loki-mode 10.10.5 → 10.11.2

package/packages/control-plane/dist/server.js

@@ -10473,6 +10473,9 @@ class Index {
 function index(name) {
   return new IndexBuilderOn(name, false);
 }
+function uniqueIndex(name) {
+  return new IndexBuilderOn(name, true);
+}
 
 // node_modules/drizzle-orm/sqlite-core/primary-keys.js
 function primaryKey(...config) {
@@ -12521,6 +12524,9 @@ __export(exports_schema, {
   localRepos: () => localRepos,
   events: () => events,
   audit: () => audit2,
+  askThreads: () => askThreads,
+  askMessages: () => askMessages,
+  askEvents: () => askEvents,
   actions: () => actions
 });
 var sources = sqliteTable("sources", {
@@ -12601,6 +12607,42 @@ var actions = sqliteTable("actions", {
   result: text("result").notNull(),
   detail: text("detail")
 }, (t) => [index("actions_ts").on(t.ts)]);
+var askThreads = sqliteTable("ask_threads", {
+  id: text("id").primaryKey(),
+  createdAt: text("created_at").notNull(),
+  updatedAt: text("updated_at").notNull(),
+  repo: text("repo"),
+  provider: text("provider").notNull(),
+  model: text("model"),
+  title: text("title")
+});
+var askMessages = sqliteTable("ask_messages", {
+  id: text("id").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => askThreads.id),
+  seq: integer("seq").notNull(),
+  role: text("role").notNull(),
+  text: text("text").notNull(),
+  status: text("status").notNull(),
+  workerPid: integer("worker_pid"),
+  pgid: integer("pgid"),
+  costUsd: real("cost_usd"),
+  error: text("error"),
+  startedAt: text("started_at"),
+  finishedAt: text("finished_at")
+}, (t) => [
+  uniqueIndex("ask_messages_thread_seq").on(t.threadId, t.seq),
+  index("ask_messages_status").on(t.status)
+]);
+var askEvents = sqliteTable("ask_events", {
+  id: text("id").primaryKey(),
+  messageId: text("message_id").notNull().references(() => askMessages.id),
+  seq: integer("seq").notNull(),
+  kind: text("kind").notNull(),
+  payload: text("payload").notNull(),
+  ts: text("ts").notNull()
+}, (t) => [
+  uniqueIndex("ask_events_message_seq").on(t.messageId, t.seq)
+]);
 
 // src/db/migrate.ts
 function openDb(path) {
@@ -16891,204 +16933,11 @@ function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
 import { basename as basename9, dirname as dirname7 } from "path";
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename8, extname, join as join24, relative as relative2, sep as sep9 } from "path";
-var SKIP_DIRS = new Set([
-  ".git",
-  "node_modules",
-  "dist",
-  "build",
-  "target",
-  "coverage",
-  ".venv",
-  "venv",
-  "__pycache__",
-  ".tox",
-  ".pytest_cache",
-  ".loki",
-  ".next"
-]);
-var JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
-var PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
-var GO_TEST_RE = /_test\.go$/;
-function isTestFile(rel) {
-  const name = basename8(rel);
-  return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
-}
-
-// ../../loki-ts/src/features/speed/unit_mode.ts
-import { closeSync as closeSync6, constants, fstatSync as fstatSync4, lstatSync as lstatSync4, openSync as openSync6, readSync as readSync4, realpathSync as realpathSync12 } from "fs";
-var MAX_SPEC_BYTES = 1024 * 1024;
-var MAX_TOKEN_BUDGET = 1e9;
-var norm2 = (p) => p.replace(/^\.\//, "");
-var CTRL = /[\x00-\x1f\x7f]/;
-var strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm2) : null;
-function readBounded(path) {
-  const l = lstatSync4(path);
-  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
-    return null;
-  const fd = openSync6(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
-  try {
-    const st = fstatSync4(fd);
-    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
-      return null;
