loki-mode 11.17.49 → 11.17.50

package/packages/control-plane/dist/server.js

@@ -160,6 +160,11 @@ var init_redact = __esm(() => {
     [/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, "[REDACTED:JWT]"],
     [/\bSG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g, "[REDACTED:SENDGRID_KEY]"],
     [/\bSK[0-9a-f]{32}\b/g, "[REDACTED:TWILIO_KEY]"],
+    [/\bpypi-AgEI[A-Za-z0-9_-]{50,}/g, "[REDACTED:PYPI_TOKEN]"],
+    [/\bshp(?:at|ca|pa|ss)_[a-f0-9]{32}\b/g, "[REDACTED:SHOPIFY_TOKEN]"],
+    [/\bPMAK-[a-f0-9]{24}-[a-f0-9]{34}\b/g, "[REDACTED:POSTMAN_KEY]"],
+    [/\bdapi[a-f0-9]{32}(?:-\d)?\b/g, "[REDACTED:DATABRICKS_TOKEN]"],
+    [/\bkey-[a-f0-9]{32}\b/g, "[REDACTED:MAILGUN_KEY]"],
     [/\bdckr_pat_[A-Za-z0-9_-]{20,}/g, "[REDACTED:DOCKER_TOKEN]"],
     [/\bdop_v1_[a-f0-9]{64}\b/g, "[REDACTED:DIGITALOCEAN_TOKEN]"],
     [/\bya29\.[A-Za-z0-9_-]{20,}/g, "[REDACTED:GOOGLE_OAUTH_TOKEN]"],
@@ -7615,8 +7620,8 @@ var init_paths = __esm(() => {
 
 // ../../loki-ts/src/engine10/cache.ts
 import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync5, readFileSync as readFileSync18, writeFileSync as writeFileSync8 } from "fs";
-import { resolve as resolve8 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync5, readdirSync as readdirSync9, readFileSync as readFileSync18, statSync as statSync12, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "fs";
+import { basename as basename8, resolve as resolve8 } from "path";
 function repoKey(originUrl, repoDir) {
   const basis = originUrl && originUrl.trim() !== "" ? originUrl : resolve8(repoDir);
   return createHash6("sha256").update(basis).digest("hex");
@@ -7799,12 +7804,12 @@ var init_price_table = __esm(() => {
 });
 
 // ../../loki-ts/src/providers/provider_cost.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync6, readdirSync as readdirSync9, readFileSync as readFileSync20, renameSync as renameSync4, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync6, readdirSync as readdirSync10, readFileSync as readFileSync20, renameSync as renameSync4, writeFileSync as writeFileSync9 } from "fs";
 import { dirname as dirname7, join as join27 } from "path";
 function withArchivedCosts(lokiRoot, ids, keep = () => true) {
   let files = [];
   try {
-    files = readdirSync9(join27(lokiRoot, "metrics"));
+    files = readdirSync10(join27(lokiRoot, "metrics"));
   } catch {}
   return [...new Set([...ids, ...ids.flatMap((id) => files.filter((f) => f.startsWith(`result-cost-${id}-q`) && f.endsWith(".json")).map((f) => f.slice("result-cost-".length, -".json".length)).filter(keep))])];
 }
@@ -7869,7 +7874,7 @@ function routerMode(env = process.env) {
 var routerEnabled = (env = process.env) => routerMode(env) === "on";
 
 // ../../loki-ts/src/engine10/cost.ts
-import { readdirSync as readdirSync10, readFileSync as readFileSync21 } from "fs";
+import { readdirSync as readdirSync11, readFileSync as readFileSync21 } from "fs";
 import { join as join28 } from "path";
 function routerTelemetryOn(env = process.env) {
   return routerEnabled(env);
@@ -8030,8 +8035,8 @@ import {
   readSync as readSync4,
   renameSync as renameSync5,
   rmSync as rmSync5,
-  statSync as statSync12,
-  unlinkSync as unlinkSync3,
+  statSync as statSync13,
+  unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync11,
   writeSync as writeSync3
 } from "fs";
@@ -8069,13 +8074,23 @@ function atomicWriteJson(target, data) {
 function tmpPathFor(target) {
   return `${target}.tmp.${process.pid}.${++_tmpCounter}`;
 }
+function atomicWriteText(target, body, opts = {}) {
+  if (opts.durable === false) {
+    mkdirSync8(dirname8(target), { recursive: true });
+    const tmp = tmpPathFor(target);
+    writeFileSync11(tmp, body);
+    renameSync5(tmp, target);
+    return;
+  }
+  durableWriteThenRename(target, body);
+}
 var _tmpCounter = 0, _appendChains;
 var init_atomic = __esm(() => {
   _appendChains = new Map;
 });
 
 // ../../loki-ts/src/runner/budget.ts
-import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync11, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
 import { dirname as dirname9, join as join29, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function loadDefaultMaxCostUsd(dataDirs = [["..", "..", "data"], ["..", "data"]]) {
@@ -8234,7 +8249,7 @@ var init_types = __esm(() => {
 var init_decision = () => {};
 
 // ../../loki-ts/src/project_model/schema.ts
-import { existsSync as existsSync18, lstatSync as lstatSync6, realpathSync as realpathSync14, statSync as statSync13 } from "fs";
+import { existsSync as existsSync18, lstatSync as lstatSync6, realpathSync as realpathSync14, statSync as statSync14 } from "fs";
 import { isAbsolute, join as join30, normalize, sep as sep9 } from "path";
 function safeRel(p) {
   const n2 = normalize(p.trim()).split(sep9).join("/").replace(/\/$/, "");
@@ -8258,7 +8273,7 @@ function checkCitation(repoDir, raw2) {
   if (rel === null)
     return `citation "${raw2}" is not a repo-relative path`;
   const abs = join30(repoDir, rel);
-  if (!existsSync18(abs) || !statSync13(abs).isFile() || !insideRepo(repoDir, rel))
+  if (!existsSync18(abs) || !statSync14(abs).isFile() || !insideRepo(repoDir, rel))
     return `citation "${raw2}" names a file that does not exist`;
   return null;
 }
@@ -8298,7 +8313,7 @@ function checkDir(repoDir, v, where, errs) {
     return ".";
   }
   const abs = join30(repoDir, rel);
-  if (!existsSync18(abs) || !statSync13(abs).isDirectory() || !insideRepo(repoDir, rel))
+  if (!existsSync18(abs) || !statSync14(abs).isDirectory() || !insideRepo(repoDir, rel))
     errs.push(`${where}: directory "${rel}" does not exist`);
   return rel;
 }
@@ -8657,9 +8672,9 @@ var init_model_rank = __esm(() => {
 
