brainjar 0.3.975 → 0.3.977

package/brainjar.js

@@ -107,7 +107,7 @@ var CLI_VERSION, CACHE, DAY;
 var init_version_check = __esm({
   "packages/cli/src/version-check.ts"() {
     "use strict";
-    CLI_VERSION = "0.3.975";
+    CLI_VERSION = "0.3.977";
     CACHE = path.join(os.homedir(), ".brainjar", "version-check.json");
     DAY = 864e5;
   }
@@ -5895,6 +5895,11 @@ function loadEnv() {
   }
   return { ...cachedFileVars, ...process.env };
 }
+function estimateCostUsd(model, tokens) {
+  const [base = model, tier] = model.split(":");
+  const p = MODEL_PRICES[base] ?? MODEL_PRICES[MODEL_TIERS.standard];
+  return (tier === "flex" ? 0.5 : 1) * (tokens.input * p.input + tokens.cachedInput * p.cachedInput + tokens.output * p.output) / 1e6;
+}
 function loadConfig(env = loadEnv()) {
   return new Config(env);
 }
@@ -5907,10 +5912,24 @@ function redactUrlPassword(url) {
     return url;
   }
 }
-var cachedFileVars, DEFAULT_TENANT_ID, SECRETS, CORPORATE_API_KEY_ENV, DEFAULT_DATABASE_URL, MissingSecretError, Config;
+var cachedFileVars, MODEL_TIERS, MODEL_PRICES, DEFAULT_TENANT_ID, SECRETS, CORPORATE_API_KEY_ENV, DEFAULT_DATABASE_URL, MissingSecretError, Config;
 var init_config = __esm({
   "packages/shared/src/config.ts"() {
     "use strict";
+    MODEL_TIERS = {
+      fast: "claude-haiku-4-5",
+      standard: "claude-sonnet-5",
+      premium: "claude-opus-5"
+    };
+    MODEL_PRICES = {
+      "claude-opus-5": { input: 5, cachedInput: 0.5, output: 25 },
+      // Launch pricing made permanent (official pricing page, checked 2026-08-18).
+      "claude-sonnet-5": { input: 2, cachedInput: 0.2, output: 10 },
+      "claude-haiku-4-5": { input: 1, cachedInput: 0.1, output: 5 },
+      "gpt-5.6-luna": { input: 0.2, cachedInput: 0.02, output: 1.2 },
+      // Released 2026-09-22 (official pricing page, checked 2026-09-25).
+      "gpt-6-luna": { input: 0.1, cachedInput: 0.01, output: 0.5 }
+    };
     DEFAULT_TENANT_ID = "00000000-0000-0000-0000-000000000002";
     SECRETS = {
       anthropicApiKey: {
@@ -6016,13 +6035,6 @@ var init_config = __esm({
   }
 });
 
-// packages/shared/src/ratelimit.ts
-var init_ratelimit = __esm({
-  "packages/shared/src/ratelimit.ts"() {
-    "use strict";
-  }
-});
-
 // packages/shared/src/sanitize.ts
 var init_sanitize = __esm({
   "packages/shared/src/sanitize.ts"() {
@@ -6073,7 +6085,7 @@ function validateFlowDiagram(d) {
       if (n2.evidence.length > 12)
         errs.push(`nodes: ${n2.id} too many evidence entries`);
       for (const ev of n2.evidence)
-        if (!short(ev, 200) || /[-]/.test(ev))
+        if (!short(ev, 200) || /[\x00-\x1f]/.test(ev))
           errs.push(`nodes: ${n2.id} evidence entry is not a short string`);
     }
     if (n2.description !== void 0 && !short(n2.description, 600))
@@ -6216,7 +6228,6 @@ var init_src = __esm({
     init_memory();
     init_confidence();
     init_config();
-    init_ratelimit();
     init_sanitize();
     init_flow();
     init_capture_events();
@@ -6238,8 +6249,11 @@ function getPool() {
     }
     pool = new esm_default.Pool({
       connectionString: config.databaseUrl,
+      // Per process (BJ-137): many instances times the default would fill Postgres; each role
+      // sets its own in the compose file. PgBouncer in front is the cloud ticket's (BJ-140).
+      max: Number(process.env.DATABASE_POOL_MAX) || 10,
       // Session GUC set in the startup packet — race-free, applies before any query.
-      options: `-c app.tenant_id=${config.tenantId}`
+      options: `-c app.tenant_id=${config.tenantId} -c hnsw.iterative_scan=strict_order`
     });
     pool.on("error", () => {
     });
@@ -7599,7 +7613,7 @@ var init_repository = __esm({
 });
 
 // packages/db/src/ratelimit.ts
-var init_ratelimit2 = __esm({
+var init_ratelimit = __esm({
   "packages/db/src/ratelimit.ts"() {
     "use strict";
     init_pool();
@@ -7629,7 +7643,7 @@ var init_auth = __esm({
     "use strict";
     init_src();
     init_pool();
-    init_ratelimit2();
+    init_ratelimit();
     init_auth_event();
     init_email_token();
     DEFAULT_TTL_HOURS = 24 * 90;
@@ -7776,7 +7790,22 @@ var init_settings = __esm({
       // Voice chat (voice handoff, 2026-09-21): an explicit "true" or "false"; absent means on.
       "voice_enabled",
       // The GPT-Live voice (voice picker, 2026-09-22): an id from VOICE_OPTIONS; absent = default.
-      "voice_name"
+      "voice_name",
+      // AI cost cap (BJ-139), set on the Operator page; env overrides, defaults in ingest/allowance.
+      "ai_contingent",
+      // "on" | "off": monthly contingent per workspace (default on in SaaS)
+      "ai_free_monthly_usd",
+      // Free workspace, USD per month
+      "ai_team_seat_monthly_usd",
+      // Team, USD per seat and month (applies once licenses exist)
+      "ai_operator_exempt",
+      // "true" | "false": operator accounts are never capped
+      "ai_daily_budget_usd",
+      // the instance's emergency brake on the company key; empty = off
+      "ai_budget_released_day",
+      // YYYY-MM-DD the operator lifted today's brake
+      "ai_budget_alerted_day"
+      // YYYY-MM-DD the operator was told the brake tripped
     ];
     PROVIDER_KEY_SETTINGS = {
       anthropic: "anthropic_api_key",
@@ -7810,10 +7839,102 @@ var init_tickets = __esm({
 });
 
