register in Node worker threads #992, fix(io): send empty UDP datagrams in Bun #998, The JS event loop waits again when a signal interrupts select, as the C loop does #1036, A List Cons spare survives val_box over a sum (#970) #987, The C leak guard skips the effect sources, which may say undefined #1049, Metal's refusal of an asked --gpu span names the device's limit #1047, The effects guide gives the JS park its deadline, as it gives the C one, and names select, not poll, in io_sys() #1050, Feature/general literals #1004, refactor(effects): inline one-use C result adapters #981, refactor(comp): share C/JS show_chr and list/tuple brackets #943. Outside contributors are credited by login.

Verified

• gates/ping.ts passes 33 of 33 on the 2.0.28 build made with the site repo's origin/main (signing step included), and gates/repo.ts passes 46 of 46.
• The cluster test gate (gates/test.ts) has not been run on this set of commits.

After merging

1. Switch the site checkout to main and pull. It is on staging, and the signing step is on main.
2. BEND_REPO=… bun release/release.ts --push. Each macOS target must print replacing existing signature.
3. Commit flake.nix here, and install.sh and bend.rb in the site repo.
4. Check that codesign --verify --strict ~/.bend/bin/bend passes after bend update.

🤖 Generated with Claude Code