pymizan 3.0.0__tar.gz

pymizan-3.0.0/.agents/skills/mizan/SKILL.md

@@ -0,0 +1,98 @@
+# mizan Development Patterns
+
+> Auto-generated skill from repository analysis; conventions corrected against the
+> actual repository (snake_case sources, pytest suite, ruff linting).
+
+## Overview
+This skill teaches the core development patterns and conventions used in the
+`mizan` Python codebase. You'll learn about file naming, import styles, commit
+message conventions, and how to write and run tests. This guide helps maintain
+consistency and efficiency when contributing to `mizan`.
+
+## Coding Conventions
+
+### File Naming
+- Use **snake_case** for Python files and directories.
+  - Example: `backend/memory/dhikr.py`, `backend/agents/base.py`
+
+### Import Style
+- Use **absolute imports** relative to the `backend/` directory, which lives on
+  `sys.path` (see `tests/conftest.py` for how tests set this up).
+  - Example (inside `backend/`):
+    ```python
+    from memory.dhikr import DhikrMemorySystem
+    ```
+  - Example (entry points that import the package):
+    ```python
+    from backend._version import __version__
+    ```
+
+### Export Style
+- Keep module internals private by leading underscore; re-export the public API
+  from the package `__init__.py` where a package boundary exists.
+  - Example: `backend/perception/__init__.py` re-exports `BasirahEngine` and
+    `NutqEngine`.
+
+### Commit Messages
+- Follow **conventional commit** patterns: `feat:`, `fix:`, `docs:`, `refactor:`,
+  `test:`, `chore:`.
+  - Example:
+    ```
+    feat: add data normalization to processor
+    docs: update usage instructions in README
+    ```
+
+## Workflows
+
+### Adding a New Feature
+**Trigger:** When implementing new functionality.
+**Command:** `/add-feature`
+
+1. Create a new Python file using snake_case naming (e.g. `backend/core/new_feature.py`).
+2. Implement the feature using absolute imports from `backend/`.
+3. Re-export the public entry points from the package `__init__.py` if the
+   feature defines a new package boundary.
+4. Write a test file named `tests/test_<feature>.py` covering the new behavior.
+5. Run lint and tests: `make check` (or `ruff check backend/ tests/` plus
+   `pytest tests/`).
+6. Commit your changes with a `feat:` prefix.
+    - Example: `feat: implement user authentication`
+7. Push your branch and open a pull request.
+
+### Updating Documentation
+**Trigger:** When updating or adding documentation.
+**Command:** `/update-docs`
+
+1. Edit or create documentation files as needed (`README.md`, `docs/`,
+   `CONTRIBUTING.md`, `CHANGELOG.md` under `[Unreleased]`).
+2. Commit changes with a `docs:` prefix.
+    - Example: `docs: add API usage examples`
+3. Push your branch and open a pull request.
+
+## Testing Patterns
+
+- Test files follow the pattern `tests/test_*.py` (e.g. `tests/test_memory.py`).
+- The testing framework is **pytest** with **pytest-asyncio** (`asyncio_mode = "auto"`,
+  configured in `pyproject.toml`).
+- `tests/conftest.py` inserts `backend/` into `sys.path` and provides shared
+  fixtures (`temp_db`, `mock_wali`, `mock_izn`).
+- Example test file:
+    ```python
+    # tests/test_my_module.py
+    import pytest
+
+    from memory.my_module import main_function
+
+    def test_main_function():
+        assert main_function(2, 2) == 4
+    ```
+
+## Commands
+| Command                       | Purpose                                                  |
+|-------------------------------|----------------------------------------------------------|
+| `pip install -e ".[dev]"`     | Install dev dependencies (pytest, ruff, mypy, pre-commit)|
+| `pytest tests/`               | Run the full test suite                                  |
+| `ruff check backend/ tests/`  | Lint sources and tests                                   |
+| `ruff format --check backend/ tests/` | Verify formatting (line-length 100)              |
+| `make check`                  | Run lint + typecheck + test                              |
+| `make serve`                  | Start the backend API server                             |

pymizan-3.0.0/.agents/skills/mizan/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "Mizan"
+  short_description: "Repo-specific patterns and workflows for mizan"
+  default_prompt: "Use the mizan repo skill to follow existing architecture, testing, and workflow conventions."
+policy:
+  allow_implicit_invocation: true

