mixdog 0.9.7 → 0.9.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "0.9.7",
+  "version": "0.9.9",
   "private": false,
   "type": "module",
   "description": "Standalone mixdog coding-agent CLI/TUI workspace.",

package/scripts/bench/lead-review-tasks-r3.json

@@ -17,4 +17,4 @@
     "cwd": "C:/Project/mixdog-bench",
     "prompt": "READ-ONLY review task: you and any delegated agents must NOT modify, create, or delete any files - report findings only. Review the folder src/runtime/agent/orchestrator/session/compact/ for correctness, regression, and security risks. Delegate exploration/reading to your workflow agents where useful and synthesize their findings. Focus on real actionable bugs: schema validation gaps, data corruption on summarize, lossy round-trips, error swallowing. Report findings ordered by severity, one line each, with file:line anchors. Skip style nits. End with a one-line verdict."
   }
-]
+]

package/scripts/bench/r4-mixed-tasks.json

@@ -17,4 +17,4 @@
     "cwd": "C:/Project/mixdog-bench",
     "prompt": "Map the compaction subsystem: starting from src/runtime/agent/orchestrator/session/compact/engine.mjs, produce a concise architecture brief - entry points and callers, the decision flow for when compaction fires, how the preserved tail is chosen, where redaction hooks in, and the failure/fallback paths. Anchor every claim with file:line. Keep it under 40 lines."
   }
-]
+]

package/scripts/bench/review-tasks.json

@@ -17,4 +17,4 @@
     "cwd": "C:/Project/mixdog",
     "prompt": "Review the folder src/runtime/agent/orchestrator/session/compact/ for correctness, regression, and security risks. Focus on real actionable bugs: schema validation gaps, data corruption on summarize, lossy round-trips, error swallowing. Report findings ordered by severity, one line each, with file:line anchors. Skip style nits. End with a one-line verdict."
   }
-]
+]

