loki-mode 10.8.0 → 10.9.1

package/packages/control-plane/dist/server.js

@@ -879,16 +879,16 @@ var require_Collection = __commonJS((exports) => {
 
 // node_modules/yaml/dist/stringify/stringifyComment.js
 var require_stringifyComment = __commonJS((exports) => {
-  var stringifyComment = (str2) => str2.replace(/^(?!$)(?: $)?/gm, "#");
+  var stringifyComment = (str3) => str3.replace(/^(?!$)(?: $)?/gm, "#");
   function indentComment(comment, indent) {
     if (/^\n+$/.test(comment))
       return comment.substring(1);
     return indent ? comment.replace(/^(?! *$)/gm, indent) : comment;
   }
-  var lineComment = (str2, indent, comment) => str2.endsWith(`
+  var lineComment = (str3, indent, comment) => str3.endsWith(`
 `) ? indentComment(comment, indent) : comment.includes(`
 `) ? `
-` + indentComment(comment, indent) : (str2.endsWith(" ") ? "" : " ") + comment;
+` + indentComment(comment, indent) : (str3.endsWith(" ") ? "" : " ") + comment;
   exports.indentComment = indentComment;
   exports.lineComment = lineComment;
   exports.stringifyComment = stringifyComment;
@@ -1040,16 +1040,16 @@ var require_stringifyString = __commonJS((exports) => {
     lineWidth: ctx.options.lineWidth,
     minContentWidth: ctx.options.minContentWidth
   });
-  var containsDocumentMarker = (str2) => /^(%|---|\.\.\.)/m.test(str2);
-  function lineLengthOverLimit(str2, lineWidth, indentLength) {
+  var containsDocumentMarker = (str3) => /^(%|---|\.\.\.)/m.test(str3);
+  function lineLengthOverLimit(str3, lineWidth, indentLength) {
     if (!lineWidth || lineWidth < 0)
       return false;
     const limit = lineWidth - indentLength;
-    const strLen = str2.length;
+    const strLen = str3.length;
     if (strLen <= limit)
       return false;
     for (let i = 0, start = 0;i < strLen; ++i) {
-      if (str2[i] === `
+      if (str3[i] === `
 `) {
         if (i - start > limit)
           return true;
@@ -1067,11 +1067,11 @@ var require_stringifyString = __commonJS((exports) => {
     const { implicitKey } = ctx;
     const minMultiLineLength = ctx.options.doubleQuotedMinMultiLineLength;
     const indent = ctx.indent || (containsDocumentMarker(value) ? "  " : "");
-    let str2 = "";
+    let str3 = "";
     let start = 0;
     for (let i = 0, ch = json[i];ch; ch = json[++i]) {
       if (ch === " " && json[i + 1] === "\\" && json[i + 2] === "n") {
-        str2 += json.slice(start, i) + "\\ ";
+        str3 += json.slice(start, i) + "\\ ";
         i += 1;
         start = i;
         ch = "\\";
@@ -1080,38 +1080,38 @@ var require_stringifyString = __commonJS((exports) => {
         switch (json[i + 1]) {
           case "u":
             {
-              str2 += json.slice(start, i);
+              str3 += json.slice(start, i);
               const code = json.substr(i + 2, 4);
               switch (code) {
                 case "0000":
-                  str2 += "\\0";
+                  str3 += "\\0";
                   break;
                 case "0007":
-                  str2 += "\\a";
+                  str3 += "\\a";
                   break;
                 case "000b":
-                  str2 += "\\v";
+                  str3 += "\\v";
                   break;
                 case "001b":
-                  str2 += "\\e";
+                  str3 += "\\e";
                   break;
                 case "0085":
-                  str2 += "\\N";
+                  str3 += "\\N";
                   break;
                 case "00a0":
-                  str2 += "\\_";
+                  str3 += "\\_";
                   break;
                 case "2028":
-                  str2 += "\\L";
+                  str3 += "\\L";
                   break;
                 case "2029":
-                  str2 += "\\P";
+                  str3 += "\\P";
                   break;
                 default:
                   if (code.substr(0, 2) === "00")
-                    str2 += "\\x" + code.substr(2);
+                    str3 += "\\x" + code.substr(2);
                   else
-                    str2 += json.substr(i, 6);
+                    str3 += json.substr(i, 6);
               }
               i += 5;
               start = i + 1;
@@ -1121,17 +1121,17 @@ var require_stringifyString = __commonJS((exports) => {
             if (implicitKey || json[i + 2] === '"' || json.length < minMultiLineLength) {
               i += 1;
             } else {
-              str2 += json.slice(start, i) + `
+              str3 += json.slice(start, i) + `
 
 `;
               while (json[i + 2] === "\\" && json[i + 3] === "n" && json[i + 4] !== '"') {
-                str2 += `
+                str3 += `
 `;
                 i += 2;
               }
-              str2 += indent;
+              str3 += indent;
               if (json[i + 2] === " ")
-                str2 += "\\";
+                str3 += "\\";
               i += 1;
               start = i + 1;
             }
@@ -1140,8 +1140,8 @@ var require_stringifyString = __commonJS((exports) => {
             i += 1;
         }
     }
-    str2 = start ? str2 + json.slice(start) : json;
-    return implicitKey ? str2 : foldFlowLines.foldFlowLines(str2, indent, foldFlowLines.FOLD_QUOTED, getFoldOptions(ctx, false));
+    str3 = start ? str3 + json.slice(start) : json;
+    return implicitKey ? str3 : foldFlowLines.foldFlowLines(str3, indent, foldFlowLines.FOLD_QUOTED, getFoldOptions(ctx, false));
   }
   function singleQuotedString(value, ctx) {
     if (ctx.options.singleQuote === false || ctx.implicitKey && value.includes(`
@@ -1283,15 +1283,15 @@ ${indent}${start}${value}${end}`;
         return quotedString(value, ctx);
       }
     }
-    const str2 = value.replace(/\n+/g, `$&
+    const str3 = value.replace(/\n+/g, `$&
 ${indent}`);
     if (actualString) {
-      const test = (tag) => tag.default && tag.tag !== "tag:yaml.org,2002:str" && tag.test?.test(str2);
+      const test = (tag) => tag.default && tag.tag !== "tag:yaml.org,2002:str" && tag.test?.test(str3);
       const { compat, tags } = ctx.doc.schema;
       if (tags.some(test) || compat?.some(test))
         return quotedString(value, ctx);
     }
-    return implicitKey ? str2 : foldFlowLines.foldFlowLines(str2, indent, foldFlowLines.FOLD_FLOW, getFoldOptions(ctx, false));
+    return implicitKey ? str3 : foldFlowLines.foldFlowLines(str3, indent, foldFlowLines.FOLD_FLOW, getFoldOptions(ctx, false));
   }
   function stringifyString(item, ctx, onComment, onChompKeep) {
     const { implicitKey, inFlow } = ctx;
@@ -1440,11 +1440,11 @@ var require_stringify = __commonJS((exports) => {
     const props = stringifyProps(node, tagObj, ctx);
     if (props.length > 0)
       ctx.indentAtStart = (ctx.indentAtStart ?? 0) + props.length + 1;
-    const str2 = typeof tagObj.stringify === "function" ? tagObj.stringify(node, ctx, onComment, onChompKeep) : identity.isScalar(node) ? stringifyString.stringifyString(node, ctx, onComment, onChompKeep) : node.toString(ctx, onComment, onChompKeep);
+    const str3 = typeof tagObj.stringify === "function" ? tagObj.stringify(node, ctx, onComment, onChompKeep) : identity.isScalar(node) ? stringifyString.stringifyString(node, ctx, onComment, onChompKeep) : node.toString(ctx, onComment, onChompKeep);
     if (!props)
-      return str2;
-    return identity.isScalar(node) || str2[0] === "{" || str2[0] === "[" ? `${props} ${str2}` : `${props}
-${ctx.indent}${str2}`;
+      return str3;
+    return identity.isScalar(node) || str3[0] === "{" || str3[0] === "[" ? `${props} ${str3}` : `${props}
+${ctx.indent}${str3}`;
   }
   exports.createStringifyContext = createStringifyContext;
   exports.stringify = stringify;
@@ -1476,8 +1476,8 @@ var require_stringifyPair = __commonJS((exports) => {
     });
     let keyCommentDone = false;
     let chompKeep = false;
-    let str2 = stringify.stringify(key, ctx, () => keyCommentDone = true, () => chompKeep = true);
-    if (!explicitKey && !ctx.inFlow && str2.length > 1024) {
+    let str3 = stringify.stringify(key, ctx, () => keyCommentDone = true, () => chompKeep = true);
+    if (!explicitKey && !ctx.inFlow && str3.length > 1024) {
       if (simpleKeys)
         throw new Error("With simple keys, single line scalar must not span more than 1024 characters");
       explicitKey = true;
@@ -1486,27 +1486,27 @@ var require_stringifyPair = __commonJS((exports) => {
       if (allNullValues || value == null) {
         if (keyCommentDone && onComment)
           onComment();
-        return str2 === "" ? "?" : explicitKey ? `? ${str2}` : str2;
+        return str3 === "" ? "?" : explicitKey ? `? ${str3}` : str3;
       }
     } else if (allNullValues && !simpleKeys || value == null && explicitKey) {
-      str2 = `? ${str2}`;
+      str3 = `? ${str3}`;
       if (keyComment && !keyCommentDone) {
-        str2 += stringifyComment.lineComment(str2, ctx.indent, commentString(keyComment));
+        str3 += stringifyComment.lineComment(str3, ctx.indent, commentString(keyComment));
       } else if (chompKeep && onChompKeep)
         onChompKeep();
-      return str2;
+      return str3;
     }
     if (keyCommentDone)
       keyComment = null;
     if (explicitKey) {
       if (keyComment)
-        str2 += stringifyComment.lineComment(str2, ctx.indent, commentString(keyComment));
-      str2 = `? ${str2}
+        str3 += stringifyComment.lineComment(str3, ctx.indent, commentString(keyComment));
+      str3 = `? ${str3}
 ${indent}:`;
     } else {
-      str2 = `${str2}:`;
+      str3 = `${str3}:`;
       if (keyComment)
-        str2 += stringifyComment.lineComment(str2, ctx.indent, commentString(keyComment));
+        str3 += stringifyComment.lineComment(str3, ctx.indent, commentString(keyComment));
     }
     let vsb, vcb, valueComment;
     if (identity.isNode(value)) {
@@ -1522,7 +1522,7 @@ ${indent}:`;
     }
     ctx.implicitKey = false;
     if (!explicitKey && !keyComment && identity.isScalar(value))
-      ctx.indentAtStart = str2.length + 1;
+      ctx.indentAtStart = str3.length + 1;
     chompKeep = false;
     if (!indentSeq && indentStep.length >= 2 && !ctx.inFlow && !explicitKey && identity.isSeq(value) && !value.flow && !value.tag && !value.anchor) {
       ctx.indent = ctx.indent.substring(2);
@@ -1572,16 +1572,16 @@ ${ctx.indent}`;
 `) {
       ws = "";
     }
-    str2 += ws + valueStr;
+    str3 += ws + valueStr;
     if (ctx.inFlow) {
       if (valueCommentDone && onComment)
         onComment();
     } else if (valueComment && !valueCommentDone) {
-      str2 += stringifyComment.lineComment(str2, ctx.indent, commentString(valueComment));
+      str3 += stringifyComment.lineComment(str3, ctx.indent, commentString(valueComment));
     } else if (chompKeep && onChompKeep) {
       onChompKeep();
     }
-    return str2;
+    return str3;
   }
   exports.stringifyPair = stringifyPair;
 });
@@ -1794,33 +1794,33 @@ var require_stringifyCollection = __commonJS((exports) => {
         }
       }
       chompKeep = false;
-      let str3 = stringify.stringify(item, itemCtx, () => comment2 = null, () => chompKeep = true);
+      let str4 = stringify.stringify(item, itemCtx, () => comment2 = null, () => chompKeep = true);
       if (comment2)
-        str3 += stringifyComment.lineComment(str3, itemIndent, commentString(comment2));
+        str4 += stringifyComment.lineComment(str4, itemIndent, commentString(comment2));
       if (chompKeep && comment2)
         chompKeep = false;
-      lines.push(blockItemPrefix + str3);
+      lines.push(blockItemPrefix + str4);
     }
-    let str2;
+    let str3;
     if (lines.length === 0) {
-      str2 = flowChars.start + flowChars.end;
+      str3 = flowChars.start + flowChars.end;
     } else {
-      str2 = lines[0];
+      str3 = lines[0];
       for (let i = 1;i < lines.length; ++i) {
         const line2 = lines[i];
-        str2 += line2 ? `
+        str3 += line2 ? `
 ${indent}${line2}` : `
 `;
       }
     }
     if (comment) {
-      str2 += `
+      str3 += `
 ` + stringifyComment.indentComment(commentString(comment), indent);
       if (onComment)
         onComment();
     } else if (chompKeep && onChompKeep)
       onChompKeep();
-    return str2;
+    return str3;
   }
   function stringifyFlowCollection({ items }, ctx, { flowChars, itemIndent }) {
     const { indent, indentStep, flowCollectionPadding: fcPadding, options: { commentString } } = ctx;
@@ -1863,22 +1863,22 @@ ${indent}${line2}` : `
       }
       if (comment)
         reqNewline = true;
-      let str2 = stringify.stringify(item, itemCtx, () => comment = null);
-      reqNewline || (reqNewline = lines.length > linesAtValue || str2.includes(`
+      let str3 = stringify.stringify(item, itemCtx, () => comment = null);
+      reqNewline || (reqNewline = lines.length > linesAtValue || str3.includes(`
 `));
       if (i < items.length - 1) {
-        str2 += ",";
+        str3 += ",";
       } else if (ctx.options.trailingComma) {
         if (ctx.options.lineWidth > 0) {
-          reqNewline || (reqNewline = lines.reduce((sum, line2) => sum + line2.length + 2, 2) + (str2.length + 2) > ctx.options.lineWidth);
+          reqNewline || (reqNewline = lines.reduce((sum, line2) => sum + line2.length + 2, 2) + (str3.length + 2) > ctx.options.lineWidth);
         }
         if (reqNewline) {
-          str2 += ",";
+          str3 += ",";
         }
       }
       if (comment)
-        str2 += stringifyComment.lineComment(str2, itemIndent, commentString(comment));
-      lines.push(str2);
+        str3 += stringifyComment.lineComment(str3, itemIndent, commentString(comment));
+      lines.push(str3);
       linesAtValue = lines.length;
     }
     const { start, end } = flowChars;
@@ -1890,12 +1890,12 @@ ${indent}${line2}` : `
         reqNewline = ctx.options.lineWidth > 0 && len > ctx.options.lineWidth;
       }
       if (reqNewline) {
-        let str2 = start;
+        let str3 = start;
         for (const line2 of lines)
-          str2 += line2 ? `
+          str3 += line2 ? `
 ${indentStep}${indent}${line2}` : `
 `;
-        return `${str2}
+        return `${str3}
 ${indent}${end}`;
       } else {
         return `${start}${fcPadding}${lines.join(" ")}${fcPadding}${end}`;
@@ -2178,7 +2178,7 @@ var require_string = __commonJS((exports) => {
     identify: (value) => typeof value === "string",
     default: true,
     tag: "tag:yaml.org,2002:str",
-    resolve: (str2) => str2,
+    resolve: (str3) => str3,
     stringify(item, ctx, onComment, onChompKeep) {
       ctx = Object.assign({ actualString: true }, ctx);
       return stringifyString.stringifyString(item, ctx, onComment, onChompKeep);
@@ -2210,7 +2210,7 @@ var require_bool = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:bool",
     test: /^(?:[Tt]rue|TRUE|[Ff]alse|FALSE)$/,
-    resolve: (str2) => new Scalar.Scalar(str2[0] === "t" || str2[0] === "T"),
+    resolve: (str3) => new Scalar.Scalar(str3[0] === "t" || str3[0] === "T"),
     stringify({ source, value }, ctx) {
       if (source && boolTag.test.test(source)) {
         const sv = source[0] === "t" || source[0] === "T";
@@ -2256,7 +2256,7 @@ var require_float = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:float",
     test: /^(?:[-+]?\.(?:inf|Inf|INF)|\.nan|\.NaN|\.NAN)$/,
-    resolve: (str2) => str2.slice(-3).toLowerCase() === "nan" ? NaN : str2[0] === "-" ? Number.NEGATIVE_INFINITY : Number.POSITIVE_INFINITY,
+    resolve: (str3) => str3.slice(-3).toLowerCase() === "nan" ? NaN : str3[0] === "-" ? Number.NEGATIVE_INFINITY : Number.POSITIVE_INFINITY,
     stringify: stringifyNumber.stringifyNumber
   };
   var floatExp = {
@@ -2265,7 +2265,7 @@ var require_float = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:float",
     format: "EXP",
     test: /^[-+]?(?:\.[0-9]+|[0-9]+(?:\.[0-9]*)?)[eE][-+]?[0-9]+$/,
-    resolve: (str2) => parseFloat(str2),
+    resolve: (str3) => parseFloat(str3),
     stringify(node) {
       const num = Number(node.value);
       return isFinite(num) ? num.toExponential() : stringifyNumber.stringifyNumber(node);
@@ -2276,11 +2276,11 @@ var require_float = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:float",
     test: /^[-+]?(?:\.[0-9]+|[0-9]+\.[0-9]*)$/,
-    resolve(str2) {
-      const node = new Scalar.Scalar(parseFloat(str2));
-      const dot = str2.indexOf(".");
-      if (dot !== -1 && str2[str2.length - 1] === "0")
-        node.minFractionDigits = str2.length - dot - 1;
+    resolve(str3) {
+      const node = new Scalar.Scalar(parseFloat(str3));
+      const dot = str3.indexOf(".");
+      if (dot !== -1 && str3[str3.length - 1] === "0")
+        node.minFractionDigits = str3.length - dot - 1;
       return node;
     },
     stringify: stringifyNumber.stringifyNumber
@@ -2294,7 +2294,7 @@ var require_float = __commonJS((exports) => {
 var require_int = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
   var intIdentify = (value) => typeof value === "bigint" || Number.isInteger(value);
-  var intResolve = (str2, offset, radix, { intAsBigInt }) => intAsBigInt ? BigInt(str2) : parseInt(str2.substring(offset), radix);
+  var intResolve = (str3, offset, radix, { intAsBigInt }) => intAsBigInt ? BigInt(str3) : parseInt(str3.substring(offset), radix);
   function intStringify(node, radix, prefix) {
     const { value } = node;
     if (intIdentify(value) && value >= 0)
@@ -2307,7 +2307,7 @@ var require_int = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "OCT",
     test: /^0o[0-7]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 2, 8, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 2, 8, opt),
     stringify: (node) => intStringify(node, 8, "0o")
   };
   var int = {
@@ -2315,7 +2315,7 @@ var require_int = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:int",
     test: /^[-+]?[0-9]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 0, 10, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 0, 10, opt),
     stringify: stringifyNumber.stringifyNumber
   };
   var intHex = {
@@ -2324,7 +2324,7 @@ var require_int = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "HEX",
     test: /^0x[0-9a-fA-F]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 2, 16, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 2, 16, opt),
     stringify: (node) => intStringify(node, 16, "0x")
   };
   exports.int = int;
@@ -2371,7 +2371,7 @@ var require_schema2 = __commonJS((exports) => {
       identify: (value) => typeof value === "string",
       default: true,
       tag: "tag:yaml.org,2002:str",
-      resolve: (str2) => str2,
+      resolve: (str3) => str3,
       stringify: stringifyJSON
     },
     {
@@ -2388,7 +2388,7 @@ var require_schema2 = __commonJS((exports) => {
       default: true,
       tag: "tag:yaml.org,2002:bool",
       test: /^true$|^false$/,
-      resolve: (str2) => str2 === "true",
+      resolve: (str3) => str3 === "true",
       stringify: stringifyJSON
     },
     {
@@ -2396,7 +2396,7 @@ var require_schema2 = __commonJS((exports) => {
       default: true,
       tag: "tag:yaml.org,2002:int",
       test: /^-?(?:0|[1-9][0-9]*)$/,
-      resolve: (str2, _onError, { intAsBigInt }) => intAsBigInt ? BigInt(str2) : parseInt(str2, 10),
+      resolve: (str3, _onError, { intAsBigInt }) => intAsBigInt ? BigInt(str3) : parseInt(str3, 10),
       stringify: ({ value }) => intIdentify(value) ? value.toString() : JSON.stringify(value)
     },
     {
@@ -2404,7 +2404,7 @@ var require_schema2 = __commonJS((exports) => {
       default: true,
       tag: "tag:yaml.org,2002:float",
       test: /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]*)?(?:[eE][-+]?[0-9]+)?$/,
-      resolve: (str2) => parseFloat(str2),
+      resolve: (str3) => parseFloat(str3),
       stringify: stringifyJSON
     }
   ];
@@ -2412,9 +2412,9 @@ var require_schema2 = __commonJS((exports) => {
     default: true,
     tag: "",
     test: /^/,
-    resolve(str2, onError) {
-      onError(`Unresolved plain scalar ${JSON.stringify(str2)}`);
-      return str2;
+    resolve(str3, onError) {
+      onError(`Unresolved plain scalar ${JSON.stringify(str3)}`);
+      return str3;
     }
   };
   var schema = [map.map, seq.seq].concat(jsonScalars, jsonError);
@@ -2434,10 +2434,10 @@ var require_binary = __commonJS((exports) => {
       if (typeof node_buffer.Buffer === "function") {
         return node_buffer.Buffer.from(src, "base64");
       } else if (typeof atob === "function") {
-        const str2 = atob(src.replace(/[\n\r]/g, ""));
-        const buffer = new Uint8Array(str2.length);
-        for (let i = 0;i < str2.length; ++i)
-          buffer[i] = str2.charCodeAt(i);
+        const str3 = atob(src.replace(/[\n\r]/g, ""));
+        const buffer = new Uint8Array(str3.length);
+        for (let i = 0;i < str3.length; ++i)
+          buffer[i] = str3.charCodeAt(i);
         return buffer;
       } else {
         onError("This environment does not support reading binary tags; either Buffer or atob is required");
@@ -2448,29 +2448,29 @@ var require_binary = __commonJS((exports) => {
       if (!value)
         return "";
       const buf = value;
-      let str2;
+      let str3;
       if (typeof node_buffer.Buffer === "function") {
-        str2 = buf instanceof node_buffer.Buffer ? buf.toString("base64") : node_buffer.Buffer.from(buf.buffer).toString("base64");
+        str3 = buf instanceof node_buffer.Buffer ? buf.toString("base64") : node_buffer.Buffer.from(buf.buffer).toString("base64");
       } else if (typeof btoa === "function") {
         let s = "";
         for (let i = 0;i < buf.length; ++i)
           s += String.fromCharCode(buf[i]);
-        str2 = btoa(s);
+        str3 = btoa(s);
       } else {
         throw new Error("This environment does not support writing binary tags; either Buffer or btoa is required");
       }
       type ?? (type = Scalar.Scalar.BLOCK_LITERAL);
       if (type !== Scalar.Scalar.QUOTE_DOUBLE) {
         const lineWidth = Math.max(ctx.options.lineWidth - ctx.indent.length, ctx.options.minContentWidth);
-        const n2 = Math.ceil(str2.length / lineWidth);
+        const n2 = Math.ceil(str3.length / lineWidth);
         const lines = new Array(n2);
         for (let i = 0, o = 0;i < n2; ++i, o += lineWidth) {
-          lines[i] = str2.substr(o, lineWidth);
+          lines[i] = str3.substr(o, lineWidth);
         }
-        str2 = lines.join(type === Scalar.Scalar.BLOCK_LITERAL ? `
+        str3 = lines.join(type === Scalar.Scalar.BLOCK_LITERAL ? `
 ` : " ");
       }
-      return stringifyString.stringifyString({ comment, type, value: str2 }, ctx, onComment, onChompKeep);
+      return stringifyString.stringifyString({ comment, type, value: str3 }, ctx, onComment, onChompKeep);
     }
   };
   exports.binary = binary;
@@ -2661,7 +2661,7 @@ var require_float2 = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:float",
     test: /^(?:[-+]?\.(?:inf|Inf|INF)|\.nan|\.NaN|\.NAN)$/,
-    resolve: (str2) => str2.slice(-3).toLowerCase() === "nan" ? NaN : str2[0] === "-" ? Number.NEGATIVE_INFINITY : Number.POSITIVE_INFINITY,
+    resolve: (str3) => str3.slice(-3).toLowerCase() === "nan" ? NaN : str3[0] === "-" ? Number.NEGATIVE_INFINITY : Number.POSITIVE_INFINITY,
     stringify: stringifyNumber.stringifyNumber
   };
   var floatExp = {
@@ -2670,7 +2670,7 @@ var require_float2 = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:float",
     format: "EXP",
     test: /^[-+]?(?:[0-9][0-9_]*)?(?:\.[0-9_]*)?[eE][-+]?[0-9]+$/,
-    resolve: (str2) => parseFloat(str2.replace(/_/g, "")),
+    resolve: (str3) => parseFloat(str3.replace(/_/g, "")),
     stringify(node) {
       const num = Number(node.value);
       return isFinite(num) ? num.toExponential() : stringifyNumber.stringifyNumber(node);
@@ -2681,11 +2681,11 @@ var require_float2 = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:float",
     test: /^[-+]?(?:[0-9][0-9_]*)?\.[0-9_]*$/,
-    resolve(str2) {
-      const node = new Scalar.Scalar(parseFloat(str2.replace(/_/g, "")));
-      const dot = str2.indexOf(".");
+    resolve(str3) {
+      const node = new Scalar.Scalar(parseFloat(str3.replace(/_/g, "")));
+      const dot = str3.indexOf(".");
       if (dot !== -1) {
-        const f = str2.substring(dot + 1).replace(/_/g, "");
+        const f = str3.substring(dot + 1).replace(/_/g, "");
         if (f[f.length - 1] === "0")
           node.minFractionDigits = f.length;
       }
@@ -2702,34 +2702,34 @@ var require_float2 = __commonJS((exports) => {
 var require_int2 = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
   var intIdentify = (value) => typeof value === "bigint" || Number.isInteger(value);
-  function intResolve(str2, offset, radix, { intAsBigInt }) {
-    const sign = str2[0];
+  function intResolve(str3, offset, radix, { intAsBigInt }) {
+    const sign = str3[0];
     if (sign === "-" || sign === "+")
       offset += 1;
-    str2 = str2.substring(offset).replace(/_/g, "");
+    str3 = str3.substring(offset).replace(/_/g, "");
     if (intAsBigInt) {
       switch (radix) {
         case 2:
-          str2 = `0b${str2}`;
+          str3 = `0b${str3}`;
           break;
         case 8:
-          str2 = `0o${str2}`;
+          str3 = `0o${str3}`;
           break;
         case 16:
-          str2 = `0x${str2}`;
+          str3 = `0x${str3}`;
           break;
       }
-      const n3 = BigInt(str2);
+      const n3 = BigInt(str3);
       return sign === "-" ? BigInt(-1) * n3 : n3;
     }
-    const n2 = parseInt(str2, radix);
+    const n2 = parseInt(str3, radix);
     return sign === "-" ? -1 * n2 : n2;
   }
   function intStringify(node, radix, prefix) {
     const { value } = node;
     if (intIdentify(value)) {
-      const str2 = value.toString(radix);
-      return value < 0 ? "-" + prefix + str2.substr(1) : prefix + str2;
+      const str3 = value.toString(radix);
+      return value < 0 ? "-" + prefix + str3.substr(1) : prefix + str3;
     }
     return stringifyNumber.stringifyNumber(node);
   }
@@ -2739,7 +2739,7 @@ var require_int2 = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "BIN",
     test: /^[-+]?0b[0-1_]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 2, 2, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 2, 2, opt),
     stringify: (node) => intStringify(node, 2, "0b")
   };
   var intOct = {
@@ -2748,7 +2748,7 @@ var require_int2 = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "OCT",
     test: /^[-+]?0[0-7_]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 1, 8, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 1, 8, opt),
     stringify: (node) => intStringify(node, 8, "0")
   };
   var int = {
@@ -2756,7 +2756,7 @@ var require_int2 = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:int",
     test: /^[-+]?[0-9][0-9_]*$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 0, 10, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 0, 10, opt),
     stringify: stringifyNumber.stringifyNumber
   };
   var intHex = {
@@ -2765,7 +2765,7 @@ var require_int2 = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "HEX",
     test: /^[-+]?0x[0-9a-fA-F_]+$/,
-    resolve: (str2, _onError, opt) => intResolve(str2, 2, 16, opt),
+    resolve: (str3, _onError, opt) => intResolve(str3, 2, 16, opt),
     stringify: (node) => intStringify(node, 16, "0x")
   };
   exports.int = int;
@@ -2860,9 +2860,9 @@ var require_set = __commonJS((exports) => {
 // node_modules/yaml/dist/schema/yaml-1.1/timestamp.js
 var require_timestamp = __commonJS((exports) => {
   var stringifyNumber = require_stringifyNumber();
-  function parseSexagesimal(str2, asBigInt) {
-    const sign = str2[0];
-    const parts = sign === "-" || sign === "+" ? str2.substring(1) : str2;
+  function parseSexagesimal(str3, asBigInt) {
+    const sign = str3[0];
+    const parts = sign === "-" || sign === "+" ? str3.substring(1) : str3;
     const num = (n2) => asBigInt ? BigInt(n2) : Number(n2);
     const res = parts.replace(/_/g, "").split(":").reduce((res2, p) => res2 * num(60) + num(p), num(0));
     return sign === "-" ? num(-1) * res : res;
@@ -2899,7 +2899,7 @@ var require_timestamp = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:int",
     format: "TIME",
     test: /^[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+$/,
-    resolve: (str2, _onError, { intAsBigInt }) => parseSexagesimal(str2, intAsBigInt),
+    resolve: (str3, _onError, { intAsBigInt }) => parseSexagesimal(str3, intAsBigInt),
     stringify: stringifySexagesimal
   };
   var floatTime = {
@@ -2908,7 +2908,7 @@ var require_timestamp = __commonJS((exports) => {
     tag: "tag:yaml.org,2002:float",
     format: "TIME",
     test: /^[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\.[0-9_]*$/,
-    resolve: (str2) => parseSexagesimal(str2, false),
+    resolve: (str3) => parseSexagesimal(str3, false),
     stringify: stringifySexagesimal
   };
   var timestamp = {
@@ -2916,8 +2916,8 @@ var require_timestamp = __commonJS((exports) => {
     default: true,
     tag: "tag:yaml.org,2002:timestamp",
     test: RegExp("^([0-9]{4})-([0-9]{1,2})-([0-9]{1,2})" + "(?:" + "(?:t|T|[ \\t]+)" + "([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2}(\\.[0-9]+)?)" + "(?:[ \\t]*(Z|[-+][012]?[0-9](?::[0-9]{2})?))?" + ")?$"),
-    resolve(str2) {
-      const match2 = str2.match(timestamp.test);
+    resolve(str3) {
+      const match2 = str3.match(timestamp.test);
       if (!match2)
         throw new Error("!!timestamp expects a date, starting with yyyy-mm-dd");
       const [, year, month, day, hour, minute, second] = match2.map(Number);
@@ -3696,10 +3696,10 @@ var require_resolve_block_map = __commonJS((exports) => {
     let offset = bm.offset;
     let commentEnd = null;
     for (const collItem of bm.items) {
-      const { start, key, sep: sep2, value } = collItem;
+      const { start, key, sep: sep3, value } = collItem;
       const keyProps = resolveProps.resolveProps(start, {
         indicator: "explicit-key-ind",
-        next: key ?? sep2?.[0],
+        next: key ?? sep3?.[0],
         offset,
         onError,
         parentIndent: bm.indent,
@@ -3713,7 +3713,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           else if ("indent" in key && key.indent !== bm.indent)
             onError(offset, "BAD_INDENT", startColMsg);
         }
-        if (!keyProps.anchor && !keyProps.tag && !sep2) {
+        if (!keyProps.anchor && !keyProps.tag && !sep3) {
           commentEnd = keyProps.end;
           if (keyProps.comment) {
             if (map.comment)
@@ -3738,7 +3738,7 @@ var require_resolve_block_map = __commonJS((exports) => {
       ctx.atKey = false;
       if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
         onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-      const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+      const valueProps = resolveProps.resolveProps(sep3 ?? [], {
         indicator: "map-value-ind",
         next: value,
         offset: keyNode.range[2],
@@ -3754,7 +3754,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
             onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep2, null, valueProps, onError);
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
         if (ctx.schema.compat)
           utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
         offset = valueNode.range[2];
@@ -3840,7 +3840,7 @@ var require_resolve_end = __commonJS((exports) => {
     let comment = "";
     if (end) {
       let hasSpace = false;
-      let sep2 = "";
+      let sep3 = "";
       for (const token of end) {
         const { source, type } = token;
         switch (type) {
@@ -3854,13 +3854,13 @@ var require_resolve_end = __commonJS((exports) => {
             if (!comment)
               comment = cb;
             else
-              comment += sep2 + cb;
-            sep2 = "";
+              comment += sep3 + cb;
+            sep3 = "";
             break;
           }
           case "newline":
             if (comment)
-              sep2 += source;
+              sep3 += source;
             hasSpace = true;
             break;
           default:
@@ -3900,18 +3900,18 @@ var require_resolve_flow_collection = __commonJS((exports) => {
     let offset = fc.offset + fc.start.source.length;
     for (let i = 0;i < fc.items.length; ++i) {
       const collItem = fc.items[i];
-      const { start, key, sep: sep2, value } = collItem;
+      const { start, key, sep: sep3, value } = collItem;
       const props = resolveProps.resolveProps(start, {
         flow: fcName,
         indicator: "explicit-key-ind",
-        next: key ?? sep2?.[0],
+        next: key ?? sep3?.[0],
         offset,
         onError,
         parentIndent: fc.indent,
         startOnNewline: false
       });
       if (!props.found) {
-        if (!props.anchor && !props.tag && !sep2 && !value) {
+        if (!props.anchor && !props.tag && !sep3 && !value) {
           if (i === 0 && props.comma)
             onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
           else if (i < fc.items.length - 1)
@@ -3963,8 +3963,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           }
         }
       }
-      if (!isMap && !sep2 && !props.found) {
-        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep2, null, props, onError);
+      if (!isMap && !sep3 && !props.found) {
+        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
         coll.items.push(valueNode);
         offset = valueNode.range[2];
         if (isBlock(value))
@@ -3976,7 +3976,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         if (isBlock(key))
           onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
         ctx.atKey = false;
-        const valueProps = resolveProps.resolveProps(sep2 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
           flow: fcName,
           indicator: "map-value-ind",
           next: value,
@@ -3987,8 +3987,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         });
         if (valueProps.found) {
           if (!isMap && !props.found && ctx.options.strict) {
-            if (sep2)
-              for (const st of sep2) {
+            if (sep3)
+              for (const st of sep3) {
                 if (st === valueProps.found)
                   break;
                 if (st.type === "newline") {
@@ -4005,7 +4005,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           else
             onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep2, null, valueProps, onError) : null;
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
         if (valueNode) {
           if (isBlock(value))
             onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4182,7 +4182,7 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         chompStart = i + 1;
     }
     let value = "";
-    let sep2 = "";
+    let sep3 = "";
     let prevMoreIndented = false;
     for (let i = 0;i < contentStart; ++i)
       value += lines[i][0].slice(trimIndent) + `
@@ -4200,33 +4200,33 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         indent = "";
       }
       if (type === Scalar.Scalar.BLOCK_LITERAL) {
-        value += sep2 + indent.slice(trimIndent) + content;
-        sep2 = `
+        value += sep3 + indent.slice(trimIndent) + content;
+        sep3 = `
 `;
       } else if (indent.length > trimIndent || content[0] === "\t") {
-        if (sep2 === " ")
-          sep2 = `
+        if (sep3 === " ")
+          sep3 = `
 `;
-        else if (!prevMoreIndented && sep2 === `
+        else if (!prevMoreIndented && sep3 === `
 `)
-          sep2 = `
+          sep3 = `
 
