loki-mode 10.9.1 → 10.10.2

package/packages/control-plane/dist/server.js

@@ -3696,10 +3696,10 @@ var require_resolve_block_map = __commonJS((exports) => {
     let offset = bm.offset;
     let commentEnd = null;
     for (const collItem of bm.items) {
-      const { start, key, sep: sep3, value } = collItem;
+      const { start, key, sep: sep4, value } = collItem;
       const keyProps = resolveProps.resolveProps(start, {
         indicator: "explicit-key-ind",
-        next: key ?? sep3?.[0],
+        next: key ?? sep4?.[0],
         offset,
         onError,
         parentIndent: bm.indent,
@@ -3713,7 +3713,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           else if ("indent" in key && key.indent !== bm.indent)
             onError(offset, "BAD_INDENT", startColMsg);
         }
-        if (!keyProps.anchor && !keyProps.tag && !sep3) {
+        if (!keyProps.anchor && !keyProps.tag && !sep4) {
           commentEnd = keyProps.end;
           if (keyProps.comment) {
             if (map.comment)
@@ -3738,7 +3738,7 @@ var require_resolve_block_map = __commonJS((exports) => {
       ctx.atKey = false;
       if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
         onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-      const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+      const valueProps = resolveProps.resolveProps(sep4 ?? [], {
         indicator: "map-value-ind",
         next: value,
         offset: keyNode.range[2],
@@ -3754,7 +3754,7 @@ var require_resolve_block_map = __commonJS((exports) => {
           if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
             onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep4, null, valueProps, onError);
         if (ctx.schema.compat)
           utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
         offset = valueNode.range[2];
@@ -3840,7 +3840,7 @@ var require_resolve_end = __commonJS((exports) => {
     let comment = "";
     if (end) {
       let hasSpace = false;
-      let sep3 = "";
+      let sep4 = "";
       for (const token of end) {
         const { source, type } = token;
         switch (type) {
@@ -3854,13 +3854,13 @@ var require_resolve_end = __commonJS((exports) => {
             if (!comment)
               comment = cb;
             else
-              comment += sep3 + cb;
-            sep3 = "";
+              comment += sep4 + cb;
+            sep4 = "";
             break;
           }
           case "newline":
             if (comment)
-              sep3 += source;
+              sep4 += source;
             hasSpace = true;
             break;
           default:
@@ -3900,18 +3900,18 @@ var require_resolve_flow_collection = __commonJS((exports) => {
     let offset = fc.offset + fc.start.source.length;
     for (let i = 0;i < fc.items.length; ++i) {
       const collItem = fc.items[i];
-      const { start, key, sep: sep3, value } = collItem;
+      const { start, key, sep: sep4, value } = collItem;
       const props = resolveProps.resolveProps(start, {
         flow: fcName,
         indicator: "explicit-key-ind",
-        next: key ?? sep3?.[0],
+        next: key ?? sep4?.[0],
         offset,
         onError,
         parentIndent: fc.indent,
         startOnNewline: false
       });
       if (!props.found) {
-        if (!props.anchor && !props.tag && !sep3 && !value) {
+        if (!props.anchor && !props.tag && !sep4 && !value) {
           if (i === 0 && props.comma)
             onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
           else if (i < fc.items.length - 1)
@@ -3963,8 +3963,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           }
         }
       }
-      if (!isMap && !sep3 && !props.found) {
-        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
+      if (!isMap && !sep4 && !props.found) {
+        const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep4, null, props, onError);
         coll.items.push(valueNode);
         offset = valueNode.range[2];
         if (isBlock(value))
@@ -3976,7 +3976,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         if (isBlock(key))
           onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
         ctx.atKey = false;
-        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep4 ?? [], {
           flow: fcName,
           indicator: "map-value-ind",
           next: value,
@@ -3987,8 +3987,8 @@ var require_resolve_flow_collection = __commonJS((exports) => {
         });
         if (valueProps.found) {
           if (!isMap && !props.found && ctx.options.strict) {
-            if (sep3)
-              for (const st of sep3) {
+            if (sep4)
+              for (const st of sep4) {
                 if (st === valueProps.found)
                   break;
                 if (st.type === "newline") {
@@ -4005,7 +4005,7 @@ var require_resolve_flow_collection = __commonJS((exports) => {
           else
             onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
         }
-        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
+        const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
         if (valueNode) {
           if (isBlock(value))
             onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4182,7 +4182,7 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         chompStart = i + 1;
     }
     let value = "";
-    let sep3 = "";
+    let sep4 = "";
     let prevMoreIndented = false;
     for (let i = 0;i < contentStart; ++i)
       value += lines[i][0].slice(trimIndent) + `
@@ -4200,33 +4200,33 @@ var require_resolve_block_scalar = __commonJS((exports) => {
         indent = "";
       }
       if (type === Scalar.Scalar.BLOCK_LITERAL) {
-        value += sep3 + indent.slice(trimIndent) + content;
-        sep3 = `
+        value += sep4 + indent.slice(trimIndent) + content;
+        sep4 = `
 `;
       } else if (indent.length > trimIndent || content[0] === "\t") {
-        if (sep3 === " ")
-          sep3 = `
+        if (sep4 === " ")
+          sep4 = `
 `;
-        else if (!prevMoreIndented && sep3 === `
+        else if (!prevMoreIndented && sep4 === `
 `)
-          sep3 = `
+          sep4 = `
 
 `;
-        value += sep3 + indent.slice(trimIndent) + content;
-        sep3 = `
+        value += sep4 + indent.slice(trimIndent) + content;
+        sep4 = `
 `;
         prevMoreIndented = true;
       } else if (content === "") {
-        if (sep3 === `
+        if (sep4 === `
 `)
           value += `
 `;
         else
-          sep3 = `
+          sep4 = `
 `;
       } else {
-        value += sep3 + content;
-        sep3 = " ";
+        value += sep4 + content;
+        sep4 = " ";
         prevMoreIndented = false;
       }
     }
@@ -4406,27 +4406,27 @@ var require_resolve_flow_scalar = __commonJS((exports) => {
       trimBoth = /^[ \t]+|[ \t]+$/g;
     }
     let res = match2[1].replace(trimEnd, "");
-    let sep3 = " ";
+    let sep4 = " ";
     let pos = line2.lastIndex;
     while (match2 = line2.exec(source)) {
       const lm = match2[1].replace(trimBoth, "");
       if (lm === "") {
-        if (sep3 === `
+        if (sep4 === `
 `)
-          res += sep3;
+          res += sep4;
         else
-          sep3 = `
+          sep4 = `
 `;
       } else {
-        res += sep3 + lm;
-        sep3 = " ";
+        res += sep4 + lm;
+        sep4 = " ";
       }
       pos = line2.lastIndex;
     }
     const last = /[ \t]*(.*)/sy;
     last.lastIndex = pos;
     match2 = last.exec(source);
-    return res + sep3 + (match2?.[1] ?? "");
+    return res + sep4 + (match2?.[1] ?? "");
   }
   function doubleQuotedValue(source, onError) {
     let res = "";
@@ -5207,14 +5207,14 @@ var require_cst_stringify = __commonJS((exports) => {
       }
     }
   }
-  function stringifyItem({ start, key, sep: sep3, value }) {
+  function stringifyItem({ start, key, sep: sep4, value }) {
     let res = "";
     for (const st of start)
       res += st.source;
     if (key)
       res += stringifyToken(key);
-    if (sep3)
-      for (const st of sep3)
+    if (sep4)
+      for (const st of sep4)
         res += st.source;
     if (value)
       res += stringifyToken(value);
@@ -6362,18 +6362,18 @@ var require_parser = __commonJS((exports) => {
       if (this.type === "map-value-ind") {
         const prev = getPrevProps(this.peek(2));
         const start = getFirstKeyStartProps(prev);
-        let sep3;
+        let sep4;
         if (scalar.end) {
-          sep3 = scalar.end;
-          sep3.push(this.sourceToken);
+          sep4 = scalar.end;
+          sep4.push(this.sourceToken);
           delete scalar.end;
         } else
-          sep3 = [this.sourceToken];
+          sep4 = [this.sourceToken];
         const map = {
           type: "block-map",
           offset: scalar.offset,
           indent: scalar.indent,
-          items: [{ start, key: scalar, sep: sep3 }]
+          items: [{ start, key: scalar, sep: sep4 }]
         };
         this.onKeyLine = true;
         this.stack[this.stack.length - 1] = map;
@@ -6527,15 +6527,15 @@ var require_parser = __commonJS((exports) => {
               } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                 const start2 = getFirstKeyStartProps(it.start);
                 const key = it.key;
-                const sep3 = it.sep;
-                sep3.push(this.sourceToken);
+                const sep4 = it.sep;
+                sep4.push(this.sourceToken);
                 delete it.key;
                 delete it.sep;
                 this.stack.push({
                   type: "block-map",
                   offset: this.offset,
                   indent: this.indent,
-                  items: [{ start: start2, key, sep: sep3 }]
+                  items: [{ start: start2, key, sep: sep4 }]
                 });
               } else if (start.length > 0) {
                 it.sep = it.sep.concat(start, this.sourceToken);
@@ -6729,13 +6729,13 @@ var require_parser = __commonJS((exports) => {
           const prev = getPrevProps(parent);
           const start = getFirstKeyStartProps(prev);
           fixFlowSeqItems(fc);
-          const sep3 = fc.end.splice(1, fc.end.length);
-          sep3.push(this.sourceToken);
+          const sep4 = fc.end.splice(1, fc.end.length);
+          sep4.push(this.sourceToken);
           const map = {
             type: "block-map",
             offset: fc.offset,
             indent: fc.indent,
-            items: [{ start, key: fc, sep: sep3 }]
+            items: [{ start, key: fc, sep: sep4 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -6959,8 +6959,8 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync19, statSync as statSync13 } from "fs";
-import { join as join30, resolve as resolve6, sep as sep10 } from "path";
+import { existsSync as existsSync21, statSync as statSync14 } from "fs";
+import { join as join33, resolve as resolve6, sep as sep12 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -8394,6 +8394,90 @@ var Hono3 = class extends Hono {
   }
 };
 
+// src/db/fixture-cleanup.ts
+import { realpathSync } from "fs";
+import { tmpdir } from "os";
+import { sep } from "path";
+
+// src/db/prune.ts
+var n = (sqlite, sql, ...args) => sqlite.query(sql).get(...args).n;
+function countFor(sqlite, keys) {
+  const bySource = new Map;
+  for (const k of keys)
+    bySource.set(k.source_id, [...bySource.get(k.source_id) ?? [], k.run_id]);
+  let events = 0, sources = 0;
+  for (const [src, runIds] of bySource) {
+    let ev = 0;
+    for (const r of runIds)
+      ev += n(sqlite, "select count(*) n from events where source_id = ? and run_id = ?", src, r);
+    events += ev;
+    const runsLeft = n(sqlite, "select count(*) n from runs where source_id = ?", src) - runIds.length;
+    const eventsLeft = n(sqlite, "select count(*) n from events where source_id = ?", src) - ev;
+    if (runsLeft <= 0 && eventsLeft <= 0 && sqlite.query("select 1 x from sources where id = ?").get(src))
+      sources++;
+  }
+  return { runs: keys.length, events, sources };
+}
+function audit(sqlite, action, actor, detail) {
+  sqlite.query("insert into audit (ts, action, actor, detail) values (?, ?, ?, ?)").run(new Date().toISOString(), action, actor, JSON.stringify(detail));
+}
+var dropOrphanSources = (sqlite, ids) => {
+  for (const id of ids)
+    sqlite.query("delete from sources where id = ? and not exists (select 1 from runs where source_id = ?) and not exists (select 1 from events where source_id = ?)").run(id, id, id);
+};
+function removeRun(sqlite, source, run, actor = "http") {
+  let out = null;
+  sqlite.transaction(() => {
+    if (!sqlite.query("select 1 x from runs where source_id = ? and run_id = ?").get(source, run))
+      return;
+    out = countFor(sqlite, [{ source_id: source, run_id: run }]);
+    audit(sqlite, "run.remove", actor, { source_id: source, run_id: run, counts: out });
+    sqlite.query("delete from events where source_id = ? and run_id = ?").run(source, run);
+    sqlite.query("delete from runs where source_id = ? and run_id = ?").run(source, run);
+    dropOrphanSources(sqlite, [source]);
+  }).immediate();
+  return out;
+}
+
+// src/db/fixture-cleanup.ts
+var FIXTURE_REPO = "acme/widget";
+var DONE = "fixture.cleanup.done";
+var tempRoots = () => {
+  const roots = new Set(["/tmp", "/private/tmp", "/var/tmp", tmpdir()]);
+  for (const r of [...roots]) {
+    try {
+      roots.add(realpathSync(r));
+    } catch {}
+  }
+  return [...roots].map((r) => r.replace(/[\\/]+$/, "")).filter((r) => r.length > 1);
+};
+var underTemp = (p, roots) => roots.some((r) => p === r || p.startsWith(r + sep) || p.startsWith(r + "/"));
+function cleanupLeakedFixtures(sqlite) {
+  let removed = 0;
+  sqlite.transaction(() => {
+    if (sqlite.query("select 1 x from audit where action = ?").get(DONE))
+      return;
+    const roots = tempRoots();
+    const tempSources = new Set(sqlite.query("select source_id, realpath from local_repos").all().filter((r) => underTemp(r.realpath, roots)).map((r) => r.source_id));
+    const all = sqlite.query("select source_id, run_id, origin_repo from runs").all();
+    const doomed = all.filter((r) => r.origin_repo === FIXTURE_REPO || tempSources.has(r.source_id));
+    const touched = new Set;
+    for (const k of doomed) {
+      const ev = sqlite.query("select count(*) n from events where source_id = ? and run_id = ?").get(k.source_id, k.run_id).n;
+      audit(sqlite, "fixture.cleanup", "startup", { source_id: k.source_id, run_id: k.run_id, origin_repo: k.origin_repo, events: ev });
+      sqlite.query("delete from events where source_id = ? and run_id = ?").run(k.source_id, k.run_id);
+      sqlite.query("delete from runs where source_id = ? and run_id = ?").run(k.source_id, k.run_id);
+      touched.add(k.source_id);
+      removed++;
+    }
+    for (const id of touched) {
+      sqlite.query("delete from sources where id = ? and not exists (select 1 from runs where source_id = ?) and not exists (select 1 from events where source_id = ?)").run(id, id, id);
+    }
+    audit(sqlite, DONE, "startup", { removed });
+  }).immediate();
+  return removed;
+}
+
 // src/db/migrate.ts
 import { Database as Database2 } from "bun:sqlite";
 
