loki-mode 10.10.3 → 10.11.0

package/memory/storage.py

@@ -71,6 +71,19 @@ class MemoryStorage:
     Supports namespace-based project isolation for memory separation.
     """
 
+    # Process-wide read-only switch, set by mcp/server.py apply_read_only_mode.
+    # When True, constructing a store creates nothing (no directories, no
+    # index/timeline init, no cleanup), reads take no lock file, and any write
+    # raises (every public mutator calls _check_writable). A missing store
+    # simply reads as empty.
+    READ_ONLY = False
+
+    @staticmethod
+    def _check_writable() -> None:
+        """Raise PermissionError when the process-wide READ_ONLY flag is set."""
+        if MemoryStorage.READ_ONLY:
+            raise PermissionError("memory store is read-only in this process")
+
     VERSION = "1.1.0"
 
     def __init__(
@@ -112,9 +125,10 @@ class MemoryStorage:
         # called on the same path from nested operations in the same thread.
         self._held_locks: threading.local = threading.local()
 
-        self._ensure_directories()
-        self._ensure_index()
-        self._ensure_timeline()
+        if not MemoryStorage.READ_ONLY:
+            self._ensure_directories()
+            self._ensure_index()
+            self._ensure_timeline()
 
     @property
     def namespace(self) -> Optional[str]:
@@ -316,6 +330,11 @@ class MemoryStorage:
         Yields:
             File handle with lock held
         """
+        if MemoryStorage.READ_ONLY:
+            # No lock file may be created; reads proceed unlocked.
+            yield
+            return
+
         lock_path = path.with_suffix(path.suffix + ".lock")
         lock_key = str(lock_path)
 
@@ -364,6 +383,8 @@ class MemoryStorage:
             path: Target file path
             data: Dictionary to serialize as JSON
         """
+        if MemoryStorage.READ_ONLY:
+            raise PermissionError("memory store is read-only in this process")
         path = Path(path)
         path.parent.mkdir(parents=True, exist_ok=True)
 
@@ -482,6 +503,7 @@ class MemoryStorage:
         Returns:
             Episode ID
         """
+        self._check_writable()
         # Handle both dict and object
         if hasattr(episode, "to_dict"):
             episode_data = episode.to_dict()
@@ -620,6 +642,7 @@ class MemoryStorage:
         Returns:
             True if deleted, False if not found
         """
+        self._check_writable()
         episodic_dir = self.base_path / "episodic"
         if not episodic_dir.exists():
             return False
@@ -690,6 +713,7 @@ class MemoryStorage:
         Returns:
             Pattern ID
         """
+        self._check_writable()
         # Handle both dict and object
         if hasattr(pattern, "to_dict"):
             pattern_data = pattern.to_dict()
@@ -826,6 +850,7 @@ class MemoryStorage:
         Returns:
             True if updated, False if not found
         """
+        self._check_writable()
         # Handle both dict and object
         if hasattr(pattern, "to_dict"):
             pattern_data = pattern.to_dict()
@@ -906,6 +931,7 @@ class MemoryStorage:
             True if the pattern was found and the merged record written, False if
             the pattern id was not present (caller should fall back to a create).
         """
+        self._check_writable()
         if not pattern_id:
             return False
 
@@ -968,6 +994,7 @@ class MemoryStorage:
         Returns:
             Skill ID
         """
+        self._check_writable()
         # Handle both dict and object
         if hasattr(skill, "to_dict"):
             skill_data = skill.to_dict()
@@ -1053,6 +1080,7 @@ class MemoryStorage:
 
         Scans all memory stores and builds a topic index for efficient lookup.
         """
+        self._check_writable()
         index = {
             "version": self.VERSION,
             "last_updated": datetime.now(timezone.utc).isoformat(),
@@ -1126,6 +1154,7 @@ class MemoryStorage:
         Args:
             action: Action dictionary with type, description, timestamp, etc.
         """
+        self._check_writable()
         timeline_path = self.base_path / "timeline.json"
 
         with self._file_lock(timeline_path, exclusive=True):
@@ -1207,6 +1236,7 @@ class MemoryStorage:
         Args:
             context: Dictionary of current context variables
         """
+        self._check_writable()
         timeline_path = self.base_path / "timeline.json"
 
         with self._file_lock(timeline_path, exclusive=True):
@@ -1263,6 +1293,7 @@ class MemoryStorage:
 
     def ensure_directory(self, subpath: str) -> None:
         """Create directory if it doesn't exist."""
+        self._check_writable()
         path = os.path.join(self.base_path, subpath)
         os.makedirs(path, exist_ok=True)
 
