loki-mode 11.17.6 → 11.17.13

package/packages/control-plane/dist/server.js

@@ -150,11 +150,251 @@ var init_redact = __esm(() => {
   ];
 });
 
+// ../../loki-ts/src/util/credential_env.ts
+import { mkdtempSync, rmSync, statSync, lstatSync } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join4 } from "path";
+import { randomBytes } from "crypto";
+function withheldSentinel(fresh = false) {
+  if (fresh)
+    sentinel = null;
+  return sentinel ??= `${SENTINEL_PREFIX}${process.pid}${randomBytes(8).toString("hex")}INVALID`;
+}
+function removeConfigDir() {
+  if (configDir)
+    try {
+      rmSync(configDir, { recursive: true, force: true });
+    } catch {}
+}
+function emptyGhConfigDir(env = process.env) {
+  if (configDir && isDir(configDir))
+    return configDir;
+  const runTmp = env["LOKI_RUN_TMP"] ?? "";
+  const root = runTmp !== "" && isDir(runTmp) ? runTmp : tmpdir2();
+  try {
+    configDir = mkdtempSync(join4(root, "loki-gh-config-"));
+  } catch {
+    return null;
+  }
+  if (!exitHooked) {
+    exitHooked = true;
+    process.once("exit", removeConfigDir);
+  }
+  if (!sigtermHooked) {
+    sigtermHooked = true;
+    process.prependListener("SIGTERM", () => {
+      removeConfigDir();
+      if (process.listenerCount("SIGTERM") === 1)
+        process.exit(143);
+    });
+  }
+  return configDir;
+}
+function hardenCredentialEnv(env, fresh = false) {
+  const s = withheldSentinel(fresh);
+  for (const v of GITHUB_TOKEN_VARS)
+    env[v] = s;
+  const dir = emptyGhConfigDir(env);
+  if (dir)
+    env["GH_CONFIG_DIR"] = dir;
+  const existing = Number(env["GIT_CONFIG_COUNT"]);
+  const n2 = Number.isInteger(existing) && existing >= 0 ? existing : 0;
+  const alreadyLast = n2 > 0 && env[`GIT_CONFIG_KEY_${n2 - 1}`] === "credential.helper" && env[`GIT_CONFIG_VALUE_${n2 - 1}`] === "";
+  if (!alreadyLast) {
+    env[`GIT_CONFIG_KEY_${n2}`] = "credential.helper";
+    env[`GIT_CONFIG_VALUE_${n2}`] = "";
+    env["GIT_CONFIG_COUNT"] = String(n2 + 1);
+  }
+  const params = env["GIT_CONFIG_PARAMETERS"];
+  if (params && !params.trimEnd().endsWith("'credential.helper'=''"))
+    env["GIT_CONFIG_PARAMETERS"] = `${params} 'credential.helper'=''`;
+  env["GIT_TERMINAL_PROMPT"] = "0";
+  env["GCM_INTERACTIVE"] = "never";
+}
+var GITHUB_TOKEN_VARS, SENTINEL_PREFIX = "ghp_LOKIWITHHELDsentinel", sentinel = null, configDir = null, exitHooked = false, sigtermHooked = false, isDir = (p) => {
+  try {
+    return !lstatSync(p).isSymbolicLink() && statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+};
+var init_credential_env = __esm(() => {
+  GITHUB_TOKEN_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN"];
+});
+
+// ../../loki-ts/src/util/safe_git.ts
+import { execFileSync, spawnSync } from "child_process";
+function tokenFreeEnv(env = process.env) {
+  const out = { ...env };
+  for (const k of SECRET_VARS)
+    delete out[k];
+  hardenCredentialEnv(out);
+  return out;
+}
+function driverKeys(repoDir) {
+  const r = spawnSync("git", [...SAFE_GIT_CONFIG, "config", "--includes", "--show-scope", "-z", "--get-regexp", DRIVER_KEY_RE], { cwd: repoDir, env: safeGitEnv(), encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+  if (r.error)
+    throw r.error;
+  if (r.status === 1)
+    return [];
+  if (r.status !== 0)
+    throw new Error(`safeGit: cannot enumerate git config drivers (status ${r.status})`);
+  const t = r.stdout.split("\x00"), keys = [];
+  for (let i = 0;i + 1 < t.length; i += 2) {
+    const k = t[i + 1].split(`
+`)[0];
+    if (REPO_SCOPES.has(t[i]) && k)
+      keys.push(k);
+  }
+  return [...new Set(keys)];
+}
+function netCommandOverrides(repoDir, env) {
+  const r = spawnSync("git", [...CREDENTIAL_CONFIG, "config", "--includes", "--show-scope", "-z", "--get-regexp", NET_CMD_KEY_RE], { cwd: repoDir, env: safeGitEnv(env, true), encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+  if (r.error)
+    throw r.error;
+  if (r.status === 1)
+    return { cfg: [], opts: [] };
+  if (r.status !== 0)
+    throw new Error(`safeGit: cannot enumerate git network config (status ${r.status})`);
+  const t = r.stdout.split("\x00"), all = [];
+  for (let i = 0;i + 1 < t.length; i += 2) {
+    const nl = t[i + 1].indexOf(`
+`), k = nl < 0 ? t[i + 1] : t[i + 1].slice(0, nl), v = nl < 0 ? "" : t[i + 1].slice(nl + 1);
+    if (k)
+      all.push({ k, scope: t[i], value: v });
+  }
+  const tainted = new Set(all.filter((e) => LOCAL_SCOPES.has(e.scope)).map((e) => e.k));
+  const cfg = [], opts = [], packs = new Map;
+  const isCred = (k) => /^credential(\..*)?\.helper$/.test(k);
+  for (const k of tainted) {
+    const pack = PACK_OPTS.find((o) => o.re.test(k));
+    if (pack) {
+      if (!packs.has(pack.flag))
+        packs.set(pack.flag, all.find((e) => e.k === k && !LOCAL_SCOPES.has(e.scope) && e.value !== "")?.value ?? pack.dflt);
+      continue;
+    }
+    cfg.push("-c", `${k}=`);
+    if (!isCred(k)) {
+      for (const e of all)
+        if (e.k === k && !LOCAL_SCOPES.has(e.scope) && e.value !== "")
+          cfg.push("-c", `${k}=${e.value}`);
+    }
+  }
+  if ([...tainted].some(isCred)) {
+    for (const e of all)
+      if (isCred(e.k) && !LOCAL_SCOPES.has(e.scope) && e.value !== "")
+        cfg.push("-c", `${e.k}=${e.value}`);
+  }
+  for (const o of PACK_OPTS)
+    if (packs.has(o.flag))
+      opts.push({ flag: `${o.flag}${packs.get(o.flag)}`, cmds: o.cmds });
+  return { cfg, opts };
+}
+function cmdIndex(args) {
+  let i = 0;
+  while (i < args.length && args[i].startsWith("-"))
+    i += OPT_WITH_VALUE.has(args[i]) ? 2 : 1;
+  return i;
+}
+function injectPackOpts(args, opts) {
+  if (opts.length === 0)
+    return args;
+  const i = cmdIndex(args), cmd = args[i];
+  const extra = opts.filter((o) => cmd !== undefined && o.cmds.has(cmd)).map((o) => o.flag);
+  if (cmd !== undefined && !TRANSPORT_OR_LOCAL.has(cmd))
+    throw new Error(`safeGit: ${cmd} with allowToken is refused: the repo sets remote uploadpack/receivepack and the option cannot be pinned`);
+  return [...args.slice(0, i + 1), ...extra, ...args.slice(i + 1)];
+}
+function safeGitArgs(args, allowToken = false, repoDir, keep = {}, env = process.env) {
+  if (keep.userHooks && allowToken)
+    throw new Error("safeGit: userHooks with allowToken is refused (a hook would run holding the credential)");
+  const off = new Set([...keep.repoDrivers ? [ATTRS_OFF] : [], ...keep.userHooks ? [HOOKS_OFF, SIGN_OFF] : []]);
+  const cfg = [...allowToken ? CREDENTIAL_CONFIG : SAFE_GIT_CONFIG, ...DRIVER_CONFIG];
+  const flags = cfg.flatMap((v, i) => i % 2 === 1 && !off.has(v) ? [cfg[i - 1], v] : []);
+  const net = allowToken && repoDir ? netCommandOverrides(repoDir, env) : { cfg: [], opts: [] };
+  return [...flags, ...net.cfg, ...repoDir && !keep.repoDrivers ? driverKeys(repoDir).flatMap((k) => ["-c", `${k}=`]) : [], ...injectPackOpts(noExtDiff(args), net.opts)];
+}
+function noExtDiff(args) {
+  const i = cmdIndex(args), cmd = args[i];
+  if (cmd === undefined || !PATCH_CMDS.has(cmd))
+    return [...args];
+  const rest = args.slice(i + 1);
+  const end = rest.indexOf("--");
+  const opts = (end < 0 ? rest : rest.slice(0, end)).filter((a) => a !== "--ext-diff" && a !== "--textconv" && a !== "--no-ext-diff" && a !== "--no-textconv");
+  return [...args.slice(0, i + 1), "--no-ext-diff", "--no-textconv", ...opts, ...end < 0 ? [] : rest.slice(end)];
+}
+function safeGit(repoDir, args, opts = {}) {
+  const { env, allowToken, repoDrivers, userHooks, ...rest } = opts;
+  const out = execFileSync("git", safeGitArgs(args, allowToken, repoDir, { repoDrivers, userHooks }, env ?? process.env), { stdio: ["ignore", "pipe", "ignore"], ...rest, cwd: repoDir, env: safeGitEnv(env ?? process.env, allowToken), encoding: "utf8" });
+  return typeof out === "string" ? out : "";
+}
+function safeGitSpawn(repoDir, args, opts = {}) {
+  const { env, allowToken, repoDrivers, userHooks, ...rest } = opts;
+  let argv;
+  try {
+    argv = safeGitArgs(args, allowToken, repoDir, { repoDrivers, userHooks }, env ?? process.env);
+  } catch (e) {
+    return { pid: 0, output: [], stdout: "", stderr: "", status: null, signal: null, error: e };
+  }
+  return spawnSync("git", argv, { ...rest, cwd: repoDir, env: safeGitEnv(env ?? process.env, allowToken) });
+}
+async function safeGitRun(repoDir, args, opts = {}) {
+  let argv;
+  try {
+    argv = safeGitArgs(args, opts.allowToken, repoDir, { repoDrivers: opts.repoDrivers, userHooks: opts.userHooks }, opts.env ?? process.env);
+  } catch (e) {
+    return { stdout: "", stderr: String(e), exitCode: 128 };
+  }
+  let proc;
+  try {
+    proc = Bun.spawn({ cmd: ["git", ...argv], cwd: repoDir, env: safeGitEnv(opts.env ?? process.env, opts.allowToken), stdin: "ignore", stdout: "pipe", stderr: "pipe", signal: opts.signal });
+  } catch (e) {
+    return { stdout: "", stderr: String(e), exitCode: 127 };
+  }
+  let timer;
+  if (opts.timeoutMs && opts.timeoutMs > 0)
+    timer = setTimeout(() => {
+      try {
+        proc.kill("SIGKILL");
+      } catch {}
+    }, opts.timeoutMs);
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([new Response(proc.stdout).text(), new Response(proc.stderr).text(), proc.exited]);
+    return { stdout, stderr, exitCode };
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+  }
+}
+var SAFE_GIT_CONFIG, CREDENTIAL_CONFIG, DRIVER_CONFIG, ATTRS_OFF = "core.attributesFile=/dev/null", HOOKS_OFF = "core.hooksPath=/dev/null", SIGN_OFF = "commit.gpgSign=false", REPO_SCOPES, DRIVER_KEY_RE = "^(filter\\..*\\.(clean|smudge|process)|diff\\..*\\.(textconv|command))$", PATCH_CMDS, OPT_WITH_VALUE, SECRET_VARS, safeGitEnv = (base = process.env, allowToken = false) => {
+  const env = { ...allowToken ? base : tokenFreeEnv(base), GIT_CONFIG_NOSYSTEM: "1" };
+  delete env.GIT_ATTR_SOURCE;
+  delete env.GIT_EXTERNAL_DIFF;
+  return env;
+}, NET_CMD_KEY_RE = "^(core\\.(sshcommand|gitproxy)|remote\\..*\\.(uploadpack|receivepack)|credential(\\..*)?\\.helper)$", LOCAL_SCOPES, PUSH_CMD, PACK_OPTS, TRANSPORT_OR_LOCAL;
+var init_safe_git = __esm(() => {
+  init_credential_env();
+  SAFE_GIT_CONFIG = ["-c", "core.fsmonitor=", "-c", "core.hooksPath=/dev/null", "-c", "core.sshCommand=", "-c", "protocol.ext.allow=never", "-c", "credential.helper="];
+  CREDENTIAL_CONFIG = ["-c", "core.fsmonitor=", "-c", "core.hooksPath=/dev/null", "-c", "protocol.ext.allow=never"];
+  DRIVER_CONFIG = ["-c", "diff.external=", "-c", "commit.gpgSign=false", "-c", "core.attributesFile=/dev/null"];
+  REPO_SCOPES = new Set(["local", "worktree", "command"]);
+  PATCH_CMDS = new Set(["diff", "show", "log", "whatchanged"]);
+  OPT_WITH_VALUE = new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env", "--attr-source"]);
+  SECRET_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN", "SSH_AUTH_SOCK"];
+  LOCAL_SCOPES = new Set(["local", "worktree"]);
+  PUSH_CMD = ["pu", "sh"].join("");
+  PACK_OPTS = [
+    { re: /\.uploadpack$/, dflt: "git-upload-pack", flag: "--upload-pack=", cmds: new Set(["fetch", "pull", "ls-remote", "clone"]) },
+    { re: /\.receivepack$/, dflt: "git-receive-pack", flag: "--receive-pack=", cmds: new Set([PUSH_CMD]) }
+  ];
+  TRANSPORT_OR_LOCAL = new Set(["fetch", "pull", "ls-remote", "clone", PUSH_CMD, "config", "rev-parse", "rev-list", "log", "show", "status", "diff", "for-each-ref", "cat-file", "symbolic-ref", "branch", "merge-base", "ls-files", "credential"]);
+});
+
 // src/shipper/ship.ts
 import { createHash as createHash4 } from "crypto";
 import { existsSync as existsSync4, readFileSync as readFileSync3, realpathSync as realpathSync3, renameSync, writeFileSync as writeFileSync2 } from "fs";
 import { hostname } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 function sourceId(repoDir) {
   let real2 = repoDir;
   try {
@@ -164,24 +404,24 @@ function sourceId(repoDir) {
 }
 function readShip(runDir, url) {
   try {
-    const s = JSON.parse(readFileSync3(join6(runDir, "ship.json"), "utf8"));
+    const s = JSON.parse(readFileSync3(join7(runDir, "ship.json"), "utf8"));
     if (s.url === url && Number.isInteger(s.acked_seq))
       return { acked_seq: s.acked_seq, url };
   } catch {}
   return { acked_seq: -1, url };
 }
 function writeShip(runDir, s) {
-  const tmp = join6(runDir, `ship.json.${process.pid}.tmp`);
+  const tmp = join7(runDir, `ship.json.${process.pid}.tmp`);
   writeFileSync2(tmp, JSON.stringify(s) + `
 `);
-  renameSync(tmp, join6(runDir, "ship.json"));
+  renameSync(tmp, join7(runDir, "ship.json"));
 }
 async function shipRun(o) {
   const st = readShip(o.runDir, o.url);
-  const all = readEvents(join6(o.runDir, "events.jsonl"));
+  const all = readEvents(join7(o.runDir, "events.jsonl"));
   let lines = 0;
   try {
-    lines = readFileSync3(join6(o.runDir, "events.jsonl"), "utf8").split(`
+    lines = readFileSync3(join7(o.runDir, "events.jsonl"), "utf8").split(`
 `).filter((l) => l.trim() !== "").length;
   } catch {}
   const skipped = lines - all.length;
@@ -223,7 +463,7 @@ async function shipRun(o) {
   }
   return { ok: true, sent, acked_seq: st.acked_seq, pending: 0 };
 }
-var BATCH = 200, MAX_BYTES = 800000, redactDeep = (x) => typeof x === "string" ? redactSecrets(x) : Array.isArray(x) ? x.map(redactDeep) : x && typeof x === "object" ? Object.fromEntries(Object.entries(x).map(([k, v]) => [k, redactDeep(v)])) : x, redactEvent = (e) => ({ ...e, data: redactDeep(e.data) }), backoffMs = (failures, rnd = Math.random) => Math.min(60000, 1000 * 2 ** Math.max(0, failures - 1)) * (1 + 0.25 * rnd()), shipEnabled = (env) => env.LOKI_CONTROL_URL || null, hasSpool = (runDir) => existsSync4(join6(runDir, "events.jsonl"));
+var BATCH = 200, MAX_BYTES = 800000, redactDeep = (x) => typeof x === "string" ? redactSecrets(x) : Array.isArray(x) ? x.map(redactDeep) : x && typeof x === "object" ? Object.fromEntries(Object.entries(x).map(([k, v]) => [k, redactDeep(v)])) : x, redactEvent = (e) => ({ ...e, data: redactDeep(e.data) }), backoffMs = (failures, rnd = Math.random) => Math.min(60000, 1000 * 2 ** Math.max(0, failures - 1)) * (1 + 0.25 * rnd()), shipEnabled = (env) => env.LOKI_CONTROL_URL || null, hasSpool = (runDir) => existsSync4(join7(runDir, "events.jsonl"));
 var init_ship = __esm(() => {
   init_events();
   init_redact();
@@ -231,7 +471,7 @@ var init_ship = __esm(() => {
 
 // src/shipper/backfill.ts
 import { readdirSync } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 async function backfill(o) {
   const env = o.env ?? process.env;
   const url = shipEnabled(env);
@@ -239,7 +479,7 @@ async function backfill(o) {
     return { runs: 0, sent: 0, failed: [] };
   const sleep = o.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const attempts = o.attempts ?? 3;
-  const root = join7(o.repoDir, ".loki", "runs");
+  const root = join8(o.repoDir, ".loki", "runs");
   let ids = [];
   try {
     ids = readdirSync(root).sort();
@@ -250,7 +490,7 @@ async function backfill(o) {
   let runs2 = 0, sent = 0;
   const failed2 = [];
   for (const id of ids) {
-    const runDir = join7(root, id);
+    const runDir = join8(root, id);
     if (!hasSpool(runDir))
       continue;
     runs2++;
@@ -274,8 +514,8 @@ var init_backfill = __esm(() => {
 
 // ../../loki-ts/src/util/run_pid.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { chmodSync as chmodSync2, readFileSync as readFileSync4, renameSync as renameSync2, rmSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join8 } from "path";
+import { chmodSync as chmodSync2, readFileSync as readFileSync4, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { join as join9 } from "path";
 function processStartTime(pid) {
   if (!Number.isInteger(pid) || pid <= 1)
     return null;
@@ -311,18 +551,18 @@ function verifyRunPid(runDir, runId, startOf = processStartTime) {
     return { ok: false, reason: "the pid now belongs to a different process (start time differs)" };
   return { ok: true, pid: rec.pid };
 }
-var runPidPath = (runDir) => join8(runDir, "run.pid"), liveSessions;
+var runPidPath = (runDir) => join9(runDir, "run.pid"), liveSessions;
 var init_run_pid = __esm(() => {
   liveSessions = new Set;
 });
 
 // src/shipper/watch.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync2, statSync } from "fs";
+import { readFileSync as readFileSync5, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 function registryRepos(env) {
   try {
-    const reg = JSON.parse(readFileSync5(join10(env.HOME || homedir4(), ".loki", "dashboard", "projects.json"), "utf8"));
+    const reg = JSON.parse(readFileSync5(join11(env.HOME || homedir4(), ".loki", "dashboard", "projects.json"), "utf8"));
     return Object.values(reg.projects ?? {}).map((p) => p.path).filter((p) => typeof p === "string" && p.startsWith("/"));
   } catch {
     return [];
@@ -335,14 +575,14 @@ var init_watch = __esm(() => {
 });
 
