loki-mode 11.8.1 → 11.10.1

package/packages/control-plane/dist/server.js

@@ -248,7 +248,7 @@ async function backfill(o) {
   }
   const source = sourceId(o.repoDir);
   let runs2 = 0, sent = 0;
-  const failed = [];
+  const failed2 = [];
   for (const id of ids) {
     const runDir = join7(root, id);
     if (!hasSpool(runDir))
@@ -264,9 +264,9 @@ async function backfill(o) {
         await sleep(backoffMs(a));
     }
     if (!res.ok)
-      failed.push(id);
+      failed2.push(id);
   }
-  return { runs: runs2, sent, failed };
+  return { runs: runs2, sent, failed: failed2 };
 }
 var init_backfill = __esm(() => {
   init_ship();
@@ -7326,8 +7326,8 @@ var init_paths = __esm(() => {
 });
 
 // ../../loki-ts/src/util/receipt_signer.ts
-import { createHash as createHash6, randomBytes as randomBytes2, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync5, readFileSync as readFileSync18, statSync as statSync11, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "fs";
+import { createHash as createHash6, randomBytes as randomBytes2, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign, verify as verify2 } from "crypto";
+import { chmodSync as chmodSync4, linkSync, mkdirSync as mkdirSync5, readdirSync as readdirSync9, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync11, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "fs";
 import { homedir as homedir8 } from "os";
 import { dirname as dirname7, join as join26 } from "path";
 function canonicalJson(x) {
@@ -9185,7 +9185,7 @@ function routerMode(env = process.env) {
 var routerEnabled = (env = process.env) => routerMode(env) === "on";
 
 // ../../loki-ts/src/engine10/cost.ts
-import { readdirSync as readdirSync9, readFileSync as readFileSync22 } from "fs";
+import { readdirSync as readdirSync10, readFileSync as readFileSync22 } from "fs";
 import { join as join30 } from "path";
 function routerTelemetryOn(env = process.env) {
   return routerEnabled(env);
@@ -9342,7 +9342,7 @@ import {
   mkdirSync as mkdirSync9,
   openSync as openSync6,
   readSync as readSync5,
-  renameSync as renameSync4,
+  renameSync as renameSync5,
   rmSync as rmSync6,
   statSync as statSync14,
   unlinkSync as unlinkSync4,
@@ -9360,7 +9360,7 @@ function durableWriteThenRename(target, body) {
   } finally {
     closeSync6(fd);
   }
-  renameSync4(tmp, target);
+  renameSync5(tmp, target);
   fsyncParentDir(target);
 }
 function fsyncParentDir(target) {
@@ -9389,7 +9389,7 @@ var init_atomic = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/budget.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync10, readdirSync as readdirSync10, readFileSync as readFileSync23, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync10, readdirSync as readdirSync11, readFileSync as readFileSync23, writeFileSync as writeFileSync13 } from "fs";
 import { dirname as dirname11, join as join31, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function loadDefaultMaxCostUsd() {
@@ -9979,11 +9979,99 @@ var init_scope = __esm(() => {
   dropped = new WeakMap;
 });
 
+// ../../loki-ts/src/features/runner_config.ts
+import { readFileSync as readFileSync27 } from "fs";
+import { join as join37 } from "path";
+function relevant(shared, text2) {
+  if (shared === "go") {
+    let blk = false;
+    return lines(text2).filter((l) => {
+      if (blk) {
+        if (l === ")")
+          blk = false;
+        return true;
+      }
+      if (/^replace\s*\($/.test(l)) {
+        blk = true;
+        return true;
+      }
+      return /^replace\s/.test(l);
+    }).join(`
+`);
+  }
+  if (shared === "tsconfig") {
+    const j = jsonc(text2);
+    const o = j.compilerOptions ?? {};
+    return JSON.stringify(["extends", "baseUrl", "paths", "rootDirs", "moduleSuffixes", "customConditions"].map((k) => k === "extends" ? j["extends"] : o[k]));
+  }
+  if (Array.isArray(shared)) {
+    const j = JSON.parse(text2);
+    return JSON.stringify([shared.map((k) => j[k]), depGuard(j)]);
+  }
+  let on = false;
+  return lines(text2).filter((l) => {
+    if (/^\[[^\]]+\]$/.test(l))
+      on = shared.test(l);
+    return on || KW.test(l);
+  }).join(`
+`);
+}
+function testConfigChanged(repoDir, baseSha, changed) {
+  return changed.filter((f) => {
+    const spec = RUNNER_CONFIGS.find((s) => s.re.test(f));
+    if (!spec)
+      return false;
+    if (!spec.shared)
+      return true;
+    const b = baseText(repoDir, baseSha, f), h = headText(repoDir, f);
+    if (b === h)
+      return false;
+    try {
+      return relevant(spec.shared, b || "{}") !== relevant(spec.shared, h || "{}");
+    } catch {
+      return true;
+    }
+  });
+}
+var PKG_KEYS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, depGuard = (j) => DEP_MAPS.map((m) => Object.entries(j[m] ?? {}).filter(([k, v]) => RUNNER_DEP.test(k) || LOCAL_SPEC.test(String(v)))), KW, lines = (t) => t.split(`
+`).map((l) => l.trim()).filter((l) => l && !l.startsWith("#")), jsonc = (t) => JSON.parse(t.replace(/("(?:\\.|[^"\\])*")|\/\/[^\n]*|\/\*[\s\S]*?\*\//g, "$1").replace(/,(\s*[}\]])/g, "$1")), baseText = (dir, base, f) => {
+  try {
+    return safeGit(dir, ["show", `${base}:./${f}`], { timeout: 20000, maxBuffer: 64 << 20 });
+  } catch {
+    return "";
+  }
+}, headText = (dir, f) => {
+  try {
+    return readFileSync27(join37(dir, f), "utf8");
+  } catch {
+    return "";
+  }
+};
+var init_runner_config = __esm(() => {
+  init_safe_git();
+  PKG_KEYS = ["scripts", "jest", "overrides", "resolutions", "imports", "pnpm", "mocha", "vitest", "ava", "c8", "nyc", "babel", "bun"];
+  RUNNER_CONFIGS = [
+    { re: /(^|\/)(conftest\.py|tox\.ini|bunfig\.toml|\.?pytest\.(ini|toml)|\.mocharc[\w.]*)$/ },
+    { re: /(^|\/)(vitest|vite|jest)\.(config|workspace)\.[\w.]+$/ },
+    { re: /(^|\/)\.cargo\/config(\.toml)?$/ },
+    { re: /(^|\/)package\.json$/, shared: PKG_KEYS },
+    { re: /(^|\/)pyproject\.toml$/, shared: /^\[tool\.pytest/ },
+    { re: /(^|\/)setup\.cfg$/, shared: /^\[tool:pytest\]/ },
+    { re: /(^|\/)go\.mod$/, shared: "go" },
+    { re: /(^|\/)Cargo\.toml$/, shared: /^\[(patch|replace)\b/ },
+    { re: /(^|\/)[jt]sconfig(\.[\w-]+)?\.json$/, shared: "tsconfig" }
+  ];
+  DEP_MAPS = ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"];
+  RUNNER_DEP = /^(jest|vitest|mocha|ava|c8|nyc|pytest[\w-]*|@jest\/.*|ts-jest|babel-jest)$/;
+  LOCAL_SPEC = /^(file|link|npm|workspace):/;
+  KW = /pytest|jest|mocha|vitest|addopts|testpaths/i;
+});
+
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync5 } from "child_process";
-import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync27, rmSync as rmSync8 } from "fs";
+import { mkdtempSync as mkdtempSync4, readFileSync as readFileSync28, rmSync as rmSync8 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { join as join37 } from "path";
+import { join as join38 } from "path";
 import { basename as basename11 } from "path";
 function classifyAssertDelta(inp) {
   const f = basename11(inp.path);
@@ -9993,7 +10081,7 @@ function classifyAssertDelta(inp) {
     return WEAKENED;
   let cwd = "";
   try {
-    cwd = mkdtempSync4(join37(tmpdir6(), "loki-ad-"));
+    cwd = mkdtempSync4(join38(tmpdir6(), "loki-ad-"));
     const raw2 = execFileSync5("python3", ["-I", "-c", PY], {
       input: JSON.stringify({ path: inp.path, base: inp.base, head: inp.head, task: inp.task }),
       cwd,
@@ -10024,7 +10112,7 @@ function assertDeltaNotes(repoDir, baseSha, headRef, path, task, baseCounts, hea
     return null;
   try {
     const show = (ref) => safeGit(repoDir, ["show", `${ref}:${path}`]);
-    const head = headRef ? show(headRef) : readFileSync27(join37(repoDir, path), "utf8");
+    const head = headRef ? show(headRef) : readFileSync28(join38(repoDir, path), "utf8");
     const r = classifyTestEdit(path, show(baseSha), head, task, baseCounts, headCounts);
     return r[0]?.kind === "literal-only" ? r.map((e) => `assertion value changed (not shown to be required by the task): ${e.file}:${e.line} ${e.old} -> ${e.new}`) : null;
   } catch {
@@ -10214,9 +10302,9 @@ function hasRealTestFailure(out2) {
   return /^\s*Tests:?\s+.*\b[1-9]\d* failed\b/m.test(out2) || /^(?:=+ )?.*\b[1-9]\d* failed\b.* in [\d.]+s/m.test(out2) || /^FAILED \S+::/m.test(out2) || /^(?:#|\u2139) fail [1-9]/m.test(out2) || /^\s*[1-9]\d*\s+fail\s*$/m.test(out2) || /^\s*(?:FAIL|\u00D7)\s+\S.*\s>\s/m.test(out2) || /\bAssertionError\b/.test(out2);
 }
 function firstLoadLine(out2) {
-  const lines = out2.split(`
+  const lines2 = out2.split(`
 `).map((l2) => l2.trim()).filter(Boolean);
-  const l = lines.find((x) => /^(?:E\s+)?(?:Error|\w*Error|ERROR|Failed|FAIL)\b|Cannot find|Interrupted:|No test files found/.test(x)) ?? lines[0] ?? "";
+  const l = lines2.find((x) => /^(?:E\s+)?(?:Error|\w*Error|ERROR|Failed|FAIL)\b|Cannot find|Interrupted:|No test files found/.test(x)) ?? lines2[0] ?? "";
   return l.replace(/\s+/g, " ").slice(0, 160);
 }
 function classifyRunnerOutput(out2) {
@@ -10248,7 +10336,7 @@ var init_runner_errors = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/testmap.ts
-import { basename as basename12, extname, join as join38, relative as relative3, sep as sep10 } from "path";
+import { basename as basename12, extname, join as join39, relative as relative3, sep as sep10 } from "path";
 function isTestFile(rel) {
   const name = basename12(rel);
   return JS_TEST_RE.test(name) || PY_TEST_RE.test(name) || GO_TEST_RE.test(name);
@@ -10278,8 +10366,8 @@ var init_testmap = __esm(() => {
 });
 
