loki-mode 10.9.1 → 10.10.1

package/.github/actions/issue-to-pr/action.yml

@@ -10,7 +10,7 @@ branding:
 # must not hold a write token. Run it with `permissions: contents: read,
 # issues: read` and `actions/checkout` with `persist-credentials: false`, upload
 # `outputs.patch`, and push and open the PR from a second job that runs no
-# agent. .github/workflows/loki-issue-to-pr.yml in asklokesh/loki-mode is the
+# agent. docs/examples/loki-issue-to-pr.yml.example in asklokesh/loki-mode is the
 # reference. Earlier versions pushed and opened the PR from the same step that
 # ran the agent; this one does not.
 #
@@ -247,7 +247,7 @@ runs:
         echo "patch=$OUT/loki.patch" >> "$GITHUB_OUTPUT"
         echo "pr_body=$OUT/pr-body.md" >> "$GITHUB_OUTPUT"
 
-        echo "::warning::This action does not open the pull request (Rule of Two). Upload outputs.patch and open the PR from a job that holds the write token and runs no agent; see .github/workflows/loki-issue-to-pr.yml in asklokesh/loki-mode."
+        echo "::warning::This action does not open the pull request (Rule of Two). Upload outputs.patch and open the PR from a job that holds the write token and runs no agent; see docs/examples/loki-issue-to-pr.yml.example in asklokesh/loki-mode."
         if [ -n "$RUN_DIR" ]; then
           echo "Loki 10 receipt under $RUN_DIR/"
         fi

package/README.md

@@ -9,6 +9,12 @@ An autonomous software factory that knows what it is supposed to deliver, and pr
 
 [Website](https://www.autonomi.dev/) | [Documentation](wiki/Home.md) | [Installation](docs/INSTALLATION.md) | [Changelog](CHANGELOG.md)
 
+<!-- generated:facts -->
+The npm badge above tracks the current release; see [CHANGELOG.md](CHANGELOG.md) for release notes.
+
+CLI reference: [docs/CLI-REFERENCE.md](docs/CLI-REFERENCE.md) (generated from the command registry).
+<!-- /generated -->
+
 Loki Mode is a free, source-available autonomous coding agent by [Autonomi](https://www.autonomi.dev/). Hand it a PRD, GitHub issue, OpenAPI doc or one-line brief. It derives a delivery contract (the acceptance criteria), builds against it, and ends with a signed Evidence Receipt that states what was proven and what was not. If the contract cannot be derived, it stops and asks one question instead of guessing.
 
 Before a build counts as done, a review council selects reviewers from a specialist pool (`agents/types.json`, scored by `run.sh:FOCUS_KEYWORDS`). The bundled MCP server exposes 39 tools over stdio (`mcp/server.py`), including `loki_v10_run`, `loki_v10_status` and `loki_v10_verify` to start a Loki 10 run in the background, read its phase, verdict and cost, and verify its receipt (`BLOCKED` runs report their question). Add it with `claude mcp add loki-mode -- python3 -m mcp.server` from the install directory.
@@ -88,7 +94,7 @@ loki owner/repo#123
 
 The v10 engine accepts a quoted multi-word task, a GitHub, GitLab or Jira issue reference, `status`, `verify`, `dashboard`, and other subcommands. Flags (`loki-ts/src/engine10/cli.ts` USAGE): `--no-pr` builds and verifies without opening a pull request, `--deep` requests the deep verify pass and a longer implement budget, `--provider <name>` picks the coding provider, `--max-cost <usd>` sets the per-run cost cap (default $100.00 when an API key is set, no dollar cap on a subscription run where the start line adds `subscription: no dollar cap; usage counts against your plan limits`; or `budgets.per_run` in `loki.yaml`; the flag wins; the start line prints it as `cap $100.00 (default)`; reaching it ends the run BUDGET_STOP, exit 3) (`--json` and `--verbose` are also parsed by the supervisor, see [Quiet output](#quiet-output)). The engine needs Bun; without it the command exits 1 with a message and installation instructions.
 