-    const buf = Buffer.alloc(st.size + 1);
-    let n2 = 0;
-    for (;; ) {
-      const r = readSync4(fd, buf, n2, buf.length - n2, null);
-      if (r <= 0)
-        break;
-      n2 += r;
-      if (n2 >= buf.length)
-        return null;
-    }
-    return buf.subarray(0, n2).toString("utf8");
-  } finally {
-    closeSync6(fd);
-  }
-}
-function parseText(txt) {
-  try {
-    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
-    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
-      return null;
-    return { id: j.id, writeSet: ws, pack, tokenBudget: tb };
-  } catch {
-    return null;
-  }
-}
-function parseSpec(path) {
-  try {
-    const txt = readBounded(path);
-    return txt === null ? null : parseText(txt);
-  } catch {
-    return null;
-  }
-}
-var memo = new Map;
-function unitSpec(env = process.env) {
-  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
-  if (env["LOKI_SPEED"] === "0" || !path)
-    return null;
-  if (frozen !== undefined)
-    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
-  if (!memo.has(path))
-    memo.set(path, parseSpec(path));
-  return memo.get(path) ?? null;
-}
-var inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
-function unitFlags(staged, env = process.env, pre = {}) {
-  const s = unitSpec(env);
-  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
-}
-
-// ../../loki-ts/src/e10ext/scope.ts
-var SCOPE_UNDETERMINED = "scope not determined; all edits committed";
-var outsideNote = (f) => `outside stated scope: ${f}`;
-var esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-var mentions = (text2, name) => new RegExp(`(?<![\\w./-])${esc(name)}(?![\\w-]|\\.\\w)`).test(text2);
-var STOP = new Set(["the", "and", "for", "with", "that", "this", "all", "any", "src", "from", "into", "each", "across", "apply", "add", "use", "make"]);
-var stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w;
-var surfaceTokens = (text2) => new Set((text2.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem));
-var dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
-function contractText(o) {
-  const c = o.intake?.contract_snapshot?.contract;
-  return Array.isArray(c?.criteria) ? c.criteria.map((x) => typeof x?.text === "string" ? x.text : "").join(`
-`) : "";
-}
-function outsideScope(o, staged) {
-  const rel = Array.isArray(o.plan?.relevant_files) ? o.plan.relevant_files.filter((x) => typeof x === "string") : [];
-  const plan = typeof o.plan?.plan === "string" ? o.plan.plan : "";
-  if (rel.length === 0 && plan.trim() === "")
-    return null;
-  const text2 = `${plan}
-${typeof o.intake?.task === "string" ? o.intake.task : ""}
-${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
-  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname7(r)).filter((d) => d !== "."));
-  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename9(f)) && !plannedDirs.has(dirname7(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
-}
-function flagOutsideScope(o, staged) {
-  const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
-  const un = outsideScope(o, staged), seen = new Set((unit ?? []).map(outsideNote));
-  return [...(unit ?? []).map(outsideNote), ...un ? un.map(outsideNote).filter((n2) => !seen.has(n2)) : staged.length > 0 ? [SCOPE_UNDETERMINED] : []];
-}
-
-// ../../loki-ts/src/util/receipt_signer.ts
-var RECEIPT_SIGNER_BASENAME = "receipt-ed25519.pem";
-
-// ../../loki-ts/src/util/shell.ts
-var MAX_STDOUT_BYTES = 16 * 1024 * 1024;
-async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
-  const reader = stream.getReader();
-  const decoder = new TextDecoder;
-  let out2 = "";
-  let total = 0;
-  try {
