mu-agent 0.1.4 → 0.1.7

package/judge/dist/kyrn-judge.js

@@ -53,7 +53,7 @@ var pi_host_modules_exports = {};
 __export(pi_host_modules_exports, {
   VIRTUAL_MODULES: () => VIRTUAL_MODULES
 });
-import { VIRTUAL_MODULES } from "../../dist/bundle/chunks/virtual-modules-MYFARBUK.js";
+import { VIRTUAL_MODULES } from "../../dist/bundle/chunks/virtual-modules-V7SXVVLP.js";
 var init_pi_host_modules = __esm({
   "pi-host-modules:pi-host-modules"() {
     "use strict";
@@ -2730,9 +2730,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve13, reject) => {
+          return new Promise((resolve15, reject) => {
             this.close((err, data) => {
-              return err ? reject(err) : resolve13(data);
+              return err ? reject(err) : resolve15(data);
             });
           });
         }
@@ -2770,9 +2770,9 @@ var require_dispatcher_base = __commonJS({
           err = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve13, reject) => {
+          return new Promise((resolve15, reject) => {
             this.destroy(err, (err2, data) => {
-              return err2 ? reject(err2) : resolve13(data);
+              return err2 ? reject(err2) : resolve15(data);
             });
           });
         }
@@ -6638,7 +6638,7 @@ var require_client_h1 = __commonJS({
       kHTTPContext,
       kClosed
     } = require_symbols();
-    var constants3 = require_constants2();
+    var constants4 = require_constants2();
     var EMPTY_BUF = Buffer.alloc(0);
     var FastBuffer = Buffer[Symbol.species];
     var removeAllListeners = util.removeAllListeners;
@@ -6769,7 +6769,7 @@ var require_client_h1 = __commonJS({
          */
       constructor(client, socket, { exports: exports2 }) {
         this.llhttp = exports2;
-        this.ptr = this.llhttp.llhttp_alloc(constants3.TYPE.RESPONSE);
+        this.ptr = this.llhttp.llhttp_alloc(constants4.TYPE.RESPONSE);
         this.client = client;
         this.socket = socket;
         this.timeout = null;
@@ -6868,11 +6868,11 @@ var require_client_h1 = __commonJS({
             currentParser = null;
             currentBufferRef = null;
           }
-          if (ret !== constants3.ERROR.OK) {
+          if (ret !== constants4.ERROR.OK) {
             const data = chunk.subarray(llhttp.llhttp_get_error_pos(this.ptr) - currentBufferPtr);
-            if (ret === constants3.ERROR.PAUSED_UPGRADE) {
+            if (ret === constants4.ERROR.PAUSED_UPGRADE) {
               this.onUpgrade(data);
-            } else if (ret === constants3.ERROR.PAUSED) {
+            } else if (ret === constants4.ERROR.PAUSED) {
               this.paused = true;
               socket.unshift(data);
             } else {
@@ -6907,10 +6907,10 @@ var require_client_h1 = __commonJS({
         } finally {
           currentParser = null;
         }
-        if (ret === constants3.ERROR.OK) {
+        if (ret === constants4.ERROR.OK) {
           return null;
         }
-        if (ret === constants3.ERROR.PAUSED || ret === constants3.ERROR.PAUSED_UPGRADE) {
+        if (ret === constants4.ERROR.PAUSED || ret === constants4.ERROR.PAUSED_UPGRADE) {
           this.paused = true;
           return null;
         }
@@ -6927,7 +6927,7 @@ var require_client_h1 = __commonJS({
           const len = new Uint8Array(llhttp.memory.buffer, ptr).indexOf(0);
           message = "Response does not match the HTTP/1.1 protocol (" + Buffer.from(llhttp.memory.buffer, ptr, len).toString() + ")";
         }
-        return new HTTPParserError(message, constants3.ERROR[ret], data);
+        return new HTTPParserError(message, constants4.ERROR[ret], data);
       }
       destroy() {
         assert(currentParser === null);
@@ -7142,7 +7142,7 @@ var require_client_h1 = __commonJS({
           socket[kBlocking] = false;
           client[kResume]();
         }
-        return pause ? constants3.ERROR.PAUSED : 0;
+        return pause ? constants4.ERROR.PAUSED : 0;
       }
       /**
        * @param {Buffer} buf
@@ -7168,7 +7168,7 @@ var require_client_h1 = __commonJS({
         }
         this.bytesRead += buf.length;
         if (request.onResponseData(buf) === false) {
-          return constants3.ERROR.PAUSED;
+          return constants4.ERROR.PAUSED;
         }
         return 0;
       }
@@ -7208,13 +7208,13 @@ var require_client_h1 = __commonJS({
         if (socket[kWriting]) {
           assert(client[kRunning] === 0);
           util.destroy(socket, new InformationalError("reset"));
-          return constants3.ERROR.PAUSED;
+          return constants4.ERROR.PAUSED;
         } else if (!shouldKeepAlive) {
           util.destroy(socket, new InformationalError("reset"));
-          return constants3.ERROR.PAUSED;
+          return constants4.ERROR.PAUSED;
         } else if (socket[kReset] && client[kRunning] === 0) {
           util.destroy(socket, new InformationalError("reset"));
-          return constants3.ERROR.PAUSED;
+          return constants4.ERROR.PAUSED;
         } else if (client[kPipelining] == null || client[kPipelining] === 1) {
           setImmediate(client[kResume]);
         } else {
@@ -7729,12 +7729,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve13, reject) => {
+      const waitForDrain = () => new Promise((resolve15, reject) => {
         assert(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve13;
+          callback = resolve15;
         }
       });
       socket.on("close", onDrain).on("drain", onDrain);
@@ -9117,12 +9117,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve13, reject) => {
+      const waitForDrain = () => new Promise((resolve15, reject) => {
         assert(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve13;
+          callback = resolve15;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -9491,16 +9491,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       [kClose]() {
-        return new Promise((resolve13) => {
+        return new Promise((resolve15) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve13;
+            this[kClosedResolve] = resolve15;
           } else {
-            resolve13(null);
+            resolve15(null);
           }
         });
       }
       [kDestroy](err) {
-        return new Promise((resolve13) => {
+        return new Promise((resolve15) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i2 = 0; i2 < requests.length; i2++) {
             const request = requests[i2];
@@ -9513,7 +9513,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve13(null);
+            resolve15(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err, callback);
@@ -9926,8 +9926,8 @@ var require_pool_base = __commonJS({
           }
           return Promise.all(closeAll);
         } else {
-          return new Promise((resolve13) => {
-            this[kClosedResolve] = resolve13;
+          return new Promise((resolve15) => {
+            this[kClosedResolve] = resolve15;
           });
         }
       }
@@ -12590,7 +12590,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return Promise.resolve(null);
         }
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           if (this[kContentLength] && this[kContentLength] > limit || this[kBytesRead] > limit) {
             this.destroy(new AbortError2());
           }
@@ -12604,11 +12604,11 @@ var require_readable = __commonJS({
               if (signal.aborted) {
                 reject(signal.reason ?? new AbortError2());
               } else {
-                resolve13(null);
+                resolve15(null);
               }
             });
           } else {
-            this.on("close", resolve13);
+            this.on("close", resolve15);
           }
           this.on("error", noop2).on("data", () => {
             if (this[kBytesRead] > limit) {
@@ -12636,7 +12636,7 @@ var require_readable = __commonJS({
     }
     function consume(stream2, type) {
       assert(!stream2[kConsume]);
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         if (isUnusable(stream2)) {
           const rState = stream2._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -12651,7 +12651,7 @@ var require_readable = __commonJS({
             stream2[kConsume] = {
               type,
               stream: stream2,
-              resolve: resolve13,
+              resolve: resolve15,
               reject,
               length: 0,
               body: []
@@ -12729,18 +12729,18 @@ var require_readable = __commonJS({
       return buffer;
     }
     function consumeEnd(consume2, encoding) {
-      const { type, body, resolve: resolve13, stream: stream2, length } = consume2;
+      const { type, body, resolve: resolve15, stream: stream2, length } = consume2;
       try {
         if (type === "text") {
-          resolve13(chunksDecode(body, length, encoding));
+          resolve15(chunksDecode(body, length, encoding));
         } else if (type === "json") {
-          resolve13(JSON.parse(chunksDecode(body, length, encoding)));
+          resolve15(JSON.parse(chunksDecode(body, length, encoding)));
         } else if (type === "arrayBuffer") {
-          resolve13(chunksConcat(body, length).buffer);
+          resolve15(chunksConcat(body, length).buffer);
         } else if (type === "blob") {
-          resolve13(new Blob(body, { type: stream2[kContentType] }));
+          resolve15(new Blob(body, { type: stream2[kContentType] }));
         } else if (type === "bytes") {
-          resolve13(chunksConcat(body, length));
+          resolve15(chunksConcat(body, length));
         }
         consumeFinish(consume2);
       } catch (err) {
@@ -12959,9 +12959,9 @@ var require_api_request = __commonJS({
     };
     function request(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           request.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve13(data);
+            return err ? reject(err) : resolve15(data);
           });
         });
       }
@@ -13222,9 +13222,9 @@ var require_api_stream = __commonJS({
     };
     function stream2(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           stream2.call(this, opts, factory, (err, data) => {
-            return err ? reject(err) : resolve13(data);
+            return err ? reject(err) : resolve15(data);
           });
         });
       }
@@ -13524,9 +13524,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           upgrade.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve13(data);
+            return err ? reject(err) : resolve15(data);
           });
         });
       }
@@ -13620,9 +13620,9 @@ var require_api_connect = __commonJS({
     };
     function connect2(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           connect2.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve13(data);
+            return err ? reject(err) : resolve15(data);
           });
         });
       }
@@ -15089,7 +15089,7 @@ var require_snapshot_recorder = __commonJS({
   "node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
     var { writeFile: writeFile7, readFile: readFile6, mkdir: mkdir2 } = __require("node:fs/promises");
-    var { dirname: dirname9, resolve: resolve13 } = __require("node:path");
+    var { dirname: dirname10, resolve: resolve15 } = __require("node:path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -15305,7 +15305,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile6(resolve13(path), "utf8");
+          const data = await readFile6(resolve15(path), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -15334,8 +15334,8 @@ var require_snapshot_recorder = __commonJS({
         if (!path) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve13(path);
-        await mkdir2(dirname9(resolvedPath), { recursive: true });
+        const resolvedPath = resolve15(path);
+        await mkdir2(dirname10(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash, snapshot2]) => ({
           hash,
           snapshot: snapshot2
@@ -16279,8 +16279,8 @@ var require_dump = __commonJS({
 var require_dns = __commonJS({
   "node_modules/undici/lib/interceptor/dns.js"(exports, module) {
     "use strict";
-    var { isIP: isIP3 } = __require("node:net");
-    var { lookup } = __require("node:dns");
+    var { isIP: isIP4 } = __require("node:net");
+    var { lookup: lookup2 } = __require("node:dns");
     var DecoratorHandler = require_decorator_handler();
     var { InvalidArgumentError, InformationalError } = require_errors();
     var { kRequestOrigin } = require_symbols();
@@ -16471,7 +16471,7 @@ var require_dns = __commonJS({
         }
       }
       #defaultLookup(origin, opts, cb) {
-        lookup(
+        lookup2(
           origin.hostname,
           {
             all: true,
@@ -16690,7 +16690,7 @@ var require_dns = __commonJS({
             return dispatch(origDispatchOpts, handler);
           }
           const origin = origDispatchOpts.origin.constructor === URL ? origDispatchOpts.origin : new URL(origDispatchOpts.origin);
-          if (isIP3(origin.hostname) !== 0) {
+          if (isIP4(origin.hostname) !== 0) {
             return dispatch(origDispatchOpts, handler);
           }
           instance.runLookup(origin, origDispatchOpts, (err, newOrigin) => {
@@ -20341,10 +20341,10 @@ var require_headers = __commonJS({
         const lowercaseName = isLowerCase ? name : name.toLowerCase();
         const exists = this.headersMap.get(lowercaseName);
         if (exists) {
-          const delimiter = lowercaseName === "cookie" ? "; " : ", ";
+          const delimiter2 = lowercaseName === "cookie" ? "; " : ", ";
           this.headersMap.set(lowercaseName, {
             name: exists.name,
-            value: `${exists.value}${delimiter}${value}`
+            value: `${exists.value}${delimiter2}${value}`
           });
         } else {
           this.headersMap.set(lowercaseName, { name, value });
@@ -22998,7 +22998,7 @@ var require_fetch = __commonJS({
         const hasTrailingQuestionMark = url.search.length === 0 && url.href[url.href.length - url.hash.length - 1] === "?";
         return dispatchWithProtocolPreference(body);
         function dispatchWithProtocolPreference(body2, allowH2) {
-          return new Promise((resolve13, reject) => agent.dispatch(
+          return new Promise((resolve15, reject) => agent.dispatch(
             {
               path: hasTrailingQuestionMark ? `${path}?` : path,
               origin: url.origin,
@@ -23081,7 +23081,7 @@ var require_fetch = __commonJS({
                   }
                 }
                 const onError = (err) => this.onResponseError(controller, err);
-                resolve13({
+                resolve15({
                   status,
                   statusText,
                   headersList,
@@ -23114,7 +23114,7 @@ var require_fetch = __commonJS({
                   fetchParams.controller.off("terminated", this.abort);
                 }
                 if (request.mode === "websocket" && allowH2 !== false && error?.code === "UND_ERR_INFO" && error?.message === "HTTP/2: Extended CONNECT protocol not supported by server") {
-                  resolve13(dispatchWithProtocolPreference(body2, false));
+                  resolve15(dispatchWithProtocolPreference(body2, false));
                   return;
                 }
                 this.body?.destroy(error);
@@ -23131,7 +23131,7 @@ var require_fetch = __commonJS({
                 const rawHeaders = controller?.rawHeaders ?? [];
                 const headersList = new HeadersList();
                 appendHeadersListFromResponseHeaders(headersList, headers, rawHeaders);
-                resolve13({
+                resolve15({
                   status,
                   statusText: STATUS_CODES[status],
                   headersList,
@@ -27747,7 +27747,7 @@ var require_p_retry = __commonJS({
       return error;
     };
     var isNetworkError = (errorMessage2) => networkErrorMsgs.includes(errorMessage2);
-    var pRetry2 = (input, options) => new Promise((resolve13, reject) => {
+    var pRetry2 = (input, options) => new Promise((resolve15, reject) => {
       options = {
         onFailedAttempt: () => {
         },
@@ -27757,7 +27757,7 @@ var require_p_retry = __commonJS({
       const operation = retry.operation(options);
       operation.attempt(async (attemptNumber) => {
         try {
-          resolve13(await input(attemptNumber));
+          resolve15(await input(attemptNumber));
         } catch (error) {
           if (!(error instanceof Error)) {
             reject(new TypeError(`Non-error was thrown: "${error}". You should only throw errors.`));
@@ -28293,8 +28293,8 @@ var require_retry4 = __commonJS({
       }
       const delay = getNextRetryDelay(config);
       err.config.retryConfig.currentRetryAttempt += 1;
-      const backoff = config.retryBackoff ? config.retryBackoff(err, delay) : new Promise((resolve13) => {
-        setTimeout(resolve13, delay);
+      const backoff = config.retryBackoff ? config.retryBackoff(err, delay) : new Promise((resolve15) => {
+        setTimeout(resolve15, delay);
       });
       if (config.onRetryAttempt) {
         await config.onRetryAttempt(err);
@@ -28573,8 +28573,8 @@ var require_common2 = __commonJS({
         }
         return debug;
       }
-      function extend(namespace, delimiter) {
-        const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
+      function extend(namespace, delimiter2) {
+        const newDebug = createDebug(this.namespace + (typeof delimiter2 === "undefined" ? ":" : delimiter2) + namespace);
         newDebug.log = this.log;
         return newDebug;
       }
@@ -29075,8 +29075,8 @@ var require_helpers = __commonJS({
     function req(url, opts = {}) {
       const href = typeof url === "string" ? url : url.href;
       const req2 = (href.startsWith("https:") ? https2 : http3).request(url, opts);
-      const promise = new Promise((resolve13, reject) => {
-        req2.once("response", resolve13).once("error", reject).end();
+      const promise = new Promise((resolve15, reject) => {
+        req2.once("response", resolve15).once("error", reject).end();
       });
       req2.then = promise.then.bind(promise);
       return req2;
@@ -29253,7 +29253,7 @@ var require_parse_proxy_response = __commonJS({
     var debug_1 = __importDefault(require_src());
     var debug = (0, debug_1.default)("https-proxy-agent:parse-proxy-response");
     function parseProxyResponse(socket) {
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         let buffersLength = 0;
         const buffers = [];
         function read() {
@@ -29319,7 +29319,7 @@ var require_parse_proxy_response = __commonJS({
           }
           debug("got proxy server response: %o %o", firstLine4, headers);
           cleanup();
-          resolve13({
+          resolve15({
             connect: {
               statusCode,
               statusText,
@@ -29563,7 +29563,7 @@ var require_ponyfill_es2018 = __commonJS({
         return new originalPromise(executor);
       }
       function promiseResolvedWith(value) {
-        return newPromise((resolve13) => resolve13(value));
+        return newPromise((resolve15) => resolve15(value));
       }
       function promiseRejectedWith(reason) {
         return originalPromiseReject(reason);
@@ -29733,8 +29733,8 @@ var require_ponyfill_es2018 = __commonJS({
         return new TypeError("Cannot " + name + " a stream using a released reader");
       }
       function defaultReaderClosedPromiseInitialize(reader) {
-        reader._closedPromise = newPromise((resolve13, reject) => {
-          reader._closedPromise_resolve = resolve13;
+        reader._closedPromise = newPromise((resolve15, reject) => {
+          reader._closedPromise_resolve = resolve15;
           reader._closedPromise_reject = reject;
         });
       }
@@ -29908,8 +29908,8 @@ var require_ponyfill_es2018 = __commonJS({
           }
           let resolvePromise;
           let rejectPromise;
-          const promise = newPromise((resolve13, reject) => {
-            resolvePromise = resolve13;
+          const promise = newPromise((resolve15, reject) => {
+            resolvePromise = resolve15;
             rejectPromise = reject;
           });
           const readRequest = {
@@ -30014,8 +30014,8 @@ var require_ponyfill_es2018 = __commonJS({
           const reader = this._reader;
           let resolvePromise;
           let rejectPromise;
-          const promise = newPromise((resolve13, reject) => {
-            resolvePromise = resolve13;
+          const promise = newPromise((resolve15, reject) => {
+            resolvePromise = resolve15;
             rejectPromise = reject;
           });
           const readRequest = {
@@ -31034,8 +31034,8 @@ var require_ponyfill_es2018 = __commonJS({
           }
           let resolvePromise;
           let rejectPromise;
-          const promise = newPromise((resolve13, reject) => {
-            resolvePromise = resolve13;
+          const promise = newPromise((resolve15, reject) => {
+            resolvePromise = resolve15;
             rejectPromise = reject;
           });
           const readIntoRequest = {
@@ -31347,10 +31347,10 @@ var require_ponyfill_es2018 = __commonJS({
           wasAlreadyErroring = true;
           reason = void 0;
         }
-        const promise = newPromise((resolve13, reject) => {
+        const promise = newPromise((resolve15, reject) => {
           stream2._pendingAbortRequest = {
             _promise: void 0,
-            _resolve: resolve13,
+            _resolve: resolve15,
             _reject: reject,
             _reason: reason,
             _wasAlreadyErroring: wasAlreadyErroring
@@ -31367,9 +31367,9 @@ var require_ponyfill_es2018 = __commonJS({
         if (state === "closed" || state === "errored") {
           return promiseRejectedWith(new TypeError(`The stream (in ${state} state) is not in the writable state and cannot be closed`));
         }
-        const promise = newPromise((resolve13, reject) => {
+        const promise = newPromise((resolve15, reject) => {
           const closeRequest = {
-            _resolve: resolve13,
+            _resolve: resolve15,
             _reject: reject
           };
           stream2._closeRequest = closeRequest;
@@ -31382,9 +31382,9 @@ var require_ponyfill_es2018 = __commonJS({
         return promise;
       }
       function WritableStreamAddWriteRequest(stream2) {
-        const promise = newPromise((resolve13, reject) => {
+        const promise = newPromise((resolve15, reject) => {
           const writeRequest = {
-            _resolve: resolve13,
+            _resolve: resolve15,
             _reject: reject
           };
           stream2._writeRequests.push(writeRequest);
@@ -32000,8 +32000,8 @@ var require_ponyfill_es2018 = __commonJS({
         return new TypeError("Cannot " + name + " a stream using a released writer");
       }
       function defaultWriterClosedPromiseInitialize(writer) {
-        writer._closedPromise = newPromise((resolve13, reject) => {
-          writer._closedPromise_resolve = resolve13;
+        writer._closedPromise = newPromise((resolve15, reject) => {
+          writer._closedPromise_resolve = resolve15;
           writer._closedPromise_reject = reject;
           writer._closedPromiseState = "pending";
         });
@@ -32037,8 +32037,8 @@ var require_ponyfill_es2018 = __commonJS({
         writer._closedPromiseState = "resolved";
       }
       function defaultWriterReadyPromiseInitialize(writer) {
-        writer._readyPromise = newPromise((resolve13, reject) => {
-          writer._readyPromise_resolve = resolve13;
+        writer._readyPromise = newPromise((resolve15, reject) => {
+          writer._readyPromise_resolve = resolve15;
           writer._readyPromise_reject = reject;
         });
         writer._readyPromiseState = "pending";
@@ -32125,7 +32125,7 @@ var require_ponyfill_es2018 = __commonJS({
         source._disturbed = true;
         let shuttingDown = false;
         let currentWrite = promiseResolvedWith(void 0);
-        return newPromise((resolve13, reject) => {
+        return newPromise((resolve15, reject) => {
           let abortAlgorithm;
           if (signal !== void 0) {
             abortAlgorithm = () => {
@@ -32270,7 +32270,7 @@ var require_ponyfill_es2018 = __commonJS({
             if (isError) {
               reject(error);
             } else {
-              resolve13(void 0);
+              resolve15(void 0);
             }
             return null;
           }
@@ -32551,8 +32551,8 @@ var require_ponyfill_es2018 = __commonJS({
         let branch1;
         let branch2;
         let resolveCancelPromise;
-        const cancelPromise = newPromise((resolve13) => {
-          resolveCancelPromise = resolve13;
+        const cancelPromise = newPromise((resolve15) => {
+          resolveCancelPromise = resolve15;
         });
         function pullAlgorithm() {
           if (reading) {
@@ -32643,8 +32643,8 @@ var require_ponyfill_es2018 = __commonJS({
         let branch1;
         let branch2;
         let resolveCancelPromise;
-        const cancelPromise = newPromise((resolve13) => {
-          resolveCancelPromise = resolve13;
+        const cancelPromise = newPromise((resolve15) => {
+          resolveCancelPromise = resolve15;
         });
         function forwardReaderError(thisReader) {
           uponRejection(thisReader._closedPromise, (r2) => {
@@ -33424,8 +33424,8 @@ var require_ponyfill_es2018 = __commonJS({
           const writableHighWaterMark = ExtractHighWaterMark(writableStrategy, 1);
           const writableSizeAlgorithm = ExtractSizeAlgorithm(writableStrategy);
           let startPromise_resolve;
-          const startPromise = newPromise((resolve13) => {
-            startPromise_resolve = resolve13;
+          const startPromise = newPromise((resolve15) => {
+            startPromise_resolve = resolve15;
           });
           InitializeTransformStream(this, startPromise, writableHighWaterMark, writableSizeAlgorithm, readableHighWaterMark, readableSizeAlgorithm);
           SetUpTransformStreamDefaultControllerFromTransformer(this, transformer);
@@ -33518,8 +33518,8 @@ var require_ponyfill_es2018 = __commonJS({
         if (stream2._backpressureChangePromise !== void 0) {
           stream2._backpressureChangePromise_resolve();
         }
-        stream2._backpressureChangePromise = newPromise((resolve13) => {
-          stream2._backpressureChangePromise_resolve = resolve13;
+        stream2._backpressureChangePromise = newPromise((resolve15) => {
+          stream2._backpressureChangePromise_resolve = resolve15;
         });
         stream2._backpressure = backpressure;
       }
@@ -33687,8 +33687,8 @@ var require_ponyfill_es2018 = __commonJS({
           return controller._finishPromise;
         }
         const readable = stream2._readable;
-        controller._finishPromise = newPromise((resolve13, reject) => {
-          controller._finishPromise_resolve = resolve13;
+        controller._finishPromise = newPromise((resolve15, reject) => {
+          controller._finishPromise_resolve = resolve15;
           controller._finishPromise_reject = reject;
         });
         const cancelPromise = controller._cancelAlgorithm(reason);
@@ -33714,8 +33714,8 @@ var require_ponyfill_es2018 = __commonJS({
           return controller._finishPromise;
         }
         const readable = stream2._readable;
-        controller._finishPromise = newPromise((resolve13, reject) => {
-          controller._finishPromise_resolve = resolve13;
+        controller._finishPromise = newPromise((resolve15, reject) => {
+          controller._finishPromise_resolve = resolve15;
           controller._finishPromise_reject = reject;
         });
         const flushPromise = controller._flushAlgorithm();
@@ -33745,8 +33745,8 @@ var require_ponyfill_es2018 = __commonJS({
           return controller._finishPromise;
         }
         const writable = stream2._writable;
-        controller._finishPromise = newPromise((resolve13, reject) => {
-          controller._finishPromise_resolve = resolve13;
+        controller._finishPromise = newPromise((resolve15, reject) => {
+          controller._finishPromise_resolve = resolve15;
           controller._finishPromise_reject = reject;
         });
         const cancelPromise = controller._cancelAlgorithm(reason);
@@ -34292,7 +34292,7 @@ var require_node_domexception = __commonJS({
 });
 
 // node_modules/fetch-blob/from.js
-import { statSync as statSync4, createReadStream, promises as fs } from "node:fs";
+import { statSync as statSync5, createReadStream, promises as fs } from "node:fs";
 import { basename as basename4 } from "node:path";
 var import_node_domexception, stat, blobFromSync, blobFrom, fileFrom, fileFromSync, fromBlob, fromFile, BlobDataItem;
 var init_from = __esm({
@@ -34302,10 +34302,10 @@ var init_from = __esm({
     init_file();
     init_fetch_blob();
     ({ stat } = fs);
-    blobFromSync = (path, type) => fromBlob(statSync4(path), path, type);
+    blobFromSync = (path, type) => fromBlob(statSync5(path), path, type);
     blobFrom = (path, type) => stat(path).then((stat2) => fromBlob(stat2, path, type));
     fileFrom = (path, type) => stat(path).then((stat2) => fromFile(stat2, path, type));
-    fileFromSync = (path, type) => fromFile(statSync4(path), path, type);
+    fileFromSync = (path, type) => fromFile(statSync5(path), path, type);
     fromBlob = (stat2, path, type = "") => new fetch_blob_default([new BlobDataItem({
       path,
       size: stat2.size,
@@ -35326,7 +35326,7 @@ var init_get_search = __esm({
 });
 