package/scripts/build-runtime-windows.ps1

@@ -1,242 +1,242 @@
-# build-runtime-windows.ps1 — Build PostgreSQL 16 + pgvector runtime on Windows.
-# Uses windows-2022 GHA runner's preinstalled PostgreSQL 16 (consistent
-# pg_config + postgres.exe from same package) — avoids EDB zip's split-version
-# packaging bug that linked pgvector against PG 14 ABI.
-# Builds pgvector from source via MSVC/nmake, then assembles a self-contained
-# runtime tree (bin + lib + share at root). Final smoke: initdb + CREATE
-# EXTENSION vector + distance query.
-# Produces: dist\mixdog-runtime-win32-x64-pg{pgver}-pgvector{vecver}.tar.gz
-
-$ErrorActionPreference = 'Stop'
-
-$PG_VERSION       = '16.4'
-$PGVECTOR_VERSION = '0.8.2'
-$TARGET_OS        = $env:TARGET_OS   ?? 'win32'
-$TARGET_ARCH      = $env:TARGET_ARCH ?? 'x64'
-
-# Auto-detect highest preinstalled PG ≥ 16 OR install via chocolatey.
-$PgInstallRoot = 'C:\Program Files\PostgreSQL'
-
-function Find-PgRoot {
-    if (-not (Test-Path $PgInstallRoot)) { return $null }
-    $cands = Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue |
-        Where-Object { $_.Name -match '^(\d+)' } |
-        Sort-Object { [int]([regex]::Match($_.Name, '^(\d+)').Groups[1].Value) } -Descending
-    foreach ($c in $cands) {
-        $major = [int]([regex]::Match($c.Name, '^(\d+)').Groups[1].Value)
-        if ($major -ge 16 -and (Test-Path "$($c.FullName)\bin\pg_config.exe")) {
-            return $c.FullName
-        }
-    }
-    return $null
-}
-
-$PgRoot = Find-PgRoot
-if (-not $PgRoot) {
-    Write-Host "==> No preinstalled PG ≥ 16 found. Installing via chocolatey..."
-    if (Test-Path $PgInstallRoot) {
-        Write-Host "Existing PG dirs (none usable):"
-        Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue | Select-Object Name
-    }
-    choco install postgresql16 --version=16.4.0 --params '/Password:postgres' -y --no-progress 2>&1 | Out-Host
-    if ($LASTEXITCODE -ne 0) { Write-Error "choco install postgresql16 failed (exit $LASTEXITCODE)"; exit 1 }
-    $PgRoot = Find-PgRoot
-    if (-not $PgRoot) {
-        Write-Error "ASSERT FAILED: chocolatey install completed but PG ≥ 16 still not found under $PgInstallRoot"
-        Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue | Select-Object Name
-        exit 1
-    }
-}
-
-$ScriptDir  = Split-Path -Parent $MyInvocation.MyCommand.Path
-$RootDir    = (Resolve-Path "$ScriptDir\..").Path
-$BuildDir   = "$RootDir\build\runtime-win32-$TARGET_ARCH"
-$DistDir    = "$RootDir\dist"
-$RuntimeDir = "$BuildDir\runtime"
-
-$PgBin    = "$PgRoot\bin"
-$PgConfig = "$PgBin\pg_config.exe"
-
-$OutputName = "mixdog-runtime-${TARGET_OS}-${TARGET_ARCH}-pg${PG_VERSION}-pgvector${PGVECTOR_VERSION}.tar.gz"
-
-Write-Host "==> Using preinstalled PG: $PgRoot"
-& $PgConfig --version
-$RealVersion = (& $PgConfig --version) -replace 'PostgreSQL ', ''
-Write-Host "  pg_config reports version: $RealVersion"
-
-if (Test-Path $RuntimeDir) { Remove-Item -Recurse -Force $RuntimeDir }
-New-Item -ItemType Directory -Force -Path $BuildDir, $DistDir,
-  "$RuntimeDir\bin", "$RuntimeDir\lib", "$RuntimeDir\share" | Out-Null
-
-Write-Host "==> Cloning pgvector $PGVECTOR_VERSION"
-$PgVectorDir = "$BuildDir\pgvector"
-$VectorDllBuilt = "$PgVectorDir\vector.dll"
-
-if (Test-Path $VectorDllBuilt) {
-    Write-Host "  Cache hit: vector.dll already built at $VectorDllBuilt"
-} else {
-    if (Test-Path $PgVectorDir) { Remove-Item -Recurse -Force $PgVectorDir }
-    git clone --branch "v$PGVECTOR_VERSION" --depth 1 `
-        https://github.com/pgvector/pgvector.git $PgVectorDir
-
-    Write-Host "==> Building pgvector (MSVC/nmake against system PG 16)"
-    Push-Location $PgVectorDir
-    try {
-        $VsWhere = "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vswhere.exe"
-        $VcVarsAll = & $VsWhere -latest -find 'VC\Auxiliary\Build\vcvarsall.bat' 2>$null | Select-Object -First 1
-        if (-not $VcVarsAll) {
-            Write-Error "vswhere could not locate vcvarsall.bat — Visual Studio Build Tools required."
-            exit 1
-        }
-        # CRITICAL: prepend $PgRoot\bin to PATH so any bare `pg_config` call
-        # inside Makefile.win resolves to PG 16 — runner has PG 14/15
-        # preinstalled and would otherwise win the PATH lookup, producing
-        # PG14-ABI vector.dll that fails to load in our PG 16 postgres.exe.
-        # Set in PowerShell so cmd /c inherits; setting inside the cmd batch
-        # via %PATH% loses vcvarsall's additions due to parse-time expansion.
-        $env:PATH = "$PgRoot\bin;$env:PATH"
-        $env:PGROOT = $PgRoot
-        $BuildCmd = "`"$VcVarsAll`" amd64 && nmake /F Makefile.win PG_CONFIG=`"$PgConfig`""
-        cmd /c $BuildCmd
-        if ($LASTEXITCODE -ne 0) {
-            Write-Error "pgvector nmake build failed (exit $LASTEXITCODE)"
-            exit 1
-        }
-    } finally {
-        Pop-Location
-    }
-}
-
-Write-Host "==> Assembling runtime layout — copy bin (.exe + .dll), lib, share from $PgRoot"
-# Copy ALL .exe + .dll from PG bin so postgres.exe + libpq.dll + libcrypto/libssl/
-# libintl/libiconv/icu*/libxml2/libxslt/libwinpthread/libecpg/libpgtypes etc. all
-# ship together. PG 16 install layout puts these all in bin\.
-Copy-Item "$PgBin\*.exe","$PgBin\*.dll" "$RuntimeDir\bin\" -Force
-
-# lib\: PG extension modules (incl. contrib like pgcrypto.dll). vector.dll
-# placed here below — PG looks for $libdir/<ext>.dll which resolves to lib\.
-Copy-Item -Recurse -Force "$PgRoot\lib\*"   "$RuntimeDir\lib\"   -ErrorAction SilentlyContinue
-# share\: extension SQL/control, locale, timezone data, conf samples.
-Copy-Item -Recurse -Force "$PgRoot\share\*" "$RuntimeDir\share\" -ErrorAction SilentlyContinue
-
-Write-Host "==> Manually staging pgvector artifacts (avoid pg_config-derived install paths)"
-$RuntimeExtDir = "$RuntimeDir\share\extension"
-New-Item -ItemType Directory -Force -Path $RuntimeExtDir | Out-Null
-Copy-Item "$PgVectorDir\vector.dll"        "$RuntimeDir\lib\"  -Force
-Copy-Item "$PgVectorDir\vector.control"    $RuntimeExtDir      -Force
-Copy-Item "$PgVectorDir\sql\vector--*.sql" $RuntimeExtDir      -Force
-
-Write-Host "==> Asserting runtime layout"
-$VectorControl = "$RuntimeDir\share\extension\vector.control"
-if (-not (Test-Path $VectorControl)) { Write-Error "ASSERT FAILED: $VectorControl not found"; exit 1 }
-$VectorSql = "$RuntimeDir\share\extension\vector--$PGVECTOR_VERSION.sql"
-if (-not (Test-Path $VectorSql))     { Write-Error "ASSERT FAILED: $VectorSql not found"; exit 1 }
-if (-not (Test-Path "$RuntimeDir\lib\vector.dll")) {
-    Write-Error "ASSERT FAILED: vector.dll not found in lib\"
-    exit 1
-}
-Write-Host "  PASS runtime layout"
-
-# Licenses
-if (Test-Path "$PgRoot\doc\postgresql\COPYRIGHT") {
-    Copy-Item "$PgRoot\doc\postgresql\COPYRIGHT" "$RuntimeDir\LICENSE.postgresql" -Force
-} elseif (Test-Path "$PgRoot\doc\COPYRIGHT") {
-    Copy-Item "$PgRoot\doc\COPYRIGHT" "$RuntimeDir\LICENSE.postgresql" -Force
-}
-if (Test-Path "$PgVectorDir\LICENSE") {
-    Copy-Item "$PgVectorDir\LICENSE" "$RuntimeDir\LICENSE.pgvector" -Force
-}
-
-Write-Host "==> Self-contained smoke test (initdb + CREATE EXTENSION vector + distance query)"
-& "$RuntimeDir\bin\postgres.exe" --version
-if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: postgres.exe --version exit $LASTEXITCODE"; exit 1 }
-
-$SmokeData = "$BuildDir\smoke-pgdata"
-$SmokeLog  = "$BuildDir\smoke-pg.log"
-$SmokePort = 55899
-if (Test-Path $SmokeData) { Remove-Item -Recurse -Force $SmokeData }
-
-& "$RuntimeDir\bin\initdb.exe" -D $SmokeData --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
-if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: initdb"; exit 1 }
-
-& "$RuntimeDir\bin\pg_ctl.exe" -D $SmokeData -o "-p $SmokePort -h 127.0.0.1" -l $SmokeLog -w start
-if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: pg_ctl start (see $SmokeLog)"; Get-Content $SmokeLog | Select-Object -Last 30; exit 1 }