-    while (total < maxBytes) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      if (!value)
-        continue;
-      total += value.byteLength;
-      if (total > maxBytes) {
-        const keep = value.byteLength - (total - maxBytes);
-        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
-        break;
-      }
-      out2 += decoder.decode(value, { stream: true });
-    }
-    out2 += decoder.decode();
-  } finally {
-    try {
-      await reader.cancel();
-    } catch {}
-    reader.releaseLock();
-  }
-  return out2;
-}
-async function run(argv, opts = {}) {
-  const proc = Bun.spawn({
-    cmd: [...argv],
-    stdout: "pipe",
-    stderr: "pipe",
-    env: opts.env ? { ...process.env, ...opts.env } : process.env,
-    cwd: opts.cwd
-  });
-  let timer;
-  let killTimer;
-  if (opts.timeoutMs && opts.timeoutMs > 0) {
-    timer = setTimeout(() => {
-      try {
-        proc.kill("SIGTERM");
-      } catch {}
-      killTimer = setTimeout(() => {
-        try {
-          proc.kill("SIGKILL");
-        } catch {}
-      }, 2000);
-    }, opts.timeoutMs);
-  }
-  try {
-    const [stdout, stderr, exitCode] = await Promise.all([
-      readStreamCapped(proc.stdout),
-      new Response(proc.stderr).text(),
-      proc.exited
-    ]);
-    return { stdout, stderr, exitCode };
-  } finally {
-    if (timer)
-      clearTimeout(timer);
-    if (killTimer)
-      clearTimeout(killTimer);
-  }
-}
-
-// ../../loki-ts/src/features/visual_evidence.ts
-import { spawn as spawn5 } from "child_process";
+import { basename as basename8, extname, join as join26, relative as relative2, sep as sep10 } from "path";
 
 // ../../loki-ts/src/project_model/discover.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync6, readFileSync as readFileSync19, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "fs";
-import { join as join26 } from "path";
+import { join as join25 } from "path";
 
 // ../../loki-ts/src/engine10/types.ts
 var STAGE_BUDGETS = {
@@ -17105,23 +16954,23 @@ var STAGE_BUDGETS = {
 };
 
 // ../../loki-ts/src/project_model/schema.ts
-import { existsSync as existsSync13, lstatSync as lstatSync5, realpathSync as realpathSync13, statSync as statSync10 } from "fs";
-import { isAbsolute, join as join25, normalize, sep as sep10 } from "path";
+import { existsSync as existsSync13, lstatSync as lstatSync4, realpathSync as realpathSync12, statSync as statSync10 } from "fs";
+import { isAbsolute, join as join24, normalize, sep as sep9 } from "path";
 var PROJECT_MODEL_SCHEMA = "loki.v10.project/1";
 var COMMAND_KINDS = ["test", "lint", "build", "start"];
 var isRec = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var isStr = (v) => typeof v === "string" && v.trim() !== "";
 function safeRel(p) {
-  const n2 = normalize(p.trim()).split(sep10).join("/").replace(/\/$/, "");
+  const n2 = normalize(p.trim()).split(sep9).join("/").replace(/\/$/, "");
   if (n2 === "" || isAbsolute(n2) || n2 === ".." || n2.startsWith("../"))
     return null;
   return n2;
 }
 function insideRepo(repoDir, rel) {
   try {
-    const real2 = realpathSync13(join25(repoDir, rel));
-    const base = realpathSync13(repoDir);
-    return real2 === base || real2.startsWith(base + sep10);
+    const real2 = realpathSync12(join24(repoDir, rel));
+    const base = realpathSync12(repoDir);
+    return real2 === base || real2.startsWith(base + sep9);
   } catch {
     return false;
   }
@@ -17132,7 +16981,7 @@ function checkCitation(repoDir, raw2) {
   const rel = safeRel(raw2.replace(/:\d+(?:-\d+)?$/, ""));
   if (rel === null)
     return `citation "${raw2}" is not a repo-relative path`;
-  const abs = join25(repoDir, rel);
+  const abs = join24(repoDir, rel);
