loki-mode 11.17.28 → 11.17.30

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.28
+# Loki Mode v11.17.30
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.28 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.30 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.28
+11.17.30

package/autonomy/lib/ablation.py

@@ -0,0 +1,438 @@
+#!/usr/bin/env python3
+"""Load-bearing ablation producer (moat P8, S-113).
+
+Answers one question for the proof: do the recorded acceptance checks actually
+exercise the change? Every changed or added code unit in a non-test source file
+is replaced with a no-op, the recorded check command is re-run, and the working
+tree is restored byte-for-byte (content, mode and mtime).
+
+    python3 autonomy/lib/ablation.py --repo <dir> --base <sha> --loki-dir <dir>/.loki
+
+Reads   <loki-dir>/quality/test-results.json ("command", "exit_code").
+Writes  <loki-dir>/quality/ablation.json:
+    {"status": "load_bearing" | "not_load_bearing" | "not_applicable",
+     "reason": "<non-empty text>",
+     "command": "<command re-run>",
+     "ablated_files": ["<path>", ...],
+     "ablated_exit_code": <int or null>}
+
+The consumer is proof-generator.py (_collect_ablation copies the record into
+facts.ablation; _compute_headline refuses VERIFIED on not_load_bearing).
+
+Deterministic, no network, no model call. Exit 0 whenever a status was
+recorded; exit 2 on bad arguments or when the record cannot be written.
+
+A code unit is a Python function or method (ast). A unit is changed when a
+changed line falls in its own lines (lines of nested functions count for the
+nested unit only). Changed code in other languages records not_applicable with
+the reason naming the files, never a guessed verdict.
+"""
+
+import argparse
+import ast
+import fnmatch
+import json
+import os
+import re
+import shlex
+import signal
+import subprocess
+import sys
+
+STATUS_LOAD_BEARING = "load_bearing"
+STATUS_NOT_LOAD_BEARING = "not_load_bearing"
+STATUS_NOT_APPLICABLE = "not_applicable"
+
+# Extensions treated as source code. Anything else (docs, config, data) is not
+# code, so a change touching only those is not_applicable.
+CODE_EXTENSIONS = {
+    ".py", ".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".go", ".rs", ".java",
+    ".kt", ".rb", ".php", ".cs", ".c", ".cc", ".cpp", ".h", ".hpp", ".swift",
+    ".scala", ".sh", ".bash",
+}
+SUPPORTED_EXTENSIONS = {".py"}
+
+TEST_DIR_NAMES = {"test", "tests", "__tests__", "spec", "specs", "e2e"}
+TEST_FILE_GLOBS = (
+    "test_*", "*_test.*", "*.test.*", "*.spec.*", "*_spec.*", "conftest.py",
+)
+
+DEFAULT_TIMEOUT_SEC = 600
+
+
+def _git(repo, *args):
+    proc = subprocess.run(
+        ["git", "-C", repo] + list(args),
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        check=False,
+    )
+    if proc.returncode != 0:
+        raise RuntimeError(
+            "git %s failed: %s"
+            % (" ".join(args[:2]), proc.stderr.decode("utf-8", "replace").strip())
+        )
+    return proc.stdout.decode("utf-8", "replace")
+
+
+def changed_files(repo, base):
+    """Paths changed since base: committed, staged, unstaged and untracked."""
+    tracked = _git(repo, "diff", "--name-only", "--diff-filter=AMR", base, "--")
+    untracked = _git(repo, "ls-files", "--others", "--exclude-standard")
+    out = []
+    for line in (tracked + "\n" + untracked).splitlines():
+        p = line.strip()
+        if not p or p in out:
+            continue
+        if p == ".loki" or p.startswith(".loki/"):
+            continue
+        out.append(p)
+    return out
+
+
+def untracked_files(repo):
+    return set(
+        p.strip()
+        for p in _git(repo, "ls-files", "--others", "--exclude-standard").splitlines()
+        if p.strip()
+    )
+
+
+_HUNK_RE = re.compile(r"^@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@")
+
+
+def changed_lines(repo, base, path, is_untracked):
+    """Set of 1-based line numbers in the working-tree file that are new or
+    changed relative to base. None means every line (an added file)."""