-**Legacy engine (being removed).** The previous engine still ships in 10.6.6 and is reachable with `LOKI_ENGINE=legacy` or `loki legacy <args>`. `loki start owner/repo#N`, `loki start <issue URL>` and `loki start "<multi-word task>"` run on Loki 10, the same as `loki owner/repo#N` and `loki "<task>"`; `loki start ./prd.md`, a flag-first call and a one-word start stay on the legacy engine. For many issues use `loki backlog owner/repo --all|--label X|--issues N,N` (many issues, N in parallel, each on a `loki/backlog-N` worktree branch) instead. Legacy removal is planned and resumes on 2026-10-07; see [docs/v10/LEGACY-REMOVAL.md](docs/v10/LEGACY-REMOVAL.md). Sections below marked "legacy" describe features that run only on that engine.
+**Legacy engine (being removed).** Migration note: the previous engine is being removed and has no engine switch; use `loki "<task>"` and `loki owner/repo#N`. `loki start owner/repo#N`, `loki start <issue URL>` and `loki start "<multi-word task>"` run on Loki 10, the same as `loki owner/repo#N` and `loki "<task>"`; `loki start ./prd.md`, a flag-first call and a one-word start stay on the legacy engine. For many issues use `loki backlog owner/repo --all|--label X|--issues N,N` (many issues, N in parallel, each on a `loki/backlog-N` worktree branch) instead. Legacy removal is planned and resumes on 2026-10-07; see [docs/v10/LEGACY-REMOVAL.md](docs/v10/LEGACY-REMOVAL.md). Sections below marked "legacy" describe features that run only on that engine.
 
 ### The state machine
 
@@ -154,7 +160,7 @@ The run cap is 900s (2700s with `--deep`, `DEFAULT_CAP_S` and `DEEP_CAP_S` in `t
 
 A finished run prints a short summary (see [Quiet output](#quiet-output), which also shows an example) whose `NOT PROVEN` line is never empty by omission: deep checks deferred to the deep-verify pass are always listed there.
 
-`loki status [run-id]` and `loki verify [run-id]` are built on the v10 path (bare `loki verify` follows the newest run, v10 or legacy). `loki dashboard` and `loki status` reach the v10 commands with `LOKI_ENGINE=v10`. Two-way Slack (`loki slack serve`) is on by default and documented in [docs/slack.md](docs/slack.md); outbound notifications use `LOKI_SLACK_WEBHOOK_URL`.
+`loki status [run-id]` and `loki verify [run-id]` are built on the v10 path (bare `loki verify` follows the newest run, v10 or legacy). Two-way Slack (`loki slack serve`) is on by default and documented in [docs/slack.md](docs/slack.md); outbound notifications use `LOKI_SLACK_WEBHOOK_URL`.
 
 ## Run from Jira or Linear
 
@@ -182,7 +188,7 @@ On by default; set `LOKI_CONTRACT=0` to turn it off. It does nothing unless `.lo
 
 Both run on your own GitHub Actions minutes; there is no hosted service.
 