 // ../../loki-ts/src/engine10/sizing.ts
 import { existsSync as existsSync20, readFileSync as readFileSync25 } from "fs";
-import { basename as basename8 } from "path";
+import { basename as basename9 } from "path";
 function namedFiles(task, map) {
-  return (map?.files ?? []).filter((f) => task.toLowerCase().includes(basename8(f).toLowerCase()));
+  return (map?.files ?? []).filter((f) => task.toLowerCase().includes(basename9(f).toLowerCase()));
 }
 function sizeTask(task, map, tests) {
   const named = namedFiles(task, map).length;
@@ -8696,9 +8711,27 @@ function hasRelevantTests(task, map, tests, impacted) {
     likely.push(...speedLikelyFiles(task, map));
   return likely.length > 0 && impacted(tests, likely).length > 0;
 }
-var LARGE_NAMED_FILES = 8, smallMaxChars = (env = process.env) => Number(env.LOKI_E10_SMALL_MAX_CHARS) > 0 ? Number(env.LOKI_E10_SMALL_MAX_CHARS) : 600, smallTaskPath = (size, relevantTests) => size === "small" && relevantTests ? "lean" : "wall", knob = (v, words) => words.includes((v ?? "").toLowerCase()), planMode = (env = process.env) => knob(env.LOKI_E10_PLAN, ["0", "off", "never", "false"]) ? "never" : knob(env.LOKI_E10_PLAN, ["1", "on", "always", "true"]) ? "always" : "auto", wallEnabled = (env = process.env) => !knob(env.LOKI_E10_WALL, ["0", "off", "false"]), wallLimitS = (size, env = process.env) => {
-  const n2 = Number(env.LOKI_E10_WALL_LIMIT_S);
-  return Number.isFinite(n2) && n2 > 0 ? Math.min(300, n2) : size === "small" ? 90 : 180;
+var LARGE_NAMED_FILES = 8, noted, noteOnce = (name, raw2, why) => {
+  if (raw2 === undefined || !raw2.trim() || noted.has(name + raw2))
+    return;
+  noted.add(name + raw2);
+  process.stderr.write(`loki: ${name}="${raw2}" ${why}
+`);
+}, smallMaxChars = (env = process.env) => {
+  const n2 = Number(env.LOKI_E10_SMALL_MAX_CHARS);
+  if (n2 > 0)
+    return n2;
+  noteOnce("LOKI_E10_SMALL_MAX_CHARS", env.LOKI_E10_SMALL_MAX_CHARS, "is not a positive number; using 600");
+  return 600;
+}, smallTaskPath = (size, relevantTests) => size === "small" && relevantTests ? "lean" : "wall", knob = (v, words) => words.includes((v ?? "").toLowerCase()), planMode = (env = process.env) => knob(env.LOKI_E10_PLAN, ["0", "off", "never", "false"]) ? "never" : knob(env.LOKI_E10_PLAN, ["1", "on", "always", "true"]) ? "always" : "auto", wallEnabled = (env = process.env) => !knob(env.LOKI_E10_WALL, ["0", "off", "false"]), wallLimitS = (size, env = process.env) => {
+  const raw2 = env.LOKI_E10_WALL_LIMIT_S, n2 = Number(raw2), dflt = size === "small" ? 90 : 180;
+  if (Number.isFinite(n2) && n2 > 0) {
+    if (n2 > 300)
+      noteOnce("LOKI_E10_WALL_LIMIT_S", raw2, "exceeds the 300s maximum; using 300");
+    return Math.min(300, n2);
+  }
+  noteOnce("LOKI_E10_WALL_LIMIT_S", raw2, `is not a positive number; using ${dflt}`);
+  return dflt;
 }, resolveModelAlias, wallModel = (env = process.env) => resolveModelAlias(env.LOKI_E10_WALL_TIER || "sonnet"), wallFirstModel = (size, env = process.env) => {
   if (knob(env.LOKI_E10_WALL_FIRST, ["0", "off", "false"]) || env.LOKI_E10_WALL_TIER || env.LOKI_MODEL_OVERRIDE || env.LOKI_E10_WALL_CONCURRENT === "1")
     return wallModel(env);
@@ -8709,6 +8742,7 @@ var init_sizing = __esm(() => {
   init_lean_select();
   init_claude_model();
   init_model_rank();
+  noted = new Set;
   resolveModelAlias = resolveClaudeModel;
 });
 
@@ -8870,9 +8904,9 @@ var init_scope = __esm(() => {
 });
 
 // ../../loki-ts/src/util/test_file_text.ts
-import { basename as basename9 } from "path";
+import { basename as basename10 } from "path";
 function isTestFile(rel) {
-  const name = basename9(rel);
+  const name = basename10(rel);
   return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
 }
 var JS_TEST_RE, PY_TEST_RE, GO_TEST_RE;
@@ -8883,8 +8917,8 @@ var init_test_file_text = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { existsSync as existsSync22, lstatSync as lstatSync8, readdirSync as readdirSync12, readFileSync as readFileSync27, realpathSync as realpathSync15 } from "fs";
-import { basename as basename10, extname, isAbsolute as isAbsolute2, join as join36, relative, sep as sep10 } from "path";
+import { existsSync as existsSync22, lstatSync as lstatSync8, readdirSync as readdirSync13, readFileSync as readFileSync27, realpathSync as realpathSync15 } from "fs";
+import { basename as basename11, extname, isAbsolute as isAbsolute2, join as join36, relative, sep as sep10 } from "path";
 function projectInterpreter(root) {
   const ve = process.env["VIRTUAL_ENV"], inRepo = (p) => {
     try {
@@ -8921,7 +8955,7 @@ var init_testmap = __esm(() => {
 
