mu-agent 0.2.11 → 0.2.13

package/judge/mu/index.js

@@ -15046,7 +15046,7 @@ var require_snapshot_recorder = __commonJS({
   "node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
     var { writeFile: writeFile7, readFile: readFile8, mkdir: mkdir2 } = __require("node:fs/promises");
-    var { dirname: dirname13, resolve: resolve16 } = __require("node:path");
+    var { dirname: dirname14, resolve: resolve16 } = __require("node:path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -15292,7 +15292,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         const resolvedPath = resolve16(path);
-        await mkdir2(dirname13(resolvedPath), { recursive: true });
+        await mkdir2(dirname14(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash, snapshot2]) => ({
           hash,
           snapshot: snapshot2
@@ -27414,7 +27414,7 @@ var require_pi_tui = __commonJS({
 // packages/kyrn-judge/src/extension/kyrn-judge.ts
 var import_pi_coding_agent18 = __toESM(require_pi_coding_agent(), 1);
 import { homedir as homedir12 } from "node:os";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 
 // packages/kyrn-judge/src/config.ts
 import { readFileSync } from "node:fs";
@@ -32461,7 +32461,7 @@ ${result.text}` : "(no new output)"
 }
 
 // packages/kyrn-judge/src/extension/features/board.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 
 // packages/kyrn-judge/src/board/model.ts
 var pick = (texts, wording) => wording === "zh" ? texts.zh : texts.en;
@@ -33001,8 +33001,8 @@ var BoardProjects = class {
 };
 
 // packages/kyrn-judge/src/checkpoint/mutating.ts
-import { realpathSync } from "node:fs";
-import { isAbsolute as isAbsolute2, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync5, realpathSync } from "node:fs";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join11, resolve as resolve3, sep } from "node:path";
 
 // packages/kyrn-judge/src/extension/shell-tools.ts
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["bash", "powershell"]);
@@ -33205,7 +33205,16 @@ function harmlessRedirect(text9, at, both) {
   if (!text9.startsWith("/dev/null", index) || !/^(?:[\s;&|]|$)/.test(text9.slice(end, end + 1))) return void 0;
   return end - 1;
 }
-function simpleCommands(text9) {
+function fileRedirect(text9, at, writes) {
+  let index = at + 1;
+  if (text9[index] === ">") index++;
+  while (text9[index] === " " || text9[index] === "	") index++;
+  const name = /^[\w./@%+,:=-]+/.exec(text9.slice(index))?.[0];
+  if (!name || !/^(?:[\s;&|]|$)/.test(text9.slice(index + name.length, index + name.length + 1))) return void 0;
+  writes.push(name);
+  return index + name.length - 1;
+}
+function simpleCommands(text9, writes) {
   if (text9.includes("\r")) return void 0;
   const commands = [];
   let words2 = [];
@@ -33238,7 +33247,7 @@ function simpleCommands(text9) {
         endCommand();
       } else if (next === ">") {
         endWord();
-        const end = harmlessRedirect(text9, index + 1, true);
+        const end = harmlessRedirect(text9, index + 1, true) ?? (writes ? fileRedirect(text9, index + 1, writes) : void 0);
         if (end === void 0) return void 0;
         index = end;
       } else return void 0;
@@ -33247,7 +33256,7 @@ function simpleCommands(text9) {
         word = "";
         started = false;
       } else endWord();
-      const end = harmlessRedirect(text9, index, false);
+      const end = harmlessRedirect(text9, index, false) ?? (writes ? fileRedirect(text9, index, writes) : void 0);
       if (end === void 0) return void 0;
       index = end;
     } else if (char === "'") {
@@ -33260,6 +33269,11 @@ function simpleCommands(text9) {
       let end = index + 1;
       for (; end < text9.length && text9[end] !== '"'; end++) {
         const inner = text9[end];
+        if (writes && text9.startsWith(TOP_SUBSTITUTION, end)) {
+          word += TOP;
+          end += TOP_SUBSTITUTION.length - 1;
+          continue;
+        }
         if (inner === "`" || inner === "$" && /[({[]/.test(text9[end + 1] ?? "")) return void 0;
         if (inner === "\\" && /[$`"\\\n]/.test(text9[end + 1] ?? "")) {
           end++;
@@ -33292,17 +33306,26 @@ function isReadOnlyChain(command, powershell = false, cwd, start = cwd) {
   if (!commands?.some((words2) => words2.length > 0)) return false;
   let elsewhere = startsElsewhere(cwd, start);
   return commands.every((words2) => {
-    const [program] = words2;
-    if (program === void 0 || program === "true" || program === "false" || program === ":") return true;
-    if (program === "cd") {
-      const [, to, ...more] = words2;
-      elsewhere = cwd === void 0 || to === void 0 || more.length > 0 || !isAbsolute2(to) || /[$*?[~]/.test(to) || to.split(/[\\/]/).includes("..") || !samePlace(to, cwd);
-      return true;
-    }
-    if (program === "find") return !words2.some((word) => FIND_ACTS.test(word));
-    return readOnlyProgram(words2.join(" "), elsewhere);
+    if (words2[0] !== "cd") return readOnlyPart(words2, elsewhere);
+    elsewhere = !cdHome(words2, cwd);
+    return true;
   });
 }
+function cdTarget(words2) {
+  const [, to, ...more] = words2;
+  if (to === void 0 || more.length > 0 || !isAbsolute2(to) || /[$*?[~]/.test(to)) return void 0;
+  return to.split(/[\\/]/).includes("..") ? void 0 : to;
+}
+function cdHome(words2, cwd) {
+  const to = cdTarget(words2);
+  return cwd !== void 0 && to !== void 0 && samePlace(to, cwd);
+}
+function readOnlyPart(words2, elsewhere) {
+  const [program] = words2;
+  if (program === void 0 || program === "true" || program === "false" || program === ":") return true;
+  if (program === "find") return !words2.some((word) => FIND_ACTS.test(word));
+  return readOnlyProgram(words2.join(" "), elsewhere);
+}
 function isMutatingCall(toolName, input, cwd) {
   if (READ_ONLY_TOOLS.has(toolName)) return false;
   if (isShellTool(toolName)) return !isReadOnlyChain(String(input.command ?? ""), toolName === "powershell", cwd);
@@ -33315,6 +33338,73 @@ var CHECK_COMMAND = /\b(?:vitest|jest|pytest|mocha|ava|tsc|eslint|biome|ruff|myp
 function isCheckCommand(command) {
   return CHECK_COMMAND.test(command);
 }
+var CHECK_RUN = /^(?:(?:(?:npx|bunx)\s+|(?:pnpm|yarn)\s+(?:exec\s+)?|python3?\s+-m\s+)?(?:vitest|jest|pytest|mocha|ava|tsc|eslint|biome|ruff|mypy|rspec|phpunit|ctest|tox|nox)|(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?(?:test|build|check|lint|typecheck)|(?:cargo|go|dotnet|swift|make|deno)\s+(?:test|build|check|vet|clippy)|node\s+--test|(?:(?:ba)?sh\s+(?:\.\/)?|\.\/)(?:[\w-][\w.-]*\/)*test\.sh|(?:[\w-][\w.-]*\/)+test\.sh)(?:\s|$)/;
+var CHECK_SETTING = /^(?:PYTHONPATH|CI|NODE_ENV|FORCE_COLOR|NO_COLOR|RUST_BACKTRACE)=[^$]*$/;
+var TOP_SUBSTITUTION = "$(git rev-parse --show-toplevel)";
+var TOP = "\0top\0";
+var LOCAL_VITEST = /(?:^|\/)node_modules\/vitest\/(?:dist\/cli\.js|vitest\.mjs)$/;
+var LOCAL_BIN = /(?:^|\/)node_modules\/\.bin\/(?:vitest|jest|mocha|ava|tsc|eslint|biome)$/;
+function localCheck(run2, dir, home) {
+  const [program, script] = run2;
+  const path = program === "node" ? script : program;
+  if (path === void 0 || !(program === "node" ? LOCAL_VITEST : LOCAL_BIN).test(path) || /[$*?[~]/.test(path))
+    return false;
+  const parts = path.split("/");
+  if (parts.slice(parts.findIndex((part) => part !== "..")).includes("..")) return false;
+  return resolve3(dir, path).startsWith(`${home}${sep}`);
+}
+function repositoryTop(dir) {
+  for (let at = dir; ; at = dirname3(at)) {
+    if (existsSync5(join11(at, ".git"))) return at;
+    if (dirname3(at) === at) return void 0;
+  }
+}
+function tempFile(name) {
+  return /^\/(?:private\/)?tmp\//.test(name) && !name.split("/").includes("..");
+}
+function isCheckChain(command, powershell = false, cwd, start = cwd) {
+  if (powershell || cwd === void 0) return false;
+  const writes = [];
+  const commands = simpleCommands(command.trim(), writes);
+  if (!commands || !writes.every(tempFile)) return false;
+  let home = resolve3(cwd);
+  try {
+    home = realpathSync.native(cwd);
+  } catch {
+  }
+  const inProject2 = (to) => {
+    if (samePlace(to, cwd)) return home;
+    try {
+      const real2 = realpathSync.native(to);
+      return real2.startsWith(`${home}${sep}`) ? real2 : void 0;
+    } catch {
+      return void 0;
+    }
+  };
+  let dir = start === void 0 ? home : inProject2(start);
+  let checks = 0;
+  const parts = commands.every((said) => {
+    let words2 = said;
+    if (said.some((word) => word.includes(TOP))) {
+      if (dir === void 0 || repositoryTop(dir) !== home) return false;
+      words2 = said.map((word) => word.replaceAll(TOP, home));
+    }
+    if (words2[0] === "cd") {
+      const to = cdTarget(words2);
+      dir = to === void 0 ? void 0 : inProject2(to);
+      return true;
+    }
+    let at = words2[0] === "env" ? 1 : 0;
+    while (at < words2.length && CHECK_SETTING.test(words2[at])) at++;
+    const run2 = words2.slice(at);
+    if (CHECK_RUN.test(run2.join(" ")) || dir !== void 0 && localCheck(run2, dir, home)) {
+      checks++;
+      return dir !== void 0;
+    }
+    return at === 0 && readOnlyPart(words2, dir !== home);
+  });
+  return parts && checks > 0;
+}
 
 // packages/kyrn-judge/src/decisions/board-read.ts
 var MAX_EVENTS = 16;
@@ -33465,7 +33555,7 @@ var boardRead = defineDecision({
 
 // packages/kyrn-judge/src/swarm/run.ts
 import { appendFileSync, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/tool-injection.ts
 var INJECTION_THRESHOLD = 0.5;
@@ -33941,7 +34031,7 @@ function subagentUsage(kind, bee) {
   };
 }
 function controlPath(dir, index) {
-  return join11(dir, "control", `bee-${index}.json`);
+  return join12(dir, "control", `bee-${index}.json`);
 }
 var active = /* @__PURE__ */ new Set();
 function activeRuns() {
@@ -33983,8 +34073,8 @@ var SwarmRun = class {
     this.now = options.now ?? Date.now;
     this.startedAt = this.now();
     this.controllers = options.bees.map(() => void 0);
-    mkdirSync6(join11(this.dir, "control"), { recursive: true });
-    mkdirSync6(join11(this.dir, "transcripts"), { recursive: true });
+    mkdirSync6(join12(this.dir, "control"), { recursive: true });
+    mkdirSync6(join12(this.dir, "transcripts"), { recursive: true });
     this.bees = options.bees.map((bee, index) => this.stateFor(bee, index, this.startedAt));
   }
   stateFor(bee, index, now) {
@@ -33992,7 +34082,7 @@ var SwarmRun = class {
       role: bee.role,
       model: bee.model,
       thinking: bee.thinking,
-      transcript: join11(this.dir, "transcripts", `${index}-${bee.name.replace(/[^\w.-]+/g, "_")}.jsonl`)
+      transcript: join12(this.dir, "transcripts", `${index}-${bee.name.replace(/[^\w.-]+/g, "_")}.jsonl`)
     });
   }
   /**
@@ -34658,7 +34748,7 @@ function registerBoard(runtime, roots) {
   });
   if (!options.enabled || process.env.KYRN_SWARM_CONTROL) return;
   const { pi } = runtime;
-  const projects = new BoardProjects(roots ? join12(roots.agentDir, "mu") : void 0);
+  const projects = new BoardProjects(roots ? join13(roots.agentDir, "mu") : void 0);
   const calls = /* @__PURE__ */ new Map();
   let steps = [];
   let latest = "";
@@ -35633,9 +35723,9 @@ ${addModelHelp(language())}`,
 
