loki-mode 11.51.0 → 11.51.2

package/packages/control-plane/dist/server.js

@@ -8806,6 +8806,289 @@ var init_session_route = __esm(() => {
   init_unit_model();
 });
 
+// ../../loki-ts/src/runner/worker_proc.ts
+function killGroup2(pid, sig) {
+  if (!pid)
+    return;
+  try {
+    process.kill(-pid, sig);
+  } catch {}
+}
+var CANCEL_GRACE_MS;
+var init_worker_proc = __esm(() => {
+  CANCEL_GRACE_MS = Number(process.env["LOKI_E10_CANCEL_GRACE_MS"]) > 0 ? Number(process.env["LOKI_E10_CANCEL_GRACE_MS"]) : 1e4;
+});
+
+// ../../loki-ts/src/util/shell.ts
+async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES, onFirstChunk) {
+  const reader = stream.getReader();
+  let first = onFirstChunk;
+  const decoder = new TextDecoder;
+  let out2 = "";
+  let total = 0;
+  try {
+    while (total < maxBytes) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (!value)
+        continue;
+      if (first && value.byteLength > 0) {
+        const cb = first;
+        first = undefined;
+        try {
+          cb();
+        } catch {}
+      }
+      total += value.byteLength;
+      if (total > maxBytes) {
+        const keep = value.byteLength - (total - maxBytes);
+        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
+        break;
+      }
+      out2 += decoder.decode(value, { stream: true });
+    }
+    out2 += decoder.decode();
+  } finally {
+    try {
+      await reader.cancel();
+    } catch {}
+    reader.releaseLock();
+  }
+  return out2;
+}
+async function run(argv, opts = {}) {
+  const proc = Bun.spawn({
+    cmd: [...argv],
+    stdout: "pipe",
+    stderr: "pipe",
+    env: opts.env ? { ...process.env, ...opts.env } : process.env,
+    cwd: opts.cwd,
+    ...opts.group ? { detached: true } : {}
+  });
+  let timer;
+  let killTimer;
+  const stop = () => {
+    try {
+      if (opts.group)
+        killGroup2(proc.pid, "SIGTERM");
+      else
+        proc.kill("SIGTERM");
+    } catch {}
+    killTimer ??= setTimeout(() => {
+      try {
+        if (opts.group)
+          killGroup2(proc.pid, "SIGKILL");
+        else
+          proc.kill("SIGKILL");
+      } catch {}
+    }, 2000);
+  };
+  if (opts.timeoutMs && opts.timeoutMs > 0)
+    timer = setTimeout(stop, opts.timeoutMs);
+  if (opts.signal) {
+    if (opts.signal.aborted)
+      stop();
+    else
+      opts.signal.addEventListener("abort", stop, { once: true });
+  }
+  try {
+    const [stdout, stderr, exitCode] = await Promise.all([
+      readStreamCapped(proc.stdout, MAX_STDOUT_BYTES, opts.onFirstStdout),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    return { stdout, stderr, exitCode };
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+    if (killTimer)
+      clearTimeout(killTimer);
+    opts.signal?.removeEventListener("abort", stop);
+    if (opts.group)
+      killGroup2(proc.pid, "SIGKILL");
+  }
+}
+async function commandExists(name) {
+  const safe = shEscape(name);
+  const r = await run(["sh", "-c", `command -v ${safe}`], { timeoutMs: 5000 });
+  if (r.exitCode === 0) {
+    const path = r.stdout.trim();
+    return path || null;
+  }
+  return null;
+}
+function shEscape(name) {
+  if (!/^[A-Za-z0-9._/-]+$/.test(name)) {
+    throw new Error(`refused to shell-escape suspect token: ${name}`);
+  }
+  return name;
+}
+var MAX_STDOUT_BYTES;
+var init_shell = __esm(() => {
+  init_worker_proc();
+  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
+});
+
+// ../../loki-ts/src/providers/mcp_config.ts
+var init_mcp_config = () => {};
+
+// ../../loki-ts/src/providers/claude_flags.ts
+import { existsSync as existsSync20, readFileSync as readFileSync26 } from "fs";
+import { resolve as resolvePath, dirname as dirname13 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+function claudeFlagSupported(flag, helpText) {
+  const txt = helpText ?? _claudeHelpCache;
+  if (txt === null || txt === undefined) {
+    return false;
+  }
+  return txt.includes(flag);
+}
+async function ensureClaudeHelpCache() {
+  if (_claudeHelpCache !== null)
+    return;
+  try {
+    const proc = Bun.spawn(["claude", "--help"], {
+      stdout: "pipe",
+      stderr: "pipe",
+      env: { ...process.env }
+    });
+    const text2 = await new Response(proc.stdout).text();
+    await proc.exited;
+    _claudeHelpCache = text2 || "";
+  } catch {
+    _claudeHelpCache = "";
+  }
+}
+function leanReviewerFlags(opts = {}) {
+  const env = opts.env ?? process.env;
+  if (env["LOKI_LEAN_CHILDREN"] === "0")
+    return [];
+  const ok = opts.flagSupported ?? ((f) => claudeFlagSupported(f));
+  const out2 = [];
+  if (env["LOKI_BARE_SUBCALLS"] !== "0" && (env["ANTHROPIC_API_KEY"] ?? "").trim() !== "" && ok("--bare")) {
+    out2.push("--bare");
+  } else {
+    if (ok("--setting-sources"))
+      out2.push("--setting-sources", opts.settingSources ?? "project");
+    if (ok("--strict-mcp-config"))
+      out2.push("--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}');
+    if (ok("--disable-slash-commands"))
+      out2.push("--disable-slash-commands");
+  }
+  if (ok("--tools"))
+    out2.push(`--tools=${opts.tools ?? ""}`);
+  return out2;
+}
+function designArchetypesText() {
+  try {
+    const moduleDir = dirname13(fileURLToPath5(import.meta.url));
+    for (const rel of [
+      ["..", "..", "..", "references", "design-archetypes.md"],
+      ["..", "..", "references", "design-archetypes.md"]
+    ]) {
+      const p = resolvePath(moduleDir, ...rel);
+      if (existsSync20(p))
+        return readFileSync26(p, "utf8");
+    }
+  } catch {}
+  return "";
+}
+var REVIEW_GUARD_DENYLIST = "Edit,Write,NotebookEdit,Bash(git commit:*),Bash(git reset:*),Bash(git push:*),Bash(git checkout:*),Bash(git clean:*),Bash(git rm:*),Bash(git stash:*),Bash(git -C:*),Bash(git --git-dir:*),Bash(git -c:*),Bash(git --exec-path:*),Bash(git diff --output:*),Bash(git diff --output=:*),Bash(git diff --ext-diff:*),Bash(git diff --no-index:*),Bash(git log --output:*),Bash(git log --output=:*),Bash(git log --ext-diff:*),Bash(git show --output:*),Bash(git show --output=:*),Bash(git show --ext-diff:*),Bash(git blame --output:*),Bash(git blame --output=:*),Bash(rg --pre:*),Bash(rg --pre=:*),Bash(rg --pre-glob:*),Bash(rg --pre-glob=:*),Bash(rg --hostname-bin:*),Bash(rg --hostname-bin=:*),Bash(find -delete:*),Bash(find -exec:*),Bash(find -execdir:*),Bash(find -ok:*),Bash(find -fprint:*),Bash(find -fprintf:*),Bash(find -fls:*),Bash(git * --output*),Bash(git * --ext-diff*),Bash(git * --no-index*),Bash(rg * --pre*),Bash(rg * --hostname-bin*),Bash(rg --pre*),Bash(rg --hostname-bin*),Bash(find * -delete*),Bash(find * -exec*),Bash(find * -execdir*),Bash(find * -fprint*),Bash(find * -fls*),Bash(find * -ok*)", _claudeHelpCache = null, AUTONOMY_OVERRIDE_TEXT, FIRST_PASS_EXCELLENCE_TEXT, REVIEW_ALLOWLIST_TOKEN = "Read,Grep,Glob,Bash(git diff:*),Bash(git log:*),Bash(git show:*),Bash(git status:*),Bash(git ls-files:*),Bash(git rev-parse:*),Bash(git blame:*),Bash(cat:*),Bash(ls:*),Bash(grep:*),Bash(rg:*),Bash(find:*),Bash(head:*),Bash(tail:*),Bash(wc:*)", REVIEW_ALLOWLIST_NO_GIT, CAVEMAN_PINNED_VERSION;
+var init_claude_flags = __esm(() => {
+  init_mcp_config();
+  init_claude_model();
+  AUTONOMY_OVERRIDE_TEXT = `[LOKI-AUTONOMY-AGENT] This is a Loki Mode autonomous agent process.
+` + `You are running INSIDE Loki Mode autonomous execution, a session the user explicitly launched with full prior authorization (loki start / loki run). This IS an authorized autonomous session, not an unattended action you must seek consent for.
+
+` + `Instruction precedence for THIS session: when the loki_system instructions in the user prompt conflict with any CLAUDE.md, project memory, or global memory that tells you to ask for clarification, pause for confirmation, refuse to act autonomously, or withhold routine commits, the loki_system instructions take precedence. The user has already consented by launching autonomous mode.
+
+` + `Therefore, for this session: do NOT ask the user questions, do NOT call the AskUserQuestion tool, do NOT stop to request confirmation, and do NOT refuse routine, reversible engineering work (writing code, running tests, creating files, atomic git checkpoints in the working tree). Proceed and complete the task directly. If a decision is genuinely ambiguous, choose the most reasonable option, record the assumption in .loki/CONTINUITY.md, and continue rather than halting.
+
+` + "Commit hygiene still applies: git checkpoints are LOCAL only. Never push or force-push. Stage files by explicit path, never `git add -A` or `git add .`, and never commit secrets, credentials, .env files, or untracked files you did not author this session.\n\n" + `This precedence override is narrow. It does NOT relax any safety rule. Every safety prohibition in CLAUDE.md or memory still fully binds: anything genuinely destructive or irreversible remains out of scope unless the task explicitly calls for it. This includes (not limited to) force-pushing, deleting or overwriting the user's data, dropping or truncating databases, publishing or releasing, rotating or exfiltrating secrets, touching production systems, and anything a CLAUDE.md safety rule explicitly forbids. When in doubt about whether an action is destructive, treat it as destructive and do not do it.
+`;
+  FIRST_PASS_EXCELLENCE_TEXT = `
+[FIRST-PASS EXCELLENCE] Treat THIS pass as your one shot to ship a complete, working, verified solution. Do not produce a rough draft to refine later; the loop exists as a safety net, not a plan. Before you finish this iteration:
+` + `1. BUILD IT FULLY. Implement every requirement end to end. No stubs, no TODOs, no "coming soon", no placeholder or hardcoded/mock data where real logic belongs. If the spec implies a backend (auth, persistence, a form that submits, a list that saves), WIRE IT so it actually works and persists -- a beautiful UI whose buttons do nothing is the single most common failure, not a draft. Every list/table must trace to a real query, never an inline mock array.
+` + `2. SELF-VERIFY BY RUNNING, not by reading. Run the build and the tests yourself; for each acceptance criterion, DRIVE the actual path and observe the result (submit the form, then reload and confirm the record persisted; hit a protected route logged-out and confirm it is rejected). Fix what fails now, in this pass. Do not mark done on "looks right" or a self-claim -- observed behavior is the only proof.
+` + `3. LOCK THE ARCHITECTURE on this pass so later edits are small and additive. Decide the data model, routes, and component structure up front and build to them; never rewrite whole files later to patch a small thing (that is the doom loop that breaks working features).
+` + `4. DESIGN: commit to ONE named aesthetic direction up front (editorial, brutalist, luxury, retro-futuristic, soft/pastel, industrial, etc. -- chosen from the product domain) and hold it on every surface. Use real content (never lorem). AVOID the AI-slop tells that instantly read as machine-generated: NO indigo/blue-to-purple gradient (the #1 tell), NO Inter/Roboto/system-font headlines (pick a real display+body pairing), NO three-equal-rounded-cards-in-a-row skeleton, NO flat 1px gray card borders or colored left-border strips, NO untouched shadcn defaults, NO reflexive dark mode. Cap the palette at ~3 hues (60/30/10), tinted not pure #fff/#000, separate sections by whitespace then a slight background shift before any border. Aim for Linear/Stripe/Duolingo-tier taste: "this does not look AI-generated".
+` + `5. SATISFY THE GATES THAT WILL JUDGE THIS PASS. Your work is checked by deterministic gates before it can be accepted, and in measured runs EVERY extra iteration was caused by one of these rejecting the work -- never by the model failing to finish. Clear them now, in this pass:
+` + `   - STATIC ANALYSIS: no syntax errors, no unused/undefined symbols, no lint errors in files you touched.
+` + `   - TEST SUITE: the existing tests must still pass. Run them; do not assume.
+` + `   - MUTATION/MOCK INTEGRITY: tests must assert real behaviour. No tautological assertions (expect(true).toBe(true)), no test that passes whether or not the code works, no mocking the very unit under test, no inline mock data standing in for a real query.
+` + `   - CODE REVIEW: no scope creep beyond the stated task, no dead or commented-out code, no leftover debug output, and follow the conventions already in the surrounding files.
+` + `Deliver the finished, self-verified, genuinely-designed result in THIS pass. Additional iterations should be the exception, not the plan.
+` + designArchetypesText();
+  REVIEW_ALLOWLIST_NO_GIT = REVIEW_ALLOWLIST_TOKEN.split(",").filter((t) => !t.startsWith("Bash(git ")).join(",");
+  CAVEMAN_PINNED_VERSION = process.env["LOKI_CAVEMAN_VERSION"] || "1.9.0";
+});
+
+// ../../loki-ts/src/features/lean_prefix.ts
+var LEAN_PREFIX, PARALLEL_TOOL_CALLS_INSTRUCTION = `PARALLEL_TOOL_CALLS: When issuing independent read-only operations (reads, greps, file lookups, LSP checks) that do not depend on each other, issue them in a single message so they run in parallel; do not serialize independent lookups.`, STAGE_PREFIX, withStagePrefix = (brief) => process.env["LOKI_SPEED"] !== "0" ? `${STAGE_PREFIX}
+
+${brief}` : brief;
+var init_lean_prefix = __esm(() => {