@@ -1286,6 +1317,7 @@ class MemoryStorage:
 
     def write_json(self, filepath: str, data: dict) -> None:
         """Write JSON file atomically."""
+        self._check_writable()
         full_path = self._resolve_path(filepath)
         self._atomic_write(full_path, data)
 
@@ -1298,6 +1330,7 @@ class MemoryStorage:
 
     def delete_file(self, filepath: str) -> bool:
         """Delete file, return True if deleted."""
+        self._check_writable()
         full_path = self._resolve_path(filepath)
         try:
             os.remove(full_path)
@@ -1545,6 +1578,7 @@ class MemoryStorage:
         Returns:
             True if a record was found and persisted, False otherwise.
         """
+        self._check_writable()
         memory_id = memory.get("id")
         if not memory_id:
             return False
@@ -1656,6 +1690,7 @@ class MemoryStorage:
         Returns:
             True if the pattern was found and incremented, False otherwise.
         """
+        self._check_writable()
         patterns_path = self.base_path / "semantic" / "patterns.json"
         if not patterns_path.exists():
             return False
@@ -1706,6 +1741,7 @@ class MemoryStorage:
         Returns:
             Number of memories updated
         """
+        self._check_writable()
         updated_count = 0
 
         collections_to_process = []
@@ -1926,6 +1962,7 @@ class MemoryStorage:
         Returns:
             Dictionary with counts of copied items
         """
+        self._check_writable()
         target = self.with_namespace(target_namespace)
         copied = {"episodes": 0, "patterns": 0, "skills": 0}
 
@@ -1970,6 +2007,7 @@ class MemoryStorage:
         Returns:
             Dictionary with counts of merged items
         """
+        self._check_writable()
         source = self.with_namespace(source_namespace)
         merged = {"episodes": 0, "patterns": 0, "skills": 0}
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "10.10.3",
+  "version": "10.11.0",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",

package/packages/control-plane/dist/server.js

@@ -10473,6 +10473,9 @@ class Index {
 function index(name) {
   return new IndexBuilderOn(name, false);
 }
+function uniqueIndex(name) {
+  return new IndexBuilderOn(name, true);
+}
 
 // node_modules/drizzle-orm/sqlite-core/primary-keys.js
 function primaryKey(...config) {
@@ -12521,6 +12524,9 @@ __export(exports_schema, {
   localRepos: () => localRepos,
   events: () => events,
   audit: () => audit2,
+  askThreads: () => askThreads,
+  askMessages: () => askMessages,
+  askEvents: () => askEvents,
   actions: () => actions
 });
 var sources = sqliteTable("sources", {
@@ -12601,6 +12607,42 @@ var actions = sqliteTable("actions", {
   result: text("result").notNull(),
   detail: text("detail")
 }, (t) => [index("actions_ts").on(t.ts)]);
+var askThreads = sqliteTable("ask_threads", {
+  id: text("id").primaryKey(),
+  createdAt: text("created_at").notNull(),
+  updatedAt: text("updated_at").notNull(),
+  repo: text("repo"),
+  provider: text("provider").notNull(),
+  model: text("model"),
+  title: text("title")
+});
+var askMessages = sqliteTable("ask_messages", {
+  id: text("id").primaryKey(),
+  threadId: text("thread_id").notNull().references(() => askThreads.id),
+  seq: integer("seq").notNull(),
+  role: text("role").notNull(),
+  text: text("text").notNull(),
+  status: text("status").notNull(),
+  workerPid: integer("worker_pid"),
+  pgid: integer("pgid"),
+  costUsd: real("cost_usd"),
+  error: text("error"),
+  startedAt: text("started_at"),
+  finishedAt: text("finished_at")
+}, (t) => [
+  uniqueIndex("ask_messages_thread_seq").on(t.threadId, t.seq),
+  index("ask_messages_status").on(t.status)
+]);
+var askEvents = sqliteTable("ask_events", {
+  id: text("id").primaryKey(),
+  messageId: text("message_id").notNull().references(() => askMessages.id),
+  seq: integer("seq").notNull(),
+  kind: text("kind").notNull(),
+  payload: text("payload").notNull(),
+  ts: text("ts").notNull()
+}, (t) => [
+  uniqueIndex("ask_events_message_seq").on(t.messageId, t.seq)
+]);
 
