@herbertgao/pi-extensions 2026.9.20 → 2026.10.1

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/import/wiring.js

@@ -1,6 +1,8 @@
 // The Internal Design, as code: this module builds its four stages and nothing else builds
 // them. Everything the stages need arrives from src/host/ — this module constructs no adapter,
 // no committer, no estimator and no configuration.
+import { realpath } from "node:fs/promises";
+import { isAbsolute } from "node:path";
 import { createSessionFinder } from "./discovery/index.js";
 import { createSessionLander } from "./landing/index.js";
 import { createPipelineFromStages } from "./pipeline.js";
@@ -9,10 +11,18 @@ import { createTransferRules } from "./transfer/index.js";
 /** The four stages, wired. Internal: a host builds a pipeline, never a stage. */
 export function buildStages(deps) {
     return {
-        finder: createSessionFinder({ adapters: deps.adapters, config: deps.config }),
+        checkCancellation: () => deps.repo.checkCancellation(),
+        finder: createSessionFinder({ adapters: deps.adapters, config: deps.config, repo: deps.repo }),
         rules: createTransferRules(),
         // Per request: the preview reads the repository the request names (FR-13, FR-37).
-        previewFor: (repoRoot) => createPreviewBuilder(deps.repo, repoRoot),
+        async destinationFor(cwd) {
+            if (!isAbsolute(cwd))
+                throw new Error("The destination cwd must be absolute.");
+            const canonicalCwd = await realpath(cwd);
+            const identity = await deps.repo.identify(canonicalCwd);
+            return { cwd, canonicalCwd, identity };
+        },
+        previewFor: ({ cwd, canonicalCwd, identity }, descriptor) => createPreviewBuilder(deps.repo, cwd, canonicalCwd, identity, descriptor.repoPaths),
         lander: createSessionLander(deps.handoverCommand === undefined ? {} : { handoverCommand: deps.handoverCommand }),
         adapters: deps.adapters,
         config: deps.config,

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/platform/repo/contract.d.ts

@@ -1,8 +1,12 @@
 /** The repository the command runs in (FR-13). */
 export interface RepoIdentity {
-    /** Absolute path of the repository root, or null when the directory is not in a repository. */
+    /** Canonical checkout root, or null when unresolved or bare (not an import destination). */
     root: string | null;
-    /** Current HEAD commit, or null when the repository has no commit yet. */
+    /** Canonical Git common directory shared by linked worktrees, or null when unresolved. */
+    commonDir: string | null;
+    /** True only for a resolved bare repository; its linked working trees report false. */
+    isBare: boolean;
+    /** Current HEAD commit, or null when unresolved or the repository has no commit yet. */
     head: string | null;
     branch: string | null;
 }
@@ -24,7 +28,9 @@ export interface RepoReaderOptions {
 }
 /** Reads git state. It never writes to the repository. */
 export interface RepoReader {
+    /** Throws AbortError with the signal reason as cause when cancelled; performs no I/O. */
+    checkCancellation(): void;
     identify(cwd: string): Promise<RepoIdentity>;
     /** Compares HEAD with a commit of a source session (FR-37). */
-    distanceFrom(sourceCommit: string): Promise<CommitDistance>;
+    distanceFrom(cwd: string, sourceCommit: string): Promise<CommitDistance>;
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/platform/repo/git.d.ts

@@ -1,6 +1,6 @@
 import type { RepoReaderOptions } from "./contract.js";
 export interface GitResult {
-    /** True when git exited 0. A non-zero exit is an answer ("no such revision"), not a failure. */
+    /** True when git exited 0. A completed nonzero exit leaves the requested fact unresolved. */
     ok: boolean;
     stdout: string;
     stderr: string;
@@ -8,9 +8,9 @@ export interface GitResult {
 /**
  * Runs a read-only git command in `cwd`.
  *
- * Rejects only when git could not be run at all — a missing binary, a signal. An exit code is
- * reported in `ok`, because the callers of this module treat "not a repository", "no commits yet"
- * and "unknown revision" as facts to report rather than errors to raise.
+ * Rejects operational failures, including spawn failures, timeout and cancellation. A completed
+ * nonzero exit is reported in `ok`: callers leave the requested fact unresolved without trying
+ * to classify localized stderr (which need not mean the directory is outside Git).
  */
 export declare function runGit(cwd: string, args: readonly string[], options?: RepoReaderOptions): Promise<GitResult>;
 interface NormalizedOptions {

