loki-mode 11.86.0 → 11.87.0

package/packages/control-plane/dist/server.js

@@ -63952,10 +63952,11 @@ function findInterrupted(repoDir, runId, includeCancelled = false, why) {
   if (!top)
     return null;
   const events2 = readEvents(join76(repoDir, eventsRelPath(top.id)));
-  const cancelled2 = events2.findLast((e10) => e10.type === "run.completed")?.data["cancelled"] === true;
+  const doneAt = events2.findLastIndex((e10) => e10.type === "run.completed"), tail2 = events2.slice(doneAt + 1 + (events2[doneAt + 1]?.type === "log.sealed" ? 1 : 0));
+  const cancelDone = doneAt >= 0 && isCancelDone(events2[doneAt]), cancelled2 = cancelDone && tail2.length === 0;
   if (cancelled2 && !includeCancelled)
     return null;
-  const phase = phaseOf(cancelled2 ? events2.filter((e10) => e10.type !== "run.completed") : events2);
+  const phase = phaseOf(events2.filter((e10) => !isCancelDone(e10)));
   if (phase === "done" || isDiscarded(root, top.id) || runOwnerAlive(join76(root, top.id)) || events2.length === 0)
     return null;
   const foreign = events2.find((e10) => e10.run !== top.id);
@@ -64017,7 +64018,7 @@ function resumePoint(events2, rawLog) {
     if (bad)
       return { ok: false, reason: `event log failed its seal check (${bad})` };
   }
-  if (events2.some((e10) => e10.type === "run.completed"))
+  if (events2.some((e10) => e10.type === "run.completed" && !isCancelDone(e10)))
     return { ok: false, reason: "run already completed; nothing to resume" };
   const intake = events2.findLast((e10) => e10.type === "stage.completed" && e10.stage === "intake");
   if (intake && typeof intake.data["base_sha"] !== "string")
@@ -64083,7 +64084,7 @@ async function resumeFlag(runId, noPr = false, deps = {}) {
     return 2;
   }
   const id2 = runId && /^e10-[A-Za-z0-9-]+$/.test(runId) ? runId : undefined;
-  const why = {}, it2 = findInterrupted(repoDir, id2, false, why);
+  const why = {}, it2 = findInterrupted(repoDir, id2, true, why);
   if (!it2) {
     out3(`engine10: --resume: no interrupted engine10 run${why.reason ? ` (${plainLine(why.reason, 400)})` : ""}
 `);
@@ -64095,6 +64096,12 @@ async function resumeFlag(runId, noPr = false, deps = {}) {
   } catch {
     return cannotResume(out3, it2.runId, "its event log is unreadable");
   }
+  const tailBad = it2.phase === "publish" ? null : cancelTailProblem(it2.events);
+  if (tailBad) {
+    out3(`engine10: --resume refused: run ${it2.runId} holds ${tailBad}
+`);
+    return 2;
+  }
   const rp = resumePoint(it2.events, raw2);
   if (!rp.ok && /^event log (is torn|ends in a torn)/.test(rp.reason))
     return cannotResume(out3, it2.runId, `its ${rp.reason}`);
@@ -64337,18 +64344,38 @@ function parseRecoveryChoice(raw2, resumable) {
     return "details";
   return resumable && ["r", "resume"].includes(a) ? "resume" : null;
 }
-function nextStepText(runId, phase, cancelled2, hasBranch) {
+function nextStepText(runId, phase, resumable, hasBranch) {
   const kept = hasBranch ? `old work stays on loki/${runId}` : "no run branch was created";
-  return phase === "publish" && !cancelled2 ? `next loki start with the same task offers to finish its pull request step (run ${runId}) or start fresh` : `next loki start offers to start fresh; ${kept}`;
+  return resumable ? `next loki start with the same task offers to ${phase === "publish" ? "finish its pull request step" : "resume it from its settled stages"} (run ${runId}) or start fresh` : `next loki start offers to start fresh; ${kept}`;
+}
+function cancelTailProblem(events2) {
+  const at2 = events2.findLastIndex((e10) => e10.type === "log.sealed");
+  return at2 >= 0 && at2 < events2.length - 1 ? `${events2.length - 1 - at2} event(s) after its last log.sealed (${events2[at2 + 1].type}); they are unauthenticated` : null;
+}
+function stagesResumable(repoDir, runId, events2) {
+  if (!branchExists(repoDir, runId) || cancelTailProblem(events2))
+    return false;
+  try {
+    const rp = resumePoint(events2, readFileSync68(join76(repoDir, eventsRelPath(runId)), "utf8"));
+    if (!rp.ok || rp.skip.length === 0)
+      return false;
+    const base = events2.findLast((e10) => e10.type === "stage.completed" && e10.stage === "intake")?.data["base_sha"];
+    if (typeof base === "string" && /^[0-9a-f]{40}([0-9a-f]{24})?$/.test(base))
+      safeGit(repoDir, ["cat-file", "-e", `${base}^{commit}`]);
+    return true;
+  } catch {
+    return false;
+  }
 }
 function statusNextStep(repoDir, runsDir, runId, events2) {
   const cancelled2 = events2.findLast((e10) => e10.type === "run.completed")?.data["cancelled"] === true;
   if (events2.some((e10) => e10.type === "run.completed") && !cancelled2)
     return null;
-  const phase = phaseOf(cancelled2 ? events2.filter((e10) => e10.type !== "run.completed") : events2);
+  const phase = phaseOf(events2.filter((e10) => !isCancelDone(e10)));
   if (phase === "done" || events2.length === 0 || isDiscarded(runsDir, runId) || runOwnerAlive(join76(runsDir, runId)))
     return null;
-  return nextStepText(runId, phase, cancelled2, branchExists(repoDir, runId));
+  const hasBranch = branchExists(repoDir, runId);
+  return nextStepText(runId, phase, phase === "publish" ? hasBranch && taskOf(events2) !== null : stagesResumable(repoDir, runId, events2), hasBranch);
 }
 function discardRun(repoDir, runId) {
   if (!/^e10-[A-Za-z0-9-]+$/.test(runId))
@@ -64378,18 +64405,30 @@ async function startRecovery(repoDir, task, noPr, deps = {}) {
     process.stderr.write(s);
   });
   const hasBranch = branchExists(repoDir, it2.runId), t = task.trim();
-  const resumable = it2.phase === "publish" && !it2.cancelled && !noPr && it2.task !== null && (t === "" || it2.task === t) && hasBranch && readOriginUrl(repoDir) !== null && !("deny" in prGate(repoDir)) && publishStateOk(join76(repoDir, ".loki", "runs", it2.runId), it2);
+  const sameTask = it2.task !== null && (t === "" || it2.task === t), publish = it2.phase === "publish";
+  const resumable = sameTask && (publish ? !noPr && hasBranch && readOriginUrl(repoDir) !== null && !("deny" in prGate(repoDir)) && publishStateOk(join76(repoDir, ".loki", "runs", it2.runId), it2) : stagesResumable(repoDir, it2.runId, it2.events));
   const kept = hasBranch ? `old work is kept on loki/${it2.runId}` : "no run branch was created", was = it2.cancelled ? "cancelled" : "interrupted";
   const interactive = (deps.tty ?? (process.stdin.isTTY === true && process.stderr.isTTY === true)) && process.env["LOKI_NONINTERACTIVE"] !== "1";
-  if (resumable && !interactive)
-    return resumePublish(repoDir, it2, deps);
+  let began = false;
+  const go2 = async () => publish ? resumePublish(repoDir, it2, deps) : resumeFlag(it2.runId, noPr, { ...deps, supervise: async (o) => {
+    began = true;
+    return (deps.supervise ?? (async (x3) => (await Promise.resolve().then(() => (init_supervisor(), exports_supervisor))).runSupervisor(x3)))(o);
+  } });
+  if (resumable && !interactive) {
+    const rc2 = await go2();
+    if (publish || began || rc2 === 0)
+      return rc2;
+    note(`note: run ${it2.runId} could not be resumed; starting a new run, ${kept}.