-- Issue to PR: copy `.github/workflows/loki-issue-to-pr.yml` into your repository. Label an issue `loki`, or comment `/loki` as an owner, member or collaborator, and it runs `loki owner/repo#N` (the Loki 10 engine) and opens a pull request with an evidence receipt. The agent job holds a read-only token; a separate publish job opens the PR. Set `ANTHROPIC_API_KEY` in repository secrets.
+- Issue to PR: copy `docs/examples/loki-issue-to-pr.yml.example` to `.github/workflows/loki-issue-to-pr.yml` in your repository. Label an issue `loki`, or comment `/loki` as an owner, member or collaborator, and it runs `loki owner/repo#N` (the Loki 10 engine) and opens a pull request with an evidence receipt. The agent job holds a read-only token; a separate publish job opens the PR. Set `ANTHROPIC_API_KEY` in repository secrets.
 - Nightly backlog: copy `examples/loki-nightly-backlog.yml` into `.github/workflows/`. Its `schedule:` trigger runs `loki backlog owner/repo --label loki`, one Loki 10 run per labeled open issue:
 
 ```yaml

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v10.9.1
+# Loki Mode v10.10.1
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
 
@@ -195,6 +195,16 @@ This protocol governs **skill module** loading -- task-scoped instruction files
 
 ---
 
+## Command list
+
+<!-- generated:commands -->
+Commands (generated from `loki-ts/src/cli/registry.ts`; full reference in `docs/CLI-REFERENCE.md`):
+
+`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
+<!-- /generated -->
+
+---
+
 ## Invocation
 
 **Legacy entry point (v6.84.0, being removed; for Loki 10 use `loki "<task>"` or `loki owner/repo#N`):** `loki start [SPEC|ISSUE-REF]` auto-detects whether the input is a PRD file, an issue URL, an issue number, or another spec format (e.g. OpenAPI). No need to pick between `loki start` and `loki run` -- the single command handles all cases.
@@ -473,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v10.9.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v10.10.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-10.9.1
+10.10.1

package/autonomy/lib/proof-generator.py

@@ -2406,6 +2406,7 @@ def generate(args):
                 job_id=str(redacted.get("run_id") or ""),
                 run_id=str(redacted.get("run_id") or ""),
                 receipt_hash=digest,
+                verification=verification,
             )
             if _tok:
                 verification["attestation"] = _tok

package/autonomy/loki

@@ -918,7 +918,7 @@ import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, sys, hashlib, urllib.request
 sys.path.insert(0, sys.argv[3])
 try:
-    from receipt_jwt import verify_attestation, _CRYPTO_AVAILABLE
+    from receipt_jwt import verify_attestation, check_seal_meta, _CRYPTO_AVAILABLE
 except ImportError:
     sys.exit(1)          # -> "" : cannot check, never a verdict
 proof = json.load(open(sys.argv[1]))
@@ -966,10 +966,14 @@ if not ok:
 # receipt. Recompute the digest the same way the receipt records it (with
 # `verification` stripped) and require the signed claim to match, or a valid
 # token lifted from a different run would vouch for these bytes.
-proof.pop("verification", None)
+_vmeta = proof.pop("verification", None)
 canon = json.dumps(proof, sort_keys=True, separators=(",", ":")).encode()
-print("ok" if claims.get("receipt_sha256") == hashlib.sha256(canon).hexdigest()
-      else "bad")
+if claims.get("receipt_sha256") != hashlib.sha256(canon).hexdigest():
+    print("bad"); sys.exit(0)
+# seal.v2: the verification.* metadata (scope, algo, attestation_kid, ...) is
+# inside the signature; a token that signs different metadata is refused. A
+# legacy seal.v1 token still verifies (its metadata is simply unsigned).
+print("ok" if check_seal_meta(tok, claims, _vmeta)[0] != "bad" else "bad")
 PY
 }
 
@@ -1052,7 +1056,7 @@ import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, sys, os, hashlib, urllib.request
 sys.path.insert(0, sys.argv[3])
 try:
-    from receipt_jwt import verify_attestation, _CRYPTO_AVAILABLE
+    from receipt_jwt import verify_attestation, check_seal_meta, _CRYPTO_AVAILABLE
 except ImportError:
     sys.exit(1)                      # "" : cannot check
 try:
@@ -1117,10 +1121,32 @@ if not ok:
 # A verifying signature is not enough: it must attest to THESE bytes. Recompute
 # the digest the way the receipt records it, so a token lifted from another run
 # cannot vouch for this one.
-proof.pop("verification", None)
+_vmeta = proof.pop("verification", None)
 canon = json.dumps(proof, sort_keys=True, separators=(",", ":")).encode()
-print("ok" if claims.get("receipt_sha256") == hashlib.sha256(canon).hexdigest()
-      else "bad")
+if claims.get("receipt_sha256") != hashlib.sha256(canon).hexdigest():
+    print("bad"); sys.exit(0)
+# seal.v2: the verification.* metadata (scope, algo, attestation_kid, ...) is