-
-try {
-    & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
-    if ($LASTEXITCODE -ne 0) { throw "CREATE EXTENSION vector failed" }
-    $ExtV = & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
-    $Dist = & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -tAc "SELECT '[1,2,3]'::vector <-> '[1,2,4]'::vector;"
-    Write-Host "  vector extension version: $ExtV"
-    Write-Host "  distance query result:    $Dist"
-    if ($ExtV.Trim() -ne $PGVECTOR_VERSION) {
-        Write-Error "FAIL: extversion='$ExtV' expected='$PGVECTOR_VERSION'"
-        exit 1
-    }
-    Write-Host "  PASS smoke (extension load + vector distance)"
-}
-finally {
-    & "$RuntimeDir\bin\pg_ctl.exe" -D $SmokeData -m fast stop 2>$null | Out-Null
-    Remove-Item -Recurse -Force $SmokeData -ErrorAction SilentlyContinue
-}
-
-Write-Host "==> Creating tarball: $OutputName"
-$DistDirFwd    = $DistDir.Replace('\', '/')
-$RuntimeDirFwd = $RuntimeDir.Replace('\', '/')
-& tar -czf "$DistDirFwd/$OutputName" -C "$RuntimeDirFwd" .
-if ($LASTEXITCODE -ne 0) { Write-Error "tar failed (exit $LASTEXITCODE)"; exit 1 }
-
-Write-Host "==> Generating sha256 sidecar"
-Push-Location $DistDir
-$Hash = (Get-FileHash -Algorithm SHA256 $OutputName).Hash.ToLower()
-"$Hash  $OutputName" | Out-File -Encoding ascii "${OutputName}.sha256"
-Pop-Location
-
-# ---------------------------------------------------------------------------
-# Phase A: Re-smoke from EXTRACTED tarball with hostile env (cleared PATH,
-# only system32). Catches false-pass where the build host has VC redist /
-# preinstalled DLLs that the tarball might be missing.
-# ---------------------------------------------------------------------------
-Write-Host "==> Re-smoke from extracted tarball (hostile env)"
-$ExtractDir = "$BuildDir\extract-smoke"
-if (Test-Path $ExtractDir) { Remove-Item -Recurse -Force $ExtractDir }
-New-Item -ItemType Directory -Force -Path $ExtractDir | Out-Null
-& tar -xzf "$DistDirFwd/$OutputName" -C ($ExtractDir.Replace('\','/'))
-if ($LASTEXITCODE -ne 0) { Write-Error "extract failed"; exit 1 }
-
-$ExtractData = "$ExtractDir\extract-pgdata"
-$ExtractLog  = "$ExtractDir\extract-pg.log"
-$ExtractPort = 55898
-
-# Snapshot current env, then strip to minimal Windows PATH (no PG14/15/16
-# preinstalled bin, no chocolatey, no MSVC tools).
-$SavedPath  = $env:PATH
-$SavedPgRoot = $env:PGROOT
-$env:PATH   = "$env:SystemRoot\System32;$env:SystemRoot"
-$env:PGROOT = $null
-$env:PGDATA = $null
-
-try {
-    & "$ExtractDir\bin\postgres.exe" --version
-    if ($LASTEXITCODE -ne 0) { throw "FAIL: postgres --version under hostile env" }
-    & "$ExtractDir\bin\initdb.exe" -D $ExtractData --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
-    if ($LASTEXITCODE -ne 0) { throw "FAIL: initdb under hostile env" }
-    & "$ExtractDir\bin\pg_ctl.exe" -D $ExtractData -o "-p $ExtractPort -h 127.0.0.1" -l $ExtractLog -w start
-    if ($LASTEXITCODE -ne 0) { Get-Content $ExtractLog | Select-Object -Last 30; throw "FAIL: pg_ctl start under hostile env" }
-    try {
-        & "$ExtractDir\bin\psql.exe" -h 127.0.0.1 -p $ExtractPort -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
-        if ($LASTEXITCODE -ne 0) { throw "FAIL: CREATE EXTENSION vector under hostile env" }
-        $ExtV2 = & "$ExtractDir\bin\psql.exe" -h 127.0.0.1 -p $ExtractPort -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
-        if ($ExtV2.Trim() -ne $PGVECTOR_VERSION) { throw "FAIL: extracted-smoke extversion='$ExtV2'" }
-        Write-Host "  PASS extracted-tarball smoke (hostile env)"
-    } finally {
-        & "$ExtractDir\bin\pg_ctl.exe" -D $ExtractData -m fast stop 2>$null | Out-Null
-    }
-} finally {
-    $env:PATH   = $SavedPath
-    $env:PGROOT = $SavedPgRoot
-    Remove-Item -Recurse -Force $ExtractDir -ErrorAction SilentlyContinue
-}
-
-Write-Host "==> Done: $DistDir\$OutputName"
-Get-Item "$DistDir\$OutputName" | Select-Object Name, Length
+# build-runtime-windows.ps1 — Build PostgreSQL 16 + pgvector runtime on Windows.
+# Uses windows-2022 GHA runner's preinstalled PostgreSQL 16 (consistent
+# pg_config + postgres.exe from same package) — avoids EDB zip's split-version
+# packaging bug that linked pgvector against PG 14 ABI.
+# Builds pgvector from source via MSVC/nmake, then assembles a self-contained
+# runtime tree (bin + lib + share at root). Final smoke: initdb + CREATE
+# EXTENSION vector + distance query.
+# Produces: dist\mixdog-runtime-win32-x64-pg{pgver}-pgvector{vecver}.tar.gz
+
+$ErrorActionPreference = 'Stop'
+
+$PG_VERSION       = '16.4'
+$PGVECTOR_VERSION = '0.8.2'
+$TARGET_OS        = $env:TARGET_OS   ?? 'win32'
+$TARGET_ARCH      = $env:TARGET_ARCH ?? 'x64'
+
+# Auto-detect highest preinstalled PG ≥ 16 OR install via chocolatey.
+$PgInstallRoot = 'C:\Program Files\PostgreSQL'
+
+function Find-PgRoot {
+    if (-not (Test-Path $PgInstallRoot)) { return $null }
+    $cands = Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue |
+        Where-Object { $_.Name -match '^(\d+)' } |
+        Sort-Object { [int]([regex]::Match($_.Name, '^(\d+)').Groups[1].Value) } -Descending
+    foreach ($c in $cands) {
+        $major = [int]([regex]::Match($c.Name, '^(\d+)').Groups[1].Value)
+        if ($major -ge 16 -and (Test-Path "$($c.FullName)\bin\pg_config.exe")) {
+            return $c.FullName
+        }
+    }
+    return $null
+}
+
+$PgRoot = Find-PgRoot
+if (-not $PgRoot) {
+    Write-Host "==> No preinstalled PG ≥ 16 found. Installing via chocolatey..."
+    if (Test-Path $PgInstallRoot) {
+        Write-Host "Existing PG dirs (none usable):"
+        Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue | Select-Object Name
+    }
+    choco install postgresql16 --version=16.4.0 --params '/Password:postgres' -y --no-progress 2>&1 | Out-Host
+    if ($LASTEXITCODE -ne 0) { Write-Error "choco install postgresql16 failed (exit $LASTEXITCODE)"; exit 1 }
+    $PgRoot = Find-PgRoot
+    if (-not $PgRoot) {
+        Write-Error "ASSERT FAILED: chocolatey install completed but PG ≥ 16 still not found under $PgInstallRoot"
+        Get-ChildItem $PgInstallRoot -Directory -ErrorAction SilentlyContinue | Select-Object Name
+        exit 1
+    }
+}
+
+$ScriptDir  = Split-Path -Parent $MyInvocation.MyCommand.Path
+$RootDir    = (Resolve-Path "$ScriptDir\..").Path
+$BuildDir   = "$RootDir\build\runtime-win32-$TARGET_ARCH"
+$DistDir    = "$RootDir\dist"
+$RuntimeDir = "$BuildDir\runtime"
+
+$PgBin    = "$PgRoot\bin"
+$PgConfig = "$PgBin\pg_config.exe"
+
+$OutputName = "mixdog-runtime-${TARGET_OS}-${TARGET_ARCH}-pg${PG_VERSION}-pgvector${PGVECTOR_VERSION}.tar.gz"
+
+Write-Host "==> Using preinstalled PG: $PgRoot"
+& $PgConfig --version
+$RealVersion = (& $PgConfig --version) -replace 'PostgreSQL ', ''
+Write-Host "  pg_config reports version: $RealVersion"
+
+if (Test-Path $RuntimeDir) { Remove-Item -Recurse -Force $RuntimeDir }
+New-Item -ItemType Directory -Force -Path $BuildDir, $DistDir,
+  "$RuntimeDir\bin", "$RuntimeDir\lib", "$RuntimeDir\share" | Out-Null
+
+Write-Host "==> Cloning pgvector $PGVECTOR_VERSION"
+$PgVectorDir = "$BuildDir\pgvector"
+$VectorDllBuilt = "$PgVectorDir\vector.dll"
+
+if (Test-Path $VectorDllBuilt) {
+    Write-Host "  Cache hit: vector.dll already built at $VectorDllBuilt"
+} else {
+    if (Test-Path $PgVectorDir) { Remove-Item -Recurse -Force $PgVectorDir }
+    git clone --branch "v$PGVECTOR_VERSION" --depth 1 `
+        https://github.com/pgvector/pgvector.git $PgVectorDir
+
+    Write-Host "==> Building pgvector (MSVC/nmake against system PG 16)"
+    Push-Location $PgVectorDir
+    try {
+        $VsWhere = "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vswhere.exe"
+        $VcVarsAll = & $VsWhere -latest -find 'VC\Auxiliary\Build\vcvarsall.bat' 2>$null | Select-Object -First 1
+        if (-not $VcVarsAll) {
+            Write-Error "vswhere could not locate vcvarsall.bat — Visual Studio Build Tools required."