+`);
+    return null;
+  }
   if (!interactive || t === "" && !resumable) {
     note(`note: run ${it2.runId} was ${was} in phase ${it2.phase}; ${t === "" ? `give a task to start a new run (loki start <task>); ${kept}` : `starting a new run, ${kept}`}.
 `);
     return null;
   }
   const ask = deps.ask ?? askLine, discardItem = "Discard old run (not offered again; nothing is deleted)";
-  const menu = resumable ? ["Resume (finish the pull request step)", `Start fresh (${kept})`, discardItem, "Show details"] : [`Start fresh (${kept})`, discardItem, "Show details"];
+  const menu = resumable ? [publish ? "Resume (finish the pull request step)" : "Resume (continue from the settled stages)", `Start fresh (${kept})`, discardItem, "Show details"] : [`Start fresh (${kept})`, discardItem, "Show details"];
   note(`loki: run ${it2.runId} was ${was} in phase ${it2.phase}${it2.task ? ` (task: ${it2.task.replace(/\s+/g, " ").slice(0, 80)})` : ""}.
 `);
   for (let tries = 0;tries < 5; tries++) {
@@ -64409,12 +64448,12 @@ async function startRecovery(repoDir, task, noPr, deps = {}) {
       continue;
     }
     if (c === "details") {
-      note(`  run ${it2.runId}: ${it2.events.length} events, last seq ${fold(it2.events).lastSeq}, phase ${it2.phase}, ${was}; ${kept}; ${resumable ? "resumable (same task, publish phase)" : it2.phase === "publish" && !it2.cancelled ? "not resumable here (different task or --no-pr)" : it2.cancelled ? "not resumable (cancelled)" : "not resumable (stage state is in memory)"}
+      note(`  run ${it2.runId}: ${it2.events.length} events, last seq ${fold(it2.events).lastSeq}, phase ${it2.phase}, ${was}; ${kept}; ${resumable ? `resumable (same task, ${publish ? "publish phase" : "settled stages kept"})` : "not resumable here (different task, --no-pr, or the branch, base commit, log or a settled stage is missing)"}
 `);
       continue;
     }
     if (c === "resume")
-      return resumePublish(repoDir, it2, deps);
+      return go2();
     note(c === "discard" ? discardRun(repoDir, it2.runId) ? `Discarded run ${it2.runId}: it will not be offered again; ${kept}.
 ` : `Could not mark run ${it2.runId} as discarded; starting fresh.
 ` : `Starting fresh; ${kept}.
@@ -66197,7 +66236,8 @@ var init_wall_cases = __esm(() => {
 });
 
 // ../../loki-ts/src/features/runner_config.ts
-import { readFileSync as readFileSync74 } from "fs";
+import { createHash as createHash27 } from "crypto";
+import { readdirSync as readdirSync30, readFileSync as readFileSync74 } from "fs";
 import { dirname as dirname33, join as join83, normalize as normalize5 } from "path";
 function tomlKey2(s, i = 0, eq3 = true) {
   const parts = [], ws2 = () => {
@@ -66536,6 +66576,59 @@ function runnerConfigNotes(repoDir, baseSha, head, changed, signal) {
   }
   return [...notes];
 }
+function pipRecorded(repoDir, site, rel, sha5, memo4) {
+  let s = memo4.get(site);
+  if (!s) {
+    s = new Set;
+    try {
+      for (const d of readdirSync30(join83(repoDir, site)))
+        if (d.endsWith(".dist-info"))
+          try {
+            for (const l of readFileSync74(join83(repoDir, site, d, "RECORD"), "utf8").split(/\r?\n/)) {
+              const m = /^"?(.*?)"?,sha256=([\w-]+),/.exec(l);
+              if (m)
+                s.add(`${m[1]}\x00${m[2]}`);
+            }
+          } catch {}
+    } catch {}
+    memo4.set(site, s);
+  }
+  return s.has(`${rel}\x00${Buffer.from(sha5, "hex").toString("base64url")}`);
+}
+function hiddenRunnerConfigs(repoDir) {
+  const out3 = {}, memo4 = new Map;
+  for (const f of gitOut(repoDir, ["-c", "core.quotePath=false", "ls-files", "-o", "-z", "--", ":(exclude,glob)**/node_modules/**"]).split("\x00")) {
+    const site = SITE.exec(f);
+    if (!f || f.startsWith(".loki/") || (site ? !HOOK.test(site[2]) : DEP_TREE.test(f) || PY_LOADED_TREE.test(f) && !/(^|\/)conftest\.py$/i.test(f) || !RUNNER_CONFIGS.some((s) => s.re.test(f))))
+      continue;
+    let b;
+    try {
+      b = readFileSync74(join83(repoDir, f));
+    } catch {
+      out3[f] = "!unreadable";
+      continue;
+    }
+    const h10 = createHash27("sha256").update(b).digest("hex"), t = site ? b.toString("utf8") : "", stock = site?.[2] === "_virtualenv.pth" && /^import _virtualenv\r?\n?$/.test(t);
+    if (stock || site?.[2].endsWith("/entry_points.txt") && !/^\s*\[pytest11\]\s*$/m.test(t))
+      continue;
+    if (!site || !pipRecorded(repoDir, site[1], site[2], h10, memo4))
+      out3[f] = h10;
+  }
+  return out3;
+}
+function hiddenConfigChanged(repoDir, snap) {
+  let now2;
+  try {
+    now2 = hiddenRunnerConfigs(repoDir);
+  } catch {
+    return ["untracked runner configs (listing failed)"];
+  }
+  if (!snap || typeof snap !== "object")
+    return Object.keys(now2).length ? ["untracked runner configs (no intake snapshot to compare)"] : [];
+  const was = snap;
+  const d = [...new Set([...Object.keys(now2), ...Object.keys(was)])].filter((f) => now2[f] !== was[f]).sort();
+  return d.length > 5 ? [...d.slice(0, 5), `(+${d.length - 5} more)`] : d;
+}
 var PKG_KEYS, RAW_CONFIGS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, depGuard = (j10) => DEP_MAPS.map((m) => Object.entries(j10[m] ?? {}).filter(([k3, v3]) => RUNNER_DEP.test(k3) || LOCAL_SPEC.test(String(v3)))), KW2, lines = (t) => t.split(`
 `).map((l) => l.trim()).filter((l) => l && !l.startsWith("#")), ESC, unesc2 = (s) => s.replace(/\\(?:u([0-9a-fA-F]{4})|U([0-9a-fA-F]{8})|([\s\S]))/g, (_m2, u10, U10, c) => {
   if (c !== undefined) {
@@ -66560,14 +66653,15 @@ var PKG_KEYS, RAW_CONFIGS, RUNNER_CONFIGS, DEP_MAPS, RUNNER_DEP, LOCAL_SPEC, dep
   } catch {
     return "";
   }
-}, REFS, MAPPER, ROOT_DIR, QUOTED, EXT, gitOut = (dir, args, signal) => safeGit(dir, args, { timeout: 20000, maxBuffer: 64 << 20, ...signal ? { signal } : {} }), NON_SOURCE;
+}, REFS, MAPPER, ROOT_DIR, QUOTED, EXT, gitOut = (dir, args, signal) => safeGit(dir, args, { timeout: 20000, maxBuffer: 64 << 20, ...signal ? { signal } : {} }), NON_SOURCE, DEP_TREE, PY_LOADED_TREE, SITE, HOOK;
 var init_runner_config = __esm(() => {
   init_safe_git();
   PKG_KEYS = ["scripts", "jest", "overrides", "resolutions", "imports", "pnpm", "mocha", "vitest", "ava", "c8", "nyc", "babel", "bun", "patchedDependencies"];
