loki-mode 11.4.2 → 11.6.0

package/packages/control-plane/dist/server.js

@@ -311,8 +311,10 @@ function verifyRunPid(runDir, runId, startOf = processStartTime) {
     return { ok: false, reason: "the pid now belongs to a different process (start time differs)" };
   return { ok: true, pid: rec.pid };
 }
-var runPidPath = (runDir) => join8(runDir, "run.pid");
-var init_run_pid = () => {};
+var runPidPath = (runDir) => join8(runDir, "run.pid"), liveSessions;
+var init_run_pid = __esm(() => {
+  liveSessions = new Set;
+});
 
 // src/shipper/watch.ts
 import { readFileSync as readFileSync5, readdirSync as readdirSync2, statSync } from "fs";
@@ -7323,7 +7325,38 @@ var init_paths = __esm(() => {
   REPO_ROOT = findRepoRoot();
 });
 
+// ../../loki-ts/src/engine10/registry.ts
+var init_registry = () => {};
+
+// ../../loki-ts/src/engine10/output.ts
+var init_output = __esm(() => {
+  init_registry();
+  init_redact();
+});
+
+// ../../loki-ts/src/commands/run_status.ts
+var STALE_S, TERMINAL2;
+var init_run_status = __esm(() => {
+  init_discover();
+  init_events();
+  init_output();
+  STALE_S = 30 * 60;
+  TERMINAL2 = new Set(["stage.completed", "stage.failed", "stage.skipped"]);
+});
+
 // ../../loki-ts/src/engine10/types.ts
+function pushArgv(a) {
+  switch (a.cmd) {
+    case "push-pr":
+      return ["push-pr", a.repoDir, a.branch, a.title, a.bodyFile, a.draft ? "1" : "0"];
+    case "comment":
+      return ["comment", a.runId, a.prUrl, a.file];
+    case "status":
+      return ["status", a.sha, a.state, a.description];
+    case "issue-comment":
+      return ["issue-comment", a.issueRef, a.bodyFile];
+  }
+}
 function taskBlock(task) {
   return ["Task (untrusted, quoted verbatim):", "<<<TASK", task, "TASK"];
 }
@@ -7358,243 +7391,6 @@ var init_spec_file = __esm(() => {
   SPEC_DIR = join26(".loki", "specs");
 });
 
-// ../../loki-ts/src/engine10/registry.ts
-var init_registry = () => {};
-
-// ../../loki-ts/src/engine10/output.ts
-var init_output = __esm(() => {
-  init_registry();
-  init_redact();
-});
-
-// ../../loki-ts/src/runner/router/flag.ts
-function routerMode(env = process.env) {
-  const v = (env.LOKI_ROUTER ?? "").trim().toLowerCase();
-  if (v === "0" || v === "false" || v === "off")
-    return "opt-out";
-  if (v === "1" || v === "true" || v === "on")
-    return "on";
-  return "off";
-}
-var routerEnabled = (env = process.env) => routerMode(env) === "on";
-
-// ../../loki-ts/src/runner/router/route_block.ts
-function advisorUnavailableReason(env, provider) {
-  if (provider !== "claude")
-    return `provider ${provider} has no advisor tool`;
-  if (env["CLAUDE_CODE_USE_BEDROCK"] || env["CLAUDE_CODE_USE_VERTEX"] || env["CLAUDE_CODE_USE_FOUNDRY"])
-    return "advisor tool is unsupported on Bedrock, Vertex and Foundry";
-  if ((env["LOKI_ROUTER_ADVISOR"] ?? "").trim().toLowerCase() === "off")
-    return "LOKI_ROUTER_ADVISOR=off";
-  return null;
-}
-function toEsc(raw2) {
-  const esc = Array.isArray(raw2) ? raw2 : [];
-  return esc.map((e) => ({ trigger: s0(e["trigger"]) ?? "unknown", from: modelLabel(s0(e["from"]) ?? "?"), to: modelLabel(s0(e["to"]) ?? "?"), evidence: s0(e["evidence"]) ?? "none recorded" }));
-}
-function buildRouteBlock(env, provider, route, telemetry, runModel) {
-  if (!routerEnabled(env))
-    return null;
-  const applied = route?.["applied"] !== false;
-  const executor = s0(route?.["executor"]);
-  const unavailable = s0(route?.["advisor_unavailable_reason"]) ?? advisorUnavailableReason(env, provider);
-  const total = nN(telemetry?.requests_total);
-  const over = nN(telemetry?.requests_over_100k);
-  const shape = s0(route?.["shape_key"]);
-  const escalations = toEsc(route?.["escalations"]);
-  const source = s0(route?.["source"]);
-  const reason = s0(route?.["reason"]) ?? (executor ? "no reason recorded" : "no route recorded by implement");
-  const rawUnits = Array.isArray(route?.["units"]) ? route["units"] : [];
-  const units = rawUnits.length > 0 ? rawUnits.map((u, i) => ({ id: s0(u["id"]) ?? String(i + 1), executor: modelLabel(s0(u["executor"]) ?? "unknown"), applied, assigned_by: assignedBy(s0(u["source"]) ?? source, u["assigned_by"]), reason: s0(u["reason"]) ?? "no reason recorded", escalations: toEsc(u["escalations"]) })) : executor && route?.["routed"] !== false ? [{ id: "run", executor: modelLabel(executor), applied, assigned_by: assignedBy(source, route?.["assigned_by"]), reason, escalations }] : [];
-  return {
-    routed: route?.["routed"] === false ? false : executor !== null || units.length > 0,
-    units,
-    executor: !applied ? `${runModel ? modelLabel(runModel) : "run model"} (per-unit assignment not applied)` : executor ? modelLabel(executor) : units[0]?.executor ?? null,
-    advisor: unavailable ? null : modelLabel(s0(route?.["advisor"]) ?? "opus"),
-    advisor_unavailable_reason: unavailable,
-    reason,
-    source,
-    shape_key: shape,
-    shape_parity: shape ? `NOT PROVEN (no B9 row for shape ${shape})` : "NOT PROVEN (no shape key recorded)",
-    escalations: units.length > 0 ? units.flatMap((u) => u.escalations) : escalations,
-    requests_total: total,
-    requests_over_100k: over,
-    over_100k_share: total !== null && over !== null && total > 0 ? Math.round(over / total * 1e4) / 1e4 : null,
-    advisor_calls: nN(telemetry?.advisor_calls),
-    advisor_input_tokens: nN(telemetry?.advisor_input_tokens),
-    advisor_output_tokens: nN(telemetry?.advisor_output_tokens),
-    plan_model: s0(route?.["plan_model"]),
-    applied,
-    run_model: runModel ?? null,
-    not_proven: Array.isArray(route?.["route_not_proven"]) ? route["route_not_proven"].filter((x) => typeof x === "string") : []
-  };
-}
-function routePrLine(r) {
-  if (!r.routed)
-    return `Route: not routed (${r.reason})`;
-  const adv = r.advisor ? `advisor ${r.advisor}` : "advisor unavailable";
-  return `Route: executor ${r.executor}, ${adv}; advisor tokens ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out; over 100K: ${over(r, " requests")}`;
-}
-function routeReceiptLines(r) {
-  if (!r.routed)
-    return [`- Route: not routed (${r.reason})`, `- Route shape_parity: ${r.shape_parity}`];
-  return [
-    `- Route: executor ${r.executor}, ${r.advisor ? `advisor ${r.advisor}` : `advisor unavailable: ${r.advisor_unavailable_reason}`}: ${r.reason}`,
-    `- Route shape_key: ${r.shape_key ?? "unknown"}  shape_parity: ${r.shape_parity}`,
-    `- Route escalations: ${r.escalations.length === 0 ? "none" : r.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger}; evidence ${e.evidence})`).join("; ")}`,
-    `- Route advisor: ${rec(r.advisor_calls)} calls, ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out tokens`,
-    ...r.units.map((u) => `- Route unit ${u.id}: executor ${u.applied ? u.executor : `not applied (assigned ${u.executor})`}, assigned by ${u.assigned_by}: ${u.reason}; escalation: ${u.escalations.length === 0 ? "none" : u.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger})`).join(", ")}`),
-    `- Route requests over 100K: ${over(r, "")}`
-  ];
-}
-function routeNotProven(r) {
-  return [
-    ...r.advisor_unavailable_reason ? [`advisor: NOT PROVEN (owner provider): ${r.advisor_unavailable_reason}`] : [],
-    `route.shape_parity: ${r.shape_parity}`,
-    ...r.applied ? [] : [`route.executor: NOT PROVEN (owner engine): per-unit executor assignment is not applied (R1-11); every stage ran ${r.run_model ?? "the run model"}`],
-    ...r.not_proven
-  ];
-}
-var ALIAS, modelLabel = (m) => ALIAS[m] ?? m, nN = (v) => typeof v === "number" && Number.isFinite(v) ? v : null, rec = (v) => v === null ? "not recorded" : String(v), s0 = (v) => typeof v === "string" && v.trim() ? v.trim() : null, assignedBy = (src, explicit) => s0(explicit) ?? (src === null || src === "opus" ? "opus" : src), over = (r, unit) => r.requests_total === null || r.requests_over_100k === null ? "not recorded" : `${r.requests_over_100k} of ${r.requests_total}${unit} (${pct(r)})`, pct = (r) => r.over_100k_share === null ? "n/a (no requests)" : `${(r.over_100k_share * 100).toFixed(1)}%`;
-var init_route_block = __esm(() => {
-  ALIAS = { haiku: "haiku-5.5", sonnet: "sonnet-5.5", opus: "opus-5.5" };
-});
-
-// ../../loki-ts/src/features/speed/seal_group.ts
-import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync15, readdirSync as readdirSync9, readFileSync as readFileSync18, statSync as statSync11 } from "fs";
-import { dirname as dirname7, join as join27 } from "path";
-function sealGroup(runDir, rh) {
-  const manifestPath = join27(runDir, "group", "manifest.json");
-  if (!existsSync15(manifestPath))
-    return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
-  const notProven = [];
-  let problems = 0;
-  const fail = (m2) => {
-    problems++;
-    notProven.push(`group: ${m2}`);
-  };
-  const m = readJson3(manifestPath);
-  const list = isObj10(m) && Array.isArray(m["units"]) ? m["units"] : [];
-  if (!isObj10(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
-    fail("manifest missing, unreadable or empty");
-    return { section: undefined, notProven, problems, allUnitsPass: false };
-  }
-  const units = [];
-  const seen = new Set, seenLower = new Set;
-  let allUnitsPass = true;
-  list.forEach((raw2, index2) => {
-    const u = isObj10(raw2) ? raw2 : {};
-    const id = String(u["unit_id"] ?? "");
-    if (!ID_RE.test(id) || seen.has(id) || seenLower.has(id.toLowerCase()))
-      return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
-    seen.add(id);
-    seenLower.add(id.toLowerCase());
-    const dir = join27(unitsDir(runDir), id), rp = join27(dir, "receipt.json"), ep = join27(dir, "events.jsonl");
-    let bytes;
-    try {
-      bytes = readFileSync18(rp);
-    } catch {
-      return fail(`unit ${id} sub-receipt missing`);
-    }
-    const sub = readJson3(rp);
-    if (!isObj10(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
-      return fail(`unit ${id} sub-receipt unreadable or its hash does not recompute`);
-    const verdict = String(sub["verdict"] ?? "");
-    if (!PASSING.has(verdict)) {
-      allUnitsPass = false;
-      notProven.push(`group: unit ${id} verdict ${verdict || "unknown"}`);
-    }
-    units.push({
-      index: index2,
-      unit_id: id,
-      sub_receipt_sha256: sha2(bytes),
-      receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync15(ep) ? sha2(readFileSync18(ep)) : null,
-      verdict,
-      goal: text2(u["goal"], 200),
-      files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
-      tests: num3(u["tests"]),
-      tokens: num3(u["tokens"]),
-      model: text2(u["model"], 64)
-    });
-  });
-  const extra = (dirNames(unitsDir(runDir)) ?? []).filter((n2) => !seen.has(n2));
-  for (const n2 of extra)
-    fail(`unit directory ${text2(n2, 64)} is not in the manifest`);
-  return { section: problems === 0 ? { group_id: String(m["group_id"]), units } : undefined, notProven, problems, allUnitsPass: allUnitsPass && problems === 0 };
-}
-function capGroupVerdict(v, g) {
-  if (g.problems > 0)
-    return v === "SPEC_CONFLICT" ? v : "FAILED";
-  return !g.allUnitsPass && (v === "VERIFIED" || v === "ALREADY_SATISFIED") ? "PARTIAL" : v;
-}
-async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
-  const runDir = dirname7(receiptPath);
-  const signed = isObj10(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
-  const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
-  const g = receipt["group"];
-  if (g === undefined)
-    return existsSync15(join27(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
-  if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
-    return bad("group section malformed");
-  const entries = g["units"];
-  const ids = entries.map((e) => isObj10(e) ? String(e["unit_id"] ?? "") : "");
-  if (ids.some((id) => !ID_RE.test(id)) || new Set(ids.map((i) => i.toLowerCase())).size !== ids.length)
-    return bad("unit ids invalid, duplicated or case-colliding");
-  const onDisk = dirNames(unitsDir(runDir));
-  if (onDisk === null || onDisk.join("\x00") !== [...ids].sort().join("\x00"))
-    return bad("unit directories do not match the receipt (missing or extra unit)");
-  let unchecked = null;
-  for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join27(unitsDir(runDir), id), rp = join27(dir, "receipt.json"), ep = join27(dir, "events.jsonl");
-    if (e["index"] !== i)
-      return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
-    let bytes;
-    try {
-      if (!statSync11(dir).isDirectory())
-        return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync18(rp);
-    } catch {
-      return bad(`unit ${id} sub-receipt missing`);
-    }
-    if (sha2(bytes) !== e["sub_receipt_sha256"])
-      return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync15(ep) ? sha2(readFileSync18(ep)) : null;
-    if (evSha !== (e["events_file_sha256"] ?? null))
-      return bad(`unit ${id} events.jsonl does not match its recorded hash`);
-    const sub = readJson3(rp);
-    if (!isObj10(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
-      return bad(`unit ${id} sub-receipt hash does not recompute`);
-    if (String(sub["verdict"] ?? "") !== e["verdict"])
-      return bad(`unit ${id} verdict differs from the combined receipt`);
-    const r = await verifyOne(rp, deps);
-    if (r.verdict === "UNSIGNED" && signed)
-      unchecked ??= `unit ${id} sub-receipt is unsigned under a signed combined receipt`;
-    if (r.verdict === "TAMPERED")
-      return bad(`unit ${id} sub-receipt failed verify: ${r.reasons.join("; ")}`);
-    if (r.verdict === "UNCHECKED")
-      unchecked ??= `unit ${id} sub-receipt not checked: ${r.reasons.join("; ")}`;
-  }
-  return unchecked ? { verdict: "UNCHECKED", reason: `group: ${unchecked}` } : null;
-}
-var ID_RE, PASSING, sha2 = (b) => createHash6("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num3 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join27(runDir, "group", "units"), readJson3 = (p) => {
-  try {
-    return JSON.parse(readFileSync18(p, "utf8"));
-  } catch {
-    return;
-  }
-}, dirNames = (d) => {
-  try {
-    return readdirSync9(d).filter((n2) => !n2.startsWith(".")).sort();
-  } catch {
-    return null;
-  }
-};
-var init_seal_group = __esm(() => {
-  ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-  PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
-});
 // ../../loki-ts/src/engine10/pr_body.ts
 function aiTrailers(i, env = process.env) {
   if (!markingOn(env))
@@ -7602,16 +7398,11 @@ function aiTrailers(i, env = process.env) {
   return ["AI-Generated: true", `AI-Provider: ${clean(i.provider)}`, `AI-Model: ${clean(i.model)}`, `Loki-Receipt: ${clean(i.receiptRel)}`];
 }
 var markingOn = (env) => env["LOKI_AI_MARKING"] === "1", clean = (v) => v.replace(/[\u0000-\u001f\u007f\u2028\u2029]+/g, " ").replace(/\s+/g, " ").trim().slice(0, 100) || "unknown";
-var init_pr_body = __esm(() => {
-  init_output();
-  init_route_block();
-  init_seal_group();
-});
 
 // ../../loki-ts/src/util/credential_env.ts
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, statSync as statSync12, lstatSync as lstatSync4 } from "fs";
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, statSync as statSync11, lstatSync as lstatSync4 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join28 } from "path";
+import { join as join27 } from "path";
 import { randomBytes as randomBytes2 } from "crypto";
 function withheldSentinel(fresh = false) {
   if (fresh)
@@ -7630,7 +7421,7 @@ function emptyGhConfigDir(env = process.env) {
   const runTmp = env["LOKI_RUN_TMP"] ?? "";
   const root = runTmp !== "" && isDir(runTmp) ? runTmp : tmpdir3();
   try {
-    configDir = mkdtempSync2(join28(root, "loki-gh-config-"));
+    configDir = mkdtempSync2(join27(root, "loki-gh-config-"));
   } catch {
     return null;
   }
@@ -7671,7 +7462,7 @@ function hardenCredentialEnv(env, fresh = false) {
 }
 var GITHUB_TOKEN_VARS, SENTINEL_PREFIX = "ghp_LOKIWITHHELDsentinel", sentinel = null, configDir = null, exitHooked = false, sigtermHooked = false, isDir = (p) => {
   try {
-    return !lstatSync4(p).isSymbolicLink() && statSync12(p).isDirectory();
+    return !lstatSync4(p).isSymbolicLink() && statSync11(p).isDirectory();
   } catch {
     return false;
   }
@@ -7785,17 +7576,21 @@ var init_safe_git = __esm(() => {
   OPT_WITH_VALUE = new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env", "--attr-source"]);
   SECRET_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN", "SSH_AUTH_SOCK"];
 });
+// ../../loki-ts/src/util/yaml_key.ts
+var init_yaml_key = () => {};
+
 // ../../loki-ts/src/util/run_cap.ts
 var MAX_SCOPE_BYTES;
 var init_run_cap = __esm(() => {
   init_types();
+  init_yaml_key();
   MAX_SCOPE_BYTES = 256 * 1024;
 });
 
 // ../../loki-ts/src/util/mutation_proof.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync3, readFileSync as readFileSync19, rmSync as rmSync5, symlinkSync, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync3, readFileSync as readFileSync18, rmSync as rmSync5, symlinkSync, writeFileSync as writeFileSync8 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename8, dirname as dirname8, isAbsolute as isAbsolute2, join as join29, relative as relative2 } from "path";
+import { basename as basename8, dirname as dirname7, isAbsolute as isAbsolute2, join as join28, relative as relative2 } from "path";
 function mutationProof(i) {
   const rels = i.wallFiles.map((f) => isAbsolute2(f.path) ? relative2(i.repoDir, f.path) : f.path);
   if (rels.length === 0)
@@ -7813,26 +7608,26 @@ function mutationProof(i) {
   const deadline = Date.now() + budgetS * 1000, remaining = () => deadline - Date.now();
   let parent = null, wt = null, added = false;
   try {
-    parent = mkdtempSync3(join29(tmpdir4(), "loki-mutproof-"));
-    wt = join29(parent, "wt");
+    parent = mkdtempSync3(join28(tmpdir4(), "loki-mutproof-"));
+    wt = join28(parent, "wt");
     const add2 = git(i.repoDir, ["worktree", "add", "--detach", wt, i.baseSha], Math.max(1000, Math.min(30000, remaining())));
-    added = existsSync16(wt) || add2.status === 0;
+    added = existsSync15(wt) || add2.status === 0;
     if (add2.status !== 0)
       return np("could not create the base worktree");
     for (const rel of rels) {
-      const sealed = join29(i.runDir, "wall", basename8(rel)), src = existsSync16(sealed) ? sealed : join29(i.repoDir, rel);
-      if (!existsSync16(src))
+      const sealed = join28(i.runDir, "wall", basename8(rel)), src = existsSync15(sealed) ? sealed : join28(i.repoDir, rel);
+      if (!existsSync15(src))
         return np(`Wall file missing: ${rel}`);
-      mkdirSync5(dirname8(join29(wt, rel)), { recursive: true });
-      writeFileSync8(join29(wt, rel), readFileSync19(src));
+      mkdirSync5(dirname7(join28(wt, rel)), { recursive: true });
+      writeFileSync8(join28(wt, rel), readFileSync18(src));
     }
     for (const rel of rels) {
       const parts = rel.split("/").slice(0, -1);
       for (let n2 = 0;n2 <= parts.length; n2++) {
         const anc = parts.slice(0, n2).join("/");
         for (const d of DEP_DIRS) {
-          const src = join29(i.repoDir, anc, d), dst = join29(wt, anc, d);
-          if (existsSync16(src) && !existsSync16(dst)) {
+          const src = join28(i.repoDir, anc, d), dst = join28(wt, anc, d);
+          if (existsSync15(src) && !existsSync15(dst)) {
             try {
               symlinkSync(src, dst);
             } catch {}
@@ -7890,7 +7685,7 @@ var init_lean_prefix = __esm(() => {
 
 // ../../loki-ts/src/features/wall_manifest.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { accessSync, constants, statSync as statSync13 } from "fs";
+import { accessSync, constants, statSync as statSync12 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 function templateEnd(s, i) {
   for (let j = i + 1;j < s.length; ) {
@@ -8624,7 +8419,7 @@ function resolvePython3() {
     const cand = `${dir}/python3`;
     try {
       accessSync(cand, constants.X_OK);
-      if (statSync13(cand).isFile())
+      if (statSync12(cand).isFile())
         return cand;
     } catch {}
   }
@@ -8947,8 +8742,8 @@ var init_wall_manifest = __esm(() => {
 });
 
 // ../../loki-ts/src/features/wall_manifest_wire.ts
-import { createHash as createHash7 } from "crypto";
-import { basename as basename9, dirname as dirname9 } from "path";
+import { createHash as createHash6 } from "crypto";
+import { basename as basename9, dirname as dirname8 } from "path";
 function blobEntries(ls) {
   const out2 = [];
   for (const raw2 of ls.toString("latin1").split("\x00")) {
@@ -8978,7 +8773,7 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
       return null;
     const low = task.toLowerCase().replace(/\\/g, "/");
     const token = (n2) => new RegExp(`(?<![A-Za-z0-9_])${n2.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`).test(low);
-    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename9(e.path)) && e.path.includes("/") && token(dirname9(e.path));
+    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename9(e.path)) && e.path.includes("/") && token(dirname8(e.path));
     const matched = all.filter((e) => SOURCE.test(e.path) && (token(basename9(e.path)) || token(e.path) || token(basename9(e.path).replace(/\.[^.]*$/, "")) || dirModule(e)));
     const spans = (p) => [...low.matchAll(new RegExp(`(?<![A-Za-z0-9_])${p.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`, "g"))].map((m) => [m.index, m.index + m[0].length]);
     const occ = new Map(matched.map((e) => [e, spans(e.path)]));
@@ -9006,8 +8801,8 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
     }
     if (at !== cat.length)
       return null;
-    const text3 = buildWallManifest([...files, ...listed.map((e) => ({ path: e.path, content: "" }))], named.map((e) => e.path), matched.map((e) => e.path));
-    return { text: text3, sha256: createHash7("sha256").update(text3).digest("hex") };
+    const text2 = buildWallManifest([...files, ...listed.map((e) => ({ path: e.path, content: "" }))], named.map((e) => e.path), matched.map((e) => e.path));
+    return { text: text2, sha256: createHash6("sha256").update(text2).digest("hex") };
   } catch {
     return null;
   }
@@ -9039,12 +8834,12 @@ Example: test('name', () => { assert.strictEqual(fn(1), 2); });  Run: node --tes
 });
 
 // ../../loki-ts/src/engine10/cache.ts
-import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync6, readFileSync as readFileSync20, writeFileSync as writeFileSync9 } from "fs";
+import { createHash as createHash7 } from "crypto";
+import { existsSync as existsSync16, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
 import { resolve as resolve8 } from "path";
 function repoKey(originUrl, repoDir) {
   const basis = originUrl && originUrl.trim() !== "" ? originUrl : resolve8(repoDir);
-  return createHash8("sha256").update(basis).digest("hex");
+  return createHash7("sha256").update(basis).digest("hex");
 }
 function defaultCacheRoot() {
   return resolve8(homeLokiDir(), "cache", "v10");
@@ -9052,11 +8847,11 @@ function defaultCacheRoot() {
 function repoCacheDir(key, cacheRoot = defaultCacheRoot()) {
   return resolve8(cacheRoot, key);
 }
-function readJson4(path, isValid = (_v) => true) {
-  if (!existsSync17(path))
+function readJson3(path, isValid = (_v) => true) {
+  if (!existsSync16(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync20(path, "utf8"));
+    const parsed = JSON.parse(readFileSync19(path, "utf8"));
     return isValid(parsed) ? parsed : null;
   } catch {
     return null;
@@ -9066,7 +8861,7 @@ function isRepoMap(v) {
   return typeof v === "object" && v !== null && Array.isArray(v.files) && Array.isArray(v.entries);
 }
 function readRepoMapCache(dir, tree) {
-  return readJson4(resolve8(dir, `repomap-${tree}.json`), isRepoMap);
+  return readJson3(resolve8(dir, `repomap-${tree}.json`), isRepoMap);
 }
 var init_cache = __esm(() => {
   init_paths();
@@ -9091,7 +8886,7 @@ function selectSpecificFiles(task, repoMap, max = MAX_RELEVANT_FILES) {
   const scored = sets.map((toks, idx) => ({ path: entries[idx].path, score: specific.reduce((n2, w) => n2 + (toks.has(w) ? 1 : 0), 0), idx }));
   return scored.filter((s) => s.score > 0).sort((a, b) => b.score - a.score || a.idx - b.idx).slice(0, max).map((s) => s.path);
 }
-var MAX_RELEVANT_FILES = 8, haystack = (entry) => `${entry.path} ${entry.symbols.join(" ")}`.toLowerCase(), wordTokens = (text3) => text3.toLowerCase().match(/[a-z0-9_]+/g) ?? [];
+var MAX_RELEVANT_FILES = 8, haystack = (entry) => `${entry.path} ${entry.symbols.join(" ")}`.toLowerCase(), wordTokens = (text2) => text2.toLowerCase().match(/[a-z0-9_]+/g) ?? [];
 