 // packages/db/src/jobs.ts
+var CAPTURE_JOB_KINDS, USER_JOB_KINDS;
 var init_jobs = __esm({
   "packages/db/src/jobs.ts"() {
     "use strict";
     init_pool();
+    CAPTURE_JOB_KINDS = [
+      "capture-extract",
+      "capture-session",
+      "capture-transcript",
+      "capture-structure"
+    ];
+    USER_JOB_KINDS = [
+      ...CAPTURE_JOB_KINDS,
+      "deepscan",
+      "verify",
+      "summary-report",
+      "resynthesize"
+    ];
+  }
+});
+
+// packages/db/src/spend.ts
+function dayKey(at = /* @__PURE__ */ new Date()) {
+  return `day:${at.toISOString().slice(0, 10)}`;
+}
+async function addSpend(brainId, usd, at = /* @__PURE__ */ new Date(), pool2 = getPool()) {
+  if (!(usd > 0)) return;
+  await pool2.query(
+    `INSERT INTO llm_spend (key, usd)
+     SELECT k, $2 FROM (
+       SELECT $3::text AS k
+       UNION ALL
+       SELECT 'ws:' || b.owner_id || ':' || $4 FROM brain b
+       WHERE b.id = $1 AND b.owner_id IS NOT NULL
+     ) keys
+     ON CONFLICT (key) DO UPDATE SET usd = llm_spend.usd + EXCLUDED.usd, updated_at = now()`,
+    [brainId, usd, dayKey(at), at.toISOString().slice(0, 7)]
+  );
+}
+var init_spend = __esm({
+  "packages/db/src/spend.ts"() {
+    "use strict";
+    init_pool();
+  }
+});
+
+// packages/db/src/provider-rate.ts
+async function saveRate(keyId2, model, s, pool2 = getPool()) {
+  await pool2.query(
+    `INSERT INTO llm_rate (key_id, model, requests_limit, requests_remaining, requests_reset_at,
+       tokens_limit, tokens_remaining, tokens_reset_at, observed_at)
+     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
+     ON CONFLICT (key_id, model) DO UPDATE SET
+       requests_limit = EXCLUDED.requests_limit,
+       requests_remaining = EXCLUDED.requests_remaining,
+       requests_reset_at = EXCLUDED.requests_reset_at,
+       tokens_limit = EXCLUDED.tokens_limit,
+       tokens_remaining = EXCLUDED.tokens_remaining,
+       tokens_reset_at = EXCLUDED.tokens_reset_at,
+       observed_at = EXCLUDED.observed_at
+     WHERE llm_rate.observed_at <= EXCLUDED.observed_at`,
+    [
+      keyId2,
+      model,
+      s.requestsLimit,
+      s.requestsRemaining,
+      s.requestsResetAt,
+      s.tokensLimit,
+      s.tokensRemaining,
+      s.tokensResetAt,
+      s.observedAt
+    ]
+  );
+}
+async function loadRate(keyId2, model, pool2 = getPool()) {
+  const r = await pool2.query(
+    "SELECT * FROM llm_rate WHERE key_id = $1 AND model = $2",
+    [keyId2, model]
+  );
+  const x = r.rows[0];
+  if (!x) return null;
+  const n2 = (v) => v === null ? null : Number(v);
+  return {
+    requestsLimit: n2(x.requests_limit),
+    requestsRemaining: n2(x.requests_remaining),
+    requestsResetAt: x.requests_reset_at,
+    tokensLimit: n2(x.tokens_limit),
+    tokensRemaining: n2(x.tokens_remaining),
+    tokensResetAt: x.tokens_reset_at,
+    observedAt: x.observed_at
+  };
+}
+var init_provider_rate = __esm({
+  "packages/db/src/provider-rate.ts"() {
+    "use strict";
+    init_pool();
   }
 });
 
@@ -7841,11 +7962,21 @@ async function recordLlmUsage(u) {
       Math.max(0, Math.round(u.outputTokens))
     ]
   );
+  await addSpend(
+    u.brainId ?? null,
+    estimateCostUsd(u.model, {
+      input: u.inputTokens,
+      cachedInput: u.cachedInputTokens,
+      output: u.outputTokens
+    })
+  );
 }
 var init_usage = __esm({
   "packages/db/src/usage.ts"() {
     "use strict";
+    init_src();
     init_pool();
+    init_spend();
   }
 });
 
@@ -7859,7 +7990,7 @@ var init_src2 = __esm({
     init_auth();
     init_api_token();
     init_oauth();
-    init_ratelimit2();
+    init_ratelimit();
     init_auth_event();
     init_email_token();
     init_totp2();
@@ -7872,6 +8003,8 @@ var init_src2 = __esm({
     init_conversations();
     init_tickets();
     init_jobs();
+    init_spend();
+    init_provider_rate();
     init_ruleset();
     init_usage();
     init_audit_origin();
@@ -12740,11 +12873,118 @@ var init_sdk = __esm({
   }
 });
 
+// packages/ingest/src/provider-rate.ts
+import { createHash as createHash2 } from "node:crypto";
+function parseDuration(s) {
+  if (!s) return null;
+  let ms = 0;
+  let hit = false;
+  for (const [, n2, unit] of s.matchAll(/(\d+(?:\.\d+)?)(ms|h|m|s)/g)) {
+    hit = true;
+    ms += Number(n2) * UNIT_MS[unit];
+  }
+  return hit ? ms : null;
+}
+function parseRateHeaders(h, now = /* @__PURE__ */ new Date()) {
+  const num = (a, b) => {
+    const v = h.get(a) ?? h.get(b);
+    const n2 = v === null ? NaN : Number(v);
+    return Number.isFinite(n2) ? n2 : null;
+  };
+  const at = (openai, anthropic) => {
+    const d = parseDuration(h.get(openai));
+    if (d !== null) return new Date(now.getTime() + d);
+    const t = Date.parse(h.get(anthropic) ?? "");
+    return Number.isFinite(t) ? new Date(t) : null;
+  };
+  const s = {
+    requestsLimit: num(
+      "x-ratelimit-limit-requests",
+      "anthropic-ratelimit-requests-limit"
+    ),
+    requestsRemaining: num(
+      "x-ratelimit-remaining-requests",
+      "anthropic-ratelimit-requests-remaining"
+    ),
+    requestsResetAt: at(
+      "x-ratelimit-reset-requests",
+      "anthropic-ratelimit-requests-reset"
+    ),
+    tokensLimit: num(
+      "x-ratelimit-limit-tokens",
+      "anthropic-ratelimit-tokens-limit"
+    ),
+    tokensRemaining: num(
+      "x-ratelimit-remaining-tokens",
+      "anthropic-ratelimit-tokens-remaining"
+    ),
+    tokensResetAt: at(
+      "x-ratelimit-reset-tokens",
+      "anthropic-ratelimit-tokens-reset"
+    ),
+    observedAt: now
+  };
+  return s.requestsLimit === null && s.tokensLimit === null ? null : s;
+}
+function roomWaitMs(s, now = /* @__PURE__ */ new Date(), reserve = RESERVE) {
+  const wait = (limit, remaining, resetAt) => {
+    if (!limit || remaining === null || !resetAt) return 0;
+    const need = reserve * limit;
+    if (remaining >= need || resetAt <= now) return 0;
+    const span = resetAt.getTime() - s.observedAt.getTime();
+    const okAt = s.observedAt.getTime() + span * (need - remaining) / (limit - remaining);
+    return Math.max(0, Math.ceil(okAt - now.getTime()));
+  };
+  return Math.max(
+    wait(s.requestsLimit, s.requestsRemaining, s.requestsResetAt),
+    wait(s.tokensLimit, s.tokensRemaining, s.tokensResetAt)
+  );
+}
+async function awaitRoom(id, model) {
+  for (; ; ) {
+    const s = await loadRate(id, model).catch(() => null);
+    const ms = s ? roomWaitMs(s) : 0;
+    if (ms <= 0) return;
+    await sleep2(Math.min(ms, MAX_NAP_MS) + Math.random() * 250);
+  }
+}
+function noteRate(id, model, headers) {
+  const s = headers ? parseRateHeaders(headers) : null;
+  if (s) void saveRate(id, model, s).catch(() => {
+  });
+}
+function rateFetch(apiKey, model, automatic) {
+  const id = keyId(apiKey);
+  return async (input, init2) => {
+    if (automatic) await awaitRoom(id, model);
+    const res = await fetch(input, init2);
+    noteRate(id, model, res.headers);
+    return res;
+  };
+}
+var RESERVE, MAX_NAP_MS, sleep2, isAutomatic, keyId, UNIT_MS;
+var init_provider_rate2 = __esm({
+  "packages/ingest/src/provider-rate.ts"() {
+    "use strict";
+    init_src2();
+    RESERVE = 0.2;
+    MAX_NAP_MS = 6e4;
+    sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+    isAutomatic = (meta) => !meta?.actor && !meta?.waiting;
+    keyId = (apiKey) => createHash2("sha256").update(apiKey).digest("hex").slice(0, 16);
+    UNIT_MS = { ms: 1, s: 1e3, m: 6e4, h: 36e5 };
+  }
+});
+
 // packages/ingest/src/llm.ts
 function rationaleModelId(env = process.env) {
   return env.BRAINJAR_RATIONALE_MODEL?.trim() || "claude-opus-5";
 }
 function logUsage(meta, model, usage) {
+  if (!meta?.brainId)
+    console.warn(
+      `brainjar: AI call without a Brain (workload ${meta?.workload ?? "other"}); it counts only toward the daily budget`
+    );
   void recordLlmUsage({
     brainId: meta?.brainId ?? null,
     workload: meta?.workload ?? "other",
@@ -12770,6 +13010,7 @@ var init_llm = __esm({
     "use strict";
     init_sdk();
     init_src2();
+    init_provider_rate2();
     cachedSystem = (system) => [
       {
         type: "text",
@@ -12782,9 +13023,12 @@ var init_llm = __esm({
       model;
       meta;
       constructor(opts) {
-        this.client = new Anthropic({ apiKey: opts.apiKey });
         this.model = opts.model ?? rationaleModelId();
         this.meta = opts.meta;
+        this.client = new Anthropic({
+          apiKey: opts.apiKey,
+          fetch: rateFetch(opts.apiKey, this.model, isAutomatic(opts.meta))
+        });
       }
       async complete({
         system,
@@ -12831,7 +13075,18 @@ var init_llm = __esm({
 var init_openai = __esm({
   "packages/ingest/src/openai.ts"() {
     "use strict";
+    init_src();
     init_llm();
+    init_provider_rate2();
+  }
+});
+
+// packages/ingest/src/allowance.ts
+var init_allowance = __esm({
+  "packages/ingest/src/allowance.ts"() {
+    "use strict";
+    init_src2();
+    init_src();
   }
 });
 