@@ -12436,7 +12520,7 @@ __export(exports_schema, {
   runs: () => runs,
   localRepos: () => localRepos,
   events: () => events,
-  audit: () => audit,
+  audit: () => audit2,
   actions: () => actions
 });
 var sources = sqliteTable("sources", {
@@ -12495,7 +12579,7 @@ var runs = sqliteTable("runs", {
   index("runs_verdict").on(t.verdict),
   index("runs_group").on(t.groupId)
 ]);
-var audit = sqliteTable("audit", {
+var audit2 = sqliteTable("audit", {
   id: integer("id").primaryKey({ autoIncrement: true }),
   ts: text("ts").notNull(),
   action: text("action").notNull(),
@@ -12698,6 +12782,8 @@ function writeAnswer(dir, source, run, answer) {
 // src/server/integrity.ts
 import { createHash, createPublicKey, verify } from "crypto";
 import { readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3 } from "path";
 var SHA = /^[0-9a-f]{64}$/;
 var SEAL_LINE = "log.sealed";
 var REDACTED = /\[REDACTED(?::[A-Z_]+)?\]/;
@@ -12706,17 +12792,48 @@ var UNATTESTED_SUFFIX = " (unattested)";
 var SUCCESS_VERDICTS = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
 var normVerdict = (v) => typeof v === "string" ? v.trim().toUpperCase() : null;
 var kidOf = (pub) => createHash("sha256").update(`{"crv":"Ed25519","kty":"OKP","x":"${pub.export({ format: "jwk" }).x}"}`).digest("base64url");
-function pubkeysFromEnv(env = process.env) {
-  const keys = (env["LOKI_CP_RECEIPT_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
-    try {
-      return [createPublicKey(readFileSync2(f))];
-    } catch {
-      return [];
+var isEd25519 = (k) => k.asymmetricKeyType === "ed25519";
+function localKeyInfo(env = process.env) {
+  const inline = env["LOKI_RECEIPT_SIGNING_KEY"]?.trim();
+  const given = env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
+  try {
+    let pub;
+    if (inline)
+      pub = createPublicKey(inline);
+    else {
+      const file = given || join3(env["HOME"] || homedir2(), ".loki", "keys", "receipt-ed25519.pem");
+      try {
+        pub = createPublicKey(readFileSync2(file));
+      } catch (e) {
+        if (!given && e.code === "ENOENT")
+          return {};
+        throw e;
+      }
     }
-  });
+    return isEd25519(pub) ? { key: pub } : { reason: "local signing key is not an Ed25519 key" };
+  } catch (e) {
+    const code = e.code;
+    return { reason: `local signing key ${inline ? "(LOKI_RECEIPT_SIGNING_KEY)" : given ? "file" : "default file"} could not be used: ${code ?? "malformed PEM"}` };
+  }
+}
+var pemList = (raw2) => (raw2 ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
+  try {
+    const k = createPublicKey(readFileSync2(f));
+    return isEd25519(k) ? [k] : [];
+  } catch {
+    return [];
+  }
+});
+function pubkeysFromEnv(env = process.env) {
+  const info = localKeyInfo(env);
+  const explicit = pemList(env["LOKI_CP_RECEIPT_PUBKEYS"]);
+  const keys = [...info.key ? [info.key] : [], ...pemList(env["LOKI_RECEIPT_RETIRED_PUBKEYS"]), ...explicit];
   const fn = (kid) => keys.find((k) => kidOf(k) === kid);
   fn.configured = keys.length > 0;
-  fn.fingerprint = createHash("sha256").update(keys.map(kidOf).sort().join(",")).digest("hex").slice(0, 16);
+  fn.strict = explicit.length > 0;
+  if (info.reason)
+    fn.reason = info.reason;
+  fn.fingerprint = createHash("sha256").update(keys.map(kidOf).sort().join(",") + (fn.strict ? "|strict" : "")).digest("hex").slice(0, 16);
   return fn;
 }
 var line = (e) => JSON.stringify({ v: e.v, seq: e.seq, ts: e.ts, run: e.run, type: e.type, stage: e.stage, data: e.data });
@@ -12731,7 +12848,7 @@ function verifyRunIntegrity(evs, opts = {}) {
   const sealedAt = evs.map((e, i) => e.type === "receipt.sealed" ? i : -1).filter((i) => i >= 0);
   const finalised = doneAt >= 0 || sealedAt.length > 0;
   const lines = evs.map(line);
-  const keysConfigured = opts.keysConfigured ?? opts.pubkeyFor?.configured ?? false;
+  const keysConfigured = opts.keysConfigured ?? opts.pubkeyFor?.strict ?? opts.pubkeyFor?.configured ?? false;
   let sigChecked = false;
   if (finalised) {
     const gap = evs.findIndex((e, i) => e.seq !== i);
@@ -12928,8 +13045,15 @@ var parseRun = (r) => ({
   status: r.endedAt ? "completed" : "running",
   elapsed_s: elapsedS(r)
 });
+function taskTitle(db, sourceId, runId) {
+  const d = db.select({ data: events.data }).from(events).where(and(eq(events.sourceId, sourceId), eq(events.runId, runId), eq(events.type, "stage.completed"), eq(events.stage, "intake"))).orderBy(asc(events.seq)).limit(1).get()?.data;
+  const raw2 = str(d?.["title"]) ?? str(d?.["task"]);
+  const t = raw2?.split(`
+`)[0]?.trim();
+  return t ? t.length > 140 ? `${t.slice(0, 139)}...` : t : null;
+}
 var withLive = (db, r) => {
-  const p = parseRun(r);
+  const p = { ...parseRun(r), title: taskTitle(db, r.sourceId, r.runId) };
   return r.endedAt ? { ...p, current_stage: null, files_touched: [] } : { ...p, ...liveInfo(loadEvents(db, r.sourceId, r.runId)) };
 };
 function liveInfo(evs) {
@@ -12980,11 +13104,11 @@ var verdictFilter = (v) => {
 var RECOMPUTE_CHUNK = 200;
 function recomputeLegacy(db) {
   const fp = pubkeysFromEnv().fingerprint ?? "";
-  let n = 0;
+  let n2 = 0;
   for (;; ) {
     const rows = db.select({ s: runs.sourceId, r: runs.runId }).from(runs).where(sql`${runs.attested} is null or ${runs.integrityKeyFp} is not ${fp}`).limit(RECOMPUTE_CHUNK).all();
     if (rows.length === 0)
-      return n;
+      return n2;
     db.transaction((tx) => {
       const t = tx;
       for (const x of rows) {
@@ -12994,7 +13118,7 @@ function recomputeLegacy(db) {
           rebuildRun(t, x.s, x.r);
       }
     });
-    n += rows.length;
+    n2 += rows.length;
   }
 }
 function listRuns(db, q) {
@@ -13016,12 +13140,14 @@ function runDetail(db, sourceId, runId) {
       continue;
     let s = stages.find((x) => x.stage === e.stage);
     if (!s)
-      stages.push(s = { stage: e.stage, started_at: null, ended_at: null, status: "started" });
+      stages.push(s = { stage: e.stage, started_at: null, ended_at: null, status: "started", reason: null });
     if (e.type === "stage.started")
       s.started_at = e.ts;
     else {
       s.ended_at = e.ts;
       s.status = e.type.slice("stage.".length);
+      const why = e.data?.reason;
+      s.reason = typeof why === "string" && why ? why : null;
     }
   }
   const f = fold(evs);
@@ -13135,19 +13261,19 @@ function tokenGuard(token) {
 
 // src/shipper/backfill.ts
 import { readdirSync } from "fs";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 
 // src/shipper/ship.ts
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync3, realpathSync, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3, realpathSync as realpathSync2, renameSync, writeFileSync as writeFileSync2 } from "fs";
 import { hostname } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 var BATCH = 200;
 var MAX_BYTES = 800000;
 function sourceId(repoDir) {
   let real2 = repoDir;
   try {
-    real2 = realpathSync(repoDir);
+    real2 = realpathSync2(repoDir);
   } catch {}
   return createHash4("sha256").update(`${hostname()}\x00${real2}`).digest("hex").slice(0, 16);
 }
@@ -13156,24 +13282,24 @@ var redactEvent = (e) => ({ ...e, data: redactDeep(e.data) });
 var backoffMs = (failures, rnd = Math.random) => Math.min(60000, 1000 * 2 ** Math.max(0, failures - 1)) * (1 + 0.25 * rnd());
 function readShip(runDir, url) {
   try {
-    const s = JSON.parse(readFileSync3(join3(runDir, "ship.json"), "utf8"));
+    const s = JSON.parse(readFileSync3(join4(runDir, "ship.json"), "utf8"));
     if (s.url === url && Number.isInteger(s.acked_seq))
       return { acked_seq: s.acked_seq, url };
   } catch {}
   return { acked_seq: -1, url };
 }
 function writeShip(runDir, s) {
-  const tmp = join3(runDir, `ship.json.${process.pid}.tmp`);
+  const tmp = join4(runDir, `ship.json.${process.pid}.tmp`);
   writeFileSync2(tmp, JSON.stringify(s) + `
 `);
-  renameSync(tmp, join3(runDir, "ship.json"));
+  renameSync(tmp, join4(runDir, "ship.json"));
 }
 async function shipRun(o) {
   const st = readShip(o.runDir, o.url);
-  const all = readEvents(join3(o.runDir, "events.jsonl"));
+  const all = readEvents(join4(o.runDir, "events.jsonl"));
   let lines = 0;
   try {
-    lines = readFileSync3(join3(o.runDir, "events.jsonl"), "utf8").split(`
+    lines = readFileSync3(join4(o.runDir, "events.jsonl"), "utf8").split(`
 `).filter((l) => l.trim() !== "").length;
   } catch {}
   const skipped = lines - all.length;
@@ -13216,7 +13342,7 @@ async function shipRun(o) {
   return { ok: true, sent, acked_seq: st.acked_seq, pending: 0 };
 }
 var shipEnabled = (env) => env.LOKI_CONTROL_URL || null;
-var hasSpool = (runDir) => existsSync3(join3(runDir, "events.jsonl"));
+var hasSpool = (runDir) => existsSync3(join4(runDir, "events.jsonl"));
 
 // src/shipper/backfill.ts
 async function backfill(o) {
@@ -13226,7 +13352,7 @@ async function backfill(o) {
     return { runs: 0, sent: 0, failed: [] };
   const sleep = o.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const attempts = o.attempts ?? 3;
-  const root = join4(o.repoDir, ".loki", "runs");
+  const root = join5(o.repoDir, ".loki", "runs");
   let ids = [];
   try {
     ids = readdirSync(root).sort();
@@ -13237,7 +13363,7 @@ async function backfill(o) {
   let runs2 = 0, sent = 0;
   const failed = [];
   for (const id of ids) {
-    const runDir = join4(root, id);
+    const runDir = join5(root, id);
     if (!hasSpool(runDir))
       continue;
     runs2++;
@@ -13256,57 +13382,17 @@ async function backfill(o) {
   return { runs: runs2, sent, failed };
 }
 
-// src/db/prune.ts
-var n = (sqlite, sql2, ...args) => sqlite.query(sql2).get(...args).n;
-function countFor(sqlite, keys) {
-  const bySource = new Map;
-  for (const k of keys)
-    bySource.set(k.source_id, [...bySource.get(k.source_id) ?? [], k.run_id]);
-  let events2 = 0, sources2 = 0;
-  for (const [src, runIds] of bySource) {
-    let ev = 0;
-    for (const r of runIds)
-      ev += n(sqlite, "select count(*) n from events where source_id = ? and run_id = ?", src, r);
-    events2 += ev;
-    const runsLeft = n(sqlite, "select count(*) n from runs where source_id = ?", src) - runIds.length;
-    const eventsLeft = n(sqlite, "select count(*) n from events where source_id = ?", src) - ev;
-    if (runsLeft <= 0 && eventsLeft <= 0 && sqlite.query("select 1 x from sources where id = ?").get(src))
-      sources2++;
-  }
-  return { runs: keys.length, events: events2, sources: sources2 };
-}
-function audit2(sqlite, action, actor, detail) {
-  sqlite.query("insert into audit (ts, action, actor, detail) values (?, ?, ?, ?)").run(new Date().toISOString(), action, actor, JSON.stringify(detail));
-}
-var dropOrphanSources = (sqlite, ids) => {
-  for (const id of ids)
-    sqlite.query("delete from sources where id = ? and not exists (select 1 from runs where source_id = ?) and not exists (select 1 from events where source_id = ?)").run(id, id, id);
-};
-function removeRun(sqlite, source, run, actor = "http") {
-  let out = null;
-  sqlite.transaction(() => {
-    if (!sqlite.query("select 1 x from runs where source_id = ? and run_id = ?").get(source, run))
-      return;
-    out = countFor(sqlite, [{ source_id: source, run_id: run }]);
-    audit2(sqlite, "run.remove", actor, { source_id: source, run_id: run, counts: out });
-    sqlite.query("delete from events where source_id = ? and run_id = ?").run(source, run);
-    sqlite.query("delete from runs where source_id = ? and run_id = ?").run(source, run);
-    dropOrphanSources(sqlite, [source]);
-  }).immediate();
-  return out;
-}
-
 // src/shipper/discover.ts
-import { readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync2 } from "fs";
-import { basename, dirname, join as join6, resolve } from "path";
+import { readFileSync as readFileSync5, realpathSync as realpathSync3, statSync as statSync2 } from "fs";
+import { basename, dirname, join as join7, resolve } from "path";
 