 // ../../loki-ts/src/util/check_result.ts
 import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync28, realpathSync as realpathSync16, renameSync as renameSync7, writeFileSync as writeFileSync15 } from "fs";
-import { basename as basename11, isAbsolute as isAbsolute3, join as join37 } from "path";
+import { basename as basename12, isAbsolute as isAbsolute3, join as join37 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -8939,7 +8973,7 @@ function ran(raw2, path, ok) {
   if (blk) {
     const c = n2(blk, /(?:#|\u2139) pass (\d+)/) + n2(blk, /(?:#|\u2139) fail (\d+)/);
     const nm = out2.match(/^(?:ok \d+ - |\u2714 )(\S+\.[cm]?[jt]s)(?: \(|$)/m)?.[1];
-    return c === 1 && nm && (!path || basename11(nm) === basename11(path)) ? 0 : c;
+    return c === 1 && nm && (!path || basename12(nm) === basename12(path)) ? 0 : c;
   }
   const cg = cargoTrailer(out2);
   if (cg.length)
@@ -9030,16 +9064,16 @@ function goRunner(cmd, args) {
     let k = 0;
     for (;k < t.length; k++) {
       const x = t[k];
-      if (/^[A-Za-z_]\w*=/.test(x) || /^(?:env|command|exec|time|nohup)$/.test(basename11(x)))
+      if (/^[A-Za-z_]\w*=/.test(x) || /^(?:env|command|exec|time|nohup)$/.test(basename12(x)))
         continue;
-      if (/^-/.test(x) && k > 0 && basename11(t[k - 1]) === "env") {
+      if (/^-/.test(x) && k > 0 && basename12(t[k - 1]) === "env") {
         if (x === "-u" || x === "-C" || x === "-S")
           k++;
         continue;
       }
       break;
     }
-    if (t[k] !== undefined && basename11(t[k]) === "go")
+    if (t[k] !== undefined && basename12(t[k]) === "go")
       return { runner: "go" };
   }
   return {};
@@ -9471,7 +9505,7 @@ var init_check_result = __esm(() => {
 
 // ../../loki-ts/src/util/receipt_signer.ts
 import { createHash as createHash8, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign, verify as verify2 } from "crypto";
-import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync13, readdirSync as readdirSync13, readFileSync as readFileSync29, renameSync as renameSync8, statSync as statSync14, unlinkSync as unlinkSync4, writeFileSync as writeFileSync16 } from "fs";
+import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync13, readdirSync as readdirSync14, readFileSync as readFileSync29, renameSync as renameSync8, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir8 } from "os";
 import { spawnSync as spawnSync2 } from "child_process";
 import { dirname as dirname12, join as join38 } from "path";
@@ -9500,7 +9534,7 @@ function loadSigningKey(generate = true) {
         pem = readFileSync29(file);
         if (!given) {
           for (const [f, m] of [[file, 384], [dirname12(file), 448]])
-            if (statSync14(f).mode & 63)
+            if (statSync15(f).mode & 63)
               chmodSync4(f, m);
         }
       } catch (e) {
@@ -9518,7 +9552,7 @@ function loadSigningKey(generate = true) {
           if (l.code !== "EEXIST")
             throw l;
         } finally {
-          unlinkSync4(tmp);
+          unlinkSync5(tmp);
         }
         pem = readFileSync29(file);
       }
@@ -10455,8 +10489,8 @@ var init_state = __esm(() => {
 
 // ../../loki-ts/src/runner/repo_profile.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync24, lstatSync as lstatSync10, readFileSync as readFileSync30, mkdirSync as mkdirSync14, readdirSync as readdirSync14, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync17 } from "fs";
-import { basename as basename12, join as join39, resolve as resolve13, isAbsolute as isAbsolute4 } from "path";
+import { existsSync as existsSync24, lstatSync as lstatSync10, readFileSync as readFileSync30, mkdirSync as mkdirSync14, readdirSync as readdirSync15, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync17 } from "fs";
+import { basename as basename13, join as join39, resolve as resolve13, isAbsolute as isAbsolute4 } from "path";
 function detectFormatters(repoDir) {
   const out2 = [];
   const has = (...fs2) => fs2.some((f) => existsSync24(join39(repoDir, f)));
@@ -10468,7 +10502,7 @@ function detectFormatters(repoDir) {
     prettierKey = pj !== "" && "prettier" in JSON.parse(pj);
   } catch {}
   const local = join39(repoDir, "node_modules", ".bin", "prettier");
-  if ((prettierKey || readdirSync14(repoDir).some((f) => /^(\.prettierrc(\.[a-z0-9]+)?|prettier\.config\.[cm]?[jt]s)$/.test(f))) && existsSync24(local))
+  if ((prettierKey || readdirSync15(repoDir).some((f) => /^(\.prettierrc(\.[a-z0-9]+)?|prettier\.config\.[cm]?[jt]s)$/.test(f))) && existsSync24(local))
     out2.push({ tool: "prettier", argv: [local, "--write"], exts: /\.(?:[cm]?[jt]sx?|json|css|scss|md|ya?ml|html)$/ });
   if (has("go.mod"))
     out2.push({ tool: "gofmt", argv: ["gofmt", "-w"], exts: /\.go$/ });
@@ -10634,9 +10668,9 @@ var init_context = __esm(() => {
 });
 