+  LEAN_PREFIX = "You are Loki, an autonomous coding agent. Follow the task prompt exactly " + "and report only what you did.";
+  STAGE_PREFIX = "You are Loki, an autonomous coding agent working one stage of a run. " + "Follow the stage prompt exactly, including the role it gives you and the rules it sets, " + "and report only what you did. " + "Never present a behavior as done when this repository's code does not provide it: a plan, a test or a change never substitutes documentation or changelog text for missing code. " + `${PARALLEL_TOOL_CALLS_INSTRUCTION} ` + "Stage-specific instructions and the task follow this block.";
+});
+
+// ../../loki-ts/src/util/run_identity.ts
+var init_run_identity = __esm(() => {
+  init_model_routes();
+});
+
+// ../../loki-ts/src/util/update_check.ts
+var CACHE_TTL_MS, NEGATIVE_TTL_MS;
+var init_update_check = __esm(() => {
+  init_paths();
+  CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+  NEGATIVE_TTL_MS = 15 * 60 * 1000;
+});
+
+// ../../loki-ts/src/runner/router/advisor_probe.ts
+var ADVISOR_ERROR_LIMIT = 3;
+var init_advisor_probe = __esm(() => {
+  init_claude_model();
+  init_update_check();
+});
+
+// ../../loki-ts/src/runner/sdk_stream_parser.ts
+var init_sdk_stream_parser = __esm(() => {
+  init_cost();
+  init_run_identity();
+  init_budget();
+  init_advisor_probe();
+});
+
+// ../../loki-ts/src/runner/trim.ts
+var init_trim = () => {};
+
+// ../../loki-ts/src/runner/provider_opencode.ts
+var init_provider_opencode = __esm(() => {
+  init_shell();
+  init_providers();
+});
+
+// ../../loki-ts/src/runner/providers.ts
+var _installedVersionCache;
+var init_providers = __esm(() => {
+  init_shell();
+  init_paths();
+  init_claude_flags();
+  init_mcp_config();
+  init_lean_prefix();
+  init_sdk_stream_parser();
+  init_session_resume();
+  init_trim();
+  init_advisor_probe();
+  init_claude_model();
+  init_model_routes();
+  init_provider_opencode();
+  init_cost_breakdown();
+  _installedVersionCache = new Map;
+});
+
 // ../../loki-ts/src/providers/provider_guard.ts
 function providerSandboxFlags(provider) {
   switch (provider) {
@@ -8863,6 +9146,7 @@ var init_session = __esm(() => {
   init_session_route();
   init_safe_git();
   init_cost_breakdown();
+  init_providers();
   init_provider_guard();
   init_budget();
   init_budget_cap();
@@ -8880,7 +9164,7 @@ var init_model_rank = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/sizing.ts
-import { existsSync as existsSync20, readFileSync as readFileSync26 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync27 } from "fs";
 import { basename as basename9 } from "path";
 function namedFiles(task, map) {
   return (map?.files ?? []).filter((f) => task.toLowerCase().includes(basename9(f).toLowerCase()));
@@ -8902,7 +9186,7 @@ function sizeTask(task, map, tests) {
 }
 function loadRepoMap(repomapRef) {
   try {
-    return repomapRef && existsSync20(repomapRef) ? JSON.parse(readFileSync26(repomapRef, "utf8")) : null;
+    return repomapRef && existsSync21(repomapRef) ? JSON.parse(readFileSync27(repomapRef, "utf8")) : null;
   } catch {
     return null;
   }
@@ -8964,14 +9248,14 @@ var init_model_downgrades = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/discover.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync11, readFileSync as readFileSync27, rmSync as rmSync7, writeFileSync as writeFileSync14 } from "fs";
+import { existsSync as existsSync22, mkdirSync as mkdirSync11, readFileSync as readFileSync28, rmSync as rmSync7, writeFileSync as writeFileSync14 } from "fs";
 import { join as join34 } from "path";
 function projectModelEnabled(env = process.env) {
   return env["LOKI_E10_PROJECT_MODEL"] !== "0";
 }
 function loadCached(repoDir, now2 = Date.now()) {
   try {
-    return parseCached(repoDir, JSON.parse(readFileSync27(join34(repoDir, PROJECT_FILE), "utf8")), now2);
+    return parseCached(repoDir, JSON.parse(readFileSync28(join34(repoDir, PROJECT_FILE), "utf8")), now2);
   } catch {
     return null;
   }
@@ -8986,7 +9270,7 @@ function loadCommitted(repoDir) {
   };
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync27(join34(repoDir, PROJECT_FILE), "utf8"));
+    raw2 = JSON.parse(readFileSync28(join34(repoDir, PROJECT_FILE), "utf8"));
   } catch (e) {
     return ignore(`unreadable JSON (${e instanceof Error ? e.message : String(e)})`);
   }
@@ -9127,8 +9411,8 @@ var init_test_file_text = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { existsSync as existsSync22, readFileSync as readFileSync28, realpathSync as realpathSync15 } from "fs";
-import { basename as basename11, dirname as dirname13, extname, isAbsolute as isAbsolute2, join as join36, relative, sep as sep10 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync29, realpathSync as realpathSync15 } from "fs";
+import { basename as basename11, dirname as dirname14, extname, isAbsolute as isAbsolute2, join as join36, relative, sep as sep10 } from "path";
 function projectInterpreter(root) {
   const ve = process.env["VIRTUAL_ENV"], inRepo = (p) => {
     try {
@@ -9138,7 +9422,7 @@ function projectInterpreter(root) {
       return false;
     }
   };
-  return [join36(root, ".venv", "bin", "python"), join36(root, "venv", "bin", "python"), ...ve && inRepo(ve) ? [join36(ve, "bin", "python")] : []].some(existsSync22) ? "project" : "system";
+  return [join36(root, ".venv", "bin", "python"), join36(root, "venv", "bin", "python"), ...ve && inRepo(ve) ? [join36(ve, "bin", "python")] : []].some(existsSync23) ? "project" : "system";
 }
 var harnessRunners = (runners, files = [], env = process.env) => runners.length === 0 && !files.some((f) => PY_TEST_RE.test(basename11(f)) || GO_TEST_RE.test(f)) && env.LOKI_WALL_HARNESS_RUNNER !== "0" && Bun.which("bun", { PATH: env.PATH ?? "" }) ? ["bun"] : runners;
 var init_testmap = __esm(() => {
@@ -9151,8 +9435,8 @@ var init_testmap = __esm(() => {
 // ../../loki-ts/src/util/check_result.ts
 import { spawn as spawn7 } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync29, realpathSync as realpathSync16, renameSync as renameSync7, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "fs";
-import { basename as basename12, dirname as dirname14, isAbsolute as isAbsolute3, join as join37, relative as relative2 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync12, readFileSync as readFileSync30, realpathSync as realpathSync16, renameSync as renameSync7, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "fs";
+import { basename as basename12, dirname as dirname15, isAbsolute as isAbsolute3, join as join37, relative as relative2 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -9583,7 +9867,7 @@ function publishableWall(repoDir, runDir, o, env = process.env) {
     if (!hit || rel.startsWith("..") || isAbsolute3(rel) || rel.startsWith(".loki/") || !basename12(rel).startsWith("loki_wall_"))
       continue;
     try {
-      const bytes = readFileSync29(join37(runDir, "wall", basename12(rel)));
+      const bytes = readFileSync30(join37(runDir, "wall", basename12(rel)));
       if (createHash8("sha256").update(bytes).digest("hex") !== w["sha256"])
         throw new Error("hash");
       out2.files.push({ rel, bytes, cmd: String(hit["cmd"]) });
@@ -9594,9 +9878,9 @@ function publishableWall(repoDir, runDir, o, env = process.env) {
   return out2;
 }
 function changedFiles(repoDir, baseSha, skip) {
-  const run = (args) => safeGit(repoDir, args).split("\x00").filter(Boolean);
-  const tracked = run(["-c", "core.quotePath=false", "diff", "--no-renames", "--name-only", "-z", baseSha]);
-  const untracked = run(["-c", "core.quotePath=false", "ls-files", "--others", "--exclude-standard", "-z"]);
+  const run2 = (args) => safeGit(repoDir, args).split("\x00").filter(Boolean);
+  const tracked = run2(["-c", "core.quotePath=false", "diff", "--no-renames", "--name-only", "-z", baseSha]);
+  const untracked = run2(["-c", "core.quotePath=false", "ls-files", "--others", "--exclude-standard", "-z"]);
   return [...new Set([...tracked, ...untracked])].filter((f) => !f.startsWith(".loki/") && !skip?.(f));
 }
 function diffFiles(repoDir, baseSha, skip) {
@@ -9622,7 +9906,7 @@ function diffFiles(repoDir, baseSha, skip) {
       return f;
     let n2 = 0;
     try {
-      n2 = readFileSync29(join37(repoDir, path), "utf8").split(`
+      n2 = readFileSync30(join37(repoDir, path), "utf8").split(`
 `).length;
     } catch {}
     return { path, added: n2, deleted: 0, status: "added" };
@@ -9645,7 +9929,7 @@ function diffFiles(repoDir, baseSha, skip) {
     let text2 = added.get(f.path) ?? "";
     if (!text2 && f.status === "added") {
       try {
-        text2 = readFileSync29(join37(repoDir, f.path), "utf8");
+        text2 = readFileSync30(join37(repoDir, f.path), "utf8");
       } catch {}
     }
     const rule = criticalRuleFor(f.path, text2, rules);
@@ -9657,7 +9941,7 @@ function diffFiles(repoDir, baseSha, skip) {
       continue;
     try {
       const oldText = f.status === "added" ? "" : safeGit(repoDir, ["show", `${baseSha}:${f.path}`]);
-      const newText = readFileSync29(join37(repoDir, f.path), "utf8");
+      const newText = readFileSync30(join37(repoDir, f.path), "utf8");
       const patch = f.status === "added" ? newText.split(`
 `).map((l) => `+${l}`).join(`
 `) : safeGit(repoDir, ["diff", "-U0", baseSha, "--", f.path]);
@@ -9762,7 +10046,7 @@ function pytestCollectionIsRed(output, repoDir) {
 }
 function moduleUnderRepo(repoDir, name) {
   const rel = name.replace(/\./g, "/");
-  return existsSync23(join37(repoDir, `${rel}.py`)) || existsSync23(join37(repoDir, rel, "__init__.py"));
+  return existsSync24(join37(repoDir, `${rel}.py`)) || existsSync24(join37(repoDir, rel, "__init__.py"));
 }
 function pytestExit1IsRed(output) {
   if (/^!+ _pytest\.outcomes\.Exit\b/m.test(output))
@@ -9864,8 +10148,8 @@ function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
     }
   };
   const venvEnv = process.env["VIRTUAL_ENV"], onPath = (b) => Bun.which(b, { PATH: process.env["PATH"] ?? "" });
-  const project = [join37(repoDir, ".venv", "bin", bin), join37(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join37(venvEnv, "bin", bin)] : []].find(existsSync23);
-  return project ? [project, "project", []] : existsSync23(join37(repoDir, "uv.lock")) && onPath("uv") ? ["uv", "project", ["run", "--", bin]] : [onPath(fallback) ? fallback : lastResort, "system", []];
+  const project = [join37(repoDir, ".venv", "bin", bin), join37(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join37(venvEnv, "bin", bin)] : []].find(existsSync24);
+  return project ? [project, "project", []] : existsSync24(join37(repoDir, "uv.lock")) && onPath("uv") ? ["uv", "project", ["run", "--", bin]] : [onPath(fallback) ? fallback : lastResort, "system", []];
 }
 function runnerCmd(t, repoDir) {
   switch (t.runner) {
@@ -9884,7 +10168,7 @@ function runnerCmd(t, repoDir) {
     case "npm":
       return ["npm", ["test", "--silent"]];
     case "go":
-      return ["go", ["test", "-json", `./${dirname14(t.path)}`]];
+      return ["go", ["test", "-json", `./${dirname15(t.path)}`]];
     case "cargo":
       return ["cargo", ["test"]];
   }
@@ -9940,11 +10224,11 @@ async function publishWall(git, runId, repoDir, files, done) {
   for (const f of files) {
     const abs = join37(repoDir, f.rel);
     try {
-      if (!realpathSync16(dirname14(abs)).startsWith(realpathSync16(repoDir)))
+      if (!realpathSync16(dirname15(abs)).startsWith(realpathSync16(repoDir)))
         return false;
     } catch {}
     rmSync8(abs, { force: true });
-    mkdirSync12(dirname14(abs), { recursive: true });
+    mkdirSync12(dirname15(abs), { recursive: true });
     writeFileSync15(abs, f.bytes);
   }
   if ((await git(["--literal-pathspecs", "add", "--", ...rels])).code !== 0 || (await git(["--literal-pathspecs", "commit", "-q", "-m", "test: loki acceptance checks (Wall)", "-m", `Loki-Wall-Publish: ${runId}
@@ -9960,7 +10244,7 @@ var NO_TESTS_REASON = "no tests executed", GO_EXIT0_REASON = "test count could n
 `), tailLines = (out2) => out2.split(`
 `).filter((x) => x.trim()).slice(-12), GO_PKG_RE, EXIT_CODED_COUNT = "n/a (exit-coded check, not a test runner)", FRAMEWORK_RE, SCRIPT_RE, isExecutedProof = (c) => c.result === "pass" && typeof c.n === "number" && c.n > 0, hasExecutedProof = (checks) => checks.some(isExecutedProof), LLM_JUDGES, NON_RUNNER, normPath = (p) => p.replace(/^(?:\.\/)+/, ""), hasExogenousProof = (checks, ctx) => checks.some((c) => isExecutedProof(c) && ((p) => p !== "agent_authored" && p !== "llm_judge")(checkProvenance(c.name ?? "", ctx))), SENSITIVE, API, TEST_CFG, RANK2, FILES_MEDIUM = 4, FILES_HIGH = 15, LINES_MEDIUM = 100, LINES_HIGH = 500, RAN_ALWAYS, REVIEWER_ITEM = "one reviewer", PLAN, LOW_SKIPPED, deferredOf = (tier, selected, executed) => (tier === "low" ? LOW_SKIPPED : selected).filter((c) => !RAN_ALWAYS.includes(c) && !executed.includes(c)), DEEP_ITEMS, NOT_SELECTED = "not selected by risk tier: ", MANIFEST_LOCKS, dirOf = (p) => p.includes("/") ? p.slice(0, p.lastIndexOf("/")) : "", PKG_DEP_KEYS, PYPROJECT_NONDEP, SEM_RULES, DOC_FILE, readOr = (p) => {
   try {
-    return readFileSync29(p, "utf8");
+    return readFileSync30(p, "utf8");
   } catch {
     return null;
   }
@@ -10037,10 +10321,10 @@ var init_check_result = __esm(() => {
 