 // src/shipper/watch.ts
 import { readFileSync as readFileSync4, readdirSync as readdirSync2, statSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join6 } from "path";
 function registryRepos(env) {
   try {
-    const reg = JSON.parse(readFileSync4(join5(env.HOME || homedir2(), ".loki", "dashboard", "projects.json"), "utf8"));
+    const reg = JSON.parse(readFileSync4(join6(env.HOME || homedir3(), ".loki", "dashboard", "projects.json"), "utf8"));
     return Object.values(reg.projects ?? {}).map((p) => p.path).filter((p) => typeof p === "string" && p.startsWith("/"));
   } catch {
     return [];
@@ -13318,7 +13404,7 @@ function discoverLocalRepos(repoDir, env = process.env) {
   const out = new Map;
   for (const dir of [repoDir, ...registryRepos(env)]) {
     try {
-      const real2 = realpathSync2(dir);
+      const real2 = realpathSync3(dir);
       if (!statSync2(real2).isDirectory())
         continue;
       const id = sourceId(real2);
@@ -13346,8 +13432,8 @@ function mountRepos(act, db, peerIsLoopback2) {
 }
 
 // src/server/routes/artifacts.ts
-import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, realpathSync as realpathSync3 } from "fs";
-import { join as join7, sep } from "path";
+import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, realpathSync as realpathSync4 } from "fs";
+import { join as join8, sep as sep2 } from "path";
 var MAX_ARTIFACT_BYTES = 5 * 1024 * 1024;
 var EVENTS_DEFAULT = 500;
 var EVENTS_MAX = 1000;
@@ -13428,19 +13514,19 @@ function mount(ctx) {
       return c.json({ error: "artifact not available" }, 404);
     let runsRoot, runDir, file;
     try {
-      runsRoot = realpathSync3(join7(repo.p, ".loki", "runs"));
-      runDir = realpathSync3(join7(runsRoot, run));
+      runsRoot = realpathSync4(join8(repo.p, ".loki", "runs"));
+      runDir = realpathSync4(join8(runsRoot, run));
     } catch {
       return c.json({ error: "artifact not found" }, 404);
     }
-    if (runDir !== join7(runsRoot, run))
+    if (runDir !== join8(runsRoot, run))
       return c.json({ error: "artifact not found" }, 404);
     try {
-      file = realpathSync3(join7(runDir, name));
+      file = realpathSync4(join8(runDir, name));
     } catch {
       return c.json({ error: "artifact not found" }, 404);
     }
-    if (!file.startsWith(runDir + sep))
+    if (!file.startsWith(runDir + sep2))
       return c.json({ error: "artifact not found" }, 404);
     const r = readCapped(file);
     if (r.status === 413)
@@ -13478,8 +13564,8 @@ function mount2(ctx) {
 
 // src/server/routes/checkpoints.ts
 import { execFileSync } from "child_process";
-import { appendFileSync, copyFileSync, cpSync, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readFileSync as readFileSync7, realpathSync as realpathSync4, rmSync, statSync as statSync4, writeFileSync as writeFileSync3 } from "fs";
-import { join as join9, sep as sep2 } from "path";
+import { appendFileSync, copyFileSync, cpSync, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readFileSync as readFileSync7, realpathSync as realpathSync5, rmSync, statSync as statSync4, writeFileSync as writeFileSync3 } from "fs";
+import { join as join10, sep as sep3 } from "path";
 
 // src/server/audit.ts
 var clip = (s, n2) => s === undefined ? null : s.slice(0, n2);
@@ -13494,7 +13580,7 @@ function audit3(db, e) {
 
 // src/server/routes/cost_ledger.ts
 import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 var isNum = (v) => typeof v === "number" && Number.isFinite(v);
 var isObj2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var r6 = (n2) => Math.round(n2 * 1e6) / 1e6;
@@ -13525,7 +13611,7 @@ var DEFAULT_PRICING = {
   "gpt-5.6-luna": { input: 0.5, output: 4 }
 };
 function pricing(lokiDir) {
-  const d = readJson(join8(lokiDir, "pricing.json"));
+  const d = readJson(join9(lokiDir, "pricing.json"));
   const models = isObj2(d) && isObj2(d.models) ? d.models : {};
   return { ...DEFAULT_PRICING, ...models };
 }
@@ -13538,7 +13624,7 @@ function modelCost(table, model, inp, out, cr = 0, cw = 0) {
   return r6((inp * ir + out * or2 + cr * crr + cw * cwr) / 1e6);
 }
 function iterationRecords(lokiDir) {
-  const dir = join8(lokiDir, "metrics", "efficiency");
+  const dir = join9(lokiDir, "metrics", "efficiency");
   let names = [];
   try {
     names = readdirSync3(dir).filter((n2) => /^iteration-.*\.json$/.test(n2)).sort();
@@ -13547,7 +13633,7 @@ function iterationRecords(lokiDir) {
   }
   const out = [];
   for (const n2 of names) {
-    const d = readJson(join8(dir, n2));
+    const d = readJson(join9(dir, n2));
     if (isObj2(d))
       out.push(d);
   }
@@ -13584,7 +13670,7 @@ function costSnapshot(lokiDir) {
     }
   }
   if (tIn === 0 && tOut === 0) {
-    const ctx = readJson(join8(lokiDir, "context", "tracking.json"));
+    const ctx = readJson(join9(lokiDir, "context", "tracking.json"));
     const totals = isObj2(ctx) && isObj2(ctx.totals) ? ctx.totals : {};
     tIn = num0(totals.total_input);
     tOut = num0(totals.total_output);
@@ -13610,7 +13696,7 @@ function costSnapshot(lokiDir) {
     }
   }
   let limit = null, used = null, remaining = null;
-  const bd = readJson(join8(lokiDir, "metrics", "budget.json"));
+  const bd = readJson(join9(lokiDir, "metrics", "budget.json"));
   if (isObj2(bd) && isNum(bd.limit)) {
     limit = bd.limit;
     if (recorded && !unknownUsd) {
@@ -13661,7 +13747,7 @@ function budgetSnapshot(lokiDir) {
     total += priced(table, d);
   }
   let limit = null;
-  const bd = readJson(join8(lokiDir, "metrics", "budget.json"));
+  const bd = readJson(join9(lokiDir, "metrics", "budget.json"));
   if (isObj2(bd)) {
     const l = bd.limit || bd.budget_limit;
     limit = isNum(l) ? l : null;
@@ -13712,19 +13798,19 @@ function costTimeline(lokiDir) {
   }
   const runs2 = [];
   let projectTotal = 0, runsMeasured = 0;
-  const proofs = join8(lokiDir, "proofs");
+  const proofs = join9(lokiDir, "proofs");
   let entries = [];
   try {
     entries = readdirSync3(proofs).sort();
   } catch {}
   for (const e of entries) {
     try {
-      if (!statSync3(join8(proofs, e)).isDirectory())
+      if (!statSync3(join9(proofs, e)).isDirectory())
         continue;
     } catch {
       continue;
     }
-    const p = readJson(join8(proofs, e, "proof.json"));
+    const p = readJson(join9(proofs, e, "proof.json"));
     if (!isObj2(p))
       continue;
     const cost = isObj2(p.cost) ? p.cost : {};
@@ -13754,7 +13840,7 @@ function costTimeline(lokiDir) {
     ...recorded || runsMeasured ? {} : { not_measured: NOT_MEASURED }
   };
 }
-var lokiDirOf = (repoDir) => join8(repoDir, ".loki");
+var lokiDirOf = (repoDir) => join9(repoDir, ".loki");
 var lokiDirExists = (repoDir) => existsSync4(lokiDirOf(repoDir));
 function mount3(ctx) {
   const deny = { error: "loopback only without a token" };
@@ -13768,8 +13854,8 @@ var str2 = (v) => typeof v === "string" && v !== "" ? v : null;
 var SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 var MAX_CHECKPOINTS = 50;
 var validCheckpointId = (id) => SAFE_ID.test(id);
-var storeOf = (repoDir) => join9(repoDir, ".loki", "state", "checkpoints");
-var lokiOf = (repoDir) => join9(repoDir, ".loki");
+var storeOf = (repoDir) => join10(repoDir, ".loki", "state", "checkpoints");
+var lokiOf = (repoDir) => join10(repoDir, ".loki");
 var readObj = (f) => {
   try {
     const d = JSON.parse(readFileSync7(f, "utf8"));
@@ -13783,7 +13869,7 @@ function listCheckpoints(repoDir, limit = 20) {
   const store = storeOf(repoDir);
   let lines = [];
   try {
-    lines = readFileSync7(join9(store, "index.jsonl"), "utf8").split(`
+    lines = readFileSync7(join10(store, "index.jsonl"), "utf8").split(`
 `);
   } catch {
     return [];
@@ -13811,7 +13897,7 @@ function listCheckpoints(repoDir, limit = 20) {
       message: str2(raw2.task) ?? str2(raw2.message) ?? str2(raw2.task_description),
       iteration: Number.isInteger(it) ? it : null
     };
-    const meta = readObj(join9(store, id, "metadata.json"));
+    const meta = readObj(join10(store, id, "metadata.json"));
     if (meta) {
       cp.git_branch = str2(meta.git_branch);
       cp.provider = str2(meta.provider);
@@ -13819,7 +13905,7 @@ function listCheckpoints(repoDir, limit = 20) {
       cp.message ??= str2(meta.task_description);
       cp.git_sha ??= str2(meta.git_sha);
       cp.created_at ??= str2(meta.timestamp);
-      cp.files_count = countFiles(join9(store, id));
+      cp.files_count = countFiles(join10(store, id));
     }
     out.push(cp);
   }
@@ -13830,7 +13916,7 @@ function countFiles(dir) {
   const walk = (d, top) => {
     for (const e of readdirSync4(d, { withFileTypes: true })) {
       if (e.isDirectory())
-        walk(join9(d, e.name), false);
+        walk(join10(d, e.name), false);
       else if (e.isFile() && !(top && e.name === "metadata.json"))
         n2++;
     }
@@ -13841,7 +13927,7 @@ function countFiles(dir) {
   return n2;
 }
 function getCheckpoint(repoDir, id) {
-  return validCheckpointId(id) ? readObj(join9(storeOf(repoDir), id, "metadata.json")) : null;
+  return validCheckpointId(id) ? readObj(join10(storeOf(repoDir), id, "metadata.json")) : null;
 }
 var gitHead = (repoDir) => {
   try {
@@ -13853,69 +13939,69 @@ var gitHead = (repoDir) => {
 function createCheckpoint(repoDir, message, now = new Date) {
   const store = storeOf(repoDir), loki = lokiOf(repoDir);
   mkdirSync3(store, { recursive: true });
-  const id = `chk-${stamp(now)}`, dir = join9(store, id);
+  const id = `chk-${stamp(now)}`, dir = join10(store, id);
   mkdirSync3(dir, { recursive: true });
   for (const f of ["dashboard-state.json", "session.json"]) {
     try {
-      if (existsSync5(join9(loki, f)))
-        copyFileSync(join9(loki, f), join9(dir, f));
+      if (existsSync5(join10(loki, f)))
+        copyFileSync(join10(loki, f), join10(dir, f));
     } catch {}
   }
   try {
-    if (existsSync5(join9(loki, "queue")))
-      cpSync(join9(loki, "queue"), join9(dir, "queue"), { recursive: true });
+    if (existsSync5(join10(loki, "queue")))
+      cpSync(join10(loki, "queue"), join10(dir, "queue"), { recursive: true });
   } catch {}
   const meta = { id, created_at: now.toISOString(), git_sha: gitHead(repoDir), message: message || null, files: readdirSync4(dir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name) };
-  writeFileSync3(join9(dir, "metadata.json"), JSON.stringify(meta, null, 2));
-  appendFileSync(join9(store, "index.jsonl"), `${JSON.stringify(meta)}
+  writeFileSync3(join10(dir, "metadata.json"), JSON.stringify(meta, null, 2));
+  appendFileSync(join10(store, "index.jsonl"), `${JSON.stringify(meta)}
 `);
   const mine = readdirSync4(store, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name.startsWith("chk-")).map((e) => e.name).sort();
   while (mine.length > MAX_CHECKPOINTS)
-    rmSync(join9(store, mine.shift()), { recursive: true, force: true });
+    rmSync(join10(store, mine.shift()), { recursive: true, force: true });
   return meta;
 }
 function rollbackCheckpoint(repoDir, id, now = new Date) {
   const store = storeOf(repoDir), loki = lokiOf(repoDir);
   let real2 = "", realStore = "";
   try {
-    real2 = realpathSync4(join9(store, id));
-    realStore = realpathSync4(store);
+    real2 = realpathSync5(join10(store, id));
+    realStore = realpathSync5(store);
   } catch {
     return null;
   }
-  if (!real2.startsWith(`${realStore}${sep2}`) || !statSync4(real2).isDirectory())
+  if (!real2.startsWith(`${realStore}${sep3}`) || !statSync4(real2).isDirectory())
     return null;
-  const preId = `rb-pre-${stamp(now)}`, pre = join9(store, preId);
+  const preId = `rb-pre-${stamp(now)}`, pre = join10(store, preId);
   mkdirSync3(pre, { recursive: true });
   const notStore = (src) => src !== store;
   for (const n2 of ["session.json", "dashboard-state.json", "CONTINUITY.md", "autonomy-state.json"]) {
     try {
-      if (existsSync5(join9(loki, n2)))
-        copyFileSync(join9(loki, n2), join9(pre, n2));
+      if (existsSync5(join10(loki, n2)))
+        copyFileSync(join10(loki, n2), join10(pre, n2));
     } catch {}
   }
   for (const d of ["state", "queue"]) {
     try {
-      if (existsSync5(join9(loki, d)))
-        cpSync(join9(loki, d), join9(pre, d), { recursive: true, filter: notStore });
+      if (existsSync5(join10(loki, d)))
+        cpSync(join10(loki, d), join10(pre, d), { recursive: true, filter: notStore });
     } catch {}
   }
   const preMeta = { id: preId, created_at: now.toISOString(), message: `pre-rollback snapshot (before restoring ${id})`, created_by: "control plane rollback" };
-  writeFileSync3(join9(pre, "metadata.json"), JSON.stringify(preMeta, null, 2));
-  appendFileSync(join9(store, "index.jsonl"), `${JSON.stringify(preMeta)}
+  writeFileSync3(join10(pre, "metadata.json"), JSON.stringify(preMeta, null, 2));
+  appendFileSync(join10(store, "index.jsonl"), `${JSON.stringify(preMeta)}
 `);
   let restored = 0;
   const errors = [];
   for (const e of readdirSync4(real2, { withFileTypes: true })) {
     if (e.name === "metadata.json" || e.name === "worktree-snapshot.txt")
       continue;
-    const src = join9(real2, e.name);
+    const src = join10(real2, e.name);
     try {
       if (lstatSync(src).isSymbolicLink()) {
         errors.push(`${e.name}: symlink skipped`);
         continue;
       }
-      cpSync(src, join9(loki, e.name), { recursive: true, filter: (s) => s !== join9(real2, "state", "checkpoints") });
+      cpSync(src, join10(loki, e.name), { recursive: true, filter: (s) => s !== join10(real2, "state", "checkpoints") });
       restored++;
     } catch (err) {
       errors.push(`${e.name}: ${err.message}`);
@@ -13925,14 +14011,14 @@ function rollbackCheckpoint(repoDir, id, now = new Date) {
 }
 function auditSummary(db, days, now = Date.now()) {
   const since = new Date(now - days * 86400000).toISOString();
-  const where = gte(audit.ts, since);
-  const total = db.select({ n: sql`count(*)` }).from(audit).where(where).get()?.n ?? 0;
-  const by = (col) => Object.fromEntries(db.select({ k: col, n: sql`count(*)` }).from(audit).where(where).groupBy(col).all().map((r) => [r.k, r.n]));
+  const where = gte(audit2.ts, since);
+  const total = db.select({ n: sql`count(*)` }).from(audit2).where(where).get()?.n ?? 0;
+  const by = (col) => Object.fromEntries(db.select({ k: col, n: sql`count(*)` }).from(audit2).where(where).groupBy(col).all().map((r) => [r.k, r.n]));
   return {
     period_days: days,
     total_events: total,
-    by_action: by(audit.action),
-    by_user: by(audit.actor),
+    by_action: by(audit2.action),
+    by_user: by(audit2.actor),
     successful_events: null,
     failed_events: null,
     by_resource_type: null,
@@ -13998,8 +14084,8 @@ function mount4(ctx) {
 
