loki-mode 11.17.15 → 11.17.16

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.15
+# Loki Mode v11.17.16
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.15 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.16 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.15
+11.17.16

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.15"
+__version__ = "11.17.16"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.15. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.16. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.15
+**Version:** v11.17.16
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/BOARD.md

@@ -1076,8 +1076,8 @@ Source: ~/git/autonomi-dev/research/2026-09-30-adoption/SWARM-PROMPT-ADOPTION.md
 | TEN-COST-17 | Raw token classes in the Claude Code ledger | C-F1 harness ledger, test_model_pin.py | HIGH | pytest test_model_pin.py | merged@2026-10-17T03:30Z | HIGH r2 APPROVE 232f1fbec |
 | TEN-RELEASE-INSTANT | Every release publishes npm latest and next immediately (D102) | .github/workflows/release.yml, promote.yml removed | HIGH | see note | merged@2026-10-17T03:30Z | HIGH r3 APPROVE 7e0e38c77; D98 round-limit exception recorded under D99 |
 | TEN-GATES-05b | Spec-derived auth probe: negation window fixes | autonomy/lib/functional-verify.py, tests/test_functional_verify.py | HIGH | pytest tests/test_functional_verify.py | building@2026-10-17T03:30Z | HIGH r2 BLOCK aaf27e569: trailing-slash redirect false green, curly apostrophe and article negation false reds; r3 under D99 |
-| TEN-RELEASE-INSTANT-F1 | Empty CUR from a failed npm view fails closed; rename the stale publish step | .github/workflows/release.yml | LOW | see note | ready@2026-10-17T03:30Z | follow-up from RELEASE-INSTANT review |
-| TEN-COST-18-F1 | cost_claim: a non-object JSON row is skipped, not an AttributeError | C-F1 harness cost_claim | LOW | see note | ready@2026-10-17T03:30Z | follow-up |
+| TEN-RELEASE-INSTANT-F1 | Empty CUR from a failed npm view fails closed; rename the stale publish step | .github/workflows/release.yml | LOW | see note | merged@2026-10-17T03:45Z | TL APPROVE 29ca496f1, ships v11.17.16 |
+| TEN-COST-18-F1 | cost_claim: a non-object JSON row is skipped, not an AttributeError | C-F1 harness cost_claim | LOW | see note | merged@2026-10-17T03:45Z | TL APPROVE 924cec1c8, ships v11.17.16 |
 | TEN-GROUP-AUTH-F1 | kpis iteration_count does not count group cost records | loki-ts kpis | LOW | see note | ready@2026-10-17T03:30Z | follow-up |
 | TEN-COST-09 | Skip a Wall that cannot run | engine10 wall stage | HIGH | see note | ready@2026-10-17T03:30Z | architect cost plan |
 | TEN-COST-10 | Plan on haiku for small and normal tasks | engine10 plan stage | MEDIUM | see note | ready@2026-10-17T03:30Z | architect cost plan |

package/docs/v10/FAILURE-CLASSES.md

@@ -990,3 +990,10 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Siblings: run_group.ts ENV_KEEP (broken); commands/start.ts START_ENV_NAMES and util/skill_checks.ts SKILL_CHECK_ENV_ALLOW already keep USER, LOGNAME, SHELL; features/speed/fix_units.ts suiteTail (the group's fix-unit suite run) was a fourth allowlist and now keeps the same three vars; a git grep of env allowlists in loki-ts/src found no other. The remaining child-env helpers copy the full env and remove named secrets, so they never dropped identity.
 - Mechanism: ENV_KEEP in run_group.ts gains USER, LOGNAME, SHELL; parseGroupCost and groupCostLine sum the per-unit cost rows of every backlog.py launch and print one measured, partial or not-measured `Cost:` line like a single run, and writeGroupCostRecord rolls the sum into the parent .loki/metrics/efficiency so collect_efficiency, receipts and the bench read it. parseGroupCost ignores output with no Summary table. No shared base list: the allowlists differ in everything but the identity trio, so a shared list would not remove the copies.
 - Fixture: tests/features/run_group_env_cost.test.ts (scopedEnv keeps USER and LOGNAME and drops an unrelated secret; group cost equals the sum of unit costs, unmeasured rows read partial, none reads not measured; a runGroup test with a fake launcher asserts the Cost line and the efficiency record); tests/runner/spawn_env_guard.test.ts stays green.
+
+## FC-BUNDLE-SDK-LEAK A server bundle pulls loki-ts SDK code through a one-constant import (v11.17.14)
+- User-visible vs raw: v11.17.14 never reached npm and the 11.17.15 docker images failed to build; raw was `Could not resolve: "@anthropic-ai/sdk"` while bundling packages/control-plane src/server/serve.ts.
+- Law broken: a module imported by the control-plane server must not reach runner code that needs loki-ts runtime deps; a shared constant lives in a leaf module.
+- Siblings: deep.ts was the only engine10 stage importing runner/quality_gates.ts (git grep); xreview.ts already imports providers/claude_flags.ts. pack-npm also lacked a loki-ts install, fixed in 386e73f32.
+- Mechanism: REVIEW_GUARD_DENYLIST moves to providers/claude_flags.ts; quality_gates.ts re-exports it; deep.ts imports the leaf.
+- Fixture: tests/test-control-plane.sh builds serve.ts with a metafile and fails if runner/sdk_invoker appears (red with the old import: 3 hits; green: 0).