 // ../../loki-ts/src/util/receipt_signer.ts
 import { createHash as createHash9, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign, verify as verify2 } from "crypto";
-import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync13, readdirSync as readdirSync14, readFileSync as readFileSync30, renameSync as renameSync8, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync16 } from "fs";
+import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync13, readdirSync as readdirSync14, readFileSync as readFileSync31, renameSync as renameSync8, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir8 } from "os";
 import { spawnSync as spawnSync2 } from "child_process";
-import { dirname as dirname15, join as join38 } from "path";
+import { dirname as dirname16, join as join38 } from "path";
 function canonicalJson(x) {
   const walk = (v) => {
     if (Array.isArray(v))
@@ -10063,9 +10347,9 @@ function loadSigningKey(generate = true) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
       const file = given || join38(process.env["HOME"] || homedir8(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        pem = readFileSync30(file);
+        pem = readFileSync31(file);
         if (!given) {
-          for (const [f, m] of [[file, 384], [dirname15(file), 448]])
+          for (const [f, m] of [[file, 384], [dirname16(file), 448]])
             if (statSync15(f).mode & 63)
               chmodSync4(f, m);
         }
@@ -10074,8 +10358,8 @@ function loadSigningKey(generate = true) {
           lastProblem = `signing key file unreadable (${e.code ?? "error"})`;
         if (e.code !== "ENOENT" || !generate)
           return null;
-        mkdirSync13(dirname15(dirname15(file)), { recursive: true, mode: 448 });
-        mkdirSync13(dirname15(file), { recursive: true, mode: 448 });
+        mkdirSync13(dirname16(dirname16(file)), { recursive: true, mode: 448 });
+        mkdirSync13(dirname16(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
         writeFileSync16(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
@@ -10086,7 +10370,7 @@ function loadSigningKey(generate = true) {
         } finally {
           unlinkSync5(tmp);
         }
-        pem = readFileSync30(file);
+        pem = readFileSync31(file);
       }
     }
     stage = "parse";
@@ -10219,9 +10503,9 @@ var init_stop_restore = __esm(() => {
 });
 
 // ../../loki-ts/src/util/base_guard.ts
-import { existsSync as existsSync24, readdirSync as readdirSync15, readFileSync as readFileSync31, readlinkSync, realpathSync as realpathSync17, symlinkSync } from "fs";
+import { existsSync as existsSync25, readdirSync as readdirSync15, readFileSync as readFileSync32, readlinkSync, realpathSync as realpathSync17, symlinkSync } from "fs";
 import { basename as basename13, join as join39, relative as relative3, resolve as resolve14, sep as sep11 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
+import { fileURLToPath as fileURLToPath6 } from "url";
 function insideAny(p, roots) {
   const under = (q) => roots.some((r) => q === r || q.startsWith(r + sep11));
   if (under(resolve14(p)))
@@ -10237,7 +10521,7 @@ function namedPaths(file, text2) {
   if (basename13(file) !== "direct_url.json")
     return out2;
   const url = JSON.parse(text2).url;
-  return typeof url === "string" && url.startsWith("file:") ? [...out2, fileURLToPath5(url)] : out2;
+  return typeof url === "string" && url.startsWith("file:") ? [...out2, fileURLToPath6(url)] : out2;
 }
 function depsSeeHead(pkgDir, repoDir) {
   let roots;
@@ -10264,7 +10548,7 @@ function depsSeeHead(pkgDir, repoDir) {
         if (walk(p, own))
           return true;
       } else if (REPO_LINK_FILE.test(e.name)) {
-        const text2 = readFileSync31(p, "utf8");
+        const text2 = readFileSync32(p, "utf8");
         if (roots.some((r) => text2.includes(r)) || namedPaths(p, text2).some((n2) => insideAny(n2, roots)))
           return true;
       }
@@ -10286,7 +10570,7 @@ function depsSeeHead(pkgDir, repoDir) {
     return true;
   }
 }
-async function zeroOnBase(cands, baseDir, repoDir, run, note) {
+async function zeroOnBase(cands, baseDir, repoDir, run2, note) {
   const zero = [];
   for (const c of cands) {
     const src = join39(repoDir, relative3(baseDir, c.cwd));
@@ -10294,11 +10578,11 @@ async function zeroOnBase(cands, baseDir, repoDir, run, note) {
       continue;
     for (const d of ["node_modules", ".venv"]) {
       try {
-        if (existsSync24(join39(src, d)) && !existsSync24(join39(c.cwd, d)))
+        if (existsSync25(join39(src, d)) && !existsSync25(join39(c.cwd, d)))
           symlinkSync(join39(src, d), join39(c.cwd, d));
       } catch {}
     }
-    if (isZeroRun(c, await run(c))) {
+    if (isZeroRun(c, await run2(c))) {
       zero.push(c.name);
       note(c.name);
     }
@@ -11175,11 +11459,11 @@ var init_state = __esm(() => {
 