 `;
-        value += sep2 + indent.slice(trimIndent) + content;
-        sep2 = `
+        value += sep3 + indent.slice(trimIndent) + content;
+        sep3 = `
 `;
         prevMoreIndented = true;
       } else if (content === "") {
-        if (sep2 === `
+        if (sep3 === `
 `)
           value += `
 `;
         else
-          sep2 = `
+          sep3 = `
 `;
       } else {
-        value += sep2 + content;
-        sep2 = " ";
+        value += sep3 + content;
+        sep3 = " ";
         prevMoreIndented = false;
       }
     }
@@ -4406,27 +4406,27 @@ var require_resolve_flow_scalar = __commonJS((exports) => {
       trimBoth = /^[ \t]+|[ \t]+$/g;
     }
     let res = match2[1].replace(trimEnd, "");
-    let sep2 = " ";
+    let sep3 = " ";
     let pos = line2.lastIndex;
     while (match2 = line2.exec(source)) {
       const lm = match2[1].replace(trimBoth, "");
       if (lm === "") {
-        if (sep2 === `
+        if (sep3 === `
 `)
-          res += sep2;
+          res += sep3;
         else
-          sep2 = `
+          sep3 = `
 `;
       } else {
-        res += sep2 + lm;
-        sep2 = " ";
+        res += sep3 + lm;
+        sep3 = " ";
       }
       pos = line2.lastIndex;
     }
     const last = /[ \t]*(.*)/sy;
     last.lastIndex = pos;
     match2 = last.exec(source);
-    return res + sep2 + (match2?.[1] ?? "");
+    return res + sep3 + (match2?.[1] ?? "");
   }
   function doubleQuotedValue(source, onError) {
     let res = "";
@@ -5207,14 +5207,14 @@ var require_cst_stringify = __commonJS((exports) => {
       }
     }
   }
-  function stringifyItem({ start, key, sep: sep2, value }) {
+  function stringifyItem({ start, key, sep: sep3, value }) {
     let res = "";
     for (const st of start)
       res += st.source;
     if (key)
       res += stringifyToken(key);
-    if (sep2)
-      for (const st of sep2)
+    if (sep3)
+      for (const st of sep3)
         res += st.source;
     if (value)
       res += stringifyToken(value);
@@ -6362,18 +6362,18 @@ var require_parser = __commonJS((exports) => {
       if (this.type === "map-value-ind") {
         const prev = getPrevProps(this.peek(2));
         const start = getFirstKeyStartProps(prev);
-        let sep2;
+        let sep3;
         if (scalar.end) {
-          sep2 = scalar.end;
-          sep2.push(this.sourceToken);
+          sep3 = scalar.end;
+          sep3.push(this.sourceToken);
           delete scalar.end;
         } else
-          sep2 = [this.sourceToken];
+          sep3 = [this.sourceToken];
         const map = {
           type: "block-map",
           offset: scalar.offset,
           indent: scalar.indent,
-          items: [{ start, key: scalar, sep: sep2 }]
+          items: [{ start, key: scalar, sep: sep3 }]
         };
         this.onKeyLine = true;
         this.stack[this.stack.length - 1] = map;
@@ -6527,15 +6527,15 @@ var require_parser = __commonJS((exports) => {
               } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                 const start2 = getFirstKeyStartProps(it.start);
                 const key = it.key;
-                const sep2 = it.sep;
-                sep2.push(this.sourceToken);
+                const sep3 = it.sep;
+                sep3.push(this.sourceToken);
                 delete it.key;
                 delete it.sep;
                 this.stack.push({
                   type: "block-map",
                   offset: this.offset,
                   indent: this.indent,
-                  items: [{ start: start2, key, sep: sep2 }]
+                  items: [{ start: start2, key, sep: sep3 }]
                 });
               } else if (start.length > 0) {
                 it.sep = it.sep.concat(start, this.sourceToken);
@@ -6729,13 +6729,13 @@ var require_parser = __commonJS((exports) => {
           const prev = getPrevProps(parent);
           const start = getFirstKeyStartProps(prev);
           fixFlowSeqItems(fc);
-          const sep2 = fc.end.splice(1, fc.end.length);
-          sep2.push(this.sourceToken);
+          const sep3 = fc.end.splice(1, fc.end.length);
+          sep3.push(this.sourceToken);
           const map = {
             type: "block-map",
             offset: fc.offset,
             indent: fc.indent,
-            items: [{ start, key: fc, sep: sep2 }]
+            items: [{ start, key: fc, sep: sep3 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -6959,8 +6959,8 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync16, statSync as statSync11 } from "fs";
-import { join as join27, resolve as resolve6, sep as sep8 } from "path";
+import { existsSync as existsSync19, statSync as statSync13 } from "fs";
+import { join as join30, resolve as resolve6, sep as sep10 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -13476,10 +13476,530 @@ function mount2(ctx) {
   });
 }
 