 // src/server/routes/config.ts
 import { createHash as createHash5, randomBytes } from "crypto";
-import { closeSync as closeSync3, fchmodSync, fsyncSync, lstatSync as lstatSync2, openSync as openSync3, readFileSync as readFileSync9, realpathSync as realpathSync5, renameSync as renameSync2, statSync as statSync6, unlinkSync, writeSync as writeSync2 } from "fs";
-import { basename as basename3, dirname as dirname2, join as join11, sep as sep3 } from "path";
+import { closeSync as closeSync3, fchmodSync, fsyncSync, lstatSync as lstatSync2, openSync as openSync3, readFileSync as readFileSync9, realpathSync as realpathSync6, renameSync as renameSync2, statSync as statSync6, unlinkSync, writeSync as writeSync2 } from "fs";
+import { basename as basename3, dirname as dirname2, join as join12, sep as sep4 } from "path";
 
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
@@ -14050,8 +14136,8 @@ var $visitAsync = visit.visitAsync;
 // src/server/spawn.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync6, readFileSync as readFileSync8, statSync as statSync5 } from "fs";
-import { homedir as homedir3 } from "os";
-import { basename as basename2, join as join10, resolve as resolve2 } from "path";
+import { homedir as homedir4 } from "os";
+import { basename as basename2, join as join11, resolve as resolve2 } from "path";
 var ISSUE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,8}$/;
 var TASK = /^[A-Za-z0-9][A-Za-z0-9 .,_/#@+=-]{0,499}$/;
 var hasDotDot = (t) => t.split(/[\\/ ]/).some((seg) => seg.startsWith(".."));
@@ -14067,7 +14153,7 @@ var BUDGET = /^(?:[1-9][0-9]{0,5}|0)(?:\.[0-9]{1,2})?$/;
 var WORKSPACE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
 function registryRepos2(env = process.env) {
   try {
-    const j = JSON.parse(readFileSync8(join10(env.HOME || homedir3(), ".loki", "dashboard", "projects.json"), "utf8"));
+    const j = JSON.parse(readFileSync8(join11(env.HOME || homedir4(), ".loki", "dashboard", "projects.json"), "utf8"));
     return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync6(p) && statSync5(p).isDirectory());
   } catch {
     return [];
@@ -14512,11 +14598,11 @@ function renderVerified(doc, next, quote = needsQuote) {
 function resolveConfigFile(repoDir) {
   let root;
   try {
-    root = realpathSync5(repoDir);
+    root = realpathSync6(repoDir);
   } catch {
     return { ok: false, status: 400, error: "repo directory not found" };
   }
-  const p = join11(root, "loki.yaml");
+  const p = join12(root, "loki.yaml");
   let st;
   try {
     st = lstatSync2(p);
@@ -14526,11 +14612,11 @@ function resolveConfigFile(repoDir) {
   if (st.isSymbolicLink()) {
     let real2;
     try {
-      real2 = realpathSync5(p);
+      real2 = realpathSync6(p);
     } catch {
       return { ok: false, status: 400, error: "loki.yaml is a broken symlink" };
     }
-    if (!real2.startsWith(root + sep3))
+    if (!real2.startsWith(root + sep4))
       return { ok: false, status: 400, error: "loki.yaml is a symlink that resolves outside the repo" };
     if (!statSync6(real2).isFile())
       return { ok: false, status: 422, error: "loki.yaml is not a regular file" };
@@ -14541,7 +14627,7 @@ function resolveConfigFile(repoDir) {
   return { ok: true, file: p, exists: true };
 }
 function atomicWrite(file, text2, mode) {
-  const tmp = join11(dirname2(file), `.${basename3(file)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
+  const tmp = join12(dirname2(file), `.${basename3(file)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
   const fd = openSync3(tmp, "wx", mode);
   try {
     writeSync2(fd, text2);
@@ -14691,14 +14777,14 @@ function mount6(ctx) {
 }
 
 // src/server/routes/control.ts
-import { existsSync as existsSync7, realpathSync as realpathSync6 } from "fs";
-import { join as join13, resolve as resolve3, sep as sep4 } from "path";
+import { existsSync as existsSync7, realpathSync as realpathSync7 } from "fs";
+import { join as join14, resolve as resolve3, sep as sep5 } from "path";
 
 // ../../loki-ts/src/util/run_pid.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { chmodSync as chmodSync2, readFileSync as readFileSync10, renameSync as renameSync3, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
-import { join as join12 } from "path";
-var runPidPath = (runDir) => join12(runDir, "run.pid");
+import { join as join13 } from "path";
+var runPidPath = (runDir) => join13(runDir, "run.pid");
 function processStartTime(pid) {
   if (!Number.isInteger(pid) || pid <= 1)
     return null;
@@ -14754,14 +14840,14 @@ function mount7(ctx) {
     const repoRow = db.select().from(localRepos).where(eq(localRepos.sourceId, source)).get();
     let repo = "";
     try {
-      repo = repoRow ? realpathSync6(repoRow.realpath) : "";
+      repo = repoRow ? realpathSync7(repoRow.realpath) : "";
     } catch {
       repo = "";
     }
     if (!repo)
       return done(404, "refused", { error: "this run's repo is not known on this machine" });
-    const runsRoot = join13(repo, ".loki", "runs"), runDir = resolve3(runsRoot, id);
-    if (!runDir.startsWith(runsRoot + sep4))
+    const runsRoot = join14(repo, ".loki", "runs"), runDir = resolve3(runsRoot, id);
+    if (!runDir.startsWith(runsRoot + sep5))
       return done(400, "refused", { error: "invalid run id" }, "path escape");
     return handler({ source, run: id, repo, runDir }, done);
   });
@@ -14808,7 +14894,7 @@ function mount7(ctx) {
       return done(404, "refused", { error: "run not found" });
     if (!blockedQuestion(loadEvents(db, a.source, a.run), row.verdict))
       return done(409, "refused", { error: "run is not BLOCKED, so there is nothing to resume" });
-    if (!existsSync7(join13(answerDir, a.source, `${a.run}.answer.txt`)))
+    if (!existsSync7(join14(answerDir, a.source, `${a.run}.answer.txt`)))
       return done(409, "refused", { error: "no answer recorded for this run; answer it first" });
     return launch(a, [bin, "answer", a.run], done);
   });
@@ -14887,11 +14973,11 @@ function mount8(ctx) {
 
 // src/server/routes/fleet.ts
 import { readdirSync as readdirSync5, readFileSync as readFileSync11 } from "fs";
-import { homedir as homedir4 } from "os";
-import { basename as basename4, join as join14 } from "path";
+import { homedir as homedir5 } from "os";
+import { basename as basename4, join as join15 } from "path";
 var isNum2 = (v) => typeof v === "number" && Number.isFinite(v);
 var isObj5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var registryFile = () => join14(process.env.HOME ?? homedir4(), ".loki", "dashboard", "projects.json");
+var registryFile = () => join15(process.env.HOME ?? homedir5(), ".loki", "dashboard", "projects.json");
 function pidAlive(pid) {
   if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0)
     return false;
@@ -14906,33 +14992,33 @@ function projectSnapshot(path) {
   const snap = { phase: "", iteration: null, cost_usd: null, started_at: null, ended_at: null };
   if (!path)
     return snap;
-  const loki = join14(path, ".loki");
-  const st = readJson(join14(loki, "dashboard-state.json"));
+  const loki = join15(path, ".loki");
+  const st = readJson(join15(loki, "dashboard-state.json"));
   if (isObj5(st)) {
     snap.phase = typeof st.phase === "string" ? st.phase : "";
     snap.iteration = Number.isInteger(st.iteration) ? st.iteration : null;
   }
-  const ss = readJson(join14(loki, "session.json"));
+  const ss = readJson(join15(loki, "session.json"));
   if (isObj5(ss)) {
     const a = ss.startedAt || ss.started_at, b = ss.endedAt || ss.ended_at;
     snap.started_at = typeof a === "string" ? a : null;
     snap.ended_at = typeof b === "string" ? b : null;
   }
   let cost = 0, found = false;
-  const eff = join14(loki, "metrics", "efficiency");
+  const eff = join15(loki, "metrics", "efficiency");
   let names = [];
   try {
     names = readdirSync5(eff).filter((n2) => n2.endsWith(".json"));
   } catch {}
   for (const n2 of names) {
-    const d = readJson(join14(eff, n2));
+    const d = readJson(join15(eff, n2));
     if (isObj5(d) && isNum2(d.cost_usd) && recordIsMeasured(d)) {
       cost += d.cost_usd;
       found = true;
     }
   }
   if (!found) {
-    const t = readJson(join14(loki, "context", "tracking.json"));
+    const t = readJson(join15(loki, "context", "tracking.json"));
     const totals = isObj5(t) && isObj5(t.totals) ? t.totals : null;
     if (totals && isNum2(totals.total_cost_usd) && recordIsMeasured({ cost_usd: totals.total_cost_usd, input_tokens: totals.total_input, output_tokens: totals.total_output })) {
       cost = totals.total_cost_usd;
@@ -15005,8 +15091,8 @@ function mount9(ctx) {
 }
 
 // src/server/routes/memory.ts
-import { existsSync as existsSync8, readFileSync as readFileSync12, readdirSync as readdirSync6, realpathSync as realpathSync7, statSync as statSync7 } from "fs";
-import { join as join15, sep as sep5 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync12, readdirSync as readdirSync6, realpathSync as realpathSync8, statSync as statSync7 } from "fs";
+import { join as join16, sep as sep6 } from "path";
 var isObj6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var nonEmpty = (v) => !(v === undefined || v === null || v === "" || Array.isArray(v) && v.length === 0 || isObj6(v) && Object.keys(v).length === 0);
 var focus = { dir: null };
@@ -15037,7 +15123,7 @@ function jsonFiles(dir, cap = Infinity) {
     for (const e of ents.sort((a, b) => a.name < b.name ? -1 : 1)) {
       if (out2.length >= cap)
         return;
-      const p = join15(d, e.name);
+      const p = join16(d, e.name);
       if (e.isDirectory())
         walk(p);
       else if (e.isFile() && e.name.endsWith(".json"))
@@ -15058,24 +15144,24 @@ function setFocus(repoDir, raw2, registry = registryFile()) {
     return { ok: false, error: "project_dir must be an absolute path without .. segments" };
   let real2 = "";
   try {
-    real2 = realpathSync7(s);
+    real2 = realpathSync8(s);
     if (!statSync7(real2).isDirectory())
       throw new Error("not a dir");
   } catch {
     return { ok: false, error: `Directory does not exist: ${s}` };
   }
-  if (!existsSync8(join15(real2, ".loki")) || !statSync7(join15(real2, ".loki")).isDirectory())
+  if (!existsSync8(join16(real2, ".loki")) || !statSync7(join16(real2, ".loki")).isDirectory())
     return { ok: false, error: `Directory does not contain a .loki/ subdirectory: ${s}` };
   const allowed = new Set;
   try {
-    allowed.add(realpathSync7(repoDir));
+    allowed.add(realpathSync8(repoDir));
   } catch {}
   const reg = readJson(registry);
   if (isObj6(reg) && isObj6(reg.projects))
     for (const p of Object.values(reg.projects)) {
       if (isObj6(p) && typeof p.path === "string") {
         try {
-          allowed.add(realpathSync7(p.path));
+          allowed.add(realpathSync8(p.path));
         } catch {}
       }
     }
@@ -15089,7 +15175,7 @@ var QUEUES = [["pending.json", "pending"], ["in-progress.json", "in_progress"],
 var RANK = { done: 3, in_progress: 2, review: 1, pending: 0 };
 function tasksList(loki, status) {
   const all = [];
-  const st = readJson(join15(loki, "dashboard-state.json"));
+  const st = readJson(join16(loki, "dashboard-state.json"));
   const groups = isObj6(st) && isObj6(st.tasks) ? st.tasks : {};
   for (const [key, mapped] of GROUPS) {
     const g = groups[key];
@@ -15111,7 +15197,7 @@ function tasksList(loki, status) {
     });
   }
   for (const [file, qs] of QUEUES) {
-    const raw2 = readJson(join15(loki, "queue", file));
+    const raw2 = readJson(join16(loki, "queue", file));
     const items = isObj6(raw2) ? raw2.tasks : raw2;
     if (!Array.isArray(items))
       continue;
@@ -15165,7 +15251,7 @@ function tasksList(loki, status) {
   }
   return status ? out2.filter((t) => t.status === status) : out2;
 }
-var memDir = (loki, sub) => join15(loki, "memory", sub);
+var memDir = (loki, sub) => join16(loki, "memory", sub);
 function memoryEpisodes(loki, limit = 50) {
   const eps = jsonFiles(memDir(loki, "episodic")).map(readJson).filter(isObj6);
   eps.sort((a, b) => String(b.timestamp ?? "").localeCompare(String(a.timestamp ?? "")));
@@ -15174,19 +15260,19 @@ function memoryEpisodes(loki, limit = 50) {
 function memoryEpisode(loki, id) {
   for (const f of jsonFiles(memDir(loki, "episodic"))) {
     const d = readJson(f);
-    if (isObj6(d) && (d.id === id || f.split(sep5).pop() === `${id}.json`))
+    if (isObj6(d) && (d.id === id || f.split(sep6).pop() === `${id}.json`))
       return d;
   }
   return null;
 }
 function memoryPatterns(loki) {
-  const d = readJson(join15(memDir(loki, "semantic"), "patterns.json"));
+  const d = readJson(join16(memDir(loki, "semantic"), "patterns.json"));
   const list = Array.isArray(d) ? d : isObj6(d) && Array.isArray(d.patterns) ? d.patterns : [];
   return list.filter(isObj6);
 }
 var memorySkills = (loki) => jsonFiles(memDir(loki, "skills")).map(readJson).filter(isObj6);
 function memoryEconomics(loki) {
-  const rawV = readJson(join15(loki, "memory", "token_economics.json"));
+  const rawV = readJson(join16(loki, "memory", "token_economics.json"));
   const raw2 = isObj6(rawV) ? rawV : {};
   const m = isObj6(raw2.metrics) ? raw2.metrics : {};
   const n2 = (v) => typeof v === "number" && Number.isFinite(v) ? Math.trunc(v) : 0;
@@ -15222,7 +15308,7 @@ function memoryEconomics(loki) {
   };
 }
 function contextTracking(loki) {
-  const f = join15(loki, "context", "tracking.json");
+  const f = join16(loki, "context", "tracking.json");
   if (!existsSync8(f)) {
     return { status: 200, body: {
       session_id: null,
@@ -15284,7 +15370,7 @@ function mount10(ctx) {
 