@@ -12841,6 +13096,7 @@ var init_routing = __esm({
     "use strict";
     init_src2();
     init_src();
+    init_allowance();
     init_llm();
     init_openai();
   }
@@ -12928,42 +13184,280 @@ function resolveSpecifier(fromFile, spec, known) {
     for (const probe of [
       clean,
       c,
-      ...SOURCE_EXTS.map((e) => clean + e),
-      ...SOURCE_EXTS.map((e) => `${clean}/index${e}`)
+      ...JS_EXTS.map((e) => clean + e),
+      ...JS_EXTS.map((e) => `${clean}/index${e}`)
     ]) {
       if (known.has(probe)) return probe;
     }
   }
   return null;
 }
+function resolveBySuffix(segments, exts, fromFile, idx, inits = []) {
+  if (segments.length === 0) return null;
+  const want = segments.join("/");
+  const last = segments[segments.length - 1];
+  const hits = [
+    ...(idx.byName.get(last) ?? []).filter(
+      (f) => exts.includes(ext(f)) && (stem(f) === want || stem(f).endsWith(`/${want}`))
+    ),
+    ...inits.flatMap(
+      (init2) => (idx.byName.get(stem(init2)) ?? []).filter(
+        (f) => f.endsWith(`/${want}/${init2}`) || f === `${want}/${init2}`
+      )
+    )
+  ];
+  if (hits.length === 0) return null;
+  return hits.sort(
+    (a, b) => nearness(b, fromFile) - nearness(a, fromFile) || a.length - b.length
+  )[0];
+}
+function pythonTargets(file, src, idx) {
+  const out = [];
+  const mod = (base, segs) => resolveBySuffix([...base, ...segs], [".py"], file, idx, ["__init__.py"]);
+  for (const m of src.matchAll(PY_FROM)) {
+    const dots = m[1].length;
+    const segs = m[2] ? m[2].split(".") : [];
+    const names = m[3].split(",").map((n2) => n2.trim().split(/\s+/)[0]);
+    if (dots > 0) {
+      let dir = path4.posix.dirname(file);
+      for (let i = 1; i < dots; i++) dir = path4.posix.dirname(dir);
+      const base = dir === "." ? [] : dir.split("/");
+      const exact = (s) => {
+        const p = [...base, ...s].join("/");
+        return idx.known.has(`${p}.py`) ? `${p}.py` : idx.known.has(`${p}/__init__.py`) ? `${p}/__init__.py` : null;
+      };
+      const target = segs.length ? exact(segs) : null;
+      if (target) out.push(target);
+      for (const n2 of names) {
+        const sub = exact([...segs, n2]);
+        if (sub) out.push(sub);
+      }
+    } else if (segs.length) {
+      const sub = names.map((n2) => mod([], [...segs, n2])).filter(Boolean);
+      const target = resolveLongest(segs, (s) => mod([], s));
+      out.push(...sub, ...target ? [target] : []);
+    }
+  }
+  for (const m of src.matchAll(PY_IMPORT))
+    for (const spec of m[1].split(",")) {
+      const target = resolveLongest(spec.trim().split("."), (s) => mod([], s));
+      if (target) out.push(target);
+    }
+  return out;
+}
+function rustTargets(file, src, idx) {
+  const out = [];
+  const dir = path4.posix.dirname(file);
+  const base = path4.posix.basename(file, ".rs");
+  const own = ["lib", "main", "mod"].includes(base) ? dir : `${dir}/${base}`;
+  const crateSrc = [...idx.crates.values()].filter((s) => file.startsWith(`${s}/`)).sort((a, b) => b.length - a.length)[0];
+  const inDir = (d, segs) => {
+    const p = [d, ...segs].join("/");
+    return idx.known.has(`${p}.rs`) ? `${p}.rs` : idx.known.has(`${p}/mod.rs`) ? `${p}/mod.rs` : null;
+  };
+  for (const m of src.matchAll(RS_MOD)) {
+    const hit = inDir(own, [m[1]]);
+    if (hit) out.push(hit);
+  }
+  for (const m of src.matchAll(RS_USE))
+    for (const use of expandUse(m[1])) {
+      const [head, ...rest] = use.replace(/^::/, "").split("::");
+      let root;
+      if (head === "crate") root = crateSrc;
+      else if (head === "self") root = own;
+      else if (head === "super")
+        root = ["lib", "main", "mod"].includes(base) ? path4.posix.dirname(dir) : dir;
+      else if (head && idx.crates.has(head)) {
+        root = idx.crates.get(head);
+        if (rest.length === 0) {
+          const lib = `${root}/lib.rs`;
+          if (idx.known.has(lib)) out.push(lib);
+          continue;
+        }
+      }
+      if (!root) continue;
+      const hit = resolveLongest(rest, (s) => inDir(root, s));
+      if (hit) out.push(hit);
+      else if (head !== "self" && head !== "super") {
+        const lib = `${root}/lib.rs`;
+        if (idx.known.has(lib)) out.push(lib);
+      }
+    }
+  return out;
+}
+function goTargets(file, src, idx) {
+  const specs = [
+    ...[...src.matchAll(GO_BLOCK)].flatMap(
+      (m) => [...m[1].matchAll(/"([^"]+)"/g)].map((x) => x[1])
+    ),
+    ...[...src.matchAll(GO_ONE)].map((m) => m[1])
+  ];
+  const out = [];
+  for (const spec of specs)
+    for (const [mod, dir] of idx.goModules) {
+      if (spec !== mod && !spec.startsWith(`${mod}/`)) continue;
+      const pkgDir = [dir === "." ? "" : dir, spec.slice(mod.length + 1)].filter(Boolean).join("/");
+      const rep = (idx.byDir.get(pkgDir) ?? []).find(
+        (f) => f.endsWith(".go") && !f.endsWith("_test.go")
+      );
+      if (rep) out.push(rep);
+    }
+  return out;
+}
+function swiftTargets(src, idx) {
+  const out = [];
+  for (const m of src.matchAll(
+    /^[ \t]*(?:@\w+[ \t]+)*import[ \t]+(?:\w+[ \t]+)?(\w+)/gm
+  )) {
+    for (const [dir, files] of idx.byDir) {
+      if (!(dir === `Sources/${m[1]}` || dir.endsWith(`/Sources/${m[1]}`) || dir.includes(`/Sources/${m[1]}/`)))
+        continue;
+      const rep = files.find((f) => f.endsWith(".swift") || f.endsWith(".h"));
+      if (rep) {
+        out.push(rep);
+        break;
+      }
+    }
+  }
+  return out;
+}
+function jvmTargets(file, src, idx) {
+  const out = [];
+  for (const m of src.matchAll(
+    /^[ \t]*import[ \t]+(?:static[ \t]+)?([\w.]+)/gm
+  )) {
+    const hit = resolveLongest(
+      m[1].split("."),
+      (s) => resolveBySuffix(s, [".java", ".kt"], file, idx)
+    );
+    if (hit) out.push(hit);
+  }
+  return out;
+}
+function cTargets(file, src, idx) {
+  const out = [];
+  for (const m of src.matchAll(
+    /^[ \t]*#[ \t]*(?:include|import)[ \t]*"([^"]+)"/gm
+  )) {
+    const rel = path4.posix.normalize(
+      path4.posix.join(path4.posix.dirname(file), m[1])
+    );
+    if (idx.known.has(rel)) out.push(rel);
+    else {
+      const hit = resolveBySuffix(
+        stem(m[1]).split("/"),
+        [ext(m[1])],
+        file,
+        idx
+      );
+      if (hit) out.push(hit);
+    }
+  }
+  return out;
+}
 async function scanStructure(root) {