+            exit 1
+        }
+        # CRITICAL: prepend $PgRoot\bin to PATH so any bare `pg_config` call
+        # inside Makefile.win resolves to PG 16 — runner has PG 14/15
+        # preinstalled and would otherwise win the PATH lookup, producing
+        # PG14-ABI vector.dll that fails to load in our PG 16 postgres.exe.
+        # Set in PowerShell so cmd /c inherits; setting inside the cmd batch
+        # via %PATH% loses vcvarsall's additions due to parse-time expansion.
+        $env:PATH = "$PgRoot\bin;$env:PATH"
+        $env:PGROOT = $PgRoot
+        $BuildCmd = "`"$VcVarsAll`" amd64 && nmake /F Makefile.win PG_CONFIG=`"$PgConfig`""
+        cmd /c $BuildCmd
+        if ($LASTEXITCODE -ne 0) {
+            Write-Error "pgvector nmake build failed (exit $LASTEXITCODE)"
+            exit 1
+        }
+    } finally {
+        Pop-Location
+    }
+}
+
+Write-Host "==> Assembling runtime layout — copy bin (.exe + .dll), lib, share from $PgRoot"
+# Copy ALL .exe + .dll from PG bin so postgres.exe + libpq.dll + libcrypto/libssl/
+# libintl/libiconv/icu*/libxml2/libxslt/libwinpthread/libecpg/libpgtypes etc. all
+# ship together. PG 16 install layout puts these all in bin\.
+Copy-Item "$PgBin\*.exe","$PgBin\*.dll" "$RuntimeDir\bin\" -Force
+
+# lib\: PG extension modules (incl. contrib like pgcrypto.dll). vector.dll
+# placed here below — PG looks for $libdir/<ext>.dll which resolves to lib\.
+Copy-Item -Recurse -Force "$PgRoot\lib\*"   "$RuntimeDir\lib\"   -ErrorAction SilentlyContinue
+# share\: extension SQL/control, locale, timezone data, conf samples.
+Copy-Item -Recurse -Force "$PgRoot\share\*" "$RuntimeDir\share\" -ErrorAction SilentlyContinue
+
+Write-Host "==> Manually staging pgvector artifacts (avoid pg_config-derived install paths)"
+$RuntimeExtDir = "$RuntimeDir\share\extension"
+New-Item -ItemType Directory -Force -Path $RuntimeExtDir | Out-Null
+Copy-Item "$PgVectorDir\vector.dll"        "$RuntimeDir\lib\"  -Force
+Copy-Item "$PgVectorDir\vector.control"    $RuntimeExtDir      -Force
+Copy-Item "$PgVectorDir\sql\vector--*.sql" $RuntimeExtDir      -Force
+
+Write-Host "==> Asserting runtime layout"
+$VectorControl = "$RuntimeDir\share\extension\vector.control"
+if (-not (Test-Path $VectorControl)) { Write-Error "ASSERT FAILED: $VectorControl not found"; exit 1 }
+$VectorSql = "$RuntimeDir\share\extension\vector--$PGVECTOR_VERSION.sql"
+if (-not (Test-Path $VectorSql))     { Write-Error "ASSERT FAILED: $VectorSql not found"; exit 1 }
+if (-not (Test-Path "$RuntimeDir\lib\vector.dll")) {
+    Write-Error "ASSERT FAILED: vector.dll not found in lib\"
+    exit 1
+}
+Write-Host "  PASS runtime layout"
+
+# Licenses
+if (Test-Path "$PgRoot\doc\postgresql\COPYRIGHT") {
+    Copy-Item "$PgRoot\doc\postgresql\COPYRIGHT" "$RuntimeDir\LICENSE.postgresql" -Force
+} elseif (Test-Path "$PgRoot\doc\COPYRIGHT") {
+    Copy-Item "$PgRoot\doc\COPYRIGHT" "$RuntimeDir\LICENSE.postgresql" -Force
+}
+if (Test-Path "$PgVectorDir\LICENSE") {
+    Copy-Item "$PgVectorDir\LICENSE" "$RuntimeDir\LICENSE.pgvector" -Force
+}
+
+Write-Host "==> Self-contained smoke test (initdb + CREATE EXTENSION vector + distance query)"
+& "$RuntimeDir\bin\postgres.exe" --version
+if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: postgres.exe --version exit $LASTEXITCODE"; exit 1 }
+
+$SmokeData = "$BuildDir\smoke-pgdata"
+$SmokeLog  = "$BuildDir\smoke-pg.log"
+$SmokePort = 55899
+if (Test-Path $SmokeData) { Remove-Item -Recurse -Force $SmokeData }
+
+& "$RuntimeDir\bin\initdb.exe" -D $SmokeData --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
+if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: initdb"; exit 1 }
+
+& "$RuntimeDir\bin\pg_ctl.exe" -D $SmokeData -o "-p $SmokePort -h 127.0.0.1" -l $SmokeLog -w start
+if ($LASTEXITCODE -ne 0) { Write-Error "FAIL: pg_ctl start (see $SmokeLog)"; Get-Content $SmokeLog | Select-Object -Last 30; exit 1 }
+
+try {
+    & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
+    if ($LASTEXITCODE -ne 0) { throw "CREATE EXTENSION vector failed" }
+    $ExtV = & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
+    $Dist = & "$RuntimeDir\bin\psql.exe" -h 127.0.0.1 -p $SmokePort -U postgres -d postgres -tAc "SELECT '[1,2,3]'::vector <-> '[1,2,4]'::vector;"
+    Write-Host "  vector extension version: $ExtV"
+    Write-Host "  distance query result:    $Dist"
+    if ($ExtV.Trim() -ne $PGVECTOR_VERSION) {
+        Write-Error "FAIL: extversion='$ExtV' expected='$PGVECTOR_VERSION'"
+        exit 1
+    }
+    Write-Host "  PASS smoke (extension load + vector distance)"
+}
+finally {
+    & "$RuntimeDir\bin\pg_ctl.exe" -D $SmokeData -m fast stop 2>$null | Out-Null
+    Remove-Item -Recurse -Force $SmokeData -ErrorAction SilentlyContinue
+}
+
+Write-Host "==> Creating tarball: $OutputName"
+$DistDirFwd    = $DistDir.Replace('\', '/')
+$RuntimeDirFwd = $RuntimeDir.Replace('\', '/')
+& tar -czf "$DistDirFwd/$OutputName" -C "$RuntimeDirFwd" .
+if ($LASTEXITCODE -ne 0) { Write-Error "tar failed (exit $LASTEXITCODE)"; exit 1 }
+
+Write-Host "==> Generating sha256 sidecar"
+Push-Location $DistDir
+$Hash = (Get-FileHash -Algorithm SHA256 $OutputName).Hash.ToLower()
+"$Hash  $OutputName" | Out-File -Encoding ascii "${OutputName}.sha256"
+Pop-Location
+
+# ---------------------------------------------------------------------------
+# Phase A: Re-smoke from EXTRACTED tarball with hostile env (cleared PATH,
+# only system32). Catches false-pass where the build host has VC redist /
+# preinstalled DLLs that the tarball might be missing.
+# ---------------------------------------------------------------------------
+Write-Host "==> Re-smoke from extracted tarball (hostile env)"
+$ExtractDir = "$BuildDir\extract-smoke"
+if (Test-Path $ExtractDir) { Remove-Item -Recurse -Force $ExtractDir }
+New-Item -ItemType Directory -Force -Path $ExtractDir | Out-Null
+& tar -xzf "$DistDirFwd/$OutputName" -C ($ExtractDir.Replace('\','/'))
+if ($LASTEXITCODE -ne 0) { Write-Error "extract failed"; exit 1 }
+
+$ExtractData = "$ExtractDir\extract-pgdata"
+$ExtractLog  = "$ExtractDir\extract-pg.log"
+$ExtractPort = 55898
+
+# Snapshot current env, then strip to minimal Windows PATH (no PG14/15/16
+# preinstalled bin, no chocolatey, no MSVC tools).
+$SavedPath  = $env:PATH
+$SavedPgRoot = $env:PGROOT
+$env:PATH   = "$env:SystemRoot\System32;$env:SystemRoot"
+$env:PGROOT = $null
+$env:PGDATA = $null
+
+try {
+    & "$ExtractDir\bin\postgres.exe" --version
+    if ($LASTEXITCODE -ne 0) { throw "FAIL: postgres --version under hostile env" }
+    & "$ExtractDir\bin\initdb.exe" -D $ExtractData --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
+    if ($LASTEXITCODE -ne 0) { throw "FAIL: initdb under hostile env" }
+    & "$ExtractDir\bin\pg_ctl.exe" -D $ExtractData -o "-p $ExtractPort -h 127.0.0.1" -l $ExtractLog -w start
+    if ($LASTEXITCODE -ne 0) { Get-Content $ExtractLog | Select-Object -Last 30; throw "FAIL: pg_ctl start under hostile env" }
+    try {
+        & "$ExtractDir\bin\psql.exe" -h 127.0.0.1 -p $ExtractPort -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
+        if ($LASTEXITCODE -ne 0) { throw "FAIL: CREATE EXTENSION vector under hostile env" }
+        $ExtV2 = & "$ExtractDir\bin\psql.exe" -h 127.0.0.1 -p $ExtractPort -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
+        if ($ExtV2.Trim() -ne $PGVECTOR_VERSION) { throw "FAIL: extracted-smoke extversion='$ExtV2'" }
+        Write-Host "  PASS extracted-tarball smoke (hostile env)"
+    } finally {
+        & "$ExtractDir\bin\pg_ctl.exe" -D $ExtractData -m fast stop 2>$null | Out-Null
+    }
+} finally {
+    $env:PATH   = $SavedPath
+    $env:PGROOT = $SavedPgRoot
+    Remove-Item -Recurse -Force $ExtractDir -ErrorAction SilentlyContinue
+}
+
+Write-Host "==> Done: $DistDir\$OutputName"
+Get-Item "$DistDir\$OutputName" | Select-Object Name, Length