 // src/shipper/discover.ts
-import { readFileSync as readFileSync6, realpathSync as realpathSync5, statSync as statSync2 } from "fs";
-import { basename, dirname, join as join11, resolve as resolve2 } from "path";
+import { readFileSync as readFileSync6, realpathSync as realpathSync5, statSync as statSync3 } from "fs";
+import { basename, dirname, join as join12, resolve as resolve2 } from "path";
 function discoverLocalRepos(repoDir, env = process.env) {
   const out = new Map;
   for (const dir of [repoDir, ...registryRepos(env)]) {
     try {
       const real2 = realpathSync5(dir);
-      if (!statSync2(real2).isDirectory())
+      if (!statSync3(real2).isDirectory())
         continue;
       const id = sourceId(real2);
       if (!out.has(id))
@@ -352,6 +592,7 @@ function discoverLocalRepos(repoDir, env = process.env) {
   return [...out.values()];
 }
 var init_discover = __esm(() => {
+  init_safe_git();
   init_ship();
   init_watch();
 });
@@ -7326,10 +7567,10 @@ var init_paths = __esm(() => {
 });
 
 // ../../loki-ts/src/util/receipt_signer.ts
-import { createHash as createHash6, randomBytes as randomBytes2, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign, verify as verify2 } from "crypto";
-import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync5, readdirSync as readdirSync9, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync11, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "fs";
+import { createHash as createHash6, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign, verify as verify2 } from "crypto";
+import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync5, readdirSync as readdirSync9, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync12, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname7, join as join26 } from "path";
+import { dirname as dirname7, join as join27 } from "path";
 function canonicalJson(x) {
   const walk = (v) => {
     if (Array.isArray(v))
@@ -7348,12 +7589,12 @@ function loadSigningKey(generate = true) {
     let pem = inline ?? "";
     if (!inline) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join26(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
+      const file = given || join27(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
         pem = readFileSync18(file);
         if (!given) {
           for (const [f, m] of [[file, 384], [dirname7(file), 448]])
-            if (statSync11(f).mode & 63)
+            if (statSync12(f).mode & 63)
               chmodSync4(f, m);
         }
       } catch (e) {
@@ -7361,7 +7602,7 @@ function loadSigningKey(generate = true) {
           return null;
         mkdirSync5(dirname7(dirname7(file)), { recursive: true, mode: 448 });
         mkdirSync5(dirname7(file), { recursive: true, mode: 448 });
-        const tmp = `${file}.${randomBytes2(6).toString("hex")}.tmp`;
+        const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
         writeFileSync8(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
           linkSync(tmp, file);
@@ -7394,10 +7635,43 @@ var init_receipt_signer = () => {};
 // ../../loki-ts/src/engine10/registry.ts
 var init_registry = () => {};
 
+// ../../loki-ts/src/engine10/types.ts
+function pushArgv(a) {
+  switch (a.cmd) {
+    case "push-pr":
+      return ["push-pr", a.repoDir, a.branch, a.title, a.bodyFile, a.draft ? "1" : "0"];
+    case "comment":
+      return ["comment", a.runId, a.prUrl, a.file];
+    case "status":
+      return ["status", a.sha, a.state, a.description];
+    case "issue-comment":
+      return a.update ? ["issue-comment", "--update", a.issueRef, a.bodyFile] : ["issue-comment", a.issueRef, a.bodyFile];
+  }
+}
+function taskBlock(task) {
+  return ["Task (untrusted, quoted verbatim):", "<<<TASK", task, "TASK"];
+}
+var STAGE_BUDGETS;
+var init_types = __esm(() => {
+  STAGE_BUDGETS = {
+    intake: { targetS: 15, limitS: 60 },
+    plan: { targetS: 45, limitS: 90 },
+    wall: { targetS: 45, limitS: 90 },
+    implement: { targetS: 180, limitS: 480 },
+    verify: { targetS: 60, limitS: 120 },
+    fix: { targetS: 90, limitS: 180 },
+    commit: { targetS: 5, limitS: 30 },
+    seal: { targetS: 15, limitS: 60 },
+    pr: { targetS: 15, limitS: 60 },
+    deep: { targetS: null, limitS: 2700 }
+  };
+});
+
 // ../../loki-ts/src/engine10/output.ts
 var init_output = __esm(() => {
   init_registry();
   init_redact();
+  init_types();
 });
 
 // ../../loki-ts/src/util/atomic.ts
@@ -7405,13 +7679,13 @@ import {
   closeSync as closeSync5,
   fstatSync as fstatSync4,
   fsyncSync as fsyncSync2,
-  lstatSync as lstatSync4,
+  lstatSync as lstatSync5,
   mkdirSync as mkdirSync6,
   openSync as openSync5,
   readSync as readSync4,
   renameSync as renameSync5,
-  rmSync as rmSync4,
-  statSync as statSync12,
+  rmSync as rmSync5,
+  statSync as statSync13,
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync9,
   writeSync as writeSync3
@@ -7455,184 +7729,6 @@ var init_atomic = __esm(() => {
   _appendChains = new Map;
 });
 
-// ../../loki-ts/src/util/credential_env.ts
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync5, statSync as statSync13, lstatSync as lstatSync5 } from "fs";
-import { tmpdir as tmpdir3 } from "os";
-import { join as join27 } from "path";
-import { randomBytes as randomBytes3 } from "crypto";
-function withheldSentinel(fresh = false) {
-  if (fresh)
-    sentinel = null;
-  return sentinel ??= `${SENTINEL_PREFIX}${process.pid}${randomBytes3(8).toString("hex")}INVALID`;
-}
-function removeConfigDir() {
-  if (configDir)
-    try {
-      rmSync5(configDir, { recursive: true, force: true });
-    } catch {}
-}
-function emptyGhConfigDir(env = process.env) {
-  if (configDir && isDir(configDir))
-    return configDir;
-  const runTmp = env["LOKI_RUN_TMP"] ?? "";
-  const root = runTmp !== "" && isDir(runTmp) ? runTmp : tmpdir3();
-  try {
-    configDir = mkdtempSync2(join27(root, "loki-gh-config-"));
-  } catch {
-    return null;
-  }
-  if (!exitHooked) {
-    exitHooked = true;
-    process.once("exit", removeConfigDir);
-  }
-  if (!sigtermHooked) {
-    sigtermHooked = true;
-    process.prependListener("SIGTERM", () => {
-      removeConfigDir();
-      if (process.listenerCount("SIGTERM") === 1)
-        process.exit(143);
-    });
-  }
-  return configDir;
-}
-function hardenCredentialEnv(env, fresh = false) {
-  const s = withheldSentinel(fresh);
-  for (const v of GITHUB_TOKEN_VARS)
-    env[v] = s;
-  const dir = emptyGhConfigDir(env);
-  if (dir)
-    env["GH_CONFIG_DIR"] = dir;
-  const existing = Number(env["GIT_CONFIG_COUNT"]);
-  const n2 = Number.isInteger(existing) && existing >= 0 ? existing : 0;
-  const alreadyLast = n2 > 0 && env[`GIT_CONFIG_KEY_${n2 - 1}`] === "credential.helper" && env[`GIT_CONFIG_VALUE_${n2 - 1}`] === "";
-  if (!alreadyLast) {
-    env[`GIT_CONFIG_KEY_${n2}`] = "credential.helper";
-    env[`GIT_CONFIG_VALUE_${n2}`] = "";
-    env["GIT_CONFIG_COUNT"] = String(n2 + 1);
-  }
-  const params = env["GIT_CONFIG_PARAMETERS"];
-  if (params && !params.trimEnd().endsWith("'credential.helper'=''"))
-    env["GIT_CONFIG_PARAMETERS"] = `${params} 'credential.helper'=''`;
-  env["GIT_TERMINAL_PROMPT"] = "0";
-  env["GCM_INTERACTIVE"] = "never";
-}
-var GITHUB_TOKEN_VARS, SENTINEL_PREFIX = "ghp_LOKIWITHHELDsentinel", sentinel = null, configDir = null, exitHooked = false, sigtermHooked = false, isDir = (p) => {
-  try {
-    return !lstatSync5(p).isSymbolicLink() && statSync13(p).isDirectory();
-  } catch {
-    return false;
-  }
-};
-var init_credential_env = __esm(() => {
-  GITHUB_TOKEN_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN"];
-});
-
-// ../../loki-ts/src/util/safe_git.ts
-import { execFileSync as execFileSync4, spawnSync } from "child_process";
-function tokenFreeEnv(env = process.env) {
-  const out2 = { ...env };
-  for (const k of SECRET_VARS)
-    delete out2[k];
-  hardenCredentialEnv(out2);
-  return out2;
-}
-function driverKeys(repoDir) {
-  const r = spawnSync("git", [...SAFE_GIT_CONFIG, "config", "--includes", "--show-scope", "-z", "--get-regexp", DRIVER_KEY_RE], { cwd: repoDir, env: safeGitEnv(), encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
-  if (r.error)
-    throw r.error;
-  if (r.status === 1)
-    return [];
-  if (r.status !== 0)
-    throw new Error(`safeGit: cannot enumerate git config drivers (status ${r.status})`);
-  const t = r.stdout.split("\x00"), keys = [];
-  for (let i = 0;i + 1 < t.length; i += 2) {
-    const k = t[i + 1].split(`
-`)[0];
-    if (REPO_SCOPES.has(t[i]) && k)
-      keys.push(k);
-  }
-  return [...new Set(keys)];
-}
-function safeGitArgs(args, allowToken = false, repoDir, keep = {}) {
-  if (keep.userHooks && allowToken)
-    throw new Error("safeGit: userHooks with allowToken is refused (a hook would run holding the credential)");
-  const off = new Set([...keep.repoDrivers ? [ATTRS_OFF] : [], ...keep.userHooks ? [HOOKS_OFF, SIGN_OFF] : []]);
-  const cfg = [...allowToken ? CREDENTIAL_CONFIG : SAFE_GIT_CONFIG, ...DRIVER_CONFIG];
-  const flags = cfg.flatMap((v, i) => i % 2 === 1 && !off.has(v) ? [cfg[i - 1], v] : []);
-  return [...flags, ...repoDir && !keep.repoDrivers ? driverKeys(repoDir).flatMap((k) => ["-c", `${k}=`]) : [], ...noExtDiff(args)];
-}
-function noExtDiff(args) {
-  let i = 0;
-  while (i < args.length && args[i].startsWith("-"))
-    i += OPT_WITH_VALUE.has(args[i]) ? 2 : 1;
-  const cmd = args[i];
-  if (cmd === undefined || !PATCH_CMDS.has(cmd))
-    return [...args];
-  const rest = args.slice(i + 1);
-  const end = rest.indexOf("--");
-  const opts = (end < 0 ? rest : rest.slice(0, end)).filter((a) => a !== "--ext-diff" && a !== "--textconv" && a !== "--no-ext-diff" && a !== "--no-textconv");
-  return [...args.slice(0, i + 1), "--no-ext-diff", "--no-textconv", ...opts, ...end < 0 ? [] : rest.slice(end)];
-}
-function safeGit(repoDir, args, opts = {}) {
-  const { env, allowToken, repoDrivers, userHooks, ...rest } = opts;
-  const out2 = execFileSync4("git", safeGitArgs(args, allowToken, repoDir, { repoDrivers, userHooks }), { stdio: ["ignore", "pipe", "ignore"], ...rest, cwd: repoDir, env: safeGitEnv(env ?? process.env, allowToken), encoding: "utf8" });
-  return typeof out2 === "string" ? out2 : "";
-}
-function safeGitSpawn(repoDir, args, opts = {}) {
-  const { env, allowToken, repoDrivers, userHooks, ...rest } = opts;
-  let argv;
-  try {
-    argv = safeGitArgs(args, allowToken, repoDir, { repoDrivers, userHooks });
-  } catch (e) {
-    return { pid: 0, output: [], stdout: "", stderr: "", status: null, signal: null, error: e };
-  }
-  return spawnSync("git", argv, { ...rest, cwd: repoDir, env: safeGitEnv(env ?? process.env, allowToken) });
-}
-async function safeGitRun(repoDir, args, opts = {}) {
-  let argv;
-  try {
-    argv = safeGitArgs(args, opts.allowToken, repoDir, { repoDrivers: opts.repoDrivers, userHooks: opts.userHooks });
-  } catch (e) {
-    return { stdout: "", stderr: String(e), exitCode: 128 };
-  }
-  let proc;
-  try {
-    proc = Bun.spawn({ cmd: ["git", ...argv], cwd: repoDir, env: safeGitEnv(opts.env ?? process.env, opts.allowToken), stdin: "ignore", stdout: "pipe", stderr: "pipe", signal: opts.signal });
-  } catch (e) {
-    return { stdout: "", stderr: String(e), exitCode: 127 };
-  }
-  let timer;
-  if (opts.timeoutMs && opts.timeoutMs > 0)
-    timer = setTimeout(() => {
-      try {
-        proc.kill("SIGKILL");
-      } catch {}
-    }, opts.timeoutMs);
-  try {
-    const [stdout, stderr, exitCode] = await Promise.all([new Response(proc.stdout).text(), new Response(proc.stderr).text(), proc.exited]);
-    return { stdout, stderr, exitCode };
-  } finally {
-    if (timer)
-      clearTimeout(timer);
-  }
-}
-var SAFE_GIT_CONFIG, CREDENTIAL_CONFIG, DRIVER_CONFIG, ATTRS_OFF = "core.attributesFile=/dev/null", HOOKS_OFF = "core.hooksPath=/dev/null", SIGN_OFF = "commit.gpgSign=false", REPO_SCOPES, DRIVER_KEY_RE = "^(filter\\..*\\.(clean|smudge|process)|diff\\..*\\.(textconv|command))$", PATCH_CMDS, OPT_WITH_VALUE, SECRET_VARS, safeGitEnv = (base = process.env, allowToken = false) => {
-  const env = { ...allowToken ? base : tokenFreeEnv(base), GIT_CONFIG_NOSYSTEM: "1" };
-  delete env.GIT_ATTR_SOURCE;
-  delete env.GIT_EXTERNAL_DIFF;
-  return env;
-};
-var init_safe_git = __esm(() => {
-  init_credential_env();
-  SAFE_GIT_CONFIG = ["-c", "core.fsmonitor=", "-c", "core.hooksPath=/dev/null", "-c", "core.sshCommand=", "-c", "protocol.ext.allow=never", "-c", "credential.helper="];
-  CREDENTIAL_CONFIG = ["-c", "core.fsmonitor=", "-c", "core.hooksPath=/dev/null", "-c", "protocol.ext.allow=never"];
-  DRIVER_CONFIG = ["-c", "diff.external=", "-c", "commit.gpgSign=false", "-c", "core.attributesFile=/dev/null"];
-  REPO_SCOPES = new Set(["local", "worktree", "command"]);
-  PATCH_CMDS = new Set(["diff", "show", "log", "whatchanged"]);
-  OPT_WITH_VALUE = new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env", "--attr-source"]);
-  SECRET_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN", "SSH_AUTH_SOCK"];
-});
-
 // ../../loki-ts/src/util/engine_origin.ts
 function readOriginUrl(repoDir) {
   try {
@@ -8060,38 +8156,6 @@ var init_budget = __esm(() => {
   PRICING = Object.freeze(_loadPricing());
 });
 
-// ../../loki-ts/src/engine10/types.ts
-function pushArgv(a) {
-  switch (a.cmd) {
-    case "push-pr":
-      return ["push-pr", a.repoDir, a.branch, a.title, a.bodyFile, a.draft ? "1" : "0"];
-    case "comment":
-      return ["comment", a.runId, a.prUrl, a.file];
-    case "status":
-      return ["status", a.sha, a.state, a.description];
-    case "issue-comment":
-      return a.update ? ["issue-comment", "--update", a.issueRef, a.bodyFile] : ["issue-comment", a.issueRef, a.bodyFile];
-  }
-}
-function taskBlock(task) {
-  return ["Task (untrusted, quoted verbatim):", "<<<TASK", task, "TASK"];
-}
-var STAGE_BUDGETS;
-var init_types = __esm(() => {
-  STAGE_BUDGETS = {
-    intake: { targetS: 15, limitS: 60 },
-    plan: { targetS: 45, limitS: 90 },
-    wall: { targetS: 45, limitS: 90 },
-    implement: { targetS: 180, limitS: 480 },
-    verify: { targetS: 60, limitS: 120 },
-    fix: { targetS: 90, limitS: 180 },
-    commit: { targetS: 5, limitS: 30 },
-    seal: { targetS: 15, limitS: 60 },
-    pr: { targetS: 15, limitS: 60 },
-    deep: { targetS: null, limitS: 2700 }
-  };
-});
-
 // ../../loki-ts/src/runner/router/decision.ts
 var init_decision = () => {};
 
@@ -8801,16 +8865,25 @@ var init_scope = __esm(() => {
   dropped = new WeakMap;
 });
 
-// ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename9, extname, join as join37, relative, sep as sep10 } from "path";
+// ../../loki-ts/src/util/test_file_text.ts
+import { basename as basename9 } from "path";
 function isTestFile(rel) {
   const name = basename9(rel);
   return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
 }
-var SKIP_DIRS, JS_TEST_RE, PY_TEST_RE, GO_TEST_RE;
+var JS_TEST_RE, PY_TEST_RE, GO_TEST_RE;
+var init_test_file_text = __esm(() => {
+  JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
+  PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
+  GO_TEST_RE = /_test\.go$/;
+});
+
+// ../../loki-ts/src/engine10/testmap.ts
+var SKIP_DIRS;
 var init_testmap = __esm(() => {
   init_resolve();
   init_scope();
+  init_test_file_text();
   SKIP_DIRS = new Set([
     ".git",
     "node_modules",
@@ -8826,14 +8899,11 @@ var init_testmap = __esm(() => {
     ".loki",
     ".next"
   ]);
-  JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
-  PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
-  GO_TEST_RE = /_test\.go$/;
 });
 
 // ../../loki-ts/src/util/check_result.ts
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync28, renameSync as renameSync8, writeFileSync as writeFileSync16 } from "fs";
-import { basename as basename10, join as join38 } from "path";
+import { basename as basename10, join as join37 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -9128,7 +9198,7 @@ function diffFiles(repoDir, baseSha) {
       return f;
     let n2 = 0;
     try {
-      n2 = readFileSync28(join38(repoDir, path), "utf8").split(`
+      n2 = readFileSync28(join37(repoDir, path), "utf8").split(`
 `).length;
     } catch {}
     return { path, added: n2, deleted: 0, status: "added" };
@@ -9136,7 +9206,7 @@ function diffFiles(repoDir, baseSha) {
 }
 function recordRisk(repoDir, a) {
   try {
-    const dir = join38(repoDir, ".loki", "state"), p = join38(dir, "risk-tier.json");
+    const dir = join37(repoDir, ".loki", "state"), p = join37(dir, "risk-tier.json");
     mkdirSync13(dir, { recursive: true });
     writeFileSync16(`${p}.tmp`, JSON.stringify(a, null, 2) + `
 `);
@@ -9196,7 +9266,7 @@ var init_state = __esm(() => {
 