 // ../../loki-ts/src/runner/repo_profile.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { existsSync as existsSync25, lstatSync as lstatSync10, readFileSync as readFileSync32, mkdirSync as mkdirSync14, readdirSync as readdirSync16, renameSync as renameSync9, rmSync as rmSync9, writeFileSync as writeFileSync17 } from "fs";
+import { existsSync as existsSync26, lstatSync as lstatSync10, readFileSync as readFileSync33, mkdirSync as mkdirSync14, readdirSync as readdirSync16, renameSync as renameSync9, rmSync as rmSync9, writeFileSync as writeFileSync17 } from "fs";
 import { basename as basename14, join as join40, resolve as resolve15, isAbsolute as isAbsolute4 } from "path";
 function detectFormatters(repoDir) {
   const out2 = [];
-  const has = (...fs2) => fs2.some((f) => existsSync25(join40(repoDir, f)));
+  const has = (...fs2) => fs2.some((f) => existsSync26(join40(repoDir, f)));
   const pp = read(join40(repoDir, "pyproject.toml")), pj = read(join40(repoDir, "package.json"));
   if (/\[tool\.ruff/.test(pp) || has("ruff.toml", ".ruff.toml"))
     out2.push({ tool: "ruff", argv: ["ruff", "format"], exts: /\.pyi?$/ });
@@ -11188,7 +11472,7 @@ function detectFormatters(repoDir) {
     prettierKey = pj !== "" && "prettier" in JSON.parse(pj);
   } catch {}
   const local = join40(repoDir, "node_modules", ".bin", "prettier");
-  if ((prettierKey || readdirSync16(repoDir).some((f) => /^(\.prettierrc(\.[a-z0-9]+)?|prettier\.config\.[cm]?[jt]s)$/.test(f))) && existsSync25(local))
+  if ((prettierKey || readdirSync16(repoDir).some((f) => /^(\.prettierrc(\.[a-z0-9]+)?|prettier\.config\.[cm]?[jt]s)$/.test(f))) && existsSync26(local))
     out2.push({ tool: "prettier", argv: [local, "--write"], exts: /\.(?:[cm]?[jt]sx?|json|css|scss|md|ya?ml|html)$/ });
   if (has("go.mod"))
     out2.push({ tool: "gofmt", argv: ["gofmt", "-w"], exts: /\.go$/ });
@@ -11215,7 +11499,7 @@ function runFormatters(repoDir, files, env) {
 }
 function loadProfile(repoDir) {
   try {
-    const p = JSON.parse(readFileSync32(commandProfilePath(repoDir), "utf8"));
+    const p = JSON.parse(readFileSync33(commandProfilePath(repoDir), "utf8"));
     return p?.version === 1 && Array.isArray(p.commands) && p.baseline ? p : null;
   } catch {
     return null;
@@ -11319,7 +11603,7 @@ async function staticPreExisting(tool, prefix, files, io) {
 }
 var commandProfilePath = (repoDir) => join40(repoDir, ".loki", "state", "repo-profile.json"), read = (p) => {
   try {
-    return readFileSync32(p, "utf8");
+    return readFileSync33(p, "utf8");
   } catch {
     return "";
   }
@@ -11365,7 +11649,7 @@ var init_context = __esm(() => {
 });
 
 // ../../loki-ts/src/util/steer.ts
-import { appendFileSync as appendFileSync2, closeSync as closeSync8, constants as constants2, fstatSync as fstatSync6, readdirSync as readdirSync17, lstatSync as lstatSync11, mkdirSync as mkdirSync15, linkSync as linkSync2, openSync as openSync8, readFileSync as readFileSync33, readSync as readSync7, renameSync as renameSync10, statSync as statSync16, lutimesSync, rmSync as rmSync10, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18, existsSync as existsSync26 } from "fs";
+import { appendFileSync as appendFileSync2, closeSync as closeSync8, constants as constants2, fstatSync as fstatSync6, readdirSync as readdirSync17, lstatSync as lstatSync11, mkdirSync as mkdirSync15, linkSync as linkSync2, openSync as openSync8, readFileSync as readFileSync34, readSync as readSync7, renameSync as renameSync10, statSync as statSync16, lutimesSync, rmSync as rmSync10, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18, existsSync as existsSync27 } from "fs";
 import { createHash as createHash10, randomBytes as randomBytes4 } from "crypto";
 import { basename as basename15, join as join41 } from "path";
 function archiveTo(logs, prefix, src, link = linkSync2, onLinked) {
@@ -11402,7 +11686,7 @@ function orphanAlreadyArchived(logs, claim) {
       const s = statSync16(join41(logs, a));
       if (s.ino !== c.ino || s.dev !== c.dev)
         continue;
-      if (/^human-input-(ORPHAN|REJECTED)-/.test(a) || existsSync26(appliedMarker(logs, a)))
+      if (/^human-input-(ORPHAN|REJECTED)-/.test(a) || existsSync27(appliedMarker(logs, a)))
         return true;
     } catch {}
   }
@@ -11583,7 +11867,7 @@ function recordRevisions(repoDir, text2, archived, at) {
   const file = join41(repoDir, ".loki", "intent-revisions.jsonl");
   let last = 0;
   try {
-    for (const l of readFileSync33(file, "utf8").split(`
+    for (const l of readFileSync34(file, "utf8").split(`
 `)) {
       try {
         last = Math.max(last, Number(JSON.parse(l).rev) || 0);
@@ -11649,7 +11933,7 @@ var init_steer = __esm(() => {
 
 // ../../loki-ts/src/util/run_outputs.ts
 import { createHash as createHash11 } from "crypto";
-import { existsSync as existsSync27, mkdirSync as mkdirSync16, readdirSync as readdirSync18, readFileSync as readFileSync34, statSync as statSync17, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync16, readdirSync as readdirSync18, readFileSync as readFileSync35, statSync as statSync17, writeFileSync as writeFileSync19 } from "fs";
 import { join as join42, resolve as resolve16 } from "path";
 function intentRevisionsBlock(revs) {
   const r = (revs ?? []).filter((r2) => r2.unapplied !== true).map(({ rev, source, actor, sha: sha2 }) => ({ rev, source, actor, sha: sha2 }));
@@ -11658,11 +11942,11 @@ function intentRevisionsBlock(revs) {
 function seededCorpusBlock(env = process.env) {
   const dir = env["LOKI_SEEDED_DEFECTS_DIR"] || join42(REPO_ROOT, "benchmarks", "seeded-defects");
   try {
-    const bytes = readFileSync34(join42(dir, "manifest.json")), version2 = createHash11("sha256").update(bytes).digest("hex");
+    const bytes = readFileSync35(join42(dir, "manifest.json")), version2 = createHash11("sha256").update(bytes).digest("hex");
     const ids = (JSON.parse(bytes.toString("utf8")).defects ?? []).map((d) => d.id);
     let rate = null;
     try {
-      const res = JSON.parse(readFileSync34(join42(dir, "results", "wrong-pass.json"), "utf8"));
+      const res = JSON.parse(readFileSync35(join42(dir, "results", "wrong-pass.json"), "utf8"));
       const runs2 = res.manifest_sha256 === version2 && Array.isArray(res.runs) ? res.runs : [];
       const complete = (o) => !!o && Object.keys(o).length === ids.length && ids.every((id) => typeof id === "string" && (o[id] === "SEALED" || o[id] === "NOT_SEALED"));
       const top = runs2.filter((r) => r.setup === "top"), floor = runs2.filter((r) => r.setup === "floor");
@@ -11946,7 +12230,7 @@ var init_registry2 = __esm(() => {
 
 // ../../loki-ts/src/features/receipt_dsse.ts
 import { createPublicKey as createPublicKey3, sign as sign2, verify as verify3 } from "crypto";
-import { readFileSync as readFileSync35 } from "fs";
+import { readFileSync as readFileSync36 } from "fs";
 function pae(payloadType, body) {
   const t = Buffer.from(payloadType, "utf8");
   return Buffer.concat([Buffer.from(`DSSEv1 ${t.length} `), t, Buffer.from(` ${body.length} `), body]);
@@ -12023,7 +12307,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId2) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync35(receiptPath, "utf8")), runId2);
+    return envelopeRunIdProblem(JSON.parse(readFileSync36(receiptPath, "utf8")), runId2);
   } catch {
     return null;
   }
@@ -12152,9 +12436,9 @@ var init_run_cap = __esm(() => {
 });
 
