loki-mode 11.17.24 → 11.17.26

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.24
+# Loki Mode v11.17.26
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.24 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.26 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.24
+11.17.26

package/autonomy/lib/secure-scan.py

@@ -114,10 +114,14 @@ _SECRET_PATTERNS = [
     ("openai-key", re.compile(r"\bsk-[A-Za-z0-9_-]{20,}\b")),
     # GitHub personal access token (classic): ghp_ + 36 chars
     ("github-pat", re.compile(r"\bghp_[A-Za-z0-9]{36}\b")),
+    # GitHub OAuth / server / user-to-server tokens and fine-grained PATs
+    ("github-token", re.compile(r"\b(?:gh[osu]_[A-Za-z0-9]{36}|github_pat_[A-Za-z0-9_]{22,})\b")),
+    # Anthropic API key
+    ("anthropic-key", re.compile(r"\bsk-ant-[A-Za-z0-9_-]{16,}")),
     # Google API key: AIza + 35 url-safe chars
     ("google-api-key", re.compile(r"\bAIza[0-9A-Za-z_-]{35}\b")),
     # Slack bot token: xoxb- + token body
-    ("slack-bot-token", re.compile(r"\bxoxb-[0-9A-Za-z-]{10,}\b")),
+    ("slack-token", re.compile(r"\bxox[baprs]-[0-9A-Za-z-]{10,}\b")),
 ]
 
 # Placeholder / example markers. If the matched secret (or its surrounding
@@ -427,7 +431,7 @@ def _finding(rule, rel_path, line, severity, message, fix):
     }
 
 
-def _scan_file(rel_path, lines):
+def _scan_file(rel_path, lines, secrets_everywhere=False):
     """Return a list of findings for one file. `lines` is [(lineno, text), ...]."""
     findings = []
     browser_served = _is_browser_served(rel_path)
@@ -457,7 +461,10 @@ def _scan_file(rel_path, lines):
             ))
 
         # --- rule 2: secret literal in a browser-served file -------------
-        if browser_served:
+        # secrets_everywhere (opt-in, used by the proof-share redaction scan)
+        # applies the same token rule to every text file: a share bundle has no
+        # browser/server split, so any token in it is a leak.
+        if browser_served or secrets_everywhere:
             for kind, pat in _SECRET_PATTERNS:
                 for m in pat.finditer(text):
                     secret = m.group(0)
@@ -590,7 +597,7 @@ def _scan_file(rel_path, lines):
 # scan driver
 # ---------------------------------------------------------------------------
 
-def scan(target_dir):
+def scan(target_dir, secrets_everywhere=False):
     """Scan target_dir and return the result dict.
 
     Raises ValueError if target_dir is not a readable directory (the CLI maps
@@ -603,7 +610,7 @@ def scan(target_dir):
         lines = _read_lines(abs_path)
         if lines is None:
             continue
-        findings.extend(_scan_file(rel_path, lines))
+        findings.extend(_scan_file(rel_path, lines, secrets_everywhere))
 
     # deterministic ordering: by file, then line, then rule
     findings.sort(key=lambda f: (f["file"], f["line"], f["rule"]))
@@ -630,14 +637,15 @@ def _cli(argv=None):
     argv = list(sys.argv[1:] if argv is None else argv)
     # --json is accepted for symmetry with the other shims; output is always
     # JSON, so the flag is a no-op kept for a stable, predictable interface.
-    args = [a for a in argv if a != "--json"]
+    everywhere = "--secrets-everywhere" in argv
+    args = [a for a in argv if a not in ("--json", "--secrets-everywhere")]
     if not args or argv[0] in ("-h", "--help"):
         print(json.dumps(
-            {"error": "usage: secure-scan.py <target_dir> [--json]"}))
+            {"error": "usage: secure-scan.py <target_dir> [--json] [--secrets-everywhere]"}))
         return 2
     target_dir = args[0]
     try:
-        result = scan(target_dir)
+        result = scan(target_dir, everywhere)
     except ValueError as exc:
         print(json.dumps({"error": str(exc)}))
         return 2

