Distillation

Date: Sep 16, 2026

• 🔴 (16:55) User-provided AGENTS.md states tests must use a temporary SQLite database through packages/core/test/setup.ts and never the production DB.
• 🔴 (16:55) User-provided AGENTS.md states releases use Sentry Craft via GitHub Actions and versions or CHANGELOG.md must never be manually changed because Craft handles both automatically.
• 🔴 (16:55) User-provided release workflow has 6 ordered steps: 1. scripts/bump-version.sh updates all package.json versions; 2. changelog is generated from conventional commits; 3. a release/X.Y.Z branch is created and pushed; 4. CI tests and builds npm tarballs, standalone binaries, and delta patches; 5. Craft opens a publish issue and the Publish workflow runs once labeled accepted; 6. publishing uses npm OIDC trusted publishing and creates a GitHub Release with binaries and patches.
• 🔴 (16:55) User-provided release commands are gh workflow run release.yml -f version=auto for conventional-commit semver selection and gh workflow run release.yml -f version=0.23.0 for an explicit version.
• 🔴 (16:56) User-provided quality/REVIEW.md requires deterministic regression tests for every adversarial-review defect: the test must fail on the base branch, pass on the fix, exercise the real precondition, and fail if the tested guard is removed.
• 🔴 (16:56) User-provided review policy states: “Never trust the fix without seeing it fail”; bug fixes must follow failing-first TDD by confirming the regression test fails on the base branch and passes on the fix.
• 🔴 (16:56) User-provided review policy requires adversarial-order setup, including state present before the handling operation, delete-then-recreate across lifecycle boundaries, and modify-while-off scenarios.
• 🔴 (16:56) User-provided fan-out registry contract batteries are: SYNCED_TABLES → packages/core/test/sync-registry-contract.test.ts; MIGRATIONS → db.test.ts schema-version assertion plus migration-specific tests; AGENTS → agents.test.ts, requiring every agent to expose name, displayName, binary, and detect(), with binary a constant placeholder string.
• 🔴 (16:56) User-provided recurring bug-class guidance identifies skip/early-return branches as the highest-risk surface and requires tests that cause each skip branch to fire incorrectly and prove it does not skip required work.
• 🔴 (16:56) User-provided review guidance favors property-based tests over faithful mocks for lifecycle sequences across enable/disable/push/pull boundaries, and requires property-test stability across 10 runs.
• 🔴 (16:56) User-provided review guidance states memoized arrays shared by callers should be frozen so accidental mutation throws TypeError in strict mode rather than silently corrupting the cache.
• 🔴 (16:56) User-provided testing gotcha states db().query monkeypatches are shadowed by the tracing Proxy; SQL-counting tests must use log.registerSink({ withDbSpan }).
• 🔴 (16:56) User-provided review workflow requires 2 separate passes for non-trivial changes: 1. adversarial/correctness review covering enumerated breaking states, apply-then-revert mutants, property stability ×10, hash-equivalence proofs, frozen-array mutation safety, and stale-cache analysis; 2. security/pentest review covering injection, credential leaks, protocol attacks, and privilege escalation.
• 🔴 (16:56) User-provided review policy requires pnpm test, pnpm run typecheck, pnpm run lint, and pnpm run format:check, with explicit exit-code checks; the final tree must be unmodified and hash-verified.
• 🔴 (16:56) User-provided review policy requires per-point PASS / FAIL / CONCERN / MUST-FIX verdicts with file:line evidence and an overall MERGE / DO-NOT-MERGE verdict; correctness-critical sync, hashing, lifecycle, and migration changes always require adversarial review.
• 🟡 (16:56) Repository metadata showed root package manager pnpm@10.28.0; the root test script is vitest run, build is pnpm -r run build, and gateway premutation runs pnpm --filter @loreai/gateway run bundle.
