loki-mode 11.60.6 → 11.60.7

package/packages/control-plane/dist/server.js

@@ -14780,6 +14780,25 @@ var init_version = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/preexisting_dirty.ts
+import { lstatSync as lstatSync12 } from "fs";
+import { join as join54 } from "path";
+function untouchedUntracked(repoDir, recorded, env = process.env) {
+  if (!recorded || typeof recorded !== "object")
+    return [];
+  return Object.entries(recorded).filter(([p, v]) => {
+    if (typeof v !== "string")
+      return false;
+    try {
+      const st = lstatSync12(join54(repoDir, p));
+      if (v.startsWith("!"))
+        return v === `!${st.size}:${st.mtimeMs}:${st.ctimeMs}`;
+      const [sha3, mode] = v.split(" ");
+      return st.isFile() && blob2(repoDir, p, env) === sha3 && (st.mode & 511).toString(8) === mode;
+    } catch {
+      return false;
+    }
+  }).map(([p]) => p);
+}
 function untouchedSinceIntake(repoDir, recorded, env = process.env) {
   if (!recorded || typeof recorded !== "object")
     return [];
@@ -14798,9 +14817,9 @@ var init_preexisting_dirty = __esm(() => {
 
 // ../../loki-ts/src/e10ext/commit_filter.ts
 import { dirname as dirname22 } from "path";
-function dropSet(repoDir, staged, preexistingDirty, env = process.env, installCreated) {
+function dropSet(repoDir, staged, preexistingDirty, env = process.env, installCreated, untrackedBlobs) {
   const owned = installOwned(repoDir, installCreated, env), made = installCreated?.files ?? {};
-  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f })), staged.filter(({ f }) => owned(f)).map(({ f }) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || WALL_FILE.test(f) || st === "A" && !Object.hasOwn(made, f) && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname22(m) === dirname22(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
+  return staged.concat(untouchedSinceIntake(repoDir, preexistingDirty, env).map((f) => ({ st: "L", f })), untouchedUntracked(repoDir, untrackedBlobs, env).map((f) => ({ st: "L", f })), staged.filter(({ f }) => owned(f)).map(({ f }) => ({ st: "L", f }))).filter(({ st, f }) => f.startsWith(".loki/") || st === "L" || WALL_FILE.test(f) || st === "A" && !Object.hasOwn(made, f) && !staged.some(({ f: m }) => /(^|\/)(package\.json|pyproject\.toml|requirements\.txt|Cargo\.toml|go\.mod)$/.test(m) && dirname22(m) === dirname22(f)) && /(^|\/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?|poetry\.lock|Cargo\.lock|go\.sum)$/.test(f));
 }
 var WALL_FILE, parseStaged = (out2) => out2.split("\x00").reduce((a, t, i, all) => i % 2 === 0 && t ? [...a, { st: t, f: all[i + 1] }] : a, []), formatChanged = (repoDir, staged, dropped2, env = process.env) => runFormatters(repoDir, staged.filter(({ st, f }) => (st === "A" || st === "M") && !dropped2.has(f) && !f.startsWith(".loki/")).map(({ f }) => f), tokenFreeEnv(env));
 var init_commit_filter = __esm(() => {
@@ -14907,9 +14926,9 @@ var init_route_block = __esm(() => {
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn8 } from "child_process";
 import { createHash as createHash16, randomBytes as randomBytes6 } from "crypto";
-import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync21, readdirSync as readdirSync20, readFileSync as readFileSync45, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync35, lstatSync as lstatSync13, mkdirSync as mkdirSync21, readdirSync as readdirSync20, readFileSync as readFileSync45, writeFileSync as writeFileSync24 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname23, isAbsolute as isAbsolute10, join as join54, normalize as normalize3, relative as relative10, sep as sep13 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute10, join as join55, normalize as normalize3, relative as relative10, sep as sep13 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -14919,7 +14938,7 @@ function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join54(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join55(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -14932,10 +14951,10 @@ function checkScreens(runDir, screens) {
       return "evidence_screens entry is malformed";
     if (isAbsolute10(s.path) || normalize3(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join54(runDir, s.path);
+    const file = join55(runDir, s.path);
     let cur = runDir;
     for (const seg of normalize3(s.path).split(sep13)) {
-      cur = join54(cur, seg);
+      cur = join55(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
@@ -14982,7 +15001,7 @@ async function waitUp(url, ms, signal) {
 }
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join54(repoDir, f);
+    const p = join55(repoDir, f);
     if (!existsSync35(p))
       continue;
     try {
@@ -15000,24 +15019,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join54(runDir, relDir, "e2e");
+    const dir = join55(runDir, relDir, "e2e");
     mkdirSync21(dir, { recursive: true });
-    writeFileSync24(join54(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync24(join54(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    writeFileSync24(join55(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync24(join55(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join54(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join55(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
       for (const e of readdirSync20(d, { withFileTypes: true })) {
-        const full = join54(d, e.name);
+        const full = join55(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join54(relDir, "e2e", relative10(dir, full)));
+          rels.push(join55(relDir, "e2e", relative10(dir, full)));
       }
     };
-    walk(join54(dir, "out"));
+    walk(join55(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -15096,15 +15115,15 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
     const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
-    const appDir = boot ? join54(repoDir, boot.boot.cwd) : repoDir;
-    const pkgPath = join54(appDir, "package.json");
+    const appDir = boot ? join55(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join55(appDir, "package.json");
     let script = null;
     if (!boot) {
       if (!existsSync35(pkgPath)) {
-        const subs = ["backend", "frontend"].filter((d) => existsSync35(join54(repoDir, d, "package.json")));
+        const subs = ["backend", "frontend"].filter((d) => existsSync35(join55(repoDir, d, "package.json")));