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/platform/repo/git.js

@@ -8,9 +8,9 @@ const DEFAULT_GIT_TIMEOUT_MS = 10_000;
 /**
  * Runs a read-only git command in `cwd`.
  *
- * Rejects only when git could not be run at all — a missing binary, a signal. An exit code is
- * reported in `ok`, because the callers of this module treat "not a repository", "no commits yet"
- * and "unknown revision" as facts to report rather than errors to raise.
+ * Rejects operational failures, including spawn failures, timeout and cancellation. A completed
+ * nonzero exit is reported in `ok`: callers leave the requested fact unresolved without trying
+ * to classify localized stderr (which need not mean the directory is outside Git).
  */
 export function runGit(cwd, args, options = {}) {
     const processOptions = normalizeGitOptions(options);
@@ -49,7 +49,9 @@ export function normalizeGitOptions(options) {
 }
 function processError(cwd, options, cause) {
     if (options.signal?.aborted === true || cause.name === "AbortError") {
-        return new Error(`git command aborted while reading ${cwd}`, { cause });
+        const error = new Error(`git command aborted while reading ${cwd}`, { cause });
+        error.name = "AbortError";
+        return error;
     }
     if (cause.killed === true && cause.signal !== undefined) {
         return new Error(`git command timed out after ${options.timeoutMs} ms while reading ${cwd}`, {
@@ -68,6 +70,7 @@ function gitEnv() {
     // These would override `-C` and point git at a repository other than the one being asked about,
     // for example when the tool runs inside a git hook.
     delete env.GIT_DIR;
+    delete env.GIT_COMMON_DIR;
     delete env.GIT_WORK_TREE;
     delete env.GIT_INDEX_FILE;
     return env;

package/node_modules/resume-from/dist/platform/repo/reader.d.ts

@@ -0,0 +1,3 @@
+import type { RepoReader, RepoReaderOptions } from "./contract.js";
+/** A reader with process controls only; every lookup names its directory explicitly. */
+export declare function createRepoReader(options?: RepoReaderOptions): RepoReader;