 // packages/kyrn-judge/src/extension/features/browser.ts
 var import_typebox2 = __toESM(require_typebox(), 1);
-import { existsSync as existsSync6, rmSync as rmSync4 } from "node:fs";
+import { existsSync as existsSync7, rmSync as rmSync4 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/kyrn-judge/src/decisions/browser-step.ts
@@ -36516,9 +36606,9 @@ var CdpConnection = class _CdpConnection {
 
 // packages/kyrn-judge/src/browser/chrome.ts
 import { spawn as spawn3, spawnSync } from "node:child_process";
-import { existsSync as existsSync5, mkdirSync as mkdirSync7, readFileSync as readFileSync7, rmSync as rmSync3 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync7, rmSync as rmSync3 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { basename as basename2, dirname as dirname3, join as join13, posix, win32 } from "node:path";
+import { basename as basename2, dirname as dirname4, join as join14, posix, win32 } from "node:path";
 
 // packages/kyrn-judge/src/platform.ts
 import { readFileSync as readFileSync6 } from "node:fs";
@@ -36712,7 +36802,7 @@ ${browserAdvice(host2)}`, {
         params: { profileDir }
       });
     spelled = translated;
-    cwd = dirname3(browser.executable);
+    cwd = dirname4(browser.executable);
   } else {
     const base = confinedProfileBase(browser.executable, host2);
     if (base) profileDir = posix.join(base, `mu-${basename2(profileDir)}`);
@@ -36746,11 +36836,11 @@ function thisBrowserHost(env = process.env) {
       }
     };
   }
-  return { platform: process.platform, env, home: homedir2(), exists: existsSync5, wsl };
+  return { platform: process.platform, env, home: homedir2(), exists: existsSync6, wsl };
 }
 function readEndpoint(profileDir) {
   try {
-    const [port, path] = readFileSync7(join13(profileDir, "DevToolsActivePort"), "utf8").trim().split("\n");
+    const [port, path] = readFileSync7(join14(profileDir, "DevToolsActivePort"), "utf8").trim().split("\n");
     return port && path ? `ws://127.0.0.1:${port}${path}` : void 0;
   } catch {
     return void 0;
@@ -36787,14 +36877,14 @@ async function launchChrome(options = {}) {
   const plan2 = planBrowserLaunch({
     host: host2,
     browser,
-    profileDir: options.profileDir ?? join13(muHome(), "browser-profile"),
+    profileDir: options.profileDir ?? join14(muHome(), "browser-profile"),
     headless: options.headless !== false
   });
   const { profileDir } = plan2;
   const running = readEndpoint(profileDir);
   if (running && await isAlive(running)) return { endpoint: running, profileDir };
   mkdirSync7(profileDir, { recursive: true });
-  rmSync3(join13(profileDir, "DevToolsActivePort"), { force: true });
+  rmSync3(join14(profileDir, "DevToolsActivePort"), { force: true });
   const child = spawn3(plan2.command, plan2.args, { stdio: "ignore", detached: false, cwd: plan2.cwd });
   let failure;
   child.on("error", (error) => {
@@ -36823,7 +36913,7 @@ async function launchChrome(options = {}) {
 
 // packages/kyrn-judge/src/browser/embedded.ts
 import { readFileSync as readFileSync8 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var ADVERT_FILE = "desktop-browser.json";
 var PROTOCOL_VERSION = 1;
 function processRuns(pid) {
@@ -36848,7 +36938,7 @@ function findEmbeddedEndpoint(host2 = {}) {
   if (fromEnv) return loopbackSocket(fromEnv) ? { url: fromEnv } : void 0;
   try {
     const read2 = host2.readFile ?? ((path) => readFileSync8(path, "utf8"));
-    const advert = JSON.parse(read2(join14(host2.home ?? muHome(), ADVERT_FILE)));
+    const advert = JSON.parse(read2(join15(host2.home ?? muHome(), ADVERT_FILE)));
     if (typeof advert.url !== "string" || !loopbackSocket(advert.url)) return void 0;
     const pid = typeof advert.pid === "number" ? advert.pid : void 0;
     if (pid !== void 0 && !(host2.isRunning ?? processRuns)(pid)) return void 0;
@@ -36947,7 +37037,7 @@ function registerBrowser(runtime) {
   let chrome;
   let cdp;
   let embedded;
-  const ownProfile = !options.profileDir && process.env.KYRN_SWARM_DEPTH ? join15(tmpdir2(), `kyrn-browser-${process.pid}`) : void 0;
+  const ownProfile = !options.profileDir && process.env.KYRN_SWARM_DEPTH ? join16(tmpdir2(), `kyrn-browser-${process.pid}`) : void 0;
   const connect2 = async () => {
     if (cdp && !cdp.isClosed) return cdp;
     cdp = void 0;
@@ -37199,7 +37289,7 @@ ${result.page.text.slice(0, textChars)}`
   });
   pi.on(
     "resources_discover",
-    failOpen(() => existsSync6(SKILL_PATH) ? { skillPaths: [SKILL_PATH] } : void 0)
+    failOpen(() => existsSync7(SKILL_PATH) ? { skillPaths: [SKILL_PATH] } : void 0)
   );
   pi.on(
     "session_shutdown",
@@ -37577,12 +37667,12 @@ Open one with find_capability({ open: "<id>" }).`;
 // packages/kyrn-judge/src/extension/features/checkpoint.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { homedir as homedir3 } from "node:os";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 
 // packages/kyrn-judge/src/checkpoint/git.ts
 import { execFile, spawn as spawn4 } from "node:child_process";
-import { accessSync, constants, existsSync as existsSync7, statSync as statSync5 } from "node:fs";
-import { delimiter, join as join16 } from "node:path";
+import { accessSync, constants, existsSync as existsSync8, statSync as statSync5 } from "node:fs";
+import { delimiter, join as join17 } from "node:path";
 var TIMED_OUT = 124;
 var GitMissing = class extends Error {
   constructor(binary, cause) {
@@ -37607,7 +37697,7 @@ var GitFailed = class extends Error {
   }
 };
 function findOnPath(binary, path) {
-  const candidates = binary.includes("/") ? [binary] : (path ?? "").split(delimiter).filter(Boolean).map((folder) => join16(folder, binary));
+  const candidates = binary.includes("/") ? [binary] : (path ?? "").split(delimiter).filter(Boolean).map((folder) => join17(folder, binary));
   return candidates.find((candidate) => {
     try {
       accessSync(candidate, constants.X_OK);
@@ -37625,7 +37715,7 @@ var hostProbe = {
       "/usr/bin/xcode-select",
       ["-p"],
       { timeout: 5e3 },
-      (error, stdout) => done(!error && existsSync7(stdout.trim()))
+      (error, stdout) => done(!error && existsSync8(stdout.trim()))
     );
   })
 };
@@ -37707,7 +37797,7 @@ function spawnOnce(binary, timeoutMs, args, env, input, limit) {
     child.stdin?.end(input ?? "");
   });
 }
-function shadowEnv(base, gitDir, workTree, indexFile = join16(gitDir, "index")) {
+function shadowEnv(base, gitDir, workTree, indexFile = join17(gitDir, "index")) {
   const env = {};
   for (const [key, value] of Object.entries(base)) {
     if (value !== void 0 && !key.toUpperCase().startsWith("GIT_")) env[key] = value;
@@ -37736,7 +37826,7 @@ import {
   appendFileSync as appendFileSync2,
   chmodSync as chmodSync2,
   constants as constants2,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   lstatSync,
   mkdirSync as mkdirSync8,
   readdirSync as readdirSync2,
@@ -37748,7 +37838,7 @@ import {
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync6
 } from "node:fs";
-import { basename as basename3, dirname as dirname4, isAbsolute as isAbsolute3, join as join17, relative, resolve as resolve4, sep } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute3, join as join18, relative, resolve as resolve4, sep as sep2 } from "node:path";
 var BUILT_IN_IGNORES = [
   "node_modules/",
   "bower_components/",
@@ -37802,7 +37892,7 @@ var shadowConfig = (gitDir) => `${CONFIG_MARKER}
 	longpaths = true
 	quotepath = false
 	fsmonitor = false
-	hooksPath = "${join17(gitDir, "mu-no-hooks").replaceAll("\\", "/").replaceAll('"', '\\"')}"
+	hooksPath = "${join18(gitDir, "mu-no-hooks").replaceAll("\\", "/").replaceAll('"', '\\"')}"
 [gc]
 	auto = 0
 [commit]
@@ -37843,19 +37933,19 @@ function isSafePath(path) {
   if (!path || path.startsWith("/") || /^[a-zA-Z]:/.test(path) || path.includes("\\")) return false;
   return path.split("/").every((part) => part !== "" && part !== "." && part !== ".." && !/^\.git$|^git~\d+$/i.test(part));
 }
-var onDisk = (store, path) => join17(store.root, ...path.split("/"));
+var onDisk = (store, path) => join18(store.root, ...path.split("/"));
 function realPath(path) {
   const absolute3 = resolve4(path);
   try {
     return realpathSync2.native(absolute3);
   } catch {
-    const parent = dirname4(absolute3);
-    return parent === absolute3 ? absolute3 : join17(realPath(parent), basename3(absolute3));
+    const parent = dirname5(absolute3);
+    return parent === absolute3 ? absolute3 : join18(realPath(parent), basename3(absolute3));
   }
 }
 function inside(outer, inner) {
   const rel = relative(realPath(outer), realPath(inner));
-  return rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute3(rel) ? void 0 : rel;
+  return rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute3(rel) ? void 0 : rel;
 }
 function isWithin(outer, inner) {
   return inside(outer, inner) !== void 0;
@@ -37866,13 +37956,13 @@ function ownFolderPatterns(root, folders) {
     const rel = inside(root, folder);
     if (!rel) continue;
     patterns.add(
-      `/${rel.split(sep).map((part) => part.replace(/[\\*?[\]!#]/g, "\\$&")).join("/")}/`
+      `/${rel.split(sep2).map((part) => part.replace(/[\\*?[\]!#]/g, "\\$&")).join("/")}/`
     );
   }
   return [...patterns];
 }
 async function openStore(options) {
-  const gitDir = join17(options.baseDir, projectKey(options.root));
+  const gitDir = join18(options.baseDir, projectKey(options.root));
   const store = {
     gitDir,
     root: options.root,
@@ -37880,7 +37970,7 @@ async function openStore(options) {
     env: shadowEnv(options.env ?? process.env, gitDir, options.root),
     maxFileBytes: options.maxFileBytes ?? 5 * 1024 * 1024
   };
-  if (!existsSync8(join17(gitDir, "HEAD"))) {
+  if (!existsSync9(join18(gitDir, "HEAD"))) {
     mkdirSync8(gitDir, { recursive: true, mode: 448 });
     const { GIT_WORK_TREE: _tree, GIT_INDEX_FILE: _index, GIT_DIR: _dir, ...bare } = store.env;
     const result = await options.run(["-c", "init.defaultBranch=mu", "init", "--bare", "--quiet", gitDir], bare);
@@ -37890,15 +37980,15 @@ async function openStore(options) {
     chmodSync2(gitDir, 448);
   } catch {
   }
-  const config = join17(gitDir, "config");
+  const config = join18(gitDir, "config");
   if (!readFileSync9(config, "utf8").includes(CONFIG_MARKER)) appendFileSync2(config, `
 ${shadowConfig(gitDir)}`);
-  mkdirSync8(join17(gitDir, "info"), { recursive: true });
+  mkdirSync8(join18(gitDir, "info"), { recursive: true });
   const own = ownFolderPatterns(options.root, [options.baseDir, ...options.ownFolders ?? []]);
-  writeFileSync6(join17(gitDir, "info", "exclude"), `${[...options.ignore ?? BUILT_IN_IGNORES, ...own].join("\n")}
+  writeFileSync6(join18(gitDir, "info", "exclude"), `${[...options.ignore ?? BUILT_IN_IGNORES, ...own].join("\n")}
 `);
-  writeFileSync6(join17(gitDir, "info", "attributes"), SHADOW_ATTRIBUTES);
-  writeFileSync6(join17(gitDir, PROJECT_FILE), `${JSON.stringify({ root: options.root, lastUsed: Date.now() })}
+  writeFileSync6(join18(gitDir, "info", "attributes"), SHADOW_ATTRIBUTES);
+  writeFileSync6(join18(gitDir, PROJECT_FILE), `${JSON.stringify({ root: options.root, lastUsed: Date.now() })}
 `);
   releaseLocks(store, STALE_LOCK_MS);
   const stale = zList(await git(store, ["ls-files", "-z", "--cached", "--ignored", "--exclude-standard"]));
@@ -37914,7 +38004,7 @@ function releaseLocks(store, olderThanMs) {
   }
   for (const name of names) {
     if (!name.endsWith(".lock") && !/^restore-.*\.index$/.test(name)) continue;
-    const path = join17(store.gitDir, name);
+    const path = join18(store.gitDir, name);
     try {
       if (Date.now() - statSync6(path).mtimeMs >= olderThanMs) rmSync5(path, { force: true });
     } catch {
@@ -38030,7 +38120,7 @@ function obstacle(store, path, mustBeAbsent) {
   const parts = path.split("/");
   for (let depth = 1; depth < parts.length; depth++) {
     try {
-      if (!lstatSync(join17(store.root, ...parts.slice(0, depth))).isDirectory())
+      if (!lstatSync(join18(store.root, ...parts.slice(0, depth))).isDirectory())
         return "a file is where its folder should be";
     } catch {
       break;
@@ -38067,7 +38157,7 @@ async function applyRestore(store, plan2, keep = /* @__PURE__ */ new Set()) {
     const parts = path.split("/");
     for (let depth = parts.length - 1; depth >= 1; depth--) {
       try {
-        rmdirSync(join17(store.root, ...parts.slice(0, depth)));
+        rmdirSync(join18(store.root, ...parts.slice(0, depth)));
       } catch {
         break;
       }
@@ -38091,7 +38181,7 @@ async function applyRestore(store, plan2, keep = /* @__PURE__ */ new Set()) {
     }
   }
   if (write.length > 0) {
-    const index = join17(store.gitDir, `restore-${randomUUID3()}.index`);
+    const index = join18(store.gitDir, `restore-${randomUUID3()}.index`);
     const env = { ...store.env, GIT_INDEX_FILE: index };
     try {
       await git(store, ["read-tree", plan2.commit], void 0, env);
@@ -38133,11 +38223,11 @@ function sweepProjects(baseDir, maxAgeDays, now = Date.now(), offLimits = () =>
   }
   for (const name of names) {
     try {
-      const project = JSON.parse(readFileSync9(join17(baseDir, name, PROJECT_FILE), "utf8"));
+      const project = JSON.parse(readFileSync9(join18(baseDir, name, PROJECT_FILE), "utf8"));
       const unusable = typeof project.root === "string" && offLimits(project.root);
       const stale = typeof project.lastUsed === "number" && now - project.lastUsed >= maxAgeDays * 864e5;
       if (!unusable && !stale) continue;
-      rmSync5(join17(baseDir, name), { recursive: true, force: true });
+      rmSync5(join18(baseDir, name), { recursive: true, force: true });
       removed.push(name);
     } catch {
     }
@@ -38321,7 +38411,7 @@ function registerCheckpoint(runtime, roots, deps = {}) {
     unattended: false
   });
   if (!options.enabled || process.env.KYRN_SWARM_DEPTH) return;
-  const baseDir = options.dir || (roots ? join18(roots.agentDir, "mu", "checkpoints") : "");
+  const baseDir = options.dir || (roots ? join19(roots.agentDir, "mu", "checkpoints") : "");
   if (!baseDir) return;
   const { pi } = runtime;
   const home = () => roots?.home ?? homedir3();
@@ -38894,14 +38984,14 @@ The agent will then start over from your request, with a note about what didn't
 