         const has2 = (d) => {
           try {
-            return pickScript(JSON.parse(readFileSync45(join54(repoDir, d, "package.json"), "utf8"))) !== null;
+            return pickScript(JSON.parse(readFileSync45(join55(repoDir, d, "package.json"), "utf8"))) !== null;
           } catch {
             return false;
           }
@@ -15138,20 +15157,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join54(runDir, "evidence");
+    const evRoot = join55(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
     mkdirSync21(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join54("evidence", randomBytes6(6).toString("hex"));
-      mkdirSync21(join54(runDir, rel0));
+      const rel0 = join55("evidence", randomBytes6(6).toString("hex"));
+      mkdirSync21(join55(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join54(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join54(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join54(runDir, rel)) && existsSync35(join54(runDir, rel)))
+        const rel = join55(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join55(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join55(runDir, rel)) && existsSync35(join55(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -15176,9 +15195,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join54(evRoot, randomBytes6(6).toString("hex"));
+    const hdir = join55(evRoot, randomBytes6(6).toString("hex"));
     mkdirSync21(hdir);
-    writeFileSync24(join54(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    writeFileSync24(join55(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -15208,24 +15227,24 @@ function receiptScreensProblem(receiptPath, receipt) {
   return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname23(receiptPath), receipt["evidence_screens"]);
 }
 var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", visualGateEnabled = (env = process.env) => env["LOKI_VISUAL_GATE"] === "1", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash16("sha256").update(readFileSync45(p)).digest("hex"), playwrightBin = (repoDir) => {
-  const bin = join54(repoDir, "node_modules", ".bin", "playwright");
+  const bin = join55(repoDir, "node_modules", ".bin", "playwright");
   return existsSync35(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
-  const d = join54(repoDir, "node_modules", "@playwright", "test");
-  return existsSync35(join54(d, "package.json")) ? d : null;
+  const d = join55(repoDir, "node_modules", "@playwright", "test");
+  return existsSync35(join55(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
 });
 `, DEFAULT_BUDGET_MS = 25000, MAX_ROUTES = 5, isSymlink = (p) => {
   try {
-    return lstatSync12(p).isSymbolicLink();
+    return lstatSync13(p).isSymbolicLink();
   } catch {
     return false;
   }
 }, isRegularFile = (p) => {
   try {
-    return lstatSync12(p).isFile();
+    return lstatSync13(p).isFile();
   } catch {
     return false;
   }
@@ -15258,7 +15277,7 @@ var init_outbox = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/pr.ts
-import { join as join55 } from "path";
+import { join as join56 } from "path";
 var DEFAULT_PUSH_SH, DEFAULT_PUSH_GITLAB_SH, SHA_RE;
 var init_pr = __esm(() => {
   init_types();
@@ -15278,14 +15297,14 @@ var init_pr = __esm(() => {
   init_receipt_surface();
   init_yaml_key();
   init_outbox();
-  DEFAULT_PUSH_SH = join55(REPO_ROOT, "autonomy/lib/engine10-push.sh");
-  DEFAULT_PUSH_GITLAB_SH = join55(REPO_ROOT, "autonomy/lib/engine10-push-gitlab.sh");
+  DEFAULT_PUSH_SH = join56(REPO_ROOT, "autonomy/lib/engine10-push.sh");
+  DEFAULT_PUSH_GITLAB_SH = join56(REPO_ROOT, "autonomy/lib/engine10-push-gitlab.sh");
   SHA_RE = /^[0-9a-f]{40}$/;
 });
 
 // ../../loki-ts/src/util/pr_lessons.ts
 import { existsSync as existsSync36, mkdirSync as mkdirSync22, mkdtempSync as mkdtempSync8, readFileSync as readFileSync46, rmSync as rmSync17, writeFileSync as writeFileSync25 } from "fs";
-import { dirname as dirname24, join as join56 } from "path";
+import { dirname as dirname24, join as join57 } from "path";
 import { createHash as createHash17 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
@@ -15334,7 +15353,7 @@ function recordRunVerdict(repoDir, runId2, verdict) {
   if (dirty)
     save(repoDir, lessons);
 }
-var lessonsPath = (repoDir) => join56(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
+var lessonsPath = (repoDir) => join57(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
 var init_pr_lessons = __esm(() => {
   init_atomic();
   init_safe_git();
@@ -15357,12 +15376,12 @@ var init_attempts = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/router/route_record.ts
-import { existsSync as existsSync37, lstatSync as lstatSync13, mkdirSync as mkdirSync23, readFileSync as readFileSync47, writeFileSync as writeFileSync26 } from "fs";
-import { join as join57 } from "path";
+import { existsSync as existsSync37, lstatSync as lstatSync14, mkdirSync as mkdirSync23, readFileSync as readFileSync47, writeFileSync as writeFileSync26 } from "fs";
+import { join as join58 } from "path";
 function loadRouteRecord(runDir) {
   try {
-    const p = join57(runDir, ROUTE_RECORD_FILE);
-    if (!existsSync37(p) || !lstatSync13(p).isFile())
+    const p = join58(runDir, ROUTE_RECORD_FILE);
+    if (!existsSync37(p) || !lstatSync14(p).isFile())
       return;
     const v = JSON.parse(readFileSync47(p, "utf8"));
     return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
@@ -15506,14 +15525,14 @@ __export(exports_deep, {
   deepStage: () => deepStage,
   DEFAULT_SECRET_SCAN_SH: () => DEFAULT_SECRET_SCAN_SH
 });
-import { copyFileSync as copyFileSync3, existsSync as existsSync38, lstatSync as lstatSync14, mkdirSync as mkdirSync24, mkdtempSync as mkdtempSync9, rmSync as rmSync18, writeFileSync as writeFileSync27 } from "fs";
+import { copyFileSync as copyFileSync3, existsSync as existsSync38, lstatSync as lstatSync15, mkdirSync as mkdirSync24, mkdtempSync as mkdtempSync9, rmSync as rmSync18, writeFileSync as writeFileSync27 } from "fs";
 import { tmpdir as tmpdir10 } from "os";
-import { dirname as dirname25, join as join58 } from "path";
+import { dirname as dirname25, join as join59 } from "path";
 function sessionCouncil(sessions) {
   return { async run(input, signal) {
-    const cwd = mkdtempSync9(join58(tmpdir10(), "loki-deep-council-"));
+    const cwd = mkdtempSync9(join59(tmpdir10(), "loki-deep-council-"));