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/platform/repo/reader.js

@@ -5,38 +5,76 @@ import { normalizeGitOptions, runGit } from "./git.js";
 function unknownDistance() {
     return { known: false, ahead: 0, behind: 0 };
 }
-function noRepository() {
-    return { root: null, head: null, branch: null };
+function unresolvedIdentity() {
+    return { root: null, commonDir: null, isBare: false, head: null, branch: null };
 }
 /**
  * Longer than any revision git can resolve: a full commit is 40 characters, a tag or a ref
  * expression a few more. A longer string is a mistake or an attack, and is not sent to git.
  */
 const MAX_REVISION_LENGTH = 256;
-/**
- * A reader bound to one working directory.
- *
- * `identify` takes the directory to look at; `distanceFrom` compares against the HEAD of `cwd`,
- * which is the repository the command is running in.
- */
-export function createRepoReader(cwd = process.cwd(), options = {}) {
+/** A reader with process controls only; every lookup names its directory explicitly. */
+export function createRepoReader(options = {}) {
     const processOptions = normalizeGitOptions(options);
     const git = (directory, args) => runGit(directory, args, processOptions);
+    const checkCancellation = () => {
+        if (processOptions.signal?.aborted) {
+            const error = new Error("Repository read aborted", { cause: processOptions.signal.reason });
+            error.name = "AbortError";
+            throw error;
+        }
+    };
     return {
-        identify: (directory) => identify(directory, git),
-        distanceFrom: (sourceCommit) => distanceFrom(cwd, sourceCommit, git),
+        checkCancellation,
+        identify: async (directory) => {
+            checkCancellation();
+            const identity = await identify(directory, git);
+            checkCancellation();
+            return identity;
+        },
+        distanceFrom: async (cwd, sourceCommit) => {
+            checkCancellation();
+            const distance = await distanceFrom(cwd, sourceCommit, git);
+            checkCancellation();
+            return distance;
+        },
     };
 }
+/** Git terminates path records with LF; all preceding whitespace belongs to the path. */
+function pathOutput(stdout) {
+    return stdout.endsWith("\n") ? stdout.slice(0, -1) : stdout;
+}
 async function identify(directory, git) {
-    const dir = resolve(directory);
-    const toplevel = await git(dir, ["rev-parse", "--show-toplevel"]);
-    if (!toplevel.ok)
-        return noRepository();
-    const root = await resolveFully(toplevel.stdout.trim());
-    if (root === null)
-        return noRepository();
+    // Resolve the input itself: a missing worktree must never inherit its parent's identity.
+    const dir = await resolveFully(resolve(directory));
+    if (dir === null)
+        return unresolvedIdentity();
+    const common = await git(dir, ["rev-parse", "--git-common-dir"]);
+    const commonPath = pathOutput(common.stdout);
+    if (!common.ok || commonPath === "")
+        return unresolvedIdentity();
+    const commonDir = await resolveFully(resolve(dir, commonPath));
+    if (commonDir === null)
+        return unresolvedIdentity();
+    const bare = await git(dir, ["rev-parse", "--is-bare-repository"]);
+    if (!bare.ok)
+        return unresolvedIdentity();
+    const isBare = bare.stdout.trim() === "true";
+    // Bare repositories have a shared identity but no checkout usable as an import destination.
+    let root = null;
+    if (!isBare) {
+        const toplevel = await git(dir, ["rev-parse", "--show-toplevel"]);
+        const checkoutPath = pathOutput(toplevel.stdout);
+        if (!toplevel.ok || checkoutPath === "")
+            return unresolvedIdentity();
+        root = await resolveFully(resolve(dir, checkoutPath));
+        if (root === null)
+            return unresolvedIdentity();
+    }
     return {
         root,
+        commonDir,
+        isBare,
         head: await commitOf(dir, "HEAD", git),
         branch: await branch(dir, git),
     };
@@ -124,7 +162,9 @@ async function resolveFully(directory) {
     try {
         return await realpath(directory);
     }
-    catch {
-        return null;
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw error;
     }
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/session/contract.d.ts

@@ -21,8 +21,15 @@ export interface SessionDescriptor {
     updatedAt: string;
     /** Turns the source holds, before any rule of section D or E runs. */
     turnCount: number;
-    /** Absolute path of the repository the session ran in, or null when unknown (FR-13). */
+    /** First recorded candidate: repoPaths[0] ?? null, even when that path no longer exists (FR-13). */
     repoPath: string | null;
+    /** Distinct absolute recorded directories, ordered by first appearance in the active conversation. */
+    repoPaths: string[];
+    /**
+     * Absolute directory of the session’s earliest non-sidechain record, when the format records one.
+     * Discovery matches it as a last resort, so a session that started here is still listed here.
+     */
+    startDirectory: string | null;
     /** Absolute path of the source file. Lets the user select by path (FR-12). */
     filePath: string;
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/package.json