 // ../../loki-ts/src/util/check_result.ts
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync28, renameSync as renameSync5, writeFileSync as writeFileSync15 } from "fs";
-import { basename as basename13, join as join39 } from "path";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync29, renameSync as renameSync6, writeFileSync as writeFileSync15 } from "fs";
+import { basename as basename13, join as join40 } from "path";
 function plainTestEnv(base = process.env) {
   const e = {};
   for (const [k, v] of Object.entries(tokenFreeEnv(base)))
@@ -10355,12 +10443,12 @@ function unittestCount(out2, ok) {
   return Math.max(0, +r[1] - +(v.match(/skipped=(\d+)/)?.[1] ?? 0) - +(v.match(/expected failures=(\d+)/)?.[1] ?? 0));
 }
 function goCount(out2, ok) {
-  const lines = out2.split(`
+  const lines2 = out2.split(`
 `);
-  if (!lines.some((x) => GO_PKG_RE.test(x)))
+  if (!lines2.some((x) => GO_PKG_RE.test(x)))
     return;
-  const last = new Map, seen = new Set, skip = new Set, failPkg = ok !== true && lines.some((x) => /^FAIL\s+\S+\s+[\d.]+s\b/.test(x));
-  for (const x of lines) {
+  const last = new Map, seen = new Set, skip = new Set, failPkg = ok !== true && lines2.some((x) => /^FAIL\s+\S+\s+[\d.]+s\b/.test(x));
+  for (const x of lines2) {
     const r = x.match(/^=== RUN\s+(\S+)/), m = x.match(/^--- (PASS|FAIL|SKIP): (\S+)/);
     if (r)
       seen.add(r[1]);
@@ -10377,9 +10465,9 @@ function goCount(out2, ok) {
   const t = [...last.values()].filter((v) => v !== "SKIP").length;
   if (t > 0)
     return t;
-  if (lines.some((x) => /^(?:=== RUN|PASS$|FAIL$|testing: warning: no tests to run)/.test(x)))
+  if (lines2.some((x) => /^(?:=== RUN|PASS$|FAIL$|testing: warning: no tests to run)/.test(x)))
     return 0;
-  return lines.filter((x) => GO_PKG_RE.test(x)).every((x) => /\[no tests? (?:files|to run)\]/.test(x)) ? 0 : null;
+  return lines2.filter((x) => GO_PKG_RE.test(x)).every((x) => /\[no tests? (?:files|to run)\]/.test(x)) ? 0 : null;
 }
 function goRunner(cmd, args) {
   const segs = args ? [[cmd, ...args]] : cmd.split(/&&|\|\||[;|\n]/).map((x) => x.trim().split(/\s+/).filter(Boolean));
@@ -10403,7 +10491,7 @@ function goRunner(cmd, args) {
   return {};
 }
 function goJson(out2) {
-  let any = false, failed = false;
+  let any = false, failed2 = false;
   for (const x of out2.split(`
 `)) {
     if (!x.trim() || /^go: /.test(x))
@@ -10418,9 +10506,12 @@ function goJson(out2) {
       return null;
     any = true;
     if (e.Action === "fail")
-      failed = true;
+      failed2 = true;
   }
-  return any ? { failed } : null;
+  return any ? { failed: failed2 } : null;
+}
+function summaryPassFailCount(out2) {
+  return ["pass", "fail"].reduce((t, k) => t + +([...out2.matchAll(new RegExp(`^(?:#|\\u2139) ${k} (\\d+)$`, "gm"))].pop()?.[1] ?? 0), 0);
 }
 function skipped(raw2) {
   return stripAnsi(raw2).split(`
@@ -10488,7 +10579,7 @@ function markExecuted(a, executed) {
   return { ...a, checks_deferred, summary: summaryOf({ ...a, checks_deferred }) };
 }
 function classifyRisk(files, env = process.env) {
-  const lines = files.reduce((n2, f) => n2 + f.added + f.deleted, 0);
+  const lines2 = files.reduce((n2, f) => n2 + f.added + f.deleted, 0);
   const sensitive = files.flatMap((f) => {
     const hit = SENSITIVE.find(([, re]) => re.test(f.path));
     return hit && !isTestFile(f.path) ? [`${f.path} (${hit[0]})`] : [];
@@ -10506,14 +10597,14 @@ function classifyRisk(files, env = process.env) {
     high.push(`public API surface: ${api.slice(0, 3).join(", ")}`);
   if (files.length >= FILES_HIGH)
     high.push(`${files.length} files >= ${FILES_HIGH}`);
-  if (lines >= LINES_HIGH)
-    high.push(`${lines} changed lines >= ${LINES_HIGH}`);
+  if (lines2 >= LINES_HIGH)
+    high.push(`${lines2} changed lines >= ${LINES_HIGH}`);
   if (testsModified.length)
     med.push(`existing tests or test config modified: ${testsModified.slice(0, 3).join(", ")}`);
   if (files.length >= FILES_MEDIUM)
     med.push(`${files.length} files >= ${FILES_MEDIUM}`);
-  if (lines >= LINES_MEDIUM)
-    med.push(`${lines} changed lines >= ${LINES_MEDIUM}`);
+  if (lines2 >= LINES_MEDIUM)
+    med.push(`${lines2} changed lines >= ${LINES_MEDIUM}`);
   const computed = high.length ? "high" : med.length ? "medium" : "low";
   const reasons = high.length ? [...high, ...med] : med.length ? med : [`${files.length} file${files.length === 1 ? "" : "s"}, no sensitive paths`];
   let tier = computed, override, ignored;
@@ -10536,7 +10627,7 @@ function classifyRisk(files, env = process.env) {
     tier,
     computed,
     reasons,
-    stats: { files: files.length, lines, sensitive, tests_modified: testsModified, tests_deleted: testsDeleted, api },
+    stats: { files: files.length, lines: lines2, sensitive, tests_modified: testsModified, tests_deleted: testsDeleted, api },
     checks_selected: plan.selected,
     checks_deferred,
     ...override ? { override } : {},
@@ -10571,7 +10662,7 @@ function diffFiles(repoDir, baseSha) {
       return f;
     let n2 = 0;
     try {
-      n2 = readFileSync28(join39(repoDir, path), "utf8").split(`
+      n2 = readFileSync29(join40(repoDir, path), "utf8").split(`
 `).length;
     } catch {}
     return { path, added: n2, deleted: 0, status: "added" };
@@ -10579,11 +10670,11 @@ function diffFiles(repoDir, baseSha) {
 }
 function recordRisk(repoDir, a) {
   try {
-    const dir = join39(repoDir, ".loki", "state"), p = join39(dir, "risk-tier.json");
+    const dir = join40(repoDir, ".loki", "state"), p = join40(dir, "risk-tier.json");
     mkdirSync12(dir, { recursive: true });
     writeFileSync15(`${p}.tmp`, JSON.stringify(a, null, 2) + `
 `);
-    renameSync5(`${p}.tmp`, p);
+    renameSync6(`${p}.tmp`, p);
     return p;
   } catch {
     return null;
@@ -10624,10 +10715,10 @@ var init_check_result = __esm(() => {
 import { spawnSync as spawnSync3 } from "child_process";
 import { mkdtempSync as mkdtempSync5, realpathSync as realpathSync16, rmSync as rmSync9 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { basename as basename14, extname as extname2, join as join40 } from "path";
+import { basename as basename14, extname as extname2, join as join41 } from "path";
 function changedFilesNamed(out2, repoDir, changed) {
   return changed.filter((f) => {
-    if (out2.includes(f) || out2.includes(join40(repoDir, f)))
+    if (out2.includes(f) || out2.includes(join41(repoDir, f)))
       return true;
     const segs = f.split("/");
     if (suffixes(segs, 2).some((x) => x !== f && bounded(out2, x, "(?![\\w-])")))
@@ -10738,7 +10829,7 @@ async function loadErrorIsHarnessOwned(i) {
     return false;
   if (i.args.some((a) => changed.includes(a.replace(/^\.\//, ""))))
     return false;
-  const dir = mkdtempSync5(join40(tmpdir7(), "e10-loadown-"));
+  const dir = mkdtempSync5(join41(tmpdir7(), "e10-loadown-"));
   const git3 = (args) => {
     safeGit(i.repoDir, args, { stdio: "ignore" });
   };
@@ -10770,7 +10861,7 @@ var init_load_owner = __esm(() => {
 });
 
 // ../../loki-ts/src/util/wall_owned.ts
-import { isAbsolute as isAbsolute4, join as join41, relative as relative4 } from "path";
+import { isAbsolute as isAbsolute4, join as join42, relative as relative4 } from "path";
 function failingLocations(raw2, cwd, repoDir) {
   const out2 = raw2.replace(ANSI2, "").replace(/\r\n?/g, `
 `), files = new Set;
@@ -10802,7 +10893,7 @@ function failingLocations(raw2, cwd, repoDir) {
   }
   if (errors2 === 0 || located !== errors2)
     return null;
-  return [...files].map((f) => relative4(repoDir, isAbsolute4(f) ? f : join41(cwd, f)));
+  return [...files].map((f) => relative4(repoDir, isAbsolute4(f) ? f : join42(cwd, f)));
 }
 function wallOwnedFailure(raw2, cwd, repoDir, wall) {
   const locs = failingLocations(raw2, cwd, repoDir);
@@ -10831,11 +10922,11 @@ var init_state = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/repo_profile.ts
-import { existsSync as existsSync22, readFileSync as readFileSync29, mkdirSync as mkdirSync13, readdirSync as readdirSync11, renameSync as renameSync6, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
-import { basename as basename15, join as join42, resolve as resolve11, isAbsolute as isAbsolute5 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync30, mkdirSync as mkdirSync13, readdirSync as readdirSync12, renameSync as renameSync7, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
+import { basename as basename15, join as join43, resolve as resolve11, isAbsolute as isAbsolute5 } from "path";
 function loadProfile(repoDir) {
   try {
-    const p = JSON.parse(readFileSync29(commandProfilePath(repoDir), "utf8"));
+    const p = JSON.parse(readFileSync30(commandProfilePath(repoDir), "utf8"));
     return p?.version === 1 && Array.isArray(p.commands) && p.baseline ? p : null;
   } catch {
     return null;
@@ -10866,7 +10957,7 @@ function attributeFullSuite(repoDir, baseSha, full, blocked, changed) {
   const block = new Set(blocked);
   return attribute(repoDir, baseSha, bad.map((c) => ({ name: c.name, ...c.ids ? { ids: c.ids } : {}, eligible: (c.ids ?? []).every((i) => !block.has(i) && !changed.some((f) => i.includes(f))) })));
 }
-var commandProfilePath = (repoDir) => join42(repoDir, ".loki", "state", "repo-profile.json");
+var commandProfilePath = (repoDir) => join43(repoDir, ".loki", "state", "repo-profile.json");
 var init_repo_profile = __esm(() => {
   init_failures();
   init_check_result();
@@ -10879,20 +10970,20 @@ var init_repo_profile = __esm(() => {
 import { createHash as createHash10 } from "crypto";
 import {
   existsSync as existsSync23,
-  readdirSync as readdirSync12,
-  readFileSync as readFileSync30,
+  readdirSync as readdirSync13,
+  readFileSync as readFileSync31,
   statSync as statSync16,
   writeFileSync as writeFileSync17,
   mkdirSync as mkdirSync14
 } from "fs";
-import { basename as basename16, dirname as dirname13, join as join43, resolve as resolve12 } from "path";
+import { basename as basename16, dirname as dirname13, join as join44, resolve as resolve12 } from "path";
 function readManifest(path) {
   if (!existsSync23(path)) {
     return null;
   }
   let raw2;
   try {
-    raw2 = readFileSync30(path, "utf8");
+    raw2 = readFileSync31(path, "utf8");
   } catch {
     return null;
   }
@@ -10929,7 +11020,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
   const seen = new Set;
   let children;
   try {
-    children = readdirSync12(rootDir);
+    children = readdirSync13(rootDir);
   } catch {
     children = [];
   }
@@ -10944,7 +11035,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
     for (const child of children) {
       if (!matchPattern(name, child))
         continue;
-      const full = join43(rootDir, child);
+      const full = join44(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
@@ -10961,7 +11052,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
   }
   if (declared.length === 0) {
     for (const child of children) {
-      const full = join43(rootDir, child);
+      const full = join44(rootDir, child);
       if (seen.has(full))
         continue;
       let st;
@@ -10972,7 +11063,7 @@ function resolveMembers(rootDir, declared, selfBasename) {
       }
       if (!st.isDirectory())
         continue;
-      if (!existsSync23(join43(full, ".loki", "app.json")))
+      if (!existsSync23(join44(full, ".loki", "app.json")))
         continue;
       seen.add(full);
       out2.push(full);
@@ -10993,17 +11084,17 @@ function cacheKey(manifestPaths) {
 }
 function writeCache(targetDir, key, result) {
   try {
-    const cacheDir = join43(targetDir, ".loki", "state");
+    const cacheDir = join44(targetDir, ".loki", "state");
     mkdirSync14(cacheDir, { recursive: true });
-    const cachePath = join43(cacheDir, "project-graph.json");
+    const cachePath = join44(cacheDir, "project-graph.json");
     writeFileSync17(cachePath, JSON.stringify({ key, result }, null, 2), "utf8");
   } catch {}
 }
 function discoverProjectGraph(targetDir) {
   const absTarget = resolve12(targetDir);
-  const targetManifest = join43(absTarget, ".loki", "app.json");
+  const targetManifest = join44(absTarget, ".loki", "app.json");
   const parentDir = dirname13(absTarget);
-  const parentManifest = join43(parentDir, ".loki", "app.json");
+  const parentManifest = join44(parentDir, ".loki", "app.json");
   const examined = [];
   let chosenManifest = null;
   let chosenRoot = "";
@@ -11023,7 +11114,7 @@ function discoverProjectGraph(targetDir) {
   const members = resolveMembers(chosenRoot, declared, basename16(absTarget));
   const filtered = [];
   for (const m of members) {
-    const sibManifestPath = join43(m, ".loki", "app.json");
+    const sibManifestPath = join44(m, ".loki", "app.json");
     if (existsSync23(sibManifestPath)) {
       examined.push(sibManifestPath);
       const sibManifest = readManifest(sibManifestPath);
@@ -11096,15 +11187,15 @@ var init_steer = __esm(() => {
 });
 
 // ../../loki-ts/src/util/pr_lessons.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync15, readFileSync as readFileSync31 } from "fs";
-import { dirname as dirname14, join as join44 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync15, readFileSync as readFileSync32 } from "fs";
+import { dirname as dirname14, join as join45 } from "path";
 import { createHash as createHash11 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
   if (!existsSync24(p))
     return [];
   try {
-    const j = JSON.parse(readFileSync31(p, "utf-8"));
+    const j = JSON.parse(readFileSync32(p, "utf-8"));
     return Array.isArray(j.lessons) ? j.lessons : [];
   } catch {
     return [];
@@ -11146,7 +11237,7 @@ function recordRunVerdict(repoDir, runId, verdict) {
   if (dirty)
     save(repoDir, lessons);
 }
-var lessonsPath = (repoDir) => join44(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
+var lessonsPath = (repoDir) => join45(repoDir, ".loki", "memory", "semantic", "pr-lessons.json"), KINDS;
 var init_pr_lessons = __esm(() => {
   init_atomic();
   KINDS = new Set(["pr", "receipt", "ticket", "rejected"]);
@@ -11158,11 +11249,30 @@ var init_model_downgrades = __esm(() => {
   init_decision();
 });
 
+// ../../loki-ts/src/e10ext/select.ts
+var PYTEST_COLLECTION_EXITS;
+var init_select = __esm(() => {
+  PYTEST_COLLECTION_EXITS = new Set([2, 3, 4, 5]);
+});
+
+// ../../loki-ts/src/e10ext/treeswap.ts
+var init_treeswap = __esm(() => {
+  init_safe_git();
+});
+
+// ../../loki-ts/src/features/attempts.ts
+var init_attempts = __esm(() => {
+  init_credential_env();
+  init_safe_git();
+  init_select();
+  init_treeswap();
+});
+
 // ../../loki-ts/src/providers/mcp_config.ts
 var init_mcp_config = () => {};
 