   const entries = await readdir(root, { recursive: true, withFileTypes: true });
   const files = [];
+  const cargo = [];
+  const gomod = [];
   for (const e of entries) {
     if (!e.isFile()) continue;
     const parent = e.parentPath ?? e.path ?? root;
     const rel = toPosix(path4.relative(root, path4.join(parent, e.name)));
     if (rel.split("/").some((seg) => SKIP_DIRS.has(seg))) continue;
-    if (SOURCE_EXTS.some((ext) => rel.endsWith(ext))) files.push(rel);
+    if (SOURCE_EXTS.some((x) => rel.endsWith(x))) files.push(rel);
+    else if (e.name === "Cargo.toml") cargo.push(rel);
+    else if (e.name === "go.mod") gomod.push(rel);
+  }
+  const read = (f) => readFile(path4.join(root, f), "utf8");
+  const idx = {
+    known: new Set(files),
+    byName: /* @__PURE__ */ new Map(),
+    byDir: /* @__PURE__ */ new Map(),
+    crates: /* @__PURE__ */ new Map(),
+    goModules: /* @__PURE__ */ new Map()
+  };
+  for (const f of [...files].sort()) {
+    const name = path4.posix.basename(stem(f));
+    idx.byName.set(name, [...idx.byName.get(name) ?? [], f]);
+    const d = path4.posix.dirname(f);
+    idx.byDir.set(d, [...idx.byDir.get(d) ?? [], f]);
+  }
+  for (const c of cargo) {
+    const pkg = (await read(c)).match(
+      /\[package\][^[]*?\bname\s*=\s*"([^"]+)"/
+    );
+    const dir = path4.posix.dirname(c);
+    if (pkg)
+      idx.crates.set(
+        pkg[1].replace(/-/g, "_"),
+        `${dir === "." ? "" : `${dir}/`}src`.replace(/^\//, "")
+      );
   }
-  const known = new Set(files);
+  for (const g of gomod) {
+    const mod = (await read(g)).match(/^module\s+(\S+)/m);
+    if (mod) idx.goModules.set(mod[1], path4.posix.dirname(g));
+  }
+  const exported = /* @__PURE__ */ new Map();
+  for (const f of files.filter((x) => x.endsWith(".rs")))
+    for (const m of (await read(f)).matchAll(RS_EXPORT))
+      if (!exported.has(m[1])) exported.set(m[1], f);
+  const names = [...exported.keys()].slice(0, 2e3);
+  const callRe = names.length ? new RegExp(
+    `\\b(${names.map((n2) => n2.replace(/[^\w]/g, "")).join("|")})\\s*\\(`,
+    "g"
+  ) : null;
+  const seen = /* @__PURE__ */ new Set();
   const edges = [];
+  const add = (from, to) => {
+    if (!to || to === from || !idx.known.has(to)) return;
+    const k = JSON.stringify([from, to]);
+    if (seen.has(k)) return;
+    seen.add(k);
+    edges.push({ from, to });
+  };
   for (const file of files) {
-    const source = await readFile(path4.join(root, file), "utf8");
-    for (const spec of extractImports(source)) {
-      const to = resolveSpecifier(file, spec, known);
-      if (to && to !== file) edges.push({ from: file, to });
-    }
+    const src = await read(file);
+    const x = ext(file);
+    if (JS_EXTS.includes(x))
+      for (const spec of extractImports(src))
+        add(file, resolveSpecifier(file, spec, idx.known));
+    else if (x === ".py")
+      for (const t of pythonTargets(file, src, idx)) add(file, t);
+    else if (x === ".rs")
+      for (const t of rustTargets(file, src, idx)) add(file, t);
+    else if (x === ".go")
+      for (const t of goTargets(file, src, idx)) add(file, t);
+    else if (x === ".swift")
+      for (const t of swiftTargets(src, idx)) add(file, t);
+    else if (x === ".java" || x === ".kt")
+      for (const t of jvmTargets(file, src, idx)) add(file, t);
+    else if (C_EXTS.includes(x))
+      for (const t of cTargets(file, src, idx)) add(file, t);
+    if (callRe && x !== ".rs")
+      for (const m of src.matchAll(callRe))
+        add(file, exported.get(m[1]) ?? null);
   }
   return { modules: files.sort(), edges };
 }
-var SOURCE_EXTS, SKIP_DIRS, IMPORT_RE, toPosix;
+var JS_EXTS, C_EXTS, SOURCE_EXTS, SKIP_DIRS, IMPORT_RE, toPosix, ext, stem, nearness, resolveLongest, PY_FROM, PY_IMPORT, RS_MOD, RS_USE, expandUse, GO_BLOCK, GO_ONE, RS_EXPORT;
 var init_structure = __esm({
   "packages/ingest/src/structure.ts"() {
     "use strict";
     init_src2();
     init_entities();
-    SOURCE_EXTS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
+    JS_EXTS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
+    C_EXTS = [".c", ".h", ".cc", ".cpp", ".hpp", ".m", ".mm"];
+    SOURCE_EXTS = [
+      ...JS_EXTS,
+      ".py",
+      ".rs",
+      ".go",
+      ".swift",
+      ".java",
+      ".kt",
+      ...C_EXTS
+    ];
     SKIP_DIRS = /* @__PURE__ */ new Set([
       "node_modules",
       ".git",
@@ -12973,10 +13467,51 @@ var init_structure = __esm({
       ".next",
       "dist",
       "build",
-      "coverage"
+      "coverage",
+      // Build output and dependency caches of the other languages.
+      "target",
+      ".build",
+      "__pycache__",
+      ".venv",
+      "venv",
+      "vendor",
+      "Pods",
+      "DerivedData",
+      ".gradle"
     ]);
     IMPORT_RE = /(?:import|export)\s+[^'"]*?from\s+['"]([^'"]+)['"]|import\s*\(\s*['"]([^'"]+)['"]\s*\)|require\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
     toPosix = (p) => p.split(path4.sep).join("/");
+    ext = (f) => path4.posix.extname(f);
+    stem = (f) => f.slice(0, f.length - ext(f).length);
+    nearness = (a, b) => {
+      const x = a.split("/");
+      const y = b.split("/");
+      let i = 0;
+      while (i < x.length && i < y.length && x[i] === y[i]) i++;
+      return i;
+    };
+    resolveLongest = (segments, resolve) => {
+      for (let n2 = segments.length; n2 > 0; n2--) {
+        const hit = resolve(segments.slice(0, n2));
+        if (hit) return hit;
+      }
+      return null;
+    };
+    PY_FROM = /^[ \t]*from[ \t]+(\.*)([\w.]*)[ \t]+import[ \t]+\(?([^\n#)]+)/gm;
+    PY_IMPORT = /^[ \t]*import[ \t]+([\w.]+(?:[ \t]*,[ \t]*[\w.]+)*)/gm;
+    RS_MOD = /^[ \t]*(?:pub(?:\([^)]*\))?[ \t]+)?mod[ \t]+(\w+)[ \t]*;/gm;
+    RS_USE = /\buse[ \t]+([^;]+);/g;
+    expandUse = (use) => {
+      const clean = use.replace(/\s+/g, "");
+      const brace = clean.match(/^(.*?)::\{(.*)\}$/);
+      if (!brace) return [clean.replace(/::\*$/, "")];
+      return brace[2].split(",").filter(Boolean).map(
+        (part) => part === "self" ? brace[1] : `${brace[1]}::${part.replace(/::\*$/, "")}`
+      );
+    };
+    GO_BLOCK = /\bimport[ \t]*\(([\s\S]*?)\)/g;
+    GO_ONE = /\bimport[ \t]+(?:[\w.]+[ \t]+)?"([^"]+)"/g;
+    RS_EXPORT = /extern[ \t]+"C"[ \t]+fn[ \t]+([A-Za-z_]\w{2,})/g;
   }
 });
 