+# inside the signature; a token that signs different metadata is refused. A
+# legacy seal.v1 token still verifies (its metadata is simply unsigned).
+print("ok" if check_seal_meta(tok, claims, _vmeta)[0] != "bad" else "bad")
+PY
+}
+
+# Prints "legacy" when the receipt's attestation is a seal.v1 token (the
+# verification.* metadata is NOT inside the signature), else nothing. Callers
+# append "metadata not signed (legacy seal.v1)" to a VERIFIED line.
+loki_proof_seal_legacy() {
+    python3 -E - "$1" "${_LOKI_SCRIPT_DIR}" 2>/dev/null <<'PY' || true
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
+import json, sys
+sys.path.insert(0, sys.argv[2])
+from receipt_jwt import _b64url_decode
+try:
+    tok = json.load(open(sys.argv[1]))["verification"]["attestation"]
+    claims = json.loads(_b64url_decode(tok.split(".")[1]))
+    print("legacy" if "seal" not in claims else "")
+except Exception:
+    print("")
 PY
 }
 
@@ -37660,7 +37686,11 @@ print(json.dumps(json.load(open(os.environ['LOKI_PROOF_JSON'])), indent=2))
                 _pv_att="$(loki_proof_attestation_check "$pj" "$_pv_jwks")"
                 case "$_pv_att" in
                     ok)
-                        echo "attestation: VERIFIED against ${_pv_jwks}" >&2
+                        if [ "$(loki_proof_seal_legacy "$pj")" = "legacy" ]; then
+                            echo "attestation: VERIFIED against ${_pv_jwks} (metadata not signed (legacy seal.v1): scope, algo and attestation_kid are not covered by the signature)" >&2
+                        else
+                            echo "attestation: VERIFIED against ${_pv_jwks}" >&2
+                        fi
                         echo "  Proven: these bytes were signed by the holder of a key in that set." >&2
                         echo "  NOT proven: that the code is correct. A receipt records which checks ran." >&2
                         _pv_attestation_field="VERIFIED"

package/autonomy/receipt_jwt.py

@@ -265,8 +265,49 @@ def build_jwks(private_key=None, retired_public_keys=None) -> dict:
     return {"keys": keys}
 
 
+SEAL_V2 = "seal.v2"
+
+
+def seal_meta(verification, kid):
+    """The verification.* metadata a seal.v2 token signs.
+
+    Every key of `verification` except the token itself and attestation_kid
+    (which is replaced by the signing kid, so a forged kid can never match).
+    Any extra key a forger adds (for example gpg_signature) changes this dict
+    and so fails the comparison in check_seal_meta.
+    """
+    meta = {k: v for k, v in (verification or {}).items()
+            if k not in ("attestation", "attestation_kid")}
+    meta["attestation_kid"] = kid
+    return meta
+
+
+def check_seal_meta(token, claims, verification):
+    """Bind verification.* metadata to a verified token. Returns (status, why).
+
+    status is "v2" (metadata signed and matching), "legacy" (seal.v1 token: the
+    metadata is NOT signed, the caller must say so), or "bad" (a seal.v2 token
+    whose signed metadata differs from what the receipt now shows).
+    """
+    if not isinstance(claims, dict) or "seal" not in claims:
+        return "legacy", "metadata not signed (legacy seal.v1)"
+    if claims.get("seal") != SEAL_V2:
+        return "bad", "unknown seal version"
+    try:
+        kid = json.loads(_b64url_decode(token.split(".")[0])).get("kid", "")
+    except Exception:
+        return "bad", "malformed token"
+    if not isinstance(verification, dict):
+        return "bad", "verification block missing"
+    if verification.get("attestation_kid") != kid:
+        return "bad", "attestation_kid differs from the signing kid"
+    if claims.get("meta") != seal_meta(verification, kid):
+        return "bad", "verification metadata differs from the signed metadata"
+    return "v2", ""
+
+
 def sign_attestation(private_key, kid, *, job_id, run_id, receipt_hash,
-                     submitter="", issued_at=None, issuer=""):
+                     submitter="", issued_at=None, issuer="", verification=None):
     """Return a compact JWT binding a receipt hash to a job identity.
 
     The signed claims are what gpg could never carry: WHICH job produced this
@@ -294,6 +335,10 @@ def sign_attestation(private_key, kid, *, job_id, run_id, receipt_hash,
     # Optional claims are omitted rather than emitted empty: a present-but-blank
     # `sub` reads as "an anonymous submitter was recorded" instead of "no
     # submitter identity was available".
+    if verification is not None:
+        # seal.v2: the verification.* metadata is inside the signature.
+        payload["seal"] = SEAL_V2
+        payload["meta"] = seal_meta(verification, kid)
     if submitter:
         payload["sub"] = submitter
     if issuer:

package/autonomy/run.sh

@@ -5553,7 +5553,7 @@ except Exception:
 # prompt over IPC; it is left untouched here) explicitly to route around
 # this. The boundary is a CI job that holds
 # no write token and no SSH agent while the agent runs (see
-# .github/workflows/loki-issue-to-pr.yml).
+# docs/examples/loki-issue-to-pr.yml.example).
 #===============================================================================
 _LOKI_WITHHELD_TOKENS=""
 _LOKI_GIT_CONFIG_COUNT_UNSUPPORTED=""

package/autonomy/telemetry.sh

@@ -168,7 +168,7 @@ _loki_known_command() {
     case "${1:-}" in
         --help|--version|-h|-v|agent|analyze|api|assets\
         |audit|bench|checkpoint|ci|cleanup|cluster|cockpit|code\
-        |completions|compliance|compound|config|context|control|cost|council|cp\
+        |completion|completions|compliance|compound|config|context|control|cost|council|cp\
         |crash|ctx|dashboard|demo|deploy|docker|docs|doctor\
         |dogfood|enterprise|explain|export|failover|github|grill|handoff\
         |heal|help|import|init|internal|issue|kpis|logs\

package/autonomy/trigger-server.py

@@ -1069,6 +1069,7 @@ class WebhookHandler(http.server.BaseHTTPRequestHandler):
         token = sign_attestation(
             self.signing_key, self.signing_kid,
             job_id=job_id, run_id=run_id, receipt_hash=receipt_hash,
+            verification=verification,
         )
         if not token:
             return proof

package/bin/loki

@@ -115,6 +115,17 @@ else
     exec "$BASH_CLI" "$@"
 fi
 
+# Shell completions install themselves: once per VERSION, on the first interactive
+# run after an install or upgrade (stamp: ~/.loki/completions-version). Never needed
+# by the user; skipped under CI, LOKI_NO_COMPLETIONS=1 and non-TTY stdout. Failure
+# is silent and never blocks the command.
+if [ -t 1 ] && [ -z "${CI:-}" ] && [ "${LOKI_NO_COMPLETIONS:-}" != "1" ] \
+   && [ "${1:-}" != "completion" ] && [ "${1:-}" != "__complete" ] \
+   && [ "$(cat "${HOME}/.loki/completions-version" 2>/dev/null)" != "$(cat "$REPO_ROOT/VERSION" 2>/dev/null)" ] \
+   && command -v bun >/dev/null 2>&1; then
+    bun "$BUN_CLI" completion --auto </dev/null || true
+fi
+
 # v7.88.1 covert-path fix (council cF_r2 + cG_r2 sentinel edge): under on-by-default
 # diagnostics, NO telemetry may egress before the user has seen a disclosure once.
 # The cmd_start welcome only shows on `loki start`, so a first `loki version`/`doctor`
@@ -567,7 +578,7 @@ fi
 # Two-token routes (provider show/list, memory list/index) match on the first
 # token only; the Bun dispatcher handles subcommand routing internally.
 case "${1:-}" in
-    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis|trust|proof|receipt|wiki|crash|control|contract|slack|answer)
+    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis|trust|proof|receipt|wiki|crash|control|contract|slack|answer|completion|__complete)
         # v7.5.2: rollback added (wires loki-ts/src/commands/rollback.ts).
         # v7.5.3: internal added for autonomy/run.sh phase1-hooks calls.
         # v7.5.28: kpis added (Phase K MVP: read-only KPI snapshot).

package/bin/loki-postinstall.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+// npm postinstall: install shell completions. Must never fail the install.
+try {
+  const { spawnSync } = require("node:child_process");
+  const path = require("node:path");
+  if (!process.env.CI && process.env.LOKI_NO_COMPLETIONS !== "1") {
+    spawnSync(path.join(__dirname, "loki"), ["completion", "--postinstall"], { stdio: "ignore", timeout: 20000 });
+  }
+} catch (e) {
+  // ignore: completions are a convenience
+}
+process.exit(0);

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "10.9.1"
+__version__ = "10.10.1"
 
 # Expose the control app for easy import
 try:

package/docs/CLI-REFERENCE.md

@@ -0,0 +1,139 @@
+# CLI reference
+
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v10.10.1. Do not edit by hand.
+Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
+
+| Command | Description |
+| --- | --- |
+| `loki version` | Show version |
+| `loki status` | Show current run status |
+| `loki doctor` | System prerequisites health check |
+| `loki provider` | Show, list or set the AI provider |
+| `loki provider show` | Show current provider |
+| `loki provider list` | List providers and install status |
+| `loki provider set` | Switch the active provider |
+| `loki memory` | Cross-project learnings |
+| `loki memory list` | All learnings |
+| `loki memory index` | Show or rebuild the memory index |
+| `loki memory show` | Show one learning |
+| `loki memory search` | Search learnings |
+| `loki memory stats` | Memory statistics |
+| `loki memory consolidate` | Episodic-to-semantic pipeline |
+| `loki memory compound` | Compound learnings |
+| `loki rollback` | Restore .loki/ state from a checkpoint |
+| `loki rollback list` | List checkpoints |
+| `loki rollback show` | Show a checkpoint |