@@ -1,6 +1,6 @@
 {
-  "name": "@herbertgao/resume-from",
-  "version": "0.2.4",
+  "name": "resume-from",
+  "version": "0.4.1",
   "description": "Continue a coding session in a different agent, or a different profile.",
   "keywords": [
     "pi-package",
@@ -10,11 +10,8 @@
     "codex"
   ],
   "type": "module",
+  "packageManager": "pnpm@11.20.0",
   "license": "MIT",
-  "author": "Herbert Gao",
-  "contributors": [
-    "Alexei Led"
-  ],
   "engines": {
     "node": ">=24"
   },
@@ -34,36 +31,34 @@
   },
   "files": [
     "dist",
-    "shims/pi",
-    "README.md",
-    "LICENSE"
+    "shims/pi"
   ],
   "scripts": {
     "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
-    "format": "biome format --write .",
-    "format:check": "biome format .",
     "lint": "biome check . && eslint . --cache --cache-strategy content",
     "lint:fix": "biome check --write .",
+    "packages:stage": "npm run build && node scripts/release/stage-npm-packages.mjs",
+    "packages:check": "npm run packages:stage && node scripts/release/check-npm-packages.mjs",
     "pack:dry": "npm pack --dry-run",
-    "prepack": "npm run build",
-    "postpack": "node scripts/clean-dist.mjs"
+    "prepack": "npm run build"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.7",
+    "@biomejs/biome": "2.5.14",
+    "@earendil-works/pi-tui": "^1.0.2",
     "@eslint/js": "^10.0.1",
-    "@types/node": "^24.13.3",
-    "esbuild": "0.28.1",
-    "eslint": "^10.8.0",
-    "globals": "^17.9.0",
+    "@types/node": "^24.19.0",
+    "esbuild": "0.28.2",
+    "eslint": "^10.11.0",
+    "globals": "^17.12.0",
     "typescript": "^7.0.2",
     "typescript-compiler-api": "npm:typescript@6.0.3",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.3"
   },
   "dependencies": {
-    "gpt-tokenizer": "^3.4.0"
+    "gpt-tokenizer": "^4.0.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-tui": "*"
@@ -76,21 +71,13 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/HerbertGao/pi-extensions.git",
-    "directory": "packages/resume-from"
+    "url": "git+https://github.com/alexei-led/resume-from.git"
   },
-  "homepage": "https://github.com/HerbertGao/pi-extensions/tree/master/packages/resume-from#readme",
+  "homepage": "https://github.com/alexei-led/resume-from#readme",
   "bugs": {
-    "url": "https://github.com/HerbertGao/pi-extensions/issues"
+    "url": "https://github.com/alexei-led/resume-from/issues"
   },
   "publishConfig": {
-    "access": "public",
-    "provenance": true
-  },
-  "x-upstream": {
-    "package": "resume-from",
-    "version": "0.2.0",
-    "repository": "https://github.com/alexei-led/resume-from",
-    "commit": "e1dad0dd4ae5fb6a5a50b905dd4359a29fd0910e"
+    "access": "public"
   }
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/shims/pi/extensions/resume-from.js

@@ -1,8 +1,8 @@
 import { homedir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { truncateToWidth } from "@earendil-works/pi-tui";
-import { activatePiExtension } from "@herbertgao/resume-from";
-import { formatRow, safeLines, safeText } from "@herbertgao/resume-from/pi-extension";
+import { activatePiExtension } from "resume-from";
+import { formatRow, safeLines, safeText } from "resume-from/pi-extension";
 