 // ../../loki-ts/src/runner/repo_profile.ts
 import { existsSync as existsSync22, readFileSync as readFileSync29, mkdirSync as mkdirSync14, readdirSync as readdirSync13, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync17 } from "fs";
-import { basename as basename11, join as join39, resolve as resolve13, isAbsolute as isAbsolute2 } from "path";
+import { basename as basename11, join as join38, resolve as resolve13, isAbsolute as isAbsolute2 } from "path";
 function loadProfile(repoDir) {
   try {
     const p = JSON.parse(readFileSync29(commandProfilePath(repoDir), "utf8"));
@@ -9230,7 +9300,7 @@ function attributeFullSuite(repoDir, baseSha, full, blocked, changed) {
   const block = new Set(blocked);
   return attribute(repoDir, baseSha, bad.map((c) => ({ name: c.name, ...c.ids ? { ids: c.ids } : {}, eligible: (c.ids ?? []).every((i) => !block.has(i) && !changed.some((f) => i.includes(f))) })));
 }
-var commandProfilePath = (repoDir) => join39(repoDir, ".loki", "state", "repo-profile.json");
+var commandProfilePath = (repoDir) => join38(repoDir, ".loki", "state", "repo-profile.json");
 var init_repo_profile = __esm(() => {
   init_failures();
   init_check_result();
@@ -9266,12 +9336,12 @@ var init_context = __esm(() => {
 // ../../loki-ts/src/util/steer.ts
 import { appendFileSync as appendFileSync2, closeSync as closeSync8, constants as constants2, fstatSync as fstatSync6, readdirSync as readdirSync14, lstatSync as lstatSync9, mkdirSync as mkdirSync15, linkSync as linkSync2, openSync as openSync8, readFileSync as readFileSync30, readSync as readSync7, renameSync as renameSync10, statSync as statSync15, lutimesSync, rmSync as rmSync9, unlinkSync as unlinkSync5, writeFileSync as writeFileSync18, existsSync as existsSync23 } from "fs";
 import { createHash as createHash9, randomBytes as randomBytes4 } from "crypto";
-import { basename as basename12, join as join40 } from "path";
+import { basename as basename12, join as join39 } from "path";
 function archiveTo(logs, prefix, src, link = linkSync2, onLinked) {
   for (let i = 0;; i++) {
     const name = i === 0 ? `${prefix}.md` : `${prefix}-${i}.md`;
     try {
-      link(src, join40(logs, name));
+      link(src, join39(logs, name));
     } catch (e) {
       const code = e.code;
       if (code === "EEXIST")
@@ -9279,7 +9349,7 @@ function archiveTo(logs, prefix, src, link = linkSync2, onLinked) {
       if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV" && code !== "EMLINK")
         throw e;
       const name2 = `${prefix}-${randomBytes4(4).toString("hex")}.md`;
-      renameSync10(src, join40(logs, name2));
+      renameSync10(src, join39(logs, name2));
       onLinked?.(name2);
       return name2;
     }
@@ -9298,7 +9368,7 @@ function orphanAlreadyArchived(logs, claim) {
     if (!/^human-input-.*\.md$/.test(a))
       continue;
     try {
-      const s = statSync15(join40(logs, a));
+      const s = statSync15(join39(logs, a));
       if (s.ino !== c.ino || s.dev !== c.dev)
         continue;
       if (/^human-input-(ORPHAN|REJECTED)-/.test(a) || existsSync23(appliedMarker(logs, a)))
@@ -9318,7 +9388,7 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
   for (const n2 of names)
     if (n2.startsWith(".applied-") && !present.has(n2.slice(".applied-".length))) {
       try {
-        unlinkSync5(join40(logs, n2));
+        unlinkSync5(join39(logs, n2));
       } catch {}
     }
   for (const n2 of names) {
@@ -9335,7 +9405,7 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
     if (alive) {
       let ageMs = 0;
       try {
-        ageMs = nowMs - statSync15(join40(logs, n2)).mtimeMs;
+        ageMs = nowMs - statSync15(join39(logs, n2)).mtimeMs;
       } catch {
         continue;
       }
@@ -9343,11 +9413,11 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
         continue;
     }
     try {
-      if (orphanAlreadyArchived(logs, join40(logs, n2))) {
-        unlinkSync5(join40(logs, n2));
+      if (orphanAlreadyArchived(logs, join39(logs, n2))) {
+        unlinkSync5(join39(logs, n2));
         continue;
       }
-      archiveTo(logs, `human-input-ORPHAN-${stamp2}`, join40(logs, n2), link);
+      archiveTo(logs, `human-input-ORPHAN-${stamp2}`, join39(logs, n2), link);
       unapplied("orphaned claim");
     } catch (e) {
       if (e.code === "ENOENT")
@@ -9359,17 +9429,17 @@ function sweepOrphans(logs, stamp2, unapplied, link, nowMs = Date.now()) {
 function consumeSteer(repoDir, env = process.env, now2 = () => new Date, sink, hooks2) {
   if (/^(0|false)$/i.test(env.LOKI_PROMPT_INJECTION ?? ""))
     return null;
-  const f = join40(repoDir, ".loki", "HUMAN_INPUT.md");
+  const f = join39(repoDir, ".loki", "HUMAN_INPUT.md");
   const unapplied = (reason) => {
     sink?.push({ rev: 0, source: null, actor: null, sha: "", at: now2().getTime(), unapplied: true, reason });
   };
   let fd = -1, claimed = "";
   try {
-    const logs = join40(repoDir, ".loki", "logs");
+    const logs = join39(repoDir, ".loki", "logs");
     mkdirSync15(logs, { recursive: true });
     const stamp2 = now2().toISOString().replace(/[-:]/g, "").replace(/\..*/, "");
     sweepOrphans(logs, stamp2, unapplied, hooks2?.link, now2().getTime());
-    claimed = join40(logs, `.claim-${process.pid}-${randomBytes4(6).toString("hex")}`);
+    claimed = join39(logs, `.claim-${process.pid}-${randomBytes4(6).toString("hex")}`);
     try {
       renameSync10(f, claimed);
     } catch (e) {
@@ -9460,7 +9530,7 @@ function consumeSteer(repoDir, env = process.env, now2 = () => new Date, sink, h
   } catch {
     if (claimed) {
       try {
-        archiveTo(join40(repoDir, ".loki", "logs"), `human-input-${now2().toISOString().replace(/[-:]/g, "").replace(/\..*/, "")}`, claimed, hooks2?.link);
+        archiveTo(join39(repoDir, ".loki", "logs"), `human-input-${now2().toISOString().replace(/[-:]/g, "").replace(/\..*/, "")}`, claimed, hooks2?.link);
         unapplied("logs dir unwritable or file unreadable");
       } catch {
         unapplied(`steer stranded at .loki/logs/${basename12(claimed)}`);
@@ -9479,7 +9549,7 @@ function consumeSteer(repoDir, env = process.env, now2 = () => new Date, sink, h
   }
 }
 function recordRevisions(repoDir, text2, archived, at) {
-  const file = join40(repoDir, ".loki", "intent-revisions.jsonl");
+  const file = join39(repoDir, ".loki", "intent-revisions.jsonl");
   let last = 0;
   try {
     for (const l of readFileSync30(file, "utf8").split(`
@@ -9536,7 +9606,7 @@ function staleAtSeal(repoDir, ctx) {
   const frozen = ctx.outputs === undefined || ctx.outputs().wall !== undefined || ctx.wallSealed === true;
   return [...new Set([...staleWallRevisions(ctx.intentRevisions, frozen ? ctx.timeline : []), ...late])];
 }
-var STEER_MAX_BYTES, STEER_STAGES, STEER_CLAIM_MAX_AGE_MS, appliedMarker = (logs, archive) => join40(logs, `.applied-${archive}`), REV_HDR, STEER_REMEDY;
+var STEER_MAX_BYTES, STEER_STAGES, STEER_CLAIM_MAX_AGE_MS, appliedMarker = (logs, archive) => join39(logs, `.applied-${archive}`), REV_HDR, STEER_REMEDY;
 var init_steer = __esm(() => {
   init_context();
   STEER_MAX_BYTES = 1024 * 1024;
@@ -9599,18 +9669,18 @@ var init_seal_drift = __esm(() => {
 });
 
 // ../../loki-ts/src/util/spec_file.ts
-import { isAbsolute as isAbsolute3, join as join41, relative as relative2 } from "path";
+import { isAbsolute as isAbsolute3, join as join40, relative } from "path";
 function specReceiptBlock(env) {
   const { LOKI_E10_SPEC_PATH: p, LOKI_E10_SPEC_SHA256: sha2 } = env;
   if (!p || !sha2)
     return {};
-  const rel = isAbsolute3(p) && env.LOKI_E10_REPO_DIR ? relative2(env.LOKI_E10_REPO_DIR, p) : p;
+  const rel = isAbsolute3(p) && env.LOKI_E10_REPO_DIR ? relative(env.LOKI_E10_REPO_DIR, p) : p;
   return { spec: { path: rel, sha256: sha2 } };
 }
 var SPEC_DIR;
 var init_spec_file = __esm(() => {
   init_types();
-  SPEC_DIR = join41(".loki", "specs");
+  SPEC_DIR = join40(".loki", "specs");
 });
 
 // ../../loki-ts/src/engine10/pr_body.ts
@@ -9632,9 +9702,9 @@ var init_run_cap = __esm(() => {
 // ../../loki-ts/src/util/mutation_proof.ts
 import { existsSync as existsSync24, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync3, readFileSync as readFileSync31, rmSync as rmSync10, symlinkSync, writeFileSync as writeFileSync19 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename13, dirname as dirname13, isAbsolute as isAbsolute4, join as join42, relative as relative3 } from "path";
+import { basename as basename13, dirname as dirname13, isAbsolute as isAbsolute4, join as join41, relative as relative2 } from "path";
 function mutationProof(i) {
-  const rels = i.wallFiles.map((f) => isAbsolute4(f.path) ? relative3(i.repoDir, f.path) : f.path);
+  const rels = i.wallFiles.map((f) => isAbsolute4(f.path) ? relative2(i.repoDir, f.path) : f.path);
   if (rels.length === 0)
     return np("no Wall tests");
   const tests = rels.flatMap((rel) => {
@@ -9650,25 +9720,25 @@ function mutationProof(i) {
   const deadline = Date.now() + budgetS * 1000, remaining = () => deadline - Date.now();
   let parent = null, wt = null, added = false;
   try {
-    parent = mkdtempSync3(join42(tmpdir4(), "loki-mutproof-"));
-    wt = join42(parent, "wt");
+    parent = mkdtempSync3(join41(tmpdir4(), "loki-mutproof-"));
+    wt = join41(parent, "wt");
     const add3 = git(i.repoDir, ["worktree", "add", "--detach", wt, i.baseSha], Math.max(1000, Math.min(30000, remaining())));
     added = existsSync24(wt) || add3.status === 0;
     if (add3.status !== 0)
       return np("could not create the base worktree");
     for (const rel of rels) {
-      const sealed = join42(i.runDir, "wall", basename13(rel)), src = existsSync24(sealed) ? sealed : join42(i.repoDir, rel);
+      const sealed = join41(i.runDir, "wall", basename13(rel)), src = existsSync24(sealed) ? sealed : join41(i.repoDir, rel);
       if (!existsSync24(src))
         return np(`Wall file missing: ${rel}`);
-      mkdirSync16(dirname13(join42(wt, rel)), { recursive: true });
-      writeFileSync19(join42(wt, rel), readFileSync31(src));
+      mkdirSync16(dirname13(join41(wt, rel)), { recursive: true });
+      writeFileSync19(join41(wt, rel), readFileSync31(src));
     }
     for (const rel of rels) {
       const parts = rel.split("/").slice(0, -1);
       for (let n2 = 0;n2 <= parts.length; n2++) {
         const anc = parts.slice(0, n2).join("/");
         for (const d of DEP_DIRS) {
-          const src = join42(i.repoDir, anc, d), dst = join42(wt, anc, d);
+          const src = join41(i.repoDir, anc, d), dst = join41(wt, anc, d);
           if (existsSync24(src) && !existsSync24(dst)) {
             try {
               symlinkSync(src, dst);
@@ -10965,7 +11035,7 @@ Example: test('name', () => { assert.strictEqual(fn(1), 2); });  Run: node --tes
 import { createHash as createHash12 } from "crypto";
 import { appendFileSync as appendFileSync3, copyFileSync as copyFileSync2, existsSync as existsSync26, mkdirSync as mkdirSync17, readFileSync as readFileSync33, rmSync as rmSync12, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { basename as basename15, join as join43, relative as relative4 } from "path";
+import { basename as basename15, join as join42, relative as relative3 } from "path";
 function wallHoldoutRatio(env = process.env) {
   if (env["LOKI_WALL_HOLDOUT"]?.trim() === "0")
     return 0;
@@ -10993,32 +11063,32 @@ function stashHoldout(o) {
   rmSync12(dir, { recursive: true, force: true });
   mkdirSync17(dir, { recursive: true, mode: 448 });
   const files = held.map((name) => {
-    copyFileSync2(join43(o.srcDir, name), join43(dir, name));
-    rmSync12(join43(o.srcDir, name), { force: true });
-    return { name, runner: o.runnerOf(name), sha256: sha2(readFileSync33(join43(dir, name), "utf8")) };
+    copyFileSync2(join42(o.srcDir, name), join42(dir, name));
+    rmSync12(join42(o.srcDir, name), { force: true });
+    return { name, runner: o.runnerOf(name), sha256: sha2(readFileSync33(join42(dir, name), "utf8")) };
   });
-  writeFileSync20(join43(dir, MANIFEST), JSON.stringify({ targetDir: o.targetDir, files }));
+  writeFileSync20(join42(dir, MANIFEST), JSON.stringify({ targetDir: o.targetDir, files }));
   return { dir, names: new Set(held) };
 }
 function stageHoldout(dir, repoDir) {
   const put = [], tests = [], missing = [];
   let man = null;
   try {
-    man = JSON.parse(readFileSync33(join43(dir, MANIFEST), "utf8"));
+    man = JSON.parse(readFileSync33(join42(dir, MANIFEST), "utf8"));
   } catch {}
   if (!man)
     return { tests, missing: [`holdout store unreadable: ${basename15(dir)}`], cleanup: () => {} };
   mkdirSync17(man.targetDir, { recursive: true });
   man.files.forEach((f, i) => {
-    const src = join43(dir, f.name);
+    const src = join42(dir, f.name);
     if (!existsSync26(src) || sha2(readFileSync33(src, "utf8")) !== f.sha256) {
       missing.push(`holdout ${i + 1} missing or altered`);
       return;
     }
-    const dest = join43(man.targetDir, `loki_wall_holdout_${i + 1}${f.name.slice(f.name.indexOf("."))}`);
+    const dest = join42(man.targetDir, `loki_wall_holdout_${i + 1}${f.name.slice(f.name.indexOf("."))}`);
     copyFileSync2(src, dest);
     put.push(dest);
-    tests.push({ runner: f.runner, path: relative4(repoDir, dest) });
+    tests.push({ runner: f.runner, path: relative3(repoDir, dest) });
   });
   return { tests, missing, cleanup: () => {
     for (const p of put)
@@ -11028,16 +11098,16 @@ function stageHoldout(dir, repoDir) {
 function recordHoldoutTriage(runDir, entry) {
   try {
     mkdirSync17(runDir, { recursive: true });
-    appendFileSync3(join43(runDir, HOLDOUT_TRIAGE_FILE), JSON.stringify(entry) + `
+    appendFileSync3(join42(runDir, HOLDOUT_TRIAGE_FILE), JSON.stringify(entry) + `
 `, { mode: 384 });
   } catch {}
 }
-var sha2 = (s) => createHash12("sha256").update(s).digest("hex"), WALL_HOLDOUT_DEFAULT_RATIO = 0.2, isHoldoutCheck = (name) => name.startsWith("holdout:"), holdoutDirFor = (runId, repoDir) => join43(tmpdir6(), `loki-e10-holdout-${sha2(`${runId}:${repoDir}`).slice(0, 16)}`), MANIFEST = "manifest.json", WALL_HOLDOUT_MIN = 5, HOLDOUT_TRIAGE_FILE = "holdout-triage.jsonl";
+var sha2 = (s) => createHash12("sha256").update(s).digest("hex"), WALL_HOLDOUT_DEFAULT_RATIO = 0.2, isHoldoutCheck = (name) => name.startsWith("holdout:"), holdoutDirFor = (runId, repoDir) => join42(tmpdir6(), `loki-e10-holdout-${sha2(`${runId}:${repoDir}`).slice(0, 16)}`), MANIFEST = "manifest.json", WALL_HOLDOUT_MIN = 5, HOLDOUT_TRIAGE_FILE = "holdout-triage.jsonl";
 var init_holdout = () => {};
 
 // ../../loki-ts/src/features/runner_config.ts
 import { readFileSync as readFileSync34 } from "fs";
-import { dirname as dirname15, join as join44, normalize as normalize2 } from "path";
+import { dirname as dirname15, join as join43, normalize as normalize2 } from "path";
 function tomlKey2(s, i = 0, eq2 = true) {
   const parts = [], ws = () => {
     while (/\s/.test(s[i] ?? "x"))
@@ -11257,6 +11327,53 @@ function testConfigChanged(repoDir, baseSha, changed) {
     }
   });
 }
+function patchedTargets(cfg, text2) {
+  const out2 = [], unq = (v) => v.replace(/^["']|["']$/g, "");
+  if (/package\.json$/i.test(cfg)) {
+    try {
+      const j = JSON.parse(text2);
+      for (const m of [j.patchedDependencies, j.pnpm?.patchedDependencies])
+        if (m && typeof m === "object") {
+          for (const v of Object.values(m))
+            if (typeof v === "string")
+              out2.push(v);
+        }
+    } catch {}
+  } else if (/pnpm-workspace\.yaml$/i.test(cfg)) {
+    let on = false, flow = 0;
+    const pairs = (t) => {
+      for (const m of t.matchAll(/:\s*("[^"]*"|'[^']*'|[^\s,}#]+)/g))
+        out2.push(unq(m[1]));
+    }, depth = (t) => (t.match(/{/g) ?? []).length - (t.match(/}/g) ?? []).length;
+    for (const l of text2.split(/\r?\n/)) {
+      if (flow) {
+        const c = l.replace(/#.*$/, "");
+        pairs(c);
+        flow = Math.max(0, flow + depth(c));
+        continue;
+      }
+      const h = /^patchedDependencies\s*:(.*)$/.exec(l);
+      if (h) {
+        const rest = h[1].trim(), c = rest.replace(/#.*$/, "");
+        on = !rest || rest.startsWith("#");
+        pairs(c);
+        if (c.startsWith("{"))
+          flow = Math.max(0, depth(c));
+        continue;
+      }
+      if (!on)
+        continue;
+      if (/^\S/.test(l)) {
+        on = false;
+        continue;
+      }
+      const m = /^\s+(?:"[^"]*"|'[^']*'|[^\s:'"][^:]*?)\s*:\s*("[^"]*"|'[^']*'|[^\s#]+)/.exec(l);
+      if (m)
+        out2.push(unq(m[1]));
+    }
+  }
+  return out2.filter((t) => t && !t.startsWith("/"));
+}
 function referenced(cfg, text2) {
   const raw2 = [...text2.matchAll(REFS)].flatMap((m) => [...m[1].matchAll(QUOTED)].map((q) => q[1]));
   for (const m of text2.matchAll(MAPPER))
@@ -11267,8 +11384,8 @@ function referenced(cfg, text2) {
     }
   const dir = dirname15(cfg), explicit = ROOT_DIR.exec(text2), roots = [dir];
   if (explicit)
-    roots.push("", ...explicit[1] ? [join44(dir, explicit[1])] : []);
-  return raw2.flatMap((r) => r.startsWith("/") ? [normalize2(r.slice(1))] : roots.map((root) => normalize2(join44(root, r.replace(/^<rootDir>\/?/, "")))));
+    roots.push("", ...explicit[1] ? [join43(dir, explicit[1])] : []);
+  return [...raw2.flatMap((r) => r.startsWith("/") ? [normalize2(r.slice(1))] : roots.map((root) => normalize2(join43(root, r.replace(/^<rootDir>\/?/, ""))))), ...patchedTargets(cfg, text2).map((t) => normalize2(join43(dir, t)))];
 }
 function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
   const notes = new Set, ch = new Set(changed.map((c) => normalize2(c)));
@@ -11303,7 +11420,7 @@ function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
         if (spec.shared && t)
           try {
             relevant(spec.shared, t);
-          } catch {
+          } catch (x) {
             bad = true;
           }
         for (const c of referenced(cfg, t))
@@ -11311,7 +11428,7 @@ function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
       }
       const e = typeof spec.shared === "string" && spec.shared !== "tsconfig" ? "" : "{}";
       if (!bad && !same)
-        changedHere = !spec.shared || /conftest\.py$/.test(cfg) || relevant(spec.shared, texts[0] || e) !== relevant(spec.shared, texts[1] || e);
+        changedHere = !spec.shared || /conftest\.py$/i.test(cfg) || relevant(spec.shared, texts[0] || e) !== relevant(spec.shared, texts[1] || e);
     } catch {
       bad = true;
     }
@@ -11328,7 +11445,7 @@ function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
   }
   return [...notes];
 }
-var PKG_KEYS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, depGuard = (j) => DEP_MAPS.map((m) => Object.entries(j[m] ?? {}).filter(([k, v]) => RUNNER_DEP.test(k) || LOCAL_SPEC.test(String(v)))), KW, lines = (t) => t.split(`
+var PKG_KEYS, RAW_CONFIGS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, depGuard = (j) => DEP_MAPS.map((m) => Object.entries(j[m] ?? {}).filter(([k, v]) => RUNNER_DEP.test(k) || LOCAL_SPEC.test(String(v)))), KW, lines = (t) => t.split(`
 `).map((l) => l.trim()).filter((l) => l && !l.startsWith("#")), ESC, unesc = (s) => s.replace(/\\(?:u([0-9a-fA-F]{4})|U([0-9a-fA-F]{8})|([\s\S]))/g, (_m, u, U2, c) => {
   if (c !== undefined) {
     const e = ESC[c];
@@ -11348,26 +11465,29 @@ var PKG_KEYS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, depGuard = (j) =
   }
 }, headText = (dir, f) => {
   try {
-    return readFileSync34(join44(dir, f), "utf8");
+    return readFileSync34(join43(dir, f), "utf8");
   } catch {
     return "";
   }
 }, REFS, MAPPER, ROOT_DIR, QUOTED, EXT, gitOut = (dir, args, signal) => safeGit(dir, args, { timeout: 20000, maxBuffer: 64 << 20, ...signal ? { signal } : {} }), NON_SOURCE;
 var init_runner_config = __esm(() => {
   init_safe_git();
-  PKG_KEYS = ["scripts", "jest", "overrides", "resolutions", "imports", "pnpm", "mocha", "vitest", "ava", "c8", "nyc", "babel", "bun"];
-  RUNNER_CONFIGS = [
+  PKG_KEYS = ["scripts", "jest", "overrides", "resolutions", "imports", "pnpm", "mocha", "vitest", "ava", "c8", "nyc", "babel", "bun", "patchedDependencies"];
+  RAW_CONFIGS = [
     { re: /(^|\/)(conftest\.py|tox\.ini|bunfig\.toml|\.?pytest\.(ini|toml)|\.mocharc[\w.]*)$/ },
     { re: /(^|\/)(vitest|vite|jest)\.(config|workspace)\.[\w.]+$/ },
     { re: /(^|\/)\.cargo\/config(\.toml)?$/ },
     { re: /(^|\/)(babel\.config\.[\w.]+|\.babelrc(\.[\w]+)?|\.pnpmfile\.(cjs|mjs))$/ },
     { re: /(^|\/)package\.json$/, shared: PKG_KEYS },
+    { re: /(^|\/)(pnpm-workspace\.yaml|\.yarnrc\.yml|\.npmrc)$/ },
+    { re: /(^|\/)patches\/|\.patch$/ },
     { re: /(^|\/)pyproject\.toml$/, shared: /^\[tool\.pytest/ },
     { re: /(^|\/)setup\.cfg$/, shared: /^\[tool:pytest\]/ },
     { re: /(^|\/)go\.(mod|work)$/, shared: "go" },
     { re: /(^|\/)Cargo\.toml$/, shared: "cargo" },
     { re: /(^|\/)[jt]sconfig(\.[\w-]+)?\.json$/, shared: "tsconfig" }
   ];
+  RUNNER_CONFIGS = RAW_CONFIGS.map((s) => ({ ...s, re: new RegExp(s.re.source, "i") }));
   DEP_MAPS = ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"];
   RUNNER_DEP = /^(jest|vitest|mocha|ava|c8|nyc|pytest[\w-]*|@jest\/.*|ts-jest|babel-jest)$/;
   LOCAL_SPEC = /^(file|link|npm|workspace):/;
@@ -11384,10 +11504,10 @@ var init_runner_config = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
-import { execFileSync as execFileSync5 } from "child_process";
+import { execFileSync as execFileSync3 } from "child_process";
 import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync35, rmSync as rmSync13 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { join as join45 } from "path";
+import { join as join44 } from "path";
 import { basename as basename16 } from "path";
 function classifyAssertDelta(inp) {
   const f = basename16(inp.path);
@@ -11397,8 +11517,8 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync5(join45(tmpdir7(), "loki-ad-"));
-    const raw2 = execFileSync5("python3", ["-I", "-c", PY], {
+    cwd = mkdtempSync5(join44(tmpdir7(), "loki-ad-"));
+    const raw2 = execFileSync3("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
       env: process.env,
@@ -11428,7 +11548,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => safeGit(repoDir, ["show", `${ref}:${path}`]);
-    const head = headRef ? show(headRef) : readFileSync35(join45(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync35(join44(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -11637,17 +11757,17 @@ var init_runner_errors = __esm(() => {
 import { spawnSync as spawnSync3 } from "child_process";
 import { mkdtempSync as mkdtempSync6, realpathSync as realpathSync17, rmSync as rmSync14 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-import { basename as basename17, extname as extname2, join as join46 } from "path";
+import { basename as basename17, extname, join as join45 } from "path";
 function changedFilesNamed(out2, repoDir, changed) {
   return changed.filter((f) => {
-    if (out2.includes(f) || out2.includes(join46(repoDir, f)))
+    if (out2.includes(f) || out2.includes(join45(repoDir, f)))
       return true;
     const segs = f.split("/");
     if (suffixes(segs, 2).some((x) => x !== f && bounded(out2, x, "(?![\\w-])")))
       return true;
-    if (extname2(f) === ".go" && segs.length > 1 && suffixes(segs.slice(0, -1), 1).some((d) => new RegExp(`(?<=[\\w-])/${esc(d)}(?![\\w./-])`).test(out2)))
+    if (extname(f) === ".go" && segs.length > 1 && suffixes(segs.slice(0, -1), 1).some((d) => new RegExp(`(?<=[\\w-])/${esc(d)}(?![\\w./-])`).test(out2)))
       return true;
-    const stem = basename17(f, extname2(f));
+    const stem = basename17(f, extname(f));
     if (stem.length < 2 || stem === "index" || stem === "__init__")
       return false;
     return new RegExp(`(?<![\\w-])${esc(stem)}(?![\\w-])`).test(out2);
@@ -11751,7 +11871,7 @@ async function loadErrorIsHarnessOwned(i) {
     return false;
   if (i.args.some((a) => changed.includes(a.replace(/^\.\//, ""))))
     return false;
-  const dir = mkdtempSync6(join46(tmpdir8(), "e10-loadown-"));
+  const dir = mkdtempSync6(join45(tmpdir8(), "e10-loadown-"));
   const git3 = (args) => {
     safeGit(i.repoDir, args, { stdio: "ignore" });
   };
@@ -11783,7 +11903,7 @@ var init_load_owner = __esm(() => {
 });
 