 // ../../loki-ts/src/providers/claude_flags.ts
-import { existsSync as existsSync25, readFileSync as readFileSync32 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync33 } from "fs";
 import { resolve as resolvePath, dirname as dirname15 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function designArchetypesText() {
@@ -11174,7 +11284,7 @@ function designArchetypesText() {
     ]) {
       const p = resolvePath(moduleDir, ...rel);
       if (existsSync25(p))
-        return readFileSync32(p, "utf8");
+        return readFileSync33(p, "utf8");
     }
   } catch {}
   return "";
@@ -11252,14 +11362,14 @@ var init_providers = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/router/route_record.ts
-import { existsSync as existsSync26, lstatSync as lstatSync9, mkdirSync as mkdirSync16, readFileSync as readFileSync33, writeFileSync as writeFileSync18 } from "fs";
-import { join as join45 } from "path";
+import { existsSync as existsSync26, lstatSync as lstatSync9, mkdirSync as mkdirSync16, readFileSync as readFileSync34, writeFileSync as writeFileSync18 } from "fs";
+import { join as join46 } from "path";
 function loadRouteRecord(runDir) {
   try {
-    const p = join45(runDir, ROUTE_RECORD_FILE);
+    const p = join46(runDir, ROUTE_RECORD_FILE);
     if (!existsSync26(p) || !lstatSync9(p).isFile())
       return;
-    const v = JSON.parse(readFileSync33(p, "utf8"));
+    const v = JSON.parse(readFileSync34(p, "utf8"));
     return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
   } catch {
     return;
@@ -11269,7 +11379,7 @@ var ROUTE_RECORD_FILE = "route.json";
 var init_route_record = () => {};
 
 // ../../loki-ts/src/runner/router/history_store.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync17, readFileSync as readFileSync34, renameSync as renameSync7, rmSync as rmSync11, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync17, readFileSync as readFileSync35, renameSync as renameSync8, rmSync as rmSync11, writeFileSync as writeFileSync19 } from "fs";
 import { resolve as resolve13 } from "path";
 function validRun(v) {
   if (typeof v !== "object" || v === null)
@@ -11285,7 +11395,7 @@ function readRunHistory(key, cacheRoot) {
   if (!existsSync27(path))
     return [];
   try {
-    const parsed = JSON.parse(readFileSync34(path, "utf8"));
+    const parsed = JSON.parse(readFileSync35(path, "utf8"));
     const runs2 = parsed?.runs;
     return Array.isArray(runs2) ? runs2.filter(validRun) : [];
   } catch {
@@ -11300,7 +11410,7 @@ function appendRunOutcome(key, outcome, cacheRoot) {
     const tmp = `${target}.${process.pid}.tmp`;
     try {
       writeFileSync19(tmp, JSON.stringify({ runs: runs2 }));
-      renameSync7(tmp, target);
+      renameSync8(tmp, target);
     } catch (e) {
       rmSync11(tmp, { force: true, recursive: false });
       throw e;
@@ -11319,7 +11429,7 @@ var init_history_store = __esm(() => {
 });
 
 // ../../loki-ts/src/runner/router/history.ts
-import { dirname as dirname16, join as join46, resolve as resolve14 } from "path";
+import { dirname as dirname16, join as join47, resolve as resolve14 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function shapeKey(model) {
   if (!model || model.status !== "ok")
@@ -11420,6 +11530,7 @@ var init_implement = __esm(() => {
   init_context();
   init_model_downgrades();
   init_sizing();
+  init_attempts();
   init_plan();
   init_verify();
   init_resolve();
@@ -11479,7 +11590,7 @@ var init_worker = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/package_suite.ts
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   const api = loadProjectApi(repoDir);
   if (!isMultiRoot(api))
@@ -11490,7 +11601,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
   for (const pkg of withTests) {
     const tc = pkg.commands.test, name = `full suite: ${pkg.name}`, cmd = `(cd ${tc.cwd} && ${tc.cmd})`;
     const started = Date.now();
-    const r = await run(["bash", "-c", tc.cmd], { cwd: join47(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const r = await run(["bash", "-c", tc.cmd], { cwd: join48(repoDir, tc.cwd), timeoutMs: opts.timeoutMs, ...opts.path ? { env: { PATH: opts.path } } : {} });
     const duration_s = (Date.now() - started) / 1000;
     if (signal.aborted) {
       checks.push({ name, cmd, result: "not_run", duration_s });
@@ -11499,7 +11610,7 @@ async function runPackageSuites(repoDir, signal, opts, checks, notProven) {
     }
     const out2 = `${r.stdout}
 ${r.stderr}`;
-    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join47(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
+    const lr = r.exitCode === 0 || !opts.baseSha ? undefined : await harnessLoadReason({ repoDir, baseSha: opts.baseSha, out: out2, cmd: "bash", args: ["-c", tc.cmd], signal, cwd: join48(repoDir, tc.cwd), ...opts.path ? { env: { PATH: opts.path } } : {} });
     if (lr) {
       checks.push({ name, cmd, result: "not_run", duration_s });
       notProven.add(`${lr} (${name}; harness-owned)`);
@@ -11533,7 +11644,7 @@ __export(exports_deep, {
   DEFAULT_PUSH_SH: () => DEFAULT_PUSH_SH
 });
 import { existsSync as existsSync28, mkdirSync as mkdirSync18, writeFileSync as writeFileSync20 } from "fs";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 async function runFullSuite(ctx, signal, opts, checks, notProven) {
   if (await runPackageSuites(ctx.repoDir, signal, { path: opts.path, timeoutMs: opts.fullSuiteTimeoutMs ?? FULL_SUITE_TIMEOUT_MS, baseSha: ctx.baseSha }, checks, notProven))
     return;
@@ -11630,7 +11741,7 @@ async function runSecretScan(ctx, changed, opts, checks, notProven) {
   }
   const inline = 'script="$1"; shift; . "$script" || exit 3; hit=0; for f in "$@"; do if _commit_scan_secret_file "$f" || _commit_path_looks_secret "$f"; then printf "%s\\n" "$f"; hit=1; fi; done; exit "$hit"';
   const started = Date.now();
-  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join48(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
+  const r = await run(["bash", "-c", inline, "_", scriptPath, ...changed.map((f) => join49(ctx.repoDir, f))], { cwd: ctx.repoDir, timeoutMs: 30000 });
   const durationS = (Date.now() - started) / 1000;
   if (r.exitCode === 3) {
     checks.push({ name, cmd: "secret-scan.sh", result: "not_run", duration_s: durationS });
@@ -11651,10 +11762,10 @@ function commentArgv(prNumber, bodyFile) {
   return ["comment", prNumber, bodyFile];
 }
 function buildCommentBody(checks, notProven, statusState) {
-  const lines = [`## Loki deep verify: ${statusState}`, "", "### Checks"];
-  lines.push(...checks.length ? checks.map((c) => `- ${c.result}: ${c.name}${c.reason ? ` (${c.reason})` : ""}`) : ["- none"]);
-  lines.push("", "### NOT PROVEN", ...notProven.length ? notProven.map((n2) => `- ${n2}`) : ["- none"]);
-  return `${lines.join(`
+  const lines2 = [`## Loki deep verify: ${statusState}`, "", "### Checks"];
+  lines2.push(...checks.length ? checks.map((c) => `- ${c.result}: ${c.name}${c.reason ? ` (${c.reason})` : ""}`) : ["- none"]);
+  lines2.push("", "### NOT PROVEN", ...notProven.length ? notProven.map((n2) => `- ${n2}`) : ["- none"]);
+  return `${lines2.join(`
 `)}
 `;
 }
@@ -11671,7 +11782,7 @@ async function postResults(ctx, opts, checks, notProven, statusState) {
   const prNumber = prUrl ? PR_NUMBER_RE.exec(prUrl)?.[1] : undefined;
   if (prNumber) {
     mkdirSync18(ctx.runDir, { recursive: true });
-    const bodyFile = join48(ctx.runDir, "deep-comment.md");
+    const bodyFile = join49(ctx.runDir, "deep-comment.md");
     writeFileSync20(bodyFile, buildCommentBody(checks, notProven, statusState), "utf8");
     const commentResult = await run(["bash", scriptPath, ...commentArgv(prNumber, bodyFile)], { cwd: ctx.repoDir, env, timeoutMs: 30000 });
     if (commentResult.exitCode !== 0)
@@ -11725,7 +11836,7 @@ async function runDeep(ctx, signal, opts = {}) {
   const sig = signReceipt(`${ctx.runId}-deep`, addendumSha256);
   const addendum = { ...addendumBody, addendum_sha256: addendumSha256, verification: { jwt: sig.jwt, kid: sig.kid } };
   mkdirSync18(ctx.runDir, { recursive: true });
-  writeFileSync20(join48(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
+  writeFileSync20(join49(ctx.runDir, "receipt-addendum-1.json"), JSON.stringify(addendum, null, 2) + `
 `);
   const pushNotProven = await postResults(ctx, opts, checks, notProvenList, statusState);
   const allNotProven = [...notProvenList, ...pushNotProven];
@@ -11770,7 +11881,7 @@ var init_deep = __esm(() => {
 // ../../loki-ts/src/engine10/stages/verify.ts
 import { existsSync as existsSync29, mkdtempSync as mkdtempSync6, realpathSync as realpathSync17, rmSync as rmSync12 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-import { dirname as dirname17, isAbsolute as isAbsolute6, join as join49, relative as relative5 } from "path";
+import { dirname as dirname17, isAbsolute as isAbsolute6, join as join50, relative as relative5 } from "path";
 function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
   const inRepo = (p) => {
     try {
@@ -11781,7 +11892,7 @@ function resolveTool(repoDir, bin, fallback, lastResort = fallback) {
     }
   };
   const venvEnv = process.env["VIRTUAL_ENV"];
-  const project = [join49(repoDir, ".venv", "bin", bin), join49(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join49(venvEnv, "bin", bin)] : []].find(existsSync29);
+  const project = [join50(repoDir, ".venv", "bin", bin), join50(repoDir, "venv", "bin", bin), ...venvEnv && inRepo(venvEnv) ? [join50(venvEnv, "bin", bin)] : []].find(existsSync29);
   return project ? [project, "project"] : [Bun.which(fallback) ? fallback : lastResort, "system"];
 }
 function runnerCmd(t, repoDir) {
@@ -11811,13 +11922,6 @@ function commandFor(t, repoDir, api) {
   const [cmd, args, interpreter] = runnerCmd(site ? { runner: t.runner, path: site.file } : t, repoDir);
   return { cwd: site?.cwd ?? repoDir, cmd, args, argv: [cmd, ...args], ...interpreter ? { interpreter } : {}, pkgRoot: site?.root ?? "." };
 }
-function testConfigChanged(repoDir, baseSha, changed) {
-  const diff = (f) => safeGit(repoDir, ["diff", "-U0", baseSha, "--", f]);
-  return changed.filter((f) => CFG_ALWAYS.test(f) || CFG_SHARED.test(f) && (() => {
-    const d = diff(f);
-    return !d || CFG_LINE.test(d);
-  })());
-}
 async function runOnce(cmd, args, cwd, signal, opts) {
   if (!Bun.which(cmd, { PATH: opts.path ?? process.env["PATH"] ?? "" }))
     return { ok: false, missing: true, cut: false, out: "" };
@@ -11856,8 +11960,8 @@ function firstError(out2) {
       return l2;
     }
   };
-  const lines = out2.slice(-65536).split(`
-`).map((l2) => (l2.startsWith("{") ? goOut(l2) : l2).trim()).filter(Boolean), l = lines.find((x) => /^(FAILED\s|\u25cf\s.*\u203a|not ok\s|_{3,}\s.+\s_{3,}$)/.test(x)) ?? lines.find((x) => /^[\w./-]+\.go:\d+:\d+: \S/.test(x)) ?? lines.find((x) => /fail|error/i.test(x) && !/^(=|\u2713|ok\b|PASS)/.test(x)) ?? "";
+  const lines2 = out2.slice(-65536).split(`
+`).map((l2) => (l2.startsWith("{") ? goOut(l2) : l2).trim()).filter(Boolean), l = lines2.find((x) => /^(FAILED\s|\u25cf\s.*\u203a|not ok\s|_{3,}\s.+\s_{3,}$)/.test(x)) ?? lines2.find((x) => /^[\w./-]+\.go:\d+:\d+: \S/.test(x)) ?? lines2.find((x) => /fail|error/i.test(x) && !/^(=|\u2713|ok\b|PASS)/.test(x)) ?? "";
   return l.replace(/\d{4}-\d\d-\d\dT[\d:.]+Z?/g, "").replace(/(^|\s)\/(?:[\w.@-]+\/)*[\w.@-]+/g, "$1<path>").replace(/:\d+(?::\d+)?/g, "").replace(/\[?\d+(?:\.\d+)?m?s\]?/g, "").replace(/\s+/g, " ").slice(0, 160);
 }
 async function runCheck(ctx, name, cmd, args, signal, checks, opts = {}) {
@@ -11899,7 +12003,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   const sus = pairs.filter(({ c }) => rel.has(c.name) && c.result === "pass");
   if (!(un.some(({ c }) => c.result === "fail" && c.ids?.length) || sus.length) || signal.aborted)
     return out2;
-  const dir = mkdtempSync6(join49(tmpdir8(), "e10-base-"));
+  const dir = mkdtempSync6(join50(tmpdir8(), "e10-base-"));
   const git3 = (args) => {
     safeGit(ctx.repoDir, args, { stdio: "ignore", repoDrivers: true });
   };
@@ -11907,12 +12011,15 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
     git3(["-c", "core.hooksPath=/dev/null", "worktree", "add", "--detach", dir, ctx.baseSha]);
     const base = new Map;
     for (const { c, t } of new Set([...un, ...sus])) {
-      const bc = commandFor(t, dir, api), b = await runOnce(bc.cmd, bc.args, bc.cwd, signal, {});
-      base.set(c, { red: !b.ok && !b.cut ? failIds(b.out) : [], n: ran(b.out) ?? ["pass", "fail"].reduce((t2, k) => t2 + +([...b.out.matchAll(new RegExp(`^(?:#|\\u2139) ${k} (\\d+)$`, "gm"))].pop()?.[1] ?? 0), 0), sk: skipped(b.out) });
+      const bc = commandFor(t, dir, api);
+      const b = await runOnce(bc.cmd, bc.args, bc.cwd, signal, {});
+      const red = !b.ok && !b.cut ? failIds(b.out) : [];
+      base.set(c, { red, n: ran(b.out) ?? summaryPassFailCount(b.out), sk: skipped(b.out) });
     }
     out2.weak = sus.filter(({ c }) => (c.sk ?? 0) > base.get(c).sk || (c.n ?? 0) < base.get(c).n).map(({ c }) => c.name);
-    for (const { c } of sus)
+    for (const { c } of sus) {
       out2.cnt[c.name] = { b: { run: base.get(c).n, skipped: base.get(c).sk }, h: { run: c.n ?? 0, skipped: c.sk ?? 0 } };
+    }
     const progress = checks.some((c) => wall.has(c.name) && c.result === "pass") || sus.some(({ c }) => !out2.weak.includes(c.name) && base.get(c).red.length > 0 && (c.n ?? 0) >= base.get(c).n);
     if (progress) {
       for (const { c } of un) {
@@ -11934,7 +12041,7 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal)
   return out2;
 }
 function isLokiModeRepo(repoDir) {
-  return existsSync29(join49(repoDir, "scripts", "select-tests.sh"));
+  return existsSync29(join50(repoDir, "scripts", "select-tests.sh"));
 }
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
@@ -11951,15 +12058,16 @@ async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   }
   for (const g of groupByPackage(api, ctx.repoDir, changed.filter((f) => /\.(ts|tsx|js|jsx)$/.test(f)))) {
     const sfx = g.root === "." ? "" : `:${g.root}`, co = g.root === "." ? opts : { ...opts, cwd: g.cwd };
-    if (existsSync29(join49(g.cwd, "tsconfig.json")))
+    if (existsSync29(join50(g.cwd, "tsconfig.json")))
       await runCheck(ctx, `lint:tsc${sfx}`, "npx", ["tsc", "--noEmit", "-p", "."], signal, checks, { ...co, kind: "static" });
-    if (ESLINT_CONFIGS.some((f) => existsSync29(join49(g.cwd, f))))
+    if (ESLINT_CONFIGS.some((f) => existsSync29(join50(g.cwd, f))))
       await runCheck(ctx, `lint:eslint${sfx}`, "npx", ["eslint", ...g.rel], signal, checks, { ...co, kind: "static" });
   }
 }
-var CHECK_TIMEOUT_MS = 60000, dedupeTests = (tests) => [...new Map(tests.map((t) => [`${t.runner}:${t.path}`, t])).values()], CODE_EXT, CFG_ALWAYS, CFG_SHARED, CFG_LINE, ESLINT_CONFIGS, verifyStage;
+var CHECK_TIMEOUT_MS = 60000, dedupeTests = (tests) => [...new Map(tests.map((t) => [`${t.runner}:${t.path}`, t])).values()], CODE_EXT, ESLINT_CONFIGS, verifyStage;
 var init_verify = __esm(() => {
   init_scope();
+  init_runner_config();
   init_assert_delta();
   init_failures();
   init_load_owner();
@@ -11973,10 +12081,8 @@ var init_verify = __esm(() => {
   init_repo_profile();
   init_check_result();
   init_check_result();
+  init_runner_config();
   CODE_EXT = /\.(?:[cm]?[jt]sx?|py|go)$/;
-  CFG_ALWAYS = /(^|\/)(conftest\.py|\.?pytest\.(?:ini|toml)|tox\.ini|jest\.config\.[\w.]+|vitest\.config\.[\w.]+|\.mocharc[\w.]*)$/;
-  CFG_SHARED = /(^|\/)(setup\.cfg|pyproject\.toml|package\.json)$/;
-  CFG_LINE = /^[+-].*(pytest|jest|mocha|vitest|"test"\s*:|addopts|testpaths)/im;
   ESLINT_CONFIGS = [".eslintrc", ".eslintrc.json", ".eslintrc.js", ".eslintrc.cjs", "eslint.config.js", "eslint.config.mjs", "eslint.config.cjs"];
   verifyStage = {
     name: "verify",
@@ -12013,8 +12119,8 @@ var init_verify = __esm(() => {
       const wall = ctx.outputs().wall ?? {};
       const wallPaths = new Set((wall.files ?? []).map((f) => isAbsolute6(f.path) ? relative5(ctx.repoDir, f.path) : f.path));
       const wallTests = map.tests.filter((t) => wallPaths.has(t.path));
-      const intake = ctx.outputs().intake, relevant = ctx.tests.impacted(map, namedFiles(intake?.task ?? "", loadRepoMap(intake?.repomap_ref)));
-      const tests = dedupeTests([...impacted, ...changedTestFiles, ...wallTests, ...relevant]);
+      const intake = ctx.outputs().intake, relevant2 = ctx.tests.impacted(map, namedFiles(intake?.task ?? "", loadRepoMap(intake?.repomap_ref)));
+      const tests = dedupeTests([...impacted, ...changedTestFiles, ...wallTests, ...relevant2]);
       const scopedOut = scopedOutOf(map);
       if (scopedOut.length)
         ctx.emit("test.scoped_out", "verify", { tests: scopedOut });
@@ -12022,10 +12128,10 @@ var init_verify = __esm(() => {
         if (signal.aborted)
           break;
         const tc = commandFor(t, ctx.repoDir, api);
-        await runCheck(ctx, `${t.runner}:${t.path}`, tc.cmd, tc.args, signal, checks, { ...tc.interpreter ? { interpreter: tc.interpreter } : {}, protect: [...wallTests, ...relevant].includes(t), ...tc.pkgRoot !== "." ? { cwd: tc.cwd } : {} });
+        await runCheck(ctx, `${t.runner}:${t.path}`, tc.cmd, tc.args, signal, checks, { ...tc.interpreter ? { interpreter: tc.interpreter } : {}, protect: [...wallTests, ...relevant2].includes(t), ...tc.pkgRoot !== "." ? { cwd: tc.cwd } : {} });
       }
-      const targetNames = new Set([...wallTests, ...relevant].map((t) => `${t.runner}:${t.path}`));
-      const preRed = await subtractBase(ctx, api, checks, tests, changed, new Set(wallTests.map((t) => `${t.runner}:${t.path}`)), new Set(relevant.map((t) => `${t.runner}:${t.path}`)), signal);
+      const targetNames = new Set([...wallTests, ...relevant2].map((t) => `${t.runner}:${t.path}`));
+      const preRed = await subtractBase(ctx, api, checks, tests, changed, new Set(wallTests.map((t) => `${t.runner}:${t.path}`)), new Set(relevant2.map((t) => `${t.runner}:${t.path}`)), signal);
       const attr = attribute(ctx.repoDir, ctx.baseSha, checks.filter((c) => c.result === "fail" && !preRed.names.includes(c.name)).map((c) => ({ name: c.name, ids: c.ids, eligible: !targetNames.has(c.name) && !changed.includes(c.name.slice(c.name.indexOf(":") + 1)) })));
       preRed.names.push(...attr.preExistingChecks);
       preRed.ids.push(...attr.preExistingIds);
@@ -12071,7 +12177,7 @@ var init_verify = __esm(() => {
         }
       };
       const testCounts = {};
-      const modifiedRel = relevant.filter((t) => changed.includes(t.path) && inBase(t.path)).flatMap((t) => {
+      const modifiedRel = relevant2.filter((t) => changed.includes(t.path) && inBase(t.path)).flatMap((t) => {
         const k = preRed.cnt[`${t.runner}:${t.path}`];
         if (k)
           testCounts[t.path] = k;
@@ -12085,8 +12191,8 @@ var init_verify = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync30, readdirSync as readdirSync13, readFileSync as readFileSync35 } from "fs";
-import { dirname as dirname18, join as join50 } from "path";
+import { existsSync as existsSync30, readdirSync as readdirSync14, readFileSync as readFileSync36 } from "fs";
+import { dirname as dirname18, join as join51 } from "path";
 function parseJsonc(text2) {
   let out2 = "", i = 0;
   while (i < text2.length) {
@@ -12121,25 +12227,25 @@ function moduleOf(file, depth = 0) {
   const ext = typeof j.extends === "string" ? j.extends : null;
   if (!ext || !ext.startsWith("."))
     return null;
-  const next = join50(dirname18(file), ext.endsWith(".json") ? ext : `${ext}.json`);
+  const next = join51(dirname18(file), ext.endsWith(".json") ? ext : `${ext}.json`);
   return existsSync30(next) ? moduleOf(next, depth + 1) : null;
 }
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
   try {
-    names = readdirSync13(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
+    names = readdirSync14(pkgDir).filter((f) => f.endsWith(".json")).sort((x, y) => x.length - y.length || x.localeCompare(y));
   } catch {
     return null;
   }
   let packageType = null, tsModule = null;
   for (const n2 of names) {
-    const j = readJson4(join50(pkgDir, n2));
+    const j = readJson4(join51(pkgDir, n2));
     if (!j)
       continue;
     if (packageType === null && typeof j.type === "string" && typeof j.name === "string")
       packageType = j.type;
     if (tsModule === null && j.compilerOptions !== undefined)
-      tsModule = moduleOf(join50(pkgDir, n2));
+      tsModule = moduleOf(join51(pkgDir, n2));
   }
   if (packageType === null && tsModule === null)
     return null;
@@ -12161,7 +12267,7 @@ function conventionViolation(c, fileName, content) {
 }
 var readJson4 = (p) => {
   try {
-    const v = parseJsonc(readFileSync35(p, "utf8"));
+    const v = parseJsonc(readFileSync36(p, "utf8"));
     return v && typeof v === "object" && !Array.isArray(v) ? v : null;
   } catch {
     return null;
@@ -12171,15 +12277,15 @@ var init_conventions = () => {};
 