     try {
-      writeFileSync27(join58(cwd, "diff.patch"), input.diff, "utf8");
+      writeFileSync27(join59(cwd, "diff.patch"), input.diff, "utf8");
       const r = await sessions.run({
         stage: "deep",
         tier: "development",
@@ -15583,7 +15602,7 @@ ${r.stderr}`), lr = r.exitCode === 0 ? undefined : await harnessLoadReason({ rep
 async function runAppBoot(ctx, opts, checks, notProven) {
   let r;
   try {
-    r = await (opts.appProbe ?? appProbe)(ctx.repoDir, join58(ctx.repoDir, ".loki"));
+    r = await (opts.appProbe ?? appProbe)(ctx.repoDir, join59(ctx.repoDir, ".loki"));
   } catch (err) {
     r = { checks: [{ name: "app boot", cmd: "autonomy/app-runner.sh", result: "not_run", duration_s: 0, reason: `app probe threw: ${err.message}` }], pid: null, url: null };
   }
@@ -15629,12 +15648,12 @@ async function runCouncilCheck(ctx, changed, baseSha, signal, opts, checks, notP
   }
 }
 async function secureScanChanged(repoDir, changed, opts) {
-  const dir = mkdtempSync9(join58(tmpdir10(), "loki-deep-secure-"));
+  const dir = mkdtempSync9(join59(tmpdir10(), "loki-deep-secure-"));
   try {
     for (const f of changed)
-      if (existsSync38(join58(repoDir, f)) && lstatSync14(join58(repoDir, f)).isFile()) {
-        mkdirSync24(dirname25(join58(dir, f)), { recursive: true });
-        copyFileSync3(join58(repoDir, f), join58(dir, f));
+      if (existsSync38(join59(repoDir, f)) && lstatSync15(join59(repoDir, f)).isFile()) {
+        mkdirSync24(dirname25(join59(dir, f)), { recursive: true });
+        copyFileSync3(join59(repoDir, f), join59(dir, f));
       }
     return await runSecureScan(dir, { ...opts.secureScanPath ? { scriptPath: opts.secureScanPath } : {}, timeoutMs: 60000 });
   } finally {
@@ -15654,7 +15673,7 @@ async function runSecretScan(ctx, changed, opts, checks, notProven) {
   }
   const inline = 'script="$1"; shift; . "$script" || exit 3; hit=0; for f in "$@"; do if _commit_scan_secret_file "$f" || _commit_path_looks_secret "$f"; then printf "%s\\n" "$f"; hit=1; fi; done; exit "$hit"';
   const started = Date.now();
-  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join58(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
+  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join59(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
   const sec = await secureScanChanged(ctx.repoDir, changed, opts), gaps = [], reasons = [];
   const hits = r.exitCode === 3 ? [] : r.stdout.split(`
 `).map((l) => l.trim()).filter(Boolean), high = sec.findings.filter((f) => String(f.severity).toUpperCase() === "HIGH");
@@ -15692,7 +15711,7 @@ async function postResults(ctx, opts, checks, notProven, statusState) {
   const prNumber = prUrl ? PR_NUMBER_RE.exec(prUrl)?.[1] : undefined;
   if (prNumber) {
     mkdirSync24(ctx.runDir, { recursive: true });
-    const bodyFile = join58(ctx.runDir, "deep-comment.md");
+    const bodyFile = join59(ctx.runDir, "deep-comment.md");
     writeFileSync27(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
     const commentResult = await run(["bash", scriptPath, "comment", prNumber, bodyFile], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
     if (commentResult.exitCode !== 0)
@@ -15747,7 +15766,7 @@ async function runDeep(ctx, signal, opts = {}) {
   const sig = signReceipt(`${ctx.runId}-deep`, addendumSha256);
   const addendum = { ...addendumBody, addendum_sha256: addendumSha256, verification: { jwt: sig.jwt, kid: sig.kid } };
   mkdirSync24(ctx.runDir, { recursive: true });
-  writeFileSync27(join58(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
+  writeFileSync27(join59(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
 `);
   const pushNotProven = await postResults(ctx, opts, checks, notProvenList, statusState);
   const allNotProven = [...notProvenList, ...pushNotProven];
@@ -15784,7 +15803,7 @@ var init_deep = __esm(() => {
 // ../../loki-ts/src/engine10/stages/verify.ts
 import { existsSync as existsSync39, mkdtempSync as mkdtempSync10, rmSync as rmSync19 } from "fs";
 import { tmpdir as tmpdir11 } from "os";
-import { isAbsolute as isAbsolute11, join as join59, relative as relative11 } from "path";
+import { isAbsolute as isAbsolute11, join as join60, relative as relative11 } from "path";
 async function runOnce2(cmd2, args, cwd, signal, opts) {
   if (!Bun.which(cmd2, { PATH: opts.path ?? process.env["PATH"] ?? "" }))
     return { ok: false, missing: true, cut: false, out: "" };
@@ -15858,7 +15877,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal,
   const zc = zeroOk ? un.filter(({ c, t }) => c.result === "not_run" && !c.owner && (c.reason ?? "").startsWith(NO_TESTS_REASON) && !wall.has(c.name) && !isHoldoutCheck(c.name) && !changed.includes(t.path) && zeroIntake.has(c.name)) : [];
   if (!(un.some(({ c }) => c.result === "fail" && c.ids?.length) || sus.length || zc.length) || signal.aborted)
     return out2;
-  const dir = mkdtempSync10(join59(tmpdir11(), "e10-base-"));
+  const dir = mkdtempSync10(join60(tmpdir11(), "e10-base-"));
   const git4 = (args) => {
     safeGit(ctx.repoDir, args, { stdio: "ignore", repoDrivers: true });
   };
@@ -15897,7 +15916,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal,
   return out2;
 }
 function isLokiModeRepo(repoDir) {
-  return existsSync39(join59(repoDir, "scripts", "select-tests.sh"));
+  return existsSync39(join60(repoDir, "scripts", "select-tests.sh"));
 }
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
@@ -15919,9 +15938,9 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   }
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
-    if (existsSync39(join59(g.cwd, "tsconfig.json")))
+    if (existsSync39(join60(g.cwd, "tsconfig.json")))
       await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["--no-install", "tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
-    if (ESLINT_CONFIGS.some((f) => existsSync39(join59(g.cwd, f)))) {
+    if (ESLINT_CONFIGS.some((f) => existsSync39(join60(g.cwd, f)))) {
       const c = await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["--no-install", "eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
       if (await excuseLint(ctx, signal, c, "eslint", "npx", ["--no-install", "eslint"], g.cwd, g.rel, co))
         pre.push(c.name);
@@ -15936,7 +15955,7 @@ var CHECK_TIMEOUT_MS = 60000, excerpts, isHold = (c) => isHoldoutCheck(c.name),
   return r.missing || r.cut ? null : r;