 // packages/kyrn-judge/src/extension/features/commands.ts
 var import_pi_coding_agent5 = __toESM(require_pi_coding_agent(), 1);
-import { existsSync as existsSync10 } from "node:fs";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync11 } from "node:fs";
+import { join as join22 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // packages/kyrn-judge/src/extension/agents.ts
 var import_pi_coding_agent3 = __toESM(require_pi_coding_agent(), 1);
 import { readdirSync as readdirSync3, readFileSync as readFileSync10 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 function parseToolList(value) {
@@ -38935,7 +39025,7 @@ function loadDir(dir, source) {
   }
   const agents = [];
   for (const name of names) {
-    const filePath = join19(dir, name);
+    const filePath = join20(dir, name);
     try {
       const agent = parseAgent(readFileSync10(filePath, "utf8"), source, filePath);
       if (agent) agents.push(agent);
@@ -38954,8 +39044,8 @@ function loadAgents(userDir, builtInDir = BUILT_IN_AGENTS_DIR) {
 
 // packages/kyrn-judge/src/extension/localized-prompts.ts
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync9, readdirSync as readdirSync4, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync9, readdirSync as readdirSync4, readFileSync as readFileSync11, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join21 } from "node:path";
 var FORMAT = 1;
 var LANGUAGE_KEY = /^([A-Za-z]+(?:-[A-Za-z]+)*)-(zh|en):/;
 function localizeTemplate(text9, wording) {
@@ -38993,19 +39083,19 @@ var oneLineAt = (lines2, index) => {
 function promptsFor(dir, wording, root) {
   if (wording !== "zh") return dir;
   try {
-    const sources = readdirSync4(dir).filter((name) => name.endsWith(".md")).sort().map((name) => [name, readFileSync11(join20(dir, name), "utf8")]);
+    const sources = readdirSync4(dir).filter((name) => name.endsWith(".md")).sort().map((name) => [name, readFileSync11(join21(dir, name), "utf8")]);
     const hash = createHash4("sha256").update(JSON.stringify([FORMAT, wording, sources])).digest("hex").slice(0, 12);
-    const target = join20(root, `${wording}-${hash}`);
-    if (existsSync9(target)) return target;
+    const target = join21(root, `${wording}-${hash}`);
+    if (existsSync10(target)) return target;
     const temporary = `${target}.${process.pid}.tmp`;
     mkdirSync9(temporary, { recursive: true, mode: 448 });
-    for (const [name, text9] of sources) writeFileSync7(join20(temporary, name), localizeTemplate(text9, wording));
+    for (const [name, text9] of sources) writeFileSync7(join21(temporary, name), localizeTemplate(text9, wording));
     try {
       renameSync4(temporary, target);
     } catch {
       rmSync6(temporary, { recursive: true, force: true });
     }
-    return existsSync9(target) ? target : dir;
+    return existsSync10(target) ? target : dir;
   } catch {
     return dir;
   }
@@ -39564,7 +39654,7 @@ function registerCommands(runtime, roots) {
       const chrome = findBrowser(browserHost)?.executable;
       const available = ctx.modelRegistry.getAvailable();
       const providers = [...new Set(available.map((model) => model.provider))];
-      const agentsDir = join21((0, import_pi_coding_agent5.getAgentDir)(), "agents");
+      const agentsDir = join22((0, import_pi_coding_agent5.getAgentDir)(), "agents");
       const roles = loadAgents(agentsDir);
       const ladder = runtime.options("swarm", { enabled: true, models: [] }).models;
       const missing = ladder.filter((ref) => {
@@ -39627,10 +39717,10 @@ function registerCommands(runtime, roots) {
   pi.on(
     "resources_discover",
     failOpen(
-      () => existsSync10(PROMPTS_DIR) ? {
+      () => existsSync11(PROMPTS_DIR) ? {
         promptPaths: [
           // In mu's own folder, which is the user's alone: a template is text the model follows.
-          roots ? promptsFor(PROMPTS_DIR, appLanguage()?.wording, join21(roots.agentDir, "mu", "prompts")) : PROMPTS_DIR
+          roots ? promptsFor(PROMPTS_DIR, appLanguage()?.wording, join22(roots.agentDir, "mu", "prompts")) : PROMPTS_DIR
         ]
       } : void 0
     )
@@ -39641,7 +39731,7 @@ function registerCommands(runtime, roots) {
 var import_pi_coding_agent6 = __toESM(require_pi_coding_agent(), 1);
 import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync8 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 
 // packages/kyrn-judge/src/compaction/history.ts
 function blocks(content) {
@@ -40080,11 +40170,11 @@ ${liveText}`, calls: liveCalls });
           );
         return void 0;
       }
-      const archiveDir = join22(tmpdir3(), `kyrn-${runtime.sessionId}`, "compacted");
+      const archiveDir = join23(tmpdir3(), `kyrn-${runtime.sessionId}`, "compacted");
       const pruned = apply(items, planned.plans, options, (call) => {
         try {
           mkdirSync10(archiveDir, { recursive: true });
-          const path = join22(archiveDir, `${call.id.replace(/[^\w.-]/g, "_")}.txt`);
+          const path = join23(archiveDir, `${call.id.replace(/[^\w.-]/g, "_")}.txt`);
           writeFileSync8(path, call.result, { mode: 384 });
           return path;
         } catch {
@@ -41304,9 +41394,9 @@ last update failed: ${lastFailure}` : text9, "info");
 
 // packages/kyrn-judge/src/extension/features/notices.ts
 import { readFileSync as readFileSync13 } from "node:fs";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function noticesFile(agentDir) {
-  return join23(agentDir, "mu", "notices.json");
+  return join24(agentDir, "mu", "notices.json");
 }
 function readNotices(file) {
   if (!file) return {};
@@ -42679,7 +42769,7 @@ var import_pi_coding_agent8 = __toESM(require_pi_coding_agent(), 1);
 var import_typebox7 = __toESM(require_typebox(), 1);
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { tmpdir as tmpdir6 } from "node:os";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/hive.ts
 var hivePublish = defineDecision({
@@ -42784,7 +42874,7 @@ var hiveRelate = defineDecision({
 