   if (!existsSync13(abs) || !statSync10(abs).isFile() || !insideRepo(repoDir, rel))
     return `citation "${raw2}" names a file that does not exist`;
   return null;
@@ -17144,7 +16993,7 @@ function checkFingerprint(repoDir, raw2) {
   if (rel === null)
     return `fingerprint "${raw2}" is not a repo-relative path`;
   try {
-    if (!lstatSync5(join25(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
+    if (!lstatSync4(join24(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
       return `fingerprint "${raw2}" is not a regular file inside the repo`;
   } catch {
     return `fingerprint "${raw2}" names a file that does not exist`;
@@ -17172,7 +17021,7 @@ function checkDir(repoDir, v, where, errs) {
     errs.push(`${where}: must be a repo-relative directory ("." for the repo root)`);
     return ".";
   }
-  const abs = join25(repoDir, rel);
+  const abs = join24(repoDir, rel);
   if (!existsSync13(abs) || !statSync10(abs).isDirectory() || !insideRepo(repoDir, rel))
     errs.push(`${where}: directory "${rel}" does not exist`);
   return rel;
@@ -17187,6 +17036,21 @@ function checkCommand(repoDir, v, where, errs) {
   const cwd = checkDir(repoDir, v.cwd, `${where}.cwd`, errs);
   return { cmd: v.cmd.trim(), cwd, cite: checkCites(repoDir, v.cite, `${where}.cite`, errs) };
 }
+function rawDeps(v, where, errs) {
+  if (!Array.isArray(v)) {
+    errs.push(`${where}: must be an array of package roots`);
+    return [];
+  }
+  const out2 = [];
+  for (const d of v) {
+    const rel = isStr(d) ? safeRel(d) : null;
+    if (rel === null)
+      errs.push(`${where}: "${String(d)}" is not a repo-relative package root`);
+    else if (!out2.includes(rel))
+      out2.push(rel);
+  }
+  return out2;
+}
 function validateAnswer(repoDir, raw2) {
   const errs = [];
   if (!isRec(raw2))
@@ -17219,9 +17083,16 @@ function validateAnswer(repoDir, raw2) {
       runner: isStr(p.runner) ? p.runner.trim() : null,
       commands,
       ui: { present: ui.present === true, boot: checkCommand(repoDir, ui.boot, `${w}.ui.boot`, errs), cite: checkCites(repoDir, ui.cite, `${w}.ui.cite`, errs) },
-      cite: checkCites(repoDir, p.cite, `${w}.cite`, errs)
+      cite: checkCites(repoDir, p.cite, `${w}.cite`, errs),
+      ...p.install === undefined ? {} : { install: checkCommand(repoDir, p.install, `${w}.install`, errs) },
+      ...p.dependsOn === undefined ? {} : { dependsOn: rawDeps(p.dependsOn, `${w}.dependsOn`, errs) }
     });
   }
+  const roots = new Set(packages.map((p) => p.root));
+  for (const p of packages)
+    for (const d of p.dependsOn ?? [])
+      if (!roots.has(d))
+        errs.push(`package "${p.name}".dependsOn: "${d}" is not the root of any listed package`);
   if (!Array.isArray(raw2.fingerprintFiles))
     errs.push("fingerprintFiles: required array of the manifest and lockfile paths");
   const fingerprintFiles = (Array.isArray(raw2.fingerprintFiles) ? raw2.fingerprintFiles : []).filter((f) => {
@@ -17267,7 +17138,7 @@ var PROJECT_FILE = ".loki/project.json";
 var UNKNOWN_TTL_MS = 60 * 60 * 1000;
 function loadCached(repoDir, now = Date.now()) {
   try {
-    return parseCached(repoDir, JSON.parse(readFileSync19(join26(repoDir, PROJECT_FILE), "utf8")), now);
+    return parseCached(repoDir, JSON.parse(readFileSync19(join25(repoDir, PROJECT_FILE), "utf8")), now);
   } catch {
     return null;
   }
@@ -17305,6 +17176,14 @@ function projectApi(model) {
       return p ? p.root === "." ? clean(file) : clean(file).slice(p.root.length + 1) : null;
     },
     commandFor: (pkg, kind) => (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.commands?.[kind] ?? null,
+    dependsOn: (pkg) => {