 // ../../loki-ts/src/engine10/stages/wall.ts
 import { spawnSync as spawnSync4 } from "child_process";
-import { existsSync as existsSync31, mkdirSync as mkdirSync19, mkdtempSync as mkdtempSync7, readFileSync as readFileSync36, readdirSync as readdirSync14, realpathSync as realpathSync18, rmSync as rmSync13, writeFileSync as writeFileSync21 } from "fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync19, mkdtempSync as mkdtempSync7, readFileSync as readFileSync37, readdirSync as readdirSync15, realpathSync as realpathSync18, rmSync as rmSync13, writeFileSync as writeFileSync21 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
-import { dirname as dirname19, isAbsolute as isAbsolute7, join as join51, relative as relative6 } from "path";
+import { dirname as dirname19, isAbsolute as isAbsolute7, join as join52, relative as relative6 } from "path";
 function pytestCollectionIsRed(output, repoDir) {
   if (/ModuleNotFoundError/.test(output))
     return false;
   const real2 = (p) => {
     try {
-      return realpathSync18(isAbsolute7(p) ? p : join51(repoDir, p));
+      return realpathSync18(isAbsolute7(p) ? p : join52(repoDir, p));
     } catch {
       return null;
     }
@@ -12216,7 +12322,7 @@ function pytestCollectionIsRed(output, repoDir) {
 }
 function moduleUnderRepo(repoDir, name) {
   const rel = name.replace(/\./g, "/");
-  return existsSync31(join51(repoDir, `${rel}.py`)) || existsSync31(join51(repoDir, rel, "__init__.py"));
+  return existsSync31(join52(repoDir, `${rel}.py`)) || existsSync31(join52(repoDir, rel, "__init__.py"));
 }
 function pytestExit1IsRed(output) {
   if (/^!+ _pytest\.outcomes\.Exit\b/m.test(output))
@@ -12314,10 +12420,10 @@ ${acceptance.map((a) => `Acceptance: ${a}`).join(`
 function loadTaskText(ctx, fromPrior) {
   if (fromPrior)
     return fromPrior;
-  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join51(ctx.runDir, "issue.json");
+  const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join52(ctx.runDir, "issue.json");
   if (existsSync31(issueJsonPath)) {
     try {
-      const issue = JSON.parse(readFileSync36(issueJsonPath, "utf8"));
+      const issue = JSON.parse(readFileSync37(issueJsonPath, "utf8"));
       const text2 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
 