 // node_modules/node-fetch/src/utils/referrer.js
-import { isIP } from "node:net";
+import { isIP as isIP3 } from "node:net";
 function stripURLForUseAsAReferrer(url, originOnly = false) {
   if (url == null) {
     return "no-referrer";
@@ -35355,7 +35355,7 @@ function isOriginPotentiallyTrustworthy(url) {
     return true;
   }
   const hostIp = url.host.replace(/(^\[)|(]$)/g, "");
-  const hostIPVersion = isIP(hostIp);
+  const hostIPVersion = isIP3(hostIp);
   if (hostIPVersion === 4 && /^127\./.test(hostIp)) {
     return true;
   }
@@ -35715,7 +35715,7 @@ import zlib from "node:zlib";
 import Stream2, { PassThrough as PassThrough2, pipeline as pump } from "node:stream";
 import { Buffer as Buffer3 } from "node:buffer";
 async function fetch3(url, options_) {
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve15, reject) => {
     const request = new Request2(url, options_);
     const { parsedURL, options } = getNodeRequestOptions(request);
     if (!supportedSchemas.has(parsedURL.protocol)) {
@@ -35724,7 +35724,7 @@ async function fetch3(url, options_) {
     if (parsedURL.protocol === "data:") {
       const data = dist_default(request.url);
       const response2 = new Response2(data, { headers: { "Content-Type": data.typeFull } });
-      resolve13(response2);
+      resolve15(response2);
       return;
     }
     const send = (parsedURL.protocol === "https:" ? https : http2).request;
@@ -35846,7 +35846,7 @@ async function fetch3(url, options_) {
             if (responseReferrerPolicy) {
               requestOptions.referrerPolicy = responseReferrerPolicy;
             }
-            resolve13(fetch3(new Request2(locationURL, requestOptions)));
+            resolve15(fetch3(new Request2(locationURL, requestOptions)));
             finalize();
             return;
           }
@@ -35879,7 +35879,7 @@ async function fetch3(url, options_) {
       const codings = headers.get("Content-Encoding");
       if (!request.compress || request.method === "HEAD" || codings === null || response_.statusCode === 204 || response_.statusCode === 304) {
         response = new Response2(body, responseOptions);
-        resolve13(response);
+        resolve15(response);
         return;
       }
       const zlibOptions = {
@@ -35893,7 +35893,7 @@ async function fetch3(url, options_) {
           }
         });
         response = new Response2(body, responseOptions);
-        resolve13(response);
+        resolve15(response);
         return;
       }
       if (codings === "deflate" || codings === "x-deflate") {
@@ -35917,12 +35917,12 @@ async function fetch3(url, options_) {
             });
           }
           response = new Response2(body, responseOptions);
-          resolve13(response);
+          resolve15(response);
         });
         raw.once("end", () => {
           if (!response) {
             response = new Response2(body, responseOptions);
-            resolve13(response);
+            resolve15(response);
           }
         });
         return;
@@ -35934,11 +35934,11 @@ async function fetch3(url, options_) {
           }
         });
         response = new Response2(body, responseOptions);
-        resolve13(response);
+        resolve15(response);
         return;
       }
       response = new Response2(body, responseOptions);
-      resolve13(response);
+      resolve15(response);
     });
     writeToStream(request_, request).catch(reject);
   });
@@ -38965,12 +38965,12 @@ var require_base64_js = __commonJS({
     exports.byteLength = byteLength;
     exports.toByteArray = toByteArray;
     exports.fromByteArray = fromByteArray;
-    var lookup = [];
+    var lookup2 = [];
     var revLookup = [];
     var Arr = typeof Uint8Array !== "undefined" ? Uint8Array : Array;
     var code = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
     for (i2 = 0, len = code.length; i2 < len; ++i2) {
-      lookup[i2] = code[i2];
+      lookup2[i2] = code[i2];
       revLookup[code.charCodeAt(i2)] = i2;
     }
     var i2;
@@ -39023,7 +39023,7 @@ var require_base64_js = __commonJS({
       return arr;
     }
     function tripletToBase64(num) {
-      return lookup[num >> 18 & 63] + lookup[num >> 12 & 63] + lookup[num >> 6 & 63] + lookup[num & 63];
+      return lookup2[num >> 18 & 63] + lookup2[num >> 12 & 63] + lookup2[num >> 6 & 63] + lookup2[num & 63];
     }
     function encodeChunk(uint8, start, end) {
       var tmp;
@@ -39046,12 +39046,12 @@ var require_base64_js = __commonJS({
       if (extraBytes === 1) {
         tmp = uint8[len2 - 1];
         parts.push(
-          lookup[tmp >> 2] + lookup[tmp << 4 & 63] + "=="
+          lookup2[tmp >> 2] + lookup2[tmp << 4 & 63] + "=="
         );
       } else if (extraBytes === 2) {
         tmp = (uint8[len2 - 2] << 8) + uint8[len2 - 1];
         parts.push(
-          lookup[tmp >> 10] + lookup[tmp >> 4 & 63] + lookup[tmp << 2 & 63] + "="
+          lookup2[tmp >> 10] + lookup2[tmp >> 4 & 63] + lookup2[tmp << 2 & 63] + "="
         );
       }
       return parts.join("");
@@ -42020,7 +42020,7 @@ var require_jwtaccess = __commonJS({
         }
       }
       fromStreamAsync(inputStream) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           if (!inputStream) {
             reject(new Error("Must pass in a stream containing the service account auth settings."));
           }
@@ -42029,7 +42029,7 @@ var require_jwtaccess = __commonJS({
             try {
               const data = JSON.parse(s2);
               this.fromJSON(data);
-              resolve13();
+              resolve15();
             } catch (err) {
               reject(err);
             }
@@ -42268,7 +42268,7 @@ var require_jwtclient = __commonJS({
         }
       }
       fromStreamAsync(inputStream) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           if (!inputStream) {
             throw new Error("Must pass in a stream containing the service account auth settings.");
           }
@@ -42277,7 +42277,7 @@ var require_jwtclient = __commonJS({
             try {
               const data = JSON.parse(s2);
               this.fromJSON(data);
-              resolve13();
+              resolve15();
             } catch (e2) {
               reject(e2);
             }
@@ -42410,7 +42410,7 @@ var require_refreshclient = __commonJS({
         }
       }
       async fromStreamAsync(inputStream) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           if (!inputStream) {
             return reject(new Error("Must pass in a stream containing the user refresh token."));
           }
@@ -42419,7 +42419,7 @@ var require_refreshclient = __commonJS({
             try {
               const data = JSON.parse(s2);
               this.fromJSON(data);
-              return resolve13();
+              return resolve15();
             } catch (err) {
               return reject(err);
             }
@@ -44252,7 +44252,7 @@ var require_pluggable_auth_handler = __commonJS({
        * @return A promise that resolves with the executable response.
        */
       retrieveResponseFromExecutable(envMap) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           const child = childProcess.spawn(this.commandComponents[0], this.commandComponents.slice(1), {
             env: { ...process.env, ...Object.fromEntries(envMap) }
           });
@@ -44274,7 +44274,7 @@ var require_pluggable_auth_handler = __commonJS({
               try {
                 const responseJson = JSON.parse(output);
                 const response = new executable_response_1.ExecutableResponse(responseJson);
-                return resolve13(response);
+                return resolve15(response);
               } catch (error) {
                 if (error instanceof executable_response_1.ExecutableResponseError) {
                   return reject(error);
@@ -45177,7 +45177,7 @@ var require_googleauth = __commonJS({
         }
       }
       fromStreamAsync(inputStream, options) {
-        return new Promise((resolve13, reject) => {
+        return new Promise((resolve15, reject) => {
           if (!inputStream) {
             throw new Error("Must pass in a stream containing the Google auth settings.");
           }
@@ -45187,7 +45187,7 @@ var require_googleauth = __commonJS({
               try {
                 const data = JSON.parse(chunks.join(""));
                 const r2 = this._cacheClientFromJSON(data, options);
-                return resolve13(r2);
+                return resolve15(r2);
               } catch (err) {
                 if (!this.keyFilename)
                   throw err;
@@ -45197,7 +45197,7 @@ var require_googleauth = __commonJS({
                 });
                 this.cachedCredential = client;
                 this.setGapicJWTValues(client);
-                return resolve13(client);
+                return resolve15(client);
               }
             } catch (err) {
               return reject(err);
@@ -45233,17 +45233,17 @@ var require_googleauth = __commonJS({
        * Run the Google Cloud SDK command that prints the default project ID
        */
       async getDefaultServiceProjectId() {
-        return new Promise((resolve13) => {
+        return new Promise((resolve15) => {
           (0, child_process_1.exec)("gcloud config config-helper --format json", (err, stdout) => {
             if (!err && stdout) {
               try {
                 const projectId = JSON.parse(stdout).configuration.properties.core.project;
-                resolve13(projectId);
+                resolve15(projectId);
                 return;
               } catch (e2) {
               }
             }
-            resolve13(null);
+            resolve15(null);
           });
         });
       }
@@ -50266,14 +50266,14 @@ function __asyncValues(o) {
   }, i2);
   function verb(n) {
     i2[n] = o[n] && function(v) {
-      return new Promise(function(resolve13, reject) {
-        v = o[n](v), settle(resolve13, reject, v.done, v.value);
+      return new Promise(function(resolve15, reject) {
+        v = o[n](v), settle(resolve15, reject, v.done, v.value);
       });
     };
   }
-  function settle(resolve13, reject, d, v) {
+  function settle(resolve15, reject, d, v) {
     Promise.resolve(v).then(function(v2) {
-      resolve13({ value: v2, done: d });
+      resolve15({ value: v2, done: d });
     }, reject);
   }
 }
@@ -53966,7 +53966,7 @@ function isPlainObject$1(value) {
     return false;
   }
 }
-function formEncoder(sep2) {
+function formEncoder(sep4) {
   return (key, value, options) => {
     let out = "";
     const pairs = (options === null || options === void 0 ? void 0 : options.explode) ? explode(key, value) : [[key, value]];
@@ -53977,7 +53977,7 @@ function formEncoder(sep2) {
       return (options === null || options === void 0 ? void 0 : options.charEncoding) === "percent" ? encodeURIComponent(v) : v;
     };
     const encodeValue = (v) => encodeString(serializeValue(v));
-    const encodedSep = encodeString(sep2);
+    const encodedSep = encodeString(sep4);
     pairs.forEach(([pk, pv]) => {
       var _a2, _b;
       let tmp = "";
@@ -56524,8 +56524,8 @@ var init_event_stream = __esm({
         this.done = false;
         this.isComplete = isComplete;
         this.extractResult = extractResult;
-        this.finalResultPromise = new Promise((resolve13) => {
-          this.resolveFinalResult = resolve13;
+        this.finalResultPromise = new Promise((resolve15) => {
+          this.resolveFinalResult = resolve15;
         });
       }
       push(event) {
@@ -56558,7 +56558,7 @@ var init_event_stream = __esm({
           } else if (this.done) {
             return;
           } else {
-            const result = await new Promise((resolve13) => this.waiting.enqueue(resolve13));
+            const result = await new Promise((resolve15) => this.waiting.enqueue(resolve15));
             if (result.done) return;
             yield result.value;
           }
@@ -57388,6 +57388,7 @@ function buildBaseOptions(model, context, options, apiKey) {
     headers: options?.headers,
     onPayload: options?.onPayload,
     onResponse: options?.onResponse,
+    onProviderStreamEvent: options?.onProviderStreamEvent,
     timeoutMs: options?.timeoutMs,
     websocketConnectTimeoutMs: options?.websocketConnectTimeoutMs,
     maxRetries: options?.maxRetries,
@@ -57440,13 +57441,16 @@ function headersToRecord(headers) {
   }
   return result;
 }
-function providerHeadersToRecord(headers) {
-  if (!headers) return void 0;
-  const result = {};
-  for (const [key, value] of Object.entries(headers)) {
-    if (value !== null) result[key] = value;
+function providerHeadersToRecord(...headerSources) {
+  const merged = /* @__PURE__ */ new Map();
+  for (const source of headerSources) {
+    for (const [name, value] of Object.entries(source ?? {})) {
+      const normalizedName = name.toLowerCase();
+      merged.delete(normalizedName);
+      if (value !== null) merged.set(normalizedName, [name, value]);
+    }
   }
-  return Object.keys(result).length > 0 ? result : void 0;
+  return merged.size > 0 ? Object.fromEntries(merged.values()) : void 0;
 }
 var init_headers2 = __esm({
   "packages/ai/src/utils/headers.ts"() {
@@ -57497,9 +57501,9 @@ function errorMessage(text6) {
   return text6.slice(0, 500);
 }
 function sleep2(ms, signal) {
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve15, reject) => {
     if (signal?.aborted) return reject(new Error("Request was aborted"));
-    const timer = setTimeout(resolve13, ms);
+    const timer = setTimeout(resolve15, ms);
     signal?.addEventListener(
       "abort",
       () => {
@@ -57889,8 +57893,8 @@ var init_cloud_code = __esm({
 });
 
 // packages/kyrn-judge/src/extension/kyrn-judge.ts
-var import_pi_coding_agent12 = __toESM(require_pi_coding_agent(), 1);
-import { homedir as homedir9 } from "node:os";
+var import_pi_coding_agent13 = __toESM(require_pi_coding_agent(), 1);
+import { homedir as homedir10 } from "node:os";
 
 // packages/kyrn-judge/src/config.ts
 import { readFileSync } from "node:fs";
@@ -57915,7 +57919,17 @@ function muHome(home = homedir()) {
 var BUILT_IN_JUDGES = {
   jev: { type: "jev" },
   "jev-direct": { type: "typesafe" },
+  // OpenRouter serves Jev over the same System One protocol. The key is Jev's own, not the one for OpenRouter's
+  // chat models, so setting one never changes the other.
+  "jev-openrouter": {
+    type: "typesafe",
+    baseUrl: "https://openrouter.ai/api/v1/systemone",
+    model: "~typesafe/jev-latest",
+    apiKeyEnv: "MU_JUDGE_OPENROUTER_API_KEY"
+  },
   "jev-gateway": { type: "gateway", model: "typesafe-ai/jev" },
+  // CLM-8B on this machine, where `clm-serve` listens by default. Its profile is not measured on mu's questions yet.
+  clm: { type: "clm" },
   // Measured in kyrn/docs/03-local-judge.md: the base checkpoint classifies one text well, says "yes" to
   // nearly every relational question, and cannot use a rubric or judge the request itself.
   laya: { type: "local", profile: { capabilities: { relate: false, rate: false, meta: false } } },
@@ -57959,7 +57973,7 @@ function readJudges(value) {
   if (!isRecord(value)) return judges;
   for (const [name, config] of Object.entries(value)) {
     if (!isRecord(config) || typeof config.type !== "string") continue;
-    if (!["jev", "typesafe", "gateway", "local", "http", "llm", "mock"].includes(config.type)) continue;
+    if (!["jev", "typesafe", "clm", "gateway", "local", "http", "llm", "mock"].includes(config.type)) continue;
     judges[name] = config;
   }
   return judges;
@@ -58386,16 +58400,20 @@ function parseBrief(raw) {
     previous: previousTitle && previousReport ? { title: previousTitle, report: previousReport } : void 0
   };
 }
-function briefFor(task, parent) {
+function briefFor(task, parent, userGoal) {
   const wanted = task.serves?.trim().replace(/^#/, "").toLowerCase();
   const item = wanted ? parent?.acceptance.find((each) => each.id === wanted) : void 0;
   return {
     goal: flat(`${task.title}: ${task.instructions}`, GOAL_CHARS2),
-    parentGoal: parent?.goal,
+    parentGoal: parent?.goal ?? text(userGoal, GOAL_CHARS2),
     serves: item ? { id: item.id, text: item.text } : void 0,
     done: (task.done ?? []).map((each) => text(each, ITEM_CHARS2)).filter((each) => each !== void 0).slice(0, MAX_DONE)
   };
 }
+function subAgentUserGoal(env = process.env) {
+  if (!env.KYRN_SWARM_DEPTH) return void 0;
+  return parseBrief(env[BRIEF_ENV])?.parentGoal ?? "";
+}
 function briefEnv(brief) {
   const { previous: _previous, lessons: _lessons, ...rest } = brief;
   return JSON.stringify(rest);
@@ -58532,6 +58550,62 @@ function neutralAnswer(question) {
   return { type: "choice", choice: options.find(isEscapeOption) ?? options[0] };
 }
 
+// packages/kyrn-judge/src/redact.ts
+var REDACTED = "[redacted]";
+var SHAPES = [
+  // A private key, the whole block, or to the end when the text was cut inside it.
+  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|$)/g,
+  // OpenAI, Anthropic, OpenRouter, DeepSeek and the like.
+  /\bsk-[A-Za-z0-9_-]{20,}/g,
+  /\b(?:gh[pousr]_[A-Za-z0-9]{30,}|github_pat_[A-Za-z0-9_]{22,})/g,
+  /\bglpat-[A-Za-z0-9_-]{20,}/g,
+  /\bxox[abposr]-[A-Za-z0-9-]{10,}/g,
+  /\bAIza[0-9A-Za-z_-]{35}/g,
+  /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+  /\b[rs]k_(?:live|test)_[0-9A-Za-z]{16,}/g,
+  /\bnpm_[A-Za-z0-9]{36}\b/g,
+  /\bhf_[A-Za-z0-9]{30,}/g,
+  // A JSON web token.
+  /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
+];
+var BEARER = /\b(Bearer|Basic)(\s+)(?=[A-Za-z._~+/=-]*[0-9])[A-Za-z0-9._~+/=-]{12,}/g;
+var URL_PASSWORD = /\b([a-z][a-z0-9+.-]*:\/\/[^\s:@/]+:)[^\s@/]+(@)/gi;
+var KEY_WORD = "(?:SECRET|TOKEN|PASSWD|PASSWORD|API_?KEY|ACCESS_?KEY|PRIVATE_?KEY)";
+var ENV_VALUE = new RegExp(`\\b([A-Z0-9_]*${KEY_WORD}[A-Z0-9_]*=)("[^"\\n]{8,}"|'[^'\\n]{8,}'|[^\\s"';&|]{8,})`, "g");
+var QUOTED_VALUE = new RegExp(
+  `(["']?[A-Za-z0-9_-]*${KEY_WORD.replaceAll("_?", "[_-]?")}[A-Za-z0-9_-]*["']?\\s*[:=]\\s*)(["'])[^"'\\s]{8,}\\2`,
+  "gi"
+);
+var LINE_VALUE = new RegExp(
+  `^(\\s*[A-Za-z0-9_.-]*${KEY_WORD.replaceAll("_?", "[_.-]?")}[A-Za-z0-9_.-]*\\s*[:=][ \\t]*)[^\\s#"']{8,}[ \\t]*$`,
+  "gim"
+);
+var CREDENTIAL_NAME = /SECRET|TOKEN|PASSWD|PASSWORD|API_?KEY|ACCESS_?KEY|PRIVATE_?KEY|CREDENTIAL/i;
+function environmentSecrets(env = process.env) {
+  const values = Object.entries(env).flatMap(([name, raw]) => {
+    const value = raw?.trim() ?? "";
+    const secretish = value.length >= 16 || value.length >= 8 && /\d/.test(value);
+    return secretish && CREDENTIAL_NAME.test(name) ? [value] : [];
+  });
+  return [...new Set(values)].sort((a, b) => b.length - a.length);
+}
+function redactSecrets(text6, known = []) {
+  let clean2 = text6;
+  for (const secret of known) if (clean2.includes(secret)) clean2 = clean2.split(secret).join(REDACTED);
+  for (const shape of SHAPES) clean2 = clean2.replace(shape, REDACTED);
+  return clean2.replace(BEARER, `$1$2${REDACTED}`).replace(URL_PASSWORD, `$1${REDACTED}$2`).replace(ENV_VALUE, `$1${REDACTED}`).replace(QUOTED_VALUE, `$1$2${REDACTED}$2`).replace(LINE_VALUE, `$1${REDACTED}`);
+}
+function redactJson(value, known = []) {
+  if (typeof value === "string") return redactSecrets(value, known);
+  if (Array.isArray(value)) return value.map((item) => redactJson(item, known));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, item]) => [key, redactJson(item, known)])
+    );
+  }
+  return value;
+}
+
 // packages/kyrn-judge/src/decision.ts
 var ABSTAIN = /* @__PURE__ */ Symbol("kyrn.judge.abstain");
 var MAX_BATCH_ANSWERS = 8;
@@ -58562,6 +58636,7 @@ var DecisionEngine = class {
     this.modes = new Map(Object.entries(options.modes ?? {}));
     this.recordState = options.recordState ?? false;
     this.origin = options.origin;
+    this.knownSecrets = options.knownSecrets ?? (() => environmentSecrets());
   }
   get providerId() {
     return this.judge.id;
@@ -58620,7 +58695,13 @@ var DecisionEngine = class {
     const capabilities = typeof declared === "string" ? Object.fromEntries(Object.keys(questions).map((id) => [id, declared])) : declared;
     this.stats.calls++;
     try {
-      const result = await this.judgeFor(spec.id).evaluate({ state, questions, signal, capabilities });
+      const known = this.knownSecrets();
+      const result = await this.judgeFor(spec.id).evaluate({
+        state: redactJson(state, known),
+        questions: redactJson(questions, known),
+        signal,
+        capabilities
+      });
       this.stats.inputTokens += result.usage.inputTokens ?? 0;
       const evaluation = {
         answers: result.answers,
@@ -59367,7 +59448,7 @@ var CascadeJudge = class {
     const reports = [];
     let requests = 0;
     let modelId;
-    let lastError;
+    const errors = [];
     let pending = Object.keys(request.questions);
     const capability = (id) => capabilityOf(request.questions[id], request.capabilities?.[id]);
     for (const [index, tier] of this.tiers.entries()) {
@@ -59382,7 +59463,7 @@ var CascadeJudge = class {
       try {
         result = await tier.judge.evaluate({ state: request.state, questions, signal: request.signal });
       } catch (error) {
-        lastError = error;
+        errors.push(error);
         reports.push({
           judgeId: tier.judge.id,
           asked: mine.length,
@@ -59419,8 +59500,10 @@ var CascadeJudge = class {
     const missing = Object.keys(request.questions).filter((id) => !(id in settled));
     if (missing.length > 0) {
       if (reports.every((report3) => report3.error !== void 0)) {
-        if (lastError instanceof JudgeError) throw lastError;
-        throw new JudgeError("unreachable", "No judge in the cascade answered", { cause: lastError });
+        const lasting = (error) => error instanceof JudgeError && (error.kind === "auth" || error.kind === "payment_required");
+        const telling = [...errors].reverse().find((error) => !lasting(error)) ?? errors.at(-1);
+        if (telling instanceof JudgeError) throw telling;
+        throw new JudgeError("unreachable", "No judge in the cascade answered", { cause: telling });
       }
       for (const id of missing) settled[id] = { ...neutralAnswer(request.questions[id]), judge: "unavailable" };
     }
@@ -59448,7 +59531,8 @@ function messageFromErrorBody(body) {
     if (typeof nestedMessage === "string") return nestedMessage;
   }
   if (typeof nested === "string") return nested;
-  return typeof record4.message === "string" ? record4.message : "";
+  if (typeof record4.message === "string") return record4.message;
+  return typeof record4.detail === "string" ? record4.detail : "";
 }
 function readWarnings(value) {
   if (!Array.isArray(value)) return void 0;
@@ -59482,7 +59566,7 @@ var GatewayJudgeProvider = class {
   constructor(options) {
     this.apiKey = options.apiKey;
     this.model = options.model ?? DEFAULT_MODEL;
-    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.baseUrl = (options.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, "");
     this.fetchImpl = options.fetch ?? fetch;
     this.id = `gateway:${this.model}`;
   }
@@ -59634,7 +59718,7 @@ function unitInterval(value) {
 var LocalJudgeProvider = class {
   constructor(options = {}) {
     this.id = options.id ?? "local:laya";
-    this.baseUrl = (options.baseUrl ?? DEFAULT_LOCAL_JUDGE_URL).replace(/\/+$/, "");
+    this.baseUrl = (options.baseUrl || DEFAULT_LOCAL_JUDGE_URL).replace(/\/+$/, "");
     this.path = options.path ?? "/evaluate";
     this.headers = options.headers;
     this.fetchImpl = options.fetch ?? fetch;
@@ -59710,6 +59794,15 @@ var MockJudgeProvider = class {
 // packages/kyrn-judge/src/providers/typesafe.ts
 var TYPESAFE_BASE_URL = "https://api.typesafe.ai/v1/systemone";
 var TYPESAFE_DEFAULT_MODEL = "jev-latest";
+var OPENROUTER_DEFAULT_MODEL = "~typesafe/jev-latest";
+var CLM_BASE_URL = "http://127.0.0.1:8700";
+var CLM_DEFAULT_MODEL = "clm-latest";
+function clmEndpoint(baseUrl) {
+  const url = (baseUrl || CLM_BASE_URL).replace(/\/+$/, "");
+  if (!URL.canParse(url)) return url;
+  const path = new URL(url).pathname;
+  return path === "/" ? `${url}/v1/systemone` : path === "/v1" ? `${url}/systemone` : url;
+}
 function errorKindForStatus2(status, message) {
   if (status === 401) return "auth";
   if (status === 402) return "payment_required";
@@ -59745,14 +59838,20 @@ function fromWire(question, raw) {
 var TypeSafeJudgeProvider = class {
   constructor(options) {
     this.apiKey = options.apiKey;
-    this.model = options.model ?? TYPESAFE_DEFAULT_MODEL;
-    this.baseUrl = (options.baseUrl ?? TYPESAFE_BASE_URL).replace(/\/+$/, "");
+    this.keyName = options.keyName ?? "TYPESAFE_API_KEY";
+    this.keyOptional = options.keyOptional ?? false;
+    this.baseUrl = (options.baseUrl || TYPESAFE_BASE_URL).replace(/\/+$/, "");
     this.fetchImpl = options.fetch ?? fetch;
-    this.id = `typesafe:${this.model}`;
+    const host2 = URL.canParse(this.baseUrl) ? new URL(this.baseUrl).host : this.baseUrl;
+    const service = host2 === new URL(TYPESAFE_BASE_URL).host ? "TypeSafe" : host2;
+    this.service = options.judgeName ? `${options.judgeName} at ${service}` : service;
+    this.model = options.model || (host2 === "openrouter.ai" ? OPENROUTER_DEFAULT_MODEL : TYPESAFE_DEFAULT_MODEL);
+    this.id = `${service === "TypeSafe" ? "typesafe" : host2}:${this.model}`;
   }
   async evaluate(request) {
     const apiKey = typeof this.apiKey === "string" ? this.apiKey : await this.apiKey();
-    if (!apiKey) throw new JudgeError("auth", "No TypeSafe API key is configured (TYPESAFE_API_KEY)");
+    if (!apiKey && !this.keyOptional)
+      throw new JudgeError("auth", `No API key is configured for Jev at ${this.service} (${this.keyName})`);
     const questions = Object.fromEntries(
       Object.entries(request.questions).map(([id, question]) => [id, toWire(question)])
     );
@@ -59760,31 +59859,34 @@ var TypeSafeJudgeProvider = class {
     try {
       response = await this.fetchImpl(this.baseUrl, {
         method: "POST",
-        headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        headers: { ...apiKey ? { Authorization: `Bearer ${apiKey}` } : {}, "Content-Type": "application/json" },
         body: JSON.stringify({ model: this.model, state: request.state, questions }),
         signal: request.signal
       });
     } catch (error) {
       if (error instanceof Error && error.name === "AbortError") throw error;
-      throw new JudgeError("unreachable", "Could not reach TypeSafe", { cause: error });
+      throw new JudgeError("unreachable", `Could not reach ${this.service}`, { cause: error });
     }
     if (!response.ok) {
       const body2 = await response.json().catch(() => void 0);
       const message = messageFromErrorBody(body2).slice(0, MAX_ERROR_MESSAGE_LENGTH);
+      const unkeyed = response.status === 401 && !apiKey && `${this.service} asks for a key (${this.keyName})`;
       throw new JudgeError(
         errorKindForStatus2(response.status, message),
-        message || `TypeSafe responded with HTTP ${response.status}`,
+        unkeyed || message || `${this.service} responded with HTTP ${response.status}`,
         { status: response.status }
       );
     }
     const body = await response.json().catch(() => void 0);
     if (!body || typeof body.answers !== "object" || body.answers === null) {
-      throw new JudgeError("invalid_response", "TypeSafe response has no answers", { status: response.status });
+      throw new JudgeError("invalid_response", `${this.service} response has no answers`, {
+        status: response.status
+      });
     }
     const answers = {};
     for (const [id, question] of Object.entries(request.questions)) {
       const answer = fromWire(question, body.answers[id]);
-      if (!answer) throw new JudgeError("invalid_response", `TypeSafe gave no usable answer for "${id}"`);
+      if (!answer) throw new JudgeError("invalid_response", `${this.service} gave no usable answer for "${id}"`);
       answers[id] = answer;
     }
     return {
@@ -59801,12 +59903,19 @@ var DEFAULT_TIMEOUT_MS2 = {
   // Jev answers in well under a second, but a cold connection over a long route can take several.
   jev: 1e4,
   typesafe: 1e4,
+  // A CLM server embeds every question together with the state: a batch of long ones takes seconds on a small GPU.
+  clm: 8e3,
   gateway: 4e3,
   local: 4e3,
   http: 8e3,
   llm: 3e4,
   mock: 1e3
 };
+var KEYS_FOR_ELSEWHERE = /* @__PURE__ */ new Set([
+  "MU_JUDGE_OPENROUTER_API_KEY",
+  "MU_JUDGE_CUSTOM_API_KEY",
+  "MU_JUDGE_CLM_API_KEY"
+]);
 function resolveJudgeConfig(name, config) {
   if (name.startsWith("llm:")) return { type: "llm", model: name.slice("llm:".length) };
   return config.judges[name] ?? BUILT_IN_JUDGES[name];
@@ -59839,15 +59948,39 @@ function createProvider(name, judge, host2) {
       if (!complete3) throw new TypeError(`Judge "${name}": model "${judge.model}" is not available`);
       return new LlmJudgeProvider({ id: `llm:${judge.model}`, complete: complete3 });
     }
-    case "typesafe":
+    case "typesafe": {
+      const keyName = judge.apiKeyEnv ?? "TYPESAFE_API_KEY";
+      if (KEYS_FOR_ELSEWHERE.has(keyName) && !judge.baseUrl) {
+        throw new TypeError(`Judge "${name}" needs a baseUrl: its key ${keyName} is not sent to TypeSafe`);
+      }
       return new TypeSafeJudgeProvider({
-        apiKey: () => host2.env?.[judge.apiKeyEnv ?? "TYPESAFE_API_KEY"],
+        apiKey: () => host2.env?.[keyName],
+        keyName,
         model: judge.model,
         baseUrl: judge.baseUrl,
         fetch: host2.fetch
       });
-    case "jev":
-      return host2.env?.[judge.apiKeyEnv ?? "TYPESAFE_API_KEY"] ? createProvider(name, { ...judge, type: "typesafe" }, host2) : createProvider(name, { ...judge, type: "gateway", model: judge.model ?? "typesafe-ai/jev" }, host2);
+    }
+    case "clm": {
+      const keyName = judge.apiKeyEnv ?? "MU_JUDGE_CLM_API_KEY";
+      return new TypeSafeJudgeProvider({
+        apiKey: () => host2.env?.[keyName],
+        keyName,
+        keyOptional: true,
+        judgeName: "CLM",
+        model: judge.model || CLM_DEFAULT_MODEL,
+        baseUrl: clmEndpoint(judge.baseUrl),
+        fetch: host2.fetch
+      });
+    }
+    case "jev": {
+      if (host2.env?.[judge.apiKeyEnv ?? "TYPESAFE_API_KEY"])
+        return createProvider(name, { ...judge, type: "typesafe" }, host2);
+      const openRouter = BUILT_IN_JUDGES["jev-openrouter"];
+      if (openRouter.apiKeyEnv && host2.env?.[openRouter.apiKeyEnv]) return createProvider(name, openRouter, host2);
+      const model = judge.model?.includes("/") ? judge.model : "typesafe-ai/jev";
+      return createProvider(name, { ...judge, type: "gateway", model }, host2);
+    }
     default:
       return new GatewayJudgeProvider({
         apiKey: judge.apiKeyEnv ? () => host2.env?.[judge.apiKeyEnv] : host2.gatewayApiKey ?? (() => host2.env?.AI_GATEWAY_API_KEY),
@@ -59885,7 +60018,7 @@ var UnavailableJudgeProvider = class {
     this.id = "none";
   }
   async evaluate() {
-    throw new JudgeError("unreachable", "No judge is configured");
+    throw new JudgeError("auth", "No judge is configured");
   }
 };
 