 // ../../loki-ts/src/util/steer.ts
-import { appendFileSync as appendFileSync2, closeSync as closeSync8, constants as constants2, fstatSync as fstatSync6, readdirSync as readdirSync15, lstatSync as lstatSync11, mkdirSync as mkdirSync15, linkSync as linkSync2, openSync as openSync8, readFileSync as readFileSync31, readSync as readSync7, renameSync as renameSync10, statSync as statSync15, lutimesSync, rmSync as rmSync9, unlinkSync as unlinkSync5, writeFileSync as writeFileSync18, existsSync as existsSync25 } from "fs";
+import { appendFileSync as appendFileSync2, closeSync as closeSync8, constants as constants2, fstatSync as fstatSync6, readdirSync as readdirSync16, lstatSync as lstatSync11, mkdirSync as mkdirSync15, linkSync as linkSync2, openSync as openSync8, readFileSync as readFileSync31, readSync as readSync7, renameSync as renameSync10, statSync as statSync16, lutimesSync, rmSync as rmSync9, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18, existsSync as existsSync25 } from "fs";
 import { createHash as createHash9, randomBytes as randomBytes4 } from "crypto";
-import { basename as basename13, join as join40 } from "path";
+import { basename as basename14, join as join40 } from "path";
 function archiveTo(logs, prefix, src, link = linkSync2, onLinked) {
   for (let i = 0;; i++) {
     const name = i === 0 ? `${prefix}.md` : `${prefix}-${i}.md`;
@@ -10655,7 +10689,7 @@ function archiveTo(logs, prefix, src, link = linkSync2, onLinked) {
     }
     onLinked?.(name);
     try {
-      unlinkSync5(src);
+      unlinkSync6(src);
     } catch {}
     return name;
   }
@@ -10664,11 +10698,11 @@ function orphanAlreadyArchived(logs, claim) {
   const c = lstatSync11(claim);
   if (!c.isFile())
     return false;
-  for (const a of readdirSync15(logs)) {
+  for (const a of readdirSync16(logs)) {
     if (!/^human-input-.*\.md$/.test(a))
       continue;
     try {
-      const s = statSync15(join40(logs, a));
+      const s = statSync16(join40(logs, a));
       if (s.ino !== c.ino || s.dev !== c.dev)
         continue;
       if (/^human-input-(ORPHAN|REJECTED)-/.test(a) || existsSync25(appliedMarker(logs, a)))
@@ -10680,7 +10714,7 @@ function orphanAlreadyArchived(logs, claim) {
 function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
   let names;
   try {
-    names = readdirSync15(logs);
+    names = readdirSync16(logs);
   } catch {
     return;
   }
@@ -10688,7 +10722,7 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
   for (const n2 of names)
     if (n2.startsWith(".applied-") && !present.has(n2.slice(".applied-".length))) {
       try {
-        unlinkSync5(join40(logs, n2));
+        unlinkSync6(join40(logs, n2));
       } catch {}
     }
   for (const n2 of names) {
@@ -10705,7 +10739,7 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
     if (alive) {
       let ageMs = 0;
       try {
-        ageMs = nowMs - statSync15(join40(logs, n2)).mtimeMs;
+        ageMs = nowMs - statSync16(join40(logs, n2)).mtimeMs;
       } catch {
         continue;
       }
@@ -10714,7 +10748,7 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
     }
     try {
       if (orphanAlreadyArchived(logs, join40(logs, n2))) {
-        unlinkSync5(join40(logs, n2));
+        unlinkSync6(join40(logs, n2));
         continue;
       }
       archiveTo(logs, `human-input-ORPHAN-${stamp2}`, join40(logs, n2), link);
@@ -10773,7 +10807,7 @@ function consumeSteer(repoDir, env = process.env, now2 = () => new Date, sink, h
         return reject("NOTFILE", "not a regular file");
       try {
         if (!lstatSync11(claimed, { throwIfNoEntry: false })?.isDirectory())
-          unlinkSync5(claimed);
+          unlinkSync6(claimed);
       } catch {}
       claimed = "";
       unapplied("not a regular file");
@@ -10833,7 +10867,7 @@ function consumeSteer(repoDir, env = process.env, now2 = () => new Date, sink, h
         archiveTo(join40(repoDir, ".loki", "logs"), `human-input-${now2().toISOString().replace(/[-:]/g, "").replace(/\..*/, "")}`, claimed, hooks2?.link);
         unapplied("logs dir unwritable or file unreadable");
       } catch {
-        unapplied(`steer stranded at .loki/logs/${basename13(claimed)}`);
+        unapplied(`steer stranded at .loki/logs/${basename14(claimed)}`);
       }
     } else
       try {
@@ -10918,7 +10952,7 @@ var init_steer = __esm(() => {
 
 // ../../loki-ts/src/util/run_outputs.ts
 import { createHash as createHash10 } from "crypto";
-import { existsSync as existsSync26, mkdirSync as mkdirSync16, readdirSync as readdirSync16, readFileSync as readFileSync32, statSync as statSync16, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync26, mkdirSync as mkdirSync16, readdirSync as readdirSync17, readFileSync as readFileSync32, statSync as statSync17, writeFileSync as writeFileSync19 } from "fs";
 import { join as join41, resolve as resolve14 } from "path";
 function intentRevisionsBlock(revs) {
   const r = (revs ?? []).filter((r2) => r2.unapplied !== true).map(({ rev, source, actor, sha: sha2 }) => ({ rev, source, actor, sha: sha2 }));
@@ -11128,7 +11162,7 @@ function aiTrailers(i, env = process.env) {
     return [];
   return ["AI-Generated: true", `AI-Provider: ${clean2(i.provider)}`, `AI-Model: ${clean2(i.model)}`, `Loki-Receipt: ${clean2(i.receiptRel)}`];
 }
-var markingOn = (env) => env["LOKI_AI_MARKING"] === "1", cleanFull = (v) => v.replace(/[\u0000-\u001f\u007f\u2028\u2029]+/g, " ").replace(/\s+/g, " ").trim(), clean2 = (v) => cleanFull(v).slice(0, 100) || "unknown";
+var markingOn = (env) => /^(1|true|yes)$/i.test((env["LOKI_AI_MARKING"] ?? "").trim()), cleanFull = (v) => v.replace(/[\u0000-\u001f\u007f\u2028\u2029]+/g, " ").replace(/\s+/g, " ").trim(), clean2 = (v) => cleanFull(v).slice(0, 100) || "unknown";
 