 `);
@@ -12329,7 +12435,7 @@ function loadTaskText(ctx, fromPrior) {
 }
 function wallTargetDir(repoDir, existingTests) {
   const first = existingTests[0];
-  return first ? join51(repoDir, dirname19(first.path)) : join51(repoDir, "tests");
+  return first ? join52(repoDir, dirname19(first.path)) : join52(repoDir, "tests");
 }
 function guessRunner(fileName, runners) {
   if (fileName.endsWith(".py"))
@@ -12360,11 +12466,11 @@ async function wallAuthor(ctx, signal) {
   const tree = prior.intake?.tree;
   const repomapText = repoMapText(ctx.repoDir, tree, repomapRef, WALL_MAP_MAX_LINES);
   const targetDir = wallTargetDir(ctx.repoDir, existingTests), pkg = loadProjectApi(ctx.repoDir)?.packageOf(`${relative6(ctx.repoDir, targetDir)}/x`);
-  const conv2 = readPackageConventions(join51(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
-  const cwd = mkdtempSync7(join51(tmpdir9(), "loki-e15-wall-"));
+  const conv2 = readPackageConventions(join52(ctx.repoDir, pkg?.root ?? "."), pkg?.runner ?? null);
+  const cwd = mkdtempSync7(join52(tmpdir9(), "loki-e15-wall-"));
   const wm = wallManifestFor(ctx.repoDir, tree, task);
   for (const [n2, c] of [["task.md", task], ["repomap.txt", repomapText], ...wm ? [["wall_manifest.txt", wm.text]] : []])
-    writeFileSync21(join51(cwd, n2), c, "utf8");
+    writeFileSync21(join52(cwd, n2), c, "utf8");
   const session = await ctx.sessions.run({
     stage: "wall",
     brief: buildWallBrief(task, repomapText, runners, !!wm, conventionsBrief(conv2), unitSpec()?.acceptance ?? []),
@@ -12379,15 +12485,15 @@ async function wallAuthor(ctx, signal) {
     rmSync13(cwd, { recursive: true, force: true });
     return done({ status: "failed", data: {}, reason: "wall session aborted, killed, or timed out", killed: true });
   }
-  const generated = readdirSync14(cwd).filter((f) => f.startsWith(WALL_PREFIX));
-  const sealedDir = join51(ctx.runDir, "wall");
+  const generated = readdirSync15(cwd).filter((f) => f.startsWith(WALL_PREFIX));
+  const sealedDir = join52(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync19(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync36(join51(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
-    writeFileSync21(join51(sealedDir, name), content, "utf8");
+    const content = readFileSync37(join52(cwd, name), "utf8"), bad = conventionViolation(conv2, name, content);
+    writeFileSync21(join52(sealedDir, name), content, "utf8");
     if (bad)
       discarded.push({ file: name, reason: `${bad}; wall test did not compile under the package config` });
     else
@@ -12407,7 +12513,7 @@ function installWall(ctx, a, baseDir, opts = {}) {
     const content = contents.get(name);
     if (content === undefined)
       continue;
-    const dest = join51(targetDir, name), runner = guessRunner(name, runners);
+    const dest = join52(targetDir, name), runner = guessRunner(name, runners);
     writeFileSync21(dest, content, "utf8");
     sealedFiles.push({ path: dest, sha256: sha2562(content) });
     readOnlyFiles.push({ path: dest, content });
@@ -12417,7 +12523,7 @@ function installWall(ctx, a, baseDir, opts = {}) {
   ctx.emit("wall.sealed", "wall", { files: sealedFiles, ...a.manifestSha256 ? { manifest_sha256: a.manifestSha256 } : {} });
   const baseRunner = opts.baseRunner ?? new RealBaseTestRunner, baseRun = { pass: 0, fail: 0, not_run: discarded.length }, notRunFiles = [];
   for (const t of wallTests) {
-    const r = baseRunner.run(baseDir, [t]), abs = join51(ctx.repoDir, t.path);
+    const r = baseRunner.run(baseDir, [t]), abs = join52(ctx.repoDir, t.path);
     baseRun.pass += r.pass;
     baseRun.fail += r.fail;
     baseRun.not_run += r.not_run ?? 0;
@@ -12469,15 +12575,15 @@ var init_wall = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync5, closeSync as closeSync8, lstatSync as lstatSync10, mkdirSync as mkdirSync20, openSync as openSync8, readFileSync as readFileSync37, realpathSync as realpathSync19, rmdirSync, unlinkSync as unlinkSync5, writeFileSync as writeFileSync22 } from "fs";
-import { dirname as dirname20, join as join52, relative as relative7, sep as sep11 } from "path";
+import { chmodSync as chmodSync5, closeSync as closeSync8, lstatSync as lstatSync10, mkdirSync as mkdirSync20, openSync as openSync8, readFileSync as readFileSync38, realpathSync as realpathSync19, rmdirSync, unlinkSync as unlinkSync5, writeFileSync as writeFileSync22 } from "fs";
+import { dirname as dirname20, join as join53, relative as relative7, sep as sep11 } from "path";
 function safeRestore(repoDir, f, want, mode) {
-  const root = realpathSync19(repoDir), fp = join52(root, f), rel = relative7(root, dirname20(fp));
+  const root = realpathSync19(repoDir), fp = join53(root, f), rel = relative7(root, dirname20(fp));
   if (rel.startsWith(".."))
     throw new Error("outside repo");
   let cur = root;
   for (const part of rel === "" ? [] : rel.split(sep11)) {
-    cur = join52(cur, part);
+    cur = join53(cur, part);
     let st2;
     try {
       st2 = lstatSync10(cur);
@@ -12494,7 +12600,7 @@ function safeRestore(repoDir, f, want, mode) {
   } catch {
     st = null;
   }
-  if (st?.isFile() && readFileSync37(fp).equals(want)) {
+  if (st?.isFile() && readFileSync38(fp).equals(want)) {
     chmodSync5(fp, mode);
     return;
   }
@@ -12532,7 +12638,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
     return { status: "failed", data: {}, reason: "already-satisfied discard failed" };
   const notProven = [];
   for (const [f, v] of Object.entries(o.intake?.preexisting_untracked_blobs ?? {})) {
-    const fp = join52(repoDir, f);
+    const fp = join53(repoDir, f);
     try {
       if (v.startsWith("!")) {
         const st = lstatSync10(fp);
@@ -12551,7 +12657,7 @@ async function discardIfSatisfied(git3, base, o, staged, keep, repoDir) {
       try {
         let m = 420;
         try {
-          const l = lstatSync10(join52(repoDir, f));
+          const l = lstatSync10(join53(repoDir, f));
           if (l.isFile())
             m = l.mode & 511;
         } catch {}
@@ -12627,9 +12733,9 @@ var init_scope2 = __esm(() => {
 // ../../loki-ts/src/features/visual_evidence.ts
 import { spawn as spawn7 } from "child_process";
 import { createHash as createHash12, randomBytes as randomBytes4 } from "crypto";
-import { existsSync as existsSync32, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readdirSync as readdirSync15, readFileSync as readFileSync38, writeFileSync as writeFileSync23 } from "fs";
+import { existsSync as existsSync32, lstatSync as lstatSync11, mkdirSync as mkdirSync21, readdirSync as readdirSync16, readFileSync as readFileSync39, writeFileSync as writeFileSync23 } from "fs";
 import { createServer } from "net";
-import { dirname as dirname23, isAbsolute as isAbsolute8, join as join53, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
+import { dirname as dirname23, isAbsolute as isAbsolute8, join as join54, normalize as normalize2, relative as relative8, sep as sep12 } from "path";
 function routeFor(file) {
   let r = file.replace(/^(?:.*?\/)?(?:app|pages|src|public)\//, "").replace(/^(?:routes|pages)\//, "");
   r = r.replace(/\.(?:html|jsx|tsx|vue|svelte)$/, "").replace(/\/?(?:page|index|\+page)$/, "");
@@ -12639,7 +12745,7 @@ function hashScreens(runDir, rels) {
   const out2 = [];
   for (const rel of rels) {
     try {
-      out2.push({ path: rel, sha256: sha256File(join53(runDir, rel)) });
+      out2.push({ path: rel, sha256: sha256File(join54(runDir, rel)) });
     } catch {}
   }
   return out2;
@@ -12652,10 +12758,10 @@ function checkScreens(runDir, screens) {
       return "evidence_screens entry is malformed";
     if (isAbsolute8(s.path) || normalize2(s.path).startsWith(".."))
       return `evidence screenshot path escapes the evidence dir: ${s.path}`;
-    const file = join53(runDir, s.path);
+    const file = join54(runDir, s.path);
     let cur = runDir;
     for (const seg of normalize2(s.path).split(sep12)) {
-      cur = join53(cur, seg);
+      cur = join54(cur, seg);
       if (isSymlink(cur))
         return `evidence screenshot path is a symlink: ${s.path}`;
     }
@@ -12702,11 +12808,11 @@ async function waitUp(url, ms, signal) {
 }
 function openapiPaths(repoDir) {
   for (const f of ["openapi.json", "openapi.yaml", "openapi.yml", "swagger.json"]) {
-    const p = join53(repoDir, f);
+    const p = join54(repoDir, f);
     if (!existsSync32(p))
       continue;
     try {
-      const txt = readFileSync38(p, "utf8");
+      const txt = readFileSync39(p, "utf8");
       const paths = f.endsWith(".json") ? Object.keys(JSON.parse(txt).paths ?? {}) : [...txt.matchAll(/^ {2}(\/[^\s:]*):\s*$/gm)].map((m) => m[1]);
       return paths.filter((x) => !x.includes("{")).slice(0, 10);
     } catch {
@@ -12720,24 +12826,24 @@ async function recordE2eMedia(repoDir, runDir, relDir, base, routes, ms, signal)
   if (!pw || !pkg)
     return { rels: [], skipped: "playwright e2e video and trace skipped: @playwright/test is not installed in the repo" };
   try {
-    const dir = join53(runDir, relDir, "e2e");
+    const dir = join54(runDir, relDir, "e2e");
     mkdirSync21(dir, { recursive: true });
-    writeFileSync23(join53(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
-    writeFileSync23(join53(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
+    writeFileSync23(join54(dir, "walk.spec.cjs"), e2eSpecSource(pkg, base, routes));
+    writeFileSync23(join54(dir, "playwright.config.cjs"), `module.exports = { testDir: ".", testMatch: "walk.spec.cjs", outputDir: "./out", reporter: "null", use: { video: "on", trace: "on" } };
 `);
-    if (!await shoot(pw, ["test", "--config", join53(dir, "playwright.config.cjs")], repoDir, ms, signal))
+    if (!await shoot(pw, ["test", "--config", join54(dir, "playwright.config.cjs")], repoDir, ms, signal))
       return { rels: [], skipped: "playwright e2e video and trace skipped: the run failed or timed out" };
     const rels = [];
     const walk = (d) => {
-      for (const e of readdirSync15(d, { withFileTypes: true })) {
-        const full = join53(d, e.name);
+      for (const e of readdirSync16(d, { withFileTypes: true })) {
+        const full = join54(d, e.name);
         if (e.isDirectory())
           walk(full);
         else if (e.isFile() && /\.(webm|zip)$/.test(e.name))
-          rels.push(join53(relDir, "e2e", relative8(dir, full)));
+          rels.push(join54(relDir, "e2e", relative8(dir, full)));
       }
     };
-    walk(join53(dir, "out"));
+    walk(join54(dir, "out"));
     return rels.length > 0 ? { rels, skipped: null } : { rels, skipped: "playwright e2e video and trace skipped: no video or trace was produced" };
   } catch (e) {
     return { rels: [], skipped: `playwright e2e video and trace skipped: ${String(e?.message ?? e).slice(0, 120)}` };
@@ -12797,6 +12903,16 @@ async function stopServer(c, graceMs, signal) {
   for (let i = 0;i < 10 && groupAlive(pid); i++)
     await new Promise((r) => setTimeout(r, 50));
 }
+function noRootReason(subs, lacking) {
+  const list = (xs) => xs.map((d) => `${d}/`).join(" or ");
+  if (subs.length === 0)
+    return "no package.json";
+  if (lacking.length === subs.length)
+    return `no dev, preview or start script in ${list(lacking)} (no root package.json)`;
+  if (lacking.length === 0)
+    return `no root package.json (${list(subs)} have a dev, preview or start script but no UI boot was resolved)`;
+  return `no root package.json; no dev, preview or start script in ${list(lacking)} (${list(subs.filter((d) => !lacking.includes(d)))} has one)`;
+}
 async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
   const skip = (why) => ({ screens: [], http: false, skipped: why });
   const signal = opts.signal;
@@ -12806,13 +12922,22 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     if (!visualEvidenceEnabled(opts.env))
       return skip("LOKI_VISUAL_EVIDENCE is 0");
     const api = loadProjectApi(repoDir), boot = isMultiRoot(api) ? api.uiBoot() : null;
-    const appDir = boot ? join53(repoDir, boot.boot.cwd) : repoDir;
-    const pkgPath = join53(appDir, "package.json");
+    const appDir = boot ? join54(repoDir, boot.boot.cwd) : repoDir;
+    const pkgPath = join54(appDir, "package.json");
     let script = null;
     if (!boot) {
-      if (!existsSync32(pkgPath))
-        return skip("no package.json");
-      script = pickScript(JSON.parse(readFileSync38(pkgPath, "utf8")));
+      if (!existsSync32(pkgPath)) {
+        const subs = ["backend", "frontend"].filter((d) => existsSync32(join54(repoDir, d, "package.json")));
+        const has = (d) => {
+          try {
+            return pickScript(JSON.parse(readFileSync39(join54(repoDir, d, "package.json"), "utf8"))) !== null;
+          } catch {
+            return false;
+          }
+        };
+        return skip(noRootReason(subs, subs.filter((d) => !has(d))));
+      }
+      script = pickScript(JSON.parse(readFileSync39(pkgPath, "utf8")));
       if (!script)
         return skip("no dev, preview or start script");
     }
@@ -12839,20 +12964,20 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (!await waitUp(base, left(), signal))
       return skip(aborted() ? "aborted" : `${script} server did not answer within ${Math.round(budget / 1000)}s`);
-    const evRoot = join53(runDir, "evidence");
+    const evRoot = join54(runDir, "evidence");
     if (isSymlink(evRoot))
       return skip("evidence dir is a symlink");
     mkdirSync21(evRoot, { recursive: true });
     if (pages.length > 0) {
-      const rel0 = join53("evidence", randomBytes4(6).toString("hex"));
-      mkdirSync21(join53(runDir, rel0));
+      const rel0 = join54("evidence", randomBytes4(6).toString("hex"));
+      mkdirSync21(join54(runDir, rel0));
       const rels = [];
       for (const route of [...new Set(pages.map(routeFor))].slice(0, opts.maxRoutes ?? MAX_ROUTES)) {
         if (aborted() || left() <= 0)
           break;
-        const rel = join53(rel0, `${screenName(route)}.png`);
-        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join53(runDir, rel)], appDir, left(), signal);
-        if (ok && !aborted() && !isSymlink(join53(runDir, rel)) && existsSync32(join53(runDir, rel)))
+        const rel = join54(rel0, `${screenName(route)}.png`);
+        const ok = await shoot(pw, ["screenshot", `${base}${route}`, join54(runDir, rel)], appDir, left(), signal);