 // ../../loki-ts/src/util/mutation_proof.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, rmSync as rmSync11, symlinkSync as symlinkSync2, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync29, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync3, readFileSync as readFileSync37, rmSync as rmSync11, symlinkSync as symlinkSync2, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { basename as basename16, dirname as dirname16, isAbsolute as isAbsolute6, join as join44, relative as relative5 } from "path";
+import { basename as basename16, dirname as dirname17, isAbsolute as isAbsolute6, join as join44, relative as relative5 } from "path";
 function mutationProof(i) {
   const rels = i.wallFiles.map((f) => isAbsolute6(f.path) ? relative5(i.repoDir, f.path) : f.path);
   if (rels.length === 0)
@@ -12175,15 +12459,15 @@ function mutationProof(i) {
     parent = mkdtempSync3(join44(tmpdir4(), "loki-mutproof-"));
     wt = join44(parent, "wt");
     const add3 = git(i.repoDir, ["worktree", "add", "--detach", wt, i.baseSha], Math.max(1000, Math.min(30000, remaining())));
-    added = existsSync28(wt) || add3.status === 0;
+    added = existsSync29(wt) || add3.status === 0;
     if (add3.status !== 0)
       return np("could not create the base worktree");
     for (const rel of rels) {
-      const sealed = join44(i.runDir, "wall", basename16(rel)), src = existsSync28(sealed) ? sealed : join44(i.repoDir, rel);
-      if (!existsSync28(src))
+      const sealed = join44(i.runDir, "wall", basename16(rel)), src = existsSync29(sealed) ? sealed : join44(i.repoDir, rel);
+      if (!existsSync29(src))
         return np(`Wall file missing: ${rel}`);
-      mkdirSync17(dirname16(join44(wt, rel)), { recursive: true });
-      writeFileSync20(join44(wt, rel), readFileSync36(src));
+      mkdirSync17(dirname17(join44(wt, rel)), { recursive: true });
+      writeFileSync20(join44(wt, rel), readFileSync37(src));
     }
     for (const rel of rels) {
       const parts = rel.split("/").slice(0, -1);
@@ -12191,7 +12475,7 @@ function mutationProof(i) {
         const anc = parts.slice(0, n2).join("/");
         for (const d of DEP_DIRS) {
           const src = join44(i.repoDir, anc, d), dst = join44(wt, anc, d);
-          if (existsSync28(src) && !existsSync28(dst)) {
+          if (existsSync29(src) && !existsSync29(dst)) {
             try {
               symlinkSync2(src, dst);
             } catch {}
@@ -12199,190 +12483,57 @@ function mutationProof(i) {
         }
       }
     }
-    let pass = 0, fail = 0, notRun = 0;
-    for (const t of tests) {
-      if (remaining() <= 0)
-        return np("timeout");
-      const r = (typeof i.runner === "function" ? i.runner(remaining()) : i.runner).run(wt, [t]);
-      pass += r.pass;
-      fail += r.fail;
-      notRun += r.not_run ?? 0;
-    }
-    if (remaining() <= 0 && fail === 0)
-      return np("timeout");
-    if (fail > 0)
-      return { outcome: "yes", line: `${LABEL}yes` };
-    if (pass > 0 && notRun === 0)
-      return { outcome: "no", line: `${LABEL}no (warning: the Wall tests also pass on the old code)` };
-    return np("the Wall command did not execute to a result");
-  } catch (e) {
-    return np(`error: ${String(e?.message ?? e).replace(/\s+/g, " ").slice(0, 120)}`);
-  } finally {
-    if (wt && added)
-      git(i.repoDir, ["worktree", "remove", "--force", wt]);
-    if (parent)
-      rmSync11(parent, { recursive: true, force: true });
-  }
-}
-var mutationStrict = (env = process.env) => (env["LOKI_MUTATION_STRICT"] ?? "").trim() === "1", mutationEnabled = (env = process.env) => (env["LOKI_MUTATION_PROOF"] ?? "").trim() !== "0", LABEL = "test fails without the fix: ", np = (reason) => ({ outcome: "inconclusive", line: `${LABEL}inconclusive (${reason})` }), MAX_TOTAL_S = 40, envTimeoutS = (raw2) => {
-  const n2 = Number(raw2 ?? 30);
-  return Number.isFinite(n2) && n2 > 0 ? n2 : 30;
-}, DEP_DIRS, git = (cwd, args, timeout = 30000) => {
-  try {
-    safeGit(cwd, args, { timeout });
-    return { status: 0 };
-  } catch {
-    return { status: 1 };
-  }
-};
-var init_mutation_proof = __esm(() => {
-  init_safe_git();
-  init_run_cap();
-  DEP_DIRS = ["node_modules", ".venv", "venv"];
-});
-
-// ../../loki-ts/src/features/lean_prefix.ts
-var LEAN_PREFIX, PARALLEL_TOOL_CALLS_INSTRUCTION = `PARALLEL_TOOL_CALLS: When issuing independent read-only operations (reads, greps, file lookups, LSP checks) that do not depend on each other, issue them in a single message so they run in parallel; do not serialize independent lookups.`, STAGE_PREFIX, withStagePrefix = (brief) => process.env["LOKI_SPEED"] !== "0" ? `${STAGE_PREFIX}
-
-${brief}` : brief;
-var init_lean_prefix = __esm(() => {
-  LEAN_PREFIX = "You are Loki, an autonomous coding agent. Follow the task prompt exactly " + "and report only what you did.";
-  STAGE_PREFIX = "You are Loki, an autonomous coding agent working one stage of a run. " + "Follow the stage prompt exactly, including the role it gives you and the rules it sets, " + "and report only what you did. " + "Never present a behavior as done when this repository's code does not provide it: a plan, a test or a change never substitutes documentation or changelog text for missing code. " + `${PARALLEL_TOOL_CALLS_INSTRUCTION} ` + "Stage-specific instructions and the task follow this block.";
-});
-
-// ../../loki-ts/src/runner/worker_proc.ts
-function killGroup2(pid, sig) {
-  if (!pid)
-    return;
-  try {
-    process.kill(-pid, sig);
-  } catch {}
-}
-var CANCEL_GRACE_MS;
-var init_worker_proc = __esm(() => {
-  CANCEL_GRACE_MS = Number(process.env["LOKI_E10_CANCEL_GRACE_MS"]) > 0 ? Number(process.env["LOKI_E10_CANCEL_GRACE_MS"]) : 1e4;
-});
-
-// ../../loki-ts/src/util/shell.ts
-async function readStreamCapped(stream, maxBytes = MAX_STDOUT_BYTES, onFirstChunk) {
-  const reader = stream.getReader();
-  let first = onFirstChunk;
-  const decoder = new TextDecoder;
-  let out2 = "";
-  let total = 0;
-  try {
-    while (total < maxBytes) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      if (!value)
-        continue;
-      if (first && value.byteLength > 0) {
-        const cb = first;
-        first = undefined;
-        try {
-          cb();
-        } catch {}
-      }
-      total += value.byteLength;
-      if (total > maxBytes) {
-        const keep = value.byteLength - (total - maxBytes);
-        out2 += decoder.decode(value.subarray(0, keep), { stream: true });
-        break;
-      }
-      out2 += decoder.decode(value, { stream: true });
-    }
-    out2 += decoder.decode();
+    let pass = 0, fail = 0, notRun = 0;
+    for (const t of tests) {
+      if (remaining() <= 0)
+        return np("timeout");
+      const r = (typeof i.runner === "function" ? i.runner(remaining()) : i.runner).run(wt, [t]);
+      pass += r.pass;
+      fail += r.fail;
+      notRun += r.not_run ?? 0;
+    }
+    if (remaining() <= 0 && fail === 0)
+      return np("timeout");
+    if (fail > 0)
+      return { outcome: "yes", line: `${LABEL}yes` };
+    if (pass > 0 && notRun === 0)
+      return { outcome: "no", line: `${LABEL}no (warning: the Wall tests also pass on the old code)` };
+    return np("the Wall command did not execute to a result");
+  } catch (e) {
+    return np(`error: ${String(e?.message ?? e).replace(/\s+/g, " ").slice(0, 120)}`);
   } finally {
-    try {
-      await reader.cancel();
-    } catch {}
-    reader.releaseLock();
+    if (wt && added)
+      git(i.repoDir, ["worktree", "remove", "--force", wt]);
+    if (parent)
+      rmSync11(parent, { recursive: true, force: true });
   }
-  return out2;
 }
-async function run(argv, opts = {}) {
-  const proc = Bun.spawn({
-    cmd: [...argv],
-    stdout: "pipe",
-    stderr: "pipe",
-    env: opts.env ? { ...process.env, ...opts.env } : process.env,
-    cwd: opts.cwd,
-    ...opts.group ? { detached: true } : {}
-  });
-  let timer;
-  let killTimer;
-  const stop = () => {
-    try {
-      if (opts.group)
-        killGroup2(proc.pid, "SIGTERM");
-      else
-        proc.kill("SIGTERM");
-    } catch {}
-    killTimer ??= setTimeout(() => {
-      try {
-        if (opts.group)
-          killGroup2(proc.pid, "SIGKILL");
-        else
-          proc.kill("SIGKILL");
-      } catch {}
-    }, 2000);
-  };
-  if (opts.timeoutMs && opts.timeoutMs > 0)
-    timer = setTimeout(stop, opts.timeoutMs);
-  if (opts.signal) {
-    if (opts.signal.aborted)
-      stop();
-    else
-      opts.signal.addEventListener("abort", stop, { once: true });
-  }
+var mutationStrict = (env = process.env) => (env["LOKI_MUTATION_STRICT"] ?? "").trim() === "1", mutationEnabled = (env = process.env) => (env["LOKI_MUTATION_PROOF"] ?? "").trim() !== "0", LABEL = "test fails without the fix: ", np = (reason) => ({ outcome: "inconclusive", line: `${LABEL}inconclusive (${reason})` }), MAX_TOTAL_S = 40, envTimeoutS = (raw2) => {
+  const n2 = Number(raw2 ?? 30);
+  return Number.isFinite(n2) && n2 > 0 ? n2 : 30;
+}, DEP_DIRS, git = (cwd, args, timeout = 30000) => {
   try {
-    const [stdout, stderr, exitCode] = await Promise.all([
-      readStreamCapped(proc.stdout, MAX_STDOUT_BYTES, opts.onFirstStdout),
-      new Response(proc.stderr).text(),
-      proc.exited
-    ]);
-    return { stdout, stderr, exitCode };
-  } finally {
-    if (timer)
-      clearTimeout(timer);
-    if (killTimer)
-      clearTimeout(killTimer);
-    opts.signal?.removeEventListener("abort", stop);
-    if (opts.group)
-      killGroup2(proc.pid, "SIGKILL");
-  }
-}
-async function commandExists(name) {
-  const safe = shEscape(name);
-  const r = await run(["sh", "-c", `command -v ${safe}`], { timeoutMs: 5000 });
-  if (r.exitCode === 0) {
-    const path = r.stdout.trim();
-    return path || null;
-  }
-  return null;
-}
-function shEscape(name) {
-  if (!/^[A-Za-z0-9._/-]+$/.test(name)) {
-    throw new Error(`refused to shell-escape suspect token: ${name}`);
+    safeGit(cwd, args, { timeout });
+    return { status: 0 };
+  } catch {
+    return { status: 1 };
   }
-  return name;
-}
-var MAX_STDOUT_BYTES;
-var init_shell = __esm(() => {
-  init_worker_proc();
-  MAX_STDOUT_BYTES = 16 * 1024 * 1024;
+};
+var init_mutation_proof = __esm(() => {
+  init_safe_git();
+  init_run_cap();
+  DEP_DIRS = ["node_modules", ".venv", "venv"];
 });
 
 // ../../loki-ts/src/util/python.ts
-import { accessSync, constants as constants3, existsSync as existsSync29, mkdtempSync as mkdtempSync4, readFileSync as readFileSync37, realpathSync as realpathSync19, rmSync as rmSync12, statSync as statSync18 } from "fs";
+import { accessSync, constants as constants3, existsSync as existsSync30, mkdtempSync as mkdtempSync4, readFileSync as readFileSync38, realpathSync as realpathSync19, rmSync as rmSync12, statSync as statSync18 } from "fs";
 import { spawnSync as spawnSync4 } from "child_process";
 import { tmpdir as tmpdir5 } from "os";
 async function findPython3() {
   if (_pythonCache !== undefined)
     return _pythonCache;
   const homebrew = "/opt/homebrew/bin/python3.12";
-  if (existsSync29(homebrew)) {
+  if (existsSync30(homebrew)) {
     _pythonCache = homebrew;
     return homebrew;
   }
@@ -12733,7 +12884,7 @@ var init_wall_manifest = __esm(() => {
 
 // ../../loki-ts/src/features/wall_manifest_wire.ts
 import { createHash as createHash13 } from "crypto";
-import { basename as basename17, dirname as dirname17 } from "path";
+import { basename as basename17, dirname as dirname18 } from "path";
 function blobEntries(ls) {
   const out2 = [];
   for (const raw2 of ls.toString("latin1").split("\x00")) {
@@ -12763,7 +12914,7 @@ function wallManifestFor(repoDir, tree, task, env = process.env) {
       return null;
     const low = task.toLowerCase().replace(/\\/g, "/");
     const token = (n2) => new RegExp(`(?<![A-Za-z0-9_])${n2.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`).test(low);
-    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename17(e.path)) && e.path.includes("/") && token(dirname17(e.path));
+    const dirModule = (e) => /^(index|__init__|mod|main)\.[^.]+$/.test(basename17(e.path)) && e.path.includes("/") && token(dirname18(e.path));
     const matched = all.filter((e) => SOURCE.test(e.path) && (token(basename17(e.path)) || token(e.path) || token(basename17(e.path).replace(/\.[^.]*$/, "")) || dirModule(e)));
     const spans = (p) => [...low.matchAll(new RegExp(`(?<![A-Za-z0-9_])${p.toLowerCase().replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9_])`, "g"))].map((m) => [m.index, m.index + m[0].length]);
     const occ = new Map(matched.map((e) => [e, spans(e.path)]));
@@ -12825,7 +12976,7 @@ Example: test('name', () => { assert.strictEqual(fn(1), 2); });  Run: node --tes
 