 // ../../loki-ts/src/util/run_cap.ts
 var MAX_SCOPE_BYTES;
@@ -11141,7 +11175,7 @@ var init_run_cap = __esm(() => {
 // ../../loki-ts/src/util/mutation_proof.ts
 import { existsSync as existsSync27, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync3, readFileSync as readFileSync34, rmSync as rmSync10, symlinkSync, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename14, dirname as dirname13, isAbsolute as isAbsolute6, join as join43, relative as relative3 } from "path";
+import { basename as basename15, dirname as dirname13, isAbsolute as isAbsolute6, join as join43, relative as relative3 } from "path";
 function mutationProof(i) {
   const rels = i.wallFiles.map((f) => isAbsolute6(f.path) ? relative3(i.repoDir, f.path) : f.path);
   if (rels.length === 0)
@@ -11166,7 +11200,7 @@ function mutationProof(i) {
     if (add3.status !== 0)
       return np("could not create the base worktree");
     for (const rel of rels) {
-      const sealed = join43(i.runDir, "wall", basename14(rel)), src = existsSync27(sealed) ? sealed : join43(i.repoDir, rel);
+      const sealed = join43(i.runDir, "wall", basename15(rel)), src = existsSync27(sealed) ? sealed : join43(i.repoDir, rel);
       if (!existsSync27(src))
         return np(`Wall file missing: ${rel}`);
       mkdirSync17(dirname13(join43(wt, rel)), { recursive: true });
@@ -11321,7 +11355,7 @@ var init_shell = __esm(() => {
 });
 
 // ../../loki-ts/src/util/python.ts
-import { accessSync, constants as constants3, existsSync as existsSync28, mkdtempSync as mkdtempSync4, readFileSync as readFileSync35, realpathSync as realpathSync18, rmSync as rmSync11, statSync as statSync17 } from "fs";
+import { accessSync, constants as constants3, existsSync as existsSync28, mkdtempSync as mkdtempSync4, readFileSync as readFileSync35, realpathSync as realpathSync18, rmSync as rmSync11, statSync as statSync18 } from "fs";
 import { spawnSync as spawnSync4 } from "child_process";
 import { tmpdir as tmpdir5 } from "os";
 async function findPython3() {
@@ -11348,7 +11382,7 @@ function resolvePython3() {
     const cand = `${dir}/python3`;
     try {
       accessSync(cand, constants3.X_OK);
-      if (statSync17(cand).isFile())
+      if (statSync18(cand).isFile())
         return cand;
     } catch {}
   }
@@ -11679,7 +11713,7 @@ var init_wall_manifest = __esm(() => {
 
 // ../../loki-ts/src/features/wall_manifest_wire.ts
 import { createHash as createHash12 } from "crypto";
-import { basename as basename15, dirname as dirname14 } from "path";
+import { basename as basename16, dirname as dirname14 } from "path";
 function blobEntries(ls) {
   const out2 = [];
   for (const raw2 of ls.toString("latin1").split("\x00")) {
@@ -11709,12 +11743,12 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
       return null;
     const low = task.toLowerCase().replace(/\\/g, "/");
     const token = (n2) => new RegExp(`(?<![A-Za-z0-9_])${n2.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`).test(low);
-    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename15(e.path)) && e.path.includes("/") && token(dirname14(e.path));
-    const matched = all.filter((e) => SOURCE.test(e.path) && (token(basename15(e.path)) || token(e.path) || token(basename15(e.path).replace(/\.[^.]*$/, "")) || dirModule(e)));
+    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename16(e.path)) && e.path.includes("/") && token(dirname14(e.path));
+    const matched = all.filter((e) => SOURCE.test(e.path) && (token(basename16(e.path)) || token(e.path) || token(basename16(e.path).replace(/\.[^.]*$/, "")) || dirModule(e)));
     const spans = (p) => [...low.matchAll(new RegExp(`(?<![A-Za-z0-9_])${p.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`, "g"))].map((m) => [m.index, m.index + m[0].length]);
     const occ = new Map(matched.map((e) => [e, spans(e.path)]));
     const exact = (e) => occ.get(e).some(([s, t]) => !matched.some((o) => o !== e && o.path.length > e.path.length && occ.get(o).some(([s2, t2]) => s2 <= s && t <= t2)));
-    const byPath2 = matched.filter(exact).sort((a, b) => b.path.length - a.path.length), byBase = matched.filter((e) => !byPath2.includes(e) && token(basename15(e.path)));
+    const byPath2 = matched.filter(exact).sort((a, b) => b.path.length - a.path.length), byBase = matched.filter((e) => !byPath2.includes(e) && token(basename16(e.path)));
     const named = [...byPath2, ...byBase, ...matched.filter((e) => !byPath2.includes(e) && !byBase.includes(e))].slice(0, MAX_NAMED);
     const tests = all.filter((e) => TESTISH.test(e.path)).slice(0, MAX_FILES), listed = tests.filter((e) => !SOURCE.test(e.path));
     const want = [...new Set([...all.filter((e) => CONFIG.test(e.path)), ...tests.filter((e) => SOURCE.test(e.path)), ...named])];
@@ -11773,7 +11807,7 @@ Example: test('name', () => { assert.strictEqual(fn(1), 2); });  Run: node --tes
 import { createHash as createHash13 } from "crypto";
 import { appendFileSync as appendFileSync3, copyFileSync as copyFileSync2, existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync36, rmSync as rmSync12, writeFileSync as writeFileSync21 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { basename as basename16, join as join44, relative as relative4 } from "path";
+import { basename as basename17, join as join44, relative as relative4 } from "path";
 function wallHoldoutRatio(env = process.env) {
   if (env["LOKI_WALL_HOLDOUT"]?.trim() === "0")
     return 0;
@@ -11818,7 +11852,7 @@ function stageHoldout(dir, repoDir) {
     man = JSON.parse(readFileSync36(join44(dir, MANIFEST), "utf8"));
   } catch {}
   if (!man)
-    return { tests, missing: [`holdout store unreadable: ${basename16(dir)}`], cleanup: () => {} };
+    return { tests, missing: [`holdout store unreadable: ${basename17(dir)}`], cleanup: () => {} };
   mkdirSync18(man.targetDir, { recursive: true });
   man.files.forEach((f, i) => {
     const src = join44(dir, f.name);
@@ -12249,9 +12283,9 @@ import { execFileSync as execFileSync3 } from "child_process";
 import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync38, rmSync as rmSync13 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
 import { join as join46 } from "path";
-import { basename as basename17 } from "path";
+import { basename as basename18 } from "path";
 function classifyAssertDelta(inp) {
-  const f = basename17(inp.path);
+  const f = basename18(inp.path);
   if (!/^(test_.*|.*_test)\.py$/.test(f))
     return WEAKENED;
   if (inp.headCounts.run !== inp.baseCounts.run || inp.headCounts.skipped !== inp.baseCounts.skipped)
@@ -12514,7 +12548,7 @@ var init_runner_errors = __esm(() => {
 import { spawnSync as spawnSync5 } from "child_process";
 import { mkdtempSync as mkdtempSync6, realpathSync as realpathSync19, rmSync as rmSync14 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-import { basename as basename18, extname as extname2, join as join47 } from "path";
+import { basename as basename19, extname as extname2, join as join47 } from "path";
 function changedFilesNamed(out2, repoDir, changed) {
   return changed.filter((f) => {
     if (out2.includes(f) || out2.includes(join47(repoDir, f)))
@@ -12524,7 +12558,7 @@ function changedFilesNamed(out2, repoDir, changed) {
       return true;
     if (extname2(f) === ".go" && segs.length > 1 && suffixes(segs.slice(0, -1), 1).some((d) => new RegExp(`(?<=[\\w-])/${esc(d)}(?![\\w./-])`).test(out2)))
       return true;
-    const stem = basename18(f, extname2(f));
+    const stem = basename19(f, extname2(f));
     if (stem.length < 2 || stem === "index" || stem === "__init__")
       return false;
     return new RegExp(`(?<![\\w-])${esc(stem)}(?![\\w-])`).test(out2);
@@ -12816,7 +12850,7 @@ app_runner_stop >/dev/null 2>&1
 });
 