+        if (ok && !aborted() && !isSymlink(join54(runDir, rel)) && existsSync32(join54(runDir, rel)))
           rels.push(rel);
       }
       if (aborted())
@@ -12877,9 +13002,9 @@ async function captureVisualEvidence(repoDir, runDir, changed, opts = {}) {
     }
     if (aborted())
       return skip("aborted");
-    const hdir = join53(evRoot, randomBytes4(6).toString("hex"));
+    const hdir = join54(evRoot, randomBytes4(6).toString("hex"));
     mkdirSync21(hdir);
-    writeFileSync23(join53(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
+    writeFileSync23(join54(hdir, "http.json"), JSON.stringify(rows, null, 2) + `
 `);
     return { screens: [], http: true, skipped: null };
   } catch (e) {
@@ -12904,12 +13029,12 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
 function receiptScreensProblem(receiptPath, receipt) {
   return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname23(receiptPath), receipt["evidence_screens"]);
 }
-var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash12("sha256").update(readFileSync38(p)).digest("hex"), playwrightBin = (repoDir) => {
-  const bin = join53(repoDir, "node_modules", ".bin", "playwright");
+var visualEvidenceEnabled = (env = process.env) => env["LOKI_VISUAL_EVIDENCE"] !== "0", PAGE_RE, isPageFile = (p) => PAGE_RE.test(p), screenName = (route) => (route === "/" ? "index" : route.slice(1).replace(/[^A-Za-z0-9._-]+/g, "_")) || "index", sha256File = (p) => createHash12("sha256").update(readFileSync39(p)).digest("hex"), playwrightBin = (repoDir) => {
+  const bin = join54(repoDir, "node_modules", ".bin", "playwright");
   return existsSync32(bin) ? bin : null;
 }, playwrightTestPkg = (repoDir) => {
-  const d = join53(repoDir, "node_modules", "@playwright", "test");
-  return existsSync32(join53(d, "package.json")) ? d : null;
+  const d = join54(repoDir, "node_modules", "@playwright", "test");
+  return existsSync32(join54(d, "package.json")) ? d : null;
 }, e2eSpecSource = (pkgDir, base, routes) => `const { test } = require(${JSON.stringify(pkgDir)});
 test("loki e2e walkthrough", async ({ page }) => {
   for (const r of ${JSON.stringify(routes)}) { await page.goto(${JSON.stringify(base)} + r); await page.waitForLoadState("load"); }
@@ -12940,14 +13065,14 @@ var init_visual_evidence = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync33, readdirSync as readdirSync16, readFileSync as readFileSync39 } from "fs";
+import { existsSync as existsSync33, readdirSync as readdirSync17, readFileSync as readFileSync40 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join54 } from "path";
+import { join as join55 } from "path";
 function agentDirs(repoDir, env = process.env) {
-  return [env["LOKI_AGENTS_PROJECT_DIR"] || join54(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join54(env["XDG_CONFIG_HOME"] || join54(homedir9(), ".config"), "loki", "agents")];
+  return [env["LOKI_AGENTS_PROJECT_DIR"] || join55(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join55(env["XDG_CONFIG_HOME"] || join55(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
-  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync39(file, "utf8"));
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync40(file, "utf8"));
   if (!m)
     return null;
   const body = m[2].trim();
@@ -12965,14 +13090,14 @@ function loadRoleAgent(repoDir, role, env = process.env) {
       continue;
     let names;
     try {
-      names = readdirSync16(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
+      names = readdirSync17(d).filter((n2) => n2.endsWith(".md") && !n2.startsWith(".")).sort();
     } catch {
       continue;
     }
     const ordered = [...names.filter((n2) => n2 === `${role}.md`), ...names.filter((n2) => n2 !== `${role}.md`)];
     for (const n2 of ordered) {
       try {
-        const a = parseAgent(join54(d, n2), n2.slice(0, -3));
+        const a = parseAgent(join55(d, n2), n2.slice(0, -3));
         if (a && a.role === role)
           return a;
       } catch {}
@@ -12989,8 +13114,8 @@ var init_role_agents = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/xreview.ts
-import { existsSync as existsSync34, readFileSync as readFileSync40 } from "fs";
-import { join as join55 } from "path";
+import { existsSync as existsSync34, readFileSync as readFileSync41 } from "fs";
+import { join as join56 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
   return RANK3[ceiling] < RANK3[verdict] ? ceiling : verdict;
@@ -13003,11 +13128,11 @@ function explicitReview(repoDir, env) {
   if (flag && isOff(ev))
     return "off";
   for (const f of ["loki.yaml", "loki.yml"]) {
-    const p = join55(repoDir, f);
+    const p = join56(repoDir, f);
     if (!existsSync34(p))
       continue;
     try {
-      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync40(p, "utf8"));
+      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync41(p, "utf8"));
       const v = asProvider(m?.[1]);
       if (v)
         return v;
@@ -13217,16 +13342,41 @@ function recordRun(env, repoDir, model, verdict, usd, unmetered, wallS, cacheRoo
     return false;
   return appendRunOutcome(repoKey(readOriginUrl(repoDir), repoDir), { shape, executor: /haiku/i.test(model) ? "haiku" : "sonnet", verdict: "pass", owner: null, escalated: false, usd, wallS, wallKind: WALL_KIND }, cacheRoot);
 }
-var NOT_RECORDED = "NOT RECORDED", previewOn = (env) => env["LOKI_COST_PREVIEW"] !== "0";
+var MIN_RUNS = 3, NOT_RECORDED = "NOT RECORDED", previewOn = (env) => env["LOKI_COST_PREVIEW"] !== "0", ESTIMATE_HELP;
 var init_cost_preview = __esm(() => {
   init_cache();
+  init_session();
   init_history();
   init_engine_origin();
+  ESTIMATE_HELP = `loki estimate - Show what a run is likely to cost
+
+Usage: loki estimate [--model M] [--provider P] [--json]
+
+Prints the same estimate line "loki start" prints before a run: the dollar and time
+range of this repo's prior verified runs of the same project shape. With fewer than
+${MIN_RUNS} such runs it prints a rough per-model prior, or NOT AVAILABLE (reason).
+It never estimates from task text and never prints a number it did not measure.
+
+Options:
+  --model M      Model whose rough prior to use when there is no history (default: the start model)
+  --provider P   Provider whose default model is used (default: LOKI_PROVIDER or claude)
+  --json         Machine-readable output (the estimate result object)
+  --help, -h     Show this help
+
+Changed: --iterations is removed. The old iteration-based projection (tools/estimate-run.py)
+is replaced by this single estimator. LOKI_COST_PREVIEW=0 turns the estimate off.
+
+Examples:
+  loki estimate
+  loki estimate --json
+
+See also: loki cost --detail (what a run ALREADY spent)
+`;
 });
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync22, readFileSync as readFileSync41, rmSync as rmSync14, writeFileSync as writeFileSync24 } from "fs";
-import { dirname as dirname24, join as join56 } from "path";
+import { existsSync as existsSync35, lstatSync as lstatSync12, mkdirSync as mkdirSync22, readFileSync as readFileSync42, rmSync as rmSync14, writeFileSync as writeFileSync24 } from "fs";
+import { dirname as dirname24, join as join57 } from "path";
 import { createHash as createHash13 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
@@ -13258,7 +13408,7 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join56(repoDir, ".loki", "contract.json");
+  return join57(repoDir, ".loki", "contract.json");
 }
 function readContract(repoDir) {
   const p = contractPath(repoDir);
@@ -13274,7 +13424,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync41(p);
+    raw2 = readFileSync42(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -13343,16 +13493,16 @@ var init_contract = __esm(() => {
   init_safe_git();
   STOP2 = new Set(["the", "and", "for", "with", "that", "this", "must", "should", "shall", "when", "then", "are", "was", "all", "any", "can", "not", "has", "have", "from", "into", "each", "user", "users"]);
   MAX_CONTRACT_BYTES = 1024 * 1024;
-  REQ_MAP_REL = join56(".loki", "state", "requirements-map.json");
+  REQ_MAP_REL = join57(".loki", "state", "requirements-map.json");
   REQ_STOP = new Set(["with", "that", "this", "from", "have", "will", "should", "must", "when", "then", "into", "each", "every", "user", "users", "page", "able", "allow", "support", "ensure", "using", "their", "there", "which", "shall"]);
 });
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash14 } from "crypto";
-import { existsSync as existsSync36, mkdirSync as mkdirSync23, readdirSync as readdirSync17, readFileSync as readFileSync42, renameSync as renameSync8, statSync as statSync17, writeFileSync as writeFileSync25 } from "fs";
-import { basename as basename19, dirname as dirname25, join as join57 } from "path";
+import { existsSync as existsSync36, mkdirSync as mkdirSync23, readdirSync as readdirSync18, readFileSync as readFileSync43, renameSync as renameSync9, statSync as statSync17, writeFileSync as writeFileSync25 } from "fs";
+import { basename as basename19, dirname as dirname25, join as join58 } from "path";
 function sealGroup(runDir, rh) {
-  const manifestPath = join57(runDir, "group", "manifest.json");
+  const manifestPath = join58(runDir, "group", "manifest.json");
   if (!existsSync36(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
@@ -13377,10 +13527,10 @@ function sealGroup(runDir, rh) {
       return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    const dir = join58(unitsDir(runDir), id), rp = join58(dir, "receipt.json"), ep = join58(dir, "events.jsonl");
     let bytes;
     try {
-      bytes = readFileSync42(rp);
+      bytes = readFileSync43(rp);
     } catch {
       return fail(`unit ${id} sub-receipt missing`);
     }
@@ -13397,7 +13547,7 @@ function sealGroup(runDir, rh) {
       unit_id: id,
       sub_receipt_sha256: sha2(bytes),
       receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync36(ep) ? sha2(readFileSync42(ep)) : null,
+      events_file_sha256: existsSync36(ep) ? sha2(readFileSync43(ep)) : null,
       verdict,
       goal: text2(u["goal"], 200),
       files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
@@ -13422,7 +13572,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync36(join57(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+    return existsSync36(join58(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
   if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
@@ -13434,20 +13584,20 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join57(unitsDir(runDir), id), rp = join57(dir, "receipt.json"), ep = join57(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join58(unitsDir(runDir), id), rp = join58(dir, "receipt.json"), ep = join58(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
     try {
       if (!statSync17(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync42(rp);
+      bytes = readFileSync43(rp);
     } catch {
       return bad(`unit ${id} sub-receipt missing`);
     }
     if (sha2(bytes) !== e["sub_receipt_sha256"])
       return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync36(ep) ? sha2(readFileSync42(ep)) : null;
+    const evSha = existsSync36(ep) ? sha2(readFileSync43(ep)) : null;
     if (evSha !== (e["events_file_sha256"] ?? null))
       return bad(`unit ${id} events.jsonl does not match its recorded hash`);
     const sub = readJson5(rp);
@@ -13467,8 +13617,8 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
 }
 function compositeVerdict(childVerdicts) {
   const base = childVerdicts.includes("SPEC_CONFLICT") ? "SPEC_CONFLICT" : childVerdicts.length > 0 && childVerdicts.every((v) => v === "ALREADY_SATISFIED") ? "ALREADY_SATISFIED" : "VERIFIED";
-  const failed = childVerdicts.filter((v) => v === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v)).length;
-  return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed, allUnitsPass: childVerdicts.every((v) => PASSING.has(v)) });
+  const failed2 = childVerdicts.filter((v) => v === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v)).length;
+  return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed2, allUnitsPass: childVerdicts.every((v) => PASSING.has(v)) });
 }
 async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const runDir = dirname25(receiptPath);
@@ -13479,13 +13629,13 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("body malformed");
   let ibytes;
   try {
-    ibytes = readFileSync42(join57(runDir, "integration.json"));
+    ibytes = readFileSync43(join58(runDir, "integration.json"));
   } catch {
     return bad("integration.json missing");
   }
   if (sha2(ibytes) !== receipt["integration_sha256"])
     return bad("integration.json does not match its recorded hash");
-  const integ = readJson5(join57(runDir, "integration.json"));
+  const integ = readJson5(join58(runDir, "integration.json"));
   if (!isObj10(integ) || !isObj10(integ["outcomes"]))
     return bad("integration.json has no outcomes");
   const heads = isObj10(integ["heads"]) ? integ["heads"] : {}, outcomes = integ["outcomes"];
@@ -13503,10 +13653,10 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
       return bad(`child ${text2(repo, 80) || "?"} has an invalid receipt path`);
     if (outcomes[repo] !== "ok")
       return bad(`child ${text2(repo, 80)} did not finish ok in integration.json`);
-    const rp = join57(runDir, rel);
+    const rp = join58(runDir, rel);
     let bytes;
     try {
-      bytes = readFileSync42(rp);
+      bytes = readFileSync43(rp);
     } catch {
       return bad(`child ${repo} receipt missing`);
     }
@@ -13541,15 +13691,15 @@ function compositeHash(r) {
   const { composite_sha256: _c, verification: _v, ...body } = r;
   return sha2(canonicalJson(body));
 }
-var ID_RE, PASSING, sha2 = (b) => createHash14("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join57(runDir, "group", "units"), readJson5 = (p) => {
+var ID_RE, PASSING, sha2 = (b) => createHash14("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join58(runDir, "group", "units"), readJson5 = (p) => {
   try {
-    return JSON.parse(readFileSync42(p, "utf8"));
+    return JSON.parse(readFileSync43(p, "utf8"));
   } catch {
     return;
   }
 }, dirNames = (d) => {
   try {
-    return readdirSync17(d).filter((n2) => !n2.startsWith(".")).sort();
+    return readdirSync18(d).filter((n2) => !n2.startsWith(".")).sort();
   } catch {
     return null;
   }
@@ -13561,8 +13711,8 @@ var init_seal_group = __esm(() => {
 });
 