+// src/server/routes/checkpoints.ts
+import { execFileSync } from "child_process";
+import { appendFileSync, copyFileSync, cpSync, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readFileSync as readFileSync7, realpathSync as realpathSync4, rmSync, statSync as statSync4, writeFileSync as writeFileSync3 } from "fs";
+import { join as join9, sep as sep2 } from "path";
+
+// src/server/audit.ts
+var clip = (s, n2) => s === undefined ? null : s.slice(0, n2);
+function audit3(db, e) {
+  try {
+    db.insert(actions).values({ ts: new Date().toISOString(), actor: e.actor ?? "local", kind: e.kind, target: clip(e.target, 500), result: e.result, detail: clip(e.detail, 2000) }).run();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/server/routes/cost_ledger.ts
+import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
+import { join as join8 } from "path";
+var isNum = (v) => typeof v === "number" && Number.isFinite(v);
+var isObj2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var r6 = (n2) => Math.round(n2 * 1e6) / 1e6;
+var MEASURED_FIELDS = ["cost_usd", "input_tokens", "output_tokens", "cache_read_tokens", "cache_creation_tokens"];
+var BUDGET_WARN_FRACTION = 0.8;
+var NOT_MEASURED = "not measured";
+function readJson(path) {
+  try {
+    return JSON.parse(readFileSync6(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function recordIsMeasured(rec, skip) {
+  if (!isObj2(rec))
+    return false;
+  return MEASURED_FIELDS.some((k) => k !== skip && isNum(rec[k]) && rec[k] !== 0);
+}
+var DEFAULT_PRICING = {
+  fable: { input: 10, output: 50 },
+  "claude-fable-5": { input: 10, output: 50 },
+  opus: { input: 5, output: 25 },
+  sonnet: { input: 2, output: 10 },
+  haiku: { input: 1, output: 5 },
+  "gpt-5.3-codex": { input: 1.5, output: 12 },
+  "gpt-5.6-sol": { input: 2.5, output: 20 },
+  "gpt-5.6-terra": { input: 1.5, output: 12 },
+  "gpt-5.6-luna": { input: 0.5, output: 4 }
+};
+function pricing(lokiDir) {
+  const d = readJson(join8(lokiDir, "pricing.json"));
+  const models = isObj2(d) && isObj2(d.models) ? d.models : {};
+  return { ...DEFAULT_PRICING, ...models };
+}
+function modelCost(table, model, inp, out, cr = 0, cw = 0) {
+  const p = table[model.toLowerCase()] ?? table.sonnet ?? {};
+  const ir = isNum(p.input) ? p.input : 3;
+  const or2 = isNum(p.output) ? p.output : 15;
+  const crr = isNum(p.cache_read) ? p.cache_read : ir * 0.1;
+  const cwr = isNum(p.cache_write) ? p.cache_write : ir * 1.25;
+  return r6((inp * ir + out * or2 + cr * crr + cw * cwr) / 1e6);
+}
+function iterationRecords(lokiDir) {
+  const dir = join8(lokiDir, "metrics", "efficiency");
+  let names = [];
+  try {
+    names = readdirSync3(dir).filter((n2) => /^iteration-.*\.json$/.test(n2)).sort();
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const n2 of names) {
+    const d = readJson(join8(dir, n2));
+    if (isObj2(d))
+      out.push(d);
+  }
+  return out;
+}
+var num0 = (v) => isNum(v) ? v : 0;
+var priced = (table, d) => d.cost_usd === null || d.cost_usd === undefined ? modelCost(table, String(d.model ?? "sonnet").toLowerCase(), num0(d.input_tokens), num0(d.output_tokens), num0(d.cache_read_tokens), num0(d.cache_creation_tokens)) : num0(d.cost_usd);
+function costSnapshot(lokiDir) {
+  const table = pricing(lokiDir);
+  let tIn = 0, tOut = 0, tCr = 0, tCw = 0, est = 0;
+  let recorded = false, unknownUsd = false;
+  const byPhase = {}, byModel = {};
+  for (const d of iterationRecords(lokiDir)) {
+    const measured = recordIsMeasured(d);
+    if (measured)
+      recorded = true;
+    const tokMeasured = recordIsMeasured(d, "cost_usd");
+    const inp = num0(d.input_tokens), out = num0(d.output_tokens), cr = num0(d.cache_read_tokens), cw = num0(d.cache_creation_tokens);
+    const model = String(d.model ?? "sonnet").toLowerCase();
+    const phase = String(d.phase ?? "unknown");
+    tIn += inp;
+    tOut += out;
+    tCr += cr;
+    tCw += cw;
+    const cost = priced(table, d);
+    est += cost;
+    for (const [bucket, name] of [[byPhase, phase], [byModel, model]]) {
+      const b = bucket[name] ??= { input_tokens: 0, output_tokens: 0, cost_usd: 0, measured: false, tokens_measured: false };
+      b.input_tokens += inp;
+      b.output_tokens += out;
+      b.cost_usd += cost;
+      b.measured ||= measured;
+      b.tokens_measured ||= tokMeasured;
+    }
+  }
+  if (tIn === 0 && tOut === 0) {
+    const ctx = readJson(join8(lokiDir, "context", "tracking.json"));
+    const totals = isObj2(ctx) && isObj2(ctx.totals) ? ctx.totals : {};
+    tIn = num0(totals.total_input);
+    tOut = num0(totals.total_output);
+    if (tIn > 0 || tOut > 0) {
+      recorded = true;
+      if (isNum(totals.total_cost_usd))
+        est = totals.total_cost_usd;
+      else
+        unknownUsd = true;
+      const model = String(isObj2(ctx) && ctx.provider || "unknown").toLowerCase();
+      const per = isObj2(ctx) && Array.isArray(ctx.per_iteration) ? ctx.per_iteration : [];
+      for (const it of per) {
+        if (!isObj2(it))
+          continue;
+        const b = byModel[model] ??= { input_tokens: 0, output_tokens: 0, cost_usd: 0, measured: false, tokens_measured: true };
+        b.input_tokens += num0(it.input_tokens);
+        b.output_tokens += num0(it.output_tokens);
+        if (isNum(it.cost_usd)) {
+          b.cost_usd += it.cost_usd;
+          b.measured = true;
+        }
+      }
+    }
+  }
+  let limit = null, used = null, remaining = null;
+  const bd = readJson(join8(lokiDir, "metrics", "budget.json"));
+  if (isObj2(bd) && isNum(bd.limit)) {
+    limit = bd.limit;
+    if (recorded && !unknownUsd) {
+      used = est;
+      remaining = Math.max(0, limit - used);
+    }
+  }
+  const readIn = tIn + tCr;
+  const fmt = (m) => Object.fromEntries(Object.entries(m).map(([k, v]) => [k, {
+    input_tokens: v.tokens_measured ? v.input_tokens : null,
+    output_tokens: v.tokens_measured ? v.output_tokens : null,
+    cost_usd: v.measured ? r6(v.cost_usd) : null
+  }]));
+  return {
+    total_input_tokens: recorded ? tIn : null,
+    total_output_tokens: recorded ? tOut : null,
+    total_cache_read_tokens: recorded ? tCr : null,
+    total_cache_creation_tokens: recorded ? tCw : null,
+    total_tokens: recorded ? tIn + tOut + tCr + tCw : null,
+    cache_hit_ratio: readIn > 0 ? Math.round(tCr / readIn * 1e4) / 1e4 : null,
+    estimated_cost_usd: recorded && !unknownUsd ? r6(est) : null,
+    cost_recorded: recorded,
+    by_phase: fmt(byPhase),
+    by_model: fmt(byModel),
+    budget_limit: limit,
+    budget_used: limit !== null && used !== null ? r6(used) : null,
+    budget_remaining: remaining !== null ? r6(remaining) : null,
+    ...recorded ? {} : { not_measured: NOT_MEASURED }
+  };
+}
+function budgetStatus(used, limit) {
+  if (limit === null || limit <= 0)
+    return "none";
+  if (used === null)
+    return "unknown";
+  if (used >= limit)
+    return "exceeded";
+  return used >= BUDGET_WARN_FRACTION * limit ? "warn" : "ok";
+}
+function budgetSnapshot(lokiDir) {
+  const table = pricing(lokiDir);
+  let total = 0, recorded = false, unmeasured = 0;
+  for (const d of iterationRecords(lokiDir)) {
+    if (recordIsMeasured(d))
+      recorded = true;
+    else
+      unmeasured++;
+    total += priced(table, d);
+  }
+  let limit = null;
+  const bd = readJson(join8(lokiDir, "metrics", "budget.json"));
+  if (isObj2(bd)) {
+    const l = bd.limit || bd.budget_limit;
+    limit = isNum(l) ? l : null;
+  }
+  if (limit === null && process.env.LOKI_BUDGET_LIMIT) {
+    const e = Number(process.env.LOKI_BUDGET_LIMIT);
+    if (Number.isFinite(e))
+      limit = e;
+  }
+  const used = recorded ? r6(total) : null;
+  const ok = limit !== null && limit > 0 && used !== null;
+  const status = budgetStatus(used, limit);
+  return {
+    limit,
+    used,
+    remaining: ok ? r6(Math.max(0, limit - used)) : null,
+    percent_used: ok ? Math.round(used / limit * 1e4) / 100 : null,
+    status,
+    warn_threshold_percent: Math.round(BUDGET_WARN_FRACTION * 100),
+    exceeded: status === "exceeded",
+    partial: recorded && unmeasured > 0
+  };
+}
+function costTimeline(lokiDir) {
+  const table = pricing(lokiDir);
+  const recs = iterationRecords(lokiDir).map((d, i) => ({ d, i })).sort((a, b) => num0(Number(a.d.iteration)) - num0(Number(b.d.iteration)) || a.i - b.i).map((x) => x.d);
+  const iterations = [];
+  let cum = 0, recorded = false, unmeasured = 0;
+  for (const d of recs) {
+    const measured = recordIsMeasured(d);
+    if (measured)
+      recorded = true;
+    else
+      unmeasured++;
+    const model = String(d.model ?? "sonnet").toLowerCase();
+    cum += priced(table, d);
+    iterations.push({
+      iteration: d.iteration ?? null,
+      timestamp: d.timestamp ?? null,
+      model: d.model ? model : null,
+      phase: d.phase ?? "unknown",
+      provider: d.provider ?? null,
+      input_tokens: measured ? num0(d.input_tokens) : null,
+      output_tokens: measured ? num0(d.output_tokens) : null,
+      cost_usd: measured ? r6(priced(table, d)) : null,
+      cumulative_usd: measured ? r6(cum) : null
+    });
+  }
+  const runs2 = [];
+  let projectTotal = 0, runsMeasured = 0;
+  const proofs = join8(lokiDir, "proofs");
+  let entries = [];
+  try {
+    entries = readdirSync3(proofs).sort();
+  } catch {}
+  for (const e of entries) {
+    try {
+      if (!statSync3(join8(proofs, e)).isDirectory())
+        continue;
+    } catch {
+      continue;
+    }
+    const p = readJson(join8(proofs, e, "proof.json"));
+    if (!isObj2(p))
+      continue;
+    const cost = isObj2(p.cost) ? p.cost : {};
+    const usd = isNum(cost.usd) ? cost.usd : null;
+    if (usd !== null) {
+      projectTotal += usd;
+      runsMeasured++;
+    }
+    runs2.push({
+      run_id: p.run_id ?? e,
+      generated_at: p.generated_at ?? null,
+      model: isObj2(p.provider) ? p.provider.model ?? null : null,
+      cost_usd: usd !== null ? r6(usd) : null,
+      cost_partial: cost.cost_partial === true,
+      files_changed: isObj2(p.files_changed) ? p.files_changed.count ?? null : null,
+      final_verdict: isObj2(p.council) ? p.council.final_verdict ?? null : null
+    });
+  }
+  runs2.sort((a, b) => String(b.generated_at ?? "").localeCompare(String(a.generated_at ?? "")));
+  return {
+    current_run: { iterations, total_usd: recorded ? r6(cum) : null, cost_recorded: recorded, partial: recorded && unmeasured > 0, unmeasured_iterations: unmeasured },
+    runs: runs2,
+    runs_count: runs2.length,
+    project_total_usd: runsMeasured ? r6(projectTotal) : null,
+    project_total_partial: runsMeasured > 0 && runsMeasured < runs2.length,
+    budget: budgetSnapshot(lokiDir),
+    ...recorded || runsMeasured ? {} : { not_measured: NOT_MEASURED }
+  };
+}
+var lokiDirOf = (repoDir) => join8(repoDir, ".loki");
+var lokiDirExists = (repoDir) => existsSync4(lokiDirOf(repoDir));
+function mount3(ctx) {
+  const deny = { error: "loopback only without a token" };
+  ctx.app.get("/v1/cost/snapshot", (c) => probeAllowed(ctx, c) ? c.json(costSnapshot(lokiDirOf(ctx.repoDir))) : c.json(deny, 403));
+  ctx.app.get("/v1/cost/timeline", (c) => probeAllowed(ctx, c) ? c.json(costTimeline(lokiDirOf(ctx.repoDir))) : c.json(deny, 403));
+}
+
+// src/server/routes/checkpoints.ts
+var isObj3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var str2 = (v) => typeof v === "string" && v !== "" ? v : null;
+var SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
+var MAX_CHECKPOINTS = 50;
+var validCheckpointId = (id) => SAFE_ID.test(id);
+var storeOf = (repoDir) => join9(repoDir, ".loki", "state", "checkpoints");
+var lokiOf = (repoDir) => join9(repoDir, ".loki");
+var readObj = (f) => {
+  try {
+    const d = JSON.parse(readFileSync7(f, "utf8"));
+    return isObj3(d) ? d : null;
+  } catch {
+    return null;
+  }
+};
+var stamp = (d) => d.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "").replace("T", "-");
+function listCheckpoints(repoDir, limit = 20) {
+  const store = storeOf(repoDir);
+  let lines = [];
+  try {
+    lines = readFileSync7(join9(store, "index.jsonl"), "utf8").split(`
+`);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const line2 of lines) {
+    if (!line2.trim())
+      continue;
+    let raw2;
+    try {
+      raw2 = JSON.parse(line2);
+    } catch {
+      continue;
+    }
+    if (!isObj3(raw2))
+      continue;
+    const id = String(raw2.id ?? "");
+    if (!validCheckpointId(id))
+      continue;
+    const it = raw2.iter ?? raw2.iteration;
+    const cp = {
+      id,
+      created_at: str2(raw2.ts) ?? str2(raw2.created_at) ?? str2(raw2.timestamp),
+      git_sha: str2(raw2.sha) ?? str2(raw2.git_sha),
+      message: str2(raw2.task) ?? str2(raw2.message) ?? str2(raw2.task_description),
+      iteration: Number.isInteger(it) ? it : null
+    };
+    const meta = readObj(join9(store, id, "metadata.json"));
+    if (meta) {
+      cp.git_branch = str2(meta.git_branch);
+      cp.provider = str2(meta.provider);
+      cp.phase = str2(meta.phase);
+      cp.message ??= str2(meta.task_description);
+      cp.git_sha ??= str2(meta.git_sha);
+      cp.created_at ??= str2(meta.timestamp);
+      cp.files_count = countFiles(join9(store, id));
+    }
+    out.push(cp);
+  }
+  return out.reverse().slice(0, limit);
+}
+function countFiles(dir) {
+  let n2 = 0;
+  const walk = (d, top) => {
+    for (const e of readdirSync4(d, { withFileTypes: true })) {
+      if (e.isDirectory())
+        walk(join9(d, e.name), false);
+      else if (e.isFile() && !(top && e.name === "metadata.json"))
+        n2++;
+    }
+  };
+  try {
+    walk(dir, true);
+  } catch {}
+  return n2;
+}
+function getCheckpoint(repoDir, id) {
+  return validCheckpointId(id) ? readObj(join9(storeOf(repoDir), id, "metadata.json")) : null;
+}
+var gitHead = (repoDir) => {
+  try {
+    return execFileSync("git", ["rev-parse", "HEAD"], { cwd: repoDir, timeout: 5000, stdio: ["ignore", "pipe", "ignore"] }).toString().trim() || null;
+  } catch {
+    return null;
+  }
+};
+function createCheckpoint(repoDir, message, now = new Date) {
+  const store = storeOf(repoDir), loki = lokiOf(repoDir);
+  mkdirSync3(store, { recursive: true });
+  const id = `chk-${stamp(now)}`, dir = join9(store, id);
+  mkdirSync3(dir, { recursive: true });
+  for (const f of ["dashboard-state.json", "session.json"]) {
+    try {
+      if (existsSync5(join9(loki, f)))
+        copyFileSync(join9(loki, f), join9(dir, f));
+    } catch {}
+  }
+  try {
+    if (existsSync5(join9(loki, "queue")))
+      cpSync(join9(loki, "queue"), join9(dir, "queue"), { recursive: true });
+  } catch {}
+  const meta = { id, created_at: now.toISOString(), git_sha: gitHead(repoDir), message: message || null, files: readdirSync4(dir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name) };
+  writeFileSync3(join9(dir, "metadata.json"), JSON.stringify(meta, null, 2));
+  appendFileSync(join9(store, "index.jsonl"), `${JSON.stringify(meta)}
+`);
+  const mine = readdirSync4(store, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name.startsWith("chk-")).map((e) => e.name).sort();
+  while (mine.length > MAX_CHECKPOINTS)
+    rmSync(join9(store, mine.shift()), { recursive: true, force: true });
+  return meta;
+}
+function rollbackCheckpoint(repoDir, id, now = new Date) {
+  const store = storeOf(repoDir), loki = lokiOf(repoDir);
+  let real2 = "", realStore = "";
+  try {
+    real2 = realpathSync4(join9(store, id));
+    realStore = realpathSync4(store);
+  } catch {
+    return null;
+  }
+  if (!real2.startsWith(`${realStore}${sep2}`) || !statSync4(real2).isDirectory())
+    return null;
+  const preId = `rb-pre-${stamp(now)}`, pre = join9(store, preId);
+  mkdirSync3(pre, { recursive: true });
+  const notStore = (src) => src !== store;
+  for (const n2 of ["session.json", "dashboard-state.json", "CONTINUITY.md", "autonomy-state.json"]) {
+    try {
+      if (existsSync5(join9(loki, n2)))
+        copyFileSync(join9(loki, n2), join9(pre, n2));
+    } catch {}
+  }
+  for (const d of ["state", "queue"]) {
+    try {
+      if (existsSync5(join9(loki, d)))
+        cpSync(join9(loki, d), join9(pre, d), { recursive: true, filter: notStore });
+    } catch {}
+  }
+  const preMeta = { id: preId, created_at: now.toISOString(), message: `pre-rollback snapshot (before restoring ${id})`, created_by: "control plane rollback" };
+  writeFileSync3(join9(pre, "metadata.json"), JSON.stringify(preMeta, null, 2));
+  appendFileSync(join9(store, "index.jsonl"), `${JSON.stringify(preMeta)}
+`);
+  let restored = 0;
+  const errors = [];
+  for (const e of readdirSync4(real2, { withFileTypes: true })) {
+    if (e.name === "metadata.json" || e.name === "worktree-snapshot.txt")
+      continue;
+    const src = join9(real2, e.name);
+    try {
+      if (lstatSync(src).isSymbolicLink()) {
+        errors.push(`${e.name}: symlink skipped`);
+        continue;
+      }
+      cpSync(src, join9(loki, e.name), { recursive: true, filter: (s) => s !== join9(real2, "state", "checkpoints") });
+      restored++;
+    } catch (err) {
+      errors.push(`${e.name}: ${err.message}`);
+    }
+  }
+  return { id, restored, pre_rollback_snapshot: preId, errors };
+}
+function auditSummary(db, days, now = Date.now()) {
+  const since = new Date(now - days * 86400000).toISOString();
+  const where = gte(audit.ts, since);
+  const total = db.select({ n: sql`count(*)` }).from(audit).where(where).get()?.n ?? 0;
+  const by = (col) => Object.fromEntries(db.select({ k: col, n: sql`count(*)` }).from(audit).where(where).groupBy(col).all().map((r) => [r.k, r.n]));
+  return {
+    period_days: days,
+    total_events: total,
+    by_action: by(audit.action),
+    by_user: by(audit.actor),
+    successful_events: null,
+    failed_events: null,
+    by_resource_type: null,
+    recent_failures: null,
+    not_measured: NOT_MEASURED
+  };
+}
+var parseDays = (v) => {
+  const n2 = Number.parseInt(v ?? "7", 10);
+  return Number.isFinite(n2) && n2 >= 1 && n2 <= 3650 ? n2 : 7;
+};
+var parseLimit = (v) => {
+  const n2 = Number.parseInt(v ?? "20", 10);
+  return Number.isFinite(n2) ? Math.min(Math.max(n2, 1), 200) : 20;
+};
+function mount4(ctx) {
+  const deny = { error: "loopback only without a token" };
+  const { app, act, db, repoDir } = ctx;
+  app.get("/v1/checkpoints", (c) => probeAllowed(ctx, c) ? c.json({ checkpoints: listCheckpoints(repoDir, parseLimit(c.req.query("limit"))) }) : c.json(deny, 403));
+  app.get("/v1/checkpoints/:id", (c) => {
+    if (!probeAllowed(ctx, c))
+      return c.json(deny, 403);
+    const id = c.req.param("id");
+    if (!validCheckpointId(id))
+      return c.json({ error: "invalid checkpoint id" }, 400);
+    const m = getCheckpoint(repoDir, id);
+    return m ? c.json(m) : c.json({ error: "checkpoint not found" }, 404);
+  });
+  app.get("/v1/audit/summary", (c) => probeAllowed(ctx, c) ? c.json(auditSummary(db, parseDays(c.req.query("days")))) : c.json(deny, 403));
+  act.post("/v1/checkpoints", async (c) => {
+    if (!ctx.local(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const body = await c.req.json().catch(() => ({}));
+    const message = typeof body.message === "string" ? body.message : "";
+    if (message.length > 500)
+      return c.json({ error: "message must be at most 500 characters" }, 400);
+    try {
+      const meta = createCheckpoint(repoDir, message);
+      audit3(db, { kind: "checkpoint.create", target: String(meta.id), result: "ok" });
+      return c.json(meta, 201);
+    } catch (e) {
+      audit3(db, { kind: "checkpoint.create", result: "error", detail: e.message });
+      return c.json({ error: "could not create the checkpoint" }, 500);
+    }
+  });
+  act.post("/v1/checkpoints/:id/rollback", (c) => {
+    if (!ctx.local(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const id = c.req.param("id");
+    if (!validCheckpointId(id)) {
+      audit3(db, { kind: "checkpoint.rollback", target: id.slice(0, 128), result: "refused", detail: "invalid id" });
+      return c.json({ error: "invalid checkpoint id" }, 400);
+    }
+    const r = rollbackCheckpoint(repoDir, id);
+    if (!r) {
+      audit3(db, { kind: "checkpoint.rollback", target: id, result: "refused", detail: "not found" });
+      return c.json({ error: "checkpoint not found" }, 404);
+    }
+    audit3(db, { kind: "checkpoint.rollback", target: id, result: r.errors.length ? "partial" : "ok", detail: `restored ${r.restored}; pre-rollback snapshot ${r.pre_rollback_snapshot}` });
+    return c.json({ ...r, message: `Restored ${r.restored} item(s) from ${id}. Prior state saved as ${r.pre_rollback_snapshot} (undo this rollback by restoring it).` });
+  });
+}
+
 // src/server/routes/config.ts
 import { createHash as createHash5, randomBytes } from "crypto";
-import { closeSync as closeSync3, fchmodSync, fsyncSync, lstatSync, openSync as openSync3, readFileSync as readFileSync7, realpathSync as realpathSync4, renameSync as renameSync2, statSync as statSync4, unlinkSync, writeSync as writeSync2 } from "fs";
-import { basename as basename3, dirname as dirname2, join as join9, sep as sep2 } from "path";
+import { closeSync as closeSync3, fchmodSync, fsyncSync, lstatSync as lstatSync2, openSync as openSync3, readFileSync as readFileSync9, realpathSync as realpathSync5, renameSync as renameSync2, statSync as statSync6, unlinkSync, writeSync as writeSync2 } from "fs";
+import { basename as basename3, dirname as dirname2, join as join11, sep as sep3 } from "path";
 
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
@@ -13527,22 +14047,11 @@ var $stringify = publicApi.stringify;
 var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
-// src/server/audit.ts
-var clip = (s, n2) => s === undefined ? null : s.slice(0, n2);
-function audit3(db, e) {
-  try {
-    db.insert(actions).values({ ts: new Date().toISOString(), actor: e.actor ?? "local", kind: e.kind, target: clip(e.target, 500), result: e.result, detail: clip(e.detail, 2000) }).run();
-    return true;
-  } catch {
-    return false;
-  }
-}
-
 // src/server/spawn.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync8, statSync as statSync5 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename2, join as join8, resolve as resolve2 } from "path";
+import { basename as basename2, join as join10, resolve as resolve2 } from "path";
 var ISSUE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,8}$/;
 var TASK = /^[A-Za-z0-9][A-Za-z0-9 .,_/#@+=-]{0,499}$/;
 var hasDotDot = (t) => t.split(/[\\/ ]/).some((seg) => seg.startsWith(".."));
@@ -13558,8 +14067,8 @@ var BUDGET = /^(?:[1-9][0-9]{0,5}|0)(?:\.[0-9]{1,2})?$/;
 var WORKSPACE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
 function registryRepos2(env = process.env) {
   try {
-    const j = JSON.parse(readFileSync6(join8(env.HOME || homedir3(), ".loki", "dashboard", "projects.json"), "utf8"));
-    return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync4(p) && statSync3(p).isDirectory());
+    const j = JSON.parse(readFileSync8(join10(env.HOME || homedir3(), ".loki", "dashboard", "projects.json"), "utf8"));
+    return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync6(p) && statSync5(p).isDirectory());
   } catch {
     return [];
   }
@@ -13635,7 +14144,7 @@ function originOk(origin) {
     return false;
   }
 }
-function mount3(ctx) {
+function mount5(ctx) {
   const { act, db, repoDir, local } = ctx;
   const inflight = new Set;
   const handler = async (c) => {
@@ -13803,19 +14312,19 @@ var loki_yaml_schema_default = {
 // src/server/routes/config.ts
 var MAX_BODY = 1e5;
 var MAX_FILE = 1e6;
-var isObj2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isObj4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function validateConfig(value, s = loki_yaml_schema_default, path = "") {
   const at = path || "(root)";
   const errs = [];
   const join22 = (k) => path ? `${path}.${k}` : k;
   if (s.type === "object") {
-    if (!isObj2(value))
+    if (!isObj4(value))
       return [`${at}: must be an object`];
     for (const [k, v] of Object.entries(value)) {
       const sub = Object.hasOwn(s.properties ?? {}, k) ? s.properties[k] : undefined;
       if (sub)
         errs.push(...validateConfig(v, sub, join22(k)));
-      else if (isObj2(s.additionalProperties))
+      else if (isObj4(s.additionalProperties))
         errs.push(...validateConfig(v, s.additionalProperties, join22(k)));
       else if (s.additionalProperties === false)
         errs.push(`${join22(k)}: unknown key`);
@@ -13884,7 +14393,7 @@ function findSecrets(v, path = "") {
     return looksLikeSecret(v) ? [path || "(root)"] : [];
   if (Array.isArray(v))
     return v.flatMap((x, i) => findSecrets(x, `${path}[${i}]`));
-  if (isObj2(v)) {
+  if (isObj4(v)) {
     return Object.entries(v).flatMap(([k, x]) => [
       ...looksLikeSecret(k) ? [`${path ? `${path}.` : ""}(key)`] : [],
       ...findSecrets(x, path ? `${path}.${k}` : k)
@@ -13893,10 +14402,10 @@ function findSecrets(v, path = "") {
   return [];
 }
 var sha = (b) => createHash5("sha256").update(b).digest("hex");
-var canon = (v) => Array.isArray(v) ? v.map(canon) : isObj2(v) ? Object.fromEntries(Object.keys(v).sort().map((k) => [k, canon(v[k])])) : v;
+var canon = (v) => Array.isArray(v) ? v.map(canon) : isObj4(v) ? Object.fromEntries(Object.keys(v).sort().map((k) => [k, canon(v[k])])) : v;
 var deepEq = (a, b) => JSON.stringify(canon(a)) === JSON.stringify(canon(b));
 function sync(doc, path, prev, next) {
-  if (isObj2(next) && isObj2(prev)) {
+  if (isObj4(next) && isObj4(prev)) {
     for (const k of Object.keys(prev))
       if (!Object.hasOwn(next, k))
         doc.deleteIn([...path, k]);
@@ -13922,10 +14431,10 @@ function tooDeep(v, max = MAX_DEPTH) {
   }
   return false;
 }
-var hasShell = (w) => isObj2(w) && (isObj2(w.integration) && ("command" in w.integration) || Array.isArray(w.repos) && w.repos.some((r) => isObj2(r) && ("setup" in r)));
+var hasShell = (w) => isObj4(w) && (isObj4(w.integration) && ("command" in w.integration) || Array.isArray(w.repos) && w.repos.some((r) => isObj4(r) && ("setup" in r)));
 function shellLocked(prev, next) {
-  const pw = isObj2(prev) && isObj2(prev.workspaces) ? prev.workspaces : {};
-  const nw = isObj2(next) && isObj2(next.workspaces) ? next.workspaces : {};
+  const pw = isObj4(prev) && isObj4(prev.workspaces) ? prev.workspaces : {};
+  const nw = isObj4(next) && isObj4(next.workspaces) ? next.workspaces : {};
   for (const name of new Set([...Object.keys(pw), ...Object.keys(nw)])) {
     const a = Object.hasOwn(pw, name) ? pw[name] : undefined;
     const b = Object.hasOwn(nw, name) ? nw[name] : undefined;
@@ -13935,16 +14444,16 @@ function shellLocked(prev, next) {
   return false;
 }
 function traversalPaths(cfg, prev = {}) {
-  const pw = isObj2(prev) && isObj2(prev.workspaces) ? prev.workspaces : {};
+  const pw = isObj4(prev) && isObj4(prev.workspaces) ? prev.workspaces : {};
   const out = [];
-  const ws = isObj2(cfg) && isObj2(cfg.workspaces) ? cfg.workspaces : {};
+  const ws = isObj4(cfg) && isObj4(cfg.workspaces) ? cfg.workspaces : {};
   for (const [name, w] of Object.entries(ws)) {
-    if (!isObj2(w) || !Array.isArray(w.repos))
+    if (!isObj4(w) || !Array.isArray(w.repos))
       continue;
     w.repos.forEach((r, i) => {
-      if (isObj2(r) && typeof r.path === "string" && r.path.split(/[\\/]+/).includes("..")) {
-        const old = Object.hasOwn(pw, name) && isObj2(pw[name]) && Array.isArray(pw[name].repos) ? pw[name].repos[i] : undefined;
-        if (!(isObj2(old) && old.path === r.path))
+      if (isObj4(r) && typeof r.path === "string" && r.path.split(/[\\/]+/).includes("..")) {
+        const old = Object.hasOwn(pw, name) && isObj4(pw[name]) && Array.isArray(pw[name].repos) ? pw[name].repos[i] : undefined;
+        if (!(isObj4(old) && old.path === r.path))
           out.push(`workspaces.${name}.repos[${i}].path`);
       }
     });
@@ -13958,7 +14467,7 @@ function mergeKeyPaths(v) {
     const [x, p] = stack.pop();
     if (Array.isArray(x))
       x.forEach((y, i) => stack.push([y, `${p}[${i}]`]));
-    else if (isObj2(x))
+    else if (isObj4(x))
       for (const [k, y] of Object.entries(x)) {
         if (k === "<<")
           out.push(p || "(root)");
@@ -14003,27 +14512,27 @@ function renderVerified(doc, next, quote = needsQuote) {
 function resolveConfigFile(repoDir) {
   let root;
   try {
-    root = realpathSync4(repoDir);
+    root = realpathSync5(repoDir);
   } catch {
     return { ok: false, status: 400, error: "repo directory not found" };
   }
-  const p = join9(root, "loki.yaml");
+  const p = join11(root, "loki.yaml");
   let st;
   try {
-    st = lstatSync(p);
+    st = lstatSync2(p);
   } catch {
     return { ok: true, file: p, exists: false };
   }
   if (st.isSymbolicLink()) {
     let real2;
     try {
-      real2 = realpathSync4(p);
+      real2 = realpathSync5(p);
     } catch {
       return { ok: false, status: 400, error: "loki.yaml is a broken symlink" };
     }
-    if (!real2.startsWith(root + sep2))
+    if (!real2.startsWith(root + sep3))
       return { ok: false, status: 400, error: "loki.yaml is a symlink that resolves outside the repo" };
-    if (!statSync4(real2).isFile())
+    if (!statSync6(real2).isFile())
       return { ok: false, status: 422, error: "loki.yaml is not a regular file" };
     return { ok: true, file: real2, exists: true };
   }
@@ -14032,7 +14541,7 @@ function resolveConfigFile(repoDir) {
   return { ok: true, file: p, exists: true };
 }
 function atomicWrite(file, text2, mode) {
-  const tmp = join9(dirname2(file), `.${basename3(file)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
+  const tmp = join11(dirname2(file), `.${basename3(file)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
   const fd = openSync3(tmp, "wx", mode);
   try {
     writeSync2(fd, text2);
@@ -14057,7 +14566,7 @@ function atomicWrite(file, text2, mode) {
 }
 var etagOf = (raw2) => `"${sha(raw2)}"`;
 var norm = (h) => h ? h.trim().replace(/^W\//, "").replace(/^"|"$/g, "") : null;
-function mount4(ctx) {
+function mount6(ctx) {
   const { act, db, repoDir, local } = ctx;
   const deny = (c, kind, status, error, extra = {}) => {
     audit3(db, { kind, target: "loki.yaml", result: status === 409 ? "conflict" : status === 500 ? "error" : "refused", detail: error });
@@ -14072,9 +14581,9 @@ function mount4(ctx) {
         return deny(c, "config.read", r.status, r.error);
       let raw2 = "";
       if (r.exists) {
-        if (statSync4(r.file).size > MAX_FILE)
+        if (statSync6(r.file).size > MAX_FILE)
           return deny(c, "config.read", 413, "loki.yaml is too large");
-        raw2 = readFileSync7(r.file, "utf8");
+        raw2 = readFileSync9(r.file, "utf8");
       }
       const doc = $parseDocument(raw2);
       let config = {};
@@ -14117,13 +14626,13 @@ function mount4(ctx) {
       }
       if (tooDeep(body))
         return refuse(422, "config is nested too deeply");
-      const next = isObj2(body) ? body.config : undefined;
-      if (!isObj2(next))
+      const next = isObj4(body) ? body.config : undefined;
+      if (!isObj4(next))
         return refuse(400, "body must be {config: object}");
       const merge = mergeKeyPaths(next);
       if (merge.length)
         return refuse(422, "the YAML merge key << is not allowed", { paths: merge });
-      const badNames = Object.keys(isObj2(next.workspaces) ? next.workspaces : {}).filter((n2) => !/^[A-Za-z0-9_.-]+$/.test(n2) || n2 === "." || n2 === "..");
+      const badNames = Object.keys(isObj4(next.workspaces) ? next.workspaces : {}).filter((n2) => !/^[A-Za-z0-9_.-]+$/.test(n2) || n2 === "." || n2 === "..");
       if (badNames.length)
         return refuse(422, "workspace names may only use letters, digits, _ . and -", { paths: badNames.map((_n, i) => `workspaces.(name ${i + 1})`) });
       const secrets = findSecrets(next);
@@ -14137,9 +14646,9 @@ function mount4(ctx) {
         return refuse(r.status, r.error);
       let raw2 = "";
       if (r.exists) {
-        if (statSync4(r.file).size > MAX_FILE)
+        if (statSync6(r.file).size > MAX_FILE)
           return refuse(400, "loki.yaml is too large");
-        raw2 = readFileSync7(r.file, "utf8");
+        raw2 = readFileSync9(r.file, "utf8");
       }
       if (!(ifMatch === "*" ? r.exists : sha(raw2) === ifMatch))
         return refuse(409, "loki.yaml changed since it was read", { etag: etagOf(raw2) });
@@ -14164,7 +14673,7 @@ function mount4(ctx) {
         return refuse(400, "could not render the config safely");
       const changed = [...new Set([...Object.keys(prev), ...Object.keys(next)])].filter((k) => !deepEq(prev[k], next[k]));
       try {
-        const mode = r.exists ? statSync4(r.file).mode & 511 : 420;
+        const mode = r.exists ? statSync6(r.file).mode & 511 : 420;
         if (r.exists)
           atomicWrite(`${r.file}.bak`, raw2, 384);
         atomicWrite(r.file, out, mode);
@@ -14182,19 +14691,19 @@ function mount4(ctx) {
 }
 