 // ../../loki-ts/src/util/holdout.ts
 import { createHash as createHash14 } from "crypto";
-import { appendFileSync as appendFileSync3, copyFileSync as copyFileSync2, existsSync as existsSync30, mkdirSync as mkdirSync18, readFileSync as readFileSync38, rmSync as rmSync13, writeFileSync as writeFileSync21 } from "fs";
+import { appendFileSync as appendFileSync3, copyFileSync as copyFileSync2, existsSync as existsSync31, mkdirSync as mkdirSync18, readFileSync as readFileSync39, rmSync as rmSync13, writeFileSync as writeFileSync21 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
 import { basename as basename18, join as join45, relative as relative6 } from "path";
 function wallHoldoutRatio(env = process.env) {
@@ -12860,7 +13011,7 @@ function stashHoldout(o) {
   const files = held.map((name) => {
     copyFileSync2(join45(o.srcDir, name), join45(dir, name));
     rmSync13(join45(o.srcDir, name), { force: true });
-    return { name, runner: o.runnerOf(name), sha256: sha2(readFileSync38(join45(dir, name), "utf8")) };
+    return { name, runner: o.runnerOf(name), sha256: sha2(readFileSync39(join45(dir, name), "utf8")) };
   });
   writeFileSync21(join45(dir, MANIFEST), JSON.stringify({ targetDir: o.targetDir, files }));
   return { dir, names: new Set(held) };
@@ -12869,14 +13020,14 @@ function stageHoldout(dir, repoDir) {
   const put = [], tests = [], missing = [];
   let man = null;
   try {
-    man = JSON.parse(readFileSync38(join45(dir, MANIFEST), "utf8"));
+    man = JSON.parse(readFileSync39(join45(dir, MANIFEST), "utf8"));
   } catch {}
   if (!man)
     return { tests, missing: [`holdout store unreadable: ${basename18(dir)}`], cleanup: () => {} };
   mkdirSync18(man.targetDir, { recursive: true });
   man.files.forEach((f, i) => {
     const src = join45(dir, f.name);
-    if (!existsSync30(src) || sha2(readFileSync38(src, "utf8")) !== f.sha256) {
+    if (!existsSync31(src) || sha2(readFileSync39(src, "utf8")) !== f.sha256) {
       missing.push(`holdout ${i + 1} missing or altered`);
       return;
     }
@@ -13204,8 +13355,8 @@ var init_install = __esm(() => {
 });
 
 // ../../loki-ts/src/features/runner_config.ts
-import { readFileSync as readFileSync39 } from "fs";
-import { dirname as dirname18, join as join48, normalize as normalize2 } from "path";
+import { readFileSync as readFileSync40 } from "fs";
+import { dirname as dirname19, join as join48, normalize as normalize2 } from "path";
 function tomlKey2(s, i = 0, eq2 = true) {
   const parts = [], ws = () => {
     while (/\s/.test(s[i] ?? "x"))
@@ -13480,7 +13631,7 @@ function referenced(cfg, text2) {
       if (v && !/[$*]/.test(v))
         raw2.push(v);
     }
-  const dir = dirname18(cfg), explicit = ROOT_DIR.exec(text2), roots = [dir];
+  const dir = dirname19(cfg), explicit = ROOT_DIR.exec(text2), roots = [dir];
   if (explicit)
     roots.push("", ...explicit[1] ? [join48(dir, explicit[1])] : []);
   return [...raw2.flatMap((r) => r.startsWith("/") ? [normalize2(r.slice(1))] : roots.map((root) => normalize2(join48(root, r.replace(/^<rootDir>\/?/, ""))))), ...patchedTargets(cfg, text2).map((t) => normalize2(join48(dir, t)))];
@@ -13531,7 +13682,7 @@ function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
       bad = true;
     }
     if (bad) {
-      const dir = dirname18(cfg), loaded = [...ch].find((c) => c !== cfg && (dir === "." || c.startsWith(dir + "/")) && !NON_SOURCE.test(c));
+      const dir = dirname19(cfg), loaded = [...ch].find((c) => c !== cfg && (dir === "." || c.startsWith(dir + "/")) && !NON_SOURCE.test(c));
       if (ch.has(cfg) || loaded)
         notes.add(`runner config unparseable, trust capped: ${cfg}${loaded ? ` (${loaded} changed and may be loaded by it)` : ""}`);
     }
@@ -13563,7 +13714,7 @@ var PKG_KEYS, RAW_CONFIGS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, dep
   }
 }, headText = (dir, f) => {
   try {
-    return readFileSync39(join48(dir, f), "utf8");
+    return readFileSync40(join48(dir, f), "utf8");
   } catch {
     return "";
   }
@@ -13603,7 +13754,7 @@ var init_runner_config = __esm(() => {
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync4 } from "child_process";
-import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync40, rmSync as rmSync15 } from "fs";
+import { mkdtempSync as mkdtempSync6, readFileSync as readFileSync41, rmSync as rmSync15 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
 import { join as join49 } from "path";
 import { basename as basename20 } from "path";
@@ -13646,7 +13797,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => safeGit(repoDir, ["show", `${ref}:${path}`]);
-    const head = headRef ? show(headRef) : readFileSync40(join49(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync41(join49(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -13875,11 +14026,11 @@ var init_wall_owned = __esm(() => {
 
 // ../../loki-ts/src/util/app_probe.ts
 import { spawnSync as spawnSync6 } from "child_process";
-import { existsSync as existsSync31, mkdirSync as mkdirSync19, readFileSync as readFileSync41, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync19, readFileSync as readFileSync42, renameSync as renameSync11, writeFileSync as writeFileSync22 } from "fs";
 import { join as join51 } from "path";
 function readJson4(p) {
   try {
-    const v = JSON.parse(readFileSync41(p, "utf8"));
+    const v = JSON.parse(readFileSync42(p, "utf8"));
     return v && typeof v === "object" ? v : null;
   } catch {
     return null;
@@ -13887,7 +14038,7 @@ function readJson4(p) {
 }
 function stopApp(repoDir, opts = {}) {
   const runner = opts.runnerPath ?? join51(REPO_ROOT, "autonomy", "app-runner.sh");
-  if (!existsSync31(runner) || !existsSync31(join51(repoDir, ".loki", "app-runner", "app.pid")))
+  if (!existsSync32(runner) || !existsSync32(join51(repoDir, ".loki", "app-runner", "app.pid")))
     return;
   spawnSync6("bash", ["-c", STOP, "app-probe", repoDir, runner], { cwd: repoDir, env: plainTestEnv(), timeout: opts.timeoutMs ?? 60000, killSignal: "SIGKILL", stdio: "ignore" });
 }
@@ -13901,7 +14052,7 @@ async function appProbe(repoDir, lokiDir2, opts = {}) {
     return { out: r.stdout ?? "", status: r.error ? null : r.status };
   };
   let pid = null, url = null;
-  if (!existsSync31(runner))
+  if (!existsSync32(runner))
     return { checks: [mk2("app boot", "not_run", "app-runner.sh not found"), mk2("http probe", "not_run", "app not booted")], pid, url };
   try {
     const b = sh(BOOT);
@@ -13911,7 +14062,7 @@ async function appProbe(repoDir, lokiDir2, opts = {}) {
       return { checks, pid, url };
     }
     const ir = Number(m[1]), sr = Number(m[2]), hr = Number(m[3]), noApp = m[4] === "1";
-    const pidTxt = existsSync31(join51(dir, "app.pid")) ? readFileSync41(join51(dir, "app.pid"), "utf8").trim() : "";
+    const pidTxt = existsSync32(join51(dir, "app.pid")) ? readFileSync42(join51(dir, "app.pid"), "utf8").trim() : "";
     pid = /^\d+$/.test(pidTxt) && sr >= 0 ? Number(pidTxt) : null;
     const st = readJson4(join51(dir, "state.json"));
     url = typeof st?.["url"] === "string" ? st["url"] : null;
@@ -13938,7 +14089,7 @@ async function functionalVerify(opts, url, dir, lokiDir2, timeoutMs) {
   const t0 = Date.now();
   const res = (result, reason) => ({ name: "functional verify", cmd: "autonomy/lib/functional-verify.py", result, duration_s: (Date.now() - t0) / 1000, reason });
   const py = await findPython3(), script = opts.verifyPath ?? join51(REPO_ROOT, "autonomy", "lib", "functional-verify.py");
-  if (!py || !existsSync31(script))
+  if (!py || !existsSync32(script))
     return res("not_run", "python3 or functional-verify.py unavailable");
   const specFile = join51(dir, "spec.txt");
   writeFileSync22(specFile, opts.specText ?? "");
@@ -13988,16 +14139,16 @@ app_runner_stop >/dev/null 2>&1
 });
 