 // src/server/routes/metrics.ts
 import { readdirSync as readdirSync7, readFileSync as readFileSync13, statSync as statSync8 } from "fs";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 var isObj7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var arr = (v) => Array.isArray(v) ? v : [];
 function buildMetricsText(repoDir, now = Date.now()) {
@@ -15301,7 +15387,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
       L.push(...samples);
     L.push("");
   };
-  const stRaw = readJson(join16(loki, "dashboard-state.json"));
+  const stRaw = readJson(join17(loki, "dashboard-state.json"));
   const state = isObj7(stRaw) ? stRaw : null;
   let status = 0;
   if (state?.mode === "paused")
@@ -15310,7 +15396,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
     status = 1;
   else {
     try {
-      if (pidAlive(parseInt(readFileSync13(join16(loki, "loki.pid"), "utf8").trim(), 10)))
+      if (pidAlive(parseInt(readFileSync13(join17(loki, "loki.pid"), "utf8").trim(), 10)))
         status = 1;
     } catch {}
   }
@@ -15326,7 +15412,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
     `loki_tasks_total{status="failed"} ${arr(tasks.failed).length}`
   ] : null);
   let agents = null;
-  const af = readJson(join16(loki, "state", "agents.json"));
+  const af = readJson(join17(loki, "state", "agents.json"));
   if (Array.isArray(af) && af.length)
     agents = af;
   else if (state && Array.isArray(state.agents) && state.agents.length)
@@ -15338,7 +15424,7 @@ function buildMetricsText(repoDir, now = Date.now()) {
   gauge("loki_cost_usd", "Estimated total cost in USD", "gauge", cost.estimated_cost_usd !== null ? [`loki_cost_usd ${cost.estimated_cost_usd}`] : null);
   let events2 = null;
   try {
-    events2 = readFileSync13(join16(loki, "events.jsonl"), "utf8").split(`
+    events2 = readFileSync13(join17(loki, "events.jsonl"), "utf8").split(`
 `).filter((l) => l.trim()).length;
   } catch {}
   gauge("loki_events_total", "Total number of events recorded", "counter", events2 !== null ? [`loki_events_total ${events2}`] : null);
@@ -15350,19 +15436,19 @@ function buildMetricsText(repoDir, now = Date.now()) {
   }
   gauge("loki_uptime_seconds", "Seconds since session started", "gauge", uptime !== null ? [`loki_uptime_seconds ${uptime}`] : null);
   let total = 0, ver = 0, gaps = 0, notver = 0, unk = 0, att = 0, sig = 0;
-  const pdir = join16(loki, "proofs");
+  const pdir = join17(loki, "proofs");
   let entries = [];
   try {
     entries = readdirSync7(pdir).sort();
   } catch {}
   for (const e of entries) {
     try {
-      if (!statSync8(join16(pdir, e)).isDirectory())
+      if (!statSync8(join17(pdir, e)).isDirectory())
         continue;
     } catch {
       continue;
     }
-    const d = readJson(join16(pdir, e, "proof.json"));
+    const d = readJson(join17(pdir, e, "proof.json"));
     if (!isObj7(d))
       continue;
     total++;
@@ -15407,7 +15493,7 @@ function mount11(ctx) {
 
 // src/server/routes/session_control.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync8, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname3, join as join17 } from "path";
+import { dirname as dirname3, join as join18 } from "path";
 var isObj8 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var ACTIONS = ["pause", "resume", "stop", "council-review"];
 var isAction = (v) => ACTIONS.includes(v);
@@ -15432,7 +15518,7 @@ var readJson2 = (p) => {
 };
 function runnerPid(loki) {
   try {
-    const pid = parseInt(readFileSync14(join17(loki, "loki.pid"), "utf8").trim(), 10);
+    const pid = parseInt(readFileSync14(join18(loki, "loki.pid"), "utf8").trim(), 10);
     return pidAlive(pid) ? pid : null;
   } catch {
     return null;
@@ -15442,18 +15528,18 @@ function applyControl(repoDir, action) {
   const loki = lokiDirOf(repoDir);
   const running = runnerPid(loki) !== null;
   const put = (rel) => {
-    const f = join17(loki, rel);
+    const f = join18(loki, rel);
     mkdirSync4(dirname3(f), { recursive: true });
     writeFileSync5(f, new Date().toISOString());
   };
   if (action === "council-review") {
-    put(join17("signals", "COUNCIL_REVIEW_REQUESTED"));
+    put(join18("signals", "COUNCIL_REVIEW_REQUESTED"));
     return { status: 200, body: { success: true, message: "Council review requested" } };
   }
   if (action === "resume") {
     for (const n2 of ["PAUSE", "STOP"]) {
       try {
-        unlinkSync2(join17(loki, n2));
+        unlinkSync2(join18(loki, n2));
       } catch {}
     }
     return running ? { status: 200, body: { success: true, message: "Session resumed", process_verified: true } } : { status: 503, body: { success: false, message: "Session process is not running; the signal files were cleared" } };
@@ -15473,16 +15559,16 @@ function runControl(db, repoDir, action, c, via) {
   return c.json(r.body, r.status);
 }
 function councilState(loki) {
-  const f = join17(loki, "council", "state.json");
+  const f = join18(loki, "council", "state.json");
   if (!existsSync9(f))
     return { enabled: false, total_votes: 0, verdicts: [] };
   const d = readJson2(f);
   return isObj8(d) ? d : { enabled: null, total_votes: null, verdicts: null, error: "unreadable_state" };
 }
 function councilVerdicts(loki, limit = 20) {
-  const st = readJson2(join17(loki, "council", "state.json"));
+  const st = readJson2(join18(loki, "council", "state.json"));
   const verdicts = isObj8(st) && Array.isArray(st.verdicts) ? st.verdicts : [];
-  const votes = join17(loki, "council", "votes");
+  const votes = join18(loki, "council", "votes");
   const details = [];
   let names = [];
   try {
@@ -15496,8 +15582,8 @@ function councilVerdicts(loki, limit = 20) {
     }
   };
   for (const n2 of names.slice(0, limit)) {
-    const dir = join17(votes, n2), d = { iteration: n2 };
-    const ev = text2(join17(dir, "evidence.md"));
+    const dir = join18(votes, n2), d = { iteration: n2 };
+    const ev = text2(join18(dir, "evidence.md"));
     if (ev !== null)
       d.evidence_preview = ev.slice(0, 500);
     let files = [];
@@ -15505,10 +15591,10 @@ function councilVerdicts(loki, limit = 20) {
       files = readdirSync8(dir).filter((f) => /^member-.*\.txt$/.test(f)).sort();
     } catch {}
     d.members = files.flatMap((f) => {
-      const t = text2(join17(dir, f));
+      const t = text2(join18(dir, f));
       return t === null ? [] : [{ member: f.replace(/\.txt$/, ""), content: t.trim() }];
     });
-    const con = text2(join17(dir, "contrarian.txt"));
+    const con = text2(join18(dir, "contrarian.txt"));
     if (con !== null)
       d.contrarian = con.trim();
     details.push(d);
@@ -15519,7 +15605,7 @@ function councilConvergence(loki) {
   const dataPoints = [];
   let raw2 = "";
   try {
-    raw2 = readFileSync14(join17(loki, "council", "convergence.log"), "utf8");
+    raw2 = readFileSync14(join18(loki, "council", "convergence.log"), "utf8");
   } catch {}
   for (const line2 of raw2.trim().split(`
 `)) {
@@ -15535,7 +15621,7 @@ function councilConvergence(loki) {
 }
 function councilReport(loki) {
   try {
-    return { report: readFileSync14(join17(loki, "council", "report.md"), "utf8") };
+    return { report: readFileSync14(join18(loki, "council", "report.md"), "utf8") };
   } catch {
     return { report: null };
   }
@@ -15548,7 +15634,7 @@ function councilTranscripts(loki, q) {
     if (Number.isNaN(since))
       return { error: "Invalid 'since' timestamp format; expected ISO8601" };
   }
-  const dir = join17(loki, "council", "transcripts");
+  const dir = join18(loki, "council", "transcripts");
   let names = [];
   try {
     names = readdirSync8(dir).filter((f) => /^iter-.*\.json$/.test(f)).sort().reverse();
@@ -15557,7 +15643,7 @@ function councilTranscripts(loki, q) {
   }
   const out2 = [];
   for (const n2 of names) {
-    const rec = readJson2(join17(dir, n2));
+    const rec = readJson2(join18(dir, n2));
     if (!isObj8(rec) || typeof rec.iteration_id !== "string")
       continue;
     if (since !== null) {
@@ -15610,11 +15696,11 @@ function mount12(ctx) {
 // src/server/routes/integrations.ts
 import { spawn as spawn2 } from "child_process";
 import { existsSync as existsSync10, readFileSync as readFileSync15, statSync as statSync9 } from "fs";
-import { delimiter, join as join18 } from "path";
+import { delimiter, join as join19 } from "path";
 var GH_TIMEOUT_MS = 3000;
 var isSet = (n2) => !!n2 && (process.env[n2] ?? "") !== "";
 function ghAuthed(pathVar = process.env.PATH ?? "", timeoutMs = GH_TIMEOUT_MS) {
-  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join18(d, "gh")).find((p) => existsSync10(p));
+  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join19(d, "gh")).find((p) => existsSync10(p));
   if (!exe)
     return Promise.resolve(null);
   return new Promise((resolve4) => {
@@ -15659,7 +15745,7 @@ function configuredName(repoDir, path) {
 }
 function mcpServers(repoDir) {
   try {
-    const p = join18(repoDir, ".mcp.json");
+    const p = join19(repoDir, ".mcp.json");
     if (!existsSync10(p) || statSync9(p).size > 1e6)
       return null;
     const j = JSON.parse(readFileSync15(p, "utf8"));
@@ -15740,7 +15826,7 @@ function mount13(ctx) {
 