 // ../../loki-ts/src/features/speed/lean_select.ts
 function speedLikelyFiles(task, map, env = process.env) {
@@ -9106,12 +8901,12 @@ function speedLikelyFiles(task, map, env = process.env) {
 var init_lean_select = () => {};
 
 // ../../loki-ts/src/util/claude_model.ts
-import { readFileSync as readFileSync21 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 import { resolve as resolve9 } from "path";
 function resolveClaudeModel(want) {
   try {
     const path = process.env["LOKI_MODEL_CATALOG"] || resolve9(REPO_ROOT, "providers/model_catalog.json");
-    return JSON.parse(readFileSync21(path, "utf8")).providers?.claude?.cli_aliases?.[want] ?? want;
+    return JSON.parse(readFileSync20(path, "utf8")).providers?.claude?.cli_aliases?.[want] ?? want;
   } catch {
     return want;
   }
@@ -9159,17 +8954,28 @@ var init_hooks = __esm(() => {
   hooks = {};
 });
 
+// ../../loki-ts/src/runner/router/flag.ts
+function routerMode(env = process.env) {
+  const v = (env.LOKI_ROUTER ?? "").trim().toLowerCase();
+  if (v === "0" || v === "false" || v === "off")
+    return "opt-out";
+  if (v === "1" || v === "true" || v === "on")
+    return "on";
+  return "off";
+}
+var routerEnabled = (env = process.env) => routerMode(env) === "on";
+
 // ../../loki-ts/src/engine10/cost.ts
-import { mkdirSync as mkdirSync7, readdirSync as readdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync10 } from "fs";
-import { join as join30 } from "path";
+import { mkdirSync as mkdirSync7, readdirSync as readdirSync9, readFileSync as readFileSync21, writeFileSync as writeFileSync10 } from "fs";
+import { join as join29 } from "path";
 function routerTelemetryOn(env = process.env) {
   return routerEnabled(env);
 }
-function num4(v) {
+function num3(v) {
   return typeof v === "number" && Number.isFinite(v) ? v : 0;
 }
 function resultCostPath(lokiRoot, iteration) {
-  return join30(lokiRoot, "metrics", `result-cost-${iteration}.json`);
+  return join29(lokiRoot, "metrics", `result-cost-${iteration}.json`);
 }
 function sumResultCosts(lokiRoot, iterations, context = []) {
   const out2 = {
@@ -9200,7 +9006,7 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
   const parsed = new Map;
   for (const iter of iterations) {
     try {
-      parsed.set(iter, JSON.parse(readFileSync22(resultCostPath(lokiRoot, iter), "utf8")));
+      parsed.set(iter, JSON.parse(readFileSync21(resultCostPath(lokiRoot, iter), "utf8")));
     } catch {}
   }
   const own = new Set(iterations);
@@ -9209,15 +9015,15 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
     if (own.has(iter))
       continue;
     try {
-      lookup.push({ iter, rec: JSON.parse(readFileSync22(resultCostPath(lokiRoot, iter), "utf8")) });
+      lookup.push({ iter, rec: JSON.parse(readFileSync21(resultCostPath(lokiRoot, iter), "utf8")) });
     } catch {}
   }
   const verdicts = hooks.costRecords?.resumeVerdicts(lookup) ?? { ambiguous: [], separate: [] };
   const rv = { ambiguous: verdicts.ambiguous.filter((i) => own.has(i)), separate: verdicts.separate.filter((i) => own.has(i)) };
   for (const iter of iterations) {
     const path = resultCostPath(lokiRoot, iter);
-    const rec2 = parsed.get(iter);
-    if (!rec2) {
+    const rec = parsed.get(iter);
+    if (!rec) {
       out2.missing.push(iter);
       continue;
     }
@@ -9227,45 +9033,45 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
       continue;
     }
     tokenSessions++;
-    const inTok = num4(rec2["input_tokens"]);
-    const outTok = num4(rec2["output_tokens"]);
-    const cacheR = num4(rec2["cache_read_tokens"]);
-    const cacheC = num4(rec2["cache_creation_tokens"]);
+    const inTok = num3(rec["input_tokens"]);
+    const outTok = num3(rec["output_tokens"]);
+    const cacheR = num3(rec["cache_read_tokens"]);
+    const cacheC = num3(rec["cache_creation_tokens"]);
     out2.input_tokens += inTok;
     out2.output_tokens += outTok;
     out2.cache_read_tokens += cacheR;
     out2.cache_creation_tokens += cacheC;
-    if (typeof rec2["cache_read_tokens"] === "number")
+    if (typeof rec["cache_read_tokens"] === "number")
       readSeen++;
-    if (typeof rec2["cache_creation_tokens"] === "number")
+    if (typeof rec["cache_creation_tokens"] === "number")
       creationSeen++;
-    if (typeof rec2["duration_ms"] === "number" && Number.isFinite(rec2["duration_ms"])) {
-      out2.duration_ms = (out2.duration_ms ?? 0) + rec2["duration_ms"];
+    if (typeof rec["duration_ms"] === "number" && Number.isFinite(rec["duration_ms"])) {
+      out2.duration_ms = (out2.duration_ms ?? 0) + rec["duration_ms"];
       durSeen++;
     }
     if (out2.router)
-      out2.router["requests_total"] += num4(rec2["requests_total"]);
+      out2.router["requests_total"] += num3(rec["requests_total"]);
     if (out2.router)
-      out2.router["requests_over_100k"] += num4(rec2["requests_over_100k"]);
+      out2.router["requests_over_100k"] += num3(rec["requests_over_100k"]);
     if (out2.router)
-      out2.router["over_100k_input_tokens"] += num4(rec2["over_100k_input_tokens"]);
+      out2.router["over_100k_input_tokens"] += num3(rec["over_100k_input_tokens"]);
     if (out2.router)
-      out2.router["over_100k_output_tokens"] += num4(rec2["over_100k_output_tokens"]);
+      out2.router["over_100k_output_tokens"] += num3(rec["over_100k_output_tokens"]);
     if (out2.router)
-      out2.router["advisor_calls"] += num4(rec2["advisor_calls"]);
+      out2.router["advisor_calls"] += num3(rec["advisor_calls"]);
     if (out2.router)
-      out2.router["advisor_input_tokens"] += num4(rec2["advisor_input_tokens"]);
+      out2.router["advisor_input_tokens"] += num3(rec["advisor_input_tokens"]);
     if (out2.router)
-      out2.router["advisor_output_tokens"] += num4(rec2["advisor_output_tokens"]);
-    if (typeof rec2["model"] === "string" && rec2["model"])
-      out2.model = rec2["model"];
+      out2.router["advisor_output_tokens"] += num3(rec["advisor_output_tokens"]);
+    if (typeof rec["model"] === "string" && rec["model"])
+      out2.model = rec["model"];
     sources2.push(path);
-    recs.push({ iter, rec: rec2 });
-    const c = rec2["total_cost_usd"];
-    const unmetered = rec2["source"] === UNMETERED;
+    recs.push({ iter, rec });
+    const c = rec["total_cost_usd"];
+    const unmetered = rec["source"] === UNMETERED;
     if (unmetered)
       out2.unmetered = true;
-    if (rec2["estimated"] === true)
+    if (rec["estimated"] === true)
       out2.estimated = true;
     const noUsage = !unmetered && inTok === 0 && outTok === 0 && cacheR === 0 && cacheC === 0;
     if (typeof c !== "number" || !Number.isFinite(c) || noUsage) {
@@ -9306,17 +9112,83 @@ var init_cost = __esm(() => {
   init_hooks();
 });
 
-// ../../loki-ts/src/runner/budget.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync8, readdirSync as readdirSync11, readFileSync as readFileSync23, renameSync as renameSync4, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname10, join as join31, resolve as resolve10 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-function _loadPricing() {
-  try {
-    const moduleDir = dirname10(fileURLToPath2(import.meta.url));
+// ../../loki-ts/src/util/atomic.ts
+import {
+  closeSync as closeSync5,
+  fstatSync as fstatSync4,
+  fsyncSync as fsyncSync2,
+  lstatSync as lstatSync5,
+  mkdirSync as mkdirSync8,
+  openSync as openSync5,
+  readSync as readSync4,
+  renameSync as renameSync4,
+  rmSync as rmSync6,
+  statSync as statSync13,
+  unlinkSync as unlinkSync3,
+  writeFileSync as writeFileSync11,
+  writeSync as writeSync3
+} from "fs";
+import { dirname as dirname9 } from "path";
+function durableWriteThenRename(target, body) {
+  mkdirSync8(dirname9(target), { recursive: true });
+  const tmp = tmpPathFor(target);
+  const fd = openSync5(tmp, "w");
+  try {
+    writeSync3(fd, body);
+    fsyncSync2(fd);
+  } finally {
+    closeSync5(fd);
+  }
+  renameSync4(tmp, target);
+  fsyncParentDir(target);
+}
+function fsyncParentDir(target) {
+  let dfd = null;
+  try {
+    dfd = openSync5(dirname9(target), "r");
+    fsyncSync2(dfd);
+  } catch {} finally {
+    if (dfd !== null) {
+      try {
+        closeSync5(dfd);
+      } catch {}
+    }
+  }
+}
+function atomicWriteJson(target, data) {
+  durableWriteThenRename(target, `${JSON.stringify(data, null, 2)}
+`);
+}
+function tmpPathFor(target) {
+  return `${target}.tmp.${process.pid}.${++_tmpCounter}`;
+}
+var _tmpCounter = 0, _appendChains;
+var init_atomic = __esm(() => {
+  _appendChains = new Map;
+});
+
+// ../../loki-ts/src/runner/budget.ts
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname10, join as join30, resolve as resolve10 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function loadDefaultMaxCostUsd() {
+  const here = dirname10(fileURLToPath2(import.meta.url));
+  for (const rel of [["..", "..", "data"], ["..", "data"]]) {
+    try {
+      const j = JSON.parse(readFileSync22(resolve10(here, ...rel, "model-pricing.json"), "utf8"));
+      if (typeof j.default_max_cost_usd === "number" && Number.isFinite(j.default_max_cost_usd) && j.default_max_cost_usd > 0)
+        return j.default_max_cost_usd;
+    } catch {}
+  }
+  return DEFAULT_FALLBACK_USD;
+}
+function _loadPricing() {
+  try {
+    const moduleDir = dirname10(fileURLToPath2(import.meta.url));
     const jsonPath = resolve10(moduleDir, "..", "..", "data", "model-pricing.json");
-    if (!existsSync18(jsonPath))
+    if (!existsSync17(jsonPath))
       return _FALLBACK_PRICING;
-    const raw2 = JSON.parse(readFileSync23(jsonPath, "utf8"));
+    const raw2 = JSON.parse(readFileSync22(jsonPath, "utf8"));
     const pricing2 = raw2["pricing"];
     if (!pricing2 || typeof pricing2 !== "object")
       return _FALLBACK_PRICING;
@@ -9344,8 +9216,9 @@ function _loadPricing() {
     return _FALLBACK_PRICING;
   }
 }
-var _FALLBACK_PRICING, PRICING;
+var DEFAULT_FALLBACK_USD = 100, _FALLBACK_PRICING, PRICING;
 var init_budget = __esm(() => {
+  init_atomic();
   init_paths();
   init_cost();
   _FALLBACK_PRICING = {
@@ -9393,13 +9266,37 @@ var init_session_route = __esm(() => {
 });
 
 // ../../loki-ts/src/providers/provider_guard.ts
+function providerSandboxFlags(provider) {
+  switch (provider) {
+    case "codex":
+      return ["--sandbox", "workspace-write"];
+    case "aider":
+      return ["--no-auto-commits"];
+    default:
+      return [];
+  }
+}
+var E10_COMMON = "loki-ts/src/engine10/session.ts (detached spawn, killGroupWithGrace, recordCost, watchBudget), loki-ts/src/providers/provider_guard.ts, loki-ts/src/e10ext/budget_cap.ts", U = "unknown", CAPABILITIES;
 var init_provider_guard = __esm(() => {
   init_safe_git();
+  CAPABILITIES = [
+    { provider: "claude", engine: "engine10", invocation: "Agent SDK query() (default) or claude CLI via loki-ts/src/runner/providers.ts", cost: "measured", budgetKill: "post-iteration", cancelProcessGroup: "yes", sandboxFlags: [], receipt: "yes", resume: "yes", guardScan: "native", killBlocking: "native", source: `${E10_COMMON}; loki-ts/src/runner/providers.ts (LOKI_E10_RESUME_SESSION, claude only)` },
+    { provider: "codex", engine: "engine10", invocation: "codex exec --sandbox workspace-write --skip-git-repo-check", cost: "estimated", budgetKill: "post-iteration", cancelProcessGroup: "yes", sandboxFlags: providerSandboxFlags("codex"), receipt: "yes", resume: "no", guardScan: "post-iteration", killBlocking: "none", source: `${E10_COMMON}; loki-ts/src/providers/provider_cost.ts (ESTIMATED_PROVIDERS); loki-ts/src/runner/providers.ts codexProvider` },
+    { provider: "cline", engine: "engine10", invocation: "cline -y", cost: "estimated", budgetKill: "post-iteration", cancelProcessGroup: "yes", sandboxFlags: providerSandboxFlags("cline"), receipt: "yes", resume: "no", guardScan: "post-iteration", killBlocking: "none", source: `${E10_COMMON}; loki-ts/src/providers/provider_cost.ts; providers/cline.sh` },
+    { provider: "aider", engine: "engine10", invocation: "aider --yes-always", cost: "estimated", budgetKill: "post-iteration", cancelProcessGroup: "yes", sandboxFlags: providerSandboxFlags("aider"), receipt: "yes", resume: "no", guardScan: "post-iteration", killBlocking: "none", source: `${E10_COMMON}; loki-ts/src/providers/provider_cost.ts (a reported "Cost: $X session" line is used as-is); providers/aider.sh` },
+    { provider: "opencode", engine: "engine10", invocation: "opencode run --auto [-m provider/model]", cost: "none", budgetKill: "none", cancelProcessGroup: "yes", sandboxFlags: providerSandboxFlags("opencode"), receipt: "yes", resume: "no", guardScan: "post-iteration", killBlocking: "none", source: `${E10_COMMON}; loki-ts/src/runner/provider_opencode.ts (costMeasured false); loki-ts/src/providers/provider_cost.ts (opencode not in ESTIMATED_PROVIDERS); docs/v10/GUIDE.md provider table` },
+    { provider: "claude", engine: "legacy", invocation: "claude --dangerously-skip-permissions (bash loop)", cost: U, budgetKill: U, cancelProcessGroup: U, sandboxFlags: U, receipt: U, resume: U, guardScan: U, killBlocking: U, source: "providers/claude.sh (PROVIDER_AUTONOMOUS_FLAG); autonomy/run.sh (LOKI_BUDGET_LIMIT); other fields not confirmed" },
+    { provider: "codex", engine: "legacy", invocation: "codex exec --sandbox workspace-write --skip-git-repo-check (bash loop)", cost: U, budgetKill: U, cancelProcessGroup: U, sandboxFlags: ["--sandbox", "workspace-write"], receipt: U, resume: U, guardScan: U, killBlocking: U, source: "providers/codex.sh (PROVIDER_AUTONOMOUS_FLAG); other fields not confirmed" },
+    { provider: "cline", engine: "legacy", invocation: "cline -y (bash loop)", cost: U, budgetKill: U, cancelProcessGroup: U, sandboxFlags: U, receipt: U, resume: U, guardScan: U, killBlocking: U, source: "providers/cline.sh (PROVIDER_AUTONOMOUS_FLAG); other fields not confirmed" },
+    { provider: "aider", engine: "legacy", invocation: "aider --yes-always (bash loop)", cost: U, budgetKill: U, cancelProcessGroup: U, sandboxFlags: U, receipt: U, resume: U, guardScan: U, killBlocking: U, source: "providers/aider.sh (PROVIDER_AUTONOMOUS_FLAG); other fields not confirmed" },
+    { provider: "opencode", engine: "legacy", invocation: "opencode run --auto (bash loop)", cost: U, budgetKill: U, cancelProcessGroup: U, sandboxFlags: U, receipt: U, resume: U, guardScan: U, killBlocking: U, source: "providers/opencode.sh (PROVIDER_AUTONOMOUS_FLAG); other fields not confirmed" }
+  ];
 });
 
 // ../../loki-ts/src/engine10/session.ts
 var STDERR_TAIL_BYTES, ADVISOR_MARKED_STAGES;
 var init_session = __esm(() => {
+  init_run_pid();
   init_provider_cost();
   init_model_routes();
   init_cost();
@@ -9421,7 +9318,7 @@ var init_model_rank = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/sizing.ts
-import { existsSync as existsSync19, readFileSync as readFileSync24 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync23 } from "fs";
 import { basename as basename10 } from "path";
 function namedFiles(task, map) {
   return (map?.files ?? []).filter((f) => task.toLowerCase().includes(basename10(f).toLowerCase()));
@@ -9440,10 +9337,10 @@ function sizeTask(task, map, tests) {
   return why.length ? { size: "normal", reasons: why } : { size: "small", reasons: [`task ${task.length} chars, names ${named} files`] };
 }
 function loadRepoMap(repomapRef) {
-  if (!repomapRef || !existsSync19(repomapRef))
+  if (!repomapRef || !existsSync18(repomapRef))
     return null;
   try {
-    return JSON.parse(readFileSync24(repomapRef, "utf8"));
+    return JSON.parse(readFileSync23(repomapRef, "utf8"));
   } catch {
     return null;
   }
@@ -9474,8 +9371,8 @@ var init_sizing = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/schema.ts
-import { existsSync as existsSync20, lstatSync as lstatSync5, realpathSync as realpathSync14, statSync as statSync14 } from "fs";
-import { isAbsolute as isAbsolute3, join as join33, normalize, sep as sep9 } from "path";
+import { existsSync as existsSync19, lstatSync as lstatSync6, realpathSync as realpathSync14, statSync as statSync14 } from "fs";
+import { isAbsolute as isAbsolute3, join as join32, normalize, sep as sep9 } from "path";
 function safeRel(p) {
   const n2 = normalize(p.trim()).split(sep9).join("/").replace(/\/$/, "");
   if (n2 === "" || isAbsolute3(n2) || n2 === ".." || n2.startsWith("../"))
@@ -9484,7 +9381,7 @@ function safeRel(p) {
 }
 function insideRepo(repoDir, rel) {
   try {
-    const real2 = realpathSync14(join33(repoDir, rel));
+    const real2 = realpathSync14(join32(repoDir, rel));
     const base = realpathSync14(repoDir);
     return real2 === base || real2.startsWith(base + sep9);
   } catch {
@@ -9497,8 +9394,8 @@ function checkCitation(repoDir, raw2) {
   const rel = safeRel(raw2.replace(/:\d+(?:-\d+)?$/, ""));
   if (rel === null)
     return `citation "${raw2}" is not a repo-relative path`;
-  const abs = join33(repoDir, rel);
-  if (!existsSync20(abs) || !statSync14(abs).isFile() || !insideRepo(repoDir, rel))
+  const abs = join32(repoDir, rel);
+  if (!existsSync19(abs) || !statSync14(abs).isFile() || !insideRepo(repoDir, rel))
     return `citation "${raw2}" names a file that does not exist`;
   return null;
 }
@@ -9509,7 +9406,7 @@ function checkFingerprint(repoDir, raw2) {
   if (rel === null)
     return `fingerprint "${raw2}" is not a repo-relative path`;
   try {
-    if (!lstatSync5(join33(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
+    if (!lstatSync6(join32(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
       return `fingerprint "${raw2}" is not a regular file inside the repo`;
   } catch {
     return `fingerprint "${raw2}" names a file that does not exist`;
@@ -9537,8 +9434,8 @@ function checkDir(repoDir, v, where, errs) {
     errs.push(`${where}: must be a repo-relative directory ("." for the repo root)`);
     return ".";
   }
-  const abs = join33(repoDir, rel);
-  if (!existsSync20(abs) || !statSync14(abs).isDirectory() || !insideRepo(repoDir, rel))
+  const abs = join32(repoDir, rel);
+  if (!existsSync19(abs) || !statSync14(abs).isDirectory() || !insideRepo(repoDir, rel))
     errs.push(`${where}: directory "${rel}" does not exist`);
   return rel;
 }
@@ -9640,9 +9537,9 @@ var init_schema = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/gather.ts
-import { createHash as createHash9 } from "crypto";
-import { closeSync as closeSync5, lstatSync as lstatSync6, openSync as openSync5, readFileSync as readFileSync25, readSync as readSync4 } from "fs";
-import { dirname as dirname11, join as join34 } from "path";
+import { createHash as createHash8 } from "crypto";
+import { closeSync as closeSync6, lstatSync as lstatSync7, openSync as openSync6, readFileSync as readFileSync24, readSync as readSync5 } from "fs";
+import { dirname as dirname11, join as join33 } from "path";
 function listShallow(repoDir) {
   try {
     const out2 = safeGit(repoDir, ["ls-files", "-z"], { maxBuffer: 256 * 1024 * 1024 });
@@ -9655,7 +9552,7 @@ function shallowDirs(repoDir) {
   return [...new Set(listShallow(repoDir).map((p) => dirname11(p)))].sort();
 }
 function computeKey(repoDir, fingerprintFiles, dirs, committedHash = null) {
-  const h = createHash9("sha256");
+  const h = createHash8("sha256");
   h.update(`${MODEL_REV}
 `);
   if (committedHash !== null)
@@ -9668,9 +9565,9 @@ function computeKey(repoDir, fingerprintFiles, dirs, committedHash = null) {
       if (checkFingerprint(repoDir, f) !== null)
         h.update("invalid");
       else {
-        const abs = join34(repoDir, f);
-        const size = lstatSync6(abs).size;
-        h.update(size <= GATHER_CAPS.maxHashBytes ? readFileSync25(abs) : `too-large:${size}`);
+        const abs = join33(repoDir, f);
+        const size = lstatSync7(abs).size;
+        h.update(size <= GATHER_CAPS.maxHashBytes ? readFileSync24(abs) : `too-large:${size}`);
       }
     } catch {
       h.update("missing");
@@ -9695,7 +9592,7 @@ function committedModelHash(raw2) {
   if (typeof raw2 !== "object" || raw2 === null || Array.isArray(raw2))
     return null;
   const { key: _key, expiresAt: _exp, ...rest } = raw2;
-  return createHash9("sha256").update(JSON.stringify(rest)).digest("hex");
+  return createHash8("sha256").update(JSON.stringify(rest)).digest("hex");
 }
 var GATHER_CAPS, depthOf = (p) => p.split("/").length, MODEL_REV = "model-rev:2";
 var init_gather = __esm(() => {
@@ -9713,14 +9610,14 @@ var init_gather = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/discover.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync9, readFileSync as readFileSync26, rmSync as rmSync6, writeFileSync as writeFileSync12 } from "fs";
-import { join as join35 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync10, readFileSync as readFileSync25, rmSync as rmSync7, writeFileSync as writeFileSync13 } from "fs";
+import { join as join34 } from "path";
 function projectModelEnabled(env = process.env) {
   return env["LOKI_E10_PROJECT_MODEL"] !== "0";
 }
 function loadCached(repoDir, now2 = Date.now()) {
   try {
-    return parseCached(repoDir, JSON.parse(readFileSync26(join35(repoDir, PROJECT_FILE), "utf8")), now2);
+    return parseCached(repoDir, JSON.parse(readFileSync25(join34(repoDir, PROJECT_FILE), "utf8")), now2);
   } catch {
     return null;
   }
@@ -9735,7 +9632,7 @@ function loadCommitted(repoDir) {
   };
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync26(join35(repoDir, PROJECT_FILE), "utf8"));
+    raw2 = JSON.parse(readFileSync25(join34(repoDir, PROJECT_FILE), "utf8"));
   } catch (e) {
     return ignore(`unreadable JSON (${e instanceof Error ? e.message : String(e)})`);
   }
@@ -9808,7 +9705,7 @@ var clean2 = (p) => typeof p === "string" ? posix.normalize(p.replace(/\\/g, "/"
 var init_api = () => {};
 
 // ../../loki-ts/src/project_model/resolve.ts
-import { join as join36 } from "path";
+import { join as join35 } from "path";
 function loadProjectApi(repoDir, env = process.env) {
   if (!projectModelEnabled(env))
     return null;
@@ -9830,7 +9727,7 @@ function siteFor(api, repoDir, file) {
   const rel = api.relativeToRoot(file);
   if (!pkg || pkg.root === "." || rel === null)
     return null;
-  return { pkg, root: pkg.root, cwd: join36(repoDir, pkg.root), file: rel };
+  return { pkg, root: pkg.root, cwd: join35(repoDir, pkg.root), file: rel };
 }
 function groupByPackage(api, repoDir, files) {
   const out2 = new Map;
@@ -9863,9 +9760,9 @@ var init_scope = __esm(() => {
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync5 } from "child_process";
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync27, rmSync as rmSync7 } from "fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync26, rmSync as rmSync8 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { join as join37 } from "path";
+import { join as join36 } from "path";
 import { basename as basename11 } from "path";
 function classifyAssertDelta(inp) {
   const f = basename11(inp.path);
@@ -9875,7 +9772,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync4(join37(tmpdir6(), "loki-ad-"));
+    cwd = mkdtempSync4(join36(tmpdir6(), "loki-ad-"));
     const raw2 = execFileSync5("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
@@ -9898,7 +9795,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   } finally {
     if (cwd)
-      rmSync7(cwd, { recursive: true, force: true });
+      rmSync8(cwd, { recursive: true, force: true });
   }
 }
 function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, headCounts) {
@@ -9906,7 +9803,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => safeGit(repoDir, ["show", `${ref}:${path}`]);
-    const head = headRef ? show(headRef) : readFileSync27(join37(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync26(join36(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -10129,8 +10026,39 @@ var init_runner_errors = __esm(() => {
   ];
 });
 