 // ../../loki-ts/src/util/secure_scan.ts
-import { existsSync as existsSync32, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync7, readFileSync as readFileSync42, realpathSync as realpathSync21, rmSync as rmSync16, statSync as statSync19, writeFileSync as writeFileSync23 } from "fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync20, mkdtempSync as mkdtempSync7, readFileSync as readFileSync43, realpathSync as realpathSync21, rmSync as rmSync16, statSync as statSync19, writeFileSync as writeFileSync23 } from "fs";
 import { randomBytes as randomBytes5 } from "crypto";
 import { tmpdir as tmpdir9 } from "os";
-import { basename as basename21, dirname as dirname19, join as join52, resolve as resolve17, sep as sep12 } from "path";
+import { basename as basename21, dirname as dirname20, join as join52, resolve as resolve17, sep as sep12 } from "path";
 function fail(error) {
   return { ok: false, findings: [], error };
 }
 async function runSecureScan(targetDir, opts = {}) {
   const script = opts.scriptPath ?? join52(REPO_ROOT, "autonomy", "lib", "secure-scan.py");
-  if (!existsSync32(script))
+  if (!existsSync33(script))
     return fail(`secure-scan script not found: ${script}`);
   const py = await findPython3();
   if (!py)
@@ -14181,7 +14332,7 @@ async function scanAddedLines(repoDir, opts = {}) {
         continue;
       }
       const lines2 = new Map;
-      readFileSync42(join52(repoDir, p), "utf8").split(`
+      readFileSync43(join52(repoDir, p), "utf8").split(`
 `).forEach((t, i) => lines2.set(i + 1, t));
       added.set(p, lines2);
     } catch {}
@@ -14239,7 +14390,7 @@ async function scanAddedLines(repoDir, opts = {}) {
         if (!out2.startsWith(root))
           break;
         chunkMap.set(rel, { file: p, lines: c.orig });
-        mkdirSync20(dirname19(out2), { recursive: true });
+        mkdirSync20(dirname20(out2), { recursive: true });
         writeFileSync23(out2, c.body.join(`
 `) + `
 `);
@@ -14289,8 +14440,8 @@ var init_secure_scan = __esm(() => {
 var init_retry_class = () => {};
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync33, readdirSync as readdirSync19, readFileSync as readFileSync43 } from "fs";
-import { basename as basename22, dirname as dirname20, isAbsolute as isAbsolute9, join as join53, relative as relative9, resolve as resolve18 } from "path";
+import { existsSync as existsSync34, readdirSync as readdirSync19, readFileSync as readFileSync44 } from "fs";
+import { basename as basename22, dirname as dirname21, isAbsolute as isAbsolute9, join as join53, relative as relative9, resolve as resolve18 } from "path";
 function parseJsonc(text2) {
   let out2 = "", i = 0;
   while (i < text2.length) {
@@ -14325,8 +14476,8 @@ function moduleOf(file, depth = 0) {
   const ext = typeof j.extends === "string" ? j.extends : null;
   if (!ext || !ext.startsWith("."))
     return null;
-  const next = join53(dirname20(file), ext.endsWith(".json") ? ext : `${ext}.json`);
-  return existsSync33(next) ? moduleOf(next, depth + 1) : null;
+  const next = join53(dirname21(file), ext.endsWith(".json") ? ext : `${ext}.json`);
+  return existsSync34(next) ? moduleOf(next, depth + 1) : null;
 }
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
@@ -14396,8 +14547,8 @@ function nearestPackageRoot(testDir, repoDir, fileName) {
     }
   };
   let pkg = testDir;
-  while (pkg !== repoDir && pkg !== dirname20(pkg) && !shaped(pkg))
-    pkg = dirname20(pkg);
+  while (pkg !== repoDir && pkg !== dirname21(pkg) && !shaped(pkg))
+    pkg = dirname21(pkg);
   return pkg;
 }
 function phantomRepoPaths(content, fileName, testDir, repoDir, planText) {
@@ -14449,7 +14600,7 @@ function phantomRepoPaths(content, fileName, testDir, repoDir, planText) {
   };
   const strayInTestDir = (out2) => {
     const first = relative9(testDir, out2).split("/")[0];
-    return !!first && first !== "__self__" && !existsSync33(join53(testDir, first)) && [pkg, repoDir].some((d) => d !== testDir && existsSync33(join53(d, first)));
+    return !!first && first !== "__self__" && !existsSync34(join53(testDir, first)) && [pkg, repoDir].some((d) => d !== testDir && existsSync34(join53(d, first)));
   };
   const scan = (cwd) => {
     const vars = new Map, walk = new Set, taint = new Set, reports = new Map, created = [];
@@ -14480,9 +14631,9 @@ function phantomRepoPaths(content, fileName, testDir, repoDir, planText) {
       if (args.some((a) => a === null))
         return null;
       if (call[1] === "dirname")
-        return dirname20(args[0]);
+        return dirname21(args[0]);
       const out2 = resolve18(...args);
-      const first = parts.slice(1).map((a) => /^\s*["'`]([^"'`]*)["'`]\s*$/.exec(a)?.[1]).find((x) => x), viaWalk = !!first && walk.has(parts[0].trim()) && [pkg, repoDir].some((d) => existsSync33(join53(d, first.split("/").filter(Boolean)[0] ?? "\x00")));
+      const first = parts.slice(1).map((a) => /^\s*["'`]([^"'`]*)["'`]\s*$/.exec(a)?.[1]).find((x) => x), viaWalk = !!first && walk.has(parts[0].trim()) && [pkg, repoDir].some((d) => existsSync34(join53(d, first.split("/").filter(Boolean)[0] ?? "\x00")));
       if (report && (viaWalk || !parts.some((a) => walk.has(a.trim()) || taint.has(a.trim())) && (relative9(testDir, out2).startsWith("..") || strayInTestDir(out2))) && parts.some((a) => /^\s*["'`]/.test(a)))
         reports.set(`${ln}|${e}`, { out: out2, rel: relative9(repoDir, out2), tail: viaWalk ? join53(...args.slice(1)) : undefined });
       return out2;
@@ -14532,21 +14683,21 @@ function phantomRepoPaths(content, fileName, testDir, repoDir, planText) {
   const runs2 = [...new Set([pkg, repoDir])].map(scan);
   const planned = (rel) => !!planText && rel.split("/").some((_, i, a) => {
     const pre = a.slice(0, i + 1).join("/");
-    return (i > 0 || a.length === 1) && !existsSync33(join53(repoDir, pre)) && new RegExp(`(?<![\\w-])${pre.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![\\w-])`).test(planText);
+    return (i > 0 || a.length === 1) && !existsSync34(join53(repoDir, pre)) && new RegExp(`(?<![\\w-])${pre.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![\\w-])`).test(planText);
   });
   const phantom = (r, created) => {
     const rel = r.rel;
-    if (!rel || rel.startsWith("..") || isAbsolute9(rel) || /(^|\/)(\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(rel) || existsSync33(r.out) || planned(rel))
+    if (!rel || rel.startsWith("..") || isAbsolute9(rel) || /(^|\/)(\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(rel) || existsSync34(r.out) || planned(rel))
       return false;
     if (r.tail) {
       const seen = (from) => {
         let d = from;
         for (let i = 0;i < 64; i++) {
-          if (existsSync33(join53(d, r.tail)))
+          if (existsSync34(join53(d, r.tail)))
             return true;
-          if (d === repoDir || d === dirname20(d))
+          if (d === repoDir || d === dirname21(d))
             return false;
-          d = dirname20(d);
+          d = dirname21(d);
         }
         return false;
       };
@@ -14584,7 +14735,7 @@ function phantomReason(miss, repoFiles, testDir = "", pkgRoot = "") {
 }
 var readJson5 = (p) => {
   try {
-    const v = parseJsonc(readFileSync43(p, "utf8"));
+    const v = parseJsonc(readFileSync44(p, "utf8"));
     return v && typeof v === "object" && !Array.isArray(v) ? v : null;
   } catch {
     return null;
@@ -14623,10 +14774,10 @@ var init_preexisting_dirty = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/commit_filter.ts
-import { dirname as dirname21 } from "path";
+import { dirname as dirname22 } from "path";
 function dropSet(repoDir, staged, preexistingDirty, env = process.env, installCreated) {
   const owned = installOwned(repoDir, installCreated, env), made = installCreated?.files ?? {};
-  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f })), staged.filter(({ f }) => owned(f)).map(({ f }) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || WALL_FILE.test(f) || st === "A" && !Object.hasOwn(made, f) && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname21(m) === dirname21(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
+  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f })), staged.filter(({ f }) => owned(f)).map(({ f }) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || WALL_FILE.test(f) || st === "A" && !Object.hasOwn(made, f) && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname22(m) === dirname22(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
 }
 var WALL_FILE, parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []), formatChanged = (repoDir, staged, dropped2, env = process.env) => runFormatters(repoDir, staged.filter(({ st, f }) => (st === "A" || st === "M") && !dropped2.has(f) && !f.startsWith(".loki/")).map(({ f }) => f), tokenFreeEnv(env));
 var init_commit_filter = __esm(() => {
@@ -14646,21 +14797,6 @@ var init_reviewer_body = __esm(() => {
   init_commit_filter();
 });
 
-// ../../loki-ts/src/util/update_check.ts
-var CACHE_TTL_MS, NEGATIVE_TTL_MS;
-var init_update_check = __esm(() => {
-  init_paths();
-  CACHE_TTL_MS = 24 * 60 * 60 * 1000;
-  NEGATIVE_TTL_MS = 15 * 60 * 1000;
-});
-
-// ../../loki-ts/src/runner/router/advisor_probe.ts
-var ADVISOR_ERROR_LIMIT = 3;
-var init_advisor_probe = __esm(() => {
-  init_claude_model();
-  init_update_check();
-});
-
 // ../../loki-ts/src/runner/router/route_block.ts
 function advisorUnavailableReason(env, provider) {
   if (provider !== "claude")
@@ -14748,9 +14884,9 @@ var init_route_block = __esm(() => {
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn8 } from "child_process";
 import { createHash as createHash15, randomBytes as randomBytes6 } from "crypto";
-import { existsSync as existsSync34, lstatSync as lstatSync12, mkdirSync as mkdirSync21, readdirSync as readdirSync20, readFileSync as readFileSync44, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync21, readdirSync as readdirSync20, readFileSync as readFileSync45, writeFileSync as writeFileSync24 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname22, isAbsolute as isAbsolute10, join as join54, normalize as normalize3, relative as relative10, sep as sep13 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute10, join as join54, normalize as normalize3, relative as relative10, sep as sep13 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -14780,7 +14916,7 @@ function checkScreens(runDir, screens) {
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
-    if (!existsSync34(file))
+    if (!existsSync35(file))
       return `evidence screenshot is missing: ${s.path}`;
     if (!isRegularFile(file))
       return `evidence screenshot is not a regular file: ${s.path}`;
@@ -14824,10 +14960,10 @@ async function waitUp(url, ms, signal) {
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
     const p = join54(repoDir, f);
-    if (!existsSync34(p))
+    if (!existsSync35(p))
       continue;
     try {
-      const txt = readFileSync44(p, "utf8");
+      const txt = readFileSync45(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -14941,18 +15077,18 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     const pkgPath = join54(appDir, "package.json");
     let script = null;
     if (!boot) {
-      if (!existsSync34(pkgPath)) {
-        const subs = ["backend", "frontend"].filter((d) => existsSync34(join54(repoDir, d, "package.json")));
+      if (!existsSync35(pkgPath)) {
+        const subs = ["backend", "frontend"].filter((d) => existsSync35(join54(repoDir, d, "package.json")));
         const has2 = (d) => {
           try {
-            return pickScript(JSON.parse(readFileSync44(join54(repoDir, d, "package.json"), "utf8"))) !== null;
+            return pickScript(JSON.parse(readFileSync45(join54(repoDir, d, "package.json"), "utf8"))) !== null;
           } catch {
             return false;
           }
         };
         return skip(noRootReason(subs, subs.filter((d) => !has2(d))));
       }
-      script = pickScript(JSON.parse(readFileSync44(pkgPath, "utf8")));
+      script = pickScript(JSON.parse(readFileSync45(pkgPath, "utf8")));
       if (!script)
         return skip("no dev, preview or start script");
     }
@@ -14992,7 +15128,7 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
           break;
         const rel = join54(rel0, `${screenName(route)}.png`);
         const ok = await shoot(pw, ["screenshot", `${base}${route}`, join54(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join54(runDir, rel)) && existsSync34(join54(runDir, rel)))
+        if (ok && !aborted() && !isSymlink(join54(runDir, rel)) && existsSync35(join54(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -15046,14 +15182,14 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
 function receiptScreensProblem(receiptPath, receipt) {
   if (visualGateEnabled() && typeof receipt["evidence_failed"] === "string")
     return `visual evidence failed (LOKI_VISUAL_GATE=1): ${receipt["evidence_failed"]}`;
-  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname22(receiptPath), receipt["evidence_screens"]);
+  return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname23(receiptPath), receipt["evidence_screens"]);
 }
-var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", visualGateEnabled = (env = process.env) => env["LOKI_VISUAL_GATE"] === "1", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash15("sha256").update(readFileSync44(p)).digest("hex"), playwrightBin = (repoDir) => {
+var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", visualGateEnabled = (env = process.env) => env["LOKI_VISUAL_GATE"] === "1", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash15("sha256").update(readFileSync45(p)).digest("hex"), playwrightBin = (repoDir) => {
   const bin = join54(repoDir, "node_modules", ".bin", "playwright");
-  return existsSync34(bin) ? bin : null;
+  return existsSync35(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
   const d = join54(repoDir, "node_modules", "@playwright", "test");
-  return existsSync34(join54(d, "package.json")) ? d : null;
+  return existsSync35(join54(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
@@ -15125,15 +15261,15 @@ var init_pr = __esm(() => {
 });
 
 // ../../loki-ts/src/util/pr_lessons.ts
-import { existsSync as existsSync35, mkdirSync as mkdirSync22, mkdtempSync as mkdtempSync8, readFileSync as readFileSync45, rmSync as rmSync17, writeFileSync as writeFileSync25 } from "fs";
-import { dirname as dirname23, join as join56 } from "path";
+import { existsSync as existsSync36, mkdirSync as mkdirSync22, mkdtempSync as mkdtempSync8, readFileSync as readFileSync46, rmSync as rmSync17, writeFileSync as writeFileSync25 } from "fs";
+import { dirname as dirname24, join as join56 } from "path";
 import { createHash as createHash16 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
-  if (!existsSync35(p))
+  if (!existsSync36(p))
     return [];
   try {
-    const j = JSON.parse(readFileSync45(p, "utf-8"));
+    const j = JSON.parse(readFileSync46(p, "utf-8"));
     return Array.isArray(j.lessons) ? j.lessons : [];
   } catch {
     return [];
@@ -15141,7 +15277,7 @@ function loadLessons(repoDir) {
 }
 function save(repoDir, lessons) {
   const p = lessonsPath(repoDir);
-  mkdirSync22(dirname23(p), { recursive: true });
+  mkdirSync22(dirname24(p), { recursive: true });
   atomicWriteJson(p, { version: 2, lessons });
 }
 function appendReceiptFact(repoDir, f, now2 = () => new Date) {
@@ -15197,141 +15333,6 @@ var init_attempts = __esm(() => {
   init_treeswap();
 });
 