package/autonomy/loki

@@ -1895,6 +1895,7 @@ show_help_all() {
     echo "  --no-dashboard   Disable web dashboard"
     echo "  --isolation LVL  Per-run isolation dial: none (default) | worktree | docker"
     echo "  --skip-memory    Skip loading memory context at startup"
+    echo "  --cost PROFILE   Opt-in cost profile: lean sets LOKI_ROUTER=1 and LOKI_E10_TRIM=1 unless already set (also LOKI_COST_PROFILE)"
     echo "  --spec FILE      Run against an edited spec (written by 'loki plan <task> --spec'; see also --spec-first)"
     echo "  --fresh-prd      Regenerate the PRD from the codebase (no-PRD runs; ignores the reusable generated PRD)"
     echo "  --compliance PRESET  Enable compliance mode (default|healthcare|fintech|government)"
@@ -2577,7 +2578,7 @@ _loki_start_handoff() {
 _loki_start_flag_kind() {
     _LOKI_START_FLAG_KIND=""
     case "${1%%=*}" in
-        --provider|--brief|--budget|--prd|--issue|--isolation|--aider-model|--aider-flags|--cline-model|--compliance|--max-duration|--log-level|--bmad-project|--openspec|--mirofish-rounds|--mirofish-timeout|--output|--config|--vars|--env-file|--remote|--attempts|--mirofish-docker) _LOKI_START_FLAG_KIND=value ;;
+        --provider|--brief|--budget|--cost|--prd|--issue|--isolation|--aider-model|--aider-flags|--cline-model|--compliance|--max-duration|--log-level|--bmad-project|--openspec|--mirofish-rounds|--mirofish-timeout|--output|--config|--vars|--env-file|--remote|--attempts|--mirofish-docker) _LOKI_START_FLAG_KIND=value ;;
         --mirofish) _LOKI_START_FLAG_KIND=optional ;;
         --parallel|--allow-haiku|--regen-prd|--regenerate-prd|--regen|--fresh-prd|--bg|--background|--simple|--complex|--github|--no-dashboard|--api|--sandbox|--skip-memory|--yes|-y|--quiet|--mirofish-bg|--no-mirofish|--no-plan|--fast|--repo-fast|--full|--repo-full|--dry-run|--no-start|--worktree|-w|--pr|--prepare-pr|--ship|--detach|-d|--help|-h|--resume|--) _LOKI_START_FLAG_KIND=bool ;;
         *) return 1 ;;
@@ -2819,6 +2820,7 @@ cmd_start() {
                 echo "                        --regenerate-prd, --regen, or LOKI_PRD_REGEN=1)"
                 echo "  --compliance PRESET   Enable compliance mode (default|healthcare|fintech|government)"
                 echo "  --budget USD          Per-run cost cap (default $(loki_budget_default_usd); auto-pause when exceeded)"
+                echo "  --cost PROFILE        Opt-in cost profile: lean (LOKI_ROUTER=1, LOKI_E10_TRIM=1 unless already set) or off"
                 echo "  --bmad-project PATH   Use BMAD Method project artifacts as input"
                 echo "  --openspec PATH       Use OpenSpec change directory as input"
                 echo "  --mirofish [URL]      Enable MiroFish market validation (default: localhost:5001)"
@@ -3282,6 +3284,17 @@ cmd_start() {
                 export LOKI_BUDGET_LIMIT="$budget_val" LOKI_BUDGET_SOURCE=flag
                 shift
                 ;;
+            # TEN-COST-01: opt-in cost profile; fills only unset levers (explicit env wins).
+            --cost|--cost=*)
+                if [[ "$1" == --cost=* ]]; then _cost_val="${1#*=}"; _cost_n=1; else _cost_val="${2:-}"; _cost_n=2; fi
+                case "$_cost_val" in
+                    lean) : "${LOKI_ROUTER:=1}" "${LOKI_E10_TRIM:=1}"; export LOKI_ROUTER LOKI_E10_TRIM LOKI_COST_PROFILE=lean
+                          echo "cost profile lean: LOKI_ROUTER=$LOKI_ROUTER LOKI_E10_TRIM=$LOKI_E10_TRIM" ;;
+                    off) ;;
+                    *) echo -e "${RED}--cost must be lean or off${NC}" >&2; exit 2 ;;
+                esac
+                shift "$_cost_n"
+                ;;
             # v6.84.0: explicit mode flags (override auto-detection)
             --prd)
                 if [[ -n "${2:-}" ]] && [[ "${2:-}" != --* ]]; then
@@ -18707,7 +18720,7 @@ cmd_verify() {
     # verified by the engine10 verifier directly; bin/loki sends a bare verify back here.
     for _pk_arg in "$@"; do
         case "$_pk_arg" in
-            --sign-deploy|--receipt|composite.json|*/composite.json|--seal-composite|--seal-composite=*|--max-age|--max-age=*|.loki/groups/*/receipt.json|*/.loki/groups/*/receipt.json)
+            --sign-deploy|--sign-provenance|--url|--receipt|composite.json|*/composite.json|--seal-composite|--seal-composite=*|--max-age|--max-age=*|.loki/groups/*/receipt.json|*/.loki/groups/*/receipt.json)
                 _loki_bun_delegate engine10 verify "$@"
                 return $? ;;
             # A signed deploy record (.loki/deploys/*.json, schema loki.deploy/1) is re-checked by the same verifier.