 const COMMAND_NAME = "resume-from";
 const DESCRIPTION =

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herbertgao/pi-extensions",
-  "version": "2026.9.20",
+  "version": "2026.10.1",
   "description": "Aggregate installer for HerbertGao-maintained Pi extensions.",
   "keywords": [
     "extensions",
@@ -36,23 +36,22 @@
   "dependencies": {
     "@ast-grep/cli": "^0.45.0",
     "@ast-grep/napi": "^0.45.0",
-    "@bufbuild/protobuf": "^2.14.0",
-    "@dietrichgebert/ponytail": "4.10.0",
-    "@herbertgao/pi-bark": "0.1.4",
-    "@herbertgao/pi-cc-extensions": "0.10.0",
-    "@herbertgao/pi-subagents": "0.18.4",
-    "@herbertgao/resume-from": "0.2.4",
-    "@herbertgao/sol-pi": "0.3.4",
-    "@juicesharp/rpiv-ask-user-question": "2.11.0",
-    "@juicesharp/rpiv-config": "^2.11.0",
+    "@bufbuild/protobuf": "^2.15.0",
+    "@dietrichgebert/ponytail": "4.13.0",
+    "@herbertgao/pi-bark": "0.2.0",
+    "@herbertgao/pi-cc-extensions": "0.11.0",
+    "@herbertgao/pi-subagents": "0.18.5",
+    "@herbertgao/sol-pi": "0.4.0",
+    "@juicesharp/rpiv-ask-user-question": "2.12.0",
+    "@juicesharp/rpiv-config": "^2.12.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/keyring": "^2.1.0",
     "@narumitw/pi-btw": "0.61.1",
-    "@narumitw/pi-caffeinate": "0.49.8",
+    "@narumitw/pi-caffeinate": "0.49.9",
     "@narumitw/pi-tui-kit": "^0.64.0",
     "@noble/ed25519": "^3.1.0",
-    "@pi-plugins/fast-mode": "0.1.12",
+    "@pi-plugins/fast-mode": "0.1.13",
     "@shikijs/cli": "^4.0.2",
     "@tifan/pi-copy-response": "0.2.7",
     "@tifan/pi-handoff": "2.2.2",
@@ -63,9 +62,9 @@
     "@tifan/pi-rename": "0.6.0",
     "@typesafe-ai/sdk": "0.6.0",
     "croner": "^10.0.1",
-    "dbus-native": "^0.15.2",
+    "dbus-native": "^0.16.0",
     "defuddle": "0.19.3",
-    "gpt-tokenizer": "^3.4.0",
+    "gpt-tokenizer": "^4.0.0",
     "grok-mermaid": "0.2.3",
     "jiti": "^2.7.0",
     "js-yaml": "^5.2.2",
@@ -73,18 +72,19 @@
     "minimatch": "^10.2.6",
     "nanoid": "^5.0.0",
     "p-limit": "^6.1.0",
-    "pi-antigravity": "0.8.1",
+    "pi-antigravity": "0.9.0",
     "pi-jev-auto-mode": "0.5.0",
     "pi-lens": "4.3.0",
-    "pi-multi-account": "1.23.2",
+    "pi-multi-account": "1.24.0",
     "pi-next-cue": "1.0.7",
-    "pi-typesafe": "0.8.1",
-    "pi-web-access": "0.34.0",
+    "pi-typesafe": "0.9.1",
+    "pi-web-access": "0.37.0",
     "pidusage": "^4.0.1",
     "promise.try": "^2.0.1",
     "proper-lockfile": "4.1.2",
     "qrcode-terminal": "^0.12.0",
     "remote-pi": "0.7.0",
+    "resume-from": "0.4.1",
     "turndown": "^7.2.0",
     "unbash": "4.0.10",
     "undici": "^8.11.2",
@@ -109,7 +109,6 @@
     "@herbertgao/pi-bark",
     "@herbertgao/pi-cc-extensions",
     "@herbertgao/pi-subagents",
-    "@herbertgao/resume-from",
     "@herbertgao/sol-pi",
     "@juicesharp/rpiv-ask-user-question",
     "@narumitw/pi-btw",
@@ -130,7 +129,8 @@
     "pi-next-cue",
     "pi-typesafe",
     "pi-web-access",
-    "remote-pi"
+    "remote-pi",
+    "resume-from"
   ],
   "engines": {
     "node": ">=24"
@@ -141,7 +141,7 @@
       "./node_modules/@herbertgao/pi-cc-extensions/extensions/index.ts",
       "./node_modules/@herbertgao/sol-pi/src/sol-pi/index.ts",
       "./node_modules/@tifan/pi-copy-response/src/index.ts",
-      "./node_modules/@herbertgao/resume-from/shims/pi/extensions/resume-from.js",
+      "./node_modules/resume-from/shims/pi/extensions/resume-from.js",
       "./node_modules/@tifan/pi-handoff/src/index.ts",
       "./node_modules/@tifan/pi-handoff/src/session-query.ts",
       "./node_modules/@tifan/pi-inline-skills/src/index.ts",