 // src/server/routes/control.ts
-import { existsSync as existsSync5, realpathSync as realpathSync5 } from "fs";
-import { join as join11, resolve as resolve3, sep as sep3 } from "path";
+import { existsSync as existsSync7, realpathSync as realpathSync6 } from "fs";
+import { join as join13, resolve as resolve3, sep as sep4 } from "path";
 
 // ../../loki-ts/src/util/run_pid.ts
-import { execFileSync } from "child_process";
-import { chmodSync as chmodSync2, readFileSync as readFileSync8, renameSync as renameSync3, rmSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join10 } from "path";
-var runPidPath = (runDir) => join10(runDir, "run.pid");
+import { execFileSync as execFileSync2 } from "child_process";
+import { chmodSync as chmodSync2, readFileSync as readFileSync10, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
+import { join as join12 } from "path";
+var runPidPath = (runDir) => join12(runDir, "run.pid");
 function processStartTime(pid) {
   if (!Number.isInteger(pid) || pid <= 1)
     return null;
   try {
-    const out = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8", timeout: 5000, env: { ...process.env, LC_ALL: "C" }, stdio: ["ignore", "pipe", "ignore"] });
+    const out = execFileSync2("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8", timeout: 5000, env: { ...process.env, LC_ALL: "C" }, stdio: ["ignore", "pipe", "ignore"] });
     return out.trim().replace(/\s+/g, " ") || null;
   } catch {
     return null;
@@ -14202,7 +14711,7 @@ function processStartTime(pid) {
 }
 function readRunPid(runDir) {
   try {
-    const j = JSON.parse(readFileSync8(runPidPath(runDir), "utf8"));
+    const j = JSON.parse(readFileSync10(runPidPath(runDir), "utf8"));
     if (!Number.isInteger(j.pid) || j.pid <= 1 || typeof j.start !== "string" || typeof j.run_id !== "string" || !Array.isArray(j.argv))
       return null;
     return { pid: j.pid, start: j.start, argv: j.argv.map(String), run_id: j.run_id };
@@ -14229,7 +14738,7 @@ function verifyRunPid(runDir, runId, startOf = processStartTime) {
 // src/server/routes/control.ts
 var ID3 = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 var busy = new Set;
-function mount5(ctx) {
+function mount7(ctx) {
   const { act, db } = ctx;
   const bin = ctx.startBin ?? "loki", spawnIt = ctx.spawnImpl ?? spawnStart, answerDir = ctx.answerDir ?? defaultAnswerDir();
   const guarded = (kind, handler) => act.post(`/v1/runs/:source/:run/${kind}`, async (c) => {
@@ -14245,14 +14754,14 @@ function mount5(ctx) {
     const repoRow = db.select().from(localRepos).where(eq(localRepos.sourceId, source)).get();
     let repo = "";
     try {
-      repo = repoRow ? realpathSync5(repoRow.realpath) : "";
+      repo = repoRow ? realpathSync6(repoRow.realpath) : "";
     } catch {
       repo = "";
     }
     if (!repo)
       return done(404, "refused", { error: "this run's repo is not known on this machine" });
-    const runsRoot = join11(repo, ".loki", "runs"), runDir = resolve3(runsRoot, id);
-    if (!runDir.startsWith(runsRoot + sep3))
+    const runsRoot = join13(repo, ".loki", "runs"), runDir = resolve3(runsRoot, id);
+    if (!runDir.startsWith(runsRoot + sep4))
       return done(400, "refused", { error: "invalid run id" }, "path escape");
     return handler({ source, run: id, repo, runDir }, done);
   });
@@ -14299,7 +14808,7 @@ function mount5(ctx) {
       return done(404, "refused", { error: "run not found" });
     if (!blockedQuestion(loadEvents(db, a.source, a.run), row.verdict))
       return done(409, "refused", { error: "run is not BLOCKED, so there is nothing to resume" });
-    if (!existsSync5(join11(answerDir, a.source, `${a.run}.answer.txt`)))
+    if (!existsSync7(join13(answerDir, a.source, `${a.run}.answer.txt`)))
       return done(409, "refused", { error: "no answer recorded for this run; answer it first" });
     return launch(a, [bin, "answer", a.run], done);
   });
@@ -14326,333 +14835,63 @@ var add = (a, r) => {
 var dimVal = (d, r) => d === "day" ? r.startedAt ? r.startedAt.slice(0, 10) : NONE : d === "model" ? r.model ?? NONE : d === "provider" ? r.provider ?? NONE : r.originRepo ?? NONE;
 var round = (n2) => Math.round(n2 * 1e6) / 1e6;
 var out = (a) => ({ ...a.key, runs: a.runs, measured_runs: a.measured_runs, partial_runs: a.partial_runs, unmeasured_runs: a.unmeasured_runs, measured_usd: round(a.measured_usd), partial_usd: round(a.partial_usd), input_tokens: a.input_tokens, output_tokens: a.output_tokens });
-function mount6(ctx) {
+function mount8(ctx) {
   ctx.app.get("/v1/stats/cost", (c) => {
     const dims = (c.req.query("group") ?? "day").split(",").map((s) => s.trim()).filter(Boolean);
     if (dims.length === 0 || dims.some((d) => !COST_DIMS.includes(d))) {
       return c.json({ error: `group must be a comma list of ${COST_DIMS.join(", ")}` }, 400);
     }
-    const since = c.req.query("since");
-    if (since !== undefined && Number.isNaN(Date.parse(since)))
-      return c.json({ error: "since must be an ISO date" }, 400);
-    const q = ctx.db.select().from(runs);
-    const all = since ? q.where(gte(runs.startedAt, since)).all() : q.all();
-    const groups = new Map;
-    const total = mk({});
-    let priced = 0, unpriced = 0;
-    for (const r of all) {
-      const key = {};
-      for (const d of dims)
-        key[d] = dimVal(d, r);
-      const id = dims.map((d) => key[d]).join("\x00");
-      let g = groups.get(id);
-      if (!g) {
-        g = mk(key);
-        groups.set(id, g);
-      }
-      add(g, r);
-      add(total, r);
-      if (r.measuredSessions > 0)
-        priced++;
-      else
-        unpriced++;
-    }
-    const rows = [...groups.values()].map(out).sort((a, b) => {
-      for (const d of dims) {
-        const x = a[d], y = b[d];
-        if (x !== y)
-          return d === "day" ? y.localeCompare(x) : x.localeCompare(y);
-      }
-      return 0;
-    });
-    const { runs: n2, ...rest } = out(total);
-    return c.json({
-      group: dims,
-      since: since ?? null,
-      rows,
-      totals: { runs: n2, ...rest },
-      budget: { api_key_default_cap_usd: DEFAULT_API_KEY_CAP_USD, subscription_cap: null, api_key_runs: priced, subscription_runs: unpriced }
-    });
-  });
-}
-
-// src/server/routes/cost_ledger.ts
-import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync5 } from "fs";
-import { join as join12 } from "path";
-var isNum = (v) => typeof v === "number" && Number.isFinite(v);
-var isObj3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var r6 = (n2) => Math.round(n2 * 1e6) / 1e6;
-var MEASURED_FIELDS = ["cost_usd", "input_tokens", "output_tokens", "cache_read_tokens", "cache_creation_tokens"];
-var BUDGET_WARN_FRACTION = 0.8;
-var NOT_MEASURED = "not measured";
-function readJson(path) {
-  try {
-    return JSON.parse(readFileSync9(path, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function recordIsMeasured(rec, skip) {
-  if (!isObj3(rec))
-    return false;
-  return MEASURED_FIELDS.some((k) => k !== skip && isNum(rec[k]) && rec[k] !== 0);
-}
-var DEFAULT_PRICING = {
-  fable: { input: 10, output: 50 },
-  "claude-fable-5": { input: 10, output: 50 },
-  opus: { input: 5, output: 25 },
-  sonnet: { input: 2, output: 10 },
-  haiku: { input: 1, output: 5 },
-  "gpt-5.3-codex": { input: 1.5, output: 12 },
-  "gpt-5.6-sol": { input: 2.5, output: 20 },
-  "gpt-5.6-terra": { input: 1.5, output: 12 },
-  "gpt-5.6-luna": { input: 0.5, output: 4 }
-};
-function pricing(lokiDir) {
-  const d = readJson(join12(lokiDir, "pricing.json"));
-  const models = isObj3(d) && isObj3(d.models) ? d.models : {};
-  return { ...DEFAULT_PRICING, ...models };
-}
-function modelCost(table, model, inp, out2, cr = 0, cw = 0) {
-  const p = table[model.toLowerCase()] ?? table.sonnet ?? {};
-  const ir = isNum(p.input) ? p.input : 3;
-  const or2 = isNum(p.output) ? p.output : 15;
-  const crr = isNum(p.cache_read) ? p.cache_read : ir * 0.1;
-  const cwr = isNum(p.cache_write) ? p.cache_write : ir * 1.25;
-  return r6((inp * ir + out2 * or2 + cr * crr + cw * cwr) / 1e6);
-}
-function iterationRecords(lokiDir) {
-  const dir = join12(lokiDir, "metrics", "efficiency");
-  let names = [];
-  try {
-    names = readdirSync3(dir).filter((n2) => /^iteration-.*\.json$/.test(n2)).sort();
-  } catch {
-    return [];
-  }
-  const out2 = [];
-  for (const n2 of names) {
-    const d = readJson(join12(dir, n2));
-    if (isObj3(d))
-      out2.push(d);
-  }
-  return out2;
-}
-var num0 = (v) => isNum(v) ? v : 0;
-var priced = (table, d) => d.cost_usd === null || d.cost_usd === undefined ? modelCost(table, String(d.model ?? "sonnet").toLowerCase(), num0(d.input_tokens), num0(d.output_tokens), num0(d.cache_read_tokens), num0(d.cache_creation_tokens)) : num0(d.cost_usd);
-function costSnapshot(lokiDir) {
-  const table = pricing(lokiDir);
-  let tIn = 0, tOut = 0, tCr = 0, tCw = 0, est = 0;
-  let recorded = false, unknownUsd = false;
-  const byPhase = {}, byModel = {};
-  for (const d of iterationRecords(lokiDir)) {
-    const measured = recordIsMeasured(d);
-    if (measured)
-      recorded = true;
-    const tokMeasured = recordIsMeasured(d, "cost_usd");
-    const inp = num0(d.input_tokens), out2 = num0(d.output_tokens), cr = num0(d.cache_read_tokens), cw = num0(d.cache_creation_tokens);
-    const model = String(d.model ?? "sonnet").toLowerCase();
-    const phase = String(d.phase ?? "unknown");
-    tIn += inp;
-    tOut += out2;
-    tCr += cr;
-    tCw += cw;
-    const cost = priced(table, d);
-    est += cost;
-    for (const [bucket, name] of [[byPhase, phase], [byModel, model]]) {
-      const b = bucket[name] ??= { input_tokens: 0, output_tokens: 0, cost_usd: 0, measured: false, tokens_measured: false };
-      b.input_tokens += inp;
-      b.output_tokens += out2;
-      b.cost_usd += cost;
-      b.measured ||= measured;
-      b.tokens_measured ||= tokMeasured;
-    }
-  }
-  if (tIn === 0 && tOut === 0) {
-    const ctx = readJson(join12(lokiDir, "context", "tracking.json"));
-    const totals = isObj3(ctx) && isObj3(ctx.totals) ? ctx.totals : {};
-    tIn = num0(totals.total_input);
-    tOut = num0(totals.total_output);
-    if (tIn > 0 || tOut > 0) {
-      recorded = true;
-      if (isNum(totals.total_cost_usd))
-        est = totals.total_cost_usd;
-      else
-        unknownUsd = true;
-      const model = String(isObj3(ctx) && ctx.provider || "unknown").toLowerCase();
-      const per = isObj3(ctx) && Array.isArray(ctx.per_iteration) ? ctx.per_iteration : [];
-      for (const it of per) {
-        if (!isObj3(it))
-          continue;
-        const b = byModel[model] ??= { input_tokens: 0, output_tokens: 0, cost_usd: 0, measured: false, tokens_measured: true };
-        b.input_tokens += num0(it.input_tokens);
-        b.output_tokens += num0(it.output_tokens);
-        if (isNum(it.cost_usd)) {
-          b.cost_usd += it.cost_usd;
-          b.measured = true;
-        }
-      }
-    }
-  }
-  let limit = null, used = null, remaining = null;
-  const bd = readJson(join12(lokiDir, "metrics", "budget.json"));
-  if (isObj3(bd) && isNum(bd.limit)) {
-    limit = bd.limit;
-    if (recorded && !unknownUsd) {
-      used = est;
-      remaining = Math.max(0, limit - used);
-    }
-  }
-  const readIn = tIn + tCr;
-  const fmt = (m) => Object.fromEntries(Object.entries(m).map(([k, v]) => [k, {
-    input_tokens: v.tokens_measured ? v.input_tokens : null,
-    output_tokens: v.tokens_measured ? v.output_tokens : null,
-    cost_usd: v.measured ? r6(v.cost_usd) : null
-  }]));
-  return {
-    total_input_tokens: recorded ? tIn : null,
-    total_output_tokens: recorded ? tOut : null,
-    total_cache_read_tokens: recorded ? tCr : null,
-    total_cache_creation_tokens: recorded ? tCw : null,
-    total_tokens: recorded ? tIn + tOut + tCr + tCw : null,
-    cache_hit_ratio: readIn > 0 ? Math.round(tCr / readIn * 1e4) / 1e4 : null,
-    estimated_cost_usd: recorded && !unknownUsd ? r6(est) : null,
-    cost_recorded: recorded,
-    by_phase: fmt(byPhase),
-    by_model: fmt(byModel),
-    budget_limit: limit,
-    budget_used: limit !== null && used !== null ? r6(used) : null,
-    budget_remaining: remaining !== null ? r6(remaining) : null,
-    ...recorded ? {} : { not_measured: NOT_MEASURED }
-  };
-}
-function budgetStatus(used, limit) {
-  if (limit === null || limit <= 0)
-    return "none";
-  if (used === null)
-    return "unknown";
-  if (used >= limit)
-    return "exceeded";
-  return used >= BUDGET_WARN_FRACTION * limit ? "warn" : "ok";
-}
-function budgetSnapshot(lokiDir) {
-  const table = pricing(lokiDir);
-  let total = 0, recorded = false, unmeasured = 0;
-  for (const d of iterationRecords(lokiDir)) {
-    if (recordIsMeasured(d))
-      recorded = true;
-    else
-      unmeasured++;
-    total += priced(table, d);
-  }
-  let limit = null;
-  const bd = readJson(join12(lokiDir, "metrics", "budget.json"));
-  if (isObj3(bd)) {
-    const l = bd.limit || bd.budget_limit;
-    limit = isNum(l) ? l : null;
-  }
-  if (limit === null && process.env.LOKI_BUDGET_LIMIT) {
-    const e = Number(process.env.LOKI_BUDGET_LIMIT);
-    if (Number.isFinite(e))
-      limit = e;
-  }
-  const used = recorded ? r6(total) : null;
-  const ok = limit !== null && limit > 0 && used !== null;
-  const status = budgetStatus(used, limit);
-  return {
-    limit,
-    used,
-    remaining: ok ? r6(Math.max(0, limit - used)) : null,
-    percent_used: ok ? Math.round(used / limit * 1e4) / 100 : null,
-    status,
-    warn_threshold_percent: Math.round(BUDGET_WARN_FRACTION * 100),
-    exceeded: status === "exceeded",
-    partial: recorded && unmeasured > 0
-  };
-}
-function costTimeline(lokiDir) {
-  const table = pricing(lokiDir);
-  const recs = iterationRecords(lokiDir).map((d, i) => ({ d, i })).sort((a, b) => num0(Number(a.d.iteration)) - num0(Number(b.d.iteration)) || a.i - b.i).map((x) => x.d);
-  const iterations = [];
-  let cum = 0, recorded = false, unmeasured = 0;
-  for (const d of recs) {
-    const measured = recordIsMeasured(d);
-    if (measured)
-      recorded = true;
-    else
-      unmeasured++;
-    const model = String(d.model ?? "sonnet").toLowerCase();
-    cum += priced(table, d);
-    iterations.push({
-      iteration: d.iteration ?? null,
-      timestamp: d.timestamp ?? null,
-      model: d.model ? model : null,
-      phase: d.phase ?? "unknown",
-      provider: d.provider ?? null,
-      input_tokens: measured ? num0(d.input_tokens) : null,
-      output_tokens: measured ? num0(d.output_tokens) : null,
-      cost_usd: measured ? r6(priced(table, d)) : null,
-      cumulative_usd: measured ? r6(cum) : null
-    });
-  }
-  const runs2 = [];
-  let projectTotal = 0, runsMeasured = 0;
-  const proofs = join12(lokiDir, "proofs");
-  let entries = [];
-  try {
-    entries = readdirSync3(proofs).sort();
-  } catch {}
-  for (const e of entries) {
-    try {
-      if (!statSync5(join12(proofs, e)).isDirectory())
-        continue;
-    } catch {
-      continue;
-    }
-    const p = readJson(join12(proofs, e, "proof.json"));
-    if (!isObj3(p))
-      continue;
-    const cost = isObj3(p.cost) ? p.cost : {};
-    const usd = isNum(cost.usd) ? cost.usd : null;
-    if (usd !== null) {
-      projectTotal += usd;
-      runsMeasured++;
-    }
-    runs2.push({
-      run_id: p.run_id ?? e,
-      generated_at: p.generated_at ?? null,
-      model: isObj3(p.provider) ? p.provider.model ?? null : null,
-      cost_usd: usd !== null ? r6(usd) : null,
-      cost_partial: cost.cost_partial === true,
-      files_changed: isObj3(p.files_changed) ? p.files_changed.count ?? null : null,
-      final_verdict: isObj3(p.council) ? p.council.final_verdict ?? null : null
+    const since = c.req.query("since");
+    if (since !== undefined && Number.isNaN(Date.parse(since)))
+      return c.json({ error: "since must be an ISO date" }, 400);
+    const q = ctx.db.select().from(runs);
+    const all = since ? q.where(gte(runs.startedAt, since)).all() : q.all();
+    const groups = new Map;
+    const total = mk({});
+    let priced2 = 0, unpriced = 0;
+    for (const r of all) {
+      const key = {};
+      for (const d of dims)
+        key[d] = dimVal(d, r);
+      const id = dims.map((d) => key[d]).join("\x00");
+      let g = groups.get(id);
+      if (!g) {
+        g = mk(key);
+        groups.set(id, g);
+      }
+      add(g, r);
+      add(total, r);
+      if (r.measuredSessions > 0)
+        priced2++;
+      else
+        unpriced++;
+    }
+    const rows = [...groups.values()].map(out).sort((a, b) => {
+      for (const d of dims) {
+        const x = a[d], y = b[d];
+        if (x !== y)
+          return d === "day" ? y.localeCompare(x) : x.localeCompare(y);
+      }
+      return 0;
     });
-  }
-  runs2.sort((a, b) => String(b.generated_at ?? "").localeCompare(String(a.generated_at ?? "")));
-  return {
-    current_run: { iterations, total_usd: recorded ? r6(cum) : null, cost_recorded: recorded, partial: recorded && unmeasured > 0, unmeasured_iterations: unmeasured },
-    runs: runs2,
-    runs_count: runs2.length,
-    project_total_usd: runsMeasured ? r6(projectTotal) : null,
-    project_total_partial: runsMeasured > 0 && runsMeasured < runs2.length,
-    budget: budgetSnapshot(lokiDir),
-    ...recorded || runsMeasured ? {} : { not_measured: NOT_MEASURED }
-  };
-}
-var lokiDirOf = (repoDir) => join12(repoDir, ".loki");
-var lokiDirExists = (repoDir) => existsSync6(lokiDirOf(repoDir));
-function mount7(ctx) {
-  const deny = { error: "loopback only without a token" };
-  ctx.app.get("/v1/cost/snapshot", (c) => probeAllowed(ctx, c) ? c.json(costSnapshot(lokiDirOf(ctx.repoDir))) : c.json(deny, 403));
-  ctx.app.get("/v1/cost/timeline", (c) => probeAllowed(ctx, c) ? c.json(costTimeline(lokiDirOf(ctx.repoDir))) : c.json(deny, 403));
+    const { runs: n2, ...rest } = out(total);
+    return c.json({
+      group: dims,
+      since: since ?? null,
+      rows,
+      totals: { runs: n2, ...rest },
+      budget: { api_key_default_cap_usd: DEFAULT_API_KEY_CAP_USD, subscription_cap: null, api_key_runs: priced2, subscription_runs: unpriced }
+    });
+  });
 }
 