   RAW_CONFIGS = [
-    { re: /(^|\/)(conftest\.py|tox\.ini|bunfig\.toml|\.?pytest\.(ini|toml)|\.mocharc[\w.]*)$/ },
+    { re: /(^|\/)(conftest\.py|(site|user)customize\.py|tox\.ini|bunfig\.toml|\.?pytest\.(ini|toml)|\.mocharc[\w.]*)$/ },
     { re: /(^|\/)(vitest|vite|jest)\.(config|workspace)\.[\w.]+$/ },
     { re: /(^|\/)\.cargo\/config(\.toml)?$/ },
+    { re: /(^|\/)(site|dist)-packages\/[^/]+\.pth$/ },
     { re: /(^|\/)(babel\.config\.[\w.]+|\.babelrc(\.[\w]+)?|\.pnpmfile\.(cjs|mjs))$/ },
     { re: /(^|\/)package\.json$/, shared: PKG_KEYS },
     { re: /(^|\/)(pnpm-workspace\.yaml|\.yarnrc\.yml|\.npmrc)$/ },
@@ -66592,6 +66686,10 @@ var init_runner_config = __esm(() => {
   QUOTED = /["']([^"'\n]+)["']/g;
   EXT = ["", ".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".mts", ".cts", ".json", ".py", "/index.ts", "/index.js"];
   NON_SOURCE = /(^|\/)(tests?|__tests__|spec|\.loki)\/|\.(test|spec)\.[\w.]+$|(^|\/)test_[^/]*\.py$|_test\.(go|py)$/;
+  DEP_TREE = /(^|\/)node_modules\//;
+  PY_LOADED_TREE = /(^|\/)(bower_components|vendor)\//;
+  SITE = /^((?:.*\/)?(?:site|dist)-packages)\/(.+)$/;
+  HOOK = /^([^/]+\.pth|(site|user)customize\.py|[^/]+\.dist-info\/entry_points\.txt)$/;
 });
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
@@ -67498,7 +67596,7 @@ var init_run_control = __esm(() => {
 });
 
 // ../../loki-ts/src/project_model/conventions.ts
-import { existsSync as existsSync61, readdirSync as readdirSync30, readFileSync as readFileSync80 } from "fs";
+import { existsSync as existsSync61, readdirSync as readdirSync31, readFileSync as readFileSync80 } from "fs";
 import { basename as basename26, dirname as dirname36, isAbsolute as isAbsolute15, join as join89, relative as relative18, resolve as resolve29 } from "path";
 function parseJsonc(text3) {
   let out3 = "", i = 0;
@@ -67540,7 +67638,7 @@ function moduleOf(file, depth = 0) {
 function readPackageConventions(pkgDir, runner = null) {
   let names = [];
   try {
-    names = readdirSync30(pkgDir).filter((f) => f.endsWith(".json")).sort((x3, y) => x3.length - y.length || x3.localeCompare(y));
+    names = readdirSync31(pkgDir).filter((f) => f.endsWith(".json")).sort((x3, y) => x3.length - y.length || x3.localeCompare(y));
   } catch {
     return null;
   }
@@ -67662,7 +67760,7 @@ function nearestPackageRoot(testDir, repoDir, fileName) {
     return siteFor(api, repoDir, relative18(repoDir, join89(testDir, fileName)))?.cwd ?? repoDir;
   const shaped = (d) => {
     try {
-      return readdirSync30(d).some((f) => {
+      return readdirSync31(d).some((f) => {
         if (!f.endsWith(".json"))
           return false;
         const j10 = readJson6(join89(d, f));
@@ -67884,7 +67982,7 @@ var init_conventions = __esm(() => {
 import { existsSync as existsSync62, mkdirSync as mkdirSync43, mkdtempSync as mkdtempSync11, readFileSync as readFileSync81, rmSync as rmSync23, writeFileSync as writeFileSync42 } from "fs";
 import { homedir as homedir10, tmpdir as tmpdir14 } from "os";
 import { dirname as dirname37, join as join90 } from "path";
-import { createHash as createHash27 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 function loadLessons(repoDir) {
   const p = lessonsPath(repoDir);
   if (!existsSync62(p))
@@ -67948,7 +68046,7 @@ function retrieveLessons(repoDir, task, limit = 3) {
   }).filter((x3) => x3.n > 0).sort((a, b) => b.n - a.n || lessonConfidence(b.l) - lessonConfidence(a.l)).slice(0, limit).map((x3) => x3.l);
 }
 function appendReceiptFact(repoDir, f, now2 = () => new Date) {
-  const id2 = `rcp-${createHash27("sha256").update(f.runId).digest("hex").slice(0, 12)}`;
+  const id2 = `rcp-${createHash28("sha256").update(f.runId).digest("hex").slice(0, 12)}`;
   const lessons = loadLessons(repoDir);
   if (lessons.some((l) => l.id === id2))
     return false;
@@ -68784,7 +68882,7 @@ var init_plan = __esm(() => {
 });
 
 // ../../loki-ts/src/util/conflict_resume.ts
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 import { existsSync as existsSync66, mkdtempSync as mkdtempSync12, readFileSync as readFileSync86, rmSync as rmSync25, writeFileSync as writeFileSync46 } from "fs";
 import { tmpdir as tmpdir15 } from "os";
 import { basename as basename27, join as join95, relative as relative20 } from "path";
@@ -68840,7 +68938,7 @@ async function adjudicateWallConflict(ctx, first, firstSession, wall) {
       writeFileSync46(f.path, next, "utf8");
       const sf2 = o.wall?.files?.find((x3) => x3.path === f.path);
       if (sf2)
-        sf2.sha256 = createHash28("sha256").update(next).digest("hex");
+        sf2.sha256 = createHash29("sha256").update(next).digest("hex");
     }
     const defect = { file: a.file, line: a.line, reason: oneLine3(reason), action: rewritten ? "reauthored" : "dropped" };
     if (rewritten) {
@@ -70451,7 +70549,7 @@ var init_verify = __esm(() => {
         ctx.emit("test.result", "verify", { ...pubHold(k3) });
       }
       const targetNames = new Set([...[...wallTests, ...relevant2].map(testCheckName), ...checks.filter(isHold).map((c) => c.name)]);
-      const cfgChanged = testConfigChanged(ctx.repoDir, ctx.baseSha, changed);
+      const cfgChanged = [...new Set([...testConfigChanged(ctx.repoDir, ctx.baseSha, changed), ...hiddenConfigChanged(ctx.repoDir, ctx.outputs().intake?.hidden_cfg)])];
       const preRed = await subtractBase(ctx, api, checks, tests, changed, new Set(wallTests.map(testCheckName)), new Set(relevant2.map(testCheckName)), signal, cfgChanged.length === 0, new Set(ctx.outputs().intake?.zero_baseline?.zero ?? []), depNames);
       const attr = attribute(ctx.repoDir, ctx.baseSha, checks.filter((c) => c.result === "fail" && !preRed.names.includes(c.name)).map((c) => ({ name: c.name, ids: c.ids, eligible: !targetNames.has(c.name) && !changed.includes(c.name.slice(c.name.indexOf(":") + 1)) })));
       attr.introducedChecks = [...new Set(attr.introducedChecks.map((n10) => isHoldoutCheck(n10) ? "holdout" : n10))];
@@ -70555,7 +70653,7 @@ __export(exports_wall, {
   BASE_RUN_TIMEOUT_MS: () => BASE_RUN_TIMEOUT_MS
 });
 import { spawnSync as spawnSync11 } from "child_process";
