loki-mode 11.5.1 → 11.7.1

package/packages/control-plane/dist/server.js

@@ -7325,6 +7325,25 @@ var init_paths = __esm(() => {
   REPO_ROOT = findRepoRoot();
 });
 
+// ../../loki-ts/src/engine10/registry.ts
+var init_registry = () => {};
+
+// ../../loki-ts/src/engine10/output.ts
+var init_output = __esm(() => {
+  init_registry();
+  init_redact();
+});
+
+// ../../loki-ts/src/commands/run_status.ts
+var STALE_S, TERMINAL2;
+var init_run_status = __esm(() => {
+  init_discover();
+  init_events();
+  init_output();
+  STALE_S = 30 * 60;
+  TERMINAL2 = new Set(["stage.completed", "stage.failed", "stage.skipped"]);
+});
+
 // ../../loki-ts/src/engine10/types.ts
 function pushArgv(a) {
   switch (a.cmd) {
@@ -7372,243 +7391,6 @@ var init_spec_file = __esm(() => {
   SPEC_DIR = join26(".loki", "specs");
 });
 
-// ../../loki-ts/src/engine10/registry.ts
-var init_registry = () => {};
-
-// ../../loki-ts/src/engine10/output.ts
-var init_output = __esm(() => {
-  init_registry();
-  init_redact();
-});
-
-// ../../loki-ts/src/runner/router/flag.ts
-function routerMode(env = process.env) {
-  const v = (env.LOKI_ROUTER ?? "").trim().toLowerCase();
-  if (v === "0" || v === "false" || v === "off")
-    return "opt-out";
-  if (v === "1" || v === "true" || v === "on")
-    return "on";
-  return "off";
-}
-var routerEnabled = (env = process.env) => routerMode(env) === "on";
-
-// ../../loki-ts/src/runner/router/route_block.ts
-function advisorUnavailableReason(env, provider) {
-  if (provider !== "claude")
-    return `provider ${provider} has no advisor tool`;
-  if (env["CLAUDE_CODE_USE_BEDROCK"] || env["CLAUDE_CODE_USE_VERTEX"] || env["CLAUDE_CODE_USE_FOUNDRY"])
-    return "advisor tool is unsupported on Bedrock, Vertex and Foundry";
-  if ((env["LOKI_ROUTER_ADVISOR"] ?? "").trim().toLowerCase() === "off")
-    return "LOKI_ROUTER_ADVISOR=off";
-  return null;
-}
-function toEsc(raw2) {
-  const esc = Array.isArray(raw2) ? raw2 : [];
-  return esc.map((e) => ({ trigger: s0(e["trigger"]) ?? "unknown", from: modelLabel(s0(e["from"]) ?? "?"), to: modelLabel(s0(e["to"]) ?? "?"), evidence: s0(e["evidence"]) ?? "none recorded" }));
-}
-function buildRouteBlock(env, provider, route, telemetry, runModel) {
-  if (!routerEnabled(env))
-    return null;
-  const applied = route?.["applied"] !== false;
-  const executor = s0(route?.["executor"]);
-  const unavailable = s0(route?.["advisor_unavailable_reason"]) ?? advisorUnavailableReason(env, provider);
-  const total = nN(telemetry?.requests_total);
-  const over = nN(telemetry?.requests_over_100k);
-  const shape = s0(route?.["shape_key"]);
-  const escalations = toEsc(route?.["escalations"]);
-  const source = s0(route?.["source"]);
-  const reason = s0(route?.["reason"]) ?? (executor ? "no reason recorded" : "no route recorded by implement");
-  const rawUnits = Array.isArray(route?.["units"]) ? route["units"] : [];
-  const units = rawUnits.length > 0 ? rawUnits.map((u, i) => ({ id: s0(u["id"]) ?? String(i + 1), executor: modelLabel(s0(u["executor"]) ?? "unknown"), applied, assigned_by: assignedBy(s0(u["source"]) ?? source, u["assigned_by"]), reason: s0(u["reason"]) ?? "no reason recorded", escalations: toEsc(u["escalations"]) })) : executor && route?.["routed"] !== false ? [{ id: "run", executor: modelLabel(executor), applied, assigned_by: assignedBy(source, route?.["assigned_by"]), reason, escalations }] : [];
-  return {
-    routed: route?.["routed"] === false ? false : executor !== null || units.length > 0,
-    units,
-    executor: !applied ? `${runModel ? modelLabel(runModel) : "run model"} (per-unit assignment not applied)` : executor ? modelLabel(executor) : units[0]?.executor ?? null,
-    advisor: unavailable ? null : modelLabel(s0(route?.["advisor"]) ?? "opus"),
-    advisor_unavailable_reason: unavailable,
-    reason,
-    source,
-    shape_key: shape,
-    shape_parity: shape ? `NOT PROVEN (no B9 row for shape ${shape})` : "NOT PROVEN (no shape key recorded)",
-    escalations: units.length > 0 ? units.flatMap((u) => u.escalations) : escalations,
-    requests_total: total,
-    requests_over_100k: over,
-    over_100k_share: total !== null && over !== null && total > 0 ? Math.round(over / total * 1e4) / 1e4 : null,
-    advisor_calls: nN(telemetry?.advisor_calls),
-    advisor_input_tokens: nN(telemetry?.advisor_input_tokens),
-    advisor_output_tokens: nN(telemetry?.advisor_output_tokens),
-    plan_model: s0(route?.["plan_model"]),
-    applied,
-    run_model: runModel ?? null,
-    not_proven: Array.isArray(route?.["route_not_proven"]) ? route["route_not_proven"].filter((x) => typeof x === "string") : []
-  };
-}
-function routePrLine(r) {
-  if (!r.routed)
-    return `Route: not routed (${r.reason})`;
-  const adv = r.advisor ? `advisor ${r.advisor}` : "advisor unavailable";
-  return `Route: executor ${r.executor}, ${adv}; advisor tokens ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out; over 100K: ${over(r, " requests")}`;
-}
-function routeReceiptLines(r) {
-  if (!r.routed)
-    return [`- Route: not routed (${r.reason})`, `- Route shape_parity: ${r.shape_parity}`];
-  return [
-    `- Route: executor ${r.executor}, ${r.advisor ? `advisor ${r.advisor}` : `advisor unavailable: ${r.advisor_unavailable_reason}`}: ${r.reason}`,
-    `- Route shape_key: ${r.shape_key ?? "unknown"}  shape_parity: ${r.shape_parity}`,
-    `- Route escalations: ${r.escalations.length === 0 ? "none" : r.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger}; evidence ${e.evidence})`).join("; ")}`,
-    `- Route advisor: ${rec(r.advisor_calls)} calls, ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out tokens`,
-    ...r.units.map((u) => `- Route unit ${u.id}: executor ${u.applied ? u.executor : `not applied (assigned ${u.executor})`}, assigned by ${u.assigned_by}: ${u.reason}; escalation: ${u.escalations.length === 0 ? "none" : u.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger})`).join(", ")}`),
-    `- Route requests over 100K: ${over(r, "")}`
-  ];
-}
-function routeNotProven(r) {
-  return [
-    ...r.advisor_unavailable_reason ? [`advisor: NOT PROVEN (owner provider): ${r.advisor_unavailable_reason}`] : [],
-    `route.shape_parity: ${r.shape_parity}`,
-    ...r.applied ? [] : [`route.executor: NOT PROVEN (owner engine): per-unit executor assignment is not applied (R1-11); every stage ran ${r.run_model ?? "the run model"}`],
-    ...r.not_proven
-  ];
-}
-var ALIAS, modelLabel = (m) => ALIAS[m] ?? m, nN = (v) => typeof v === "number" && Number.isFinite(v) ? v : null, rec = (v) => v === null ? "not recorded" : String(v), s0 = (v) => typeof v === "string" && v.trim() ? v.trim() : null, assignedBy = (src, explicit) => s0(explicit) ?? (src === null || src === "opus" ? "opus" : src), over = (r, unit) => r.requests_total === null || r.requests_over_100k === null ? "not recorded" : `${r.requests_over_100k} of ${r.requests_total}${unit} (${pct(r)})`, pct = (r) => r.over_100k_share === null ? "n/a (no requests)" : `${(r.over_100k_share * 100).toFixed(1)}%`;
-var init_route_block = __esm(() => {
-  ALIAS = { haiku: "haiku-5.5", sonnet: "sonnet-5.5", opus: "opus-5.5" };
-});
-
-// ../../loki-ts/src/features/speed/seal_group.ts
-import { createHash as createHash6 } from "crypto";
-import { existsSync as existsSync15, readdirSync as readdirSync9, readFileSync as readFileSync18, statSync as statSync11 } from "fs";
-import { dirname as dirname7, join as join27 } from "path";
-function sealGroup(runDir, rh) {
-  const manifestPath = join27(runDir, "group", "manifest.json");
-  if (!existsSync15(manifestPath))
-    return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
-  const notProven = [];
-  let problems = 0;
-  const fail = (m2) => {
-    problems++;
-    notProven.push(`group: ${m2}`);
-  };
-  const m = readJson3(manifestPath);
-  const list = isObj10(m) && Array.isArray(m["units"]) ? m["units"] : [];
-  if (!isObj10(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
-    fail("manifest missing, unreadable or empty");
-    return { section: undefined, notProven, problems, allUnitsPass: false };
-  }
-  const units = [];
-  const seen = new Set, seenLower = new Set;
-  let allUnitsPass = true;
-  list.forEach((raw2, index2) => {
-    const u = isObj10(raw2) ? raw2 : {};
-    const id = String(u["unit_id"] ?? "");
-    if (!ID_RE.test(id) || seen.has(id) || seenLower.has(id.toLowerCase()))
-      return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
-    seen.add(id);
-    seenLower.add(id.toLowerCase());
-    const dir = join27(unitsDir(runDir), id), rp = join27(dir, "receipt.json"), ep = join27(dir, "events.jsonl");
-    let bytes;
-    try {
-      bytes = readFileSync18(rp);
-    } catch {
-      return fail(`unit ${id} sub-receipt missing`);
-    }
-    const sub = readJson3(rp);
-    if (!isObj10(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
-      return fail(`unit ${id} sub-receipt unreadable or its hash does not recompute`);
-    const verdict = String(sub["verdict"] ?? "");
-    if (!PASSING.has(verdict)) {
-      allUnitsPass = false;
-      notProven.push(`group: unit ${id} verdict ${verdict || "unknown"}`);
-    }
-    units.push({
-      index: index2,
-      unit_id: id,
-      sub_receipt_sha256: sha2(bytes),
-      receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync15(ep) ? sha2(readFileSync18(ep)) : null,
-      verdict,
-      goal: text2(u["goal"], 200),
-      files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
-      tests: num3(u["tests"]),
-      tokens: num3(u["tokens"]),
-      model: text2(u["model"], 64)
-    });
-  });
-  const extra = (dirNames(unitsDir(runDir)) ?? []).filter((n2) => !seen.has(n2));
-  for (const n2 of extra)
-    fail(`unit directory ${text2(n2, 64)} is not in the manifest`);
-  return { section: problems === 0 ? { group_id: String(m["group_id"]), units } : undefined, notProven, problems, allUnitsPass: allUnitsPass && problems === 0 };
-}
-function capGroupVerdict(v, g) {
-  if (g.problems > 0)
-    return v === "SPEC_CONFLICT" ? v : "FAILED";
-  return !g.allUnitsPass && (v === "VERIFIED" || v === "ALREADY_SATISFIED") ? "PARTIAL" : v;
-}
-async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
-  const runDir = dirname7(receiptPath);
-  const signed = isObj10(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
-  const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
-  const g = receipt["group"];
-  if (g === undefined)
-    return existsSync15(join27(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
-  if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
-    return bad("group section malformed");
-  const entries = g["units"];
-  const ids = entries.map((e) => isObj10(e) ? String(e["unit_id"] ?? "") : "");
-  if (ids.some((id) => !ID_RE.test(id)) || new Set(ids.map((i) => i.toLowerCase())).size !== ids.length)
-    return bad("unit ids invalid, duplicated or case-colliding");
-  const onDisk = dirNames(unitsDir(runDir));
-  if (onDisk === null || onDisk.join("\x00") !== [...ids].sort().join("\x00"))
-    return bad("unit directories do not match the receipt (missing or extra unit)");
-  let unchecked = null;
-  for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join27(unitsDir(runDir), id), rp = join27(dir, "receipt.json"), ep = join27(dir, "events.jsonl");
-    if (e["index"] !== i)
-      return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
-    let bytes;
-    try {
-      if (!statSync11(dir).isDirectory())
-        return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync18(rp);
-    } catch {
-      return bad(`unit ${id} sub-receipt missing`);
-    }
-    if (sha2(bytes) !== e["sub_receipt_sha256"])
-      return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync15(ep) ? sha2(readFileSync18(ep)) : null;
-    if (evSha !== (e["events_file_sha256"] ?? null))
-      return bad(`unit ${id} events.jsonl does not match its recorded hash`);
-    const sub = readJson3(rp);
-    if (!isObj10(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
-      return bad(`unit ${id} sub-receipt hash does not recompute`);
-    if (String(sub["verdict"] ?? "") !== e["verdict"])
-      return bad(`unit ${id} verdict differs from the combined receipt`);
-    const r = await verifyOne(rp, deps);
-    if (r.verdict === "UNSIGNED" && signed)
-      unchecked ??= `unit ${id} sub-receipt is unsigned under a signed combined receipt`;
-    if (r.verdict === "TAMPERED")
-      return bad(`unit ${id} sub-receipt failed verify: ${r.reasons.join("; ")}`);
-    if (r.verdict === "UNCHECKED")
-      unchecked ??= `unit ${id} sub-receipt not checked: ${r.reasons.join("; ")}`;
-  }
-  return unchecked ? { verdict: "UNCHECKED", reason: `group: ${unchecked}` } : null;
-}
-var ID_RE, PASSING, sha2 = (b) => createHash6("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num3 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join27(runDir, "group", "units"), readJson3 = (p) => {
-  try {
-    return JSON.parse(readFileSync18(p, "utf8"));
-  } catch {
-    return;
-  }
-}, dirNames = (d) => {
-  try {
-    return readdirSync9(d).filter((n2) => !n2.startsWith(".")).sort();
-  } catch {
-    return null;
-  }
-};
-var init_seal_group = __esm(() => {
-  ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-  PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
-});
 // ../../loki-ts/src/engine10/pr_body.ts
 function aiTrailers(i, env = process.env) {
   if (!markingOn(env))
@@ -7616,16 +7398,11 @@ function aiTrailers(i, env = process.env) {
   return ["AI-Generated: true", `AI-Provider: ${clean(i.provider)}`, `AI-Model: ${clean(i.model)}`, `Loki-Receipt: ${clean(i.receiptRel)}`];
 }
 var markingOn = (env) => env["LOKI_AI_MARKING"] === "1", clean = (v) => v.replace(/[\u0000-\u001f\u007f\u2028\u2029]+/g, " ").replace(/\s+/g, " ").trim().slice(0, 100) || "unknown";
-var init_pr_body = __esm(() => {
-  init_output();
-  init_route_block();
-  init_seal_group();
-});
 
 // ../../loki-ts/src/util/credential_env.ts
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, statSync as statSync12, lstatSync as lstatSync4 } from "fs";
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync4, statSync as statSync11, lstatSync as lstatSync4 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
-import { join as join28 } from "path";
+import { join as join27 } from "path";
 import { randomBytes as randomBytes2 } from "crypto";
 function withheldSentinel(fresh = false) {
   if (fresh)
@@ -7644,7 +7421,7 @@ function emptyGhConfigDir(env = process.env) {
   const runTmp = env["LOKI_RUN_TMP"] ?? "";
   const root = runTmp !== "" && isDir(runTmp) ? runTmp : tmpdir3();
   try {
-    configDir = mkdtempSync2(join28(root, "loki-gh-config-"));
+    configDir = mkdtempSync2(join27(root, "loki-gh-config-"));
   } catch {
     return null;
   }
@@ -7685,7 +7462,7 @@ function hardenCredentialEnv(env, fresh = false) {
 }
 var GITHUB_TOKEN_VARS, SENTINEL_PREFIX = "ghp_LOKIWITHHELDsentinel", sentinel = null, configDir = null, exitHooked = false, sigtermHooked = false, isDir = (p) => {
   try {
-    return !lstatSync4(p).isSymbolicLink() && statSync12(p).isDirectory();
+    return !lstatSync4(p).isSymbolicLink() && statSync11(p).isDirectory();
   } catch {
     return false;
   }
@@ -7799,17 +7576,21 @@ var init_safe_git = __esm(() => {
   OPT_WITH_VALUE = new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env", "--attr-source"]);
   SECRET_VARS = ["GH_TOKEN", "GITHUB_TOKEN", "GH_ENTERPRISE_TOKEN", "GITHUB_ENTERPRISE_TOKEN", "SSH_AUTH_SOCK"];
 });
+// ../../loki-ts/src/util/yaml_key.ts
+var init_yaml_key = () => {};
+
 // ../../loki-ts/src/util/run_cap.ts
 var MAX_SCOPE_BYTES;
 var init_run_cap = __esm(() => {
   init_types();
+  init_yaml_key();
   MAX_SCOPE_BYTES = 256 * 1024;
 });
 