 // src/server/routes/fleet.ts
-import { readdirSync as readdirSync4, readFileSync as readFileSync10 } from "fs";
+import { readdirSync as readdirSync5, readFileSync as readFileSync11 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename as basename4, join as join13 } from "path";
+import { basename as basename4, join as join14 } from "path";
 var isNum2 = (v) => typeof v === "number" && Number.isFinite(v);
-var isObj4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var registryFile = () => join13(process.env.HOME ?? homedir4(), ".loki", "dashboard", "projects.json");
+var isObj5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var registryFile = () => join14(process.env.HOME ?? homedir4(), ".loki", "dashboard", "projects.json");
 function pidAlive(pid) {
   if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0)
     return false;
@@ -14667,34 +14906,34 @@ function projectSnapshot(path) {
   const snap = { phase: "", iteration: null, cost_usd: null, started_at: null, ended_at: null };
   if (!path)
     return snap;
-  const loki = join13(path, ".loki");
-  const st = readJson(join13(loki, "dashboard-state.json"));
-  if (isObj4(st)) {
+  const loki = join14(path, ".loki");
+  const st = readJson(join14(loki, "dashboard-state.json"));
+  if (isObj5(st)) {
     snap.phase = typeof st.phase === "string" ? st.phase : "";
     snap.iteration = Number.isInteger(st.iteration) ? st.iteration : null;
   }
-  const ss = readJson(join13(loki, "session.json"));
-  if (isObj4(ss)) {
+  const ss = readJson(join14(loki, "session.json"));
+  if (isObj5(ss)) {
     const a = ss.startedAt || ss.started_at, b = ss.endedAt || ss.ended_at;
     snap.started_at = typeof a === "string" ? a : null;
     snap.ended_at = typeof b === "string" ? b : null;
   }
   let cost = 0, found = false;
-  const eff = join13(loki, "metrics", "efficiency");
+  const eff = join14(loki, "metrics", "efficiency");
   let names = [];
   try {
-    names = readdirSync4(eff).filter((n2) => n2.endsWith(".json"));
+    names = readdirSync5(eff).filter((n2) => n2.endsWith(".json"));
   } catch {}
   for (const n2 of names) {
-    const d = readJson(join13(eff, n2));
-    if (isObj4(d) && isNum2(d.cost_usd) && recordIsMeasured(d)) {
+    const d = readJson(join14(eff, n2));
+    if (isObj5(d) && isNum2(d.cost_usd) && recordIsMeasured(d)) {
       cost += d.cost_usd;
       found = true;
     }
   }
   if (!found) {
-    const t = readJson(join13(loki, "context", "tracking.json"));
-    const totals = isObj4(t) && isObj4(t.totals) ? t.totals : null;
+    const t = readJson(join14(loki, "context", "tracking.json"));
+    const totals = isObj5(t) && isObj5(t.totals) ? t.totals : null;
     if (totals && isNum2(totals.total_cost_usd) && recordIsMeasured({ cost_usd: totals.total_cost_usd, input_tokens: totals.total_input, output_tokens: totals.total_output })) {
       cost = totals.total_cost_usd;
       found = true;
@@ -14706,9 +14945,9 @@ function projectSnapshot(path) {
 function fleetRuns(includeInactive = true, file = registryFile()) {
   let projects = [];
   try {
-    const reg = JSON.parse(readFileSync10(file, "utf8"));
-    if (isObj4(reg) && isObj4(reg.projects))
-      projects = Object.values(reg.projects).filter(isObj4);
+    const reg = JSON.parse(readFileSync11(file, "utf8"));
+    if (isObj5(reg) && isObj5(reg.projects))
+      projects = Object.values(reg.projects).filter(isObj5);
   } catch {
     return [];
   }
@@ -14759,16 +14998,294 @@ function fleetSummary(includeInactive = true, file = registryFile()) {
   };
 }
 var parseInactive = (v) => !["false", "0", "no"].includes((v ?? "true").toLowerCase());
-function mount8(ctx) {
+function mount9(ctx) {
   const deny = { error: "loopback only without a token" };
   ctx.app.get("/v1/fleet/runs", (c) => probeAllowed(ctx, c) ? c.json(fleetRuns(parseInactive(c.req.query("include_inactive"))).map(({ path: _p, ...r }) => r)) : c.json(deny, 403));
   ctx.app.get("/v1/fleet/summary", (c) => probeAllowed(ctx, c) ? c.json(fleetSummary(parseInactive(c.req.query("include_inactive")))) : c.json(deny, 403));
 }
 
+// src/server/routes/memory.ts
+import { existsSync as existsSync8, readFileSync as readFileSync12, readdirSync as readdirSync6, realpathSync as realpathSync7, statSync as statSync7 } from "fs";
+import { join as join15, sep as sep5 } from "path";
+var isObj6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var nonEmpty = (v) => !(v === undefined || v === null || v === "" || Array.isArray(v) && v.length === 0 || isObj6(v) && Object.keys(v).length === 0);
+var focus = { dir: null };
+var lokiFor = (repoDir) => lokiDirOf(focus.dir ?? repoDir);
+function mutationAllowed(c) {
+  if (!peerIsLoopback(c) || !isLoopbackHost(c.req.header("host")))
+    return false;
+  if (!(c.req.header("content-type") ?? "").toLowerCase().startsWith("application/json"))
+    return false;
+  const origin = c.req.header("origin");
+  if (origin === undefined)
+    return true;
+  try {
+    return new URL(origin).host.toLowerCase() === (c.req.header("host") ?? "").toLowerCase();
+  } catch {
+    return false;
+  }
+}
+function jsonFiles(dir, cap = Infinity) {
+  const out2 = [];
+  const walk = (d) => {
+    let ents = [];
+    try {
+      ents = readdirSync6(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of ents.sort((a, b) => a.name < b.name ? -1 : 1)) {
+      if (out2.length >= cap)
+        return;
+      const p = join15(d, e.name);
+      if (e.isDirectory())
+        walk(p);
+      else if (e.isFile() && e.name.endsWith(".json"))
+        out2.push(p);
+    }
+  };
+  walk(dir);
+  return out2;
+}
+function focusInfo(repoDir) {
+  return { project_dir: focus.dir, loki_dir: lokiFor(repoDir) };
+}
+function setFocus(repoDir, raw2, registry = registryFile()) {
+  const s = typeof raw2 === "string" ? raw2.trim() : "";
+  if (!s)
+    return { ok: false, error: "project_dir must not be empty" };
+  if (!s.startsWith("/") || s.split(/[\\/]/).includes(".."))
+    return { ok: false, error: "project_dir must be an absolute path without .. segments" };
+  let real2 = "";
+  try {
+    real2 = realpathSync7(s);
+    if (!statSync7(real2).isDirectory())
+      throw new Error("not a dir");
+  } catch {
+    return { ok: false, error: `Directory does not exist: ${s}` };
+  }
+  if (!existsSync8(join15(real2, ".loki")) || !statSync7(join15(real2, ".loki")).isDirectory())
+    return { ok: false, error: `Directory does not contain a .loki/ subdirectory: ${s}` };
+  const allowed = new Set;
+  try {
+    allowed.add(realpathSync7(repoDir));
+  } catch {}
+  const reg = readJson(registry);
+  if (isObj6(reg) && isObj6(reg.projects))
+    for (const p of Object.values(reg.projects)) {
+      if (isObj6(p) && typeof p.path === "string") {
+        try {
+          allowed.add(realpathSync7(p.path));
+        } catch {}
+      }
+    }
+  if (!allowed.has(real2))
+    return { ok: false, error: "project_dir is not this checkout or a registered project" };
+  focus.dir = real2;
+  return { ok: true };
+}
+var GROUPS = [["pending", "pending"], ["inProgress", "in_progress"], ["review", "review"], ["completed", "done"], ["failed", "done"]];
+var QUEUES = [["pending.json", "pending"], ["in-progress.json", "in_progress"], ["completed.json", "done"], ["failed.json", "done"], ["dead-letter.json", "done"]];
+var RANK = { done: 3, in_progress: 2, review: 1, pending: 0 };
+function tasksList(loki, status) {
+  const all = [];
+  const st = readJson(join15(loki, "dashboard-state.json"));
+  const groups = isObj6(st) && isObj6(st.tasks) ? st.tasks : {};
+  for (const [key, mapped] of GROUPS) {
+    const g = groups[key];
+    if (!Array.isArray(g))
+      continue;
+    g.forEach((t, i) => {
+      if (!isObj6(t))
+        return;
+      const payload = isObj6(t.payload) ? t.payload : {};
+      const e = { id: t.id ?? `${key}-${i}`, title: t.title ?? payload.action ?? t.type ?? "Task", description: t.description ?? payload.description ?? "", status: mapped, priority: t.priority ?? payload.priority ?? "medium", type: t.type ?? "task", position: i };
+      for (const f of ["acceptance_criteria", "notes", "logs", "user_story", "project", "source", "specification", "provider", "startedAt", "full_content", "completedAt", "phase", "exitCode"])
+        if (nonEmpty(t[f]))
+          e[f] = t[f];
+      if (t.exitCode === 0)
+        e.exitCode = 0;
+      if (key === "completed" || key === "failed")
+        e._terminal_outcome = key;
+      all.push(e);
+    });
+  }
+  for (const [file, qs] of QUEUES) {
+    const raw2 = readJson(join15(loki, "queue", file));
+    const items = isObj6(raw2) ? raw2.tasks : raw2;
+    if (!Array.isArray(items))
+      continue;
+    const term = file === "completed.json" ? "completed" : file === "failed.json" || file === "dead-letter.json" ? "failed" : null;
+    items.forEach((it, i) => {
+      if (!isObj6(it))
+        return;
+      const id = it.id ?? `q-${qs}-${i}`;
+      if (term === null && all.some((t) => t.id === id))
+        return;
+      const e = { id, title: it.title ?? it.action ?? "Task", description: it.description ?? "", status: qs, priority: it.priority ?? "medium", type: it.type ?? "task", position: i };
+      for (const f of ["acceptance_criteria", "user_story", "project", "source", "provider", "startedAt", "completedAt", "phase"])
+        if (nonEmpty(it[f]))
+          e[f] = it[f];
+      for (const f of ["notes", "logs"])
+        if (Array.isArray(it[f]))
+          e[f] = it[f];
+      if (Number.isInteger(it.exitCode))
+        e.exitCode = it.exitCode;
+      if (term)
+        e._terminal_outcome = term;
+      all.push(e);
+    });
+  }
+  const auth = (t) => [RANK[t.status] ?? -1, t._terminal_outcome === "failed" ? 1 : 0];
+  const better = (a, b) => {
+    const x = auth(a), y = auth(b);
+    return x[0] !== y[0] ? x[0] > y[0] : x[1] > y[1];
+  };
+  const byId = new Map, order2 = [];
+  for (const t of all) {
+    if (t.id === undefined || t.id === null) {
+      order2.push(t);
+      continue;
+    }
+    const prev = byId.get(t.id);
+    if (!prev) {
+      byId.set(t.id, t);
+      order2.push({ ref: t.id });
+    } else if (better(t, prev))
+      byId.set(t.id, t);
+  }
+  const out2 = order2.map((o) => ("ref" in o) ? byId.get(o.ref) : o);
+  for (const t of out2) {
+    if (t.type === "iteration" && !t.description) {
+      const ec = t.exitCode, failed = t._terminal_outcome === "failed";
+      const o = Number.isInteger(ec) && ec === 0 && !failed ? "completed cleanly (exit 0)" : Number.isInteger(ec) && ec !== 0 ? `failed (exit ${ec})` : failed ? "failed" : t._terminal_outcome === "completed" ? "completed" : t.status === "done" ? "finished" : null;
+      if (o)
+        t.description = `Iteration ${o}${t.provider ? `, built by ${t.provider}` : ""}.`;
+    }
+  }
+  return status ? out2.filter((t) => t.status === status) : out2;
+}
+var memDir = (loki, sub) => join15(loki, "memory", sub);
+function memoryEpisodes(loki, limit = 50) {
+  const eps = jsonFiles(memDir(loki, "episodic")).map(readJson).filter(isObj6);
+  eps.sort((a, b) => String(b.timestamp ?? "").localeCompare(String(a.timestamp ?? "")));
+  return eps.slice(0, limit);
+}
+function memoryEpisode(loki, id) {
+  for (const f of jsonFiles(memDir(loki, "episodic"))) {
+    const d = readJson(f);
+    if (isObj6(d) && (d.id === id || f.split(sep5).pop() === `${id}.json`))
+      return d;
+  }
+  return null;
+}
+function memoryPatterns(loki) {
+  const d = readJson(join15(memDir(loki, "semantic"), "patterns.json"));
+  const list = Array.isArray(d) ? d : isObj6(d) && Array.isArray(d.patterns) ? d.patterns : [];
+  return list.filter(isObj6);
+}
+var memorySkills = (loki) => jsonFiles(memDir(loki, "skills")).map(readJson).filter(isObj6);
+function memoryEconomics(loki) {
+  const rawV = readJson(join15(loki, "memory", "token_economics.json"));
+  const raw2 = isObj6(rawV) ? rawV : {};
+  const m = isObj6(raw2.metrics) ? raw2.metrics : {};
+  const n2 = (v) => typeof v === "number" && Number.isFinite(v) ? Math.trunc(v) : 0;
+  const hits = n2(m.cache_hits), misses = n2(m.cache_misses), total = hits + misses;
+  const recorded = Object.keys(m).length > 0;
+  const disc = recorded ? n2(m.discovery_tokens) : null, read = recorded ? n2(m.read_tokens) : null;
+  const cands = [];
+  for (const kind of ["episodic", "semantic"]) {
+    for (const f of jsonFiles(memDir(loki, kind), 300)) {
+      const d = readJson(f);
+      if (!isObj6(d))
+        continue;
+      const ctx = isObj6(d.context) ? d.context : {};
+      cands.push({ id: d.id ?? "", kind, access_count: n2(d.access_count), importance: Number(d.importance) || 0, summary: String(d.summary || d.pattern || ctx.goal || "").slice(0, 160) });
+    }
+  }
+  cands.sort((a, b) => b.access_count - a.access_count || b.importance - a.importance);
+  return {
+    session_id: raw2.session_id ?? null,
+    discovery_tokens: disc,
+    read_tokens: read,
+    total_tokens: recorded ? disc + read : null,
+    cache_hits: hits,
+    cache_misses: misses,
+    hit_rate: total > 0 ? Math.round(hits / total * 1e4) / 1e4 : null,
+    ratio: raw2.ratio ?? null,
+    savings_percent: raw2.savings_percent ?? null,
+    top_patterns: cands.slice(0, 10).filter((p) => p.access_count > 0),
+    discoveryTokens: disc,
+    readTokens: read,
+    savingsPercent: raw2.savings_percent ?? null,
+    raw: raw2
+  };
+}
+function contextTracking(loki) {
+  const f = join15(loki, "context", "tracking.json");
+  if (!existsSync8(f)) {
+    return { status: 200, body: {
+      session_id: null,
+      updated_at: null,
+      current: { input_tokens: null, output_tokens: null, cache_read_tokens: null, cache_creation_tokens: null, total_tokens: null, context_window_pct: null, estimated_cost_usd: null },
+      compactions: [],
+      per_iteration: [],
+      totals: { total_input: null, total_output: null, total_cost_usd: null, compaction_count: null, iterations_tracked: null }
+    } };
+  }
+  try {
+    return { status: 200, body: JSON.parse(readFileSync12(f, "utf8")) };
+  } catch {
+    return { status: 500, body: { error: "Failed to read context tracking data" } };
+  }
+}
+function mount10(ctx) {
+  const deny = { error: "loopback only without a token" };
+  const read = (path, fn) => ctx.app.get(path, (c) => probeAllowed(ctx, c) ? fn(c, lokiFor(ctx.repoDir)) : c.json(deny, 403));
+  read("/v1/tasks", (c, l) => {
+    if (c.req.query("project_id") !== undefined)
+      return c.json({ error: "project_id filter is not supported by the Control Plane" }, 400);
+    return c.json(tasksList(l, c.req.query("status")));
+  });
+  read("/v1/memory/episodes", (c, l) => {
+    const lim = c.req.query("limit") === undefined ? 50 : Number(c.req.query("limit"));
+    return Number.isInteger(lim) && lim >= 1 && lim <= 1000 ? c.json(memoryEpisodes(l, lim)) : c.json({ error: "limit must be 1..1000" }, 422);
+  });
+  read("/v1/memory/episodes/:id", (c, l) => {
+    const e = memoryEpisode(l, c.req.param("id"));
+    return e ? c.json(e) : c.json({ error: "Episode not found" }, 404);
+  });
+  read("/v1/memory/patterns", (c, l) => c.json(memoryPatterns(l)));
+  read("/v1/memory/patterns/:id", (c, l) => {
+    const p = memoryPatterns(l).find((x) => x.id === c.req.param("id"));
+    return p ? c.json(p) : c.json({ error: "Pattern not found" }, 404);
+  });
+  read("/v1/memory/skills", (c, l) => c.json(memorySkills(l)));
+  read("/v1/memory/economics", (c, l) => c.json(memoryEconomics(l)));
+  read("/v1/context", (c, l) => {
+    const r = contextTracking(l);
+    return c.json(r.body, r.status);
+  });
+  read("/v1/focus", (c) => c.json(focusInfo(ctx.repoDir)));
+  ctx.act.post("/v1/focus", async (c) => {
+    if (!mutationAllowed(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const body = await c.req.json().catch(() => null);
+    const r = setFocus(ctx.repoDir, isObj6(body) ? body.project_dir : undefined);
+    return r.ok ? c.json(focusInfo(ctx.repoDir)) : c.json({ error: r.error }, 400);
+  });
+  ctx.act.delete("/v1/focus", (c) => {
+    if (!mutationAllowed(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    focus.dir = null;
+    return c.json(focusInfo(ctx.repoDir));
+  });
+}
+
 // src/server/routes/metrics.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync11, statSync as statSync6 } from "fs";
-import { join as join14 } from "path";
-var isObj5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+import { readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
+import { join as join16 } from "path";
+var isObj7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var arr = (v) => Array.isArray(v) ? v : [];
 function buildMetricsText(repoDir, now = Date.now()) {
   if (!lokiDirExists(repoDir))
@@ -14784,8 +15301,8 @@ function buildMetricsText(repoDir, now = Date.now()) {
       L.push(...samples);
     L.push("");
   };
-  const stRaw = readJson(join14(loki, "dashboard-state.json"));
-  const state = isObj5(stRaw) ? stRaw : null;
+  const stRaw = readJson(join16(loki, "dashboard-state.json"));
+  const state = isObj7(stRaw) ? stRaw : null;
   let status = 0;
   if (state?.mode === "paused")
     status = 2;
@@ -14793,7 +15310,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
     status = 1;
   else {
     try {
-      if (pidAlive(parseInt(readFileSync11(join14(loki, "loki.pid"), "utf8").trim(), 10)))
+      if (pidAlive(parseInt(readFileSync13(join16(loki, "loki.pid"), "utf8").trim(), 10)))
         status = 1;
     } catch {}
   }
@@ -14801,7 +15318,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
   gauge("loki_iteration_current", "Current iteration number", "gauge", typeof state?.iteration === "number" ? [`loki_iteration_current ${state.iteration}`] : null);
   const maxIt = Number.parseInt(process.env.LOKI_MAX_ITERATIONS ?? "", 10);
   gauge("loki_iteration_max", "Maximum configured iterations", "gauge", [`loki_iteration_max ${Number.isFinite(maxIt) ? maxIt : 1000}`]);
-  const tasks = state && isObj5(state.tasks) ? state.tasks : null;
+  const tasks = state && isObj7(state.tasks) ? state.tasks : null;
   gauge("loki_tasks_total", "Number of tasks by status", "gauge", tasks ? [
     `loki_tasks_total{status="pending"} ${arr(tasks.pending).length}`,
     `loki_tasks_total{status="in_progress"} ${arr(tasks.inProgress).length}`,
@@ -14809,19 +15326,19 @@ function buildMetricsText(repoDir, now = Date.now()) {
     `loki_tasks_total{status="failed"} ${arr(tasks.failed).length}`
   ] : null);
   let agents = null;
-  const af = readJson(join14(loki, "state", "agents.json"));
+  const af = readJson(join16(loki, "state", "agents.json"));
   if (Array.isArray(af) && af.length)
     agents = af;
   else if (state && Array.isArray(state.agents) && state.agents.length)
     agents = state.agents;
-  const active = (agents ?? []).filter((a) => isObj5(a) && a.status === "active").length;
+  const active = (agents ?? []).filter((a) => isObj7(a) && a.status === "active").length;
   gauge("loki_agents_active", "Number of currently active agents", "gauge", agents ? [`loki_agents_active ${active}`] : null);
   gauge("loki_agents_total", "Total number of agents registered", "gauge", agents ? [`loki_agents_total ${agents.length}`] : null);
   const cost = costSnapshot(loki);
   gauge("loki_cost_usd", "Estimated total cost in USD", "gauge", cost.estimated_cost_usd !== null ? [`loki_cost_usd ${cost.estimated_cost_usd}`] : null);
   let events2 = null;
   try {
-    events2 = readFileSync11(join14(loki, "events.jsonl"), "utf8").split(`
+    events2 = readFileSync13(join16(loki, "events.jsonl"), "utf8").split(`
 `).filter((l) => l.trim()).length;
   } catch {}
   gauge("loki_events_total", "Total number of events recorded", "counter", events2 !== null ? [`loki_events_total ${events2}`] : null);
@@ -14833,23 +15350,23 @@ function buildMetricsText(repoDir, now = Date.now()) {
   }
   gauge("loki_uptime_seconds", "Seconds since session started", "gauge", uptime !== null ? [`loki_uptime_seconds ${uptime}`] : null);
   let total = 0, ver = 0, gaps = 0, notver = 0, unk = 0, att = 0, sig = 0;
-  const pdir = join14(loki, "proofs");
+  const pdir = join16(loki, "proofs");
   let entries = [];
   try {
-    entries = readdirSync5(pdir).sort();
+    entries = readdirSync7(pdir).sort();
   } catch {}
   for (const e of entries) {
     try {
-      if (!statSync6(join14(pdir, e)).isDirectory())
+      if (!statSync8(join16(pdir, e)).isDirectory())
         continue;
     } catch {
       continue;
     }
-    const d = readJson(join14(pdir, e, "proof.json"));
-    if (!isObj5(d))
+    const d = readJson(join16(pdir, e, "proof.json"));
+    if (!isObj7(d))
       continue;
     total++;
-    const head = isObj5(d.honesty) ? d.honesty.headline : null;
+    const head = isObj7(d.honesty) ? d.honesty.headline : null;
     if (head === "VERIFIED")
       ver++;
     else if (head === "VERIFIED WITH GAPS")
@@ -14858,7 +15375,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
       notver++;
     else
       unk++;
-    if (isObj5(d.verification)) {
+    if (isObj7(d.verification)) {
       if (d.verification.attestation)
         att++;
       if (d.verification.gpg_signature)
@@ -14880,7 +15397,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
 `) + `
 `;
 }
-function mount9(ctx) {
+function mount11(ctx) {
   ctx.app.get("/v1/metrics", (c) => {
     if (!probeAllowed(ctx, c))
       return c.json({ error: "loopback only without a token" }, 403);
@@ -14888,14 +15405,216 @@ function mount9(ctx) {
   });
 }
 