package/scripts/provider-toolcall-test.mjs

@@ -24,6 +24,12 @@ import {
 import {
     consumeCompatChatCompletionStream,
 } from '../src/runtime/agent/orchestrator/providers/openai-compat-stream.mjs';
+import {
+    _computeDelta,
+} from '../src/runtime/agent/orchestrator/providers/openai-ws-delta.mjs';
+import {
+    _cacheObservationForTest,
+} from '../src/runtime/agent/orchestrator/providers/openai-oauth-ws.mjs';
 import {
     createGeminiTextLeakGuard,
     parseToolCalls as geminiParseToolCalls,
@@ -976,3 +982,85 @@ test('anthropic effort: explicit thinkingBudgetTokens wins over effort', () => {
     assert.equal(body.output_config, undefined);
     assert.equal(shouldIncludeEffortBeta(model, { effort: 'low', thinkingBudgetTokens: 2048 }), false);
 });
+// === 9. OpenAI OAuth WS cache tracing ======================================
+
+test('openai oauth ws delta: default full frame is an expected mode, not a cache break', () => {
+    const previous = process.env.MIXDOG_OAI_WS_DELTA;
+    try {
+        delete process.env.MIXDOG_OAI_WS_DELTA;
+        const body = { model: 'gpt-5.5', input: [{ type: 'message', role: 'user', content: 'hi' }] };
+        const delta = _computeDelta({
+            entry: {
+                lastRequestSansInput: '{}',
+                lastResponseId: 'resp_prev',
+                lastRequestInput: body.input,
+                lastResponseItems: [],
+            },
+            body,
+        });
+        assert.equal(delta.mode, 'full');
+        assert.equal(delta.reason, 'full_default');
+        assert.equal(delta.frame.previous_response_id, undefined);
+    } finally {
+        if (previous == null) delete process.env.MIXDOG_OAI_WS_DELTA;
+        else process.env.MIXDOG_OAI_WS_DELTA = previous;
+    }
+});
+
+test('openai oauth ws delta: opt-in still falls back without turn-state unless forced', () => {
+    const previous = process.env.MIXDOG_OAI_WS_DELTA;
+    try {
+        const body = {
+            model: 'gpt-5.5',
+            input: [
+                { type: 'message', role: 'user', content: 'prev' },
+                { type: 'message', role: 'user', content: 'next' },
+            ],
+        };
+        const entry = {
+            lastRequestSansInput: '{"model":"gpt-5.5"}',
+            lastResponseId: 'resp_prev',
+            lastRequestInput: [body.input[0]],
+            lastResponseItems: [],
+        };
+
+        process.env.MIXDOG_OAI_WS_DELTA = '1';
+        const safe = _computeDelta({ entry, body });
+        assert.equal(safe.mode, 'full');
+        assert.equal(safe.reason, 'delta_missing_turn_state');
+        assert.equal(safe.frame.previous_response_id, undefined);
+
+        process.env.MIXDOG_OAI_WS_DELTA = 'force';
+        const forced = _computeDelta({ entry, body });
+        assert.equal(forced.mode, 'delta');
+        assert.equal(forced.frame.previous_response_id, 'resp_prev');
+        assert.deepEqual(forced.frame.input, [body.input[1]]);
+    } finally {
+        if (previous == null) delete process.env.MIXDOG_OAI_WS_DELTA;
+        else process.env.MIXDOG_OAI_WS_DELTA = previous;
+    }
+});
+test('openai oauth ws cache observation detects warm zero and partial retreats', () => {
+    const zero = _cacheObservationForTest({
+        entry: { promptCacheMaxCachedTokens: 47_616 },
+        result: { usage: { inputTokens: 59_000, promptTokens: 59_000, cachedTokens: 0 } },
+    });
+    assert.equal(zero.actualMiss, true);
+    assert.equal(zero.missReason, 'warm_session_zero_cached_tokens');
+    assert.equal(zero.uncachedTokens, 59_000);
+
+    const partial = _cacheObservationForTest({
+        entry: { promptCacheMaxCachedTokens: 101_888 },
+        result: { usage: { inputTokens: 102_456, promptTokens: 102_456, cachedTokens: 60_928 } },
+    });
+    assert.equal(partial.actualMiss, true);
+    assert.equal(partial.missReason, 'warm_session_cached_tokens_dropped');
+    assert.equal(partial.cachedTokens % 512, 0);
+
+    const healthy = _cacheObservationForTest({
+        entry: { promptCacheMaxCachedTokens: 101_888 },
+        result: { usage: { inputTokens: 106_468, promptTokens: 106_468, cachedTokens: 103_424 } },
+    });
+    assert.equal(healthy.actualMiss, false);
+    assert.equal(healthy.missReason, null);
+});

package/scripts/recall-usecase-cases.json

@@ -15,4 +15,4 @@
   { "id": "uc5-yesterday", "label": "UC5 calendar yesterday", "args": { "period": "yesterday", "limit": 10 }, "expect": "browse" },
   { "id": "uc5-thisweek", "label": "UC5 calendar this_week", "args": { "period": "this_week", "limit": 10 }, "expect": "browse" },
   { "id": "uc6-category", "label": "UC6 category decision 7d", "args": { "period": "7d", "category": "decision", "limit": 10 }, "expect": "browse" }
-]
+]