 // ../../loki-ts/src/util/secure_scan.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync7, readFileSync as readFileSync40, realpathSync as realpathSync20, rmSync as rmSync15, statSync as statSync18, writeFileSync as writeFileSync23 } from "fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync7, readFileSync as readFileSync40, realpathSync as realpathSync20, rmSync as rmSync15, statSync as statSync19, writeFileSync as writeFileSync23 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
 import { dirname as dirname16, join as join50, resolve as resolve15, sep as sep11 } from "path";
 function fail(error) {
@@ -12992,7 +13026,7 @@ async function scanAddedLines(repoDir, opts = {}) {
     return fail("secure-scan: git ls-files failed");
   for (const p of untracked.split("\x00").filter(Boolean)) {
     try {
-      const st = statSync18(join50(repoDir, p));
+      const st = statSync19(join50(repoDir, p));
       if (!st.isFile() || st.size > MAX_ADDED_FILE_BYTES)
         continue;
       const lines2 = new Map;
@@ -13163,7 +13197,7 @@ var init_route_block = __esm(() => {
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn7 } from "child_process";
 import { createHash as createHash14, randomBytes as randomBytes5 } from "crypto";
-import { existsSync as existsSync32, lstatSync as lstatSync12, mkdirSync as mkdirSync21, readdirSync as readdirSync17, readFileSync as readFileSync41, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync32, lstatSync as lstatSync12, mkdirSync as mkdirSync21, readdirSync as readdirSync18, readFileSync as readFileSync41, writeFileSync as writeFileSync24 } from "fs";
 import { createServer } from "net";
 import { dirname as dirname17, isAbsolute as isAbsolute8, join as join51, normalize as normalize3, relative as relative6, sep as sep12 } from "path";
 function routeFor(file) {
@@ -13265,7 +13299,7 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
-      for (const e of readdirSync17(d, { withFileTypes: true })) {
+      for (const e of readdirSync18(d, { withFileTypes: true })) {
         const full = join51(d, e.name);
         if (e.isDirectory())
           walk(full);
@@ -14245,9 +14279,9 @@ function runnerCmd(t, repoDir) {
       return [cmd, [...pre, "-m", "pytest", "-q", t.path], interpreter];
     }
     case "vitest":
-      return ["npx", ["vitest", "run", t.path]];
+      return ["npx", ["--no-install", "vitest", "run", t.path]];
     case "jest":
-      return ["npx", ["jest", t.path]];
+      return ["npx", ["--no-install", "jest", t.path]];
     case "bun":
       return ["bun", ["test", t.path]];
     case "node":
@@ -14411,10 +14445,10 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
     if (existsSync37(join57(g.cwd, "tsconfig.json")))
-      await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
+      await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["--no-install", "tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
     if (ESLINT_CONFIGS.some((f) => existsSync37(join57(g.cwd, f)))) {
-      const c = await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
-      if (await excuseLint(ctx, signal, c, "eslint", "npx", ["eslint"], g.cwd, g.rel, co))
+      const c = await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["--no-install", "eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
+      if (await excuseLint(ctx, signal, c, "eslint", "npx", ["--no-install", "eslint"], g.cwd, g.rel, co))
         pre.push(c.name);
     }
   }
@@ -14593,7 +14627,7 @@ ${x}` : c.cmd };
 });
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync38, readdirSync as readdirSync18, readFileSync as readFileSync45 } from "fs";
+import { existsSync as existsSync38, readdirSync as readdirSync19, readFileSync as readFileSync45 } from "fs";
 import { dirname as dirname22, join as join58 } from "path";
 function parseJsonc(text2) {
   let out2 = "", i = 0;
@@ -14635,7 +14669,7 @@ function moduleOf(file, depth = 0) {
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
   try {
-    names = readdirSync18(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
+    names = readdirSync19(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
   } catch {
     return null;
   }
@@ -14679,7 +14713,7 @@ var init_conventions = () => {};
 