 }, base: (f) => {
   try {
-    return safeGit(ctx.repoDir, ["show", `${ctx.baseSha}:${relative11(ctx.repoDir, join59(cwd, f))}`], { stdio: ["ignore", "pipe", "ignore"] });
+    return safeGit(ctx.repoDir, ["show", `${ctx.baseSha}:${relative11(ctx.repoDir, join60(cwd, f))}`], { stdio: ["ignore", "pipe", "ignore"] });
   } catch {
     return null;
   }
@@ -16113,7 +16132,7 @@ ${x}` : c.cmd };
 import { spawnSync as spawnSync7 } from "child_process";
 import { existsSync as existsSync40, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync11, readFileSync as readFileSync48, readdirSync as readdirSync21, rmSync as rmSync20, writeFileSync as writeFileSync28 } from "fs";
 import { tmpdir as tmpdir12 } from "os";
-import { dirname as dirname26, join as join60, relative as relative12 } from "path";
+import { dirname as dirname26, join as join61, relative as relative12 } from "path";
 
 class RealBaseTestRunner {
   api;
@@ -16178,7 +16197,7 @@ ${acceptance.map((a) => `Acceptance: ${a}`).join(`
 function loadTaskText(ctx, fromPrior) {
   if (fromPrior)
     return fromPrior;
-  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join60(ctx.runDir, "issue.json");
+  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join61(ctx.runDir, "issue.json");
   if (existsSync40(issueJsonPath)) {
     try {
       const issue = JSON.parse(readFileSync48(issueJsonPath, "utf8"));
@@ -16193,7 +16212,7 @@ function loadTaskText(ctx, fromPrior) {
 }
 function wallTargetDir(repoDir, existingTests) {
   const first = existingTests[0];
-  return first ? join60(repoDir, dirname26(first.path)) : join60(repoDir, "tests");
+  return first ? join61(repoDir, dirname26(first.path)) : join61(repoDir, "tests");
 }
 function guessRunner(fileName, runners) {
   if (fileName.endsWith(".py"))
@@ -16226,11 +16245,11 @@ async function wallAuthor(ctx, signal, retry) {
   const tree = prior.intake?.tree;
   const repomapText = repoMapText(ctx.repoDir, tree, repomapRef, WALL_MAP_MAX_LINES);
   const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative12(ctx.repoDir, targetDir)}/x`);
-  const conv2 = readPackageConventions(join60(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
-  const cwd = mkdtempSync11(join60(tmpdir12(), "loki-e15-wall-"));
+  const conv2 = readPackageConventions(join61(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
+  const cwd = mkdtempSync11(join61(tmpdir12(), "loki-e15-wall-"));
   const wm = wallManifestFor(ctx.repoDir, tree, task);
   for (const [n2, c] of [["task.md", task], ["repomap.txt", repomapText], ...wm ? [["wall_manifest.txt", wm.text]] : []])
-    writeFileSync28(join60(cwd, n2), c, "utf8");
+    writeFileSync28(join61(cwd, n2), c, "utf8");
   const model = retry?.model ?? wallFirstModel(sz.size), iterationId = `${ctx.runId}-wall${retry?.suffix ?? ""}`;
   const session = await ctx.sessions.run({
     stage: "wall",
@@ -16248,21 +16267,21 @@ async function wallAuthor(ctx, signal, retry) {
   }
   const planText = typeof prior.plan?.plan === "string" ? prior.plan.plan : null, repoFiles = repoMap?.files ?? [];
   const oor = () => readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)).flatMap((name) => {
-    const text2 = readFileSync48(join60(cwd, name), "utf8"), why = outOfRepoTarget(text2) ?? phantomReason(phantomRepoPaths(text2, name, targetDir, ctx.repoDir, planText), repoFiles, relative12(ctx.repoDir, targetDir), pkg?.root ?? "");
+    const text2 = readFileSync48(join61(cwd, name), "utf8"), why = outOfRepoTarget(text2) ?? phantomReason(phantomRepoPaths(text2, name, targetDir, ctx.repoDir, planText), repoFiles, relative12(ctx.repoDir, targetDir), pkg?.root ?? "");
     return why ? [{ name, why }] : [];
   });
   const bad1 = oor();
   if (bad1.length > 0 && !signal.aborted && !ctx.overCap?.())
     await ctx.sessions.run({ stage: "wall", brief: withStagePrefix(outOfRepoReask("Rewrite these Wall files in place, keeping the same names and acceptance coverage.", bad1)), tier: "development", model, iterationId: `${iterationId}-oor`, limitS: wallLimitS(sz.size), signal, cwd });
-  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !oorBad.has(n2) && !conventionViolation(conv2, n2, readFileSync48(join60(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
-  const sealedDir = join60(ctx.runDir, "wall");
+  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !oorBad.has(n2) && !conventionViolation(conv2, n2, readFileSync48(join61(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
+  const sealedDir = join61(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync25(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync48(join60(cwd, name), "utf8"), oorWhy = oorBad.get(name), bad = oorWhy ?? conventionViolation(conv2, name, content);
-    writeFileSync28(join60(sealedDir, name), content, "utf8");
+    const content = readFileSync48(join61(cwd, name), "utf8"), oorWhy = oorBad.get(name), bad = oorWhy ?? conventionViolation(conv2, name, content);
+    writeFileSync28(join61(sealedDir, name), content, "utf8");
     if (oorWhy)
       discarded.push({ file: name, reason: `${oorWhy}; wall test discarded after one rewrite request` });
     else if (bad)
@@ -16291,7 +16310,7 @@ function* installCore(ctx, a, baseDir, opts) {
     const content = contents.get(name);
     if (content === undefined)
       continue;
-    const dest = join60(targetDir, name), runner = guessRunner(name, runners);
+    const dest = join61(targetDir, name), runner = guessRunner(name, runners);
     writeFileSync28(dest, content, "utf8");
     sealedFiles.push({ path: dest, sha256: sha2562(content) });
     readOnlyFiles.push({ path: dest, content });
@@ -16303,7 +16322,7 @@ function* installCore(ctx, a, baseDir, opts) {
   const baseRunner = opts.baseRunner ?? new RealBaseTestRunner, baseRun = { pass: 0, fail: 0, not_run: discarded.length }, notRunFiles = [];
   const each = yield { runner: baseRunner, tests: wallTests };
   for (const [i, t] of wallTests.entries()) {
-    const e = each?.[i], r = e ?? baseRunner.run(baseDir, [t]), abs = join60(ctx.repoDir, t.path);
+    const e = each?.[i], r = e ?? baseRunner.run(baseDir, [t]), abs = join61(ctx.repoDir, t.path);
     baseRun.pass += r.pass;
     baseRun.fail += r.fail;
     baseRun.not_run += r.not_run ?? 0;
@@ -16344,7 +16363,7 @@ async function runWall(ctx, signal, opts = {}) {
   if (a.kind === "authored") {
     for (const f of first.data.files ?? [])