+// ../../loki-ts/src/engine10/testmap.ts
+import { basename as basename12, extname, join as join37, relative as relative3, sep as sep10 } from "path";
+function isTestFile(rel) {
+  const name = basename12(rel);
+  return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
+}
+var SKIP_DIRS, JS_TEST_RE, PY_TEST_RE, GO_TEST_RE;
+var init_testmap = __esm(() => {
+  init_resolve();
+  init_scope();
+  SKIP_DIRS = new Set([
+    ".git",
+    "node_modules",
+    "dist",
+    "build",
+    "target",
+    "coverage",
+    ".venv",
+    "venv",
+    "__pycache__",
+    ".tox",
+    ".pytest_cache",
+    ".loki",
+    ".next"
+  ]);
+  JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
+  PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
+  GO_TEST_RE = /_test\.go$/;
+});
+
 // ../../loki-ts/src/util/check_result.ts
-import { basename as basename12 } from "path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync27, renameSync as renameSync5, writeFileSync as writeFileSync14 } from "fs";
+import { basename as basename13, join as join38 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -10148,7 +10076,7 @@ function ran(raw2, path, ok) {
   if (blk) {
     const c = n2(blk, /(?:#|\u2139) pass (\d+)/) + n2(blk, /(?:#|\u2139) fail (\d+)/);
     const nm = out2.match(/^(?:ok \d+ - |\u2714 )(\S+\.[cm]?[jt]s)(?: \(|$)/m)?.[1];
-    return c === 1 && nm && (!path || basename12(nm) === basename12(path)) ? 0 : c;
+    return c === 1 && nm && (!path || basename13(nm) === basename13(path)) ? 0 : c;
   }
   const cg = cargoTrailer(out2);
   if (cg.length)
@@ -10239,16 +10167,16 @@ function goRunner(cmd, args) {
     let k = 0;
     for (;k < t.length; k++) {
       const x = t[k];
-      if (/^[A-Za-z_]\w*=/.test(x) || /^(?:env|command|exec|time|nohup)$/.test(basename12(x)))
+      if (/^[A-Za-z_]\w*=/.test(x) || /^(?:env|command|exec|time|nohup)$/.test(basename13(x)))
         continue;
-      if (/^-/.test(x) && k > 0 && basename12(t[k - 1]) === "env") {
+      if (/^-/.test(x) && k > 0 && basename13(t[k - 1]) === "env") {
         if (x === "-u" || x === "-C" || x === "-S")
           k++;
         continue;
       }
       break;
     }
-    if (t[k] !== undefined && basename12(t[k]) === "go")
+    if (t[k] !== undefined && basename13(t[k]) === "go")
       return { runner: "go" };
   }
   return {};
@@ -10309,17 +10237,17 @@ function classifyCheck(i) {
     return { result: "not_run", reason: "timed out or aborted" };
   if (i.kind === "static")
     return { result: i.ok ? "pass" : "fail" };
-  const text3 = stripAnsi(i.out);
+  const text2 = stripAnsi(i.out);
   if (i.runner === "go") {
     if (i.ok)
       return { result: "not_run", reason: GO_EXIT0_REASON };
-    const j = goJson(text3);
+    const j = goJson(text2);
     if (j)
       return j.failed ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
-    return FAIL_EVIDENCE.test(text3) || GO_FAIL_EVIDENCE.test(text3) ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
+    return FAIL_EVIDENCE.test(text2) || GO_FAIL_EVIDENCE.test(text2) ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
   }
   const n2 = testCount(i.out, i.path, i.ok);
-  if (!i.ok && FAIL_EVIDENCE.test(text3))
+  if (!i.ok && FAIL_EVIDENCE.test(text2))
     return { result: "fail", ...n2 !== null ? { n: n2 } : {} };
   if (n2 === 0)
     return { result: "not_run", n: 0, reason: `${NO_TESTS_REASON} (ran 0 tests, empty or all skipped)` };
@@ -10329,31 +10257,163 @@ function classifyCheck(i) {
     return { result: "not_run", reason: UNMEASURED_REASON };
   return { result: "pass", n: n2 };
 }
+function summaryOf(a) {
+  const why = a.tier === a.computed ? a.reasons.slice(0, 2).join("; ") : `computed ${a.computed}; override ${a.override?.from} to ${a.override?.to}: ${a.override?.reason}`;
+  const def = a.checks_deferred;
+  return `risk: ${a.tier} (${why}), ${def.length ? def.join(", ") : "no deeper checks"} not run`;
+}
+function markExecuted(a, executed) {
+  const checks_deferred = deferredOf(a.tier, a.checks_selected, executed);
+  return { ...a, checks_deferred, summary: summaryOf({ ...a, checks_deferred }) };
+}
+function classifyRisk(files, env = process.env) {
+  const lines = files.reduce((n2, f) => n2 + f.added + f.deleted, 0);
+  const sensitive = files.flatMap((f) => {
+    const hit = SENSITIVE.find(([, re]) => re.test(f.path));
+    return hit && !isTestFile(f.path) ? [`${f.path} (${hit[0]})`] : [];
+  });
+  const testFiles = files.filter((f) => isTestFile(f.path));
+  const testsDeleted = testFiles.filter((f) => f.status === "deleted").map((f) => f.path);
+  const testsModified = [...testFiles.filter((f) => f.status !== "added" && f.status !== "deleted").map((f) => f.path), ...files.filter((f) => TEST_CFG.test(f.path)).map((f) => f.path)];
+  const api = files.filter((f) => API.test(f.path) && !isTestFile(f.path)).map((f) => f.path);
+  const high = [], med = [];
+  if (sensitive.length)
+    high.push(`sensitive paths: ${sensitive.slice(0, 5).join(", ")}${sensitive.length > 5 ? ` (+${sensitive.length - 5})` : ""}`);
+  if (testsDeleted.length)
+    high.push(`test files deleted: ${testsDeleted.join(", ")}`);
+  if (api.length)
+    high.push(`public API surface: ${api.slice(0, 3).join(", ")}`);
+  if (files.length >= FILES_HIGH)
+    high.push(`${files.length} files >= ${FILES_HIGH}`);
+  if (lines >= LINES_HIGH)
+    high.push(`${lines} changed lines >= ${LINES_HIGH}`);
+  if (testsModified.length)
+    med.push(`existing tests or test config modified: ${testsModified.slice(0, 3).join(", ")}`);
+  if (files.length >= FILES_MEDIUM)
+    med.push(`${files.length} files >= ${FILES_MEDIUM}`);
+  if (lines >= LINES_MEDIUM)
+    med.push(`${lines} changed lines >= ${LINES_MEDIUM}`);
+  const computed = high.length ? "high" : med.length ? "medium" : "low";
+  const reasons = high.length ? [...high, ...med] : med.length ? med : [`${files.length} file${files.length === 1 ? "" : "s"}, no sensitive paths`];
+  let tier = computed, override, ignored;
+  const asked = (env["LOKI_RISK_TIER"] ?? "").trim().toLowerCase();
+  if (asked in RANK2 && asked !== computed) {
+    const reason = (env["LOKI_RISK_OVERRIDE_REASON"] ?? "").trim();
+    if (RANK2[asked] > RANK2[computed]) {
+      tier = asked;
+      override = { from: computed, to: asked, reason: reason || "raised by LOKI_RISK_TIER" };
+    } else if (reason) {
+      tier = asked;
+      override = { from: computed, to: asked, reason };
+    } else
+      ignored = `LOKI_RISK_TIER=${asked} ignored: lowering from ${computed} needs LOKI_RISK_OVERRIDE_REASON`;
+  }
+  const plan = PLAN[tier], checks_deferred = deferredOf(tier, plan.selected, []);
+  const summary = summaryOf({ tier, computed, reasons, ...override ? { override } : {}, checks_deferred });
+  return {
+    version: 1,
+    tier,
+    computed,
+    reasons,
+    stats: { files: files.length, lines, sensitive, tests_modified: testsModified, tests_deleted: testsDeleted, api },
+    checks_selected: plan.selected,
+    checks_deferred,
+    ...override ? { override } : {},
+    ...ignored ? { override_ignored: ignored } : {},
+    summary
+  };
+}
+function changedFiles(repoDir, baseSha) {
+  const run = (args) => safeGit(repoDir, args).split(`
+`).map((l) => l.trim()).filter(Boolean);
+  const tracked = run(["diff", "--name-only", baseSha]);
+  const untracked = run(["ls-files", "--others", "--exclude-standard"]);
+  return [...new Set([...tracked, ...untracked])].filter((f) => !f.startsWith(".loki/"));
+}
+function diffFiles(repoDir, baseSha) {
+  const paths = changedFiles(repoDir, baseSha), stat = new Map;
+  for (const l of safeGit(repoDir, ["diff", "--numstat", baseSha]).split(`
+`)) {
+    const [a, d, ...p] = l.split("\t"), path = p.join("\t");
+    if (path)
+      stat.set(path, { path, added: Number(a) || 0, deleted: Number(d) || 0 });
+  }
+  for (const l of safeGit(repoDir, ["diff", "--name-status", baseSha]).split(`
+`)) {
+    const [s, ...p] = l.split("\t"), f = stat.get(p[p.length - 1] ?? "");
+    if (f)
+      f.status = s?.startsWith("A") ? "added" : s?.startsWith("D") ? "deleted" : "modified";
+  }
+  return paths.map((path) => {
+    const f = stat.get(path);
+    if (f)
+      return f;
+    let n2 = 0;
+    try {
+      n2 = readFileSync27(join38(repoDir, path), "utf8").split(`
+`).length;
+    } catch {}
+    return { path, added: n2, deleted: 0, status: "added" };
+  });
+}
+function recordRisk(repoDir, a) {
+  try {
+    const dir = join38(repoDir, ".loki", "state"), p = join38(dir, "risk-tier.json");
+    mkdirSync11(dir, { recursive: true });
+    writeFileSync14(`${p}.tmp`, JSON.stringify(a, null, 2) + `
+`);
+    renameSync5(`${p}.tmp`, p);
+    return p;
+  } catch {
+    return null;
+  }
+}
 var NO_TESTS_REASON = "no tests executed", GO_EXIT0_REASON = "test count could not be confirmed: go test output is produced by the code under test and cannot confirm execution (a Go exit 0 is never a pass)", UNCONFIRMED_REASON = "test count could not be confirmed", FAIL_EVIDENCE, GO_FAIL_EVIDENCE, UNMEASURED_REASON = "executed count unmeasured (Loki could not parse the runner summary, harness-owned)", stripAnsi = (s) => s.replace(/\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)/g, "").replace(/(?:\u001b\[|\u009b)[0-9;?]*[ -\/]*[@-~]/g, "").replace(/\r\n?/g, `
 `), tailLines = (out2) => out2.split(`
-`).filter((x) => x.trim()).slice(-12), GO_PKG_RE, isExecutedProof = (c) => c.result === "pass" && typeof c.n === "number" && c.n > 0, hasExecutedProof = (checks) => checks.some(isExecutedProof);
+`).filter((x) => x.trim()).slice(-12), GO_PKG_RE, isExecutedProof = (c) => c.result === "pass" && typeof c.n === "number" && c.n > 0, hasExecutedProof = (checks) => checks.some(isExecutedProof), SENSITIVE, API, TEST_CFG, RANK2, FILES_MEDIUM = 4, FILES_HIGH = 15, LINES_MEDIUM = 100, LINES_HIGH = 500, RAN_ALWAYS, PLAN, LOW_SKIPPED, deferredOf = (tier, selected, executed) => (tier === "low" ? LOW_SKIPPED : selected).filter((c) => !RAN_ALWAYS.includes(c) && !executed.includes(c));
 var init_check_result = __esm(() => {
+  init_testmap();
   init_safe_git();
   FAIL_EVIDENCE = /\[(?:build|setup) failed\]|^--- FAIL|^[\w./-]+\.go:\d+:\d+: \S|\b[1-9]\d* (?:failed|errors?)\b/m;
   GO_FAIL_EVIDENCE = /^FAIL\t\S+\t[\d.]+s$|^panic: /m;
   GO_PKG_RE = /^(?:ok|FAIL|\?)\s+\S+\s+(?:\(cached\)|[\d.]+s\b|\[(?:no test files|build failed|setup failed)\])/;
+  SENSITIVE = [
+    ["auth", /(^|\/)(auth|oauth|sso|session|login|permission|rbac|acl)[\w.-]*(\/|\.|$)/i],
+    ["crypto", /(^|\/)(crypt|crypto|jwt|signing|keys?|secrets?|tokens?|credential|password)[\w.-]*(\/|\.|$)/i],
+    ["payments", /(^|\/)(payments?|billing|checkout|stripe|invoice)[\w.-]*(\/|\.|$)/i],
+    ["migration", /(^|\/)(migrations?|alembic)\/|\.sql$/i],
+    ["ci", /(^|\/)(\.github\/(workflows|actions)|\.gitlab-ci\.yml|\.circleci|Jenkinsfile|azure-pipelines)/i],
+    ["lockfile", /(^|\/)(package-lock\.json|pnpm-lock\.yaml|bun\.lockb?|go\.sum|[\w-]+\.lock)$/],
+    ["infra", /(^|\/)(Dockerfile[\w.-]*|docker-compose[\w.-]*\.ya?ml|terraform|helm|k8s|kubernetes|infra|deploy)(\/|\.|$)|\.tf$/i],
+    ["env", /(^|\/)\.env[\w.]*$/]
+  ];
+  API = /(^|\/)(openapi|swagger)[\w.-]*\.(ya?ml|json)$|\.proto$|\.d\.ts$|(^|\/)(api|routes|public)\/|(^|\/)index\.(ts|js|py)$/i;
+  TEST_CFG = /(^|\/)(conftest\.py|\.?pytest\.(ini|toml)|tox\.ini|jest\.config\.[\w.]+|vitest\.config\.[\w.]+)$/;
+  RANK2 = { low: 0, medium: 1, high: 2 };
+  RAN_ALWAYS = ["targeted tests", "lint of changed files"];
+  PLAN = {
+    low: { selected: [...RAN_ALWAYS] },
+    medium: { selected: [...RAN_ALWAYS, "full test command", "one reviewer"] },
+    high: { selected: [...RAN_ALWAYS, "full test command", "full suite", "council", "security scan"] }
+  };
+  LOW_SKIPPED = ["full test command", "reviewer", "council", "security scan"];
 });
 
 // ../../loki-ts/src/runner/load_owner.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { mkdtempSync as mkdtempSync5, realpathSync as realpathSync15, rmSync as rmSync8 } from "fs";
+import { mkdtempSync as mkdtempSync5, realpathSync as realpathSync15, rmSync as rmSync9 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { basename as basename13, extname, join as join38 } from "path";
+import { basename as basename14, extname as extname2, join as join39 } from "path";
 function changedFilesNamed(out2, repoDir, changed) {
   return changed.filter((f) => {
-    if (out2.includes(f) || out2.includes(join38(repoDir, f)))
+    if (out2.includes(f) || out2.includes(join39(repoDir, f)))
       return true;
     const segs = f.split("/");
     if (suffixes(segs, 2).some((x) => x !== f && bounded(out2, x, "(?![\\w-])")))
       return true;
-    if (extname(f) === ".go" && segs.length > 1 && suffixes(segs.slice(0, -1), 1).some((d) => new RegExp(`(?<=[\\w-])/${esc(d)}(?![\\w./-])`).test(out2)))
+    if (extname2(f) === ".go" && segs.length > 1 && suffixes(segs.slice(0, -1), 1).some((d) => new RegExp(`(?<=[\\w-])/${esc(d)}(?![\\w./-])`).test(out2)))
       return true;
-    const stem = basename13(f, extname(f));
+    const stem = basename14(f, extname2(f));
     if (stem.length < 2 || stem === "index" || stem === "__init__")
       return false;
     return new RegExp(`(?<![\\w-])${esc(stem)}(?![\\w-])`).test(out2);
@@ -10457,7 +10517,7 @@ async function loadErrorIsHarnessOwned(i) {
     return false;
   if (i.args.some((a) => changed.includes(a.replace(/^\.\//, ""))))
     return false;
-  const dir = mkdtempSync5(join38(tmpdir7(), "e10-loadown-"));
+  const dir = mkdtempSync5(join39(tmpdir7(), "e10-loadown-"));
   const git3 = (args) => {
     safeGit(i.repoDir, args, { stdio: "ignore" });
   };
@@ -10471,7 +10531,7 @@ async function loadErrorIsHarnessOwned(i) {
     try {
       git3(["worktree", "remove", "--force", dir]);
     } catch {}
-    rmSync8(dir, { recursive: true, force: true });
+    rmSync9(dir, { recursive: true, force: true });
     try {
       git3(["worktree", "prune"]);
     } catch {}
@@ -10488,36 +10548,6 @@ var init_load_owner = __esm(() => {
   init_check_result();
 });
 
-// ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename14, extname as extname2, join as join39, relative as relative3, sep as sep10 } from "path";
-function isTestFile(rel) {
-  const name = basename14(rel);
-  return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
-}
-var SKIP_DIRS, JS_TEST_RE, PY_TEST_RE, GO_TEST_RE;
-var init_testmap = __esm(() => {
-  init_resolve();
-  init_scope();
-  SKIP_DIRS = new Set([
-    ".git",
-    "node_modules",
-    "dist",
-    "build",
-    "target",
-    "coverage",
-    ".venv",
-    "venv",
-    "__pycache__",
-    ".tox",
-    ".pytest_cache",
-    ".loki",
-    ".next"
-  ]);
-  JS_TEST_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
-  PY_TEST_RE = /^(test_.+|.+_test)\.py$/;
-  GO_TEST_RE = /_test\.go$/;
-});
-
 // ../../loki-ts/src/util/wall_owned.ts
 import { isAbsolute as isAbsolute4, join as join40, relative as relative4 } from "path";
 function failingLocations(raw2, cwd, repoDir) {
@@ -10562,58 +10592,1120 @@ var init_wall_owned = __esm(() => {
   ANSI2 = /\u001b\[[0-9;?]*[ -/]*[@-~]/g;
 });
 