 // ../../loki-ts/src/util/wall_owned.ts
-import { isAbsolute as isAbsolute5, join as join47, relative as relative5 } from "path";
+import { isAbsolute as isAbsolute5, join as join46, relative as relative4 } from "path";
 function failingLocations(raw2, cwd, repoDir) {
   const out2 = raw2.replace(ANSI2, "").replace(/\r\n?/g, `
 `), files = new Set;
@@ -11815,7 +11935,7 @@ function failingLocations(raw2, cwd, repoDir) {
   }
   if (errors2 === 0 || located !== errors2)
     return null;
-  return [...files].map((f) => relative5(repoDir, isAbsolute5(f) ? f : join47(cwd, f)));
+  return [...files].map((f) => relative4(repoDir, isAbsolute5(f) ? f : join46(cwd, f)));
 }
 function wallOwnedFailure(raw2, cwd, repoDir, wall) {
   const locs = failingLocations(raw2, cwd, repoDir);
@@ -11836,7 +11956,7 @@ import {
   writeFileSync as writeFileSync21,
   mkdirSync as mkdirSync18
 } from "fs";
-import { basename as basename18, dirname as dirname16, join as join48, resolve as resolve14 } from "path";
+import { basename as basename18, dirname as dirname16, join as join47, resolve as resolve14 } from "path";
 function readManifest(path) {
   if (!existsSync27(path)) {
     return null;
@@ -11895,7 +12015,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
     for (const child of children) {
       if (!matchPattern(name, child))
         continue;
-      const full = join48(rootDir, child);
+      const full = join47(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
@@ -11912,7 +12032,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
   }
   if (declared.length === 0) {
     for (const child of children) {
-      const full = join48(rootDir, child);
+      const full = join47(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
@@ -11923,7 +12043,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
       }
       if (!st.isDirectory())
         continue;
-      if (!existsSync27(join48(full, ".loki", "app.json")))
+      if (!existsSync27(join47(full, ".loki", "app.json")))
         continue;
       seen.add(full);
       out2.push(full);
@@ -11944,17 +12064,17 @@ function cacheKey(manifestPaths) {
 }
 function writeCache(targetDir, key, result) {
   try {
-    const cacheDir = join48(targetDir, ".loki", "state");
+    const cacheDir = join47(targetDir, ".loki", "state");
     mkdirSync18(cacheDir, { recursive: true });
-    const cachePath = join48(cacheDir, "project-graph.json");
+    const cachePath = join47(cacheDir, "project-graph.json");
     writeFileSync21(cachePath, JSON.stringify({ key, result }, null, 2), "utf8");
   } catch {}
 }
 function discoverProjectGraph(targetDir) {
   const absTarget = resolve14(targetDir);
-  const targetManifest = join48(absTarget, ".loki", "app.json");
+  const targetManifest = join47(absTarget, ".loki", "app.json");
   const parentDir = dirname16(absTarget);
-  const parentManifest = join48(parentDir, ".loki", "app.json");
+  const parentManifest = join47(parentDir, ".loki", "app.json");
   const examined = [];
   let chosenManifest = null;
   let chosenRoot = "";
@@ -11974,7 +12094,7 @@ function discoverProjectGraph(targetDir) {
   const members = resolveMembers(chosenRoot, declared, basename18(absTarget));
   const filtered = [];
   for (const m of members) {
-    const sibManifestPath = join48(m, ".loki", "app.json");
+    const sibManifestPath = join47(m, ".loki", "app.json");
     if (existsSync27(sibManifestPath)) {
       examined.push(sibManifestPath);
       const sibManifest = readManifest(sibManifestPath);
@@ -12105,7 +12225,7 @@ import { spawn as spawn7 } from "child_process";
 import { createHash as createHash14, randomBytes as randomBytes5 } from "crypto";
 import { existsSync as existsSync28, lstatSync as lstatSync10, mkdirSync as mkdirSync19, readdirSync as readdirSync16, readFileSync as readFileSync37, writeFileSync as writeFileSync22 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname17, isAbsolute as isAbsolute6, join as join49, normalize as normalize3, relative as relative6, sep as sep11 } from "path";
+import { dirname as dirname17, isAbsolute as isAbsolute6, join as join48, normalize as normalize3, relative as relative5, sep as sep10 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -12115,7 +12235,7 @@ function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join49(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join48(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -12128,10 +12248,10 @@ function checkScreens(runDir, screens) {
       return "evidence_screens entry is malformed";
     if (isAbsolute6(s.path) || normalize3(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join49(runDir, s.path);
+    const file = join48(runDir, s.path);
     let cur = runDir;
-    for (const seg of normalize3(s.path).split(sep11)) {
-      cur = join49(cur, seg);
+    for (const seg of normalize3(s.path).split(sep10)) {
+      cur = join48(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
@@ -12178,7 +12298,7 @@ async function waitUp(url, ms, signal) {
 }
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join49(repoDir, f);
+    const p = join48(repoDir, f);
     if (!existsSync28(p))
       continue;
     try {
@@ -12196,24 +12316,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join49(runDir, relDir, "e2e");
+    const dir = join48(runDir, relDir, "e2e");
     mkdirSync19(dir, { recursive: true });
-    writeFileSync22(join49(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync22(join49(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    writeFileSync22(join48(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync22(join48(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join49(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join48(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
       for (const e of readdirSync16(d, { withFileTypes: true })) {
-        const full = join49(d, e.name);
+        const full = join48(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join49(relDir, "e2e", relative6(dir, full)));
+          rels.push(join48(relDir, "e2e", relative5(dir, full)));
       }
     };
-    walk(join49(dir, "out"));
+    walk(join48(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -12292,15 +12412,15 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
     const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
-    const appDir = boot ? join49(repoDir, boot.boot.cwd) : repoDir;
-    const pkgPath = join49(appDir, "package.json");
+    const appDir = boot ? join48(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join48(appDir, "package.json");
     let script = null;
     if (!boot) {
       if (!existsSync28(pkgPath)) {
-        const subs = ["backend", "frontend"].filter((d) => existsSync28(join49(repoDir, d, "package.json")));
+        const subs = ["backend", "frontend"].filter((d) => existsSync28(join48(repoDir, d, "package.json")));
         const has = (d) => {
           try {
-            return pickScript(JSON.parse(readFileSync37(join49(repoDir, d, "package.json"), "utf8"))) !== null;
+            return pickScript(JSON.parse(readFileSync37(join48(repoDir, d, "package.json"), "utf8"))) !== null;
           } catch {
             return false;
           }
@@ -12334,20 +12454,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join49(runDir, "evidence");
+    const evRoot = join48(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
     mkdirSync19(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join49("evidence", randomBytes5(6).toString("hex"));
-      mkdirSync19(join49(runDir, rel0));
+      const rel0 = join48("evidence", randomBytes5(6).toString("hex"));
+      mkdirSync19(join48(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join49(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join49(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join49(runDir, rel)) && existsSync28(join49(runDir, rel)))
+        const rel = join48(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join48(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join48(runDir, rel)) && existsSync28(join48(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -12372,9 +12492,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join49(evRoot, randomBytes5(6).toString("hex"));
+    const hdir = join48(evRoot, randomBytes5(6).toString("hex"));
     mkdirSync19(hdir);
-    writeFileSync22(join49(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    writeFileSync22(join48(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -12404,11 +12524,11 @@ function receiptScreensProblem(receiptPath, receipt) {
   return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname17(receiptPath), receipt["evidence_screens"]);
 }
 var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", visualGateEnabled = (env = process.env) => env["LOKI_VISUAL_GATE"] === "1", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash14("sha256").update(readFileSync37(p)).digest("hex"), playwrightBin = (repoDir) => {
-  const bin = join49(repoDir, "node_modules", ".bin", "playwright");
+  const bin = join48(repoDir, "node_modules", ".bin", "playwright");
   return existsSync28(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
-  const d = join49(repoDir, "node_modules", "@playwright", "test");
-  return existsSync28(join49(d, "package.json")) ? d : null;
+  const d = join48(repoDir, "node_modules", "@playwright", "test");
+  return existsSync28(join48(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
@@ -12451,7 +12571,7 @@ var init_outbox = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/pr.ts
-import { join as join50 } from "path";
+import { join as join49 } from "path";
 var DEFAULT_PUSH_SH;
 var init_pr = __esm(() => {
   init_types();
@@ -12468,12 +12588,12 @@ var init_pr = __esm(() => {
   init_run_outputs();
   init_yaml_key();
   init_outbox();
-  DEFAULT_PUSH_SH = join50(REPO_ROOT, "autonomy/lib/engine10-push.sh");
+  DEFAULT_PUSH_SH = join49(REPO_ROOT, "autonomy/lib/engine10-push.sh");
 });
 
 // ../../loki-ts/src/util/pr_lessons.ts
 import { existsSync as existsSync29, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync7, readFileSync as readFileSync38, rmSync as rmSync15, writeFileSync as writeFileSync23 } from "fs";
-import { dirname as dirname18, join as join51 } from "path";
+import { dirname as dirname18, join as join50 } from "path";
 import { createHash as createHash15 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
@@ -12522,7 +12642,7 @@ function recordRunVerdict(repoDir, runId, verdict) {
   if (dirty)
     save(repoDir, lessons);
 }
-var lessonsPath = (repoDir) => join51(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
+var lessonsPath = (repoDir) => join50(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
 var init_pr_lessons = __esm(() => {
   init_atomic();
   init_safe_git();
@@ -12657,10 +12777,10 @@ var init_providers = __esm(() => {
 
 // ../../loki-ts/src/runner/router/route_record.ts
 import { existsSync as existsSync31, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readFileSync as readFileSync40, writeFileSync as writeFileSync24 } from "fs";
-import { join as join52 } from "path";
+import { join as join51 } from "path";
 function loadRouteRecord(runDir) {
   try {
-    const p = join52(runDir, ROUTE_RECORD_FILE);
+    const p = join51(runDir, ROUTE_RECORD_FILE);
     if (!existsSync31(p) || !lstatSync11(p).isFile())
       return;
     const v = JSON.parse(readFileSync40(p, "utf8"));
@@ -12789,7 +12909,7 @@ var init_worker = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/package_suite.ts
-import { join as join53 } from "path";
+import { join as join52 } from "path";
 async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   const api = loadProjectApi(repoDir);
   if (!isMultiRoot(api))
@@ -12800,7 +12920,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   for (const pkg of withTests) {
     const tc = pkg.commands.test, name = `full suite: ${pkg.name}`, cmd = `(cd ${tc.cwd} && ${tc.cmd})`;
     const started = Date.now();
-    const r = await run(["bash", "-c", tc.cmd], { cwd: join53(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const r = await run(["bash", "-c", tc.cmd], { cwd: join52(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
     const duration_s = (Date.now() - started) / 1000;
     if (signal.aborted) {
       checks.push({ name, cmd, result: "not_run", duration_s });
@@ -12809,7 +12929,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
     }
     const out2 = `${r.stdout}
 ${r.stderr}`;
-    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join53(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join52(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
     if (lr) {
       checks.push({ name, cmd, result: "not_run", duration_s });
       notProven.add(`${lr} (${name}; harness-owned)`);
@@ -12843,7 +12963,7 @@ __export(exports_deep, {
   DEFAULT_PUSH_SH: () => DEFAULT_PUSH_SH2
 });
 import { existsSync as existsSync32, mkdirSync as mkdirSync22, writeFileSync as writeFileSync25 } from "fs";
-import { join as join54 } from "path";
+import { join as join53 } from "path";
 async function runFullSuite(ctx, signal, opts, checks, notProven) {
   if (await runPackageSuites(ctx.repoDir, signal, { path: opts.path, timeoutMs: opts.fullSuiteTimeoutMs ?? FULL_SUITE_TIMEOUT_MS, baseSha: ctx.baseSha }, checks, notProven))
     return;
@@ -12940,7 +13060,7 @@ async function runSecretScan(ctx, changed, opts, checks, notProven) {
   }
   const inline = 'script="$1"; shift; . "$script" || exit 3; hit=0; for f in "$@"; do if _commit_scan_secret_file "$f" || _commit_path_looks_secret "$f"; then printf "%s\\n" "$f"; hit=1; fi; done; exit "$hit"';
   const started = Date.now();
-  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join54(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
+  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join53(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
   const durationS = (Date.now() - started) / 1000;
   if (r.exitCode === 3) {
     checks.push({ name, cmd: "secret-scan.sh", result: "not_run", duration_s: durationS });
@@ -12981,7 +13101,7 @@ async function postResults(ctx, opts, checks, notProven, statusState) {
   const prNumber = prUrl ? PR_NUMBER_RE.exec(prUrl)?.[1] : undefined;
   if (prNumber) {
     mkdirSync22(ctx.runDir, { recursive: true });
-    const bodyFile = join54(ctx.runDir, "deep-comment.md");
+    const bodyFile = join53(ctx.runDir, "deep-comment.md");
     writeFileSync25(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
     const commentResult = await run(["bash", scriptPath, ...commentArgv(prNumber, bodyFile)], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
     if (commentResult.exitCode !== 0)
@@ -13035,7 +13155,7 @@ async function runDeep(ctx, signal, opts = {}) {
   const sig = signReceipt(`${ctx.runId}-deep`, addendumSha256);
   const addendum = { ...addendumBody, addendum_sha256: addendumSha256, verification: { jwt: sig.jwt, kid: sig.kid } };
   mkdirSync22(ctx.runDir, { recursive: true });
-  writeFileSync25(join54(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
+  writeFileSync25(join53(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
 `);
   const pushNotProven = await postResults(ctx, opts, checks, notProvenList, statusState);
   const allNotProven = [...notProvenList, ...pushNotProven];
@@ -13080,18 +13200,18 @@ var init_deep = __esm(() => {
 // ../../loki-ts/src/engine10/stages/verify.ts
 import { existsSync as existsSync33, mkdtempSync as mkdtempSync8, realpathSync as realpathSync18, rmSync as rmSync16 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
-import { dirname as dirname20, isAbsolute as isAbsolute7, join as join55, relative as relative7 } from "path";
+import { dirname as dirname20, isAbsolute as isAbsolute7, join as join54, relative as relative6 } from "path";
 function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
   const inRepo = (p) => {
     try {
-      const r = relative7(realpathSync18(repoDir), realpathSync18(p));
+      const r = relative6(realpathSync18(repoDir), realpathSync18(p));
       return r !== "" && !r.startsWith("..") && !isAbsolute7(r);
     } catch {
       return false;
     }
   };
   const venvEnv = process.env["VIRTUAL_ENV"];
-  const project = [join55(repoDir, ".venv", "bin", bin), join55(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join55(venvEnv, "bin", bin)] : []].find(existsSync33);
+  const project = [join54(repoDir, ".venv", "bin", bin), join54(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join54(venvEnv, "bin", bin)] : []].find(existsSync33);
   return project ? [project, "project"] : [Bun.which(fallback) ? fallback : lastResort, "system"];
 }
 function runnerCmd(t, repoDir) {
@@ -13204,7 +13324,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   const sus = pairs.filter(({ c }) => rel.has(c.name) && c.result === "pass");
   if (!(un.some(({ c }) => c.result === "fail" && c.ids?.length) || sus.length) || signal.aborted)
     return out2;
-  const dir = mkdtempSync8(join55(tmpdir9(), "e10-base-"));
+  const dir = mkdtempSync8(join54(tmpdir9(), "e10-base-"));
   const git3 = (args) => {
     safeGit(ctx.repoDir, args, { stdio: "ignore", repoDrivers: true });
   };
@@ -13242,7 +13362,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   return out2;
 }
 function isLokiModeRepo(repoDir) {
-  return existsSync33(join55(repoDir, "scripts", "select-tests.sh"));
+  return existsSync33(join54(repoDir, "scripts", "select-tests.sh"));
 }
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
@@ -13259,9 +13379,9 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   }
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
-    if (existsSync33(join55(g.cwd, "tsconfig.json")))
+    if (existsSync33(join54(g.cwd, "tsconfig.json")))
       await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
-    if (ESLINT_CONFIGS.some((f) => existsSync33(join55(g.cwd, f))))
+    if (ESLINT_CONFIGS.some((f) => existsSync33(join54(g.cwd, f))))
       await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
   }
 }
@@ -13319,7 +13439,7 @@ var init_verify = __esm(() => {
       const impacted = ctx.tests.impacted(map, changed);
       const changedTestFiles = map.tests.filter((t) => changed.includes(t.path));
       const wall = ctx.outputs().wall ?? {};
-      const wallPaths = new Set((wall.files ?? []).map((f) => isAbsolute7(f.path) ? relative7(ctx.repoDir, f.path) : f.path));
+      const wallPaths = new Set((wall.files ?? []).map((f) => isAbsolute7(f.path) ? relative6(ctx.repoDir, f.path) : f.path));
       const wallTests = map.tests.filter((t) => wallPaths.has(t.path));
       const intake = ctx.outputs().intake, relevant2 = ctx.tests.impacted(map, namedFiles(intake?.task ?? "", loadRepoMap(intake?.repomap_ref)));
       const tests = dedupeTests([...impacted, ...changedTestFiles, ...wallTests, ...relevant2]);
@@ -13417,7 +13537,7 @@ var init_verify = __esm(() => {
 