package/scripts/smoke-runtime-negative.ps1

@@ -1,106 +1,106 @@
-# smoke-runtime-negative.ps1 — Negative-path tests against released win32-x64
-# runtime tarball. Validates: download, sha256, corrupt-tarball, fresh-extract
-# boot, double-init refusal, hostile-env survival.
-#
-# Env: TAG / OS / ARCH / RUNTIME_RELEASE_REPOSITORY (default tribgames/mixdog)
-
-$ErrorActionPreference = 'Stop'
-
-$Tag         = if ($env:TAG)                { $env:TAG }  else { 'runtime-v0.4.0' }
-$Os          = if ($env:OS)                 { $env:OS }   else { 'win32' }
-$Arch        = if ($env:ARCH)               { $env:ARCH } else { 'x64' }
-$ReleaseRepo = if ($env:RUNTIME_RELEASE_REPOSITORY) { $env:RUNTIME_RELEASE_REPOSITORY } else { 'tribgames/mixdog' }
-$PgVer       = '16.4'
-$PgvectorVer = '0.8.2'
-
-$Asset = "mixdog-runtime-${Os}-${Arch}-pg${PgVer}-pgvector${PgvectorVer}.tar.gz"
-$Url   = "https://github.com/${ReleaseRepo}/releases/download/${Tag}/${Asset}"
-
-$Work = New-Item -ItemType Directory -Force -Path "$env:TEMP\smoke-$([guid]::NewGuid().ToString('N'))" | Select-Object -ExpandProperty FullName
-
-try {
-    Write-Host "==> Negative-path smoke for ${Os}-${Arch} from $Url"
-
-    Write-Host "==> Test 1: HEAD reaches release asset"
-    $resp = Invoke-WebRequest -Uri $Url -Method Head -UseBasicParsing -ErrorAction Stop
-    Write-Host "  HTTP $($resp.StatusCode)"
-
-    Write-Host "==> Test 2: full download + sha256"
-    $TarPath = Join-Path $Work $Asset
-    Invoke-WebRequest -Uri $Url -OutFile $TarPath -UseBasicParsing
-    $sha = (Get-FileHash -Algorithm SHA256 $TarPath).Hash.ToLower()
-    Write-Host "  sha256=$sha"
-
-    Write-Host "==> Test 3: corrupt tarball — flip a byte and ensure tar errors"
-    $CorruptPath = "$Work\corrupt.tar.gz"
-    Copy-Item $TarPath $CorruptPath
-    $bytes = [byte[]]::new(1); $rand = [System.Random]::new(); $rand.NextBytes($bytes)
-    $stream = [System.IO.File]::OpenWrite($CorruptPath)
-    $stream.Position = 102400
-    $stream.Write($bytes, 0, 1)
-    $stream.Close()
-    $CorruptDir = "$Work\corrupt"
-    New-Item -ItemType Directory -Force -Path $CorruptDir | Out-Null
-    $TarProc = Start-Process -FilePath tar -ArgumentList @('-xzf', $CorruptPath, '-C', $CorruptDir.Replace('\','/')) -Wait:$false -PassThru -WindowStyle Hidden
-    if (-not $TarProc.WaitForExit(15000)) {
-        Stop-Process -Id $TarProc.Id -Force -ErrorAction SilentlyContinue
-        Write-Host "  PASS: corrupted tarball extraction timed out and was stopped"
-    } elseif ($TarProc.ExitCode -eq 0) {
-        Write-Host "  WARN: corrupted tarball extracted without error (tar gzip recovery)"
-    } else {
-        Write-Host "  PASS: corrupted tarball rejected by tar (exit $($TarProc.ExitCode))"
-    }
-
-    Write-Host "==> Test 4: fresh-extract boot (extension load + distance query)"
-    $FreshDir = "$Work\fresh"
-    New-Item -ItemType Directory -Force -Path $FreshDir | Out-Null
-    & tar -xzf $TarPath -C ($FreshDir.Replace('\','/'))
-    if ($LASTEXITCODE -ne 0) { throw "fresh extract failed" }
-
-    $PgBin   = "$FreshDir\bin"
-    $Data    = "$FreshDir\pgdata"
-    $Log     = "$FreshDir\pg.log"
-    $Port    = 55897
-
-    # Hostile env: minimal PATH (System32 only), no PGROOT/PGDATA
-    $SavedPath = $env:PATH
-    $SavedPgRoot = $env:PGROOT
-    $env:PATH   = "$env:SystemRoot\System32;$env:SystemRoot"
-    $env:PGROOT = $null
-    $env:PGDATA = $null
-
-    try {
-        & "$PgBin\postgres.exe" --version
-        if ($LASTEXITCODE -ne 0) { throw "FAIL: postgres --version" }
-        & "$PgBin\initdb.exe" -D $Data --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
-        if ($LASTEXITCODE -ne 0) { throw "FAIL: initdb" }
-        & "$PgBin\pg_ctl.exe" -D $Data -o "-p $Port -h 127.0.0.1" -l $Log -w start
-        if ($LASTEXITCODE -ne 0) { Get-Content $Log | Select-Object -Last 30; throw "FAIL: pg_ctl start" }
-
-        try {
-            & "$PgBin\psql.exe" -h 127.0.0.1 -p $Port -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
-            if ($LASTEXITCODE -ne 0) { throw "FAIL: CREATE EXTENSION" }
-            $ExtV = & "$PgBin\psql.exe" -h 127.0.0.1 -p $Port -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
-            if ($ExtV.Trim() -ne $PgvectorVer) { throw "FAIL: extversion='$ExtV' expected='$PgvectorVer'" }
-            Write-Host "  PASS: fresh-extract boot + vector extension"
-        } finally {
-            & "$PgBin\pg_ctl.exe" -D $Data -m fast stop 2>$null | Out-Null
-        }
-
-        Write-Host "==> Test 5: second initdb on initialized dir refused"
-        $rc = (Start-Process -FilePath "$PgBin\initdb.exe" -ArgumentList "-D",$Data,"-U","postgres" -Wait -PassThru -NoNewWindow).ExitCode
-        if ($rc -eq 0) {
-            Write-Host "  WARN: second initdb succeeded (unexpected)"
-        } else {
-            Write-Host "  PASS: second initdb refused (exit $rc)"
-        }
-    } finally {
-        $env:PATH   = $SavedPath
-        $env:PGROOT = $SavedPgRoot
-    }
-
-    Write-Host "==> All negative-path smokes: PASS"
-}
-finally {
-    Remove-Item -Recurse -Force $Work -ErrorAction SilentlyContinue
-}
+# smoke-runtime-negative.ps1 — Negative-path tests against released win32-x64
+# runtime tarball. Validates: download, sha256, corrupt-tarball, fresh-extract
+# boot, double-init refusal, hostile-env survival.
+#
+# Env: TAG / OS / ARCH / RUNTIME_RELEASE_REPOSITORY (default tribgames/mixdog)
+
+$ErrorActionPreference = 'Stop'
+
+$Tag         = if ($env:TAG)                { $env:TAG }  else { 'runtime-v0.4.0' }
+$Os          = if ($env:OS)                 { $env:OS }   else { 'win32' }
+$Arch        = if ($env:ARCH)               { $env:ARCH } else { 'x64' }
+$ReleaseRepo = if ($env:RUNTIME_RELEASE_REPOSITORY) { $env:RUNTIME_RELEASE_REPOSITORY } else { 'tribgames/mixdog' }
+$PgVer       = '16.4'
+$PgvectorVer = '0.8.2'
+
+$Asset = "mixdog-runtime-${Os}-${Arch}-pg${PgVer}-pgvector${PgvectorVer}.tar.gz"
+$Url   = "https://github.com/${ReleaseRepo}/releases/download/${Tag}/${Asset}"
+
+$Work = New-Item -ItemType Directory -Force -Path "$env:TEMP\smoke-$([guid]::NewGuid().ToString('N'))" | Select-Object -ExpandProperty FullName
+
+try {
+    Write-Host "==> Negative-path smoke for ${Os}-${Arch} from $Url"
+
+    Write-Host "==> Test 1: HEAD reaches release asset"
+    $resp = Invoke-WebRequest -Uri $Url -Method Head -UseBasicParsing -ErrorAction Stop
+    Write-Host "  HTTP $($resp.StatusCode)"
+
+    Write-Host "==> Test 2: full download + sha256"
+    $TarPath = Join-Path $Work $Asset
+    Invoke-WebRequest -Uri $Url -OutFile $TarPath -UseBasicParsing
+    $sha = (Get-FileHash -Algorithm SHA256 $TarPath).Hash.ToLower()
+    Write-Host "  sha256=$sha"
+
+    Write-Host "==> Test 3: corrupt tarball — flip a byte and ensure tar errors"
+    $CorruptPath = "$Work\corrupt.tar.gz"
+    Copy-Item $TarPath $CorruptPath
+    $bytes = [byte[]]::new(1); $rand = [System.Random]::new(); $rand.NextBytes($bytes)
+    $stream = [System.IO.File]::OpenWrite($CorruptPath)
+    $stream.Position = 102400
+    $stream.Write($bytes, 0, 1)
+    $stream.Close()
+    $CorruptDir = "$Work\corrupt"
+    New-Item -ItemType Directory -Force -Path $CorruptDir | Out-Null
+    $TarProc = Start-Process -FilePath tar -ArgumentList @('-xzf', $CorruptPath, '-C', $CorruptDir.Replace('\','/')) -Wait:$false -PassThru -WindowStyle Hidden
+    if (-not $TarProc.WaitForExit(15000)) {
+        Stop-Process -Id $TarProc.Id -Force -ErrorAction SilentlyContinue
+        Write-Host "  PASS: corrupted tarball extraction timed out and was stopped"
+    } elseif ($TarProc.ExitCode -eq 0) {
+        Write-Host "  WARN: corrupted tarball extracted without error (tar gzip recovery)"
+    } else {
+        Write-Host "  PASS: corrupted tarball rejected by tar (exit $($TarProc.ExitCode))"
+    }
+
+    Write-Host "==> Test 4: fresh-extract boot (extension load + distance query)"
+    $FreshDir = "$Work\fresh"
+    New-Item -ItemType Directory -Force -Path $FreshDir | Out-Null
+    & tar -xzf $TarPath -C ($FreshDir.Replace('\','/'))
+    if ($LASTEXITCODE -ne 0) { throw "fresh extract failed" }
+
+    $PgBin   = "$FreshDir\bin"
+    $Data    = "$FreshDir\pgdata"
+    $Log     = "$FreshDir\pg.log"
+    $Port    = 55897
+
+    # Hostile env: minimal PATH (System32 only), no PGROOT/PGDATA
+    $SavedPath = $env:PATH
+    $SavedPgRoot = $env:PGROOT
+    $env:PATH   = "$env:SystemRoot\System32;$env:SystemRoot"
+    $env:PGROOT = $null
+    $env:PGDATA = $null
+
+    try {
+        & "$PgBin\postgres.exe" --version
+        if ($LASTEXITCODE -ne 0) { throw "FAIL: postgres --version" }
+        & "$PgBin\initdb.exe" -D $Data --username=postgres --auth-local=trust --no-locale -E UTF8 | Out-Null
+        if ($LASTEXITCODE -ne 0) { throw "FAIL: initdb" }
+        & "$PgBin\pg_ctl.exe" -D $Data -o "-p $Port -h 127.0.0.1" -l $Log -w start
+        if ($LASTEXITCODE -ne 0) { Get-Content $Log | Select-Object -Last 30; throw "FAIL: pg_ctl start" }
+
+        try {
+            & "$PgBin\psql.exe" -h 127.0.0.1 -p $Port -U postgres -d postgres -c "CREATE EXTENSION vector;" | Out-Null
+            if ($LASTEXITCODE -ne 0) { throw "FAIL: CREATE EXTENSION" }
+            $ExtV = & "$PgBin\psql.exe" -h 127.0.0.1 -p $Port -U postgres -d postgres -tAc "SELECT extversion FROM pg_extension WHERE extname='vector';"
+            if ($ExtV.Trim() -ne $PgvectorVer) { throw "FAIL: extversion='$ExtV' expected='$PgvectorVer'" }
+            Write-Host "  PASS: fresh-extract boot + vector extension"
+        } finally {
+            & "$PgBin\pg_ctl.exe" -D $Data -m fast stop 2>$null | Out-Null
+        }
+
+        Write-Host "==> Test 5: second initdb on initialized dir refused"
+        $rc = (Start-Process -FilePath "$PgBin\initdb.exe" -ArgumentList "-D",$Data,"-U","postgres" -Wait -PassThru -NoNewWindow).ExitCode
+        if ($rc -eq 0) {
+            Write-Host "  WARN: second initdb succeeded (unexpected)"
+        } else {
+            Write-Host "  PASS: second initdb refused (exit $rc)"
+        }
+    } finally {
+        $env:PATH   = $SavedPath
+        $env:PGROOT = $SavedPgRoot
+    }
+
+    Write-Host "==> All negative-path smokes: PASS"
+}
+finally {
+    Remove-Item -Recurse -Force $Work -ErrorAction SilentlyContinue
+}

package/src/rules/agent/30-explorer.md

@@ -6,23 +6,29 @@ kind: retrieval
 
 # Role: explorer
 
-You are a one-shot locator, not a researcher.
+You are a one-shot locator, not a researcher. You find WHERE, never WHY or
+HOW: no reading code to understand it, no explaining behaviour, no tracing
+logic across files. Coordinates are the entire deliverable.
 