       rmSync20(f.path, { force: true });
-    rmSync20(join60(ctx.runDir, "wall"), { recursive: true, force: true });
+    rmSync20(join61(ctx.runDir, "wall"), { recursive: true, force: true });
     ctx.wallSealed = false;
   }
   removeHoldout(ctx.runId, ctx.repoDir);
@@ -16380,18 +16399,18 @@ var init_wall = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync5, closeSync as closeSync9, lstatSync as lstatSync15, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync49, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync7, writeFileSync as writeFileSync29 } from "fs";
-import { dirname as dirname27, join as join61, relative as relative13, sep as sep14 } from "path";
+import { chmodSync as chmodSync5, closeSync as closeSync9, lstatSync as lstatSync16, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync49, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync7, writeFileSync as writeFileSync29 } from "fs";
+import { dirname as dirname27, join as join62, relative as relative13, sep as sep14 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync23(repoDir), fp = join61(root, f), rel = relative13(root, dirname27(fp));
+  const root = realpathSync23(repoDir), fp = join62(root, f), rel = relative13(root, dirname27(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
   for (const part of rel === "" ? [] : rel.split(sep14)) {
-    cur = join61(cur, part);
+    cur = join62(cur, part);
     let st2;
     try {
-      st2 = lstatSync15(cur);
+      st2 = lstatSync16(cur);
     } catch {
       mkdirSync26(cur);
       continue;
@@ -16401,7 +16420,7 @@ function safeRestore(repoDir, f, want, mode) {
   }
   let st;
   try {
-    st = lstatSync15(fp);
+    st = lstatSync16(fp);
   } catch {
     st = null;
   }
@@ -16442,10 +16461,10 @@ async function discardIfSatisfied(git4, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join61(repoDir, f);
+    const fp = join62(repoDir, f);
     try {
       if (v.startsWith("!")) {
-        const st = lstatSync15(fp);
+        const st = lstatSync16(fp);
         if (`!${st.size}:${st.mtimeMs}:${st.ctimeMs}` !== v)
           throw new Error("changed, not snapshotted");
         continue;
@@ -16461,7 +16480,7 @@ async function discardIfSatisfied(git4, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync15(join61(repoDir, f));
+          const l = lstatSync16(join62(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -16509,9 +16528,9 @@ var init_scope2 = __esm(() => {
 // ../../loki-ts/src/council/role_agents.ts
 import { existsSync as existsSync41, readdirSync as readdirSync22, readFileSync as readFileSync50 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join62 } from "path";
+import { join as join63 } from "path";
 function agentDirs(repoDir, env = process.env) {
-  return [env["LOKI_AGENTS_PROJECT_DIR"] || join62(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join62(env["XDG_CONFIG_HOME"] || join62(homedir9(), ".config"), "loki", "agents")];
+  return [env["LOKI_AGENTS_PROJECT_DIR"] || join63(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join63(env["XDG_CONFIG_HOME"] || join63(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
   const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync50(file, "utf8"));
@@ -16539,7 +16558,7 @@ function loadRoleAgent(repoDir, role, env = process.env) {
     const ordered = [...names.filter((n2) => n2 === `${role}.md`), ...names.filter((n2) => n2 !== `${role}.md`)];
     for (const n2 of ordered) {
       try {
-        const a = parseAgent(join62(d, n2), n2.slice(0, -3));
+        const a = parseAgent(join63(d, n2), n2.slice(0, -3));
         if (a && a.role === role)
           return a;
       } catch {}
@@ -16557,7 +16576,7 @@ var init_role_agents = __esm(() => {
 
 // ../../loki-ts/src/util/child_ledger.ts
 import { appendFileSync as appendFileSync4, mkdirSync as mkdirSync27 } from "fs";
-import { join as join63 } from "path";
+import { join as join64 } from "path";
 function unmeasuredRecord(phase, model, source) {
   return { phase, model, input_tokens: 0, output_tokens: 0, cache_creation_tokens: 0, cache_read_tokens: 0, source, cost_status: "unmeasured" };
 }
@@ -16582,9 +16601,9 @@ function recordFromClaudeResult(phase, payload, source = "claude-json") {
 }
 function appendChildLedger(lokiDir2, rec2) {
   try {
-    const dir = join63(lokiDir2, "metrics");
+    const dir = join64(lokiDir2, "metrics");
     mkdirSync27(dir, { recursive: true });
-    appendFileSync4(join63(dir, "child-sessions.jsonl"), `${JSON.stringify(rec2)}
+    appendFileSync4(join64(dir, "child-sessions.jsonl"), `${JSON.stringify(rec2)}
 `);
     return true;
   } catch {
@@ -16635,10 +16654,10 @@ var init_colors = __esm(() => {
 
 // ../../loki-ts/src/util/run_summary.ts
 import { existsSync as existsSync42, mkdirSync as mkdirSync28, readFileSync as readFileSync51, renameSync as renameSync12, statSync as statSync20, writeFileSync as writeFileSync30 } from "fs";
-import { join as join64 } from "path";
+import { join as join65 } from "path";
 function readRiskRecord(repoDir, sinceMs = 0) {
   try {
-    const p = join64(repoDir, ".loki", "state", "risk-tier.json");
+    const p = join65(repoDir, ".loki", "state", "risk-tier.json");
     if (statSync20(p).mtimeMs < sinceMs)
       return null;
     const r = JSON.parse(readFileSync51(p, "utf8"));
@@ -16658,7 +16677,7 @@ var init_run_summary = __esm(() => {
 
 // ../../loki-ts/src/engine10/stages/xreview.ts
 import { existsSync as existsSync43, readFileSync as readFileSync52 } from "fs";
-import { join as join65 } from "path";
+import { join as join66 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
   return RANK3[ceiling] < RANK3[verdict] ? ceiling : verdict;
@@ -16671,7 +16690,7 @@ function explicitReview(repoDir, env) {
   if (flag && isOff(ev))
     return "off";
   for (const f of ["loki.yaml", "loki.yml"]) {
-    const p = join65(repoDir, f);
+    const p = join66(repoDir, f);
     if (!existsSync43(p))
       continue;
     try {
@@ -16769,7 +16788,7 @@ Review ONLY the diff below. Do not modify files.` : "You are an independent code
   try {
     if (p === "claude")
       await ensureClaudeHelpCache();
-    const r = await withChildLedger(run, join65(ctx.repoDir, ".loki"), "xreview")(reviewArgv(p, prompt, process.env, p === "claude" ? agent?.model : undefined), { cwd: ctx.repoDir, timeoutMs: boxFor(ctx) * 1000, group: true, signal });
