Merge main into dev

.claude/skills/spawn-quests/SKILL.md

@@ -18,6 +18,7 @@ Include a short summary and your recommendation.
 
 Spawn a background sub-agent for each /start-quest.
 Create a fresh worktree on the base `quest branch` prints, creating that line branch first if it is missing.
+Agents share no writable files: each keeps its scratch files in its own worktree's `.scratch/`, and anything you hand every agent goes in its prompt, not a shared file.
 Limit the concurrency to at most N agents in parallel, where N is half the number of physical CPU cores.
 
 Monitor the sub-agents and report their final status, but do not monitor their PRs.

.claude/skills/start-quest/SKILL.md

@@ -13,4 +13,6 @@ If you are unsure on the best course of action, ask the user for direction.
 Confirm the quest is ready and unclaimed.
 Claim it as `quest/CLAUDE.md` describes: `quest branch` names the branch and its bases, missing line branches get a draft PR, and the quest branch gets an empty commit.
 Implement the quest until it is complete, or some blocker is hit, then create a PR against the base.
+Keep scratch files (PR body, logs, notes) in the worktree's gitignored `.scratch/`.
+Never write to or clean up a directory other agents share, such as a session scratchpad.
 Summarize the notable changes for the user.

.github/scripts/package-binary.test.sh

@@ -42,3 +42,31 @@ cmp "$binary" "$bare"
 cmp "$binary" "$tmp/extracted/$name/bin/moq-relay"
 
 echo "release assets package together without path collisions"
+
+# Without --binary the script builds the flake package named after the binary:
+# `.#moq` for the moq-cli crate, since `.#moq-cli` is a stub refusing the old name.
+cat >"$tmp/bin/nix" <<'NIX'
+#!/usr/bin/env bash
+set -euo pipefail
+[[ "$1 $3" == "build --out-link" && "$2" == *"#moq" ]] || {
+    echo "unexpected: nix $*" >&2
+    exit 1
+}
+mkdir -p "$4/bin"
+printf '#!/usr/bin/env sh\necho moq\n' >"$4/bin/moq"
+chmod 0755 "$4/bin/moq"
+NIX
+chmod 0755 "$tmp/bin/nix"
+
+PATH="$tmp/bin:$PATH" "$WORKSPACE_DIR/rs/scripts/package-binary.sh" \
+    --crate moq-cli \
+    --bin moq \
+    --version 0.12.2 \
+    --target "$target" \
+    --output "$tmp/dist"
+
+name="moq-cli-v0.12.2-$target"
+tar -xzf "$tmp/dist/$name.tar.gz" -C "$tmp/extracted"
+[[ "$("$tmp/extracted/$name/bin/moq")" == moq ]]
+
+echo "a nix build packages the flake output named after the binary"

.github/workflows/cache.yml

@@ -104,13 +104,13 @@ jobs:
       # and the test artifacts (codegen + linked test binaries). They share
       # little, and a PR usually needs both.
       - name: Check
-        run: nix develop --command just check --all
+        run: nix develop --command just ci check --all
         env:
           MOQ_STRICT: 1
 
       - name: Test
         if: ${{ !cancelled() }}
-        run: nix develop --command just test all
+        run: nix develop --command just ci test --all
         env:
           MOQ_STRICT: 1
           NEXTEST_PROFILE: ci

.github/workflows/check.yml

@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-          # Full history so `just check` can diff against origin/$GITHUB_BASE_REF.
+          # Full history so `just ci check` can diff against origin/$GITHUB_BASE_REF.
           fetch-depth: 0
 
       - uses: DeterminateSystems/nix-installer-action@1d87d45818068401a10cf16bdc5f00b24994a83f # main
@@ -77,7 +77,7 @@ jobs:
         run: bash .claude/hooks/direnv.test.sh
 
       - name: Check
-        run: nix develop --command just check
+        run: nix develop --command just ci check
         env:
           MOQ_STRICT: 1
 
@@ -97,7 +97,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-          # Full history so `just test` can diff against origin/$GITHUB_BASE_REF.
+          # Full history so `just ci test` can diff against origin/$GITHUB_BASE_REF.
           fetch-depth: 0
 
       - uses: DeterminateSystems/nix-installer-action@1d87d45818068401a10cf16bdc5f00b24994a83f # main
@@ -120,7 +120,7 @@ jobs:
       # NEXTEST_PROFILE picks up the longer hang timeout in .config/nextest.toml;
       # without it a runner under load could trip the local one.
       - name: Test
-        run: nix develop --command just test
+        run: nix develop --command just ci test
         env:
           MOQ_STRICT: 1
           NEXTEST_PROFILE: ci

.gitignore

@@ -15,6 +15,9 @@
 /.claude/tmp/
 /.claude/worktrees/
 
+# Per-worktree agent scratch (PR bodies, logs, notes); see the start-quest skill.
+/.scratch/
+
 # IDE
 .idea
 

CLAUDE.md

@@ -83,8 +83,7 @@ Use the Nix dev shell so tooling matches CI.
 direnv loads it automatically, but if not: `nix develop --command ...`.
 
 ```bash
-just check        # Lint and compile what the branch changed
-just test         # Test what the branch changed, same scope
+just check        # Lint, compile, and test what the branch changed
 just fix          # Auto-fix lint/formatting, same scope
 ```
 

CONTRIBUTING.md

@@ -21,7 +21,7 @@ When pushing additional commits to an existing PR, update the title and descript
 When taking over someone else's PR, push commits on top of theirs so they keep credit.
 
 Create a draft PR.
-Switch it to "Ready for review" when you're finished and local `just check` and `just test` pass.
+Switch it to "Ready for review" when you're finished and local `just check` passes.
 Fix any merge conflicts and failing CI checks.
 
 # AI