-// ../../loki-ts/src/engine10/stages/verify.ts
-import { existsSync as existsSync22, mkdtempSync as mkdtempSync6, realpathSync as realpathSync16, rmSync as rmSync9 } from "fs";
-import { tmpdir as tmpdir8 } from "os";
-import { dirname as dirname12, isAbsolute as isAbsolute5, join as join41, relative as relative5 } from "path";
-function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
-  const inRepo = (p) => {
-    try {
-      const r = relative5(realpathSync16(repoDir), realpathSync16(p));
-      return r !== "" && !r.startsWith("..") && !isAbsolute5(r);
-    } catch {
-      return false;
-    }
+// ../../loki-ts/src/runner/state.ts
+var TERMINAL_STATUSES;
+var init_state = __esm(() => {
+  init_paths();
+  init_atomic();
+  TERMINAL_STATUSES = new Set([
+    "failed",
+    "max_iterations_reached",
+    "max_retries_exceeded",
+    "exited",
+    "council_approved",
+    "council_force_approved",
+    "completion_promise_fulfilled",
+    "running"
+  ]);
+});
+
+// ../../loki-ts/src/runner/repo_profile.ts
+import { existsSync as existsSync21, readFileSync as readFileSync28, mkdirSync as mkdirSync12, readdirSync as readdirSync11, renameSync as renameSync6, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "fs";
+import { basename as basename15, join as join41, resolve as resolve11, isAbsolute as isAbsolute5 } from "path";
+function loadProfile(repoDir) {
+  try {
+    const p = JSON.parse(readFileSync28(commandProfilePath(repoDir), "utf8"));
+    return p?.version === 1 && Array.isArray(p.commands) && p.baseline ? p : null;
+  } catch {
+    return null;
+  }
+}
+function attribute(repoDir, baseSha, failing) {
+  const p = loadProfile(repoDir), none = { preExistingChecks: [], preExistingIds: [], introducedChecks: failing.map((f) => f.name), line: null };
+  if (!p || p.revision !== baseSha || !p.baseline.attributable || p.baseline.failing_ids.length === 0 || failing.length === 0)
+    return none;
+  const base = new Set(p.baseline.failing_ids), pre = failing.filter((f) => f.eligible && f.ids?.length && f.ids.every((i) => base.has(i)));
+  const introduced = failing.filter((f) => !pre.includes(f)).map((f) => f.name);
+  if (pre.length === 0)
+    return { ...none, line: `baseline: ${base.size} known failure(s) before this run; none of the failing checks match them, ${introduced.length} introduced (blocking)` };
+  return {
+    preExistingChecks: pre.map((f) => f.name),
+    preExistingIds: pre.flatMap((f) => f.ids ?? []),
+    introducedChecks: introduced,
+    line: `baseline: ${pre.length} pre-existing failing check(s) (not blocking), ${introduced.length} introduced${introduced.length ? " (blocking)" : ""}`
   };
-  const venvEnv = process.env["VIRTUAL_ENV"];
-  const project = [join41(repoDir, ".venv", "bin", bin), join41(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join41(venvEnv, "bin", bin)] : []].find(existsSync22);
-  return project ? [project, "project"] : [Bun.which(fallback) ? fallback : lastResort, "system"];
 }
-function runnerCmd(t, repoDir) {
-  switch (t.runner) {
-    case "pytest": {
-      const [cmd, interpreter] = resolveTool(repoDir, "python", "python3", "python");
-      return [cmd, ["-m", "pytest", "-q", t.path], interpreter];
+function attributeFullSuite(repoDir, baseSha, full, blocked, changed) {
+  const bad = full.filter((c) => c.result === "fail"), none = { preExistingChecks: [], preExistingIds: [], introducedChecks: bad.map((c) => c.name), line: null };
+  const norm3 = (s) => s.replace(/\s+--silent\b/, "").trim(), p = loadProfile(repoDir);
+  if (!bad.length || !p || p.revision !== baseSha || !p.baseline.attributable || !p.baseline.failing_ids.length)
+    return none;
+  if (bad.some((c) => norm3(c.cmd) !== norm3(p.baseline.command ?? "")))
+    return { ...none, line: `baseline: ran "${p.baseline.command}", not the full suite command, ids not comparable, full suite failures not excused` };
+  const block = new Set(blocked);
+  return attribute(repoDir, baseSha, bad.map((c) => ({ name: c.name, ...c.ids ? { ids: c.ids } : {}, eligible: (c.ids ?? []).every((i) => !block.has(i) && !changed.some((f) => i.includes(f))) })));
+}
+var commandProfilePath = (repoDir) => join41(repoDir, ".loki", "state", "repo-profile.json");
+var init_repo_profile = __esm(() => {
+  init_failures();
+  init_check_result();
+  init_safe_git();
+  init_paths();
+  init_state();
+});
+
+// ../../loki-ts/src/project_graph.ts
+import { createHash as createHash9 } from "crypto";
+import {
+  existsSync as existsSync22,
+  readdirSync as readdirSync12,
+  readFileSync as readFileSync29,
+  statSync as statSync15,
+  writeFileSync as writeFileSync16,
+  mkdirSync as mkdirSync13
+} from "fs";
+import { basename as basename16, dirname as dirname12, join as join42, resolve as resolve12 } from "path";
+function readManifest(path) {
+  if (!existsSync22(path)) {
+    return null;
+  }
+  let raw2;
+  try {
+    raw2 = readFileSync29(path, "utf8");
+  } catch {
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    return null;
+  }
+  const obj = parsed;
+  if (obj["schema_version"] !== SUPPORTED_SCHEMA_VERSION) {
+    console.warn(`[loki:project_graph] unsupported schema_version in ${path}: ` + `${String(obj["schema_version"])} (expected ${SUPPORTED_SCHEMA_VERSION})`);
+    return null;
+  }
+  const appId = obj["app_id"];
+  if (typeof appId !== "string" || !APP_ID_REGEX.test(appId)) {
+    console.warn(`[loki:project_graph] invalid app_id in ${path}: ${String(appId)}`);
+    return null;
+  }
+  const members = Array.isArray(obj["members"]) ? obj["members"].filter((m) => typeof m === "string") : [];
+  const sharedMemoryDir = typeof obj["shared_memory_dir"] === "string" ? obj["shared_memory_dir"] : undefined;
+  return {
+    schema_version: SUPPORTED_SCHEMA_VERSION,
+    app_id: appId,
+    members,
+    shared_memory_dir: sharedMemoryDir
+  };
+}
+function resolveMembers(rootDir, declared, selfBasename) {
+  const out2 = [];
+  const seen = new Set;
+  let children;
+  try {
+    children = readdirSync12(rootDir);
+  } catch {
+    children = [];
+  }
+  const matchPattern = (pattern, name) => {
+    if (!pattern.includes("*") && !pattern.includes("?")) {
+      return pattern === name;
+    }
+    const re = new RegExp("^" + pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".") + "$");
+    return re.test(name);
+  };
+  for (const name of declared) {
+    for (const child of children) {
+      if (!matchPattern(name, child))
+        continue;
+      const full = join42(rootDir, child);
+      if (seen.has(full))
+        continue;
+      let st;
+      try {
+        st = statSync15(full);
+      } catch {
+        continue;
+      }
+      if (!st.isDirectory())
+        continue;
+      seen.add(full);
+      out2.push(full);
+    }
+  }
+  if (declared.length === 0) {
+    for (const child of children) {
+      const full = join42(rootDir, child);
+      if (seen.has(full))
+        continue;
+      let st;
+      try {
+        st = statSync15(full);
+      } catch {
+        continue;
+      }
+      if (!st.isDirectory())
+        continue;
+      if (!existsSync22(join42(full, ".loki", "app.json")))
+        continue;
+      seen.add(full);
+      out2.push(full);
     }
-    case "vitest":
-      return ["npx", ["vitest", "run", t.path]];
-    case "jest":
-      return ["npx", ["jest", t.path]];
-    case "bun":
-      return ["bun", ["test", t.path]];
-    case "node":
-      return ["node", ["--test", `./${t.path}`]];
-    case "npm":
-      return ["npm", ["test", "--silent"]];
-    case "go":
-      return ["go", ["test", "-json", `./${dirname12(t.path)}`]];
-    case "cargo":
-      return ["cargo", ["test"]];
   }
+  return out2;
 }
-function commandFor(t, repoDir, api) {
-  const site = siteFor(api, repoDir, t.path);
-  const [cmd, args, interpreter] = runnerCmd(site ? { runner: t.runner, path: site.file } : t, repoDir);
-  return { cwd: site?.cwd ?? repoDir, cmd, args, argv: [cmd, ...args], ...interpreter ? { interpreter } : {}, pkgRoot: site?.root ?? "." };
+function cacheKey(manifestPaths) {
+  const parts = [];
+  for (const p of manifestPaths.sort()) {
+    let mtime = 0;
+    try {
+      mtime = statSync15(p).mtimeMs;
+    } catch {}
+    parts.push(`${p}:${mtime}`);
+  }
+  return createHash9("sha256").update(parts.join("|")).digest("hex");
 }
-function changedFiles(repoDir, baseSha) {
-  const run = (args) => safeGit(repoDir, args).split(`
-`).map((l) => l.trim()).filter(Boolean);
-  const tracked = run(["diff", "--name-only", baseSha]);
-  const untracked = run(["ls-files", "--others", "--exclude-standard"]);
-  return [...new Set([...tracked, ...untracked])].filter((f) => !f.startsWith(".loki/"));
+function writeCache(targetDir, key, result) {
+  try {
+    const cacheDir = join42(targetDir, ".loki", "state");
+    mkdirSync13(cacheDir, { recursive: true });
+    const cachePath = join42(cacheDir, "project-graph.json");
+    writeFileSync16(cachePath, JSON.stringify({ key, result }, null, 2), "utf8");
+  } catch {}
 }
-function testConfigChanged(repoDir, baseSha, changed) {
+function discoverProjectGraph(targetDir) {
+  const absTarget = resolve12(targetDir);
+  const targetManifest = join42(absTarget, ".loki", "app.json");
+  const parentDir = dirname12(absTarget);
+  const parentManifest = join42(parentDir, ".loki", "app.json");
+  const examined = [];
+  let chosenManifest = null;
+  let chosenRoot = "";
+  if (existsSync22(parentManifest) && parentDir !== absTarget) {
+    examined.push(parentManifest);
+    chosenManifest = readManifest(parentManifest);
+    chosenRoot = parentDir;
+  }
+  if (!chosenManifest && existsSync22(targetManifest)) {
+    examined.push(targetManifest);
+    chosenManifest = readManifest(targetManifest);
+    chosenRoot = absTarget;
+  }
+  if (!chosenManifest)
+    return null;
+  const declared = chosenManifest.members ?? [];
+  const members = resolveMembers(chosenRoot, declared, basename16(absTarget));
+  const filtered = [];
+  for (const m of members) {
+    const sibManifestPath = join42(m, ".loki", "app.json");
+    if (existsSync22(sibManifestPath)) {
+      examined.push(sibManifestPath);
+      const sibManifest = readManifest(sibManifestPath);
+      if (sibManifest && sibManifest.app_id !== chosenManifest.app_id) {
+        continue;
+      }
+    }
+    filtered.push(m);
+  }
+  const result = {
+    appId: chosenManifest.app_id,
+    root: chosenRoot,
+    members: filtered,
+    sharedMemoryDir: chosenManifest.shared_memory_dir
+  };
+  writeCache(absTarget, cacheKey(examined), result);
+  return result;
+}
+var APP_ID_REGEX, SUPPORTED_SCHEMA_VERSION = 1;
+var init_project_graph = __esm(() => {
+  APP_ID_REGEX = /^[a-z0-9-]{3,40}$/;
+});
+
+// ../../loki-ts/src/util/shell.ts
+async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
+  const reader = stream.getReader();
+  const decoder = new TextDecoder;
+  let out2 = "";
+  let total = 0;
+  try {
+    while (total < maxBytes) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (!value)
+        continue;
+      total += value.byteLength;
+      if (total > maxBytes) {
+        const keep = value.byteLength - (total - maxBytes);
+        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
+        break;
+      }
+      out2 += decoder.decode(value, { stream: true });
+    }
+    out2 += decoder.decode();
+  } finally {
+    try {
+      await reader.cancel();
+    } catch {}
+    reader.releaseLock();
+  }
+  return out2;
+}
+async function run(argv, opts = {}) {
+  const proc = Bun.spawn({
+    cmd: [...argv],
+    stdout: "pipe",
+    stderr: "pipe",
+    env: opts.env ? { ...process.env, ...opts.env } : process.env,
+    cwd: opts.cwd
+  });
+  let timer;
+  let killTimer;
+  if (opts.timeoutMs && opts.timeoutMs > 0) {
+    timer = setTimeout(() => {
+      try {
+        proc.kill("SIGTERM");
+      } catch {}
+      killTimer = setTimeout(() => {
+        try {
+          proc.kill("SIGKILL");
+        } catch {}
+      }, 2000);
+    }, opts.timeoutMs);
+  }
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([
+      readStreamCapped(proc.stdout),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    return { stdout, stderr, exitCode };
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+    if (killTimer)
+      clearTimeout(killTimer);
+  }
+}
+var MAX_STDOUT_BYTES;
+var init_shell = __esm(() => {
+  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
+});
+
+// ../../loki-ts/src/e10ext/budget_cap.ts
+var DEFAULT_MAX_COST_USD;
+var init_budget_cap = __esm(() => {
+  init_yaml_key();
+  init_budget();
+  DEFAULT_MAX_COST_USD = loadDefaultMaxCostUsd();
+});
+
+// ../../loki-ts/src/runner/retry_class.ts
+var init_retry_class = () => {};
+
+// ../../loki-ts/src/features/speed/unit_mode.ts
+import { closeSync as closeSync7, constants as constants2, fstatSync as fstatSync5, lstatSync as lstatSync8, openSync as openSync7, readSync as readSync6, realpathSync as realpathSync16 } from "fs";
+function readBounded(path) {
+  const l = lstatSync8(path);
+  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
+    return null;
+  const fd = openSync7(path, constants2.O_RDONLY | constants2.O_NOFOLLOW | constants2.O_NONBLOCK);
+  try {
+    const st = fstatSync5(fd);
+    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
+      return null;
+    const buf = Buffer.alloc(st.size + 1);
+    let n2 = 0;
+    for (;; ) {
+      const r = readSync6(fd, buf, n2, buf.length - n2, null);
+      if (r <= 0)
+        break;
+      n2 += r;
+      if (n2 >= buf.length)
+        return null;
+    }
+    return buf.subarray(0, n2).toString("utf8");
+  } finally {
+    closeSync7(fd);
+  }
+}
+function parseText(txt) {
+  try {
+    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
+    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
+      return null;
+    return { id: j.id, writeSet: ws, pack, tokenBudget: tb };
+  } catch {
+    return null;
+  }
+}
+function parseSpec(path) {
+  try {
+    const txt = readBounded(path);
+    return txt === null ? null : parseText(txt);
+  } catch {
+    return null;
+  }
+}
+function unitSpec(env = process.env) {
+  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
+  if (env["LOKI_SPEED"] === "0" || !path)
+    return null;
+  if (frozen !== undefined)
+    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
+  if (!memo.has(path))
+    memo.set(path, parseSpec(path));
+  return memo.get(path) ?? null;
+}
+function unitFlags(staged, env = process.env, pre = {}) {
+  const s = unitSpec(env);
+  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
+}
+var MAX_SPEC_BYTES, MAX_TOKEN_BUDGET = 1e9, norm3 = (p) => p.replace(/^\.\//, ""), CTRL, strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm3) : null, memo, inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
+var init_unit_mode = __esm(() => {
+  MAX_SPEC_BYTES = 1024 * 1024;
+  CTRL = /[\x00-\x1f\x7f]/;
+  memo = new Map;
+});
+
+// ../../loki-ts/src/e10ext/repomemory.ts
+var init_repomemory = __esm(() => {
+  init_cache();
+});
+
+// ../../loki-ts/src/e10ext/context.ts
+var FINISH_LINE = "Finish with exactly one line: LOKI_DONE, or LOKI_ALREADY_DONE: <file:line evidence>, or LOKI_SPEC_CONFLICT: <reason>.", FIXED_RULES;
+var init_context = __esm(() => {
+  init_cache();
+  init_sizing();
+  init_unit_mode();
+  init_repomemory();
+  init_repo_profile();
+  FIXED_RULES = [
+    "You are the Loki 10 implement stage, doing the complete task described below in this repository. Do whatever a senior engineer would do to finish it correctly: read, change and test as needed across any files the task requires.",
+    "Rules:",
+    "- The Wall tests are read-only: do not edit or delete them. Existing test files are append-only: you may add new test functions, but never edit or delete an existing one.",
+    "- Exception: when the task text itself states the new expected value of an existing assertion, change only that literal in that assertion; never remove, skip or loosen an assertion, and never edit one the task text does not name.",
+    "- Run any tests you need, including the package's full suite (the Project Model commands below say how). The impacted tests named below are a starting hint, not a limit.",
+    "- Never leave a long-lived server running.",
+    "- Never kill processes.",
+    "- Write no documentation unless the task explicitly asks for it.",
+    "- Do not commit or push.",
+    "- If you add a new third-party registry dependency, list it in .loki/supply-declared.json as a JSON array of {ecosystem,name,version_spec,registry}, leaving out workspace, path, git and local packages.",
+    FINISH_LINE
+  ].join(`
+`);
+});
+
+// ../../loki-ts/src/util/steer.ts
+var STEER_MAX_BYTES, STEER_STAGES;
+var init_steer = __esm(() => {
+  init_context();
+  STEER_MAX_BYTES = 1024 * 1024;
+  STEER_STAGES = new Set(["plan", "implement"]);
+});
+
+// ../../loki-ts/src/util/pr_lessons.ts
+import { existsSync as existsSync23, mkdirSync as mkdirSync14, readFileSync as readFileSync30 } from "fs";
+import { dirname as dirname13, join as join43 } from "path";
+function loadLessons(repoDir) {
+  const p = lessonsPath(repoDir);
+  if (!existsSync23(p))
+    return [];
+  try {
+    const j = JSON.parse(readFileSync30(p, "utf-8"));
+    return Array.isArray(j.lessons) ? j.lessons : [];
+  } catch {
+    return [];
+  }
+}
+function save(repoDir, lessons) {
+  const p = lessonsPath(repoDir);
+  mkdirSync14(dirname13(p), { recursive: true });
+  atomicWriteJson(p, { version: 2, lessons });
+}
+function recordRunVerdict(repoDir, runId, verdict) {
+  const lessons = loadLessons(repoDir);
+  let dirty = false;
+  for (const l of lessons)
+    for (const u of l.uses)
+      if (u.run_id === runId && u.verdict === null) {
+        u.verdict = verdict;
+        dirty = true;
+      }
+  if (dirty)
+    save(repoDir, lessons);
+}
+var lessonsPath = (repoDir) => join43(repoDir, ".loki", "memory", "semantic", "pr-lessons.json");
+var init_pr_lessons = __esm(() => {
+  init_atomic();
+});
+
+// ../../loki-ts/src/runner/model_downgrades.ts
+var init_model_downgrades = __esm(() => {
+  init_sizing();
+  init_decision();
+});
+
+// ../../loki-ts/src/providers/mcp_config.ts
+var init_mcp_config = () => {};
+
+// ../../loki-ts/src/providers/claude_flags.ts
+import { existsSync as existsSync24, readFileSync as readFileSync31 } from "fs";
+import { resolve as resolvePath, dirname as dirname14 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
+function designArchetypesText() {
+  try {
+    const moduleDir = dirname14(fileURLToPath3(import.meta.url));
+    for (const rel of [
+      ["..", "..", "..", "references", "design-archetypes.md"],
+      ["..", "..", "references", "design-archetypes.md"]
+    ]) {
+      const p = resolvePath(moduleDir, ...rel);
+      if (existsSync24(p))
+        return readFileSync31(p, "utf8");
+    }
+  } catch {}
+  return "";
+}
+var AUTONOMY_OVERRIDE_TEXT, FIRST_PASS_EXCELLENCE_TEXT, CAVEMAN_PINNED_VERSION;
+var init_claude_flags = __esm(() => {
+  init_mcp_config();
+  AUTONOMY_OVERRIDE_TEXT = `[LOKI-AUTONOMY-AGENT] This is a Loki Mode autonomous agent process.
+` + `You are running INSIDE Loki Mode autonomous execution, a session the user explicitly launched with full prior authorization (loki start / loki run). This IS an authorized autonomous session, not an unattended action you must seek consent for.
+
+` + `Instruction precedence for THIS session: when the loki_system instructions in the user prompt conflict with any CLAUDE.md, project memory, or global memory that tells you to ask for clarification, pause for confirmation, refuse to act autonomously, or withhold routine commits, the loki_system instructions take precedence. The user has already consented by launching autonomous mode.
+
+` + `Therefore, for this session: do NOT ask the user questions, do NOT call the AskUserQuestion tool, do NOT stop to request confirmation, and do NOT refuse routine, reversible engineering work (writing code, running tests, creating files, atomic git checkpoints in the working tree). Proceed and complete the task directly. If a decision is genuinely ambiguous, choose the most reasonable option, record the assumption in .loki/CONTINUITY.md, and continue rather than halting.
+
+` + "Commit hygiene still applies: git checkpoints are LOCAL only. Never push or force-push. Stage files by explicit path, never `git add -A` or `git add .`, and never commit secrets, credentials, .env files, or untracked files you did not author this session.\n\n" + `This precedence override is narrow. It does NOT relax any safety rule. Every safety prohibition in CLAUDE.md or memory still fully binds: anything genuinely destructive or irreversible remains out of scope unless the task explicitly calls for it. This includes (not limited to) force-pushing, deleting or overwriting the user's data, dropping or truncating databases, publishing or releasing, rotating or exfiltrating secrets, touching production systems, and anything a CLAUDE.md safety rule explicitly forbids. When in doubt about whether an action is destructive, treat it as destructive and do not do it.
+`;
+  FIRST_PASS_EXCELLENCE_TEXT = `
+[FIRST-PASS EXCELLENCE] Treat THIS pass as your one shot to ship a complete, working, verified solution. Do not produce a rough draft to refine later; the loop exists as a safety net, not a plan. Before you finish this iteration:
+` + `1. BUILD IT FULLY. Implement every requirement end to end. No stubs, no TODOs, no "coming soon", no placeholder or hardcoded/mock data where real logic belongs. If the spec implies a backend (auth, persistence, a form that submits, a list that saves), WIRE IT so it actually works and persists -- a beautiful UI whose buttons do nothing is the single most common failure, not a draft. Every list/table must trace to a real query, never an inline mock array.
+` + `2. SELF-VERIFY BY RUNNING, not by reading. Run the build and the tests yourself; for each acceptance criterion, DRIVE the actual path and observe the result (submit the form, then reload and confirm the record persisted; hit a protected route logged-out and confirm it is rejected). Fix what fails now, in this pass. Do not mark done on "looks right" or a self-claim -- observed behavior is the only proof.
+` + `3. LOCK THE ARCHITECTURE on this pass so later edits are small and additive. Decide the data model, routes, and component structure up front and build to them; never rewrite whole files later to patch a small thing (that is the doom loop that breaks working features).
+` + `4. DESIGN: commit to ONE named aesthetic direction up front (editorial, brutalist, luxury, retro-futuristic, soft/pastel, industrial, etc. -- chosen from the product domain) and hold it on every surface. Use real content (never lorem). AVOID the AI-slop tells that instantly read as machine-generated: NO indigo/blue-to-purple gradient (the #1 tell), NO Inter/Roboto/system-font headlines (pick a real display+body pairing), NO three-equal-rounded-cards-in-a-row skeleton, NO flat 1px gray card borders or colored left-border strips, NO untouched shadcn defaults, NO reflexive dark mode. Cap the palette at ~3 hues (60/30/10), tinted not pure #fff/#000, separate sections by whitespace then a slight background shift before any border. Aim for Linear/Stripe/Duolingo-tier taste: "this does not look AI-generated".
+` + `5. SATISFY THE GATES THAT WILL JUDGE THIS PASS. Your work is checked by deterministic gates before it can be accepted, and in measured runs EVERY extra iteration was caused by one of these rejecting the work -- never by the model failing to finish. Clear them now, in this pass:
+` + `   - STATIC ANALYSIS: no syntax errors, no unused/undefined symbols, no lint errors in files you touched.
+` + `   - TEST SUITE: the existing tests must still pass. Run them; do not assume.
+` + `   - MUTATION/MOCK INTEGRITY: tests must assert real behaviour. No tautological assertions (expect(true).toBe(true)), no test that passes whether or not the code works, no mocking the very unit under test, no inline mock data standing in for a real query.
+` + `   - CODE REVIEW: no scope creep beyond the stated task, no dead or commented-out code, no leftover debug output, and follow the conventions already in the surrounding files.
+` + `Deliver the finished, self-verified, genuinely-designed result in THIS pass. Additional iterations should be the exception, not the plan.
+` + designArchetypesText();
+  CAVEMAN_PINNED_VERSION = process.env["LOKI_CAVEMAN_VERSION"] || "1.9.0";
+});
+
+// ../../loki-ts/src/runner/sdk_stream_parser.ts
+var init_sdk_stream_parser = __esm(() => {
+  init_cost();
+  init_budget();
+});
+
+// ../../loki-ts/src/runner/trim.ts
+var init_trim = () => {};
+
+// ../../loki-ts/src/util/update_check.ts
+var CACHE_TTL_MS;
+var init_update_check = __esm(() => {
+  init_paths();
+  CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+});
+
+// ../../loki-ts/src/runner/router/advisor_probe.ts
+var init_advisor_probe = __esm(() => {
+  init_update_check();
+});
+
+// ../../loki-ts/src/runner/provider_opencode.ts
+var init_provider_opencode = __esm(() => {
+  init_shell();
+  init_providers();
+});
+
+// ../../loki-ts/src/runner/providers.ts
+var _installedVersionCache;
+var init_providers = __esm(() => {
+  init_shell();
+  init_paths();
+  init_claude_flags();
+  init_mcp_config();
+  init_lean_prefix();
+  init_sdk_stream_parser();
+  init_trim();
+  init_advisor_probe();
+  init_claude_model();
+  init_model_routes();
+  init_provider_opencode();
+  _installedVersionCache = new Map;
+});
+
+// ../../loki-ts/src/runner/router/route_record.ts
+import { existsSync as existsSync25, lstatSync as lstatSync9, mkdirSync as mkdirSync15, readFileSync as readFileSync32, writeFileSync as writeFileSync17 } from "fs";
+import { join as join44 } from "path";
+function loadRouteRecord(runDir) {
+  try {
+    const p = join44(runDir, ROUTE_RECORD_FILE);
+    if (!existsSync25(p) || !lstatSync9(p).isFile())
+      return;
+    const v = JSON.parse(readFileSync32(p, "utf8"));
+    return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+  } catch {
+    return;
+  }
+}
+var ROUTE_RECORD_FILE = "route.json";
+var init_route_record = () => {};
+
+// ../../loki-ts/src/runner/router/history_store.ts
+import { existsSync as existsSync26, mkdirSync as mkdirSync16, readFileSync as readFileSync33, renameSync as renameSync7, rmSync as rmSync11, writeFileSync as writeFileSync18 } from "fs";
+import { resolve as resolve13 } from "path";
+function validRun(v) {
+  if (typeof v !== "object" || v === null)
+    return false;
+  const r = v;
+  return typeof r["shape"] === "string" && typeof r["executor"] === "string" && EXECUTORS.includes(r["executor"]) && typeof r["verdict"] === "string" && VERDICTS.includes(r["verdict"]) && (r["owner"] === null || typeof r["owner"] === "string" && OWNERS.includes(r["owner"])) && typeof r["escalated"] === "boolean" && typeof r["usd"] === "number" && Number.isFinite(r["usd"]) && typeof r["wallS"] === "number" && Number.isFinite(r["wallS"]);
+}
+function historyPath(key, cacheRoot) {
+  return resolve13(repoCacheDir(key, cacheRoot), HISTORY_FILE);
+}
+function readRunHistory(key, cacheRoot) {
+  const path = historyPath(key, cacheRoot);
+  if (!existsSync26(path))
+    return [];
+  try {
+    const parsed = JSON.parse(readFileSync33(path, "utf8"));
+    const runs2 = parsed?.runs;
+    return Array.isArray(runs2) ? runs2.filter(validRun) : [];
+  } catch {
+    return [];
+  }
+}
+function appendRunOutcome(key, outcome, cacheRoot) {
+  try {
+    const runs2 = [...readRunHistory(key, cacheRoot), outcome].slice(-HISTORY_CAP);
+    mkdirSync16(repoCacheDir(key, cacheRoot), { recursive: true });
+    const target = historyPath(key, cacheRoot);
+    const tmp = `${target}.${process.pid}.tmp`;
+    try {
+      writeFileSync18(tmp, JSON.stringify({ runs: runs2 }));
+      renameSync7(tmp, target);
+    } catch (e) {
+      rmSync11(tmp, { force: true, recursive: false });
+      throw e;
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+var HISTORY_FILE = "router_history.json", HISTORY_CAP = 200, WALL_KIND = "total-v1", EXECUTORS, VERDICTS, OWNERS;
+var init_history_store = __esm(() => {
+  init_cache();
+  EXECUTORS = ["haiku", "sonnet"];
+  VERDICTS = ["pass", "fail", "error", "not_proven"];
+  OWNERS = ["code", "harness", "env", "provider"];
+});
+
+// ../../loki-ts/src/runner/router/history.ts
+import { dirname as dirname15, join as join45, resolve as resolve14 } from "path";
+import { fileURLToPath as fileURLToPath4 } from "url";
+function shapeKey(model) {
+  if (!model || model.status !== "ok")
+    return null;
+  const runners = new Set(model.packages.map((p) => (p.runner ?? "").trim().toLowerCase() || "none"));
+  return `${model.workspaceKind}:${[...runners].sort().join("+")}`;
+}
+function shapeKeyForRepo(repoDir) {
+  try {
+    const dirs = shallowDirs(repoDir);
+    const committed = loadCommitted(repoDir);
+    if (committed)
+      return shapeKey({ ...committed.model, key: computeKey(repoDir, committed.model.fingerprintFiles, dirs, committed.hash) });
+    const cached = loadCached(repoDir);
+    if (!cached || computeKey(repoDir, cached.fingerprintFiles, dirs) !== cached.key)
+      return null;
+    return shapeKey(cached);
+  } catch {
+    return null;
+  }
+}
+var SHAPE_DEFAULTS_FILE;
+var init_history = __esm(() => {
+  init_schema();
+  init_history_store();
+  init_discover2();
+  init_gather();
+  init_history_store();
+  SHAPE_DEFAULTS_FILE = resolve14(dirname15(fileURLToPath4(import.meta.url)), "..", "..", "..", "data", "router-shape-defaults.json");
+});
+
+// ../../loki-ts/src/runner/router/plan_route.ts
+var init_plan_route = __esm(() => {
+  init_run_cap();
+  init_providers();
+  init_decision();
+  init_advisor_probe();
+  init_route_record();
+  init_history();
+});
+
+// ../../loki-ts/src/util/intent_card.ts
+var INTENT_HEADER = "What I think you want:", CARD_MIN_LINES = 3, CARD_MAX_LINES = 5, INTENT_CARD_INSTRUCTION;
+var init_intent_card = __esm(() => {
+  INTENT_CARD_INSTRUCTION = `After the plan lines, append an intent card of ${CARD_MIN_LINES} to ${CARD_MAX_LINES} lines: a first line starting "${INTENT_HEADER}" with one sentence on what you think the user wants, then ${CARD_MIN_LINES - 1} to ${CARD_MAX_LINES - 1} lines each starting "Acceptance:" naming one check you will hold yourself to. You may add one optional line starting "Out of scope:" naming what you will NOT do; it counts toward the ${CARD_MAX_LINES} lines.`;
+});
+
+// ../../loki-ts/src/engine10/repomap.ts
+var init_repomap = __esm(() => {
+  init_safe_git();
+});
+
+// ../../loki-ts/src/util/reviewer_brief.ts
+var init_reviewer_brief = __esm(() => {
+  init_repomap();
+  init_safe_git();
+});
+
+// ../../loki-ts/src/engine10/stages/plan.ts
+var init_plan = __esm(() => {
+  init_session();
+  init_sizing();
+  init_lean_prefix();
+  init_types();
+  init_run_cap();
+  init_wall();
+  init_model_downgrades();
+  init_plan_route();
+  init_intent_card();
+  init_mutation_proof();
+  init_reviewer_brief();
+});
+
+// ../../loki-ts/src/runner/session_resume.ts
+var init_session_resume = __esm(() => {
+  init_session();
+});
+
+// ../../loki-ts/src/util/conflict_resume.ts
+var CONFLICT_CORRECTION, EMPTY_DONE_CORRECTION;
+var init_conflict_resume = __esm(() => {
+  init_session_resume();
+  init_context();
+  CONFLICT_CORRECTION = "Loki imposes no file or test limits on you. If your conflict is only about Loki's own rules, finish the task. If the task itself conflicts, restate the conflict. " + FINISH_LINE;
+  EMPTY_DONE_CORRECTION = "Your session finished with LOKI_DONE but the working tree has no change against the base. Make the change the task asks for, or if the task is already satisfied finish with LOKI_ALREADY_DONE: <file:line evidence>, or if the task itself conflicts finish with LOKI_SPEC_CONFLICT: <reason>. " + FINISH_LINE;
+});
+
+// ../../loki-ts/src/runner/router/implement_route.ts
+var init_implement_route = __esm(() => {
+  init_model_rank();
+  init_unit_model();
+});
+
+// ../../loki-ts/src/engine10/stages/implement.ts
+var init_implement = __esm(() => {
+  init_lean_prefix();
+  init_pr_lessons();
+  init_context();
+  init_model_downgrades();
+  init_sizing();
+  init_plan();
+  init_verify();
+  init_resolve();
+  init_session();
+  init_conflict_resume();
+  init_session_resume();
+  init_implement_route();
+  init_unit_model();
+  init_types();
+  init_spec_file();
+});
+
+// ../../loki-ts/src/engine10/machine.ts
+var init_machine = __esm(() => {
+  init_hooks();
+  init_retry_class();
+  init_registry();
+  init_run_cap();
+  init_context();
+  init_steer();
+  init_implement();
+  init_unit_model();
+  init_types();
+});
+
+// ../../loki-ts/src/runner/provider_failover.ts
+var DEFAULT_ORDER, ALLOWED;
+var init_provider_failover = __esm(() => {
+  DEFAULT_ORDER = ["claude", "cline", "codex", "aider", "opencode"];
+  ALLOWED = new Set(DEFAULT_ORDER);
+});
+
+// ../../loki-ts/src/engine10/worker.ts
+function assertWorkerEnv(env = process.env) {
+  if (env.LOKI_ALLOW_AGENT_GITHUB_TOKEN === "1")
+    return;
+  for (const v of GITHUB_TOKEN_VARS) {
+    const val = env[v] ?? "";
+    if (val !== "" && !val.startsWith(SENTINEL_PREFIX)) {
+      throw new Error(`engine10 worker: ${v} holds a real token; the worker must run with withheld credentials`);
+    }
+  }
+}
+var init_worker = __esm(() => {
+  init_credential_env();
+  init_cost();
+  init_budget_cap();
+  init_run_cap();
+  init_resolve();
+  init_budget_cap();
+  init_machine();
+  init_provider_failover();
+  init_session();
+  init_testmap();
+  init_types();
+  init_safe_git();
+});
+
+// ../../loki-ts/src/project_model/package_suite.ts
+import { join as join46 } from "path";
+async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
+  const api = loadProjectApi(repoDir);
+  if (!isMultiRoot(api))
+    return false;
+  const withTests = api.packages().filter((p) => p.commands.test);
+  if (withTests.length === 0)
+    return false;
+  for (const pkg of withTests) {
+    const tc = pkg.commands.test, name = `full suite: ${pkg.name}`, cmd = `(cd ${tc.cwd} && ${tc.cmd})`;
+    const started = Date.now();
+    const r = await run(["bash", "-c", tc.cmd], { cwd: join46(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const duration_s = (Date.now() - started) / 1000;
+    if (signal.aborted) {
+      checks.push({ name, cmd, result: "not_run", duration_s });
+      notProven.add(`not run: ${name} (aborted)`);
+      continue;
+    }
+    const out2 = `${r.stdout}
+${r.stderr}`;
+    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join46(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
+    if (lr) {
+      checks.push({ name, cmd, result: "not_run", duration_s });
+      notProven.add(`${lr} (${name}; harness-owned)`);
+      continue;
+    }
+    const cls = classifyCheck({ kind: "test", ok: r.exitCode === 0, out: out2, ...goRunner(tc.cmd) });
+    checks.push({ name, cmd, result: cls.result, duration_s, ...cls.result === "fail" ? { ids: failIds(out2) } : {} });
+    if (cls.result === "not_run")
+      notProven.add(`not run: ${name} (${cls.reason ?? NO_TESTS_REASON})`);
+  }
+  for (const pkg of api.packages().filter((p) => !p.commands.test))
+    notProven.add(`full suite: package ${pkg.name} defines no test command`);
+  return true;
+}
+var init_package_suite = __esm(() => {
+  init_load_owner();
+  init_check_result();
+  init_shell();
+  init_failures();
+  init_resolve();
+});
+
+// ../../loki-ts/src/engine10/stages/deep.ts
+var exports_deep = {};
+__export(exports_deep, {
+  stage: () => stage,
+  runFullSuite: () => runFullSuite,
+  runDeep: () => runDeep,
+  deepStage: () => deepStage,
+  DEFAULT_SECRET_SCAN_SH: () => DEFAULT_SECRET_SCAN_SH,
+  DEFAULT_PUSH_SH: () => DEFAULT_PUSH_SH
+});
+import { existsSync as existsSync27, mkdirSync as mkdirSync17, writeFileSync as writeFileSync19 } from "fs";
+import { join as join47 } from "path";
+async function runFullSuite(ctx, signal, opts, checks, notProven) {
+  if (await runPackageSuites(ctx.repoDir, signal, { path: opts.path, timeoutMs: opts.fullSuiteTimeoutMs ?? FULL_SUITE_TIMEOUT_MS, baseSha: ctx.baseSha }, checks, notProven))
+    return;
+  const map = await ctx.tests.detect(ctx.repoDir);
+  if (map.runners.length === 0) {
+    notProven.add("full suite (no test runner detected)");
+    return;
+  }
+  for (const runner of map.runners) {
+    const spec = FULL_SUITE_CMD[runner];
+    const name = `full suite: ${runner}`;
+    if (!Bun.which(spec.cmd, opts.path ? { PATH: opts.path } : undefined)) {
+      checks.push({ name, cmd: [spec.cmd, ...spec.args].join(" "), result: "not_run", duration_s: 0 });
+      notProven.add(`not run: ${name}`);
+      continue;
+    }
+    const started = Date.now();
+    const r = await run([spec.cmd, ...spec.args], {
+      cwd: ctx.repoDir,
+      timeoutMs: opts.fullSuiteTimeoutMs ?? FULL_SUITE_TIMEOUT_MS,
+      ...opts.path ? { env: { PATH: opts.path } } : {}
+    });
+    const durationS = (Date.now() - started) / 1000;
+    if (signal.aborted) {
+      checks.push({ name, cmd: [spec.cmd, ...spec.args].join(" "), result: "not_run", duration_s: durationS });
+      notProven.add(`not run: ${name} (aborted)`);
+      continue;
+    }
+    const out2 = `${r.stdout}
+${r.stderr}`, lr = r.exitCode === 0 ? undefined : await harnessLoadReason({ repoDir: ctx.repoDir, baseSha: ctx.baseSha, out: out2, cmd: spec.cmd, args: spec.args, signal, ...opts.path ? { env: { PATH: opts.path } } : {} });
+    if (lr) {
+      checks.push({ name, cmd: [spec.cmd, ...spec.args].join(" "), result: "not_run", duration_s: durationS });
+      notProven.add(`${lr} (${name}; harness-owned)`);
+      continue;
+    }
+    const cls = classifyCheck({ kind: "test", ok: r.exitCode === 0, out: out2, ...goRunner(spec.cmd, spec.args) });
+    checks.push({ name, cmd: [spec.cmd, ...spec.args].join(" "), result: cls.result, duration_s: durationS, ...cls.result === "fail" ? { ids: failIds(out2) } : {} });
+    if (cls.result === "not_run")
+      notProven.add(`not run: ${name} (${cls.reason ?? NO_TESTS_REASON})`);
+  }
+}
+function runAppBoot(ctx, opts, checks, notProven) {
+  const discover = opts.discoverGraph ?? discoverProjectGraph;
+  let graph = null;
+  try {
+    graph = discover(ctx.repoDir);
+  } catch {
+    graph = null;
+  }
+  checks.push({
+    name: "app boot",
+    cmd: "project_graph.ts discoverProjectGraph",
+    result: "not_run",
+    duration_s: 0
+  });
+  notProven.add(graph ? `app boot not run (app graph discovered, ${graph.members.length} member(s))` : "app boot not run (no app graph discovered)");
+}
+async function runCouncilCheck(ctx, changed, baseSha, signal, opts, checks, notProven) {
+  const codeFiles = changed.filter((f) => !f.endsWith(".md"));
+  if (codeFiles.length === 0) {
+    notProven.add("council (no non-doc changes to review)");
+    return;
+  }
+  if (!opts.council) {
+    notProven.add("council (not wired: see the contract-gap note in stages/deep.ts)");
+    return;
+  }
+  const diffResult = await safeGitRun(ctx.repoDir, ["diff", "--no-color", baseSha, "HEAD", "--", ...codeFiles], { timeoutMs: 20000 });
+  const diff = diffResult.exitCode === 0 ? diffResult.stdout : "";
+  const maxBytes = opts.maxCouncilDiffBytes ?? MAX_COUNCIL_DIFF_BYTES;
+  if (Buffer.byteLength(diff, "utf8") > maxBytes) {
+    notProven.add("council (context oversized, refused)");
+    return;
+  }
+  const started = Date.now();
+  try {
+    const outcome = await opts.council.run({ runId: ctx.runId, diff, files: codeFiles }, signal);
+    checks.push({ name: "council", cmd: "dispatchClaudeAgents", result: "pass", duration_s: (Date.now() - started) / 1000 });
+  } catch (err) {
+    notProven.add(`council (refused: ${err.message})`);
+  }
+}
+async function runSecretScan(ctx, changed, opts, checks, notProven) {
+  const scriptPath = opts.secretScanShPath ?? DEFAULT_SECRET_SCAN_SH;
+  const name = "security scan";
+  if (!existsSync27(scriptPath)) {
+    checks.push({ name, cmd: "secret-scan.sh", result: "not_run", duration_s: 0 });
+    notProven.add(`not run: ${name} (secret-scan.sh not found)`);
+    return;
+  }
+  if (changed.length === 0) {
+    checks.push({ name, cmd: "secret-scan.sh", result: "pass", duration_s: 0 });
+    return;
+  }
+  const inline = 'script="$1"; shift; . "$script" || exit 3; hit=0; for f in "$@"; do if _commit_scan_secret_file "$f" || _commit_path_looks_secret "$f"; then printf "%s\\n" "$f"; hit=1; fi; done; exit "$hit"';
+  const started = Date.now();
+  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join47(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
+  const durationS = (Date.now() - started) / 1000;
+  if (r.exitCode === 3) {
+    checks.push({ name, cmd: "secret-scan.sh", result: "not_run", duration_s: durationS });
+    notProven.add(`not run: ${name} (secret-scan.sh failed to load)`);
+    return;
+  }
+  const hits = r.stdout.split(`
+`).map((l) => l.trim()).filter(Boolean);
+  checks.push({
+    name,
+    cmd: "secret-scan.sh",
+    result: hits.length > 0 ? "fail" : "pass",
+    duration_s: durationS,
+    ...hits.length > 0 ? { reason: `secret match: ${hits.join(", ")}` } : {}
+  });
+}
+function commentArgv(prNumber, bodyFile) {
+  return ["comment", prNumber, bodyFile];
+}
+function buildCommentBody(checks, notProven, statusState) {
+  const lines = [`## Loki deep verify: ${statusState}`, "", "### Checks"];
+  lines.push(...checks.length ? checks.map((c) => `- ${c.result}: ${c.name}${c.reason ? ` (${c.reason})` : ""}`) : ["- none"]);
+  lines.push("", "### NOT PROVEN", ...notProven.length ? notProven.map((n2) => `- ${n2}`) : ["- none"]);
+  return `${lines.join(`
+`)}
+`;
+}
+async function postResults(ctx, opts, checks, notProven, statusState) {
+  const out2 = [];
+  const pinnedOrigin = ctx.pinnedOrigin;
+  if (!pinnedOrigin) {
+    out2.push("push refused: no pinned origin (Rule of Two)");
+    return out2;
+  }
+  const scriptPath = opts.pushScriptPath ?? DEFAULT_PUSH_SH;
+  const env = { ...process.env, ...opts.pushExtraEnv, _LOKI_ORIGIN_PINNED: "1", _LOKI_PINNED_ORIGIN: pinnedOrigin };
+  const prUrl = ctx.outputs().pr?.pr_url;
+  const prNumber = prUrl ? PR_NUMBER_RE.exec(prUrl)?.[1] : undefined;
+  if (prNumber) {
+    mkdirSync17(ctx.runDir, { recursive: true });
+    const bodyFile = join47(ctx.runDir, "deep-comment.md");
+    writeFileSync19(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
+    const commentResult = await run(["bash", scriptPath, ...commentArgv(prNumber, bodyFile)], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
+    if (commentResult.exitCode !== 0)
+      out2.push(`deep comment not posted (engine10-push.sh exit ${commentResult.exitCode})`);
+  } else {
+    out2.push("deep comment not posted (no PR number)");
+  }
+  const headSha = (await safeGitRun(ctx.repoDir, ["rev-parse", "HEAD"], { timeoutMs: 1e4 })).stdout.trim();
+  if (SHA_RE.test(headSha)) {
+    const statusArgs = { cmd: "status", sha: headSha, state: statusState, description: `Loki 10 deep verify: ${statusState}` };
+    const statusResult = await run(["bash", scriptPath, ...pushArgv(statusArgs)], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
+    if (statusResult.exitCode !== 0)
+      out2.push(`loki/deep-verify status not set (engine10-push.sh exit ${statusResult.exitCode})`);
+  } else {
+    out2.push("loki/deep-verify status not set (HEAD sha not resolvable)");
+  }
+  return out2;
+}
+async function runDeep(ctx, signal, opts = {}) {
+  if (signal.aborted)
+    return { status: "failed", data: {}, reason: "aborted before deep verify started" };
+  try {
+    assertWorkerEnv(opts.env ?? process.env);
+  } catch (err) {
+    return { status: "failed", data: {}, reason: err.message };
+  }
+  let changed;
+  try {
+    changed = changedFiles(ctx.repoDir, ctx.baseSha);
+  } catch (err) {
+    return { status: "failed", data: {}, reason: `git diff against base failed: ${err.message}` };
+  }
+  const checks = [];
+  const notProven = new Set;
+  await runFullSuite(ctx, signal, opts, checks, notProven);
+  runAppBoot(ctx, opts, checks, notProven);
+  await runCouncilCheck(ctx, changed, ctx.baseSha, signal, opts, checks, notProven);
+  await runSecretScan(ctx, changed, opts, checks, notProven);
+  const statusState = checks.some((c) => c.result === "fail") ? "failure" : "success";
+  const notProvenList = [...notProven];
+  const seal = ctx.outputs().seal;
+  const addendumBody = {
+    schema: "loki.v10.receipt-addendum/1",
+    run_id: ctx.runId,
+    base_receipt_sha256: seal?.receipt_sha256 ?? null,
+    checks,
+    not_proven: notProvenList,
+    status_state: statusState
+  };
+  const addendumSha256 = sha2562(canonicalJson(addendumBody));
+  const sig = signReceipt(`${ctx.runId}-deep`, addendumSha256);
+  const addendum = { ...addendumBody, addendum_sha256: addendumSha256, verification: { jwt: sig.jwt, kid: sig.kid } };
+  mkdirSync17(ctx.runDir, { recursive: true });
+  writeFileSync19(join47(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
+`);
+  const pushNotProven = await postResults(ctx, opts, checks, notProvenList, statusState);
+  const allNotProven = [...notProvenList, ...pushNotProven];
+  ctx.emit("deep.completed", "deep", { checks, status_state: statusState, addendum_sha256: addendumSha256 });
+  return { status: "completed", data: { checks, addendum_sha256: addendumSha256, status_state: statusState, not_proven: allNotProven } };
+}
+var DEFAULT_PUSH_SH, DEFAULT_SECRET_SCAN_SH, MAX_COUNCIL_DIFF_BYTES = 400000, FULL_SUITE_TIMEOUT_MS = 300000, PR_NUMBER_RE, SHA_RE, FULL_SUITE_CMD, deepStage, stage;
+var init_deep = __esm(() => {
+  init_project_graph();
+  init_shell();
+  init_load_owner();
+  init_worker();
+  init_seal();
+  init_verify();
+  init_package_suite();
+  init_check_result();
+  init_failures();
+  init_types();
+  init_safe_git();
+  DEFAULT_PUSH_SH = new URL("../../../../autonomy/lib/engine10-push.sh", import.meta.url).pathname;
+  DEFAULT_SECRET_SCAN_SH = new URL("../../../../autonomy/lib/secret-scan.sh", import.meta.url).pathname;
+  PR_NUMBER_RE = /\/pull\/(\d+)$/;
+  SHA_RE = /^[0-9a-f]{40}$/;
+  FULL_SUITE_CMD = {
+    pytest: { cmd: "python", args: ["-m", "pytest", "-q"] },
+    vitest: { cmd: "npx", args: ["vitest", "run"] },
+    jest: { cmd: "npx", args: ["jest"] },
+    bun: { cmd: "bun", args: ["test"] },
+    node: { cmd: "node", args: ["--test"] },
+    npm: { cmd: "npm", args: ["test", "--silent"] },
+    go: { cmd: "go", args: ["test", "-json", "./..."] },
+    cargo: { cmd: "cargo", args: ["test"] }
+  };
+  deepStage = {
+    name: "deep",
+    ...STAGE_BUDGETS.deep,
+    run: (ctx, signal) => runDeep(ctx, signal)
+  };
+  stage = deepStage;
+});
+
+// ../../loki-ts/src/engine10/stages/verify.ts
+import { existsSync as existsSync28, mkdtempSync as mkdtempSync6, realpathSync as realpathSync17, rmSync as rmSync12 } from "fs";
+import { tmpdir as tmpdir8 } from "os";
+import { dirname as dirname16, isAbsolute as isAbsolute6, join as join48, relative as relative5 } from "path";
+function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
+  const inRepo = (p) => {
+    try {
+      const r = relative5(realpathSync17(repoDir), realpathSync17(p));
+      return r !== "" && !r.startsWith("..") && !isAbsolute6(r);
+    } catch {
+      return false;
+    }
+  };
+  const venvEnv = process.env["VIRTUAL_ENV"];
+  const project = [join48(repoDir, ".venv", "bin", bin), join48(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join48(venvEnv, "bin", bin)] : []].find(existsSync28);
+  return project ? [project, "project"] : [Bun.which(fallback) ? fallback : lastResort, "system"];
+}
+function runnerCmd(t, repoDir) {
+  switch (t.runner) {
+    case "pytest": {
+      const [cmd, interpreter] = resolveTool(repoDir, "python", "python3", "python");
+      return [cmd, ["-m", "pytest", "-q", t.path], interpreter];
+    }
+    case "vitest":
+      return ["npx", ["vitest", "run", t.path]];
+    case "jest":
+      return ["npx", ["jest", t.path]];
+    case "bun":
+      return ["bun", ["test", t.path]];
+    case "node":
+      return ["node", ["--test", `./${t.path}`]];
+    case "npm":
+      return ["npm", ["test", "--silent"]];
+    case "go":
+      return ["go", ["test", "-json", `./${dirname16(t.path)}`]];
+    case "cargo":
+      return ["cargo", ["test"]];
+  }
+}
+function commandFor(t, repoDir, api) {
+  const site = siteFor(api, repoDir, t.path);
+  const [cmd, args, interpreter] = runnerCmd(site ? { runner: t.runner, path: site.file } : t, repoDir);
+  return { cwd: site?.cwd ?? repoDir, cmd, args, argv: [cmd, ...args], ...interpreter ? { interpreter } : {}, pkgRoot: site?.root ?? "." };
+}
+function testConfigChanged(repoDir, baseSha, changed) {
   const diff = (f) => safeGit(repoDir, ["diff", "-U0", baseSha, "--", f]);
   return changed.filter((f) => CFG_ALWAYS.test(f) || CFG_SHARED.test(f) && (() => {
     const d = diff(f);
@@ -10701,7 +11793,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   const sus = pairs.filter(({ c }) => rel.has(c.name) && c.result === "pass");
   if (!(un.some(({ c }) => c.result === "fail" && c.ids?.length) || sus.length) || signal.aborted)
     return out2;
-  const dir = mkdtempSync6(join41(tmpdir8(), "e10-base-"));
+  const dir = mkdtempSync6(join48(tmpdir8(), "e10-base-"));
   const git3 = (args) => {
     safeGit(ctx.repoDir, args, { stdio: "ignore", repoDrivers: true });
   };
@@ -10728,7 +11820,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
     try {
       git3(["worktree", "remove", "--force", dir]);
     } catch {}
-    rmSync9(dir, { recursive: true, force: true });
+    rmSync12(dir, { recursive: true, force: true });
     try {
       git3(["worktree", "prune"]);
     } catch {}
@@ -10736,7 +11828,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   return out2;
 }
 function isLokiModeRepo(repoDir) {
-  return existsSync22(join41(repoDir, "scripts", "select-tests.sh"));
+  return existsSync28(join48(repoDir, "scripts", "select-tests.sh"));
 }
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
@@ -10753,9 +11845,9 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   }
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
-    if (existsSync22(join41(g.cwd, "tsconfig.json")))
+    if (existsSync28(join48(g.cwd, "tsconfig.json")))
       await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
-    if (ESLINT_CONFIGS.some((f) => existsSync22(join41(g.cwd, f))))
+    if (ESLINT_CONFIGS.some((f) => existsSync28(join48(g.cwd, f))))
       await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
   }
 }
@@ -10772,6 +11864,8 @@ var init_verify = __esm(() => {
   init_types();
   init_resolve();
   init_safe_git();
+  init_repo_profile();
+  init_check_result();
   init_check_result();
   CODE_EXT = /\.(?:[cm]?[jt]sx?|py|go)$/;
   CFG_ALWAYS = /(^|\/)(conftest\.py|\.?pytest\.(?:ini|toml)|tox\.ini|jest\.config\.[\w.]+|vitest\.config\.[\w.]+|\.mocharc[\w.]*)$/;
@@ -10796,13 +11890,22 @@ var init_verify = __esm(() => {
         }
         return { status: "failed", data: { changed_files: [] }, reason: "empty diff without an already_done marker" };
       }
+      let risk = (() => {
+        try {
+          const r = classifyRisk(diffFiles(ctx.repoDir, ctx.baseSha));
+          recordRisk(ctx.repoDir, r);
+          return r;
+        } catch {
+          return null;
+        }
+      })();
       const checks = [];
       const api = loadProjectApi(ctx.repoDir);
       const map = await ctx.tests.detect(ctx.repoDir);
       const impacted = ctx.tests.impacted(map, changed);
       const changedTestFiles = map.tests.filter((t) => changed.includes(t.path));
       const wall = ctx.outputs().wall ?? {};
-      const wallPaths = new Set((wall.files ?? []).map((f) => isAbsolute5(f.path) ? relative5(ctx.repoDir, f.path) : f.path));
+      const wallPaths = new Set((wall.files ?? []).map((f) => isAbsolute6(f.path) ? relative5(ctx.repoDir, f.path) : f.path));
       const wallTests = map.tests.filter((t) => wallPaths.has(t.path));
       const intake = ctx.outputs().intake, relevant = ctx.tests.impacted(map, namedFiles(intake?.task ?? "", loadRepoMap(intake?.repomap_ref)));
       const tests = dedupeTests([...impacted, ...changedTestFiles, ...wallTests, ...relevant]);
@@ -10817,6 +11920,9 @@ var init_verify = __esm(() => {
       }
       const targetNames = new Set([...wallTests, ...relevant].map((t) => `${t.runner}:${t.path}`));
       const preRed = await subtractBase(ctx, api, checks, tests, changed, new Set(wallTests.map((t) => `${t.runner}:${t.path}`)), new Set(relevant.map((t) => `${t.runner}:${t.path}`)), signal);
+      const attr = attribute(ctx.repoDir, ctx.baseSha, checks.filter((c) => c.result === "fail" && !preRed.names.includes(c.name)).map((c) => ({ name: c.name, ids: c.ids, eligible: !targetNames.has(c.name) && !changed.includes(c.name.slice(c.name.indexOf(":") + 1)) })));
+      preRed.names.push(...attr.preExistingChecks);
+      preRed.ids.push(...attr.preExistingIds);
       if (!signal.aborted) {
         await runLintChecks(ctx, changed, signal, checks, { api, wall: wallPaths });
         if (isLokiModeRepo(ctx.repoDir)) {
@@ -10828,6 +11934,23 @@ var init_verify = __esm(() => {
           });
         }
       }
+      const fullNotProven = new Set;
+      if (risk && risk.tier !== "low" && !signal.aborted) {
+        const { runFullSuite: runFullSuite2 } = await Promise.resolve().then(() => (init_deep(), exports_deep));
+        const full = [];
+        await runFullSuite2(ctx, signal, {}, full, fullNotProven);
+        for (const c of full)
+          checks.push({ name: c.name, cmd: c.cmd, result: c.result, duration_s: c.duration_s, ...c.reason ? { reason: c.reason } : {} });
+        const fa = attributeFullSuite(ctx.repoDir, ctx.baseSha, full, checks.filter((c) => c.result === "fail" && !preRed.names.includes(c.name)).flatMap((c) => c.ids ?? []), changed);
+        preRed.names.push(...fa.preExistingChecks);
+        preRed.ids.push(...fa.preExistingIds);
+        attr.introducedChecks.push(...fa.introducedChecks);
+        attr.line = [attr.line, fa.line].filter(Boolean).join("; ") || null;
+        if (full.some((c) => c.result === "pass" || c.result === "fail")) {
+          risk = markExecuted(risk, ["full test command", "full suite"]);
+          recordRisk(ctx.repoDir, risk);
+        }
+      }
       const cfgChanged = testConfigChanged(ctx.repoDir, ctx.baseSha, changed);
       const covered = (f) => ctx.tests.impacted(map, [f]).some((t) => checks.some((c) => c.name === `${t.runner}:${t.path}` && hasExecutedProof([c])));
       const uncoveredChanged = changed.filter((f) => CODE_EXT.test(f) && !isTestFile(f) && !wallPaths.has(f) && !cfgChanged.includes(f) && !covered(f));
@@ -10849,32 +11972,32 @@ var init_verify = __esm(() => {
         return [`weakened test: ${t.path}`, ...assertDeltaNotes(ctx.repoDir, ctx.baseSha, null, t.path, intake?.task ?? "", k?.b, k?.h) ?? []];
       });
       const weakened = [...modifiedRel, ...cfgChanged.map((f) => `test configuration changed: ${f}`), ...preRed.weak.map((n2) => `skipped or fewer tests than base: ${n2}`)];
-      const notProven = [...weakened, ...checks.filter((c) => c.owner === "harness").map((c) => `${c.reason} (${c.name}; harness-owned, no fix rounds)`), ...new Set(checks.filter((c) => c.interpreter === "system" && c.result !== "not_run").map((c) => c.name.startsWith("lint:") ? "lint ran on the system ruff" : "tests ran on the system interpreter"))];
-      return { status: "completed", data: { checks, flaky, failures_grouped: failuresGrouped, changed_files: changed, not_proven: notProven, pre_red: preRed.ids, pre_red_checks: preRed.names, test_counts: testCounts, uncovered_changed: uncoveredChanged, target_checks: checks.filter((c) => c.result === "pass" && targetNames.has(c.name)).map((c) => c.name) } };
+      const notProven = [...weakened, ...[...fullNotProven].filter((n2) => !n2.startsWith("full suite (no test runner")), ...checks.filter((c) => c.owner === "harness").map((c) => `${c.reason} (${c.name}; harness-owned, no fix rounds)`), ...new Set(checks.filter((c) => c.interpreter === "system" && c.result !== "not_run").map((c) => c.name.startsWith("lint:") ? "lint ran on the system ruff" : "tests ran on the system interpreter"))];
+      return { status: "completed", data: { checks, flaky, failures_grouped: failuresGrouped, changed_files: changed, not_proven: notProven, pre_red: preRed.ids, pre_red_checks: preRed.names, ...attr.line ? { baseline_line: attr.line, introduced_checks: attr.introducedChecks } : {}, test_counts: testCounts, uncovered_changed: uncoveredChanged, target_checks: checks.filter((c) => c.result === "pass" && targetNames.has(c.name)).map((c) => c.name), risk } };
     }
   };
 });
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync23, readdirSync as readdirSync12, readFileSync as readFileSync28 } from "fs";
-import { dirname as dirname13, join as join42 } from "path";
-function parseJsonc(text3) {
+import { existsSync as existsSync29, readdirSync as readdirSync13, readFileSync as readFileSync34 } from "fs";
+import { dirname as dirname17, join as join49 } from "path";
+function parseJsonc(text2) {
   let out2 = "", i = 0;
-  while (i < text3.length) {
-    const c = text3[i], n2 = text3[i + 1];
+  while (i < text2.length) {
+    const c = text2[i], n2 = text2[i + 1];
     if (c === '"') {
       let j = i + 1;
-      while (j < text3.length && text3[j] !== '"')
-        j += text3[j] === "\\" ? 2 : 1;
-      out2 += text3.slice(i, j + 1);
+      while (j < text2.length && text2[j] !== '"')
+        j += text2[j] === "\\" ? 2 : 1;
+      out2 += text2.slice(i, j + 1);
       i = j + 1;
     } else if (c === "/" && n2 === "/") {
-      while (i < text3.length && text3[i] !== `
+      while (i < text2.length && text2[i] !== `
 `)
         i++;
     } else if (c === "/" && n2 === "*") {
-      const e = text3.indexOf("*/", i + 2);
-      i = e < 0 ? text3.length : e + 2;
+      const e = text2.indexOf("*/", i + 2);
+      i = e < 0 ? text2.length : e + 2;
     } else {
       out2 += c;
       i++;
@@ -10883,7 +12006,7 @@ function parseJsonc(text3) {
   return JSON.parse(out2.replace(/,(\s*[}\]])/g, "$1"));
 }
 function moduleOf(file, depth = 0) {
-  const j = readJson5(file);
+  const j = readJson4(file);
   if (!j || depth > 4)
     return null;
   const m = j.compilerOptions?.module;
@@ -10892,25 +12015,25 @@ function moduleOf(file, depth = 0) {
   const ext = typeof j.extends === "string" ? j.extends : null;
   if (!ext || !ext.startsWith("."))
     return null;
-  const next = join42(dirname13(file), ext.endsWith(".json") ? ext : `${ext}.json`);
-  return existsSync23(next) ? moduleOf(next, depth + 1) : null;
+  const next = join49(dirname17(file), ext.endsWith(".json") ? ext : `${ext}.json`);
+  return existsSync29(next) ? moduleOf(next, depth + 1) : null;
 }
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
   try {
-    names = readdirSync12(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
+    names = readdirSync13(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
   } catch {
     return null;
   }
   let packageType = null, tsModule = null;
   for (const n2 of names) {
-    const j = readJson5(join42(pkgDir, n2));
+    const j = readJson4(join49(pkgDir, n2));
     if (!j)
       continue;
     if (packageType === null && typeof j.type === "string" && typeof j.name === "string")
       packageType = j.type;
     if (tsModule === null && j.compilerOptions !== undefined)
-      tsModule = moduleOf(join42(pkgDir, n2));
+      tsModule = moduleOf(join49(pkgDir, n2));
   }
   if (packageType === null && tsModule === null)
     return null;
@@ -10930,9 +12053,9 @@ function conventionViolation(c, fileName, content) {
   const code = content.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1").replace(/(["'`])(?:\\.|(?!\1)[^\\\n])*\1/g, '""');
   return /\bimport\.meta\b/.test(code) ? "import.meta is not allowed in a CommonJS package (TS1470)" : null;
 }
-var readJson5 = (p) => {
+var readJson4 = (p) => {
   try {
-    const v = parseJsonc(readFileSync28(p, "utf8"));
+    const v = parseJsonc(readFileSync34(p, "utf8"));
     return v && typeof v === "object" && !Array.isArray(v) ? v : null;
   } catch {
     return null;
@@ -10942,15 +12065,15 @@ var init_conventions = () => {};
 