 // packages/kyrn-judge/src/hive/board.ts
 import { appendFileSync as appendFileSync3, closeSync as closeSync2, fstatSync, mkdirSync as mkdirSync11, openSync as openSync2, readSync as readSync2 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var BOARD = "board.jsonl";
 var DELIVERIES = "deliveries.jsonl";
 var RELATIONS = "relations.jsonl";
@@ -42829,41 +42919,41 @@ var Board = class {
     mkdirSync11(dir, { recursive: true });
   }
   post(note2) {
-    appendFileSync3(join24(this.dir, BOARD), `${JSON.stringify(note2)}
+    appendFileSync3(join25(this.dir, BOARD), `${JSON.stringify(note2)}
 `);
   }
   /** Notes appended since the last call on this instance. */
   fresh() {
-    const read2 = readFrom(join24(this.dir, BOARD), this.offset);
+    const read2 = readFrom(join25(this.dir, BOARD), this.offset);
     this.offset = read2.offset;
     return read2.rows;
   }
   all() {
-    return readFrom(join24(this.dir, BOARD), 0).rows;
+    return readFrom(join25(this.dir, BOARD), 0).rows;
   }
   delivered(delivery) {
-    appendFileSync3(join24(this.dir, DELIVERIES), `${JSON.stringify(delivery)}
+    appendFileSync3(join25(this.dir, DELIVERIES), `${JSON.stringify(delivery)}
 `);
   }
   /** Every verdict of the gates, passed or not: the answer to "why did nobody hear about this?". */
   log(entry) {
-    appendFileSync3(join24(this.dir, "gate.jsonl"), `${JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), ...entry })}
+    appendFileSync3(join25(this.dir, "gate.jsonl"), `${JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), ...entry })}
 `);
   }
   deliveries() {
-    return readFrom(join24(this.dir, DELIVERIES), 0).rows;
+    return readFrom(join25(this.dir, DELIVERIES), 0).rows;
   }
   relate(row) {
-    appendFileSync3(join24(this.dir, RELATIONS), `${JSON.stringify(row)}
+    appendFileSync3(join25(this.dir, RELATIONS), `${JSON.stringify(row)}
 `);
   }
   relations() {
-    return readFrom(join24(this.dir, RELATIONS), 0).rows;
+    return readFrom(join25(this.dir, RELATIONS), 0).rows;
   }
   relationOffset = 0;
   /** Relations appended since the last call on this instance. */
   freshRelations() {
-    const read2 = readFrom(join24(this.dir, RELATIONS), this.relationOffset);
+    const read2 = readFrom(join25(this.dir, RELATIONS), this.relationOffset);
     this.relationOffset = read2.offset;
     return read2.rows;
   }
@@ -42871,7 +42961,7 @@ var Board = class {
   gateRows = 0;
   /** How many verdicts the gates have given so far. Counted incrementally: the log only grows. */
   judged() {
-    const read2 = readFrom(join24(this.dir, "gate.jsonl"), this.gateOffset);
+    const read2 = readFrom(join25(this.dir, "gate.jsonl"), this.gateOffset);
     this.gateOffset = read2.offset;
     this.gateRows += read2.rows.length;
     return this.gateRows;
@@ -42953,10 +43043,10 @@ var import_pi_tui3 = __toESM(require_pi_tui(), 1);
 var import_typebox6 = __toESM(require_typebox(), 1);
 import { spawn as spawn6 } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync13 } from "node:fs";
 import { mkdtemp, readFile as readFile2, rm as rm4, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir as tmpdir5 } from "node:os";
-import { basename as basename6, join as join28 } from "node:path";
+import { basename as basename6, join as join29 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/swarm-routing.ts
 var SCORES = {
@@ -43021,13 +43111,13 @@ var swarmRouting = defineDecision({
 import { randomBytes } from "node:crypto";
 import { mkdirSync as mkdirSync12, readFileSync as readFileSync14, writeFileSync as writeFileSync9 } from "node:fs";
 import { rm as rm2 } from "node:fs/promises";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 
 // packages/kyrn-judge/src/swarm/worktree.ts
 import { spawn as spawn5 } from "node:child_process";
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 import { chmod, copyFile, lstat, mkdir, readdir, readFile, readlink, rm, symlink, writeFile } from "node:fs/promises";
-import { dirname as dirname5, join as join25 } from "node:path";
+import { dirname as dirname6, join as join26 } from "node:path";
 function gitArgs(args, platform = process.platform) {
   return [
     "-c",
@@ -43109,7 +43199,7 @@ async function checkRepo(run2, cwd) {
   if (where2.code !== 0) return { ok: false, problem: "not-a-repo", message: lastLine(where2.stderr) };
   if (head.code !== 0) return { ok: false, problem: "no-commit", message: "the repository has no commits yet" };
   const [root, gitDir, prefix = ""] = text5(where2).replace(/\n$/, "").split("\n");
-  const busy = BUSY.find(([name]) => existsSync11(join25(gitDir, name)));
+  const busy = BUSY.find(([name]) => existsSync12(join26(gitDir, name)));
   if (busy) return { ok: false, problem: "busy", message: `${busy[1]} is in progress in this repository` };
   return { ok: true, repo: { root, gitDir, prefix, head: text5(head).trim() } };
 }
@@ -43132,14 +43222,14 @@ async function copyUntracked(from, to, paths, maxBytes) {
   for (const path of paths) {
     if (path.endsWith("/")) continue;
     try {
-      const stat = await lstat(join25(from, path));
-      await mkdir(dirname5(join25(to, path)), { recursive: true });
-      if (stat.isSymbolicLink()) await symlink(await readlink(join25(from, path)), join25(to, path));
+      const stat = await lstat(join26(from, path));
+      await mkdir(dirname6(join26(to, path)), { recursive: true });
+      if (stat.isSymbolicLink()) await symlink(await readlink(join26(from, path)), join26(to, path));
       else if (!stat.isFile()) continue;
       else if (stat.size > maxBytes) {
         report3.skipped.push(path);
         continue;
-      } else await copyFile(join25(from, path), join25(to, path));
+      } else await copyFile(join26(from, path), join26(to, path));
       report3.untracked++;
     } catch {
       report3.skipped.push(path);
@@ -43151,7 +43241,7 @@ async function createWorktree(run2, options) {
   const { repo, dir, branch, signal } = options;
   const added = await run2(["worktree", "add", "-b", branch, dir, repo.head], { cwd: repo.root, signal });
   if (added.code !== 0) return { ok: false, message: `git worktree add failed: ${lastLine(added.stderr)}` };
-  const worktree = { repoRoot: repo.root, dir, branch, base: "", cwd: join25(dir, repo.prefix) };
+  const worktree = { repoRoot: repo.root, dir, branch, base: "", cwd: join26(dir, repo.prefix) };
   const fail = async (message) => {
     await removeWorktree(run2, worktree);
     return { ok: false, message };
@@ -43256,11 +43346,11 @@ async function removeWorktree(run2, worktree) {
   const problems = [];
   const cwd = worktree.repoRoot;
   let removed = await run2(["worktree", "remove", "--force", worktree.dir], { cwd });
-  if (removed.code !== 0 || existsSync11(worktree.dir)) {
+  if (removed.code !== 0 || existsSync12(worktree.dir)) {
     await rm(worktree.dir, { recursive: true, force: true, maxRetries: 8, retryDelay: 250 }).catch(() => void 0);
     removed = await run2(["worktree", "remove", "--force", worktree.dir], { cwd });
     if (removed.code !== 0) await run2(["worktree", "prune"], { cwd });
-    if (existsSync11(worktree.dir)) problems.push(`could not delete ${worktree.dir}`);
+    if (existsSync12(worktree.dir)) problems.push(`could not delete ${worktree.dir}`);
   }
   const listed2 = await run2(["branch", "--list", worktree.branch], { cwd });
   if (text5(listed2).trim()) {
@@ -43271,8 +43361,8 @@ async function removeWorktree(run2, worktree) {
 }
 var markerPath = (dir) => `${dir}.json`;
 async function writeMarker(marker) {
-  await mkdir(dirname5(marker.dir), { recursive: true });
-  await chmod(dirname5(marker.dir), 448).catch(() => void 0);
+  await mkdir(dirname6(marker.dir), { recursive: true });
+  await chmod(dirname6(marker.dir), 448).catch(() => void 0);
   await writeFile(markerPath(marker.dir), JSON.stringify(marker), { mode: 384 });
 }
 var RUN_DIR = /^kyrn-swarm-[\w-]+$/;
@@ -43292,9 +43382,9 @@ async function sweepStaleWorktrees(run2, options) {
   const swept = [];
   const runs = await readdir(options.area).catch(() => []);
   for (const name of runs.filter((entry) => RUN_DIR.test(entry))) {
-    const entries = await readdir(join25(options.area, name)).catch(() => []);
+    const entries = await readdir(join26(options.area, name)).catch(() => []);
     for (const file of entries.filter((entry) => MARKER.test(entry))) {
-      const path = join25(options.area, name, file);
+      const path = join26(options.area, name, file);
       let marker;
       try {
         marker = JSON.parse(await readFile(path, "utf8"));
@@ -43304,9 +43394,9 @@ async function sweepStaleWorktrees(run2, options) {
       if (markerPath(marker.dir) !== path || typeof marker.repoRoot !== "string") continue;
       const stale = marker.released || !alive(marker.pid) || now - marker.createdAt > maxAge;
       if (!stale) continue;
-      if (existsSync11(marker.repoRoot)) await removeWorktree(run2, marker);
+      if (existsSync12(marker.repoRoot)) await removeWorktree(run2, marker);
       else await rm(marker.dir, { recursive: true, force: true }).catch(() => void 0);
-      if (!existsSync11(marker.dir)) {
+      if (!existsSync12(marker.dir)) {
         await rm(path, { force: true }).catch(() => void 0);
         swept.push(marker);
       }
@@ -43327,7 +43417,7 @@ var PatchStore = class {
     const record4 = {
       ...details,
       id,
-      path: join26(dir, `${id}.patch`),
+      path: join27(dir, `${id}.patch`),
       createdAt: Date.now(),
       status: "ready"
     };
@@ -43423,7 +43513,7 @@ async function applyPatch(run2, options) {
   const touched = [...new Set(options.files.flatMap((file) => file.from ? [file.from, file.path] : [file.path]))];
   const scratch = [];
   const attempt = async (cached) => {
-    const index = join26(options.scratchDir, `index-${randomBytes(4).toString("hex")}`);
+    const index = join27(options.scratchDir, `index-${randomBytes(4).toString("hex")}`);
     scratch.push(index, `${index}.lock`);
     const env = { GIT_INDEX_FILE: index };
     const input = Buffer.from(touched.map((path) => `${path}\0`).join(""), "utf8");
@@ -43617,7 +43707,7 @@ function swarmText(snapshot2, options) {
 var import_typebox5 = __toESM(require_typebox(), 1);
 import { rm as rm3 } from "node:fs/promises";
 import { tmpdir as tmpdir4 } from "node:os";
-import { basename as basename5, dirname as dirname6, join as join27 } from "node:path";
+import { basename as basename5, dirname as dirname7, join as join28 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/swarm-patch.ts
 var MAX_JUDGED_FILES = 12;
@@ -43724,7 +43814,7 @@ var Isolation = class {
       if (index === void 0) return runner(task, assignment, signal, env, observer);
       const outcome = { isolated: false, notes: [] };
       outcomes.set(task, outcome);
-      const dir = join27(context.runDir, `w${index}`);
+      const dir = join28(context.runDir, `w${index}`);
       const marker = {
         repoRoot: context.repo.root,
         dir,
@@ -43777,7 +43867,7 @@ You work in an isolated copy of the repository (${worktree.dir}). Use paths rela
         }));
         if (!collected.ok) outcome.notes.push(`Its changes could not be collected: ${collected.message}`);
         else if (collected.summary.files.length > 0) {
-          outcome.patch = this.store.save(join27(context.runDir, "patches"), collected.patch, {
+          outcome.patch = this.store.save(join28(context.runDir, "patches"), collected.patch, {
             task: task.title,
             role: assignment.agent?.name,
             repoRoot: context.repo.root,
@@ -43914,7 +44004,7 @@ ${statLines(record4.summary, 200).join("\n")}`);
           patchPath: record4.path,
           files: record4.summary.files,
           onConflict: params.conflicts ?? "abort",
-          scratchDir: join27(dirname6(record4.path), "scratch"),
+          scratchDir: join28(dirname7(record4.path), "scratch"),
           signal
         });
         const details = { id: record4.id, result };
@@ -44030,7 +44120,7 @@ async function routeTasks(runtime, inputs, signal) {
 }
 function piInvocation(args) {
   const script = process.argv[1];
-  if (script && existsSync12(script)) return { command: process.execPath, args: [...process.execArgv, script, ...args] };
+  if (script && existsSync13(script)) return { command: process.execPath, args: [...process.execArgv, script, ...args] };
   const generic = /^(node|bun)(\.exe)?$/.test(basename6(process.execPath).toLowerCase());
   return generic ? { command: "pi", args } : { command: process.execPath, args };
 }
@@ -44088,7 +44178,7 @@ function settledEnv(runtime) {
   return env;
 }
 function frameOutPath(dir, index) {
-  return join28(dir, "control", `frame-${index}.json`);
+  return join29(dir, "control", `frame-${index}.json`);
 }
 async function readFrameOut(path) {
   try {
@@ -44107,8 +44197,8 @@ var spawnRunner = async (task, assignment, signal, env, observer) => {
   let promptDir;
   let promptPath;
   if (assignment.agent?.systemPrompt) {
-    promptDir = await mkdtemp(join28(tmpdir5(), "kyrn-agent-"));
-    promptPath = join28(promptDir, `${assignment.agent.name}.md`);
+    promptDir = await mkdtemp(join29(tmpdir5(), "kyrn-agent-"));
+    promptPath = join29(promptDir, `${assignment.agent.name}.md`);
     await writeFile2(promptPath, assignment.agent.systemPrompt, { encoding: "utf8", mode: 384 });
   }
   try {
@@ -44319,7 +44409,7 @@ function registerSwarm(runtime, runner = spawnRunner) {
   const { pi } = runtime;
   const isolation = new Isolation(runtime, options);
   isolation.registerTool();
-  const agents = () => loadAgents(options.agentsDir || join28((0, import_pi_coding_agent7.getAgentDir)(), "agents"));
+  const agents = () => loadAgents(options.agentsDir || join29((0, import_pi_coding_agent7.getAgentDir)(), "agents"));
   const usable = () => {
     const known = new Set(pi.getAllTools().map((tool) => tool.name));
     return agents().filter((agent) => !agent.tools || agent.tools.some((tool) => known.has(tool)));
@@ -44422,7 +44512,7 @@ function registerSwarm(runtime, runner = spawnRunner) {
           routedBy: named ? "caller" : judged ? "judge" : "default"
         };
       });
-      const runDir = join28(tmpdir5(), `kyrn-swarm-${randomUUID5().slice(0, 8)}`);
+      const runDir = join29(tmpdir5(), `kyrn-swarm-${randomUUID5().slice(0, 8)}`);
       const isolated = /* @__PURE__ */ new Map();
       tasks.forEach((task, index) => {
         const asked = params.tasks[index].isolation ?? (params.chain ? "none" : void 0);
@@ -44512,7 +44602,7 @@ ${checklist}` : ""}${isolation.describe(outcomesOfIsolation.get(task))}`;
       en: "List the subagent roles the delegate tool can use, and where to add your own"
     }),
     handler: async (_args, ctx) => {
-      const dir = options.agentsDir || join28((0, import_pi_coding_agent7.getAgentDir)(), "agents");
+      const dir = options.agentsDir || join29((0, import_pi_coding_agent7.getAgentDir)(), "agents");
       const ladder = options.models.length > 0 ? options.models.join(" < ") : "the session's current model";
       ctx.ui.notify(
         [
@@ -44958,9 +45048,9 @@ function registerHive(runtime, runner = spawnRunner) {
       const names = uniqueNames(asked.map((bee) => bee.name));
       const bees = asked.map((bee, at) => ({ ...bee, name: names[at] }));
       announceRouting(onUpdate, bees.length);
-      const dir = join29(tmpdir6(), `kyrn-hive-${randomUUID6().slice(0, 8)}`);
+      const dir = join30(tmpdir6(), `kyrn-hive-${randomUUID6().slice(0, 8)}`);
       const board = new Board(dir);
-      const roles = new Map(loadAgents(join29((0, import_pi_coding_agent8.getAgentDir)(), "agents")).map((agent) => [agent.name, agent]));
+      const roles = new Map(loadAgents(join30((0, import_pi_coding_agent8.getAgentDir)(), "agents")).map((agent) => [agent.name, agent]));
       const swarm = runtime.options("swarm", { enabled: true, models: [] });
       const ladder = options.models.length > 0 ? options.models : swarm.models;
       const current = ctx.model ? `${ctx.model.provider}/${ctx.model.id}` : void 0;
@@ -45158,7 +45248,7 @@ ${reports[at]}`;
         }),
         `## Hive board: ${counts}
 ${sections.join("\n")}
-(every verdict of the gates: ${join29(dir, "gate.jsonl")})`
+(every verdict of the gates: ${join30(dir, "gate.jsonl")})`
       ].join("\n\n");
       return {
         content: [{ type: "text", text: text9 }],
@@ -45306,7 +45396,7 @@ var import_pi_tui4 = __toESM(require_pi_tui(), 1);
 // packages/kyrn-judge/src/import/index.ts
 import { mkdirSync as mkdirSync13, readdirSync as readdirSync6, readFileSync as readFileSync16, realpathSync as realpathSync3, renameSync as renameSync7, statSync as statSync11, writeFileSync as writeFileSync11 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 
 // packages/kyrn-judge/src/import/claude-code.ts
 import { statSync as statSync8 } from "node:fs";
@@ -45430,7 +45520,7 @@ function list2(value) {
 import { createHash as createHash5, randomBytes as randomBytes2, randomUUID as randomUUID7 } from "node:crypto";
 import { closeSync as closeSync4, openSync as openSync4, readdirSync as readdirSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, writeSync } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { isAbsolute as isAbsolute4, join as join30, resolve as resolve5 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join31, resolve as resolve5 } from "node:path";
 var TOOL_NAMES = {
   "claude-code": "Claude Code",
   codex: "Codex",
@@ -45478,7 +45568,7 @@ function uuidv7(ms = Date.now()) {
 }
 function expand(path) {
   if (path === "~") return homedir5();
-  if (path.startsWith("~/")) return join30(homedir5(), path.slice(2));
+  if (path.startsWith("~/")) return join31(homedir5(), path.slice(2));
   return path;
 }
 function absolute(path, base = process.cwd()) {
@@ -45487,13 +45577,13 @@ function absolute(path, base = process.cwd()) {
 }
 function defaultSessionDir(cwd, agentDir) {
   const safe = `--${absolute(cwd).replace(/^[/\\]/, "").replace(/[/\\:]/g, "-")}--`;
-  return join30(absolute(agentDir), "sessions", safe);
+  return join31(absolute(agentDir), "sessions", safe);
 }
 function sessionDirFor(cwd, store) {
   return store.sessionDir ? absolute(store.sessionDir) : defaultSessionDir(cwd, store.agentDir);
 }
 function sessionsRoot(store) {
-  return store.sessionDir ? absolute(store.sessionDir) : join30(absolute(store.agentDir), "sessions");
+  return store.sessionDir ? absolute(store.sessionDir) : join31(absolute(store.agentDir), "sessions");
 }
 function sessionFileName(started, id) {
   return `${started.replace(/[:.]/g, "-")}_${id}.jsonl`;
@@ -45533,7 +45623,7 @@ function findImports(store) {
       return;
     }
     for (const name of names) {
-      const path = join30(dir, name);
+      const path = join31(dir, name);
       if (name.endsWith(".jsonl")) files.push(path);
       else if (depth > 0) {
         try {
@@ -46800,9 +46890,9 @@ import { execFileSync } from "node:child_process";
 import { statSync as statSync10 } from "node:fs";
 import { createRequire } from "node:module";
 import { homedir as homedir6 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 function zcodeDatabase(home = homedir6()) {
-  return join31(home, ".zcode", "cli", "db", "db.sqlite");
+  return join32(home, ".zcode", "cli", "db", "db.sqlite");
 }
 function zcodeSource(database, id) {
   return `${database}#${id}`;
@@ -47301,10 +47391,10 @@ function describeCodex(path) {
   return { id: id ?? fromName ?? "", cwd, title: title ?? command ?? "", started, subAgent };
 }
 function claudeProjectsDir(env = process.env, home = homedir7()) {
-  return join32(env.CLAUDE_CONFIG_DIR ? absolute(env.CLAUDE_CONFIG_DIR) : join32(home, ".claude"), "projects");
+  return join33(env.CLAUDE_CONFIG_DIR ? absolute(env.CLAUDE_CONFIG_DIR) : join33(home, ".claude"), "projects");
 }
 function codexSessionsDir(env = process.env, home = homedir7()) {
-  return join32(env.CODEX_HOME ? absolute(env.CODEX_HOME) : join32(home, ".codex"), "sessions");
+  return join33(env.CODEX_HOME ? absolute(env.CODEX_HOME) : join33(home, ".codex"), "sessions");
 }
 function sameFolder(a, b) {
   const canonical2 = (dir) => {
@@ -47326,7 +47416,7 @@ function jsonlFiles(dir, depth) {
   }
   const files = [];
   for (const name of names.sort()) {
-    const path = join32(dir, name);
+    const path = join33(dir, name);
     if (name.endsWith(".jsonl")) files.push(path);
     else if (depth > 0 && !name.startsWith(".")) {
       try {
@@ -47337,7 +47427,7 @@ function jsonlFiles(dir, depth) {
   }
   return files;
 }
-var checksFile = (store) => join32(absolute(store.agentDir), "import-checks.json");
+var checksFile = (store) => join33(absolute(store.agentDir), "import-checks.json");
 function readChecks(store) {
   try {
     const checks = record(JSON.parse(readFileSync16(checksFile(store), "utf8"))) ?? {};
@@ -47373,7 +47463,7 @@ function listConversations(options = {}) {
   } catch {
   }
   for (const project of projects) {
-    for (const path of jsonlFiles(join32(claudeProjects, project), 0)) candidates.push({ tool: "claude-code", path });
+    for (const path of jsonlFiles(join33(claudeProjects, project), 0)) candidates.push({ tool: "claude-code", path });
   }
   for (const path of jsonlFiles(codexSessions, 4)) candidates.push({ tool: "codex", path });
   const imports = options.store ? findImports(options.store) : [];
@@ -47525,7 +47615,7 @@ async function importOne(path, options, imports, checks) {
     if (earlier) converted = await read(tool, source, readOptions());
     const dir = sessionDirFor(converted.cwd, options);
     mkdirSync13(dir, { recursive: true });
-    const sessionFile = join32(dir, sessionFileName(converted.started, converted.sessionId));
+    const sessionFile = join33(dir, sessionFileName(converted.started, converted.sessionId));
     writeSessionFile(sessionFile, converted.entries);
     imports.push({
       sessionFile,
@@ -47729,11 +47819,11 @@ ${theme.fg("dim", detail)}`, 0, 0));
 }
 