 // ../../loki-ts/src/util/mutation_proof.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync3, readFileSync as readFileSync19, rmSync as rmSync5, symlinkSync, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync5, mkdtempSync as mkdtempSync3, readFileSync as readFileSync18, rmSync as rmSync5, symlinkSync, writeFileSync as writeFileSync8 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename8, dirname as dirname8, isAbsolute as isAbsolute2, join as join29, relative as relative2 } from "path";
+import { basename as basename8, dirname as dirname7, isAbsolute as isAbsolute2, join as join28, relative as relative2 } from "path";
 function mutationProof(i) {
   const rels = i.wallFiles.map((f) => isAbsolute2(f.path) ? relative2(i.repoDir, f.path) : f.path);
   if (rels.length === 0)
@@ -7827,26 +7608,26 @@ function mutationProof(i) {
   const deadline = Date.now() + budgetS * 1000, remaining = () => deadline - Date.now();
   let parent = null, wt = null, added = false;
   try {
-    parent = mkdtempSync3(join29(tmpdir4(), "loki-mutproof-"));
-    wt = join29(parent, "wt");
+    parent = mkdtempSync3(join28(tmpdir4(), "loki-mutproof-"));
+    wt = join28(parent, "wt");
     const add2 = git(i.repoDir, ["worktree", "add", "--detach", wt, i.baseSha], Math.max(1000, Math.min(30000, remaining())));
-    added = existsSync16(wt) || add2.status === 0;
+    added = existsSync15(wt) || add2.status === 0;
     if (add2.status !== 0)
       return np("could not create the base worktree");
     for (const rel of rels) {
-      const sealed = join29(i.runDir, "wall", basename8(rel)), src = existsSync16(sealed) ? sealed : join29(i.repoDir, rel);
-      if (!existsSync16(src))
+      const sealed = join28(i.runDir, "wall", basename8(rel)), src = existsSync15(sealed) ? sealed : join28(i.repoDir, rel);
+      if (!existsSync15(src))
         return np(`Wall file missing: ${rel}`);
-      mkdirSync5(dirname8(join29(wt, rel)), { recursive: true });
-      writeFileSync8(join29(wt, rel), readFileSync19(src));
+      mkdirSync5(dirname7(join28(wt, rel)), { recursive: true });
+      writeFileSync8(join28(wt, rel), readFileSync18(src));
     }
     for (const rel of rels) {
       const parts = rel.split("/").slice(0, -1);
       for (let n2 = 0;n2 <= parts.length; n2++) {
         const anc = parts.slice(0, n2).join("/");
         for (const d of DEP_DIRS) {
-          const src = join29(i.repoDir, anc, d), dst = join29(wt, anc, d);
-          if (existsSync16(src) && !existsSync16(dst)) {
+          const src = join28(i.repoDir, anc, d), dst = join28(wt, anc, d);
+          if (existsSync15(src) && !existsSync15(dst)) {
             try {
               symlinkSync(src, dst);
             } catch {}
@@ -7884,28 +7665,302 @@ var mutationStrict = (env = process.env) => (env["LOKI_MUTATION_STRICT"] ?? "").
     safeGit(cwd, args, { timeout });
     return { status: 0 };
   } catch {
-    return { status: 1 };
+    return { status: 1 };
+  }
+};
+var init_mutation_proof = __esm(() => {
+  init_safe_git();
+  init_run_cap();
+  DEP_DIRS = ["node_modules", ".venv", "venv"];
+});
+
+// ../../loki-ts/src/features/speed/unit_mode.ts
+import { closeSync as closeSync5, constants, fstatSync as fstatSync4, lstatSync as lstatSync5, openSync as openSync5, readSync as readSync4, realpathSync as realpathSync14 } from "fs";
+function readBounded(path) {
+  const l = lstatSync5(path);
+  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
+    return null;
+  const fd = openSync5(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+  try {
+    const st = fstatSync4(fd);
+    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
+      return null;
+    const buf = Buffer.alloc(st.size + 1);
+    let n2 = 0;
+    for (;; ) {
+      const r = readSync4(fd, buf, n2, buf.length - n2, null);
+      if (r <= 0)
+        break;
+      n2 += r;
+      if (n2 >= buf.length)
+        return null;
+    }
+    return buf.subarray(0, n2).toString("utf8");
+  } finally {
+    closeSync5(fd);
+  }
+}
+function parseText(txt) {
+  try {
+    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
+    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
+      return null;
+    const acc = j.acceptance === undefined ? [] : strs(j.acceptance);
+    if (acc === null)
+      return null;
+    return { id: j.id, writeSet: ws, pack, tokenBudget: tb, ...acc.length ? { acceptance: acc.map((a) => a.slice(0, 500)).slice(0, 50) } : {} };
+  } catch {
+    return null;
+  }
+}
+function parseSpec(path) {
+  try {
+    const txt = readBounded(path);
+    return txt === null ? null : parseText(txt);
+  } catch {
+    return null;
+  }
+}
+function unitSpec(env = process.env) {
+  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
+  if (env["LOKI_SPEED"] === "0" || !path)
+    return null;
+  if (frozen !== undefined)
+    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
+  if (!memo.has(path))
+    memo.set(path, parseSpec(path));
+  return memo.get(path) ?? null;
+}
+function unitFlags(staged, env = process.env, pre = {}) {
+  const s = unitSpec(env);
+  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
+}
+var MAX_SPEC_BYTES, MAX_TOKEN_BUDGET = 1e9, norm2 = (p) => p.replace(/^\.\//, ""), CTRL, strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm2) : null, memo, inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
+var init_unit_mode = __esm(() => {
+  MAX_SPEC_BYTES = 1024 * 1024;
+  CTRL = /[\x00-\x1f\x7f]/;
+  memo = new Map;
+});
+
+// ../../loki-ts/src/features/lean_prefix.ts
+var LEAN_PREFIX, STAGE_PREFIX, withStagePrefix = (brief) => process.env["LOKI_SPEED"] !== "0" ? `${STAGE_PREFIX}
+
+${brief}` : brief;
+var init_lean_prefix = __esm(() => {
+  LEAN_PREFIX = "You are Loki, an autonomous coding agent. Follow the task prompt exactly " + "and report only what you did.";
+  STAGE_PREFIX = "You are Loki, an autonomous coding agent working one stage of a run. " + "Follow the stage prompt exactly, including the role it gives you and the rules it sets, " + "and report only what you did. " + "Stage-specific instructions and the task follow this block.";
+});
+
+// ../../loki-ts/src/util/shell.ts
+async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
+  const reader = stream.getReader();
+  const decoder = new TextDecoder;
+  let out2 = "";
+  let total = 0;
+  try {
+    while (total < maxBytes) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (!value)
+        continue;
+      total += value.byteLength;
+      if (total > maxBytes) {
+        const keep = value.byteLength - (total - maxBytes);
+        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
+        break;
+      }
+      out2 += decoder.decode(value, { stream: true });
+    }
+    out2 += decoder.decode();
+  } finally {
+    try {
+      await reader.cancel();
+    } catch {}
+    reader.releaseLock();
+  }
+  return out2;
+}
+async function run(argv, opts = {}) {
+  const proc = Bun.spawn({
+    cmd: [...argv],
+    stdout: "pipe",
+    stderr: "pipe",
+    env: opts.env ? { ...process.env, ...opts.env } : process.env,
+    cwd: opts.cwd
+  });
+  let timer;
+  let killTimer;
+  if (opts.timeoutMs && opts.timeoutMs > 0) {
+    timer = setTimeout(() => {
+      try {
+        proc.kill("SIGTERM");
+      } catch {}
+      killTimer = setTimeout(() => {
+        try {
+          proc.kill("SIGKILL");
+        } catch {}
+      }, 2000);
+    }, opts.timeoutMs);
+  }
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([
+      readStreamCapped(proc.stdout),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    return { stdout, stderr, exitCode };
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+    if (killTimer)
+      clearTimeout(killTimer);
+  }
+}
+var MAX_STDOUT_BYTES;
+var init_shell = __esm(() => {
+  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
+});
+
+// ../../loki-ts/src/util/python.ts
+import { accessSync, constants as constants2, existsSync as existsSync16, statSync as statSync12 } from "fs";
+import { spawnSync as spawnSync2 } from "child_process";
+import { tmpdir as tmpdir5 } from "os";
+function resolvePython3() {
+  for (const dir of (process.env.PATH ?? "").split(":")) {
+    if (!dir || !dir.startsWith("/"))
+      continue;
+    const cand = `${dir}/python3`;
+    try {
+      accessSync(cand, constants2.X_OK);
+      if (statSync12(cand).isFile())
+        return cand;
+    } catch {}
+  }
+  return null;
+}
+function pySignatures(src) {
+  try {
+    const py = resolvePython3();
+    if (!py)
+      return [];
+    const r = spawnSync2(py, ["-I", "-S", "-c", PY_SCRIPT], {
+      input: src.replace(/\r\n?/g, `
+`),
+      cwd: tmpdir5(),
+      timeout: PY_TIMEOUT_MS,
+      encoding: "utf8",
+      env: { PATH: process.env.PATH ?? "/usr/bin:/bin" },
+      maxBuffer: 8 * 1024 * 1024,
+      stdio: ["pipe", "pipe", "ignore"]
+    });
+    if (r.error || r.status !== 0)
+      return [];
+    const parsed = JSON.parse(r.stdout);
+    return Array.isArray(parsed) && parsed.every((l) => typeof l === "string") ? parsed : [];
+  } catch {
+    return [];
   }
-};
-var init_mutation_proof = __esm(() => {
-  init_safe_git();
-  init_run_cap();
-  DEP_DIRS = ["node_modules", ".venv", "venv"];
-});
-
-// ../../loki-ts/src/features/lean_prefix.ts
-var LEAN_PREFIX, STAGE_PREFIX, withStagePrefix = (brief) => process.env["LOKI_SPEED"] !== "0" ? `${STAGE_PREFIX}
-
-${brief}` : brief;
-var init_lean_prefix = __esm(() => {
-  LEAN_PREFIX = "You are Loki, an autonomous coding agent. Follow the task prompt exactly " + "and report only what you did.";
-  STAGE_PREFIX = "You are Loki, an autonomous coding agent working one stage of a run. " + "Follow the stage prompt exactly, including the role it gives you and the rules it sets, " + "and report only what you did. " + "Stage-specific instructions and the task follow this block.";
+}
+var PY_TIMEOUT_MS = 5000, PY_SCRIPT = `
+import ast, sys, json, re
+def u(n): return ast.unparse(n)
+def chain(n):
+    if isinstance(n, ast.Name): return n.id
+    if isinstance(n, ast.Attribute):
+        c = chain(n.value)
+        return None if c is None else c + "." + n.attr
+    return None
+def deco(d):
+    if isinstance(d, ast.Call):
+        c = chain(d.func)
+        return "@" + c + "(...)" if c else "@..."
+    c = chain(d)
+    return "@" + c if c else "@..."
+def lit(n):
+    if isinstance(n, ast.Constant): return u(n)
+    if isinstance(n, ast.UnaryOp) and isinstance(n.op, ast.USub) and isinstance(n.operand, ast.Constant): return u(n)
+    if isinstance(n, ast.Tuple):
+        p = [lit(e) for e in n.elts]
+        return None if None in p else ", ".join(p)
+    return chain(n)
+def ann(n):
+    if isinstance(n, (ast.Name, ast.Attribute)): return chain(n)
+    if isinstance(n, ast.Constant): return u(n) if (n.value is None or n.value is Ellipsis) else None
+    if isinstance(n, ast.BinOp) and isinstance(n.op, ast.BitOr):
+        l, r = ann(n.left), ann(n.right)
+        return None if l is None or r is None else l + " | " + r
+    if isinstance(n, ast.List):
+        p = [ann(e) for e in n.elts]
+        return None if None in p else "[" + ", ".join(p) + "]"
+    if isinstance(n, ast.Tuple):
+        p = [ann(e) for e in n.elts]
+        return None if None in p else ", ".join(p)
+    if isinstance(n, ast.Subscript):
+        v = chain(n.value)
+        if v is None: return None
+        last = v.split(".")[-1]
+        if last == "Literal":
+            s = lit(n.slice)
+            return None if s is None else v + "[" + s + "]"
+        if last == "Annotated" and isinstance(n.slice, ast.Tuple) and n.slice.elts:
+            first = ann(n.slice.elts[0])
+            return None if first is None else v + "[" + first + ", ...]"
+        s = ann(n.slice)
+        return None if s is None else v + "[" + s + "]"
+    return None
+def a_or_dots(n):
+    r = ann(n)
+    return "..." if r is None else r
+def clean(n):
+    r = ann(n)
+    return "..." if r is None else r
+def arg(a, has_default):
+    t = a.arg
+    if a.annotation is not None: t += ": " + a_or_dots(a.annotation)
+    if has_default: t += " = ..." if a.annotation is not None else "=..."
+    return t
+def args(a):
+    pos = list(a.posonlyargs) + list(a.args)
+    first_default = len(pos) - len(a.defaults)
+    out = []
+    for i, x in enumerate(pos):
+        out.append(arg(x, i >= first_default))
+        if a.posonlyargs and i == len(a.posonlyargs) - 1: out.append("/")
+    if a.vararg is not None: out.append("*" + arg(a.vararg, False))
+    elif a.kwonlyargs: out.append("*")
+    for x, d in zip(a.kwonlyargs, a.kw_defaults): out.append(arg(x, d is not None))
+    if a.kwarg is not None: out.append("**" + arg(a.kwarg, False))
+    return ", ".join(out)
+def fn(n, ind):
+    r = [ind + deco(d) for d in n.decorator_list]
+    h = ind + ("async def " if isinstance(n, ast.AsyncFunctionDef) else "def ") + n.name + "(" + args(n.args) + ")"
+    if n.returns is not None: h += " -> " + a_or_dots(n.returns)
+    return r + [h + ":"]
+def cls(n):
+    r = [deco(d) for d in n.decorator_list]
+    parts = [clean(b) for b in n.bases] + [(k.arg + "=" + clean(k.value)) if k.arg else "**..." for k in n.keywords]
+    return r + ["class " + n.name + ("(" + ", ".join(parts) + ")" if parts else "") + ":"]
+tree = ast.parse(sys.stdin.read())
+out = []
+for n in tree.body:
+    if isinstance(n, (ast.FunctionDef, ast.AsyncFunctionDef)) and not n.name.startswith("_"):
+        out += fn(n, "")
+    elif isinstance(n, ast.ClassDef) and not n.name.startswith("_"):
+        out += cls(n)
+        for m in n.body:
+            if isinstance(m, (ast.FunctionDef, ast.AsyncFunctionDef)) and (not m.name.startswith("_") or re.fullmatch(r"__\\w+__", m.name)):
+                out += fn(m, "    ")
+    else:
+        t = n.targets[0] if isinstance(n, ast.Assign) and len(n.targets) == 1 else (n.target if isinstance(n, ast.AnnAssign) else None)
+        if isinstance(t, ast.Name) and re.fullmatch(r"[A-Z][A-Z0-9_]*", t.id): out.append(t.id + " = ...")
+print(json.dumps(out))
+`;
+var init_python = __esm(() => {
+  init_shell();
 });
 
 // ../../loki-ts/src/features/wall_manifest.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { accessSync, constants, statSync as statSync13 } from "fs";
-import { tmpdir as tmpdir5 } from "os";
 function templateEnd(s, i) {
   for (let j = i + 1;j < s.length; ) {
     const c = s[j];
@@ -8631,41 +8686,6 @@ function tsSignatures(src, jsx) {
   }
   return out2;
 }
-function resolvePython3() {
-  for (const dir of (process.env.PATH ?? "").split(":")) {
-    if (!dir || !dir.startsWith("/"))
-      continue;
-    const cand = `${dir}/python3`;
-    try {
-      accessSync(cand, constants.X_OK);
-      if (statSync13(cand).isFile())
-        return cand;
-    } catch {}
-  }
-  return null;
-}
-function pySignatures(src) {
-  try {
-    const py = resolvePython3();
-    if (!py)
-      return [];
-    const r = spawnSync2(py, ["-I", "-S", "-c", PY_SCRIPT], {
-      input: norm2(src),
-      cwd: tmpdir5(),
-      timeout: PY_TIMEOUT_MS,
-      encoding: "utf8",
-      env: { PATH: process.env.PATH ?? "/usr/bin:/bin" },
-      maxBuffer: 8 * 1024 * 1024,
-      stdio: ["pipe", "pipe", "ignore"]
-    });
-    if (r.error || r.status !== 0)
-      return [];
-    const parsed = JSON.parse(r.stdout);
-    return Array.isArray(parsed) && parsed.every((l) => typeof l === "string") ? parsed : [];
-  } catch {
-    return [];
-  }
-}
 function packageRunner(content) {
   try {
     const pkg = JSON.parse(content);
@@ -8678,7 +8698,7 @@ function packageRunner(content) {
   }
 }
 function pytestSection(content, header) {
-  const lines = norm2(content).split(`
+  const lines = norm3(content).split(`
 `);
   const at = lines.findIndex((l) => header.test(l));
   if (at < 0)
@@ -8695,10 +8715,10 @@ function runnerSection(files) {
   if (js)
     out2.push(`runner: ${js}`, "config: package.json (scripts.test only)");
   for (const f of get(/^(bunfig\.toml|(vitest|jest)\.config\.[cm]?[jt]s)$/))
-    out2.push(`config: ${f.path}`, ...norm2(f.content).split(`
+    out2.push(`config: ${f.path}`, ...norm3(f.content).split(`
 `).slice(0, 20));
   const py = [
-    ...get(/^pytest\.ini$/).map((f) => ({ f, lines: norm2(f.content).split(`
+    ...get(/^pytest\.ini$/).map((f) => ({ f, lines: norm3(f.content).split(`
 `).filter((l) => l.trim()) })),
     ...get(/^pyproject\.toml$/).map((f) => ({ f, lines: pytestSection(f.content, /^\[tool\.pytest/) })),
     ...get(/^(setup\.cfg|tox\.ini)$/).map((f) => ({ f, lines: pytestSection(f.content, /^\[(tool:)?pytest\]/) }))
@@ -8786,13 +8806,13 @@ function importsNamed(path, raw2, stems, importStems = stems, hits = () => false
 function safeTs(content, path) {
   const jsx = /\.[jt]sx$/.test(path);
   try {
-    return tsAmbiguous(norm2(content), jsx) ? [] : tsSignatures(content, jsx);
+    return tsAmbiguous(norm3(content), jsx) ? [] : tsSignatures(content, jsx);
   } catch {
     return [];
   }
 }
 function buildWallManifest(files, taskModules, alsoNamed = []) {
-  const all = [...files].sort(byPath).map((f) => ({ path: f.path.replace(/^\.\//, ""), content: norm2(f.content) }));
+  const all = [...files].sort(byPath).map((f) => ({ path: f.path.replace(/^\.\//, ""), content: norm3(f.content) }));
   const mods = [...new Set(taskModules.map((m) => m.replace(/^\.\//, "")))].sort();
   const excl = [...new Set([...mods, ...alsoNamed.map((m) => m.replace(/^\.\//, ""))])];
   const stems = new Set(excl.flatMap(stemsOfTarget));
@@ -8848,109 +8868,17 @@ var MANIFEST_MAX_LINES = 400, MAX_EXAMPLES = 2, EXAMPLE_LINES = 40, MAX_LAYOUT =
       continue;
     if (seg === "..")
       out2.pop();
-    else
-      out2.push(seg);
-  }
-  return out2.join("/");
-}, stemsOfTarget = (m) => {
-  const raw2 = stemOf(m).toLowerCase(), parent = m.split("/").slice(-2, -1)[0];
-  return [normStem(raw2), ...["index", "__init__", "mod", "main"].includes(raw2) && parent ? [normStem(parent)] : []];
-}, norm2 = (s) => s.replace(/\r\n?/g, `
-`), stemOf = (p) => (p.split("/").pop() ?? p).replace(/\.[^.]*$/, ""), byPath = (a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : a.content < b.content ? -1 : a.content > b.content ? 1 : 0, REGEX_PREV = "(,=:[!&|?{;+-*%~^", isComment = (s, i) => s[i] === "/" && (s[i + 1] === "/" || s[i + 1] === "*"), MODS = "(?:(?:public|private|protected|static|readonly|abstract|async|get|set|declare|override)\\s+)*", MEMBER_GRAMMAR, NOT_MEMBER, RESERVED_AFTER_DECORATOR, PY_TIMEOUT_MS = 5000, PY_SCRIPT = `
-import ast, sys, json, re
-def u(n): return ast.unparse(n)
-def chain(n):
-    if isinstance(n, ast.Name): return n.id
-    if isinstance(n, ast.Attribute):
-        c = chain(n.value)
-        return None if c is None else c + "." + n.attr
-    return None
-def deco(d):
-    if isinstance(d, ast.Call):
-        c = chain(d.func)
-        return "@" + c + "(...)" if c else "@..."
-    c = chain(d)
-    return "@" + c if c else "@..."
-def lit(n):
-    if isinstance(n, ast.Constant): return u(n)
-    if isinstance(n, ast.UnaryOp) and isinstance(n.op, ast.USub) and isinstance(n.operand, ast.Constant): return u(n)
-    if isinstance(n, ast.Tuple):
-        p = [lit(e) for e in n.elts]
-        return None if None in p else ", ".join(p)
-    return chain(n)
-def ann(n):
-    if isinstance(n, (ast.Name, ast.Attribute)): return chain(n)
-    if isinstance(n, ast.Constant): return u(n) if (n.value is None or n.value is Ellipsis) else None
-    if isinstance(n, ast.BinOp) and isinstance(n.op, ast.BitOr):
-        l, r = ann(n.left), ann(n.right)
-        return None if l is None or r is None else l + " | " + r
-    if isinstance(n, ast.List):
-        p = [ann(e) for e in n.elts]
-        return None if None in p else "[" + ", ".join(p) + "]"
-    if isinstance(n, ast.Tuple):
-        p = [ann(e) for e in n.elts]
-        return None if None in p else ", ".join(p)
-    if isinstance(n, ast.Subscript):
-        v = chain(n.value)
-        if v is None: return None
-        last = v.split(".")[-1]
-        if last == "Literal":
-            s = lit(n.slice)
-            return None if s is None else v + "[" + s + "]"
-        if last == "Annotated" and isinstance(n.slice, ast.Tuple) and n.slice.elts:
-            first = ann(n.slice.elts[0])
-            return None if first is None else v + "[" + first + ", ...]"
-        s = ann(n.slice)
-        return None if s is None else v + "[" + s + "]"
-    return None
-def a_or_dots(n):
-    r = ann(n)
-    return "..." if r is None else r
-def clean(n):
-    r = ann(n)
-    return "..." if r is None else r
-def arg(a, has_default):
-    t = a.arg
-    if a.annotation is not None: t += ": " + a_or_dots(a.annotation)
-    if has_default: t += " = ..." if a.annotation is not None else "=..."
-    return t
-def args(a):
-    pos = list(a.posonlyargs) + list(a.args)
-    first_default = len(pos) - len(a.defaults)
-    out = []
-    for i, x in enumerate(pos):
-        out.append(arg(x, i >= first_default))
-        if a.posonlyargs and i == len(a.posonlyargs) - 1: out.append("/")
-    if a.vararg is not None: out.append("*" + arg(a.vararg, False))
-    elif a.kwonlyargs: out.append("*")
-    for x, d in zip(a.kwonlyargs, a.kw_defaults): out.append(arg(x, d is not None))
-    if a.kwarg is not None: out.append("**" + arg(a.kwarg, False))
-    return ", ".join(out)
-def fn(n, ind):
-    r = [ind + deco(d) for d in n.decorator_list]
-    h = ind + ("async def " if isinstance(n, ast.AsyncFunctionDef) else "def ") + n.name + "(" + args(n.args) + ")"
-    if n.returns is not None: h += " -> " + a_or_dots(n.returns)
-    return r + [h + ":"]
-def cls(n):
-    r = [deco(d) for d in n.decorator_list]
-    parts = [clean(b) for b in n.bases] + [(k.arg + "=" + clean(k.value)) if k.arg else "**..." for k in n.keywords]
-    return r + ["class " + n.name + ("(" + ", ".join(parts) + ")" if parts else "") + ":"]
-tree = ast.parse(sys.stdin.read())
-out = []
-for n in tree.body:
-    if isinstance(n, (ast.FunctionDef, ast.AsyncFunctionDef)) and not n.name.startswith("_"):
-        out += fn(n, "")
-    elif isinstance(n, ast.ClassDef) and not n.name.startswith("_"):
-        out += cls(n)
-        for m in n.body:
-            if isinstance(m, (ast.FunctionDef, ast.AsyncFunctionDef)) and (not m.name.startswith("_") or re.fullmatch(r"__\\w+__", m.name)):
-                out += fn(m, "    ")
-    else:
-        t = n.targets[0] if isinstance(n, ast.Assign) and len(n.targets) == 1 else (n.target if isinstance(n, ast.AnnAssign) else None)
-        if isinstance(t, ast.Name) and re.fullmatch(r"[A-Z][A-Z0-9_]*", t.id): out.append(t.id + " = ...")
-print(json.dumps(out))
-`;
+    else
+      out2.push(seg);
+  }
+  return out2.join("/");
+}, stemsOfTarget = (m) => {
+  const raw2 = stemOf(m).toLowerCase(), parent = m.split("/").slice(-2, -1)[0];
+  return [normStem(raw2), ...["index", "__init__", "mod", "main"].includes(raw2) && parent ? [normStem(parent)] : []];
+}, norm3 = (s) => s.replace(/\r\n?/g, `
+`), stemOf = (p) => (p.split("/").pop() ?? p).replace(/\.[^.]*$/, ""), byPath = (a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : a.content < b.content ? -1 : a.content > b.content ? 1 : 0, REGEX_PREV = "(,=:[!&|?{;+-*%~^", isComment = (s, i) => s[i] === "/" && (s[i + 1] === "/" || s[i + 1] === "*"), MODS = "(?:(?:public|private|protected|static|readonly|abstract|async|get|set|declare|override)\\s+)*", MEMBER_GRAMMAR, NOT_MEMBER, RESERVED_AFTER_DECORATOR;
 var init_wall_manifest = __esm(() => {
+  init_python();
   TEST_PATH = /(^|\/)(tests?|__tests__|spec)\/|\.(test|spec)\.[jt]sx?$|(^|\/)test_[^/]*\.py$|_test\.(py|go)$/;
   TEST_FILE = /\.(test|spec)\.[cm]?[jt]sx?$|(^|\/)test_[^/]*\.py$|_test\.py$/;
   EXAMPLE_EXT = /\.(py|[cm]?[jt]sx?)$/;
@@ -8961,8 +8889,8 @@ var init_wall_manifest = __esm(() => {
 });
 