-import { existsSync as existsSync71, mkdirSync as mkdirSync51, mkdtempSync as mkdtempSync15, readFileSync as readFileSync90, readdirSync as readdirSync31, rmSync as rmSync30, writeFileSync as writeFileSync50 } from "fs";
+import { existsSync as existsSync71, mkdirSync as mkdirSync51, mkdtempSync as mkdtempSync15, readFileSync as readFileSync90, readdirSync as readdirSync32, rmSync as rmSync30, writeFileSync as writeFileSync50 } from "fs";
 import { tmpdir as tmpdir18 } from "os";
 import { dirname as dirname40, join as join101, relative as relative24 } from "path";
 
@@ -70696,14 +70794,14 @@ async function wallAuthor(ctx, signal, retry) {
     return done({ status: "failed", data: { iteration_ids: [iterationId], model }, reason: casesBad });
   }
   const planText = typeof prior.plan?.plan === "string" ? prior.plan.plan : null, repoFiles = repoMap?.files ?? [];
-  const oor = () => readdirSync31(cwd).filter((f) => f.startsWith(WALL_PREFIX)).flatMap((name) => {
+  const oor = () => readdirSync32(cwd).filter((f) => f.startsWith(WALL_PREFIX)).flatMap((name) => {
     const text3 = readFileSync90(join101(cwd, name), "utf8"), why = outOfRepoTarget(text3) ?? vacuousCheck(name, text3) ?? phantomReason(phantomRepoPaths(text3, name, targetDir, ctx.repoDir, planText), repoFiles, relative24(ctx.repoDir, targetDir), pkg?.root ?? "");
     return why ? [{ name, why }] : [];
   });
   const bad1 = oor();
   if (bad1.length > 0 && !wallCasesRunner(runners) && !signal.aborted && !ctx.overCap?.())
     await ctx.sessions.run({ stage: "wall", brief: withStagePrefix(outOfRepoReask("Rewrite these Wall files in place, keeping the same names and acceptance coverage.", bad1)), tier: "development", model, iterationId: `${iterationId}-oor`, limitS: wallLimitS(sz2.size), maxOutputTokens: wallOutputCap(), signal, cwd });
-  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync31(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n10) => !oorBad.has(n10) && !conventionViolation(conv2, n10, readFileSync90(join101(cwd, n10), "utf8"))), runnerOf: (n10) => guessRunner(n10, runners) }), generated = all.filter((n10) => !held?.names.has(n10));
+  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync32(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n10) => !oorBad.has(n10) && !conventionViolation(conv2, n10, readFileSync90(join101(cwd, n10), "utf8"))), runnerOf: (n10) => guessRunner(n10, runners) }), generated = all.filter((n10) => !held?.names.has(n10));
   const sealedDir = sealStageDir(ctx.runId, ctx.repoDir);
   rmSync30(sealedDir, { recursive: true, force: true });
   if (generated.length > 0)
@@ -70976,7 +71074,7 @@ var init_scope2 = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync72, readdirSync as readdirSync32, readFileSync as readFileSync92 } from "fs";
+import { existsSync as existsSync72, readdirSync as readdirSync33, readFileSync as readFileSync92 } from "fs";
 import { homedir as homedir11 } from "os";
 import { join as join103 } from "path";
 function agentDirs(repoDir, env = process.env) {
@@ -71001,7 +71099,7 @@ function loadRoleAgent(repoDir, role, env = process.env) {
       continue;
     let names;
     try {
-      names = readdirSync32(d).filter((n10) => n10.endsWith(".md") && !n10.startsWith(".")).sort();
+      names = readdirSync33(d).filter((n10) => n10.endsWith(".md") && !n10.startsWith(".")).sort();
     } catch {
       continue;
     }
@@ -71347,7 +71445,7 @@ __export(exports_contract, {
 import { existsSync as existsSync73, lstatSync as lstatSync28, mkdirSync as mkdirSync53, readFileSync as readFileSync93, rmSync as rmSync31, writeFileSync as writeFileSync52 } from "fs";
 import { spawnSync as spawnSync12 } from "child_process";
 import { dirname as dirname43, join as join105 } from "path";
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 function contractEnabled(env = process.env) {
   return env["LOKI_CONTRACT"] !== "0";
 }
@@ -71498,7 +71596,7 @@ function readContract(repoDir) {
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
-  const sha2563 = createHash29("sha256").update(raw2).digest("hex");
+  const sha2563 = createHash30("sha256").update(raw2).digest("hex");
   let j10;
   try {
     j10 = JSON.parse(raw2.toString("utf8"));
@@ -71787,8 +71885,8 @@ var init_contract = __esm(() => {
 });
 
 // ../../loki-ts/src/features/speed/seal_group.ts
-import { createHash as createHash30 } from "crypto";
-import { existsSync as existsSync74, mkdirSync as mkdirSync54, readdirSync as readdirSync33, readFileSync as readFileSync94, renameSync as renameSync21, statSync as statSync27, writeFileSync as writeFileSync53 } from "fs";
+import { createHash as createHash31 } from "crypto";
+import { existsSync as existsSync74, mkdirSync as mkdirSync54, readdirSync as readdirSync34, readFileSync as readFileSync94, renameSync as renameSync21, statSync as statSync27, writeFileSync as writeFileSync53 } from "fs";
 import { dirname as dirname44, join as join106 } from "path";
 function sealGroup(runDir, rh) {
   const manifestPath = join106(runDir, "group", "manifest.json");
@@ -71929,7 +72027,7 @@ function compositeVerdict(childVerdicts) {
   const failed2 = childVerdicts.filter((v3) => v3 === "FAILED" || !["VERIFIED", "ALREADY_SATISFIED", "PARTIAL", "SPEC_CONFLICT"].includes(v3)).length;
   return capGroupVerdict(base, { section: undefined, notProven: [], problems: failed2, allUnitsPass: childVerdicts.every((v3) => PASSING.has(v3)) });
 }
-var ID_RE, PASSING, sha5 = (b) => createHash30("sha256").update(b).digest("hex"), isObj10 = (v3) => v3 !== null && typeof v3 === "object" && !Array.isArray(v3), text3 = (v3, cap) => typeof v3 === "string" ? v3.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v3) => typeof v3 === "number" && Number.isFinite(v3) && v3 >= 0 ? v3 : 0, unitsDir = (runDir) => join106(runDir, "group", "units"), readJson7 = (p) => {
+var ID_RE, PASSING, sha5 = (b) => createHash31("sha256").update(b).digest("hex"), isObj10 = (v3) => v3 !== null && typeof v3 === "object" && !Array.isArray(v3), text3 = (v3, cap) => typeof v3 === "string" ? v3.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v3) => typeof v3 === "number" && Number.isFinite(v3) && v3 >= 0 ? v3 : 0, unitsDir = (runDir) => join106(runDir, "group", "units"), readJson7 = (p) => {