+    const r = await withChildLedger(run, join66(ctx.repoDir, ".loki"), "xreview")(reviewArgv(p, prompt, process.env, p === "claude" ? agent?.model : undefined), { cwd: ctx.repoDir, timeoutMs: boxFor(ctx) * 1000, group: true, signal });
     if (r.exitCode !== 0)
       return tag({ provider: p, level: "not_run", notes: [`cross-review not run: ${p} exited ${r.exitCode}`] });
     return tag(parseReview(p, r.stdout));
@@ -16870,8 +16889,8 @@ See also: loki cost --detail (what a run ALREADY spent)
 });
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync44, lstatSync as lstatSync16, mkdirSync as mkdirSync29, readFileSync as readFileSync53, rmSync as rmSync21, writeFileSync as writeFileSync31 } from "fs";
-import { dirname as dirname29, join as join66 } from "path";
+import { existsSync as existsSync44, lstatSync as lstatSync17, mkdirSync as mkdirSync29, readFileSync as readFileSync53, rmSync as rmSync21, writeFileSync as writeFileSync31 } from "fs";
+import { dirname as dirname29, join as join67 } from "path";
 import { createHash as createHash18 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
@@ -16903,13 +16922,13 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join66(repoDir, ".loki", "contract.json");
+  return join67(repoDir, ".loki", "contract.json");
 }
 function readContract(repoDir) {
   const p = contractPath(repoDir);
   let st;
   try {
-    st = lstatSync16(p);
+    st = lstatSync17(p);
   } catch {
     return { contract: null, notes: [], sha256: null };
   }
@@ -16954,7 +16973,7 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
     const live2 = readContract(repoDir);
     let exists2 = true;
     try {
-      lstatSync16(contractPath(repoDir));
+      lstatSync17(contractPath(repoDir));
     } catch {
       exists2 = false;
     }
@@ -16988,16 +17007,16 @@ var init_contract = __esm(() => {
   init_safe_git();
   STOP3 = new Set(["the", "and", "for", "with", "that", "this", "must", "should", "shall", "when", "then", "are", "was", "all", "any", "can", "not", "has", "have", "from", "into", "each", "user", "users"]);
   MAX_CONTRACT_BYTES = 1024 * 1024;
-  REQ_MAP_REL = join66(".loki", "state", "requirements-map.json");
+  REQ_MAP_REL = join67(".loki", "state", "requirements-map.json");
   REQ_STOP = new Set(["with", "that", "this", "from", "have", "will", "should", "must", "when", "then", "into", "each", "every", "user", "users", "page", "able", "allow", "support", "ensure", "using", "their", "there", "which", "shall"]);
 });
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash19 } from "crypto";
 import { existsSync as existsSync45, mkdirSync as mkdirSync30, readdirSync as readdirSync23, readFileSync as readFileSync54, renameSync as renameSync13, statSync as statSync21, writeFileSync as writeFileSync32 } from "fs";
-import { dirname as dirname30, join as join67 } from "path";
+import { dirname as dirname30, join as join68 } from "path";
 function sealGroup(runDir, rh) {
-  const manifestPath = join67(runDir, "group", "manifest.json");
+  const manifestPath = join68(runDir, "group", "manifest.json");
   if (!existsSync45(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
@@ -17022,7 +17041,7 @@ function sealGroup(runDir, rh) {
       return fail2(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join67(unitsDir(runDir), id), rp = join67(dir, "receipt.json"), ep = join67(dir, "events.jsonl");
+    const dir = join68(unitsDir(runDir), id), rp = join68(dir, "receipt.json"), ep = join68(dir, "events.jsonl");
     let bytes;
     try {
       bytes = readFileSync54(rp);
@@ -17067,7 +17086,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync45(join67(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+    return existsSync45(join68(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
   if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
@@ -17079,7 +17098,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join67(unitsDir(runDir), id), rp = join67(dir, "receipt.json"), ep = join67(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join68(unitsDir(runDir), id), rp = join68(dir, "receipt.json"), ep = join68(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
@@ -17115,7 +17134,7 @@ function compositeVerdict(childVerdicts) {
   const failed2 = childVerdicts.filter((v) => v === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v)).length;
   return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed2, allUnitsPass: childVerdicts.every((v) => PASSING.has(v)) });
 }
-var ID_RE, PASSING, sha3 = (b) => createHash19("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join67(runDir, "group", "units"), readJson6 = (p) => {
+var ID_RE, PASSING, sha3 = (b) => createHash19("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join68(runDir, "group", "units"), readJson6 = (p) => {
   try {
     return JSON.parse(readFileSync54(p, "utf8"));
   } catch {
@@ -17136,7 +17155,7 @@ var init_seal_group = __esm(() => {
 
 // ../../loki-ts/src/supply/supply_guard.ts
 import { existsSync as existsSync46, readFileSync as readFileSync55, statSync as statSync22 } from "fs";
-import { basename as basename25, join as join68 } from "path";
+import { basename as basename25, join as join69 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -17151,7 +17170,7 @@ function isManifestPath(path) {
   return MANIFESTS.test(basename25(path));
 }
 function readDeclared(repoDir) {
-  const p = join68(repoDir, ".loki", DECLARED_FILE);
+  const p = join69(repoDir, ".loki", DECLARED_FILE);
   if (!existsSync46(p))
     return { deps: [], problem: null };
   try {
@@ -17177,7 +17196,7 @@ function readDeclared(repoDir) {
   }
 }
 function readAllowlist(repoDir) {
-  const p = join68(repoDir, ".loki", "supply-allowlist");
+  const p = join69(repoDir, ".loki", "supply-allowlist");
   if (!existsSync46(p))
     return new Set;
   try {
@@ -17222,7 +17241,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "npm") {
     if (privateUrlList([env["npm_config_registry"] ?? "", env["NPM_CONFIG_REGISTRY"] ?? ""]))
       return true;
-    return files(join68(repoDir, ".npmrc"), home ? join68(home, ".npmrc") : "").some((t) => t.split(`
+    return files(join69(repoDir, ".npmrc"), home ? join69(home, ".npmrc") : "").some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:(@[^:\s]+):)?registry\s*=\s*(\S+)/.exec(l);
       return !!m && privateUrl(m[2]) && (m[1] === undefined || name.startsWith(`${m[1]}/`));