@@ -14394,6 +14929,8 @@ var init_summaries = __esm({
     "use strict";
     init_src2();
     init_src();
+    init_routing();
+    init_allowance();
     REPORT_SYSTEM = [
       "You write the period report of a software project for the people who work on it: what changed, why it matters, what was decided, what is still open.",
       "Input: the captured records inside the period, numbered, oldest first, each with its date, time, type and title. Record types: feature (behavior that was built or changed), decision (a recorded direction, NOT a delivery), failure (an approach that did not work), event (a commit or another recorded event), note (a note or follow-up).",
@@ -15094,7 +15631,7 @@ var init_doku_model = __esm({
 });
 
 // packages/ingest/src/doku.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { mkdir as mkdir10, readFile as readFile10, rm as rm6, stat, writeFile as writeFile10 } from "node:fs/promises";
 import path15 from "node:path";
 function bodyLocations(o) {
@@ -15200,6 +15737,45 @@ function aiState(m) {
     aiAttempts: typeof m?.aiAttempts === "number" ? m.aiAttempts : 0
   };
 }
+function aiFacts(kind, m) {
+  if (!m) return null;
+  if (kind === "feature") {
+    const f = m;
+    return JSON.stringify([
+      f.title,
+      f.what,
+      f.behavior ?? null,
+      f.config ?? [],
+      f.locations ?? [],
+      f.why ?? null
+    ]);
+  }
+  if (kind === "entry") {
+    const e = m;
+    return JSON.stringify([
+      e.brainName,
+      e.description ?? null,
+      (e.architecture?.groups ?? []).map((g) => g.name),
+      // Tuples, never objects: a stored model comes back from jsonb with its keys reordered.
+      (e.architecture?.edges ?? []).map((x) => [x.from, x.to]),
+      (e.features ?? []).map((f) => [f.slug, f.title, f.area, f.what])
+    ]);
+  }
+  return null;
+}
+function withStoredAi(model, stored) {
+  const s = stored;
+  const fresh = model;
+  return {
+    ...model,
+    ...s.presentation ? { presentation: s.presentation } : {},
+    body: s.body ?? null,
+    docTitle: s.docTitle ?? null,
+    category: s.category ?? null,
+    ...!fresh.flow && s.flow ? { flow: s.flow } : {},
+    ...!fresh.flowDiagram && s.flowDiagram ? { flowDiagram: s.flowDiagram } : {}
+  };
+}
 function aiComplete(kind, m) {
   if (!m) return false;
   const text = (v) => typeof v === "string" && v.trim().length > 0;
@@ -15215,6 +15791,28 @@ function aiComplete(kind, m) {
       return true;
   }
 }
+function pagePrompt(input) {
+  const { categories, flowDiagramTitle, hasFlow, sharedLines = [] } = input;
+  return [
+    "Categories (pick exactly one key):",
+    ...categories.length ? categories.map((c) => `- ${c.key}: ${c.name} (${c.description})`) : ["- general: General (everything)"],
+    "",
+    "Available diagrams (the only allowed flow block sources):",
+    ...flowDiagramTitle ? [
+      `- flowDiagram: "${flowDiagramTitle}" (the feature's runtime flow, lanes and stations)`
+    ] : [],
+    ...hasFlow && !flowDiagramTitle ? ["- flow: the feature's runtime steps as a simple chain"] : [],
+    ...!flowDiagramTitle && !hasFlow ? ["- (none)"] : [],
+    "",
+    ...sharedLines.length ? [
+      "Documented elsewhere for the same endpoint (proven facts; reuse them, link the page):",
+      ...sharedLines,
+      ""
+    ] : [],
+    "Fact sheet:",
+    input.factSheet
+  ].join("\n");
+}
 function parseDocPage(raw, categoryKeys, ctx) {
   const bad = (error2) => ({ page: null, error: error2, dropped: [] });
   const match = raw.match(/\{[\s\S]*\}/);
@@ -15358,16 +15956,32 @@ function parseArchNotes(raw, groups) {
   };
 }
 function archFlowsInput(model) {
+  const modules = (model.raw?.modules ?? []).filter(
+    (m) => !/\.test\.[a-z]+$/.test(m)
+  );
+  const cited = new Set(model.features.flatMap((f) => f.locations));
   const files = /* @__PURE__ */ new Map();
-  for (const m of model.raw?.modules ?? []) {
-    if (/\.test\.[a-z]+$/.test(m)) continue;
+  for (const m of [
+    ...modules.filter((m2) => cited.has(m2)),
+    ...modules.filter((m2) => !cited.has(m2))
+  ]) {
     const g = moduleGroup(m);
     const list = files.get(g) ?? [];
-    if (list.length < 8) list.push(m);
+    if (list.length < 12) list.push(m);
     files.set(g, list);
   }
+  const spanning = model.features.flatMap((f) => {
+    const groups = [...new Set(f.locations.map(moduleGroup))];
+    return groups.length >= 2 ? [`- ${f.title}: ${groups.join(", ")}`] : [];
+  });
   return [
     archNotesInput(model),
+    ...spanning.length ? [
+      "",
+      "## Features spanning groups (each feature's code lives in all of these groups)",
+      "",
+      ...spanning
+    ] : [],
     "",
     "## Files (the ONLY paths you may cite as evidence, copied exactly)",
     ...[...files.entries()].flatMap(([g, list]) => [
@@ -15632,45 +16246,69 @@ async function generateDokuInner(brainId, opts = {}) {
       }
       continue;
     }
-    const sameFacts = stored !== void 0 && state.factHash === factHash;
+    const facts = aiFacts(page.kind, page.model);
+    const sameFacts = stored !== void 0 && (facts !== null ? aiFacts(page.kind, stored) === facts : state.factHash === factHash);
     let markdown = page.markdown;
     let model = page.model;
     let icon = null;
     let ok2 = !required;
-    if (opts.llm && page.polishable && page.kind === "architecture") {
-      try {
-        const { notes } = parseArchNotes(
-          await opts.llm.complete({
-            system: ARCH_SYSTEM,
-            prompt: archNotesInput(doku),
-            maxTokens: 800
-          }),
-          doku.architecture.groups.map((g) => g.name)
-        );
-        if (notes) {
-          model = { ...model, narrative: notes.narrative, roles: notes.roles };
-          polished = true;
-          ok2 = true;
+    if (page.polishable && page.kind === "architecture") {
+      const inputs = {
+        notes: sha1(archNotesInput(doku)),
+        flows: sha1(archFlowsInput(doku))
+      };
+      const s = stored ?? {};
+      let notesFor;
+      let flowsFor;
+      if (typeof s.narrative === "string" && s.aiInputs?.notes === inputs.notes) {
+        model = { ...model, narrative: s.narrative, roles: s.roles };
+        notesFor = inputs.notes;
+        ok2 = true;
+      } else if (opts.llm) {
+        try {
+          const { notes } = parseArchNotes(
+            await opts.llm.complete({
+              system: ARCH_SYSTEM,
+              prompt: archNotesInput(doku),
+              maxTokens: 800
+            }),
+            doku.architecture.groups.map((g) => g.name)
+          );
+          if (notes) {
+            model = {
+              ...model,
+              narrative: notes.narrative,
+              roles: notes.roles
+            };
+            notesFor = inputs.notes;
+            polished = true;
+            ok2 = true;
+          }
+        } catch {
         }
-      } catch {
       }
-      try {
-        const { flows } = parseArchFlows(
-          await opts.llm.complete({
-            system: ARCH_FLOWS_SYSTEM,
-            prompt: archFlowsInput(doku),
-            maxTokens: 4500
-          }),
-          new Set(doku.raw?.modules ?? [])
-        );
-        if (flows.length > 0) {
-          model = { ...model, flows };
-          polished = true;
+      if (Array.isArray(s.flows) && s.flows.length > 0 && s.aiInputs?.flows === inputs.flows) {
+        model = { ...model, flows: s.flows };
+        flowsFor = inputs.flows;
+      } else if (opts.llm) {
+        try {
+          const { flows } = parseArchFlows(
+            await opts.llm.complete({
+              system: ARCH_FLOWS_SYSTEM,
+              prompt: archFlowsInput(doku),
+              maxTokens: 4500
+            }),
+            new Set(doku.raw?.modules ?? [])
+          );
+          if (flows.length > 0) {
+            model = { ...model, flows };
+            flowsFor = inputs.flows;
+            polished = true;
+          }
+        } catch {
         }
-      } catch {
       }
       if (!ok2 && sameFacts) {
-        const s = stored;
         const kept = model;
         model = {
           ...model,
@@ -15678,6 +16316,14 @@ async function generateDokuInner(brainId, opts = {}) {
           ...!kept.flows && Array.isArray(s.flows) ? { flows: s.flows } : {}
         };
       }
+      const present = model;
+      model = {
+        ...model,
+        aiInputs: {
+          ...typeof present.narrative === "string" ? { notes: notesFor ?? s.aiInputs?.notes } : {},
+          ...Array.isArray(present.flows) ? { flows: flowsFor ?? s.aiInputs?.flows } : {}
+        }
+      };
       const arch = model;
       if (arch.narrative || arch.flows?.length)
         markdown = renderArchitecturePage(doku, {
@@ -15686,7 +16332,11 @@ async function generateDokuInner(brainId, opts = {}) {
         });
     } else if (page.kind === "entry") {
       model = { ...page.model, categories };
-      if (opts.llm && page.polishable) {
+      const s = stored;
+      if (sameFacts && typeof s?.narrative === "string" && s.narrative.trim()) {
+        model = { ...model, narrative: s.narrative };
+        ok2 = true;
+      } else if (opts.llm && page.polishable) {
         try {
           const narrative2 = (await opts.llm.complete({
             system: ENTRY_NARRATIVE_SYSTEM,
@@ -15700,15 +16350,16 @@ async function generateDokuInner(brainId, opts = {}) {
           }
         } catch {
         }
-        if (!ok2 && sameFacts) {
-          const s = stored;
-          if (typeof s.narrative === "string" && s.narrative.trim())
-            model = { ...model, narrative: s.narrative };
-        }
       }
       const narrative = model.narrative;
       if (narrative)
         markdown = renderEntryPage(doku, "brainjar-doku/", narrative);
+    } else if (page.kind === "feature" && sameFacts && !storedCollisions.has(page.slug) && aiComplete("feature", stored)) {
+      const f = withStoredAi(page.model, stored);
+      model = f;
+      markdown = renderFeaturePage(f);
+      if (f.docTitle) page.title = f.docTitle;
+      ok2 = true;
     } else if (opts.llm && page.polishable) {
       try {
         const { flow } = parseFlow(
@@ -15762,25 +16413,13 @@ async function generateDokuInner(brainId, opts = {}) {
           hasFlowDiagram: Boolean(diagrams.flowDiagram),