 // packages/kyrn-judge/src/extension/features/inherit.ts
-import { isAbsolute as isAbsolute5, join as join38, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join39, resolve as resolve8 } from "node:path";
 
 // packages/kyrn-judge/src/inherit/files.ts
-import { existsSync as existsSync13, readdirSync as readdirSync7, readFileSync as readFileSync17, realpathSync as realpathSync4, statSync as statSync12 } from "node:fs";
-import { dirname as dirname7, join as join33, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync14, readdirSync as readdirSync7, readFileSync as readFileSync17, realpathSync as realpathSync4, statSync as statSync12 } from "node:fs";
+import { dirname as dirname8, join as join34, resolve as resolve6 } from "node:path";
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 function projectChain(projectDir, home) {
   const start = resolve6(projectDir);
@@ -47743,8 +47833,8 @@ function projectChain(projectDir, home) {
   for (let depth = 0; depth < 32; depth++) {
     if (current === homeDir) break;
     chain.push(current);
-    if (existsSync13(join33(current, ".git"))) return chain;
-    const parent = dirname7(current);
+    if (existsSync14(join34(current, ".git"))) return chain;
+    const parent = dirname8(current);
     if (parent === current) break;
     current = parent;
   }
@@ -47779,7 +47869,7 @@ function listFiles(dir, extensions, depth = 4) {
   }
   for (const name of names) {
     if (name.startsWith(".") || name === "node_modules") continue;
-    const path = join33(dir, name);
+    const path = join34(dir, name);
     let stats;
     try {
       stats = statSync12(path);
@@ -47803,7 +47893,7 @@ function canonical(path) {
 }
 
 // packages/kyrn-judge/src/inherit/rules.ts
-import { basename as basename9, join as join34, relative as relative2 } from "node:path";
+import { basename as basename9, join as join35, relative as relative2 } from "node:path";
 
 // packages/kyrn-judge/src/inherit/frontmatter.ts
 function unquote(value) {
@@ -47963,15 +48053,15 @@ function discoverRules(roots, switches, problems) {
   const files = [];
   const projectDirs = roots.projectTrusted ? projectChain(roots.projectDir, roots.home) : [];
   if (switches.claude) {
-    const userDir = join34(roots.home, ".claude");
+    const userDir = join35(roots.home, ".claude");
     files.push({
-      path: join34(userDir, "CLAUDE.md"),
+      path: join35(userDir, "CLAUDE.md"),
       tool: "claude",
       scope: "user",
       baseDir: roots.projectDir,
       alwaysByDefault: true
     });
-    for (const path of listFiles(join34(userDir, "rules"), [".md"])) {
+    for (const path of listFiles(join35(userDir, "rules"), [".md"])) {
       files.push({
         path,
         tool: "claude",
@@ -47983,10 +48073,10 @@ function discoverRules(roots, switches, problems) {
     }
   }
   if (switches.codex) {
-    const override = join34(roots.home, ".codex", "AGENTS.override.md");
+    const override = join35(roots.home, ".codex", "AGENTS.override.md");
     const hasOverride = readText(override, []) !== void 0;
     files.push({
-      path: hasOverride ? override : join34(roots.home, ".codex", "AGENTS.md"),
+      path: hasOverride ? override : join35(roots.home, ".codex", "AGENTS.md"),
       tool: "codex",
       scope: "user",
       baseDir: roots.projectDir,
@@ -47996,13 +48086,13 @@ function discoverRules(roots, switches, problems) {
   for (const dir of [...projectDirs].reverse()) {
     if (switches.claude) {
       files.push({
-        path: join34(dir, ".claude", "CLAUDE.md"),
+        path: join35(dir, ".claude", "CLAUDE.md"),
         tool: "claude",
         scope: "project",
         baseDir: dir,
         alwaysByDefault: true
       });
-      for (const path of listFiles(join34(dir, ".claude", "rules"), [".md"])) {
+      for (const path of listFiles(join35(dir, ".claude", "rules"), [".md"])) {
         files.push({
           path,
           tool: "claude",
@@ -48015,13 +48105,13 @@ function discoverRules(roots, switches, problems) {
     }
     if (switches.cursor) {
       files.push({
-        path: join34(dir, ".cursorrules"),
+        path: join35(dir, ".cursorrules"),
         tool: "cursor",
         scope: "project",
         baseDir: dir,
         alwaysByDefault: true
       });
-      for (const path of listFiles(join34(dir, ".cursor", "rules"), [".mdc", ".md"])) {
+      for (const path of listFiles(join35(dir, ".cursor", "rules"), [".mdc", ".md"])) {
         files.push({
           path,
           tool: "cursor",
@@ -48058,10 +48148,10 @@ function rulesForFile(rules, filePath) {
 
 // packages/kyrn-judge/src/inherit/scan.ts
 import { mkdirSync as mkdirSync14, readFileSync as readFileSync18, writeFileSync as writeFileSync12 } from "node:fs";
-import { dirname as dirname8, join as join37 } from "node:path";
+import { dirname as dirname9, join as join38 } from "node:path";
 
 // packages/kyrn-judge/src/inherit/mcp-config.ts
-import { join as join35, resolve as resolve7 } from "node:path";
+import { join as join36, resolve as resolve7 } from "node:path";
 