@@ -59893,20 +60026,44 @@ var UnavailableJudgeProvider = class {
 var undici = __toESM(require_undici(), 1);
 import { EventEmitter } from "node:events";
 var JUDGE_KEEP_ALIVE_MS = 6e4;
+var JUDGE_FAILURES_BEFORE_RECONNECT = 2;
+var unanswered = (error) => error instanceof Error && (error.name === "TimeoutError" || error.name === "TypeError");
 function createJudgeFetch(options = {}) {
   const keepAliveMs = options.keepAliveMs ?? JUDGE_KEEP_ALIVE_MS;
   const http22 = options.http2 ?? muEnv("JUDGE_HTTP2") !== "off";
-  const dispatcher = new undici.EnvHttpProxyAgent({
-    keepAliveTimeout: keepAliveMs,
-    keepAliveMaxTimeout: Math.max(keepAliveMs, 6e5),
-    // Judge calls are small and short: a few connections per origin cover what a turn asks at once.
-    connections: 4,
-    allowH2: http22
-  });
-  if (dispatcher instanceof EventEmitter) EventEmitter.prototype.on.call(dispatcher, "error", () => {
-  });
+  const failuresBeforeReconnect = options.failuresBeforeReconnect ?? JUDGE_FAILURES_BEFORE_RECONNECT;
+  const connect2 = () => {
+    const dispatcher2 = new undici.EnvHttpProxyAgent({
+      keepAliveTimeout: keepAliveMs,
+      keepAliveMaxTimeout: Math.max(keepAliveMs, 6e5),
+      // Judge calls are small and short: a few connections per origin cover what a turn asks at once.
+      connections: 4,
+      allowH2: http22,
+      ...options.h2c ? { useH2c: true } : {}
+    });
+    if (dispatcher2 instanceof EventEmitter) EventEmitter.prototype.on.call(dispatcher2, "error", () => {
+    });
+    return dispatcher2;
+  };
+  let dispatcher = connect2();
+  let failures = 0;
   const withDispatcher = undici.fetch;
-  const judgeFetch = (input, init) => withDispatcher(input, { ...init ?? {}, dispatcher });
+  const judgeFetch = async (input, init) => {
+    const used = dispatcher;
+    try {
+      const response = await withDispatcher(input, { ...init ?? {}, dispatcher: used });
+      if (used === dispatcher) failures = 0;
+      return response;
+    } catch (error) {
+      if (used === dispatcher && unanswered(error) && ++failures >= failuresBeforeReconnect) {
+        dispatcher = connect2();
+        failures = 0;
+        void used.destroy().catch(() => {
+        });
+      }
+      throw error;
+    }
+  };
   return { fetch: judgeFetch, http2: http22, close: () => dispatcher.close() };
 }
 
@@ -60156,8 +60313,8 @@ var KyrnRuntime = class {
     let timer;
     return Promise.race([
       work,
-      new Promise((resolve13) => {
-        timer = setTimeout(() => resolve13(void 0), left);
+      new Promise((resolve15) => {
+        timer = setTimeout(() => resolve15(void 0), left);
       })
     ]).finally(() => {
       if (timer) clearTimeout(timer);
@@ -60268,8 +60425,8 @@ function within(work, waitMs) {
   let timer;
   return Promise.race([
     work,
-    new Promise((resolve13) => {
-      timer = setTimeout(() => resolve13(void 0), waitMs);
+    new Promise((resolve15) => {
+      timer = setTimeout(() => resolve15(void 0), waitMs);
     })
   ]).finally(() => {
     if (timer) clearTimeout(timer);
@@ -60804,14 +60961,14 @@ var JobManager = class {
       scanFrom = offset;
       return void 0;
     };
-    return new Promise((resolve13) => {
+    return new Promise((resolve15) => {
       let timer;
       const settle = (result) => {
         if (timer) clearTimeout(timer);
         job.listeners.delete(check);
         request.signal?.removeEventListener("abort", onAbort);
         job.waiting--;
-        resolve13(result);
+        resolve15(result);
       };
       const check = () => {
         const line3 = scan2();
@@ -60849,13 +61006,13 @@ var JobManager = class {
   }
   /** Polls a condition that a job's end may change; resolves to whether it came true in time. */
   until(job, condition, timeoutMs) {
-    return new Promise((resolve13) => {
-      if (condition()) return resolve13(true);
+    return new Promise((resolve15) => {
+      if (condition()) return resolve15(true);
       const startedAt = Date.now();
       const done = (result) => {
         clearInterval(poll);
         job.listeners.delete(check);
-        resolve13(result);
+        resolve15(result);
       };
       const check = () => {
         if (condition()) done(true);
@@ -61428,12 +61585,12 @@ function parseBoardText(reply) {
   const { progress, now, confirm, note: note2 } = parsed;
   if (typeof progress !== "string" || typeof now !== "string" || !now.trim()) return void 0;
   const waiting = Array.isArray(confirm) ? confirm.filter((item) => typeof item === "string" && item.trim() !== "") : [];
-  const told = typeof note2 === "string" ? note2.trim() : "";
+  const told2 = typeof note2 === "string" ? note2.trim() : "";
   return {
     progress: clip2(progress.trim(), 400),
     now: clip2(now.trim(), 400),
     confirm: waiting.slice(0, 5).map((item) => clip2(item.trim(), 300)),
-    ...told ? { note: clip2(told, 300) } : {}
+    ...told2 ? { note: clip2(told2, 300) } : {}
   };
 }
 var NOW = {
@@ -61641,15 +61798,42 @@ var READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
   "bg_output"
 ]);
 var SHELL_TRICKS = /[<>;&`\n\r]|\$\(|\$\{/;
+var POWERSHELL_TRICKS = /[(){}]/;
 var READ_ONLY_PROGRAM = /^(?:ls|pwd|cat|head|tail|wc|which|file|stat|du|df|date|whoami|uname|echo|printf|rg|grep|sort|uniq|cut|nl|tree|git\s+(?:status|log|diff|show|blame|rev-parse|ls-files|describe)|Get-ChildItem|gci|dir|Get-Content|gc|type|Get-Location|Select-String|sls|Get-Item|gi|Get-Date|Write-Output|Write-Host)(?:\s|$)/i;
-function isReadOnlyCommand(command) {
+var WRITES_OR_RUNS = /* @__PURE__ */ new Map([
+  // ripgrep runs `--pre` on every file it searches, and `--hostname-bin` for its links.
+  ["rg", /(?:^|\s)--(?:pre|hostname-bin)(?:[\s=]|$)/],
+  // `-o FILE`, also in a cluster (`-uo`); `--compress-program` runs on its temporary files.
+  ["sort", /(?:^|\s)-[a-zA-Z]*o|--compress-program/],
+  // `-o FILE`; `-R` writes an index into every folder.
+  ["tree", /(?:^|\s)-[a-zA-Z]*[oR]/],
+  // `-C` compiles a magic file next to the one it is given.
+  ["file", /(?:^|\s)-[a-zA-Z]*C/]
+]);
+function uniqWrites(words2) {
+  let operands = 0;
+  for (let index = 1; index < words2.length; index++) {
+    if (/^-[fsw]$/.test(words2[index])) index++;
+    else if (words2[index] === "-" || !words2[index].startsWith("-")) operands++;
+  }
+  return operands > 1;
+}
+function isReadOnlyCommand(command, powershell = false) {
   const text6 = command.trim();
   if (!text6 || SHELL_TRICKS.test(text6) || /--output\b/.test(text6)) return false;
-  return text6.split("|").every((part) => READ_ONLY_PROGRAM.test(part.trim()));
+  if (powershell && POWERSHELL_TRICKS.test(text6)) return false;
+  return text6.split("|").every((part) => {
+    const piece = part.trim();
+    if (!READ_ONLY_PROGRAM.test(piece)) return false;
+    const words2 = piece.split(/\s+/);
+    const program = words2[0].toLowerCase();
+    if (program === "uniq") return !uniqWrites(words2);
+    return !WRITES_OR_RUNS.get(program)?.test(piece);
+  });
 }
 function isMutatingCall(toolName, input) {
   if (READ_ONLY_TOOLS.has(toolName)) return false;
-  if (isShellTool(toolName)) return !isReadOnlyCommand(String(input.command ?? ""));
+  if (isShellTool(toolName)) return !isReadOnlyCommand(String(input.command ?? ""), toolName === "powershell");
   return true;
 }
 var CHECK_COMMAND = /\b(?:vitest|jest|pytest|mocha|ava|tsc|eslint|biome|ruff|mypy|rspec|phpunit|ctest|tox|nox|gradle|mvn)\b|\b(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?(?:test|build|check|lint|typecheck)\b|\b(?:cargo|go|dotnet|swift|make|deno)\s+(?:test|build|check|vet|clippy)\b|\bnode\b[^\n]*--test\b|\btest\.sh\b/;
@@ -61858,6 +62042,13 @@ function flat2(text6, length) {
   const line2 = text6.replace(/\s+/g, " ").trim();
   return line2.length <= length ? line2 : `${line2.slice(0, length - 1)}\u2026`;
 }
+function opening(text6) {
+  if (text6.length <= MAX_SAID) return text6;
+  const head = text6.slice(0, MAX_SAID - 1);
+  let end = head.length;
+  while (end > MAX_SAID * 0.75 && !/[\s，。；：！？、]/.test(head[end - 1])) end--;
+  return `${(end > MAX_SAID * 0.75 ? head.slice(0, end) : head).trimEnd()}\u2026`;
+}
 function note(state, at, text6, coded) {
   state.recent.push({
     at,
@@ -61866,6 +62057,11 @@ function note(state, at, text6, coded) {
   });
   if (state.recent.length > MAX_RECENT) state.recent.splice(0, state.recent.length - MAX_RECENT);
 }
+function told(state, now) {
+  if (state.wrapUp?.heardAt !== void 0) return;
+  if (state.wrapUp) state.wrapUp.heardAt = now;
+  note(state, now, "\u2190 told to wrap up and report", { code: "told_wrap_up" });
+}
 function textOf2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -61915,25 +62111,28 @@ function applyEvent(state, event, now) {
         const type = event.message.customType;
         const text6 = type === HIVE_MESSAGE || type === SWARM_MESSAGE ? textOf2(event.message.content) : "";
         const notes = text6.split("\n").filter((line2) => line2.startsWith("- ")).length;
-        if (text6.startsWith(NOTES_HEADER))
+        if (text6.startsWith(NOTES_HEADER)) {
           note(state, now, `\u2190 ${notes} note${notes === 1 ? "" : "s"} from the others`, {
             code: "notes_received",
             params: { count: notes }
           });
-        else if (text6.startsWith(LAST_CALL))
+          if (text6.endsWith(CHECKPOINT))
+            note(state, now, "\u2190 asked what it has found so far", { code: "asked_findings" });
+        } else if (text6.startsWith(LAST_CALL))
           note(state, now, `\u2190 last call: ${notes} late note${notes === 1 ? "" : "s"}`, {
             code: "late_notes",
             params: { count: notes }
           });
         else if (text6 === CHECKPOINT)
           note(state, now, "\u2190 asked what it has found so far", { code: "asked_findings" });
-        else if (text6.startsWith(WRAP_UP))
-          note(state, now, "\u2190 told to wrap up and report", { code: "told_wrap_up" });
+        else if (text6.startsWith(WRAP_UP)) told(state, now);
+      } else if (event.message?.role === "toolResult" && textOf2(event.message.content).startsWith(TOOLS_CLOSED)) {
+        told(state, now);
       }
       break;
     case "message_update":
-      if (event.assistantMessageEvent?.type === "text_delta" && typeof event.assistantMessageEvent.delta === "string") {
-        state.said = `${state.said ?? ""}${event.assistantMessageEvent.delta}`.slice(-MAX_SAID);
+      if (event.assistantMessageEvent?.type === "text_delta" && typeof event.assistantMessageEvent.delta === "string" && (state.said?.length ?? 0) < MAX_SAID) {
+        state.said = `${state.said ?? ""}${event.assistantMessageEvent.delta}`.slice(0, MAX_SAID);
       }
       break;
     case "message_end": {
@@ -61947,7 +62146,7 @@ function applyEvent(state, event, now) {
         state.usage.cost += usage.cost?.total ?? 0;
       }
       const text6 = textOf2(message.content).trim();
-      if (text6) state.said = text6.slice(-MAX_SAID);
+      if (text6) state.said = opening(text6);
       if (message.stopReason === "error" || message.stopReason === "aborted") {
         state.error = message.errorMessage ?? `the model request was ${message.stopReason}`;
         state.errorCode = "model_error";
@@ -62025,6 +62224,18 @@ function applyEvent(state, event, now) {
   }
   return false;
 }
+var MAX_DRAFT = 4e4;
+function followDraft(draft, event, now) {
+  if (event.type === "message_start" && event.message?.role === "assistant") return { text: "", at: now };
+  if (draft && event.type === "message_update" && event.assistantMessageEvent?.type === "text_delta" && typeof event.assistantMessageEvent.delta === "string" && draft.text.length < MAX_DRAFT) {
+    return { ...draft, text: draft.text + event.assistantMessageEvent.delta };
+  }
+  if (event.type === "message_end" && event.message?.role === "assistant") {
+    const text6 = textOf2(event.message.content).trim();
+    return text6 ? { text: text6.slice(0, MAX_DRAFT), at: draft?.at ?? now } : draft;
+  }
+  return draft;
+}
 function reportOf(state) {
   const unchanged = new RegExp(`^\\W*${NO_CHANGE}\\W*$`, "i");
   const finals = state.finals.filter((text6) => !unchanged.test(text6));
@@ -62066,6 +62277,8 @@ function activeRuns() {
 var SwarmRun = class {
   constructor(options) {
     this.outcomes = [];
+    /** Per bee, the message it is writing, whole: the report of one cut off halfway is in it. */
+    this.drafts = [];
     /** Slots at work; each one takes the next bee that has not been started until there is none. */
     this.workers = [];
     this.next = 0;
@@ -62192,20 +62405,21 @@ var SwarmRun = class {
         continue;
       }
       if (bee.wrapUp) {
-        if (now - bee.wrapUp.at >= this.limits.graceSeconds * 1e3) {
-          this.kill(
-            bee.name,
-            `${bee.wrapUp.reason}; no report within ${this.limits.graceSeconds}s of being asked`,
-            "timed-out",
-            {
-              code: "no_report_in_time",
-              // What the wrap-up was for, so "time budget reached; no report in time" can be said whole.
-              params: {
-                seconds: this.limits.graceSeconds,
-                ...bee.wrapUp.code ? { after: bee.wrapUp.code } : {}
-              }
+        const grace = this.limits.graceSeconds * 1e3;
+        const deadline = Math.min(
+          (bee.wrapUp.heardAt ?? Number.POSITIVE_INFINITY) + grace,
+          bee.wrapUp.at + 2 * grace
+        );
+        if (now >= deadline) {
+          const seconds3 = Math.round((now - bee.wrapUp.at) / 1e3);
+          this.kill(bee.name, `${bee.wrapUp.reason}; no report within ${seconds3}s of being asked`, "timed-out", {
+            code: "no_report_in_time",
+            // What the wrap-up was for, so "time budget reached; no report in time" can be said whole.
+            params: {
+              seconds: seconds3,
+              ...bee.wrapUp.code ? { after: bee.wrapUp.code } : {}
             }
-          );
+          });
         }
       } else if (this.limits.beeMinutes > 0 && now - (bee.startedAt ?? now) >= this.limits.beeMinutes * 6e4) {
         this.wrapUp(bee.name, `time budget of ${this.limits.beeMinutes} min reached`, {
@@ -62239,9 +62453,14 @@ ${body}` : body };
     const spent = `after ${clock((bee.endedAt ?? this.now()) - (bee.startedAt ?? bee.queuedAt))}, ${count(bee.turns, "turn")}, ${count(bee.toolCalls, "tool call")}`;
     const label2 = bee.status === "failed" ? "FAILED" : bee.status === "timed-out" ? "STOPPED BY THE WATCHDOG" : "STOPPED";
     const lines2 = [`${label2}: ${bee.error ?? "unknown reason"} (${spent}).`];
+    const draft = this.drafts[index];
+    const heardAt = bee.wrapUp?.heardAt;
     if (report3) lines2.push(`What it had reported by then:
 ${report3}`);
-    else if (bee.said) lines2.push(`The last thing it said: ${bee.said}`);
+    else if (draft?.text.trim() && heardAt !== void 0 && draft.at >= heardAt)
+      lines2.push(`What it had written of its report when it was stopped:
+${draft.text.trim()}`);
+    else if (draft?.text.trim() || bee.said) lines2.push(`The last thing it said: ${draft?.text.trim() || bee.said}`);
     return { state: bee, report: lines2.join("\n") };
   }
   async work(runner) {
@@ -62264,6 +62483,7 @@ ${report3}`);
         event: (event) => {
           if (isOver(bee.status)) return;
           applyEvent(bee, event, this.now());
+          this.drafts[index] = followDraft(this.drafts[index], event, this.now());
           if (event.type !== "message_update" && event.type !== "tool_execution_update" && bee.transcript) {
             try {
               appendFileSync(bee.transcript, `${JSON.stringify({ at: this.now(), ...event })}
@@ -62403,7 +62623,7 @@ function registerConstraints(runtime) {
       }
       const decision = await Promise.race([
         runtime.engine.decide(toolConstraint, input, { signal: ctx.signal }),
-        new Promise((resolve13) => setTimeout(() => resolve13(void 0), options.waitMs))
+        new Promise((resolve15) => setTimeout(() => resolve15(void 0), options.waitMs))
       ]);
       if (!decision || decision.mode !== "active" || decision.source !== "judge") return void 0;
       const broken = decision.outcome.broken.map((index) => constraints[index]).filter(Boolean);
@@ -62521,8 +62741,8 @@ function describeBoard(board, language, account) {
   if (board.confirm.length > 0) {
     lines2.push(`${zh ? "\u9700\u8981\u4F60\u786E\u8BA4" : "Waiting on you"}:`, ...board.confirm.map((item) => `  - ${item}`));
   }
-  const told = (account ?? board.log ?? []).slice(-8);
-  if (told.length > 0) lines2.push(`${zh ? "\u5B83\u505A\u4E86\u4EC0\u4E48" : "What it did"}:`, ...told.map((note2) => `  \xB7 ${note2.text}`));
+  const told2 = (account ?? board.log ?? []).slice(-8);
+  if (told2.length > 0) lines2.push(`${zh ? "\u5B83\u505A\u4E86\u4EC0\u4E48" : "What it did"}:`, ...told2.map((note2) => `  \xB7 ${note2.text}`));
   return lines2.join("\n");
 }
 function registerBoard(runtime, roots) {
@@ -62840,7 +63060,8 @@ function registerBoard(runtime, roots) {
       try {
         const reply = await complete3({
           system: narratorSystem(facts.language, writeIn()),
-          user: narratorRequest(facts),
+          // The writer tells what the agent did, never the key it did it with.
+          user: redactSecrets(narratorRequest(facts), environmentSecrets()),
           signal: AbortSignal.any([AbortSignal.timeout(options.narrateTimeoutMs), gone])
         });
         text6 = parseBoardText(reply.text);
@@ -63259,6 +63480,197 @@ var browserStep = defineDecision({
   }
 });
 
+// packages/kyrn-judge/src/browser/bounds.ts
+import { lookup } from "node:dns/promises";
+import { isIP as isIP2 } from "node:net";
+
+// packages/kyrn-judge/src/web/ssrf.ts
+import { lookup as dnsLookup } from "node:dns";
+import { isIP } from "node:net";
+var FetchRefusal = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+};
+function v4(octets) {
+  const [a, b, c] = octets;
+  if (a === 127) return "loopback";
+  if (a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168) return "private";
+  if (a === 100 && b >= 64 && b <= 127) return "private";
+  if (a === 169 && b === 254) return "link-local";
+  if (a === 0 || a >= 224) return "reserved";
+  if (a === 192 && b === 0 && (c === 0 || c === 2)) return "reserved";
+  if (a === 198 && b === 51 && c === 100 || a === 203 && b === 0 && c === 113) return "reserved";
+  return "public";
+}
+function groups(address) {
+  let text6 = address.split("%")[0];
+  const dotted = /^(.*:)(\d+\.\d+\.\d+\.\d+)$/.exec(text6);
+  if (dotted) {
+    const octets = dotted[2].split(".").map(Number);
+    if (octets.some((octet) => octet > 255)) return void 0;
+    text6 = `${dotted[1]}${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}`;
+  }
+  const halves = text6.split("::");
+  if (halves.length > 2) return void 0;
+  const head = halves[0] ? halves[0].split(":") : [];
+  const tail = halves.length === 2 && halves[1] ? halves[1].split(":") : [];
+  const fill = halves.length === 2 ? 8 - head.length - tail.length : 0;
+  if (fill < 0 || halves.length === 1 && head.length !== 8) return void 0;
+  const all = [...head, ...Array(fill).fill("0"), ...tail].map((group) => Number.parseInt(group, 16));
+  return all.length === 8 && all.every((group) => group >= 0 && group <= 65535) ? all : void 0;
+}
+function classifyAddress(address) {
+  const bare = address.replace(/^\[|\]$/g, "");
+  if (isIP(bare) === 4) return v4(bare.split(".").map(Number));
+  const parts = groups(bare);
+  if (!parts) return "reserved";
+  const embedded = [parts[6] >> 8, parts[6] & 255, parts[7] >> 8, parts[7] & 255];
+  const zeroPrefix = parts.slice(0, 5).every((group) => group === 0);
+  if (zeroPrefix && parts[5] === 65535) return v4(embedded);
+  if (parts[0] === 100 && parts[1] === 65435 && parts.slice(2, 6).every((group) => group === 0)) return v4(embedded);
+  if (zeroPrefix && parts[5] === 0) {
+    if (parts[6] === 0 && parts[7] === 1) return "loopback";
+    return parts[6] === 0 && parts[7] === 0 ? "reserved" : v4(embedded);
+  }
+  if ((parts[0] & 65024) === 64512) return "private";
+  if ((parts[0] & 65472) === 65152) return "link-local";
+  if ((parts[0] & 65280) === 65280) return "reserved";
+  if (parts[0] === 8193 && parts[1] === 3512) return "reserved";
+  return "public";
+}
+function allowed(kind, policy) {
+  if (kind === "public") return true;
+  if (kind === "loopback") return policy.allowLoopback;
+  if (kind === "private" || kind === "link-local") return policy.allowPrivate;
+  return false;
+}
+function refusal(host2, address, kind) {
+  return new FetchRefusal(
+    "address",
+    `Refused: ${host2} is a ${kind} address (${address}). web_fetch only reads the public web and, when asked directly, this machine's own dev servers.`
+  );
+}
+function checkUrl(raw, policy) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    throw new FetchRefusal("url", `Not a URL: ${raw.slice(0, 200)}`);
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new FetchRefusal("scheme", `Refused: only http and https can be fetched, not ${url.protocol}`);
+  }
+  if (url.username || url.password) {
+    throw new FetchRefusal("credentials", "Refused: the URL carries credentials. Remove the user:password@ part.");
+  }
+  const host2 = url.hostname.replace(/^\[|\]$/g, "");
+  if (isIP(host2)) {
+    const kind = classifyAddress(host2);
+    if (!allowed(kind, policy)) throw refusal(url.hostname, host2, kind);
+  }
+  return url;
+}
+function isLoopbackUrl(url) {
+  const host2 = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  if (host2 === "localhost" || host2.endsWith(".localhost")) return true;
+  return isIP(host2) !== 0 && classifyAddress(host2) === "loopback";
+}
+function checkedLookup(policy, resolve15 = dnsLookup) {
+  return (hostname, options, callback) => {
+    resolve15(hostname, { ...options, all: true }, (error, answer) => {
+      if (error) return callback(error);
+      const addresses = Array.isArray(answer) ? answer : [];
+      if (addresses.length === 0) return callback(new FetchRefusal("dns", `${hostname} has no address`));
+      for (const entry of addresses) {
+        const kind = classifyAddress(entry.address);
+        if (!allowed(kind, policy)) return callback(refusal(hostname, entry.address, kind));
+      }
+      if (options.all) callback(null, addresses);
+      else callback(null, addresses[0].address, addresses[0].family);
+    });
+  };
+}
+
+// packages/kyrn-judge/src/browser/bounds.ts
+var RESOLVE_MS = 2e3;
+async function systemResolve(host2) {
+  let timer;
+  try {
+    return await Promise.race([
+      lookup(host2, { all: true }).then((answers) => answers.map((answer) => answer.address)),
+      new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(new Error(`${host2} did not resolve in time`)), RESOLVE_MS);
+      })
+    ]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var NOWHERE = /^(?:about:(?:blank|srcdoc)|chrome-error:\/\/chromewebdata\/)(?:[?#]|$)/i;
+var WHAT = {
+  loopback: "this computer",
+  private: "the local network",
+  "link-local": "a link-local address, such as a cloud machine's metadata service",
+  reserved: "a reserved address"
+};
+var NOT_PUBLIC = ["loopback", "link-local", "private", "reserved"];
+function refusalReason(refused) {
+  return `a page sent the browser to ${refused.where} (${refused.what}), where it goes only when asked to open it there; nothing of that page was read`;
+}
+var Bounds = class {
+  constructor(start, resolve15 = systemResolve) {
+    this.places = /* @__PURE__ */ new Map();
+    this.resolve = resolve15;
+    let parsed;
+    try {
+      parsed = new URL(start);
+    } catch {
+    }
+    this.start = parsed;
+  }
+  /** Why the browser may not be at `url`, or undefined when it may. */
+  async refuse(url) {
+    if (NOWHERE.test(url)) return void 0;
+    let now;
+    try {
+      now = new URL(url);
+    } catch {
+      return { where: "an address that is not a URL", what: "not a web page" };
+    }
+    if (now.protocol === "blob:")
+      return now.origin === "null" ? { where: "blob:", what: "not a web page" } : this.refuse(now.origin);
+    if (now.protocol !== "http:" && now.protocol !== "https:") return { where: now.protocol, what: "not a web page" };
+    if (this.start && now.hostname === this.start.hostname) return void 0;
+    const place = await this.place(now.hostname);
+    if (place === "public") return void 0;
+    const asked = this.start ? await this.place(this.start.hostname) : "public";
+    return place === asked ? void 0 : { where: now.origin, what: WHAT[place] };
+  }
+  place(hostname) {
+    let known = this.places.get(hostname);
+    if (!known) {
+      known = this.classify(hostname);
+      this.places.set(hostname, known);
+    }
+    return known;
+  }
+  async classify(hostname) {
+    const host2 = hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+    if (host2 === "localhost" || host2.endsWith(".localhost")) return "loopback";
+    if (isIP2(host2)) return classifyAddress(host2);
+    let addresses;
+    try {
+      addresses = await this.resolve(host2);
+    } catch {
+      return "public";
+    }
+    const places = addresses.map(classifyAddress);
+    return NOT_PUBLIC.find((place) => places.includes(place)) ?? "public";
+  }
+};
+
 // packages/kyrn-judge/src/browser/session.ts
 import { createHash as createHash2 } from "node:crypto";
 
