fix(repo): prevent daemon write replay after ack loss

.circleci/config.yml

@@ -0,0 +1,248 @@
+# =============================================================================
+# CircleCI — Parallel CI for multi-language projects
+# =============================================================================
+# Used alongside GitHub Actions for:
+#   - Parallel execution on free tier (3000 credits/mo)
+#   - Faster builds with machine executors
+#   - Additional build matrix coverage
+# =============================================================================
+
+version: 2.1
+
+# Orbs — reusable packages
+orbs:
+  rust: circleci/rust@1.6.1
+  python: circleci/python@2.1.1
+  node: circleci/node@6.3.0
+  go: circleci/go@1.11.2
+  trunk: trunk-io/trunk@1.0.0
+
+# Executors
+executors:
+  small:
+    docker:
+      - image: cimg/base:current
+    resource_class: small
+
+  medium:
+    docker:
+      - image: cimg/base:current
+    resource_class: medium
+
+  large:
+    docker:
+      - image: cimg/base:current
+    resource_class: large
+
+  rust-executor:
+    docker:
+      - image: cimg/rust:1.80
+    resource_class: medium
+
+  python-executor:
+    docker:
+      - image: cimg/python:3.12
+    resource_class: medium
+
+  go-executor:
+    docker:
+      - image: cimg/go:1.22
+    resource_class: medium
+
+  node-executor:
+    docker:
+      - image: cimg/node:22.0
+    resource_class: medium
+
+# Commands (reusable steps)
+commands:
+  install-rust-tools:
+    steps:
+      - run:
+          name: Install Rust tools
+          command: |
+            cargo install cargo-deny cargo-audit || true
+
+  install-python-tools:
+    steps:
+      - run:
+          name: Install Python tools
+          command: |
+            pip install uv || curl -LsSf https://astral.sh/uv/install.sh | sh
+
+  install-go-tools:
+    steps:
+      - run:
+          name: Install Go tools
+          command: |
+            go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
+
+  save-deps-cache:
+    parameters:
+      key:
+        type: string
+    steps:
+      - save_cache:
+          key: deps-{{ .Branch }}-<< parameters.key >>-{{ checksum "package-lock.json" }}{{ checksum "Cargo.lock" }}{{ checksum "go.sum" }}{{ checksum "uv.lock" }}
+          paths:
+            - ~/.cargo
+            - ~/.cache/pip
+            - node_modules
+            - vendor
+
+  restore-deps-cache:
+    parameters:
+      key:
+        type: string
+    steps:
+      - restore_cache:
+          keys:
+            - deps-{{ .Branch }}-<< parameters.key >>-{{ checksum "package-lock.json" }}{{ checksum "Cargo.lock" }}{{ checksum "go.sum" }}{{ checksum "uv.lock" }}
+            - deps-{{ .Branch }}-<< parameters.key >>-
+            - deps-main-<< parameters.key >>-
+
+# Jobs
+jobs:
+  # --- TRUNK CHECK (unified) ---
+  trunk-lint:
+    executor: small
+    steps:
+      - checkout
+      - trunk-check:
+          trunk-args: [--ci=fix]
+
+  # --- RUST ---
+  rust-check:
+    executor: rust-executor
+    steps:
+      - checkout
+      - restore-deps-cache:
+          key: rust
+      - run:
+          name: Check formatting
+          command: cargo fmt --all -- --check
+      - run:
+          name: Clippy lints
+          command: cargo clippy --all-targets --all-features -- -D warnings
+      - run:
+          name: Run tests
+          command: cargo test --all --workspace
+      - save-deps-cache:
+          key: rust
+
+  rust-build:
+    executor: rust-executor
+    steps:
+      - checkout
+      - restore-deps-cache:
+          key: rust
+      - run:
+          name: Build release
+          command: cargo build --release
+      - save-deps-cache:
+          key: rust
+      - persist_to_workspace:
+          root: target
+          paths:
+            - release
+
+  # --- PYTHON ---
+  python-check:
+    executor: python-executor
+    steps:
+      - checkout
+      - install-python-tools
+      - restore-deps-cache:
+          key: python
+      - run:
+          name: Install dependencies
+          command: uv sync --all-extras
+      - run:
+          name: Ruff lint
+          command: uv run ruff check .
+      - run:
+          name: Ruff format check
+          command: uv run ruff format --check .
+      - run:
+          name: Type check
+          command: uv run mypy . || true
+      - run:
+          name: Run tests
+          command: uv run pytest --cov -v
+      - save-deps-cache:
+          key: python
+      - store_test_results:
+          path: test-results
+
+  # --- GO ---
+  go-check:
+    executor: go-executor
+    steps:
+      - checkout
+      - restore-deps-cache:
+          key: go
+      - run:
+          name: Vet
+          command: go vet ./...
+      - run:
+          name: Lint
+          command: |
+            go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
+            golangci-lint run
+      - run:
+          name: Test
+          command: go test -v -race -coverprofile=coverage.out ./...
+      - store_artifacts:
+          path: coverage.out
+      - save-deps-cache:
+          key: go
+
+  # --- TYPESCRIPT ---
+  node-check:
+    executor: node-executor
+    steps:
+      - checkout
+      - restore-deps-cache:
+          key: node
+      - run:
+          name: Install deps
+          command: npm ci || true
+      - run:
+          name: Lint
+          command: npx biome lint . || npx eslint . || true
+      - run:
+          name: Format check
+          command: npx biome format --check . || npx prettier --check . || true
+      - run:
+          name: Test
+          command: npm test || true
+      - save-deps-cache:
+          key: node
+
+# Workflows
+workflows:
+  version: 2
+  ci:
+    jobs:
+      - trunk-lint
+      - rust-check:
+          filters:
+            branches:
+              only: /.*/
+            tags:
+              only: /^v.*/
+      - rust-build:
+          requires:
+            - rust-check
+      - python-check:
+          filters:
+            branches:
+              only: /.*/
+      - go-check:
+          filters:
+            branches:
+              only: /.*/
+      - node-check:
+          filters:
+            branches:
+              only: /.*/