 // ../../loki-ts/src/supply/supply_guard.ts
-import { existsSync as existsSync37, readFileSync as readFileSync43, statSync as statSync18 } from "fs";
-import { basename as basename20, join as join58 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync44, statSync as statSync18 } from "fs";
+import { basename as basename20, join as join59 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
 }
@@ -13577,13 +13727,13 @@ function isManifestPath(path) {
   return MANIFESTS.test(basename20(path));
 }
 function readDeclared(repoDir) {
-  const p = join58(repoDir, ".loki", DECLARED_FILE);
+  const p = join59(repoDir, ".loki", DECLARED_FILE);
   if (!existsSync37(p))
     return { deps: [], problem: null };
   try {
     if (statSync18(p).size > MAX_FILE_BYTES)
       return { deps: [], problem: "declaration file too large" };
-    const j = JSON.parse(readFileSync43(p, "utf8"));
+    const j = JSON.parse(readFileSync44(p, "utf8"));
     if (!Array.isArray(j))
       return { deps: [], problem: "declaration is not a JSON array" };
     const deps = [];
@@ -13603,11 +13753,11 @@ function readDeclared(repoDir) {
   }
 }
 function readAllowlist(repoDir) {
-  const p = join58(repoDir, ".loki", "supply-allowlist");
+  const p = join59(repoDir, ".loki", "supply-allowlist");
   if (!existsSync37(p))
     return new Set;
   try {
-    return new Set(readFileSync43(p, "utf8").split(`
+    return new Set(readFileSync44(p, "utf8").split(`
 `).map((l) => l.replace(/#.*$/, "").trim()).filter(Boolean));
   } catch {
     return new Set;
@@ -13648,7 +13798,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "npm") {
     if (privateUrlList([env["npm_config_registry"] ?? "", env["NPM_CONFIG_REGISTRY"] ?? ""]))
       return true;
-    return files(join58(repoDir, ".npmrc"), home ? join58(home, ".npmrc") : "").some((t) => t.split(`
+    return files(join59(repoDir, ".npmrc"), home ? join59(home, ".npmrc") : "").some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:(@[^:\s]+):)?registry\s*=\s*(\S+)/.exec(l);
       return !!m && privateUrl(m[2]) && (m[1] === undefined || name.startsWith(`${m[1]}/`));
@@ -13657,7 +13807,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "pypi") {
     if (privateUrlList([env["PIP_INDEX_URL"] ?? "", env["PIP_EXTRA_INDEX_URL"] ?? ""]))
       return true;
-    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join58(home, ".config", "pip", "pip.conf") : "", home ? join58(home, ".pip", "pip.conf") : "", join58(repoDir, "pip.conf")];
+    const cfg = [env["PIP_CONFIG_FILE"] ?? "", home ? join59(home, ".config", "pip", "pip.conf") : "", home ? join59(home, ".pip", "pip.conf") : "", join59(repoDir, "pip.conf")];
     return files(...cfg).some((t) => t.split(`
 `).some((l) => {
       const m = /^\s*(?:extra-)?index-url\s*[=:]\s*(.+)$/.exec(l);
@@ -13667,7 +13817,7 @@ function userConfigPrivate(eco, repoDir, env, goEnv = {}, name = "") {
   if (eco === "cargo") {
     if (Object.keys(env).some((k) => /^CARGO_REGISTRIES_.+_INDEX$/.test(k) || /^CARGO_SOURCE_/.test(k)))
       return true;
-    return files(join58(repoDir, ".cargo", "config.toml"), join58(repoDir, ".cargo", "config"), home ? join58(home, ".cargo", "config.toml") : "", home ? join58(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
+    return files(join59(repoDir, ".cargo", "config.toml"), join59(repoDir, ".cargo", "config"), home ? join59(home, ".cargo", "config.toml") : "", home ? join59(home, ".cargo", "config") : "").some((t) => /^\s*\[(registries\.|source\.)/m.test(t) || /replace-with\s*=/.test(t));
   }
   if (eco === "go") {
     const gp = goEnv["GOPROXY"] ?? env["GOPROXY"] ?? "";
@@ -13790,7 +13940,7 @@ var MIN_AGE_DAYS = 7, DECLARED_FILE = "supply-declared.json", MAX_CHECKED = 50,
   }
 }, PUBLIC_HOSTS, hostOf = (u) => u.trim().toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "").replace(/^www\./, "").split(/[/?#\s]/)[0].replace(/^[^@]*@/, "").replace(/:\d+$/, ""), privateUrl = (u) => /[a-z0-9]/i.test(u) && !PUBLIC_HOSTS.has(hostOf(u)), readSmall = (p) => {
   try {
-    return statSync18(p).size <= MAX_FILE_BYTES ? readFileSync43(p, "utf8") : "";
+    return statSync18(p).size <= MAX_FILE_BYTES ? readFileSync44(p, "utf8") : "";
   } catch {
     return "";
   }
@@ -13806,8 +13956,8 @@ var init_supply_guard = __esm(() => {
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash15 } from "crypto";
-import { existsSync as existsSync38, readdirSync as readdirSync18, mkdirSync as mkdirSync24, readFileSync as readFileSync44, writeFileSync as writeFileSync26 } from "fs";
-import { basename as basename21, isAbsolute as isAbsolute9, join as join59, relative as relative9 } from "path";
+import { existsSync as existsSync38, readdirSync as readdirSync19, mkdirSync as mkdirSync24, readFileSync as readFileSync45, writeFileSync as writeFileSync26 } from "fs";
+import { basename as basename21, isAbsolute as isAbsolute9, join as join60, relative as relative9 } from "path";
 function sanitizeReason(s) {
   const collapsed = s.replace(/[\x00-\x1f\x7f]+/g, " ").trim();
   const capped = collapsed.length > 500 ? `${collapsed.slice(0, 500)}...` : collapsed;
@@ -13882,7 +14032,7 @@ function renderReceiptMd(r) {
 `);
 }
 var DEEP_NOT_PROVEN, SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash15("sha256").update(s).digest("hex"), str3 = (v) => typeof v === "string" && v !== "" ? v : null, strs2 = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string" && x !== "") : [], receiptRel = (ctx) => {
-  const r = relative9(ctx.repoDir, join59(ctx.runDir, "receipt.json"));
+  const r = relative9(ctx.repoDir, join60(ctx.runDir, "receipt.json"));
   return r.startsWith("..") || isAbsolute9(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, sealStage;
 var init_seal = __esm(() => {
@@ -13985,7 +14135,7 @@ var init_seal = __esm(() => {
       if (wallNotRun > 0) {
         try {
           const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename21(String(f.path))));
-          for (const n2 of readdirSync18(join59(ctx.runDir, "wall")).sort())
+          for (const n2 of readdirSync19(join60(ctx.runDir, "wall")).sort())
             if (!kept.has(n2))
               notProven.add(`wall test discarded: ${n2} (not_run)`);
         } catch {}
@@ -14046,19 +14196,19 @@ var init_seal = __esm(() => {
       for (const [s, d] of Object.entries(o))
         if (typeof d?.duration_s === "number")
           stages[s] = d.duration_s;
-      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join59(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
+      const T = hooks.time, time = T ? T.build(ctx, stages, T.firstEventMs(join60(ctx.runDir, "events.jsonl"))) : { wall_s: Object.values(stages).reduce((a, b) => a + (b ?? 0), 0), stages }, totalS = T?.reconciled(time) ?? null;
       const iterIds = Object.values(o).flatMap((d) => [...strs2(d?.iteration_ids), ...strs2([d?.iteration_id])]);
       if (iterIds.length === 0)
         notProven.add("cost not measured (no iteration ids recorded)");
       const cost = ctx.cost.read(ctx.repoDir, iterIds);
       if (cost.unmetered)
         notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-      const eventsPath = join59(ctx.runDir, "events.jsonl");
+      const eventsPath = join60(ctx.runDir, "events.jsonl");
       const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
       const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
       if (wallFiles.length > 0 && wallPassed === null)
         notProven.add("wall result not recorded by verify");
-      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join59(ctx.repoDir, ".loki"), iterIds).router : undefined), ctx.model);
+      const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route ?? o.plan?.route_record ?? (routerEnabled(process.env) ? loadRouteRecord(ctx.runDir) : undefined), cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join60(ctx.repoDir, ".loki"), iterIds).router : undefined), ctx.model);
       if (routeBlock)
         for (const l of routeNotProven(routeBlock))
           notProven.add(l);
@@ -14100,7 +14250,7 @@ var init_seal = __esm(() => {
         provider: ctx.provider,
         model: ctx.model,
         resumed: o.intake?.resumed === true,
-        events_sha256: sha2562(existsSync38(eventsPath) ? readFileSync44(eventsPath) : ""),
+        events_sha256: sha2562(existsSync38(eventsPath) ? readFileSync45(eventsPath) : ""),
         ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
         log_seal: true,
         ...receiptBlock(process.env, cost.usd, cost.unmetered === true, totalS),
@@ -14121,10 +14271,10 @@ var init_seal = __esm(() => {
       }
       const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
       mkdirSync24(ctx.runDir, { recursive: true });
-      const path = join59(ctx.runDir, "receipt.json");
+      const path = join60(ctx.runDir, "receipt.json");
       writeFileSync26(path, JSON.stringify(receipt, null, 2) + `
 `);
-      writeFileSync26(join59(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+      writeFileSync26(join60(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
       recordRun(process.env, ctx.repoDir, ctx.model, verdict, cost.usd, cost.unmetered === true, totalS);
       const signed = sig.jwt !== null;
       const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...mp ? { mutation_line: mp.line } : {}, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} };
@@ -14143,8 +14293,8 @@ var init_seal = __esm(() => {
 });
 