   try {
     return JSON.parse(readFileSync94(p, "utf8"));
   } catch {
@@ -71937,7 +72035,7 @@ var ID_RE, PASSING, sha5 = (b) => createHash30("sha256").update(b).digest("hex")
   }
 }, dirNames = (d) => {
   try {
-    return readdirSync33(d).filter((n10) => !n10.startsWith(".")).sort();
+    return readdirSync34(d).filter((n10) => !n10.startsWith(".")).sort();
   } catch {
     return null;
   }
@@ -72216,8 +72314,8 @@ __export(exports_seal, {
   EXTERNAL_DIFF_NOT_ISOLATED: () => EXTERNAL_DIFF_NOT_ISOLATED,
   AGENT_ONLY_REASON: () => AGENT_ONLY_REASON
 });
-import { createHash as createHash31 } from "crypto";
-import { existsSync as existsSync76, readdirSync as readdirSync34, mkdirSync as mkdirSync55, readFileSync as readFileSync96 } from "fs";
+import { createHash as createHash32 } from "crypto";
+import { existsSync as existsSync76, readdirSync as readdirSync35, mkdirSync as mkdirSync55, readFileSync as readFileSync96 } from "fs";
 import { basename as basename31, isAbsolute as isAbsolute20, join as join108, relative as relative26 } from "path";
 async function leanSymbolGap(ctx, o, rawDiff, head, vraw) {
   if (externalRun(o) || Array.isArray(o.wall?.files) && o.wall.files.length > 0 || o.intake?.already_satisfied === true || o.implement?.exit === "already_done")
@@ -72321,7 +72419,7 @@ function renderReceiptMd(r) {
   ].join(`
 `);
 }
-var SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", AGENT_ONLY_REASON = "only agent-authored tests executed (no agent-independent proof)", WALL_GREEN_ON_BASE_REASON = "Wall green on base: no Wall test discriminates the change", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash31("sha256").update(s).digest("hex"), str3 = (v3) => typeof v3 === "string" && v3 !== "" ? v3 : null, EXTERNAL_MODEL_LABEL = "external (no Loki implement session)", EXTERNAL_DIFF_NOT_ISOLATED = "Wall author not filesystem-isolated from the external diff", EXTERNAL_NO_WALL = "external diff sealed with no Wall file that ran; the only checks are the repo's existing tests", externalRun = (o) => o.implement?.exit === "external", LEAN_NO_SYMBOL = "no passing check references a changed symbol and no Wall file ran", strs2 = (v3) => Array.isArray(v3) ? v3.filter((x3) => typeof x3 === "string" && x3 !== "") : [], g = (ctx) => (a) => git9(ctx, a), receiptRel = (ctx) => {
+var SIGNING_UNAVAILABLE = "receipt signing unavailable (no usable signing key: invalid key or unwritable ~/.loki/keys)", AGENT_ONLY_REASON = "only agent-authored tests executed (no agent-independent proof)", WALL_GREEN_ON_BASE_REASON = "Wall green on base: no Wall test discriminates the change", EXCLUDE_LOKI = ":(exclude).loki", sha2562 = (s) => createHash32("sha256").update(s).digest("hex"), str3 = (v3) => typeof v3 === "string" && v3 !== "" ? v3 : null, EXTERNAL_MODEL_LABEL = "external (no Loki implement session)", EXTERNAL_DIFF_NOT_ISOLATED = "Wall author not filesystem-isolated from the external diff", EXTERNAL_NO_WALL = "external diff sealed with no Wall file that ran; the only checks are the repo's existing tests", externalRun = (o) => o.implement?.exit === "external", LEAN_NO_SYMBOL = "no passing check references a changed symbol and no Wall file ran", strs2 = (v3) => Array.isArray(v3) ? v3.filter((x3) => typeof x3 === "string" && x3 !== "") : [], g = (ctx) => (a) => git9(ctx, a), receiptRel = (ctx) => {
   const r = relative26(ctx.repoDir, join108(ctx.runDir, "receipt.json"));
   return r.startsWith("..") || isAbsolute20(r) ? `.loki/runs/${ctx.runId}/receipt.json` : r;
 }, commitStage, wallGreenOnBaseOf = (o) => {
@@ -72464,7 +72562,7 @@ var init_seal = __esm(() => {
       if (wallNotRun > 0) {
         try {
           const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename31(String(f.path))));
-          for (const n10 of readdirSync34(join108(ctx.runDir, "wall")).sort())
+          for (const n10 of readdirSync35(join108(ctx.runDir, "wall")).sort())
             if (!kept.has(n10))
               notProven.add(`wall test discarded: ${n10} (not_run)`);
         } catch {}
@@ -73283,7 +73381,7 @@ var init_capability = __esm(() => {
 var init_raster = () => {};
 
 // ../../loki-ts/src/commands/doctor.ts
-import { appendFileSync as appendFileSync11, writeFileSync as writeFileSync57, mkdirSync as mkdirSync56, accessSync as accessSync3, constants as fsConstants3, existsSync as existsSync77, lstatSync as lstatSync29, readdirSync as readdirSync35, readFileSync as readFileSync97, readlinkSync as readlinkSync6, realpathSync as realpathSync32, statSync as statSync30, statfsSync } from "fs";
+import { appendFileSync as appendFileSync11, writeFileSync as writeFileSync57, mkdirSync as mkdirSync56, accessSync as accessSync3, constants as fsConstants3, existsSync as existsSync77, lstatSync as lstatSync29, readdirSync as readdirSync36, readFileSync as readFileSync97, readlinkSync as readlinkSync6, realpathSync as realpathSync32, statSync as statSync30, statfsSync } from "fs";
 import { spawnSync as spawnSync13 } from "child_process";
 import { homedir as homedir12, tmpdir as tmpdir19 } from "os";
 import { join as join110, resolve as resolve31 } from "path";
@@ -73438,13 +73536,13 @@ __export(exports_first_run_repo, {
   initEmptyRepo: () => initEmptyRepo,
   NOT_A_REPO: () => NOT_A_REPO
 });
-import { readdirSync as readdirSync36 } from "fs";
+import { readdirSync as readdirSync37 } from "fs";
 async function initEmptyRepo(dir, env) {
   if (env["LOKI_AUTO_GIT_INIT"] === "0")
     return { fatal: NOT_A_REPO(dir) };
   let empty = false;
   try {
-    empty = readdirSync36(dir).every((f) => OS_METADATA.has(f));
+    empty = readdirSync37(dir).every((f) => OS_METADATA.has(f));
   } catch {}
   if (!empty)
     return { fatal: NON_EMPTY_FIX(dir) };
@@ -74219,8 +74317,8 @@ __export(exports_run_group, {
   groupCostLine: () => groupCostLine,
   NOT_PROVEN: () => NOT_PROVEN
 });
-import { cpSync as cpSync3, existsSync as existsSync78, mkdirSync as mkdirSync58, readdirSync as readdirSync37, readFileSync as readFileSync98, rmSync as rmSync33, statSync as statSync31 } from "fs";
-import { createHash as createHash32 } from "crypto";