pymizan-3.0.0/.codex/AGENTS.md

@@ -0,0 +1,26 @@
+# ECC for Codex CLI
+
+This supplements the repo's `CLAUDE.md` contributor guide with a repo-local ECC baseline.
+
+## Repo Skill
+
+- Repo-generated Codex skill: `.agents/skills/mizan/SKILL.md`
+- Claude-facing companion skill: `.claude/skills/mizan/SKILL.md`
+- Keep user-specific credentials and private MCPs in `~/.codex/config.toml`, not in this repo.
+
+## MCP Baseline
+
+Treat `.codex/config.toml` as the default ECC-safe baseline for work in this repository.
+The generated baseline enables GitHub, Context7, Exa, Memory, Playwright, and Sequential Thinking.
+
+## Multi-Agent Support
+
+- Explorer: read-only evidence gathering
+- Reviewer: correctness, security, and regression review
+- Docs researcher: API and release-note verification
+
+## Workflow Files
+
+- No dedicated workflow command files were generated for this repo.
+
+Use these workflow files as reusable task scaffolds when the detected repository workflows recur.

pymizan-3.0.0/.codex/agents/docs-researcher.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "medium"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Verify APIs, framework behavior, and release-note claims against primary documentation before changes land.
+Cite the exact docs or file paths that support each claim.
+Do not invent undocumented behavior.
+"""

pymizan-3.0.0/.codex/agents/explorer.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "medium"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Stay in exploration mode.
+Trace the real execution path, cite files and symbols, and avoid proposing fixes unless the parent agent asks for them.
+Prefer targeted search and file reads over broad scans.
+"""

pymizan-3.0.0/.codex/agents/reviewer.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "high"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Review like an owner.
+Prioritize correctness, security, behavioral regressions, and missing tests.
+Lead with concrete findings and avoid style-only feedback unless it hides a real bug.
+"""

pymizan-3.0.0/.codex/config.toml

@@ -0,0 +1,48 @@
+#:schema https://developers.openai.com/codex/config-schema.json
+
+# ECC Tools generated Codex baseline
+approval_policy = "on-request"
+sandbox_mode = "workspace-write"
+web_search = "live"
+
+[mcp_servers.github]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-github"]
+
+[mcp_servers.context7]
+command = "npx"
+args = ["-y", "@upstash/context7-mcp@latest"]
+
+[mcp_servers.exa]
+url = "https://mcp.exa.ai/mcp"
+
+[mcp_servers.memory]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-memory"]
+
+[mcp_servers.playwright]
+command = "npx"
+args = ["-y", "@playwright/mcp@latest", "--extension"]
+
+[mcp_servers.sequential-thinking]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-sequential-thinking"]
+
+[features]
+multi_agent = true
+
+[agents]
+max_threads = 6
+max_depth = 1
+
+[agents.explorer]
+description = "Read-only codebase explorer for gathering evidence before changes are proposed."
+config_file = "agents/explorer.toml"
+
+[agents.reviewer]
+description = "PR reviewer focused on correctness, security, and missing tests."
+config_file = "agents/reviewer.toml"
+
+[agents.docs_researcher]
+description = "Documentation specialist that verifies APIs, framework behavior, and release notes."
+config_file = "agents/docs-researcher.toml"

pymizan-3.0.0/.env.example

@@ -0,0 +1,54 @@
+# ╔══════════════════════════════════════════════════════╗
+# ║          ميزان  ·  MIZAN Configuration               ║
+# ║      Copy to .env and fill in your values            ║
+# ╚══════════════════════════════════════════════════════╝
+
+# ===== AI PROVIDERS (at least one required) =====
+ANTHROPIC_API_KEY=sk-ant-your-key-here
+OPENAI_API_KEY=                        # Optional
+OPENROUTER_API_KEY=                    # Optional — access 300+ models via openrouter.ai
+
+# ===== MODEL =====
+# LLM_PROVIDER=                        # auto-detect | anthropic | openrouter | openai | ollama
+DEFAULT_MODEL=claude-sonnet-4-20250514
+# OpenRouter models: anthropic/claude-sonnet-4, google/gemini-2.0-flash, meta-llama/llama-4-scout, etc.
+
+# ===== SYSTEM =====
+SECRET_KEY=change-this-to-a-secure-random-string
+DEBUG=false
+LOG_LEVEL=INFO
+RUH_ENABLED=true
+# al-Insān faculties: when true, Baṣīra/Hawā/Ḥikma actively gate & redirect the
+# agent loop (high-severity lower-pull → forceful restraint). Default advisory.
+DEEP_FACULTY_LOOP=false
+# ===== SERVER =====
+HOST=0.0.0.0
+PORT=8000
+ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5173
+
+# ===== PRODUCTION DEPLOYMENT =====
+# DOMAIN=mizan.example.com          # Your domain (for SSL)
+# HTTP_PORT=80                      # Public HTTP port
+# HTTPS_PORT=443                    # Public HTTPS port
+# SSL_EMAIL=admin@example.com       # Email for Let's Encrypt
+# NGINX_CONF=nginx-nossl.conf       # nginx-nossl.conf or nginx.conf (SSL)
+
+# ===== DATABASE =====
+DB_PATH=data/mizan.db
+
+# ===== LOCAL AI (Optional) =====
+OLLAMA_URL=http://localhost:11434
+
+# ===== CLOUD PROVIDERS (Optional) =====
+LINODE_API_TOKEN=                      # Linode Personal Access Token (linodes:read_write scope)
+
+# ===== CHANNELS (Optional) =====
+TELEGRAM_BOT_TOKEN=
+DISCORD_BOT_TOKEN=
+SLACK_APP_TOKEN=
+WHATSAPP_TOKEN=
+
+# ===== EMAIL (Optional) =====
+EMAIL_HOST=imap.gmail.com
+EMAIL_USER=
+EMAIL_PASSWORD=