 // ../../loki-ts/src/engine10/stages/wall.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync24, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync7, readFileSync as readFileSync29, readdirSync as readdirSync13, realpathSync as realpathSync17, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync18, mkdtempSync as mkdtempSync7, readFileSync as readFileSync35, readdirSync as readdirSync14, realpathSync as realpathSync18, rmSync as rmSync13, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
-import { dirname as dirname14, isAbsolute as isAbsolute6, join as join43, relative as relative6 } from "path";
+import { dirname as dirname18, isAbsolute as isAbsolute7, join as join50, relative as relative6 } from "path";
 function pytestCollectionIsRed(output, repoDir) {
   if (/ModuleNotFoundError/.test(output))
     return false;
   const real2 = (p) => {
     try {
-      return realpathSync17(isAbsolute6(p) ? p : join43(repoDir, p));
+      return realpathSync18(isAbsolute7(p) ? p : join50(repoDir, p));
     } catch {
       return null;
     }
@@ -10987,7 +12110,7 @@ function pytestCollectionIsRed(output, repoDir) {
 }
 function moduleUnderRepo(repoDir, name) {
   const rel = name.replace(/\./g, "/");
-  return existsSync24(join43(repoDir, `${rel}.py`)) || existsSync24(join43(repoDir, rel, "__init__.py"));
+  return existsSync30(join50(repoDir, `${rel}.py`)) || existsSync30(join50(repoDir, rel, "__init__.py"));
 }
 function pytestExit1IsRed(output) {
   if (/^!+ _pytest\.outcomes\.Exit\b/m.test(output))
@@ -11082,22 +12205,22 @@ ${repomapText}`] : [],
 function loadTaskText(ctx, fromPrior) {
   if (fromPrior)
     return fromPrior;
-  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join43(ctx.runDir, "issue.json");
-  if (existsSync24(issueJsonPath)) {
+  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join50(ctx.runDir, "issue.json");
+  if (existsSync30(issueJsonPath)) {
     try {
-      const issue = JSON.parse(readFileSync29(issueJsonPath, "utf8"));
-      const text3 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
+      const issue = JSON.parse(readFileSync35(issueJsonPath, "utf8"));
+      const text2 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
 