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+indent_style = tab
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Default owner for everything
+* @KooshaPari

.github/FUNDING.yml

@@ -0,0 +1,11 @@
+github: []
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: "npm/[email protected]"
+community_bridge: # Replace with a single Community Bridge project slug-id
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project slug-e.g.
+custom: # Replace with up to 3 custom sponsorship URLs e.g. ['https://example.com/donate']

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,61 @@
+## Summary
+
+<!-- What does this PR do, and why? One or two sentences. Link issues if any. -->
+
+## Linked FR
+
+<!-- Which functional requirement does this change implement or affect?
+     Reference the ID(s) from FUNCTIONAL_REQUIREMENTS.md (e.g. FR-002, FR-014).
+     Add "N/A — no FR covers this change" only if truly none applies. -->
+
+- [ ] FR-001 Core agentic loop
+- [ ] FR-002 Tool execution
+- [ ] FR-003 TUI & keyboard interaction
+- [ ] FR-004 Configuration
+- [ ] FR-005 ZSH plugin
+- [ ] FR-006 Eval harness
+- [ ] FR-007 Conversation persistence
+- [ ] FR-008 MCP client
+- [ ] FR-009 Providers & authentication
+- [ ] FR-010 Self-update
+- [ ] FR-011 Distribution & install
+- [ ] FR-012 Semantic search & workspaces
+- [ ] FR-013 Commit generation
+- [ ] FR-014 Accessibility & screen-reader mode
+- [ ] FR-015 Golden-output tests
+- [ ] N/A
+
+## Tests run
+
+<!-- List the exact commands you ran and their outcome. Copy from your shell. -->
+
+```bash
+cargo check -p <crate>
+cargo test -p <crate>            # or: cargo nextest run -p <crate>
+cargo insta test --accept        # only when snapshot changes are intended
+cargo clippy --all-targets -- -D warnings
+cargo fmt --all -- --check
+npm run eval <task.yml>          # for eval-harness changes
+```
+
+- [ ] `cargo check` passes for every touched crate
+- [ ] Tests pass for touched crates
+- [ ] Clippy `-D warnings` passes on touched crates
+- [ ] `cargo fmt --check` passes
+
+## Screenshots / TUI output
+
+<!-- Required for UI, theming, prompt, banner, or ZSH-plugin changes.
+     Paste terminal output or link a screenshot/gif. Otherwise write "N/A". -->
+
+## Checklist
+
+- [ ] Docs updated (README, docs/, FUNCTIONAL_REQUIREMENTS.md, VISUAL_SPEC.md as applicable)
+- [ ] No secrets or credentials introduced (rely on env vars / `~/.forge` credential store)
+- [ ] Rust docs (`///`) present on all new public items
+- [ ] Tests follow AGENTS.md conventions (pretty_assertions, fixture/actual/expected)
+- [ ] CI gates pass (ci / lint / test / cargo-deny / trufflehog)
+
+## Risk & rollback
+
+<!-- One-liner: worst-case impact if this merges and misbehaves, and how to revert. -->

.github/branch-protection.main.json

@@ -0,0 +1,33 @@
+{
+  "required_status_checks": {
+    "strict": true,
+    "contexts": [
+      "ci",
+      "lint",
+      "test",
+      "cargo-deny",
+      "trufflehog"
+    ]
+  },
+  "enforce_admins": true,
+  "required_pull_request_reviews": {
+    "dismiss_stale_reviews": true,
+    "require_code_owner_reviews": true,
+    "required_approving_review_count": 1,
+    "require_last_push_approval": true,
+    "bypass_pull_request_allowances": {
+      "users": ["KooshaPari"],
+      "teams": ["maintainers"],
+      "apps": ["renovate", "github-actions"]
+    }
+  },
+  "restrictions": null,
+  "required_linear_history": true,
+  "allow_force_pushes": false,
+  "allow_deletions": false,
+  "block_creations": false,
+  "required_conversation_resolution": true,
+  "lock_branch": false,
+  "allow_fork_syncing": true,
+  "required_signatures": true
+}