 // ../../loki-ts/src/project_model/conventions.ts
 import { existsSync as existsSync34, readdirSync as readdirSync17, readFileSync as readFileSync41 } from "fs";
-import { dirname as dirname21, join as join56 } from "path";
+import { dirname as dirname21, join as join55 } from "path";
 function parseJsonc(text2) {
   let out2 = "", i = 0;
   while (i < text2.length) {
@@ -13452,7 +13572,7 @@ function moduleOf(file, depth = 0) {
   const ext = typeof j.extends === "string" ? j.extends : null;
   if (!ext || !ext.startsWith("."))
     return null;
-  const next = join56(dirname21(file), ext.endsWith(".json") ? ext : `${ext}.json`);
+  const next = join55(dirname21(file), ext.endsWith(".json") ? ext : `${ext}.json`);
   return existsSync34(next) ? moduleOf(next, depth + 1) : null;
 }
 function readPackageConventions(pkgDir, runner = null) {
@@ -13464,13 +13584,13 @@ function readPackageConventions(pkgDir, runner = null) {
   }
   let packageType = null, tsModule = null;
   for (const n2 of names) {
-    const j = readJson4(join56(pkgDir, n2));
+    const j = readJson4(join55(pkgDir, n2));
     if (!j)
       continue;
     if (packageType === null && typeof j.type === "string" && typeof j.name === "string")
       packageType = j.type;
     if (tsModule === null && j.compilerOptions !== undefined)
-      tsModule = moduleOf(join56(pkgDir, n2));
+      tsModule = moduleOf(join55(pkgDir, n2));
   }
   if (packageType === null && tsModule === null)
     return null;
@@ -13504,13 +13624,13 @@ var init_conventions = () => {};
 import { spawnSync as spawnSync4 } from "child_process";
 import { existsSync as existsSync35, mkdirSync as mkdirSync23, mkdtempSync as mkdtempSync9, readFileSync as readFileSync42, readdirSync as readdirSync18, realpathSync as realpathSync19, rmSync as rmSync17, writeFileSync as writeFileSync26 } from "fs";
 import { tmpdir as tmpdir10 } from "os";
-import { dirname as dirname22, isAbsolute as isAbsolute8, join as join57, relative as relative8 } from "path";
+import { dirname as dirname22, isAbsolute as isAbsolute8, join as join56, relative as relative7 } from "path";
 function pytestCollectionIsRed(output, repoDir) {
   if (/ModuleNotFoundError/.test(output))
     return false;
   const real2 = (p) => {
     try {
-      return realpathSync19(isAbsolute8(p) ? p : join57(repoDir, p));
+      return realpathSync19(isAbsolute8(p) ? p : join56(repoDir, p));
     } catch {
       return null;
     }
@@ -13547,7 +13667,7 @@ function pytestCollectionIsRed(output, repoDir) {
 }
 function moduleUnderRepo(repoDir, name) {
   const rel = name.replace(/\./g, "/");
-  return existsSync35(join57(repoDir, `${rel}.py`)) || existsSync35(join57(repoDir, rel, "__init__.py"));
+  return existsSync35(join56(repoDir, `${rel}.py`)) || existsSync35(join56(repoDir, rel, "__init__.py"));
 }
 function pytestExit1IsRed(output) {
   if (/^!+ _pytest\.outcomes\.Exit\b/m.test(output))
@@ -13645,7 +13765,7 @@ ${acceptance.map((a) => `Acceptance: ${a}`).join(`
 function loadTaskText(ctx, fromPrior) {
   if (fromPrior)
     return fromPrior;
-  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join57(ctx.runDir, "issue.json");
+  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join56(ctx.runDir, "issue.json");
   if (existsSync35(issueJsonPath)) {
     try {
       const issue = JSON.parse(readFileSync42(issueJsonPath, "utf8"));
@@ -13660,7 +13780,7 @@ function loadTaskText(ctx, fromPrior) {
 }
 function wallTargetDir(repoDir, existingTests) {
   const first = existingTests[0];
-  return first ? join57(repoDir, dirname22(first.path)) : join57(repoDir, "tests");
+  return first ? join56(repoDir, dirname22(first.path)) : join56(repoDir, "tests");
 }
 function guessRunner(fileName, runners) {
   if (fileName.endsWith(".py"))
@@ -13690,12 +13810,12 @@ async function wallAuthor(ctx, signal) {
     return done({ status: "skipped", data: { size: sz.size, files: [], no_runner: true }, reason: "no runnable test command detected: the Wall cannot write a runnable check" });
   const tree = prior.intake?.tree;
   const repomapText = repoMapText(ctx.repoDir, tree, repomapRef, WALL_MAP_MAX_LINES);
-  const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative8(ctx.repoDir, targetDir)}/x`);
-  const conv2 = readPackageConventions(join57(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
-  const cwd = mkdtempSync9(join57(tmpdir10(), "loki-e15-wall-"));
+  const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative7(ctx.repoDir, targetDir)}/x`);
+  const conv2 = readPackageConventions(join56(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
+  const cwd = mkdtempSync9(join56(tmpdir10(), "loki-e15-wall-"));
   const wm = wallManifestFor(ctx.repoDir, tree, task);
   for (const [n2, c] of [["task.md", task], ["repomap.txt", repomapText], ...wm ? [["wall_manifest.txt", wm.text]] : []])
-    writeFileSync26(join57(cwd, n2), c, "utf8");
+    writeFileSync26(join56(cwd, n2), c, "utf8");
   const session = await ctx.sessions.run({
     stage: "wall",
     brief: buildWallBrief(task, repomapText, runners, !!wm, conventionsBrief(conv2), unitSpec()?.acceptance ?? []),
@@ -13710,15 +13830,15 @@ async function wallAuthor(ctx, signal) {
     rmSync17(cwd, { recursive: true, force: true });
     return done({ status: "failed", data: {}, reason: "wall session aborted, killed, or timed out", killed: true });
   }
-  const all = readdirSync18(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !conventionViolation(conv2, n2, readFileSync42(join57(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
-  const sealedDir = join57(ctx.runDir, "wall");
+  const all = readdirSync18(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !conventionViolation(conv2, n2, readFileSync42(join56(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
+  const sealedDir = join56(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync23(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync42(join57(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
-    writeFileSync26(join57(sealedDir, name), content, "utf8");
+    const content = readFileSync42(join56(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
+    writeFileSync26(join56(sealedDir, name), content, "utf8");
     if (bad)
       discarded.push({ file: name, reason: `${bad}; wall test did not compile under the package config` });
     else
@@ -13738,18 +13858,18 @@ function installWall(ctx, a, baseDir, opts = {}) {
     const content = contents.get(name);
     if (content === undefined)
       continue;
-    const dest = join57(targetDir, name), runner = guessRunner(name, runners);
+    const dest = join56(targetDir, name), runner = guessRunner(name, runners);
     writeFileSync26(dest, content, "utf8");
     sealedFiles.push({ path: dest, sha256: sha2562(content) });
     readOnlyFiles.push({ path: dest, content });
     if (runner)
-      wallTests.push({ runner, path: relative8(ctx.repoDir, dest) });
+      wallTests.push({ runner, path: relative7(ctx.repoDir, dest) });
   }
   ctx.wallSealed = true;
   ctx.emit("wall.sealed", "wall", { files: sealedFiles, ...a.manifestSha256 ? { manifest_sha256: a.manifestSha256 } : {} });
   const baseRunner = opts.baseRunner ?? new RealBaseTestRunner, baseRun = { pass: 0, fail: 0, not_run: discarded.length }, notRunFiles = [];
   for (const t of wallTests) {
-    const r = baseRunner.run(baseDir, [t]), abs = join57(ctx.repoDir, t.path);
+    const r = baseRunner.run(baseDir, [t]), abs = join56(ctx.repoDir, t.path);
     baseRun.pass += r.pass;
     baseRun.fail += r.fail;
     baseRun.not_run += r.not_run ?? 0;
@@ -13804,14 +13924,14 @@ var init_wall = __esm(() => {
 
 // ../../loki-ts/src/e10ext/discard.ts
 import { chmodSync as chmodSync5, closeSync as closeSync9, lstatSync as lstatSync12, mkdirSync as mkdirSync24, openSync as openSync9, readFileSync as readFileSync43, realpathSync as realpathSync20, rmdirSync, unlinkSync as unlinkSync6, writeFileSync as writeFileSync27 } from "fs";
-import { dirname as dirname23, join as join58, relative as relative9, sep as sep12 } from "path";
+import { dirname as dirname23, join as join57, relative as relative8, sep as sep11 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync20(repoDir), fp = join58(root, f), rel = relative9(root, dirname23(fp));
+  const root = realpathSync20(repoDir), fp = join57(root, f), rel = relative8(root, dirname23(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
-  for (const part of rel === "" ? [] : rel.split(sep12)) {
-    cur = join58(cur, part);
+  for (const part of rel === "" ? [] : rel.split(sep11)) {
+    cur = join57(cur, part);
     let st2;
     try {
       st2 = lstatSync12(cur);
@@ -13866,7 +13986,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join58(repoDir, f);
+    const fp = join57(repoDir, f);
     try {
       if (v.startsWith("!")) {
         const st = lstatSync12(fp);
@@ -13885,7 +14005,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync12(join58(repoDir, f));
+          const l = lstatSync12(join57(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -13961,9 +14081,9 @@ var init_scope2 = __esm(() => {
 // ../../loki-ts/src/council/role_agents.ts
 import { existsSync as existsSync36, readdirSync as readdirSync19, readFileSync as readFileSync44 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join59 } from "path";
+import { join as join58 } from "path";
 function agentDirs(repoDir, env = process.env) {
-  return [env["LOKI_AGENTS_PROJECT_DIR"] || join59(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join59(env["XDG_CONFIG_HOME"] || join59(homedir9(), ".config"), "loki", "agents")];
+  return [env["LOKI_AGENTS_PROJECT_DIR"] || join58(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join58(env["XDG_CONFIG_HOME"] || join58(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
   const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync44(file, "utf8"));
@@ -13991,7 +14111,7 @@ function loadRoleAgent(repoDir, role, env = process.env) {
     const ordered = [...names.filter((n2) => n2 === `${role}.md`), ...names.filter((n2) => n2 !== `${role}.md`)];
     for (const n2 of ordered) {
       try {
-        const a = parseAgent(join59(d, n2), n2.slice(0, -3));
+        const a = parseAgent(join58(d, n2), n2.slice(0, -3));
         if (a && a.role === role)
           return a;
       } catch {}
@@ -14009,10 +14129,10 @@ var init_role_agents = __esm(() => {
 
 // ../../loki-ts/src/util/run_summary.ts
 import { existsSync as existsSync37, mkdirSync as mkdirSync25, readFileSync as readFileSync45, renameSync as renameSync11, statSync as statSync18, writeFileSync as writeFileSync28 } from "fs";
-import { join as join60 } from "path";
+import { join as join59 } from "path";
 function readRiskRecord(repoDir, sinceMs = 0) {
   try {
-    const p = join60(repoDir, ".loki", "state", "risk-tier.json");
+    const p = join59(repoDir, ".loki", "state", "risk-tier.json");
     if (statSync18(p).mtimeMs < sinceMs)
       return null;
     const r = JSON.parse(readFileSync45(p, "utf8"));
@@ -14030,7 +14150,7 @@ var init_run_summary = __esm(() => {
 
 // ../../loki-ts/src/engine10/stages/xreview.ts
 import { existsSync as existsSync38, readFileSync as readFileSync46 } from "fs";
-import { join as join61 } from "path";
+import { join as join60 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
   return RANK3[ceiling] < RANK3[verdict] ? ceiling : verdict;
@@ -14043,7 +14163,7 @@ function explicitReview(repoDir, env) {
   if (flag && isOff(ev))
     return "off";
   for (const f of ["loki.yaml", "loki.yml"]) {
-    const p = join61(repoDir, f);
+    const p = join60(repoDir, f);
     if (!existsSync38(p))
       continue;
     try {
@@ -14212,7 +14332,7 @@ See also: loki cost --detail (what a run ALREADY spent)
 
 // ../../loki-ts/src/features/contract.ts
 import { existsSync as existsSync39, lstatSync as lstatSync13, mkdirSync as mkdirSync26, readFileSync as readFileSync47, rmSync as rmSync18, writeFileSync as writeFileSync29 } from "fs";
-import { dirname as dirname26, join as join62 } from "path";
+import { dirname as dirname26, join as join61 } from "path";
 import { createHash as createHash16 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
@@ -14244,7 +14364,7 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join62(repoDir, ".loki", "contract.json");
+  return join61(repoDir, ".loki", "contract.json");
 }
 function readContract(repoDir) {
   const p = contractPath(repoDir);
@@ -14329,16 +14449,16 @@ var init_contract = __esm(() => {
   init_safe_git();
   STOP2 = new Set(["the", "and", "for", "with", "that", "this", "must", "should", "shall", "when", "then", "are", "was", "all", "any", "can", "not", "has", "have", "from", "into", "each", "user", "users"]);
   MAX_CONTRACT_BYTES = 1024 * 1024;
-  REQ_MAP_REL = join62(".loki", "state", "requirements-map.json");
+  REQ_MAP_REL = join61(".loki", "state", "requirements-map.json");
   REQ_STOP = new Set(["with", "that", "this", "from", "have", "will", "should", "must", "when", "then", "into", "each", "every", "user", "users", "page", "able", "allow", "support", "ensure", "using", "their", "there", "which", "shall"]);
 });
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash17 } from "crypto";
 import { existsSync as existsSync40, mkdirSync as mkdirSync27, readdirSync as readdirSync20, readFileSync as readFileSync48, renameSync as renameSync12, statSync as statSync19, writeFileSync as writeFileSync30 } from "fs";
-import { dirname as dirname27, join as join63 } from "path";
+import { dirname as dirname27, join as join62 } from "path";
 function sealGroup(runDir, rh) {
-  const manifestPath = join63(runDir, "group", "manifest.json");
+  const manifestPath = join62(runDir, "group", "manifest.json");
   if (!existsSync40(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
@@ -14363,7 +14483,7 @@ function sealGroup(runDir, rh) {
       return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join63(unitsDir(runDir), id), rp = join63(dir, "receipt.json"), ep = join63(dir, "events.jsonl");
+    const dir = join62(unitsDir(runDir), id), rp = join62(dir, "receipt.json"), ep = join62(dir, "events.jsonl");
     let bytes;
     try {
       bytes = readFileSync48(rp);
@@ -14408,7 +14528,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync40(join63(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+    return existsSync40(join62(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
   if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
@@ -14420,7 +14540,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join63(unitsDir(runDir), id), rp = join63(dir, "receipt.json"), ep = join63(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join62(unitsDir(runDir), id), rp = join62(dir, "receipt.json"), ep = join62(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
@@ -14456,7 +14576,7 @@ function compositeVerdict(childVerdicts) {
   const failed2 = childVerdicts.filter((v) => v === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v)).length;
   return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed2, allUnitsPass: childVerdicts.every((v) => PASSING.has(v)) });
 }
-var ID_RE, PASSING, sha3 = (b) => createHash17("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join63(runDir, "group", "units"), readJson5 = (p) => {
+var ID_RE, PASSING, sha3 = (b) => createHash17("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join62(runDir, "group", "units"), readJson5 = (p) => {
   try {
     return JSON.parse(readFileSync48(p, "utf8"));
   } catch {
@@ -14477,7 +14597,7 @@ var init_seal_group = __esm(() => {
 