 // src/server/routes/merge_risk.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync8 } from "fs";
+import { realpathSync as realpathSync9 } from "fs";
 import { basename as basename5, resolve as resolve4 } from "path";
 var PR = /^[0-9]{1,7}$/;
 var REF = /^[A-Za-z0-9._/][A-Za-z0-9._/-]{0,99}$/;
@@ -15839,7 +15925,7 @@ function mount14(ctx) {
   const active = { run: 0, queue: 0, risk: 0 };
   const real2 = (p) => {
     try {
-      return realpathSync8(p);
+      return realpathSync9(p);
     } catch {
       return null;
     }
@@ -16051,7 +16137,7 @@ function mount15(ctx) {
 // src/server/routes/providers.ts
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync11, readFileSync as readFileSync16 } from "fs";
-import { delimiter as delimiter2, join as join19 } from "path";
+import { delimiter as delimiter2, join as join20 } from "path";
 var ORDER = ["claude", "codex", "cline", "aider", "opencode"];
 var DEPRECATED = ["gemini"];
 var AUTH_ENV = {
@@ -16067,7 +16153,7 @@ function findOnPath(bin, pathVar) {
   for (const d of pathVar.split(delimiter2)) {
     if (!d)
       continue;
-    const p = join19(d, bin);
+    const p = join20(d, bin);
     if (existsSync11(p))
       return p;
   }
@@ -16112,14 +16198,14 @@ function probeCli(bin, timeoutMs, pathVar = process.env.PATH ?? "") {
   });
 }
 function providersDir() {
-  const cands = [process.env.LOKI_PROVIDERS_DIR, join19(import.meta.dir, "../../../../../providers"), join19(import.meta.dir, "../../../providers")];
-  return cands.find((d) => !!d && existsSync11(join19(d, "model_catalog.json"))) ?? null;
+  const cands = [process.env.LOKI_PROVIDERS_DIR, join20(import.meta.dir, "../../../../../providers"), join20(import.meta.dir, "../../../providers")];
+  return cands.find((d) => !!d && existsSync11(join20(d, "model_catalog.json"))) ?? null;
 }
 function loadCatalog(dir) {
   if (!dir)
     return { providers: {}, updated: null };
   try {
-    const j = JSON.parse(readFileSync16(join19(dir, "model_catalog.json"), "utf8"));
+    const j = JSON.parse(readFileSync16(join20(dir, "model_catalog.json"), "utf8"));
     return { providers: j.providers ?? {}, updated: typeof j.updated === "string" ? j.updated : null };
   } catch {
     return { providers: {}, updated: null };
@@ -16165,7 +16251,7 @@ function mount16(ctx) {
 function computeStats(db, since) {
   const all = db.select().from(runs).all().filter((r) => !since || r.startedAt !== null && r.startedAt >= since);
   const by = {};
-  let finished = 0, running = 0, blocked = 0, withVerdict = 0, verified = 0, unchecked = 0;
+  let finished = 0, running = 0, blocked = 0, verified = 0, unchecked = 0, failed = 0, satisfied = 0, other = 0;
   let mUsd = 0, mRuns = 0, pUsd = 0, pRuns = 0;
   for (const r of all) {
     if (r.endedAt)
@@ -16176,11 +16262,16 @@ function computeStats(db, since) {
     if (verdict) {
       by[verdict] = (by[verdict] ?? 0) + 1;
       if (r.endedAt) {
-        withVerdict++;
         if (verdict === "VERIFIED")
           verified++;
         else if (verdict === "VERIFIED (signature not checked)")
           unchecked++;
+        else if (verdict === "ALREADY_SATISFIED" || verdict === "ALREADY_SATISFIED (signature not checked)")
+          satisfied++;
+        else if (verdict === "FAILED" || verdict === "PARTIAL" || verdict === "TAMPERED")
+          failed++;
+        else
+          other++;
       }
     }
     if (r.verdict === "SPEC_CONFLICT")
@@ -16210,9 +16301,11 @@ function computeStats(db, since) {
     runs_running: running,
     by_verdict: by,
     blocked_waiting: blocked,
-    verified_rate: withVerdict ? verified / withVerdict : null,
+    verified_rate: verified + unchecked + failed ? verified / (verified + unchecked + failed) : null,
+    breakdown: { verified, failed, already_satisfied: satisfied, other },
     verified_unchecked: unchecked,
     keys_configured: pubkeysFromEnv().configured === true,
+    ...pubkeysFromEnv().reason ? { keys_reason: pubkeysFromEnv().reason } : {},
     cost: {
       measured_usd: mRuns ? r62(mUsd) : null,
       measured_runs: mRuns,
@@ -16355,13 +16448,13 @@ data: ${JSON.stringify({ source: k.slice(0, i), run: k.slice(i + 1) })}
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync25, realpathSync as realpathSync11 } from "fs";
+import { readFileSync as readFileSync26, realpathSync as realpathSync13 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join28, sep as sep9 } from "path";
+import { join as join31, sep as sep11 } from "path";
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync17, readdirSync as readdirSync12, readFileSync as readFileSync24, statSync as statSync12 } from "fs";
-import { dirname as dirname12, join as join27 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync12, readFileSync as readFileSync25, statSync as statSync13 } from "fs";
+import { dirname as dirname12, join as join30 } from "path";
 import { createHash as createHash10, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
 
 // ../../loki-ts/src/util/paths.ts
@@ -16386,15 +16479,15 @@ var REPO_ROOT = findRepoRoot();
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash9, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync16, readdirSync as readdirSync11, linkSync, mkdirSync as mkdirSync8, readFileSync as readFileSync22, statSync as statSync11, unlinkSync as unlinkSync4, writeFileSync as writeFileSync9 } from "fs";
-import { homedir as homedir5 } from "os";
-import { basename as basename9, dirname as dirname11, join as join26 } from "path";
+import { chmodSync as chmodSync4, existsSync as existsSync18, readdirSync as readdirSync11, linkSync, mkdirSync as mkdirSync9, readFileSync as readFileSync23, statSync as statSync12, unlinkSync as unlinkSync4, writeFileSync as writeFileSync10 } from "fs";
+import { homedir as homedir6 } from "os";
+import { basename as basename9, dirname as dirname11, join as join29 } from "path";
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import { mkdtempSync, readFileSync as readFileSync17, rmSync as rmSync3 } from "fs";
-import { tmpdir } from "os";
-import { join as join20 } from "path";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join21 } from "path";
 import { basename as basename6 } from "path";
 var WEAKENED = { verdict: "weakened", changes: [] };
 var PY = String.raw`
@@ -16553,7 +16646,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync(join20(tmpdir(), "loki-ad-"));
+    cwd = mkdtempSync(join21(tmpdir2(), "loki-ad-"));
     const raw2 = execFileSync3("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
@@ -16584,7 +16677,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => execFileSync3("git", ["show", `${ref}:${path}`], { cwd: repoDir, encoding: "utf8", env: process.env, stdio: ["ignore", "pipe", "ignore"] });
-    const head = headRef ? show(headRef) : readFileSync17(join20(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync17(join21(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -16601,15 +16694,15 @@ function classifyTestEdit(file, oldText, newText, taskText, baseCounts, headCoun
 
 // ../../loki-ts/src/e10ext/discard.ts
 import { execFileSync as execFileSync4 } from "child_process";
-import { chmodSync as chmodSync3, closeSync as closeSync4, lstatSync as lstatSync3, mkdirSync as mkdirSync5, openSync as openSync4, readFileSync as readFileSync18, realpathSync as realpathSync9, rmdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync6 } from "fs";
-import { dirname as dirname5, join as join21, relative, sep as sep6 } from "path";
+import { chmodSync as chmodSync3, closeSync as closeSync4, lstatSync as lstatSync3, mkdirSync as mkdirSync5, openSync as openSync4, readFileSync as readFileSync18, realpathSync as realpathSync10, rmdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync6 } from "fs";
+import { dirname as dirname5, join as join22, relative, sep as sep7 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync9(repoDir), fp = join21(root, f), rel = relative(root, dirname5(fp));
+  const root = realpathSync10(repoDir), fp = join22(root, f), rel = relative(root, dirname5(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
-  for (const part of rel === "" ? [] : rel.split(sep6)) {
-    cur = join21(cur, part);
+  for (const part of rel === "" ? [] : rel.split(sep7)) {
+    cur = join22(cur, part);
     let st2;
     try {
       st2 = lstatSync3(cur);
@@ -16658,7 +16751,7 @@ async function discardIfSatisfied(git, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join21(repoDir, f);
+    const fp = join22(repoDir, f);
     try {
       if (v.startsWith("!")) {
         const st = lstatSync3(fp);
@@ -16677,7 +16770,7 @@ async function discardIfSatisfied(git, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync3(join21(repoDir, f));
+          const l = lstatSync3(join22(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -16717,7 +16810,7 @@ function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
 import { basename as basename8, dirname as dirname7 } from "path";
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename7, extname, join as join22, relative as relative2, sep as sep7 } from "path";
+import { basename as basename7, extname, join as join23, relative as relative2, sep as sep8 } from "path";
 var SKIP_DIRS = new Set([
   ".git",
   "node_modules",
@@ -16742,7 +16835,7 @@ function isTestFile(rel) {
 }
 
 // ../../loki-ts/src/features/speed/unit_mode.ts
-import { closeSync as closeSync5, constants, fstatSync as fstatSync3, lstatSync as lstatSync4, openSync as openSync5, readSync as readSync3, realpathSync as realpathSync10 } from "fs";
+import { closeSync as closeSync5, constants, fstatSync as fstatSync3, lstatSync as lstatSync4, openSync as openSync5, readSync as readSync3, realpathSync as realpathSync11 } from "fs";
 var MAX_SPEC_BYTES = 1024 * 1024;
 var MAX_TOKEN_BUDGET = 1e9;
 var norm2 = (p) => p.replace(/^\.\//, "");
@@ -16911,10 +17004,257 @@ async function run(argv, opts = {}) {
 