+// src/server/routes/session_control.ts
+import { existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync8, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync5 } from "fs";
+import { dirname as dirname3, join as join17 } from "path";
+var isObj8 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var ACTIONS = ["pause", "resume", "stop", "council-review"];
+var isAction = (v) => ACTIONS.includes(v);
+function sameOrigin(c) {
+  if (c.req.header("sec-fetch-site") === "cross-site")
+    return false;
+  const origin = c.req.header("origin");
+  if (origin === undefined)
+    return true;
+  try {
+    return new URL(origin).host.toLowerCase() === (c.req.header("host") ?? "").toLowerCase();
+  } catch {
+    return false;
+  }
+}
+var readJson2 = (p) => {
+  try {
+    return JSON.parse(readFileSync14(p, "utf8"));
+  } catch {
+    return null;
+  }
+};
+function runnerPid(loki) {
+  try {
+    const pid = parseInt(readFileSync14(join17(loki, "loki.pid"), "utf8").trim(), 10);
+    return pidAlive(pid) ? pid : null;
+  } catch {
+    return null;
+  }
+}
+function applyControl(repoDir, action) {
+  const loki = lokiDirOf(repoDir);
+  const running = runnerPid(loki) !== null;
+  const put = (rel) => {
+    const f = join17(loki, rel);
+    mkdirSync4(dirname3(f), { recursive: true });
+    writeFileSync5(f, new Date().toISOString());
+  };
+  if (action === "council-review") {
+    put(join17("signals", "COUNCIL_REVIEW_REQUESTED"));
+    return { status: 200, body: { success: true, message: "Council review requested" } };
+  }
+  if (action === "resume") {
+    for (const n2 of ["PAUSE", "STOP"]) {
+      try {
+        unlinkSync2(join17(loki, n2));
+      } catch {}
+    }
+    return running ? { status: 200, body: { success: true, message: "Session resumed", process_verified: true } } : { status: 503, body: { success: false, message: "Session process is not running; the signal files were cleared" } };
+  }
+  put(action === "pause" ? "PAUSE" : "STOP");
+  if (!running)
+    return { status: 503, body: { success: false, message: `Session process is not running; the ${action} signal may have no effect` } };
+  return { status: 200, body: { success: true, message: action === "pause" ? "Session paused" : "Stop requested; the runner exits at its next check", process_verified: true } };
+}
+function runControl(db, repoDir, action, c, via) {
+  if (!sameOrigin(c)) {
+    audit3(db, { kind: `session.${action}`, target: via, result: "refused", detail: "origin not allowed" });
+    return c.json({ error: "origin not allowed" }, 403);
+  }
+  const r = applyControl(repoDir, action);
+  audit3(db, { kind: `session.${action}`, target: via, result: r.status === 200 ? "ok" : "unverified" });
+  return c.json(r.body, r.status);
+}
+function councilState(loki) {
+  const f = join17(loki, "council", "state.json");
+  if (!existsSync9(f))
+    return { enabled: false, total_votes: 0, verdicts: [] };
+  const d = readJson2(f);
+  return isObj8(d) ? d : { enabled: null, total_votes: null, verdicts: null, error: "unreadable_state" };
+}
+function councilVerdicts(loki, limit = 20) {
+  const st = readJson2(join17(loki, "council", "state.json"));
+  const verdicts = isObj8(st) && Array.isArray(st.verdicts) ? st.verdicts : [];
+  const votes = join17(loki, "council", "votes");
+  const details = [];
+  let names = [];
+  try {
+    names = readdirSync8(votes, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort().reverse();
+  } catch {}
+  const text2 = (p) => {
+    try {
+      return readFileSync14(p, "utf8");
+    } catch {
+      return null;
+    }
+  };
+  for (const n2 of names.slice(0, limit)) {
+    const dir = join17(votes, n2), d = { iteration: n2 };
+    const ev = text2(join17(dir, "evidence.md"));
+    if (ev !== null)
+      d.evidence_preview = ev.slice(0, 500);
+    let files = [];
+    try {
+      files = readdirSync8(dir).filter((f) => /^member-.*\.txt$/.test(f)).sort();
+    } catch {}
+    d.members = files.flatMap((f) => {
+      const t = text2(join17(dir, f));
+      return t === null ? [] : [{ member: f.replace(/\.txt$/, ""), content: t.trim() }];
+    });
+    const con = text2(join17(dir, "contrarian.txt"));
+    if (con !== null)
+      d.contrarian = con.trim();
+    details.push(d);
+  }
+  return { verdicts, details };
+}
+function councilConvergence(loki) {
+  const dataPoints = [];
+  let raw2 = "";
+  try {
+    raw2 = readFileSync14(join17(loki, "council", "convergence.log"), "utf8");
+  } catch {}
+  for (const line2 of raw2.trim().split(`
+`)) {
+    const p = line2.split("|");
+    if (p.length < 5)
+      continue;
+    const n2 = p.slice(1, 5).map((x) => /^-?\d+$/.test(x.trim()) ? Number(x) : NaN);
+    if (n2.some(Number.isNaN))
+      continue;
+    dataPoints.push({ timestamp: p[0], iteration: n2[0], files_changed: n2[1], no_change_streak: n2[2], done_signals: n2[3] });
+  }
+  return { dataPoints };
+}
+function councilReport(loki) {
+  try {
+    return { report: readFileSync14(join17(loki, "council", "report.md"), "utf8") };
+  } catch {
+    return { report: null };
+  }
+}
+function councilTranscripts(loki, q) {
+  const limit = Math.min(Math.max(q.limit ?? 20, 1), 200);
+  let since = null;
+  if (q.since) {
+    since = Date.parse(q.since);
+    if (Number.isNaN(since))
+      return { error: "Invalid 'since' timestamp format; expected ISO8601" };
+  }
+  const dir = join17(loki, "council", "transcripts");
+  let names = [];
+  try {
+    names = readdirSync8(dir).filter((f) => /^iter-.*\.json$/.test(f)).sort().reverse();
+  } catch {
+    return { transcripts: [], total: 0, latest_id: null };
+  }
+  const out2 = [];
+  for (const n2 of names) {
+    const rec = readJson2(join17(dir, n2));
+    if (!isObj8(rec) || typeof rec.iteration_id !== "string")
+      continue;
+    if (since !== null) {
+      const t = Date.parse(String(rec.timestamp ?? ""));
+      if (Number.isNaN(t) || t <= since)
+        continue;
+    }
+    if (q.iter_min !== undefined && Number(rec.iteration ?? 0) < q.iter_min)
+      continue;
+    out2.push(rec);
+    if (out2.length >= limit)
+      break;
+  }
+  return { transcripts: out2, total: out2.length, latest_id: out2.length ? out2[0].iteration_id : null };
+}
+var intQ = (v, max) => v === undefined ? undefined : /^\d+$/.test(v) && Number(v) <= max ? Number(v) : null;
+function mount12(ctx) {
+  const deny = { error: "loopback only without a token" };
+  const loki = () => lokiDirOf(ctx.repoDir);
+  ctx.act.post("/v1/control/:action", (c) => {
+    if (!ctx.local(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const action = c.req.param("action");
+    if (!isAction(action))
+      return c.json({ error: `action must be one of ${ACTIONS.join(", ")}` }, 400);
+    return runControl(ctx.db, ctx.repoDir, action, c, "v1");
+  });
+  const read = (path, f) => ctx.app.get(path, (c) => {
+    if (!probeAllowed(ctx, c))
+      return c.json(deny, 403);
+    const r = f(c);
+    return r instanceof Response ? r : c.json(r);
+  });
+  read("/v1/council/state", () => councilState(loki()));
+  read("/v1/council/verdicts", (c) => {
+    const n2 = intQ(c.req.query("limit"), 1000);
+    return n2 === null || n2 === 0 ? c.json({ error: "limit must be 1..1000" }, 422) : councilVerdicts(loki(), n2);
+  });
+  read("/v1/council/convergence", () => councilConvergence(loki()));
+  read("/v1/council/report", () => councilReport(loki()));
+  read("/v1/council/transcripts", (c) => {
+    const limit = intQ(c.req.query("limit"), 200), iterMin = intQ(c.req.query("iter_min"), Number.MAX_SAFE_INTEGER);
+    if (limit === null || limit === 0 || iterMin === null)
+      return c.json({ error: "limit must be 1..200 and iter_min a non-negative integer" }, 422);
+    const r = councilTranscripts(loki(), { limit, since: c.req.query("since"), iter_min: iterMin });
+    return "error" in r ? c.json(r, 400) : r;
+  });
+}
+
 // src/server/routes/integrations.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync7, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
-import { delimiter, join as join15 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync15, statSync as statSync9 } from "fs";
+import { delimiter, join as join18 } from "path";
 var GH_TIMEOUT_MS = 3000;
 var isSet = (n2) => !!n2 && (process.env[n2] ?? "") !== "";
 function ghAuthed(pathVar = process.env.PATH ?? "", timeoutMs = GH_TIMEOUT_MS) {
-  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join15(d, "gh")).find((p) => existsSync7(p));
+  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join18(d, "gh")).find((p) => existsSync10(p));
   if (!exe)
     return Promise.resolve(null);
   return new Promise((resolve4) => {
@@ -14927,9 +15646,9 @@ function ghAuthed(pathVar = process.env.PATH ?? "", timeoutMs = GH_TIMEOUT_MS) {
 function configuredName(repoDir, path) {
   try {
     const r = resolveConfigFile(repoDir);
-    if (!r.ok || !r.exists || statSync7(r.file).size > 1e6)
+    if (!r.ok || !r.exists || statSync9(r.file).size > 1e6)
       return null;
-    const doc = $parseDocument(readFileSync12(r.file, "utf8"));
+    const doc = $parseDocument(readFileSync15(r.file, "utf8"));
     if (doc.errors.length)
       return null;
     const v = doc.getIn(path);
@@ -14940,10 +15659,10 @@ function configuredName(repoDir, path) {
 }
 function mcpServers(repoDir) {
   try {
-    const p = join15(repoDir, ".mcp.json");
-    if (!existsSync7(p) || statSync7(p).size > 1e6)
+    const p = join18(repoDir, ".mcp.json");
+    if (!existsSync10(p) || statSync9(p).size > 1e6)
       return null;
-    const j = JSON.parse(readFileSync12(p, "utf8"));
+    const j = JSON.parse(readFileSync15(p, "utf8"));
     return j.mcpServers && typeof j.mcpServers === "object" ? Object.keys(j.mcpServers).length : null;
   } catch {
     return null;
@@ -15010,7 +15729,7 @@ async function listIntegrations(repoDir, gh = () => ghAuthed()) {
   });
   return rows;
 }
-function mount10(ctx) {
+function mount13(ctx) {
   const cached = ttlCache();
   ctx.app.get("/v1/integrations", async (c) => {
     if (!probeAllowed(ctx, c))
@@ -15021,7 +15740,7 @@ function mount10(ctx) {
 
 // src/server/routes/merge_risk.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6 } from "fs";
+import { realpathSync as realpathSync8 } from "fs";
 import { basename as basename5, resolve as resolve4 } from "path";
 var PR = /^[0-9]{1,7}$/;
 var REF = /^[A-Za-z0-9._/][A-Za-z0-9._/-]{0,99}$/;
@@ -15113,14 +15832,14 @@ function parseRisk(out2) {
     return null;
   }
 }
-function mount11(ctx) {
+function mount14(ctx) {
   const { act, db } = ctx;
   const bin = () => ctx.startBin ?? process.env["LOKI_BIN"] ?? "loki";
   const busy2 = new Set;
   const active = { run: 0, queue: 0, risk: 0 };
   const real2 = (p) => {
     try {
-      return realpathSync6(p);
+      return realpathSync8(p);
     } catch {
       return null;
     }
@@ -15317,7 +16036,7 @@ function deriveNotifications(db) {
   }
   return out2.sort((a, b) => a.ts < b.ts ? 1 : a.ts > b.ts ? -1 : a.id < b.id ? -1 : 1);
 }
-function mount12(ctx) {
+function mount15(ctx) {
   ctx.app.get("/v1/notifications", (c) => {
     const all = deriveNotifications(ctx.db);
     const limit = Math.min(Math.max(Number.parseInt(c.req.query("limit") ?? "50", 10) || 50, 1), 200);
@@ -15331,8 +16050,8 @@ function mount12(ctx) {
 
 // src/server/routes/providers.ts
 import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync8, readFileSync as readFileSync13 } from "fs";
-import { delimiter as delimiter2, join as join16 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync16 } from "fs";
+import { delimiter as delimiter2, join as join19 } from "path";
 var ORDER = ["claude", "codex", "cline", "aider", "opencode"];
 var DEPRECATED = ["gemini"];
 var AUTH_ENV = {
@@ -15348,8 +16067,8 @@ function findOnPath(bin, pathVar) {
   for (const d of pathVar.split(delimiter2)) {
     if (!d)
       continue;
-    const p = join16(d, bin);
-    if (existsSync8(p))
+    const p = join19(d, bin);
+    if (existsSync11(p))
       return p;
   }
   return null;
@@ -15393,14 +16112,14 @@ function probeCli(bin, timeoutMs, pathVar = process.env.PATH ?? "") {
   });
 }
 function providersDir() {
-  const cands = [process.env.LOKI_PROVIDERS_DIR, join16(import.meta.dir, "../../../../../providers"), join16(import.meta.dir, "../../../providers")];
-  return cands.find((d) => !!d && existsSync8(join16(d, "model_catalog.json"))) ?? null;
+  const cands = [process.env.LOKI_PROVIDERS_DIR, join19(import.meta.dir, "../../../../../providers"), join19(import.meta.dir, "../../../providers")];
+  return cands.find((d) => !!d && existsSync11(join19(d, "model_catalog.json"))) ?? null;
 }
 function loadCatalog(dir) {
   if (!dir)
     return { providers: {}, updated: null };
   try {
-    const j = JSON.parse(readFileSync13(join16(dir, "model_catalog.json"), "utf8"));
+    const j = JSON.parse(readFileSync16(join19(dir, "model_catalog.json"), "utf8"));
     return { providers: j.providers ?? {}, updated: typeof j.updated === "string" ? j.updated : null };
   } catch {
     return { providers: {}, updated: null };
@@ -15431,7 +16150,7 @@ async function listProviders(timeoutMs = DEFAULT_TIMEOUT_MS) {
   }));
   return { providers: rows, catalog_updated: cat.updated, probe_timeout_ms: timeoutMs };
 }
-function mount13(ctx) {
+function mount16(ctx) {
   const cached = ttlCache();
   ctx.app.get("/v1/providers", async (c) => {
     if (!probeAllowed(ctx, c))
@@ -15504,7 +16223,7 @@ function computeStats(db, since) {
     receipts: { total, signed }
   };
 }
-function mount14(ctx) {
+function mount17(ctx) {
   ctx.app.get("/v1/stats", (c) => {
     const since = c.req.query("since") ?? null;
     if (since !== null && (!/^\d{4}-\d{2}-\d{2}/.test(since) || Number.isNaN(Date.parse(since))))
@@ -15518,7 +16237,7 @@ var num = (v, d) => {
   const n2 = Number(v);
   return Number.isFinite(n2) && n2 > 0 ? n2 : d;
 };
-function mount15(ctx) {
+function mount18(ctx) {
   const pollMs = num(process.env.LOKI_CONTROL_STREAM_POLL_MS, 1000);
   const heartbeatMs = num(process.env.LOKI_CONTROL_STREAM_HEARTBEAT_MS, 15000);
   const maxStreams = num(process.env.LOKI_CONTROL_STREAM_MAX, 32);
@@ -15636,27 +16355,27 @@ data: ${JSON.stringify({ source: k.slice(0, i), run: k.slice(i + 1) })}
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync22, realpathSync as realpathSync9 } from "fs";
+import { readFileSync as readFileSync25, realpathSync as realpathSync11 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join25, sep as sep7 } from "path";
+import { join as join28, sep as sep9 } from "path";
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync14, readdirSync as readdirSync9, readFileSync as readFileSync21, statSync as statSync10 } from "fs";
-import { dirname as dirname11, join as join24 } from "path";
+import { existsSync as existsSync17, readdirSync as readdirSync12, readFileSync as readFileSync24, statSync as statSync12 } from "fs";
+import { dirname as dirname12, join as join27 } from "path";
 import { createHash as createHash10, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
 
 // ../../loki-ts/src/util/paths.ts
-import { resolve as resolve5, dirname as dirname3 } from "path";
+import { resolve as resolve5, dirname as dirname4 } from "path";
 import { fileURLToPath } from "url";
-import { existsSync as existsSync9 } from "fs";
-var HERE = dirname3(fileURLToPath(import.meta.url));
+import { existsSync as existsSync12 } from "fs";
+var HERE = dirname4(fileURLToPath(import.meta.url));
 function findRepoRoot() {
   let dir = HERE;
   for (let i = 0;i < 6; i++) {
-    if (existsSync9(resolve5(dir, "VERSION")) && existsSync9(resolve5(dir, "autonomy/run.sh"))) {
+    if (existsSync12(resolve5(dir, "VERSION")) && existsSync12(resolve5(dir, "autonomy/run.sh"))) {
       return dir;
     }
-    const parent = dirname3(dir);
+    const parent = dirname4(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -15667,15 +16386,15 @@ var REPO_ROOT = findRepoRoot();
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash9, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync13, readdirSync as readdirSync8, linkSync, mkdirSync as mkdirSync6, readFileSync as readFileSync19, statSync as statSync9, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "fs";
+import { chmodSync as chmodSync4, existsSync as existsSync16, readdirSync as readdirSync11, linkSync, mkdirSync as mkdirSync8, readFileSync as readFileSync22, statSync as statSync11, unlinkSync as unlinkSync4, writeFileSync as writeFileSync9 } from "fs";
 import { homedir as homedir5 } from "os";
-import { basename as basename9, dirname as dirname10, join as join23 } from "path";
+import { basename as basename9, dirname as dirname11, join as join26 } from "path";
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import { mkdtempSync, readFileSync as readFileSync14, rmSync as rmSync2 } from "fs";
+import { execFileSync as execFileSync3 } from "child_process";
+import { mkdtempSync, readFileSync as readFileSync17, rmSync as rmSync3 } from "fs";
 import { tmpdir } from "os";
-import { join as join17 } from "path";
+import { join as join20 } from "path";
 import { basename as basename6 } from "path";
 var WEAKENED = { verdict: "weakened", changes: [] };
 var PY = String.raw`
@@ -15834,8 +16553,8 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync(join17(tmpdir(), "loki-ad-"));
-    const raw2 = execFileSync2("python3", ["-I", "-c", PY], {
+    cwd = mkdtempSync(join20(tmpdir(), "loki-ad-"));
+    const raw2 = execFileSync3("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
       env: process.env,
@@ -15857,15 +16576,15 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   } finally {
     if (cwd)
-      rmSync2(cwd, { recursive: true, force: true });
+      rmSync3(cwd, { recursive: true, force: true });
   }
 }
 function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, headCounts) {
   if (!baseCounts || !headCounts)
     return null;
   try {
-    const show = (ref) => execFileSync2("git", ["show", `${ref}:${path}`], { cwd: repoDir, encoding: "utf8", env: process.env, stdio: ["ignore", "pipe", "ignore"] });
-    const head = headRef ? show(headRef) : readFileSync14(join17(repoDir, path), "utf8");
+    const show = (ref) => execFileSync3("git", ["show", `${ref}:${path}`], { cwd: repoDir, encoding: "utf8", env: process.env, stdio: ["ignore", "pipe", "ignore"] });
+    const head = headRef ? show(headRef) : readFileSync17(join20(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -15881,21 +16600,21 @@ function classifyTestEdit(file, oldText, newText, taskText, baseCounts, headCoun
 }
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { execFileSync as execFileSync3 } from "child_process";
-import { chmodSync as chmodSync3, closeSync as closeSync4, lstatSync as lstatSync2, mkdirSync as mkdirSync3, openSync as openSync4, readFileSync as readFileSync15, realpathSync as realpathSync7, rmdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname4, join as join18, relative, sep as sep4 } from "path";
+import { execFileSync as execFileSync4 } from "child_process";
+import { chmodSync as chmodSync3, closeSync as closeSync4, lstatSync as lstatSync3, mkdirSync as mkdirSync5, openSync as openSync4, readFileSync as readFileSync18, realpathSync as realpathSync9, rmdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync6 } from "fs";
+import { dirname as dirname5, join as join21, relative, sep as sep6 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync7(repoDir), fp = join18(root, f), rel = relative(root, dirname4(fp));
+  const root = realpathSync9(repoDir), fp = join21(root, f), rel = relative(root, dirname5(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
-  for (const part of rel === "" ? [] : rel.split(sep4)) {
-    cur = join18(cur, part);
+  for (const part of rel === "" ? [] : rel.split(sep6)) {
+    cur = join21(cur, part);
     let st2;
     try {
-      st2 = lstatSync2(cur);
+      st2 = lstatSync3(cur);
     } catch {
-      mkdirSync3(cur);
+      mkdirSync5(cur);
       continue;
     }
     if (!st2.isDirectory())
@@ -15903,11 +16622,11 @@ function safeRestore(repoDir, f, want, mode) {
   }
   let st;
   try {
-    st = lstatSync2(fp);
+    st = lstatSync3(fp);
   } catch {
     st = null;
   }
-  if (st?.isFile() && readFileSync15(fp).equals(want)) {
+  if (st?.isFile() && readFileSync18(fp).equals(want)) {
     chmodSync3(fp, mode);
     return;
   }
@@ -15915,11 +16634,11 @@ function safeRestore(repoDir, f, want, mode) {
     if (st.isDirectory())
       rmdirSync(fp);
     else
-      unlinkSync2(fp);
+      unlinkSync3(fp);
   }
   const fd = openSync4(fp, "wx", mode);
   try {
-    writeFileSync4(fd, want);
+    writeFileSync6(fd, want);
   } finally {
     closeSync4(fd);
   }
@@ -15939,15 +16658,15 @@ async function discardIfSatisfied(git, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join18(repoDir, f);
+    const fp = join21(repoDir, f);
     try {
       if (v.startsWith("!")) {
-        const st = lstatSync2(fp);
+        const st = lstatSync3(fp);
         if (`!${st.size}:${st.mtimeMs}:${st.ctimeMs}` !== v)
           throw new Error("changed, not snapshotted");
         continue;
       }
-      const [sha2, mode] = v.split(" "), want = execFileSync3("git", ["cat-file", "blob", sha2], { cwd: repoDir, env: process.env, maxBuffer: 1 << 28 });
+      const [sha2, mode] = v.split(" "), want = execFileSync4("git", ["cat-file", "blob", sha2], { cwd: repoDir, env: process.env, maxBuffer: 1 << 28 });
       safeRestore(repoDir, f, want, parseInt(mode ?? "644", 8));
     } catch {
       notProven.push(f);
@@ -15958,11 +16677,11 @@ async function discardIfSatisfied(git, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync2(join18(repoDir, f));
+          const l = lstatSync3(join21(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
-        safeRestore(repoDir, f, execFileSync3("git", ["cat-file", "blob", pre[f]], { cwd: repoDir, env: process.env, maxBuffer: 1 << 28 }), m);
+        safeRestore(repoDir, f, execFileSync4("git", ["cat-file", "blob", pre[f]], { cwd: repoDir, env: process.env, maxBuffer: 1 << 28 }), m);
       } catch {
         notProven.push(f);
       }
@@ -15971,11 +16690,11 @@ async function discardIfSatisfied(git, base, o, staged, keep, repoDir) {
 }
 
 // ../../loki-ts/src/e10ext/commit_filter.ts
-import { dirname as dirname5 } from "path";
+import { dirname as dirname6 } from "path";
 
 // ../../loki-ts/src/e10ext/preexisting_dirty.ts
-import { execFileSync as execFileSync4 } from "child_process";
-var blob2 = (repoDir, path, env = process.env) => execFileSync4("git", ["hash-object", "-w", "--no-filters", "--", path], { cwd: repoDir, encoding: "utf8", env, stdio: ["ignore", "pipe", "ignore"] }).trim();
+import { execFileSync as execFileSync5 } from "child_process";
+var blob2 = (repoDir, path, env = process.env) => execFileSync5("git", ["hash-object", "-w", "--no-filters", "--", path], { cwd: repoDir, encoding: "utf8", env, stdio: ["ignore", "pipe", "ignore"] }).trim();
 function untouchedSinceIntake(repoDir, recorded, env = process.env) {
   if (!recorded || typeof recorded !== "object")
     return [];
@@ -15991,14 +16710,14 @@ function untouchedSinceIntake(repoDir, recorded, env = process.env) {
 // ../../loki-ts/src/e10ext/commit_filter.ts
 var parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []);
 function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
-  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname5(m) === dirname5(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
+  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname6(m) === dirname6(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
 }
 
 // ../../loki-ts/src/e10ext/scope.ts
-import { basename as basename8, dirname as dirname6 } from "path";
+import { basename as basename8, dirname as dirname7 } from "path";
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename7, extname, join as join19, relative as relative2, sep as sep5 } from "path";
+import { basename as basename7, extname, join as join22, relative as relative2, sep as sep7 } from "path";
 var SKIP_DIRS = new Set([
   ".git",
   "node_modules",
@@ -16023,14 +16742,14 @@ function isTestFile(rel) {
 }
 