           hasFlow: Boolean(diagrams.flow)
         };
-        const prompt = [
-          "Categories (pick exactly one key):",
-          ...categories.length ? categories.map((c) => `- ${c.key}: ${c.name} (${c.description})`) : ["- general: General (everything)"],
-          "",
-          "Available diagrams (the only allowed flow block sources):",
-          ...ctx.hasFlowDiagram ? [
-            `- flowDiagram: "${diagrams.flowDiagram.title}" (the feature's runtime flow, lanes and stations)`
-          ] : [],
-          ...ctx.hasFlow && !ctx.hasFlowDiagram ? ["- flow: the feature's runtime steps as a simple chain"] : [],
-          ...!ctx.hasFlowDiagram && !ctx.hasFlow ? ["- (none)"] : [],
-          "",
-          ...sharedLines.length ? [
-            "Documented elsewhere for the same endpoint (proven facts; reuse them, link the page):",
-            ...sharedLines,
-            ""
-          ] : [],
-          "Fact sheet:",
-          page.markdown
-        ].join("\n");
+        const prompt = pagePrompt({
+          categories,
+          factSheet: page.markdown,
+          flowDiagramTitle: diagrams.flowDiagram?.title ?? null,
+          hasFlow: ctx.hasFlow,
+          sharedLines
+        });
         const keys = categoryKeys.length ? categoryKeys : ["general"];
         let synth = parseDocPage(
           await opts.llm.complete({
@@ -15810,17 +16449,20 @@ async function generateDokuInner(brainId, opts = {}) {
             `doku: blocks dropped (${page.slug}): ${synth.dropped.join("; ")}`
           );
         if (synth.page) {
-          const title = pickDocTitle(
+          const s = stored;
+          const same = s?.title === page.model.title && !storedCollisions.has(page.slug);
+          const title = same && s?.docTitle ? s.docTitle : pickDocTitle(
             synth.page.title,
             page.title,
             page.slug,
             takenTitle
           );
+          const category = same && s?.category && categoryKeys.includes(s.category) ? s.category : synth.page.category;
           const f = {
             ...model,
             presentation: synth.page.presentation,
             docTitle: title,
-            category: synth.page.category
+            category
           };
           f.body = pageBody(f);
           model = f;
@@ -15838,17 +16480,7 @@ async function generateDokuInner(brainId, opts = {}) {
         console.warn(`doku: page synthesis failed (${page.slug}):`, e);
       }
       if (!ok2 && sameFacts && aiComplete("feature", stored)) {
-        const s = stored;
-        const fresh = model;
-        const f = {
-          ...model,
-          ...s.presentation ? { presentation: s.presentation } : {},
-          body: s.body ?? null,
-          docTitle: s.docTitle ?? null,
-          category: s.category ?? null,
-          ...!fresh.flow && s.flow ? { flow: s.flow } : {},
-          ...!fresh.flowDiagram && s.flowDiagram ? { flowDiagram: s.flowDiagram } : {}
-        };
+        const f = withStoredAi(model, stored);
         model = f;
         markdown = renderFeaturePage(f);
         if (f.docTitle) page.title = f.docTitle;
@@ -16094,7 +16726,7 @@ var init_doku = __esm({
     DOKU_DIR = "brainjar-doku";
     MANIFEST = ".manifest.json";
     CHANGELOG_DAYS = 60;
-    sha1 = (s) => createHash2("sha1").update(s).digest("hex");
+    sha1 = (s) => createHash3("sha1").update(s).digest("hex");
     exists = (p) => stat(p).then(
       () => true,
       () => false
@@ -16121,7 +16753,7 @@ var init_doku = __esm({
       `{"kind":"flow","title":"...","source":"flowDiagram"}: places the feature's existing runtime diagram where it helps the explanation; allowed only when the input lists that diagram as available, at most once.`,
       "Composition: explanation and outcome before technical detail. A feature exposing an API documents what it is, why you need it, and each endpoint with its parameters, request and response shape, and error cases, all from the facts only. A user-facing feature explains what is shown and how to use it, with steps only for a real action sequence. A pipeline explains what goes in, what comes out, and when it runs. A configuration-heavy feature tabulates its settings and explains precedence and effects. A feature containing several of these covers each. Mix kinds freely; there is no fixed template and no fixed number of blocks.",
       "Length follows the subject: an extensive feature gets several text sections with subheadings, the relationships, prerequisites, special cases, and reasons explained, and a concrete example; a small feature stays short. Never break a coherent explanation into bullet points for layout reasons and never cut it short. Explain a term at its first use; state the concrete consequence for the reader.",
-      "Keep every fact; invent nothing. Missing facts stay missing: leave optional blocks out, and when an indispensable piece of information is not available, say so in one plain sentence addressed to the reader (for example: The exact request path is not documented yet.), never mentioning a fact sheet, an input, or a model. Do not repeat the change history or the decision list (both are shown separately). No H1 heading (the title renders above).",
+      "Keep every fact; invent nothing. Missing facts stay missing: leave optional blocks out, and when an indispensable piece of information is not available, say so in one plain sentence addressed to the reader (for example: The exact request path is not documented yet.), never mentioning a fact sheet, an input, or a model. The change history and the decision list are shown separately below the page: never reproduce them as a list or table. Their content still counts as facts. The page describes the CURRENT state: where a newer history entry or decision added, changed, replaced, or removed something, the text states the current state (for example that a capability no longer exists, or which mechanism replaced another), and the reasons that explain the current design belong in the explanation. When facts conflict, the newer one wins. Never replace a stated fact with what is usual elsewhere. No H1 heading (the title renders above).",
       "When the input lists facts documented elsewhere for the SAME endpoint or interface, use them: they are proven, so the endpoint may be shown here as well, and the other page may be linked with a short readable link text in the form [text](page:slug), copying the slug exactly. Never merge pages because their titles look alike.",
       PROSE_STYLE
     ].join(" ");
@@ -16177,11 +16809,12 @@ var init_doku = __esm({
       "You read one architecture overview of a software system (module groups with their features and dependencies, plus real file paths) and produce the system's main RUNTIME flows: how a request, session, or piece of data actually moves through the system.",
       'Respond ONLY with JSON of exactly this shape: {"flows": [{"slug": "...", "title": "...", "summary": "...", "explanation": "...", "lanes": [{"key": "...", "title": "..."}], "nodes": [{"id": "...", "lane": "...", "title": "...", "subtitle": "...", "kind": "...", "evidence": ["path"]}], "edges": [{"from": "...", "to": "...", "label": "...", "kind": "..."}]}]}. Nothing outside the JSON.',
       '"explanation" walks a reader through THIS flow in markdown (2-5 short paragraphs, ### subheadings where they help, at most 3500 characters): what starts it, what each phase does, what comes out. Describe an order only where the edges show it; where paths run in parallel or depend on a gate, say so instead of inventing a sequence. Name the same stations as the nodes.',
-      "Produce 2 to 4 flows, one per MAIN runtime path a newcomer must understand (for example: how input becomes stored data, how a query becomes an answer, how an external agent connects, how background verification runs). Cover every major path the features support; do not stop at two when the system clearly has more.",
+      'Produce up to 4 flows, one per MAIN runtime path a newcomer must understand (for example: how input becomes stored data, how a query becomes an answer, how an external agent connects, how background verification runs). Cover every major path the listed features describe and no path they do not: when they describe fewer paths, produce fewer flows, and when no feature is documented at all, respond {"flows": []}.',
       "lanes are 3-5 PHASES of the flow in order (intake, processing, storage, ...), titled in plain words. Never folder names.",
       "nodes are the runtime components in those phases: 4-10 per flow. kind is exactly one of: actor (human or external agent), surface (UI or endpoint), logic (application work), policy (a gate: auth, quota, validation), action (an outward call such as an LLM or external API), data (a store). title at most 3 words; subtitle at most 3 words (under 24 characters).",
       "evidence lists 1-3 file paths copied EXACTLY from the Files section that implement the node. Never invent or modify a path; omit evidence rather than guess.",
       'edges carry meaning: label with WHAT flows (at most 3 words, under 20 characters, never counts). kind is "primary" for the main path, "return" for a reply going back, "policy" for a gate outcome, "async" for background work.',
+      "Draw an edge only where the input shows the connection: a listed dependency between the two groups, a feature whose code spans both groups (Features spanning groups), or one feature describing both steps. Never connect components because such systems usually are connected; a path the input does not show stays out of the flow.",
       "Ground everything in the listed features and dependencies. Invent nothing."
     ].join(" ");
     FEATURE_FLOW_SYSTEM = [
@@ -16311,10 +16944,12 @@ var init_verify_agent = __esm({
     init_sdk();
     init_src2();
     init_src();
+    init_allowance();
     init_product_facts();
     init_doku();
     init_llm();
     init_openai();
+    init_provider_rate2();
     init_routing();
     VERIFY_SYSTEM = [
       "You are BrainJar's verification agent. You read a software repository and record durable product knowledge, with one iron rule: prose is never truth, code is.",
@@ -16363,17 +16998,40 @@ var init_verify_poll = __esm({
   }
 });
 