+import { cpSync as cpSync3, existsSync as existsSync78, mkdirSync as mkdirSync58, readdirSync as readdirSync38, readFileSync as readFileSync98, rmSync as rmSync33, statSync as statSync31 } from "fs";
+import { createHash as createHash33 } from "crypto";
 import { spawn as spawn12 } from "child_process";
 import { join as join112, resolve as resolve32 } from "path";
 function scopedEnv(env) {
@@ -74289,7 +74387,7 @@ function findResumable(repoDir, specSha, unitIds) {
   const root = join112(repoDir, ".loki", "groups");
   let names = [];
   try {
-    names = readdirSync37(root);
+    names = readdirSync38(root);
   } catch {
     return null;
   }
@@ -74667,7 +74765,7 @@ var NOT_PROVEN = 4, ENV_KEEP, defaultLauncher = (argv, env, cwd, onOut) => new P
 }), git11 = (dir, args) => {
   const r = safeGitSpawn(dir, args, { encoding: "utf8" });
   return r.status === 0 ? String(r.stdout).trim() : "";
-}, SLUG_RE, originSlug = (repoDir) => SLUG_RE.exec(git11(repoDir, ["remote", "get-url", "origin"]))?.[1], sha2563 = (s) => createHash32("sha256").update(s).digest("hex"), UNIT_ID_RE, GID_RE, readJson8 = (p) => {
+}, SLUG_RE, originSlug = (repoDir) => SLUG_RE.exec(git11(repoDir, ["remote", "get-url", "origin"]))?.[1], sha2563 = (s) => createHash33("sha256").update(s).digest("hex"), UNIT_ID_RE, GID_RE, readJson8 = (p) => {
   try {
     const v3 = JSON.parse(readFileSync98(p, "utf8"));
     return v3 !== null && typeof v3 === "object" && !Array.isArray(v3) ? v3 : null;
@@ -74928,7 +75026,7 @@ var init_forecast = __esm(() => {
 });
 
 // ../../loki-ts/src/commands/queue.ts
-import { existsSync as existsSync80, mkdirSync as mkdirSync60, readFileSync as readFileSync101, readdirSync as readdirSync38, renameSync as renameSync22, statSync as statSync32, writeFileSync as writeFileSync59 } from "fs";
+import { existsSync as existsSync80, mkdirSync as mkdirSync60, readFileSync as readFileSync101, readdirSync as readdirSync39, renameSync as renameSync22, statSync as statSync32, writeFileSync as writeFileSync59 } from "fs";
 import { join as join114, resolve as resolve34 } from "path";
 function normalizeRef(raw2) {
   const m = URL_RE2.exec(raw2);
@@ -75170,7 +75268,7 @@ function newestRecord(lokiDir2, since) {
     const dir = join114(lokiDir2, sub2);
     let best = null;
     try {
-      for (const name of readdirSync38(dir)) {
+      for (const name of readdirSync39(dir)) {
         const p = join114(dir, name, file);
         if (!existsSync80(p))
           continue;
@@ -76053,7 +76151,7 @@ __export(exports_supervisor, {
   BACKSTOP_GRACE_S: () => BACKSTOP_GRACE_S
 });
 import { spawn as spawn13, spawnSync as spawnSync17 } from "child_process";
-import { createHash as createHash33, createPublicKey as createPublicKey4, sign as sign3 } from "crypto";
+import { createHash as createHash34, createPublicKey as createPublicKey4, sign as sign3 } from "crypto";
 import { existsSync as existsSync82, mkdirSync as mkdirSync63, readFileSync as readFileSync102, writeFileSync as writeFileSync61 } from "fs";
 import { dirname as dirname47, join as join117, relative as relative28, resolve as resolve36 } from "path";
 async function slackEvent(...a) {
@@ -76084,7 +76182,7 @@ class SupervisorLog {
     this.path = path;
     this.runId = runId2;
     this.log = new EventLog(path, runId2);
-    this.hash = createHash33("sha256");
+    this.hash = createHash34("sha256");
     try {
       this.hash.update(readFileSync102(path));
     } catch {}
@@ -76151,7 +76249,7 @@ class SupervisorLog {
     const expected = this.hash.copy().digest("hex");
     let actual = "";
     try {
-      actual = createHash33("sha256").update(readFileSync102(this.path)).digest("hex");
+      actual = createHash34("sha256").update(readFileSync102(this.path)).digest("hex");
     } catch {}
     if (actual === expected)
       return true;
@@ -77132,7 +77230,7 @@ __export(exports_warm, {
   dirtyHash: () => dirtyHash,
   WarmEngine: () => WarmEngine
 });
-import { createHash as createHash34 } from "crypto";
+import { createHash as createHash35 } from "crypto";
 import { existsSync as existsSync84, mkdirSync as mkdirSync64, readFileSync as readFileSync105, statSync as statSync33, unlinkSync as unlinkSync11 } from "fs";
 import { createServer as createServer2 } from "net";
 import { dirname as dirname48, resolve as resolve37 } from "path";
@@ -77154,7 +77252,7 @@ function dirtyHash(repoDir) {
   const out3 = git12(repoDir, ["status", "--porcelain", "-uall"]);
   if (out3 === null || out3.trim() === "")
     return "";
-  const h10 = createHash34("sha256");
+  const h10 = createHash35("sha256");
   for (const line2 of out3.split(`
 `).filter(Boolean).sort()) {
     h10.update(line2 + `
@@ -77563,7 +77661,13 @@ async function runIntakeBody(ctx, signal, opts, held) {
   if (stale)
     process.stderr.write(`engine10: ${stale.lokiOwn ? unmergedEvidenceNote(stale) : `evidence for the task is on ${stale.branch ?? "HEAD"} but not on ${stale.target}; implementing`}
 `);
-  const data = { ...base, ...stale?.lokiOwn ? { unmerged_loki_work: { branch: stale.branch, target: stale.target, commits: stale.commits, message: unmergedEvidenceNote(stale) } } : {}, ...await intakeProjectModel(ctx, signal, t02), ...await intakeDeps(ctx, signal, testmap.runners), zero_baseline: await probeZeroChecks(ctx.repoDir, testmap.tests, signal), repomap_ref: repomapRef, testmap, already_satisfied: false };
+  const data = { ...base, ...stale?.lokiOwn ? { unmerged_loki_work: { branch: stale.branch, target: stale.target, commits: stale.commits, message: unmergedEvidenceNote(stale) } } : {}, ...await intakeProjectModel(ctx, signal, t02), ...await intakeDeps(ctx, signal, testmap.runners), zero_baseline: await probeZeroChecks(ctx.repoDir, testmap.tests, signal), hidden_cfg: (() => {
+    try {
+      return hiddenRunnerConfigs(ctx.repoDir);
+    } catch {
+      return null;
+    }
+  })(), repomap_ref: repomapRef, testmap, already_satisfied: false };
   if (speedEnabled())
     deferAlreadyDone(ctx, signal, task, repoMap, testmap, (a) => {
       if (unmergedEvidence(ctx.repoDir, a.paths, startBranch))
@@ -77588,6 +77692,7 @@ var init_intake = __esm(() => {
   init_seal();