+    if is_untracked:
+        return None
+    diff = _git(repo, "diff", "-U0", "--no-color", base, "--", path)
+    if not diff.strip():
+        return set()
+    lines = set()
+    saw_hunk = False
+    for line in diff.splitlines():
+        m = _HUNK_RE.match(line)
+        if not m:
+            if line.startswith("new file mode"):
+                return None
+            continue
+        saw_hunk = True
+        start = int(m.group(1))
+        count = int(m.group(2)) if m.group(2) is not None else 1
+        if count == 0:
+            # Pure deletion: the line after the cut belongs to the edited unit.
+            lines.add(max(start, 1))
+            lines.add(start + 1)
+        else:
+            lines.update(range(start, start + count))
+    return lines if saw_hunk else set()
+
+
+def command_paths(repo, command):
+    """Repo-relative files the check command names directly (the check
+    scripts themselves are never ablated)."""
+    try:
+        tokens = shlex.split(command or "")
+    except ValueError:
+        tokens = (command or "").split()
+    out = set()
+    for tok in tokens:
+        if not tok or tok.startswith("-"):
+            continue
+        cand = os.path.normpath(os.path.join(repo, tok))
+        if os.path.isfile(cand):
+            out.add(os.path.relpath(cand, repo))
+    return out
+
+
+def is_test_path(path, check_paths):
+    norm = os.path.normpath(path)
+    if norm in check_paths:
+        return True
+    parts = norm.split(os.sep)
+    if any(p in TEST_DIR_NAMES for p in parts[:-1]):
+        return True
+    name = parts[-1]
+    return any(fnmatch.fnmatch(name, g) for g in TEST_FILE_GLOBS)
+
+
+def _function_nodes(tree):
+    """(node, parent_function_or_None) for every function in the module."""
+    out = []
+
+    def walk(node, parent_fn):
+        for child in ast.iter_child_nodes(node):
+            if isinstance(child, (ast.FunctionDef, ast.AsyncFunctionDef)):
+                out.append((child, parent_fn))
+                walk(child, child)
+            else:
+                walk(child, parent_fn)
+
+    walk(tree, None)
+    return out
+
+
+def select_units(source, lines):
+    """Function nodes to no-op. lines=None selects every function."""
+    tree = ast.parse(source)
+    funcs = _function_nodes(tree)
+    if lines is None:
+        chosen = [n for n, _ in funcs]
+    else:
+        chosen = []
+        for node, _ in funcs:
+            start = min([node.lineno] + [d.lineno for d in node.decorator_list])
+            own = set(range(start, node.end_lineno + 1))
+            for other, parent in funcs:
+                if parent is node:
+                    own -= set(range(other.lineno, other.end_lineno + 1))
+            if own & lines:
+                chosen.append(node)
+    # A unit nested inside another chosen unit is already gone with its parent.
+    chosen_ids = set(id(n) for n in chosen)
+    parent_of = dict((id(n), p) for n, p in funcs)
+    top = []
+    for n in chosen:
+        p = parent_of.get(id(n))
+        nested = False
+        while p is not None:
+            if id(p) in chosen_ids:
+                nested = True
+                break
+            p = parent_of.get(id(p))
+        if not nested:
+            top.append(n)
+    return top
+
+
+def ablate_source(source, units):
+    """Return source with each unit's body replaced by `return None`."""
+    lines = source.splitlines(keepends=True)
+    # Character offsets per line so (lineno, col) maps into the text. ast
+    # col_offset is in UTF-8 bytes, so slice each line as bytes.
