Logging and speech to text refactoring

.cargo/config.toml

@@ -2,3 +2,6 @@
 # CRT. Runtime-loaded native libraries keep their own CRT boundary.
 [target.x86_64-pc-windows-msvc]
 rustflags = ["-C", "target-feature=+crt-static"]
+
+[alias]
+workshop = "run -p build-workshop --"

.githooks/pre-commit

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+# Pre-commit hook: Fast formatting check before creating commits.
+set -e
+
+echo "==> Running cargo fmt --all --check..."
+cargo fmt --all --check

.githooks/pre-push

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Pre-push hook: Comprehensive validation before pushing to remote.
+set -e
+
+echo "==> Checking headless gateway (AGENTS.md rule)..."
+cargo check -p gateway --no-default-features
+
+echo "==> Running Clippy on workspace..."
+cargo clippy --workspace --exclude workshop --exclude workshop-server --all-targets --all-features -- -D warnings
+
+if command -v cargo-deny >/dev/null 2>&1; then
+    echo "==> Running cargo deny check..."
+    cargo deny check
+fi
+
+echo "==> Pre-push checks passed successfully."

.github/fixtures/workshop-package-smoke/gateway.state.toml

@@ -0,0 +1 @@
+active_profile = "main"

.github/fixtures/workshop-package-smoke/gateway.toml

@@ -0,0 +1,9 @@
+config-version = 2
+
+[server]
+bind = "127.0.0.1:0"
+api_key = "release-smoke"
+
+[[profile]]
+name = "main"
+models = []

.github/workflows/ci.yml

@@ -31,6 +31,8 @@ jobs:
         with:
           components: rustfmt, clippy
 
+      - uses: dtolnay/rust-toolchain@1.89.0
+
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
 
@@ -41,14 +43,29 @@ jobs:
         with:
           node-version: 22
 
-      - name: Install UI dependencies
-        working-directory: crates/workshop-server/ui
-        run: npm ci
-
       - name: Install config UI dependencies
         working-directory: crates/gateway-config-ui/ui
         run: npm ci
 
+      - name: Build Gateway without Workshop UI tooling
+        run: cargo build --locked -p gateway
+
+      - name: Check safe STT crates without unsafe code
+        env:
+          RUSTFLAGS: -D warnings
+        run: |
+          cargo rustc --locked -p gateway-stt-engine --lib -- -F unsafe-code
+          cargo rustc --locked -p gateway-stt-backend-whisper --lib -- -F unsafe-code
+          cargo rustc --locked -p gateway-stt --lib -- -F unsafe-code
+
+      - name: Check native STT FFI lint policy
+        env:
+          RUSTFLAGS: -D warnings
+        run: cargo check --locked -p gateway-whisper-ffi --lib
+
+      - name: Check product dependency boundaries
+        run: cargo test -p gateway-stt --test it architecture
+
       - name: Format
         run: cargo fmt --all --check
 
@@ -108,12 +125,30 @@ jobs:
         working-directory: crates/workshop-server/ui
         run: npm ci
 
+      - name: Build featureless Gateway
+        run: cargo build --locked -p gateway --no-default-features
+
+      - name: Stage Gateway sidecar
+        run: node tools/stage-gateway-sidecar.mjs stage --target x86_64-pc-windows-msvc --source target/debug/promptforge-gateway.exe
+
       - name: Clippy (workshop)
         run: cargo clippy -p workshop -p workshop-server --all-targets -- -D warnings
 
       - name: Test (workshop)
         run: cargo test --locked -p workshop -p workshop-server
 
+      - name: Test Gateway process ownership races
+        run: |
+          cargo test --locked -p shared-sidecar a_process_lifetime_lease_recovers_after_its_owner_is_terminated
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it simultaneous_direct_launches_leave_one_owner_and_one_clean_handoff
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it workshop_launch_lock_and_direct_launch_do_not_deadlock_or_double_boot
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it a_direct_launch_recovers_the_lease_from_a_terminated_owner
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it a_silent_process_lease_owner_causes_a_bounded_console_only_failure
+
+      - name: Remove Gateway sidecar
+        if: always()
+        run: node tools/stage-gateway-sidecar.mjs remove --target x86_64-pc-windows-msvc
+
       - name: Clean tree
         shell: bash
         run: |
@@ -156,9 +191,27 @@ jobs:
         working-directory: crates/workshop-server/ui
         run: npm ci
 
+      - name: Build featureless Gateway
+        run: cargo build --locked -p gateway --no-default-features
+
+      - name: Stage Gateway sidecar
+        run: node tools/stage-gateway-sidecar.mjs stage --target x86_64-unknown-linux-gnu --source target/debug/promptforge-gateway
+
       - name: Build (workshop, Linux)
         run: cargo build --locked -p workshop
 
+      - name: Test Gateway process ownership races
+        run: |
+          cargo test --locked -p shared-sidecar a_process_lifetime_lease_recovers_after_its_owner_is_terminated
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it simultaneous_direct_launches_leave_one_owner_and_one_clean_handoff
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it workshop_launch_lock_and_direct_launch_do_not_deadlock_or_double_boot
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it a_direct_launch_recovers_the_lease_from_a_terminated_owner
+          cargo test --locked -p gateway --no-default-features --features test-fixtures --test it a_silent_process_lease_owner_causes_a_bounded_console_only_failure
+
+      - name: Remove Gateway sidecar
+        if: always()
+        run: node tools/stage-gateway-sidecar.mjs remove --target x86_64-unknown-linux-gnu
+
       - name: Clean tree
         shell: bash
         run: |

.github/workflows/dist-ci/build-setup.yml

@@ -8,6 +8,8 @@
   uses: actions/setup-node@v4
   with:
     node-version: 22
+    cache: npm
+    cache-dependency-path: crates/*/ui/package-lock.json
 - name: Install UI dependencies
   run: npm ci --prefix crates/workshop-server/ui
 - name: Install config UI dependencies

.github/workflows/gateway-release-test.yml

@@ -47,7 +47,7 @@ jobs:
         run: |
           workdir="$(mktemp -d)"
           printf 'config-version = 2\n[server]\nbind = "127.0.0.1:8081"\napi_key = "test-key"\n\n[[profile]]\nname = "main"\nmodels = []\n' > "$workdir/gateway.toml"
-          promptforge-gateway serve "$workdir/gateway.toml" --profile main &
+          promptforge-gateway --config "$workdir/gateway.toml" --profile main &
           server_pid=$!
           trap 'kill $server_pid 2>/dev/null || true' EXIT
           for attempt in $(seq 1 30); do

.github/workflows/nightly.yml

@@ -66,6 +66,8 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 22
+          cache: npm
+          cache-dependency-path: crates/*/ui/package-lock.json
       - name: Install UI dependencies
         run: |
           npm ci --prefix crates/workshop-server/ui
@@ -97,6 +99,8 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 22
+          cache: npm
+          cache-dependency-path: crates/*/ui/package-lock.json
       - name: Install UI dependencies
         run: |
           npm ci --prefix crates/workshop-server/ui
@@ -157,6 +161,8 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 22
+          cache: npm
+          cache-dependency-path: crates/*/ui/package-lock.json
 
       - name: Install UI dependencies
         working-directory: crates/workshop-server/ui