+      const d = (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.dependsOn;
+      return Array.isArray(d) ? d.filter((x) => typeof x === "string") : null;
+    },
+    installFor: (pkg) => {
+      const i = (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.install;
+      return isRec2(i) && typeof i.cmd === "string" ? i : null;
+    },
     hasUI: () => packages.some((p) => isRec2(p.ui) && p.ui.present === true),
     uiBoot: () => {
       for (const p of packages)
@@ -17331,7 +17210,205 @@ function isMultiRoot(api) {
   return !!api && api.known() && api.packages().some((p) => p.root !== ".");
 }
 
+// ../../loki-ts/src/project_model/scope.ts
+var apis = new WeakMap;
+var imports = new WeakMap;
+var dropped = new WeakMap;
+
+// ../../loki-ts/src/engine10/testmap.ts
+var SKIP_DIRS = new Set([
+  ".git",
+  "node_modules",
+  "dist",
+  "build",
+  "target",
+  "coverage",
+  ".venv",
+  "venv",
+  "__pycache__",
+  ".tox",
+  ".pytest_cache",
+  ".loki",
+  ".next"
+]);
+var JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
+var PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
+var GO_TEST_RE = /_test\.go$/;
+function isTestFile(rel) {
+  const name = basename8(rel);
+  return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
+}
+
+// ../../loki-ts/src/features/speed/unit_mode.ts
+import { closeSync as closeSync6, constants, fstatSync as fstatSync4, lstatSync as lstatSync5, openSync as openSync6, readSync as readSync4, realpathSync as realpathSync13 } from "fs";
+var MAX_SPEC_BYTES = 1024 * 1024;
+var MAX_TOKEN_BUDGET = 1e9;
+var norm2 = (p) => p.replace(/^\.\//, "");
+var CTRL = /[\x00-\x1f\x7f]/;
+var strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm2) : null;
+function readBounded(path) {
+  const l = lstatSync5(path);
+  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
+    return null;
+  const fd = openSync6(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+  try {
+    const st = fstatSync4(fd);
+    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
+      return null;
+    const buf = Buffer.alloc(st.size + 1);
+    let n2 = 0;
+    for (;; ) {
+      const r = readSync4(fd, buf, n2, buf.length - n2, null);
+      if (r <= 0)
+        break;
+      n2 += r;
+      if (n2 >= buf.length)
+        return null;
+    }
+    return buf.subarray(0, n2).toString("utf8");
+  } finally {
+    closeSync6(fd);
+  }
+}
+function parseText(txt) {
+  try {
+    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
+    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
+      return null;
+    return { id: j.id, writeSet: ws, pack, tokenBudget: tb };
+  } catch {
+    return null;
+  }
+}
+function parseSpec(path) {
+  try {
+    const txt = readBounded(path);
+    return txt === null ? null : parseText(txt);
+  } catch {
+    return null;
+  }
+}
+var memo = new Map;
+function unitSpec(env = process.env) {
+  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
+  if (env["LOKI_SPEED"] === "0" || !path)
+    return null;
+  if (frozen !== undefined)
+    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
+  if (!memo.has(path))
+    memo.set(path, parseSpec(path));
+  return memo.get(path) ?? null;
+}
+var inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
+function unitFlags(staged, env = process.env, pre = {}) {
+  const s = unitSpec(env);
+  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
+}
+
+// ../../loki-ts/src/e10ext/scope.ts
+var SCOPE_UNDETERMINED = "scope not determined; all edits committed";
+var outsideNote = (f) => `outside stated scope: ${f}`;
+var esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+var mentions = (text2, name) => new RegExp(`(?<![\\w./-])${esc(name)}(?![\\w-]|\\.\\w)`).test(text2);