@@ -63403,20 +63815,21 @@ var SNAPSHOT_SCRIPT = String.raw`(() => {
 // packages/kyrn-judge/src/browser/session.ts
 var StalePage = class extends Error {
 };
-var sleep = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
+var sleep = (ms) => new Promise((resolve15) => setTimeout(resolve15, ms));
 var same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
 var BrowserSession = class _BrowserSession {
-  constructor(cdp, targetId, sessionId) {
+  constructor(cdp, targetId, sessionId, start) {
     this.cdp = cdp;
     this.targetId = targetId;
     this.sessionId = sessionId;
+    this.start = start;
   }
   static async open(cdp, url) {
     const { targetId } = await cdp.send("Target.createTarget", { url: "about:blank" });
     let session;
     try {
       const { sessionId } = await cdp.send("Target.attachToTarget", { targetId, flatten: true });
-      session = new _BrowserSession(cdp, targetId, sessionId);
+      session = new _BrowserSession(cdp, targetId, sessionId, url);
       await session.call("Emulation.setDeviceMetricsOverride", {
         width: 1120,
         height: 780,
@@ -63650,6 +64063,7 @@ async function runBrowserTask(options) {
   const startedAt = performance.now();
   const history = [];
   let decisions = 0;
+  const bounds = new Bounds(session.start, options.resolve);
   let page = await session.observe();
   const finish = (status, code, reason, params) => ({
     status,
@@ -63661,13 +64075,28 @@ async function runBrowserTask(options) {
     decisions,
     elapsedMs: Math.round(performance.now() - startedAt)
   });
+  const within2 = async () => {
+    const refused = await bounds.refuse(page.url);
+    if (refused) page = { ...page, url: refused.where, title: "", text: "", actions: [] };
+    return refused;
+  };
+  const look = async () => {
+    page = await session.observe();
+    return within2();
+  };
+  const offTheWeb = (refused) => finish("blocked", "off_the_web", refusalReason(refused), { where: refused.where });
+  const opened = await within2();
+  if (opened) return offTheWeb(opened);
   while (true) {
     if (options.signal?.aborted) return finish("aborted", "cancelled");
     if (options.beforeStep && !await options.beforeStep())
       return finish("aborted", "stopped_by_user", "stopped by the person watching");
     if (history.length >= maxSteps || decisions >= maxSteps * 2)
       return finish("budget", "max_steps", `stopped after ${maxSteps} actions`, { maxSteps });
-    if (!await session.fresh(page)) page = await session.observe();
+    if (!await session.fresh(page)) {
+      const refused = await look();
+      if (refused) return offTheWeb(refused);
+    }
     const space = actionSpace(page.actions);
     const input = {
       goal,
@@ -63724,7 +64153,8 @@ async function runBrowserTask(options) {
         await session.act(action, page, text6);
       } catch (error) {
         if (!(error instanceof StalePage)) throw error;
-        page = await session.observe();
+        const refused2 = await look();
+        if (refused2) return offTheWeb(refused2);
         continue;
       }
       const record4 = {
@@ -63736,10 +64166,11 @@ async function runBrowserTask(options) {
       };
       history.push(record4);
       const before = page.fingerprint;
-      page = await session.observe();
+      const refused = await look();
       record4.page_changed = page.fingerprint !== before;
       record4.url = page.url;
       options.onStep?.(record4);
+      if (refused) return offTheWeb(refused);
     }
     const lastThree = history.slice(-3);
     if (lastThree.length === 3 && lastThree.every((entry) => entry.page_changed === false && entry.kind !== "wait")) {
@@ -63762,7 +64193,7 @@ var CdpConnection = class _CdpConnection {
     socket.addEventListener("error", () => this.failAll("The browser connection failed"));
   }
   static connect(url, timeoutMs = 5e3) {
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       const socket = new WebSocket(url);
       const timer = setTimeout(() => {
         socket.close();
@@ -63770,7 +64201,7 @@ var CdpConnection = class _CdpConnection {
       }, timeoutMs);
       socket.addEventListener("open", () => {
         clearTimeout(timer);
-        resolve13(new _CdpConnection(socket));
+        resolve15(new _CdpConnection(socket));
       });
       socket.addEventListener("error", () => {
         clearTimeout(timer);
@@ -63805,7 +64236,7 @@ var CdpConnection = class _CdpConnection {
   send(method, params = {}, sessionId, timeoutMs = 3e4) {
     if (this.closed) return Promise.reject(new CdpError("The browser connection is closed"));
     const id = this.nextId++;
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(id);
         reject(new CdpError(`The browser did not answer ${method} within ${Math.round(timeoutMs / 1e3)}s`));
@@ -63813,7 +64244,7 @@ var CdpConnection = class _CdpConnection {
       this.pending.set(id, {
         resolve: (value) => {
           clearTimeout(timer);
-          resolve13(value);
+          resolve15(value);
         },
         reject: (error) => {
           clearTimeout(timer);
@@ -64085,6 +64516,16 @@ async function isAlive(endpoint) {
     return false;
   }
 }
+function exitOf(child, ms) {
+  if (child.exitCode !== null || child.signalCode !== null) return Promise.resolve();
+  return new Promise((resolve15) => {
+    const timer = setTimeout(resolve15, ms);
+    child.once("exit", () => {
+      clearTimeout(timer);
+      resolve15();
+    });
+  });
+}
 async function launchChrome(options = {}) {
   const host2 = options.host ?? thisBrowserHost();
   const browser = options.executable ? { executable: options.executable, side: sideOf(options.executable, host2) } : findBrowser(host2);
@@ -64109,7 +64550,7 @@ async function launchChrome(options = {}) {
   child.on("error", (error) => {
     failure = error;
   });
-  const deadline = Date.now() + 15e3;
+  const deadline = Date.now() + (options.portWaitMs ?? 15e3);
   while (Date.now() < deadline) {
     const endpoint = readEndpoint(profileDir);
     if (endpoint && await isAlive(endpoint)) return { endpoint, process: child, profileDir };
@@ -64123,9 +64564,10 @@ async function launchChrome(options = {}) {
         code: "browser_exited_on_start",
         params: { exitCode: child.exitCode }
       });
-    await new Promise((resolve13) => setTimeout(resolve13, 100));
+    await new Promise((resolve15) => setTimeout(resolve15, 100));
   }
   child.kill();
+  await exitOf(child, 5e3);
   throw codedError("Chrome did not open its DevTools port in time", { code: "devtools_port_timeout" });
 }
 
@@ -64223,7 +64665,7 @@ var EmbeddedBrowser = class _EmbeddedBrowser {
       const state = await this.control();
       if (state.stop) return false;
       if (!state.paused) return true;
-      await new Promise((resolve13) => setTimeout(resolve13, pollMs));
+      await new Promise((resolve15) => setTimeout(resolve15, pollMs));
     }
   }
 };
@@ -64244,7 +64686,9 @@ function registerBrowser(runtime) {
     /** Empty means mu's own ~/.mu/browser-profile. */
     profileDir: "",
     /** Use the desktop app's browser panel when the app offers one. */
-    embedded: true
+    embedded: true,
+    /** How long the model may take to say what goes into a field. Past it the run ends: it does not hold the turn. */
+    writeTimeoutMs: 6e4
   });
   if (!options.enabled) return;
   const { pi } = runtime;
@@ -64276,11 +64720,22 @@ function registerBrowser(runtime) {
     cdp = await CdpConnection.connect(chrome.endpoint);
     return cdp;
   };
-  const writeText = async (context) => {
+  const writeText = async (context, signal) => {
     const model = runtime.ctx?.model;
     const complete3 = runtime.writer() ?? (model ? runtime.llm(`${model.provider}/${model.id}`, { thinking: "off" }) : void 0);
     if (!complete3) return void 0;
-    const reply = await complete3({ system: TEXT_RULES, user: JSON.stringify(context) });
+    const limit = AbortSignal.timeout(options.writeTimeoutMs);
+    let reply;
+    try {
+      reply = await complete3({
+        system: TEXT_RULES,
+        user: JSON.stringify(context),
+        // Stopping the run stops the question too; without either, a stalled model would hold the turn.
+        signal: signal ? AbortSignal.any([signal, limit]) : limit
+      });
+    } catch {
+      return void 0;
+    }
     try {
       const parsed = JSON.parse(reply.text.slice(reply.text.indexOf("{"), reply.text.lastIndexOf("}") + 1));
       return typeof parsed.text === "string" && parsed.text.trim() && parsed.text.length <= 2e3 ? parsed.text : void 0;
@@ -64340,6 +64795,14 @@ function registerBrowser(runtime) {
     try {
       if (!params.goal?.trim()) {
         const page = await session.observe();
+        const refused = await new Bounds(session.start).refuse(page.url);
+        if (refused) {
+          status = "blocked";
+          code = "off_the_web";
+          codeParams = { where: refused.where };
+          reason = refusalReason(refused);
+          return { text: `status: blocked (${reason})`, status, url: refused.where };
+        }
         const text7 = `${page.title}
 ${page.url}
 
@@ -64354,7 +64817,7 @@ ${page.text.slice(0, textChars)}`;
         session,
         engine: runtime.engine,
         goal: params.goal,
-        writeText,
+        writeText: (context) => writeText(context, signal),
         // In the app the person watching the page answers, in the app's own dialog.
         confirm: app ? (label2, url) => app.confirm(label2, url) : ctx.hasUI ? (label2) => ctx.ui.confirm("mu browser", `Allow this action?
 
@@ -64702,8 +65165,9 @@ import { homedir as homedir3 } from "node:os";
 import { join as join15 } from "node:path";
 
 // packages/kyrn-judge/src/checkpoint/git.ts
-import { spawn as spawn4 } from "node:child_process";
-import { join as join13 } from "node:path";
+import { execFile, spawn as spawn4 } from "node:child_process";
+import { accessSync, constants, existsSync as existsSync4, statSync as statSync3 } from "node:fs";
+import { delimiter, join as join13 } from "node:path";
 var TIMED_OUT = 124;
 var GitMissing = class extends Error {
   constructor(binary, cause) {
@@ -64711,6 +65175,13 @@ var GitMissing = class extends Error {
     this.name = "GitMissing";
   }
 };
+var GitUnusable = class extends Error {
+  constructor(reason, message) {
+    super(message);
+    this.name = "GitUnusable";
+    this.reason = reason;
+  }
+};
 var GitFailed = class extends Error {
   constructor(args, result) {
     super(`git ${args[0]} exited with ${result.code}: ${result.stderr.trim().slice(0, 300)}`);
@@ -64718,8 +65189,58 @@ var GitFailed = class extends Error {
     this.result = result;
   }
 };
-function spawnGit(binary = "git", timeoutMs = 3e4) {
-  return (args, env, input, limit) => new Promise((resolve13, reject) => {
+function findOnPath(binary, path) {
+  const candidates = binary.includes("/") ? [binary] : (path ?? "").split(delimiter).filter(Boolean).map((folder) => join13(folder, binary));
+  return candidates.find((candidate) => {
+    try {
+      accessSync(candidate, constants.X_OK);
+      return statSync3(candidate).isFile();
+    } catch {
+      return false;
+    }
+  });
+}
+var hostProbe = {
+  platform: process.platform,
+  find: findOnPath,
+  hasDeveloperTools: () => new Promise((done) => {
+    execFile(
+      "/usr/bin/xcode-select",
+      ["-p"],
+      { timeout: 5e3 },
+      (error, stdout) => done(!error && existsSync4(stdout.trim()))
+    );
+  })
+};
+var MAC_STUB = "/usr/bin/git";
+var XCODE_LICENSE_EXIT = 69;
+async function stubProblem(binary, path, probe = hostProbe) {
+  if (probe.platform !== "darwin" || probe.find(binary, path) !== MAC_STUB) return void 0;
+  if (await probe.hasDeveloperTools()) return void 0;
+  return new GitUnusable("developer_tools_missing", `${MAC_STUB} needs the developer tools, which are not installed`);
+}
+function heldByLicense(code, output) {
+  return code === XCODE_LICENSE_EXIT && /licen[cs]e/i.test(output());
+}
+var UNUSABLE_TEXT = {
+  developer_tools_missing: "git cannot run on this Mac: Apple's command line developer tools are not installed. Only the user can install them; do not try",
+  xcode_license: "git cannot run on this Mac until the user accepts the Xcode license. Only they can; do not try"
+};
+function spawnGit(binary = "git", timeoutMs = 3e4, probe = hostProbe) {
+  let stub;
+  return async (args, env, input, limit) => {
+    stub ??= stubProblem(binary, env.PATH, probe);
+    const problem = await stub;
+    if (problem) throw problem;
+    const result = await spawnOnce(binary, timeoutMs, args, env, input, limit);
+    if (heldByLicense(result.code, () => `${result.stderr}
+${result.stdout}`))
+      throw new GitUnusable("xcode_license", `git ${args[0]} exited with 69: ${result.stderr.trim().slice(0, 300)}`);
+    return result;
+  };
+}
+function spawnOnce(binary, timeoutMs, args, env, input, limit) {
+  return new Promise((resolve15, reject) => {
     let child;
     try {
       child = spawn4(binary, [...args], { env: { ...env }, windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
@@ -64755,10 +65276,10 @@ function spawnGit(binary = "git", timeoutMs = 3e4) {
     child.on("close", (code) => {
       clearTimeout(timer);
       if (truncated) {
-        resolve13({ code: 0, stdout: Buffer.concat(out).toString("utf8"), stderr: "", truncated: true });
+        resolve15({ code: 0, stdout: Buffer.concat(out).toString("utf8"), stderr: "", truncated: true });
         return;
       }
-      resolve13({
+      resolve15({
         code: timedOut ? TIMED_OUT : code ?? 1,
         stdout: Buffer.concat(out).toString("utf8"),
         stderr: timedOut ? `timed out after ${timeoutMs} ms` : Buffer.concat(err).toString("utf8")
@@ -64794,10 +65315,11 @@ function shadowEnv(base, gitDir, workTree, indexFile = join13(gitDir, "index"))
 // packages/kyrn-judge/src/checkpoint/store.ts
 import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
 import {
-  accessSync,
+  accessSync as accessSync2,
   appendFileSync as appendFileSync2,
-  constants,
-  existsSync as existsSync4,
+  chmodSync,
+  constants as constants2,
+  existsSync as existsSync5,
   lstatSync,
   mkdirSync as mkdirSync6,
   readdirSync as readdirSync2,
@@ -64805,7 +65327,7 @@ import {
   realpathSync,
   rmdirSync,
   rmSync as rmSync4,
-  statSync as statSync3,
+  statSync as statSync4,
   unlinkSync,
   writeFileSync as writeFileSync4
 } from "node:fs";
@@ -64838,7 +65360,22 @@ var BUILT_IN_IGNORES = [
   "DerivedData/",
   ".dart_tool/",
   ".DS_Store",
-  "Thumbs.db"
+  "Thumbs.db",
+  "*.env",
+  ".env.*",
+  "!.env.example",
+  "!.env.sample",
+  "!.env.template",
+  ".envrc",
+  ".netrc",
+  "*.pem",
+  "*.key",
+  "*.p12",
+  "*.pfx",
+  "id_rsa",
+  "id_dsa",
+  "id_ecdsa",
+  "id_ed25519"
 ];
 var CONFIG_MARKER = "# mu checkpoint settings";
 var shadowConfig = (gitDir) => `${CONFIG_MARKER}
@@ -64925,12 +65462,16 @@ async function openStore(options) {
     env: shadowEnv(options.env ?? process.env, gitDir, options.root),
     maxFileBytes: options.maxFileBytes ?? 5 * 1024 * 1024
   };
-  if (!existsSync4(join14(gitDir, "HEAD"))) {
-    mkdirSync6(gitDir, { recursive: true });
+  if (!existsSync5(join14(gitDir, "HEAD"))) {
+    mkdirSync6(gitDir, { recursive: true, mode: 448 });
     const { GIT_WORK_TREE: _tree, GIT_INDEX_FILE: _index, GIT_DIR: _dir, ...bare } = store.env;
     const result = await options.run(["-c", "init.defaultBranch=mu", "init", "--bare", "--quiet", gitDir], bare);
     if (result.code !== 0) throw new GitFailed(["init"], result);
   }
+  try {
+    chmodSync(gitDir, 448);
+  } catch {
+  }
   const config = join14(gitDir, "config");
   if (!readFileSync6(config, "utf8").includes(CONFIG_MARKER)) appendFileSync2(config, `
 ${shadowConfig(gitDir)}`);
@@ -64942,6 +65483,8 @@ ${shadowConfig(gitDir)}`);
   writeFileSync4(join14(gitDir, PROJECT_FILE), `${JSON.stringify({ root: options.root, lastUsed: Date.now() })}
 `);
   releaseLocks(store, STALE_LOCK_MS);
+  const stale = zList(await git(store, ["ls-files", "-z", "--cached", "--ignored", "--exclude-standard"]));
+  if (stale.length > 0) await git(store, ["update-index", "-z", "--force-remove", "--stdin"], `${stale.join("\0")}\0`);
   return store;
 }
 function releaseLocks(store, olderThanMs) {
@@ -64955,7 +65498,7 @@ function releaseLocks(store, olderThanMs) {
     if (!name.endsWith(".lock") && !/^restore-.*\.index$/.test(name)) continue;
     const path = join14(store.gitDir, name);
     try {
-      if (Date.now() - statSync3(path).mtimeMs >= olderThanMs) rmSync4(path, { force: true });
+      if (Date.now() - statSync4(path).mtimeMs >= olderThanMs) rmSync4(path, { force: true });
     } catch {
     }
   }
@@ -64973,7 +65516,7 @@ async function scan(store, limits) {
   if (listing.code !== 0) throw new GitFailed(LIST_CHANGES, listing);
   const listed2 = zList(listing.stdout);
   const update = [];
-  const drop = [];
+  const drop2 = [];
   const leftOut = [];
   let bytes = 0;
   for (const path of new Set(listed2)) {
@@ -64983,19 +65526,19 @@ async function scan(store, limits) {
     let stats;
     try {
       stats = lstatSync(file);
-      if (stats.isFile()) accessSync(file, constants.R_OK);
+      if (stats.isFile()) accessSync2(file, constants2.R_OK);
     } catch (error) {
       if (error.code !== "ENOENT") {
         leftOut.push(path);
-        drop.push(path);
+        drop2.push(path);
         continue;
       }
       stats = void 0;
     }
-    if (stats && !stats.isFile() && !stats.isSymbolicLink()) drop.push(path);
+    if (stats && !stats.isFile() && !stats.isSymbolicLink()) drop2.push(path);
     else if (stats && stats.size > store.maxFileBytes) {
       leftOut.push(path);
-      drop.push(path);
+      drop2.push(path);
     } else {
       update.push(path);
       bytes += stats?.size ?? 0;
@@ -65004,7 +65547,7 @@ async function scan(store, limits) {
   if (limits && bytes > limits.maxBytes) throw new SnapshotTooLarge("bytes", limits);
   if (update.length > 0)
     await git(store, ["update-index", "-z", "--add", "--remove", "--stdin"], `${update.join("\0")}\0`);
-  if (drop.length > 0) await git(store, ["update-index", "-z", "--force-remove", "--stdin"], `${drop.join("\0")}\0`);
+  if (drop2.length > 0) await git(store, ["update-index", "-z", "--force-remove", "--stdin"], `${drop2.join("\0")}\0`);
   return { tree: (await git(store, ["write-tree"])).trim(), leftOut };
 }
 async function snapshot(store, name, limits) {
@@ -65247,6 +65790,11 @@ function describePlan(plan2) {
   return lines2.length > 0 ? lines2.join("\n") : "no file differs from the checkpoint";
 }
 var describeResult = (result) => `${result.restored.length} put back, ${result.removed.length} removed, ${result.broughtBack.length} brought back${result.leftAlone.length > 0 ? `, ${result.leftAlone.length} left alone (${listed(result.leftAlone.map((entry) => entry.path))})` : ""}`;
+var GIT_CANNOT_RUN = /* @__PURE__ */ new Set([
+  "git_missing",
+  "xcode_license",
+  "developer_tools_missing"
+]);
 function offNotice(code, limits) {
   const start = { zh: "\u5728\u9879\u76EE\u6587\u4EF6\u5939\u91CC\u542F\u52A8 mu \u5C31\u6709\u68C0\u67E5\u70B9", en: "Start mu in a project folder to get them" };
   const seconds3 = Math.round(limits.timeoutMs / 1e3);
@@ -65259,6 +65807,22 @@ function offNotice(code, limits) {
         }),
         params: {}
       };
+    case "xcode_license":
+      return {
+        line: say({
+          zh: "mu\uFF1A\u68C0\u67E5\u70B9\u5DF2\u5173\u95ED\uFF0C\u56E0\u4E3A\u8FD9\u53F0 Mac \u8FD8\u6CA1\u6709\u540C\u610F Xcode \u8BB8\u53EF\u534F\u8BAE\uFF0Cgit \u65E0\u6CD5\u8FD0\u884C\u3002\u5728\u7EC8\u7AEF\u91CC\u7528 sudo xcodebuild -license \u540C\u610F\u540E\uFF0C\u65B0\u5F00\u4E00\u4E2A\u4F1A\u8BDD\u5C31\u6709\u68C0\u67E5\u70B9\u3002",
+          en: "mu: checkpoints are off, because git cannot run on this Mac until the Xcode license is accepted. Accept it with sudo xcodebuild -license in Terminal, then start a new session to get them."
+        }),
+        params: {}
+      };
+    case "developer_tools_missing":
+      return {
+        line: say({
+          zh: "mu\uFF1A\u68C0\u67E5\u70B9\u5DF2\u5173\u95ED\uFF0C\u56E0\u4E3A\u8FD9\u53F0 Mac \u6CA1\u6709\u5B89\u88C5 git \u6240\u9700\u7684\u547D\u4EE4\u884C\u5F00\u53D1\u8005\u5DE5\u5177\u3002\u7528 xcode-select --install \u5B89\u88C5\u540E\uFF0C\u65B0\u5F00\u4E00\u4E2A\u4F1A\u8BDD\u5C31\u6709\u68C0\u67E5\u70B9\u3002",
+          en: "mu: checkpoints are off, because this Mac has no command line developer tools, which git needs. Install them with xcode-select --install, then start a new session to get them."
+        }),
+        params: {}
+      };
     case "home_folder":
       return {
         line: say({
@@ -65364,13 +65928,14 @@ function registerCheckpoint(runtime, roots, deps = {}) {
     runtime.present("checkpoint.off", { code, params: notice.params, message: notice.line });
   };
   const refusal2 = (cwd) => {
-    if (off?.code === "git_missing") return off.line;
+    if (off && GIT_CANNOT_RUN.has(off.code)) return off.line;
     const place = placeOff(cwd);
     return place ? offNotice(place, options).line : void 0;
   };
   const giveUp = (ctx, error) => {
     if (off) return;
     if (error instanceof GitMissing) switchOff(ctx, "git_missing");
+    else if (error instanceof GitUnusable) switchOff(ctx, error.reason);
     else if (error instanceof SnapshotTooLarge) {
       const codes = { files: "too_many_files", bytes: "too_many_bytes", slow: "too_slow" };
       switchOff(ctx, codes[error.reason]);
@@ -65531,8 +66096,8 @@ function registerCheckpoint(runtime, roots, deps = {}) {
     let body = `Abandoned because: ${reason}`;
     const writer = runtime.writer();
     if (writer && turn.steps.length > 0) {
-      const timeout = new Promise((resolve13) => {
-        setTimeout(() => resolve13(void 0), 8e3).unref?.();
+      const timeout = new Promise((resolve15) => {
+        setTimeout(() => resolve15(void 0), 8e3).unref?.();
       });
       const reply = await Promise.race([
         writer({
@@ -65854,7 +66419,7 @@ The agent then starts over from your request with a note about what did not work
       } catch (error) {
         pending = void 0;
         giveUp(ctx, error);
-        if (!(error instanceof GitMissing))
+        if (!(error instanceof GitMissing || error instanceof GitUnusable))
           ctx.ui.notify(
             `The rewind stopped: ${clip(error instanceof Error ? error.message : String(error), 300)}`,
             "error"
@@ -65868,8 +66433,8 @@ The agent then starts over from your request with a note about what did not work
       const wasBusy = busy > 0;
       await Promise.race([
         chain,
-        new Promise((resolve13) => {
-          setTimeout(resolve13, 3e3).unref?.();
+        new Promise((resolve15) => {
+          setTimeout(resolve15, 3e3).unref?.();
         })
       ]);
       if (store) releaseLocks(store, wasBusy && busy > 0 ? 0 : 12e4);
@@ -65880,7 +66445,7 @@ The agent then starts over from your request with a note about what did not work
 
 // packages/kyrn-judge/src/extension/features/commands.ts
 var import_pi_coding_agent4 = __toESM(require_pi_coding_agent(), 1);
-import { existsSync as existsSync6 } from "node:fs";
+import { existsSync as existsSync7 } from "node:fs";
 import { join as join18 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
@@ -65940,7 +66505,7 @@ function loadAgents(userDir, builtInDir = BUILT_IN_AGENTS_DIR) {
 