-Find code anchors fast. Batch independent lookups in turn 1: one `grep`
-with all literal strings/errors/identifier guesses, plus `code_graph`/`find`
-or `glob` when useful.
+Default shape: ONE tool turn, then the answer. Turn 1 is ONE maximal batch:
+a single `grep` carrying ALL literal strings/errors/identifier guesses
+(content mode, small `-C`), plus `code_graph`/`find`/`glob` in the same
+turn. Fire everything at once; never probe one tool at a time. Any second
+turn means turn 1 under-batched.
 
-Prefer user-visible strings and identifiers. `dist`/generated hits are leads,
-not answers: trace them back to source. On miss, derive new tokens from
-returned paths/names or widen scope; do not repeat synonyms. NEVER issue
-serial single-tool turns: every turn after the first must batch ALL remaining
-candidate lookups in one shot.
+Answer straight from search output: grep/code_graph hits already carry
+`path:line` — NEVER spend a turn on `read` just to confirm or polish an
+anchor you already have. Prefer user-visible strings and identifiers.
+`dist`/generated hits are leads, not answers: trace them back to source.
 
-Budget: 4 tool turns. The FIRST credible `path:line` ends the search — answer
-with what you have; more anchors are not more value. Spend remaining turns
-only while you have zero anchors, and buy coverage with wider batches, never
-with extra serial turns. On ANY iteration warning, answer immediately with
-best anchors or `EXPLORATION_FAILED`.
+Budget: 5 tool turns; coordinates only, zero analysis. The FIRST
+credible `path:line` ends the search — answer in that same turn; do not
+verify, refine, or collect extras. A plausible anchor now beats a perfect
+anchor later: mark weak ones `?` instead of checking them. Turns 2-5 exist
+ONLY for a zero-anchor turn 1: derive new tokens from returned paths/names
+or widen scope (no repeated synonyms), batching ALL remaining candidates in
+one shot. Past turn 5 you are wasting the caller's time: answer with
+best-so-far anchors or `EXPLORATION_FAILED`.
 
 Answer format, nothing else:
 - up to 5 lines: `path:line — symbol/name — short reason` (append `?` if weak)

package/src/rules/lead/02-channels.md

@@ -1,3 +1,3 @@
-# Channels
-
-- Channel features are handled by the runtime.
+# Channels
+
+- Channel features are handled by the runtime.

package/src/runtime/agent/orchestrator/providers/openai-oauth-ws.mjs

@@ -72,6 +72,7 @@ export {
     _logicalResponseItemMatch,
     parseToolSearchArgs,
     _streamResponse,
+    _cacheObservation as _cacheObservationForTest,
 };
 
 globalThis.__mixdogOpenaiWsRuntimeLoaded = true;
@@ -293,6 +294,34 @@ function _codexWsCompatibilityHeaders(context = {}) {
     // body client_metadata; the server may gate x-codex-turn-state issuance
     // on handshake-level client identity, so mirror codex here.
     if (metadata['x-codex-installation-id']) headers['x-codex-installation-id'] = metadata['x-codex-installation-id'];
+    // Turn-metadata handshake header. codex's compatibility_headers()
+    // (responses_metadata.rs:227-252) attaches x-codex-turn-metadata /
+    // x-codex-parent-thread-id / x-codex-window-id on the request. A/B
+    // (2026-07-04, tm0b vs tm1b, 10 parallel-5 sessions each, gpt-5.5):
+    // WITH the turn-metadata blob it2 cache misses dropped 4/10 -> 0/10 and
+    // full-prefix hits rose 2/10 -> 7/10; x-codex-turn-state was never issued
+    // in either arm, so the win comes from better cache routing on the
+    // handshake fingerprint, not sticky turn-state. Default ON.
+    // MIXDOG_OAI_TURN_METADATA overrides:
+    //   unset / 1 / turn-metadata : window-id + turn-metadata + installation-id
+    //   parent                    : + x-codex-parent-thread-id (= thread_id)
+    //   window                    : window-id only (drop turn-metadata blob)
+    //   0 / off / false / no      : strip the blob (pre-2026-07-04 baseline)
+    const probe = String(process.env.MIXDOG_OAI_TURN_METADATA || '').trim().toLowerCase();
+    if (probe === '0' || probe === 'off' || probe === 'false' || probe === 'no') {
+        // Not opted in: keep window-id + installation-id but drop the full
+        // turn-metadata blob so we match the historical (turn-state-never-issued)
+        // baseline exactly.
+        delete headers['x-codex-turn-metadata'];
+    } else if (probe === 'parent') {
+        const parentThreadId = _cleanMetaString(context?.sendOpts?.parentThreadId
+            || context?.sendOpts?.codexParentThreadId
+            || metadata.thread_id);
+        if (parentThreadId) headers['x-codex-parent-thread-id'] = parentThreadId;
+    } else if (probe === 'window') {
+        delete headers['x-codex-turn-metadata'];
+    }
+    // probe === '1' | 'true' | 'yes' | 'on' | 'turn-metadata' => full set as built above.
     return headers;
 }
 
@@ -1060,7 +1089,7 @@ export async function sendViaWebSocket({
             });
             const chainFallback = mode !== 'delta'
                 && deltaReason
-                && !['no_anchor', 'full_forced', 'full_default'].includes(deltaReason);
+                && !['no_anchor', 'full_forced', 'full_default', 'delta_missing_turn_state'].includes(deltaReason);
             if (chainFallback || (mode === 'delta' && deltaReason)) {
                 appendAgentTrace({
                     sessionId: poolKey,

package/src/runtime/agent/orchestrator/providers/openai-ws-delta.mjs

@@ -179,13 +179,18 @@ export function _computeDelta({ entry, body }) {
     // token, previous_response_id requests hop cache nodes and only the first
     // prefix blocks hit. Re-enable delta explicitly via MIXDOG_OAI_WS_DELTA=1
     // for future probes if the backend starts issuing turn-state.
-    const deltaOptIn = ['1', 'true', 'yes', 'on'].includes(String(process.env.MIXDOG_OAI_WS_DELTA || '').trim().toLowerCase());
+    const deltaMode = String(process.env.MIXDOG_OAI_WS_DELTA || '').trim().toLowerCase();
+    const deltaForce = ['force', 'unsafe', 'always'].includes(deltaMode);
+    const deltaOptIn = deltaForce || ['1', 'true', 'yes', 'on'].includes(deltaMode);
     if (!deltaOptIn) {
         return { mode: 'full', reason: 'full_default', frame: { type: 'response.create', ...body } };
     }
     if (!entry || !entry.lastRequestSansInput || !entry.lastResponseId) {
         return { mode: 'full', reason: 'no_anchor', frame: { type: 'response.create', ...body } };
     }
+    if (!deltaForce && !entry.turnState) {
+        return { mode: 'full', reason: 'delta_missing_turn_state', frame: { type: 'response.create', ...body } };
+    }
     if (!Array.isArray(entry.lastRequestInput)) {
         return { mode: 'full', reason: 'no_input_snapshot', frame: { type: 'response.create', ...body } };
     }

package/src/runtime/agent/orchestrator/providers/openai-ws-pool.mjs

@@ -54,6 +54,52 @@ const MAX_POOLED_SOCKETS_PER_KEY = 8;
 //          closing, ephemeral }
 const _wsPool = new Map();
 