package/docs/v10/PROGRESS.md

@@ -2412,3 +2412,4 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - 2026-10-17T02:30Z v11.17.13: v11.17.12 (42315dc52) Tests red on one stale assertion in tests/test_cost_summary.py (1 failed, 3825 passed on Python 3.10 and 3.13), so Release skipped publish; fix-forward f5b1d1681. First v11.17.13 bump refused on 2 red global guard rows (l0 allowlist after CORE-TRIM, completions coverage newly promoted by STABILITY-04), fixed 6f2355aa7. TEN-UX-02b merged 672b74c79; TEN-DEPLOY-01b conflicts with DEPLOY-01, back to ready. Ships v11.17.12 content plus Q18-07, Q18-11, Q17-02, Q18-03d and 12 TEN wave 1 rows (DEPLOY-01, UX-02, COST-02, COST-03, STABILITY-01/04/05/08, FC-ROWS, CORE-TRIM, SECURE-SCAN-UTIL, BADGE-UTIL), each with a TL or HIGH APPROVE. Batches E, F, G and Q18-04/Q18-02b r2 building.
 - 2026-10-17T03:00Z v11.17.14: v11.17.13 published (Release run success on 850b7f67c, npm next 11.17.13); 19 rows marked released (Q18-03c was parked, superseded by Q18-03d). Ships Q18-04 and Q18-02b (HIGH r2 APPROVE 3fa77dc4e, 9482dbe62), TEN-QUALITY-02 and TEN-GATES-01 (HIGH r2 APPROVE 05cafda44, 10be1a1bd), QUALITY-04, QUALITY-06, QUALITY-09, COST-05, COST-07, STABILITY-06, and batch H (GATES-09, UX-06, ADOPTION-05, DEPLOY-07; TL APPROVE). First bump refused on the sigpipe ratchet (1730 > 1728) from STABILITY-06 pulse tests; fixed 053e28991. Batch J (QUALITY-03, GATES-03, ADOPTION-03, GATES-08, ADOPTION-04, UX-07) building. Founder directive 2026-10-17: every release publishes npm latest and next immediately with no test gating; TEN-RELEASE-INSTANT building with HIGH review. C-F1 cost proof running locally on Claude Code. Later merged into this release: ADOPTION-02, DEPLOY-01b, QUALITY-07, COST-06, GROUP-AUTH, COST-17, COST-18, COST-20, RELEASE-INSTANT (HIGH r3 under D99). Bump retries: sigpipe ratchet fixed 54b716856; structural-checks timed out at load 29 and passed alone (25 passed). GATES-05 parked, re-sliced as GATES-05b (r2 BLOCK, r3 dispatched); STABILITY-02 superseded; COST-22 rejected (false premise).
 - 2026-10-17T03:40Z v11.17.15: v11.17.14 (624c12346) pushed but Release run 38998897240 failed in pack-npm (control-plane server bundle could not resolve @anthropic-ai/sdk; pack-npm had no loki-ts install). Fix 386e73f32 adds the install step; v11.17.15 ships it plus all v11.17.14 content (first release through the TEN-RELEASE-INSTANT path). Guard rows skipped on this bump (LOKI_RELEASE_SKIP_GUARDS=1, D99 velocity); workflow-no-masked-failures and release-gate-dedup (12 passed) run by hand. Batch L building: GATES-05b r3, COST-09, COST-10, COST-12, COST-13, COST-23.
+- 2026-10-17T03:45Z v11.17.16: v11.17.15 published (Release 38999077422: "+ loki-mode@11.17.15" and "+latest: loki-mode@11.17.15", first latest move through TEN-RELEASE-INSTANT) but docker publish failed: deep.ts pulled runner/sdk_invoker into the control-plane bundle. Fix cd5aa32a8 (FC-BUNDLE-SDK-LEAK, control-plane 530 pass, guard red 3 to green 0) plus RELEASE-INSTANT-F1 (TL APPROVE 29ca496f1) and COST-18-F1 (TL APPROVE 924cec1c8).