pymizan-3.0.0/.github/CODEOWNERS

@@ -0,0 +1,15 @@
+# MIZAN Code Owners
+# These users will be automatically requested for review on PRs.
+
+# Default owner for everything
+* @CodeWithJuber
+
+# Backend core
+/backend/core/ @CodeWithJuber
+/backend/security/ @CodeWithJuber
+/backend/api/main.py @CodeWithJuber
+
+# Infrastructure
+/docker-compose.yml @CodeWithJuber
+/.github/workflows/ @CodeWithJuber
+/scripts/ @CodeWithJuber

pymizan-3.0.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,58 @@
+name: Bug Report
+description: Report a bug in MIZAN
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug! Please fill out the information below.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: What happened? What did you expect to happen?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to Reproduce
+      description: How can we reproduce this bug?
+      placeholder: |
+        1. Run `mizan serve`
+        2. Send a chat message
+        3. See error...
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Error Logs
+      description: Paste any relevant error logs or stack traces
+      render: shell
+
+  - type: dropdown
+    id: install-method
+    attributes:
+      label: Installation Method
+      options:
+        - pip install
+        - Docker
+        - From source
+    validations:
+      required: true
+
+  - type: input
+    id: python-version
+    attributes:
+      label: Python Version
+      placeholder: "3.12"
+
+  - type: input
+    id: os
+    attributes:
+      label: Operating System
+      placeholder: "Ubuntu 24.04 / macOS 15 / Windows 11"

pymizan-3.0.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,48 @@
+name: Feature Request
+description: Suggest a new feature for MIZAN
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting a feature! Please describe what you'd like.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What problem does this feature solve?
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed Solution
+      description: How should this feature work?
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives Considered
+      description: What other solutions have you considered?
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      options:
+        - Agent System
+        - Memory / Knowledge
+        - Frontend / UI
+        - CLI
+        - API
+        - Skills / Plugins
+        - Security
+        - Deployment / Docker
+        - Documentation
+        - Other
+    validations:
+      required: true