 `);
-      if (text3)
-        return text3;
+      if (text2)
+        return text2;
     } catch {}
   }
   return process.env.LOKI_E10_TASK_TEXT ?? "";
 }
 function wallTargetDir(repoDir, existingTests) {
   const first = existingTests[0];
-  return first ? join43(repoDir, dirname14(first.path)) : join43(repoDir, "tests");
+  return first ? join50(repoDir, dirname18(first.path)) : join50(repoDir, "tests");
 }
 function guessRunner(fileName, runners) {
   if (fileName.endsWith(".py"))
@@ -11128,11 +12251,11 @@ async function wallAuthor(ctx, signal) {
   const tree = prior.intake?.tree;
   const repomapText = repoMapText(ctx.repoDir, tree, repomapRef, WALL_MAP_MAX_LINES);
   const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative6(ctx.repoDir, targetDir)}/x`);
-  const conv2 = readPackageConventions(join43(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
-  const cwd = mkdtempSync7(join43(tmpdir9(), "loki-e15-wall-"));
+  const conv2 = readPackageConventions(join50(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
+  const cwd = mkdtempSync7(join50(tmpdir9(), "loki-e15-wall-"));
   const wm = wallManifestFor(ctx.repoDir, tree, task);
   for (const [n2, c] of [["task.md", task], ["repomap.txt", repomapText], ...wm ? [["wall_manifest.txt", wm.text]] : []])
-    writeFileSync13(join43(cwd, n2), c, "utf8");
+    writeFileSync20(join50(cwd, n2), c, "utf8");
   const session = await ctx.sessions.run({
     stage: "wall",
     brief: buildWallBrief(task, repomapText, runners, !!wm, conventionsBrief(conv2)),
@@ -11144,30 +12267,30 @@ async function wallAuthor(ctx, signal) {
     cwd
   });
   if (session.killed || session.exit === null) {
-    rmSync10(cwd, { recursive: true, force: true });
+    rmSync13(cwd, { recursive: true, force: true });
     return done({ status: "failed", data: {}, reason: "wall session aborted, killed, or timed out", killed: true });
   }
-  const generated = readdirSync13(cwd).filter((f) => f.startsWith(WALL_PREFIX));
-  const sealedDir = join43(ctx.runDir, "wall");
+  const generated = readdirSync14(cwd).filter((f) => f.startsWith(WALL_PREFIX));
+  const sealedDir = join50(ctx.runDir, "wall");
   if (generated.length > 0)
-    mkdirSync10(sealedDir, { recursive: true });
+    mkdirSync18(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync29(join43(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
-    writeFileSync13(join43(sealedDir, name), content, "utf8");
+    const content = readFileSync35(join50(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
+    writeFileSync20(join50(sealedDir, name), content, "utf8");
     if (bad)
       discarded.push({ file: name, reason: `${bad}; wall test did not compile under the package config` });
     else
       contents.set(name, content);
   }
-  rmSync10(cwd, { recursive: true, force: true });
+  rmSync13(cwd, { recursive: true, force: true });
   return { kind: "authored", task, sizeName: sz.size, runners, targetDir, generated, contents, discarded, ...wm ? { manifestSha256: wm.sha256 } : {} };
 }
 function installWall(ctx, a, baseDir, opts = {}) {
   const { generated, contents, discarded, targetDir, runners } = a;
   if (generated.length > 0)
-    mkdirSync10(targetDir, { recursive: true });
+    mkdirSync18(targetDir, { recursive: true });
   const sealedFiles = [];
   const readOnlyFiles = [];
   const wallTests = [];
@@ -11175,8 +12298,8 @@ function installWall(ctx, a, baseDir, opts = {}) {
     const content = contents.get(name);
     if (content === undefined)
       continue;
-    const dest = join43(targetDir, name), runner = guessRunner(name, runners);
-    writeFileSync13(dest, content, "utf8");
+    const dest = join50(targetDir, name), runner = guessRunner(name, runners);
+    writeFileSync20(dest, content, "utf8");
     sealedFiles.push({ path: dest, sha256: sha2562(content) });
     readOnlyFiles.push({ path: dest, content });
     if (runner)
@@ -11185,13 +12308,13 @@ function installWall(ctx, a, baseDir, opts = {}) {
   ctx.emit("wall.sealed", "wall", { files: sealedFiles, ...a.manifestSha256 ? { manifest_sha256: a.manifestSha256 } : {} });
   const baseRunner = opts.baseRunner ?? new RealBaseTestRunner, baseRun = { pass: 0, fail: 0, not_run: discarded.length }, notRunFiles = [];
   for (const t of wallTests) {
-    const r = baseRunner.run(baseDir, [t]), abs = join43(ctx.repoDir, t.path);
+    const r = baseRunner.run(baseDir, [t]), abs = join50(ctx.repoDir, t.path);
     baseRun.pass += r.pass;
     baseRun.fail += r.fail;
     baseRun.not_run += r.not_run ?? 0;
     notRunFiles.push(...baseRunner.lastNotRunFiles ?? []);
     if (r.pass + r.fail === 0) {
-      rmSync10(abs, { force: true });
+      rmSync13(abs, { force: true });
       for (const l of [sealedFiles, readOnlyFiles])
         l.splice(0, l.length, ...l.filter((f) => f.path !== abs));
     }
@@ -11215,7 +12338,7 @@ async function runWall(ctx, signal, opts = {}) {
   const a = await wallAuthor(ctx, signal);
   return a.kind === "done" ? a.result : installWall(ctx, a, ctx.repoDir, opts);
 }
-var WALL_PREFIX = "loki_wall_", BASE_RUN_TIMEOUT_MS = 60000, WALL_MAP_MAX_LINES = 200, wallStage, stage;
+var WALL_PREFIX = "loki_wall_", BASE_RUN_TIMEOUT_MS = 60000, WALL_MAP_MAX_LINES = 200, wallStage, stage2;
 var init_wall = __esm(() => {
   init_types();
   init_lean_prefix();
@@ -11232,24 +12355,24 @@ var init_wall = __esm(() => {
     limitS: 300,
     run: (ctx, signal) => runWall(ctx, signal)
   };
-  stage = Object.assign(wallStage, { split: { author: wallAuthor, install: installWall } });
+  stage2 = Object.assign(wallStage, { split: { author: wallAuthor, install: installWall } });
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync4, closeSync as closeSync6, lstatSync as lstatSync7, mkdirSync as mkdirSync11, openSync as openSync6, readFileSync as readFileSync30, realpathSync as realpathSync18, rmdirSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync14 } from "fs";
-import { dirname as dirname15, join as join44, relative as relative7, sep as sep11 } from "path";
+import { chmodSync as chmodSync4, closeSync as closeSync8, lstatSync as lstatSync10, mkdirSync as mkdirSync19, openSync as openSync8, readFileSync as readFileSync36, realpathSync as realpathSync19, rmdirSync, unlinkSync as unlinkSync4, writeFileSync as writeFileSync21 } from "fs";
+import { dirname as dirname19, join as join51, relative as relative7, sep as sep11 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync18(repoDir), fp = join44(root, f), rel = relative7(root, dirname15(fp));
+  const root = realpathSync19(repoDir), fp = join51(root, f), rel = relative7(root, dirname19(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
   for (const part of rel === "" ? [] : rel.split(sep11)) {
-    cur = join44(cur, part);
+    cur = join51(cur, part);
     let st2;
     try {
-      st2 = lstatSync7(cur);
+      st2 = lstatSync10(cur);
     } catch {
-      mkdirSync11(cur);
+      mkdirSync19(cur);
       continue;
     }
     if (!st2.isDirectory())
@@ -11257,11 +12380,11 @@ function safeRestore(repoDir, f, want, mode) {
   }
   let st;
   try {
-    st = lstatSync7(fp);
+    st = lstatSync10(fp);
   } catch {
     st = null;
   }
-  if (st?.isFile() && readFileSync30(fp).equals(want)) {
+  if (st?.isFile() && readFileSync36(fp).equals(want)) {
     chmodSync4(fp, mode);
     return;
   }
@@ -11269,13 +12392,13 @@ function safeRestore(repoDir, f, want, mode) {
     if (st.isDirectory())
       rmdirSync(fp);
     else
-      unlinkSync3(fp);
+      unlinkSync4(fp);
   }
-  const fd = openSync6(fp, "wx", mode);
+  const fd = openSync8(fp, "wx", mode);
   try {
-    writeFileSync14(fd, want);
+    writeFileSync21(fd, want);
   } finally {
-    closeSync6(fd);
+    closeSync8(fd);
   }
   chmodSync4(fp, mode);
 }
@@ -11283,10 +12406,10 @@ function alreadySatisfied(o) {
   const b = o.wall?.base_run ?? {};
   return o.intake?.already_satisfied === true || o.implement?.exit === "already_done" || typeof b.pass === "number" && b.pass > 0 && b.fail === 0 && (b.not_run ?? 0) === 0;
 }
-function catBlob(repoDir, sha3) {
-  const r = safeGitSpawn(repoDir, ["cat-file", "blob", sha3], { maxBuffer: 1 << 28 });
+function catBlob(repoDir, sha2) {
+  const r = safeGitSpawn(repoDir, ["cat-file", "blob", sha2], { maxBuffer: 1 << 28 });
   if (r.error || r.status !== 0)
-    throw r.error ?? new Error(`git cat-file blob ${sha3} failed`);
+    throw r.error ?? new Error(`git cat-file blob ${sha2} failed`);
   return r.stdout;
 }
 async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
@@ -11299,15 +12422,15 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join44(repoDir, f);
+    const fp = join51(repoDir, f);
     try {
       if (v.startsWith("!")) {
-        const st = lstatSync7(fp);
+        const st = lstatSync10(fp);
         if (`!${st.size}:${st.mtimeMs}:${st.ctimeMs}` !== v)
           throw new Error("changed, not snapshotted");
         continue;
       }
-      const [sha3, mode] = v.split(" "), want = catBlob(repoDir, sha3);
+      const [sha2, mode] = v.split(" "), want = catBlob(repoDir, sha2);
       safeRestore(repoDir, f, want, parseInt(mode ?? "644", 8));
     } catch {
       notProven.push(f);
@@ -11318,7 +12441,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync7(join44(repoDir, f));
+          const l = lstatSync10(join51(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -11341,93 +12464,28 @@ function untouchedSinceIntake(repoDir, recorded, env = process.env) {
     try {
       return blob2(repoDir, p, env) === h;
     } catch {
-      return false;
-    }
-  }).map(([p]) => p);
-}
-var blob2 = (repoDir, path, env = process.env) => safeGit(repoDir, ["hash-object", "-w", "--no-filters", "--", path], { env }).trim();
-var init_preexisting_dirty = __esm(() => {
-  init_safe_git();
-});
-
-// ../../loki-ts/src/e10ext/commit_filter.ts
-import { dirname as dirname16 } from "path";
-function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
-  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname16(m) === dirname16(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
-}
-var parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []);
-var init_commit_filter = __esm(() => {
-  init_preexisting_dirty();
-  init_safe_git();
-});
-
-// ../../loki-ts/src/features/speed/unit_mode.ts
-import { closeSync as closeSync7, constants as constants2, fstatSync as fstatSync4, lstatSync as lstatSync8, openSync as openSync7, readSync as readSync5, realpathSync as realpathSync19 } from "fs";
-function readBounded(path) {
-  const l = lstatSync8(path);
-  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
-    return null;
-  const fd = openSync7(path, constants2.O_RDONLY | constants2.O_NOFOLLOW | constants2.O_NONBLOCK);
-  try {
-    const st = fstatSync4(fd);
-    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
-      return null;
-    const buf = Buffer.alloc(st.size + 1);
-    let n2 = 0;
-    for (;; ) {
-      const r = readSync5(fd, buf, n2, buf.length - n2, null);
-      if (r <= 0)
-        break;
-      n2 += r;
-      if (n2 >= buf.length)
-        return null;
-    }
-    return buf.subarray(0, n2).toString("utf8");
-  } finally {
-    closeSync7(fd);
-  }
-}
-function parseText(txt) {
-  try {
-    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
-    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
-      return null;
-    return { id: j.id, writeSet: ws, pack, tokenBudget: tb };
-  } catch {
-    return null;
-  }
-}
-function parseSpec(path) {
-  try {
-    const txt = readBounded(path);
-    return txt === null ? null : parseText(txt);
-  } catch {
-    return null;
-  }
-}
-function unitSpec(env = process.env) {
-  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
-  if (env["LOKI_SPEED"] === "0" || !path)
-    return null;
-  if (frozen !== undefined)
-    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
-  if (!memo.has(path))
-    memo.set(path, parseSpec(path));
-  return memo.get(path) ?? null;
+      return false;
+    }
+  }).map(([p]) => p);
 }
-function unitFlags(staged, env = process.env, pre = {}) {
-  const s = unitSpec(env);
-  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
+var blob2 = (repoDir, path, env = process.env) => safeGit(repoDir, ["hash-object", "-w", "--no-filters", "--", path], { env }).trim();
+var init_preexisting_dirty = __esm(() => {
+  init_safe_git();
+});
+
+// ../../loki-ts/src/e10ext/commit_filter.ts
+import { dirname as dirname20 } from "path";
+function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
+  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname20(m) === dirname20(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
 }
-var MAX_SPEC_BYTES, MAX_TOKEN_BUDGET = 1e9, norm3 = (p) => p.replace(/^\.\//, ""), CTRL, strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm3) : null, memo, inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
-var init_unit_mode = __esm(() => {
-  MAX_SPEC_BYTES = 1024 * 1024;
-  CTRL = /[\x00-\x1f\x7f]/;
-  memo = new Map;
+var parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []);
+var init_commit_filter = __esm(() => {
+  init_preexisting_dirty();
+  init_safe_git();
 });
 
 // ../../loki-ts/src/e10ext/scope.ts
-import { basename as basename16, dirname as dirname17 } from "path";
+import { basename as basename18, dirname as dirname21 } from "path";
 function contractText(o) {
   const c = o.intake?.contract_snapshot?.contract;
   return Array.isArray(c?.criteria) ? c.criteria.map((x) => typeof x?.text === "string" ? x.text : "").join(`
@@ -11438,18 +12496,18 @@ function outsideScope(o, staged) {
   const plan = typeof o.plan?.plan === "string" ? o.plan.plan : "";
   if (rel.length === 0 && plan.trim() === "")
     return null;
-  const text3 = `${plan}
+  const text2 = `${plan}
 ${typeof o.intake?.task === "string" ? o.intake.task : ""}
 ${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
-  const toks = surfaceTokens(text3), plannedDirs = new Set(rel.map((r) => dirname17(r)).filter((d) => d !== "."));
-  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text3, f) && !mentions(text3, basename16(f)) && !plannedDirs.has(dirname17(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
+  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname21(r)).filter((d) => d !== "."));
+  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename18(f)) && !plannedDirs.has(dirname21(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
 }
 function flagOutsideScope(o, staged) {
   const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
   const un = outsideScope(o, staged), seen = new Set((unit ?? []).map(outsideNote));
   return [...(unit ?? []).map(outsideNote), ...un ? un.map(outsideNote).filter((n2) => !seen.has(n2)) : staged.length > 0 ? [SCOPE_UNDETERMINED] : []];
 }
-var SCOPE_UNDETERMINED = "scope not determined; all edits committed", outsideNote = (f) => `outside stated scope: ${f}`, esc2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), mentions = (text3, name) => new RegExp(`(?<![\\w./-])${esc2(name)}(?![\\w-]|\\.\\w)`).test(text3), STOP, stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w, surfaceTokens = (text3) => new Set((text3.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem)), dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
+var SCOPE_UNDETERMINED = "scope not determined; all edits committed", outsideNote = (f) => `outside stated scope: ${f}`, esc2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), mentions = (text2, name) => new RegExp(`(?<![\\w./-])${esc2(name)}(?![\\w-]|\\.\\w)`).test(text2), STOP, stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w, surfaceTokens = (text2) => new Set((text2.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem)), dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
 var init_scope2 = __esm(() => {
   init_testmap();
   init_unit_mode();
@@ -11457,101 +12515,77 @@ var init_scope2 = __esm(() => {
 });
 
 // ../../loki-ts/src/util/receipt_signer.ts
-var RECEIPT_SIGNER_BASENAME = "receipt-ed25519.pem";
-
-// ../../loki-ts/src/util/atomic.ts
-import {
-  closeSync as closeSync8,
-  fstatSync as fstatSync5,
-  fsyncSync as fsyncSync2,
-  lstatSync as lstatSync9,
-  mkdirSync as mkdirSync12,
-  openSync as openSync8,
-  readSync as readSync6,
-  renameSync as renameSync5,
-  rmSync as rmSync11,
-  statSync as statSync15,
-  unlinkSync as unlinkSync4,
-  writeSync as writeSync3
-} from "fs";
-import { dirname as dirname18 } from "path";
-function durableWriteThenRename(target, body) {
-  mkdirSync12(dirname18(target), { recursive: true });
-  const tmp = `${target}.tmp.${process.pid}.${++_tmpCounter}`;
-  const fd = openSync8(tmp, "w");
-  try {
-    writeSync3(fd, body);
-    fsyncSync2(fd);
-  } finally {
-    closeSync8(fd);
-  }
-  renameSync5(tmp, target);
-  fsyncParentDir(target);
+import { createHash as createHash10, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
+import { chmodSync as chmodSync5, linkSync, mkdirSync as mkdirSync20, readFileSync as readFileSync37, statSync as statSync16, unlinkSync as unlinkSync5, writeFileSync as writeFileSync22 } from "fs";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname22, join as join52 } from "path";
+function canonicalJson(x) {
+  const walk = (v) => {
+    if (Array.isArray(v))
+      return `[${v.map(walk).join(",")}]`;
+    if (v !== null && typeof v === "object") {
+      const o = v;
+      return `{${Object.keys(o).filter((k) => o[k] !== undefined).sort().map((k) => `${JSON.stringify(k)}:${walk(o[k])}`).join(",")}}`;
+    }
+    return JSON.stringify(v ?? null);
+  };
+  return walk(x).replace(/[\u0080-\uFFFF]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`);
 }
-function fsyncParentDir(target) {
-  let dfd = null;
+function loadSigningKey(generate = true) {
   try {
-    dfd = openSync8(dirname18(target), "r");
-    fsyncSync2(dfd);
-  } catch {} finally {
-    if (dfd !== null) {
+    const inline = process.env["LOKI_RECEIPT_SIGNING_KEY"]?.trim();
+    let pem = inline ?? "";
+    if (!inline) {
+      const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
+      const file = given || join52(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        closeSync8(dfd);
-      } catch {}
+        pem = readFileSync37(file);
+        if (!given) {
+          for (const [f, m] of [[file, 384], [dirname22(file), 448]])
+            if (statSync16(f).mode & 63)
+              chmodSync5(f, m);
+        }
+      } catch (e) {
+        if (e.code !== "ENOENT" || !generate)
+          return null;
+        mkdirSync20(dirname22(dirname22(file)), { recursive: true, mode: 448 });
+        mkdirSync20(dirname22(file), { recursive: true, mode: 448 });
+        const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
+        writeFileSync22(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
+        try {
+          linkSync(tmp, file);
+        } catch (l) {
+          if (l.code !== "EEXIST")
+            throw l;
+        } finally {
+          unlinkSync5(tmp);
+        }
+        pem = readFileSync37(file);
+      }
     }
-  }
-}
-function atomicWriteJson(target, data) {
-  durableWriteThenRename(target, `${JSON.stringify(data, null, 2)}
-`);
-}
-var _tmpCounter = 0, _appendChains;
-var init_atomic = __esm(() => {
-  _appendChains = new Map;
-});
-
-// ../../loki-ts/src/util/pr_lessons.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync13, readFileSync as readFileSync31 } from "fs";
-import { dirname as dirname19, join as join45 } from "path";
-function loadLessons(repoDir) {
-  const p = lessonsPath(repoDir);
-  if (!existsSync25(p))
-    return [];
-  try {
-    const j = JSON.parse(readFileSync31(p, "utf-8"));
-    return Array.isArray(j.lessons) ? j.lessons : [];
+    const k = createPrivateKey(pem);
+    return k.asymmetricKeyType === "ed25519" ? k : null;
   } catch {
-    return [];
+    return null;
   }
 }
-function save(repoDir, lessons) {
-  const p = lessonsPath(repoDir);
-  mkdirSync13(dirname19(p), { recursive: true });
-  atomicWriteJson(p, { version: 2, lessons });
-}
-function recordRunVerdict(repoDir, runId, verdict) {
-  const lessons = loadLessons(repoDir);
-  let dirty = false;
-  for (const l of lessons)
-    for (const u of l.uses)
-      if (u.run_id === runId && u.verdict === null) {
-        u.verdict = verdict;
-        dirty = true;
-      }
-  if (dirty)
-    save(repoDir, lessons);
+function signReceipt(runId, hash) {
+  const key = loadSigningKey();
+  if (!key)
+    return { jwt: null, kid: null };
+  const kid = kidOf2(createPublicKey2(key));
+  const input = `${b64u(canonicalJson({ alg: "EdDSA", typ: "JWT", kid }))}.${b64u(canonicalJson({ job_id: runId, run_id: runId, receipt_sha256: hash, iat: Math.floor(Date.now() / 1000) }))}`;
+  return { jwt: `${input}.${b64u(sign(null, Buffer.from(input), key))}`, kid };
 }
-var lessonsPath = (repoDir) => join45(repoDir, ".loki", "memory", "semantic", "pr-lessons.json");
-var init_pr_lessons = __esm(() => {
-  init_atomic();
-});
+var RECEIPT_SIGNER_BASENAME = "receipt-ed25519.pem", b64u = (b) => Buffer.from(b).toString("base64url"), kidOf2 = (pub) => b64u(createHash10("sha256").update(`{"crv":"Ed25519","kty":"OKP","x":"${pub.export({ format: "jwk" }).x}"}`).digest());
+var init_receipt_signer = () => {};
 