   init_preexisting_dirty();
   init_safe_git();
+  init_runner_config();
   init_repo_profile();
   stage8 = {
     name: "intake",
@@ -78088,7 +78193,7 @@ __export(exports_dashboard, {
   modernizeRoute: () => modernizeRoute,
   listModernizeIds: () => listModernizeIds
 });
-import { existsSync as existsSync86, readdirSync as readdirSync39 } from "fs";
+import { existsSync as existsSync86, readdirSync as readdirSync40 } from "fs";
 import { join as join123 } from "path";
 function modernizeDir(repoDir) {
   return join123(repoDir, ".loki", "modernize");
@@ -78097,7 +78202,7 @@ function listModernizeIds(repoDir) {
   const dir = modernizeDir(repoDir);
   if (!existsSync86(dir))
     return [];
-  return readdirSync39(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+  return readdirSync40(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
 }
 function summarizeModernize(repoDir, mid) {
   const events2 = readModernizeEvents(repoDir, mid);
@@ -78717,7 +78822,7 @@ var init_codemod = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/modernize/oracle/seal.ts
-import { createHash as createHash35 } from "crypto";
+import { createHash as createHash36 } from "crypto";
 import { existsSync as existsSync87, mkdirSync as mkdirSync67, readFileSync as readFileSync109, writeFileSync as writeFileSync63 } from "fs";
 import { join as join126 } from "path";
 function normalizersSha(n10) {
@@ -78853,7 +78958,7 @@ function verifySeal(repoDir, mid, unit) {
   }
   return { ok: true };
 }
-var sha2564 = (s) => createHash35("sha256").update(s).digest("hex"), DEFAULT_NORMALIZERS, HELD_OUT_FRACTION = 0.2, COVERAGE_FLOOR_PCT = 80, MIN_CASES_FOR_HELD_OUT = 2;
+var sha2564 = (s) => createHash36("sha256").update(s).digest("hex"), DEFAULT_NORMALIZERS, HELD_OUT_FRACTION = 0.2, COVERAGE_FLOOR_PCT = 80, MIN_CASES_FOR_HELD_OUT = 2;
 var init_seal2 = __esm(() => {
   init_holdout();
   init_log();
@@ -80078,8 +80183,8 @@ var init_presealed_wall = __esm(() => {
 
 // ../../loki-ts/src/engine10/modernize/unit.ts
 import { spawnSync as spawnSync20 } from "child_process";
-import { createHash as createHash36 } from "crypto";
-import { lstatSync as lstatSync30, readFileSync as readFileSync115, readdirSync as readdirSync40, readlinkSync as readlinkSync7, realpathSync as realpathSync34, rmSync as rmSync37 } from "fs";
+import { createHash as createHash37 } from "crypto";
+import { lstatSync as lstatSync30, readFileSync as readFileSync115, readdirSync as readdirSync41, readlinkSync as readlinkSync7, realpathSync as realpathSync34, rmSync as rmSync37 } from "fs";
 import { tmpdir as tmpdir23 } from "os";
 import { join as join132, sep as sep21 } from "path";
 function isSealedName(rel) {
@@ -80089,7 +80194,7 @@ function purgePycache(dir) {
   const walk = (d) => {
     let ents;
     try {
-      ents = readdirSync40(d, { withFileTypes: true });
+      ents = readdirSync41(d, { withFileTypes: true });
     } catch {
       return;
     }
@@ -80120,7 +80225,7 @@ function outsideTargetDigest(dir, full) {
   }
   if (real3 === root || real3.startsWith(root + sep21))
     return "inside";
-  const h10 = createHash36("sha256");
+  const h10 = createHash37("sha256");
   let budget = 20000;
   const walk = (p) => {
     if (budget-- <= 0) {
@@ -80145,7 +80250,7 @@ function outsideTargetDigest(dir, full) {
     if (st2.isDirectory()) {
       let names = [];
       try {
-        names = readdirSync40(p).sort();
+        names = readdirSync41(p).sort();
       } catch {
         h10.update("unreadable");
       }
@@ -80172,7 +80277,7 @@ function conformanceHashes(dir) {
   const walk = (sub2, inSkip) => {
     let ents;
     try {
-      ents = readdirSync40(join132(dir, sub2), { withFileTypes: true });
+      ents = readdirSync41(join132(dir, sub2), { withFileTypes: true });
     } catch {
       return;
     }
@@ -80214,7 +80319,7 @@ function conformanceHashes(dir) {
     } catch {
       continue;
     }
-    out3[rel] = createHash36("sha256").update(data).digest("hex");
+    out3[rel] = createHash37("sha256").update(data).digest("hex");
   }
   return out3;
 }
@@ -80755,7 +80860,7 @@ var init_modernize_unit = __esm(() => {
 });
 
 // ../../loki-ts/src/util/modernize_coordinator.ts
-import { createHash as createHash37 } from "crypto";
+import { createHash as createHash38 } from "crypto";
 import { existsSync as existsSync92, mkdtempSync as mkdtempSync20, readFileSync as readFileSync118, rmSync as rmSync39 } from "fs";
 import { tmpdir as tmpdir25 } from "os";
 import { join as join135 } from "path";
@@ -81012,7 +81117,7 @@ function productionWaveDeps(o) {
     }
   };
 }
-var productionReslice, sha2565 = (p) => existsSync92(p) ? createHash37("sha256").update(readFileSync118(p)).digest("hex") : "n/a", MULTI_FILE_REASON = "multi-file unit: capture not supported (founder default)";
+var productionReslice, sha2565 = (p) => existsSync92(p) ? createHash38("sha256").update(readFileSync118(p)).digest("hex") : "n/a", MULTI_FILE_REASON = "multi-file unit: capture not supported (founder default)";
 var init_modernize_coordinator = __esm(() => {
   init_codemod();
   init_search();
@@ -81265,7 +81370,7 @@ Targets: ${TARGETS2.join(", ")}
 });
 
 // ../../loki-ts/src/contrib/sarif.ts
-import { createHash as createHash38 } from "crypto";
+import { createHash as createHash39 } from "crypto";
 function sarifUri(file, repoRoot2) {
   let p = file.replace(/\\/g, "/");
   if (repoRoot2) {
@@ -81326,7 +81431,7 @@ function toSarif(findings, toolVersion2 = "0.0.0", repoRoot2) {
     ]
   };
 }
-var RULES2, SCHEMA = "https://json.schemastore.org/sarif-2.1.0.json", sha6 = (s) => createHash38("sha256").update(s).digest("hex");
+var RULES2, SCHEMA = "https://json.schemastore.org/sarif-2.1.0.json", sha6 = (s) => createHash39("sha256").update(s).digest("hex");
 var init_sarif = __esm(() => {
   init_redact();
   RULES2 = {
@@ -81576,7 +81681,7 @@ function outcomeOf(verdict, capHit, stop, tampered = false, sealed = false) {
 function reasonOf(ev2, tampered, stop, outcome) {
   const done = (s) => ev2.findLast((e10) => e10.type === "stage.completed" && e10.stage === s)?.data, v3 = done("verify"), checks = v3?.checks ?? [], pre2 = v3?.pre_red_checks ?? [], bad = checks.find((c) => isBlockingFail(c, pre2));