 // packages/kyrn-judge/src/extension/localized-prompts.ts
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync5, mkdirSync as mkdirSync7, readdirSync as readdirSync4, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readdirSync as readdirSync4, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join17 } from "node:path";
 var FORMAT = 1;
 var LANGUAGE_KEY = /^([A-Za-z]+(?:-[A-Za-z]+)*)-(zh|en):/;
@@ -65982,7 +66547,7 @@ function promptsFor(dir, wording, root) {
     const sources = readdirSync4(dir).filter((name) => name.endsWith(".md")).sort().map((name) => [name, readFileSync8(join17(dir, name), "utf8")]);
     const hash = createHash4("sha256").update(JSON.stringify([FORMAT, wording, sources])).digest("hex").slice(0, 12);
     const target = join17(root, `${wording}-${hash}`);
-    if (existsSync5(target)) return target;
+    if (existsSync6(target)) return target;
     const temporary = `${target}.${process.pid}.tmp`;
     mkdirSync7(temporary, { recursive: true, mode: 448 });
     for (const [name, text6] of sources) writeFileSync5(join17(temporary, name), localizeTemplate(text6, wording));
@@ -65991,7 +66556,7 @@ function promptsFor(dir, wording, root) {
     } catch {
       rmSync5(temporary, { recursive: true, force: true });
     }
-    return existsSync5(target) ? target : dir;
+    return existsSync6(target) ? target : dir;
   } catch {
     return dir;
   }
@@ -66029,19 +66594,24 @@ function readVersions(judgeRoot, fallbackPi = import_pi_coding_agent3.VERSION) {
   };
 }
 var VERSIONS = readVersions(new URL("../../../", new URL("src/extension/features/welcome.ts", new URL("../", import.meta.url)).href));
+var HEALTH_ERROR = {
+  unreachable: "not reachable",
+  auth: "no usable key (mu setup)",
+  payment_required: "out of credit"
+};
 function healthText(view, paint) {
   if (view.judge === "off") return paint.fg("muted", "off \xB7 pi's stock behaviour everywhere");
   if (view.health === "checking") return `${view.judge} ${paint.fg("dim", "\xB7 checking\u2026")}`;
   if (view.health.ok) {
     return `${view.judge} ${paint.fg("success", `\xB7 answering in ${view.health.latencyMs} ms`)} ${paint.fg("dim", `\xB7 decisions ${view.mode}`)}`;
   }
-  const why = view.health.error === "unreachable" ? "not reachable" : `failing (${view.health.error ?? "error"})`;
+  const why = HEALTH_ERROR[view.health.error ?? ""] ?? `failing (${view.health.error ?? "error"})`;
   return `${view.judge} ${paint.fg("warning", `\xB7 ${why}, falling back to stock behaviour`)}`;
 }
 function renderWelcome(view, width, paint) {
   const home = homedir4();
   const cwd = view.cwd.startsWith(home) ? `~${view.cwd.slice(home.length)}` : view.cwd;
-  const model = view.model ? `${view.model}${view.thinking ? paint.fg("dim", ` \xB7 thinking ${view.thinking}`) : ""}` : paint.fg("warning", "none yet \xB7 /login, then /model");
+  const model = view.model ? `${view.model}${view.thinking ? paint.fg("dim", ` \xB7 thinking ${view.thinking}`) : ""}` : paint.fg("warning", "none yet \xB7 /login, or mu setup in a terminal");
   const rows = [
     ["judge", healthText(view, paint)],
     ["model", model],
@@ -66183,7 +66753,7 @@ var helpZh = () => `mu ${VERSIONS.mu} \xB7 \u5148\u5224\u65AD\u518D\u52A8\u624B\
 \u5224\u65AD\u5C42
   \u4F60\u7684\u6BCF\u6761\u6D88\u606F\u90FD\u5148\u4EA4\u7ED9\u5224\u5B9A\u5668\u8BFB\uFF1A\u8BFB\u7684\u65F6\u5019\u6D88\u606F\u505C\u5728\u8F93\u5165\u6846\u4E0A\u65B9\uFF08\u6309 esc \u53EF\u8DF3\u8FC7\u7B49\u5F85\uFF09\uFF0C
   \u5224\u5B9A\u7ED3\u679C\u7559\u5728\u5BF9\u8BDD\u91CC\u8FD9\u6761\u6D88\u606F\u4E0B\u9762\u3002${(0, import_pi_coding_agent4.keyText)("app.tools.expand")} \u53EF\u4EE5\u770B\u6BCF\u4E2A\u5224\u5B9A\u80CC\u540E\u7684\u5168\u90E8\u56DE\u7B54\u3002
-  /mu judge <\u5224\u5B9A\u5668>\uFF1A\u7531\u54EA\u4E9B\u6A21\u578B\u6765\u5224\u5B9A\u3001\u6309\u4EC0\u4E48\u987A\u5E8F\uFF0C\u6BD4\u5982 laya | laya,jev | llm:<\u63D0\u4F9B\u5546>/<\u6A21\u578B>
+  /mu judge <\u5224\u5B9A\u5668>\uFF1A\u7531\u54EA\u4E9B\u6A21\u578B\u6765\u5224\u5B9A\u3001\u6309\u4EC0\u4E48\u987A\u5E8F\uFF0C\u6BD4\u5982 laya | laya,jev | clm | llm:<\u63D0\u4F9B\u5546>/<\u6A21\u578B>
   /mu route <\u5224\u5B9A\u70B9> <\u5224\u5B9A\u5668|default>\uFF1A\u8BA9\u67D0\u4E00\u4E2A\u5224\u5B9A\u70B9\u7528\u81EA\u5DF1\u7684\u5224\u5B9A\u5668\uFF0C\u6BD4\u5982 browser.step luna
   /mu mode <\u5224\u5B9A\u70B9|default> <off|shadow|active>\uFF1Aoff \u5173\u95ED\uFF0Cshadow \u5F71\u5B50\uFF08\u53EA\u8BB0\u5F55\uFF0C\u4E0D\u8D77\u4F5C\u7528\uFF09\uFF0Cactive \u751F\u6548
   /frame\uFF1A\u67E5\u770B\u4EFB\u52A1\u5E27\uFF0C\u4E5F\u5C31\u662F mu \u8BB0\u4F4F\u7684\u76EE\u6807\u3001\u4F60\u7684\u786C\u7EA6\u675F\uFF08\u539F\u8BDD\u52A0\u51FA\u5904\uFF09\u548C\u9A8C\u6536\u6761\u4EF6
@@ -66206,6 +66776,8 @@ var helpZh = () => `mu ${VERSIONS.mu} \xB7 \u5148\u5224\u65AD\u518D\u52A8\u624B\
   /implement <\u4EFB\u52A1>\uFF1A\u4FA6\u5BDF\u3001\u8BA1\u5212\u3001\u5B9E\u73B0\uFF0C\u4E09\u4E2A\u5B50\u4EE3\u7406\u63A5\u529B\uFF0C\u6BCF\u4E2A\u6309\u81EA\u5DF1\u7684\u6E05\u5355\u505A
   /scout-and-plan <\u4EFB\u52A1>\uFF1A\u5148\u4FA6\u5BDF\uFF0C\u518D\u8BA1\u5212\uFF1B\u4EC0\u4E48\u90FD\u4E0D\u6539
   /implement-and-review <\u4EFB\u52A1>\uFF1A\u5B9E\u73B0\u3001\u8BC4\u5BA1\u3001\u4FEE\u6B63
+  /hive <\u95EE\u9898>\uFF1A\u8BA9\u51E0\u4E2A\u8C03\u67E5\u5458\u4ECE\u4E0D\u540C\u89D2\u5EA6\u540C\u65F6\u67E5\u4E00\u4E2A\u95EE\u9898\uFF0C\u5224\u5B9A\u5668\u628A\u6BCF\u4E2A\u4EBA\u7684\u53D1\u73B0\u4F20\u7ED9\u7528\u5F97\u4E0A\u7684\u5176\u4ED6\u4EBA\uFF0C
+    \u56DE\u7B54\u7EFC\u5408\u6240\u6709\u4EBA\u7684\u7ED3\u679C
   /swarm\uFF1A\u6BCF\u4E2A\u6B63\u5728\u8FD0\u884C\u7684\u5B50\u4EE3\u7406\u6B64\u523B\u5728\u505A\u4EC0\u4E48\uFF1B/swarm stop [\u540D\u5B57] \u8BA9\u5B83\u73B0\u5728\u4EA4\u62A5\u544A\u5E76\u4FDD\u7559\u53D1\u73B0\uFF0C
     /swarm kill [\u540D\u5B57] \u7ACB\u523B\u7ED3\u675F\u5B83
   /review [\u8981\u5BA1\u7684\u5185\u5BB9]\uFF1A\u4EA4\u7ED9\u8BC4\u5BA1\u5B50\u4EE3\u7406\u5BA1\u67E5\uFF1B\u5224\u5B9A\u5668\u628A\u8BC4\u5BA1\u53D1\u73B0\u6309\u8F7B\u91CD\u6392\u6210 P0 \u5230 P3
@@ -66231,7 +66803,7 @@ Start here
 Judgment layer
   Every message is read by the judge first: it waits above the editor while that happens (esc skips
   the wait), and the verdict stays under it in the chat. ${(0, import_pi_coding_agent4.keyText)("app.tools.expand")} shows every answer behind a verdict.
-  /mu judge <tiers>      which models judge, in order: laya | laya,jev | llm:<provider>/<model>
+  /mu judge <tiers>      which models judge, in order: laya | laya,jev | clm | llm:<provider>/<model>
   /mu route <decision> <tiers|default>      one decision on its own judge, e.g. browser.step luna
   /mu mode <decision|default> <off|shadow|active>
   /frame                   the task as mu holds it: goal, your hard constraints and where you said them, to-do items
@@ -66255,6 +66827,8 @@ Tools the agent can use (and you can ask for)
   /implement <task>        scout, plan, implement: a chain of sub-agents, each working to its own checklist
   /scout-and-plan <task>   scout, then plan; nothing is changed
   /implement-and-review <task>   implement, review, fix
+  /hive <question>         several investigators on one question at once, each from its own angle; the judge
+                           passes what one finds to the others it matters to, and the answer draws on all of them
   /swarm                   what every running sub-agent is doing right now; /swarm stop [name] has it report
                            now and keeps what it found, /swarm kill [name] ends it at once
   /review [what]           hand a review to the reviewer role; the judge sorts its findings P0 to P3
@@ -66433,7 +67007,7 @@ function registerCommands(runtime, roots) {
   pi.on(
     "resources_discover",
     failOpen(
-      () => existsSync6(PROMPTS_DIR) ? {
+      () => existsSync7(PROMPTS_DIR) ? {
         promptPaths: [
           // In mu's own folder, which is the user's alone: a template is text the model follows.
           roots ? promptsFor(PROMPTS_DIR, appLanguage()?.wording, join18(roots.agentDir, "mu", "prompts")) : PROMPTS_DIR
@@ -67715,8 +68289,8 @@ function registerFrame(runtime) {
       let timer;
       const late = await Promise.race([
         ask.pending.then(() => false),
-        new Promise((resolve13) => {
-          timer = setTimeout(() => resolve13(true), Math.max(0, options.waitMs - (Date.now() - ask.startedAt)));
+        new Promise((resolve15) => {
+          timer = setTimeout(() => resolve15(true), Math.max(0, options.waitMs - (Date.now() - ask.startedAt)));
         })
       ]);
       if (timer) clearTimeout(timer);
@@ -68395,15 +68969,28 @@ ${goal.text}`
 var import_pi_ai3 = __toESM(require_pi_ai(), 1);
 
 // packages/ai/src/providers/data/google.json
-var google_default = { "google-generative-ai": { "deep-research-max-preview-04-2026": { id: "deep-research-max-preview-04-2026", name: "Deep Research Max Preview (Apr-21-2026)", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536 }, "deep-research-preview-04-2026": { id: "deep-research-preview-04-2026", name: "Deep Research Preview (Apr-21-2026)", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536 }, "gemini-2.5-computer-use-preview-10-2025": { id: "gemini-2.5-computer-use-preview-10-2025", name: "Gemini 2.5 Computer Use Preview 10-2025", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 1.25, output: 10, cacheRead: 0, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536 }, "gemini-2.5-flash": { id: "gemini-2.5-flash", name: "Gemini 2.5 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-2.5-flash-lite": { id: "gemini-2.5-flash-lite", name: "Gemini 2.5 Flash-Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 0.1, output: 0.4, cacheRead: 0.01, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-2.5-pro": { id: "gemini-2.5-pro", name: "Gemini 2.5 Pro", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 1.25, output: 10, cacheRead: 0.125, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3-flash-preview": { id: "gemini-3-flash-preview", name: "Gemini 3 Flash Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.5, output: 3, cacheRead: 0.05, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.1-flash-lite": { id: "gemini-3.1-flash-lite", name: "Gemini 3.1 Flash Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.1-flash-lite-image": { id: "gemini-3.1-flash-lite-image", name: "Nano Banana 2 Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: null, medium: null, high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 30, cacheRead: 0, cacheWrite: 0 }, contextWindow: 65536, maxTokens: 65536 }, "gemini-3.1-flash-lite-preview": { id: "gemini-3.1-flash-lite-preview", name: "Gemini 3.1 Flash Lite Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.1-flash-live-preview": { id: "gemini-3.1-flash-live-preview", name: "Gemini 3.1 Flash Live Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 4.5, cacheRead: 0, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536 }, "gemini-3.1-pro-preview": { id: "gemini-3.1-pro-preview", name: "Gemini 3.1 Pro Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.1-pro-preview-customtools": { id: "gemini-3.1-pro-preview-customtools", name: "Gemini 3.1 Pro Preview Custom Tools", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.5-flash": { id: "gemini-3.5-flash", name: "Gemini 3.5 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 1.5, output: 9, cacheRead: 0.15, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.5-flash-lite": { id: "gemini-3.5-flash-lite", name: "Gemini 3.5 Flash Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.6-flash": { id: "gemini-3.6-flash", name: "Gemini 3.6 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.7-flash": { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-3.8-flash": { id: "gemini-3.8-flash", name: "Gemini 3.8 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-flash-latest": { id: "gemini-flash-latest", name: "Gemini Flash Latest", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 1.5, output: 9, cacheRead: 0.15, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemini-flash-lite-latest": { id: "gemini-flash-lite-latest", name: "Gemini Flash-Lite Latest", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536 }, "gemma-4-26b-a4b-it": { id: "gemma-4-26b-a4b-it", name: "Gemma 4 26B A4B IT", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "MINIMAL", low: null, medium: null, high: "HIGH" }, input: ["text", "image"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }, contextWindow: 262144, maxTokens: 32768 }, "gemma-4-31b-it": { id: "gemma-4-31b-it", name: "Gemma 4 31B IT", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "MINIMAL", low: null, medium: null, high: "HIGH" }, input: ["text", "image"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }, contextWindow: 262144, maxTokens: 32768 } } };
+var google_default = { "google-generative-ai": { "chat:deep-research-max-preview-04-2026": { id: "deep-research-max-preview-04-2026", name: "Deep Research Max Preview (Apr-21-2026)", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:deep-research-preview-04-2026": { id: "deep-research-preview-04-2026", name: "Deep Research Preview (Apr-21-2026)", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-2.5-computer-use-preview-10-2025": { id: "gemini-2.5-computer-use-preview-10-2025", name: "Gemini 2.5 Computer Use Preview 10-2025", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 1.25, output: 10, cacheRead: 0, cacheWrite: 0 }, contextWindow: 128e3, maxTokens: 64e3, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-2.5-flash": { id: "gemini-2.5-flash", name: "Gemini 2.5 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-2.5-flash-lite": { id: "gemini-2.5-flash-lite", name: "Gemini 2.5 Flash-Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 0.1, output: 0.4, cacheRead: 0.01, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-2.5-pro": { id: "gemini-2.5-pro", name: "Gemini 2.5 Pro", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, input: ["text", "image"], cost: { input: 1.25, output: 10, cacheRead: 0.125, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3-flash-preview": { id: "gemini-3-flash-preview", name: "Gemini 3 Flash Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.5, output: 3, cacheRead: 0.05, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-flash-lite": { id: "gemini-3.1-flash-lite", name: "Gemini 3.1 Flash Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-flash-lite-image": { id: "gemini-3.1-flash-lite-image", name: "Nano Banana 2 Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: null, medium: null, high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 30, cacheRead: 0, cacheWrite: 0 }, contextWindow: 65536, maxTokens: 4096, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-flash-lite-preview": { id: "gemini-3.1-flash-lite-preview", name: "Gemini 3.1 Flash Lite Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-flash-live-preview": { id: "gemini-3.1-flash-live-preview", name: "Gemini 3.1 Flash Live Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 4.5, cacheRead: 0, cacheWrite: 0 }, contextWindow: 131072, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-pro-preview": { id: "gemini-3.1-pro-preview", name: "Gemini 3.1 Pro Preview", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.1-pro-preview-customtools": { id: "gemini-3.1-pro-preview-customtools", name: "Gemini 3.1 Pro Preview Custom Tools", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 2, output: 12, cacheRead: 0.2, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.5-flash": { id: "gemini-3.5-flash", name: "Gemini 3.5 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 1.5, output: 9, cacheRead: 0.15, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.5-flash-lite": { id: "gemini-3.5-flash-lite", name: "Gemini 3.5 Flash Lite", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.6-flash": { id: "gemini-3.6-flash", name: "Gemini 3.6 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.7-flash": { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-3.8-flash": { id: "gemini-3.8-flash", name: "Gemini 3.8 Flash", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: null, low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.75, output: 3.75, cacheRead: 0.075, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-flash-latest": { id: "gemini-flash-latest", name: "Gemini Flash Latest", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 1.5, output: 9, cacheRead: 0.15, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemini-flash-lite-latest": { id: "gemini-flash-lite-latest", name: "Gemini Flash-Lite Latest", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "minimal", low: "low", medium: "medium", high: "high", xhigh: null, max: null }, input: ["text", "image"], cost: { input: 0.25, output: 1.5, cacheRead: 0.025, cacheWrite: 0 }, contextWindow: 1048576, maxTokens: 65536, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemma-4-26b-a4b-it": { id: "gemma-4-26b-a4b-it", name: "Gemma 4 26B A4B IT", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "MINIMAL", low: null, medium: null, high: "HIGH" }, input: ["text", "image"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }, contextWindow: 262144, maxTokens: 32768, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" }, "chat:gemma-4-31b-it": { id: "gemma-4-31b-it", name: "Gemma 4 31B IT", api: "google-generative-ai", provider: "google", baseUrl: "https://generativelanguage.googleapis.com/v1beta", reasoning: true, thinkingLevelMap: { off: null, minimal: "MINIMAL", low: null, medium: null, high: "HIGH" }, input: ["text", "image"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 }, contextWindow: 262144, maxTokens: 32768, inputLimits: { maxRequestBytes: 20971520, images: { maxPerRequest: 3600, resize: { maxWidth: 2e3, maxHeight: 2e3, maxBytes: 4718592, jpegQuality: 80 } } }, type: "chat" } } };
 
 // packages/ai/src/model-catalog.ts
-function flattenModelCatalog(_provider, groups2) {
-  return Object.assign({}, ...Object.values(groups2));
+function flattenModelCatalog(groups2, type) {
+  return Object.fromEntries(
+    Object.values(groups2).flatMap((models) => Object.values(models)).filter((model) => model.type === type).map((model) => [model.id, model])
+  );
+}
+function flattenChatModelCatalog(_provider, groups2) {
+  return flattenModelCatalog(groups2, "chat");
+}
+function flattenImageModelCatalog(_provider, groups2) {
+  return flattenModelCatalog(groups2, "image");
+}
+function flattenClassifierModelCatalog(_provider, groups2) {
+  return flattenModelCatalog(groups2, "classifier");
 }
 
 // packages/ai/src/providers/google.models.ts
-var GOOGLE_MODELS = flattenModelCatalog("google", google_default);
+var GOOGLE_MODELS = flattenChatModelCatalog("google", google_default);
+var GOOGLE_IMAGE_MODELS = flattenImageModelCatalog("google", google_default);
+var GOOGLE_CLASSIFIER_MODELS = flattenClassifierModelCatalog("google", google_default);
 
 // packages/kyrn-judge/src/google-login/providers.ts
 init_endpoints();
@@ -68470,7 +69057,7 @@ async function pkce() {
   return { verifier, challenge: base64url(new Uint8Array(digest2)) };
 }
 function listen(config, state) {
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve15, reject) => {
     let settle = () => {
     };
     const wait = new Promise((done) => {
@@ -68517,7 +69104,7 @@ function listen(config, state) {
     server.listen(
       config.callbackPort,
       config.callbackHost,
-      () => resolve13({ server, wait, cancel: () => settle(void 0) })
+      () => resolve15({ server, wait, cancel: () => settle(void 0) })
     );
   });
 }
@@ -68610,7 +69197,7 @@ async function geminiProject(config, token, interaction) {
   if (!started.ok) throw new Error(`onboardUser failed (${started.status}): ${(await started.text()).slice(0, 300)}`);
   let operation = await started.json();
   for (let attempt = 0; !operation.done && operation.name && attempt < 60; attempt++) {
-    await new Promise((resolve13) => setTimeout(resolve13, attempt === 0 ? 1e3 : 5e3));
+    await new Promise((resolve15) => setTimeout(resolve15, attempt === 0 ? 1e3 : 5e3));
     const polled = await fetch(`${endpoint}/v1internal/${operation.name}`, { headers, signal: interaction.signal });
     if (!polled.ok) throw new Error(`Setting up the project failed (${polled.status})`);
     operation = await polled.json();
@@ -68943,11 +69530,21 @@ var toolRisk = defineDecision({
 // packages/kyrn-judge/src/extension/features/guard.ts
 var RULES = [
   [/\brm\s+(-[a-zA-Z]+\s+)*-[a-zA-Z]*[rf]/, "recursive or forced delete"],
+  // find deletes what it finds with -delete, or with rm run on each.
+  [/\bfind\b[^|;&\n]*\s-(?:delete\b|(?:exec|execdir|ok|okdir)\s+(?:\S*\/)?rm\b)/, "recursive or forced delete"],
   [
     /\bgit\s+(reset\s+--hard|clean\s+-[a-zA-Z]*f|checkout\s+--\s|branch\s+-D|stash\s+(drop|clear))/,
     "discards git work"
   ],
+  // The same deeds spelled otherwise: clean forced by a later option, a checkout of everything or by force, a
+  // restore of the working tree, a branch deleted by force.
+  [
+    /\bgit\s+(?:clean\b[^|;&\n]*\s(?:-[a-zA-Z]*f|--force)\b|checkout\s+(?:\.(?:\s|$)|-f\b|--force\b)|restore\b(?:(?![^|;&\n]*--staged)|(?=[^|;&\n]*(?:--worktree|\s-W\b)))|branch\b[^|;&\n]*(?:--delete\s+--force|--force\s+--delete|\s-(?:D|df|fd)\b))/,
+    "discards git work"
+  ],
   [/\bgit\s+push\b.*(--force|\s-f\b)/, "force push"],
+  // A `+` refspec forces as well; --mirror, --delete and `:branch` remove what is on the remote.
+  [/\bgit\s+push\b[^|;&\n]*\s(?:\+\S|--mirror\b|--delete\b|-d\b|:\S)/, "force push"],
   [/\b(drop|truncate)\s+(table|database|schema)\b/i, "drops database objects"],
   [/\bmkfs\b|\bdd\b.*\bof=\/dev\//, "overwrites a device"],
   [/\bchmod\s+-R\s+0?777\b/, "opens permissions recursively"],
@@ -68962,9 +69559,14 @@ var RULES = [
   ],
   [/\bStart-Process\b[^|;\n]*-Verb\s+RunAs\b|\brunas\b/i, "runs as administrator"],
   [/\bformat\s+[a-z]:|\bFormat-Volume\b|\bClear-Disk\b/i, "overwrites a device"],
-  [/\b(curl|wget)\b[^|;&]*\|\s*(sudo\s+)?(ba|z)?sh\b/, "runs a downloaded script"],
-  [/\bsudo\b/, "runs as root"]
+  [/\b(curl|wget)\b[^|;&]*\|\s*(sudo\s+)?(?:(?:ba|z|da|k)?sh|python\d*|perl|ruby|node)\b/, "runs a downloaded script"],
+  // Without a pipe: a download read as a file (`bash <(curl …)`) or as the text of `sh -c "$(curl …)"`.
+  [/<\(\s*(?:curl|wget)\b|\b(?:ba|z|da|k)?sh\s+-c\s+["']?\$\(\s*(?:curl|wget)\b/, "runs a downloaded script"],
+  [/\b(?:sudo|doas|pkexec)\b/, "runs as root"]
 ];
+function unquoted(command) {
+  return command.replace(/\\(?=[A-Za-z])/g, "").replace(/(["'])([^"'\s]*)\1/g, "$2");
+}
 var FLAG_ZH = {
   "recursive or forced delete": "\u9012\u5F52\u6216\u5F3A\u5236\u5220\u9664",
   "discards git work": "\u4E22\u5F03 git \u91CC\u7684\u6539\u52A8",
@@ -68989,7 +69591,8 @@ var FLAG_CODES = {
 };
 var COMMAND_TOOLS = /* @__PURE__ */ new Set([...SHELL_TOOLS, "bg_start"]);
 function riskFlag(command) {
-  return RULES.find(([pattern]) => pattern.test(command))?.[1];
+  const plain2 = unquoted(command);
+  return RULES.find(([pattern]) => pattern.test(command) || pattern.test(plain2))?.[1];
 }
 function registerGuard(runtime) {
   const options = runtime.options("guard", { enabled: true });
@@ -69003,9 +69606,10 @@ function registerGuard(runtime) {
       const command = String(event.input.command ?? "");
       const flag = riskFlag(command);
       if (!flag) return void 0;
+      const asked = subAgentUserGoal() ?? runtime.turn.userMessage;
       const decision = await runtime.engine.decide(
         toolRisk,
-        { command: clip(command, 400), userMessage: clip(runtime.turn.userMessage, 400), flag },
+        { command: clip(command, 400), userMessage: clip(asked, 400), flag },
         { signal: ctx.signal }
       );
       if (decision.mode !== "active" || decision.outcome === "allow") return void 0;
@@ -69086,9 +69690,10 @@ var hiveDeliver = defineDecision({
     return { deliver: false, score: 0 };
   }
 });
+var ACROSS_BEES_SUPERSEDES = 0.9;
 var hiveRelate = defineDecision({
   id: "hive.relate",
-  version: 1,
+  version: 2,
   cacheImpact: "none",
   latency: "background",
   capabilities: "classify",
@@ -69115,7 +69720,9 @@ var hiveRelate = defineDecision({
     const choice = pickChoice(answers.relation);
     const score = answers.relation.probabilities?.[answers.relation.choice] ?? 1;
     if (!choice) return { relation: null, score };
-    if (choice === "contradicts" && input.earlier.bee === input.later.bee) return { relation: "supersedes", score };
+    const ownNote = input.earlier.bee === input.later.bee;
+    if (choice === "contradicts" && ownNote) return { relation: "supersedes", score };
+    if (choice === "supersedes" && !ownNote && score < ACROSS_BEES_SUPERSEDES) return { relation: null, score };
     return { relation: choice, score };
   },
   fallback() {
@@ -69291,11 +69898,16 @@ function overlapping(text6, notes, options = {}) {
 function foldRelations(notes, relations) {
   const ids = new Set(notes.map((note2) => note2.id));
   const known = relations.filter((row) => ids.has(row.earlier) && ids.has(row.later));
+  const beeOf = new Map(notes.map((note2) => [note2.id, note2.bee]));
   const superseded = /* @__PURE__ */ new Map();
   const supported = /* @__PURE__ */ new Map();
   for (const row of known) {
     if (row.relation === "supersedes") superseded.set(row.earlier, row);
-    else if (row.relation === "supports") supported.set(row.earlier, (supported.get(row.earlier) ?? 0) + 1);
+    else if (row.relation === "supports") {
+      const by = beeOf.get(row.later) ?? row.by;
+      const named = supported.get(row.earlier) ?? [];
+      if (by !== beeOf.get(row.earlier) && !named.includes(by)) supported.set(row.earlier, [...named, by]);
+    }
   }
   const contested = /* @__PURE__ */ new Map();
   for (const row of known) {
@@ -69315,12 +69927,34 @@ function isDuplicate(text6, notes, overlap = 0.8) {
   });
 }
 