-// ../../loki-ts/src/providers/mcp_config.ts
-var init_mcp_config = () => {};
-
-// ../../loki-ts/src/providers/claude_flags.ts
-import { existsSync as existsSync36, readFileSync as readFileSync46 } from "fs";
-import { resolve as resolvePath, dirname as dirname24 } from "path";
-import { fileURLToPath as fileURLToPath6 } from "url";
-function claudeFlagSupported(flag, helpText) {
-  const txt = helpText ?? _claudeHelpCache;
-  if (txt === null || txt === undefined) {
-    return false;
-  }
-  return txt.includes(flag);
-}
-async function ensureClaudeHelpCache() {
-  if (_claudeHelpCache !== null)
-    return;
-  try {
-    const proc = Bun.spawn(["claude", "--help"], {
-      stdout: "pipe",
-      stderr: "pipe",
-      env: { ...process.env }
-    });
-    const text2 = await new Response(proc.stdout).text();
-    await proc.exited;
-    _claudeHelpCache = text2 || "";
-  } catch {
-    _claudeHelpCache = "";
-  }
-}
-function leanReviewerFlags(opts = {}) {
-  const env = opts.env ?? process.env;
-  if (env["LOKI_LEAN_CHILDREN"] === "0")
-    return [];
-  const ok = opts.flagSupported ?? ((f) => claudeFlagSupported(f));
-  const out2 = [];
-  if (env["LOKI_BARE_SUBCALLS"] !== "0" && (env["ANTHROPIC_API_KEY"] ?? "").trim() !== "" && ok("--bare")) {
-    out2.push("--bare");
-  } else {
-    if (ok("--setting-sources"))
-      out2.push("--setting-sources", opts.settingSources ?? "project");
-    if (ok("--strict-mcp-config"))
-      out2.push("--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}');
-    if (ok("--disable-slash-commands"))
-      out2.push("--disable-slash-commands");
-  }
-  if (ok("--tools"))
-    out2.push(`--tools=${opts.tools ?? ""}`);
-  return out2;
-}
-function designArchetypesText() {
-  try {
-    const moduleDir = dirname24(fileURLToPath6(import.meta.url));
-    for (const rel of [
-      ["..", "..", "..", "references", "design-archetypes.md"],
-      ["..", "..", "references", "design-archetypes.md"]
-    ]) {
-      const p = resolvePath(moduleDir, ...rel);
-      if (existsSync36(p))
-        return readFileSync46(p, "utf8");
-    }
-  } catch {}
-  return "";
-}
-var REVIEW_GUARD_DENYLIST = "Edit,Write,NotebookEdit,Bash(git commit:*),Bash(git reset:*),Bash(git push:*),Bash(git checkout:*),Bash(git clean:*),Bash(git rm:*),Bash(git stash:*),Bash(git -C:*),Bash(git --git-dir:*),Bash(git -c:*),Bash(git --exec-path:*),Bash(git diff --output:*),Bash(git diff --output=:*),Bash(git diff --ext-diff:*),Bash(git diff --no-index:*),Bash(git log --output:*),Bash(git log --output=:*),Bash(git log --ext-diff:*),Bash(git show --output:*),Bash(git show --output=:*),Bash(git show --ext-diff:*),Bash(git blame --output:*),Bash(git blame --output=:*),Bash(rg --pre:*),Bash(rg --pre=:*),Bash(rg --pre-glob:*),Bash(rg --pre-glob=:*),Bash(rg --hostname-bin:*),Bash(rg --hostname-bin=:*),Bash(find -delete:*),Bash(find -exec:*),Bash(find -execdir:*),Bash(find -ok:*),Bash(find -fprint:*),Bash(find -fprintf:*),Bash(find -fls:*),Bash(git * --output*),Bash(git * --ext-diff*),Bash(git * --no-index*),Bash(rg * --pre*),Bash(rg * --hostname-bin*),Bash(rg --pre*),Bash(rg --hostname-bin*),Bash(find * -delete*),Bash(find * -exec*),Bash(find * -execdir*),Bash(find * -fprint*),Bash(find * -fls*),Bash(find * -ok*)", _claudeHelpCache = null, AUTONOMY_OVERRIDE_TEXT, FIRST_PASS_EXCELLENCE_TEXT, REVIEW_ALLOWLIST_TOKEN = "Read,Grep,Glob,Bash(git diff:*),Bash(git log:*),Bash(git show:*),Bash(git status:*),Bash(git ls-files:*),Bash(git rev-parse:*),Bash(git blame:*),Bash(cat:*),Bash(ls:*),Bash(grep:*),Bash(rg:*),Bash(find:*),Bash(head:*),Bash(tail:*),Bash(wc:*)", REVIEW_ALLOWLIST_NO_GIT, CAVEMAN_PINNED_VERSION;
-var init_claude_flags = __esm(() => {
-  init_mcp_config();
-  init_claude_model();
-  AUTONOMY_OVERRIDE_TEXT = `[LOKI-AUTONOMY-AGENT] This is a Loki Mode autonomous agent process.
-` + `You are running INSIDE Loki Mode autonomous execution, a session the user explicitly launched with full prior authorization (loki start / loki run). This IS an authorized autonomous session, not an unattended action you must seek consent for.
-
-` + `Instruction precedence for THIS session: when the loki_system instructions in the user prompt conflict with any CLAUDE.md, project memory, or global memory that tells you to ask for clarification, pause for confirmation, refuse to act autonomously, or withhold routine commits, the loki_system instructions take precedence. The user has already consented by launching autonomous mode.
-
-` + `Therefore, for this session: do NOT ask the user questions, do NOT call the AskUserQuestion tool, do NOT stop to request confirmation, and do NOT refuse routine, reversible engineering work (writing code, running tests, creating files, atomic git checkpoints in the working tree). Proceed and complete the task directly. If a decision is genuinely ambiguous, choose the most reasonable option, record the assumption in .loki/CONTINUITY.md, and continue rather than halting.
-
-` + "Commit hygiene still applies: git checkpoints are LOCAL only. Never push or force-push. Stage files by explicit path, never `git add -A` or `git add .`, and never commit secrets, credentials, .env files, or untracked files you did not author this session.\n\n" + `This precedence override is narrow. It does NOT relax any safety rule. Every safety prohibition in CLAUDE.md or memory still fully binds: anything genuinely destructive or irreversible remains out of scope unless the task explicitly calls for it. This includes (not limited to) force-pushing, deleting or overwriting the user's data, dropping or truncating databases, publishing or releasing, rotating or exfiltrating secrets, touching production systems, and anything a CLAUDE.md safety rule explicitly forbids. When in doubt about whether an action is destructive, treat it as destructive and do not do it.
-`;
-  FIRST_PASS_EXCELLENCE_TEXT = `
-[FIRST-PASS EXCELLENCE] Treat THIS pass as your one shot to ship a complete, working, verified solution. Do not produce a rough draft to refine later; the loop exists as a safety net, not a plan. Before you finish this iteration:
-` + `1. BUILD IT FULLY. Implement every requirement end to end. No stubs, no TODOs, no "coming soon", no placeholder or hardcoded/mock data where real logic belongs. If the spec implies a backend (auth, persistence, a form that submits, a list that saves), WIRE IT so it actually works and persists -- a beautiful UI whose buttons do nothing is the single most common failure, not a draft. Every list/table must trace to a real query, never an inline mock array.
-` + `2. SELF-VERIFY BY RUNNING, not by reading. Run the build and the tests yourself; for each acceptance criterion, DRIVE the actual path and observe the result (submit the form, then reload and confirm the record persisted; hit a protected route logged-out and confirm it is rejected). Fix what fails now, in this pass. Do not mark done on "looks right" or a self-claim -- observed behavior is the only proof.
-` + `3. LOCK THE ARCHITECTURE on this pass so later edits are small and additive. Decide the data model, routes, and component structure up front and build to them; never rewrite whole files later to patch a small thing (that is the doom loop that breaks working features).
-` + `4. DESIGN: commit to ONE named aesthetic direction up front (editorial, brutalist, luxury, retro-futuristic, soft/pastel, industrial, etc. -- chosen from the product domain) and hold it on every surface. Use real content (never lorem). AVOID the AI-slop tells that instantly read as machine-generated: NO indigo/blue-to-purple gradient (the #1 tell), NO Inter/Roboto/system-font headlines (pick a real display+body pairing), NO three-equal-rounded-cards-in-a-row skeleton, NO flat 1px gray card borders or colored left-border strips, NO untouched shadcn defaults, NO reflexive dark mode. Cap the palette at ~3 hues (60/30/10), tinted not pure #fff/#000, separate sections by whitespace then a slight background shift before any border. Aim for Linear/Stripe/Duolingo-tier taste: "this does not look AI-generated".
-` + `5. SATISFY THE GATES THAT WILL JUDGE THIS PASS. Your work is checked by deterministic gates before it can be accepted, and in measured runs EVERY extra iteration was caused by one of these rejecting the work -- never by the model failing to finish. Clear them now, in this pass:
-` + `   - STATIC ANALYSIS: no syntax errors, no unused/undefined symbols, no lint errors in files you touched.
-` + `   - TEST SUITE: the existing tests must still pass. Run them; do not assume.
-` + `   - MUTATION/MOCK INTEGRITY: tests must assert real behaviour. No tautological assertions (expect(true).toBe(true)), no test that passes whether or not the code works, no mocking the very unit under test, no inline mock data standing in for a real query.
-` + `   - CODE REVIEW: no scope creep beyond the stated task, no dead or commented-out code, no leftover debug output, and follow the conventions already in the surrounding files.
-` + `Deliver the finished, self-verified, genuinely-designed result in THIS pass. Additional iterations should be the exception, not the plan.
-` + designArchetypesText();
-  REVIEW_ALLOWLIST_NO_GIT = REVIEW_ALLOWLIST_TOKEN.split(",").filter((t) => !t.startsWith("Bash(git ")).join(",");
-  CAVEMAN_PINNED_VERSION = process.env["LOKI_CAVEMAN_VERSION"] || "1.9.0";
-});
-
-// ../../loki-ts/src/util/run_identity.ts
-var init_run_identity = __esm(() => {
-  init_model_routes();
-});
-
-// ../../loki-ts/src/runner/sdk_stream_parser.ts
-var init_sdk_stream_parser = __esm(() => {
-  init_cost();
-  init_run_identity();
-  init_budget();
-  init_advisor_probe();
-});
-
-// ../../loki-ts/src/runner/trim.ts
-var init_trim = () => {};
-
-// ../../loki-ts/src/runner/provider_opencode.ts
-var init_provider_opencode = __esm(() => {
-  init_shell();
-  init_providers();
-});
-
-// ../../loki-ts/src/runner/providers.ts
-var _installedVersionCache;
-var init_providers = __esm(() => {
-  init_shell();
-  init_paths();
-  init_claude_flags();
-  init_mcp_config();
-  init_lean_prefix();
-  init_sdk_stream_parser();
-  init_session_resume();
-  init_trim();
-  init_advisor_probe();
-  init_claude_model();
-  init_model_routes();
-  init_provider_opencode();
-  init_cost_breakdown();
-  _installedVersionCache = new Map;
-});
-
 // ../../loki-ts/src/runner/router/route_record.ts
 import { existsSync as existsSync37, lstatSync as lstatSync13, mkdirSync as mkdirSync23, readFileSync as readFileSync47, writeFileSync as writeFileSync26 } from "fs";
 import { join as join57 } from "path";