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn5 } from "child_process";
+
+// ../../loki-ts/src/project_model/discover.ts
+import { existsSync as existsSync14, mkdirSync as mkdirSync6, readFileSync as readFileSync19, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "fs";
+import { join as join25 } from "path";
+
+// ../../loki-ts/src/engine10/types.ts
+var STAGE_BUDGETS = {
+  intake: { targetS: 15, limitS: 60 },
+  plan: { targetS: 45, limitS: 90 },
+  wall: { targetS: 45, limitS: 90 },
+  implement: { targetS: 180, limitS: 480 },
+  verify: { targetS: 60, limitS: 120 },
+  fix: { targetS: 90, limitS: 180 },
+  commit: { targetS: 5, limitS: 30 },
+  seal: { targetS: 15, limitS: 60 },
+  pr: { targetS: 15, limitS: 60 },
+  deep: { targetS: null, limitS: 2700 }
+};
+
+// ../../loki-ts/src/project_model/schema.ts
+import { existsSync as existsSync13, lstatSync as lstatSync5, realpathSync as realpathSync12, statSync as statSync10 } from "fs";
+import { isAbsolute, join as join24, normalize, sep as sep9 } from "path";
+var PROJECT_MODEL_SCHEMA = "loki.v10.project/1";
+var COMMAND_KINDS = ["test", "lint", "build", "start"];
+var isRec = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isStr = (v) => typeof v === "string" && v.trim() !== "";
+function safeRel(p) {
+  const n2 = normalize(p.trim()).split(sep9).join("/").replace(/\/$/, "");
+  if (n2 === "" || isAbsolute(n2) || n2 === ".." || n2.startsWith("../"))
+    return null;
+  return n2;
+}
+function insideRepo(repoDir, rel) {
+  try {
+    const real2 = realpathSync12(join24(repoDir, rel));
+    const base = realpathSync12(repoDir);
+    return real2 === base || real2.startsWith(base + sep9);
+  } catch {
+    return false;
+  }
+}
+function checkCitation(repoDir, raw2) {
+  if (!isStr(raw2))
+    return "citation is not a non-empty string";
+  const rel = safeRel(raw2.replace(/:\d+(?:-\d+)?$/, ""));
+  if (rel === null)
+    return `citation "${raw2}" is not a repo-relative path`;
+  const abs = join24(repoDir, rel);
+  if (!existsSync13(abs) || !statSync10(abs).isFile() || !insideRepo(repoDir, rel))
+    return `citation "${raw2}" names a file that does not exist`;
+  return null;
+}
+function checkFingerprint(repoDir, raw2) {
+  if (!isStr(raw2))
+    return "fingerprint entry is not a non-empty string";
+  const rel = safeRel(raw2.replace(/:\d+(?:-\d+)?$/, ""));
+  if (rel === null)
+    return `fingerprint "${raw2}" is not a repo-relative path`;
+  try {
+    if (!lstatSync5(join24(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
+      return `fingerprint "${raw2}" is not a regular file inside the repo`;
+  } catch {
+    return `fingerprint "${raw2}" names a file that does not exist`;
+  }
+  return null;
+}
+function checkCites(repoDir, v, where, errs) {
+  if (!Array.isArray(v) || v.length === 0) {
+    errs.push(`${where}: needs at least one citation (a repo-relative file path)`);
+    return [];
+  }
+  const out2 = [];
+  for (const c of v) {
+    const e = checkCitation(repoDir, c);
+    if (e)
+      errs.push(`${where}: ${e}`);
+    else
+      out2.push(String(c));
+  }
+  return out2;
+}
+function checkDir(repoDir, v, where, errs) {
+  const rel = isStr(v) ? safeRel(v) : null;
+  if (rel === null) {
+    errs.push(`${where}: must be a repo-relative directory ("." for the repo root)`);
+    return ".";
+  }
+  const abs = join24(repoDir, rel);
+  if (!existsSync13(abs) || !statSync10(abs).isDirectory() || !insideRepo(repoDir, rel))
+    errs.push(`${where}: directory "${rel}" does not exist`);
+  return rel;
+}
+function checkCommand(repoDir, v, where, errs) {
+  if (v === null || v === undefined)
+    return null;
+  if (!isRec(v) || !isStr(v.cmd)) {
+    errs.push(`${where}: must be null or {cmd, cwd, cite}`);
+    return null;
+  }
+  const cwd = checkDir(repoDir, v.cwd, `${where}.cwd`, errs);
+  return { cmd: v.cmd.trim(), cwd, cite: checkCites(repoDir, v.cite, `${where}.cite`, errs) };
+}
+function validateAnswer(repoDir, raw2) {
+  const errs = [];
+  if (!isRec(raw2))
+    return { ok: false, errors: ["answer must be a JSON object"] };
+  if (!isStr(raw2.workspaceKind))
+    errs.push("workspaceKind: required non-empty string");
+  const workspaceCite = checkCites(repoDir, raw2.workspaceCite, "workspaceCite", errs);
+  if (!Array.isArray(raw2.packages))
+    errs.push("packages: required array");
+  const packages = [];
+  for (const [i, p] of (Array.isArray(raw2.packages) ? raw2.packages : []).entries()) {
+    const w = `packages[${i}]`;
+    if (!isRec(p) || !isStr(p.name)) {
+      errs.push(`${w}: must be an object with a name`);
+      continue;
+    }
+    const root = checkDir(repoDir, p.root, `${w}.root`, errs);
+    const cmds = isRec(p.commands) ? p.commands : {};
+    if (!isRec(p.commands))
+      errs.push(`${w}.commands: required object with keys ${COMMAND_KINDS.join(", ")} (each null or a command)`);
+    const commands = {};
+    for (const k of COMMAND_KINDS)
+      commands[k] = checkCommand(repoDir, cmds[k], `${w}.commands.${k}`, errs);
+    const ui = isRec(p.ui) ? p.ui : {};
+    if (!isRec(p.ui) || typeof ui.present !== "boolean")
+      errs.push(`${w}.ui: required {present: boolean, boot: command|null, cite}`);
+    packages.push({
+      name: p.name.trim(),
+      root,
+      runner: isStr(p.runner) ? p.runner.trim() : null,
+      commands,
+      ui: { present: ui.present === true, boot: checkCommand(repoDir, ui.boot, `${w}.ui.boot`, errs), cite: checkCites(repoDir, ui.cite, `${w}.ui.cite`, errs) },
+      cite: checkCites(repoDir, p.cite, `${w}.cite`, errs)
+    });
+  }
+  if (!Array.isArray(raw2.fingerprintFiles))
+    errs.push("fingerprintFiles: required array of the manifest and lockfile paths");
+  const fingerprintFiles = (Array.isArray(raw2.fingerprintFiles) ? raw2.fingerprintFiles : []).filter((f) => {
+    const e = checkFingerprint(repoDir, f);
+    if (e)
+      errs.push(`fingerprintFiles: ${e}`);
+    return e === null;
+  }).map((f) => String(f).replace(/:\d+(?:-\d+)?$/, ""));
+  if (errs.length > 0)
+    return { ok: false, errors: errs };
+  return { ok: true, model: { schema: PROJECT_MODEL_SCHEMA, status: "ok", workspaceKind: String(raw2.workspaceKind).trim(), workspaceCite, packages, fingerprintFiles } };
+}
+function unknownModel(key, reason, expiresAt) {
+  return { schema: PROJECT_MODEL_SCHEMA, status: "unknown", key, workspaceKind: "unknown", workspaceCite: [], packages: [], fingerprintFiles: [], reason, ...expiresAt === undefined ? {} : { expiresAt } };
+}
+function parseCached(repoDir, raw2, now) {
+  if (!isRec(raw2) || raw2.schema !== PROJECT_MODEL_SCHEMA || typeof raw2.key !== "string")
+    return null;
+  if (raw2.status === "unknown")
+    return typeof raw2.expiresAt === "number" && raw2.expiresAt > now ? unknownModel(raw2.key, typeof raw2.reason === "string" ? raw2.reason : "cached unknown", raw2.expiresAt) : null;
+  if (raw2.status !== "ok")
+    return null;
+  const v = validateAnswer(repoDir, raw2);
+  return v.ok ? { ...v.model, key: raw2.key } : null;
+}
+
+// ../../loki-ts/src/project_model/gather.ts
+var GATHER_CAPS = {
+  maxListFiles: 20000,
+  maxDepth: 3,
+  maxFileBytes: 16 * 1024,
+  maxFiles: 60,
+  maxTotalBytes: 96 * 1024,
+  maxTreeLines: 300,
+  maxHashBytes: 16 * 1024 * 1024
+};
+
+// ../../loki-ts/src/project_model/discover.ts
+function projectModelEnabled(env = process.env) {
+  return env["LOKI_E10_PROJECT_MODEL"] !== "0";
+}
+var PROJECT_FILE = ".loki/project.json";
+var UNKNOWN_TTL_MS = 60 * 60 * 1000;
+function loadCached(repoDir, now = Date.now()) {
+  try {
+    return parseCached(repoDir, JSON.parse(readFileSync19(join25(repoDir, PROJECT_FILE), "utf8")), now);
+  } catch {
+    return null;
+  }
+}
+
+// ../../loki-ts/src/project_model/api.ts
+import { posix } from "path";
+var clean = (p) => typeof p === "string" ? posix.normalize(p.replace(/\\/g, "/")).replace(/^\.\//, "") : "";
+var isRec2 = (v) => typeof v === "object" && v !== null;
+var wellFormed = (p) => isRec2(p) && typeof p.root === "string" && typeof p.name === "string";
+function projectApi(model) {
+  const known = isRec2(model) && model.status === "ok";
+  const packages = known && Array.isArray(model.packages) ? model.packages.filter(wellFormed) : [];
+  const packageOf = (file) => {
+    const f = clean(file);
+    if (f === "")
+      return null;
+    let best = null;
+    for (const p of packages) {
+      const hit = p.root === "." || f === p.root || f.startsWith(`${p.root}/`);
+      if (hit && (best === null || p.root !== "." && (best.root === "." || p.root.length > best.root.length)))
+        best = p;
+    }
+    return best;
+  };
+  return {
+    model,
+    known: () => known,
+    packages: () => packages,
+    workspaceKind: () => isRec2(model) && typeof model.workspaceKind === "string" ? model.workspaceKind : "unknown",
+    packageRootOf: (file) => packageOf(file)?.root ?? null,
+    packageOf,
+    relativeToRoot: (file) => {
+      const p = packageOf(file);
+      return p ? p.root === "." ? clean(file) : clean(file).slice(p.root.length + 1) : null;
+    },
+    commandFor: (pkg, kind) => (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.commands?.[kind] ?? null,
+    hasUI: () => packages.some((p) => isRec2(p.ui) && p.ui.present === true),
+    uiBoot: () => {
+      for (const p of packages)
+        if (isRec2(p.ui) && p.ui.present === true && isRec2(p.ui.boot))
+          return { pkg: p, boot: p.ui.boot };
+      return null;
+    }
+  };
+}
+
+// ../../loki-ts/src/project_model/resolve.ts
+function loadProjectApi(repoDir, env = process.env) {
+  if (!projectModelEnabled(env))
+    return null;
+  try {
+    const model = loadCached(repoDir);
+    const api = model ? projectApi(model) : null;
+    return api && api.known() ? api : null;
+  } catch {
+    return null;
+  }
+}
+function isMultiRoot(api) {
+  return !!api && api.known() && api.packages().some((p) => p.root !== ".");
+}
+
+// ../../loki-ts/src/features/visual_evidence.ts
 import { createHash as createHash6, randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync13, lstatSync as lstatSync5, mkdirSync as mkdirSync6, readdirSync as readdirSync9, readFileSync as readFileSync19, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync15, lstatSync as lstatSync6, mkdirSync as mkdirSync7, readdirSync as readdirSync9, readFileSync as readFileSync20, writeFileSync as writeFileSync8 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname8, isAbsolute, join as join23, normalize, relative as relative3, sep as sep8 } from "path";
+import { dirname as dirname8, isAbsolute as isAbsolute2, join as join26, normalize as normalize2, relative as relative3, sep as sep10 } from "path";
 var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0";
 var PAGE_RE = /^(?:.*\/)?(?:app|pages|src|public)\/.*\.(?:html|jsx|tsx|vue|svelte)$/;
 var isPageFile = (p) => PAGE_RE.test(p);
@@ -16924,12 +17264,12 @@ function routeFor(file) {
   return `/${r}`.replace(/\/+/g, "/");
 }
 var screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index";
-var sha256File = (p) => createHash6("sha256").update(readFileSync19(p)).digest("hex");
+var sha256File = (p) => createHash6("sha256").update(readFileSync20(p)).digest("hex");
 function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join23(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join26(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -16940,16 +17280,16 @@ function checkScreens(runDir, screens) {
   for (const s of screens) {
     if (typeof s?.path !== "string" || typeof s.sha256 !== "string")
       return "evidence_screens entry is malformed";
-    if (isAbsolute(s.path) || normalize(s.path).startsWith(".."))
+    if (isAbsolute2(s.path) || normalize2(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join23(runDir, s.path);
+    const file = join26(runDir, s.path);
     let cur = runDir;
-    for (const seg of normalize(s.path).split(sep8)) {
-      cur = join23(cur, seg);
+    for (const seg of normalize2(s.path).split(sep10)) {
+      cur = join26(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
-    if (!existsSync13(file))
+    if (!existsSync15(file))
       return `evidence screenshot is missing: ${s.path}`;
     if (!isRegularFile(file))
       return `evidence screenshot is not a regular file: ${s.path}`;
@@ -16991,16 +17331,16 @@ async function waitUp(url, ms, signal) {
   return false;
 }
 var playwrightBin = (repoDir) => {
-  const bin = join23(repoDir, "node_modules", ".bin", "playwright");
-  return existsSync13(bin) ? bin : null;
+  const bin = join26(repoDir, "node_modules", ".bin", "playwright");
+  return existsSync15(bin) ? bin : null;
 };
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join23(repoDir, f);
-    if (!existsSync13(p))
+    const p = join26(repoDir, f);
+    if (!existsSync15(p))
       continue;
     try {
-      const txt = readFileSync19(p, "utf8");
+      const txt = readFileSync20(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -17010,8 +17350,8 @@ function openapiPaths(repoDir) {
   return [];
 }
 var playwrightTestPkg = (repoDir) => {
-  const d = join23(repoDir, "node_modules", "@playwright", "test");
-  return existsSync13(join23(d, "package.json")) ? d : null;
+  const d = join26(repoDir, "node_modules", "@playwright", "test");
+  return existsSync15(join26(d, "package.json")) ? d : null;
 };
 var e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
@@ -17023,24 +17363,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join23(runDir, relDir, "e2e");
-    mkdirSync6(dir, { recursive: true });
-    writeFileSync7(join23(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync7(join23(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    const dir = join26(runDir, relDir, "e2e");
+    mkdirSync7(dir, { recursive: true });
+    writeFileSync8(join26(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync8(join26(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join23(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join26(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
       for (const e of readdirSync9(d, { withFileTypes: true })) {
-        const full = join23(d, e.name);
+        const full = join26(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join23(relDir, "e2e", relative3(dir, full)));
+          rels.push(join26(relDir, "e2e", relative3(dir, full)));
       }
     };
-    walk(join23(dir, "out"));
+    walk(join26(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -17078,14 +17418,14 @@ function shoot(pw, args, cwd, ms, signal) {
 }
 var isSymlink = (p) => {
   try {
-    return lstatSync5(p).isSymbolicLink();
+    return lstatSync6(p).isSymbolicLink();
   } catch {
     return false;
   }
 };
 var isRegularFile = (p) => {
   try {
-    return lstatSync5(p).isFile();
+    return lstatSync6(p).isFile();
   } catch {
     return false;
   }
@@ -17133,24 +17473,30 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
   try {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
-    const pkgPath = join23(repoDir, "package.json");
-    if (!existsSync13(pkgPath))
-      return skip("no package.json");
-    const script = pickScript(JSON.parse(readFileSync19(pkgPath, "utf8")));
-    if (!script)
-      return skip("no dev, preview or start script");
+    const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
+    const appDir = boot ? join26(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join26(appDir, "package.json");
+    let script = null;
+    if (!boot) {
+      if (!existsSync15(pkgPath))
+        return skip("no package.json");
+      script = pickScript(JSON.parse(readFileSync20(pkgPath, "utf8")));
+      if (!script)
+        return skip("no dev, preview or start script");
+    }
     const pages = changed.filter(isPageFile);
     const explicitOn = (opts.env ?? process.env)["LOKI_VISUAL_EVIDENCE"] === "1";
     const apiPaths = pages.length === 0 && explicitOn ? openapiPaths(repoDir) : [];
     if (pages.length === 0 && apiPaths.length === 0)
       return skip(explicitOn ? "no changed page files and no openapi routes" : "no changed page files (set LOKI_VISUAL_EVIDENCE=1 for the API transcript)");
-    const pw = pages.length > 0 ? playwrightBin(repoDir) : null;
+    const pw = pages.length > 0 ? playwrightBin(appDir) ?? playwrightBin(repoDir) : null;
     if (pages.length > 0 && !pw)
       return skip("playwright not resolvable in the repo");
     const budget = opts.budgetMs ?? DEFAULT_BUDGET_MS, end = Date.now() + budget, left = () => end - Date.now();
     const aborted = () => signal?.aborted === true;
     const port = await freePort(), base = `http://127.0.0.1:${port}`;
-    child = spawn5("npm", ["run", script, "--silent"], { cwd: repoDir, detached: true, env: { ...opts.env ?? process.env, PORT: String(port), HOST: "127.0.0.1", BROWSER: "none" }, stdio: "ignore" });
+    const [bc, ba] = boot ? ["bash", ["-c", boot.boot.cmd]] : ["npm", ["run", script, "--silent"]];
+    child = spawn5(bc, [...ba], { cwd: appDir, detached: true, env: { ...opts.env ?? process.env, PORT: String(port), HOST: "127.0.0.1", BROWSER: "none" }, stdio: "ignore" });
     child.on("error", () => {
       return;
     });
@@ -17161,26 +17507,26 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join23(runDir, "evidence");
+    const evRoot = join26(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
-    mkdirSync6(evRoot, { recursive: true });
+    mkdirSync7(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join23("evidence", randomBytes2(6).toString("hex"));
-      mkdirSync6(join23(runDir, rel0));
+      const rel0 = join26("evidence", randomBytes2(6).toString("hex"));
+      mkdirSync7(join26(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join23(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join23(runDir, rel)], repoDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join23(runDir, rel)) && existsSync13(join23(runDir, rel)))
+        const rel = join26(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join26(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join26(runDir, rel)) && existsSync15(join26(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
         return skip("aborted");
       const routes = [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES);
-      const media = rels.length > 0 && left() > 0 ? await recordE2eMedia(repoDir, runDir, rel0, base, routes, left(), signal) : { rels: [], skipped: null };
+      const media = rels.length > 0 && left() > 0 ? await recordE2eMedia(appDir, runDir, rel0, base, routes, left(), signal) : { rels: [], skipped: null };
       if (aborted())
         return skip("aborted");
       const screens = hashScreens(runDir, [...rels, ...media.rels]);
@@ -17199,9 +17545,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join23(evRoot, randomBytes2(6).toString("hex"));
-    mkdirSync6(hdir);
-    writeFileSync7(join23(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    const hdir = join26(evRoot, randomBytes2(6).toString("hex"));
+    mkdirSync7(hdir);
+    writeFileSync8(join26(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -17227,23 +17573,9 @@ function receiptScreensProblem(receiptPath, receipt) {
   return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname8(receiptPath), receipt["evidence_screens"]);
 }
 