@@ -17231,7 +17250,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "pypi") {
     if (privateUrlList([env["PIP_INDEX_URL"] ?? "", env["PIP_EXTRA_INDEX_URL"] ?? ""]))
       return true;
-    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join68(home, ".config", "pip", "pip.conf") : "", home ? join68(home, ".pip", "pip.conf") : "", join68(repoDir, "pip.conf")];
+    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join69(home, ".config", "pip", "pip.conf") : "", home ? join69(home, ".pip", "pip.conf") : "", join69(repoDir, "pip.conf")];
     return files(...cfg).some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:extra-)?index-url\s*[=:]\s*(.+)$/.exec(l);
@@ -17241,7 +17260,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "cargo") {
     if (Object.keys(env).some((k) => /^CARGO_REGISTRIES_.+_INDEX$/.test(k) || /^CARGO_SOURCE_/.test(k)))
       return true;
-    return files(join68(repoDir, ".cargo", "config.toml"), join68(repoDir, ".cargo", "config"), home ? join68(home, ".cargo", "config.toml") : "", home ? join68(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
+    return files(join69(repoDir, ".cargo", "config.toml"), join69(repoDir, ".cargo", "config"), home ? join69(home, ".cargo", "config.toml") : "", home ? join69(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
   }
   if (eco === "go") {
     const gp = goEnv["GOPROXY"] ?? env["GOPROXY"] ?? "";
@@ -17381,7 +17400,7 @@ var init_supply_guard = __esm(() => {
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash20 } from "crypto";
 import { existsSync as existsSync47, readdirSync as readdirSync24, mkdirSync as mkdirSync31, readFileSync as readFileSync56 } from "fs";
-import { basename as basename26, isAbsolute as isAbsolute13, join as join69, relative as relative14 } from "path";
+import { basename as basename26, isAbsolute as isAbsolute13, join as join70, relative as relative14 } from "path";
 function receiptSha256(r) {
   const { verification: _v, receipt_sha256: _h, ...body } = r;
   return sha2562(canonicalJson(body));
@@ -17456,7 +17475,7 @@ function renderReceiptMd(r) {
 `);
 }
 var SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", AGENT_ONLY_REASON = "only agent-authored tests executed (no agent-independent proof)", WALL_GREEN_ON_BASE_REASON = "Wall green on base: no Wall test discriminates the change", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash20("sha256").update(s).digest("hex"), str4 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], g = (ctx) => (a) => git4(ctx, a), receiptRel = (ctx) => {
-  const r = relative14(ctx.repoDir, join69(ctx.runDir, "receipt.json"));
+  const r = relative14(ctx.repoDir, join70(ctx.runDir, "receipt.json"));
   return r.startsWith("..") || isAbsolute13(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, wallGreenOnBaseOf = (o) => {
   const b = o.wall?.base_run ?? {};
@@ -17507,7 +17526,7 @@ var init_seal = __esm(() => {
       if (sd.code !== 0)
         return { status: "failed", data: {}, reason: "git diff against base failed" };
       const staged = parseStaged(sd.out);
-      const drop = dropSet(ctx.repoDir, staged, ctx.outputs().intake?.preexisting_dirty, process.env, ctx.outputs().intake?.install_created);
+      const drop = dropSet(ctx.repoDir, staged, ctx.outputs().intake?.preexisting_dirty, process.env, ctx.outputs().intake?.install_created, ctx.outputs().intake?.preexisting_untracked_blobs);
       const sat = await discardIfSatisfied((a) => git4(ctx, a), ctx.baseSha, ctx.outputs(), staged, new Set(drop.filter(({ st }) => st === "L").map(({ f }) => f)), ctx.repoDir);
       if (sat)
         return sat;
@@ -17588,7 +17607,7 @@ var init_seal = __esm(() => {
       if (wallNotRun > 0) {
         try {
           const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename26(String(f.path))));
-          for (const n3 of readdirSync24(join69(ctx.runDir, "wall")).sort())
+          for (const n3 of readdirSync24(join70(ctx.runDir, "wall")).sort())
             if (!kept.has(n3))
               notProven.add(`wall test discarded: ${n3} (not_run)`);
         } catch {}
@@ -17653,19 +17672,19 @@ var init_seal = __esm(() => {
       for (const [s, d] of Object.entries(o))
         if (typeof d?.duration_s === "number")
           stages[s] = d.duration_s;
-      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join69(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
+      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join70(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
       const iterIds = [...new Set([...Object.values(o).flatMap((d) => [...strs2(d?.iteration_ids), ...strs2([d?.iteration_id])]), ...ctx.sessionIds?.() ?? []])];
       if (iterIds.length === 0)
         notProven.add("cost not measured (no iteration ids recorded)");
       const cost = ctx.cost.read(ctx.repoDir, iterIds);
       if (cost.unmetered)
         notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-      const eventsPath = join69(ctx.runDir, "events.jsonl");
+      const eventsPath = join70(ctx.runDir, "events.jsonl");
       const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
       const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
       if (wallFiles.length > 0 && wallPassed === null)
         notProven.add("wall result not recorded by verify");
-      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join69(ctx.repoDir, ".loki"), liveArchivedCosts(join69(ctx.repoDir, ".loki"), iterIds, UNMETERED)).router : undefined), ctx.model);
+      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join70(ctx.repoDir, ".loki"), liveArchivedCosts(join70(ctx.repoDir, ".loki"), iterIds, UNMETERED)).router : undefined), ctx.model);
       if (routeBlock)
         for (const l of routeNotProven(routeBlock))
           notProven.add(l);
@@ -17735,10 +17754,10 @@ var init_seal = __esm(() => {
       }
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
       mkdirSync31(ctx.runDir, { recursive: true });
-      const path = join69(ctx.runDir, "receipt.json");
+      const path = join70(ctx.runDir, "receipt.json");
       atomicWriteText(path, JSON.stringify(receipt, null, 2) + `
 `);
-      atomicWriteText(join69(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      atomicWriteText(join70(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ranModel(o.implement, ctx.model, o.fix), verdict, cost.usd, cost.unmetered === true, totalS);