 // ../../loki-ts/src/features/speed/unit_mode.ts
-import { closeSync as closeSync5, constants, fstatSync as fstatSync3, lstatSync as lstatSync3, openSync as openSync5, readSync as readSync3, realpathSync as realpathSync8 } from "fs";
+import { closeSync as closeSync5, constants, fstatSync as fstatSync3, lstatSync as lstatSync4, openSync as openSync5, readSync as readSync3, realpathSync as realpathSync10 } from "fs";
 var MAX_SPEC_BYTES = 1024 * 1024;
 var MAX_TOKEN_BUDGET = 1e9;
 var norm2 = (p) => p.replace(/^\.\//, "");
 var CTRL = /[\x00-\x1f\x7f]/;
 var strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm2) : null;
 function readBounded(path) {
-  const l = lstatSync3(path);
+  const l = lstatSync4(path);
   if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
     return null;
   const fd = openSync5(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
@@ -16110,8 +16829,8 @@ function outsideScope(o, staged) {
   const text2 = `${plan}
 ${typeof o.intake?.task === "string" ? o.intake.task : ""}
 ${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
-  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname6(r)).filter((d) => d !== "."));
-  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename8(f)) && !plannedDirs.has(dirname6(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
+  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname7(r)).filter((d) => d !== "."));
+  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename8(f)) && !plannedDirs.has(dirname7(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
 }
 function flagOutsideScope(o, staged) {
   const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
@@ -16193,9 +16912,9 @@ async function run(argv, opts = {}) {
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn5 } from "child_process";
 import { createHash as createHash6, randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync4, readdirSync as readdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync13, lstatSync as lstatSync5, mkdirSync as mkdirSync6, readdirSync as readdirSync9, readFileSync as readFileSync19, writeFileSync as writeFileSync7 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname7, isAbsolute, join as join20, normalize, relative as relative3, sep as sep6 } from "path";
+import { dirname as dirname8, isAbsolute, join as join23, normalize, relative as relative3, sep as sep8 } from "path";
 var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0";
 var PAGE_RE = /^(?:.*\/)?(?:app|pages|src|public)\/.*\.(?:html|jsx|tsx|vue|svelte)$/;
 var isPageFile = (p) => PAGE_RE.test(p);
@@ -16205,12 +16924,12 @@ function routeFor(file) {
   return `/${r}`.replace(/\/+/g, "/");
 }
 var screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index";
-var sha256File = (p) => createHash6("sha256").update(readFileSync16(p)).digest("hex");
+var sha256File = (p) => createHash6("sha256").update(readFileSync19(p)).digest("hex");
 function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join20(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join23(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -16223,14 +16942,14 @@ function checkScreens(runDir, screens) {
       return "evidence_screens entry is malformed";
     if (isAbsolute(s.path) || normalize(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join20(runDir, s.path);
+    const file = join23(runDir, s.path);
     let cur = runDir;
-    for (const seg of normalize(s.path).split(sep6)) {
-      cur = join20(cur, seg);
+    for (const seg of normalize(s.path).split(sep8)) {
+      cur = join23(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
-    if (!existsSync10(file))
+    if (!existsSync13(file))
       return `evidence screenshot is missing: ${s.path}`;
     if (!isRegularFile(file))
       return `evidence screenshot is not a regular file: ${s.path}`;
@@ -16272,16 +16991,16 @@ async function waitUp(url, ms, signal) {
   return false;
 }
 var playwrightBin = (repoDir) => {
-  const bin = join20(repoDir, "node_modules", ".bin", "playwright");
-  return existsSync10(bin) ? bin : null;
+  const bin = join23(repoDir, "node_modules", ".bin", "playwright");
+  return existsSync13(bin) ? bin : null;
 };
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join20(repoDir, f);
-    if (!existsSync10(p))
+    const p = join23(repoDir, f);
+    if (!existsSync13(p))
       continue;
     try {
-      const txt = readFileSync16(p, "utf8");
+      const txt = readFileSync19(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -16291,8 +17010,8 @@ function openapiPaths(repoDir) {
   return [];
 }
 var playwrightTestPkg = (repoDir) => {
-  const d = join20(repoDir, "node_modules", "@playwright", "test");
-  return existsSync10(join20(d, "package.json")) ? d : null;
+  const d = join23(repoDir, "node_modules", "@playwright", "test");
+  return existsSync13(join23(d, "package.json")) ? d : null;
 };
 var e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
@@ -16304,24 +17023,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join20(runDir, relDir, "e2e");
-    mkdirSync4(dir, { recursive: true });
-    writeFileSync5(join20(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync5(join20(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    const dir = join23(runDir, relDir, "e2e");
+    mkdirSync6(dir, { recursive: true });
+    writeFileSync7(join23(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync7(join23(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join20(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join23(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
-      for (const e of readdirSync6(d, { withFileTypes: true })) {
-        const full = join20(d, e.name);
+      for (const e of readdirSync9(d, { withFileTypes: true })) {
+        const full = join23(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join20(relDir, "e2e", relative3(dir, full)));
+          rels.push(join23(relDir, "e2e", relative3(dir, full)));
       }
     };
-    walk(join20(dir, "out"));
+    walk(join23(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -16359,14 +17078,14 @@ function shoot(pw, args, cwd, ms, signal) {
 }
 var isSymlink = (p) => {
   try {
-    return lstatSync4(p).isSymbolicLink();
+    return lstatSync5(p).isSymbolicLink();
   } catch {
     return false;
   }
 };
 var isRegularFile = (p) => {
   try {
-    return lstatSync4(p).isFile();
+    return lstatSync5(p).isFile();
   } catch {
     return false;
   }
@@ -16414,10 +17133,10 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
   try {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
-    const pkgPath = join20(repoDir, "package.json");
-    if (!existsSync10(pkgPath))
+    const pkgPath = join23(repoDir, "package.json");
+    if (!existsSync13(pkgPath))
       return skip("no package.json");
-    const script = pickScript(JSON.parse(readFileSync16(pkgPath, "utf8")));
+    const script = pickScript(JSON.parse(readFileSync19(pkgPath, "utf8")));
     if (!script)
       return skip("no dev, preview or start script");
     const pages = changed.filter(isPageFile);
@@ -16442,20 +17161,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join20(runDir, "evidence");
+    const evRoot = join23(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
-    mkdirSync4(evRoot, { recursive: true });
+    mkdirSync6(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join20("evidence", randomBytes2(6).toString("hex"));
-      mkdirSync4(join20(runDir, rel0));
+      const rel0 = join23("evidence", randomBytes2(6).toString("hex"));
+      mkdirSync6(join23(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join20(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join20(runDir, rel)], repoDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join20(runDir, rel)) && existsSync10(join20(runDir, rel)))
+        const rel = join23(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join23(runDir, rel)], repoDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join23(runDir, rel)) && existsSync13(join23(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -16480,9 +17199,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join20(evRoot, randomBytes2(6).toString("hex"));
-    mkdirSync4(hdir);
-    writeFileSync5(join20(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    const hdir = join23(evRoot, randomBytes2(6).toString("hex"));
+    mkdirSync6(hdir);
+    writeFileSync7(join23(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -16505,7 +17224,7 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
   return ev.screens.length > 0 ? { evidence_screens: ev.screens } : {};
 }
 function receiptScreensProblem(receiptPath, receipt) {
-  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname7(receiptPath), receipt["evidence_screens"]);
+  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname8(receiptPath), receipt["evidence_screens"]);
 }
 
 // ../../loki-ts/src/engine10/types.ts
@@ -16523,8 +17242,8 @@ var STAGE_BUDGETS = {
 };
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync11, lstatSync as lstatSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync17, writeFileSync as writeFileSync6 } from "fs";
-import { dirname as dirname8, join as join21 } from "path";
+import { existsSync as existsSync14, lstatSync as lstatSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync20, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname9, join as join24 } from "path";
 import { createHash as createHash7 } from "crypto";
 var MAX_CRITERIA = 50;
 var MAX_TEXT = 500;
@@ -16559,14 +17278,14 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join21(repoDir, ".loki", "contract.json");
+  return join24(repoDir, ".loki", "contract.json");
 }
 var MAX_CONTRACT_BYTES = 1024 * 1024;
 function readContract(repoDir) {
   const p = contractPath(repoDir);
   let st;
   try {
-    st = lstatSync5(p);
+    st = lstatSync6(p);
   } catch {
     return { contract: null, notes: [], sha256: null };
   }
@@ -16576,7 +17295,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync17(p);
+    raw2 = readFileSync20(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -16611,7 +17330,7 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
     const live = readContract(repoDir);
     let exists2 = true;
     try {
-      lstatSync5(contractPath(repoDir));
+      lstatSync6(contractPath(repoDir));
     } catch {
       exists2 = false;
     }
@@ -16640,32 +17359,32 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync7, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
-import { dirname as dirname9, join as join22 } from "path";
+import { existsSync as existsSync15, readdirSync as readdirSync10, readFileSync as readFileSync21, statSync as statSync10 } from "fs";
+import { dirname as dirname10, join as join25 } from "path";
 var ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 var PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
 var sha2 = (b) => createHash8("sha256").update(b).digest("hex");
-var isObj6 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+var isObj9 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "";
 var num2 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-var unitsDir = (runDir) => join22(runDir, "group", "units");
-var readJson2 = (p) => {
+var unitsDir = (runDir) => join25(runDir, "group", "units");
+var readJson3 = (p) => {
   try {
-    return JSON.parse(readFileSync18(p, "utf8"));
+    return JSON.parse(readFileSync21(p, "utf8"));
   } catch {
     return;
   }
 };
 var dirNames = (d) => {
   try {
-    return readdirSync7(d).filter((n2) => !n2.startsWith(".")).sort();
+    return readdirSync10(d).filter((n2) => !n2.startsWith(".")).sort();
   } catch {
     return null;
   }
 };
 function sealGroup(runDir, rh) {
-  const manifestPath = join22(runDir, "group", "manifest.json");
-  if (!existsSync12(manifestPath))
+  const manifestPath = join25(runDir, "group", "manifest.json");
+  if (!existsSync15(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
   let problems = 0;
@@ -16673,9 +17392,9 @@ function sealGroup(runDir, rh) {
     problems++;
     notProven.push(`group: ${m2}`);
   };
-  const m = readJson2(manifestPath);
-  const list = isObj6(m) && Array.isArray(m["units"]) ? m["units"] : [];
-  if (!isObj6(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
+  const m = readJson3(manifestPath);
+  const list = isObj9(m) && Array.isArray(m["units"]) ? m["units"] : [];
+  if (!isObj9(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
     fail("manifest missing, unreadable or empty");
     return { section: undefined, notProven, problems, allUnitsPass: false };
   }
@@ -16683,21 +17402,21 @@ function sealGroup(runDir, rh) {
   const seen = new Set, seenLower = new Set;
   let allUnitsPass = true;
   list.forEach((raw2, index2) => {
-    const u = isObj6(raw2) ? raw2 : {};
+    const u = isObj9(raw2) ? raw2 : {};
     const id = String(u["unit_id"] ?? "");
     if (!ID_RE.test(id) || seen.has(id) || seenLower.has(id.toLowerCase()))
       return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join22(unitsDir(runDir), id), rp = join22(dir, "receipt.json"), ep = join22(dir, "events.jsonl");
+    const dir = join25(unitsDir(runDir), id), rp = join25(dir, "receipt.json"), ep = join25(dir, "events.jsonl");
     let bytes;
     try {
-      bytes = readFileSync18(rp);
+      bytes = readFileSync21(rp);
     } catch {
       return fail(`unit ${id} sub-receipt missing`);
     }
-    const sub = readJson2(rp);
-    if (!isObj6(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
+    const sub = readJson3(rp);
+    if (!isObj9(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
       return fail(`unit ${id} sub-receipt unreadable or its hash does not recompute`);
     const verdict = String(sub["verdict"] ?? "");
     if (!PASSING.has(verdict)) {
@@ -16709,7 +17428,7 @@ function sealGroup(runDir, rh) {
       unit_id: id,
       sub_receipt_sha256: sha2(bytes),
       receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync12(ep) ? sha2(readFileSync18(ep)) : null,
+      events_file_sha256: existsSync15(ep) ? sha2(readFileSync21(ep)) : null,
       verdict,
       goal: text2(u["goal"], 200),
       files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
@@ -16729,16 +17448,16 @@ function capGroupVerdict(v, g) {
   return !g.allUnitsPass && (v === "VERIFIED" || v === "ALREADY_SATISFIED") ? "PARTIAL" : v;
 }
 async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
-  const runDir = dirname9(receiptPath);
-  const signed = isObj6(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
+  const runDir = dirname10(receiptPath);
+  const signed = isObj9(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync12(join22(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
-  if (!isObj6(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
+    return existsSync15(join25(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+  if (!isObj9(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
-  const ids = entries.map((e) => isObj6(e) ? String(e["unit_id"] ?? "") : "");
+  const ids = entries.map((e) => isObj9(e) ? String(e["unit_id"] ?? "") : "");
   if (ids.some((id) => !ID_RE.test(id)) || new Set(ids.map((i) => i.toLowerCase())).size !== ids.length)
     return bad("unit ids invalid, duplicated or case-colliding");
   const onDisk = dirNames(unitsDir(runDir));
@@ -16746,24 +17465,24 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join22(unitsDir(runDir), id), rp = join22(dir, "receipt.json"), ep = join22(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join25(unitsDir(runDir), id), rp = join25(dir, "receipt.json"), ep = join25(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
     try {
-      if (!statSync8(dir).isDirectory())
+      if (!statSync10(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync18(rp);
+      bytes = readFileSync21(rp);
     } catch {
       return bad(`unit ${id} sub-receipt missing`);
     }
     if (sha2(bytes) !== e["sub_receipt_sha256"])
       return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync12(ep) ? sha2(readFileSync18(ep)) : null;
+    const evSha = existsSync15(ep) ? sha2(readFileSync21(ep)) : null;
     if (evSha !== (e["events_file_sha256"] ?? null))
       return bad(`unit ${id} events.jsonl does not match its recorded hash`);
-    const sub = readJson2(rp);
-    if (!isObj6(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
+    const sub = readJson3(rp);
+    if (!isObj9(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
       return bad(`unit ${id} sub-receipt hash does not recompute`);
     if (String(sub["verdict"] ?? "") !== e["verdict"])
       return bad(`unit ${id} verdict differs from the combined receipt`);
@@ -16783,7 +17502,7 @@ var DEEP_NOT_PROVEN = ["full suite", "app boot", "council", "security scan"];
 var SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)";
 var EXCLUDE_LOKI = ":(exclude).loki";
 var sha2562 = (s) => createHash9("sha256").update(s).digest("hex");
-var str2 = (v) => typeof v === "string" && v !== "" ? v : null;
+var str3 = (v) => typeof v === "string" && v !== "" ? v : null;
 var strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [];
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
@@ -16814,30 +17533,30 @@ function loadSigningKey(generate = true) {
     let pem = inline ?? "";
     if (!inline) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join23(process.env["HOME"] || homedir5(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
+      const file = given || join26(process.env["HOME"] || homedir5(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        pem = readFileSync19(file);
+        pem = readFileSync22(file);
         if (!given) {
-          for (const [f, m] of [[file, 384], [dirname10(file), 448]])
-            if (statSync9(f).mode & 63)
+          for (const [f, m] of [[file, 384], [dirname11(file), 448]])
+            if (statSync11(f).mode & 63)
               chmodSync4(f, m);
         }
       } catch (e) {
         if (e.code !== "ENOENT" || !generate)
           return null;
-        mkdirSync6(dirname10(dirname10(file)), { recursive: true, mode: 448 });
-        mkdirSync6(dirname10(file), { recursive: true, mode: 448 });
+        mkdirSync8(dirname11(dirname11(file)), { recursive: true, mode: 448 });
+        mkdirSync8(dirname11(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
-        writeFileSync7(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
+        writeFileSync9(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
           linkSync(tmp, file);
         } catch (l) {
           if (l.code !== "EEXIST")
             throw l;
         } finally {
-          unlinkSync3(tmp);
+          unlinkSync4(tmp);
         }
-        pem = readFileSync19(file);
+        pem = readFileSync22(file);
       }
     }
     const k = createPrivateKey(pem);
@@ -16879,7 +17598,7 @@ var commitStage = {
     const dropped = new Set(drop.map(({ f }) => f)), notes = flagOutsideScope(ctx.outputs(), staged.filter(({ f }) => !dropped.has(f)));
     if ((await git(ctx, ["diff", "--cached", "--quiet"])).code === 0)
       return { status: "completed", data: { committed: false, scope_notes: notes } };
-    const title = (str2(ctx.outputs().intake?.title) ?? `run ${ctx.runId}`).split(`
+    const title = (str3(ctx.outputs().intake?.title) ?? `run ${ctx.runId}`).split(`
 `)[0].slice(0, 72);
     const c = await git(ctx, ["commit", "-q", "-m", `loki: ${title}`, "-m", `Loki-Run: ${ctx.runId}`]);
     if (c.code !== 0)
@@ -16964,7 +17683,7 @@ var sealStage = {
     if (wallNotRun > 0) {
       try {
         const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename9(String(f.path))));
-        for (const n2 of readdirSync8(join23(ctx.runDir, "wall")).sort())
+        for (const n2 of readdirSync11(join26(ctx.runDir, "wall")).sort())
           if (!kept.has(n2))
             notProven.add(`wall test discarded: ${n2} (not_run)`);
       } catch {}
@@ -16983,7 +17702,7 @@ var sealStage = {
       if (!vl.length)
         continue;
       const tc = tcs?.[t];
-      const mine = assertDeltaNotes(ctx.repoDir, ctx.baseSha, head, t, str2(o.intake?.task) ?? "", cnt(tc?.b), cnt(tc?.h));
+      const mine = assertDeltaNotes(ctx.repoDir, ctx.baseSha, head, t, str3(o.intake?.task) ?? "", cnt(tc?.b), cnt(tc?.h));
       if (!mine || mine.length !== vl.length || mine.some((n2) => !vl.includes(n2)))
         for (const v of vl)
           dropped.add(v);
@@ -17009,7 +17728,7 @@ var sealStage = {
     const source = o.intake?.source;
     if (source !== "text" && source !== "issue")
       notProven.add("task source not recorded by intake");
-    const repo = str2(o.intake?.repo);
+    const repo = str3(o.intake?.repo);
     if (repo === null)
       notProven.add("repo not recorded by intake");
     if (typeof o.intake?.resumed !== "boolean")
@@ -17024,7 +17743,7 @@ var sealStage = {
     const cost = ctx.cost.read(ctx.repoDir, iterIds);
     if (cost.unmetered)
       notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-    const eventsPath = join23(ctx.runDir, "events.jsonl");
+    const eventsPath = join26(ctx.runDir, "events.jsonl");
     const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
     const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
     if (wallFiles.length > 0 && wallPassed === null)
@@ -17032,7 +17751,7 @@ var sealStage = {
     const body = {
       schema: "loki.v10.receipt/1",
       run_id: ctx.runId,
-      task: { source: source === "issue" ? "issue" : "text", sha256: str2(o.intake?.task_sha256) ?? "" },
+      task: { source: source === "issue" ? "issue" : "text", sha256: str3(o.intake?.task_sha256) ?? "" },
       repo: repo ?? "",
       base_sha: ctx.baseSha,
       head_sha: head,
@@ -17043,7 +17762,7 @@ var sealStage = {
       not_proven: [],
       verdict,
       ...grp.section ? { group: grp.section } : {},
-      ...str2(o.implement?.spec_conflict_reason) !== null ? { spec_conflict_reason: sanitizeReason(str2(o.implement?.spec_conflict_reason)) } : {},
+      ...str3(o.implement?.spec_conflict_reason) !== null ? { spec_conflict_reason: sanitizeReason(str3(o.implement?.spec_conflict_reason)) } : {},
       evidence: strs2(o.intake?.evidence),
       ...o.intake?.preexisting_dirty ? { pre_existing_dirty: Object.keys(o.intake.preexisting_dirty) } : {},
       cost: {
@@ -17053,13 +17772,14 @@ var sealStage = {
         measured_sessions: cost.measuredCount ?? 0,
         total_sessions: cost.totalCount ?? 0,
         partial_usd: cost.partialUsd ?? 0,
-        ...cost.unmetered ? { source: "cli-invoker-unmetered" } : {}
+        ...cost.unmetered ? { source: "cli-invoker-unmetered" } : {},
+        ...Array.isArray(o.fix?.fix_rounds) ? { fix_rounds: o.fix.fix_rounds } : {}
       },
       time: { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages },
       provider: ctx.provider,
       model: ctx.model,
       resumed: o.intake?.resumed === true,
-      events_sha256: sha2562(existsSync13(eventsPath) ? readFileSync19(eventsPath) : ""),
+      events_sha256: sha2562(existsSync16(eventsPath) ? readFileSync22(eventsPath) : ""),
       ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
       log_seal: true
     };
@@ -17073,11 +17793,11 @@ var sealStage = {
       hash = receiptSha256(body);
     }
     const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
-    mkdirSync6(ctx.runDir, { recursive: true });
-    const path = join23(ctx.runDir, "receipt.json");
-    writeFileSync7(path, JSON.stringify(receipt, null, 2) + `
+    mkdirSync8(ctx.runDir, { recursive: true });
+    const path = join26(ctx.runDir, "receipt.json");
+    writeFileSync9(path, JSON.stringify(receipt, null, 2) + `
 `);
-    writeFileSync7(join23(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+    writeFileSync9(join26(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
     const signed = sig.jwt !== null;
     const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven };
     ctx.emit("receipt.sealed", "seal", { path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven });
@@ -17087,7 +17807,7 @@ var sealStage = {
 
 // ../../loki-ts/src/features/receipt_dsse.ts
 import { createPublicKey as createPublicKey3, sign as sign2, verify as verify2 } from "crypto";
-import { readFileSync as readFileSync20 } from "fs";
+import { readFileSync as readFileSync23 } from "fs";
 var DSSE_PAYLOAD_TYPE = "application/vnd.in-toto+json";
 var STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
 var PREDICATE_TYPE = "https://autonomi.dev/loki/receipt/v10";
@@ -17168,7 +17888,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync20(receiptPath, "utf8")), runId);
+    return envelopeRunIdProblem(JSON.parse(readFileSync23(receiptPath, "utf8")), runId);
   } catch {
     return null;
   }
@@ -17182,7 +17902,7 @@ function pubFor(kid, given) {
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync21(f))];
+      return [createPublicKey4(readFileSync24(f))];
     } catch {
       return [];
     }
@@ -17214,10 +17934,10 @@ function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
   if (typeof bound !== "string" || bound === createHash10("sha256").digest("hex"))
     return null;
-  const path = join24(dirname11(receiptPath), "events.jsonl");
-  if (!existsSync14(path))
+  const path = join27(dirname12(receiptPath), "events.jsonl");
+  if (!existsSync17(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync21(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
+  const raw2 = readFileSync24(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
 `).filter((l) => l.trim() !== "");
   if (events2.length !== lines.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
@@ -17233,7 +17953,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join24(dirname11(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join27(dirname12(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -17241,7 +17961,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines = readFileSync21(path, "utf8").split(`
+  const lines = readFileSync24(path, "utf8").split(`
 `).filter((l) => l.trim() !== ""), sha3 = createHash10("sha256").update(lines.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
@@ -17251,11 +17971,11 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   return null;
 }
 async function verifyReceipt(receiptPath, deps = {}) {
-  if (!existsSync14(receiptPath))
+  if (!existsSync17(receiptPath))
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync21(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync24(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -17299,7 +18019,7 @@ async function verifyReceipt(receiptPath, deps = {}) {
 // src/server/routes/verify.ts
 var ID4 = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 var safeId2 = (s) => ID4.test(s) && !s.includes("..");
-function mount16(ctx) {
+function mount19(ctx) {
   const { act, db } = ctx;
   act.post("/v1/runs/:source/:run/verify", async (c) => {
     const source = c.req.param("source"), run2 = c.req.param("run");
@@ -17320,15 +18040,15 @@ function mount16(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync9(join25(repo.p, ".loki", "runs"));
-      runDir = realpathSync9(join25(root, run2));
-      if (runDir !== join25(root, run2))
+      const root = realpathSync11(join28(repo.p, ".loki", "runs"));
+      runDir = realpathSync11(join28(root, run2));
+      if (runDir !== join28(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync9(join25(runDir, "receipt.json"));
+      file = realpathSync11(join28(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
-    if (!file.startsWith(runDir + sep7))
+    if (!file.startsWith(runDir + sep9))
       return done(404, "receipt not found", "not_found");
     let integrity, reasons, sha3 = null, outcome = "UNREADABLE";
     try {
@@ -17343,7 +18063,7 @@ function mount16(ctx) {
         sha3 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync22(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync25(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -17378,7 +18098,7 @@ function mount16(ctx) {
 }
 