+| `loki rollback to` | Restore a checkpoint |
+| `loki rollback latest` | Restore the latest checkpoint |
+| `loki proof` (alias: `receipt`) | Inspect and share proof-of-run receipts |
+| `loki proof list` | List receipts |
+| `loki proof show` | Show a receipt |
+| `loki proof open` | Open a receipt |
+| `loki proof share` | Share a receipt |
+| `loki wiki` | Cited codebase wiki and Q&A |
+| `loki wiki generate` | Generate the wiki |
+| `loki wiki show` | Show a section |
+| `loki wiki ask` | Ask a question |
+| `loki control` | Control Plane (serve, backfill, prune, status) |
+| `loki control serve` | Run the control plane and UI |
+| `loki control backfill` | Ship DIR/.loki/runs to the control plane |
+| `loki control prune` | Delete matching runs |
+| `loki control status` | Show control plane reachability |
+| `loki kpis` | KPI snapshot (alias of report kpis) |
+| `loki report` | Reporting: kpis, session, metrics, cost, export, share, dogfood |
+| `loki report kpis` | Canonical KPI snapshot |
+| `loki report session` | Session report |
+| `loki report metrics` | Metrics report |
+| `loki report cost` | Cost report |
+| `loki report export` | Export session |
+| `loki report share` | Share a report |
+| `loki report dogfood` | Dogfood report |
+| `loki trust` | Trust trajectory from proof history |
+| `loki trust detail` | Trust metrics detail |
+| `loki crash` | Inspect or submit scrubbed crash reports |
+| `loki contract` | Print the spec delivery contract |
+| `loki start` | Run the autonomous build |
+| `loki slack` | Slack inbound handler |
+| `loki slack serve` | Serve the Slack handler |
+| `loki answer` | Resume a BLOCKED run with an answer |
+| `loki engine10` | v10 engine router |
+| `loki engine10 run` | Run the v10 engine |
+| `loki engine10 status` | v10 status |
+| `loki engine10 verify` | v10 verify |
+| `loki engine10 keys` | v10 keys |
+| `loki engine10 dashboard` | v10 dashboard |
+| `loki engine10 modernize` | v10 modernize |
+| `loki help` | Show help |
+| `loki quick` | One small task |
+| `loki quickstart` | Guided first build |
+| `loki init` | Scaffold from a template |
+| `loki template` | Manage PRD templates |
+| `loki verify` | Deterministic PR verification |
+| `loki keys` | Receipt-signing keys |
+| `loki keys export` | Print the public signing key (JWK) |
+| `loki review` | Standalone code review with quality gates |
+| `loki dashboard` | Operations UI server |
+| `loki dashboard start` | Start |
+| `loki dashboard stop` | Stop |
+| `loki dashboard status` | Status |
+| `loki dashboard url` | Print URL |
+| `loki dashboard open` | Open in browser |
+| `loki config` | Manage configuration |
+| `loki config show` | Show config |
+| `loki config init` | Create config |
+| `loki config edit` | Edit config |
+| `loki config path` | Print config path |
+| `loki config set` | Set a value |
+| `loki config get` | Get a value |
+| `loki mcp` | Launch the MCP server (stdio) |
+| `loki acp` | Run Loki as an ACP agent |
+| `loki stop` | Stop execution immediately |
+| `loki pause` | Pause after the current session |
+| `loki resume` | Resume a paused or interrupted run |
+| `loki why` | Explain how the last run ended |
+| `loki next` | Run the right next step |
+| `loki logs` | Tail recent log output |
+| `loki ship` | Ship the verified result |
+| `loki deploy` | Deploy the built product |
+| `loki import` | Import issues or specs |
+| `loki github` | GitHub integration |
+| `loki issue` | Work an issue |
+| `loki ci` | CI helpers |
+| `loki modernize` | Code modernization |
+| `loki share` | Share a run |
+| `loki assets` | Export team assets |
+| `loki assets export` | Export shareable assets |
+| `loki export` | Export session data |
+| `loki notify` | Notifications |
+| `loki tour` | See a sample result |
+| `loki welcome` | First-run opener |
+| `loki onboard` | Onboard to a codebase |
+| `loki setup-skill` | Install the skill symlinks |
+| `loki self-update` (alias: `self_update`, `update`) | Update Loki |
+| `loki remote` (alias: `rc`) | Remote session |
+| `loki cockpit` | Live multi-repo cockpit |
+| `loki code` | Code intelligence |
+| `loki context` (alias: `ctx`) | Cross-project context |
+| `loki secrets` | Secrets handling |
+| `loki api` | Dashboard HTTP API |
+| `loki sandbox` | Docker sandbox |
+| `loki docker` | Docker helpers |
+| `loki web` | Web UI |
+| `loki preview` | Preview the built app |
+| `loki telemetry` (alias: `otel`) | Telemetry controls |
+| `loki syslog` | System log forwarding |
+| `loki explain` | Explain code |
+| `loki docs` | Open docs |
+| `loki test` | Run project tests |
+| `loki bench` | Benchmarks |
+| `loki voice` | Voice input |
+| `loki own` (alias: `handoff`) | Hand off ownership |
+| `loki secure` | Security scan |
+| `loki compliance` | Compliance reports |