+// packages/kyrn-judge/src/hive/request.ts
+function parseHiveArgs(args) {
+  const text6 = args.trim();
+  if (!text6 || text6 === "status") return { kind: "status" };
+  const [verb, name, ...more] = text6.split(/\s+/);
+  if ((verb === "stop" || verb === "kill") && more.length === 0) {
+    return { kind: "control", verb, ...name ? { name } : {} };
+  }
+  return { kind: "question", question: text6 };
+}
+function hiveRequest(question) {
+  return [
+    `Question for a hive: ${question.trim()}`,
+    "",
+    "Call the `hive` tool now, as your first step: do not read anything first, and do not ask me anything.",
+    "- goal: my question as I asked it, and what a complete answer to it must contain.",
+    "- bees: three investigators (two for a narrow question, four for one with four separate parts). Give each a different angle on the same question, chosen so that what one finds can confirm, correct or advance what the others look at: where it is implemented, how it is configured or called, what running it or its tests shows, what the history or the documentation says. Name each after its angle.",
+    "",
+    "When the hive returns, answer my question from the reports and the board: the answer first, then the evidence (file:line, commands and what they printed). Rely most on findings that were confirmed or that corrected another, and say what stayed disputed or unverified. Answer in the language of my question."
+  ].join("\n");
+}
+
 // packages/kyrn-judge/src/extension/features/swarm.ts
 var import_pi_coding_agent6 = __toESM(require_pi_coding_agent(), 1);
 var import_typebox6 = __toESM(require_typebox(), 1);
 import { spawn as spawn6 } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { mkdtemp, readFile as readFile2, rm as rm4, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
 import { basename as basename6, join as join24 } from "node:path";
@@ -69333,7 +69967,7 @@ import { join as join22 } from "node:path";
 
 // packages/kyrn-judge/src/swarm/worktree.ts
 import { spawn as spawn5 } from "node:child_process";
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { chmod, copyFile, lstat, mkdir, readdir, readFile, readlink, rm, symlink, writeFile } from "node:fs/promises";
 import { dirname as dirname3, join as join21 } from "node:path";
 function gitArgs(args, platform = process.platform) {
@@ -69349,7 +69983,7 @@ function gitArgs(args, platform = process.platform) {
   ];
 }
 var INHERITED = ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE", "GIT_COMMON_DIR", "GIT_PREFIX"];
-var runGit = (args, options) => new Promise((resolve13) => {
+var spawnGit2 = (args, options) => new Promise((resolve15) => {
   const env = { ...process.env };
   for (const name of INHERITED) delete env[name];
   Object.assign(env, { LC_ALL: "C", LANGUAGE: "C", GIT_TERMINAL_PROMPT: "0" }, options.env);
@@ -69366,7 +70000,7 @@ var runGit = (args, options) => new Promise((resolve13) => {
       signal: options.signal
     });
   } catch (error) {
-    resolve13({ code: -1, stdout: Buffer.alloc(0), stderr: String(error), missing: true });
+    resolve15({ code: -1, stdout: Buffer.alloc(0), stderr: String(error), missing: true });
     return;
   }
   child.stdout?.on("data", (chunk) => out.push(chunk));
@@ -69374,12 +70008,25 @@ var runGit = (args, options) => new Promise((resolve13) => {
     stderr = (stderr + chunk.toString("utf8")).slice(-8e3);
   });
   child.on("error", (error) => {
-    resolve13({ code: -1, stdout: Buffer.concat(out), stderr: error.message, missing: error.code === "ENOENT" });
+    resolve15({ code: -1, stdout: Buffer.concat(out), stderr: error.message, missing: error.code === "ENOENT" });
   });
-  child.on("close", (code) => resolve13({ code: code ?? -1, stdout: Buffer.concat(out), stderr }));
+  child.on("close", (code) => resolve15({ code: code ?? -1, stdout: Buffer.concat(out), stderr }));
   child.stdin?.on("error", () => void 0);
   child.stdin?.end(options.input);
 });
+function gitRunner(probe = hostProbe) {
+  let stub;
+  return async (args, options) => {
+    stub ??= stubProblem("git", options.env?.PATH ?? process.env.PATH, probe);
+    const problem = await stub;
+    if (problem)
+      return { code: -1, stdout: Buffer.alloc(0), stderr: problem.message, missing: true, unusable: problem.reason };
+    const result = await spawnGit2(args, options);
+    return heldByLicense(result.code, () => `${result.stderr}
+${result.stdout.toString("utf8")}`) ? { ...result, missing: true, unusable: "xcode_license" } : result;
+  };
+}
+var runGit = gitRunner();
 var text2 = (result) => result.stdout.toString("utf8");
 var lastLine = (stderr) => stderr.trim().split("\n").pop()?.trim() ?? "";
 var BUSY = [
@@ -69392,6 +70039,7 @@ var BUSY = [
 ];
 async function checkRepo(run2, cwd) {
   const probe = await run2(["rev-parse", "--is-bare-repository", "--is-inside-work-tree"], { cwd });
+  if (probe.unusable) return { ok: false, problem: "no-git", message: UNUSABLE_TEXT[probe.unusable] };
   if (probe.missing) return { ok: false, problem: "no-git", message: "git is not installed or not on PATH" };
   if (probe.code !== 0)
     return { ok: false, problem: "not-a-repo", message: "this directory is not in a git repository" };
@@ -69403,7 +70051,7 @@ async function checkRepo(run2, cwd) {
   if (where2.code !== 0) return { ok: false, problem: "not-a-repo", message: lastLine(where2.stderr) };
   if (head.code !== 0) return { ok: false, problem: "no-commit", message: "the repository has no commit yet" };
   const [root, gitDir, prefix = ""] = text2(where2).replace(/\n$/, "").split("\n");
-  const busy = BUSY.find(([name]) => existsSync7(join21(gitDir, name)));
+  const busy = BUSY.find(([name]) => existsSync8(join21(gitDir, name)));
   if (busy) return { ok: false, problem: "busy", message: `${busy[1]} is in progress in this repository` };
   return { ok: true, repo: { root, gitDir, prefix, head: text2(head).trim() } };
 }
@@ -69550,11 +70198,11 @@ async function removeWorktree(run2, worktree) {
   const problems = [];
   const cwd = worktree.repoRoot;
   let removed = await run2(["worktree", "remove", "--force", worktree.dir], { cwd });
-  if (removed.code !== 0 || existsSync7(worktree.dir)) {
+  if (removed.code !== 0 || existsSync8(worktree.dir)) {
     await rm(worktree.dir, { recursive: true, force: true, maxRetries: 8, retryDelay: 250 }).catch(() => void 0);
     removed = await run2(["worktree", "remove", "--force", worktree.dir], { cwd });
     if (removed.code !== 0) await run2(["worktree", "prune"], { cwd });
-    if (existsSync7(worktree.dir)) problems.push(`could not delete ${worktree.dir}`);
+    if (existsSync8(worktree.dir)) problems.push(`could not delete ${worktree.dir}`);
   }
   const listed2 = await run2(["branch", "--list", worktree.branch], { cwd });
   if (text2(listed2).trim()) {
@@ -69598,9 +70246,9 @@ async function sweepStaleWorktrees(run2, options) {
       if (markerPath(marker.dir) !== path || typeof marker.repoRoot !== "string") continue;
       const stale = marker.released || !alive(marker.pid) || now - marker.createdAt > maxAge;
       if (!stale) continue;
-      if (existsSync7(marker.repoRoot)) await removeWorktree(run2, marker);
+      if (existsSync8(marker.repoRoot)) await removeWorktree(run2, marker);
       else await rm(marker.dir, { recursive: true, force: true }).catch(() => void 0);
-      if (!existsSync7(marker.dir)) {
+      if (!existsSync8(marker.dir)) {
         await rm(path, { force: true }).catch(() => void 0);
         swept.push(marker);
       }
@@ -69760,6 +70408,7 @@ function readPatch(record4) {
 
 // packages/kyrn-judge/src/swarm/view.ts
 var import_pi_tui2 = __toESM(require_pi_tui(), 1);
+import { stripVTControlCharacters } from "node:util";
 function clock2(ms) {
   const seconds3 = Math.max(0, Math.round(ms / 1e3));
   return seconds3 < 60 ? `${seconds3}s` : `${Math.floor(seconds3 / 60)}m${String(seconds3 % 60).padStart(2, "0")}s`;
@@ -69827,7 +70476,7 @@ function quote(text6, width, maxLines, paint) {
   const lines2 = (0, import_pi_tui2.wrapTextWithAnsi)(flat3(text6), Math.max(16, width));
   const shown2 = lines2.slice(0, maxLines);
   if (lines2.length > maxLines)
-    shown2[maxLines - 1] = `${(0, import_pi_tui2.truncateToWidth)(shown2[maxLines - 1], Math.max(8, width - 2))} \u2026`;
+    shown2[maxLines - 1] = `${(0, import_pi_tui2.truncateToWidth)(shown2[maxLines - 1], Math.max(8, width - 2), "")} \u2026`;
   return shown2.map((line2) => paint.fg("dim", line2));
 }
 function renderSwarm(snapshot2, options, paint) {
@@ -69901,7 +70550,11 @@ function renderSwarm(snapshot2, options, paint) {
   } else if (expanded) {
     lines2.push(paint.fg("dim", `transcripts, board and gate log: ${snapshot2.dir}`));
   }
-  return lines2.map((line2) => (0, import_pi_tui2.truncateToWidth)(line2, width));
+  return lines2.map((line2) => (0, import_pi_tui2.truncateToWidth)(line2, width, "\u2026"));
+}
+var PLAIN = { fg: (_color, text6) => text6, bold: (text6) => text6 };
+function swarmText(snapshot2, options) {
+  return stripVTControlCharacters(renderSwarm(snapshot2, options, PLAIN).join("\n"));
 }
 
 // packages/kyrn-judge/src/extension/features/swarm-isolation.ts
@@ -70266,7 +70919,8 @@ The patch is kept.`,
 };
 function rebase(instructions, parent, dir) {
   const prefix = parent.repo.prefix.replace(/[\\/]$/, "");
-  const asSpelled = prefix && parent.cwd.endsWith(prefix) ? parent.cwd.slice(0, -prefix.length - 1) : parent.cwd;
+  const nested = prefix && parent.cwd.replaceAll("\\", "/").endsWith(`/${prefix}`);
+  const asSpelled = nested ? parent.cwd.slice(0, -prefix.length - 1) : parent.cwd;
   const roots = [.../* @__PURE__ */ new Set([parent.repo.root, asSpelled])].sort((a, b) => b.length - a.length);
   return roots.reduce((text6, root) => root ? text6.split(root).join(dir) : text6, instructions);
 }
@@ -70300,7 +70954,7 @@ function thinkingForRoute(route) {
 }
 function piInvocation(args) {
   const script = process.argv[1];
-  if (script && existsSync8(script)) return { command: process.execPath, args: [...process.execArgv, script, ...args] };
+  if (script && existsSync9(script)) return { command: process.execPath, args: [...process.execArgv, script, ...args] };
   const generic = /^(node|bun)(\.exe)?$/.test(basename6(process.execPath).toLowerCase());
   return generic ? { command: "pi", args } : { command: process.execPath, args };
 }
@@ -70374,7 +71028,7 @@ var spawnRunner = async (task, assignment, signal, env, observer) => {
     await writeFile2(promptPath, assignment.agent.systemPrompt, { encoding: "utf8", mode: 384 });
   }
   try {
-    return await new Promise((resolve13, reject) => {
+    return await new Promise((resolve15, reject) => {
       const invocation = piInvocation(childArgs(task, assignment, promptPath));
       const child = spawn6(invocation.command, invocation.args, {
         // An isolated sub-agent works in its own checkout; everyone else where the parent is.
@@ -70411,7 +71065,7 @@ var spawnRunner = async (task, assignment, signal, env, observer) => {
         finished = true;
         signal?.removeEventListener("abort", onAbort);
         if (error) reject(error);
-        else resolve13(lastText.trim());
+        else resolve15(lastText.trim());
       };
       const onAbort = () => {
         terminate();
@@ -70489,7 +71143,7 @@ function announceRouting(onUpdate, count3) {
 var SWARM_LIMIT_DEFAULTS = {
   /** Minutes a sub-agent may work before it is told to wrap up and report. 0 means no budget. */
   beeMinutes: 10,
-  /** Seconds it then has to hand in its report. */
+  /** Seconds it then has to hand in its report, from when it heard it was to; twice this at most from the asking. */
   graceSeconds: 90,
   /** Seconds without a sign of life before it is stopped: while the model thinks, and while a tool runs. */
   stallSeconds: 300,
@@ -70514,7 +71168,7 @@ function streamUpdates(run2, onUpdate) {
     last = Date.now();
     const snapshot2 = run2.snapshot();
     onUpdate({
-      content: [{ type: "text", text: renderSwarm(snapshot2, { expanded: false, width: 120 }, PLAIN).join("\n") }],
+      content: [{ type: "text", text: swarmText(snapshot2, { expanded: false, width: 120 }) }],
       details: { snapshot: snapshot2 }
     });
   };
@@ -70528,7 +71182,6 @@ function streamUpdates(run2, onUpdate) {
     else pending ??= setTimeout(send, wait);
   };
 }
-var PLAIN = { fg: (_color, text6) => text6, bold: (text6) => text6 };
 function renderSwarmResult(result, options, theme) {
   const details = result.details;
   return {
@@ -70621,11 +71274,12 @@ function registerSwarm(runtime, runner = spawnRunner) {
     execute: async (_toolCallId, params, signal, onUpdate, ctx) => {
       runtime.touch(ctx);
       const parent = runtime.frame;
+      const userGoal = userWords(runtime.turn.userMessage);
       const tasks = params.tasks.slice(0, options.maxTasks).map((task) => ({
         title: task.title,
         instructions: task.instructions,
         agent: task.agent,
-        brief: briefFor(task, parent)
+        brief: briefFor(task, parent, userGoal)
       }));
       const constraints = (parent?.constraints ?? []).map((constraint) => constraint.text);
       const inheritedConstraints = constraints.length > 0 ? { KYRN_SWARM_CONSTRAINTS: JSON.stringify(constraints.slice(-12)) } : void 0;
@@ -70775,54 +71429,48 @@ ${checklist}` : ""}${isolation.describe(outcomesOfIsolation.get(task))}`;
   });
 }
 var withCommand = /* @__PURE__ */ new WeakSet();
-function registerSwarmCommand(runtime) {
-  if (withCommand.has(runtime)) return;
-  withCommand.add(runtime);
-  const handler = async (args, ctx) => {
-    const [verb = "status", ...rest] = args.trim().split(/\s+/).filter(Boolean);
-    const name = rest.join(" ") || void 0;
-    const runs = activeRuns();
-    const patches = patchesOf(runtime).map((record4) => `  ${describeRecord2(record4)}`);
-    const patchList = patches.length > 0 ? `patches (apply_patch_from brings one in)
+function controlSwarm(runtime, args, ctx, idle) {
+  const [verb = "status", ...rest] = args.trim().split(/\s+/).filter(Boolean);
+  const name = rest.join(" ") || void 0;
+  const runs = activeRuns();
+  const patches = patchesOf(runtime).map((record4) => `  ${describeRecord2(record4)}`);
+  const patchList = patches.length > 0 ? `patches (apply_patch_from brings one in)
 ${patches.join("\n")}` : "";
-    if (runs.length === 0) {
-      ctx.ui.notify(
-        patchList || "No sub-agents are running. They start when the agent uses its delegate or hive tool.",
-        "info"
-      );
-      return;
-    }
-    if (verb === "stop" || verb === "kill") {
-      const reached = runs.reduce(
-        (sum, run2) => sum + (verb === "stop" ? run2.wrapUp(name, "stopped by the user", { code: "stopped_by_user" }) : run2.kill(name, "ended by the user", "stopped", { code: "ended_by_user" })),
-        0
-      );
-      ctx.ui.notify(
-        reached === 0 ? `Nothing to ${verb}${name ? ` named "${name}"` : ""}. Running: ${runs.flatMap((run2) => run2.bees.map((bee) => bee.name)).join(", ")}` : verb === "stop" ? `Asked ${reached} sub-agent${reached === 1 ? "" : "s"} to stop and report. Anything that has not reported in time is ended.` : `Ended ${reached} sub-agent${reached === 1 ? "" : "s"}. What they had found is kept.`,
-        reached === 0 ? "warning" : "info"
-      );
-      return;
-    }
-    const theme = PLAIN;
+  if (runs.length === 0) {
     ctx.ui.notify(
-      [
-        ...runs.map((run2) => renderSwarm(run2.snapshot(), { expanded: true, width: 110 }, theme).join("\n")),
-        patchList
-      ].filter(Boolean).join("\n\n"),
+      [patchList || "No sub-agents are running. They start when the agent uses its delegate or hive tool.", idle].filter(Boolean).join("\n"),
       "info"
     );
-  };
-  for (const command of ["swarm", "hive"]) {
-    runtime.pi.registerCommand(command, {
-      description: command === "swarm" ? say({
-        zh: "\u6B63\u5728\u5E72\u6D3B\u7684\u5B50\u4EE3\u7406\uFF1A/swarm \u770B\u6BCF\u4E2A\u5728\u505A\u4EC0\u4E48\uFF0C/swarm stop [\u540D\u5B57] \u8BA9\u5B83\u73B0\u5728\u4EA4\u62A5\u544A\uFF0C/swarm kill [\u540D\u5B57] \u7ACB\u523B\u7ED3\u675F\u5B83",
-        en: "Sub-agents at work: /swarm (what each one is doing), /swarm stop [name] (report now), /swarm kill [name]"
-      }) : say({ zh: "\u540C /swarm", en: "Same as /swarm" }),
-      // No argument completions on purpose: with them the first Enter picks a completion and only the
-      // second one runs the command, and "stop" is typed by someone who wants it to happen now.
-      handler
-    });
+    return;
   }
+  if (verb === "stop" || verb === "kill") {
+    const reached = runs.reduce(
+      (sum, run2) => sum + (verb === "stop" ? run2.wrapUp(name, "stopped by the user", { code: "stopped_by_user" }) : run2.kill(name, "ended by the user", "stopped", { code: "ended_by_user" })),
+      0
+    );
+    ctx.ui.notify(
+      reached === 0 ? `Nothing to ${verb}${name ? ` named "${name}"` : ""}. Running: ${runs.flatMap((run2) => run2.bees.map((bee) => bee.name)).join(", ")}` : verb === "stop" ? `Asked ${reached} sub-agent${reached === 1 ? "" : "s"} to stop and report. Anything that has not reported in time is ended.` : `Ended ${reached} sub-agent${reached === 1 ? "" : "s"}. What they had found is kept.`,
+      reached === 0 ? "warning" : "info"
+    );
+    return;
+  }
+  ctx.ui.notify(
+    [...runs.map((run2) => swarmText(run2.snapshot(), { expanded: true, width: 110 })), patchList].filter(Boolean).join("\n\n"),
+    "info"
+  );
+}
+function registerSwarmCommand(runtime) {
+  if (withCommand.has(runtime)) return;
+  withCommand.add(runtime);
+  runtime.pi.registerCommand("swarm", {
+    description: say({
+      zh: "\u6B63\u5728\u5E72\u6D3B\u7684\u5B50\u4EE3\u7406\uFF1A/swarm \u770B\u6BCF\u4E2A\u5728\u505A\u4EC0\u4E48\uFF0C/swarm stop [\u540D\u5B57] \u8BA9\u5B83\u73B0\u5728\u4EA4\u62A5\u544A\uFF0C/swarm kill [\u540D\u5B57] \u7ACB\u523B\u7ED3\u675F\u5B83",
+      en: "Sub-agents at work: /swarm (what each one is doing), /swarm stop [name] (report now), /swarm kill [name]"
+    }),
+    // No argument completions on purpose: with them the first Enter picks a completion and only the
+    // second one runs the command, and "stop" is typed by someone who wants it to happen now.
+    handler: async (args, ctx) => controlSwarm(runtime, args, ctx)
+  });
 }
 
 // packages/kyrn-judge/src/extension/features/swarm-child.ts
@@ -70987,6 +71635,7 @@ function registerMember(runtime, dir) {
     const verdicts = await runtime.engine.decideMany(hiveRelate, inputs, { signal });
     pairs.forEach(({ note: note2, earlier }, at) => {
       const { relation, score } = verdicts[at].outcome;
+      const answer = verdicts[at].answers?.relation;
       board.log({
         gate: "relate",
         by: me,
@@ -70994,6 +71643,7 @@ function registerMember(runtime, dir) {
         earlier: earlier.id,
         relation,
         score,
+        ...answer?.type === "choice" ? { choice: answer.choice, ...answer.probabilities ? { p: answer.probabilities } : {} } : {},
         reason: verdicts[at].reason
       });
       if (relation)
@@ -71115,21 +71765,23 @@ function registerMember(runtime, dir) {
       queue = queue.then(() => step(candidates, ctx.signal)).catch(() => void 0);
       if (isWrappingUp(runtime)) return void 0;
       if (event.toolResults.length > 0) {
+        const told2 = [];
         if (inbox.length > 0) {
           const lines3 = takeInbox();
-          if (lines3.length > 0) tell(`${NOTES_HEADER}
+          if (lines3.length > 0) told2.push(`${NOTES_HEADER}
 ${lines3.join("\n")}`);
         }
         const spoke = candidates.some((candidate) => candidate.source === "said");
         silentCalls = spoke ? 0 : silentCalls + event.toolResults.length;
         if (options.checkpointEvery > 0 && silentCalls >= options.checkpointEvery) {
           silentCalls = 0;
-          tell(CHECKPOINT);
+          told2.push(CHECKPOINT);
         }
+        if (told2.length > 0) tell(told2.join("\n\n"));
         return void 0;
       }
       if (lastCalled || !options.lastCall) return void 0;
-      await Promise.race([queue, new Promise((resolve13) => setTimeout(resolve13, LAST_CALL_WAIT_MS))]);
+      await Promise.race([queue, new Promise((resolve15) => setTimeout(resolve15, LAST_CALL_WAIT_MS))]);
       if (inbox.length === 0) return void 0;
       const lines2 = takeInbox();
       if (lines2.length === 0) return void 0;
@@ -71141,7 +71793,7 @@ ${lines3.join("\n")}`);
   runtime.pi.on(
     "agent_end",
     failOpen(async () => {
-      await Promise.race([queue, new Promise((resolve13) => setTimeout(resolve13, 6e3))]);
+      await Promise.race([queue, new Promise((resolve15) => setTimeout(resolve15, 6e3))]);
       return void 0;
     })
   );
@@ -71241,6 +71893,14 @@ ${others.join("\n")}`,
           thinking: member.assignment.thinking,
           env: {
             ...permissionEnv(runtime),
+            // The angle is the bee's goal; what the user asked for is what its calls are weighed against.
+            [BRIEF_ENV]: briefEnv(
+              briefFor(
+                { title: member.name, instructions: `${member.focus} (part of: ${params.goal})` },
+                runtime.frame,
+                userWords(runtime.turn.userMessage)
+              )
+            ),
             KYRN_HIVE_DIR: dir,
             KYRN_HIVE_BEE: member.name,
             KYRN_HIVE_GOAL: clip(params.goal, 600),
@@ -71323,7 +71983,7 @@ ${others.join("\n")}`,
       const marks = (note2) => {
         const parts = [];
         const confirmed = state.supported.get(note2.id);
-        if (confirmed) parts.push(`confirmed by ${confirmed}`);
+        if (confirmed) parts.push(`confirmed by ${confirmed.join(", ")}`);
         if (state.contested.has(note2.id)) parts.push("in dispute");
         return parts.length > 0 ? ` (${parts.join(", ")})` : "";
       };
@@ -71383,6 +72043,80 @@ ${sections.join("\n")}
     renderResult: (result, renderOptions, theme) => renderSwarmResult(result, renderOptions, theme)
   });
   registerSwarmCommand(runtime);
+  registerHiveCommand(runtime);
+}
+var TURN_START_MS = 6e4;
+function registerHiveCommand(runtime) {
+  const { pi } = runtime;
+  let waiting;
+  pi.on(
+    "agent_start",
+    failOpen(() => {
+      if (waiting) waiting.started = true;
+      return void 0;
+    })
+  );
+  pi.on(
+    "agent_settled",
+    failOpen(() => {
+      if (waiting?.started) waiting.over();
+      return void 0;
+    })
+  );
+  const untilTurnEnds = () => new Promise((resolve15) => {
+    let timer;
+    const over = () => {
+      clearTimeout(timer);
+      waiting = void 0;
+      resolve15();
+    };
+    waiting = { started: false, over };
+    timer = setTimeout(() => {
+      if (!waiting?.started) over();
+    }, TURN_START_MS);
+    timer.unref?.();
+  });
+  pi.registerCommand("hive", {
+    description: say({
+      zh: "\u8BA9\u51E0\u4E2A\u8C03\u67E5\u5458\u540C\u65F6\u67E5\u4E00\u4E2A\u95EE\u9898\uFF1A/hive <\u95EE\u9898>\uFF1B\u4E0D\u5E26\u95EE\u9898\u65F6\u540C /swarm\uFF0C\u770B\u6B63\u5728\u5E72\u6D3B\u7684\u5B50\u4EE3\u7406",
+      en: "Put several investigators on one question at once: /hive <question>. Without one, the same as /swarm"
+    }),
+    // No argument completions, like /swarm: "/hive stop" is typed by someone who wants it to happen now.
+    handler: async (args, ctx) => {
+      runtime.touch(ctx);
+      const asked = parseHiveArgs(args);
+      if (asked.kind !== "question") {
+        const control = asked.kind === "control" ? `${asked.verb} ${asked.name ?? ""}` : "";
+        controlSwarm(runtime, control, ctx, "/hive <question> puts several investigators on a question of yours.");
+        return;
+      }
+      const refuse = (message) => {
+        if (!ctx.hasUI) throw new Error(message);
+        ctx.ui.notify(message, "warning");
+      };
+      if (!pi.getActiveTools().includes("hive")) {
+        refuse("The hive tool is not active in this session (--tools leaves it out), so /hive cannot start one.");
+        return;
+      }
+      if (!ctx.model) {
+        refuse("No model is selected: /login, then /model.");
+        return;
+      }
+      const request = hiveRequest(asked.question);
+      if (!ctx.isIdle()) {
+        pi.sendUserMessage(request, { deliverAs: "followUp" });
+        ctx.ui.notify("The hive starts when the current turn is over.", "info");
+        return;
+      }
+      const typed = `/hive ${asked.question}`;
+      runtime.beginTurn(typed);
+      runtime.startTurnWork(typed);
+      const wait = (ctx.mode === "print" || ctx.mode === "json") && ctx.modelRegistry.hasConfiguredAuth(ctx.model);
+      const over = wait ? untilTurnEnds() : void 0;
+      pi.sendUserMessage(request);
+      await over;
+    }
+  });
 }
 function summarizeBoard(board) {
   const notes = board.all();
@@ -71421,12 +72155,12 @@ var import_pi_coding_agent8 = __toESM(require_pi_coding_agent(), 1);
 var import_pi_tui3 = __toESM(require_pi_tui(), 1);
 
 // packages/kyrn-judge/src/import/index.ts
-import { mkdirSync as mkdirSync11, readdirSync as readdirSync6, realpathSync as realpathSync2, statSync as statSync8 } from "node:fs";
+import { mkdirSync as mkdirSync11, readdirSync as readdirSync6, realpathSync as realpathSync2, statSync as statSync9 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join27 } from "node:path";
 
 // packages/kyrn-judge/src/import/claude-code.ts
-import { statSync as statSync6 } from "node:fs";
+import { statSync as statSync7 } from "node:fs";
 import { basename as basename7 } from "node:path";
 
 // packages/kyrn-judge/src/import/jsonl.ts
@@ -71522,7 +72256,7 @@ function list(value) {
 
 // packages/kyrn-judge/src/import/session.ts
 import { randomBytes as randomBytes2, randomUUID as randomUUID7 } from "node:crypto";
-import { closeSync as closeSync3, openSync as openSync3, readdirSync as readdirSync5, statSync as statSync5, writeSync } from "node:fs";
+import { closeSync as closeSync3, openSync as openSync3, readdirSync as readdirSync5, statSync as statSync6, writeSync } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { isAbsolute as isAbsolute3, join as join26, resolve as resolve4 } from "node:path";
 var TOOL_NAMES = { "claude-code": "Claude Code", codex: "Codex" };
@@ -71622,7 +72356,7 @@ function findImports(store) {
       if (name.endsWith(".jsonl")) files.push(path);
       else if (depth > 0) {
         try {
-          if (statSync5(path).isDirectory()) scan2(path, depth - 1);
+          if (statSync6(path).isDirectory()) scan2(path, depth - 1);
         } catch {
         }
       }
@@ -72430,7 +73164,7 @@ async function readClaudeCode(path, options = {}) {
   let startedIso = started === void 0 ? void 0 : new Date(started).toISOString();
   if (!startedIso) {
     try {
-      startedIso = statSync6(source).mtime.toISOString();
+      startedIso = statSync7(source).mtime.toISOString();
     } catch {
       startedIso = (/* @__PURE__ */ new Date()).toISOString();
     }
@@ -72448,7 +73182,7 @@ async function readClaudeCode(path, options = {}) {
 }
 