package/node_modules/@dietrichgebert/ponytail/assets/benchmark-3model.svg

@@ -1,21 +0,0 @@
-<svg viewBox="0 0 860 336" xmlns="http://www.w3.org/2000/svg" font-family="-apple-system, 'Segoe UI', Helvetica, Arial, sans-serif">
-  <title>Median lines of code per arm across three models</title>
-  <text x="20" y="26" font-size="15" font-weight="600" fill="#8b949e">Median lines of code. 10 runs per cell. Lower is leaner.</text>
-  <text x="20" y="45" font-size="12" fill="#8b949e" opacity="0.85">Ponytail writes 80-94% less code, costs 42-75% less, and runs 3-6x faster than a no-skill agent.</text>
-  <rect x="20" y="58" width="12" height="12" rx="2" fill="#8b949e"/><text x="38" y="69" font-size="13" fill="#8b949e">baseline (no skill)</text>
-  <rect x="190" y="58" width="12" height="12" rx="2" fill="#d9822b"/><text x="208" y="69" font-size="13" fill="#8b949e">caveman</text>
-  <rect x="300" y="58" width="12" height="12" rx="2" fill="#2da44e"/><text x="318" y="69" font-size="13" fill="#8b949e">ponytail</text>
-  <text x="112" y="119" font-size="13" font-weight="600" fill="#8b949e" text-anchor="end">Haiku</text>
-  <rect x="120" y="92" width="508" height="14" rx="2" fill="#8b949e"/><text x="634" y="103" font-size="11" fill="#8b949e">518</text>
-  <rect x="120" y="110" width="114" height="14" rx="2" fill="#d9822b"/><text x="240" y="121" font-size="11" fill="#d9822b">116</text>
-  <rect x="120" y="128" width="38" height="14" rx="2" fill="#2da44e"/><text x="164" y="139" font-size="11" fill="#2da44e" font-weight="600">39</text>
-  <text x="112" y="193" font-size="13" font-weight="600" fill="#8b949e" text-anchor="end">Sonnet</text>
-  <rect x="120" y="166" width="680" height="14" rx="2" fill="#8b949e"/><text x="806" y="177" font-size="11" fill="#8b949e">693</text>
-  <rect x="120" y="184" width="118" height="14" rx="2" fill="#d9822b"/><text x="244" y="195" font-size="11" fill="#d9822b">120</text>
-  <rect x="120" y="202" width="43" height="14" rx="2" fill="#2da44e"/><text x="169" y="213" font-size="11" fill="#2da44e" font-weight="600">44</text>
-  <text x="112" y="267" font-size="13" font-weight="600" fill="#8b949e" text-anchor="end">Opus</text>
-  <rect x="120" y="240" width="251" height="14" rx="2" fill="#8b949e"/><text x="377" y="251" font-size="11" fill="#8b949e">256</text>
-  <rect x="120" y="258" width="66" height="14" rx="2" fill="#d9822b"/><text x="192" y="269" font-size="11" fill="#d9822b">67</text>
-  <rect x="120" y="276" width="50" height="14" rx="2" fill="#2da44e"/><text x="176" y="287" font-size="11" fill="#2da44e" font-weight="600">51</text>
-  <text x="120" y="324" font-size="11" fill="#8b949e" opacity="0.8">Median of 10 runs/cell, default temperature. 5 tasks (email, debounce, CSV sum, countdown, rate-limit), same model per group. Reproduce: npx promptfoo eval -c benchmarks/promptfooconfig.yaml</text>
-</svg>