 // ../../loki-ts/src/supply/supply_guard.ts
 import { existsSync as existsSync41, readFileSync as readFileSync49, statSync as statSync20 } from "fs";
-import { basename as basename21, join as join64 } from "path";
+import { basename as basename21, join as join63 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -14492,7 +14612,7 @@ function isManifestPath(path) {
   return MANIFESTS.test(basename21(path));
 }
 function readDeclared(repoDir) {
-  const p = join64(repoDir, ".loki", DECLARED_FILE);
+  const p = join63(repoDir, ".loki", DECLARED_FILE);
   if (!existsSync41(p))
     return { deps: [], problem: null };
   try {
@@ -14518,7 +14638,7 @@ function readDeclared(repoDir) {
   }
 }
 function readAllowlist(repoDir) {
-  const p = join64(repoDir, ".loki", "supply-allowlist");
+  const p = join63(repoDir, ".loki", "supply-allowlist");
   if (!existsSync41(p))
     return new Set;
   try {
@@ -14563,7 +14683,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "npm") {
     if (privateUrlList([env["npm_config_registry"] ?? "", env["NPM_CONFIG_REGISTRY"] ?? ""]))
       return true;
-    return files(join64(repoDir, ".npmrc"), home ? join64(home, ".npmrc") : "").some((t) => t.split(`
+    return files(join63(repoDir, ".npmrc"), home ? join63(home, ".npmrc") : "").some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:(@[^:\s]+):)?registry\s*=\s*(\S+)/.exec(l);
       return !!m && privateUrl(m[2]) && (m[1] === undefined || name.startsWith(`${m[1]}/`));
@@ -14572,7 +14692,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "pypi") {
     if (privateUrlList([env["PIP_INDEX_URL"] ?? "", env["PIP_EXTRA_INDEX_URL"] ?? ""]))
       return true;
-    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join64(home, ".config", "pip", "pip.conf") : "", home ? join64(home, ".pip", "pip.conf") : "", join64(repoDir, "pip.conf")];
+    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join63(home, ".config", "pip", "pip.conf") : "", home ? join63(home, ".pip", "pip.conf") : "", join63(repoDir, "pip.conf")];
     return files(...cfg).some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:extra-)?index-url\s*[=:]\s*(.+)$/.exec(l);
@@ -14582,7 +14702,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "cargo") {
     if (Object.keys(env).some((k) => /^CARGO_REGISTRIES_.+_INDEX$/.test(k) || /^CARGO_SOURCE_/.test(k)))
       return true;
-    return files(join64(repoDir, ".cargo", "config.toml"), join64(repoDir, ".cargo", "config"), home ? join64(home, ".cargo", "config.toml") : "", home ? join64(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
+    return files(join63(repoDir, ".cargo", "config.toml"), join63(repoDir, ".cargo", "config"), home ? join63(home, ".cargo", "config.toml") : "", home ? join63(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
   }
   if (eco === "go") {
     const gp = goEnv["GOPROXY"] ?? env["GOPROXY"] ?? "";
@@ -14722,7 +14842,7 @@ var init_supply_guard = __esm(() => {
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash18 } from "crypto";
 import { existsSync as existsSync42, readdirSync as readdirSync21, mkdirSync as mkdirSync28, readFileSync as readFileSync50, writeFileSync as writeFileSync31 } from "fs";
-import { basename as basename22, isAbsolute as isAbsolute9, join as join65, relative as relative10 } from "path";
+import { basename as basename22, isAbsolute as isAbsolute9, join as join64, relative as relative9 } from "path";
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
   const capped = collapsed.length > 500 ? `${collapsed.slice(0, 500)}...` : collapsed;
@@ -14797,7 +14917,7 @@ function renderReceiptMd(r) {
 `);
 }
 var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash18("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], receiptRel = (ctx) => {
-  const r = relative10(ctx.repoDir, join65(ctx.runDir, "receipt.json"));
+  const r = relative9(ctx.repoDir, join64(ctx.runDir, "receipt.json"));
   return r.startsWith("..") || isAbsolute9(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, sealStage;
 var init_seal = __esm(() => {
@@ -14906,7 +15026,7 @@ var init_seal = __esm(() => {
       if (wallNotRun > 0) {
         try {
           const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename22(String(f.path))));
-          for (const n2 of readdirSync21(join65(ctx.runDir, "wall")).sort())
+          for (const n2 of readdirSync21(join64(ctx.runDir, "wall")).sort())
             if (!kept.has(n2))
               notProven.add(`wall test discarded: ${n2} (not_run)`);
         } catch {}
@@ -14969,19 +15089,19 @@ var init_seal = __esm(() => {
       for (const [s, d] of Object.entries(o))
         if (typeof d?.duration_s === "number")
           stages[s] = d.duration_s;
-      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join65(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
+      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join64(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
       const iterIds = Object.values(o).flatMap((d) => [...strs2(d?.iteration_ids), ...strs2([d?.iteration_id])]);
       if (iterIds.length === 0)
         notProven.add("cost not measured (no iteration ids recorded)");
       const cost = ctx.cost.read(ctx.repoDir, iterIds);
       if (cost.unmetered)
         notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-      const eventsPath = join65(ctx.runDir, "events.jsonl");
+      const eventsPath = join64(ctx.runDir, "events.jsonl");
       const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
       const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
       if (wallFiles.length > 0 && wallPassed === null)
         notProven.add("wall result not recorded by verify");
-      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join65(ctx.repoDir, ".loki"), liveArchivedCosts(join65(ctx.repoDir, ".loki"), iterIds, UNMETERED)).router : undefined), ctx.model);
+      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join64(ctx.repoDir, ".loki"), liveArchivedCosts(join64(ctx.repoDir, ".loki"), iterIds, UNMETERED)).router : undefined), ctx.model);
       if (routeBlock)
         for (const l of routeNotProven(routeBlock))
           notProven.add(l);
@@ -15045,11 +15165,17 @@ var init_seal = __esm(() => {
       }
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
       mkdirSync28(ctx.runDir, { recursive: true });
-      const path = join65(ctx.runDir, "receipt.json");
+      const path = join64(ctx.runDir, "receipt.json");
       writeFileSync31(path, JSON.stringify(receipt, null, 2) + `
 `);
-      writeFileSync31(join65(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      writeFileSync31(join64(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ranModel(o.implement, ctx.model, o.fix), verdict, cost.usd, cost.unmetered === true, totalS);
+      try {
+        hooks.sealed?.(ctx.runDir, JSON.parse(JSON.stringify(receipt), (_k, v) => v && typeof v === "object" ? Object.freeze(v) : v));
+      } catch (e) {
+        process.stderr.write(`ai-bom skipped: ${e.message}
+`);
+      }
       const signed = sig.jwt !== null;
       const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...mp ? { mutation_line: mp.line } : {}, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} };
       try {
@@ -15155,13 +15281,13 @@ var init_receipt_dsse = () => {};
 
 // ../../loki-ts/src/util/composite_seal.ts
 import { existsSync as existsSync43, readFileSync as readFileSync52 } from "fs";
-import { basename as basename23, dirname as dirname29, join as join66 } from "path";
+import { basename as basename23, dirname as dirname29, join as join65 } from "path";
 function logProblem(runDir, integ) {
   if (typeof integ["log_sha256"] !== "string")
     return null;
   let b;
   try {
-    b = readFileSync52(join66(runDir, "integration.log"));
+    b = readFileSync52(join65(runDir, "integration.log"));
   } catch {
     return "integration.log is missing but integration.json records its hash";
   }
@@ -15184,13 +15310,13 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("body malformed");
   let ibytes;
   try {
-    ibytes = readFileSync52(join66(runDir, "integration.json"));
+    ibytes = readFileSync52(join65(runDir, "integration.json"));
   } catch {
     return bad("integration.json missing");
   }
   if (sha3(ibytes) !== receipt["integration_sha256"])
     return bad("integration.json does not match its recorded hash");
-  const integ = readJson5(join66(runDir, "integration.json"));
+  const integ = readJson5(join65(runDir, "integration.json"));
   if (!isObj10(integ) || !isObj10(integ["outcomes"]))
     return bad("integration.json has no outcomes");
   const iprob = integrationProblem(integ);
@@ -15220,7 +15346,7 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
       return bad(`child ${text2(repo, 80) || "?"} has an invalid receipt path`);
     if (outcomes[repo] !== "ok")
       return bad(`child ${text2(repo, 80)} did not finish ok in integration.json`);
-    const rp = join66(runDir, rel);
+    const rp = join65(runDir, rel);
     let bytes;
     try {
       bytes = readFileSync52(rp);
@@ -15273,7 +15399,7 @@ var init_keys_cmd = __esm(() => {
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
 import { existsSync as existsSync44, readFileSync as readFileSync53, renameSync as renameSync13, statSync as statSync22, writeFileSync as writeFileSync32 } from "fs";
-import { basename as basename24, dirname as dirname30, join as join67 } from "path";
+import { basename as basename24, dirname as dirname30, join as join66 } from "path";
 import { createHash as createHash19, createPublicKey as createPublicKey4, verify as verify4 } from "crypto";
 function pubFor(kid, given) {
   if (given)
@@ -15325,7 +15451,7 @@ function checkEventLog(receiptPath, receipt) {
     const claims = st !== null && typeof st === "object" && Object.keys(st).length > 0;
     return claims ? "the receipt records stages but binds the empty-log hash, so no events.jsonl can back it (missing, empty or non-empty); the receipt is forged or was sealed without a log. Re-run the task to produce a fresh receipt" : null;
   }
-  const path = join67(dirname30(receiptPath), "events.jsonl");
+  const path = join66(dirname30(receiptPath), "events.jsonl");
   if (!existsSync44(path))
     return "events.jsonl is missing";
   const raw2 = readFileSync53(path, "utf8"), events2 = readEvents(path), lines2 = raw2.split(`
@@ -15344,7 +15470,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join67(dirname30(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join66(dirname30(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -15455,7 +15581,7 @@ var init_verify_cmd = __esm(() => {
 
 // src/server/app.ts
 import { existsSync as existsSync46, readFileSync as readFileSync56, statSync as statSync23 } from "fs";
-import { join as join70, resolve as resolve15, sep as sep14 } from "path";
+import { join as join69, resolve as resolve15, sep as sep13 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -21219,9 +21345,9 @@ function writeAnswer(dir, source, run, answer) {
 }
 
 // src/server/diffstat.ts
-import { execFileSync } from "child_process";
+init_safe_git();
 import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, realpathSync as realpathSync2 } from "fs";
-import { join as join4, sep as sep2 } from "path";
+import { join as join5, sep as sep2 } from "path";
 var ID2 = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 var SHA = /^[0-9a-f]{40,64}$/;
 var MAX_RECEIPT_BYTES = 1024 * 1024;
@@ -21245,7 +21371,7 @@ function parseNumstat(out) {
 function readReceipt(runDir) {
   let fd;
   try {
-    fd = openSync2(join4(runDir, "receipt.json"), "r");
+    fd = openSync2(join5(runDir, "receipt.json"), "r");
   } catch {
     return null;
   }
@@ -21276,12 +21402,12 @@ function diffStatFor(db, source, run) {
   let repoReal, runsRoot, runDir;
   try {
     repoReal = realpathSync2(repo.p);
-    runsRoot = realpathSync2(join4(repoReal, ".loki", "runs"));
-    runDir = realpathSync2(join4(runsRoot, run));
+    runsRoot = realpathSync2(join5(repoReal, ".loki", "runs"));
+    runDir = realpathSync2(join5(runsRoot, run));
   } catch {
     return null;
   }
-  if (runDir !== join4(runsRoot, run) || !runDir.startsWith(runsRoot + sep2))
+  if (runDir !== join5(runsRoot, run) || !runDir.startsWith(runsRoot + sep2))
     return null;
   const r = readReceipt(runDir);
   const base = typeof r?.base_sha === "string" ? r.base_sha : "", head = typeof r?.head_sha === "string" ? r.head_sha : "";
@@ -21293,7 +21419,7 @@ function diffStatFor(db, source, run) {
     return null;
   try {
     diffStatGitRuns.n++;
-    const out = execFileSync("git", ["-C", repoReal, "-c", "core.quotePath=false", "diff", "--numstat", "--no-renames", `${base}..${head}`, "--"], { env: gitEnv(), timeout: GIT_TIMEOUT_MS, maxBuffer: 8 * 1024 * 1024, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = safeGit(repoReal, ["-c", "core.quotePath=false", "diff", "--numstat", "--no-renames", `${base}..${head}`, "--"], { env: gitEnv(), timeout: GIT_TIMEOUT_MS, maxBuffer: 8 * 1024 * 1024 });
     const files = parseNumstat(out);
     const stat = { base, head, files, added: files.reduce((n2, f) => n2 + (f.added ?? 0), 0), removed: files.reduce((n2, f) => n2 + (f.removed ?? 0), 0), source: "git" };
     cache.set(key, stat);
@@ -21308,7 +21434,7 @@ function diffStatFor(db, source, run) {
 import { createHash, createPublicKey, verify } from "crypto";
 import { readFileSync as readFileSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var SHA2 = /^[0-9a-f]{64}$/;
 var SEAL_LINE = "log.sealed";
 var REDACTED = /\[REDACTED(?::[A-Z_]+)?\]/;
@@ -21326,7 +21452,7 @@ function localKeyInfo(env = process.env) {
     if (inline)
       pub = createPublicKey(inline);
     else {
-      const file = given || join5(env["HOME"] || homedir3(), ".loki", "keys", "receipt-ed25519.pem");
+      const file = given || join6(env["HOME"] || homedir3(), ".loki", "keys", "receipt-ed25519.pem");
       try {
         pub = createPublicKey(readFileSync2(file));
       } catch (e) {
@@ -21820,7 +21946,7 @@ init_backfill();
 
 // src/server/reconcile.ts
 import { realpathSync as realpathSync4 } from "fs";
-import { join as join9, resolve, sep as sep3 } from "path";
+import { join as join10, resolve, sep as sep3 } from "path";
 init_run_pid();
 var STOPPED_VERDICT = "STOPPED";
 var STALE_GRACE_MS = 120000;
@@ -21840,7 +21966,7 @@ function reconcileDeadRuns(db, o = {}) {
     } catch {
       continue;
     }
-    const root = join9(repo, ".loki", "runs"), dir = resolve(root, r.runId);
+    const root = join10(repo, ".loki", "runs"), dir = resolve(root, r.runId);
     if (!dir.startsWith(root + sep3))
       continue;
     if (verify2(dir, r.runId).ok)
@@ -21907,7 +22033,7 @@ function mountRepos(act, db, peerIsLoopback2, repoDir, gh = defaultGh) {
 
 // src/server/routes/artifacts.ts
 import { closeSync as closeSync3, fstatSync as fstatSync3, openSync as openSync3, readSync as readSync3, realpathSync as realpathSync6 } from "fs";
-import { join as join12, sep as sep4 } from "path";
+import { join as join13, sep as sep4 } from "path";
 var MAX_ARTIFACT_BYTES = 5 * 1024 * 1024;
 var EVENTS_DEFAULT = 500;
 var EVENTS_MAX = 1000;
@@ -21988,15 +22114,15 @@ function mount(ctx) {
       return c.json({ error: "artifact not available" }, 404);
     let runsRoot, runDir, file;
     try {
-      runsRoot = realpathSync6(join12(repo.p, ".loki", "runs"));
-      runDir = realpathSync6(join12(runsRoot, run));
+      runsRoot = realpathSync6(join13(repo.p, ".loki", "runs"));
+      runDir = realpathSync6(join13(runsRoot, run));
     } catch {
       return c.json({ error: "artifact not found" }, 404);
     }
-    if (runDir !== join12(runsRoot, run))
+    if (runDir !== join13(runsRoot, run))
       return c.json({ error: "artifact not found" }, 404);
     try {
-      file = realpathSync6(join12(runDir, name));
+      file = realpathSync6(join13(runDir, name));
     } catch {
       return c.json({ error: "artifact not found" }, 404);
     }
@@ -22025,9 +22151,9 @@ function mount(ctx) {
 import { basename as basename4 } from "path";
 
 // src/ask/policy.ts
-import { chmodSync as chmodSync3, existsSync as existsSync5, lstatSync, mkdtempSync, readFileSync as readFileSync7, realpathSync as realpathSync7, rmSync as rmSync2, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname2, join as join13, parse } from "path";
+import { chmodSync as chmodSync3, existsSync as existsSync5, lstatSync as lstatSync2, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, realpathSync as realpathSync7, rmSync as rmSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+import { tmpdir as tmpdir3 } from "os";
+import { dirname as dirname2, join as join14, parse } from "path";
 var MCP_SERVER_NAME = "loki-ask";
 var MCP_SERVER_SCRIPT = "packages/control-plane/src/ask/tools_server.ts";
 var MCP_SERVER_BUNDLE = "ask-tools-server.js";
@@ -22038,8 +22164,8 @@ function resolveToolsServer(startDir) {
     if (d === parse(d).root)
       break;
   }
-  const bundles = dirs.flatMap((d) => [join13(d, MCP_SERVER_BUNDLE), join13(d, "dist", MCP_SERVER_BUNDLE), join13(d, "packages/control-plane/dist", MCP_SERVER_BUNDLE)]);
-  const sources2 = dirs.flatMap((d) => [join13(d, "src/ask/tools_server.ts"), join13(d, MCP_SERVER_SCRIPT)]);
+  const bundles = dirs.flatMap((d) => [join14(d, MCP_SERVER_BUNDLE), join14(d, "dist", MCP_SERVER_BUNDLE), join14(d, "packages/control-plane/dist", MCP_SERVER_BUNDLE)]);
+  const sources2 = dirs.flatMap((d) => [join14(d, "src/ask/tools_server.ts"), join14(d, MCP_SERVER_SCRIPT)]);
   return [...bundles, ...sources2].find((f) => existsSync5(f)) ?? null;
 }
 var ALLOWED_TOOLS = `mcp__${MCP_SERVER_NAME}__*`;
@@ -22072,38 +22198,38 @@ function buildMcpConfig(serverScript, dbPath) {
 var PREFIX = "loki-ask.";
 var MARKER = ".loki-ask-owned";
 function createJobDir() {
-  const root = realpathSync7(tmpdir2());
+  const root = realpathSync7(tmpdir3());
   for (let d = root;; d = dirname2(d)) {
-    if (existsSync5(join13(d, ".git")))
+    if (existsSync5(join14(d, ".git")))
       throw new Error(`temp root is inside a repo: ${d}`);
     if (d === dirname2(d))
       break;
   }
-  const dir = mkdtempSync(join13(root, PREFIX));
+  const dir = mkdtempSync2(join14(root, PREFIX));
   chmodSync3(dir, 448);
-  writeFileSync4(join13(dir, MARKER), dir, { mode: 384 });
+  writeFileSync4(join14(dir, MARKER), dir, { mode: 384 });
   return dir;
 }
 function removeJobDir(dir) {
-  const root = realpathSync7(tmpdir2());
+  const root = realpathSync7(tmpdir3());
   const refuse = (why) => {
     throw new Error(`refusing to remove ${dir}: ${why}`);
   };
   if (dirname2(dir) !== root || !dir.slice(root.length + 1).startsWith(PREFIX))
     refuse("not a scratch dir name");
-  const st = lstatSync(dir);
+  const st = lstatSync2(dir);
   if (!st.isDirectory() || st.isSymbolicLink())
     refuse("not a plain directory");
   if (st.uid !== process.getuid())
     refuse("not owned by this user");
   if ((st.mode & 511) !== 448)
     refuse("mode is not 0700");
-  const marker = join13(dir, MARKER);
+  const marker = join14(dir, MARKER);
   if (!existsSync5(marker) || readFileSync7(marker, "utf8") !== dir)
     refuse("marker missing or wrong");
-  if (!statSync3(marker).isFile())
+  if (!statSync4(marker).isFile())
     refuse("marker is not a file");
-  rmSync2(dir, { recursive: true, force: true });
+  rmSync3(dir, { recursive: true, force: true });
 }
 
 // src/ask/invoke.ts
@@ -22222,13 +22348,13 @@ function pidAlive(pid) {
 // src/ask/worker.ts
 import { spawn as spawn2 } from "child_process";
 import { writeFileSync as writeFileSync5 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 
 // src/server/spawn.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync8, realpathSync as realpathSync8, statSync as statSync4 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync8, realpathSync as realpathSync8, statSync as statSync5 } from "fs";
 import { homedir as homedir5 } from "os";
-import { basename as basename3, dirname as dirname3, join as join14, resolve as resolve4 } from "path";
+import { basename as basename3, dirname as dirname3, join as join15, resolve as resolve4 } from "path";
 var ISSUE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,8}$/;
 var TASK = /^[A-Za-z0-9][A-Za-z0-9 .,_/#@+=-]{0,499}$/;
 var hasDotDot = (t) => t.split(/[\\/ ]/).some((seg) => seg.startsWith(".."));
@@ -22257,14 +22383,14 @@ function repoRefusal(cwd, env = process.env) {
   if (dir === home)
     return "refusing to start a run in your home directory; pick a project repository (a folder with its own .git)";
   for (let d = dir;d !== "/" && d !== home && d !== dirname3(d); d = dirname3(d))
-    if (existsSync6(join14(d, ".git")))
+    if (existsSync6(join15(d, ".git")))
       return null;
   return `${cwd} is not a git repository; pick a registered project repository`;
 }
 function registryRepos2(env = process.env) {
   try {
-    const j = JSON.parse(readFileSync8(join14(env.HOME || homedir5(), ".loki", "dashboard", "projects.json"), "utf8"));
-    return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync6(p) && statSync4(p).isDirectory());
+    const j = JSON.parse(readFileSync8(join15(env.HOME || homedir5(), ".loki", "dashboard", "projects.json"), "utf8"));
+    return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync6(p) && statSync5(p).isDirectory());
   } catch {
     return [];
   }
@@ -22519,7 +22645,7 @@ async function runAskJob(db, messageId, o) {
     if (!toolsServer)
       return fail("Ask tools server not found (expected ask-tools-server.js in dist/ or src/ask/tools_server.ts); rebuild with bun run build:server");
     jobDir = createJobDir();
-    const mcpConfigPath = join15(jobDir, "mcp.json");
+    const mcpConfigPath = join16(jobDir, "mcp.json");
     writeFileSync5(mcpConfigPath, JSON.stringify(buildMcpConfig(toolsServer, o.dbPath)), { mode: 384 });
     const inv = buildInvocation({
       provider: thread.provider,
@@ -22982,13 +23108,13 @@ function mount4(ctx) {
 }
 
 // src/server/routes/checkpoints.ts
-import { execFileSync as execFileSync3 } from "child_process";
-import { appendFileSync, copyFileSync, cpSync, existsSync as existsSync8, lstatSync as lstatSync2, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readFileSync as readFileSync10, realpathSync as realpathSync9, rmSync as rmSync3, statSync as statSync6, writeFileSync as writeFileSync6 } from "fs";
-import { join as join17, sep as sep5 } from "path";
+init_safe_git();
+import { appendFileSync, copyFileSync, cpSync, existsSync as existsSync8, lstatSync as lstatSync3, mkdirSync as mkdirSync3, readdirSync as readdirSync4, readFileSync as readFileSync10, realpathSync as realpathSync9, rmSync as rmSync4, statSync as statSync7, writeFileSync as writeFileSync6 } from "fs";
+import { join as join18, sep as sep5 } from "path";
 