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn7 } from "child_process";
-import { createHash as createHash10, randomBytes as randomBytes3 } from "crypto";
-import { existsSync as existsSync26, lstatSync as lstatSync10, mkdirSync as mkdirSync14, readdirSync as readdirSync14, readFileSync as readFileSync32, writeFileSync as writeFileSync15 } from "fs";
+import { createHash as createHash11, randomBytes as randomBytes4 } from "crypto";
+import { existsSync as existsSync31, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readdirSync as readdirSync15, readFileSync as readFileSync38, writeFileSync as writeFileSync23 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname20, isAbsolute as isAbsolute7, join as join46, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute8, join as join53, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -11561,7 +12595,7 @@ function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join46(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join53(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -11572,16 +12606,16 @@ function checkScreens(runDir, screens) {
   for (const s of screens) {
     if (typeof s?.path !== "string" || typeof s.sha256 !== "string")
       return "evidence_screens entry is malformed";
-    if (isAbsolute7(s.path) || normalize2(s.path).startsWith(".."))
+    if (isAbsolute8(s.path) || normalize2(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join46(runDir, s.path);
+    const file = join53(runDir, s.path);
     let cur = runDir;
     for (const seg of normalize2(s.path).split(sep12)) {
-      cur = join46(cur, seg);
+      cur = join53(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
-    if (!existsSync26(file))
+    if (!existsSync31(file))
       return `evidence screenshot is missing: ${s.path}`;
     if (!isRegularFile(file))
       return `evidence screenshot is not a regular file: ${s.path}`;
@@ -11624,11 +12658,11 @@ async function waitUp(url, ms, signal) {
 }
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join46(repoDir, f);
-    if (!existsSync26(p))
+    const p = join53(repoDir, f);
+    if (!existsSync31(p))
       continue;
     try {
-      const txt = readFileSync32(p, "utf8");
+      const txt = readFileSync38(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -11642,24 +12676,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join46(runDir, relDir, "e2e");
-    mkdirSync14(dir, { recursive: true });
-    writeFileSync15(join46(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync15(join46(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    const dir = join53(runDir, relDir, "e2e");
+    mkdirSync21(dir, { recursive: true });
+    writeFileSync23(join53(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync23(join53(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join46(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join53(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
-      for (const e of readdirSync14(d, { withFileTypes: true })) {
-        const full = join46(d, e.name);
+      for (const e of readdirSync15(d, { withFileTypes: true })) {
+        const full = join53(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join46(relDir, "e2e", relative8(dir, full)));
+          rels.push(join53(relDir, "e2e", relative8(dir, full)));
       }
     };
-    walk(join46(dir, "out"));
+    walk(join53(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -11728,13 +12762,13 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
     const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
-    const appDir = boot ? join46(repoDir, boot.boot.cwd) : repoDir;
-    const pkgPath = join46(appDir, "package.json");
+    const appDir = boot ? join53(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join53(appDir, "package.json");
     let script = null;
     if (!boot) {
-      if (!existsSync26(pkgPath))
+      if (!existsSync31(pkgPath))
         return skip("no package.json");
-      script = pickScript(JSON.parse(readFileSync32(pkgPath, "utf8")));
+      script = pickScript(JSON.parse(readFileSync38(pkgPath, "utf8")));
       if (!script)
         return skip("no dev, preview or start script");
     }
@@ -11761,20 +12795,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join46(runDir, "evidence");
+    const evRoot = join53(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
-    mkdirSync14(evRoot, { recursive: true });
+    mkdirSync21(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join46("evidence", randomBytes3(6).toString("hex"));
-      mkdirSync14(join46(runDir, rel0));
+      const rel0 = join53("evidence", randomBytes4(6).toString("hex"));
+      mkdirSync21(join53(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join46(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join46(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join46(runDir, rel)) && existsSync26(join46(runDir, rel)))
+        const rel = join53(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join53(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join53(runDir, rel)) && existsSync31(join53(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -11799,9 +12833,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join46(evRoot, randomBytes3(6).toString("hex"));
-    mkdirSync14(hdir);
-    writeFileSync15(join46(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    const hdir = join53(evRoot, randomBytes4(6).toString("hex"));
+    mkdirSync21(hdir);
+    writeFileSync23(join53(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -11824,27 +12858,27 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
   return ev.screens.length > 0 ? { evidence_screens: ev.screens } : {};
 }
 function receiptScreensProblem(receiptPath, receipt) {
-  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname20(receiptPath), receipt["evidence_screens"]);
+  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname23(receiptPath), receipt["evidence_screens"]);
 }
-var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash10("sha256").update(readFileSync32(p)).digest("hex"), playwrightBin = (repoDir) => {
-  const bin = join46(repoDir, "node_modules", ".bin", "playwright");
-  return existsSync26(bin) ? bin : null;
+var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash11("sha256").update(readFileSync38(p)).digest("hex"), playwrightBin = (repoDir) => {
+  const bin = join53(repoDir, "node_modules", ".bin", "playwright");
+  return existsSync31(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
-  const d = join46(repoDir, "node_modules", "@playwright", "test");
-  return existsSync26(join46(d, "package.json")) ? d : null;
+  const d = join53(repoDir, "node_modules", "@playwright", "test");
+  return existsSync31(join53(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
 });
 `, DEFAULT_BUDGET_MS = 25000, MAX_ROUTES = 5, isSymlink = (p) => {
   try {
-    return lstatSync10(p).isSymbolicLink();
+    return lstatSync11(p).isSymbolicLink();
   } catch {
     return false;
   }
 }, isRegularFile = (p) => {
   try {
-    return lstatSync10(p).isFile();
+    return lstatSync11(p).isFile();
   } catch {
     return false;
   }
@@ -11862,14 +12896,14 @@ var init_visual_evidence = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync27, readdirSync as readdirSync15, readFileSync as readFileSync33 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join47 } from "path";
+import { existsSync as existsSync32, readdirSync as readdirSync16, readFileSync as readFileSync39 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join54 } from "path";
 function agentDirs(repoDir, env = process.env) {
-  return [env["LOKI_AGENTS_PROJECT_DIR"] || join47(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join47(env["XDG_CONFIG_HOME"] || join47(homedir8(), ".config"), "loki", "agents")];
+  return [env["LOKI_AGENTS_PROJECT_DIR"] || join54(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join54(env["XDG_CONFIG_HOME"] || join54(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
-  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync33(file, "utf8"));
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync39(file, "utf8"));
   if (!m)
     return null;
   const body = m[2].trim();
@@ -11883,18 +12917,18 @@ function parseAgent(file, stem2) {
 }
 function loadRoleAgent(repoDir, role, env = process.env) {
   for (const d of agentDirs(repoDir, env)) {
-    if (!existsSync27(d))
+    if (!existsSync32(d))
       continue;
     let names;
     try {
-      names = readdirSync15(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
+      names = readdirSync16(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
     } catch {
       continue;
     }
     const ordered = [...names.filter((n2) => n2 === `${role}.md`), ...names.filter((n2) => n2 !== `${role}.md`)];
     for (const n2 of ordered) {
       try {
-        const a = parseAgent(join47(d, n2), n2.slice(0, -3));
+        const a = parseAgent(join54(d, n2), n2.slice(0, -3));
         if (a && a.role === role)
           return a;
       } catch {}
@@ -11910,83 +12944,12 @@ var init_role_agents = __esm(() => {
   ROLES = ["council", "reviewer"];
 });
 
-// ../../loki-ts/src/util/shell.ts
-async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
-  const reader = stream.getReader();
-  const decoder = new TextDecoder;
-  let out2 = "";
-  let total = 0;
-  try {
-    while (total < maxBytes) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      if (!value)
-        continue;
-      total += value.byteLength;
-      if (total > maxBytes) {
-        const keep = value.byteLength - (total - maxBytes);
-        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
-        break;
-      }
-      out2 += decoder.decode(value, { stream: true });
-    }
-    out2 += decoder.decode();
-  } finally {
-    try {
-      await reader.cancel();
-    } catch {}
-    reader.releaseLock();
-  }
-  return out2;
-}
-async function run(argv, opts = {}) {
-  const proc = Bun.spawn({
-    cmd: [...argv],
-    stdout: "pipe",
-    stderr: "pipe",
-    env: opts.env ? { ...process.env, ...opts.env } : process.env,
-    cwd: opts.cwd
-  });
-  let timer;
-  let killTimer;
-  if (opts.timeoutMs && opts.timeoutMs > 0) {
-    timer = setTimeout(() => {
-      try {
-        proc.kill("SIGTERM");
-      } catch {}
-      killTimer = setTimeout(() => {
-        try {
-          proc.kill("SIGKILL");
-        } catch {}
-      }, 2000);
-    }, opts.timeoutMs);
-  }
-  try {
-    const [stdout, stderr, exitCode] = await Promise.all([
-      readStreamCapped(proc.stdout),
-      new Response(proc.stderr).text(),
-      proc.exited
-    ]);
-    return { stdout, stderr, exitCode };
-  } finally {
-    if (timer)
-      clearTimeout(timer);
-    if (killTimer)
-      clearTimeout(killTimer);
-  }
-}
-var MAX_STDOUT_BYTES;
-var init_shell = __esm(() => {
-  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
-});
-
 // ../../loki-ts/src/engine10/stages/xreview.ts
-import { existsSync as existsSync28, readFileSync as readFileSync34 } from "fs";
-import { join as join48 } from "path";
+import { existsSync as existsSync33, readFileSync as readFileSync40 } from "fs";
+import { join as join55 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
-  return RANK2[ceiling] < RANK2[verdict] ? ceiling : verdict;
+  return RANK3[ceiling] < RANK3[verdict] ? ceiling : verdict;
 }
 function explicitReview(repoDir, env) {
   const flag = xvendorDefault(env);
@@ -11996,11 +12959,11 @@ function explicitReview(repoDir, env) {
   if (flag && isOff(ev))
     return "off";
   for (const f of ["loki.yaml", "loki.yml"]) {
-    const p = join48(repoDir, f);
-    if (!existsSync28(p))
+    const p = join55(repoDir, f);
+    if (!existsSync33(p))
       continue;
     try {
-      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync34(p, "utf8"));
+      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync40(p, "utf8"));
       const v = asProvider(m?.[1]);
       if (v)
         return v;
@@ -12078,7 +13041,7 @@ Review ONLY the diff below. Do not modify files.` : "You are an independent code
     return { provider: p, level: "not_run", notes: [`cross-review not run: ${p} CLI unavailable`] };
   }
 }
-var RANK2, TIMEOUT_MS = 300000, MAX_DIFF = 60000, MAX_NOTES = 5, asProvider = (v) => {
+var RANK3, TIMEOUT_MS = 300000, MAX_DIFF = 60000, MAX_NOTES = 5, asProvider = (v) => {
   const s = v?.trim().toLowerCase();
   return s === "codex" || s === "claude" ? s : null;
 }, isOff = (v) => /^(off|none|false|0)$/i.test(v?.trim() ?? ""), xvendorDefault = (env = process.env) => /^(1|true|yes|on)$/i.test(env["LOKI_XVENDOR_DEFAULT"]?.trim() ?? ""), reviewCli = (p, env = process.env) => env[`LOKI_${p.toUpperCase()}_CLI`]?.trim() || p, clean3 = (s) => s.replace(/[\x00-\x1f\x7f`]+/g, " ").trim().slice(0, 300);
@@ -12086,107 +13049,89 @@ var init_xreview = __esm(() => {
   init_role_agents();
   init_shell();
   init_safe_git();
-  RANK2 = { FAILED: 0, SPEC_CONFLICT: 0, PARTIAL: 1, ALREADY_SATISFIED: 2, VERIFIED: 2 };
+  RANK3 = { FAILED: 0, SPEC_CONFLICT: 0, PARTIAL: 1, ALREADY_SATISFIED: 2, VERIFIED: 2 };
 });
 
-// ../../loki-ts/src/runner/router/route_record.ts
-import { existsSync as existsSync29, lstatSync as lstatSync11, mkdirSync as mkdirSync15, readFileSync as readFileSync35, writeFileSync as writeFileSync16 } from "fs";
-import { join as join49 } from "path";
-function loadRouteRecord(runDir) {
-  try {
-    const p = join49(runDir, ROUTE_RECORD_FILE);
-    if (!existsSync29(p) || !lstatSync11(p).isFile())
-      return;
-    const v = JSON.parse(readFileSync35(p, "utf8"));
-    return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
-  } catch {
-    return;
-  }
-}
-var ROUTE_RECORD_FILE = "route.json";
-var init_route_record = () => {};
-
-// ../../loki-ts/src/runner/router/history_store.ts
-import { existsSync as existsSync30, mkdirSync as mkdirSync16, readFileSync as readFileSync36, renameSync as renameSync6, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "fs";
-import { resolve as resolve11 } from "path";
-function validRun(v) {
-  if (typeof v !== "object" || v === null)
-    return false;
-  const r = v;
-  return typeof r["shape"] === "string" && typeof r["executor"] === "string" && EXECUTORS.includes(r["executor"]) && typeof r["verdict"] === "string" && VERDICTS.includes(r["verdict"]) && (r["owner"] === null || typeof r["owner"] === "string" && OWNERS.includes(r["owner"])) && typeof r["escalated"] === "boolean" && typeof r["usd"] === "number" && Number.isFinite(r["usd"]) && typeof r["wallS"] === "number" && Number.isFinite(r["wallS"]);
+// ../../loki-ts/src/runner/router/route_block.ts
+function advisorUnavailableReason(env, provider) {
+  if (provider !== "claude")
+    return `provider ${provider} has no advisor tool`;
+  if (env["CLAUDE_CODE_USE_BEDROCK"] || env["CLAUDE_CODE_USE_VERTEX"] || env["CLAUDE_CODE_USE_FOUNDRY"])
+    return "advisor tool is unsupported on Bedrock, Vertex and Foundry";
+  if ((env["LOKI_ROUTER_ADVISOR"] ?? "").trim().toLowerCase() === "off")
+    return "LOKI_ROUTER_ADVISOR=off";
+  return null;
 }
-function historyPath(key, cacheRoot) {
-  return resolve11(repoCacheDir(key, cacheRoot), HISTORY_FILE);
+function toEsc(raw2) {
+  const esc3 = Array.isArray(raw2) ? raw2 : [];
+  return esc3.map((e) => ({ trigger: s0(e["trigger"]) ?? "unknown", from: modelLabel(s0(e["from"]) ?? "?"), to: modelLabel(s0(e["to"]) ?? "?"), evidence: s0(e["evidence"]) ?? "none recorded" }));
 }
-function readRunHistory(key, cacheRoot) {
-  const path = historyPath(key, cacheRoot);
-  if (!existsSync30(path))
-    return [];
-  try {
-    const parsed = JSON.parse(readFileSync36(path, "utf8"));
-    const runs2 = parsed?.runs;
-    return Array.isArray(runs2) ? runs2.filter(validRun) : [];
-  } catch {
-    return [];
-  }
+function buildRouteBlock(env, provider, route, telemetry, runModel) {
+  if (!routerEnabled(env))
+    return null;
+  const applied = route?.["applied"] !== false;
+  const executor = s0(route?.["executor"]);
+  const unavailable = s0(route?.["advisor_unavailable_reason"]) ?? advisorUnavailableReason(env, provider);
+  const total = nN(telemetry?.requests_total);
+  const over = nN(telemetry?.requests_over_100k);
+  const shape = s0(route?.["shape_key"]);
+  const escalations = toEsc(route?.["escalations"]);
+  const source = s0(route?.["source"]);
+  const reason = s0(route?.["reason"]) ?? (executor ? "no reason recorded" : "no route recorded by implement");
+  const rawUnits = Array.isArray(route?.["units"]) ? route["units"] : [];
+  const units = rawUnits.length > 0 ? rawUnits.map((u, i) => ({ id: s0(u["id"]) ?? String(i + 1), executor: modelLabel(s0(u["executor"]) ?? "unknown"), applied, assigned_by: assignedBy(s0(u["source"]) ?? source, u["assigned_by"]), reason: s0(u["reason"]) ?? "no reason recorded", escalations: toEsc(u["escalations"]) })) : executor && route?.["routed"] !== false ? [{ id: "run", executor: modelLabel(executor), applied, assigned_by: assignedBy(source, route?.["assigned_by"]), reason, escalations }] : [];
+  return {
+    routed: route?.["routed"] === false ? false : executor !== null || units.length > 0,
+    units,
+    executor: !applied ? `${runModel ? modelLabel(runModel) : "run model"} (per-unit assignment not applied)` : executor ? modelLabel(executor) : units[0]?.executor ?? null,
+    advisor: unavailable ? null : modelLabel(s0(route?.["advisor"]) ?? "opus"),
+    advisor_unavailable_reason: unavailable,
+    reason,
+    source,
+    shape_key: shape,
+    shape_parity: shape ? `NOT PROVEN (no B9 row for shape ${shape})` : "NOT PROVEN (no shape key recorded)",
+    escalations: units.length > 0 ? units.flatMap((u) => u.escalations) : escalations,
+    requests_total: total,
+    requests_over_100k: over,
+    over_100k_share: total !== null && over !== null && total > 0 ? Math.round(over / total * 1e4) / 1e4 : null,
+    advisor_calls: nN(telemetry?.advisor_calls),
+    advisor_input_tokens: nN(telemetry?.advisor_input_tokens),
+    advisor_output_tokens: nN(telemetry?.advisor_output_tokens),
+    plan_model: s0(route?.["plan_model"]),
+    applied,
+    run_model: runModel ?? null,
+    not_proven: Array.isArray(route?.["route_not_proven"]) ? route["route_not_proven"].filter((x) => typeof x === "string") : []
+  };
 }
-function appendRunOutcome(key, outcome, cacheRoot) {
-  try {
-    const runs2 = [...readRunHistory(key, cacheRoot), outcome].slice(-HISTORY_CAP);
-    mkdirSync16(repoCacheDir(key, cacheRoot), { recursive: true });
-    const target = historyPath(key, cacheRoot);
-    const tmp = `${target}.${process.pid}.tmp`;
-    try {
-      writeFileSync17(tmp, JSON.stringify({ runs: runs2 }));
-      renameSync6(tmp, target);
-    } catch (e) {
-      rmSync12(tmp, { force: true, recursive: false });
-      throw e;
-    }
-    return true;
-  } catch {
-    return false;
-  }
+function routePrLine(r) {
+  if (!r.routed)
+    return `Route: not routed (${r.reason})`;
+  const adv = r.advisor ? `advisor ${r.advisor}` : "advisor unavailable";
+  return `Route: executor ${r.executor}, ${adv}; advisor tokens ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out; over 100K: ${over(r, " requests")}`;
 }
-var HISTORY_FILE = "router_history.json", HISTORY_CAP = 200, WALL_KIND = "total-v1", EXECUTORS, VERDICTS, OWNERS;
-var init_history_store = __esm(() => {
-  init_cache();
-  EXECUTORS = ["haiku", "sonnet"];
-  VERDICTS = ["pass", "fail", "error", "not_proven"];
-  OWNERS = ["code", "harness", "env", "provider"];
-});
-
-// ../../loki-ts/src/runner/router/history.ts
-import { dirname as dirname21, join as join50, resolve as resolve12 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-function shapeKey(model) {
-  if (!model || model.status !== "ok")
-    return null;
-  const runners = new Set(model.packages.map((p) => (p.runner ?? "").trim().toLowerCase() || "none"));
-  return `${model.workspaceKind}:${[...runners].sort().join("+")}`;
+function routeReceiptLines(r) {
+  if (!r.routed)
+    return [`- Route: not routed (${r.reason})`, `- Route shape_parity: ${r.shape_parity}`];
+  return [
+    `- Route: executor ${r.executor}, ${r.advisor ? `advisor ${r.advisor}` : `advisor unavailable: ${r.advisor_unavailable_reason}`}: ${r.reason}`,
+    `- Route shape_key: ${r.shape_key ?? "unknown"}  shape_parity: ${r.shape_parity}`,
+    `- Route escalations: ${r.escalations.length === 0 ? "none" : r.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger}; evidence ${e.evidence})`).join("; ")}`,
+    `- Route advisor: ${rec(r.advisor_calls)} calls, ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out tokens`,
+    ...r.units.map((u) => `- Route unit ${u.id}: executor ${u.applied ? u.executor : `not applied (assigned ${u.executor})`}, assigned by ${u.assigned_by}: ${u.reason}; escalation: ${u.escalations.length === 0 ? "none" : u.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger})`).join(", ")}`),
+    `- Route requests over 100K: ${over(r, "")}`
+  ];
 }
-function shapeKeyForRepo(repoDir) {
-  try {
-    const dirs = shallowDirs(repoDir);
-    const committed = loadCommitted(repoDir);
-    if (committed)
-      return shapeKey({ ...committed.model, key: computeKey(repoDir, committed.model.fingerprintFiles, dirs, committed.hash) });
-    const cached = loadCached(repoDir);
-    if (!cached || computeKey(repoDir, cached.fingerprintFiles, dirs) !== cached.key)
-      return null;
-    return shapeKey(cached);
-  } catch {
-    return null;
-  }
+function routeNotProven(r) {
+  return [
+    ...r.advisor_unavailable_reason ? [`advisor: NOT PROVEN (owner provider): ${r.advisor_unavailable_reason}`] : [],
+    `route.shape_parity: ${r.shape_parity}`,
+    ...r.applied ? [] : [`route.executor: NOT PROVEN (owner engine): per-unit executor assignment is not applied (R1-11); every stage ran ${r.run_model ?? "the run model"}`],
+    ...r.not_proven
+  ];
 }
-var SHAPE_DEFAULTS_FILE;
-var init_history = __esm(() => {
-  init_schema();
-  init_history_store();
-  init_discover2();
-  init_gather();
-  init_history_store();
-  SHAPE_DEFAULTS_FILE = resolve12(dirname21(fileURLToPath3(import.meta.url)), "..", "..", "..", "data", "router-shape-defaults.json");
+var ALIAS, modelLabel = (m) => ALIAS[m] ?? m, nN = (v) => typeof v === "number" && Number.isFinite(v) ? v : null, rec = (v) => v === null ? "not recorded" : String(v), s0 = (v) => typeof v === "string" && v.trim() ? v.trim() : null, assignedBy = (src, explicit) => s0(explicit) ?? (src === null || src === "opus" ? "opus" : src), over = (r, unit) => r.requests_total === null || r.requests_over_100k === null ? "not recorded" : `${r.requests_over_100k} of ${r.requests_total}${unit} (${pct(r)})`, pct = (r) => r.over_100k_share === null ? "n/a (no requests)" : `${(r.over_100k_share * 100).toFixed(1)}%`;
+var init_route_block = __esm(() => {
+  ALIAS = { haiku: "haiku-5.5", sonnet: "sonnet-5.5", opus: "opus-5.5" };
 });
 
 // ../../loki-ts/src/util/engine_origin.ts
@@ -12199,6 +13144,7 @@ function readOriginUrl(repoDir) {
   }
 }
 var init_engine_origin = __esm(() => {
+  init_atomic();
   init_safe_git();
 });
 