pymizan-3.0.0/.github/workflows/auto-release.yml

@@ -0,0 +1,268 @@
+name: Auto Release
+
+# Automatically creates a release when a PR is merged to main/master.
+# Determines version bump from PR labels or commit messages:
+#   - Label "release:major" or commit with "BREAKING CHANGE" → major bump
+#   - Label "release:minor" or commit with "feat:" → minor bump
+#   - Label "release:patch" or commit with "fix:" → patch bump
+#   - Label "release:beta" → beta pre-release
+#   - Label "release:skip" → skip release entirely
+#
+# Can also be triggered manually via workflow_dispatch.
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+    inputs:
+      bump_type:
+        description: "Version bump type"
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+          - beta
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  determine-release:
+    name: Determine release type
+    runs-on: ubuntu-latest
+    # Skip release commits to avoid infinite loops
+    if: "!startsWith(github.event.head_commit.message, 'chore: release v')"
+    outputs:
+      should_release: ${{ steps.check.outputs.should_release }}
+      bump_type: ${{ steps.check.outputs.bump_type }}
+      is_prerelease: ${{ steps.check.outputs.is_prerelease }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Check release type
+        id: check
+        env:
+          MANUAL_BUMP: ${{ github.event.inputs.bump_type }}
+        run: |
+          BUMP=""
+          IS_PRE="false"
+
+          # Manual trigger takes priority
+          if [ -n "$MANUAL_BUMP" ]; then
+            if [ "$MANUAL_BUMP" = "beta" ]; then
+              BUMP="beta"
+              IS_PRE="true"
+            else
+              BUMP="$MANUAL_BUMP"
+            fi
+            echo "should_release=true" >> "$GITHUB_OUTPUT"
+            echo "bump_type=$BUMP" >> "$GITHUB_OUTPUT"
+            echo "is_prerelease=$IS_PRE" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          # Check merged PR labels
+          PR_NUMBER=$(gh pr list --state merged --base main --json number,mergedAt --jq 'sort_by(.mergedAt) | last | .number' 2>/dev/null || echo "")
+          if [ -n "$PR_NUMBER" ]; then
+            LABELS=$(gh pr view "$PR_NUMBER" --json labels --jq '.labels[].name' 2>/dev/null || echo "")
+
+            if echo "$LABELS" | grep -q "release:skip"; then
+              echo "should_release=false" >> "$GITHUB_OUTPUT"
+              echo "bump_type=" >> "$GITHUB_OUTPUT"
+              echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+              exit 0
+            fi
+
+            if echo "$LABELS" | grep -q "release:major"; then BUMP="major"; fi
+            if echo "$LABELS" | grep -q "release:minor"; then BUMP="minor"; fi
+            if echo "$LABELS" | grep -q "release:patch"; then BUMP="patch"; fi
+            if echo "$LABELS" | grep -q "release:beta"; then BUMP="beta"; IS_PRE="true"; fi
+          fi
+
+          # Fallback: detect from commit messages
+          if [ -z "$BUMP" ]; then
+            LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+            if [ -n "$LAST_TAG" ]; then
+              COMMITS=$(git log "$LAST_TAG..HEAD" --pretty=format:"%s" --no-merges)
+            else
+              COMMITS=$(git log --pretty=format:"%s" --no-merges -20)
+            fi
+
+            if echo "$COMMITS" | grep -qiE "BREAKING CHANGE|^feat!:"; then
+              BUMP="major"
+            elif echo "$COMMITS" | grep -qiE "^feat(\(.+\))?:"; then
+              BUMP="minor"
+            elif echo "$COMMITS" | grep -qiE "^fix(\(.+\))?:"; then
+              BUMP="patch"
+            fi
+          fi
+
+          # Default: no auto-release unless there's a clear signal
+          if [ -z "$BUMP" ]; then
+            echo "should_release=false" >> "$GITHUB_OUTPUT"
+            echo "bump_type=" >> "$GITHUB_OUTPUT"
+            echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "should_release=true" >> "$GITHUB_OUTPUT"
+            echo "bump_type=$BUMP" >> "$GITHUB_OUTPUT"
+            echo "is_prerelease=$IS_PRE" >> "$GITHUB_OUTPUT"
+          fi
+        env:
+          GH_TOKEN: ${{ github.token }}
+
+  auto-release:
+    name: Create release
+    runs-on: ubuntu-latest
+    needs: determine-release
+    if: needs.determine-release.outputs.should_release == 'true'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Configure git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Bump version
+        id: bump
+        run: |
+          BUMP_TYPE="${{ needs.determine-release.outputs.bump_type }}"
+          IS_PRE="${{ needs.determine-release.outputs.is_prerelease }}"
+          CURRENT=$(cat VERSION | tr -d '[:space:]')
+
+          if [ "$BUMP_TYPE" = "beta" ]; then
+            # Parse current version