 // src/server/routes/index.ts
-var routeModules = [mount, mount15, mount3, mount5, mount14, mount6, mount7, mount8, mount9, mount4, mount13, mount16, mount10, mount12, mount2, mount11];
+var routeModules = [mount, mount18, mount5, mount7, mount17, mount8, mount3, mount9, mount11, mount4, mount10, mount12, mount6, mount16, mount19, mount13, mount15, mount2, mount14];
 function registerRoutes(ctx) {
   mountRepos(ctx.act, ctx.db, ctx.peerIsLoopback);
   for (const m of routeModules)
@@ -17405,8 +18125,8 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync15, readFileSync as readFileSync23 } from "fs";
-import { join as join26 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync26 } from "fs";
+import { join as join29 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -17414,11 +18134,11 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/docs", action: "410", open: true, migrate: "" },
   { method: "GET", path: "/docs/oauth2-redirect", action: "410", open: true, migrate: "" },
   { method: "GET", path: "/redoc", action: "410", open: true, migrate: "" },
-  { method: "POST", path: "/api/v2/tenants", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/v2/tenants", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/v2/tenants/{tenant_id}", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/v2/tenants", action: "410", open: false, migrate: "no tenants: local single user" },
+  { method: "GET", path: "/api/v2/tenants", action: "410", open: false, migrate: "no tenants: local single user" },
+  { method: "GET", path: "/api/v2/tenants/{tenant_id}", action: "410", open: false, migrate: "no tenants: local single user" },
   { method: "PUT", path: "/api/v2/tenants/{tenant_id}", action: "410", open: false, migrate: "" },
-  { method: "DELETE", path: "/api/v2/tenants/{tenant_id}", action: "501", open: false, migrate: "" },
+  { method: "DELETE", path: "/api/v2/tenants/{tenant_id}", action: "410", open: false, migrate: "no tenants: local single user" },
   { method: "GET", path: "/api/v2/tenants/{tenant_id}/projects", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/v2/runs", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/v2/runs", action: "map", open: false, migrate: "/v1/runs" },
@@ -17426,12 +18146,12 @@ var LEGACY_ROUTES = [
   { method: "POST", path: "/api/v2/runs/{run_id}/cancel", action: "501", open: false, migrate: "" },
   { method: "POST", path: "/api/v2/runs/{run_id}/replay", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/v2/runs/{run_id}/timeline", action: "map", open: false, migrate: "/v1/runs/:id" },
-  { method: "POST", path: "/api/v2/api-keys", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/v2/api-keys", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/v2/api-keys", action: "410", open: false, migrate: "CP bearer token set by env (LOKI_CONTROL_TOKEN)" },
+  { method: "GET", path: "/api/v2/api-keys", action: "410", open: false, migrate: "CP bearer token set by env (LOKI_CONTROL_TOKEN)" },
   { method: "GET", path: "/api/v2/api-keys/{identifier}", action: "410", open: false, migrate: "" },
   { method: "PUT", path: "/api/v2/api-keys/{identifier}", action: "410", open: false, migrate: "" },
-  { method: "DELETE", path: "/api/v2/api-keys/{identifier}", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/v2/api-keys/{identifier}/rotate", action: "501", open: false, migrate: "" },
+  { method: "DELETE", path: "/api/v2/api-keys/{identifier}", action: "410", open: false, migrate: "CP bearer token set by env (LOKI_CONTROL_TOKEN)" },
+  { method: "POST", path: "/api/v2/api-keys/{identifier}/rotate", action: "410", open: false, migrate: "CP bearer token set by env (LOKI_CONTROL_TOKEN)" },
   { method: "GET", path: "/api/v2/policies", action: "410", open: false, migrate: "" },
   { method: "PUT", path: "/api/v2/policies", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/v2/policies/evaluate", action: "410", open: false, migrate: "" },
@@ -17467,31 +18187,31 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/api/projects/{project_id}", action: "501", open: false, migrate: "" },
   { method: "PUT", path: "/api/projects/{project_id}", action: "501", open: false, migrate: "" },
   { method: "DELETE", path: "/api/projects/{project_id}", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/tasks", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/tasks", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/tasks/{task_id}", action: "501", open: false, migrate: "" },
-  { method: "PUT", path: "/api/tasks/{task_id}", action: "501", open: false, migrate: "" },
-  { method: "DELETE", path: "/api/tasks/{task_id}", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/tasks/{task_id}/move", action: "501", open: false, migrate: "" },
-  { method: "WS", path: "/ws", action: "501", open: true, migrate: "" },
+  { method: "GET", path: "/api/tasks", action: "map", open: false, migrate: "/v1/tasks" },
+  { method: "POST", path: "/api/tasks", action: "410", open: false, migrate: "no v10 task queue; read-only GET /v1/tasks" },
+  { method: "GET", path: "/api/tasks/{task_id}", action: "410", open: false, migrate: "no v10 task queue; read-only GET /v1/tasks" },
+  { method: "PUT", path: "/api/tasks/{task_id}", action: "410", open: false, migrate: "no v10 task queue; read-only GET /v1/tasks" },
+  { method: "DELETE", path: "/api/tasks/{task_id}", action: "410", open: false, migrate: "no v10 task queue; read-only GET /v1/tasks" },
+  { method: "POST", path: "/api/tasks/{task_id}/move", action: "410", open: false, migrate: "no v10 task queue; read-only GET /v1/tasks" },
+  { method: "WS", path: "/ws", action: "410", open: true, migrate: "SSE at GET /v1/stream" },
   { method: "GET", path: "/api/registry/projects", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/registry/projects", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/registry/projects", action: "410", open: false, migrate: "repos are discovered locally; GET /v1/repos" },
   { method: "GET", path: "/api/registry/projects/{identifier}", action: "410", open: false, migrate: "" },
   { method: "DELETE", path: "/api/registry/projects/{identifier}", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/registry/projects/{identifier}/health", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/registry/projects/{identifier}/access", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/registry/discover", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/registry/sync", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/registry/sync", action: "410", open: false, migrate: "repos are discovered locally; GET /v1/repos" },
   { method: "GET", path: "/api/registry/tasks", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/registry/learnings", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/fleet/runs", action: "map", open: false, migrate: "/v1/fleet/runs" },
   { method: "GET", path: "/api/fleet/summary", action: "map", open: false, migrate: "/v1/fleet/summary" },
   { method: "GET", path: "/api/fleet/runs/{identifier}", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/focus", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/focus", action: "map", open: false, migrate: "/v1/focus" },
   { method: "GET", path: "/api/focus", action: "410", open: false, migrate: "" },
   { method: "DELETE", path: "/api/focus", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/session/model", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/session/model", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/session/model", action: "410", open: false, migrate: "no mid-run model switch; start a new run with another model (POST /v1/runs)" },
   { method: "GET", path: "/api/running-projects", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/control/start", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/control/builds/{execution_id}", action: "410", open: false, migrate: "" },
@@ -17505,19 +18225,19 @@ var LEGACY_ROUTES = [
   { method: "POST", path: "/api/enterprise/tokens", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/enterprise/tokens", action: "410", open: false, migrate: "" },
   { method: "DELETE", path: "/api/enterprise/tokens/{identifier}", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/enterprise/audit", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/enterprise/audit/summary", action: "410", open: false, migrate: "" },
+  { method: "GET", path: "/api/enterprise/audit", action: "map", open: false, migrate: "/v1/audit" },
+  { method: "GET", path: "/api/enterprise/audit/summary", action: "map", open: false, migrate: "/v1/audit/summary" },
   { method: "GET", path: "/api/compliance", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/memory/summary", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/episodes", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/episodes/{episode_id}", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/patterns", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/patterns/{pattern_id}", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/skills", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/memory/episodes", action: "map", open: false, migrate: "/v1/memory/episodes" },
+  { method: "GET", path: "/api/memory/episodes/{episode_id}", action: "map", open: false, migrate: "/v1/memory/episodes/{id}" },
+  { method: "GET", path: "/api/memory/patterns", action: "map", open: false, migrate: "/v1/memory/patterns" },
+  { method: "GET", path: "/api/memory/patterns/{pattern_id}", action: "map", open: false, migrate: "/v1/memory/patterns/{id}" },
+  { method: "GET", path: "/api/memory/skills", action: "map", open: false, migrate: "/v1/memory/skills" },
   { method: "GET", path: "/api/memory/skills/{skill_id}", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/memory/economics", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/memory/consolidate", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/memory/retrieve", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/memory/economics", action: "map", open: false, migrate: "/v1/memory/economics" },
+  { method: "POST", path: "/api/memory/consolidate", action: "410", open: false, migrate: "read-only GET /v1/memory/*" },
+  { method: "POST", path: "/api/memory/retrieve", action: "410", open: false, migrate: "read-only GET /v1/memory/*" },
   { method: "GET", path: "/api/memory/index", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/memory/timeline", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/memory/files", action: "410", open: false, migrate: "" },
@@ -17528,41 +18248,41 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/api/learning/trends", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/learning/signals", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/learning/aggregation", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/learning/aggregate", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/learning/aggregate", action: "410", open: false, migrate: "read-only GET /v1/memory/patterns" },
   { method: "GET", path: "/api/learning/preferences", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/learning/errors", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/learning/success", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/learning/tools", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/control/pause", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/control/resume", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/control/stop", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/control/pause", action: "map", open: false, migrate: "/v1/control/pause" },
+  { method: "POST", path: "/api/control/resume", action: "map", open: false, migrate: "/v1/control/resume" },
+  { method: "POST", path: "/api/control/stop", action: "map", open: false, migrate: "/v1/control/stop" },
   { method: "GET", path: "/api/cost", action: "map", open: false, migrate: "/v1/cost/snapshot" },
   { method: "GET", path: "/api/budget", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/cost/timeline", action: "map", open: false, migrate: "/v1/cost/timeline" },
   { method: "GET", path: "/api/trust/trajectory", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/gate-policy", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/pricing", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/council/state", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/council/verdicts", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/council/convergence", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/council/report", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/council/force-review", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/council/transcripts", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/council/state", action: "map", open: false, migrate: "/v1/council/state" },
+  { method: "GET", path: "/api/council/verdicts", action: "map", open: false, migrate: "/v1/council/verdicts" },
+  { method: "GET", path: "/api/council/convergence", action: "map", open: false, migrate: "/v1/council/convergence" },
+  { method: "GET", path: "/api/council/report", action: "map", open: false, migrate: "/v1/council/report" },
+  { method: "POST", path: "/api/council/force-review", action: "map", open: false, migrate: "/v1/control/council-review" },
+  { method: "GET", path: "/api/council/transcripts", action: "map", open: false, migrate: "/v1/council/transcripts" },
   { method: "GET", path: "/api/council/transcripts/{iteration_id}", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/context", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/context", action: "map", open: false, migrate: "/v1/context" },
   { method: "GET", path: "/api/notifications", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/notifications/triggers", action: "410", open: false, migrate: "" },
-  { method: "PUT", path: "/api/notifications/triggers", action: "501", open: false, migrate: "" },
+  { method: "PUT", path: "/api/notifications/triggers", action: "410", open: false, migrate: "GET /v1/notifications (derived from events)" },
   { method: "POST", path: "/api/notifications/{notification_id}/acknowledge", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/notifications/{notification_id}/unacknowledge", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/checkpoints", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/checkpoints/{checkpoint_id}", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/checkpoints", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/checkpoints/{checkpoint_id}/rollback", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/checkpoints", action: "map", open: false, migrate: "/v1/checkpoints" },
+  { method: "GET", path: "/api/checkpoints/{checkpoint_id}", action: "map", open: false, migrate: "/v1/checkpoints/{id}" },
+  { method: "POST", path: "/api/checkpoints", action: "map", open: false, migrate: "/v1/checkpoints" },
+  { method: "POST", path: "/api/checkpoints/{checkpoint_id}/rollback", action: "map", open: false, migrate: "/v1/checkpoints/{id}/rollback" },
   { method: "GET", path: "/api/agents", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/agents/{agent_id}/kill", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/agents/{agent_id}/pause", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/agents/{agent_id}/resume", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/agents/{agent_id}/kill", action: "410", open: false, migrate: "POST /v1/control/stop" },
+  { method: "POST", path: "/api/agents/{agent_id}/pause", action: "410", open: false, migrate: "POST /v1/control/stop (v10 has no pause)" },
+  { method: "POST", path: "/api/agents/{agent_id}/resume", action: "410", open: false, migrate: "POST /v1/control/resume" },
   { method: "GET", path: "/api/logs", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/collab/join", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/collab/leave", action: "410", open: false, migrate: "" },
@@ -17591,19 +18311,19 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/api/checklist/summary", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/prd-observations", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/checklist/waivers", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/checklist/waivers", action: "501", open: false, migrate: "" },
-  { method: "DELETE", path: "/api/checklist/waivers/{item_id}", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/checklist/waivers", action: "410", open: false, migrate: "plan.json and receipt claims in GET /v1/runs/:id" },
+  { method: "DELETE", path: "/api/checklist/waivers/{item_id}", action: "410", open: false, migrate: "plan.json and receipt claims in GET /v1/runs/:id" },
   { method: "GET", path: "/api/council/gate", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/app-runner/status", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/app-runner/logs", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/app-runner/errors", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/control/app-restart", action: "501", open: false, migrate: "" },
-  { method: "POST", path: "/api/control/app-stop", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/control/app-restart", action: "410", open: false, migrate: "evidence in GET /v1/runs/:source/:run/artifact/*" },
+  { method: "POST", path: "/api/control/app-stop", action: "410", open: false, migrate: "evidence in GET /v1/runs/:source/:run/artifact/*" },
   { method: "GET", path: "/api/playwright/results", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/playwright/screenshot", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/failures", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/prompt-versions", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/prompt-optimize", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/prompt-optimize", action: "410", open: false, migrate: "verify stage: POST /v1/runs/:source/:run/verify" },
   { method: "GET", path: "/api/activity", action: "501", open: false, migrate: "" },
   { method: "GET", path: "/api/session-diff", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/activity", action: "410", open: false, migrate: "" },
@@ -17612,8 +18332,8 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/", action: "308", open: false, migrate: "/" },
   { method: "GET", path: "/api/quality-score", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/quality-score/history", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/quality-scan", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/quality-report", action: "501", open: false, migrate: "" },
+  { method: "POST", path: "/api/quality-scan", action: "410", open: false, migrate: "verify stage: POST /v1/runs/:source/:run/verify" },
+  { method: "GET", path: "/api/quality-report", action: "410", open: false, migrate: "verify stage: POST /v1/runs/:source/:run/verify" },
   { method: "GET", path: "/api/migration/list", action: "501", open: false, migrate: "" },
   { method: "POST", path: "/api/migration/start", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/migration/{migration_id}/status", action: "501", open: false, migrate: "" },
@@ -17622,8 +18342,8 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/api/migration/{migration_id}/seams", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/migration/{migration_id}/advance", action: "410", open: false, migrate: "" },
   { method: "POST", path: "/api/migration/{migration_id}/start-phase", action: "410", open: false, migrate: "" },
-  { method: "GET", path: "/api/managed/events", action: "501", open: false, migrate: "" },
-  { method: "GET", path: "/api/managed/status", action: "501", open: false, migrate: "" },
+  { method: "GET", path: "/api/managed/events", action: "410", open: false, migrate: "managed memory dropped; GET /v1/runs/:source/:run/events" },
+  { method: "GET", path: "/api/managed/status", action: "410", open: false, migrate: "managed memory dropped; GET /v1/runs" },
   { method: "GET", path: "/api/managed/memory_versions/{memory_id}", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/findings/{iteration}", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/quality/architecture", action: "410", open: false, migrate: "" },
@@ -17639,9 +18359,101 @@ var LEGACY_ROUTES = [
   { method: "GET", path: "/api/spec/history", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/wiki", action: "410", open: false, migrate: "" },
   { method: "GET", path: "/api/wiki/{section}", action: "410", open: false, migrate: "" },
-  { method: "POST", path: "/api/wiki/ask", action: "501", open: false, migrate: "" }
+  { method: "POST", path: "/api/wiki/ask", action: "410", open: false, migrate: "wiki deleted; no replacement" }
 ];
 
+// src/server/legacy/routes-audit.ts
+var BAD_ID = "Invalid checkpoint_id: must be 1-128 chars of alphanumeric, hyphens, and underscores";
+function auditCheckpointMapped(db, repoDir, auditList) {
+  const local = (c) => peerIsLoopback(c) && isLoopbackHost(c.req.header("host")) && (c.req.header("content-type") ?? "").toLowerCase().startsWith("application/json");
+  const refuse = (c) => c.json({ detail: "loopback JSON requests only" }, 403);
+  return {
+    "GET /api/enterprise/audit": (c) => {
+      const r = auditList(c);
+      return r.err ?? c.json(r.rows);
+    },
+    "GET /api/enterprise/audit/summary": (c) => c.json(auditSummary(db, parseDays(c.req.query("days")))),
+    "GET /api/checkpoints": (c) => c.json(listCheckpoints(repoDir, parseLimit(c.req.query("limit")))),
+    "GET /api/checkpoints/{checkpoint_id}": (c) => {
+      const id = c.req.param("checkpoint_id") ?? "";
+      if (!validCheckpointId(id))
+        return c.json({ detail: BAD_ID }, 400);
+      const m = getCheckpoint(repoDir, id);
+      return m ? c.json(m) : c.json({ detail: "Checkpoint not found" }, 404);
+    },
+    "POST /api/checkpoints": async (c) => {
+      if (!local(c))
+        return refuse(c);
+      const body = await c.req.json().catch(() => ({}));
+      const message = typeof body?.message === "string" ? body.message : "";
+      if (message.length > 500)
+        return c.json({ detail: "message must be at most 500 characters" }, 422);
+      try {
+        const meta = createCheckpoint(repoDir, message);
+        audit3(db, { kind: "checkpoint.create", target: String(meta.id), result: "ok", detail: "legacy route" });
+        return c.json(meta, 201);
+      } catch (e) {
+        audit3(db, { kind: "checkpoint.create", result: "error", detail: e.message });
+        return c.json({ detail: "could not create the checkpoint" }, 500);
+      }
+    },
+    "POST /api/checkpoints/{checkpoint_id}/rollback": (c) => {
+      if (!local(c))
+        return refuse(c);
+      const id = c.req.param("checkpoint_id") ?? "";
+      if (!validCheckpointId(id)) {
+        audit3(db, { kind: "checkpoint.rollback", target: id.slice(0, 128), result: "refused", detail: "invalid id (legacy route)" });
+        return c.json({ detail: BAD_ID }, 400);
+      }
+      const r = rollbackCheckpoint(repoDir, id);
+      if (!r) {
+        audit3(db, { kind: "checkpoint.rollback", target: id, result: "refused", detail: "not found (legacy route)" });
+        return c.json({ detail: "Checkpoint not found" }, 404);
+      }
+      audit3(db, { kind: "checkpoint.rollback", target: id, result: r.errors.length ? "partial" : "ok", detail: `restored ${r.restored}; pre-rollback snapshot ${r.pre_rollback_snapshot} (legacy route)` });
+      return c.json({ ...r, message: `Restored ${r.restored} item(s) from ${id}. Prior state saved as ${r.pre_rollback_snapshot} (undo this rollback by restoring it).` });
+    }
+  };
+}
+
+// src/server/legacy/routes-memory.ts
+function memoryMapped(repoDir) {
+  const loki = () => lokiFor(repoDir);
+  return {
+    "GET /api/tasks": (c) => {
+      if (c.req.query("project_id") !== undefined)
+        return c.json({ detail: "project_id filter is not supported by the Control Plane" }, 400);
+      return c.json(tasksList(loki(), c.req.query("status")));
+    },
+    "GET /api/memory/episodes": (c) => {
+      const lim = c.req.query("limit") === undefined ? 50 : Number(c.req.query("limit"));
+      return Number.isInteger(lim) && lim >= 1 && lim <= 1000 ? c.json(memoryEpisodes(loki(), lim)) : c.json({ detail: "limit must be 1..1000" }, 422);
+    },
+    "GET /api/memory/episodes/{episode_id}": (c) => {
+      const e = memoryEpisode(loki(), c.req.param("episode_id") ?? "");
+      return e ? c.json(e) : c.json({ detail: "Episode not found" }, 404);
+    },
+    "GET /api/memory/patterns": (c) => c.json(memoryPatterns(loki())),
+    "GET /api/memory/patterns/{pattern_id}": (c) => {
+      const p = memoryPatterns(loki()).find((x) => x.id === c.req.param("pattern_id"));
+      return p ? c.json(p) : c.json({ detail: "Pattern not found" }, 404);
+    },
+    "GET /api/memory/skills": (c) => c.json(memorySkills(loki())),
+    "GET /api/memory/economics": (c) => c.json(memoryEconomics(loki())),
+    "GET /api/context": (c) => {
+      const r = contextTracking(loki());
+      return c.json(r.body, r.status);
+    },
+    "POST /api/focus": async (c) => {
+      if (!mutationAllowed(c))
+        return c.json({ detail: "loopback JSON requests only" }, 403);
+      const body = await c.req.json().catch(() => null);
+      const r = setFocus(repoDir, typeof body === "object" && body !== null ? body.project_dir : undefined);
+      return r.ok ? c.json(focusInfo(repoDir)) : c.json({ detail: r.error }, 400);
+    }
+  };
+}
+
 // src/server/legacy/routes-metrics.ts
 function metricsMapped(repoDir) {
   const inactive = (c) => parseInactive(c.req.query("include_inactive"));
@@ -17654,6 +18466,31 @@ function metricsMapped(repoDir) {
   };
 }
 
+// src/server/legacy/routes-control.ts
+function controlMapped(db, repoDir) {
+  const loki = () => lokiDirOf(repoDir);
+  return {
+    "POST /api/control/pause": (c) => runControl(db, repoDir, "pause", c, "legacy"),
+    "POST /api/control/resume": (c) => runControl(db, repoDir, "resume", c, "legacy"),
+    "POST /api/control/stop": (c) => runControl(db, repoDir, "stop", c, "legacy"),
+    "POST /api/council/force-review": (c) => runControl(db, repoDir, "council-review", c, "legacy"),
+    "GET /api/council/state": (c) => c.json(councilState(loki())),
+    "GET /api/council/verdicts": (c) => {
+      const n2 = intQ(c.req.query("limit"), 1000);
+      return n2 === null || n2 === 0 ? c.json({ detail: "limit must be 1..1000" }, 422) : c.json(councilVerdicts(loki(), n2));
+    },
+    "GET /api/council/convergence": (c) => c.json(councilConvergence(loki())),
+    "GET /api/council/report": (c) => c.json(councilReport(loki())),
+    "GET /api/council/transcripts": (c) => {
+      const limit = intQ(c.req.query("limit"), 200), iterMin = intQ(c.req.query("iter_min"), Number.MAX_SAFE_INTEGER);
+      if (limit === null || limit === 0 || iterMin === null)
+        return c.json({ detail: "limit must be 1..200 and iter_min a non-negative integer" }, 422);
+      const r = councilTranscripts(loki(), { limit, since: c.req.query("since"), iter_min: iterMin });
+      return "error" in r ? c.json({ detail: r.error }, 400) : c.json(r);
+    }
+  };
+}
+
 // src/server/legacy/shim.ts
 var flagOn = (v) => ["true", "1", "yes"].includes((v ?? "").toLowerCase());
 var legacyAuthEnabled = (env) => flagOn(env.LOKI_ENTERPRISE_AUTH) || !!(env.LOKI_OIDC_ISSUER && env.LOKI_OIDC_CLIENT_ID);
@@ -17661,10 +18498,10 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join26(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join29(import.meta.dir, "../../../../../VERSION")]) {
     try {
-      if (existsSync15(f))
-        return readFileSync23(f, "utf8").trim();
+      if (existsSync18(f))
+        return readFileSync26(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -17792,7 +18629,10 @@ function legacyShim(opts) {
       const r = auditList(c);
       return r.err ?? c.json(r.rows);
     },
-    ...metricsMapped(opts.repoDir ?? process.cwd())
+    ...metricsMapped(opts.repoDir ?? process.cwd()),
+    ...auditCheckpointMapped(db, opts.repoDir ?? process.cwd(), auditList),
+    ...memoryMapped(opts.repoDir ?? process.cwd()),
+    ...controlMapped(db, opts.repoDir ?? process.cwd())
   };
   app.all("/lab/api/*", (c) => {
     const d = denied(c);
@@ -17817,7 +18657,7 @@ function legacyShim(opts) {
       if (r.action === "308")
         return c.redirect(`${uiBase}/`, 308);
       if (r.action === "410")
-        return c.json({ error: "gone", detail: "This legacy dashboard route was retired; nothing consumes it.", ...body }, 410);
+        return c.json({ error: "gone", detail: "This legacy dashboard route was retired; nothing consumes it.", ...r.migrate ? { replacement: r.migrate } : {}, ...body }, 410);
       return c.json({ error: NOT_SUPPORTED, detail: "The legacy dashboard route exists, but the Control Plane has no data or mechanism for it yet.", ...body }, 501);
     };
     const m = r.method === "WS" || r.method === "MOUNT" ? "GET" : r.method;
@@ -17843,7 +18683,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join27(import.meta.dir, "../../ui/dist"), join27(import.meta.dir, "../ui/dist")].find((d) => existsSync16(join27(d, "index.html")));
+var defaultUiDir = () => [join30(import.meta.dir, "../../ui/dist"), join30(import.meta.dir, "../ui/dist")].find((d) => existsSync19(join30(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -17968,11 +18808,11 @@ function createApp(opts) {
       return c.json({ error: "not found" }, 404);
     const root = resolve6(uiDir);
     const f = resolve6(root, `.${p}`);
-    if (f.startsWith(root + sep8) && existsSync16(f) && statSync11(f).isFile())
+    if (f.startsWith(root + sep10) && existsSync19(f) && statSync13(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join27(root, "index.html")));
+    return new Response(Bun.file(join30(root, "index.html")));
   });
   return { app, db, close: () => sqlite.close() };
 }