 // src/db/migrate.ts
 function openDb(path) {
@@ -17187,6 +17229,21 @@ function checkCommand(repoDir, v, where, errs) {
   const cwd = checkDir(repoDir, v.cwd, `${where}.cwd`, errs);
   return { cmd: v.cmd.trim(), cwd, cite: checkCites(repoDir, v.cite, `${where}.cite`, errs) };
 }
+function rawDeps(v, where, errs) {
+  if (!Array.isArray(v)) {
+    errs.push(`${where}: must be an array of package roots`);
+    return [];
+  }
+  const out2 = [];
+  for (const d of v) {
+    const rel = isStr(d) ? safeRel(d) : null;
+    if (rel === null)
+      errs.push(`${where}: "${String(d)}" is not a repo-relative package root`);
+    else if (!out2.includes(rel))
+      out2.push(rel);
+  }
+  return out2;
+}
 function validateAnswer(repoDir, raw2) {
   const errs = [];
   if (!isRec(raw2))
@@ -17219,9 +17276,16 @@ function validateAnswer(repoDir, raw2) {
       runner: isStr(p.runner) ? p.runner.trim() : null,
       commands,
       ui: { present: ui.present === true, boot: checkCommand(repoDir, ui.boot, `${w}.ui.boot`, errs), cite: checkCites(repoDir, ui.cite, `${w}.ui.cite`, errs) },
-      cite: checkCites(repoDir, p.cite, `${w}.cite`, errs)
+      cite: checkCites(repoDir, p.cite, `${w}.cite`, errs),
+      ...p.install === undefined ? {} : { install: checkCommand(repoDir, p.install, `${w}.install`, errs) },
+      ...p.dependsOn === undefined ? {} : { dependsOn: rawDeps(p.dependsOn, `${w}.dependsOn`, errs) }
     });
   }
+  const roots = new Set(packages.map((p) => p.root));
+  for (const p of packages)
+    for (const d of p.dependsOn ?? [])
+      if (!roots.has(d))
+        errs.push(`package "${p.name}".dependsOn: "${d}" is not the root of any listed package`);
   if (!Array.isArray(raw2.fingerprintFiles))
     errs.push("fingerprintFiles: required array of the manifest and lockfile paths");
   const fingerprintFiles = (Array.isArray(raw2.fingerprintFiles) ? raw2.fingerprintFiles : []).filter((f) => {
@@ -17305,6 +17369,14 @@ function projectApi(model) {
       return p ? p.root === "." ? clean(file) : clean(file).slice(p.root.length + 1) : null;
     },
     commandFor: (pkg, kind) => (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.commands?.[kind] ?? null,
+    dependsOn: (pkg) => {
+      const d = (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.dependsOn;
+      return Array.isArray(d) ? d.filter((x) => typeof x === "string") : null;
+    },
+    installFor: (pkg) => {
+      const i = (packages.find((p) => p.root === clean(pkg) || p.name === pkg) ?? null)?.install;
+      return isRec2(i) && typeof i.cmd === "string" ? i : null;
+    },
     hasUI: () => packages.some((p) => isRec2(p.ui) && p.ui.present === true),
     uiBoot: () => {
       for (const p of packages)
@@ -17654,6 +17726,13 @@ function receiptScreensProblem(receiptPath, receipt) {
   return receipt["evidence_screens"] === undefined ? null : checkScreens(dirname8(receiptPath), receipt["evidence_screens"]);
 }
 