+| `loki enterprise` | Enterprise features |
+| `loki projects` | Project registry |
+| `loki audit` | Audit log |
+| `loki cost` | Cost report |
+| `loki metrics` | Metrics |
+| `loki sentrux` | Architecture sensor |
+| `loki magic` | Magic modules |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v10.9.1
+**Version:** v10.10.1
 
 **Engine note:** `loki "<task>"`, `loki owner/repo#N` and `loki quick` run the Loki 10 engine. `loki start` still routes to the legacy engine, which is being removed (planned work resumes 2026-10-07); prefer `loki owner/repo#N`. See [docs/v10/GUIDE.md](v10/GUIDE.md).
 

package/docs/LOKI-10-BUILD-PROMPT.md

@@ -150,7 +150,7 @@ Order is a default. Re-rank with data, and record why.
   - Decide whether the Seal replaces the Evidence Receipt or profiles it, and record the decision.
 - **M3. Assign it like a teammate (the Devin experience).**
   - Work arrives from:
-    - a GitHub issue label or `/loki` comment (exists: `.github/workflows/loki-issue-to-pr.yml`);
+    - a GitHub issue label or `/loki` comment (exists: `docs/examples/loki-issue-to-pr.yml.example`);
     - a GitLab equivalent;
     - Slack @loki (code exists under `src/integrations/slack/`; verify it is actually reachable, because v9.33.0 found unreachable integrations);
     - Jira (the read path works);
@@ -200,7 +200,7 @@ Order is a default. Re-rank with data, and record why.
     - it works behind a corporate proxy with SSO;
     - the only outbound traffic is to configured model endpoints.
     Measure install-to-first-sealed-PR in the adoption eval.
-  - Keep `provenance.yml` and `sbom.yml` green.
+  - Keep `sbom.yml` and the release.yml signing steps green.
 - **M10. Simplify and ship v10.0.0.**
   - Collapse the surface.
   - Remove deprecated commands and settings that measurement shows nobody needs.

package/docs/PLANS-INDEX.md

@@ -4,9 +4,8 @@ This index maps each historical plan doc to its status. Plan docs are kept as de
 
 | Plan | Status | Notes |
 |---|---|---|
-| BRANCH-LIFECYCLE-PLAN.md | shipped | Feature-branch-by-default + CI/CD-aware deploy; `feature_branch` logic in `autonomy/run.sh`. |
 | BUILD-HUD-PLAN.md | shipped | Live in-terminal build HUD; `LOKI_HUD` / `[HUD]` in `autonomy/run.sh`, CHANGELOG "Live in-terminal build HUD". |
-| CONFIG-FILE-PLAN.md | shipped | Unified config file; `--config` / `--vars` / `--env-file` flags in `autonomy/loki`. |
+| history/v8-config-plan.md | shipped | Unified config file; `--config` / `--vars` / `--env-file` flags in `autonomy/loki`. |
 | CRASH-REPORTING-PLAN.md | shipped | Crash-reporting + auto-fix; `cmd_crash()` in `autonomy/loki` (`loki crash`). |
 | DEPLOY-PLAN.md | shipped | `loki deploy` advisory print-only; CHANGELOG "`loki deploy`: advisory, print-only deploy guidance". |
 | FAILURE-MEMORY-PLAN.md | shipped | Failure-memory loop; `FailureMode` schema in `memory/schemas.py`. |
@@ -29,5 +28,5 @@ This index maps each historical plan doc to its status. Plan docs are kept as de
 | UNCERTAINTY-ESCALATION-PLAN.md | shipped | Uncertainty-gated escalation (v7.19.2); uncertainty escalation logic in `autonomy/run.sh`. |
 | VERIFIED-COMPLETION-PLAN.md | shipped | Verified completion (v7.19.1); verified-completion gate in `autonomy/run.sh` + `autonomy/completion-council.sh`. |
 | WELCOME-OPENER-PLAN.md | shipped | Welcome opener ("magic opener"); `welcome` path in `autonomy/loki`. |
-| V8-AGENT-SDK-PLAN.md | shipped | The v8 Anthropic SDK runtime migration; shipped on `feature/v8-agent-sdk` as v8.0.0 + v8.1 (`loki-ts/src/runner/sdk_invoker.ts`, `sdk_mode.ts`, CHANGELOG v8.0.0/v8.1). Feature-branch-only, not yet merged to main. |
+| history/v8-agent-sdk-plan.md | shipped | The v8 Anthropic SDK runtime migration; shipped on `feature/v8-agent-sdk` as v8.0.0 + v8.1 (`loki-ts/src/runner/sdk_invoker.ts`, `sdk_mode.ts`, CHANGELOG v8.0.0/v8.1). Feature-branch-only, not yet merged to main. |
 | V8-SDK-RESEARCH-RAW.md | shipped | Research notes underpinning V8-AGENT-SDK-PLAN; design history for the v8 SDK arc. |

package/docs/SLO.md

@@ -1,6 +1,6 @@
 # Service Level Objectives
 
-This document records baseline targets for the user-visible behavior of the CLI and the runner. These are honest first-pass targets. **No SLI/SLO infrastructure is shipped yet.** Tracking is manual, via the parity-drift workflow and soak-window observation.
+This document records baseline targets for the user-visible behavior of the CLI and the runner. These are honest first-pass targets. **No SLI/SLO infrastructure is shipped yet.** Tracking is manual, via soak-window observation.
 
 The targets below should be treated as goals, not contracts. They will be revised as measurement infrastructure is built out.
 
@@ -25,7 +25,7 @@ The targets below should be treated as goals, not contracts. They will be revise
 
 | Property | Target | Measurement |