 // ../../loki-ts/src/engine10/stages/wall.ts
 import { spawnSync as spawnSync7 } from "child_process";
-import { existsSync as existsSync39, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync11, readFileSync as readFileSync46, readdirSync as readdirSync19, rmSync as rmSync19, writeFileSync as writeFileSync28 } from "fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync11, readFileSync as readFileSync46, readdirSync as readdirSync20, rmSync as rmSync19, writeFileSync as writeFileSync28 } from "fs";
 import { tmpdir as tmpdir12 } from "os";
 import { dirname as dirname23, join as join59, relative as relative8 } from "path";
 
@@ -14805,7 +14839,7 @@ async function wallAuthor(ctx, signal, retry) {
     rmSync19(cwd, { recursive: true, force: true });
     return done({ status: "failed", data: { iteration_ids: [iterationId], model }, reason: "wall session aborted, killed, or timed out", killed: true });
   }
-  const all = readdirSync19(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !conventionViolation(conv2, n2, readFileSync46(join59(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
+  const all = readdirSync20(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !conventionViolation(conv2, n2, readFileSync46(join59(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
   const sealedDir = join59(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync25(sealedDir, { recursive: true });
@@ -14920,7 +14954,7 @@ var init_wall = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync5, closeSync as closeSync9, lstatSync as lstatSync15, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync47, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync6, writeFileSync as writeFileSync29 } from "fs";
+import { chmodSync as chmodSync5, closeSync as closeSync9, lstatSync as lstatSync15, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync47, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync7, writeFileSync as writeFileSync29 } from "fs";
 import { dirname as dirname24, join as join60, relative as relative9, sep as sep13 } from "path";
 function safeRestore(repoDir, f, want, mode) {
   const root = realpathSync23(repoDir), fp = join60(root, f), rel = relative9(root, dirname24(fp));
@@ -14953,7 +14987,7 @@ function safeRestore(repoDir, f, want, mode) {
     if (st.isDirectory())
       rmdirSync(fp);
     else
-      unlinkSync6(fp);
+      unlinkSync7(fp);
   }
   const fd = openSync9(fp, "wx", mode);
   try {
@@ -15047,7 +15081,7 @@ var init_commit_filter = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/scope.ts
-import { basename as basename20, dirname as dirname26 } from "path";
+import { basename as basename21, dirname as dirname26 } from "path";
 function contractText(o) {
   const c = o.intake?.contract_snapshot?.contract;
   return Array.isArray(c?.criteria) ? c.criteria.map((x) => typeof x?.text === "string" ? x.text : "").join(`
@@ -15062,7 +15096,7 @@ function outsideScope(o, staged) {
 ${typeof o.intake?.task === "string" ? o.intake.task : ""}
 ${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
   const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname26(r)).filter((d) => d !== "."));
-  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename20(f)) && !plannedDirs.has(dirname26(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
+  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename21(f)) && !plannedDirs.has(dirname26(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
 }
 function flagOutsideScope(o, staged) {
   const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
@@ -15077,7 +15111,7 @@ var init_scope2 = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync40, readdirSync as readdirSync20, readFileSync as readFileSync48 } from "fs";
+import { existsSync as existsSync40, readdirSync as readdirSync21, readFileSync as readFileSync48 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join61 } from "path";
 function agentDirs(repoDir, env = process.env) {
@@ -15102,7 +15136,7 @@ function loadRoleAgent(repoDir, role, env = process.env) {
       continue;
     let names;
     try {
-      names = readdirSync20(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
+      names = readdirSync21(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
     } catch {
       continue;
     }
@@ -15204,12 +15238,12 @@ var init_colors = __esm(() => {
 });
 
 // ../../loki-ts/src/util/run_summary.ts
-import { existsSync as existsSync41, mkdirSync as mkdirSync28, readFileSync as readFileSync49, renameSync as renameSync12, statSync as statSync19, writeFileSync as writeFileSync30 } from "fs";
+import { existsSync as existsSync41, mkdirSync as mkdirSync28, readFileSync as readFileSync49, renameSync as renameSync12, statSync as statSync20, writeFileSync as writeFileSync30 } from "fs";
 import { join as join63 } from "path";
 function readRiskRecord(repoDir, sinceMs = 0) {
   try {
     const p = join63(repoDir, ".loki", "state", "risk-tier.json");
-    if (statSync19(p).mtimeMs < sinceMs)
+    if (statSync20(p).mtimeMs < sinceMs)
       return null;
     const r = JSON.parse(readFileSync49(p, "utf8"));
     return r && typeof r === "object" ? r : null;
@@ -15547,7 +15581,7 @@ var init_contract = __esm(() => {
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash17 } from "crypto";
-import { existsSync as existsSync44, mkdirSync as mkdirSync30, readdirSync as readdirSync21, readFileSync as readFileSync52, renameSync as renameSync13, statSync as statSync20, writeFileSync as writeFileSync32 } from "fs";
+import { existsSync as existsSync44, mkdirSync as mkdirSync30, readdirSync as readdirSync22, readFileSync as readFileSync52, renameSync as renameSync13, statSync as statSync21, writeFileSync as writeFileSync32 } from "fs";
 import { dirname as dirname28, join as join66 } from "path";
 function sealGroup(runDir, rh) {
   const manifestPath = join66(runDir, "group", "manifest.json");
@@ -15637,7 +15671,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
     try {
-      if (!statSync20(dir).isDirectory())
+      if (!statSync21(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
       bytes = readFileSync52(rp);
     } catch {
@@ -15676,7 +15710,7 @@ var ID_RE, PASSING, sha3 = (b) => createHash17("sha256").update(b).digest("hex")
   }
 }, dirNames = (d) => {
   try {
-    return readdirSync21(d).filter((n3) => !n3.startsWith(".")).sort();
+    return readdirSync22(d).filter((n3) => !n3.startsWith(".")).sort();
   } catch {
     return null;
   }
@@ -15688,8 +15722,8 @@ var init_seal_group = __esm(() => {
 });
 