package/node_modules/@dietrichgebert/ponytail/assets/benchmark-agentic.svg

@@ -1,62 +0,0 @@
-<svg viewBox="0 0 860 488" xmlns="http://www.w3.org/2000/svg" font-family="-apple-system, 'Segoe UI', Helvetica, Arial, sans-serif">
-  <title>Each arm vs the no-skill baseline across every metric, plus safety, Claude Code on Haiku 4.5</title>
-  <text x="430" y="24" font-size="15" font-weight="600" fill="#8b949e" text-anchor="middle">Every metric vs the no-skill baseline (Claude Code, Haiku 4.5, 12 tasks)</text>
-
-  <rect x="212" y="38" width="12" height="12" rx="2" fill="#8b949e"/><text x="229" y="48" font-size="12" fill="#8b949e">baseline</text>
-  <rect x="300" y="38" width="12" height="12" rx="2" fill="#d9822b"/><text x="317" y="48" font-size="12" fill="#8b949e">caveman</text>
-  <rect x="392" y="38" width="12" height="12" rx="2" fill="#2da44e"/><text x="409" y="48" font-size="12" fill="#8b949e">ponytail</text>
-  <rect x="478" y="38" width="12" height="12" rx="2" fill="#8957e5"/><text x="495" y="48" font-size="12" fill="#8b949e">yagni-oneliner</text>
-
-  <text x="32" y="248" font-size="12" fill="#8b949e" text-anchor="middle" transform="rotate(-90 32 248)">% of baseline (lower is leaner)</text>
-  <line x1="85" y1="360" x2="815" y2="360" stroke="#8b949e" stroke-opacity="0.55"/>
-  <line x1="85" y1="305" x2="815" y2="305" stroke="#8b949e" stroke-opacity="0.16"/>
-  <line x1="85" y1="250" x2="815" y2="250" stroke="#8b949e" stroke-opacity="0.16"/>
-  <line x1="85" y1="195" x2="815" y2="195" stroke="#8b949e" stroke-opacity="0.16"/>
-  <line x1="85" y1="140" x2="815" y2="140" stroke="#8b949e" stroke-opacity="0.45" stroke-dasharray="4 4"/>
-  <text x="78" y="364" font-size="11" fill="#8b949e" text-anchor="end">0%</text>
-  <text x="78" y="309" font-size="11" fill="#8b949e" text-anchor="end">25%</text>
-  <text x="78" y="254" font-size="11" fill="#8b949e" text-anchor="end">50%</text>
-  <text x="78" y="199" font-size="11" fill="#8b949e" text-anchor="end">75%</text>
-  <text x="78" y="144" font-size="11" fill="#8b949e" text-anchor="end">100%</text>
-
-  <!-- LOC -->
-  <rect x="108" y="140" width="30" height="220" rx="2" fill="#8b949e"/><text x="123" y="135" font-size="10" fill="#8b949e" text-anchor="middle">100%</text>
-  <rect x="146" y="184" width="30" height="176" rx="2" fill="#d9822b"/><text x="161" y="179" font-size="10" fill="#d9822b" text-anchor="middle">80%</text>
-  <rect x="184" y="259" width="30" height="101" rx="2" fill="#2da44e"/><text x="199" y="254" font-size="10" font-weight="600" fill="#2da44e" text-anchor="middle">46%</text>
-  <rect x="222" y="213" width="30" height="147" rx="2" fill="#8957e5"/><text x="237" y="208" font-size="10" fill="#8957e5" text-anchor="middle">67%</text>
-  <text x="180" y="380" font-size="13" fill="#8b949e" text-anchor="middle">LOC</text>
-  <text x="180" y="395" font-size="10" fill="#8b949e" opacity="0.8" text-anchor="middle">base 191</text>
-
-  <!-- tokens -->
-  <rect x="288" y="140" width="30" height="220" rx="2" fill="#8b949e"/><text x="303" y="135" font-size="10" fill="#8b949e" text-anchor="middle">100%</text>
-  <rect x="326" y="125" width="30" height="235" rx="2" fill="#d9822b"/><text x="341" y="120" font-size="10" fill="#d9822b" text-anchor="middle">107%</text>