+// packages/ingest/src/scheduler.ts
+var init_scheduler = __esm({
+  "packages/ingest/src/scheduler.ts"() {
+    "use strict";
+    init_src2();
+    init_daily_log();
+    init_summaries();
+  }
+});
+
 // packages/ingest/src/job-worker.ts
 var init_job_worker = __esm({
   "packages/ingest/src/job-worker.ts"() {
     "use strict";
     init_src2();
     init_deepscan();
+    init_doku();
+    init_scheduler();
+    init_summaries();
+    init_verify_poll();
     init_routing();
+    init_allowance();
     init_verify_start();
   }
 });
 
+// packages/ingest/src/job-clock.ts
+var init_job_clock = __esm({
+  "packages/ingest/src/job-clock.ts"() {
+    "use strict";
+    init_src2();
+  }
+});
+
 // packages/ingest/src/ask-agent-model.ts
 var init_ask_agent_model = __esm({
   "packages/ingest/src/ask-agent-model.ts"() {
@@ -16381,18 +17039,10 @@ var init_ask_agent_model = __esm({
     init_sdk();
     init_src2();
     init_src();
+    init_allowance();
     init_llm();
     init_openai();
-  }
-});
-
-// packages/ingest/src/scheduler.ts
-var init_scheduler = __esm({
-  "packages/ingest/src/scheduler.ts"() {
-    "use strict";
-    init_src2();
-    init_daily_log();
-    init_summaries();
+    init_provider_rate2();
   }
 });
 
@@ -16415,6 +17065,7 @@ var init_src3 = __esm({
     init_llm();
     init_openai();
     init_routing();
+    init_allowance();
     init_rationale_extractor();
     init_extraction();
     init_entities();
@@ -16453,6 +17104,7 @@ var init_src3 = __esm({
     init_verify_poll();
     init_verify_start();
     init_job_worker();
+    init_job_clock();
     init_ask_agent_model();
     init_scheduler();
     registerConnector(
@@ -16505,7 +17157,24 @@ async function captureApi(pathAndQuery, init2 = {}) {
   }
   return body;
 }
-var TokenError, TOKEN_HELP;
+async function uploadArtifacts(brain, sourceId, artifacts, cursor3) {
+  let inserted = 0;
+  for (let i = 0; i < artifacts.length; i += UPLOAD_PORTION) {
+    const last = i + UPLOAD_PORTION >= artifacts.length;
+    const r = await captureApi("/capture/artifacts", {
+      method: "POST",
+      body: {
+        brain,
+        sourceId,
+        artifacts: artifacts.slice(i, i + UPLOAD_PORTION),
+        cursor: last ? cursor3 : null
+      }
+    });
+    inserted += r.inserted;
+  }
+  return inserted;
+}
+var TokenError, TOKEN_HELP, UPLOAD_PORTION;
 var init_api_client = __esm({
   "packages/cli/src/api-client.ts"() {
     "use strict";
@@ -16513,6 +17182,7 @@ var init_api_client = __esm({
     TokenError = class extends Error {
     };
     TOKEN_HELP = "BrainJar token revoked or invalid. Create a new token under Account in the web app, then run `npx brainjar init --brain <id> --token <token>` once in any project on this machine.";
+    UPLOAD_PORTION = 2e3;
   }
 });
 
@@ -16745,7 +17415,7 @@ var init_debt = __esm({
 });
 