 // ../../loki-ts/src/features/receipt_dsse.ts
-import { createPublicKey as createPublicKey3, sign as sign2, verify as verify2 } from "crypto";
-import { readFileSync as readFileSync45 } from "fs";
+import { createPublicKey as createPublicKey3, sign as sign2, verify as verify3 } from "crypto";
+import { readFileSync as readFileSync46 } from "fs";
 function pae(payloadType, body) {
   const t = Buffer.from(payloadType, "utf8");
   return Buffer.concat([Buffer.from(`DSSEv1 ${t.length} `), t, Buffer.from(` ${body.length} `), body]);
@@ -14163,7 +14313,7 @@ function verifyEnvelope(env, pubFor) {
       continue;
     }
     known++;
-    if (verify2(null, pae(env.payloadType, body), pub, Buffer.from(s.sig, "base64"))) {
+    if (verify3(null, pae(env.payloadType, body), pub, Buffer.from(s.sig, "base64"))) {
       kid = s.keyid;
       break;
     }
@@ -14221,7 +14371,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync45(receiptPath, "utf8")), runId);
+    return envelopeRunIdProblem(JSON.parse(readFileSync46(receiptPath, "utf8")), runId);
   } catch {
     return null;
   }
@@ -14235,16 +14385,16 @@ var init_keys_cmd = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync39, readFileSync as readFileSync46, renameSync as renameSync9, statSync as statSync20, writeFileSync as writeFileSync27 } from "fs";
-import { basename as basename22, dirname as dirname27, join as join60 } from "path";
-import { createHash as createHash16, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
+import { existsSync as existsSync39, readFileSync as readFileSync47, renameSync as renameSync10, statSync as statSync20, writeFileSync as writeFileSync27 } from "fs";
+import { basename as basename22, dirname as dirname27, join as join61 } from "path";
+import { createHash as createHash16, createPublicKey as createPublicKey4, verify as verify4 } from "crypto";
 function pubFor(kid, given) {
   if (given)
     return kidOf2(given) === kid ? given : undefined;
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync46(f))];
+      return [createPublicKey4(readFileSync47(f))];
     } catch {
       return [];
     }
@@ -14268,7 +14418,7 @@ function checkAttestation(jwt, expectedHash, given) {
   const pub = pubFor(header.kid, given);
   if (!pub)
     return { status: "unchecked", reason: `no key for kid ${String(header.kid)} on this machine (set LOKI_RECEIPT_SIGNING_KEY_FILE or LOKI_RECEIPT_RETIRED_PUBKEYS)` };
-  if (!verify3(null, Buffer.from(`${h}.${p}`), pub, Buffer.from(s, "base64url")))
+  if (!verify4(null, Buffer.from(`${h}.${p}`), pub, Buffer.from(s, "base64url")))
     return bad("signature does not verify");
   return payload?.receipt_sha256 === expectedHash ? { status: "verified", reason: null } : bad("attestation binds a different receipt hash");
 }
@@ -14276,17 +14426,17 @@ function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
   if (typeof bound !== "string" || bound === createHash16("sha256").digest("hex"))
     return null;
-  const path = join60(dirname27(receiptPath), "events.jsonl");
+  const path = join61(dirname27(receiptPath), "events.jsonl");
   if (!existsSync39(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync46(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
+  const raw2 = readFileSync47(path, "utf8"), events2 = readEvents(path), lines2 = raw2.split(`
 `).filter((l) => l.trim() !== "");
-  if (events2.length !== lines.length || events2.some((e, i) => e.seq !== i))
+  if (events2.length !== lines2.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
   if (events2.some((e) => e.type === "tamper.detected"))
     return "the supervisor detected events.jsonl being modified during the run";
   const h = createHash16("sha256");
-  for (const l of lines) {
+  for (const l of lines2) {
     if (h.copy().digest("hex") === bound)
       return null;
     h.update(l + `
@@ -14295,7 +14445,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join60(dirname27(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join61(dirname27(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -14303,12 +14453,12 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines = readFileSync46(path, "utf8").split(`
-`).filter((l) => l.trim() !== ""), sha3 = createHash16("sha256").update(lines.slice(0, done + 1).join(`
+  const lines2 = readFileSync47(path, "utf8").split(`
+`).filter((l) => l.trim() !== ""), sha3 = createHash16("sha256").update(lines2.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
   const pub = d["kid"] === kid ? pubFor(kid, given) : undefined;
-  if (!pub || d["events_sha256"] !== sha3 || d["tampered"] !== false || typeof d["sig"] !== "string" || !verify3(null, Buffer.from(`${sha3}:false`), pub, Buffer.from(d["sig"], "base64url")))
+  if (!pub || d["events_sha256"] !== sha3 || d["tampered"] !== false || typeof d["sig"] !== "string" || !verify4(null, Buffer.from(`${sha3}:false`), pub, Buffer.from(d["sig"], "base64url")))
     return { verdict: "TAMPERED", reason: "log.sealed line is invalid, forged, or records a tamper" };
   return null;
 }
@@ -14317,7 +14467,7 @@ async function verifyReceipt(receiptPath, deps = {}) {
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync46(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync47(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -14399,8 +14549,8 @@ var init_verify_cmd = __esm(() => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync41, readFileSync as readFileSync49, statSync as statSync21 } from "fs";
-import { join as join63, resolve as resolve15, sep as sep14 } from "path";
+import { existsSync as existsSync41, readFileSync as readFileSync50, statSync as statSync21 } from "fs";
+import { join as join64, resolve as resolve15, sep as sep14 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -20172,6 +20322,9 @@ var SHA = /^[0-9a-f]{40,64}$/;
 var MAX_RECEIPT_BYTES = 1024 * 1024;
 var GIT_TIMEOUT_MS = 5000;
 var cache = new Map;
+var FAIL_TTL_MS = 60000;
+var failed = new Map;
+var diffStatGitRuns = { n: 0 };
 var gitEnv = () => ({ PATH: process.env.PATH ?? "", HOME: process.env.HOME ?? "", LC_ALL: "C", GIT_TERMINAL_PROMPT: "0", GIT_OPTIONAL_LOCKS: "0" });
 function parseNumstat(out) {
   const files = [];
@@ -20229,13 +20382,19 @@ function diffStatFor(db, source, run) {
   const base = typeof r?.base_sha === "string" ? r.base_sha : "", head = typeof r?.head_sha === "string" ? r.head_sha : "";
   if (!SHA.test(base) || !SHA.test(head))
     return null;
+  const failKey = `${key}:${base}:${head}`;
+  const failedAt = failed.get(failKey);
+  if (failedAt !== undefined && Date.now() - failedAt < FAIL_TTL_MS)
+    return null;
   try {
+    diffStatGitRuns.n++;
     const out = execFileSync("git", ["-C", repoReal, "-c", "core.quotePath=false", "diff", "--numstat", "--no-renames", `${base}..${head}`, "--"], { env: gitEnv(), timeout: GIT_TIMEOUT_MS, maxBuffer: 8 * 1024 * 1024, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     const files = parseNumstat(out);
     const stat = { base, head, files, added: files.reduce((n2, f) => n2 + (f.added ?? 0), 0), removed: files.reduce((n2, f) => n2 + (f.removed ?? 0), 0), source: "git" };
     cache.set(key, stat);
     return stat;
   } catch {
+    failed.set(failKey, Date.now());
     return null;
   }
 }
@@ -20604,10 +20763,10 @@ function stopReason(evs, verdict) {
     return { reason: /[.!?]$/.test(reason) ? reason : `${reason}.`, ownRules: OWN_RULES.test(text2) };
   }
   if (verdict === "FAILED") {
-    const failed = [...evs].reverse().find((e) => e.type === "stage.failed");
-    const why = typeof failed?.data?.reason === "string" ? oneLine(failed.data.reason, 240) : "";
-    if (failed && failed.stage)
-      return { reason: `The run failed in the ${failed.stage} stage${why ? `: ${why}` : ""}.`, ownRules: false };
+    const failed2 = [...evs].reverse().find((e) => e.type === "stage.failed");
+    const why = typeof failed2?.data?.reason === "string" ? oneLine(failed2.data.reason, 240) : "";
+    if (failed2 && failed2.stage)
+      return { reason: `The run failed in the ${failed2.stage} stage${why ? `: ${why}` : ""}.`, ownRules: false };
     const bad = evs.filter((e) => e.type === "test.result" && e.data.result === "fail").length;
     return { reason: bad ? `The run failed: ${bad} check${bad === 1 ? "" : "s"} did not pass.` : "The run failed and did not record a reason.", ownRules: false };
   }
@@ -22197,6 +22356,7 @@ var isObj4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var str2 = (v) => typeof v === "string" && v !== "" ? v : null;
 var SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 var MAX_CHECKPOINTS = 50;
+var ROLLBACK_ALLOW = new Set(["session.json", "dashboard-state.json", "CONTINUITY.md", "autonomy-state.json", "state", "queue"]);
 var validCheckpointId = (id) => SAFE_ID.test(id);
 var storeOf = (repoDir) => join17(repoDir, ".loki", "state", "checkpoints");
 var lokiOf = (repoDir) => join17(repoDir, ".loki");
@@ -22336,16 +22496,33 @@ function rollbackCheckpoint(repoDir, id, now2 = new Date) {
 `);
   let restored = 0;
   const errors = [];
+  const skipped = (src) => src === join17(real2, "state", "checkpoints");
   for (const e of readdirSync4(real2, { withFileTypes: true })) {
     if (e.name === "metadata.json" || e.name === "worktree-snapshot.txt")
       continue;
-    const src = join17(real2, e.name);
+    if (!ROLLBACK_ALLOW.has(e.name)) {
+      errors.push(`${e.name}: not in the rollback allowlist, skipped`);
+      continue;
+    }
+    const src = join17(real2, e.name), dst = join17(loki, e.name);
     try {
       if (lstatSync2(src).isSymbolicLink()) {
         errors.push(`${e.name}: symlink skipped`);
         continue;
       }
-      cpSync(src, join17(loki, e.name), { recursive: true, filter: (s) => s !== join17(real2, "state", "checkpoints") });
+      if (existsSync8(dst) && lstatSync2(dst).isSymbolicLink()) {
+        errors.push(`${e.name}: destination is a symlink, skipped`);
+        continue;
+      }
+      cpSync(src, dst, { recursive: true, filter: (s) => {
+        if (skipped(s))
+          return false;
+        if (lstatSync2(s).isSymbolicLink()) {
+          errors.push(`${s.slice(real2.length + 1)}: nested symlink skipped`);
+          return false;
+        }
+        return true;
+      } });
       restored++;
     } catch (err) {
       errors.push(`${e.name}: ${err.message}`);
@@ -23567,8 +23744,8 @@ function tasksList(loki, status) {
   const out2 = order2.map((o) => ("ref" in o) ? byId.get(o.ref) : o);
   for (const t of out2) {
     if (t.type === "iteration" && !t.description) {
-      const ec = t.exitCode, failed = t._terminal_outcome === "failed";
-      const o = Number.isInteger(ec) && ec === 0 && !failed ? "completed cleanly (exit 0)" : Number.isInteger(ec) && ec !== 0 ? `failed (exit ${ec})` : failed ? "failed" : t._terminal_outcome === "completed" ? "completed" : t.status === "done" ? "finished" : null;
+      const ec = t.exitCode, failed2 = t._terminal_outcome === "failed";
+      const o = Number.isInteger(ec) && ec === 0 && !failed2 ? "completed cleanly (exit 0)" : Number.isInteger(ec) && ec !== 0 ? `failed (exit ${ec})` : failed2 ? "failed" : t._terminal_outcome === "completed" ? "completed" : t.status === "done" ? "finished" : null;
       if (o)
         t.description = `Iteration ${o}${t.provider ? `, built by ${t.provider}` : ""}.`;
     }
@@ -24575,7 +24752,7 @@ function mount19(ctx) {
 function computeStats(db, since) {
   const all = db.select().from(runs).all().filter((r) => !since || r.startedAt !== null && r.startedAt >= since);
   const by = {};
-  let finished = 0, running = 0, blocked = 0, verified = 0, unchecked = 0, failed = 0, satisfied = 0, other = 0;
+  let finished = 0, running = 0, blocked = 0, verified = 0, unchecked = 0, failed2 = 0, satisfied = 0, other = 0;
   let mUsd = 0, mRuns = 0, pUsd = 0, pRuns = 0;
   for (const r of all) {
     if (r.endedAt)
@@ -24593,7 +24770,7 @@ function computeStats(db, since) {
         else if (verdict === "ALREADY_SATISFIED" || verdict === "ALREADY_SATISFIED (signature not checked)")
           satisfied++;
         else if (verdict === "FAILED" || verdict === "PARTIAL" || verdict === "TAMPERED")
-          failed++;
+          failed2++;
         else
           other++;
       }
@@ -24625,8 +24802,8 @@ function computeStats(db, since) {
     runs_running: running,
     by_verdict: by,
     blocked_waiting: blocked,
-    verified_rate: verified + unchecked + failed ? verified / (verified + unchecked + failed) : null,
-    breakdown: { verified, failed, already_satisfied: satisfied, other },
+    verified_rate: verified + unchecked + failed2 ? verified / (verified + unchecked + failed2) : null,
+    breakdown: { verified, failed: failed2, already_satisfied: satisfied, other },
     verified_unchecked: unchecked,
     keys_configured: pubkeysFromEnv().configured === true,
     ...pubkeysFromEnv().reason ? { keys_reason: pubkeysFromEnv().reason } : {},
@@ -24650,9 +24827,9 @@ function mount20(ctx) {
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync47, realpathSync as realpathSync20 } from "fs";
+import { readFileSync as readFileSync48, realpathSync as realpathSync20 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join61, sep as sep13 } from "path";
+import { join as join62, sep as sep13 } from "path";
 init_verify_cmd();
 init_seal();
 init_receipt_dsse();
@@ -24679,11 +24856,11 @@ function mount21(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync20(join61(repo.p, ".loki", "runs"));
-      runDir = realpathSync20(join61(root, run2));
-      if (runDir !== join61(root, run2))
+      const root = realpathSync20(join62(repo.p, ".loki", "runs"));
+      runDir = realpathSync20(join62(root, run2));
+      if (runDir !== join62(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync20(join61(runDir, "receipt.json"));
+      file = realpathSync20(join62(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
@@ -24702,7 +24879,7 @@ function mount21(ctx) {
         sha3 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync47(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync48(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -24764,8 +24941,8 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync40, readFileSync as readFileSync48 } from "fs";
-import { join as join62 } from "path";
+import { existsSync as existsSync40, readFileSync as readFileSync49 } from "fs";
+import { join as join63 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -25108,11 +25285,12 @@ function metricsMapped(repoDir) {
 // src/server/legacy/routes-control.ts
 function controlMapped(db, repoDir) {
   const loki = () => lokiDirOf(repoDir);
+  const ctl = (action) => (c) => peerIsLoopback(c) && isLoopbackHost(c.req.header("host")) ? runControl(db, repoDir, action, c, "legacy") : c.json({ error: "loopback only" }, 403);
   return {
-    "POST /api/control/pause": (c) => runControl(db, repoDir, "pause", c, "legacy"),
-    "POST /api/control/resume": (c) => runControl(db, repoDir, "resume", c, "legacy"),
-    "POST /api/control/stop": (c) => runControl(db, repoDir, "stop", c, "legacy"),
-    "POST /api/council/force-review": (c) => runControl(db, repoDir, "council-review", c, "legacy"),
+    "POST /api/control/pause": ctl("pause"),
+    "POST /api/control/resume": ctl("resume"),
+    "POST /api/control/stop": ctl("stop"),
+    "POST /api/council/force-review": ctl("council-review"),
     "GET /api/council/state": (c) => c.json(councilState(loki())),
     "GET /api/council/verdicts": (c) => {
       const n2 = intQ(c.req.query("limit"), 1000);
@@ -25137,10 +25315,10 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join62(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join63(import.meta.dir, "../../../../../VERSION")]) {
     try {
       if (existsSync40(f))
-        return readFileSync48(f, "utf8").trim();
+        return readFileSync49(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -25322,7 +25500,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join63(import.meta.dir, "../../ui/dist"), join63(import.meta.dir, "../ui/dist")].find((d) => existsSync41(join63(d, "index.html")));
+var defaultUiDir = () => [join64(import.meta.dir, "../../ui/dist"), join64(import.meta.dir, "../ui/dist")].find((d) => existsSync41(join64(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -25351,10 +25529,10 @@ function createApp(opts) {
     await next();
   });
   const readInstalled = () => {
-    for (const f of [process.env.LOKI_VERSION_FILE, join63(import.meta.dir, "../../../../VERSION")]) {
+    for (const f of [process.env.LOKI_VERSION_FILE, join64(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
-          return readFileSync49(f, "utf8").trim() || "unknown";
+          return readFileSync50(f, "utf8").trim() || "unknown";
       } catch {}
     }
     return "unknown";
@@ -25469,7 +25647,7 @@ function createApp(opts) {
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join63(root, "index.html")));
+    return new Response(Bun.file(join64(root, "index.html")));
   });
   return { app, db, close: () => {
     clearInterval(reconciler);