 // packages/kyrn-judge/src/import/codex.ts
-import { statSync as statSync7 } from "node:fs";
+import { statSync as statSync8 } from "node:fs";
 import { basename as basename8 } from "node:path";
 var APP_RECORDS = /* @__PURE__ */ new Set([
   "event_msg",
@@ -72736,7 +73470,7 @@ ${text6}`, at);
   let startedIso = started && !Number.isNaN(Date.parse(started)) ? new Date(Date.parse(started)).toISOString() : void 0;
   if (!startedIso) {
     try {
-      startedIso = statSync7(source).mtime.toISOString();
+      startedIso = statSync8(source).mtime.toISOString();
     } catch {
       startedIso = (/* @__PURE__ */ new Date()).toISOString();
     }
@@ -72911,7 +73645,7 @@ function jsonlFiles(dir, depth) {
     if (name.endsWith(".jsonl")) files.push(path);
     else if (depth > 0 && !name.startsWith(".")) {
       try {
-        if (statSync8(path).isDirectory()) files.push(...jsonlFiles(path, depth - 1));
+        if (statSync9(path).isDirectory()) files.push(...jsonlFiles(path, depth - 1));
       } catch {
       }
     }
@@ -72943,7 +73677,7 @@ function listConversations(options = {}) {
     let size;
     let modified;
     try {
-      const stats = statSync8(path);
+      const stats = statSync9(path);
       size = stats.size;
       modified = stats.mtime.toISOString();
     } catch {
@@ -72966,7 +73700,7 @@ async function importOne(path, options, imports) {
   const source = absolute(path);
   const failed = (error) => ({ status: "failed", source, error });
   try {
-    if (!statSync8(source).isFile()) return failed("not a file");
+    if (!statSync9(source).isFile()) return failed("not a file");
   } catch {
     return failed("no such file");
   }
@@ -73184,7 +73918,7 @@ ${theme.fg("dim", detail)}`, 0, 0));
 import { isAbsolute as isAbsolute4, join as join33, resolve as resolve7 } from "node:path";
 
 // packages/kyrn-judge/src/inherit/files.ts
-import { existsSync as existsSync9, readdirSync as readdirSync7, readFileSync as readFileSync12, realpathSync as realpathSync3, statSync as statSync9 } from "node:fs";
+import { existsSync as existsSync10, readdirSync as readdirSync7, readFileSync as readFileSync12, realpathSync as realpathSync3, statSync as statSync10 } from "node:fs";
 import { dirname as dirname5, join as join28, resolve as resolve5 } from "node:path";
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function projectChain(projectDir, home) {
@@ -73195,7 +73929,7 @@ function projectChain(projectDir, home) {
   for (let depth = 0; depth < 32; depth++) {
     if (current === homeDir) break;
     chain.push(current);
-    if (existsSync9(join28(current, ".git"))) return chain;
+    if (existsSync10(join28(current, ".git"))) return chain;
     const parent = dirname5(current);
     if (parent === current) break;
     current = parent;
@@ -73204,7 +73938,7 @@ function projectChain(projectDir, home) {
 }
 function readBytes(path, problems, maxBytes = MAX_FILE_BYTES) {
   try {
-    const stats = statSync9(path);
+    const stats = statSync10(path);
     if (!stats.isFile()) return void 0;
     if (stats.size > maxBytes) {
       problems.push({ source: path, message: `skipped: larger than ${maxBytes} bytes` });
@@ -73234,7 +73968,7 @@ function listFiles(dir, extensions, depth = 4) {
     const path = join28(dir, name);
     let stats;
     try {
-      stats = statSync9(path);
+      stats = statSync10(path);
     } catch {
       continue;
     }
@@ -74045,7 +74779,7 @@ function expandPlaceholders(value, context) {
 
 // packages/kyrn-judge/src/inherit/skills.ts
 var import_pi_coding_agent9 = __toESM(require_pi_coding_agent(), 1);
-import { readdirSync as readdirSync8, statSync as statSync10 } from "node:fs";
+import { readdirSync as readdirSync8, statSync as statSync11 } from "node:fs";
 import { basename as basename10, join as join31 } from "node:path";
 function readSkill(dir, problems) {
   const file = join31(dir, "SKILL.md");
@@ -74074,7 +74808,7 @@ function skillsBelow(root, problems, depth = 3) {
     if (name.startsWith(".") || name === "node_modules") continue;
     const dir = join31(root, name);
     try {
-      if (!statSync10(dir).isDirectory()) continue;
+      if (!statSync11(dir).isDirectory()) continue;
     } catch {
       continue;
     }
@@ -74437,7 +75171,7 @@ function registerInterjection(runtime) {
           goal,
           currentAction: clip(runtime.lastAssistantText, 300)
         }),
-        new Promise((resolve13) => setTimeout(() => resolve13(void 0), options.waitMs))
+        new Promise((resolve15) => setTimeout(() => resolve15(void 0), options.waitMs))
       ]);
       if (!decision || decision.source !== "judge") return void 0;
       if (decision.outcome === "keep" || decision.outcome === event.streamingBehavior) return void 0;
@@ -74449,7 +75183,7 @@ function registerInterjection(runtime) {
 
 // packages/kyrn-judge/src/extension/features/lsp.ts
 var import_pi_coding_agent10 = __toESM(require_pi_coding_agent(), 1);
-import { readFileSync as readFileSync14, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync14, statSync as statSync13 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { join as join34, relative as relative4, resolve as resolve8 } from "node:path";
 
@@ -74635,7 +75369,7 @@ function formatReport(items, options) {
 }
 
 // packages/kyrn-judge/src/lsp/manager.ts
-import { accessSync as accessSync2, constants as constants2, existsSync as existsSync10, statSync as statSync11 } from "node:fs";
+import { accessSync as accessSync3, constants as constants3, existsSync as existsSync11, statSync as statSync12 } from "node:fs";
 
 // packages/kyrn-judge/src/lsp/client.ts
 import { spawn as spawn7 } from "node:child_process";
@@ -74896,12 +75630,12 @@ var LspClient = class {
     this.state = "stopping";
     this.clearTimers();
     if (child && child.exitCode === null && child.signalCode === null) {
-      const gone = new Promise((resolve13) => child.once("exit", () => resolve13()));
+      const gone = new Promise((resolve15) => child.once("exit", () => resolve15()));
       if (wasRunning) {
         await this.request("shutdown", void 0, 2e3).catch(() => void 0);
         this.notify("exit", void 0);
       }
-      await Promise.race([gone, new Promise((resolve13) => setTimeout(resolve13, wasRunning ? 1e3 : 0))]);
+      await Promise.race([gone, new Promise((resolve15) => setTimeout(resolve15, wasRunning ? 1e3 : 0))]);
       killTree(child, this.platform);
     }
     this.state = "stopped";
@@ -75006,16 +75740,16 @@ var LspClient = class {
       return true;
     };
     if (settled()) return Promise.resolve(true);
-    return new Promise((resolve13) => {
+    return new Promise((resolve15) => {
       const check = () => {
         if (!settled()) return;
         clearTimeout(timer);
         this.waiters.delete(check);
-        resolve13(true);
+        resolve15(true);
       };
       const timer = setTimeout(() => {
         this.waiters.delete(check);
-        resolve13(false);
+        resolve15(false);
       }, budgetMs);
       this.waiters.add(check);
     });
@@ -75207,7 +75941,7 @@ var LspClient = class {
   }
   request(method, params, timeoutMs) {
     const id = this.nextId++;
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       const timer = setTimeout(
         () => {
           this.pending.delete(id);
@@ -75216,7 +75950,7 @@ var LspClient = class {
         },
         timeoutMs ?? this.options.requestTimeoutMs ?? 1e4
       );
-      this.pending.set(id, { resolve: resolve13, reject, timer });
+      this.pending.set(id, { resolve: resolve15, reject, timer });
       this.send({ id, method, params });
     });
   }
@@ -75419,7 +76153,7 @@ function envValue(env, name) {
   return key ? env[key] : void 0;
 }
 var WINDOWS_MOUNT = /^\/mnt\/[a-z]\//i;
-function findOnPath(command, options) {
+function findOnPath2(command, options) {
   const { env, platform, isExecutable } = options;
   const paths = platform === "win32" ? win322 : posix2;
   const endings = platform === "win32" ? ["", ...(envValue(env, "PATHEXT") ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean)] : [""];
@@ -75440,12 +76174,12 @@ function findOnPath(command, options) {
   }
   return void 0;
 }
-function detectServers(specs, lookup) {
+function detectServers(specs, lookup2) {
   const taken = /* @__PURE__ */ new Set();
   const ordered = [...specs].sort((a, b) => Number(a.origin === "built-in") - Number(b.origin === "built-in"));
   const detected = /* @__PURE__ */ new Map();
   for (const spec of ordered) {
-    const executable = lookup(spec.command);
+    const executable = lookup2(spec.command);
     const chosen = executable !== void 0 && !(spec.group && taken.has(spec.group));
     if (chosen && spec.group) taken.add(spec.group);
     detected.set(spec.id, { spec, executable, chosen });
@@ -75487,8 +76221,8 @@ function spawnPlan(executable, args, platform, env = {}) {
 var MAX_STARTS = 2;
 function isExecutableFile(path, platform = process.platform) {
   try {
-    if (!statSync11(path).isFile()) return false;
-    if (platform !== "win32") accessSync2(path, constants2.X_OK);
+    if (!statSync12(path).isFile()) return false;
+    if (platform !== "win32") accessSync3(path, constants3.X_OK);
     return true;
   } catch {
     return false;
@@ -75511,7 +76245,7 @@ var LspManager = class {
       this.specsKey = key;
       this.detected = detectServers(
         specs,
-        (command) => findOnPath(command, {
+        (command) => findOnPath2(command, {
           env: this.env,
           platform: this.platform,
           isExecutable: (path) => isExecutableFile(path, this.platform)
@@ -75600,7 +76334,7 @@ var LspManager = class {
   }
   instanceFor(server, file, cwd) {
     if (!server.executable) return void 0;
-    const root = findRoot(file, server.spec.rootMarkers, cwd, existsSync10, this.platform);
+    const root = findRoot(file, server.spec.rootMarkers, cwd, existsSync11, this.platform);
     const key = `${server.spec.id}
 ${root}`;
     let instance = this.instances.get(key);
@@ -75837,7 +76571,7 @@ function registerLsp(runtime) {
   };
   const read = (path) => {
     try {
-      if (statSync12(path).size > options.maxFileBytes) return false;
+      if (statSync13(path).size > options.maxFileBytes) return false;
       return readFileSync14(path, "utf8");
     } catch {
       return void 0;
@@ -76330,7 +77064,7 @@ var McpClient = class {
     } : params;
     const timeoutMs = options.timeoutMs ?? this.options.requestTimeoutMs;
     const abort = new AbortController();
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       const giveUp = (error) => {
         const entry = this.pending.get(id);
         if (!entry) return;
@@ -76356,7 +77090,7 @@ var McpClient = class {
       const onAbort = () => giveUp(new McpError("aborted", "the call was cancelled"));
       options.signal?.addEventListener("abort", onAbort, { once: true });
       this.pending.set(id, {
-        resolve: resolve13,
+        resolve: resolve15,
         reject,
         cleanup: () => {
           clearTimeout(timer);
@@ -76590,7 +77324,7 @@ var StreamableHttpTransport = class {
 
 // packages/kyrn-judge/src/mcp/stdio.ts
 import { spawn as spawn8 } from "node:child_process";
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 
 // packages/kyrn-judge/src/mcp/spawn.ts
 import { win32 as win323 } from "node:path";
@@ -76702,10 +77436,10 @@ var StdioTransport = class {
     const plan2 = planSpawn2(this.options.command, this.options.args, {
       platform,
       env: parentEnv,
-      exists: existsSync11,
+      exists: existsSync12,
       cwd: this.options.cwd
     });
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       let child;
       try {
         child = spawn8(plan2.command, [...plan2.args], {
@@ -76744,7 +77478,7 @@ var StdioTransport = class {
       child.once("spawn", () => {
         if (settled) return;
         settled = true;
-        resolve13();
+        resolve15();
       });
       child.stdout?.setEncoding("utf8");
       child.stdout?.on("data", (chunk) => this.readOutput(chunk));
@@ -76790,11 +77524,11 @@ var StdioTransport = class {
     if (!stdin || stdin.destroyed || !stdin.writable) {
       return Promise.reject(new McpError("closed", "the server is not running"));
     }
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       stdin.write(
         `${JSON.stringify(message)}
 `,
-        (error) => error ? reject(new McpError("closed", "the server is not running")) : resolve13()
+        (error) => error ? reject(new McpError("closed", "the server is not running")) : resolve15()
       );
     });
   }
@@ -76811,8 +77545,8 @@ var StdioTransport = class {
   }
   exitedWithin(ms) {
     let timer;
-    const timeout = new Promise((resolve13) => {
-      timer = setTimeout(() => resolve13(false), ms);
+    const timeout = new Promise((resolve15) => {
+      timer = setTimeout(() => resolve15(false), ms);
     });
     return Promise.race([this.exited.then(() => true), timeout]).finally(() => clearTimeout(timer));
   }
@@ -78644,17 +79378,17 @@ function registerNotify(runtime) {
 
 // packages/kyrn-judge/src/packs/exec.ts
 import { spawn as spawn9 } from "node:child_process";
-import { statSync as statSync13 } from "node:fs";
+import { statSync as statSync14 } from "node:fs";
 import { posix as posix3, win32 as win324 } from "node:path";
 var STDERR_LIMIT = 64 * 1024;
 var KILL_GRACE_MS2 = 2e3;
 var PIPE_GRACE_MS = 500;
-var run = (command, args, options = {}) => new Promise((resolve13) => {
+var run = (command, args, options = {}) => new Promise((resolve15) => {
   const platform = options.platform ?? process.platform;
   const env = { ...process.env, ...options.env };
   const invocation = invocationFor(command, args, { platform, env });
   if (!invocation) {
-    resolve13({ code: 127, stdout: "", stderr: "", missing: true, stopped: false });
+    resolve15({ code: 127, stdout: "", stderr: "", missing: true, stopped: false });
     return;
   }
   const encoding = options.encoding ?? "utf8";
@@ -78700,7 +79434,7 @@ var run = (command, args, options = {}) => new Promise((resolve13) => {
     if (late) clearTimeout(late);
     options.signal?.removeEventListener("abort", stop);
     if (options.onLine && carry && !stopped) options.onLine(carry);
-    resolve13({ code, stdout: Buffer.concat(chunks).toString(encoding), stderr, missing, stopped });
+    resolve15({ code, stdout: Buffer.concat(chunks).toString(encoding), stderr, missing, stopped });
   };
   if (options.onLine) {
     child.stdout?.setEncoding(encoding);
@@ -78739,16 +79473,16 @@ var run = (command, args, options = {}) => new Promise((resolve13) => {
 });
 function isFile(path) {
   try {
-    return statSync13(path).isFile();
+    return statSync14(path).isFile();
   } catch {
     return false;
   }
 }
-function findOnPath2(name, lookup) {
-  const exists = lookup.isFile ?? isFile;
-  const windows = lookup.platform === "win32";
+function findOnPath3(name, lookup2) {
+  const exists = lookup2.isFile ?? isFile;
+  const windows = lookup2.platform === "win32";
   const path = windows ? win324 : posix3;
-  const get = (key) => windows ? Object.entries(lookup.env).find(([candidate]) => candidate.toUpperCase() === key)?.[1] : lookup.env[key];
+  const get = (key) => windows ? Object.entries(lookup2.env).find(([candidate]) => candidate.toUpperCase() === key)?.[1] : lookup2.env[key];
   const extensions = windows ? path.extname(name) ? [""] : (get("PATHEXT") ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
   const named = name.includes("/") || windows && name.includes("\\");
   const directories = named ? [""] : (get("PATH") ?? "").split(path.delimiter).filter(Boolean);
@@ -78766,13 +79500,13 @@ function quoteForCmd3(argument, twice) {
   const escaped = quoted.replace(CMD_META2, "^$1");
   return twice ? escaped.replace(CMD_META2, "^$1") : escaped;
 }
-function invocationFor(command, args, lookup) {
-  if (lookup.platform !== "win32") return { command, args: [...args], verbatim: false };
-  const found = findOnPath2(command, lookup);
+function invocationFor(command, args, lookup2) {
+  if (lookup2.platform !== "win32") return { command, args: [...args], verbatim: false };
+  const found = findOnPath3(command, lookup2);
   if (!found) return void 0;
   if (!/\.(cmd|bat)$/i.test(found)) return { command: found, args: [...args], verbatim: false };
   const line2 = [found.replace(CMD_META2, "^$1"), ...args.map((argument) => quoteForCmd3(argument, true))].join(" ");
-  const shell = Object.entries(lookup.env).find(([key]) => key.toUpperCase() === "COMSPEC")?.[1] ?? "cmd.exe";
+  const shell = Object.entries(lookup2.env).find(([key]) => key.toUpperCase() === "COMSPEC")?.[1] ?? "cmd.exe";
   return { command: shell, args: ["/d", "/s", "/c", `"${line2}"`], verbatim: true };
 }
 function installHint(binary, platform) {
@@ -79128,8 +79862,19 @@ import { join as join38 } from "node:path";
 
 // packages/kyrn-judge/src/packs/git.ts
 var INHERITED3 = ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE", "GIT_COMMON_DIR", "GIT_PREFIX"];
-function gitOver(run2, binary = "git") {
+function gitOver(run2, binary = "git", probe = hostProbe) {
+  let stub;
   return async (args, call) => {
+    stub ??= stubProblem(binary, call.env?.PATH ?? process.env.PATH, probe);
+    const problem = await stub;
+    if (problem)
+      return {
+        code: 127,
+        stdout: Buffer.alloc(0),
+        stderr: problem.message,
+        missing: false,
+        unusable: problem.reason
+      };
     const env = {};
     for (const name of INHERITED3) env[name] = void 0;
     Object.assign(env, { LC_ALL: "C", LANGUAGE: "C", GIT_TERMINAL_PROMPT: "0", GIT_PAGER: "cat" }, call.env);
@@ -79141,12 +79886,14 @@ function gitOver(run2, binary = "git") {
       timeoutMs: call.timeoutMs ?? 6e4,
       encoding: "latin1"
     });
-    return {
+    const output = {
       code: result.code,
       stdout: Buffer.from(result.stdout, "latin1"),
       stderr: result.stderr,
       missing: result.missing
     };
+    return heldByLicense(result.code, () => `${result.stderr}
+${result.stdout}`) ? { ...output, unusable: "xcode_license" } : output;
   };
 }
 var text4 = (output) => output.stdout.toString("utf8");
@@ -79161,6 +79908,8 @@ var IN_PROGRESS = [
 async function repoState(git2, cwd) {
   const top = await git2(["rev-parse", "--show-toplevel", "--absolute-git-dir"], { cwd });
   if (top.missing) return { ok: false, reason: "no-git", message: "git could not be started" };
+  if (top.unusable)
+    return { ok: false, reason: "unusable", unusable: top.unusable, message: UNUSABLE_TEXT[top.unusable] };
   if (top.code !== 0)
     return { ok: false, reason: "not-a-repo", message: lastLine3(top.stderr) || "not a git repository" };
   const [root, gitDir] = lines(top).map((line2) => line2.trim());
@@ -79632,6 +80381,16 @@ async function applyPlan(git2, repo, change, plan2, signal) {
 
 // packages/kyrn-judge/src/extension/features/packs/commit.ts
 var TITLE = "mu /commit";
+var CANNOT_RUN = {
+  developer_tools_missing: {
+    zh: "/commit \u7528\u4E0D\u4E86\uFF1A\u8FD9\u53F0 Mac \u6CA1\u6709\u5B89\u88C5 git \u6240\u9700\u7684\u547D\u4EE4\u884C\u5F00\u53D1\u8005\u5DE5\u5177\u3002\u7528 xcode-select --install \u5B89\u88C5\u540E\u518D\u8BD5\u3002",
+    en: "/commit cannot run: this Mac has no command line developer tools, which git needs. Install them with xcode-select --install, then try again."
+  },
+  xcode_license: {
+    zh: "/commit \u7528\u4E0D\u4E86\uFF1A\u8FD9\u53F0 Mac \u8FD8\u6CA1\u6709\u540C\u610F Xcode \u8BB8\u53EF\u534F\u8BAE\uFF0Cgit \u65E0\u6CD5\u8FD0\u884C\u3002\u5728\u7EC8\u7AEF\u91CC\u7528 sudo xcodebuild -license \u540C\u610F\u540E\u518D\u8BD5\u3002",
+    en: "/commit cannot run: git cannot run on this Mac until the Xcode license is accepted. Accept it with sudo xcodebuild -license in Terminal, then try again."
+  }
+};
 function registerCommit(shared, options) {
   const { runtime } = shared;
   runtime.pi.registerCommand("commit", {
@@ -79644,7 +80403,10 @@ function registerCommit(shared, options) {
       const git2 = gitOver(shared.run);
       const repo = await repoState(git2, ctx.cwd);
       if (!repo.ok) {
-        const why = repo.reason === "no-git" ? installHint("git", shared.platform) : say({ zh: `\u8FD9\u91CC\u4E0D\u662F git \u4ED3\u5E93\uFF1A${repo.message}`, en: `Not a git repository here: ${repo.message}` });
+        const why = repo.reason === "unusable" ? say(CANNOT_RUN[repo.unusable]) : repo.reason === "no-git" ? installHint("git", shared.platform) : say({
+          zh: `\u8FD9\u91CC\u4E0D\u662F git \u4ED3\u5E93\uFF1A${repo.message}`,
+          en: `Not a git repository here: ${repo.message}`
+        });
         ctx.ui.notify(why, "warning");
         return;
       }
@@ -79940,8 +80702,9 @@ function conflictsPack(shared, options) {
     description: "For a merge, rebase or cherry-pick that stopped on conflicts: shows each conflicted file with both sides and their common base, and resolves one file at a time.",
     tools: ["conflicts_list", "conflicts_show", "conflicts_resolve"],
     async start() {
-      const probe = await shared.run("git", ["--version"], { cwd: shared.cwd(), timeoutMs: 5e3 });
+      const probe = await git2(["--version"], { cwd: shared.cwd(), timeoutMs: 5e3 });
       if (probe.missing) throw new Error(installHint("git", shared.platform));
+      if (probe.unusable) throw new Error(UNUSABLE_TEXT[probe.unusable]);
       runtime.pi.registerTool({
         name: "conflicts_list",
         label: "Conflicts",
@@ -80212,15 +80975,15 @@ import { spawn as spawn10, spawnSync as spawnSync2 } from "node:child_process";
 import { connect, createServer as createServer2 } from "node:net";
 var DapError = class extends Error {
 };
-var sleep3 = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
+var sleep3 = (ms) => new Promise((resolve15) => setTimeout(resolve15, ms));
 async function freePort() {
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve15, reject) => {
     const server = createServer2();
     server.once("error", reject);
     server.listen(0, "127.0.0.1", () => {
       const address = server.address();
       const port = typeof address === "object" && address ? address.port : 0;
-      server.close(() => resolve13(port));
+      server.close(() => resolve15(port));
     });
   });
 }
@@ -80274,8 +81037,8 @@ var DapClient = class {
     while (true) {
       if (this.ended) throw new DapError(this.why());
       try {
-        const socket = await new Promise((resolve13, reject) => {
-          const attempt = connect(port, "127.0.0.1", () => resolve13(attempt));
+        const socket = await new Promise((resolve15, reject) => {
+          const attempt = connect(port, "127.0.0.1", () => resolve15(attempt));
           attempt.once("error", reject);
         });
         socket.on("close", () => this.fail("the debug adapter closed the connection"));
@@ -80351,7 +81114,7 @@ var DapClient = class {
   request(command, args = {}, timeoutMs) {
     if (this.ended) return Promise.reject(new DapError(`${command}: ${this.why()}`));
     const seq = this.seq++;
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       const timer = setTimeout(
         () => {
           this.pending.delete(seq);
@@ -80359,7 +81122,7 @@ var DapClient = class {
         },
         timeoutMs ?? this.options.requestTimeoutMs ?? 3e4
       );
-      this.pending.set(seq, { command, resolve: resolve13, reject, timer });
+      this.pending.set(seq, { command, resolve: resolve15, reject, timer });
       this.write({ seq, type: "request", command, arguments: args });
     });
   }
@@ -80375,12 +81138,12 @@ var DapClient = class {
         if (names.includes(this.received[at].event)) return this.received[at];
       }
       if (this.ended || signal?.aborted || Date.now() >= deadline) return void 0;
-      await new Promise((resolve13) => {
+      await new Promise((resolve15) => {
         const wake = () => {
           this.waiters.delete(wake);
           signal?.removeEventListener("abort", wake);
           clearTimeout(timer);
-          resolve13();
+          resolve15();
         };
         const timer = setTimeout(wake, Math.max(1, deadline - Date.now()));
         this.waiters.add(wake);
@@ -80739,7 +81502,7 @@ function debuggerPack(shared, options) {
   );
   const locate = async (spec, cwd) => {
     const own = projectInterpreter(spec, cwd, platform, isExecutable);
-    const onPath = findOnPath(spec.command, { env: process.env, platform, isExecutable });
+    const onPath = findOnPath2(spec.command, { env: process.env, platform, isExecutable });
     const elsewhere = onPath ? void 0 : spec.fallbacks?.find((path) => isExecutable(path));
     const candidates = [...new Set([own, onPath, elsewhere].filter((path) => path !== void 0))];
     if (candidates.length === 0) {
@@ -80797,7 +81560,7 @@ function debuggerPack(shared, options) {
     async start() {
       const adapters = adaptersFor(platform, options.adapters);
       const present = adapters.some(
-        (spec) => findOnPath(spec.command, { env: process.env, platform, isExecutable }) !== void 0 || spec.fallbacks?.some((path) => isExecutable(path))
+        (spec) => findOnPath2(spec.command, { env: process.env, platform, isExecutable }) !== void 0 || spec.fallbacks?.some((path) => isExecutable(path))
       );
       if (!present) {
         throw new Error(
@@ -80993,7 +81756,7 @@ ${tail}` : "Ended the debugging run."
 }
 
 // packages/kyrn-judge/src/extension/features/packs/github.ts
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync13 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var GITHUB_SKILL_PATH = fileURLToPath4(new URL("../../../../skills/mu-github/SKILL.md", new URL("src/extension/features/packs/github.ts", new URL("../", import.meta.url)).href));
 function githubPack(shared, options) {
@@ -81002,7 +81765,7 @@ function githubPack(shared, options) {
     title: "GitHub through gh",
     description: "For work on GitHub: pull requests, issues, CI checks and their logs, reviews, releases, the API. Adds no tools; the mu-github skill says how to use gh.",
     tools: [],
-    skills: existsSync12(GITHUB_SKILL_PATH) ? [GITHUB_SKILL_PATH] : [],
+    skills: existsSync13(GITHUB_SKILL_PATH) ? [GITHUB_SKILL_PATH] : [],
     async start() {
       const result = await shared.run(options.command || "gh", ["--version"], {
         cwd: shared.cwd(),
@@ -81299,8 +82062,9 @@ function registerPacks(runtime) {
 }
 
 // packages/kyrn-judge/src/extension/features/permissions.ts
-import { homedir as homedir8 } from "node:os";
-import { join as join42 } from "node:path";
+var import_pi_coding_agent12 = __toESM(require_pi_coding_agent(), 1);
+import { homedir as homedir9 } from "node:os";
+import { join as join42, resolve as resolve13, sep as sep3 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/tool-approval.ts
 var APPROVE_AT = 0.8;
@@ -81340,8 +82104,10 @@ var toolApproval = defineDecision({
 });
 