 // packages/kyrn-judge/src/inherit/json-members.ts
 var QUOTE = 34;
@@ -48503,7 +48593,7 @@ function discoverMcpServers(options, problems) {
   const inherit = switches.mcp;
   let disabledInClaude = /* @__PURE__ */ new Set();
   if (inherit && switches.claude) {
-    const path = join35(roots.home, ".claude.json");
+    const path = join36(roots.home, ".claude.json");
     const dirs = [resolve7(roots.projectDir), ...chain.slice(1)];
     const wanted = new Set(dirs.map((dir) => pathKey(dir, platform)));
     const config = parseJson(path, problems, {
@@ -48528,11 +48618,11 @@ function discoverMcpServers(options, problems) {
     }
   }
   if (inherit && switches.cursor) {
-    const path = join35(roots.home, ".cursor", "mcp.json");
+    const path = join36(roots.home, ".cursor", "mcp.json");
     add(parseJson(path, problems, { mcpServers: true })?.mcpServers, { source: path, tool: "cursor", scope: "user" });
   }
   if (inherit && switches.codex) {
-    const path = join35(roots.home, ".codex", "config.toml");
+    const path = join36(roots.home, ".codex", "config.toml");
     const text9 = readText(path, problems);
     if (text9 !== void 0) {
       try {
@@ -48544,11 +48634,11 @@ function discoverMcpServers(options, problems) {
     }
   }
   if (inherit) {
-    const userFiles = /* @__PURE__ */ new Set([resolve7(join35(roots.home, ".cursor", "mcp.json"))]);
+    const userFiles = /* @__PURE__ */ new Set([resolve7(join36(roots.home, ".cursor", "mcp.json"))]);
     for (const dir of chain) {
       const files = [
-        { path: join35(dir, ".mcp.json"), tool: "claude", on: switches.claude },
-        { path: join35(dir, ".cursor", "mcp.json"), tool: "cursor", on: switches.cursor }
+        { path: join36(dir, ".mcp.json"), tool: "claude", on: switches.claude },
+        { path: join36(dir, ".cursor", "mcp.json"), tool: "cursor", on: switches.cursor }
       ];
       for (const file of files) {
         if (!file.on || userFiles.has(resolve7(file.path))) continue;
@@ -48595,9 +48685,9 @@ function expandPlaceholders(value, context) {
 // packages/kyrn-judge/src/inherit/skills.ts
 var import_pi_coding_agent10 = __toESM(require_pi_coding_agent(), 1);
 import { readdirSync as readdirSync8, statSync as statSync13 } from "node:fs";
-import { basename as basename10, join as join36 } from "node:path";
+import { basename as basename10, join as join37 } from "node:path";
 function readSkill(dir, problems) {
-  const file = join36(dir, "SKILL.md");
+  const file = join37(dir, "SKILL.md");
   const text9 = readText(file, problems, 512 * 1024);
   if (text9 === void 0) return void 0;
   let frontmatter;
@@ -48621,7 +48711,7 @@ function skillsBelow(root, problems, depth = 3) {
   const skills = [];
   for (const name of names) {
     if (name.startsWith(".") || name === "node_modules") continue;
-    const dir = join36(root, name);
+    const dir = join37(root, name);
     try {
       if (!statSync13(dir).isDirectory()) continue;
     } catch {
@@ -48638,11 +48728,11 @@ function discoverSkills(roots, switches, problems, piSkillDirs = []) {
   const sources = [];
   if (switches.claude && roots.projectTrusted) {
     for (const dir of projectChain(roots.projectDir, roots.home)) {
-      sources.push({ dir: join36(dir, ".claude", "skills"), tool: "claude", scope: "project" });
+      sources.push({ dir: join37(dir, ".claude", "skills"), tool: "claude", scope: "project" });
     }
   }
-  if (switches.claude) sources.push({ dir: join36(roots.home, ".claude", "skills"), tool: "claude", scope: "user" });
-  if (switches.codex) sources.push({ dir: join36(roots.home, ".codex", "skills"), tool: "codex", scope: "user" });
+  if (switches.claude) sources.push({ dir: join37(roots.home, ".claude", "skills"), tool: "claude", scope: "user" });
+  if (switches.codex) sources.push({ dir: join37(roots.home, ".codex", "skills"), tool: "codex", scope: "user" });
   const names = /* @__PURE__ */ new Set();
   const files = /* @__PURE__ */ new Set();
   const quiet = [];
@@ -48731,7 +48821,7 @@ function inheritanceSummary(scan2) {
   return `Inherited ${list4(parts)} from ${list4(from)}.`;
 }
 function inheritStatePath(agentDir) {
-  return join37(agentDir, "mu", "inherit.json");
+  return join38(agentDir, "mu", "inherit.json");
 }
 function readInheritState(agentDir) {
   try {
@@ -48746,7 +48836,7 @@ function readInheritState(agentDir) {
 }
 function writeInheritState(agentDir, state) {
   const path = inheritStatePath(agentDir);
-  mkdirSync14(dirname8(path), { recursive: true });
+  mkdirSync14(dirname9(path), { recursive: true });
   writeFileSync12(path, `${JSON.stringify(state, null, "	")}
 `);
 }
@@ -48791,9 +48881,9 @@ function inheritedFor(runtime, roots, ctx, own) {
       mcp: !off && options.mcp
     },
     own,
-    ownSource: join38(roots.agentDir, "mu.json"),
+    ownSource: join39(roots.agentDir, "mu.json"),
     // What pi loads by itself, so that no skill is offered twice.
-    piSkillDirs: [join38(roots.agentDir, "skills"), join38(roots.home, ".agents", "skills")],
+    piSkillDirs: [join39(roots.agentDir, "skills"), join39(roots.home, ".agents", "skills")],
     env: process.env
   });
 }
@@ -49001,12 +49091,12 @@ function looksPoisoned(text9) {
 var import_pi_coding_agent11 = __toESM(require_pi_coding_agent(), 1);
 import { createHash as createHash6 } from "node:crypto";
 import { mkdirSync as mkdirSync15, readFileSync as readFileSync19, renameSync as renameSync8, writeFileSync as writeFileSync13 } from "node:fs";
-import { dirname as dirname9, join as join39 } from "node:path";
+import { dirname as dirname10, join as join40 } from "node:path";
 var STORE_LIMIT = 2e3;
 var VerdictStore = class {
   file;
   constructor(dir) {
-    this.file = join39(dir, "tool-descriptions.json");
+    this.file = join40(dir, "tool-descriptions.json");
   }
   /** By key: the verdict, and when it was kept. */
   read() {
@@ -49036,7 +49126,7 @@ var VerdictStore = class {
     const newest = [...all].sort(([, a], [, b]) => b.at - a.at).slice(0, STORE_LIMIT);
     const flat4 = Object.fromEntries(newest.map(([key, entry]) => [key, { ...entry.verdict, at: entry.at }]));
     try {
-      mkdirSync15(dirname9(this.file), { recursive: true });
+      mkdirSync15(dirname10(this.file), { recursive: true });
       const temp = `${this.file}.${process.pid}.tmp`;
       writeFileSync13(temp, `${JSON.stringify({ version: 1, verdicts: flat4 })}
 `, { mode: 384 });
@@ -50812,7 +50902,7 @@ function registerLayaNotice(runtime, skipped, roots, muHome2) {
 var import_pi_coding_agent12 = __toESM(require_pi_coding_agent(), 1);
 import { readFileSync as readFileSync20, statSync as statSync15 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join40, relative as relative4, resolve as resolve9 } from "node:path";
+import { join as join41, relative as relative4, resolve as resolve9 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/diagnostics-delivery.ts
 var diagnosticsDelivery = defineDecision({
@@ -50996,7 +51086,7 @@ function formatReport(items, options) {
 }
 
 // packages/kyrn-judge/src/lsp/manager.ts
-import { accessSync as accessSync3, constants as constants3, existsSync as existsSync14, statSync as statSync14 } from "node:fs";
+import { accessSync as accessSync3, constants as constants3, existsSync as existsSync15, statSync as statSync14 } from "node:fs";
 
 // packages/kyrn-judge/src/lsp/client.ts
 import { spawn as spawn7 } from "node:child_process";
@@ -51971,7 +52061,7 @@ var LspManager = class {
   }
   instanceFor(server, file, cwd) {
     if (!server.executable) return void 0;
-    const root = findRoot(file, server.spec.rootMarkers, cwd, existsSync14, this.platform);
+    const root = findRoot(file, server.spec.rootMarkers, cwd, existsSync15, this.platform);
     const key = `${server.spec.id}
 ${root}`;
     let instance = this.instances.get(key);
@@ -52176,7 +52266,7 @@ function registerLsp(runtime) {
     if (table && table.cwd === ctx.cwd && !refresh2) return table;
     let project;
     try {
-      const file = join40(ctx.cwd, import_pi_coding_agent12.CONFIG_DIR_NAME, PROJECT_SERVERS_FILE);
+      const file = join41(ctx.cwd, import_pi_coding_agent12.CONFIG_DIR_NAME, PROJECT_SERVERS_FILE);
       project = JSON.parse(readFileSync20(file, "utf8")).servers;
     } catch {
       project = void 0;
@@ -52281,7 +52371,7 @@ function registerLsp(runtime) {
       const named = raw.startsWith("@") ? raw.slice(1) : raw;
       const file = resolve9(
         ctx.cwd,
-        named === "~" || named.startsWith("~/") ? join40(homedir8(), named.slice(1)) : named
+        named === "~" || named.startsWith("~/") ? join41(homedir8(), named.slice(1)) : named
       );
       const { servers: specs, trusted } = servers(ctx);
       const serving = manager.serving(file, specs, trusted);
@@ -52434,7 +52524,7 @@ ${report3.text}`,
       });
       if (known.ignoredProjectFile) {
         lines2.push(
-          `${join40(import_pi_coding_agent12.CONFIG_DIR_NAME, PROJECT_SERVERS_FILE)} configures servers for this project. It's ignored until you trust the project (/trust).`
+          `${join41(import_pi_coding_agent12.CONFIG_DIR_NAME, PROJECT_SERVERS_FILE)} configures servers for this project. It's ignored until you trust the project (/trust).`
         );
       }
       for (const problem of known.problems) lines2.push(`problem: ${problem}`);
@@ -52450,7 +52540,7 @@ ${report3.text}`,
 // packages/kyrn-judge/src/extension/features/mcp.ts
 var import_pi_coding_agent13 = __toESM(require_pi_coding_agent(), 1);
 import { homedir as homedir9 } from "node:os";
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 
 // packages/kyrn-judge/src/mcp/environment.ts
 var INHERITED2 = [
@@ -52525,7 +52615,7 @@ function capabilityId(serverName) {
 // packages/kyrn-judge/src/mcp/store.ts
 import { createHash as createHash7 } from "node:crypto";
 import { mkdirSync as mkdirSync16, readFileSync as readFileSync21, renameSync as renameSync9, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join41, resolve as resolve10 } from "node:path";
+import { join as join42, resolve as resolve10 } from "node:path";
 var DESCRIPTION_LENGTH2 = 200;
 function sorted(map) {
   return Object.entries(map).sort(([left], [right]) => left.localeCompare(right));
@@ -52570,8 +52660,8 @@ var McpStore = class {
   cache;
   approvals;
   constructor(dir) {
-    this.cachePath = dir ? join41(dir, "mcp-cache.json") : void 0;
-    this.approvalPath = dir ? join41(dir, "mcp-approvals.json") : void 0;
+    this.cachePath = dir ? join42(dir, "mcp-cache.json") : void 0;
+    this.approvalPath = dir ? join42(dir, "mcp-approvals.json") : void 0;
     this.cache = readJson(this.cachePath, { version: 1, servers: {} });
     this.approvals = readJson(this.approvalPath, { version: 1, projects: {} });
   }
@@ -52651,7 +52741,7 @@ function registerMcp(runtime, roots) {
   if (!options.enabled) return;
   const { pi, catalog } = runtime;
   const entries = /* @__PURE__ */ new Map();
-  const store = new McpStore(roots ? join42(roots.agentDir, "mu") : void 0);
+  const store = new McpStore(roots ? join43(roots.agentDir, "mu") : void 0);
   let scan2;
   const capabilityOf2 = (entry) => ({
     id: entry.id,
@@ -52923,7 +53013,7 @@ ${block.text}` };
 // packages/kyrn-judge/src/extension/features/memory.ts
 var import_typebox10 = __toESM(require_typebox(), 1);
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { basename as basename12, join as join43 } from "node:path";
+import { basename as basename12, join as join44 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/memory.ts
 function describeLesson(lesson) {
@@ -53222,7 +53312,7 @@ function turnDigest(turn) {
 