 // packages/cli/src/adapters/claude-code.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 function targetOf(input) {
   const i = input ?? {};
   for (const k of ["command", "file_path", "notebook_path"]) {
@@ -16790,7 +17460,7 @@ var init_claude_code = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
-    short2 = (s) => createHash3("sha256").update(s).digest("hex").slice(0, 16);
+    short2 = (s) => createHash4("sha256").update(s).digest("hex").slice(0, 16);
     claudeCode2 = {
       id: "claude-code",
       map(payload, now) {
@@ -16889,7 +17559,7 @@ var init_claude_code = __esm({
 });
 
 // packages/cli/src/adapters/cursor.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 function targetOf2(input) {
   const i = input ?? {};
   for (const k of ["command", "file_path", "path", "target_file"]) {
@@ -16910,7 +17580,7 @@ var init_cursor = __esm({
   "packages/cli/src/adapters/cursor.ts"() {
     "use strict";
     init_src();
-    short3 = (s) => createHash4("sha256").update(s).digest("hex").slice(0, 16);
+    short3 = (s) => createHash5("sha256").update(s).digest("hex").slice(0, 16);
     cursor2 = {
       id: "cursor",
       map(payload, now) {
@@ -17028,7 +17698,7 @@ var init_cursor = __esm({
 });
 
 // packages/cli/src/adapters/codex.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function patchFiles(patch) {
   const out = /* @__PURE__ */ new Set();
   for (const m of patch.matchAll(
@@ -17064,7 +17734,7 @@ var init_codex = __esm({
     "use strict";
     init_src();
     PATCH_TOOLS = /* @__PURE__ */ new Set(["apply_patch", "Edit", "Write"]);
-    short4 = (s) => createHash5("sha256").update(s).digest("hex").slice(0, 16);
+    short4 = (s) => createHash6("sha256").update(s).digest("hex").slice(0, 16);
     codex2 = {
       id: "codex",
       map(payload, now) {
@@ -17161,7 +17831,7 @@ var init_codex = __esm({
 });
 
 // packages/cli/src/adapters/copilot.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 function targetOf3(args) {
   if (!args || typeof args !== "object") return "";
   const a = args;
@@ -17194,7 +17864,7 @@ var init_copilot = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS2 = /* @__PURE__ */ new Set(["edit", "create"]);
-    short5 = (s) => createHash6("sha256").update(s).digest("hex").slice(0, 16);
+    short5 = (s) => createHash7("sha256").update(s).digest("hex").slice(0, 16);
     EVENT_ALIASES = {
       SessionStart: "sessionStart",
       SessionEnd: "sessionEnd",
@@ -17303,7 +17973,7 @@ var init_copilot = __esm({
 });
 
 // packages/cli/src/adapters/gemini.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 function targetOf4(input) {
   const i = input ?? {};
   for (const k of ["command", "file_path"]) {
@@ -17325,7 +17995,7 @@ var init_gemini = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS3 = /* @__PURE__ */ new Set(["write_file", "replace"]);
-    short6 = (s) => createHash7("sha256").update(s).digest("hex").slice(0, 16);
+    short6 = (s) => createHash8("sha256").update(s).digest("hex").slice(0, 16);
     gemini2 = {
       id: "gemini",
       map(payload, now) {
@@ -17421,7 +18091,7 @@ var init_gemini = __esm({
 });
 
 // packages/cli/src/adapters/kiro.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 function targetOf5(input) {
   const i = input ?? {};
   for (const k of ["command", "cmd", "path", "file_path", "filePath"]) {
@@ -17452,7 +18122,7 @@ var init_kiro = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS4 = /* @__PURE__ */ new Set(["fs_write", "write", "str_replace", "fs_append"]);
-    short7 = (s) => createHash8("sha256").update(s).digest("hex").slice(0, 16);
+    short7 = (s) => createHash9("sha256").update(s).digest("hex").slice(0, 16);
     EVENTS5 = {
       agentSpawn: "start",
       sessionStart: "start",
@@ -17568,7 +18238,7 @@ var init_kiro = __esm({
 });
 
 // packages/cli/src/adapters/opencode.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 function commitShas7(text) {
   const out = /* @__PURE__ */ new Set();
   for (const m of (text ?? "").matchAll(/\[[^\]\n]* ([0-9a-f]{7,40})\]/g)) {
@@ -17582,7 +18252,7 @@ var init_opencode = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS5 = /* @__PURE__ */ new Set(["edit", "write"]);
-    short8 = (s) => createHash9("sha256").update(s).digest("hex").slice(0, 16);
+    short8 = (s) => createHash10("sha256").update(s).digest("hex").slice(0, 16);
     opencode2 = {
       id: "opencode",
       map(payload, now) {
@@ -17682,7 +18352,7 @@ var init_opencode = __esm({
 });
 
 // packages/cli/src/adapters/cline.ts
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 function targetOf6(params) {
   const i = params ?? {};
   for (const k of ["command", "path"]) {
@@ -17714,7 +18384,7 @@ var init_cline = __esm({
     "use strict";
     init_src();
     EDIT_TOOLS6 = /* @__PURE__ */ new Set(["write_to_file", "replace_in_file", "apply_patch"]);
-    short9 = (s) => createHash10("sha256").update(s).digest("hex").slice(0, 16);
+    short9 = (s) => createHash11("sha256").update(s).digest("hex").slice(0, 16);
     CLINE_REPLY = JSON.stringify({ cancel: false });
     cline2 = {
       id: "cline",
@@ -18016,18 +18686,15 @@ async function syncRepo(root) {
       const connector = createConnector("git_local", { cwd: root }, {});
       const artifacts = await connector.sync(project.cursor ?? void 0);
       if (artifacts.length > 0) {
-        const r = await captureApi("/capture/artifacts", {
-          method: "POST",
-          body: {
-            brain: link.brainId,
-            sourceId: project.sourceId,
-            artifacts,
-            cursor: maxUpdatedAt(artifacts) ?? project.cursor
-          }
-        });
-        if (r.inserted > 0) {
+        const inserted = await uploadArtifacts(
+          link.brainId,
+          project.sourceId,
+          artifacts,
+          maxUpdatedAt(artifacts) ?? project.cursor
+        );
+        if (inserted > 0) {
           console.error(
-            `brainjar: ${r.inserted} new commits sent, the server reads them in the background`
+            `brainjar: ${inserted} new commits sent, the server reads them in the background`
           );
           const graph = await scanStructure(root);
           await captureApi("/capture/structure", {
@@ -18095,7 +18762,7 @@ async function waitForServer(brainId, since, opts = {}) {
   const poll = opts.poll ?? (() => captureApi(
     `/capture/progress?brain=${brainId}&since=${encodeURIComponent(since.toISOString())}`
   ));
-  const sleep2 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const sleep3 = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const write = opts.write ?? ((s) => void process.stdout.write(s));
   const tty = opts.tty ?? Boolean(process.stdout.isTTY);
   const intervalMs = opts.intervalMs ?? 2e3;
@@ -18112,7 +18779,7 @@ async function waitForServer(brainId, since, opts = {}) {
         if (tty && shown) write("\n");
         return null;
       }
-      await sleep2(intervalMs);
+      await sleep3(intervalMs);
       continue;
     }
     if (p.queued + p.running === 0) {
@@ -18127,7 +18794,7 @@ async function waitForServer(brainId, since, opts = {}) {
       shownAt = Date.now();
     }
     shown = line;
-    await sleep2(intervalMs);
+    await sleep3(intervalMs);
   }
 }
 var n;
@@ -18213,16 +18880,12 @@ async function init(argv) {
   const artifacts = await connector.sync(conn.cursor ?? void 0);
   let commits = 0;
   if (artifacts.length > 0) {
-    const r = await captureApi("/capture/artifacts", {
-      method: "POST",
-      body: {
-        brain: conn.brainId,
-        sourceId: conn.sourceId,
-        artifacts,
-        cursor: maxUpdatedAt(artifacts) ?? conn.cursor
-      }
-    });
-    commits = r.inserted;
+    commits = await uploadArtifacts(
+      conn.brainId,
+      conn.sourceId,
+      artifacts,
+      maxUpdatedAt(artifacts) ?? conn.cursor
+    );
   }
   ok(
     `${graph.modules.length} modules, ${commits} new commits sent to the server`