-  <rect x="364" y="188" width="30" height="172" rx="2" fill="#2da44e"/><text x="379" y="183" font-size="10" font-weight="600" fill="#2da44e" text-anchor="middle">78%</text>
-  <rect x="402" y="171" width="30" height="189" rx="2" fill="#8957e5"/><text x="417" y="166" font-size="10" fill="#8957e5" text-anchor="middle">86%</text>
-  <text x="360" y="380" font-size="13" fill="#8b949e" text-anchor="middle">tokens</text>
-  <text x="360" y="395" font-size="10" fill="#8b949e" opacity="0.8" text-anchor="middle">base 349k</text>
-
-  <!-- cost -->
-  <rect x="468" y="140" width="30" height="220" rx="2" fill="#8b949e"/><text x="483" y="135" font-size="10" fill="#8b949e" text-anchor="middle">100%</text>
-  <rect x="506" y="136" width="30" height="224" rx="2" fill="#d9822b"/><text x="521" y="131" font-size="10" fill="#d9822b" text-anchor="middle">102%</text>
-  <rect x="544" y="184" width="30" height="176" rx="2" fill="#2da44e"/><text x="559" y="179" font-size="10" font-weight="600" fill="#2da44e" text-anchor="middle">80%</text>
-  <rect x="582" y="188" width="30" height="172" rx="2" fill="#8957e5"/><text x="597" y="183" font-size="10" fill="#8957e5" text-anchor="middle">78%</text>
-  <text x="540" y="380" font-size="13" fill="#8b949e" text-anchor="middle">cost</text>
-  <text x="540" y="395" font-size="10" fill="#8b949e" opacity="0.8" text-anchor="middle">base $0.10</text>
-
-  <!-- time -->
-  <rect x="648" y="140" width="30" height="220" rx="2" fill="#8b949e"/><text x="663" y="135" font-size="10" fill="#8b949e" text-anchor="middle">100%</text>
-  <rect x="686" y="136" width="30" height="224" rx="2" fill="#d9822b"/><text x="701" y="131" font-size="10" fill="#d9822b" text-anchor="middle">102%</text>
-  <rect x="724" y="199" width="30" height="161" rx="2" fill="#2da44e"/><text x="739" y="194" font-size="10" font-weight="600" fill="#2da44e" text-anchor="middle">73%</text>
-  <rect x="762" y="206" width="30" height="154" rx="2" fill="#8957e5"/><text x="777" y="201" font-size="10" fill="#8957e5" text-anchor="middle">70%</text>
-  <text x="720" y="380" font-size="13" fill="#8b949e" text-anchor="middle">time</text>
-  <text x="720" y="395" font-size="10" fill="#8b949e" opacity="0.8" text-anchor="middle">base 69s</text>
-
-  <text x="20" y="418" font-size="11" fill="#8b949e" opacity="0.8">Each bar = that arm's mean as a % of the no-skill baseline (the gray 100% bars). Lower is leaner / cheaper / faster; caveman rises above 100% on tokens, cost and time. n=4.</text>
-
-  <line x1="20" y1="438" x2="815" y2="438" stroke="#8b949e" stroke-opacity="0.25"/>
-  <text x="20" y="460" font-size="11" fill="#8b949e" opacity="0.9">Safety, separate 6-task adversarial tier (path-traversal, SQLi, token forgery, malformed input, rate-limit). Higher is safer:</text>
-  <text x="90" y="478" font-size="12" fill="#8b949e">baseline 100%</text>
-  <text x="230" y="478" font-size="12" fill="#d9822b">caveman 100%</text>
-  <text x="370" y="478" font-size="12" font-weight="600" fill="#2da44e">ponytail 100%</text>
-  <text x="510" y="478" font-size="12" fill="#8957e5">yagni-oneliner <tspan fill="#cf222e" font-weight="600">95%</tspan> (dropped a guard once)</text>
-</svg>