@@ -12235,9 +13181,9 @@ var init_cost_preview = __esm(() => {
 });
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync31, lstatSync as lstatSync12, mkdirSync as mkdirSync17, readFileSync as readFileSync37, writeFileSync as writeFileSync18 } from "fs";
-import { dirname as dirname22, join as join51 } from "path";
-import { createHash as createHash11 } from "crypto";
+import { existsSync as existsSync34, lstatSync as lstatSync12, mkdirSync as mkdirSync22, readFileSync as readFileSync41, rmSync as rmSync14, writeFileSync as writeFileSync24 } from "fs";
+import { dirname as dirname24, join as join56 } from "path";
+import { createHash as createHash12 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
 }
@@ -12268,7 +13214,7 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join51(repoDir, ".loki", "contract.json");
+  return join56(repoDir, ".loki", "contract.json");
 }
 function readContract(repoDir) {
   const p = contractPath(repoDir);
@@ -12284,11 +13230,11 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync37(p);
+    raw2 = readFileSync41(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
-  const sha2563 = createHash11("sha256").update(raw2).digest("hex");
+  const sha2563 = createHash12("sha256").update(raw2).digest("hex");
   let j;
   try {
     j = JSON.parse(raw2.toString("utf8"));
@@ -12345,16 +13291,157 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
     return [`contract trace failed: ${sanitizeCriterion(e instanceof Error ? e.message : String(e))}`];
   }
 }
-var MAX_CRITERIA = 50, MAX_TEXT = 500, STOP2, MAX_CONTRACT_BYTES;
+var MAX_CRITERIA = 50, MAX_TEXT = 500, STOP2, MAX_CONTRACT_BYTES, REQ_MAP_REL, REQ_STOP;
 var init_contract = __esm(() => {
+  init_atomic();
+  init_spec_file();
+  init_paths();
   init_safe_git();
   STOP2 = new Set(["the", "and", "for", "with", "that", "this", "must", "should", "shall", "when", "then", "are", "was", "all", "any", "can", "not", "has", "have", "from", "into", "each", "user", "users"]);
   MAX_CONTRACT_BYTES = 1024 * 1024;
+  REQ_MAP_REL = join56(".loki", "state", "requirements-map.json");
+  REQ_STOP = new Set(["with", "that", "this", "from", "have", "will", "should", "must", "when", "then", "into", "each", "every", "user", "users", "page", "able", "allow", "support", "ensure", "using", "their", "there", "which", "shall"]);
+});
+
+// ../../loki-ts/src/features/speed/seal_group.ts
+import { createHash as createHash13 } from "crypto";
+import { existsSync as existsSync35, readdirSync as readdirSync17, readFileSync as readFileSync42, statSync as statSync17 } from "fs";
+import { dirname as dirname25, join as join57 } from "path";
+function sealGroup(runDir, rh) {
+  const manifestPath = join57(runDir, "group", "manifest.json");
+  if (!existsSync35(manifestPath))
+    return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
+  const notProven = [];
+  let problems = 0;
+  const fail = (m2) => {
+    problems++;
+    notProven.push(`group: ${m2}`);
+  };
+  const m = readJson5(manifestPath);
+  const list = isObj10(m) && Array.isArray(m["units"]) ? m["units"] : [];
+  if (!isObj10(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
+    fail("manifest missing, unreadable or empty");
+    return { section: undefined, notProven, problems, allUnitsPass: false };
+  }
+  const units = [];
+  const seen = new Set, seenLower = new Set;
+  let allUnitsPass = true;
+  list.forEach((raw2, index2) => {
+    const u = isObj10(raw2) ? raw2 : {};
+    const id = String(u["unit_id"] ?? "");
+    if (!ID_RE.test(id) || seen.has(id) || seenLower.has(id.toLowerCase()))
+      return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
+    seen.add(id);
+    seenLower.add(id.toLowerCase());
+    const dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    let bytes;
+    try {
+      bytes = readFileSync42(rp);
+    } catch {
+      return fail(`unit ${id} sub-receipt missing`);
+    }
+    const sub = readJson5(rp);
+    if (!isObj10(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
+      return fail(`unit ${id} sub-receipt unreadable or its hash does not recompute`);
+    const verdict = String(sub["verdict"] ?? "");
+    if (!PASSING.has(verdict)) {
+      allUnitsPass = false;
+      notProven.push(`group: unit ${id} verdict ${verdict || "unknown"}`);
+    }
+    units.push({
+      index: index2,
+      unit_id: id,
+      sub_receipt_sha256: sha2(bytes),
+      receipt_sha256: sub["receipt_sha256"],
+      events_file_sha256: existsSync35(ep) ? sha2(readFileSync42(ep)) : null,
+      verdict,
+      goal: text2(u["goal"], 200),
+      files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
+      tests: num4(u["tests"]),
+      tokens: num4(u["tokens"]),
+      model: text2(u["model"], 64)
+    });
+  });
+  const extra = (dirNames(unitsDir(runDir)) ?? []).filter((n2) => !seen.has(n2));
+  for (const n2 of extra)
+    fail(`unit directory ${text2(n2, 64)} is not in the manifest`);
+  return { section: problems === 0 ? { group_id: String(m["group_id"]), units } : undefined, notProven, problems, allUnitsPass: allUnitsPass && problems === 0 };
+}
+function capGroupVerdict(v, g) {
+  if (g.problems > 0)
+    return v === "SPEC_CONFLICT" ? v : "FAILED";
+  return !g.allUnitsPass && (v === "VERIFIED" || v === "ALREADY_SATISFIED") ? "PARTIAL" : v;
+}
+async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
+  const runDir = dirname25(receiptPath);
+  const signed = isObj10(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
+  const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
+  const g = receipt["group"];
+  if (g === undefined)
+    return existsSync35(join57(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+  if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
+    return bad("group section malformed");
+  const entries = g["units"];
+  const ids = entries.map((e) => isObj10(e) ? String(e["unit_id"] ?? "") : "");
+  if (ids.some((id) => !ID_RE.test(id)) || new Set(ids.map((i) => i.toLowerCase())).size !== ids.length)
+    return bad("unit ids invalid, duplicated or case-colliding");
+  const onDisk = dirNames(unitsDir(runDir));
+  if (onDisk === null || onDisk.join("\x00") !== [...ids].sort().join("\x00"))
+    return bad("unit directories do not match the receipt (missing or extra unit)");
+  let unchecked = null;
+  for (let i = 0;i < entries.length; i++) {
+    const e = entries[i], id = ids[i], dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    if (e["index"] !== i)
+      return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
+    let bytes;
+    try {
+      if (!statSync17(dir).isDirectory())
+        return bad(`unit ${id} is not a directory`);
+      bytes = readFileSync42(rp);
+    } catch {
+      return bad(`unit ${id} sub-receipt missing`);
+    }
+    if (sha2(bytes) !== e["sub_receipt_sha256"])
+      return bad(`unit ${id} sub-receipt does not match its recorded hash`);
+    const evSha = existsSync35(ep) ? sha2(readFileSync42(ep)) : null;
+    if (evSha !== (e["events_file_sha256"] ?? null))
+      return bad(`unit ${id} events.jsonl does not match its recorded hash`);
+    const sub = readJson5(rp);
+    if (!isObj10(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
+      return bad(`unit ${id} sub-receipt hash does not recompute`);
+    if (String(sub["verdict"] ?? "") !== e["verdict"])
+      return bad(`unit ${id} verdict differs from the combined receipt`);
+    const r = await verifyOne(rp, deps);
+    if (r.verdict === "UNSIGNED" && signed)
+      unchecked ??= `unit ${id} sub-receipt is unsigned under a signed combined receipt`;
+    if (r.verdict === "TAMPERED")
+      return bad(`unit ${id} sub-receipt failed verify: ${r.reasons.join("; ")}`);
+    if (r.verdict === "UNCHECKED")
+      unchecked ??= `unit ${id} sub-receipt not checked: ${r.reasons.join("; ")}`;
+  }
+  return unchecked ? { verdict: "UNCHECKED", reason: `group: ${unchecked}` } : null;
+}
+var ID_RE, PASSING, sha2 = (b) => createHash13("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join57(runDir, "group", "units"), readJson5 = (p) => {
+  try {
+    return JSON.parse(readFileSync42(p, "utf8"));
+  } catch {
+    return;
+  }
+}, dirNames = (d) => {
+  try {
+    return readdirSync17(d).filter((n2) => !n2.startsWith(".")).sort();
+  } catch {
+    return null;
+  }
+};
+var init_seal_group = __esm(() => {
+  ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+  PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
 });
 
 // ../../loki-ts/src/supply/supply_guard.ts
-import { existsSync as existsSync32, readFileSync as readFileSync38, statSync as statSync16 } from "fs";
-import { basename as basename17, join as join52 } from "path";
+import { existsSync as existsSync36, readFileSync as readFileSync43, statSync as statSync18 } from "fs";
+import { basename as basename19, join as join58 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -12366,16 +13453,16 @@ function supplyVerdict(verdict, r) {
   return r.blocked && verdict === "VERIFIED" ? "FAILED" : verdict;
 }
 function isManifestPath(path) {
-  return MANIFESTS.test(basename17(path));
+  return MANIFESTS.test(basename19(path));
 }
 function readDeclared(repoDir) {
-  const p = join52(repoDir, ".loki", DECLARED_FILE);
-  if (!existsSync32(p))
+  const p = join58(repoDir, ".loki", DECLARED_FILE);
+  if (!existsSync36(p))
     return { deps: [], problem: null };
   try {
-    if (statSync16(p).size > MAX_FILE_BYTES)
+    if (statSync18(p).size > MAX_FILE_BYTES)
       return { deps: [], problem: "declaration file too large" };
-    const j = JSON.parse(readFileSync38(p, "utf8"));
+    const j = JSON.parse(readFileSync43(p, "utf8"));
     if (!Array.isArray(j))
       return { deps: [], problem: "declaration is not a JSON array" };
     const deps = [];
@@ -12395,11 +13482,11 @@ function readDeclared(repoDir) {
   }
 }
 function readAllowlist(repoDir) {
-  const p = join52(repoDir, ".loki", "supply-allowlist");
-  if (!existsSync32(p))
+  const p = join58(repoDir, ".loki", "supply-allowlist");
+  if (!existsSync36(p))
     return new Set;
   try {
-    return new Set(readFileSync38(p, "utf8").split(`
+    return new Set(readFileSync43(p, "utf8").split(`
 `).map((l) => l.replace(/#.*$/, "").trim()).filter(Boolean));
   } catch {
     return new Set;
@@ -12440,7 +13527,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "npm") {
     if (privateUrlList([env["npm_config_registry"] ?? "", env["NPM_CONFIG_REGISTRY"] ?? ""]))
       return true;
-    return files(join52(repoDir, ".npmrc"), home ? join52(home, ".npmrc") : "").some((t) => t.split(`
+    return files(join58(repoDir, ".npmrc"), home ? join58(home, ".npmrc") : "").some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:(@[^:\s]+):)?registry\s*=\s*(\S+)/.exec(l);
       return !!m && privateUrl(m[2]) && (m[1] === undefined || name.startsWith(`${m[1]}/`));
@@ -12449,7 +13536,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "pypi") {
     if (privateUrlList([env["PIP_INDEX_URL"] ?? "", env["PIP_EXTRA_INDEX_URL"] ?? ""]))
       return true;
-    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join52(home, ".config", "pip", "pip.conf") : "", home ? join52(home, ".pip", "pip.conf") : "", join52(repoDir, "pip.conf")];
+    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join58(home, ".config", "pip", "pip.conf") : "", home ? join58(home, ".pip", "pip.conf") : "", join58(repoDir, "pip.conf")];
     return files(...cfg).some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:extra-)?index-url\s*[=:]\s*(.+)$/.exec(l);
@@ -12459,7 +13546,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "cargo") {
     if (Object.keys(env).some((k) => /^CARGO_REGISTRIES_.+_INDEX$/.test(k) || /^CARGO_SOURCE_/.test(k)))
       return true;
-    return files(join52(repoDir, ".cargo", "config.toml"), join52(repoDir, ".cargo", "config"), home ? join52(home, ".cargo", "config.toml") : "", home ? join52(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
+    return files(join58(repoDir, ".cargo", "config.toml"), join58(repoDir, ".cargo", "config"), home ? join58(home, ".cargo", "config.toml") : "", home ? join58(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
   }
   if (eco === "go") {
     const gp = goEnv["GOPROXY"] ?? env["GOPROXY"] ?? "";
@@ -12582,7 +13669,7 @@ var MIN_AGE_DAYS = 7, DECLARED_FILE = "supply-declared.json", MAX_CHECKED = 50,
   }
 }, PUBLIC_HOSTS, hostOf = (u) => u.trim().toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "").replace(/^www\./, "").split(/[/?#\s]/)[0].replace(/^[^@]*@/, "").replace(/:\d+$/, ""), privateUrl = (u) => /[a-z0-9]/i.test(u) && !PUBLIC_HOSTS.has(hostOf(u)), readSmall = (p) => {
   try {
-    return statSync16(p).size <= MAX_FILE_BYTES ? readFileSync38(p, "utf8") : "";
+    return statSync18(p).size <= MAX_FILE_BYTES ? readFileSync43(p, "utf8") : "";
   } catch {
     return "";
   }
@@ -12597,77 +13684,18 @@ var init_supply_guard = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/seal.ts
-import { createHash as createHash12, randomBytes as randomBytes4, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync5, existsSync as existsSync33, readdirSync as readdirSync16, linkSync, mkdirSync as mkdirSync18, readFileSync as readFileSync39, statSync as statSync17, unlinkSync as unlinkSync5, writeFileSync as writeFileSync19 } from "fs";
-import { homedir as homedir9 } from "os";
-import { basename as basename18, dirname as dirname23, isAbsolute as isAbsolute8, join as join53, relative as relative9 } from "path";
+import { createHash as createHash14 } from "crypto";
+import { existsSync as existsSync37, readdirSync as readdirSync18, mkdirSync as mkdirSync23, readFileSync as readFileSync44, writeFileSync as writeFileSync25 } from "fs";
+import { basename as basename20, isAbsolute as isAbsolute9, join as join59, relative as relative9 } from "path";
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
   const capped = collapsed.length > 500 ? `${collapsed.slice(0, 500)}...` : collapsed;
   return capped.replace(/`/g, "'");
 }
-function canonicalJson(x) {
-  const walk = (v) => {
-    if (Array.isArray(v))
-      return `[${v.map(walk).join(",")}]`;
-    if (v !== null && typeof v === "object") {
-      const o = v;
-      return `{${Object.keys(o).filter((k) => o[k] !== undefined).sort().map((k) => `${JSON.stringify(k)}:${walk(o[k])}`).join(",")}}`;
-    }
-    return JSON.stringify(v ?? null);
-  };
-  return walk(x).replace(/[\u0080-\uFFFF]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`);
-}
 function receiptSha256(r) {
   const { verification: _v, receipt_sha256: _h, ...body } = r;
   return sha2562(canonicalJson(body));
 }
-function loadSigningKey(generate = true) {
-  try {
-    const inline = process.env["LOKI_RECEIPT_SIGNING_KEY"]?.trim();
-    let pem = inline ?? "";
-    if (!inline) {
-      const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join53(process.env["HOME"] || homedir9(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
-      try {
-        pem = readFileSync39(file);
-        if (!given) {
-          for (const [f, m] of [[file, 384], [dirname23(file), 448]])
-            if (statSync17(f).mode & 63)
-              chmodSync5(f, m);
-        }
-      } catch (e) {
-        if (e.code !== "ENOENT" || !generate)
-          return null;
-        mkdirSync18(dirname23(dirname23(file)), { recursive: true, mode: 448 });
-        mkdirSync18(dirname23(file), { recursive: true, mode: 448 });
-        const tmp = `${file}.${randomBytes4(6).toString("hex")}.tmp`;
-        writeFileSync19(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
-        try {
-          linkSync(tmp, file);
-        } catch (l) {
-          if (l.code !== "EEXIST")
-            throw l;
-        } finally {
-          unlinkSync5(tmp);
-        }
-        pem = readFileSync39(file);
-      }
-    }
-    const k = createPrivateKey(pem);
-    return k.asymmetricKeyType === "ed25519" ? k : null;
-  } catch {
-    return null;
-  }
-}
-function signReceipt(runId, hash) {
-  const key = loadSigningKey();
-  if (!key)
-    return { jwt: null, kid: null };
-  const kid = kidOf2(createPublicKey2(key));
-  const input = `${b64u(canonicalJson({ alg: "EdDSA", typ: "JWT", kid }))}.${b64u(canonicalJson({ job_id: runId, run_id: runId, receipt_sha256: hash, iat: Math.floor(Date.now() / 1000) }))}`;
-  return { jwt: `${input}.${b64u(sign(null, Buffer.from(input), key))}`, kid };
-}
 async function git3(ctx, args, keep = {}) {
   const r = await safeGitRun(ctx.repoDir, args, { timeoutMs: 20000, ...keep });
   return { out: r.stdout, code: r.exitCode };
@@ -12732,19 +13760,19 @@ function renderReceiptMd(r) {
   ].join(`
 `);
 }
-var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash12("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], b64u = (b) => Buffer.from(b).toString("base64url"), kidOf2 = (pub) => b64u(createHash12("sha256").update(`{"crv":"Ed25519","kty":"OKP","x":"${pub.export({ format: "jwk" }).x}"}`).digest()), receiptRel = (ctx) => {
-  const r = relative9(ctx.repoDir, join53(ctx.runDir, "receipt.json"));
-  return r.startsWith("..") || isAbsolute8(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
+var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash14("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], receiptRel = (ctx) => {
+  const r = relative9(ctx.repoDir, join59(ctx.runDir, "receipt.json"));
+  return r.startsWith("..") || isAbsolute9(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, sealStage;
 var init_seal = __esm(() => {
   init_spec_file();
-  init_pr_body();
   init_mutation_proof();
   init_wall();
   init_assert_delta();
   init_discard();
   init_commit_filter();
   init_scope2();
+  init_receipt_signer();
   init_pr_lessons();
   init_visual_evidence();
   init_testmap();
@@ -12835,8 +13863,8 @@ var init_seal = __esm(() => {
         notProven.add(`Wall test not executed: ${wallNotRun} file(s), no reason recorded`);
       if (wallNotRun > 0) {
         try {
-          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename18(String(f.path))));
-          for (const n2 of readdirSync16(join53(ctx.runDir, "wall")).sort())
+          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename20(String(f.path))));
+          for (const n2 of readdirSync18(join59(ctx.runDir, "wall")).sort())
             if (!kept.has(n2))
               notProven.add(`wall test discarded: ${n2} (not_run)`);
         } catch {}
@@ -12875,6 +13903,8 @@ var init_seal = __esm(() => {
         notProven.add(n2);
       for (const id of strs2(o.verify?.pre_red))
         notProven.add(`pre red: ${id}`);
+      if (typeof o.verify?.baseline_line === "string" && strs2(o.verify?.pre_red).length)
+        notProven.add(o.verify.baseline_line);
       for (const t of strs2(o.implement?.tests_reverted))
         notProven.add(`reverted test edit: ${t}`);
       if (ctx.provider !== "claude")
@@ -12895,19 +13925,19 @@ var init_seal = __esm(() => {
       for (const [s, d] of Object.entries(o))
         if (typeof d?.duration_s === "number")
           stages[s] = d.duration_s;
-      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join53(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
+      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join59(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
       const iterIds = Object.values(o).flatMap((d) => [...strs2(d?.iteration_ids), ...strs2([d?.iteration_id])]);
       if (iterIds.length === 0)
         notProven.add("cost not measured (no iteration ids recorded)");
       const cost = ctx.cost.read(ctx.repoDir, iterIds);
       if (cost.unmetered)
         notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-      const eventsPath = join53(ctx.runDir, "events.jsonl");
+      const eventsPath = join59(ctx.runDir, "events.jsonl");
       const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
       const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
       if (wallFiles.length > 0 && wallPassed === null)
         notProven.add("wall result not recorded by verify");
-      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join53(ctx.repoDir, ".loki"), iterIds).router : undefined), ctx.model);
+      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join59(ctx.repoDir, ".loki"), iterIds).router : undefined), ctx.model);
       if (routeBlock)
         for (const l of routeNotProven(routeBlock))
           notProven.add(l);
@@ -12949,7 +13979,7 @@ var init_seal = __esm(() => {
         provider: ctx.provider,
         model: ctx.model,
         resumed: o.intake?.resumed === true,
-        events_sha256: sha2562(existsSync33(eventsPath) ? readFileSync39(eventsPath) : ""),
+        events_sha256: sha2562(existsSync37(eventsPath) ? readFileSync44(eventsPath) : ""),
         ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
         log_seal: true,
         ...receiptBlock(process.env, cost.usd, cost.unmetered === true, totalS),
@@ -12969,11 +13999,11 @@ var init_seal = __esm(() => {
         hash = receiptSha256(body);
       }
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
-      mkdirSync18(ctx.runDir, { recursive: true });
-      const path = join53(ctx.runDir, "receipt.json");
-      writeFileSync19(path, JSON.stringify(receipt, null, 2) + `
+      mkdirSync23(ctx.runDir, { recursive: true });
+      const path = join59(ctx.runDir, "receipt.json");
+      writeFileSync25(path, JSON.stringify(receipt, null, 2) + `
 `);
-      writeFileSync19(join53(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      writeFileSync25(join59(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ctx.model, verdict, cost.usd, cost.unmetered === true, totalS);
       const signed = sig.jwt !== null;
       const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...mp ? { mutation_line: mp.line } : {}, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} };
@@ -12988,7 +14018,7 @@ var init_seal = __esm(() => {
 
 // ../../loki-ts/src/features/receipt_dsse.ts
 import { createPublicKey as createPublicKey3, sign as sign2, verify as verify2 } from "crypto";
-import { readFileSync as readFileSync40 } from "fs";
+import { readFileSync as readFileSync45 } from "fs";
 function pae(payloadType, body) {
   const t = Buffer.from(payloadType, "utf8");
   return Buffer.concat([Buffer.from(`DSSEv1 ${t.length} `), t, Buffer.from(` ${body.length} `), body]);
@@ -13065,7 +14095,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync40(receiptPath, "utf8")), runId);
+    return envelopeRunIdProblem(JSON.parse(readFileSync45(receiptPath, "utf8")), runId);
   } catch {
     return null;
   }
@@ -13079,16 +14109,16 @@ var init_keys_cmd = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync34, readdirSync as readdirSync17, readFileSync as readFileSync41, statSync as statSync18 } from "fs";
-import { dirname as dirname24, join as join54 } from "path";
-import { createHash as createHash13, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
+import { existsSync as existsSync38, readFileSync as readFileSync46, statSync as statSync20 } from "fs";
+import { dirname as dirname27, join as join60 } from "path";
+import { createHash as createHash15, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
 function pubFor(kid, given) {
   if (given)
     return kidOf2(given) === kid ? given : undefined;
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync41(f))];
+      return [createPublicKey4(readFileSync46(f))];
     } catch {
       return [];
     }
@@ -13118,18 +14148,18 @@ function checkAttestation(jwt, expectedHash, given) {
 }
 function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
-  if (typeof bound !== "string" || bound === createHash13("sha256").digest("hex"))
+  if (typeof bound !== "string" || bound === createHash15("sha256").digest("hex"))
     return null;
-  const path = join54(dirname24(receiptPath), "events.jsonl");
-  if (!existsSync34(path))
+  const path = join60(dirname27(receiptPath), "events.jsonl");
+  if (!existsSync38(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync41(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
+  const raw2 = readFileSync46(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
 `).filter((l) => l.trim() !== "");
   if (events2.length !== lines.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
   if (events2.some((e) => e.type === "tamper.detected"))
     return "the supervisor detected events.jsonl being modified during the run";
-  const h = createHash13("sha256");
+  const h = createHash15("sha256");
   for (const l of lines) {
     if (h.copy().digest("hex") === bound)
       return null;
@@ -13139,7 +14169,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join54(dirname24(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join60(dirname27(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -13147,8 +14177,8 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines = readFileSync41(path, "utf8").split(`
-`).filter((l) => l.trim() !== ""), sha3 = createHash13("sha256").update(lines.slice(0, done + 1).join(`
+  const lines = readFileSync46(path, "utf8").split(`
+`).filter((l) => l.trim() !== ""), sha3 = createHash15("sha256").update(lines.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
   const pub = d["kid"] === kid ? pubFor(kid, given) : undefined;
@@ -13157,11 +14187,11 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   return null;
 }
 async function verifyReceipt(receiptPath, deps = {}) {
-  if (!existsSync34(receiptPath))
+  if (!existsSync38(receiptPath))
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync41(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync46(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -13207,6 +14237,7 @@ async function verifyReceipt(receiptPath, deps = {}) {
 var computeReceiptHash = (receipt) => receiptSha256(receipt);
 var init_verify_cmd = __esm(() => {
   init_paths();
+  init_run_status();
   init_events();
   init_seal();
   init_receipt_dsse();
@@ -13216,8 +14247,8 @@ var init_verify_cmd = __esm(() => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync36, readFileSync as readFileSync44, statSync as statSync19 } from "fs";
-import { join as join57, resolve as resolve13, sep as sep14 } from "path";
+import { existsSync as existsSync40, readFileSync as readFileSync49, statSync as statSync21 } from "fs";
+import { join as join63, resolve as resolve15, sep as sep14 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -23464,9 +24495,9 @@ function mount20(ctx) {
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync42, realpathSync as realpathSync20 } from "fs";
+import { readFileSync as readFileSync47, realpathSync as realpathSync20 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join55, sep as sep13 } from "path";
+import { join as join61, sep as sep13 } from "path";
 init_verify_cmd();
 init_seal();
 init_receipt_dsse();
@@ -23493,11 +24524,11 @@ function mount21(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync20(join55(repo.p, ".loki", "runs"));
-      runDir = realpathSync20(join55(root, run2));
-      if (runDir !== join55(root, run2))
+      const root = realpathSync20(join61(repo.p, ".loki", "runs"));
+      runDir = realpathSync20(join61(root, run2));
+      if (runDir !== join61(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync20(join55(runDir, "receipt.json"));
+      file = realpathSync20(join61(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
@@ -23516,7 +24547,7 @@ function mount21(ctx) {
         sha3 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync42(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync47(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -23578,8 +24609,8 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync35, readFileSync as readFileSync43 } from "fs";
-import { join as join56 } from "path";
+import { existsSync as existsSync39, readFileSync as readFileSync48 } from "fs";
+import { join as join62 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -23951,10 +24982,10 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join56(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join62(import.meta.dir, "../../../../../VERSION")]) {
     try {
-      if (existsSync35(f))
-        return readFileSync43(f, "utf8").trim();
+      if (existsSync39(f))
+        return readFileSync48(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -24136,7 +25167,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join57(import.meta.dir, "../../ui/dist"), join57(import.meta.dir, "../ui/dist")].find((d) => existsSync36(join57(d, "index.html")));
+var defaultUiDir = () => [join63(import.meta.dir, "../../ui/dist"), join63(import.meta.dir, "../ui/dist")].find((d) => existsSync40(join63(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -24165,10 +25196,10 @@ function createApp(opts) {
     await next();
   });
   const readInstalled = () => {
-    for (const f of [process.env.LOKI_VERSION_FILE, join57(import.meta.dir, "../../../../VERSION")]) {
+    for (const f of [process.env.LOKI_VERSION_FILE, join63(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
-          return readFileSync44(f, "utf8").trim() || "unknown";
+          return readFileSync49(f, "utf8").trim() || "unknown";
       } catch {}
     }
     return "unknown";
@@ -24277,13 +25308,13 @@ function createApp(opts) {
     }
     if (!uiDir || p.startsWith("/v1/"))
       return c.json({ error: "not found" }, 404);
-    const root = resolve13(uiDir);
-    const f = resolve13(root, `.${p}`);
-    if (f.startsWith(root + sep14) && existsSync36(f) && statSync19(f).isFile())
+    const root = resolve15(uiDir);
+    const f = resolve15(root, `.${p}`);
+    if (f.startsWith(root + sep14) && existsSync40(f) && statSync21(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join57(root, "index.html")));
+    return new Response(Bun.file(join63(root, "index.html")));
   });
   return { app, db, close: () => {
     clearInterval(reconciler);