 // src/server/routes/cost_ledger.ts
-import { existsSync as existsSync7, readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync5 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync7, readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync6 } from "fs";
+import { join as join17 } from "path";
 var isNum = (v) => typeof v === "number" && Number.isFinite(v);
 var isObj3 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var r6 = (n2) => Math.round(n2 * 1e6) / 1e6;
@@ -23019,7 +23145,7 @@ var DEFAULT_PRICING = {
   "gpt-5.6-luna": { input: 0.5, output: 4 }
 };
 function pricing(lokiDir) {
-  const d = readJson(join16(lokiDir, "pricing.json"));
+  const d = readJson(join17(lokiDir, "pricing.json"));
   const models = isObj3(d) && isObj3(d.models) ? d.models : {};
   return { ...DEFAULT_PRICING, ...models };
 }
@@ -23032,7 +23158,7 @@ function modelCost(table, model, inp, out, cr = 0, cw = 0) {
   return r6((inp * ir + out * or2 + cr * crr + cw * cwr) / 1e6);
 }
 function iterationRecords(lokiDir) {
-  const dir = join16(lokiDir, "metrics", "efficiency");
+  const dir = join17(lokiDir, "metrics", "efficiency");
   let names = [];
   try {
     names = readdirSync3(dir).filter((n2) => /^iteration-.*\.json$/.test(n2)).sort();
@@ -23041,7 +23167,7 @@ function iterationRecords(lokiDir) {
   }
   const out = [];
   for (const n2 of names) {
-    const d = readJson(join16(dir, n2));
+    const d = readJson(join17(dir, n2));
     if (isObj3(d))
       out.push(d);
   }
@@ -23078,7 +23204,7 @@ function costSnapshot(lokiDir) {
     }
   }
   if (tIn === 0 && tOut === 0) {
-    const ctx = readJson(join16(lokiDir, "context", "tracking.json"));
+    const ctx = readJson(join17(lokiDir, "context", "tracking.json"));
     const totals = isObj3(ctx) && isObj3(ctx.totals) ? ctx.totals : {};
     tIn = num0(totals.total_input);
     tOut = num0(totals.total_output);
@@ -23104,7 +23230,7 @@ function costSnapshot(lokiDir) {
     }
   }
   let limit = null, used = null, remaining = null;
-  const bd = readJson(join16(lokiDir, "metrics", "budget.json"));
+  const bd = readJson(join17(lokiDir, "metrics", "budget.json"));
   if (isObj3(bd) && isNum(bd.limit)) {
     limit = bd.limit;
     if (recorded && !unknownUsd) {
@@ -23155,7 +23281,7 @@ function budgetSnapshot(lokiDir) {
     total += priced(table, d);
   }
   let limit = null;
-  const bd = readJson(join16(lokiDir, "metrics", "budget.json"));
+  const bd = readJson(join17(lokiDir, "metrics", "budget.json"));
   if (isObj3(bd)) {
     const l = bd.limit || bd.budget_limit;
     limit = isNum(l) ? l : null;
@@ -23206,19 +23332,19 @@ function costTimeline(lokiDir) {
   }
   const runs2 = [];
   let projectTotal = 0, runsMeasured = 0;
-  const proofs = join16(lokiDir, "proofs");
+  const proofs = join17(lokiDir, "proofs");
   let entries = [];
   try {
     entries = readdirSync3(proofs).sort();
   } catch {}
   for (const e of entries) {
     try {
-      if (!statSync5(join16(proofs, e)).isDirectory())
+      if (!statSync6(join17(proofs, e)).isDirectory())
         continue;
     } catch {
       continue;
     }
-    const p = readJson(join16(proofs, e, "proof.json"));
+    const p = readJson(join17(proofs, e, "proof.json"));
     if (!isObj3(p))
       continue;
     const cost = isObj3(p.cost) ? p.cost : {};
@@ -23248,7 +23374,7 @@ function costTimeline(lokiDir) {
     ...recorded || runsMeasured ? {} : { not_measured: NOT_MEASURED }
   };
 }
-var lokiDirOf = (repoDir) => join16(repoDir, ".loki");
+var lokiDirOf = (repoDir) => join17(repoDir, ".loki");
 var lokiDirExists = (repoDir) => existsSync7(lokiDirOf(repoDir));
 function mount5(ctx) {
   const deny = { error: "loopback only without a token" };
@@ -23263,8 +23389,8 @@ var SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 var MAX_CHECKPOINTS = 50;
 var ROLLBACK_ALLOW = new Set(["session.json", "dashboard-state.json", "CONTINUITY.md", "autonomy-state.json", "state", "queue"]);
 var validCheckpointId = (id) => SAFE_ID.test(id);
-var storeOf = (repoDir) => join17(repoDir, ".loki", "state", "checkpoints");
-var lokiOf = (repoDir) => join17(repoDir, ".loki");
+var storeOf = (repoDir) => join18(repoDir, ".loki", "state", "checkpoints");
+var lokiOf = (repoDir) => join18(repoDir, ".loki");
 var readObj = (f) => {
   try {
     const d = JSON.parse(readFileSync10(f, "utf8"));
@@ -23278,7 +23404,7 @@ function listCheckpoints(repoDir, limit = 20) {
   const store = storeOf(repoDir);
   let lines = [];
   try {
-    lines = readFileSync10(join17(store, "index.jsonl"), "utf8").split(`
+    lines = readFileSync10(join18(store, "index.jsonl"), "utf8").split(`
 `);
   } catch {
     return [];
@@ -23306,7 +23432,7 @@ function listCheckpoints(repoDir, limit = 20) {
       message: str2(raw2.task) ?? str2(raw2.message) ?? str2(raw2.task_description),
       iteration: Number.isInteger(it) ? it : null
     };
-    const meta = readObj(join17(store, id, "metadata.json"));
+    const meta = readObj(join18(store, id, "metadata.json"));
     if (meta) {
       cp.git_branch = str2(meta.git_branch);
       cp.provider = str2(meta.provider);
@@ -23314,7 +23440,7 @@ function listCheckpoints(repoDir, limit = 20) {
       cp.message ??= str2(meta.task_description);
       cp.git_sha ??= str2(meta.git_sha);
       cp.created_at ??= str2(meta.timestamp);
-      cp.files_count = countFiles(join17(store, id));
+      cp.files_count = countFiles(join18(store, id));
     }
     out.push(cp);
   }
@@ -23325,7 +23451,7 @@ function countFiles(dir) {
   const walk = (d, top) => {
     for (const e of readdirSync4(d, { withFileTypes: true })) {
       if (e.isDirectory())
-        walk(join17(d, e.name), false);
+        walk(join18(d, e.name), false);
       else if (e.isFile() && !(top && e.name === "metadata.json"))
         n2++;
     }
@@ -23336,11 +23462,11 @@ function countFiles(dir) {
   return n2;
 }
 function getCheckpoint(repoDir, id) {
-  return validCheckpointId(id) ? readObj(join17(storeOf(repoDir), id, "metadata.json")) : null;
+  return validCheckpointId(id) ? readObj(join18(storeOf(repoDir), id, "metadata.json")) : null;
 }
 var gitHead = (repoDir) => {
   try {
-    return execFileSync3("git", ["rev-parse", "HEAD"], { cwd: repoDir, timeout: 5000, stdio: ["ignore", "pipe", "ignore"] }).toString().trim() || null;
+    return safeGit(repoDir, ["rev-parse", "HEAD"], { timeout: 5000 }).trim() || null;
   } catch {
     return null;
   }
@@ -23348,60 +23474,60 @@ var gitHead = (repoDir) => {
 function createCheckpoint(repoDir, message, now2 = new Date) {
   const store = storeOf(repoDir), loki = lokiOf(repoDir);
   mkdirSync3(store, { recursive: true });
-  const id = `chk-${stamp(now2)}`, dir = join17(store, id);
+  const id = `chk-${stamp(now2)}`, dir = join18(store, id);
   mkdirSync3(dir, { recursive: true });
   for (const f of ["dashboard-state.json", "session.json"]) {
     try {
-      if (existsSync8(join17(loki, f)))
-        copyFileSync(join17(loki, f), join17(dir, f));
+      if (existsSync8(join18(loki, f)))
+        copyFileSync(join18(loki, f), join18(dir, f));
     } catch {}
   }
   try {
-    if (existsSync8(join17(loki, "queue")))
-      cpSync(join17(loki, "queue"), join17(dir, "queue"), { recursive: true });
+    if (existsSync8(join18(loki, "queue")))
+      cpSync(join18(loki, "queue"), join18(dir, "queue"), { recursive: true });
   } catch {}
   const meta = { id, created_at: now2.toISOString(), git_sha: gitHead(repoDir), message: message || null, files: readdirSync4(dir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name) };
-  writeFileSync6(join17(dir, "metadata.json"), JSON.stringify(meta, null, 2));
-  appendFileSync(join17(store, "index.jsonl"), `${JSON.stringify(meta)}
+  writeFileSync6(join18(dir, "metadata.json"), JSON.stringify(meta, null, 2));
+  appendFileSync(join18(store, "index.jsonl"), `${JSON.stringify(meta)}
 `);
   const mine = readdirSync4(store, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name.startsWith("chk-")).map((e) => e.name).sort();
   while (mine.length > MAX_CHECKPOINTS)
-    rmSync3(join17(store, mine.shift()), { recursive: true, force: true });
+    rmSync4(join18(store, mine.shift()), { recursive: true, force: true });
   return meta;
 }
 function rollbackCheckpoint(repoDir, id, now2 = new Date) {
   const store = storeOf(repoDir), loki = lokiOf(repoDir);
   let real2 = "", realStore = "";
   try {
-    real2 = realpathSync9(join17(store, id));
+    real2 = realpathSync9(join18(store, id));
     realStore = realpathSync9(store);
   } catch {
     return null;
   }
-  if (!real2.startsWith(`${realStore}${sep5}`) || !statSync6(real2).isDirectory())
+  if (!real2.startsWith(`${realStore}${sep5}`) || !statSync7(real2).isDirectory())
     return null;
-  const preId = `rb-pre-${stamp(now2)}`, pre = join17(store, preId);
+  const preId = `rb-pre-${stamp(now2)}`, pre = join18(store, preId);
   mkdirSync3(pre, { recursive: true });
   const notStore = (src) => src !== store;
   for (const n2 of ["session.json", "dashboard-state.json", "CONTINUITY.md", "autonomy-state.json"]) {
     try {
-      if (existsSync8(join17(loki, n2)))
-        copyFileSync(join17(loki, n2), join17(pre, n2));
+      if (existsSync8(join18(loki, n2)))
+        copyFileSync(join18(loki, n2), join18(pre, n2));
     } catch {}
   }
   for (const d of ["state", "queue"]) {
     try {
-      if (existsSync8(join17(loki, d)))
-        cpSync(join17(loki, d), join17(pre, d), { recursive: true, filter: notStore });
+      if (existsSync8(join18(loki, d)))
+        cpSync(join18(loki, d), join18(pre, d), { recursive: true, filter: notStore });
     } catch {}
   }
   const preMeta = { id: preId, created_at: now2.toISOString(), message: `pre-rollback snapshot (before restoring ${id})`, created_by: "control plane rollback" };
-  writeFileSync6(join17(pre, "metadata.json"), JSON.stringify(preMeta, null, 2));
-  appendFileSync(join17(store, "index.jsonl"), `${JSON.stringify(preMeta)}
+  writeFileSync6(join18(pre, "metadata.json"), JSON.stringify(preMeta, null, 2));
+  appendFileSync(join18(store, "index.jsonl"), `${JSON.stringify(preMeta)}
 `);
   let restored = 0;
   const errors = [];
-  const skipped = (src) => src === join17(real2, "state", "checkpoints");
+  const skipped = (src) => src === join18(real2, "state", "checkpoints");
   for (const e of readdirSync4(real2, { withFileTypes: true })) {
     if (e.name === "metadata.json" || e.name === "worktree-snapshot.txt")
       continue;
@@ -23409,20 +23535,20 @@ function rollbackCheckpoint(repoDir, id, now2 = new Date) {
       errors.push(`${e.name}: not in the rollback allowlist, skipped`);
       continue;
     }
-    const src = join17(real2, e.name), dst = join17(loki, e.name);
+    const src = join18(real2, e.name), dst = join18(loki, e.name);
     try {
-      if (lstatSync2(src).isSymbolicLink()) {
+      if (lstatSync3(src).isSymbolicLink()) {
         errors.push(`${e.name}: symlink skipped`);
         continue;
       }
-      if (existsSync8(dst) && lstatSync2(dst).isSymbolicLink()) {
+      if (existsSync8(dst) && lstatSync3(dst).isSymbolicLink()) {
         errors.push(`${e.name}: destination is a symlink, skipped`);
         continue;
       }
       cpSync(src, dst, { recursive: true, filter: (s) => {
         if (skipped(s))
           return false;
-        if (lstatSync2(s).isSymbolicLink()) {
+        if (lstatSync3(s).isSymbolicLink()) {
           errors.push(`${s.slice(real2.length + 1)}: nested symlink skipped`);
           return false;
         }
@@ -23509,9 +23635,9 @@ function mount6(ctx) {
 }
 
 // src/server/routes/config.ts
-import { createHash as createHash5, randomBytes } from "crypto";
-import { closeSync as closeSync4, fchmodSync, fsyncSync, lstatSync as lstatSync3, openSync as openSync4, readFileSync as readFileSync11, realpathSync as realpathSync10, renameSync as renameSync3, statSync as statSync7, unlinkSync, writeSync as writeSync2 } from "fs";
-import { basename as basename5, dirname as dirname4, join as join18, sep as sep6 } from "path";
+import { createHash as createHash5, randomBytes as randomBytes2 } from "crypto";
+import { closeSync as closeSync4, fchmodSync, fsyncSync, lstatSync as lstatSync4, openSync as openSync4, readFileSync as readFileSync11, realpathSync as realpathSync10, renameSync as renameSync3, statSync as statSync8, unlinkSync, writeSync as writeSync2 } from "fs";
+import { basename as basename5, dirname as dirname4, join as join19, sep as sep6 } from "path";
 
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
@@ -23950,10 +24076,10 @@ function resolveConfigFile(repoDir) {
   } catch {
     return { ok: false, status: 400, error: "repo directory not found" };
   }
-  const p = join18(root, "loki.yaml");
+  const p = join19(root, "loki.yaml");
   let st;
   try {
-    st = lstatSync3(p);
+    st = lstatSync4(p);
   } catch {
     return { ok: true, file: p, exists: false };
   }
@@ -23966,7 +24092,7 @@ function resolveConfigFile(repoDir) {
     }
     if (!real2.startsWith(root + sep6))
       return { ok: false, status: 400, error: "loki.yaml is a symlink that resolves outside the repo" };
-    if (!statSync7(real2).isFile())
+    if (!statSync8(real2).isFile())
       return { ok: false, status: 422, error: "loki.yaml is not a regular file" };
     return { ok: true, file: real2, exists: true };
   }
@@ -23975,7 +24101,7 @@ function resolveConfigFile(repoDir) {
   return { ok: true, file: p, exists: true };
 }
 function atomicWrite(file, text2, mode) {
-  const tmp = join18(dirname4(file), `.${basename5(file)}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`);
+  const tmp = join19(dirname4(file), `.${basename5(file)}.${process.pid}.${randomBytes2(6).toString("hex")}.tmp`);
   const fd = openSync4(tmp, "wx", mode);
   try {
     writeSync2(fd, text2);
@@ -24015,7 +24141,7 @@ function mount8(ctx) {
         return deny(c, "config.read", r.status, r.error);
       let raw2 = "";
       if (r.exists) {
-        if (statSync7(r.file).size > MAX_FILE)
+        if (statSync8(r.file).size > MAX_FILE)
           return deny(c, "config.read", 413, "loki.yaml is too large");
         raw2 = readFileSync11(r.file, "utf8");
       }
@@ -24080,7 +24206,7 @@ function mount8(ctx) {
         return refuse(r.status, r.error);
       let raw2 = "";
       if (r.exists) {
-        if (statSync7(r.file).size > MAX_FILE)
+        if (statSync8(r.file).size > MAX_FILE)
           return refuse(400, "loki.yaml is too large");
         raw2 = readFileSync11(r.file, "utf8");
       }
@@ -24107,7 +24233,7 @@ function mount8(ctx) {
         return refuse(400, "could not render the config safely");
       const changed = [...new Set([...Object.keys(prev), ...Object.keys(next)])].filter((k) => !deepEq(prev[k], next[k]));
       try {
-        const mode = r.exists ? statSync7(r.file).mode & 511 : 420;
+        const mode = r.exists ? statSync8(r.file).mode & 511 : 420;
         if (r.exists)
           atomicWrite(`${r.file}.bak`, raw2, 384);
         atomicWrite(r.file, out, mode);
@@ -24126,7 +24252,7 @@ function mount8(ctx) {
 
 // src/server/routes/control.ts
 import { existsSync as existsSync9, realpathSync as realpathSync11 } from "fs";
-import { join as join19, resolve as resolve5, sep as sep7 } from "path";
+import { join as join20, resolve as resolve5, sep as sep7 } from "path";
 init_run_pid();
 var ID4 = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 var busy = new Set;
@@ -24152,7 +24278,7 @@ function mount9(ctx) {
     }
     if (!repo)
       return done(404, "refused", { error: "this run's repo is not known on this machine" });
-    const runsRoot = join19(repo, ".loki", "runs"), runDir = resolve5(runsRoot, id);
+    const runsRoot = join20(repo, ".loki", "runs"), runDir = resolve5(runsRoot, id);
     if (!runDir.startsWith(runsRoot + sep7))
       return done(400, "refused", { error: "invalid run id" }, "path escape");
     return handler({ source, run: id, repo, runDir }, done);
@@ -24200,7 +24326,7 @@ function mount9(ctx) {
       return done(404, "refused", { error: "run not found" });
     if (!blockedQuestion(loadEvents(db, a.source, a.run), row.verdict))
       return done(409, "refused", { error: "run is not BLOCKED, so there is nothing to resume" });
-    if (!existsSync9(join19(answerDir, a.source, `${a.run}.answer.txt`)))
+    if (!existsSync9(join20(answerDir, a.source, `${a.run}.answer.txt`)))
       return done(409, "refused", { error: "no answer recorded for this run; answer it first" });
     return launch(a, [bin, "answer", a.run], done);
   });
@@ -24385,10 +24511,10 @@ function mount11(ctx) {
 // src/server/routes/fleet.ts
 import { readdirSync as readdirSync5, readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir6 } from "os";
-import { basename as basename6, join as join20 } from "path";
+import { basename as basename6, join as join21 } from "path";
 var isNum2 = (v) => typeof v === "number" && Number.isFinite(v);
 var isObj6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var registryFile = () => join20(process.env.HOME ?? homedir6(), ".loki", "dashboard", "projects.json");
+var registryFile = () => join21(process.env.HOME ?? homedir6(), ".loki", "dashboard", "projects.json");
 function pidAlive2(pid) {
   if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0)
     return false;
@@ -24403,33 +24529,33 @@ function projectSnapshot(path) {
   const snap = { phase: "", iteration: null, cost_usd: null, started_at: null, ended_at: null };
   if (!path)
     return snap;
-  const loki = join20(path, ".loki");
-  const st = readJson(join20(loki, "dashboard-state.json"));
+  const loki = join21(path, ".loki");
+  const st = readJson(join21(loki, "dashboard-state.json"));
   if (isObj6(st)) {
     snap.phase = typeof st.phase === "string" ? st.phase : "";
     snap.iteration = Number.isInteger(st.iteration) ? st.iteration : null;
   }
-  const ss = readJson(join20(loki, "session.json"));
+  const ss = readJson(join21(loki, "session.json"));
   if (isObj6(ss)) {
     const a = ss.startedAt || ss.started_at, b = ss.endedAt || ss.ended_at;
     snap.started_at = typeof a === "string" ? a : null;
     snap.ended_at = typeof b === "string" ? b : null;
   }
   let cost = 0, found = false;
-  const eff = join20(loki, "metrics", "efficiency");
+  const eff = join21(loki, "metrics", "efficiency");
   let names = [];
   try {
     names = readdirSync5(eff).filter((n2) => n2.endsWith(".json"));
   } catch {}
   for (const n2 of names) {
-    const d = readJson(join20(eff, n2));
+    const d = readJson(join21(eff, n2));
     if (isObj6(d) && isNum2(d.cost_usd) && recordIsMeasured(d)) {
       cost += d.cost_usd;
       found = true;
     }
   }
   if (!found) {
-    const t = readJson(join20(loki, "context", "tracking.json"));
+    const t = readJson(join21(loki, "context", "tracking.json"));
     const totals = isObj6(t) && isObj6(t.totals) ? t.totals : null;
     if (totals && isNum2(totals.total_cost_usd) && recordIsMeasured({ cost_usd: totals.total_cost_usd, input_tokens: totals.total_input, output_tokens: totals.total_output })) {
       cost = totals.total_cost_usd;
@@ -24502,8 +24628,8 @@ function mount12(ctx) {
 }
 