   const authCause = stop === "fatal:auth" ? String(ev2.findLast((e10) => e10.type === "session.ended" && typeof e10.data?.provider_error === "string" && e10.data.provider_error !== "")?.data.provider_error ?? "") : "";
-  const r = EXIT[outcome] === 0 ? "" : tampered ? "event log modified outside the engine" : outcome === "CANCELLED" ? `cancelled by signal; usage recorded so far is kept; next loki start offers to start fresh (any work is on loki/${ev2[0]?.run ?? "<id>"})` : stop?.startsWith("fatal:") ? { "fatal:quota_exhausted": "provider credit exhausted", "fatal:auth": `provider authentication failed${authCause ? `: ${authCause}` : ""}` }[stop] ?? stop : outcome === "BLOCKED" ? `spec conflict: ${conflictReasonOf(ev2) ?? "see the receipt"}` : stop === "stalled" ? "stalled: same failure 3 times" : bad ? `${bad.name} failed${bad.first_error ? `: ${bad.first_error}` : ""}${bad.anchor ? ` (at ${bad.anchor})` : ""}` : (ev2.some((e10) => e10.type === "cap.hit") ? "cost/time cap reached" : undefined) ?? ev2.find((e10) => e10.type === "stage.failed")?.data.reason ?? (v3 && !checks.length ? "no tests to run" : stop ?? (ev2.some((e10) => e10.type === "receipt.sealed") ? "" : "engine ended before sealing a receipt"));
+  const r = EXIT[outcome] === 0 ? "" : tampered ? "event log modified outside the engine" : outcome === "CANCELLED" ? `cancelled by signal; usage recorded so far is kept; next loki start offers to ${ev2.some((e10) => e10.type === "stage.completed" && e10.stage === "intake") ? "resume it (settled stages are kept) or start fresh" : "start fresh"} (any work is on loki/${ev2[0]?.run ?? "<id>"})` : stop?.startsWith("fatal:") ? { "fatal:quota_exhausted": "provider credit exhausted", "fatal:auth": `provider authentication failed${authCause ? `: ${authCause}` : ""}` }[stop] ?? stop : outcome === "BLOCKED" ? `spec conflict: ${conflictReasonOf(ev2) ?? "see the receipt"}` : stop === "stalled" ? "stalled: same failure 3 times" : bad ? `${bad.name} failed${bad.first_error ? `: ${bad.first_error}` : ""}${bad.anchor ? ` (at ${bad.anchor})` : ""}` : (ev2.some((e10) => e10.type === "cap.hit") ? "cost/time cap reached" : undefined) ?? ev2.find((e10) => e10.type === "stage.failed")?.data.reason ?? (v3 && !checks.length ? "no tests to run" : stop ?? (ev2.some((e10) => e10.type === "receipt.sealed") ? "" : "engine ended before sealing a receipt"));
   return plainLine(r) || undefined;
 }
 function preModelTiming(events2, startMs) {
@@ -81818,7 +81923,7 @@ var init_undo = __esm(() => {
 });
 
 // ../../loki-ts/src/commands/run_status.ts
-import { existsSync as existsSync95, readdirSync as readdirSync41, readFileSync as readFileSync121, statSync as statSync37 } from "fs";
+import { existsSync as existsSync95, readdirSync as readdirSync42, readFileSync as readFileSync121, statSync as statSync37 } from "fs";
 import { basename as basename35, dirname as dirname53, join as join137, resolve as resolve39 } from "path";
 function runsRoot(env, repoDir) {
   return env.LOKI_DIR ? join137(resolve39(repoDir, env.LOKI_DIR), "runs") : join137(repoDir, ".loki", "runs");
@@ -81826,7 +81931,7 @@ function runsRoot(env, repoDir) {
 function listRunIds(root) {
   if (!existsSync95(root))
     return [];
-  return readdirSync41(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+  return readdirSync42(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
 }
 function latestRunId(root) {
   const ids = listRunIds(root);
@@ -82050,7 +82155,7 @@ __export(exports_verify_cmd, {
 });
 import { existsSync as existsSync97, readFileSync as readFileSync123, renameSync as renameSync24, statSync as statSync38, writeFileSync as writeFileSync70 } from "fs";
 import { basename as basename37, dirname as dirname55, join as join139 } from "path";
-import { createHash as createHash39, verify as verify5 } from "crypto";
+import { createHash as createHash40, verify as verify5 } from "crypto";
 function checkAttestation(jwt, expectedHash, given) {
   const bad = (reason) => ({ status: "tampered", reason });
   const [h10, p, s, ...rest] = jwt.split(".");
@@ -82081,7 +82186,7 @@ function wallTamperProblem(receiptPath, receipt) {
     const copy = join139(wallDir, basename37(f.path));
     let cur;
     try {
-      cur = createHash39("sha256").update(readFileSync123(copy)).digest("hex");
+      cur = createHash40("sha256").update(readFileSync123(copy)).digest("hex");
     } catch {
       if (haveWallDir)
         return `sealed Wall file ${basename37(f.path)} is missing from the run's wall directory: it was deleted after the seal`;
@@ -82103,7 +82208,7 @@ function checkEventLog(receiptPath, receipt) {
   }
   if (typeof bound !== "string")
     return null;
-  if (bound === createHash39("sha256").digest("hex")) {
+  if (bound === createHash40("sha256").digest("hex")) {
     const st2 = receipt["time"]?.stages;
     const claims = st2 !== null && typeof st2 === "object" && Object.keys(st2).length > 0;
     return claims ? "the receipt records stages but binds the empty-log hash, so no events.jsonl can back it (missing, empty or non-empty); the receipt is forged or was sealed without a log. Re-run the task to produce a fresh receipt" : null;
@@ -82122,7 +82227,7 @@ function checkEventLog(receiptPath, receipt) {
     return "events.jsonl has bytes the engine never writes (a blank line or stray whitespace); it was appended to after the seal";
   if (events2.some((e10) => e10.type === "tamper.detected"))
     return "the supervisor detected events.jsonl being modified during the run";
-  const h10 = createHash39("sha256");
+  const h10 = createHash40("sha256");
   for (const l of lines2) {
     if (h10.copy().digest("hex") === bound)
       return null;
@@ -82151,7 +82256,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
   const lines2 = readFileSync123(path, "utf8").split(`
-`).filter((l) => l.trim() !== ""), sha7 = createHash39("sha256").update(lines2.slice(0, done + 1).join(`
+`).filter((l) => l.trim() !== ""), sha7 = createHash40("sha256").update(lines2.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
   const pub = d["kid"] === kid ? pubFor(kid, given) : undefined;