 // ../../loki-ts/src/features/wall_manifest_wire.ts
-import { createHash as createHash7 } from "crypto";
-import { basename as basename9, dirname as dirname9 } from "path";
+import { createHash as createHash6 } from "crypto";
+import { basename as basename9, dirname as dirname8 } from "path";
 function blobEntries(ls) {
   const out2 = [];
   for (const raw2 of ls.toString("latin1").split("\x00")) {
@@ -8992,7 +8920,7 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
       return null;
     const low = task.toLowerCase().replace(/\\/g, "/");
     const token = (n2) => new RegExp(`(?<![A-Za-z0-9_])${n2.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`).test(low);
-    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename9(e.path)) && e.path.includes("/") && token(dirname9(e.path));
+    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename9(e.path)) && e.path.includes("/") && token(dirname8(e.path));
     const matched = all.filter((e) => SOURCE.test(e.path) && (token(basename9(e.path)) || token(e.path) || token(basename9(e.path).replace(/\.[^.]*$/, "")) || dirModule(e)));
     const spans = (p) => [...low.matchAll(new RegExp(`(?<![A-Za-z0-9_])${p.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`, "g"))].map((m) => [m.index, m.index + m[0].length]);
     const occ = new Map(matched.map((e) => [e, spans(e.path)]));
@@ -9020,8 +8948,8 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
     }
     if (at !== cat.length)
       return null;
-    const text3 = buildWallManifest([...files, ...listed.map((e) => ({ path: e.path, content: "" }))], named.map((e) => e.path), matched.map((e) => e.path));
-    return { text: text3, sha256: createHash7("sha256").update(text3).digest("hex") };
+    const text2 = buildWallManifest([...files, ...listed.map((e) => ({ path: e.path, content: "" }))], named.map((e) => e.path), matched.map((e) => e.path));
+    return { text: text2, sha256: createHash6("sha256").update(text2).digest("hex") };
   } catch {
     return null;
   }
@@ -9053,12 +8981,12 @@ Example: test('name', () => { assert.strictEqual(fn(1), 2); });  Run: node --tes
 });
 
 // ../../loki-ts/src/engine10/cache.ts
-import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync6, readFileSync as readFileSync20, writeFileSync as writeFileSync9 } from "fs";
+import { createHash as createHash7 } from "crypto";
+import { existsSync as existsSync17, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
 import { resolve as resolve8 } from "path";
 function repoKey(originUrl, repoDir) {
   const basis = originUrl && originUrl.trim() !== "" ? originUrl : resolve8(repoDir);
-  return createHash8("sha256").update(basis).digest("hex");
+  return createHash7("sha256").update(basis).digest("hex");
 }
 function defaultCacheRoot() {
   return resolve8(homeLokiDir(), "cache", "v10");
@@ -9066,11 +8994,11 @@ function defaultCacheRoot() {
 function repoCacheDir(key, cacheRoot = defaultCacheRoot()) {
   return resolve8(cacheRoot, key);
 }
-function readJson4(path, isValid = (_v) => true) {
+function readJson3(path, isValid = (_v) => true) {
   if (!existsSync17(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync20(path, "utf8"));
+    const parsed = JSON.parse(readFileSync19(path, "utf8"));
     return isValid(parsed) ? parsed : null;
   } catch {
     return null;
@@ -9080,7 +9008,7 @@ function isRepoMap(v) {
   return typeof v === "object" && v !== null && Array.isArray(v.files) && Array.isArray(v.entries);
 }
 function readRepoMapCache(dir, tree) {
-  return readJson4(resolve8(dir, `repomap-${tree}.json`), isRepoMap);
+  return readJson3(resolve8(dir, `repomap-${tree}.json`), isRepoMap);
 }
 var init_cache = __esm(() => {
   init_paths();
@@ -9105,7 +9033,7 @@ function selectSpecificFiles(task, repoMap, max = MAX_RELEVANT_FILES) {
   const scored = sets.map((toks, idx) => ({ path: entries[idx].path, score: specific.reduce((n2, w) => n2 + (toks.has(w) ? 1 : 0), 0), idx }));
   return scored.filter((s) => s.score > 0).sort((a, b) => b.score - a.score || a.idx - b.idx).slice(0, max).map((s) => s.path);
 }
-var MAX_RELEVANT_FILES = 8, haystack = (entry) => `${entry.path} ${entry.symbols.join(" ")}`.toLowerCase(), wordTokens = (text3) => text3.toLowerCase().match(/[a-z0-9_]+/g) ?? [];
+var MAX_RELEVANT_FILES = 8, haystack = (entry) => `${entry.path} ${entry.symbols.join(" ")}`.toLowerCase(), wordTokens = (text2) => text2.toLowerCase().match(/[a-z0-9_]+/g) ?? [];
 
 // ../../loki-ts/src/features/speed/lean_select.ts
 function speedLikelyFiles(task, map, env = process.env) {
@@ -9120,12 +9048,12 @@ function speedLikelyFiles(task, map, env = process.env) {
 var init_lean_select = () => {};
 
 // ../../loki-ts/src/util/claude_model.ts
-import { readFileSync as readFileSync21 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 import { resolve as resolve9 } from "path";
 function resolveClaudeModel(want) {
   try {
     const path = process.env["LOKI_MODEL_CATALOG"] || resolve9(REPO_ROOT, "providers/model_catalog.json");
-    return JSON.parse(readFileSync21(path, "utf8")).providers?.claude?.cli_aliases?.[want] ?? want;
+    return JSON.parse(readFileSync20(path, "utf8")).providers?.claude?.cli_aliases?.[want] ?? want;
   } catch {
     return want;
   }
@@ -9173,17 +9101,28 @@ var init_hooks = __esm(() => {
   hooks = {};
 });
 
+// ../../loki-ts/src/runner/router/flag.ts
+function routerMode(env = process.env) {
+  const v = (env.LOKI_ROUTER ?? "").trim().toLowerCase();
+  if (v === "0" || v === "false" || v === "off")
+    return "opt-out";
+  if (v === "1" || v === "true" || v === "on")
+    return "on";
+  return "off";
+}
+var routerEnabled = (env = process.env) => routerMode(env) === "on";
+
 // ../../loki-ts/src/engine10/cost.ts
-import { mkdirSync as mkdirSync7, readdirSync as readdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync10 } from "fs";
-import { join as join30 } from "path";
+import { readdirSync as readdirSync9, readFileSync as readFileSync21 } from "fs";
+import { join as join29 } from "path";
 function routerTelemetryOn(env = process.env) {
   return routerEnabled(env);
 }
-function num4(v) {
+function num3(v) {
   return typeof v === "number" && Number.isFinite(v) ? v : 0;
 }
 function resultCostPath(lokiRoot, iteration) {
-  return join30(lokiRoot, "metrics", `result-cost-${iteration}.json`);
+  return join29(lokiRoot, "metrics", `result-cost-${iteration}.json`);
 }
 function sumResultCosts(lokiRoot, iterations, context = []) {
   const out2 = {
@@ -9214,7 +9153,7 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
   const parsed = new Map;
   for (const iter of iterations) {
     try {
-      parsed.set(iter, JSON.parse(readFileSync22(resultCostPath(lokiRoot, iter), "utf8")));
+      parsed.set(iter, JSON.parse(readFileSync21(resultCostPath(lokiRoot, iter), "utf8")));
     } catch {}
   }
   const own = new Set(iterations);
@@ -9223,15 +9162,15 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
     if (own.has(iter))
       continue;
     try {
-      lookup.push({ iter, rec: JSON.parse(readFileSync22(resultCostPath(lokiRoot, iter), "utf8")) });
+      lookup.push({ iter, rec: JSON.parse(readFileSync21(resultCostPath(lokiRoot, iter), "utf8")) });
     } catch {}
   }
   const verdicts = hooks.costRecords?.resumeVerdicts(lookup) ?? { ambiguous: [], separate: [] };
   const rv = { ambiguous: verdicts.ambiguous.filter((i) => own.has(i)), separate: verdicts.separate.filter((i) => own.has(i)) };
   for (const iter of iterations) {
     const path = resultCostPath(lokiRoot, iter);
-    const rec2 = parsed.get(iter);
-    if (!rec2) {
+    const rec = parsed.get(iter);
+    if (!rec) {
       out2.missing.push(iter);
       continue;
     }
@@ -9241,45 +9180,45 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
       continue;
     }
     tokenSessions++;
-    const inTok = num4(rec2["input_tokens"]);
-    const outTok = num4(rec2["output_tokens"]);
-    const cacheR = num4(rec2["cache_read_tokens"]);
-    const cacheC = num4(rec2["cache_creation_tokens"]);
+    const inTok = num3(rec["input_tokens"]);
+    const outTok = num3(rec["output_tokens"]);
+    const cacheR = num3(rec["cache_read_tokens"]);
+    const cacheC = num3(rec["cache_creation_tokens"]);
     out2.input_tokens += inTok;
     out2.output_tokens += outTok;
     out2.cache_read_tokens += cacheR;
     out2.cache_creation_tokens += cacheC;
-    if (typeof rec2["cache_read_tokens"] === "number")
+    if (typeof rec["cache_read_tokens"] === "number")
       readSeen++;
-    if (typeof rec2["cache_creation_tokens"] === "number")
+    if (typeof rec["cache_creation_tokens"] === "number")
       creationSeen++;
-    if (typeof rec2["duration_ms"] === "number" && Number.isFinite(rec2["duration_ms"])) {
-      out2.duration_ms = (out2.duration_ms ?? 0) + rec2["duration_ms"];
+    if (typeof rec["duration_ms"] === "number" && Number.isFinite(rec["duration_ms"])) {
+      out2.duration_ms = (out2.duration_ms ?? 0) + rec["duration_ms"];
       durSeen++;
     }
     if (out2.router)
-      out2.router["requests_total"] += num4(rec2["requests_total"]);
+      out2.router["requests_total"] += num3(rec["requests_total"]);
     if (out2.router)
-      out2.router["requests_over_100k"] += num4(rec2["requests_over_100k"]);
+      out2.router["requests_over_100k"] += num3(rec["requests_over_100k"]);
     if (out2.router)
-      out2.router["over_100k_input_tokens"] += num4(rec2["over_100k_input_tokens"]);
+      out2.router["over_100k_input_tokens"] += num3(rec["over_100k_input_tokens"]);
     if (out2.router)
-      out2.router["over_100k_output_tokens"] += num4(rec2["over_100k_output_tokens"]);
+      out2.router["over_100k_output_tokens"] += num3(rec["over_100k_output_tokens"]);
     if (out2.router)
-      out2.router["advisor_calls"] += num4(rec2["advisor_calls"]);
+      out2.router["advisor_calls"] += num3(rec["advisor_calls"]);
     if (out2.router)
-      out2.router["advisor_input_tokens"] += num4(rec2["advisor_input_tokens"]);
+      out2.router["advisor_input_tokens"] += num3(rec["advisor_input_tokens"]);
     if (out2.router)
-      out2.router["advisor_output_tokens"] += num4(rec2["advisor_output_tokens"]);
-    if (typeof rec2["model"] === "string" && rec2["model"])
-      out2.model = rec2["model"];
+      out2.router["advisor_output_tokens"] += num3(rec["advisor_output_tokens"]);
+    if (typeof rec["model"] === "string" && rec["model"])
+      out2.model = rec["model"];
     sources2.push(path);
-    recs.push({ iter, rec: rec2 });
-    const c = rec2["total_cost_usd"];
-    const unmetered = rec2["source"] === UNMETERED;
+    recs.push({ iter, rec });
+    const c = rec["total_cost_usd"];
+    const unmetered = rec["source"] === UNMETERED;
     if (unmetered)
       out2.unmetered = true;
-    if (rec2["estimated"] === true)
+    if (rec["estimated"] === true)
       out2.estimated = true;
     const noUsage = !unmetered && inTok === 0 && outTok === 0 && cacheR === 0 && cacheC === 0;
     if (typeof c !== "number" || !Number.isFinite(c) || noUsage) {
@@ -9318,17 +9257,74 @@ function sumResultCosts(lokiRoot, iterations, context = []) {
 var UNMETERED = "cli-invoker-unmetered";
 var init_cost = __esm(() => {
   init_hooks();
+  init_provider_cost();
+  init_provider_cost();
+});
+
+// ../../loki-ts/src/util/atomic.ts
+import {
+  closeSync as closeSync6,
+  fstatSync as fstatSync5,
+  fsyncSync as fsyncSync2,
+  lstatSync as lstatSync6,
+  mkdirSync as mkdirSync8,
+  openSync as openSync6,
+  readSync as readSync5,
+  renameSync as renameSync4,
+  rmSync as rmSync6,
+  statSync as statSync13,
+  unlinkSync as unlinkSync3,
+  writeFileSync as writeFileSync11,
+  writeSync as writeSync3
+} from "fs";
+import { dirname as dirname9 } from "path";
+function durableWriteThenRename(target, body) {
+  mkdirSync8(dirname9(target), { recursive: true });
+  const tmp = tmpPathFor(target);
+  const fd = openSync6(tmp, "w");
+  try {
+    writeSync3(fd, body);
+    fsyncSync2(fd);
+  } finally {
+    closeSync6(fd);
+  }
+  renameSync4(tmp, target);
+  fsyncParentDir(target);
+}
+function fsyncParentDir(target) {
+  let dfd = null;
+  try {
+    dfd = openSync6(dirname9(target), "r");
+    fsyncSync2(dfd);
+  } catch {} finally {
+    if (dfd !== null) {
+      try {
+        closeSync6(dfd);
+      } catch {}
+    }
+  }
+}
+function atomicWriteJson(target, data) {
+  durableWriteThenRename(target, `${JSON.stringify(data, null, 2)}
+`);
+}
+function tmpPathFor(target) {
+  return `${target}.tmp.${process.pid}.${++_tmpCounter}`;
+}
+var _tmpCounter = 0, _appendChains;
+var init_atomic = __esm(() => {
+  _appendChains = new Map;
 });
 