 // src/server/routes/memory.ts
-import { existsSync as existsSync10, readFileSync as readFileSync13, readdirSync as readdirSync6, realpathSync as realpathSync12, statSync as statSync8 } from "fs";
-import { join as join21, sep as sep8 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync13, readdirSync as readdirSync6, realpathSync as realpathSync12, statSync as statSync9 } from "fs";
+import { join as join22, sep as sep8 } from "path";
 var isObj7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var nonEmpty = (v) => !(v === undefined || v === null || v === "" || Array.isArray(v) && v.length === 0 || isObj7(v) && Object.keys(v).length === 0);
 var focus = { dir: null };
@@ -24534,7 +24660,7 @@ function jsonFiles(dir, cap = Infinity) {
     for (const e of ents.sort((a, b) => a.name < b.name ? -1 : 1)) {
       if (out2.length >= cap)
         return;
-      const p = join21(d, e.name);
+      const p = join22(d, e.name);
       if (e.isDirectory())
         walk(p);
       else if (e.isFile() && e.name.endsWith(".json"))
@@ -24556,12 +24682,12 @@ function setFocus(repoDir, raw2, registry = registryFile()) {
   let real2 = "";
   try {
     real2 = realpathSync12(s);
-    if (!statSync8(real2).isDirectory())
+    if (!statSync9(real2).isDirectory())
       throw new Error("not a dir");
   } catch {
     return { ok: false, error: `Directory does not exist: ${s}` };
   }
-  if (!existsSync10(join21(real2, ".loki")) || !statSync8(join21(real2, ".loki")).isDirectory())
+  if (!existsSync10(join22(real2, ".loki")) || !statSync9(join22(real2, ".loki")).isDirectory())
     return { ok: false, error: `Directory does not contain a .loki/ subdirectory: ${s}` };
   const allowed = new Set;
   try {
@@ -24586,7 +24712,7 @@ var QUEUES = [["pending.json", "pending"], ["in-progress.json", "in_progress"],
 var RANK = { done: 3, in_progress: 2, review: 1, pending: 0 };
 function tasksList(loki, status) {
   const all = [];
-  const st = readJson(join21(loki, "dashboard-state.json"));
+  const st = readJson(join22(loki, "dashboard-state.json"));
   const groups = isObj7(st) && isObj7(st.tasks) ? st.tasks : {};
   for (const [key, mapped] of GROUPS) {
     const g = groups[key];
@@ -24608,7 +24734,7 @@ function tasksList(loki, status) {
     });
   }
   for (const [file, qs] of QUEUES) {
-    const raw2 = readJson(join21(loki, "queue", file));
+    const raw2 = readJson(join22(loki, "queue", file));
     const items = isObj7(raw2) ? raw2.tasks : raw2;
     if (!Array.isArray(items))
       continue;
@@ -24662,7 +24788,7 @@ function tasksList(loki, status) {
   }
   return status ? out2.filter((t) => t.status === status) : out2;
 }
-var memDir = (loki, sub) => join21(loki, "memory", sub);
+var memDir = (loki, sub) => join22(loki, "memory", sub);
 function memoryEpisodes(loki, limit = 50) {
   const eps = jsonFiles(memDir(loki, "episodic")).map(readJson).filter(isObj7);
   eps.sort((a, b) => String(b.timestamp ?? "").localeCompare(String(a.timestamp ?? "")));
@@ -24677,13 +24803,13 @@ function memoryEpisode(loki, id) {
   return null;
 }
 function memoryPatterns(loki) {
-  const d = readJson(join21(memDir(loki, "semantic"), "patterns.json"));
+  const d = readJson(join22(memDir(loki, "semantic"), "patterns.json"));
   const list = Array.isArray(d) ? d : isObj7(d) && Array.isArray(d.patterns) ? d.patterns : [];
   return list.filter(isObj7);
 }
 var memorySkills = (loki) => jsonFiles(memDir(loki, "skills")).map(readJson).filter(isObj7);
 function memoryEconomics(loki) {
-  const rawV = readJson(join21(loki, "memory", "token_economics.json"));
+  const rawV = readJson(join22(loki, "memory", "token_economics.json"));
   const raw2 = isObj7(rawV) ? rawV : {};
   const m = isObj7(raw2.metrics) ? raw2.metrics : {};
   const n2 = (v) => typeof v === "number" && Number.isFinite(v) ? Math.trunc(v) : 0;
@@ -24719,7 +24845,7 @@ function memoryEconomics(loki) {
   };
 }
 function contextTracking(loki) {
-  const f = join21(loki, "context", "tracking.json");
+  const f = join22(loki, "context", "tracking.json");
   if (!existsSync10(f)) {
     return { status: 200, body: {
       session_id: null,
@@ -24780,8 +24906,8 @@ function mount13(ctx) {
 }
 
 // src/server/routes/metrics.ts
-import { readdirSync as readdirSync7, readFileSync as readFileSync14, statSync as statSync9 } from "fs";
-import { join as join22 } from "path";
+import { readdirSync as readdirSync7, readFileSync as readFileSync14, statSync as statSync10 } from "fs";
+import { join as join23 } from "path";
 var isObj8 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var arr = (v) => Array.isArray(v) ? v : [];
 function buildMetricsText(repoDir, now2 = Date.now()) {
@@ -24798,7 +24924,7 @@ function buildMetricsText(repoDir, now2 = Date.now()) {
       L.push(...samples);
     L.push("");
   };
-  const stRaw = readJson(join22(loki, "dashboard-state.json"));
+  const stRaw = readJson(join23(loki, "dashboard-state.json"));
   const state = isObj8(stRaw) ? stRaw : null;
   let status = 0;
   if (state?.mode === "paused")
@@ -24807,7 +24933,7 @@ function buildMetricsText(repoDir, now2 = Date.now()) {
     status = 1;
   else {
     try {
-      if (pidAlive2(parseInt(readFileSync14(join22(loki, "loki.pid"), "utf8").trim(), 10)))
+      if (pidAlive2(parseInt(readFileSync14(join23(loki, "loki.pid"), "utf8").trim(), 10)))
         status = 1;
     } catch {}
   }
@@ -24823,7 +24949,7 @@ function buildMetricsText(repoDir, now2 = Date.now()) {
     `loki_tasks_total{status="failed"} ${arr(tasks.failed).length}`
   ] : null);
   let agents = null;
-  const af = readJson(join22(loki, "state", "agents.json"));
+  const af = readJson(join23(loki, "state", "agents.json"));
   if (Array.isArray(af) && af.length)
     agents = af;
   else if (state && Array.isArray(state.agents) && state.agents.length)
@@ -24835,7 +24961,7 @@ function buildMetricsText(repoDir, now2 = Date.now()) {
   gauge("loki_cost_usd", "Estimated total cost in USD", "gauge", cost.estimated_cost_usd !== null ? [`loki_cost_usd ${cost.estimated_cost_usd}`] : null);
   let events2 = null;
   try {
-    events2 = readFileSync14(join22(loki, "events.jsonl"), "utf8").split(`
+    events2 = readFileSync14(join23(loki, "events.jsonl"), "utf8").split(`
 `).filter((l) => l.trim()).length;
   } catch {}
   gauge("loki_events_total", "Total number of events recorded", "counter", events2 !== null ? [`loki_events_total ${events2}`] : null);
@@ -24847,19 +24973,19 @@ function buildMetricsText(repoDir, now2 = Date.now()) {
   }
   gauge("loki_uptime_seconds", "Seconds since session started", "gauge", uptime !== null ? [`loki_uptime_seconds ${uptime}`] : null);
   let total = 0, ver = 0, gaps = 0, notver = 0, unk = 0, att = 0, sig = 0;
-  const pdir = join22(loki, "proofs");
+  const pdir = join23(loki, "proofs");
   let entries = [];
   try {
     entries = readdirSync7(pdir).sort();
   } catch {}
   for (const e of entries) {
     try {
-      if (!statSync9(join22(pdir, e)).isDirectory())
+      if (!statSync10(join23(pdir, e)).isDirectory())
         continue;
     } catch {
       continue;
     }
-    const d = readJson(join22(pdir, e, "proof.json"));
+    const d = readJson(join23(pdir, e, "proof.json"));
     if (!isObj8(d))
       continue;
     total++;
@@ -24904,7 +25030,7 @@ function mount14(ctx) {
 
 // src/server/routes/session_control.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync4, readdirSync as readdirSync8, readFileSync as readFileSync15, unlinkSync as unlinkSync2, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname5, join as join23 } from "path";
+import { dirname as dirname5, join as join24 } from "path";
 var isObj9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var ACTIONS = ["pause", "resume", "stop", "council-review"];
 var isAction = (v) => ACTIONS.includes(v);
@@ -24929,7 +25055,7 @@ var readJson2 = (p) => {
 };
 function runnerPid(loki) {
   try {
-    const pid = parseInt(readFileSync15(join23(loki, "loki.pid"), "utf8").trim(), 10);
+    const pid = parseInt(readFileSync15(join24(loki, "loki.pid"), "utf8").trim(), 10);
     return pidAlive2(pid) ? pid : null;
   } catch {
     return null;
@@ -24939,18 +25065,18 @@ function applyControl(repoDir, action) {
   const loki = lokiDirOf(repoDir);
   const running = runnerPid(loki) !== null;
   const put = (rel) => {
-    const f = join23(loki, rel);
+    const f = join24(loki, rel);
     mkdirSync4(dirname5(f), { recursive: true });
     writeFileSync7(f, new Date().toISOString());
   };
   if (action === "council-review") {
-    put(join23("signals", "COUNCIL_REVIEW_REQUESTED"));
+    put(join24("signals", "COUNCIL_REVIEW_REQUESTED"));
     return { status: 200, body: { success: true, message: "Council review requested" } };
   }
   if (action === "resume") {
     for (const n2 of ["PAUSE", "STOP"]) {
       try {
-        unlinkSync2(join23(loki, n2));
+        unlinkSync2(join24(loki, n2));
       } catch {}
     }
     return running ? { status: 200, body: { success: true, message: "Session resumed", process_verified: true } } : { status: 503, body: { success: false, message: "Session process is not running; the signal files were cleared" } };
@@ -24970,16 +25096,16 @@ function runControl(db, repoDir, action, c, via) {
   return c.json(r.body, r.status);
 }
 function councilState(loki) {
-  const f = join23(loki, "council", "state.json");
+  const f = join24(loki, "council", "state.json");
   if (!existsSync11(f))
     return { enabled: false, total_votes: 0, verdicts: [] };
   const d = readJson2(f);
   return isObj9(d) ? d : { enabled: null, total_votes: null, verdicts: null, error: "unreadable_state" };
 }
 function councilVerdicts(loki, limit = 20) {
-  const st = readJson2(join23(loki, "council", "state.json"));
+  const st = readJson2(join24(loki, "council", "state.json"));
   const verdicts = isObj9(st) && Array.isArray(st.verdicts) ? st.verdicts : [];
-  const votes = join23(loki, "council", "votes");
+  const votes = join24(loki, "council", "votes");
   const details = [];
   let names = [];
   try {
@@ -24993,8 +25119,8 @@ function councilVerdicts(loki, limit = 20) {
     }
   };
   for (const n2 of names.slice(0, limit)) {
-    const dir = join23(votes, n2), d = { iteration: n2 };
-    const ev = text2(join23(dir, "evidence.md"));
+    const dir = join24(votes, n2), d = { iteration: n2 };
+    const ev = text2(join24(dir, "evidence.md"));
     if (ev !== null)
       d.evidence_preview = ev.slice(0, 500);
     let files = [];
@@ -25002,10 +25128,10 @@ function councilVerdicts(loki, limit = 20) {
       files = readdirSync8(dir).filter((f) => /^member-.*\.txt$/.test(f)).sort();
     } catch {}
     d.members = files.flatMap((f) => {
-      const t = text2(join23(dir, f));
+      const t = text2(join24(dir, f));
       return t === null ? [] : [{ member: f.replace(/\.txt$/, ""), content: t.trim() }];
     });
-    const con = text2(join23(dir, "contrarian.txt"));
+    const con = text2(join24(dir, "contrarian.txt"));
     if (con !== null)
       d.contrarian = con.trim();
     details.push(d);
@@ -25016,7 +25142,7 @@ function councilConvergence(loki) {
   const dataPoints = [];
   let raw2 = "";
   try {
-    raw2 = readFileSync15(join23(loki, "council", "convergence.log"), "utf8");
+    raw2 = readFileSync15(join24(loki, "council", "convergence.log"), "utf8");
   } catch {}
   for (const line2 of raw2.trim().split(`
 `)) {
@@ -25032,7 +25158,7 @@ function councilConvergence(loki) {
 }
 function councilReport(loki) {
   try {
-    return { report: readFileSync15(join23(loki, "council", "report.md"), "utf8") };
+    return { report: readFileSync15(join24(loki, "council", "report.md"), "utf8") };
   } catch {
     return { report: null };
   }
@@ -25045,7 +25171,7 @@ function councilTranscripts(loki, q) {
     if (Number.isNaN(since))
       return { error: "Invalid 'since' timestamp format; expected ISO8601" };
   }
-  const dir = join23(loki, "council", "transcripts");
+  const dir = join24(loki, "council", "transcripts");
   let names = [];
   try {
     names = readdirSync8(dir).filter((f) => /^iter-.*\.json$/.test(f)).sort().reverse();
@@ -25054,7 +25180,7 @@ function councilTranscripts(loki, q) {
   }
   const out2 = [];
   for (const n2 of names) {
-    const rec = readJson2(join23(dir, n2));
+    const rec = readJson2(join24(dir, n2));
     if (!isObj9(rec) || typeof rec.iteration_id !== "string")
       continue;
     if (since !== null) {
@@ -25106,12 +25232,12 @@ function mount15(ctx) {
 
 // src/server/routes/integrations.ts
 import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync16, statSync as statSync10 } from "fs";
-import { delimiter, join as join24 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync16, statSync as statSync11 } from "fs";
+import { delimiter, join as join25 } from "path";
 var GH_TIMEOUT_MS = 3000;
 var isSet = (n2) => !!n2 && (process.env[n2] ?? "") !== "";
 function ghAuthed(pathVar = process.env.PATH ?? "", timeoutMs = GH_TIMEOUT_MS) {
-  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join24(d, "gh")).find((p) => existsSync12(p));
+  const exe = pathVar.split(delimiter).filter(Boolean).map((d) => join25(d, "gh")).find((p) => existsSync12(p));
   if (!exe)
     return Promise.resolve(null);
   return new Promise((resolve6) => {
@@ -25143,7 +25269,7 @@ function ghAuthed(pathVar = process.env.PATH ?? "", timeoutMs = GH_TIMEOUT_MS) {
 function configuredName(repoDir, path) {
   try {
     const r = resolveConfigFile(repoDir);
-    if (!r.ok || !r.exists || statSync10(r.file).size > 1e6)
+    if (!r.ok || !r.exists || statSync11(r.file).size > 1e6)
       return null;
     const doc = $parseDocument(readFileSync16(r.file, "utf8"));
     if (doc.errors.length)
@@ -25156,8 +25282,8 @@ function configuredName(repoDir, path) {
 }
 function mcpServers(repoDir) {
   try {
-    const p = join24(repoDir, ".mcp.json");
-    if (!existsSync12(p) || statSync10(p).size > 1e6)
+    const p = join25(repoDir, ".mcp.json");
+    if (!existsSync12(p) || statSync11(p).size > 1e6)
       return null;
     const j = JSON.parse(readFileSync16(p, "utf8"));
     return j.mcpServers && typeof j.mcpServers === "object" ? Object.keys(j.mcpServers).length : null;
@@ -25186,7 +25312,7 @@ function conv(s) {
 }
 async function listIntegrations(repoDir, gh = () => ghAuthed()) {
   const rows = [];
-  const gitEnv2 = configuredName(repoDir, ["git", "token_env"]);
+  const gitEnv2 = configuredName(repoDir, "git.token_env".split("."));
   const ghOk = await gh();
   const gitEnvSet = isSet(gitEnv2);
   rows.push({
@@ -25548,7 +25674,7 @@ function mount18(ctx) {
 // src/server/routes/providers.ts
 import { spawn as spawn6 } from "child_process";
 import { existsSync as existsSync13, readFileSync as readFileSync17 } from "fs";
-import { delimiter as delimiter2, join as join25 } from "path";
+import { delimiter as delimiter2, join as join26 } from "path";
 var ORDER = ["claude", "codex", "cline", "aider", "opencode"];
 var DEPRECATED = ["gemini"];
 var AUTH_ENV = {
@@ -25564,7 +25690,7 @@ function findOnPath(bin, pathVar) {
   for (const d of pathVar.split(delimiter2)) {
     if (!d)
       continue;
-    const p = join25(d, bin);
+    const p = join26(d, bin);
     if (existsSync13(p))
       return p;
   }
@@ -25609,14 +25735,14 @@ function probeCli(bin, timeoutMs, pathVar = process.env.PATH ?? "") {
   });
 }
 function providersDir() {
-  const cands = [process.env.LOKI_PROVIDERS_DIR, join25(import.meta.dir, "../../../../../providers"), join25(import.meta.dir, "../../../providers")];
-  return cands.find((d) => !!d && existsSync13(join25(d, "model_catalog.json"))) ?? null;
+  const cands = [process.env.LOKI_PROVIDERS_DIR, join26(import.meta.dir, "../../../../../providers"), join26(import.meta.dir, "../../../providers")];
+  return cands.find((d) => !!d && existsSync13(join26(d, "model_catalog.json"))) ?? null;
 }
 function loadCatalog(dir) {
   if (!dir)
     return { providers: {}, updated: null };
   try {
-    const j = JSON.parse(readFileSync17(join25(dir, "model_catalog.json"), "utf8"));
+    const j = JSON.parse(readFileSync17(join26(dir, "model_catalog.json"), "utf8"));
     return { providers: j.providers ?? {}, updated: typeof j.updated === "string" ? j.updated : null };
   } catch {
     return { providers: {}, updated: null };
@@ -25739,7 +25865,7 @@ function mount20(ctx) {
 // src/server/routes/verify.ts
 import { readFileSync as readFileSync54, realpathSync as realpathSync21 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join68, sep as sep13 } from "path";
+import { join as join67, sep as sep12 } from "path";
 init_verify_cmd();
 init_seal();
 init_receipt_dsse();
@@ -25766,15 +25892,15 @@ function mount21(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync21(join68(repo.p, ".loki", "runs"));
-      runDir = realpathSync21(join68(root, run2));
-      if (runDir !== join68(root, run2))
+      const root = realpathSync21(join67(repo.p, ".loki", "runs"));
+      runDir = realpathSync21(join67(root, run2));
+      if (runDir !== join67(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync21(join68(runDir, "receipt.json"));
+      file = realpathSync21(join67(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
-    if (!file.startsWith(runDir + sep13))
+    if (!file.startsWith(runDir + sep12))
       return done(404, "receipt not found", "not_found");
     let integrity, reasons, sha4 = null, outcome = "UNREADABLE";
     try {
@@ -25852,7 +25978,7 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 
 // src/server/legacy/shim.ts
 import { existsSync as existsSync45, readFileSync as readFileSync55 } from "fs";
-import { join as join69 } from "path";
+import { join as join68 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -26230,7 +26356,7 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join69(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join68(import.meta.dir, "../../../../../VERSION")]) {
     try {
       if (existsSync45(f))
         return readFileSync55(f, "utf8").trim();
@@ -26415,7 +26541,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join70(import.meta.dir, "../../ui/dist"), join70(import.meta.dir, "../ui/dist")].find((d) => existsSync46(join70(d, "index.html")));
+var defaultUiDir = () => [join69(import.meta.dir, "../../ui/dist"), join69(import.meta.dir, "../ui/dist")].find((d) => existsSync46(join69(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -26444,7 +26570,7 @@ function createApp(opts) {
     await next();
   });
   const readInstalled = () => {
-    for (const f of [process.env.LOKI_VERSION_FILE, join70(import.meta.dir, "../../../../VERSION")]) {
+    for (const f of [process.env.LOKI_VERSION_FILE, join69(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
           return readFileSync56(f, "utf8").trim() || "unknown";
@@ -26558,11 +26684,11 @@ function createApp(opts) {
       return c.json({ error: "not found" }, 404);
     const root = resolve15(uiDir);
     const f = resolve15(root, `.${p}`);
-    if (f.startsWith(root + sep14) && existsSync46(f) && statSync23(f).isFile())
+    if (f.startsWith(root + sep13) && existsSync46(f) && statSync23(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join70(root, "index.html")));
+    return new Response(Bun.file(join69(root, "index.html")));
   });
   return { app, db, close: () => {
     clearInterval(reconciler);