 // packages/kyrn-judge/src/permissions/modes.ts
-import { mkdirSync as mkdirSync16, readFileSync as readFileSync17, renameSync as renameSync5, writeFileSync as writeFileSync12 } from "node:fs";
-import { isAbsolute as isAbsolute7, join as join41, relative as relative7, resolve as resolve12 } from "node:path";
+import { lstatSync as lstatSync2, mkdirSync as mkdirSync16, readFileSync as readFileSync17, readlinkSync, realpathSync as realpathSync5, renameSync as renameSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { basename as basename14, dirname as dirname9, isAbsolute as isAbsolute7, join as join41, relative as relative7, resolve as resolve12, sep as sep2 } from "node:path";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 var PERMISSION_MODES = ["full", "jev", "ask"];
 var MODE_TEXT = {
   full: {
@@ -81398,19 +82164,20 @@ var LOOKING = /* @__PURE__ */ new Set([
   "conflicts_show",
   "sg_search",
   "review_triage",
-  "debug_inspect",
   "debug_step",
   "debug_stop"
 ]);
 var EDITING = /* @__PURE__ */ new Set(["edit", "write", "apply_patch_from", "conflicts_resolve", "sg_rewrite"]);
 var TWO_WORD = /^(?:git|npm|pnpm|yarn|bun|npx|cargo|go|docker|kubectl|pip|pip3|uv|poetry|make|dotnet|gh|brew|apt|apt-get)$/;
 var COMPOUND = /[<>;&|`\n\r]|\$\(|\$\{/;
+var WRAPPER = /^(?:sudo|doas|pkexec|su|runas|env|xargs|eval|exec|command|builtin|nohup|timeout|nice|ionice|time|stdbuf|setsid|chroot|taskset|flock|watch|unbuffer|caffeinate|script|busybox|start|sh|bash|zsh|dash|ksh|fish|pwsh|powershell|cmd)$/i;
+var FIND_ACTS = /^-(?:exec|execdir|ok|okdir|delete|fprint0?|fprintf|fls)$/;
 function commandPrefix(command) {
   const text6 = command.trim();
   if (!text6 || COMPOUND.test(text6)) return void 0;
   const words2 = text6.split(/\s+/);
-  if (/=/.test(words2[0]) || /^(?:sudo|doas|env|xargs|eval|exec|sh|bash|zsh|pwsh|powershell|cmd)$/i.test(words2[0]))
-    return void 0;
+  if (/=/.test(words2[0]) || WRAPPER.test(words2[0])) return void 0;
+  if (/^find$/i.test(words2[0]) && words2.some((word) => FIND_ACTS.test(word))) return void 0;
   const [first, second] = words2;
   return TWO_WORD.test(first) && second && !second.startsWith("-") ? `${first} ${second}` : first;
 }
@@ -81418,11 +82185,51 @@ var text5 = (value) => typeof value === "string" ? value : "";
 function pathOf2(input) {
   return text5(input.path) || text5(input.file_path) || text5(input.file);
 }
-function insideProject(cwd, path) {
-  if (!path) return true;
-  const target = resolve12(cwd, path);
-  const rel = relative7(resolve12(cwd), target);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
+function realPath2(path, depth = 0) {
+  try {
+    return realpathSync5.native(path);
+  } catch {
+    if (depth < 40) {
+      try {
+        if (lstatSync2(path).isSymbolicLink())
+          return realPath2(resolve12(dirname9(path), readlinkSync(path)), depth + 1);
+      } catch {
+      }
+    }
+    const parent = dirname9(path);
+    return parent === path ? path : join41(realPath2(parent, depth + 1), basename14(path));
+  }
+}
+var UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+function windowsDrive(path) {
+  if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\")) return path;
+  const match = /^\/(?:mnt\/|cygdrive\/)?([a-z])(?:\/(.*))?$/i.exec(path);
+  return match ? `${match[1].toUpperCase()}:\\${match[2]?.replaceAll("/", "\\") ?? ""}` : path;
+}
+function toolPath(cwd, raw, home = homedir8()) {
+  let path = raw.replace(UNICODE_SPACES, " ");
+  if (path.startsWith("@")) path = path.slice(1);
+  if (process.platform === "win32") path = windowsDrive(path);
+  if (path === "~") path = home;
+  else if (path.startsWith("~/") || process.platform === "win32" && path.startsWith("~\\"))
+    path = join41(home, path.slice(2));
+  else if (/^file:\/\//.test(path)) {
+    try {
+      path = fileURLToPath5(path);
+    } catch {
+      return void 0;
+    }
+  }
+  return realPath2(isAbsolute7(path) ? resolve12(path) : resolve12(cwd, path));
+}
+function inProject(cwd, target) {
+  if (target === void 0) return void 0;
+  const rel = relative7(realPath2(resolve12(cwd)), target);
+  return rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute7(rel) ? void 0 : rel;
+}
+function projectFile(cwd, target) {
+  const rel = inProject(cwd, target);
+  return rel !== void 0 && !rel.split(/[\\/]/).some((part) => part.toLowerCase() === ".git");
 }
 function protectedSpellings(agentDir, home, platform) {
   if (platform !== "win32") {
@@ -81452,7 +82259,8 @@ function permissionNeed(toolName, input, cwd, protectedPaths2 = []) {
   if (LOOKING.has(toolName)) return void 0;
   if (isShellTool(toolName) || toolName === "bg_start") {
     const command = text5(input.command);
-    if (isReadOnlyCommand(command)) return void 0;
+    const powershell = toolName === "powershell" || toolName === "bg_start" && process.platform === "win32";
+    if (isReadOnlyCommand(command, powershell)) return void 0;
     const guarded = touches(command);
     const prefix = commandPrefix(command);
     return {
@@ -81464,11 +82272,18 @@ function permissionNeed(toolName, input, cwd, protectedPaths2 = []) {
   if (toolName === "sg_rewrite" && input.apply !== true) return void 0;
   if (EDITING.has(toolName)) {
     const path = pathOf2(input);
-    const inProject = insideProject(cwd, path);
-    const guarded = path ? touches(resolve12(cwd, path)) : void 0;
-    const summary = clip5(`${toolName} ${path || text5(input.id) || text5(input.pattern)}`, 300);
+    const listed2 = Array.isArray(input.paths) ? input.paths.filter((each) => typeof each === "string") : [];
+    const paths = [...path ? [path] : [], ...listed2];
+    const targets = paths.map((each) => ({ said: each, target: toolPath(cwd, each) }));
+    const summary = clip5(`${toolName} ${path || listed2.join(" ") || text5(input.id) || text5(input.pattern)}`, 300);
+    const guarded = targets.flatMap(({ said, target }) => [resolve12(cwd, said), ...target ? [target] : []]).map(touches).find(Boolean);
     if (guarded) return { kind: "edit", summary, protected: guarded };
-    return inProject ? { kind: "edit", summary, inProject, grant: { key: "edit", label: "edit" } } : { kind: "outside", summary, grant: { key: `outside:${resolve12(cwd, path)}`, label: path } };
+    const away = targets.find(({ target }) => !projectFile(cwd, target));
+    return away ? {
+      kind: "outside",
+      summary,
+      grant: { key: `outside:${away.target ?? away.said}`, label: away.said }
+    } : { kind: "edit", summary, inProject: true, grant: { key: "edit", label: "edit" } };
   }
   if (toolName === "delegate" || toolName === "hive") {
     const tasks = Array.isArray(input.tasks) ? input.tasks.length : 0;
@@ -81479,6 +82294,15 @@ function permissionNeed(toolName, input, cwd, protectedPaths2 = []) {
       grant: { key: `tool:${toolName}`, label: toolName }
     };
   }
+  if (toolName === "debug_inspect") {
+    const expression = text5(input.expression).trim();
+    if (!expression) return void 0;
+    return {
+      kind: "run",
+      summary: clip5(`${toolName} ${expression}`, 300),
+      grant: { key: "tool:debug_inspect", label: toolName }
+    };
+  }
   if (toolName === "debug_start") {
     return {
       kind: "run",
@@ -81539,7 +82363,12 @@ var REASON_TEXT = {
   protected: {
     zh: "\u8FD9\u4F1A\u52A8\u5230 mu \u81EA\u5DF1\u7684\u8BBE\u7F6E\uFF0C\u53EA\u80FD\u7531\u4F60\u51B3\u5B9A\u3002",
     en: "This touches mu's own settings; only you can allow it."
-  }
+  },
+  nojudge: {
+    zh: "\u8FD8\u6CA1\u6709\u53EF\u7528\u7684\u5224\u5B9A\u5668\uFF0C\u6240\u4EE5\u6BCF\u4E00\u6B65\u90FD\u5148\u95EE\u4F60\u3002",
+    en: "No judge is available yet, so mu asks about each step."
+  },
+  judgedown: { zh: "\u5224\u5B9A\u5668\u8FD9\u6B21\u6CA1\u6709\u56DE\u7B54\uFF0C\u6240\u4EE5\u5148\u95EE\u4F60\u3002", en: "The judge did not answer this time, so mu asks you." }
 };
 var ANSWERS = {
   once: { zh: "\u5141\u8BB8\u8FD9\u4E00\u6B21", en: "Allow once" },
@@ -81549,8 +82378,23 @@ var ANSWERS = {
 function modeLabel(mode) {
   return say({ zh: MODE_TEXT[mode].zh, en: MODE_TEXT[mode].en });
 }
+function unanswered2(decision) {
+  if (decision.reason === "error:auth" || decision.reason === "error:payment_required") return "nojudge";
+  if (decision.reason?.startsWith("error:")) return "judgedown";
+  const judges = Object.values(decision.answers ?? {}).map((answer) => answer.judge);
+  if (judges.length > 0 && judges.every((judge) => judge === "untrusted")) return "nojudge";
+  return judges.includes("unavailable") ? "judgedown" : void 0;
+}
 function protectedPaths(roots) {
-  return roots ? protectedSpellings(roots.agentDir, homedir8(), process.platform) : [];
+  if (!roots) return [];
+  const spelled = protectedSpellings(roots.agentDir, homedir9(), process.platform);
+  const real2 = toolPath(roots.agentDir, roots.agentDir);
+  return real2 && real2 !== roots.agentDir ? [...spelled, real2] : spelled;
+}
+function projectSettings(cwd) {
+  const spelled = join42(resolve13(cwd), import_pi_coding_agent12.CONFIG_DIR_NAME);
+  const real2 = toolPath(cwd, import_pi_coding_agent12.CONFIG_DIR_NAME) ?? spelled;
+  return [.../* @__PURE__ */ new Set([spelled, real2])].map((path) => `${path}${sep3}`);
 }
 function registerPermissions(runtime, roots) {
   const options = runtime.options("permissions", {
@@ -81606,12 +82450,19 @@ function registerPermissions(runtime, roots) {
     show(ctx);
   });
   const approvedBy = (event, need, by) => {
-    runtime.present("permissions.approved", { tool: event.toolName, kind: need.kind, summary: need.summary, by });
+    runtime.present("permissions.approved", {
+      toolCallId: event.toolCallId,
+      tool: event.toolName,
+      kind: need.kind,
+      summary: need.summary,
+      by
+    });
     return void 0;
   };
   const jevApproves = async (event, need, flag, ctx) => {
     const call = `${event.toolName}: ${clip(describeCall2(event.toolName, event.input), 400)}`;
-    const userMessage = clip(runtime.turn.userMessage, 400);
+    const inherited = subAgentUserGoal();
+    const userMessage = clip(inherited ?? runtime.turn.userMessage, 400);
     runtime.progress(
       say({ zh: `Jev \u5728\u5BA1\u6279\uFF1A${clip(need.summary, 60)}`, en: `Jev is reviewing: ${clip(need.summary, 60)}` }),
       "permission_review",
@@ -81623,13 +82474,18 @@ function registerPermissions(runtime, roots) {
         { command: clip(describeCall2(event.toolName, event.input), 400), userMessage, flag },
         { signal: ctx.signal }
       );
-      return { approved: (decision2.judged ?? decision2.outcome) === "allow", reason: "flagged" };
+      const requested = decision2.answers?.requested;
+      const asked2 = requested?.type === "boolean" && threeZone(requested) === "yes";
+      return { approved: asked2 && (decision2.judged ?? decision2.outcome) === "allow", reason: "flagged" };
     }
     const frame = runtime.frame;
     const decision = await runtime.engine.decide(
       toolApproval,
       {
-        task: clip([frame?.goal, frame?.currentSubgoal].filter(Boolean).join(" / now: ") || userMessage, 600),
+        task: clip(
+          inherited ?? ([frame?.goal, frame?.currentSubgoal].filter(Boolean).join(" / now: ") || userMessage),
+          600
+        ),
         userMessage,
         call,
         where: need.kind === "outside" ? "outside the project folder" : need.kind === "shell" || need.kind === "run" ? "a program run in the project folder" : need.kind === "delegate" ? "sub-agents working on the project" : "an action outside this computer or program, such as a web page or a connected service"
@@ -81637,7 +82493,8 @@ function registerPermissions(runtime, roots) {
       { signal: ctx.signal }
     );
     const verdict3 = decision.judged ?? decision.outcome;
-    return verdict3 === "approve" ? { approved: true, reason: "ask" } : { approved: false, reason: verdict3 };
+    if (verdict3 === "approve") return { approved: true, reason: "ask" };
+    return { approved: false, reason: unanswered2(decision) ?? verdict3 };
   };
   const askUser = async (event, need, reason, flag, ctx) => {
     const why = reason === "flagged" ? say({ zh: `\u5371\u9669\u64CD\u4F5C\uFF1A${FLAG_ZH[flag ?? ""] ?? flag}\u3002`, en: `Risky: ${flag}.` }) : say(REASON_TEXT[reason]);
@@ -81654,6 +82511,9 @@ function registerPermissions(runtime, roots) {
     const deny = say(ANSWERS.deny);
     runtime.present("permissions.request", {
       id,
+      // The call this is about, here and in `permissions.resolved`: a client marks that call's own row by it, in
+      // its own words. The model is still told in English why a refused call did not run.
+      toolCallId: event.toolCallId,
       mode,
       tool: event.toolName,
       kind: need.kind,
@@ -81687,7 +82547,7 @@ function registerPermissions(runtime, roots) {
       ctx.ui.setStatus(PENDING_STATUS, void 0);
     }
     const answer = picked === once2 ? "once" : session && picked === session ? "session" : "deny";
-    runtime.present("permissions.resolved", { id, answer });
+    runtime.present("permissions.resolved", { id, toolCallId: event.toolCallId, answer });
     if (answer === "session" && grant) grants.add(grant.key);
     if (answer !== "deny") return void 0;
     return {
@@ -81698,7 +82558,7 @@ function registerPermissions(runtime, roots) {
   const gate = async (event, ctx) => {
     if (mode === "full") return void 0;
     const input = event.input;
-    const need = permissionNeed(event.toolName, input, ctx.cwd, guarded);
+    const need = permissionNeed(event.toolName, input, ctx.cwd, [...guarded, ...projectSettings(ctx.cwd)]);
     if (!need) return void 0;
     const command = isShellTool(event.toolName) || event.toolName === "bg_start" ? String(input.command ?? "") : "";
     const flag = command ? riskFlag(command) : void 0;
@@ -82040,10 +82900,10 @@ function renderVerdict(data, expanded, width, paint) {
     const pad = Math.max(...QUESTION_LABELS.map(([, label2]) => label2.length)) + 2;
     for (const [label2, value] of data.answers) lines2.push(`  ${paint.fg("muted", label2.padEnd(pad))}${value}`);
     const room = Math.max(16, width - pad - 4);
-    const told = (data.hints.length > 0 ? data.hints : ["nothing extra"]).flatMap(
+    const told2 = (data.hints.length > 0 ? data.hints : ["nothing extra"]).flatMap(
       (hint) => (0, import_pi_tui4.wrapTextWithAnsi)(`- ${hint}`, room).map((line2, index) => index === 0 ? line2 : `  ${line2}`)
     );
-    told.forEach((line2, index) => {
+    told2.forEach((line2, index) => {
       lines2.push(
         `  ${paint.fg("muted", (index === 0 ? "told the model" : "").padEnd(pad))}${paint.fg("dim", line2)}`
       );
@@ -82285,8 +83145,8 @@ function registerPreflight(runtime) {
       }
       let skip = () => {
       };
-      const skipped = new Promise((resolve13) => {
-        skip = () => resolve13("skipped");
+      const skipped = new Promise((resolve15) => {
+        skip = () => resolve15("skipped");
       });
       const unsubscribe = panel ? ctx.ui.onTerminalInput((keys) => {
         if (!(0, import_pi_tui5.matchesKey)(keys, "escape")) return void 0;
@@ -82294,8 +83154,8 @@ function registerPreflight(runtime) {
         return { consume: true };
       }) : void 0;
       let timer;
-      const timeout = new Promise((resolve13) => {
-        timer = setTimeout(() => resolve13("timeout"), options.waitMs);
+      const timeout = new Promise((resolve15) => {
+        timer = setTimeout(() => resolve15("timeout"), options.waitMs);
       });
       try {
         current.waitEndedBy = await Promise.race([pending.then(() => "verdict"), timeout, skipped]);
@@ -82589,6 +83449,19 @@ function registerTools(runtime) {
   const options = runtime.options("locate", { enabled: true, candidates: 40, results: 12 });
   if (!options.enabled) return;
   const { pi } = runtime;
+  let stub;
+  const cannot = (reason) => {
+    const none = [];
+    return {
+      content: [
+        {
+          type: "text",
+          text: `${UNUSABLE_TEXT[reason]}. locate lists files with git; search another way.`
+        }
+      ],
+      details: { ranked: none, judged: false }
+    };
+  };
   pi.registerTool({
     name: "locate",
     label: "Locate",
@@ -82599,10 +83472,15 @@ function registerTools(runtime) {
     }),
     execute: async (_toolCallId, params, signal) => {
       const cwd = runtime.ctx?.cwd ?? process.cwd();
+      stub ??= stubProblem("git", process.env.PATH);
+      const problem = await stub;
+      if (problem) return cannot(problem.reason);
       const listing = await pi.exec("git", ["ls-files", ...params.directory ? [params.directory] : []], {
         cwd,
         signal
       });
+      if (heldByLicense(listing.code, () => `${listing.stderr}
+${listing.stdout}`)) return cannot("xcode_license");
       const paths = listing.stdout.split("\n").filter(Boolean);
       if (paths.length === 0) {
         const none = [];
@@ -83180,115 +84058,6 @@ function htmlToText(html, baseUrl) {
 var findElements = find;
 var elementText = (node) => squash(plainText(node));
 
-// packages/kyrn-judge/src/web/ssrf.ts
-import { lookup as dnsLookup } from "node:dns";
-import { isIP as isIP2 } from "node:net";
-var FetchRefusal = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-  }
-};
-function v4(octets) {
-  const [a, b, c] = octets;
-  if (a === 127) return "loopback";
-  if (a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168) return "private";
-  if (a === 100 && b >= 64 && b <= 127) return "private";
-  if (a === 169 && b === 254) return "link-local";
-  if (a === 0 || a >= 224) return "reserved";
-  if (a === 192 && b === 0 && (c === 0 || c === 2)) return "reserved";
-  if (a === 198 && b === 51 && c === 100 || a === 203 && b === 0 && c === 113) return "reserved";
-  return "public";
-}
-function groups(address) {
-  let text6 = address.split("%")[0];
-  const dotted = /^(.*:)(\d+\.\d+\.\d+\.\d+)$/.exec(text6);
-  if (dotted) {
-    const octets = dotted[2].split(".").map(Number);
-    if (octets.some((octet) => octet > 255)) return void 0;
-    text6 = `${dotted[1]}${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}`;
-  }
-  const halves = text6.split("::");
-  if (halves.length > 2) return void 0;
-  const head = halves[0] ? halves[0].split(":") : [];
-  const tail = halves.length === 2 && halves[1] ? halves[1].split(":") : [];
-  const fill = halves.length === 2 ? 8 - head.length - tail.length : 0;
-  if (fill < 0 || halves.length === 1 && head.length !== 8) return void 0;
-  const all = [...head, ...Array(fill).fill("0"), ...tail].map((group) => Number.parseInt(group, 16));
-  return all.length === 8 && all.every((group) => group >= 0 && group <= 65535) ? all : void 0;
-}
-function classifyAddress(address) {
-  const bare = address.replace(/^\[|\]$/g, "");
-  if (isIP2(bare) === 4) return v4(bare.split(".").map(Number));
-  const parts = groups(bare);
-  if (!parts) return "reserved";
-  const embedded = [parts[6] >> 8, parts[6] & 255, parts[7] >> 8, parts[7] & 255];
-  const zeroPrefix = parts.slice(0, 5).every((group) => group === 0);
-  if (zeroPrefix && parts[5] === 65535) return v4(embedded);
-  if (parts[0] === 100 && parts[1] === 65435 && parts.slice(2, 6).every((group) => group === 0)) return v4(embedded);
-  if (zeroPrefix && parts[5] === 0) {
-    if (parts[6] === 0 && parts[7] === 1) return "loopback";
-    return parts[6] === 0 && parts[7] === 0 ? "reserved" : v4(embedded);
-  }
-  if ((parts[0] & 65024) === 64512) return "private";
-  if ((parts[0] & 65472) === 65152) return "link-local";
-  if ((parts[0] & 65280) === 65280) return "reserved";
-  if (parts[0] === 8193 && parts[1] === 3512) return "reserved";
-  return "public";
-}
-function allowed(kind, policy) {
-  if (kind === "public") return true;
-  if (kind === "loopback") return policy.allowLoopback;
-  if (kind === "private" || kind === "link-local") return policy.allowPrivate;
-  return false;
-}
-function refusal(host2, address, kind) {
-  return new FetchRefusal(
-    "address",
-    `Refused: ${host2} is a ${kind} address (${address}). web_fetch only reads the public web and, when asked directly, this machine's own dev servers.`
-  );
-}
-function checkUrl(raw, policy) {
-  let url;
-  try {
-    url = new URL(raw);
-  } catch {
-    throw new FetchRefusal("url", `Not a URL: ${raw.slice(0, 200)}`);
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new FetchRefusal("scheme", `Refused: only http and https can be fetched, not ${url.protocol}`);
-  }
-  if (url.username || url.password) {
-    throw new FetchRefusal("credentials", "Refused: the URL carries credentials. Remove the user:password@ part.");
-  }
-  const host2 = url.hostname.replace(/^\[|\]$/g, "");
-  if (isIP2(host2)) {
-    const kind = classifyAddress(host2);
-    if (!allowed(kind, policy)) throw refusal(url.hostname, host2, kind);
-  }
-  return url;
-}
-function isLoopbackUrl(url) {
-  const host2 = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-  if (host2 === "localhost" || host2.endsWith(".localhost")) return true;
-  return isIP2(host2) !== 0 && classifyAddress(host2) === "loopback";
-}
-function checkedLookup(policy, resolve13 = dnsLookup) {
-  return (hostname, options, callback) => {
-    resolve13(hostname, { ...options, all: true }, (error, answer) => {
-      if (error) return callback(error);
-      const addresses = Array.isArray(answer) ? answer : [];
-      if (addresses.length === 0) return callback(new FetchRefusal("dns", `${hostname} has no address`));
-      for (const entry of addresses) {
-        const kind = classifyAddress(entry.address);
-        if (!allowed(kind, policy)) return callback(refusal(hostname, entry.address, kind));
-      }
-      if (options.all) callback(null, addresses);
-      else callback(null, addresses[0].address, addresses[0].family);
-    });
-  };
-}
-
 // packages/kyrn-judge/src/web/fetch.ts
 var BROWSER_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36";
 var REDIRECTS = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
@@ -83300,7 +84069,7 @@ function decompressed(response) {
   return response.pipe(through);
 }
 function once(url, limits, policy, signal) {
-  return new Promise((resolve13, reject) => {
+  return new Promise((resolve15, reject) => {
     const send = url.protocol === "https:" ? httpsRequest : httpRequest;
     const request = send(
       url,
@@ -83316,7 +84085,7 @@ function once(url, limits, policy, signal) {
           ...limits.headers
         }
       },
-      resolve13
+      resolve15
     );
     request.on("error", reject);
     request.end();
@@ -83901,6 +84670,69 @@ ${lines2.join("\n\n")}`
   });
 }
 
+// packages/kyrn-judge/src/extension/quit.ts
+import { join as join43 } from "node:path";
+
+// packages/kyrn-judge/src/auth/exit.ts
+import { mkdirSync as mkdirSync17, rmdirSync as rmdirSync2 } from "node:fs";
+import { resolve as resolve14 } from "node:path";
+import { setTimeout as sleep4 } from "node:timers/promises";
+async function holdLocksUntilExit(files, {
+  limitMs = 3e3,
+  pollMs = 20,
+  holdMs = 2e3
+} = {}) {
+  const locks = lockFolders(files);
+  const deadline = Date.now() + limitMs;
+  let taken = takeAll(locks);
+  while (!taken && Date.now() < deadline) {
+    await sleep4(pollMs);
+    taken = takeAll(locks);
+  }
+  if (!taken) return void 0;
+  const held = taken;
+  const release = () => {
+    clearTimeout(timer);
+    process.off("exit", release);
+    for (const lock of held) drop(lock);
+  };
+  const timer = setTimeout(release, holdMs);
+  timer.unref();
+  process.once("exit", release);
+  return release;
+}
+function lockFolders(files) {
+  return [...new Set(files.map((file) => `${resolve14(file)}.lock`))];
+}
+function takeAll(locks) {
+  const taken = [];
+  for (const lock of locks) {
+    try {
+      mkdirSync17(lock);
+      taken.push(lock);
+    } catch (error) {
+      if (error.code !== "EEXIST") continue;
+      for (const mine of taken) drop(mine);
+      return void 0;
+    }
+  }
+  return taken;
+}
+function drop(lock) {
+  try {
+    rmdirSync2(lock);
+  } catch {
+  }
+}
+
+// packages/kyrn-judge/src/extension/quit.ts
+function registerLockSafeQuit(pi, agentDir) {
+  const stores2 = [join43(agentDir, "auth.json"), join43(agentDir, "models-store.json")];
+  pi.on("session_shutdown", async (event) => {
+    if (event.reason === "quit") await holdLocksUntilExit(stores2);
+  });
+}
+
 // packages/kyrn-judge/src/extension/rejections.ts
 import { inspect } from "node:util";
 var logging = /* @__PURE__ */ new WeakSet();
@@ -83935,7 +84767,7 @@ function kyrnJudgeExtension(pi) {
 function registerKyrn(pi, options) {
   delete process.env.ELECTRON_RUN_AS_NODE;
   registerRejectionLog(pi);
-  const loaded = options.config || options.provider ? { config: options.config ?? DEFAULT_CONFIG, disabled: false, problem: void 0 } : loadConfig({ dir: (0, import_pi_coding_agent12.getAgentDir)(), env: process.env });
+  const loaded = options.config || options.provider ? { config: options.config ?? DEFAULT_CONFIG, disabled: false, problem: void 0 } : loadConfig({ dir: (0, import_pi_coding_agent13.getAgentDir)(), env: process.env });
   const config = loaded.disabled ? { ...loaded.config, tiers: ["mock"], modes: { default: "off" } } : options.mode ? { ...loaded.config, modes: { ...loaded.config.modes, default: options.mode } } : loaded.config;
   const runtime = new KyrnRuntime(
     pi,
@@ -83947,10 +84779,12 @@ function registerKyrn(pi, options) {
   runtime.onPresentation = options.onPresentation;
   for (const capability of options.capabilities ?? []) runtime.catalog.register(capability);
   registerWelcome(runtime);
-  const roots = options.roots ?? (options.config || options.provider ? void 0 : { home: homedir9(), agentDir: (0, import_pi_coding_agent12.getAgentDir)() });
+  const roots = options.roots ?? (options.config || options.provider ? void 0 : { home: homedir10(), agentDir: (0, import_pi_coding_agent13.getAgentDir)() });
   if (loaded.disabled) {
+    if (!options.only || options.only.includes("permissions")) registerPermissions(runtime, roots);
     registerCommands(runtime, roots);
     registerImport(pi);
+    if (roots) registerLockSafeQuit(pi, roots.agentDir);
     return;
   }
   if (process.env.KYRN_SWARM_CONTROL)
@@ -84000,6 +84834,7 @@ function registerKyrn(pi, options) {
   }
   registerCommands(runtime, roots);
   registerImport(pi);
+  if (roots) registerLockSafeQuit(pi, roots.agentDir);
 }
 export {
   createKyrnJudgeExtension,