 // ../../loki-ts/src/runner/budget.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync8, readdirSync as readdirSync11, readFileSync as readFileSync23, renameSync as renameSync4, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname10, join as join31, resolve as resolve10 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readdirSync as readdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname10, join as join30, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function loadDefaultMaxCostUsd() {
   const here = dirname10(fileURLToPath2(import.meta.url));
   for (const rel of [["..", "..", "data"], ["..", "data"]]) {
     try {
-      const j = JSON.parse(readFileSync23(resolve10(here, ...rel, "model-pricing.json"), "utf8"));
+      const j = JSON.parse(readFileSync22(resolve10(here, ...rel, "model-pricing.json"), "utf8"));
       if (typeof j.default_max_cost_usd === "number" && Number.isFinite(j.default_max_cost_usd) && j.default_max_cost_usd > 0)
         return j.default_max_cost_usd;
     } catch {}
@@ -9341,7 +9337,7 @@ function _loadPricing() {
     const jsonPath = resolve10(moduleDir, "..", "..", "data", "model-pricing.json");
     if (!existsSync18(jsonPath))
       return _FALLBACK_PRICING;
-    const raw2 = JSON.parse(readFileSync23(jsonPath, "utf8"));
+    const raw2 = JSON.parse(readFileSync22(jsonPath, "utf8"));
     const pricing2 = raw2["pricing"];
     if (!pricing2 || typeof pricing2 !== "object")
       return _FALLBACK_PRICING;
@@ -9371,6 +9367,7 @@ function _loadPricing() {
 }
 var DEFAULT_FALLBACK_USD = 100, _FALLBACK_PRICING, PRICING;
 var init_budget = __esm(() => {
+  init_atomic();
   init_paths();
   init_cost();
   _FALLBACK_PRICING = {
@@ -9470,7 +9467,7 @@ var init_model_rank = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/sizing.ts
-import { existsSync as existsSync19, readFileSync as readFileSync24 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync23 } from "fs";
 import { basename as basename10 } from "path";
 function namedFiles(task, map) {
   return (map?.files ?? []).filter((f) => task.toLowerCase().includes(basename10(f).toLowerCase()));
@@ -9492,7 +9489,7 @@ function loadRepoMap(repomapRef) {
   if (!repomapRef || !existsSync19(repomapRef))
     return null;
   try {
-    return JSON.parse(readFileSync24(repomapRef, "utf8"));
+    return JSON.parse(readFileSync23(repomapRef, "utf8"));
   } catch {
     return null;
   }
@@ -9523,8 +9520,8 @@ var init_sizing = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/schema.ts
-import { existsSync as existsSync20, lstatSync as lstatSync5, realpathSync as realpathSync14, statSync as statSync14 } from "fs";
-import { isAbsolute as isAbsolute3, join as join33, normalize, sep as sep9 } from "path";
+import { existsSync as existsSync20, lstatSync as lstatSync7, realpathSync as realpathSync15, statSync as statSync14 } from "fs";
+import { isAbsolute as isAbsolute3, join as join32, normalize, sep as sep9 } from "path";
 function safeRel(p) {
   const n2 = normalize(p.trim()).split(sep9).join("/").replace(/\/$/, "");
   if (n2 === "" || isAbsolute3(n2) || n2 === ".." || n2.startsWith("../"))
@@ -9533,8 +9530,8 @@ function safeRel(p) {
 }
 function insideRepo(repoDir, rel) {
   try {
-    const real2 = realpathSync14(join33(repoDir, rel));
-    const base = realpathSync14(repoDir);
+    const real2 = realpathSync15(join32(repoDir, rel));
+    const base = realpathSync15(repoDir);
     return real2 === base || real2.startsWith(base + sep9);
   } catch {
     return false;
@@ -9546,7 +9543,7 @@ function checkCitation(repoDir, raw2) {
   const rel = safeRel(raw2.replace(/:\d+(?:-\d+)?$/, ""));
   if (rel === null)
     return `citation "${raw2}" is not a repo-relative path`;
-  const abs = join33(repoDir, rel);
+  const abs = join32(repoDir, rel);
   if (!existsSync20(abs) || !statSync14(abs).isFile() || !insideRepo(repoDir, rel))
     return `citation "${raw2}" names a file that does not exist`;
   return null;
@@ -9558,7 +9555,7 @@ function checkFingerprint(repoDir, raw2) {
   if (rel === null)
     return `fingerprint "${raw2}" is not a repo-relative path`;
   try {
-    if (!lstatSync5(join33(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
+    if (!lstatSync7(join32(repoDir, rel)).isFile() || !insideRepo(repoDir, rel))
       return `fingerprint "${raw2}" is not a regular file inside the repo`;
   } catch {
     return `fingerprint "${raw2}" names a file that does not exist`;
@@ -9586,7 +9583,7 @@ function checkDir(repoDir, v, where, errs) {
     errs.push(`${where}: must be a repo-relative directory ("." for the repo root)`);
     return ".";
   }
-  const abs = join33(repoDir, rel);
+  const abs = join32(repoDir, rel);
   if (!existsSync20(abs) || !statSync14(abs).isDirectory() || !insideRepo(repoDir, rel))
     errs.push(`${where}: directory "${rel}" does not exist`);
   return rel;
@@ -9689,9 +9686,9 @@ var init_schema = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/gather.ts
-import { createHash as createHash9 } from "crypto";
-import { closeSync as closeSync5, lstatSync as lstatSync6, openSync as openSync5, readFileSync as readFileSync25, readSync as readSync4 } from "fs";
-import { dirname as dirname11, join as join34 } from "path";
+import { createHash as createHash8 } from "crypto";
+import { closeSync as closeSync7, lstatSync as lstatSync8, openSync as openSync7, readFileSync as readFileSync24, readSync as readSync6 } from "fs";
+import { dirname as dirname11, join as join33 } from "path";
 function listShallow(repoDir) {
   try {
     const out2 = safeGit(repoDir, ["ls-files", "-z"], { maxBuffer: 256 * 1024 * 1024 });
@@ -9704,7 +9701,7 @@ function shallowDirs(repoDir) {
   return [...new Set(listShallow(repoDir).map((p) => dirname11(p)))].sort();
 }
 function computeKey(repoDir, fingerprintFiles, dirs, committedHash = null) {
-  const h = createHash9("sha256");
+  const h = createHash8("sha256");
   h.update(`${MODEL_REV}
 `);
   if (committedHash !== null)
@@ -9717,9 +9714,9 @@ function computeKey(repoDir, fingerprintFiles, dirs, committedHash = null) {
       if (checkFingerprint(repoDir, f) !== null)
         h.update("invalid");
       else {
-        const abs = join34(repoDir, f);
-        const size = lstatSync6(abs).size;
-        h.update(size <= GATHER_CAPS.maxHashBytes ? readFileSync25(abs) : `too-large:${size}`);
+        const abs = join33(repoDir, f);
+        const size = lstatSync8(abs).size;
+        h.update(size <= GATHER_CAPS.maxHashBytes ? readFileSync24(abs) : `too-large:${size}`);
       }
     } catch {
       h.update("missing");
@@ -9744,7 +9741,7 @@ function committedModelHash(raw2) {
   if (typeof raw2 !== "object" || raw2 === null || Array.isArray(raw2))
     return null;
   const { key: _key, expiresAt: _exp, ...rest } = raw2;
-  return createHash9("sha256").update(JSON.stringify(rest)).digest("hex");
+  return createHash8("sha256").update(JSON.stringify(rest)).digest("hex");
 }
 var GATHER_CAPS, depthOf = (p) => p.split("/").length, MODEL_REV = "model-rev:2";
 var init_gather = __esm(() => {
@@ -9762,14 +9759,14 @@ var init_gather = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/discover.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync9, readFileSync as readFileSync26, rmSync as rmSync6, writeFileSync as writeFileSync12 } from "fs";
-import { join as join35 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync10, readFileSync as readFileSync25, rmSync as rmSync7, writeFileSync as writeFileSync13 } from "fs";
+import { join as join34 } from "path";
 function projectModelEnabled(env = process.env) {
   return env["LOKI_E10_PROJECT_MODEL"] !== "0";
 }
 function loadCached(repoDir, now2 = Date.now()) {
   try {
-    return parseCached(repoDir, JSON.parse(readFileSync26(join35(repoDir, PROJECT_FILE), "utf8")), now2);
+    return parseCached(repoDir, JSON.parse(readFileSync25(join34(repoDir, PROJECT_FILE), "utf8")), now2);
   } catch {
     return null;
   }
@@ -9784,7 +9781,7 @@ function loadCommitted(repoDir) {
   };
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync26(join35(repoDir, PROJECT_FILE), "utf8"));
+    raw2 = JSON.parse(readFileSync25(join34(repoDir, PROJECT_FILE), "utf8"));
   } catch (e) {
     return ignore(`unreadable JSON (${e instanceof Error ? e.message : String(e)})`);
   }
@@ -9857,7 +9854,7 @@ var clean2 = (p) => typeof p === "string" ? posix.normalize(p.replace(/\\/g, "/"
 var init_api = () => {};
 
 // ../../loki-ts/src/project_model/resolve.ts
-import { join as join36 } from "path";
+import { join as join35 } from "path";
 function loadProjectApi(repoDir, env = process.env) {
   if (!projectModelEnabled(env))
     return null;
@@ -9879,7 +9876,7 @@ function siteFor(api, repoDir, file) {
   const rel = api.relativeToRoot(file);
   if (!pkg || pkg.root === "." || rel === null)
     return null;
-  return { pkg, root: pkg.root, cwd: join36(repoDir, pkg.root), file: rel };
+  return { pkg, root: pkg.root, cwd: join35(repoDir, pkg.root), file: rel };
 }
 function groupByPackage(api, repoDir, files) {
   const out2 = new Map;
@@ -9912,9 +9909,9 @@ var init_scope = __esm(() => {
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync5 } from "child_process";
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync27, rmSync as rmSync7 } from "fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync26, rmSync as rmSync8 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { join as join37 } from "path";
+import { join as join36 } from "path";
 import { basename as basename11 } from "path";
 function classifyAssertDelta(inp) {
   const f = basename11(inp.path);
@@ -9924,7 +9921,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync4(join37(tmpdir6(), "loki-ad-"));
+    cwd = mkdtempSync4(join36(tmpdir6(), "loki-ad-"));
     const raw2 = execFileSync5("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
@@ -9947,7 +9944,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   } finally {
     if (cwd)
-      rmSync7(cwd, { recursive: true, force: true });
+      rmSync8(cwd, { recursive: true, force: true });
   }
 }
 function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, headCounts) {
@@ -9955,7 +9952,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => safeGit(repoDir, ["show", `${ref}:${path}`]);
-    const head = headRef ? show(headRef) : readFileSync27(join37(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync26(join36(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -10179,7 +10176,7 @@ var init_runner_errors = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename12, extname, join as join38, relative as relative3, sep as sep10 } from "path";
+import { basename as basename12, extname, join as join37, relative as relative3, sep as sep10 } from "path";
 function isTestFile(rel) {
   const name = basename12(rel);
   return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
@@ -10209,8 +10206,8 @@ var init_testmap = __esm(() => {
 });
 
 // ../../loki-ts/src/util/check_result.ts
-import { mkdirSync as mkdirSync10, readFileSync as readFileSync28, renameSync as renameSync5, writeFileSync as writeFileSync13 } from "fs";
-import { basename as basename13, join as join39 } from "path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync27, renameSync as renameSync5, writeFileSync as writeFileSync14 } from "fs";
+import { basename as basename13, join as join38 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -10389,17 +10386,17 @@ function classifyCheck(i) {
     return { result: "not_run", reason: "timed out or aborted" };
   if (i.kind === "static")
     return { result: i.ok ? "pass" : "fail" };
-  const text3 = stripAnsi(i.out);
+  const text2 = stripAnsi(i.out);
   if (i.runner === "go") {
     if (i.ok)
       return { result: "not_run", reason: GO_EXIT0_REASON };
-    const j = goJson(text3);
+    const j = goJson(text2);
     if (j)
       return j.failed ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
-    return FAIL_EVIDENCE.test(text3) || GO_FAIL_EVIDENCE.test(text3) ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
+    return FAIL_EVIDENCE.test(text2) || GO_FAIL_EVIDENCE.test(text2) ? { result: "fail" } : { result: "not_run", reason: UNCONFIRMED_REASON };
   }
   const n2 = testCount(i.out, i.path, i.ok);
-  if (!i.ok && FAIL_EVIDENCE.test(text3))
+  if (!i.ok && FAIL_EVIDENCE.test(text2))
     return { result: "fail", ...n2 !== null ? { n: n2 } : {} };
   if (n2 === 0)
     return { result: "not_run", n: 0, reason: `${NO_TESTS_REASON} (ran 0 tests, empty or all skipped)` };
@@ -10476,10 +10473,10 @@ function classifyRisk(files, env = process.env) {
   };
 }
 function changedFiles(repoDir, baseSha) {
-  const run = (args) => safeGit(repoDir, args).split(`
+  const run2 = (args) => safeGit(repoDir, args).split(`
 `).map((l) => l.trim()).filter(Boolean);
-  const tracked = run(["diff", "--name-only", baseSha]);
-  const untracked = run(["ls-files", "--others", "--exclude-standard"]);
+  const tracked = run2(["diff", "--name-only", baseSha]);
+  const untracked = run2(["ls-files", "--others", "--exclude-standard"]);
   return [...new Set([...tracked, ...untracked])].filter((f) => !f.startsWith(".loki/"));
 }
 function diffFiles(repoDir, baseSha) {
@@ -10502,7 +10499,7 @@ function diffFiles(repoDir, baseSha) {
       return f;
     let n2 = 0;
     try {
-      n2 = readFileSync28(join39(repoDir, path), "utf8").split(`
+      n2 = readFileSync27(join38(repoDir, path), "utf8").split(`
 `).length;
     } catch {}
     return { path, added: n2, deleted: 0, status: "added" };
@@ -10510,9 +10507,9 @@ function diffFiles(repoDir, baseSha) {
 }
 function recordRisk(repoDir, a) {
   try {
-    const dir = join39(repoDir, ".loki", "state"), p = join39(dir, "risk-tier.json");
-    mkdirSync10(dir, { recursive: true });
-    writeFileSync13(`${p}.tmp`, JSON.stringify(a, null, 2) + `
+    const dir = join38(repoDir, ".loki", "state"), p = join38(dir, "risk-tier.json");
+    mkdirSync11(dir, { recursive: true });
+    writeFileSync14(`${p}.tmp`, JSON.stringify(a, null, 2) + `
 `);
     renameSync5(`${p}.tmp`, p);
     return p;
@@ -10553,12 +10550,12 @@ var init_check_result = __esm(() => {
 
 // ../../loki-ts/src/runner/load_owner.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { mkdtempSync as mkdtempSync5, realpathSync as realpathSync15, rmSync as rmSync8 } from "fs";
+import { mkdtempSync as mkdtempSync5, realpathSync as realpathSync16, rmSync as rmSync9 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { basename as basename14, extname as extname2, join as join40 } from "path";
+import { basename as basename14, extname as extname2, join as join39 } from "path";
 function changedFilesNamed(out2, repoDir, changed) {
   return changed.filter((f) => {
-    if (out2.includes(f) || out2.includes(join40(repoDir, f)))
+    if (out2.includes(f) || out2.includes(join39(repoDir, f)))
       return true;
     const segs = f.split("/");
     if (suffixes(segs, 2).some((x) => x !== f && bounded(out2, x, "(?![\\w-])")))
@@ -10575,7 +10572,7 @@ function loadSignature(out2, roots) {
   let o = out2;
   for (const r of roots.flatMap((x) => {
     try {
-      return [x, realpathSync15(x)];
+      return [x, realpathSync16(x)];
     } catch {
       return [x];
     }
@@ -10669,7 +10666,7 @@ async function loadErrorIsHarnessOwned(i) {
     return false;
   if (i.args.some((a) => changed.includes(a.replace(/^\.\//, ""))))
     return false;
-  const dir = mkdtempSync5(join40(tmpdir7(), "e10-loadown-"));
+  const dir = mkdtempSync5(join39(tmpdir7(), "e10-loadown-"));
   const git3 = (args) => {
     safeGit(i.repoDir, args, { stdio: "ignore" });
   };
@@ -10683,7 +10680,7 @@ async function loadErrorIsHarnessOwned(i) {
     try {
       git3(["worktree", "remove", "--force", dir]);
     } catch {}
-    rmSync8(dir, { recursive: true, force: true });
+    rmSync9(dir, { recursive: true, force: true });
     try {
       git3(["worktree", "prune"]);
     } catch {}
@@ -10701,7 +10698,7 @@ var init_load_owner = __esm(() => {
 });
 
 // ../../loki-ts/src/util/wall_owned.ts
-import { isAbsolute as isAbsolute4, join as join41, relative as relative4 } from "path";
+import { isAbsolute as isAbsolute4, join as join40, relative as relative4 } from "path";
 function failingLocations(raw2, cwd, repoDir) {
   const out2 = raw2.replace(ANSI2, "").replace(/\r\n?/g, `
 `), files = new Set;
@@ -10733,7 +10730,7 @@ function failingLocations(raw2, cwd, repoDir) {
   }
   if (errors2 === 0 || located !== errors2)
     return null;
-  return [...files].map((f) => relative4(repoDir, isAbsolute4(f) ? f : join41(cwd, f)));
+  return [...files].map((f) => relative4(repoDir, isAbsolute4(f) ? f : join40(cwd, f)));
 }
 function wallOwnedFailure(raw2, cwd, repoDir, wall) {
   const locs = failingLocations(raw2, cwd, repoDir);
@@ -10744,57 +10741,6 @@ var init_wall_owned = __esm(() => {
   ANSI2 = /\u001b\[[0-9;?]*[ -/]*[@-~]/g;
 });
 
-// ../../loki-ts/src/util/atomic.ts
-import {
-  closeSync as closeSync6,
-  fstatSync as fstatSync4,
-  fsyncSync as fsyncSync2,
-  lstatSync as lstatSync7,
-  mkdirSync as mkdirSync11,
-  openSync as openSync6,
-  readSync as readSync5,
-  renameSync as renameSync6,
-  rmSync as rmSync9,
-  statSync as statSync15,
-  unlinkSync as unlinkSync3,
-  writeSync as writeSync3
-} from "fs";
-import { dirname as dirname12 } from "path";
-function durableWriteThenRename(target, body) {
-  mkdirSync11(dirname12(target), { recursive: true });
-  const tmp = `${target}.tmp.${process.pid}.${++_tmpCounter}`;
-  const fd = openSync6(tmp, "w");
-  try {
-    writeSync3(fd, body);
-    fsyncSync2(fd);
-  } finally {
-    closeSync6(fd);
-  }
-  renameSync6(tmp, target);
-  fsyncParentDir(target);
-}
-function fsyncParentDir(target) {
-  let dfd = null;
-  try {
-    dfd = openSync6(dirname12(target), "r");
-    fsyncSync2(dfd);
-  } catch {} finally {
-    if (dfd !== null) {
-      try {
-        closeSync6(dfd);
-      } catch {}
-    }
-  }
-}
-function atomicWriteJson(target, data) {
-  durableWriteThenRename(target, `${JSON.stringify(data, null, 2)}
-`);
-}
-var _tmpCounter = 0, _appendChains;
-var init_atomic = __esm(() => {
-  _appendChains = new Map;
-});
-
 // ../../loki-ts/src/runner/state.ts
 var TERMINAL_STATUSES;
 var init_state = __esm(() => {
@@ -10813,11 +10759,11 @@ var init_state = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/repo_profile.ts
-import { existsSync as existsSync22, readFileSync as readFileSync29, mkdirSync as mkdirSync12, readdirSync as readdirSync12, renameSync as renameSync7, rmSync as rmSync10, writeFileSync as writeFileSync14 } from "fs";
-import { basename as basename15, join as join42, resolve as resolve11, isAbsolute as isAbsolute5 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync28, mkdirSync as mkdirSync12, readdirSync as readdirSync11, renameSync as renameSync6, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "fs";
+import { basename as basename15, join as join41, resolve as resolve11, isAbsolute as isAbsolute5 } from "path";
 function loadProfile(repoDir) {
   try {
-    const p = JSON.parse(readFileSync29(commandProfilePath(repoDir), "utf8"));
+    const p = JSON.parse(readFileSync28(commandProfilePath(repoDir), "utf8"));
     return p?.version === 1 && Array.isArray(p.commands) && p.baseline ? p : null;
   } catch {
     return null;
@@ -10840,15 +10786,15 @@ function attribute(repoDir, baseSha, failing) {
 }
 function attributeFullSuite(repoDir, baseSha, full, blocked, changed) {
   const bad = full.filter((c) => c.result === "fail"), none = { preExistingChecks: [], preExistingIds: [], introducedChecks: bad.map((c) => c.name), line: null };
-  const norm3 = (s) => s.replace(/\s+--silent\b/, "").trim(), p = loadProfile(repoDir);
+  const norm4 = (s) => s.replace(/\s+--silent\b/, "").trim(), p = loadProfile(repoDir);
   if (!bad.length || !p || p.revision !== baseSha || !p.baseline.attributable || !p.baseline.failing_ids.length)
     return none;
-  if (bad.some((c) => norm3(c.cmd) !== norm3(p.baseline.command ?? "")))
+  if (bad.some((c) => norm4(c.cmd) !== norm4(p.baseline.command ?? "")))
     return { ...none, line: `baseline: ran "${p.baseline.command}", not the full suite command, ids not comparable, full suite failures not excused` };
   const block = new Set(blocked);
   return attribute(repoDir, baseSha, bad.map((c) => ({ name: c.name, ...c.ids ? { ids: c.ids } : {}, eligible: (c.ids ?? []).every((i) => !block.has(i) && !changed.some((f) => i.includes(f))) })));
 }
-var commandProfilePath = (repoDir) => join42(repoDir, ".loki", "state", "repo-profile.json");
+var commandProfilePath = (repoDir) => join41(repoDir, ".loki", "state", "repo-profile.json");
 var init_repo_profile = __esm(() => {
   init_failures();
   init_check_result();
@@ -10858,23 +10804,23 @@ var init_repo_profile = __esm(() => {
 });
 