+var STOP = new Set(["the", "and", "for", "with", "that", "this", "all", "any", "src", "from", "into", "each", "across", "apply", "add", "use", "make"]);
+var stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w;
+var surfaceTokens = (text2) => new Set((text2.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem));
+var dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
+function contractText(o) {
+  const c = o.intake?.contract_snapshot?.contract;
+  return Array.isArray(c?.criteria) ? c.criteria.map((x) => typeof x?.text === "string" ? x.text : "").join(`
+`) : "";
+}
+function outsideScope(o, staged) {
+  const rel = Array.isArray(o.plan?.relevant_files) ? o.plan.relevant_files.filter((x) => typeof x === "string") : [];
+  const plan = typeof o.plan?.plan === "string" ? o.plan.plan : "";
+  if (rel.length === 0 && plan.trim() === "")
+    return null;
+  const text2 = `${plan}
+${typeof o.intake?.task === "string" ? o.intake.task : ""}
+${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
+  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname7(r)).filter((d) => d !== "."));
+  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename9(f)) && !plannedDirs.has(dirname7(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
+}
+function flagOutsideScope(o, staged) {
+  const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
+  const un = outsideScope(o, staged), seen = new Set((unit ?? []).map(outsideNote));
+  return [...(unit ?? []).map(outsideNote), ...un ? un.map(outsideNote).filter((n2) => !seen.has(n2)) : staged.length > 0 ? [SCOPE_UNDETERMINED] : []];
+}
+
+// ../../loki-ts/src/util/receipt_signer.ts
+var RECEIPT_SIGNER_BASENAME = "receipt-ed25519.pem";
+
+// ../../loki-ts/src/util/shell.ts
+var MAX_STDOUT_BYTES = 16 * 1024 * 1024;
+async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
+  const reader = stream.getReader();
+  const decoder = new TextDecoder;
+  let out2 = "";
+  let total = 0;
+  try {
+    while (total < maxBytes) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (!value)
+        continue;
+      total += value.byteLength;
+      if (total > maxBytes) {
+        const keep = value.byteLength - (total - maxBytes);
+        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
+        break;
+      }
+      out2 += decoder.decode(value, { stream: true });
+    }
+    out2 += decoder.decode();
+  } finally {
+    try {
+      await reader.cancel();
+    } catch {}
+    reader.releaseLock();
+  }
+  return out2;
+}
+async function run(argv, opts = {}) {
+  const proc = Bun.spawn({
+    cmd: [...argv],
+    stdout: "pipe",
+    stderr: "pipe",
+    env: opts.env ? { ...process.env, ...opts.env } : process.env,
+    cwd: opts.cwd
+  });
+  let timer;
+  let killTimer;
+  if (opts.timeoutMs && opts.timeoutMs > 0) {
+    timer = setTimeout(() => {
+      try {
+        proc.kill("SIGTERM");
+      } catch {}
+      killTimer = setTimeout(() => {
+        try {
+          proc.kill("SIGKILL");
+        } catch {}
+      }, 2000);
+    }, opts.timeoutMs);
+  }
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([
+      readStreamCapped(proc.stdout),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    return { stdout, stderr, exitCode };
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+    if (killTimer)
+      clearTimeout(killTimer);
+  }
+}
+
 // ../../loki-ts/src/features/visual_evidence.ts
+import { spawn as spawn5 } from "child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "crypto";
 import { existsSync as existsSync15, lstatSync as lstatSync6, mkdirSync as mkdirSync7, readdirSync as readdirSync9, readFileSync as readFileSync20, writeFileSync as writeFileSync8 } from "fs";