 // packages/kyrn-judge/src/memory/store.ts
 import { appendFileSync as appendFileSync4, closeSync as closeSync5, fstatSync as fstatSync3, mkdirSync as mkdirSync17, openSync as openSync5, readFileSync as readFileSync22, readSync as readSync4 } from "node:fs";
-import { dirname as dirname10 } from "node:path";
+import { dirname as dirname11 } from "node:path";
 var KINDS4 = ["correction", "preference", "pitfall", "workaround", "fact"];
 var ORIGINS = ["user", "outcome", "model", "subagent", "command"];
 var STATUSES = ["active", "retired", "superseded"];
@@ -53326,7 +53416,7 @@ function endsOpen(path) {
   }
 }
 function writeLesson(path, line2) {
-  mkdirSync17(dirname10(path), { recursive: true });
+  mkdirSync17(dirname11(path), { recursive: true });
   appendFileSync4(path, `${endsOpen(path) ? "\n" : ""}${JSON.stringify(line2)}
 `);
 }
@@ -53521,7 +53611,7 @@ function registerMemory(runtime, roots) {
   if (!options.enabled || process.env.KYRN_SWARM_DEPTH) return;
   const { pi } = runtime;
   const learns = (ctx) => options.unattendedWrites || !isUnattended(ctx);
-  const store = new LessonStore(options.path || (roots ? join43(roots.agentDir, "mu", "lessons.jsonl") : void 0));
+  const store = new LessonStore(options.path || (roots ? join44(roots.agentDir, "mu", "lessons.jsonl") : void 0));
   const now = () => (/* @__PURE__ */ new Date()).toISOString();
   const placeOf = (ctx) => ({
     cwd: ctx.cwd,
@@ -55065,7 +55155,7 @@ ${outcome.diff}`),
 
 // packages/kyrn-judge/src/packs/commit.ts
 import { readFile as readFile4, writeFile as writeFile4 } from "node:fs/promises";
-import { join as join44 } from "node:path";
+import { join as join45 } from "node:path";
 
 // packages/kyrn-judge/src/packs/git.ts
 var INHERITED3 = ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE", "GIT_COMMON_DIR", "GIT_PREFIX"];
@@ -55551,7 +55641,7 @@ async function applyPlan(git2, repo, change, plan2, signal) {
       undone: []
     };
   }
-  const indexPath = join44(repo.gitDir, "index");
+  const indexPath = join45(repo.gitDir, "index");
   const savedIndex = await readFile4(indexPath).catch(() => void 0);
   const made = [];
   const applied = /* @__PURE__ */ new Map();
@@ -55734,12 +55824,12 @@ function report2(outcome) {
 var import_typebox12 = __toESM(require_typebox(), 1);
 import { realpathSync as realpathSync5 } from "node:fs";
 import { readFile as readFile5, writeFile as writeFile6 } from "node:fs/promises";
-import { basename as basename13, dirname as dirname11, isAbsolute as isAbsolute6, join as join46, relative as relative5 } from "node:path";
+import { basename as basename13, dirname as dirname12, isAbsolute as isAbsolute6, join as join47, relative as relative5 } from "node:path";
 
 // packages/kyrn-judge/src/packs/conflicts.ts
 import { mkdtemp as mkdtemp2, rm as rm5, writeFile as writeFile5 } from "node:fs/promises";
 import { tmpdir as tmpdir7 } from "node:os";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 var START = /^<{7}(?: (.*))?$/;
 var BASE = /^\|{7}(?: .*)?$/;
 var MIDDLE = /^={7}$/;
@@ -55849,9 +55939,9 @@ async function diff3Of(git2, cwd, path) {
     if (shown2.code !== 0) return void 0;
     sides.push(shown2.stdout);
   }
-  const dir = await mkdtemp2(join45(tmpdir7(), "mu-conflict-"));
+  const dir = await mkdtemp2(join46(tmpdir7(), "mu-conflict-"));
   try {
-    const files = ["ours", "base", "theirs"].map((name) => join45(dir, name));
+    const files = ["ours", "base", "theirs"].map((name) => join46(dir, name));
     await Promise.all(files.map((file, index) => writeFile5(file, sides[index])));
     const merged = await git2(["merge-file", "-p", "--diff3", "-L", "ours", "-L", "base", "-L", "theirs", ...files], {
       cwd
@@ -55871,8 +55961,8 @@ function real(path) {
   try {
     return realpathSync5.native(path);
   } catch {
-    const parent = dirname11(path);
-    return parent === path ? path : join46(real(parent), basename13(path));
+    const parent = dirname12(path);
+    return parent === path ? path : join47(real(parent), basename13(path));
   }
 }
 var NEXT = "Committing, and `git merge --continue` / `git rebase --continue`, are the user's to run: tell them, do not run them.";
@@ -55889,7 +55979,7 @@ function conflictsPack(shared, options) {
     return { repo, files };
   };
   const inRepo = (root, cwd, path) => {
-    const inside2 = relative5(real(root), real(isAbsolute6(path) ? path : join46(cwd, path))).replaceAll("\\", "/");
+    const inside2 = relative5(real(root), real(isAbsolute6(path) ? path : join47(cwd, path))).replaceAll("\\", "/");
     if (inside2.startsWith("../") || inside2 === "..") throw new Error(`${path} is outside the repository`);
     return inside2;
   };
@@ -55926,7 +56016,7 @@ function conflictsPack(shared, options) {
           for (const file of files) {
             let detail = file.kind;
             if (file.kind === "both modified" || file.kind === "both added") {
-              const content = await readFile5(join46(repo.root, file.path)).catch(() => void 0);
+              const content = await readFile5(join47(repo.root, file.path)).catch(() => void 0);
               if (content && looksBinary(content)) detail += " (binary: take ours or theirs)";
               else if (content) {
                 const count3 = parseConflicts(content.toString("utf8")).blocks.length;
@@ -55958,7 +56048,7 @@ function conflictsPack(shared, options) {
               details: { path, kind: file.kind }
             };
           }
-          const content = await readFile5(join46(repo.root, path));
+          const content = await readFile5(join47(repo.root, path));
           if (looksBinary(content)) {
             return {
               content: text6(`${path} is binary: resolve it with take: "ours" or "theirs".`),
@@ -56032,7 +56122,7 @@ function conflictsPack(shared, options) {
               details: { path, resolved: true, left: left2.length }
             };
           }
-          const content = await readFile5(join46(cwd, path));
+          const content = await readFile5(join47(cwd, path));
           if (looksBinary(content)) throw new Error(`${path} is binary: use take: "ours" or "theirs".`);
           const parsed = parseConflicts(content.toString("utf8"));
           if (parsed.problem)
@@ -56049,7 +56139,7 @@ function conflictsPack(shared, options) {
           if (resolutions.size === 0)
             throw new Error("Give the resolution of at least one block, or take a side.");
           const written = replaceBlocks(parsed, resolutions);
-          await writeFile6(join46(cwd, path), written);
+          await writeFile6(join47(cwd, path), written);
           const remaining = parseConflicts(written).blocks.length;
           if (remaining > 0) {
             return {
@@ -56969,7 +57059,7 @@ ${tail2}` : "Ended the debugging run."
 }
 
 // packages/kyrn-judge/src/extension/features/packs/github.ts
-import { existsSync as existsSync15 } from "node:fs";
+import { existsSync as existsSync16 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var GITHUB_SKILL_PATH = fileURLToPath4(new URL("../../../../skills/mu-github/SKILL.md", new URL("src/extension/features/packs/github.ts", new URL("../", import.meta.url)).href));
 function githubPack(shared, options) {
@@ -56978,7 +57068,7 @@ function githubPack(shared, options) {
     title: "GitHub through gh",
     description: "For work on GitHub: pull requests, issues, CI checks and their logs, reviews, releases, the API. Adds no tools; the mu-github skill says how to use gh.",
     tools: [],
-    skills: existsSync15(GITHUB_SKILL_PATH) ? [GITHUB_SKILL_PATH] : [],
+    skills: existsSync16(GITHUB_SKILL_PATH) ? [GITHUB_SKILL_PATH] : [],
     async start() {
       const result = await shared.run(options.command || "gh", ["--version"], {
         cwd: shared.cwd(),
@@ -57277,13 +57367,14 @@ function registerPacks(runtime) {
 // packages/kyrn-judge/src/extension/features/permissions.ts
 var import_pi_coding_agent15 = __toESM(require_pi_coding_agent(), 1);
 import { homedir as homedir11 } from "node:os";
-import { join as join48, resolve as resolve14, sep as sep3 } from "node:path";
+import { join as join49, resolve as resolve14, sep as sep4 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/tool-approval.ts
 var APPROVE_AT = 0.8;
+var CHECK_APPROVE_AT = 0.7;
 var toolApproval = defineDecision({
   id: "tool.approval",
-  version: 1,
+  version: 2,
   cacheImpact: "none",
   latency: "inline",
   capabilities: "relate",
@@ -57303,11 +57394,12 @@ var toolApproval = defineDecision({
   buildState(input) {
     return { tool_call: input.call, where: input.where, task: input.task, user_message: input.userMessage };
   },
-  policy(answers) {
+  policy(answers, input) {
     const { choice, probabilities } = answers.verdict;
     if (isEscapeOption(choice)) return "unsure";
     const p = probabilities?.[choice];
-    if (choice === "needed") return p === void 0 || p >= APPROVE_AT ? "approve" : "unsure";
+    const line2 = input.check ? CHECK_APPROVE_AT : APPROVE_AT;
+    if (choice === "needed") return p === void 0 || p >= line2 ? "approve" : "unsure";
     return choice === "beyond" || choice === "unrelated" ? choice : "unsure";
   },
   // Nobody could look at it: the user decides.
@@ -57319,7 +57411,7 @@ var toolApproval = defineDecision({
 // packages/kyrn-judge/src/permissions/modes.ts
 import { lstatSync as lstatSync2, mkdirSync as mkdirSync18, readFileSync as readFileSync23, readlinkSync, realpathSync as realpathSync6, renameSync as renameSync10, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { basename as basename14, dirname as dirname12, isAbsolute as isAbsolute8, join as join47, relative as relative7, resolve as resolve13, sep as sep2 } from "node:path";
+import { basename as basename14, dirname as dirname13, isAbsolute as isAbsolute8, join as join48, relative as relative7, resolve as resolve13, sep as sep3 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var PERMISSION_MODES = ["full", "judge", "ask"];
 var MODE_TEXT = {
@@ -57407,12 +57499,12 @@ function realPath2(path, depth = 0) {
     if (depth < 40) {
       try {
         if (lstatSync2(path).isSymbolicLink())
-          return realPath2(resolve13(dirname12(path), readlinkSync(path)), depth + 1);
+          return realPath2(resolve13(dirname13(path), readlinkSync(path)), depth + 1);
       } catch {
       }
     }
-    const parent = dirname12(path);
-    return parent === path ? path : join47(realPath2(parent, depth + 1), basename14(path));
+    const parent = dirname13(path);
+    return parent === path ? path : join48(realPath2(parent, depth + 1), basename14(path));
   }
 }
 var UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
@@ -57427,7 +57519,7 @@ function toolPath(cwd, raw, home = homedir10()) {
   if (process.platform === "win32") path = windowsDrive(path);
   if (path === "~") path = home;
   else if (path.startsWith("~/") || process.platform === "win32" && path.startsWith("~\\"))
-    path = join47(home, path.slice(2));
+    path = join48(home, path.slice(2));
   else if (/^file:\/\//.test(path)) {
     try {
       path = fileURLToPath5(path);
@@ -57440,7 +57532,7 @@ function toolPath(cwd, raw, home = homedir10()) {
 function inProject(cwd, target) {
   if (target === void 0) return void 0;
   const rel = relative7(realPath2(resolve13(cwd)), target);
-  return rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute8(rel) ? void 0 : rel;
+  return rel === ".." || rel.startsWith(`..${sep3}`) || isAbsolute8(rel) ? void 0 : rel;
 }
 function projectFile(cwd, target) {
   const rel = inProject(cwd, target);
@@ -57538,7 +57630,7 @@ var PermissionDefaults = class {
   file;
   memory;
   constructor(dir) {
-    this.file = dir ? join47(dir, "permissions.json") : void 0;
+    this.file = dir ? join48(dir, "permissions.json") : void 0;
   }
   get() {
     if (!this.file) return this.memory;
@@ -57554,7 +57646,7 @@ var PermissionDefaults = class {
       this.memory = mode;
       return;
     }
-    mkdirSync18(join47(this.file, ".."), { recursive: true });
+    mkdirSync18(join48(this.file, ".."), { recursive: true });
     const temp = `${this.file}.${process.pid}.tmp`;
     writeFileSync15(temp, `${JSON.stringify({ version: 1, mode }, null, "	")}
 `, { mode: 384 });
@@ -57614,9 +57706,9 @@ function protectedPaths(roots) {
   return real2 && real2 !== roots.agentDir ? [...spelled, real2] : spelled;
 }
 function projectSettings(cwd) {
-  const spelled = join48(resolve14(cwd), import_pi_coding_agent15.CONFIG_DIR_NAME);
+  const spelled = join49(resolve14(cwd), import_pi_coding_agent15.CONFIG_DIR_NAME);
   const real2 = toolPath(cwd, import_pi_coding_agent15.CONFIG_DIR_NAME) ?? spelled;
-  return [.../* @__PURE__ */ new Set([spelled, real2])].map((path) => `${path}${sep3}`);
+  return [.../* @__PURE__ */ new Set([spelled, real2])].map((path) => `${path}${sep4}`);
 }
 function registerPermissions(runtime, roots) {
   const options = runtime.options("permissions", {
@@ -57628,7 +57720,7 @@ function registerPermissions(runtime, roots) {
   });
   if (!options.enabled) return;
   const { pi } = runtime;
-  const defaults = new PermissionDefaults(roots ? join48(roots.agentDir, "mu") : void 0);
+  const defaults = new PermissionDefaults(roots ? join49(roots.agentDir, "mu") : void 0);
   const guarded = protectedPaths(roots);
   const initial = () => parseMode(muEnv("PERMISSIONS")) ?? defaults.get() ?? parseMode(options.mode) ?? "judge";
   let mode = initial();
@@ -57707,6 +57799,9 @@ function registerPermissions(runtime, roots) {
       return { approved: asked2 && (decision2.judged ?? decision2.outcome) === "allow", reason: "flagged" };
     }
     const frame = runtime.frame;
+    const input = event.input;
+    const powershell = event.toolName === "powershell" || event.toolName === "bg_start" && process.platform === "win32";
+    const check = need.kind === "shell" && isCheckChain(String(input.command ?? ""), powershell, ctx.cwd, shellStart(event.toolName, input, ctx.cwd));
     const decision = await runtime.engine.decide(
       toolApproval,
       {
@@ -57716,7 +57811,8 @@ function registerPermissions(runtime, roots) {
         ),
         userMessage,
         call,
-        where: need.kind === "outside" ? "outside the project folder" : need.kind === "shell" || need.kind === "run" ? "a program run in the project folder" : need.kind === "delegate" ? "subagents working on the project" : "an action outside this computer or program, such as a web page or a connected service"
+        where: need.kind === "outside" ? "outside the project folder" : need.kind === "shell" || need.kind === "run" ? "a program run in the project folder" : need.kind === "delegate" ? "subagents working on the project" : "an action outside this computer or program, such as a web page or a connected service",
+        check
       },
       { signal: ctx.signal }
     );
@@ -58512,7 +58608,7 @@ function registerPreflight(runtime) {
 