+            BASE=$(echo "$CURRENT" | sed 's/-.*//')
+            IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE"
+            NEXT_MINOR="$MAJOR.$((MINOR + 1)).0"
+
+            # Check if already in beta
+            if echo "$CURRENT" | grep -q "beta"; then
+              BETA_NUM=$(echo "$CURRENT" | grep -oP 'beta\.\K[0-9]+')
+              NEW_VERSION="${NEXT_MINOR}-beta.$((BETA_NUM + 1))"
+            else
+              NEW_VERSION="${NEXT_MINOR}-beta.1"
+            fi
+          else
+            # Standard semantic version bump
+            BASE=$(echo "$CURRENT" | sed 's/-.*//')
+            IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE"
+            case "$BUMP_TYPE" in
+              patch) NEW_VERSION="$MAJOR.$MINOR.$((PATCH + 1))" ;;
+              minor) NEW_VERSION="$MAJOR.$((MINOR + 1)).0" ;;
+              major) NEW_VERSION="$((MAJOR + 1)).0.0" ;;
+            esac
+          fi
+
+          echo "current=$CURRENT" >> "$GITHUB_OUTPUT"
+          echo "new_version=$NEW_VERSION" >> "$GITHUB_OUTPUT"
+          echo "tag=v$NEW_VERSION" >> "$GITHUB_OUTPUT"
+          echo "Bumping $CURRENT → $NEW_VERSION"
+
+          # Update all version files
+          echo "$NEW_VERSION" > VERSION
+
+          cat > backend/_version.py << PYEOF
+          """Single source of truth for MIZAN version — auto-generated"""
+
+          __version__ = "$NEW_VERSION"
+          PYEOF
+
+          # Clean indentation from heredoc
+          sed -i 's/^          //' backend/_version.py
+
+          sed -i "s/^version = \".*\"/version = \"$NEW_VERSION\"/" pyproject.toml
+          sed -i "s/\"version\": \".*\"/\"version\": \"$NEW_VERSION\"/" frontend/package.json
+
+          # CLI version
+          IFS='.' read -r NM NMI NP <<< "$(echo "$NEW_VERSION" | sed 's/-.*//')"
+          SHORT_VER="$NM.$NMI"
+          sed -i "s/MIZAN v[0-9][0-9]*\.[0-9][0-9]*/MIZAN v$SHORT_VER/" backend/cli.py
+          sed -i "s/MIZAN v[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*/MIZAN v$NEW_VERSION/" backend/cli.py
+
+          # API version
+          sed -i "s/\"version\": \"[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*[^\"]*\"/\"version\": \"$NEW_VERSION\"/g" backend/api/main.py
+          sed -i "s/version=\"[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*[^\"]*\"/version=\"$NEW_VERSION\"/" backend/api/main.py
+
+      - name: Generate changelog
+        id: changelog
+        run: |
+          NEW_VERSION="${{ steps.bump.outputs.new_version }}"
+          DATE=$(date +%Y-%m-%d)
+
+          LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          if [ -n "$LAST_TAG" ]; then
+            COMMITS=$(git log "$LAST_TAG..HEAD" --pretty=format:"- %s" --no-merges)
+          else
+            COMMITS=$(git log --pretty=format:"- %s" --no-merges -20)
+          fi
+
+          # Categorize
+          FEATURES=$(echo "$COMMITS" | grep -iE "^- (feat|add|new)" || true)
+          FIXES=$(echo "$COMMITS" | grep -iE "^- (fix|bug|patch|hotfix)" || true)
+          CHANGES=$(echo "$COMMITS" | grep -iE "^- (refactor|update|improve|enhance|chore|docs|style|perf)" || true)
+
+          # Build entry
+          ENTRY="## [v$NEW_VERSION] — $DATE"
+          if [ -n "$FEATURES" ]; then
+            ENTRY="$ENTRY
+
+          ### Added
+          $FEATURES"
+          fi
+          if [ -n "$FIXES" ]; then
+            ENTRY="$ENTRY
+
+          ### Fixed
+          $FIXES"
+          fi
+          if [ -n "$CHANGES" ]; then
+            ENTRY="$ENTRY
+
+          ### Changed
+          $CHANGES"
+          fi
+
+          # Save for release notes
+          echo "$ENTRY" > /tmp/release_notes.md
+
+          # Prepend to CHANGELOG.md
+          if [ -f CHANGELOG.md ]; then
+            HEADER=$(head -3 CHANGELOG.md)
+            BODY=$(tail -n +4 CHANGELOG.md)
+            printf "%s\n\n%s\n\n%s" "$HEADER" "$ENTRY" "$BODY" > CHANGELOG.md
+          fi
+
+      - name: Commit and tag
+        run: |
+          git add -A
+          git commit -m "chore: release v${{ steps.bump.outputs.new_version }}
+
+          Bump version ${{ steps.bump.outputs.current }} → ${{ steps.bump.outputs.new_version }} and update CHANGELOG.
+
+          [skip ci]"
+          git tag -a "v${{ steps.bump.outputs.new_version }}" -m "Release v${{ steps.bump.outputs.new_version }}"
+          git push origin HEAD
+          git push origin "v${{ steps.bump.outputs.new_version }}"
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: "v${{ steps.bump.outputs.new_version }}"
+          name: "MIZAN v${{ steps.bump.outputs.new_version }}"
+          body_path: /tmp/release_notes.md
+          draft: false
+          prerelease: ${{ needs.determine-release.outputs.is_prerelease == 'true' }}
+          generate_release_notes: true