       try {
         hooks.sealed?.(ctx.runDir, JSON.parse(JSON.stringify(receipt), (_k, v) => v && typeof v === "object" ? Object.freeze(v) : v));
@@ -17764,13 +17783,13 @@ var init_seal = __esm(() => {
 
 // ../../loki-ts/src/util/composite_seal.ts
 import { existsSync as existsSync48, readFileSync as readFileSync57 } from "fs";
-import { basename as basename27, dirname as dirname32, join as join70 } from "path";
+import { basename as basename27, dirname as dirname32, join as join71 } from "path";
 function logProblem(runDir, integ) {
   if (typeof integ["log_sha256"] !== "string")
     return null;
   let b;
   try {
-    b = readFileSync57(join70(runDir, "integration.log"));
+    b = readFileSync57(join71(runDir, "integration.log"));
   } catch {
     return "integration.log is missing but integration.json records its hash";
   }
@@ -17793,13 +17812,13 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("body malformed");
   let ibytes;
   try {
-    ibytes = readFileSync57(join70(runDir, "integration.json"));
+    ibytes = readFileSync57(join71(runDir, "integration.json"));
   } catch {
     return bad("integration.json missing");
   }
   if (sha3(ibytes) !== receipt["integration_sha256"])
     return bad("integration.json does not match its recorded hash");
-  const integ = readJson6(join70(runDir, "integration.json"));
+  const integ = readJson6(join71(runDir, "integration.json"));
   if (!isObj10(integ) || !isObj10(integ["outcomes"]))
     return bad("integration.json has no outcomes");
   const iprob = integrationProblem(integ);
@@ -17834,7 +17853,7 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
       return bad(`child ${text2(repo, 80) || "?"} has an invalid receipt path`);
     if (outcomes[repo] !== "ok")
       return bad(`child ${text2(repo, 80)} did not finish ok in integration.json`);
-    const rp = join70(runDir, rel);
+    const rp = join71(runDir, rel);
     let bytes;
     try {
       bytes = readFileSync57(rp);
@@ -17887,7 +17906,7 @@ var init_keys_cmd = __esm(() => {
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
 import { existsSync as existsSync49, readFileSync as readFileSync58, renameSync as renameSync14, statSync as statSync24, writeFileSync as writeFileSync34 } from "fs";
-import { basename as basename28, dirname as dirname33, join as join71 } from "path";
+import { basename as basename28, dirname as dirname33, join as join72 } from "path";
 import { createHash as createHash21, createPublicKey as createPublicKey4, verify as verify4 } from "crypto";
 function pubFor(kid, given) {
   if (given)
@@ -17939,7 +17958,7 @@ function checkEventLog(receiptPath, receipt) {
     const claims = st !== null && typeof st === "object" && Object.keys(st).length > 0;
     return claims ? "the receipt records stages but binds the empty-log hash, so no events.jsonl can back it (missing, empty or non-empty); the receipt is forged or was sealed without a log. Re-run the task to produce a fresh receipt" : null;
   }
-  const path = join71(dirname33(receiptPath), "events.jsonl");
+  const path = join72(dirname33(receiptPath), "events.jsonl");
   if (!existsSync49(path))
     return "events.jsonl is missing";
   const raw2 = readFileSync58(path, "utf8"), events2 = readEvents(path), lines2 = raw2.split(`
@@ -17958,7 +17977,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join71(dirname33(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join72(dirname33(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -18070,7 +18089,7 @@ var init_verify_cmd = __esm(() => {
 
 // src/server/app.ts
 import { existsSync as existsSync51, readFileSync as readFileSync61, statSync as statSync25 } from "fs";
-import { join as join74, resolve as resolve19, sep as sep16 } from "path";
+import { join as join75, resolve as resolve19, sep as sep16 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -28383,7 +28402,7 @@ function mount20(ctx) {
 // src/server/routes/verify.ts
 import { readFileSync as readFileSync59, realpathSync as realpathSync25 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join72, sep as sep15 } from "path";
+import { join as join73, sep as sep15 } from "path";
 init_verify_cmd();
 init_seal();
 init_receipt_dsse();
@@ -28410,11 +28429,11 @@ function mount21(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync25(join72(repo.p, ".loki", "runs"));
-      runDir = realpathSync25(join72(root, run2));
-      if (runDir !== join72(root, run2))
+      const root = realpathSync25(join73(repo.p, ".loki", "runs"));
+      runDir = realpathSync25(join73(root, run2));
+      if (runDir !== join73(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync25(join72(runDir, "receipt.json"));
+      file = realpathSync25(join73(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
@@ -28496,7 +28515,7 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 
 // src/server/legacy/shim.ts
 import { existsSync as existsSync50, readFileSync as readFileSync60 } from "fs";
-import { join as join73 } from "path";
+import { join as join74 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -28874,7 +28893,7 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join73(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join74(import.meta.dir, "../../../../../VERSION")]) {
     try {
       if (existsSync50(f))
         return readFileSync60(f, "utf8").trim();
@@ -29059,7 +29078,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join74(import.meta.dir, "../../ui/dist"), join74(import.meta.dir, "../ui/dist")].find((d) => existsSync51(join74(d, "index.html")));
+var defaultUiDir = () => [join75(import.meta.dir, "../../ui/dist"), join75(import.meta.dir, "../ui/dist")].find((d) => existsSync51(join75(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -29088,7 +29107,7 @@ function createApp(opts) {
     await next();
   });
   const readInstalled = () => {
-    for (const f of [process.env.LOKI_VERSION_FILE, join74(import.meta.dir, "../../../../VERSION")]) {
+    for (const f of [process.env.LOKI_VERSION_FILE, join75(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
           return readFileSync61(f, "utf8").trim() || "unknown";
@@ -29206,7 +29225,7 @@ function createApp(opts) {
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join74(root, "index.html")));
+    return new Response(Bun.file(join75(root, "index.html")));
   });
   return { app, db, close: () => {
     clearInterval(reconciler);