-// ../../loki-ts/src/engine10/types.ts
-var STAGE_BUDGETS = {
-  intake: { targetS: 15, limitS: 60 },
-  plan: { targetS: 45, limitS: 90 },
-  wall: { targetS: 45, limitS: 90 },
-  implement: { targetS: 180, limitS: 480 },
-  verify: { targetS: 60, limitS: 120 },
-  fix: { targetS: 90, limitS: 180 },
-  commit: { targetS: 5, limitS: 30 },
-  seal: { targetS: 15, limitS: 60 },
-  pr: { targetS: 15, limitS: 60 },
-  deep: { targetS: null, limitS: 2700 }
-};
-
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync14, lstatSync as lstatSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync20, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname9, join as join24 } from "path";
+import { existsSync as existsSync16, lstatSync as lstatSync7, mkdirSync as mkdirSync8, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname9, join as join27 } from "path";
 import { createHash as createHash7 } from "crypto";
 var MAX_CRITERIA = 50;
 var MAX_TEXT = 500;
@@ -17278,14 +17610,14 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join24(repoDir, ".loki", "contract.json");
+  return join27(repoDir, ".loki", "contract.json");
 }
 var MAX_CONTRACT_BYTES = 1024 * 1024;
 function readContract(repoDir) {
   const p = contractPath(repoDir);
   let st;
   try {
-    st = lstatSync6(p);
+    st = lstatSync7(p);
   } catch {
     return { contract: null, notes: [], sha256: null };
   }
@@ -17295,7 +17627,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync20(p);
+    raw2 = readFileSync21(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -17330,7 +17662,7 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
     const live = readContract(repoDir);
     let exists2 = true;
     try {
-      lstatSync6(contractPath(repoDir));
+      lstatSync7(contractPath(repoDir));
     } catch {
       exists2 = false;
     }
@@ -17359,18 +17691,18 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync15, readdirSync as readdirSync10, readFileSync as readFileSync21, statSync as statSync10 } from "fs";
-import { dirname as dirname10, join as join25 } from "path";
+import { existsSync as existsSync17, readdirSync as readdirSync10, readFileSync as readFileSync22, statSync as statSync11 } from "fs";
+import { dirname as dirname10, join as join28 } from "path";
 var ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 var PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
 var sha2 = (b) => createHash8("sha256").update(b).digest("hex");
 var isObj9 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "";
 var num2 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-var unitsDir = (runDir) => join25(runDir, "group", "units");
+var unitsDir = (runDir) => join28(runDir, "group", "units");
 var readJson3 = (p) => {
   try {
-    return JSON.parse(readFileSync21(p, "utf8"));
+    return JSON.parse(readFileSync22(p, "utf8"));
   } catch {
     return;
   }
@@ -17383,8 +17715,8 @@ var dirNames = (d) => {
   }
 };
 function sealGroup(runDir, rh) {
-  const manifestPath = join25(runDir, "group", "manifest.json");
-  if (!existsSync15(manifestPath))
+  const manifestPath = join28(runDir, "group", "manifest.json");
+  if (!existsSync17(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
   let problems = 0;
@@ -17408,10 +17740,10 @@ function sealGroup(runDir, rh) {
       return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join25(unitsDir(runDir), id), rp = join25(dir, "receipt.json"), ep = join25(dir, "events.jsonl");
+    const dir = join28(unitsDir(runDir), id), rp = join28(dir, "receipt.json"), ep = join28(dir, "events.jsonl");
     let bytes;
     try {
-      bytes = readFileSync21(rp);
+      bytes = readFileSync22(rp);
     } catch {
       return fail(`unit ${id} sub-receipt missing`);
     }
@@ -17428,7 +17760,7 @@ function sealGroup(runDir, rh) {
       unit_id: id,
       sub_receipt_sha256: sha2(bytes),
       receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync15(ep) ? sha2(readFileSync21(ep)) : null,
+      events_file_sha256: existsSync17(ep) ? sha2(readFileSync22(ep)) : null,
       verdict,
       goal: text2(u["goal"], 200),
       files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
@@ -17453,7 +17785,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync15(join25(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+    return existsSync17(join28(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
   if (!isObj9(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
@@ -17465,20 +17797,20 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join25(unitsDir(runDir), id), rp = join25(dir, "receipt.json"), ep = join25(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join28(unitsDir(runDir), id), rp = join28(dir, "receipt.json"), ep = join28(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
     try {
-      if (!statSync10(dir).isDirectory())
+      if (!statSync11(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync21(rp);
+      bytes = readFileSync22(rp);
     } catch {
       return bad(`unit ${id} sub-receipt missing`);
     }
     if (sha2(bytes) !== e["sub_receipt_sha256"])
       return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync15(ep) ? sha2(readFileSync21(ep)) : null;
+    const evSha = existsSync17(ep) ? sha2(readFileSync22(ep)) : null;
     if (evSha !== (e["events_file_sha256"] ?? null))
       return bad(`unit ${id} events.jsonl does not match its recorded hash`);
     const sub = readJson3(rp);
@@ -17533,21 +17865,21 @@ function loadSigningKey(generate = true) {
     let pem = inline ?? "";
     if (!inline) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join26(process.env["HOME"] || homedir5(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
+      const file = given || join29(process.env["HOME"] || homedir6(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        pem = readFileSync22(file);
+        pem = readFileSync23(file);
         if (!given) {
           for (const [f, m] of [[file, 384], [dirname11(file), 448]])
-            if (statSync11(f).mode & 63)
+            if (statSync12(f).mode & 63)
               chmodSync4(f, m);
         }
       } catch (e) {
         if (e.code !== "ENOENT" || !generate)
           return null;
-        mkdirSync8(dirname11(dirname11(file)), { recursive: true, mode: 448 });
-        mkdirSync8(dirname11(file), { recursive: true, mode: 448 });
+        mkdirSync9(dirname11(dirname11(file)), { recursive: true, mode: 448 });
+        mkdirSync9(dirname11(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
-        writeFileSync9(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
+        writeFileSync10(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
           linkSync(tmp, file);
         } catch (l) {
@@ -17556,7 +17888,7 @@ function loadSigningKey(generate = true) {
         } finally {
           unlinkSync4(tmp);
         }
-        pem = readFileSync22(file);
+        pem = readFileSync23(file);
       }
     }
     const k = createPrivateKey(pem);
@@ -17683,7 +18015,7 @@ var sealStage = {
     if (wallNotRun > 0) {
       try {
         const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename9(String(f.path))));
-        for (const n2 of readdirSync11(join26(ctx.runDir, "wall")).sort())
+        for (const n2 of readdirSync11(join29(ctx.runDir, "wall")).sort())
           if (!kept.has(n2))
             notProven.add(`wall test discarded: ${n2} (not_run)`);
       } catch {}
@@ -17743,7 +18075,7 @@ var sealStage = {
     const cost = ctx.cost.read(ctx.repoDir, iterIds);
     if (cost.unmetered)
       notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-    const eventsPath = join26(ctx.runDir, "events.jsonl");
+    const eventsPath = join29(ctx.runDir, "events.jsonl");
     const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
     const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
     if (wallFiles.length > 0 && wallPassed === null)
@@ -17779,7 +18111,7 @@ var sealStage = {
       provider: ctx.provider,
       model: ctx.model,
       resumed: o.intake?.resumed === true,
-      events_sha256: sha2562(existsSync16(eventsPath) ? readFileSync22(eventsPath) : ""),
+      events_sha256: sha2562(existsSync18(eventsPath) ? readFileSync23(eventsPath) : ""),
       ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
       log_seal: true
     };
@@ -17793,11 +18125,11 @@ var sealStage = {
       hash = receiptSha256(body);
     }
     const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
-    mkdirSync8(ctx.runDir, { recursive: true });
-    const path = join26(ctx.runDir, "receipt.json");
-    writeFileSync9(path, JSON.stringify(receipt, null, 2) + `
+    mkdirSync9(ctx.runDir, { recursive: true });
+    const path = join29(ctx.runDir, "receipt.json");
+    writeFileSync10(path, JSON.stringify(receipt, null, 2) + `
 `);
-    writeFileSync9(join26(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+    writeFileSync10(join29(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
     const signed = sig.jwt !== null;
     const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven };
     ctx.emit("receipt.sealed", "seal", { path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven });
@@ -17807,7 +18139,7 @@ var sealStage = {
 
 // ../../loki-ts/src/features/receipt_dsse.ts
 import { createPublicKey as createPublicKey3, sign as sign2, verify as verify2 } from "crypto";
-import { readFileSync as readFileSync23 } from "fs";
+import { readFileSync as readFileSync24 } from "fs";
 var DSSE_PAYLOAD_TYPE = "application/vnd.in-toto+json";
 var STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
 var PREDICATE_TYPE = "https://autonomi.dev/loki/receipt/v10";
@@ -17888,7 +18220,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync23(receiptPath, "utf8")), runId);
+    return envelopeRunIdProblem(JSON.parse(readFileSync24(receiptPath, "utf8")), runId);
   } catch {
     return null;
   }
@@ -17902,7 +18234,7 @@ function pubFor(kid, given) {
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync24(f))];
+      return [createPublicKey4(readFileSync25(f))];
     } catch {
       return [];
     }
@@ -17934,10 +18266,10 @@ function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
   if (typeof bound !== "string" || bound === createHash10("sha256").digest("hex"))
     return null;
-  const path = join27(dirname12(receiptPath), "events.jsonl");
-  if (!existsSync17(path))
+  const path = join30(dirname12(receiptPath), "events.jsonl");
+  if (!existsSync19(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync24(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
+  const raw2 = readFileSync25(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
 `).filter((l) => l.trim() !== "");
   if (events2.length !== lines.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
@@ -17953,7 +18285,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join27(dirname12(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join30(dirname12(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -17961,7 +18293,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines = readFileSync24(path, "utf8").split(`
+  const lines = readFileSync25(path, "utf8").split(`
 `).filter((l) => l.trim() !== ""), sha3 = createHash10("sha256").update(lines.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
@@ -17971,11 +18303,11 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   return null;
 }
 async function verifyReceipt(receiptPath, deps = {}) {
-  if (!existsSync17(receiptPath))
+  if (!existsSync19(receiptPath))
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync24(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync25(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -18008,6 +18340,9 @@ async function verifyReceipt(receiptPath, deps = {}) {
     return { verdict: "UNCHECKED", reasons: [outcome.reason ?? "attestation not checked"] };
   if (outcome.status === "tampered")
     return { verdict: "TAMPERED", reasons: [outcome.reason ?? "attestation invalid"] };
+  const shownKid = verification.kid, signedKid = JSON.parse(Buffer.from(jwt.split(".")[0], "base64url").toString()).kid;
+  if (shownKid !== undefined && shownKid !== signedKid)
+    return { verdict: "TAMPERED", reasons: ["verification.kid differs from the signing kid in the attestation header (metadata outside the signed digest was edited)"] };
   const seal = receipt["log_seal"] !== true ? null : checkLogSeal(receiptPath, computed, JSON.parse(Buffer.from(jwt.split(".")[0], "base64url").toString()).kid, deps.pubkey);
   if (seal)
     return { verdict: seal.verdict, reasons: [seal.reason] };
@@ -18040,15 +18375,15 @@ function mount19(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync11(join28(repo.p, ".loki", "runs"));
-      runDir = realpathSync11(join28(root, run2));
-      if (runDir !== join28(root, run2))
+      const root = realpathSync13(join31(repo.p, ".loki", "runs"));
+      runDir = realpathSync13(join31(root, run2));
+      if (runDir !== join31(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync11(join28(runDir, "receipt.json"));
+      file = realpathSync13(join31(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
-    if (!file.startsWith(runDir + sep9))
+    if (!file.startsWith(runDir + sep11))
       return done(404, "receipt not found", "not_found");
     let integrity, reasons, sha3 = null, outcome = "UNREADABLE";
     try {
@@ -18063,7 +18398,7 @@ function mount19(ctx) {
         sha3 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync25(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync26(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -18125,8 +18460,8 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync18, readFileSync as readFileSync26 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync27 } from "fs";
+import { join as join32 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -18498,10 +18833,10 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join29(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join32(import.meta.dir, "../../../../../VERSION")]) {
     try {
-      if (existsSync18(f))
-        return readFileSync26(f, "utf8").trim();
+      if (existsSync20(f))
+        return readFileSync27(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -18515,8 +18850,8 @@ var intParam = (v, def, min, max) => {
   return n2 >= min && n2 <= max ? n2 : null;
 };
 function queryAudit(db, q) {
-  const where = and(q.action ? eq(audit.action, q.action) : undefined, q.start_date ? gte(audit.ts, q.start_date) : undefined, q.end_date ? lt(audit.ts, `${q.end_date}\uFFFF`) : undefined);
-  return db.select().from(audit).where(where).orderBy(desc(audit.id)).limit(q.limit).offset(q.offset).all().map((r) => ({ id: r.id, timestamp: r.ts, action: r.action, actor: r.actor, details: r.detail }));
+  const where = and(q.action ? eq(audit2.action, q.action) : undefined, q.start_date ? gte(audit2.ts, q.start_date) : undefined, q.end_date ? lt(audit2.ts, `${q.end_date}\uFFFF`) : undefined);
+  return db.select().from(audit2).where(where).orderBy(desc(audit2.id)).limit(q.limit).offset(q.offset).all().map((r) => ({ id: r.id, timestamp: r.ts, action: r.action, actor: r.actor, details: r.detail }));
 }
 function legacyShim(opts) {
   const { db } = opts;
@@ -18683,10 +19018,11 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join30(import.meta.dir, "../../ui/dist"), join30(import.meta.dir, "../ui/dist")].find((d) => existsSync19(join30(d, "index.html")));
+var defaultUiDir = () => [join33(import.meta.dir, "../../ui/dist"), join33(import.meta.dir, "../ui/dist")].find((d) => existsSync21(join33(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
+  cleanupLeakedFixtures(sqlite);
   recomputeLegacy(db);
   let ready = true;
   const answerDir = opts.answerDir ?? defaultAnswerDir();
@@ -18808,11 +19144,11 @@ function createApp(opts) {
       return c.json({ error: "not found" }, 404);
     const root = resolve6(uiDir);
     const f = resolve6(root, `.${p}`);
-    if (f.startsWith(root + sep10) && existsSync19(f) && statSync13(f).isFile())
+    if (f.startsWith(root + sep12) && existsSync21(f) && statSync14(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join30(root, "index.html")));
+    return new Response(Bun.file(join33(root, "index.html")));
   });
   return { app, db, close: () => sqlite.close() };
 }