 // ../../loki-ts/src/project_graph.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 import {
   existsSync as existsSync23,
-  readdirSync as readdirSync13,
-  readFileSync as readFileSync30,
-  statSync as statSync16,
-  writeFileSync as writeFileSync15,
+  readdirSync as readdirSync12,
+  readFileSync as readFileSync29,
+  statSync as statSync15,
+  writeFileSync as writeFileSync16,
   mkdirSync as mkdirSync13
 } from "fs";
-import { basename as basename16, dirname as dirname13, join as join43, resolve as resolve12 } from "path";
+import { basename as basename16, dirname as dirname12, join as join42, resolve as resolve12 } from "path";
 function readManifest(path) {
   if (!existsSync23(path)) {
     return null;
   }
   let raw2;
   try {
-    raw2 = readFileSync30(path, "utf8");
+    raw2 = readFileSync29(path, "utf8");
   } catch {
     return null;
   }
@@ -10911,7 +10857,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
   const seen = new Set;
   let children;
   try {
-    children = readdirSync13(rootDir);
+    children = readdirSync12(rootDir);
   } catch {
     children = [];
   }
@@ -10926,12 +10872,12 @@ function resolveMembers(rootDir, declared, selfBasename) {
     for (const child of children) {
       if (!matchPattern(name, child))
         continue;
-      const full = join43(rootDir, child);
+      const full = join42(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
       try {
-        st = statSync16(full);
+        st = statSync15(full);
       } catch {
         continue;
       }
@@ -10943,18 +10889,18 @@ function resolveMembers(rootDir, declared, selfBasename) {
   }
   if (declared.length === 0) {
     for (const child of children) {
-      const full = join43(rootDir, child);
+      const full = join42(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
       try {
-        st = statSync16(full);
+        st = statSync15(full);
       } catch {
         continue;
       }
       if (!st.isDirectory())
         continue;
-      if (!existsSync23(join43(full, ".loki", "app.json")))
+      if (!existsSync23(join42(full, ".loki", "app.json")))
         continue;
       seen.add(full);
       out2.push(full);
@@ -10967,25 +10913,25 @@ function cacheKey(manifestPaths) {
   for (const p of manifestPaths.sort()) {
     let mtime = 0;
     try {
-      mtime = statSync16(p).mtimeMs;
+      mtime = statSync15(p).mtimeMs;
     } catch {}
     parts.push(`${p}:${mtime}`);
   }
-  return createHash10("sha256").update(parts.join("|")).digest("hex");
+  return createHash9("sha256").update(parts.join("|")).digest("hex");
 }
 function writeCache(targetDir, key, result) {
   try {
-    const cacheDir = join43(targetDir, ".loki", "state");
+    const cacheDir = join42(targetDir, ".loki", "state");
     mkdirSync13(cacheDir, { recursive: true });
-    const cachePath = join43(cacheDir, "project-graph.json");
-    writeFileSync15(cachePath, JSON.stringify({ key, result }, null, 2), "utf8");
+    const cachePath = join42(cacheDir, "project-graph.json");
+    writeFileSync16(cachePath, JSON.stringify({ key, result }, null, 2), "utf8");
   } catch {}
 }
 function discoverProjectGraph(targetDir) {
   const absTarget = resolve12(targetDir);
-  const targetManifest = join43(absTarget, ".loki", "app.json");
-  const parentDir = dirname13(absTarget);
-  const parentManifest = join43(parentDir, ".loki", "app.json");
+  const targetManifest = join42(absTarget, ".loki", "app.json");
+  const parentDir = dirname12(absTarget);
+  const parentManifest = join42(parentDir, ".loki", "app.json");
   const examined = [];
   let chosenManifest = null;
   let chosenRoot = "";
@@ -11005,7 +10951,7 @@ function discoverProjectGraph(targetDir) {
   const members = resolveMembers(chosenRoot, declared, basename16(absTarget));
   const filtered = [];
   for (const m of members) {
-    const sibManifestPath = join43(m, ".loki", "app.json");
+    const sibManifestPath = join42(m, ".loki", "app.json");
     if (existsSync23(sibManifestPath)) {
       examined.push(sibManifestPath);
       const sibManifest = readManifest(sibManifestPath);
@@ -11020,161 +10966,26 @@ function discoverProjectGraph(targetDir) {
     root: chosenRoot,
     members: filtered,
     sharedMemoryDir: chosenManifest.shared_memory_dir
-  };
-  writeCache(absTarget, cacheKey(examined), result);
-  return result;
-}
-var APP_ID_REGEX, SUPPORTED_SCHEMA_VERSION = 1;
-var init_project_graph = __esm(() => {
-  APP_ID_REGEX = /^[a-z0-9-]{3,40}$/;
-});
-
-// ../../loki-ts/src/util/shell.ts
-async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES) {
-  const reader = stream.getReader();
-  const decoder = new TextDecoder;
-  let out2 = "";
-  let total = 0;
-  try {
-    while (total < maxBytes) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      if (!value)
-        continue;
-      total += value.byteLength;
-      if (total > maxBytes) {
-        const keep = value.byteLength - (total - maxBytes);
-        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
-        break;
-      }
-      out2 += decoder.decode(value, { stream: true });
-    }
-    out2 += decoder.decode();
-  } finally {
-    try {
-      await reader.cancel();
-    } catch {}
-    reader.releaseLock();
-  }
-  return out2;
-}
-async function run(argv, opts = {}) {
-  const proc = Bun.spawn({
-    cmd: [...argv],
-    stdout: "pipe",
-    stderr: "pipe",
-    env: opts.env ? { ...process.env, ...opts.env } : process.env,
-    cwd: opts.cwd
-  });
-  let timer;
-  let killTimer;
-  if (opts.timeoutMs && opts.timeoutMs > 0) {
-    timer = setTimeout(() => {
-      try {
-        proc.kill("SIGTERM");
-      } catch {}
-      killTimer = setTimeout(() => {
-        try {
-          proc.kill("SIGKILL");
-        } catch {}
-      }, 2000);
-    }, opts.timeoutMs);
-  }
-  try {
-    const [stdout, stderr, exitCode] = await Promise.all([
-      readStreamCapped(proc.stdout),
-      new Response(proc.stderr).text(),
-      proc.exited
-    ]);
-    return { stdout, stderr, exitCode };
-  } finally {
-    if (timer)
-      clearTimeout(timer);
-    if (killTimer)
-      clearTimeout(killTimer);
-  }
-}
-var MAX_STDOUT_BYTES;
-var init_shell = __esm(() => {
-  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
-});
-
-// ../../loki-ts/src/e10ext/budget_cap.ts
-var DEFAULT_MAX_COST_USD;
-var init_budget_cap = __esm(() => {
-  init_budget();
-  DEFAULT_MAX_COST_USD = loadDefaultMaxCostUsd();
-});
-
-// ../../loki-ts/src/runner/retry_class.ts
-var init_retry_class = () => {};
-
-// ../../loki-ts/src/features/speed/unit_mode.ts
-import { closeSync as closeSync7, constants as constants2, fstatSync as fstatSync5, lstatSync as lstatSync8, openSync as openSync7, readSync as readSync6, realpathSync as realpathSync16 } from "fs";
-function readBounded(path) {
-  const l = lstatSync8(path);
-  if (l.isSymbolicLink() || !l.isFile() || l.size > MAX_SPEC_BYTES)
-    return null;
-  const fd = openSync7(path, constants2.O_RDONLY | constants2.O_NOFOLLOW | constants2.O_NONBLOCK);
-  try {
-    const st = fstatSync5(fd);
-    if (!st.isFile() || st.size > MAX_SPEC_BYTES)
-      return null;
-    const buf = Buffer.alloc(st.size + 1);
-    let n2 = 0;
-    for (;; ) {
-      const r = readSync6(fd, buf, n2, buf.length - n2, null);
-      if (r <= 0)
-        break;
-      n2 += r;
-      if (n2 >= buf.length)
-        return null;
-    }
-    return buf.subarray(0, n2).toString("utf8");
-  } finally {
-    closeSync7(fd);
-  }
-}
-function parseText(txt) {
-  try {
-    const j = JSON.parse(txt), ws = strs(j.writeSet), pack = strs(j.pack), tb = j.tokenBudget;
-    if (typeof j.id !== "string" || !j.id || !ws || ws.length === 0 || !pack || typeof tb !== "number" || !Number.isFinite(tb) || !(tb > 0) || tb > MAX_TOKEN_BUDGET)
-      return null;
-    return { id: j.id, writeSet: ws, pack, tokenBudget: tb };
-  } catch {
-    return null;
-  }
-}
-function parseSpec(path) {
-  try {
-    const txt = readBounded(path);
-    return txt === null ? null : parseText(txt);
-  } catch {
-    return null;
-  }
-}
-function unitSpec(env = process.env) {
-  const path = env["LOKI_UNIT_SPEC"], frozen = env["LOKI_UNIT_SPEC_FROZEN"];
-  if (env["LOKI_SPEED"] === "0" || !path)
-    return null;
-  if (frozen !== undefined)
-    return frozen.length <= MAX_SPEC_BYTES ? parseText(frozen) : null;
-  if (!memo.has(path))
-    memo.set(path, parseSpec(path));
-  return memo.get(path) ?? null;
-}
-function unitFlags(staged, env = process.env, pre = {}) {
-  const s = unitSpec(env);
-  return s ? staged.filter(({ f }) => !inWriteSet(s, f) && !Object.hasOwn(pre, f)).map(({ f }) => f) : null;
+  };
+  writeCache(absTarget, cacheKey(examined), result);
+  return result;
 }
-var MAX_SPEC_BYTES, MAX_TOKEN_BUDGET = 1e9, norm3 = (p) => p.replace(/^\.\//, ""), CTRL, strs = (v) => Array.isArray(v) && v.every((x) => typeof x === "string" && !CTRL.test(x)) ? v.map(norm3) : null, memo, inWriteSet = (spec, f) => spec.writeSet.some((w) => w.endsWith("/") ? f.startsWith(w) : f === w);
-var init_unit_mode = __esm(() => {
-  MAX_SPEC_BYTES = 1024 * 1024;
-  CTRL = /[\x00-\x1f\x7f]/;
-  memo = new Map;
+var APP_ID_REGEX, SUPPORTED_SCHEMA_VERSION = 1;
+var init_project_graph = __esm(() => {
+  APP_ID_REGEX = /^[a-z0-9-]{3,40}$/;
+});
+
+// ../../loki-ts/src/e10ext/budget_cap.ts
+var DEFAULT_MAX_COST_USD;
+var init_budget_cap = __esm(() => {
+  init_yaml_key();
+  init_budget();
+  DEFAULT_MAX_COST_USD = loadDefaultMaxCostUsd();
 });
 
+// ../../loki-ts/src/runner/retry_class.ts
+var init_retry_class = () => {};
+
 // ../../loki-ts/src/e10ext/repomemory.ts
 var init_repomemory = __esm(() => {
   init_cache();
@@ -11213,14 +11024,15 @@ var init_steer = __esm(() => {
 });
 
 // ../../loki-ts/src/util/pr_lessons.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync14, readFileSync as readFileSync31 } from "fs";
-import { dirname as dirname14, join as join44 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync14, readFileSync as readFileSync30 } from "fs";
+import { dirname as dirname13, join as join43 } from "path";
+import { createHash as createHash10 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
   if (!existsSync24(p))
     return [];
   try {
-    const j = JSON.parse(readFileSync31(p, "utf-8"));
+    const j = JSON.parse(readFileSync30(p, "utf-8"));
     return Array.isArray(j.lessons) ? j.lessons : [];
   } catch {
     return [];
@@ -11228,9 +11040,28 @@ function loadLessons(repoDir) {
 }
 function save(repoDir, lessons) {
   const p = lessonsPath(repoDir);
-  mkdirSync14(dirname14(p), { recursive: true });
+  mkdirSync14(dirname13(p), { recursive: true });
   atomicWriteJson(p, { version: 2, lessons });
 }
+function appendReceiptFact(repoDir, f, now2 = () => new Date) {
+  const id = `rcp-${createHash10("sha256").update(f.runId).digest("hex").slice(0, 12)}`;
+  const lessons = loadLessons(repoDir);
+  if (lessons.some((l) => l.id === id))
+    return false;
+  const cited = f.receiptSha256 !== null;
+  const title = f.title.replace(/\s+/g, " ").trim().slice(0, 200);
+  lessons.push({
+    id,
+    kind: "receipt",
+    text: `Run ${f.runId} sealed ${f.verdict}: ${title}`,
+    source: { pr: `run:${f.runId}`, pr_url: "", comment_url: "", kind: "receipt", author: "loki" },
+    learned_at: now2().toISOString(),
+    uses: [],
+    justified_by: { run_id: f.runId, receipt_sha256: f.receiptSha256, verdict: cited ? f.verdict : "unverified" }
+  });
+  save(repoDir, lessons);
+  return true;
+}
 function recordRunVerdict(repoDir, runId, verdict) {
   const lessons = loadLessons(repoDir);
   let dirty = false;
@@ -11243,9 +11074,10 @@ function recordRunVerdict(repoDir, runId, verdict) {
   if (dirty)
     save(repoDir, lessons);
 }
-var lessonsPath = (repoDir) => join44(repoDir, ".loki", "memory", "semantic", "pr-lessons.json");
+var lessonsPath = (repoDir) => join43(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
 var init_pr_lessons = __esm(() => {
   init_atomic();
+  KINDS = new Set(["pr", "receipt", "ticket", "rejected"]);
 });
 
 // ../../loki-ts/src/runner/model_downgrades.ts
@@ -11258,19 +11090,19 @@ var init_model_downgrades = __esm(() => {
 var init_mcp_config = () => {};
 
 // ../../loki-ts/src/providers/claude_flags.ts
-import { existsSync as existsSync25, readFileSync as readFileSync32 } from "fs";
-import { resolve as resolvePath, dirname as dirname15 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync31 } from "fs";
+import { resolve as resolvePath, dirname as dirname14 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function designArchetypesText() {
   try {
-    const moduleDir = dirname15(fileURLToPath3(import.meta.url));
+    const moduleDir = dirname14(fileURLToPath3(import.meta.url));
     for (const rel of [
       ["..", "..", "..", "references", "design-archetypes.md"],
       ["..", "..", "references", "design-archetypes.md"]
     ]) {
       const p = resolvePath(moduleDir, ...rel);
       if (existsSync25(p))
-        return readFileSync32(p, "utf8");
+        return readFileSync31(p, "utf8");
     }
   } catch {}
   return "";
@@ -11348,14 +11180,14 @@ var init_providers = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/router/route_record.ts
-import { existsSync as existsSync26, lstatSync as lstatSync9, mkdirSync as mkdirSync15, readFileSync as readFileSync33, writeFileSync as writeFileSync16 } from "fs";
-import { join as join45 } from "path";
+import { existsSync as existsSync26, lstatSync as lstatSync9, mkdirSync as mkdirSync15, readFileSync as readFileSync32, writeFileSync as writeFileSync17 } from "fs";
+import { join as join44 } from "path";
 function loadRouteRecord(runDir) {
   try {
-    const p = join45(runDir, ROUTE_RECORD_FILE);
+    const p = join44(runDir, ROUTE_RECORD_FILE);
     if (!existsSync26(p) || !lstatSync9(p).isFile())
       return;
-    const v = JSON.parse(readFileSync33(p, "utf8"));
+    const v = JSON.parse(readFileSync32(p, "utf8"));
     return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
   } catch {
     return;
@@ -11365,7 +11197,7 @@ var ROUTE_RECORD_FILE = "route.json";
 var init_route_record = () => {};
 
 // ../../loki-ts/src/runner/router/history_store.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync16, readFileSync as readFileSync34, renameSync as renameSync8, rmSync as rmSync11, writeFileSync as writeFileSync17 } from "fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync16, readFileSync as readFileSync33, renameSync as renameSync7, rmSync as rmSync11, writeFileSync as writeFileSync18 } from "fs";
 import { resolve as resolve13 } from "path";
 function validRun(v) {
   if (typeof v !== "object" || v === null)
@@ -11381,7 +11213,7 @@ function readRunHistory(key, cacheRoot) {
   if (!existsSync27(path))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync34(path, "utf8"));
+    const parsed = JSON.parse(readFileSync33(path, "utf8"));
     const runs2 = parsed?.runs;
     return Array.isArray(runs2) ? runs2.filter(validRun) : [];
   } catch {
@@ -11395,8 +11227,8 @@ function appendRunOutcome(key, outcome, cacheRoot) {
     const target = historyPath(key, cacheRoot);
     const tmp = `${target}.${process.pid}.tmp`;
     try {
-      writeFileSync17(tmp, JSON.stringify({ runs: runs2 }));
-      renameSync8(tmp, target);
+      writeFileSync18(tmp, JSON.stringify({ runs: runs2 }));
+      renameSync7(tmp, target);
     } catch (e) {
       rmSync11(tmp, { force: true, recursive: false });
       throw e;
@@ -11415,7 +11247,7 @@ var init_history_store = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/router/history.ts
-import { dirname as dirname16, join as join46, resolve as resolve14 } from "path";
+import { dirname as dirname15, join as join45, resolve as resolve14 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function shapeKey(model) {
   if (!model || model.status !== "ok")
@@ -11444,7 +11276,7 @@ var init_history = __esm(() => {
   init_discover2();
   init_gather();
   init_history_store();
-  SHAPE_DEFAULTS_FILE = resolve14(dirname16(fileURLToPath4(import.meta.url)), "..", "..", "..", "data", "router-shape-defaults.json");
+  SHAPE_DEFAULTS_FILE = resolve14(dirname15(fileURLToPath4(import.meta.url)), "..", "..", "..", "data", "router-shape-defaults.json");
 });
 
 // ../../loki-ts/src/runner/router/plan_route.ts
@@ -11575,7 +11407,7 @@ var init_worker = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/package_suite.ts
-import { join as join47 } from "path";
+import { join as join46 } from "path";
 async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   const api = loadProjectApi(repoDir);
   if (!isMultiRoot(api))
@@ -11586,7 +11418,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   for (const pkg of withTests) {
     const tc = pkg.commands.test, name = `full suite: ${pkg.name}`, cmd = `(cd ${tc.cwd} && ${tc.cmd})`;
     const started = Date.now();
-    const r = await run(["bash", "-c", tc.cmd], { cwd: join47(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const r = await run(["bash", "-c", tc.cmd], { cwd: join46(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
     const duration_s = (Date.now() - started) / 1000;
     if (signal.aborted) {
       checks.push({ name, cmd, result: "not_run", duration_s });
@@ -11595,7 +11427,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
     }
     const out2 = `${r.stdout}
 ${r.stderr}`;
-    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join47(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join46(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
     if (lr) {
       checks.push({ name, cmd, result: "not_run", duration_s });
       notProven.add(`${lr} (${name}; harness-owned)`);
@@ -11628,8 +11460,8 @@ __export(exports_deep, {
   DEFAULT_SECRET_SCAN_SH: () => DEFAULT_SECRET_SCAN_SH,
   DEFAULT_PUSH_SH: () => DEFAULT_PUSH_SH
 });
-import { existsSync as existsSync28, mkdirSync as mkdirSync17, writeFileSync as writeFileSync18 } from "fs";
-import { join as join48 } from "path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync17, writeFileSync as writeFileSync19 } from "fs";
+import { join as join47 } from "path";
 async function runFullSuite(ctx, signal, opts, checks, notProven) {
   if (await runPackageSuites(ctx.repoDir, signal, { path: opts.path, timeoutMs: opts.fullSuiteTimeoutMs ?? FULL_SUITE_TIMEOUT_MS, baseSha: ctx.baseSha }, checks, notProven))
     return;
@@ -11726,7 +11558,7 @@ async function runSecretScan(ctx, changed, opts, checks, notProven) {
   }
   const inline = 'script="$1"; shift; . "$script" || exit 3; hit=0; for f in "$@"; do if _commit_scan_secret_file "$f" || _commit_path_looks_secret "$f"; then printf "%s\\n" "$f"; hit=1; fi; done; exit "$hit"';
   const started = Date.now();
-  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join48(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
+  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join47(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
   const durationS = (Date.now() - started) / 1000;
   if (r.exitCode === 3) {
     checks.push({ name, cmd: "secret-scan.sh", result: "not_run", duration_s: durationS });
@@ -11767,8 +11599,8 @@ async function postResults(ctx, opts, checks, notProven, statusState) {
   const prNumber = prUrl ? PR_NUMBER_RE.exec(prUrl)?.[1] : undefined;
   if (prNumber) {
     mkdirSync17(ctx.runDir, { recursive: true });
-    const bodyFile = join48(ctx.runDir, "deep-comment.md");
-    writeFileSync18(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
+    const bodyFile = join47(ctx.runDir, "deep-comment.md");
+    writeFileSync19(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
     const commentResult = await run(["bash", scriptPath, ...commentArgv(prNumber, bodyFile)], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
     if (commentResult.exitCode !== 0)
       out2.push(`deep comment not posted (engine10-push.sh exit ${commentResult.exitCode})`);
@@ -11821,7 +11653,7 @@ async function runDeep(ctx, signal, opts = {}) {
   const sig = signReceipt(`${ctx.runId}-deep`, addendumSha256);
   const addendum = { ...addendumBody, addendum_sha256: addendumSha256, verification: { jwt: sig.jwt, kid: sig.kid } };
   mkdirSync17(ctx.runDir, { recursive: true });
-  writeFileSync18(join48(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
+  writeFileSync19(join47(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
 `);
   const pushNotProven = await postResults(ctx, opts, checks, notProvenList, statusState);
   const allNotProven = [...notProvenList, ...pushNotProven];
@@ -11866,7 +11698,7 @@ var init_deep = __esm(() => {
 // ../../loki-ts/src/engine10/stages/verify.ts
 import { existsSync as existsSync29, mkdtempSync as mkdtempSync6, realpathSync as realpathSync17, rmSync as rmSync12 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-import { dirname as dirname17, isAbsolute as isAbsolute6, join as join49, relative as relative5 } from "path";
+import { dirname as dirname16, isAbsolute as isAbsolute6, join as join48, relative as relative5 } from "path";
 function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
   const inRepo = (p) => {
     try {
@@ -11877,7 +11709,7 @@ function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
     }
   };
   const venvEnv = process.env["VIRTUAL_ENV"];
-  const project = [join49(repoDir, ".venv", "bin", bin), join49(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join49(venvEnv, "bin", bin)] : []].find(existsSync29);
+  const project = [join48(repoDir, ".venv", "bin", bin), join48(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join48(venvEnv, "bin", bin)] : []].find(existsSync29);
   return project ? [project, "project"] : [Bun.which(fallback) ? fallback : lastResort, "system"];
 }
 function runnerCmd(t, repoDir) {
@@ -11897,7 +11729,7 @@ function runnerCmd(t, repoDir) {
     case "npm":
       return ["npm", ["test", "--silent"]];
     case "go":
-      return ["go", ["test", "-json", `./${dirname17(t.path)}`]];
+      return ["go", ["test", "-json", `./${dirname16(t.path)}`]];
     case "cargo":
       return ["cargo", ["test"]];
   }
@@ -11995,7 +11827,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   const sus = pairs.filter(({ c }) => rel.has(c.name) && c.result === "pass");
   if (!(un.some(({ c }) => c.result === "fail" && c.ids?.length) || sus.length) || signal.aborted)
     return out2;
-  const dir = mkdtempSync6(join49(tmpdir8(), "e10-base-"));
+  const dir = mkdtempSync6(join48(tmpdir8(), "e10-base-"));
   const git3 = (args) => {
     safeGit(ctx.repoDir, args, { stdio: "ignore", repoDrivers: true });
   };
@@ -12030,7 +11862,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   return out2;
 }
 function isLokiModeRepo(repoDir) {
-  return existsSync29(join49(repoDir, "scripts", "select-tests.sh"));
+  return existsSync29(join48(repoDir, "scripts", "select-tests.sh"));
 }
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
@@ -12047,9 +11879,9 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   }
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
-    if (existsSync29(join49(g.cwd, "tsconfig.json")))
+    if (existsSync29(join48(g.cwd, "tsconfig.json")))
       await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
-    if (ESLINT_CONFIGS.some((f) => existsSync29(join49(g.cwd, f))))
+    if (ESLINT_CONFIGS.some((f) => existsSync29(join48(g.cwd, f))))
       await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
   }
 }
@@ -12181,25 +12013,25 @@ var init_verify = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync30, readdirSync as readdirSync14, readFileSync as readFileSync35 } from "fs";
-import { dirname as dirname18, join as join50 } from "path";
-function parseJsonc(text3) {
+import { existsSync as existsSync30, readdirSync as readdirSync13, readFileSync as readFileSync34 } from "fs";
+import { dirname as dirname17, join as join49 } from "path";
+function parseJsonc(text2) {
   let out2 = "", i = 0;
-  while (i < text3.length) {
-    const c = text3[i], n2 = text3[i + 1];
+  while (i < text2.length) {
+    const c = text2[i], n2 = text2[i + 1];
     if (c === '"') {
       let j = i + 1;
-      while (j < text3.length && text3[j] !== '"')
-        j += text3[j] === "\\" ? 2 : 1;
-      out2 += text3.slice(i, j + 1);
+      while (j < text2.length && text2[j] !== '"')
+        j += text2[j] === "\\" ? 2 : 1;
+      out2 += text2.slice(i, j + 1);
       i = j + 1;
     } else if (c === "/" && n2 === "/") {
-      while (i < text3.length && text3[i] !== `
+      while (i < text2.length && text2[i] !== `
 `)
         i++;
     } else if (c === "/" && n2 === "*") {
-      const e = text3.indexOf("*/", i + 2);
-      i = e < 0 ? text3.length : e + 2;
+      const e = text2.indexOf("*/", i + 2);
+      i = e < 0 ? text2.length : e + 2;
     } else {
       out2 += c;
       i++;
@@ -12208,7 +12040,7 @@ function parseJsonc(text3) {
   return JSON.parse(out2.replace(/,(\s*[}\]])/g, "$1"));
 }
 function moduleOf(file, depth = 0) {
-  const j = readJson5(file);
+  const j = readJson4(file);
   if (!j || depth > 4)
     return null;
   const m = j.compilerOptions?.module;
@@ -12217,25 +12049,25 @@ function moduleOf(file, depth = 0) {
   const ext = typeof j.extends === "string" ? j.extends : null;
   if (!ext || !ext.startsWith("."))
     return null;
-  const next = join50(dirname18(file), ext.endsWith(".json") ? ext : `${ext}.json`);
+  const next = join49(dirname17(file), ext.endsWith(".json") ? ext : `${ext}.json`);
   return existsSync30(next) ? moduleOf(next, depth + 1) : null;
 }
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
   try {
-    names = readdirSync14(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
+    names = readdirSync13(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
   } catch {
     return null;
   }
   let packageType = null, tsModule = null;
   for (const n2 of names) {
-    const j = readJson5(join50(pkgDir, n2));
+    const j = readJson4(join49(pkgDir, n2));
     if (!j)
       continue;
     if (packageType === null && typeof j.type === "string" && typeof j.name === "string")
       packageType = j.type;
     if (tsModule === null && j.compilerOptions !== undefined)
-      tsModule = moduleOf(join50(pkgDir, n2));
+      tsModule = moduleOf(join49(pkgDir, n2));
   }
   if (packageType === null && tsModule === null)
     return null;
@@ -12255,9 +12087,9 @@ function conventionViolation(c, fileName, content) {
   const code = content.replace(/\/\*[\s\S]*?\*\//g, "").replace(/(^|[^:])\/\/.*$/gm, "$1").replace(/(["'`])(?:\\.|(?!\1)[^\\\n])*\1/g, '""');
   return /\bimport\.meta\b/.test(code) ? "import.meta is not allowed in a CommonJS package (TS1470)" : null;
 }
-var readJson5 = (p) => {
+var readJson4 = (p) => {
   try {
-    const v = parseJsonc(readFileSync35(p, "utf8"));
+    const v = parseJsonc(readFileSync34(p, "utf8"));
     return v && typeof v === "object" && !Array.isArray(v) ? v : null;
   } catch {
     return null;
@@ -12267,15 +12099,15 @@ var init_conventions = () => {};
 