+// ../../loki-ts/src/util/check_result.ts
+var NO_TESTS_REASON = "no tests executed";
+var UNCONFIRMED_REASON = "test count could not be confirmed";
+var UNMEASURED_REASON = "executed count unmeasured (Loki could not parse the runner summary, harness-owned)";
+var isExecutedProof = (c) => c.result === "pass" && typeof c.n === "number" && c.n > 0;
+var hasExecutedProof = (checks) => checks.some(isExecutedProof);
+
 // ../../loki-ts/src/features/contract.ts
 import { existsSync as existsSync16, lstatSync as lstatSync7, mkdirSync as mkdirSync8, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
 import { dirname as dirname9, join as join28 } from "path";
@@ -18019,10 +18098,10 @@ var commitStage = {
     return { status: "completed", data: { committed: true, head_sha: (await git(ctx, ["rev-parse", "HEAD"])).out.trim(), scope_notes: notes } };
   }
 };
-function verdictOf2(o, checks, emptyDiff, verifyNotProven, wallGreenOnBase) {
+function verdictOf2(o, checks, emptyDiff, verifyNotProven, wallGreenOnBase, proof) {
   const exit = o.implement?.exit;
   if (o.commit?.failed !== true && strs2(o.commit?.not_proven).length === 0 && (o.intake?.already_satisfied === true || wallGreenOnBase || exit === "already_done"))
-    return "ALREADY_SATISFIED";
+    return proof ? "ALREADY_SATISFIED" : "PARTIAL";
   if (exit === "spec_conflict")
     return "SPEC_CONFLICT";
   if (o.commit?.failed === true || strs2(o.commit?.not_proven).length > 0)
@@ -18031,7 +18110,7 @@ function verdictOf2(o, checks, emptyDiff, verifyNotProven, wallGreenOnBase) {
     return "FAILED";
   if (checks.some((c) => c.result === "fail"))
     return "FAILED";
-  if (exit === "killed" || checks.length === 0 || checks.some((c) => c.result !== "pass") || verifyNotProven)
+  if (exit === "killed" || checks.length === 0 || checks.some((c) => c.result !== "pass") || verifyNotProven || !proof)
     return "PARTIAL";
   return "VERIFIED";
 }
@@ -18089,10 +18168,17 @@ var sealStage = {
       if ((rawDiff[i].trim().split(" ").pop() ?? "") !== "A" && isTestFile(rawDiff[i + 1]))
         weakTests.push(rawDiff[i + 1]);
     const grp = sealGroup(ctx.runDir, receiptSha256);
-    const verdict = capGroupVerdict(verdictOf2(o, checks.filter((c) => !(c.result === "fail" && preRedChecks.includes(c.name))), !diffOk || diff.stdout === "", verifyNotProven.length > 0 || weakTests.length > 0, wallGreenOnBase), grp);
+    const proof = wallGreenOnBase || hasExecutedProof(Array.isArray(o.verify?.checks) ? o.verify.checks : []);
+    const verdict = capGroupVerdict(verdictOf2(o, checks.filter((c) => !(c.result === "fail" && preRedChecks.includes(c.name))), !diffOk || diff.stdout === "", verifyNotProven.length > 0 || weakTests.length > 0, wallGreenOnBase, proof), grp);
     const notProven = new Set([...DEEP_NOT_PROVEN, ...grp.notProven]);
+    if (!proof && (verdict === "PARTIAL" || verdict === "VERIFIED" || verdict === "ALREADY_SATISFIED")) {
+      const vc = Array.isArray(o.verify?.checks) ? o.verify.checks : [];
+      notProven.add(vc.length > 0 && vc.every((c) => c.n !== 0 && String(c.reason ?? "").startsWith(UNMEASURED_REASON)) ? UNMEASURED_REASON : vc.length > 0 && vc.every((c) => c.n !== 0 && String(c.reason ?? "").startsWith(UNCONFIRMED_REASON)) ? UNCONFIRMED_REASON : NO_TESTS_REASON);
+    }
     if (wallNotRun > 0)
       notProven.add(`wall base run not_run: ${wallNotRun}`);
+    for (const d of Array.isArray(o.wall?.discarded) ? o.wall.discarded : [])
+      notProven.add(`wall test discarded: ${String(d.file)} (${String(d.reason)})`);
     if (wallNotRun > 0) {
       try {
         const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename10(String(f.path))));

package/packages/control-plane/drizzle/0005_ask.sql

@@ -0,0 +1,39 @@
+CREATE TABLE IF NOT EXISTS `ask_threads` (
+	`id` text PRIMARY KEY NOT NULL,
+	`created_at` text NOT NULL,
+	`updated_at` text NOT NULL,
+	`repo` text,
+	`provider` text NOT NULL,
+	`model` text,
+	`title` text
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS `ask_messages` (
+	`id` text PRIMARY KEY NOT NULL,
+	`thread_id` text NOT NULL,
+	`seq` integer NOT NULL,
+	`role` text NOT NULL,
+	`text` text NOT NULL,
+	`status` text NOT NULL,
+	`worker_pid` integer,
+	`pgid` integer,
+	`cost_usd` real,
+	`error` text,
+	`started_at` text,
+	`finished_at` text,
+	FOREIGN KEY (`thread_id`) REFERENCES `ask_threads`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `ask_messages_thread_seq` ON `ask_messages` (`thread_id`,`seq`);--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `ask_messages_status` ON `ask_messages` (`status`);--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS `ask_events` (
+	`id` text PRIMARY KEY NOT NULL,
+	`message_id` text NOT NULL,
+	`seq` integer NOT NULL,
+	`kind` text NOT NULL,
+	`payload` text NOT NULL,
+	`ts` text NOT NULL,
+	FOREIGN KEY (`message_id`) REFERENCES `ask_messages`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS `ask_events_message_seq` ON `ask_events` (`message_id`,`seq`);