 // packages/kyrn-judge/src/extension/features/procedures.ts
 var import_pi_coding_agent16 = __toESM(require_pi_coding_agent(), 1);
-import { basename as basename15, join as join50 } from "node:path";
+import { basename as basename15, join as join51 } from "node:path";
 
 // packages/kyrn-judge/src/decisions/skill-capture.ts
 var DRAFT_AT = 0.9;
@@ -58551,8 +58647,8 @@ var skillCapture = defineDecision({
 });
 
 // packages/kyrn-judge/src/memory/skill-drafts.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync19, readdirSync as readdirSync9, readFileSync as readFileSync24, rmSync as rmSync8, writeFileSync as writeFileSync16 } from "node:fs";
-import { join as join49 } from "node:path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync19, readdirSync as readdirSync9, readFileSync as readFileSync24, rmSync as rmSync8, writeFileSync as writeFileSync16 } from "node:fs";
+import { join as join50 } from "node:path";
 var MAX_NAME = 64;
 var MAX_DESCRIPTION = 300;
 var MAX_LINES = 120;
@@ -58584,7 +58680,7 @@ var SkillDrafts = class {
     this.dir = dir;
   }
   list() {
-    if (!existsSync16(this.dir)) return [];
+    if (!existsSync17(this.dir)) return [];
     const drafts = [];
     for (const entry of readdirSync9(this.dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
@@ -58594,10 +58690,10 @@ var SkillDrafts = class {
     return drafts.sort((a, b) => a.created.localeCompare(b.created));
   }
   get(name) {
-    const folder = join49(this.dir, skillName(name));
+    const folder = join50(this.dir, skillName(name));
     try {
-      const meta = JSON.parse(readFileSync24(join49(folder, "draft.json"), "utf8"));
-      return { ...meta, markdown: readFileSync24(join49(folder, "SKILL.md"), "utf8") };
+      const meta = JSON.parse(readFileSync24(join50(folder, "draft.json"), "utf8"));
+      return { ...meta, markdown: readFileSync24(join50(folder, "SKILL.md"), "utf8") };
     } catch {
       return void 0;
     }
@@ -58615,16 +58711,16 @@ var SkillDrafts = class {
       request: origin.request.slice(0, 400),
       created: (/* @__PURE__ */ new Date()).toISOString()
     };
-    const folder = join49(this.dir, name);
+    const folder = join50(this.dir, name);
     mkdirSync19(folder, { recursive: true });
-    writeFileSync16(join49(folder, "SKILL.md"), markdown);
-    writeFileSync16(join49(folder, "draft.json"), `${JSON.stringify(meta, null, "	")}
+    writeFileSync16(join50(folder, "SKILL.md"), markdown);
+    writeFileSync16(join50(folder, "draft.json"), `${JSON.stringify(meta, null, "	")}
 `);
     return { ...meta, markdown };
   }
   remove(name) {
-    const folder = join49(this.dir, skillName(name));
-    if (!existsSync16(folder)) return false;
+    const folder = join50(this.dir, skillName(name));
+    if (!existsSync17(folder)) return false;
     rmSync8(folder, { recursive: true, force: true });
     return true;
   }
@@ -58635,9 +58731,9 @@ var SkillDrafts = class {
   accept(name, skillsDir) {
     const draft = this.get(name);
     if (!draft) return { error: "missing" };
-    const folder = join49(skillsDir, draft.name);
-    const path = join49(folder, "SKILL.md");
-    if (existsSync16(path)) return { error: "exists" };
+    const folder = join50(skillsDir, draft.name);
+    const path = join50(folder, "SKILL.md");
+    if (existsSync17(path)) return { error: "exists" };
     mkdirSync19(folder, { recursive: true });
     writeFileSync16(path, draft.markdown);
     this.remove(draft.name);
@@ -58675,10 +58771,10 @@ function registerProcedures(runtime, roots) {
   });
   if (!options.enabled || process.env.KYRN_SWARM_DEPTH) return;
   const { pi } = runtime;
-  const dir = options.path || (roots ? join50(roots.agentDir, "mu", "skill-drafts") : void 0);
+  const dir = options.path || (roots ? join51(roots.agentDir, "mu", "skill-drafts") : void 0);
   if (!dir) return;
   const drafts = new SkillDrafts(dir);
-  const userSkillsDir = roots ? join50(roots.agentDir, "skills") : void 0;
+  const userSkillsDir = roots ? join51(roots.agentDir, "skills") : void 0;
   let turnOf = -1;
   let request = "";
   let steps = [];
@@ -58837,7 +58933,7 @@ ${say({
         return;
       }
       if (verb === "accept") {
-        const target = project ? join50(ctx.cwd, import_pi_coding_agent16.CONFIG_DIR_NAME, "skills") : userSkillsDir;
+        const target = project ? join51(ctx.cwd, import_pi_coding_agent16.CONFIG_DIR_NAME, "skills") : userSkillsDir;
         if (!target) return;
         const result = drafts.accept(draft.name, target);
         if ("error" in result) {
@@ -59132,7 +59228,7 @@ function errorDetail(text9) {
 
 // packages/kyrn-judge/src/sandbox/operations.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { extname as extname2, isAbsolute as isAbsolute9, posix as posix6, relative as relative9, sep as sep5 } from "node:path";
+import { extname as extname2, isAbsolute as isAbsolute9, posix as posix6, relative as relative9, sep as sep6 } from "node:path";
 
 // packages/kyrn-judge/src/sandbox/session.ts
 import { posix as posix5 } from "node:path";
@@ -59140,7 +59236,7 @@ import { posix as posix5 } from "node:path";
 // packages/kyrn-judge/src/sandbox/project.ts
 import { spawn as spawn10 } from "node:child_process";
 import { lstat as lstat2, readdir as readdir2, readFile as readFile6, readlink as readlink2 } from "node:fs/promises";
-import { join as join51, relative as relative8, sep as sep4 } from "node:path";
+import { join as join52, relative as relative8, sep as sep5 } from "node:path";
 import { promisify } from "node:util";
 import { gzip } from "node:zlib";
 
@@ -59249,9 +59345,9 @@ var WALK_SKIP = /* @__PURE__ */ new Set([".git", "node_modules"]);
 async function walk(root, dir, found) {
   for (const entry of await readdir2(dir, { withFileTypes: true })) {
     if (entry.isDirectory()) {
-      if (!WALK_SKIP.has(entry.name)) await walk(root, join51(dir, entry.name), found);
+      if (!WALK_SKIP.has(entry.name)) await walk(root, join52(dir, entry.name), found);
     } else if (entry.isFile() || entry.isSymbolicLink()) {
-      found.push(relative8(root, join51(dir, entry.name)).split(sep4).join("/"));
+      found.push(relative8(root, join52(dir, entry.name)).split(sep5).join("/"));
     }
   }
 }
@@ -59279,13 +59375,13 @@ async function seedArchive(cwd, maxBytes) {
   const entries = [];
   let bytes = 0;
   for (const path of files) {
-    const absolute3 = join51(cwd, path);
+    const absolute3 = join52(cwd, path);
     const stat = await lstat2(absolute3).catch(() => void 0);
     if (!stat) continue;
     const mtime = Math.floor(stat.mtimeMs / 1e3);
     if (stat.isSymbolicLink()) {
       const target = await readlink2(absolute3);
-      entries.push({ path, mode: 511, mtime, linkTarget: sep4 === "\\" ? target.split(sep4).join("/") : target });
+      entries.push({ path, mode: 511, mtime, linkTarget: sep5 === "\\" ? target.split(sep5).join("/") : target });
     } else if (stat.isFile()) {
       bytes += stat.size;
       if (bytes > maxBytes) throw new ProjectTooLarge(bytes, maxBytes);
@@ -59665,14 +59761,14 @@ var SandboxSession = class {
 function toSandboxPath(localPath, root, workdir) {
   const inside2 = relative9(root, localPath);
   if (inside2 === "") return workdir;
-  if (inside2 !== ".." && !inside2.startsWith(`..${sep5}`) && !isAbsolute9(inside2)) {
-    return posix6.join(workdir, inside2.split(sep5).join("/"));
+  if (inside2 !== ".." && !inside2.startsWith(`..${sep6}`) && !isAbsolute9(inside2)) {
+    return posix6.join(workdir, inside2.split(sep6).join("/"));
   }
-  return localPath.split(sep5).join("/");
+  return localPath.split(sep6).join("/");
 }
 function insideProject(localPath, root) {
   const inside2 = relative9(root, localPath);
-  return inside2 === "" || inside2 !== ".." && !inside2.startsWith(`..${sep5}`) && !isAbsolute9(inside2);
+  return inside2 === "" || inside2 !== ".." && !inside2.startsWith(`..${sep6}`) && !isAbsolute9(inside2);
 }
 var IMAGE_TYPES2 = {
   ".png": "image/png",
@@ -60718,7 +60814,7 @@ function registerWatchdog(runtime) {
 }
 
 // packages/kyrn-judge/src/extension/quit.ts
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 
 // packages/kyrn-judge/src/auth/exit.ts
 import { mkdirSync as mkdirSync20, rmdirSync as rmdirSync2 } from "node:fs";
@@ -60774,7 +60870,7 @@ function drop(lock) {
 
 // packages/kyrn-judge/src/extension/quit.ts
 function registerLockSafeQuit(pi, agentDir) {
-  const stores2 = [join52(agentDir, "auth.json"), join52(agentDir, "models-store.json")];
+  const stores2 = [join53(agentDir, "auth.json"), join53(agentDir, "models-store.json")];
   pi.on("session_shutdown", async (event) => {
     if (event.reason === "quit") await holdLocksUntilExit(stores2);
   });
@@ -60833,7 +60929,7 @@ function registerKyrn(pi, options) {
   for (const capability of options.capabilities ?? []) runtime.catalog.register(capability);
   registerWelcome(runtime);
   const roots = options.roots ?? (options.config || options.provider ? void 0 : { home: homedir12(), agentDir: (0, import_pi_coding_agent18.getAgentDir)() });
-  runtime.stateDir = roots ? join53(roots.agentDir, "mu") : void 0;
+  runtime.stateDir = roots ? join54(roots.agentDir, "mu") : void 0;
   registerLayaNotice(runtime, loaded.laya, roots, home);
   if (loaded.disabled) {
     if (!options.only || options.only.includes("permissions")) registerPermissions(runtime, roots);