 // ../../loki-ts/src/engine10/stages/wall.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync31, mkdirSync as mkdirSync18, mkdtempSync as mkdtempSync7, readFileSync as readFileSync36, readdirSync as readdirSync15, realpathSync as realpathSync18, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync18, mkdtempSync as mkdtempSync7, readFileSync as readFileSync35, readdirSync as readdirSync14, realpathSync as realpathSync18, rmSync as rmSync13, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
-import { dirname as dirname19, isAbsolute as isAbsolute7, join as join51, relative as relative6 } from "path";
+import { dirname as dirname18, isAbsolute as isAbsolute7, join as join50, relative as relative6 } from "path";
 function pytestCollectionIsRed(output, repoDir) {
   if (/ModuleNotFoundError/.test(output))
     return false;
   const real2 = (p) => {
     try {
-      return realpathSync18(isAbsolute7(p) ? p : join51(repoDir, p));
+      return realpathSync18(isAbsolute7(p) ? p : join50(repoDir, p));
     } catch {
       return null;
     }
@@ -12312,7 +12144,7 @@ function pytestCollectionIsRed(output, repoDir) {
 }
 function moduleUnderRepo(repoDir, name) {
   const rel = name.replace(/\./g, "/");
-  return existsSync31(join51(repoDir, `${rel}.py`)) || existsSync31(join51(repoDir, rel, "__init__.py"));
+  return existsSync31(join50(repoDir, `${rel}.py`)) || existsSync31(join50(repoDir, rel, "__init__.py"));
 }
 function pytestExit1IsRed(output) {
   if (/^!+ _pytest\.outcomes\.Exit\b/m.test(output))
@@ -12389,13 +12221,16 @@ ${r.stderr ?? ""}`), repoDir, interpreter);
     return { pass, fail, not_run };
   }
 }
-function buildWallBrief(task, repomapText = "", runners = [], hasManifest = false, conventions = "") {
+function buildWallBrief(task, repomapText = "", runners = [], hasManifest = false, conventions = "", acceptance = []) {
   return withStagePrefix([
     "You are the Loki 10 Wall author.",
     `You cannot see the repository. This directory holds only task.md and repomap.txt${hasManifest ? " and wall_manifest.txt (signatures, runner config, test layout and test-style examples)" : ""}.`,
     ...repomapText ? [`Repository paths (repomap.txt):
 ${repomapText}`] : [],
     ...taskBlock(task),
+    ...acceptance.length ? [`Acceptance criteria frozen for this unit (each must be covered by a test):
+${acceptance.map((a) => `Acceptance: ${a}`).join(`
+`)}`] : [],
     "Write behavioral acceptance tests that prove the task is done. A test that errors on import, uses another framework's globals, or fails for a reason unrelated to the task is discarded.",
     `Test runner: ${runners.map((r) => RUNNER_HINT[r]).find(Boolean) ?? "the framework named in repomap.txt"}`,
     ...conventions ? [conventions] : [],
@@ -12407,22 +12242,22 @@ ${repomapText}`] : [],
 function loadTaskText(ctx, fromPrior) {
   if (fromPrior)
     return fromPrior;
-  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join51(ctx.runDir, "issue.json");
+  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join50(ctx.runDir, "issue.json");
   if (existsSync31(issueJsonPath)) {
     try {
-      const issue = JSON.parse(readFileSync36(issueJsonPath, "utf8"));
-      const text3 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
+      const issue = JSON.parse(readFileSync35(issueJsonPath, "utf8"));
+      const text2 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
 
 `);
-      if (text3)
-        return text3;
+      if (text2)
+        return text2;
     } catch {}
   }
   return process.env.LOKI_E10_TASK_TEXT ?? "";
 }
 function wallTargetDir(repoDir, existingTests) {
   const first = existingTests[0];
-  return first ? join51(repoDir, dirname19(first.path)) : join51(repoDir, "tests");
+  return first ? join50(repoDir, dirname18(first.path)) : join50(repoDir, "tests");
 }
 function guessRunner(fileName, runners) {
   if (fileName.endsWith(".py"))
@@ -12453,14 +12288,14 @@ async function wallAuthor(ctx, signal) {
   const tree = prior.intake?.tree;
   const repomapText = repoMapText(ctx.repoDir, tree, repomapRef, WALL_MAP_MAX_LINES);
   const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative6(ctx.repoDir, targetDir)}/x`);
-  const conv2 = readPackageConventions(join51(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
-  const cwd = mkdtempSync7(join51(tmpdir9(), "loki-e15-wall-"));
+  const conv2 = readPackageConventions(join50(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
+  const cwd = mkdtempSync7(join50(tmpdir9(), "loki-e15-wall-"));
   const wm = wallManifestFor(ctx.repoDir, tree, task);
   for (const [n2, c] of [["task.md", task], ["repomap.txt", repomapText], ...wm ? [["wall_manifest.txt", wm.text]] : []])
-    writeFileSync19(join51(cwd, n2), c, "utf8");
+    writeFileSync20(join50(cwd, n2), c, "utf8");
   const session = await ctx.sessions.run({
     stage: "wall",
-    brief: buildWallBrief(task, repomapText, runners, !!wm, conventionsBrief(conv2)),
+    brief: buildWallBrief(task, repomapText, runners, !!wm, conventionsBrief(conv2), unitSpec()?.acceptance ?? []),
     tier: "development",
     model: wallModel(),
     iterationId: `${ctx.runId}-wall`,
@@ -12472,15 +12307,15 @@ async function wallAuthor(ctx, signal) {
     rmSync13(cwd, { recursive: true, force: true });
     return done({ status: "failed", data: {}, reason: "wall session aborted, killed, or timed out", killed: true });
   }
-  const generated = readdirSync15(cwd).filter((f) => f.startsWith(WALL_PREFIX));
-  const sealedDir = join51(ctx.runDir, "wall");
+  const generated = readdirSync14(cwd).filter((f) => f.startsWith(WALL_PREFIX));
+  const sealedDir = join50(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync18(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync36(join51(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
-    writeFileSync19(join51(sealedDir, name), content, "utf8");
+    const content = readFileSync35(join50(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
+    writeFileSync20(join50(sealedDir, name), content, "utf8");
     if (bad)
       discarded.push({ file: name, reason: `${bad}; wall test did not compile under the package config` });
     else
@@ -12500,8 +12335,8 @@ function installWall(ctx, a, baseDir, opts = {}) {
     const content = contents.get(name);
     if (content === undefined)
       continue;
-    const dest = join51(targetDir, name), runner = guessRunner(name, runners);
-    writeFileSync19(dest, content, "utf8");
+    const dest = join50(targetDir, name), runner = guessRunner(name, runners);
+    writeFileSync20(dest, content, "utf8");
     sealedFiles.push({ path: dest, sha256: sha2562(content) });
     readOnlyFiles.push({ path: dest, content });
     if (runner)
@@ -12510,7 +12345,7 @@ function installWall(ctx, a, baseDir, opts = {}) {
   ctx.emit("wall.sealed", "wall", { files: sealedFiles, ...a.manifestSha256 ? { manifest_sha256: a.manifestSha256 } : {} });
   const baseRunner = opts.baseRunner ?? new RealBaseTestRunner, baseRun = { pass: 0, fail: 0, not_run: discarded.length }, notRunFiles = [];
   for (const t of wallTests) {
-    const r = baseRunner.run(baseDir, [t]), abs = join51(ctx.repoDir, t.path);
+    const r = baseRunner.run(baseDir, [t]), abs = join50(ctx.repoDir, t.path);
     baseRun.pass += r.pass;
     baseRun.fail += r.fail;
     baseRun.not_run += r.not_run ?? 0;
@@ -12543,6 +12378,7 @@ async function runWall(ctx, signal, opts = {}) {
 var WALL_PREFIX = "loki_wall_", BASE_RUN_TIMEOUT_MS = 60000, WALL_MAP_MAX_LINES = 200, wallStage, stage2;
 var init_wall = __esm(() => {
   init_types();
+  init_unit_mode();
   init_lean_prefix();
   init_wall_hints();
   init_sizing();
@@ -12561,15 +12397,15 @@ var init_wall = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync4, closeSync as closeSync8, lstatSync as lstatSync10, mkdirSync as mkdirSync19, openSync as openSync8, readFileSync as readFileSync37, realpathSync as realpathSync19, rmdirSync, unlinkSync as unlinkSync4, writeFileSync as writeFileSync20 } from "fs";
-import { dirname as dirname20, join as join52, relative as relative7, sep as sep11 } from "path";
+import { chmodSync as chmodSync4, closeSync as closeSync8, lstatSync as lstatSync10, mkdirSync as mkdirSync19, openSync as openSync8, readFileSync as readFileSync36, realpathSync as realpathSync19, rmdirSync, unlinkSync as unlinkSync4, writeFileSync as writeFileSync21 } from "fs";
+import { dirname as dirname19, join as join51, relative as relative7, sep as sep11 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync19(repoDir), fp = join52(root, f), rel = relative7(root, dirname20(fp));
+  const root = realpathSync19(repoDir), fp = join51(root, f), rel = relative7(root, dirname19(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
   for (const part of rel === "" ? [] : rel.split(sep11)) {
-    cur = join52(cur, part);
+    cur = join51(cur, part);
     let st2;
     try {
       st2 = lstatSync10(cur);
@@ -12586,7 +12422,7 @@ function safeRestore(repoDir, f, want, mode) {
   } catch {
     st = null;
   }
-  if (st?.isFile() && readFileSync37(fp).equals(want)) {
+  if (st?.isFile() && readFileSync36(fp).equals(want)) {
     chmodSync4(fp, mode);
     return;
   }
@@ -12598,7 +12434,7 @@ function safeRestore(repoDir, f, want, mode) {
   }
   const fd = openSync8(fp, "wx", mode);
   try {
-    writeFileSync20(fd, want);
+    writeFileSync21(fd, want);
   } finally {
     closeSync8(fd);
   }
@@ -12608,10 +12444,10 @@ function alreadySatisfied(o) {
   const b = o.wall?.base_run ?? {};
   return o.intake?.already_satisfied === true || o.implement?.exit === "already_done" || typeof b.pass === "number" && b.pass > 0 && b.fail === 0 && (b.not_run ?? 0) === 0;
 }
-function catBlob(repoDir, sha3) {
-  const r = safeGitSpawn(repoDir, ["cat-file", "blob", sha3], { maxBuffer: 1 << 28 });
+function catBlob(repoDir, sha2) {
+  const r = safeGitSpawn(repoDir, ["cat-file", "blob", sha2], { maxBuffer: 1 << 28 });
   if (r.error || r.status !== 0)
-    throw r.error ?? new Error(`git cat-file blob ${sha3} failed`);
+    throw r.error ?? new Error(`git cat-file blob ${sha2} failed`);
   return r.stdout;
 }
 async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
@@ -12624,7 +12460,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join52(repoDir, f);
+    const fp = join51(repoDir, f);
     try {
       if (v.startsWith("!")) {
         const st = lstatSync10(fp);
@@ -12632,7 +12468,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
           throw new Error("changed, not snapshotted");
         continue;
       }
-      const [sha3, mode] = v.split(" "), want = catBlob(repoDir, sha3);
+      const [sha2, mode] = v.split(" "), want = catBlob(repoDir, sha2);
       safeRestore(repoDir, f, want, parseInt(mode ?? "644", 8));
     } catch {
       notProven.push(f);
@@ -12643,7 +12479,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync10(join52(repoDir, f));
+          const l = lstatSync10(join51(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -12676,9 +12512,9 @@ var init_preexisting_dirty = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/commit_filter.ts
-import { dirname as dirname21 } from "path";
+import { dirname as dirname20 } from "path";
 function dropSet(repoDir, staged, preexistingDirty, env = process.env) {
-  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname21(m) === dirname21(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
+  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || /(^|\/)loki_wall_[^/]*$/.test(f) || st === "A" && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname20(m) === dirname20(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
 }
 var parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []);
 var init_commit_filter = __esm(() => {
@@ -12687,7 +12523,7 @@ var init_commit_filter = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/scope.ts
-import { basename as basename18, dirname as dirname22 } from "path";
+import { basename as basename18, dirname as dirname21 } from "path";
 function contractText(o) {
   const c = o.intake?.contract_snapshot?.contract;
   return Array.isArray(c?.criteria) ? c.criteria.map((x) => typeof x?.text === "string" ? x.text : "").join(`
@@ -12698,18 +12534,18 @@ function outsideScope(o, staged) {
   const plan = typeof o.plan?.plan === "string" ? o.plan.plan : "";
   if (rel.length === 0 && plan.trim() === "")
     return null;
-  const text3 = `${plan}
+  const text2 = `${plan}
 ${typeof o.intake?.task === "string" ? o.intake.task : ""}
 ${contractText(o)}`, pre = o.intake?.preexisting_dirty ?? {};
-  const toks = surfaceTokens(text3), plannedDirs = new Set(rel.map((r) => dirname22(r)).filter((d) => d !== "."));
-  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text3, f) && !mentions(text3, basename18(f)) && !plannedDirs.has(dirname22(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
+  const toks = surfaceTokens(text2), plannedDirs = new Set(rel.map((r) => dirname21(r)).filter((d) => d !== "."));
+  return staged.filter(({ st, f }) => st !== "A" && !isTestFile(f) && !Object.hasOwn(pre, f) && !rel.includes(f) && !mentions(text2, f) && !mentions(text2, basename18(f)) && !plannedDirs.has(dirname21(f)) && !dirSegs(f).some((d) => toks.has(d))).map(({ f }) => f);
 }
 function flagOutsideScope(o, staged) {
   const unit = unitFlags(staged, process.env, o.intake?.preexisting_dirty ?? {});
   const un = outsideScope(o, staged), seen = new Set((unit ?? []).map(outsideNote));
   return [...(unit ?? []).map(outsideNote), ...un ? un.map(outsideNote).filter((n2) => !seen.has(n2)) : staged.length > 0 ? [SCOPE_UNDETERMINED] : []];
 }
-var SCOPE_UNDETERMINED = "scope not determined; all edits committed", outsideNote = (f) => `outside stated scope: ${f}`, esc2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), mentions = (text3, name) => new RegExp(`(?<![\\w./-])${esc2(name)}(?![\\w-]|\\.\\w)`).test(text3), STOP, stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w, surfaceTokens = (text3) => new Set((text3.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem)), dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
+var SCOPE_UNDETERMINED = "scope not determined; all edits committed", outsideNote = (f) => `outside stated scope: ${f}`, esc2 = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), mentions = (text2, name) => new RegExp(`(?<![\\w./-])${esc2(name)}(?![\\w-]|\\.\\w)`).test(text2), STOP, stem = (w) => w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w, surfaceTokens = (text2) => new Set((text2.toLowerCase().match(/[a-z][a-z0-9_-]{2,}/g) ?? []).filter((w) => !STOP.has(w)).map(stem)), dirSegs = (f) => f.split("/").slice(0, -1).map((d) => stem(d.toLowerCase()));
 var init_scope2 = __esm(() => {
   init_testmap();
   init_unit_mode();
@@ -12718,9 +12554,9 @@ var init_scope2 = __esm(() => {
 