• 🟡 (16:56) packages/gateway/package.json identified @loreai/gateway version 0.40.0, Node engine >=22.15, production entry ./dist/index.cjs, type entry ./dist/index.d.cts, Bun entry ./dist/index.bun.js, and CLI binaries lore and lore-gateway both mapped to ./dist/bin.cjs.
• 🟡 (16:56) packages/gateway/package.json scripts are typecheck: tsc --noEmit, build: tsx script/build.ts, bundle: tsx script/bundle.ts, build:binary: tsx script/build.ts --binary, build:binary:sea: tsx script/build-binary-sea.ts, and start: tsx src/index.ts.
• 🟡 (16:57) Jujutsu preflight found a clean working copy at empty child change youvttksqllkxurqlpxypvrnzpsvxvoq / commit d236533a8d57df57ea780c8729978b7d15c6ea85, whose parent is candidate rtwyxzrrqnqspzypxtymnolzwmpnnumv / b9feb17a1feb58a72a080cca0e493130427c506f.
• 🟡 (16:57) Candidate ancestry was confirmed as rtwyxzrrqnqspzypxtymnolzwmpnnumv / b9feb17a1feb58a72a080cca0e493130427c506f → uyznyvwtuxrkvnppulnwlpryssrywsrt / 1ff66d14757b98d3ec7bdb8012104d1f10b292b8 → pxrvwsvvkmpoxnsqmrkwrnlqvvkoltwz / 2cbf40060c67df229731cf1b9e34d5bf22ec2145 → xpzmsyowwmzsorxottxynvnwlqrykyuo / e977b4b1da8f8197c3238466d41de0bccd8eb054.
• 🟡 (16:57) Candidate conflict query returned no output, indicating no conflicts in the candidate range.
• 🟡 (16:57) Candidate changed-path inspection found exactly 2 modified files: packages/gateway/src/pipeline.ts and packages/gateway/test/openai-responses-recall-aware-stream.test.ts.
• 🟡 (16:58) Hash checks produced 7ac4f48eccfae80091d2cfffa627f461fd139af80e3a6face24d9dd1f4a47d7f for the alternate diff representation and caf10519f08fc9a396b3413617f4e9fca740f3c87c196455e56791d51709a354 for the requested plain Git-format range diff.
• 🟡 (16:58) Preflight confirmed packages/gateway/dist/index.cjs SHA-256 74f6ab3b2c5bd6ac19755cccb8c81c342dd3476ef55e5d8dc664c3f13553dba3.
• 🟡 (16:58) Existing gateway artifact inventory and sizes were: packages/gateway/dist/index.cjs 17,528,510 bytes; bin.cjs 804; index.bun.js 16,966,956; index.d.cts 3,000; embedding-worker.cjs 578,646; embedding-worker.js 578,430; vector-worker.cjs 11,329; vector-worker.js 10,579; ort-wasm-simd-threaded.mjs 20,856; ort-wasm-simd-threaded.wasm 11,133,407.
• 🟡 (16:59) Worker/process baseline found no pre-existing process associated with /home/byk/Code/opencode-lore-codex-reasoning; only the inspection shell PID 186892 and its rg child PID 186894 appeared.
• 🟡 (16:59) Assistant concluded frozen preflight matched the requested candidate, parent, base, exact 2-file scope, plain Git-format range hash, and index.cjs hash; the working-copy child was empty and the candidate range had no commit conflicts.
• 🟡 (16:59) Jujutsu reported an unrelated conflicted bookmark fix/responses-private-references, which the assistant committed to preserve and distinguish from candidate conflicts. Its targets included removed hidden revisions umutrurq/16 at ec1eea0a and umutrurq/20 at d4cb310b; added divergent conflicted revisions umutrurq/0 at 079844c0, umutrurq/1 at 099729a2, and umutrurq/2 at cda3d347; and @git at hidden conflicted umutrurq/19 / 5c2a0221, ahead by 2 commits and behind by 3 commits.