+// --- Cache-route probe state (2026-07-04 hunt) -----------------------------
+// CF cookie stickiness (codex chatgpt_cloudflare_cookies.rs:22-55 persists
+// __cf_bm/_cfuvid across HTTP clients; our WS handshakes never echo them, so
+// Cloudflare may re-shard every fresh socket). Jar is per-process, keyed by
+// auth account. Env knobs (A/B):
+//   MIXDOG_OAI_CF_COOKIES=1        capture Set-Cookie from the 101 upgrade and
+//                                  send Cookie on subsequent handshakes
+//   MIXDOG_OAI_SESSION_AFFINITY=1  send x-session-affinity: <cacheKey>
+//                                  (opencode request.ts:187, ws-pool.ts:66)
+//   MIXDOG_OAI_WS_URL_SESSION=0    drop the ?session_id= URL query (codex/pi/
+//                                  opencode all use the bare WS URL)
+const _cfCookieJar = new Map(); // accountKey -> { name -> value }
+const _CF_COOKIE_ALLOWLIST = new Set(['__cf_bm', '_cfuvid']);
+
+function _envOn(name) {
+    const v = String(process.env[name] || '').trim().toLowerCase();
+    return ['1', 'true', 'yes', 'on'].includes(v);
+}
+
+function _cfCookieAccountKey(auth) {
+    return String(auth?.account_id || auth?.apiKey || 'default');
+}
+
+function _cfCookieHeader(auth) {
+    if (!_envOn('MIXDOG_OAI_CF_COOKIES')) return null;
+    const jar = _cfCookieJar.get(_cfCookieAccountKey(auth));
+    if (!jar || !jar.size) return null;
+    return [...jar.entries()].map(([k, v]) => `${k}=${v}`).join('; ');
+}
+
+function _cfCookieCapture(auth, setCookieHeaders) {
+    if (!_envOn('MIXDOG_OAI_CF_COOKIES')) return;
+    const list = Array.isArray(setCookieHeaders) ? setCookieHeaders : (setCookieHeaders ? [setCookieHeaders] : []);
+    if (!list.length) return;
+    const key = _cfCookieAccountKey(auth);
+    let jar = _cfCookieJar.get(key);
+    if (!jar) { jar = new Map(); _cfCookieJar.set(key, jar); }
+    for (const raw of list) {
+        const pair = String(raw || '').split(';', 1)[0];
+        const eq = pair.indexOf('=');
+        if (eq <= 0) continue;
+        const name = pair.slice(0, eq).trim();
+        if (_CF_COOKIE_ALLOWLIST.has(name)) jar.set(name, pair.slice(eq + 1).trim());
+    }
+}
+
 function _getPoolArr(poolKey) {
     if (!poolKey) return null;
     let arr = _wsPool.get(poolKey);
@@ -200,6 +246,14 @@ function _buildHandshakeHeaders({ auth, sessionToken, turnState, cacheKey: _cach
         headers['x-client-request-id'] = randomBytes(16).toString('hex');
     }
     if (turnState) headers['x-codex-turn-state'] = turnState;
+    // Probe knobs (cache-route hunt 2026-07-04): see jar block at top of file.
+    if (isOpenAiOauth) {
+        const jar = _cfCookieHeader(auth);
+        if (jar) headers['Cookie'] = jar;
+        if (_envOn('MIXDOG_OAI_SESSION_AFFINITY') && (_cacheKey || sessionToken)) {
+            headers['x-session-affinity'] = String(_cacheKey || sessionToken);
+        }
+    }
     return headers;
 }
 
@@ -225,7 +279,17 @@ function _openSocket({ auth, sessionToken, turnState, externalSignal, cacheKey,
     if (process.env.MIXDOG_DEBUG_AGENT) {
         process.stderr.write(`[agent-trace] ws-open-start url=${baseUrl} tokenHash=${createHash('sha256').update(String(sessionToken)).digest('hex').slice(0, 8)} ts=${_wsOpenStart}\n`);
     }
-    const url = baseUrl + (sessionToken ? `?session_id=${encodeURIComponent(String(sessionToken))}` : '');
+    // Bare WS URL by default (codex/pi/opencode parity). Interleaved A/B
+    // (2026-07-04, ivA/ivB, 24 sessions each, alternating rounds to cancel
+    // server-time noise): dropping the ?session_id= query improved it1
+    // warmup-prefix hits 15/24 -> 22/24 and it2 full hits 11 -> 15 (miss
+    // 5 -> 4). The query string seeds CF/backend shard routing away from
+    // the header-affine cache node; session identity still rides on the
+    // session_id/session-id handshake headers. Re-enable the legacy query
+    // form with MIXDOG_OAI_WS_URL_SESSION=1.
+    const url = baseUrl + (sessionToken && process.env.MIXDOG_OAI_WS_URL_SESSION === '1'
+        ? `?session_id=${encodeURIComponent(String(sessionToken))}`
+        : '');
     return new Promise((resolve, reject) => {
         let settled = false;
         let abortListener = null;
@@ -260,6 +324,7 @@ function _openSocket({ auth, sessionToken, turnState, externalSignal, cacheKey,
             try {
                 const ts = res?.headers?.['x-codex-turn-state'];
                 if (typeof ts === 'string' && ts.length) capturedHeaders.turnState = ts;
+                _cfCookieCapture(auth, res?.headers?.['set-cookie']);
                 // Probe: dump the full 101-upgrade response header set so we can
                 // see what the server actually issues (turn-state investigation).
                 if (process.env.MIXDOG_WS_UPGRADE_HEADER_PROBE) {

package/src/standalone/explore-tool.mjs

@@ -70,7 +70,7 @@ function escapeXml(str) {
 // reminder. The full no-verdict contract lives at system level
 // (rules/agent/30-explorer.md).
 export function buildExplorerPrompt(query) {
-  return `<query>${escapeXml(query)}</query>\nReminder: budget 4 tool turns — batch every candidate lookup per turn, never one tool at a time. The moment you have credible anchors, STOP and answer; spend remaining turns only while you have zero anchors. Output only anchor lines formatted as path:line — symbol/name — short reason, or EXPLORATION_FAILED. No preamble, bullets, numbering, headings, summary, code quotes, analysis, verdicts, ratings, or recommendations.`;
+  return `<query>${escapeXml(query)}</query>\nReminder: coordinates only — WHERE, never WHY. Finish within 5 tool turns, ideally 1. Turn 1 MUST be one maximal batch: fire EVERY candidate lookup at once (grep with all token variants + code_graph + find/glob in the same turn); never one tool at a time. Answer straight from search output — grep/code_graph hits already carry path:line; never spend a turn reading to confirm, polish, or understand. The FIRST credible anchor ends the search: STOP and answer in that same turn, marking weak anchors with ?. By turn 5 answer with best-so-far or EXPLORATION_FAILED. Output only anchor lines formatted as path:line — symbol/name — short reason, or EXPLORATION_FAILED. No preamble, bullets, numbering, headings, summary, code quotes, analysis, verdicts, ratings, or recommendations.`;
 }
 
 export function normalizeExploreQueries(rawQuery) {
@@ -355,16 +355,15 @@ async function runExploreSync(args = {}, ctx = {}) {
   const presetName = (route && typeof route === 'object')
     ? `${clean(route.provider)}/${clean(route.model)}`
     : (route || '');
-  // Explorer self-manages its turn budget: the 4-turn budget lives ONLY in
+  // Explorer self-manages its turn budget: the 5-turn budget lives ONLY in
   // explorer-scoped surfaces (rules/agent/30-explorer.md + per-query prompt),
-  // never in shared loop policy. The cap here is a runaway guard, unchanged
-  // from the original value; B-round live tests showed hard targets
-  // legitimately need ~10.
+  // never as a loop hard cap — no maxLoopIterations here by design. The
+  // wall-clock hard timeout (EXPLORE_COMPUTE_HARD_TIMEOUT_MS) remains the
+  // only runaway guard.
   const llm = makeAgentDispatch({
     agent: 'explorer',
     cwd: resolvedCwd,
     brief: true,
-    maxLoopIterations: 12,
     parentSessionId: ctx.callerSessionId || null,
     clientHostPid: ctx.clientHostPid || null,
     config,