 // ../../loki-ts/src/util/receipt_signer.ts
 import { createHash as createHash11, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync5, linkSync, mkdirSync as mkdirSync20, readFileSync as readFileSync38, statSync as statSync17, unlinkSync as unlinkSync5, writeFileSync as writeFileSync21 } from "fs";
+import { chmodSync as chmodSync5, linkSync, mkdirSync as mkdirSync20, readFileSync as readFileSync37, statSync as statSync16, unlinkSync as unlinkSync5, writeFileSync as writeFileSync22 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname23, join as join53 } from "path";
+import { dirname as dirname22, join as join52 } from "path";
 function canonicalJson(x) {
   const walk = (v) => {
     if (Array.isArray(v))
@@ -12739,21 +12575,21 @@ function loadSigningKey(generate = true) {
     let pem = inline ?? "";
     if (!inline) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join53(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
+      const file = given || join52(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        pem = readFileSync38(file);
+        pem = readFileSync37(file);
         if (!given) {
-          for (const [f, m] of [[file, 384], [dirname23(file), 448]])
-            if (statSync17(f).mode & 63)
+          for (const [f, m] of [[file, 384], [dirname22(file), 448]])
+            if (statSync16(f).mode & 63)
               chmodSync5(f, m);
         }
       } catch (e) {
         if (e.code !== "ENOENT" || !generate)
           return null;
-        mkdirSync20(dirname23(dirname23(file)), { recursive: true, mode: 448 });
-        mkdirSync20(dirname23(file), { recursive: true, mode: 448 });
+        mkdirSync20(dirname22(dirname22(file)), { recursive: true, mode: 448 });
+        mkdirSync20(dirname22(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
-        writeFileSync21(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
+        writeFileSync22(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
           linkSync(tmp, file);
         } catch (l) {
@@ -12762,7 +12598,7 @@ function loadSigningKey(generate = true) {
         } finally {
           unlinkSync5(tmp);
         }
-        pem = readFileSync38(file);
+        pem = readFileSync37(file);
       }
     }
     const k = createPrivateKey(pem);
@@ -12785,9 +12621,9 @@ var init_receipt_signer = () => {};
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn7 } from "child_process";
 import { createHash as createHash12, randomBytes as randomBytes4 } from "crypto";
-import { existsSync as existsSync32, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readdirSync as readdirSync16, readFileSync as readFileSync39, writeFileSync as writeFileSync22 } from "fs";
+import { existsSync as existsSync32, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readdirSync as readdirSync15, readFileSync as readFileSync38, writeFileSync as writeFileSync23 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname24, isAbsolute as isAbsolute8, join as join54, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute8, join as join53, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -12797,7 +12633,7 @@ function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join54(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join53(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -12810,10 +12646,10 @@ function checkScreens(runDir, screens) {
       return "evidence_screens entry is malformed";
     if (isAbsolute8(s.path) || normalize2(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join54(runDir, s.path);
+    const file = join53(runDir, s.path);
     let cur = runDir;
     for (const seg of normalize2(s.path).split(sep12)) {
-      cur = join54(cur, seg);
+      cur = join53(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
@@ -12860,11 +12696,11 @@ async function waitUp(url, ms, signal) {
 }
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join54(repoDir, f);
+    const p = join53(repoDir, f);
     if (!existsSync32(p))
       continue;
     try {
-      const txt = readFileSync39(p, "utf8");
+      const txt = readFileSync38(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -12878,24 +12714,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join54(runDir, relDir, "e2e");
+    const dir = join53(runDir, relDir, "e2e");
     mkdirSync21(dir, { recursive: true });
-    writeFileSync22(join54(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync22(join54(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    writeFileSync23(join53(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync23(join53(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join54(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join53(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
-      for (const e of readdirSync16(d, { withFileTypes: true })) {
-        const full = join54(d, e.name);
+      for (const e of readdirSync15(d, { withFileTypes: true })) {
+        const full = join53(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join54(relDir, "e2e", relative8(dir, full)));
+          rels.push(join53(relDir, "e2e", relative8(dir, full)));
       }
     };
-    walk(join54(dir, "out"));
+    walk(join53(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -12964,13 +12800,13 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
     const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
-    const appDir = boot ? join54(repoDir, boot.boot.cwd) : repoDir;
-    const pkgPath = join54(appDir, "package.json");
+    const appDir = boot ? join53(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join53(appDir, "package.json");
     let script = null;
     if (!boot) {
       if (!existsSync32(pkgPath))
         return skip("no package.json");
-      script = pickScript(JSON.parse(readFileSync39(pkgPath, "utf8")));
+      script = pickScript(JSON.parse(readFileSync38(pkgPath, "utf8")));
       if (!script)
         return skip("no dev, preview or start script");
     }
@@ -12997,20 +12833,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join54(runDir, "evidence");
+    const evRoot = join53(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
     mkdirSync21(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join54("evidence", randomBytes4(6).toString("hex"));
-      mkdirSync21(join54(runDir, rel0));
+      const rel0 = join53("evidence", randomBytes4(6).toString("hex"));
+      mkdirSync21(join53(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join54(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join54(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join54(runDir, rel)) && existsSync32(join54(runDir, rel)))
+        const rel = join53(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join53(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join53(runDir, rel)) && existsSync32(join53(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -13035,9 +12871,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join54(evRoot, randomBytes4(6).toString("hex"));
+    const hdir = join53(evRoot, randomBytes4(6).toString("hex"));
     mkdirSync21(hdir);
-    writeFileSync22(join54(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    writeFileSync23(join53(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -13060,14 +12896,14 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
   return ev.screens.length > 0 ? { evidence_screens: ev.screens } : {};
 }
 function receiptScreensProblem(receiptPath, receipt) {
-  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname24(receiptPath), receipt["evidence_screens"]);
+  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname23(receiptPath), receipt["evidence_screens"]);
 }
-var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash12("sha256").update(readFileSync39(p)).digest("hex"), playwrightBin = (repoDir) => {
-  const bin = join54(repoDir, "node_modules", ".bin", "playwright");
+var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash12("sha256").update(readFileSync38(p)).digest("hex"), playwrightBin = (repoDir) => {
+  const bin = join53(repoDir, "node_modules", ".bin", "playwright");
   return existsSync32(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
-  const d = join54(repoDir, "node_modules", "@playwright", "test");
-  return existsSync32(join54(d, "package.json")) ? d : null;
+  const d = join53(repoDir, "node_modules", "@playwright", "test");
+  return existsSync32(join53(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
@@ -13098,14 +12934,14 @@ var init_visual_evidence = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync33, readdirSync as readdirSync17, readFileSync as readFileSync40 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync16, readFileSync as readFileSync39 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join55 } from "path";
+import { join as join54 } from "path";
 function agentDirs(repoDir, env = process.env) {
-  return [env["LOKI_AGENTS_PROJECT_DIR"] || join55(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join55(env["XDG_CONFIG_HOME"] || join55(homedir9(), ".config"), "loki", "agents")];
+  return [env["LOKI_AGENTS_PROJECT_DIR"] || join54(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join54(env["XDG_CONFIG_HOME"] || join54(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
-  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync40(file, "utf8"));
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync39(file, "utf8"));
   if (!m)
     return null;
   const body = m[2].trim();
@@ -13123,14 +12959,14 @@ function loadRoleAgent(repoDir, role, env = process.env) {
       continue;
     let names;
     try {
-      names = readdirSync17(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
+      names = readdirSync16(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
     } catch {
       continue;
     }
     const ordered = [...names.filter((n2) => n2 === `${role}.md`), ...names.filter((n2) => n2 !== `${role}.md`)];
     for (const n2 of ordered) {
       try {
-        const a = parseAgent(join55(d, n2), n2.slice(0, -3));
+        const a = parseAgent(join54(d, n2), n2.slice(0, -3));
         if (a && a.role === role)
           return a;
       } catch {}
@@ -13147,8 +12983,8 @@ var init_role_agents = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/xreview.ts
-import { existsSync as existsSync34, readFileSync as readFileSync41 } from "fs";
-import { join as join56 } from "path";
+import { existsSync as existsSync34, readFileSync as readFileSync40 } from "fs";
+import { join as join55 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
   return RANK3[ceiling] < RANK3[verdict] ? ceiling : verdict;
@@ -13161,11 +12997,11 @@ function explicitReview(repoDir, env) {
   if (flag && isOff(ev))
     return "off";
   for (const f of ["loki.yaml", "loki.yml"]) {
-    const p = join56(repoDir, f);
+    const p = join55(repoDir, f);
     if (!existsSync34(p))
       continue;
     try {
-      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync41(p, "utf8"));
+      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync40(p, "utf8"));
       const v = asProvider(m?.[1]);
       if (v)
         return v;
@@ -13254,6 +13090,88 @@ var init_xreview = __esm(() => {
   RANK3 = { FAILED: 0, SPEC_CONFLICT: 0, PARTIAL: 1, ALREADY_SATISFIED: 2, VERIFIED: 2 };
 });
 
+// ../../loki-ts/src/runner/router/route_block.ts
+function advisorUnavailableReason(env, provider) {
+  if (provider !== "claude")
+    return `provider ${provider} has no advisor tool`;
+  if (env["CLAUDE_CODE_USE_BEDROCK"] || env["CLAUDE_CODE_USE_VERTEX"] || env["CLAUDE_CODE_USE_FOUNDRY"])
+    return "advisor tool is unsupported on Bedrock, Vertex and Foundry";
+  if ((env["LOKI_ROUTER_ADVISOR"] ?? "").trim().toLowerCase() === "off")
+    return "LOKI_ROUTER_ADVISOR=off";
+  return null;
+}
+function toEsc(raw2) {
+  const esc3 = Array.isArray(raw2) ? raw2 : [];
+  return esc3.map((e) => ({ trigger: s0(e["trigger"]) ?? "unknown", from: modelLabel(s0(e["from"]) ?? "?"), to: modelLabel(s0(e["to"]) ?? "?"), evidence: s0(e["evidence"]) ?? "none recorded" }));
+}
+function buildRouteBlock(env, provider, route, telemetry, runModel) {
+  if (!routerEnabled(env))
+    return null;
+  const applied = route?.["applied"] !== false;
+  const executor = s0(route?.["executor"]);
+  const unavailable = s0(route?.["advisor_unavailable_reason"]) ?? advisorUnavailableReason(env, provider);
+  const total = nN(telemetry?.requests_total);
+  const over = nN(telemetry?.requests_over_100k);
+  const shape = s0(route?.["shape_key"]);
+  const escalations = toEsc(route?.["escalations"]);
+  const source = s0(route?.["source"]);
+  const reason = s0(route?.["reason"]) ?? (executor ? "no reason recorded" : "no route recorded by implement");
+  const rawUnits = Array.isArray(route?.["units"]) ? route["units"] : [];
+  const units = rawUnits.length > 0 ? rawUnits.map((u, i) => ({ id: s0(u["id"]) ?? String(i + 1), executor: modelLabel(s0(u["executor"]) ?? "unknown"), applied, assigned_by: assignedBy(s0(u["source"]) ?? source, u["assigned_by"]), reason: s0(u["reason"]) ?? "no reason recorded", escalations: toEsc(u["escalations"]) })) : executor && route?.["routed"] !== false ? [{ id: "run", executor: modelLabel(executor), applied, assigned_by: assignedBy(source, route?.["assigned_by"]), reason, escalations }] : [];
+  return {
+    routed: route?.["routed"] === false ? false : executor !== null || units.length > 0,
+    units,
+    executor: !applied ? `${runModel ? modelLabel(runModel) : "run model"} (per-unit assignment not applied)` : executor ? modelLabel(executor) : units[0]?.executor ?? null,
+    advisor: unavailable ? null : modelLabel(s0(route?.["advisor"]) ?? "opus"),
+    advisor_unavailable_reason: unavailable,
+    reason,
+    source,
+    shape_key: shape,
+    shape_parity: shape ? `NOT PROVEN (no B9 row for shape ${shape})` : "NOT PROVEN (no shape key recorded)",
+    escalations: units.length > 0 ? units.flatMap((u) => u.escalations) : escalations,
+    requests_total: total,
+    requests_over_100k: over,
+    over_100k_share: total !== null && over !== null && total > 0 ? Math.round(over / total * 1e4) / 1e4 : null,
+    advisor_calls: nN(telemetry?.advisor_calls),
+    advisor_input_tokens: nN(telemetry?.advisor_input_tokens),
+    advisor_output_tokens: nN(telemetry?.advisor_output_tokens),
+    plan_model: s0(route?.["plan_model"]),
+    applied,
+    run_model: runModel ?? null,
+    not_proven: Array.isArray(route?.["route_not_proven"]) ? route["route_not_proven"].filter((x) => typeof x === "string") : []
+  };
+}
+function routePrLine(r) {
+  if (!r.routed)
+    return `Route: not routed (${r.reason})`;
+  const adv = r.advisor ? `advisor ${r.advisor}` : "advisor unavailable";
+  return `Route: executor ${r.executor}, ${adv}; advisor tokens ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out; over 100K: ${over(r, " requests")}`;
+}
+function routeReceiptLines(r) {
+  if (!r.routed)
+    return [`- Route: not routed (${r.reason})`, `- Route shape_parity: ${r.shape_parity}`];
+  return [
+    `- Route: executor ${r.executor}, ${r.advisor ? `advisor ${r.advisor}` : `advisor unavailable: ${r.advisor_unavailable_reason}`}: ${r.reason}`,
+    `- Route shape_key: ${r.shape_key ?? "unknown"}  shape_parity: ${r.shape_parity}`,
+    `- Route escalations: ${r.escalations.length === 0 ? "none" : r.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger}; evidence ${e.evidence})`).join("; ")}`,
+    `- Route advisor: ${rec(r.advisor_calls)} calls, ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out tokens`,
+    ...r.units.map((u) => `- Route unit ${u.id}: executor ${u.applied ? u.executor : `not applied (assigned ${u.executor})`}, assigned by ${u.assigned_by}: ${u.reason}; escalation: ${u.escalations.length === 0 ? "none" : u.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger})`).join(", ")}`),
+    `- Route requests over 100K: ${over(r, "")}`
+  ];
+}
+function routeNotProven(r) {
+  return [
+    ...r.advisor_unavailable_reason ? [`advisor: NOT PROVEN (owner provider): ${r.advisor_unavailable_reason}`] : [],
+    `route.shape_parity: ${r.shape_parity}`,
+    ...r.applied ? [] : [`route.executor: NOT PROVEN (owner engine): per-unit executor assignment is not applied (R1-11); every stage ran ${r.run_model ?? "the run model"}`],
+    ...r.not_proven
+  ];
+}
+var ALIAS, modelLabel = (m) => ALIAS[m] ?? m, nN = (v) => typeof v === "number" && Number.isFinite(v) ? v : null, rec = (v) => v === null ? "not recorded" : String(v), s0 = (v) => typeof v === "string" && v.trim() ? v.trim() : null, assignedBy = (src, explicit) => s0(explicit) ?? (src === null || src === "opus" ? "opus" : src), over = (r, unit) => r.requests_total === null || r.requests_over_100k === null ? "not recorded" : `${r.requests_over_100k} of ${r.requests_total}${unit} (${pct(r)})`, pct = (r) => r.over_100k_share === null ? "n/a (no requests)" : `${(r.over_100k_share * 100).toFixed(1)}%`;
+var init_route_block = __esm(() => {
+  ALIAS = { haiku: "haiku-5.5", sonnet: "sonnet-5.5", opus: "opus-5.5" };
+});
+
 // ../../loki-ts/src/util/engine_origin.ts
 function readOriginUrl(repoDir) {
   try {
@@ -13264,6 +13182,7 @@ function readOriginUrl(repoDir) {
   }
 }
 var init_engine_origin = __esm(() => {
+  init_atomic();
   init_safe_git();
 });
 
@@ -13300,8 +13219,8 @@ var init_cost_preview = __esm(() => {
 });
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync22, readFileSync as readFileSync42, rmSync as rmSync14, writeFileSync as writeFileSync23 } from "fs";
-import { dirname as dirname25, join as join57 } from "path";
+import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync22, readFileSync as readFileSync41, rmSync as rmSync14, writeFileSync as writeFileSync24 } from "fs";
+import { dirname as dirname24, join as join56 } from "path";
 import { createHash as createHash13 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
@@ -13333,7 +13252,7 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join57(repoDir, ".loki", "contract.json");
+  return join56(repoDir, ".loki", "contract.json");
 }
 function readContract(repoDir) {
   const p = contractPath(repoDir);
@@ -13349,7 +13268,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync42(p);
+    raw2 = readFileSync41(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -13418,13 +13337,226 @@ var init_contract = __esm(() => {
   init_safe_git();
   STOP2 = new Set(["the", "and", "for", "with", "that", "this", "must", "should", "shall", "when", "then", "are", "was", "all", "any", "can", "not", "has", "have", "from", "into", "each", "user", "users"]);
   MAX_CONTRACT_BYTES = 1024 * 1024;
-  REQ_MAP_REL = join57(".loki", "state", "requirements-map.json");
+  REQ_MAP_REL = join56(".loki", "state", "requirements-map.json");
   REQ_STOP = new Set(["with", "that", "this", "from", "have", "will", "should", "must", "when", "then", "into", "each", "every", "user", "users", "page", "able", "allow", "support", "ensure", "using", "their", "there", "which", "shall"]);
 });
 