 // ../../loki-ts/src/supply/supply_guard.ts
-import { existsSync as existsSync45, readFileSync as readFileSync53, statSync as statSync21 } from "fs";
-import { basename as basename21, join as join67 } from "path";
+import { existsSync as existsSync45, readFileSync as readFileSync53, statSync as statSync22 } from "fs";
+import { basename as basename22, join as join67 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -15701,14 +15735,14 @@ function supplyVerdict(verdict, r) {
   return r.blocked && verdict === "VERIFIED" ? "FAILED" : verdict;
 }
 function isManifestPath(path) {
-  return MANIFESTS.test(basename21(path));
+  return MANIFESTS.test(basename22(path));
 }
 function readDeclared(repoDir) {
   const p = join67(repoDir, ".loki", DECLARED_FILE);
   if (!existsSync45(p))
     return { deps: [], problem: null };
   try {
-    if (statSync21(p).size > MAX_FILE_BYTES)
+    if (statSync22(p).size > MAX_FILE_BYTES)
       return { deps: [], problem: "declaration file too large" };
     const j = JSON.parse(readFileSync53(p, "utf8"));
     if (!Array.isArray(j))
@@ -15917,7 +15951,7 @@ var MIN_AGE_DAYS = 7, DECLARED_FILE = "supply-declared.json", MAX_CHECKED = 50,
   }
 }, PUBLIC_HOSTS, hostOf = (u) => u.trim().toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "").replace(/^www\./, "").split(/[/?#\s]/)[0].replace(/^[^@]*@/, "").replace(/:\d+$/, ""), privateUrl = (u) => /[a-z0-9]/i.test(u) && !PUBLIC_HOSTS.has(hostOf(u)), readSmall = (p) => {
   try {
-    return statSync21(p).size <= MAX_FILE_BYTES ? readFileSync53(p, "utf8") : "";
+    return statSync22(p).size <= MAX_FILE_BYTES ? readFileSync53(p, "utf8") : "";
   } catch {
     return "";
   }
@@ -15933,8 +15967,8 @@ var init_supply_guard = __esm(() => {
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash18 } from "crypto";
-import { existsSync as existsSync46, readdirSync as readdirSync22, mkdirSync as mkdirSync31, readFileSync as readFileSync54, writeFileSync as writeFileSync33 } from "fs";
-import { basename as basename22, isAbsolute as isAbsolute11, join as join68, relative as relative10 } from "path";
+import { existsSync as existsSync46, readdirSync as readdirSync23, mkdirSync as mkdirSync31, readFileSync as readFileSync54 } from "fs";
+import { basename as basename23, isAbsolute as isAbsolute11, join as join68, relative as relative10 } from "path";
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
   const capped = collapsed.length > 500 ? `${collapsed.slice(0, 500)}...` : collapsed;
@@ -16042,6 +16076,7 @@ var init_seal = __esm(() => {
   init_seal_group();
   init_supply_guard();
   init_hooks();
+  init_atomic();
   init_safe_git();
   DEEP_NOT_PROVEN = ["full suite", "app boot", "council", "security scan"];
   commitStage = {
@@ -16125,8 +16160,8 @@ var init_seal = __esm(() => {
         notProven.add(`Wall test not executed: ${wallNotRun} file(s), no reason recorded`);
       if (wallNotRun > 0) {
         try {
-          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename22(String(f.path))));
-          for (const n3 of readdirSync22(join68(ctx.runDir, "wall")).sort())
+          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename23(String(f.path))));
+          for (const n3 of readdirSync23(join68(ctx.runDir, "wall")).sort())
             if (!kept.has(n3))
               notProven.add(`wall test discarded: ${n3} (not_run)`);
         } catch {}
@@ -16268,9 +16303,9 @@ var init_seal = __esm(() => {
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
       mkdirSync31(ctx.runDir, { recursive: true });
       const path = join68(ctx.runDir, "receipt.json");
-      writeFileSync33(path, JSON.stringify(receipt, null, 2) + `
+      atomicWriteText(path, JSON.stringify(receipt, null, 2) + `
 `);
-      writeFileSync33(join68(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      atomicWriteText(join68(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ranModel(o.implement, ctx.model, o.fix), verdict, cost.usd, cost.unmetered === true, totalS);
       try {
         hooks.sealed?.(ctx.runDir, JSON.parse(JSON.stringify(receipt), (_k, v) => v && typeof v === "object" ? Object.freeze(v) : v));
@@ -16296,7 +16331,7 @@ var init_seal = __esm(() => {
 
 // ../../loki-ts/src/util/composite_seal.ts
 import { existsSync as existsSync47, readFileSync as readFileSync55 } from "fs";
-import { basename as basename23, dirname as dirname30, join as join69 } from "path";
+import { basename as basename24, dirname as dirname30, join as join69 } from "path";
 function logProblem(runDir, integ) {
   if (typeof integ["log_sha256"] !== "string")
     return null;
@@ -16418,8 +16453,8 @@ var init_keys_cmd = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync48, readFileSync as readFileSync56, renameSync as renameSync14, statSync as statSync23, writeFileSync as writeFileSync34 } from "fs";
-import { basename as basename24, dirname as dirname31, join as join70 } from "path";
+import { existsSync as existsSync48, readFileSync as readFileSync56, renameSync as renameSync14, statSync as statSync24, writeFileSync as writeFileSync33 } from "fs";
+import { basename as basename25, dirname as dirname31, join as join70 } from "path";
 import { createHash as createHash19, createPublicKey as createPublicKey4, verify as verify4 } from "crypto";
 function pubFor(kid, given) {
   if (given)
@@ -16601,7 +16636,7 @@ var init_verify_cmd = __esm(() => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync50, readFileSync as readFileSync59, statSync as statSync24 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync59, statSync as statSync25 } from "fs";
 import { join as join73, resolve as resolve16, sep as sep15 } from "path";
 
 // node_modules/hono/dist/request/constants.js
@@ -27694,7 +27729,7 @@ function createApp(opts) {
       return c.json({ error: "not found" }, 404);
     const root = resolve16(uiDir);
     const f = resolve16(root, `.${p}`);
-    if (f.startsWith(root + sep15) && existsSync50(f) && statSync24(f).isFile())
+    if (f.startsWith(root + sep15) && existsSync50(f) && statSync25(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);