package/completions/_loki

@@ -185,6 +185,9 @@ function _loki {
                     _arguments \
                         '--pubkey[Check against this public key only]:key file:_files' \
                         '--sign-deploy[Sign a loki.deploy/1 deploy record in place]:record:_files' \
+                        '--sign-provenance[Sign a loki.provenance/1 doc in place]:doc:_files' \
+                        '--url[Verify the live provenance doc served at URL]:url:' \
+                        '--expect-sha[Require the provenance head_sha to equal SHA]:sha:' \
                         '--receipt[Cited receipt file for a deploy record]:receipt:_files' \
                         '--max-age[Reject a receipt older than DUR]:duration:' \
                         '--require-exogenous[Exit 4 when a VERIFIED receipt has no agent-independent passing check]' \
@@ -369,6 +372,7 @@ function _loki_start {
         '--yes[Skip confirmation prompts]' \
         '-y[Skip confirmation prompts]' \
         '--budget[Cost budget limit in USD]:amount:' \
+        '--cost[Opt-in cost profile]:profile:(lean off)' \
         '--model[Model or route override]:model:' \
         '--max-cost[Spend cap in USD]:amount:' \
         '--no-pr[Build and verify without opening a pull request]' \

package/completions/loki.bash

@@ -28,7 +28,7 @@ _loki_completion() {
             # If the word starts with a dash, show flags
             # Rule: list every flag bin/loki routes (Bun/engine10 ones such as --model, --max-cost, --spec, --no-pr too), not only cmd_start's own.
             if [[ "$cur" == -* ]]; then
-                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --spec --spec-first --yes --budget --attempts --model --isolation --max-cost --no-pr --explain-route --brief --worktree --pr --ship --detach --workspace --deploy --health-url --auto-rollback --resume --help"
+                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --cost --spec --spec-first --yes --budget --attempts --model --isolation --max-cost --no-pr --explain-route --brief --worktree --pr --ship --detach --workspace --deploy --health-url --auto-rollback --resume --help"
                 COMPREPLY=( $(compgen -W "${flags}" -- "$cur") )
                 return 0
             fi
@@ -157,7 +157,7 @@ _loki_completion() {
 
         verify)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --max-age --hosted --seal-composite --sign-deploy --receipt --pubkey --require-exogenous --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--base --out --block-on --no-llm --json --explain --check-fresh --max-age --hosted --seal-composite --sign-deploy --sign-provenance --url --expect-sha --receipt --pubkey --require-exogenous --help" -- "$cur") )
                 return 0
             fi
             ;;

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.24"
+__version__ = "11.17.26"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.24. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.26. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |
@@ -37,6 +37,9 @@ Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for th
 | `loki proof show` | Show a receipt |
 | `loki proof open` | Open a receipt |
 | `loki proof share` | Share a receipt |
+| `loki proof badge` | Print the Verified by Loki badge |
+| `loki proof md` | Print badge markdown for a README |
+| `loki proof bundle` | Write a self-verifying receipt bundle |
 | `loki wiki` | Cited codebase wiki and Q&A |
 | `loki wiki generate` | Generate the wiki |
 | `loki wiki show` | Show a section |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.24
+**Version:** v11.17.26
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/SIGNED-RECEIPTS.md

@@ -46,6 +46,18 @@ rolled-back service answered again (`post_rollback_health`: `healthy`,
 With `--health-match STR` the probe body must contain STR, and the record stores
 `health_match` and the deployed `tree_sha`.
 
+## Live provenance doc (loki.provenance/1)
+
+`loki verify --sign-provenance FILE` signs a JSON file holding `head_sha`,
+`tree_sha`, `receipt_sha256`, `run_id` and `built_at` in place, with the same
+Ed25519 key as a deploy record. Serve the result at
+`/.well-known/loki-provenance.json`. `loki verify --url https://host
+[--pubkey FILE] [--receipt FILE] [--expect-sha SHA]` fetches it (5s timeout,
+64KB cap, no redirects) and exits 0 VERIFIED only when the signature verifies
+and any cited receipt found locally or via `--receipt` is VERIFIED. An edited
+doc or a wrong `--expect-sha` is TAMPERED (1). A fetch failure, a non-200, a
+non-JSON or oversize body, or an unknown kid is UNCHECKED (2), never VERIFIED.
+
 ## Honest limits
 
 - A signature proves **provenance and integrity**, not correctness. The