 |----------|--------|-------------|
-| Byte-divergence between Bash and Bun routes for the ported commands | 0 divergences | `parity-drift.yml` workflow runs the Bun and Bash routes side by side; any non-empty diff fails the job |
+| Byte-divergence between Bash and Bun routes for the ported commands | 0 divergences | `tests/test-bash-bun-parity.sh` and the per-command parity suites (run on demand and in the Tests workflow) |
 
 The eight commands currently in scope: `version`, `status`, `stats`, `doctor`, `provider show`, `provider list`, `memory list`, `memory index`.
 
@@ -45,7 +45,7 @@ The reliability numbers above are explicitly aspirational. The system does not c
 
 ## Notes on measurement
 
-- The only continuous SLI shipping today is the parity-drift workflow.
+- There is no continuous parity SLI shipping today; parity is checked by test suites only.
 - Latency measurements are recorded in `.loki/metrics/migration_bench_soak.jsonl` when a benchmark run is performed; they are not collected continuously.
 - Reliability is tracked by manual review during the v7.3.0 soak window.
 

package/docs/alternative-installations.md

@@ -89,7 +89,7 @@ jobs:
 | `github_token` | (required) | GitHub token for PR comments |
 | `prd_file` | | Path to PRD file (for fix/test modes) |
 
-**Engine:** every mode runs the Loki 10 engine through `loki start "<task>" --no-pr --provider <name> --max-cost <usd>` (the same path as `loki start owner/repo#N`), with `LOKI_ENGINE=v10`. The PRD file or PR diff is folded into the task text. The action never opens a PR itself (Rule of Two). A run that crosses the cap ends BUDGET_STOP (exit 3). The legacy `--simple` path is no longer used.
+**Engine:** every mode runs the Loki 10 engine through `loki start "<task>" --no-pr --provider <name> --max-cost <usd>` (the same path as `loki start owner/repo#N`). The PRD file or PR diff is folded into the task text. The action never opens a PR itself (Rule of Two). A run that crosses the cap ends BUDGET_STOP (exit 3). The legacy `--simple` path is no longer used.
 
 **Modes:**
 

package/docs/bug-fixes/agent-04-memory-fixes.md

@@ -2,7 +2,7 @@
 
 ## Scope
 Comprehensive review and fix of all 16 Python modules in `memory/` (~10K lines).
-Addressed bugs from `docs/BUG-AUDIT-v6.61.0.md` plus newly discovered issues.
+Addressed bugs from `docs/history/v6.61.0-audit.md` plus newly discovered issues.
 
 ## Bugs Fixed
 

package/docs/dev/release-checklist.md

@@ -120,7 +120,7 @@ If any check fails, do not release; fix the root cause first.
 
 Stage files by name (never `git add -A` or `git add .`), commit with the
 repo-local `asklokesh` identity, no co-author. Batch approved merges locally;
-push once per train (`git push origin main`); wait for Tests, Bun Parity and
+push once per train (`git push origin main`); wait for Tests and
 Security Audit to go green on that exact SHA before bumping VERSION and
 releasing. GitHub Actions then creates the tag, the GitHub Release, publishes
 npm, builds/pushes Docker, and updates the Homebrew tap. Do not manually

package/{.github/workflows/loki-issue-to-pr.yml → docs/examples/loki-issue-to-pr.yml.example}

@@ -1,3 +1,5 @@
+# Example workflow for users: copy it to .github/workflows/loki-issue-to-pr.yml in your own repository.
+# It is not run by this repository CI.
 # Hand Loki an issue, get a pull request.
 #
 # Label an issue `loki` (or comment `/loki` as a repository owner, member or

package/docs/{ONE-RUN-AUDIT.md → history/one-run-audit.md}

@@ -1,3 +1,9 @@
+---
+date: 2026-09-14
+status: historical
+note: Historical record, last changed 2026-09-14. Superseded by Loki 10; kept for reference only.
+---
+
 # One-Run Completion Audit
 
 Empirical audit of whether ONE RUN completes the job today. Read against

package/docs/{BUG-AUDIT-v6.61.0.md → history/v6.61.0-audit.md}

@@ -1,3 +1,9 @@
+---
+date: 2026-03-22
+status: historical
+note: Historical record, last changed 2026-03-22. Superseded by Loki 10; kept for reference only.
+---
+
 # Loki Mode Bug Audit - v6.61.0
 Generated: 2026-03-22 by 20 parallel bug-hunting agents (16 initial + 4 final)
 

package/docs/{V8-AGENT-SDK-PLAN.md → history/v8-agent-sdk-plan.md}

@@ -1,3 +1,9 @@
+---
+date: 2026-07-14
+status: historical
+note: Historical record, last changed 2026-07-14. Superseded by Loki 10; kept for reference only.
+---
+
 # V8: SDK-Based Runtime Migration Plan
 
 Status: IMPLEMENTED (shipped on feature/v8-agent-sdk as v8.0.0 + v8.1; kept as design history)

package/docs/{CONFIG-FILE-PLAN.md → history/v8-config-plan.md}

@@ -1,3 +1,9 @@
+---
+date: 2026-06-19
+status: historical
+note: Historical record, last changed 2026-06-19. Superseded by Loki 10; kept for reference only.
+---
+
 # Unified Config-File Plan (FEAT-CONFIG, task #691)
 
 Status: design for implementation. Build target: POST-v7.73.0 main (the v7.73.0