 import { createServer } from "net";
@@ -18015,7 +18092,7 @@ var commitStage = {
       return sat;
     if (drop.length > 0 && (await git(ctx, ["--literal-pathspecs", "reset", "-q", ctx.baseSha, "--", ...drop.map(({ f }) => f)])).code !== 0)
       return { status: "failed", data: {}, reason: "git reset failed" };
-    const dropped = new Set(drop.map(({ f }) => f)), notes = flagOutsideScope(ctx.outputs(), staged.filter(({ f }) => !dropped.has(f)));
+    const dropped2 = new Set(drop.map(({ f }) => f)), notes = flagOutsideScope(ctx.outputs(), staged.filter(({ f }) => !dropped2.has(f)));
     if ((await git(ctx, ["diff", "--cached", "--quiet"])).code === 0)
       return { status: "completed", data: { committed: false, scope_notes: notes } };
     const title = (str3(ctx.outputs().intake?.title) ?? `run ${ctx.runId}`).split(`
@@ -18105,6 +18182,8 @@ var sealStage = {
     }
     if (wallNotRun > 0)
       notProven.add(`wall base run not_run: ${wallNotRun}`);
+    for (const d of Array.isArray(o.wall?.discarded) ? o.wall.discarded : [])
+      notProven.add(`wall test discarded: ${String(d.file)} (${String(d.reason)})`);
     if (wallNotRun > 0) {
       try {
         const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename10(String(f.path))));
@@ -18115,7 +18194,7 @@ var sealStage = {
     }
     if (!diffOk)
       notProven.add("diff not computed (git diff-tree failed)");
-    const dropped = new Set;
+    const dropped2 = new Set;
     const tcs = o.verify?.["test_counts"];
     const cnt = (x) => {
       const c = x;
@@ -18130,7 +18209,7 @@ var sealStage = {
       const mine = assertDeltaNotes(ctx.repoDir, ctx.baseSha, head, t, str3(o.intake?.task) ?? "", cnt(tc?.b), cnt(tc?.h));
       if (!mine || mine.length !== vl.length || mine.some((n2) => !vl.includes(n2)))
         for (const v of vl)
-          dropped.add(v);
+          dropped2.add(v);
     }
     for (const c of checks)
       if (c.result === "not_run")
@@ -18138,7 +18217,7 @@ var sealStage = {
     for (const f of strs2(o.verify?.flaky))
       notProven.add(`flaky test: ${f}`);
     for (const n2 of verifyNotProven)
-      if (!dropped.has(n2))
+      if (!dropped2.has(n2))
         notProven.add(n2);
     for (const n2 of [...strs2(o.commit?.not_proven), ...strs2(o.commit?.scope_notes)])
       notProven.add(n2);

package/packages/control-plane/drizzle/0005_ask.sql

@@ -0,0 +1,39 @@
+CREATE TABLE IF NOT EXISTS `ask_threads` (
+	`id` text PRIMARY KEY NOT NULL,
+	`created_at` text NOT NULL,
+	`updated_at` text NOT NULL,
+	`repo` text,
+	`provider` text NOT NULL,
+	`model` text,
+	`title` text
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS `ask_messages` (
+	`id` text PRIMARY KEY NOT NULL,
+	`thread_id` text NOT NULL,
+	`seq` integer NOT NULL,
+	`role` text NOT NULL,
+	`text` text NOT NULL,
+	`status` text NOT NULL,
+	`worker_pid` integer,
+	`pgid` integer,
+	`cost_usd` real,
+	`error` text,
+	`started_at` text,
+	`finished_at` text,
+	FOREIGN KEY (`thread_id`) REFERENCES `ask_threads`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `ask_messages_thread_seq` ON `ask_messages` (`thread_id`,`seq`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `ask_messages_status` ON `ask_messages` (`status`);--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS `ask_events` (
+	`id` text PRIMARY KEY NOT NULL,
+	`message_id` text NOT NULL,
+	`seq` integer NOT NULL,
+	`kind` text NOT NULL,
+	`payload` text NOT NULL,
+	`ts` text NOT NULL,
+	FOREIGN KEY (`message_id`) REFERENCES `ask_messages`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `ask_events_message_seq` ON `ask_events` (`message_id`,`seq`);