+// ../../loki-ts/src/features/speed/seal_group.ts
+import { createHash as createHash14 } from "crypto";
+import { existsSync as existsSync36, readdirSync as readdirSync17, readFileSync as readFileSync42, statSync as statSync17 } from "fs";
+import { basename as basename19, dirname as dirname25, join as join57 } from "path";
+function sealGroup(runDir, rh) {
+  const manifestPath = join57(runDir, "group", "manifest.json");
+  if (!existsSync36(manifestPath))
+    return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
+  const notProven = [];
+  let problems = 0;
+  const fail = (m2) => {
+    problems++;
+    notProven.push(`group: ${m2}`);
+  };
+  const m = readJson5(manifestPath);
+  const list = isObj10(m) && Array.isArray(m["units"]) ? m["units"] : [];
+  if (!isObj10(m) || !ID_RE.test(String(m["group_id"] ?? "")) || list.length === 0) {
+    fail("manifest missing, unreadable or empty");
+    return { section: undefined, notProven, problems, allUnitsPass: false };
+  }
+  const units = [];
+  const seen = new Set, seenLower = new Set;
+  let allUnitsPass = true;
+  list.forEach((raw2, index2) => {
+    const u = isObj10(raw2) ? raw2 : {};
+    const id = String(u["unit_id"] ?? "");
+    if (!ID_RE.test(id) || seen.has(id) || seenLower.has(id.toLowerCase()))
+      return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
+    seen.add(id);
+    seenLower.add(id.toLowerCase());
+    const dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    let bytes;
+    try {
+      bytes = readFileSync42(rp);
+    } catch {
+      return fail(`unit ${id} sub-receipt missing`);
+    }
+    const sub = readJson5(rp);
+    if (!isObj10(sub) || typeof sub["receipt_sha256"] !== "string" || rh(sub) !== sub["receipt_sha256"])
+      return fail(`unit ${id} sub-receipt unreadable or its hash does not recompute`);
+    const verdict = String(sub["verdict"] ?? "");
+    if (!PASSING.has(verdict)) {
+      allUnitsPass = false;
+      notProven.push(`group: unit ${id} verdict ${verdict || "unknown"}`);
+    }
+    units.push({
+      index: index2,
+      unit_id: id,
+      sub_receipt_sha256: sha2(bytes),
+      receipt_sha256: sub["receipt_sha256"],
+      events_file_sha256: existsSync36(ep) ? sha2(readFileSync42(ep)) : null,
+      verdict,
+      goal: text2(u["goal"], 200),
+      files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
+      tests: num4(u["tests"]),
+      tokens: num4(u["tokens"]),
+      model: text2(u["model"], 64)
+    });
+  });
+  const extra = (dirNames(unitsDir(runDir)) ?? []).filter((n2) => !seen.has(n2));
+  for (const n2 of extra)
+    fail(`unit directory ${text2(n2, 64)} is not in the manifest`);
+  return { section: problems === 0 ? { group_id: String(m["group_id"]), units } : undefined, notProven, problems, allUnitsPass: allUnitsPass && problems === 0 };
+}
+function capGroupVerdict(v, g) {
+  if (g.problems > 0)
+    return v === "SPEC_CONFLICT" ? v : "FAILED";
+  return !g.allUnitsPass && (v === "VERIFIED" || v === "ALREADY_SATISFIED") ? "PARTIAL" : v;
+}
+async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
+  const runDir = dirname25(receiptPath);
+  const signed = isObj10(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
+  const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
+  const g = receipt["group"];
+  if (g === undefined)
+    return existsSync36(join57(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+  if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
+    return bad("group section malformed");
+  const entries = g["units"];
+  const ids = entries.map((e) => isObj10(e) ? String(e["unit_id"] ?? "") : "");
+  if (ids.some((id) => !ID_RE.test(id)) || new Set(ids.map((i) => i.toLowerCase())).size !== ids.length)
+    return bad("unit ids invalid, duplicated or case-colliding");
+  const onDisk = dirNames(unitsDir(runDir));
+  if (onDisk === null || onDisk.join("\x00") !== [...ids].sort().join("\x00"))
+    return bad("unit directories do not match the receipt (missing or extra unit)");
+  let unchecked = null;
+  for (let i = 0;i < entries.length; i++) {
+    const e = entries[i], id = ids[i], dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    if (e["index"] !== i)
+      return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
+    let bytes;
+    try {
+      if (!statSync17(dir).isDirectory())
+        return bad(`unit ${id} is not a directory`);
+      bytes = readFileSync42(rp);
+    } catch {
+      return bad(`unit ${id} sub-receipt missing`);
+    }
+    if (sha2(bytes) !== e["sub_receipt_sha256"])
+      return bad(`unit ${id} sub-receipt does not match its recorded hash`);
+    const evSha = existsSync36(ep) ? sha2(readFileSync42(ep)) : null;
+    if (evSha !== (e["events_file_sha256"] ?? null))
+      return bad(`unit ${id} events.jsonl does not match its recorded hash`);
+    const sub = readJson5(rp);
+    if (!isObj10(sub) || sub["receipt_sha256"] !== e["receipt_sha256"] || rh(sub) !== e["receipt_sha256"])
+      return bad(`unit ${id} sub-receipt hash does not recompute`);
+    if (String(sub["verdict"] ?? "") !== e["verdict"])
+      return bad(`unit ${id} verdict differs from the combined receipt`);
+    const r = await verifyOne(rp, deps);
+    if (r.verdict === "UNSIGNED" && signed)
+      unchecked ??= `unit ${id} sub-receipt is unsigned under a signed combined receipt`;
+    if (r.verdict === "TAMPERED")
+      return bad(`unit ${id} sub-receipt failed verify: ${r.reasons.join("; ")}`);
+    if (r.verdict === "UNCHECKED")
+      unchecked ??= `unit ${id} sub-receipt not checked: ${r.reasons.join("; ")}`;
+  }
+  return unchecked ? { verdict: "UNCHECKED", reason: `group: ${unchecked}` } : null;
+}
+function compositeVerdict(childVerdicts) {
+  const base = childVerdicts.includes("SPEC_CONFLICT") ? "SPEC_CONFLICT" : childVerdicts.length > 0 && childVerdicts.every((v) => v === "ALREADY_SATISFIED") ? "ALREADY_SATISFIED" : "VERIFIED";
+  const failed = childVerdicts.filter((v) => v === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v)).length;
+  return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed, allUnitsPass: childVerdicts.every((v) => PASSING.has(v)) });
+}
+async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
+  const runDir = dirname25(receiptPath);
+  const signed = isObj10(receipt["verification"]) && typeof receipt["verification"]["jwt"] === "string";
+  const bad = (reason) => ({ problem: { verdict: "TAMPERED", reason: `composite: ${reason}` }, verdict: "FAILED" });
+  const kids = receipt["children"];
+  if (!Array.isArray(kids) || kids.length === 0 || !ID_RE.test(String(receipt["run_id"] ?? "")))
+    return bad("body malformed");
+  let ibytes;
+  try {
+    ibytes = readFileSync42(join57(runDir, "integration.json"));
+  } catch {
+    return bad("integration.json missing");
+  }
+  if (sha2(ibytes) !== receipt["integration_sha256"])
+    return bad("integration.json does not match its recorded hash");
+  const integ = readJson5(join57(runDir, "integration.json"));
+  if (!isObj10(integ) || !isObj10(integ["outcomes"]))
+    return bad("integration.json has no outcomes");
+  const heads = isObj10(integ["heads"]) ? integ["heads"] : {}, outcomes = integ["outcomes"];
+  const order2 = Array.isArray(integ["order"]) ? integ["order"].map(String) : Object.keys(outcomes).sort();
+  const kidRepos = kids.map((k) => isObj10(k) ? String(k["repo"] ?? "") : "");
+  if (new Set(kidRepos).size !== kidRepos.length)
+    return bad("children list a repo more than once");
+  if (kidRepos.length !== order2.length || kidRepos.some((r, i) => r !== order2[i]))
+    return bad("children do not cover the integrated repos in order (a repo is missing or extra)");
+  let unchecked = null;
+  const verdicts = [];
+  for (const raw2 of kids) {
+    const c = isObj10(raw2) ? raw2 : {}, repo = String(c["repo"] ?? ""), rel = String(c["receipt_path"] ?? "");
+    if (!repo || !relOk(rel) || !rel.startsWith(`worktrees/${slugOf(repo)}/.loki/runs/`))
+      return bad(`child ${text2(repo, 80) || "?"} has an invalid receipt path`);
+    if (outcomes[repo] !== "ok")
+      return bad(`child ${text2(repo, 80)} did not finish ok in integration.json`);
+    const rp = join57(runDir, rel);
+    let bytes;
+    try {
+      bytes = readFileSync42(rp);
+    } catch {
+      return bad(`child ${repo} receipt missing`);
+    }
+    if (sha2(bytes) !== c["receipt_file_sha256"])
+      return bad(`child ${repo} receipt does not match its recorded hash (swapped or edited)`);
+    const sub = readJson5(rp);
+    if (!isObj10(sub) || sub["receipt_sha256"] !== c["receipt_sha256"] || rh(sub) !== c["receipt_sha256"])
+      return bad(`child ${repo} receipt hash does not recompute`);
+    if (String(sub["verdict"] ?? "") !== c["verdict"])
+      return bad(`child ${repo} verdict differs from the composite`);
+    if (String(sub["head_sha"] ?? "") !== c["head_sha"] || !c["head_sha"])
+      return bad(`child ${repo} head_sha differs from the composite`);
+    verdicts.push(String(c["verdict"]));
+    if (typeof heads[repo] !== "string" || heads[repo] === "")
+      unchecked ??= `child ${repo} has no integrated head to compare (freshness not checked)`;
+    else if (heads[repo] !== c["head_sha"])
+      unchecked ??= `child ${repo} head ${String(c["head_sha"])} is not the integrated head ${String(heads[repo])}`;
+    const r = await verifyOne(rp, deps);
+    if (r.verdict === "TAMPERED")
+      return bad(`child ${repo} failed verify: ${r.reasons.join("; ")}`);
+    if (r.verdict === "UNSIGNED" && signed)
+      unchecked ??= `child ${repo} receipt is unsigned under a signed composite`;
+    if (r.verdict === "UNCHECKED")
+      unchecked ??= `child ${repo} not checked: ${r.reasons.join("; ")}`;
+  }
+  const expect = compositeVerdict(verdicts);
+  if (receipt["verdict"] !== expect)
+    return bad(`recorded verdict ${String(receipt["verdict"])} differs from the children (${expect})`);
+  return { problem: unchecked ? { verdict: "UNCHECKED", reason: `composite: ${unchecked}` } : null, verdict: expect };
+}
+function compositeHash(r) {
+  const { composite_sha256: _c, verification: _v, ...body } = r;
+  return sha2(canonicalJson(body));
+}
+var ID_RE, PASSING, sha2 = (b) => createHash14("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join57(runDir, "group", "units"), readJson5 = (p) => {
+  try {
+    return JSON.parse(readFileSync42(p, "utf8"));
+  } catch {
+    return;
+  }
+}, dirNames = (d) => {
+  try {
+    return readdirSync17(d).filter((n2) => !n2.startsWith(".")).sort();
+  } catch {
+    return null;
+  }
+}, COMPOSITE_SCHEMA = "loki.v10.composite/1", slugOf = (repo) => repo.replace(/\//g, "__"), isComposite = (r) => r["schema"] === COMPOSITE_SCHEMA, relOk = (p) => p !== "" && !p.startsWith("/") && !p.split("/").includes("..");
+var init_seal_group = __esm(() => {
+  init_receipt_signer();
+  ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+  PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
+});
+
 // ../../loki-ts/src/supply/supply_guard.ts
-import { existsSync as existsSync36, readFileSync as readFileSync43, statSync as statSync18 } from "fs";
-import { basename as basename19, join as join58 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync43, statSync as statSync18 } from "fs";
+import { basename as basename20, join as join58 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -13436,11 +13568,11 @@ function supplyVerdict(verdict, r) {
   return r.blocked && verdict === "VERIFIED" ? "FAILED" : verdict;
 }
 function isManifestPath(path) {
-  return MANIFESTS.test(basename19(path));
+  return MANIFESTS.test(basename20(path));
 }
 function readDeclared(repoDir) {
   const p = join58(repoDir, ".loki", DECLARED_FILE);
-  if (!existsSync36(p))
+  if (!existsSync37(p))
     return { deps: [], problem: null };
   try {
     if (statSync18(p).size > MAX_FILE_BYTES)
@@ -13466,7 +13598,7 @@ function readDeclared(repoDir) {
 }
 function readAllowlist(repoDir) {
   const p = join58(repoDir, ".loki", "supply-allowlist");
-  if (!existsSync36(p))
+  if (!existsSync37(p))
     return new Set;
   try {
     return new Set(readFileSync43(p, "utf8").split(`
@@ -13667,9 +13799,9 @@ var init_supply_guard = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/seal.ts
-import { createHash as createHash14 } from "crypto";
-import { existsSync as existsSync37, readdirSync as readdirSync18, mkdirSync as mkdirSync23, readFileSync as readFileSync44, writeFileSync as writeFileSync24 } from "fs";
-import { basename as basename20, isAbsolute as isAbsolute9, join as join59, relative as relative9 } from "path";
+import { createHash as createHash15 } from "crypto";
+import { existsSync as existsSync38, readdirSync as readdirSync18, mkdirSync as mkdirSync23, readFileSync as readFileSync44, writeFileSync as writeFileSync25 } from "fs";
+import { basename as basename21, isAbsolute as isAbsolute9, join as join59, relative as relative9 } from "path";
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
   const capped = collapsed.length > 500 ? `${collapsed.slice(0, 500)}...` : collapsed;
@@ -13743,13 +13875,12 @@ function renderReceiptMd(r) {
   ].join(`
 `);
 }
-var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash14("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], receiptRel = (ctx) => {
+var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash15("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], receiptRel = (ctx) => {
   const r = relative9(ctx.repoDir, join59(ctx.runDir, "receipt.json"));
   return r.startsWith("..") || isAbsolute9(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, sealStage;
 var init_seal = __esm(() => {
   init_spec_file();
-  init_pr_body();
   init_mutation_proof();
   init_wall();
   init_assert_delta();
@@ -13847,7 +13978,7 @@ var init_seal = __esm(() => {
         notProven.add(`Wall test not executed: ${wallNotRun} file(s), no reason recorded`);
       if (wallNotRun > 0) {
         try {
-          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename20(String(f.path))));
+          const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename21(String(f.path))));
           for (const n2 of readdirSync18(join59(ctx.runDir, "wall")).sort())
             if (!kept.has(n2))
               notProven.add(`wall test discarded: ${n2} (not_run)`);
@@ -13963,7 +14094,7 @@ var init_seal = __esm(() => {
         provider: ctx.provider,
         model: ctx.model,
         resumed: o.intake?.resumed === true,
-        events_sha256: sha2562(existsSync37(eventsPath) ? readFileSync44(eventsPath) : ""),
+        events_sha256: sha2562(existsSync38(eventsPath) ? readFileSync44(eventsPath) : ""),
         ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
         log_seal: true,
         ...receiptBlock(process.env, cost.usd, cost.unmetered === true, totalS),
@@ -13985,15 +14116,20 @@ var init_seal = __esm(() => {
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
       mkdirSync23(ctx.runDir, { recursive: true });
       const path = join59(ctx.runDir, "receipt.json");
-      writeFileSync24(path, JSON.stringify(receipt, null, 2) + `
+      writeFileSync25(path, JSON.stringify(receipt, null, 2) + `
 `);
-      writeFileSync24(join59(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      writeFileSync25(join59(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ctx.model, verdict, cost.usd, cost.unmetered === true, totalS);
       const signed = sig.jwt !== null;
       const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...mp ? { mutation_line: mp.line } : {}, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} };
       try {
         recordRunVerdict(ctx.repoDir, ctx.runId, verdict);
       } catch {}
+      if (process.env["LOKI_AUTO_LEARN_PR"] !== "0") {
+        try {
+          appendReceiptFact(ctx.repoDir, { runId: ctx.runId, verdict, receiptSha256: signed ? hash : null, title: str3(ctx.outputs().intake?.title) ?? `run ${ctx.runId}`, headSha: receipt.head_sha });
+        } catch {}
+      }
       ctx.emit("receipt.sealed", "seal", { path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} });
       return { status: "completed", data: { ...data, summary: `${verdict} receipt ${hash.slice(0, 12)} ${signed ? `SIGNED kid ${sig.kid}` : "UNSIGNED"}` } };
     }
@@ -14093,9 +14229,9 @@ var init_keys_cmd = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync38, readdirSync as readdirSync19, readFileSync as readFileSync46, statSync as statSync20 } from "fs";
-import { dirname as dirname27, join as join60 } from "path";
-import { createHash as createHash15, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
+import { existsSync as existsSync39, readFileSync as readFileSync46, renameSync as renameSync8, statSync as statSync20, writeFileSync as writeFileSync26 } from "fs";
+import { basename as basename22, dirname as dirname27, join as join60 } from "path";
+import { createHash as createHash16, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
 function pubFor(kid, given) {
   if (given)
     return kidOf2(given) === kid ? given : undefined;
@@ -14132,10 +14268,10 @@ function checkAttestation(jwt, expectedHash, given) {
 }
 function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
-  if (typeof bound !== "string" || bound === createHash15("sha256").digest("hex"))
+  if (typeof bound !== "string" || bound === createHash16("sha256").digest("hex"))
     return null;
   const path = join60(dirname27(receiptPath), "events.jsonl");
-  if (!existsSync38(path))
+  if (!existsSync39(path))
     return "events.jsonl is missing";
   const raw2 = readFileSync46(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
 `).filter((l) => l.trim() !== "");
@@ -14143,7 +14279,7 @@ function checkEventLog(receiptPath, receipt) {
     return "events.jsonl has a forged, edited or missing line";
   if (events2.some((e) => e.type === "tamper.detected"))
     return "the supervisor detected events.jsonl being modified during the run";
-  const h = createHash15("sha256");
+  const h = createHash16("sha256");
   for (const l of lines) {
     if (h.copy().digest("hex") === bound)
       return null;
@@ -14162,7 +14298,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
   const lines = readFileSync46(path, "utf8").split(`
-`).filter((l) => l.trim() !== ""), sha3 = createHash15("sha256").update(lines.slice(0, done + 1).join(`
+`).filter((l) => l.trim() !== ""), sha3 = createHash16("sha256").update(lines.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
   const pub = d["kid"] === kid ? pubFor(kid, given) : undefined;
@@ -14171,7 +14307,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   return null;
 }
 async function verifyReceipt(receiptPath, deps = {}) {
-  if (!existsSync38(receiptPath))
+  if (!existsSync39(receiptPath))
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
@@ -14181,6 +14317,8 @@ async function verifyReceipt(receiptPath, deps = {}) {
   }
   if (isEnvelope(receipt))
     return verifyDsseReceipt(receipt, { pubFor: (kid) => pubFor(kid, deps.pubkey), hash: computeReceiptHash, attest: (j, h) => checkAttestation(j, h, deps.pubkey) });
+  if (isComposite(receipt))
+    return verifyCompositeFile(receiptPath, receipt, deps);
   const recorded = receipt["receipt_sha256"];
   const computed = computeReceiptHash(receipt);
   if (typeof recorded !== "string" || recorded !== computed) {
@@ -14218,9 +14356,34 @@ async function verifyReceipt(receiptPath, deps = {}) {
     return { verdict: gp.verdict, reasons: [gp.reason] };
   return { verdict: "VERIFIED", reasons: [], receiptSha256: computed };
 }
+async function verifyCompositeFile(receiptPath, receipt, deps) {
+  const computed = compositeHash(receipt);
+  if (receipt["composite_sha256"] !== computed)
+    return { verdict: "TAMPERED", reasons: [`composite_sha256 mismatch: recorded ${JSON.stringify(receipt["composite_sha256"])}, computed ${computed}`] };
+  const c = await verifyComposite(receiptPath, receipt, computeReceiptHash, verifyReceipt, deps);
+  if (c.problem?.verdict === "TAMPERED")
+    return { verdict: "TAMPERED", reasons: [c.problem.reason] };
+  const jwt = (receipt["verification"] ?? {}).jwt ?? null;
+  if (jwt !== null && typeof jwt !== "string")
+    return { verdict: "UNCHECKED", reasons: ["verification.jwt is not a string"] };
+  if (!jwt)
+    return c.problem ? { verdict: c.problem.verdict, reasons: [c.problem.reason] } : { verdict: "UNSIGNED", reasons: [], receiptSha256: computed };
+  const outcome = checkAttestation(jwt, computed, deps.pubkey);
+  if (outcome.status === "unchecked")
+    return { verdict: "UNCHECKED", reasons: [outcome.reason ?? "attestation not checked"] };
+  if (outcome.status === "tampered")
+    return { verdict: "TAMPERED", reasons: [outcome.reason ?? "attestation invalid"] };
+  const shown = receipt["verification"].kid, signed = JSON.parse(Buffer.from(jwt.split(".")[0], "base64url").toString()).kid;
+  if (shown !== undefined && shown !== signed)
+    return { verdict: "TAMPERED", reasons: ["verification.kid differs from the signing kid in the attestation header"] };
+  if (c.problem)
+    return { verdict: c.problem.verdict, reasons: [c.problem.reason] };
+  return { verdict: "VERIFIED", reasons: [], receiptSha256: computed };
+}
 var computeReceiptHash = (receipt) => receiptSha256(receipt);
 var init_verify_cmd = __esm(() => {
   init_paths();
+  init_run_status();
   init_events();
   init_seal();
   init_receipt_dsse();
@@ -14230,7 +14393,7 @@ var init_verify_cmd = __esm(() => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync40, readFileSync as readFileSync49, statSync as statSync21 } from "fs";
+import { existsSync as existsSync41, readFileSync as readFileSync49, statSync as statSync21 } from "fs";
 import { join as join63, resolve as resolve15, sep as sep14 } from "path";
 
 // node_modules/hono/dist/request/constants.js
@@ -22438,7 +22601,7 @@ var loki_yaml_schema_default = {
       items: { type: "string", minLength: 1 }
     },
     workspaces: {
-      description: "Named groups of repos for cross-repo runs (`loki workspace run`). Accepted unconditionally; runtime behavior is gated by LOKI_WORKSPACES=1.",
+      description: "Named groups of repos for cross-repo runs (`loki workspace run`). On by default; LOKI_WORKSPACES=0 disables. Unknown or mistyped keys fail validation.",
       type: "object",
       additionalProperties: {
         type: "object",
@@ -22462,9 +22625,12 @@ var loki_yaml_schema_default = {
             additionalProperties: false,
             properties: {
               command: { type: "string", minLength: 1 },
-              timeout_s: { type: "integer", minimum: 1 }
+              timeout_s: { type: "integer", minimum: 1 },
+              per_stage: { type: "boolean" }
             }
           },
+          concurrency: { type: "integer", minimum: 1 },
+          plan: { type: "boolean" },
           integration_files: { type: "array", items: { type: "string", minLength: 1 } }
         }
       }
@@ -24592,7 +24758,7 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync39, readFileSync as readFileSync48 } from "fs";
+import { existsSync as existsSync40, readFileSync as readFileSync48 } from "fs";
 import { join as join62 } from "path";
 
 // src/server/legacy/routes.ts
@@ -24967,7 +25133,7 @@ var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
   for (const f of [join62(import.meta.dir, "../../../../../VERSION")]) {
     try {
-      if (existsSync39(f))
+      if (existsSync40(f))
         return readFileSync48(f, "utf8").trim();
     } catch {}
   }
@@ -25150,7 +25316,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join63(import.meta.dir, "../../ui/dist"), join63(import.meta.dir, "../ui/dist")].find((d) => existsSync40(join63(d, "index.html")));
+var defaultUiDir = () => [join63(import.meta.dir, "../../ui/dist"), join63(import.meta.dir, "../ui/dist")].find((d) => existsSync41(join63(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -25293,7 +25459,7 @@ function createApp(opts) {
       return c.json({ error: "not found" }, 404);
     const root = resolve15(uiDir);
     const f = resolve15(root, `.${p}`);
-    if (f.startsWith(root + sep14) && existsSync40(f) && statSync21(f).isFile())
+    if (f.startsWith(root + sep14) && existsSync41(f) && statSync21(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);