+    spans = []
+    for node in units:
+        first, last = node.body[0], node.body[-1]
+        spans.append((first.lineno, first.col_offset, last.end_lineno, last.end_col_offset))
+    spans.sort(reverse=True)
+    blines = [ln.encode("utf-8") for ln in lines]
+    for sl, sc, el, ec in spans:
+        head = blines[sl - 1][:sc]
+        tail = blines[el - 1][ec:]
+        blines[sl - 1:el] = [head + b"return None" + tail]
+    return b"".join(blines).decode("utf-8")
+
+
+def _record(loki_dir, status, reason, command, ablated_files, exit_code):
+    rec = {
+        "status": status,
+        "reason": reason,
+        "command": command or "",
+        "ablated_files": list(ablated_files),
+        "ablated_exit_code": exit_code,
+    }
+    qdir = os.path.join(loki_dir, "quality")
+    os.makedirs(qdir, exist_ok=True)
+    path = os.path.join(qdir, "ablation.json")
+    tmp = path + ".tmp"
+    with open(tmp, "w", encoding="utf-8") as f:
+        json.dump(rec, f, indent=2, sort_keys=True)
+        f.write("\n")
+    os.replace(tmp, path)
+    return rec
+
+
+def _read_tests(loki_dir):
+    try:
+        with open(os.path.join(loki_dir, "quality", "test-results.json"), encoding="utf-8") as f:
+            raw = json.load(f)
+    except (OSError, ValueError):
+        return None
+    return raw if isinstance(raw, dict) else None
+
+
+class _Snapshot(object):
+    """Exact bytes, mode and mtime of each file, restored in restore()."""
+
+    def __init__(self):
+        self.saved = {}
+
+    def save(self, path):
+        st = os.stat(path)
+        with open(path, "rb") as f:
+            self.saved[path] = (f.read(), st.st_mode, st.st_atime_ns, st.st_mtime_ns)
+
+    def restore(self):
+        errors = []
+        for path, (data, mode, atime, mtime) in self.saved.items():
+            try:
+                with open(path, "wb") as f:
+                    f.write(data)
+                os.chmod(path, mode & 0o7777)
+                os.utime(path, ns=(atime, mtime))
+            except OSError as e:
+                errors.append("%s: %s" % (path, e))
+        return errors
+
+
+def _run_command(repo, command, timeout):
+    env = dict(os.environ)
+    # The re-run must not leave bytecode for the ablated sources behind.
+    env["PYTHONDONTWRITEBYTECODE"] = "1"
+    proc = subprocess.Popen(
+        command,
+        shell=True,
+        cwd=repo,
+        env=env,
+        stdin=subprocess.DEVNULL,
+        stdout=subprocess.DEVNULL,
+        stderr=subprocess.DEVNULL,
+        start_new_session=True,
+    )
+    try:
+        return proc.wait(timeout=timeout), False
+    except subprocess.TimeoutExpired:
+        try:
+            os.killpg(proc.pid, signal.SIGKILL)
+        except OSError:
+            pass
+        proc.wait()
+        return None, True
+
+
+def ablate(repo, base, loki_dir, timeout=DEFAULT_TIMEOUT_SEC):
+    repo = os.path.abspath(repo)
+    tests = _read_tests(loki_dir)
+    command = str((tests or {}).get("command") or "").strip()
+    if not command:
+        return _record(loki_dir, STATUS_NOT_APPLICABLE,
+                       "no recorded check command in quality/test-results.json",
+                       "", [], None)
+    if tests.get("exit_code") != 0:
+        return _record(loki_dir, STATUS_NOT_APPLICABLE,
+                       "the recorded checks did not pass on the unablated change "
+                       "(exit_code=%r), so an ablation proves nothing" % tests.get("exit_code"),
+                       command, [], None)
+
+    try:
+        files = changed_files(repo, base)
+        untracked = untracked_files(repo)
+    except RuntimeError as e:
+        return _record(loki_dir, STATUS_NOT_APPLICABLE,
+                       "cannot read the change since base %s: %s" % (base, e),
+                       command, [], None)
+
+    check_paths = command_paths(repo, command)
+    code = [p for p in files
+            if os.path.splitext(p)[1].lower() in CODE_EXTENSIONS
+            and not is_test_path(p, check_paths)
+            and os.path.isfile(os.path.join(repo, p))]
+    if not code:
+        return _record(loki_dir, STATUS_NOT_APPLICABLE,
+                       "no non-test source code changed since base (%d changed "
+                       "file(s), all docs, config or tests)" % len(files),
+                       command, [], None)
+    unsupported = [p for p in code if os.path.splitext(p)[1].lower() not in SUPPORTED_EXTENSIONS]
+
+    plan = []  # (path, new_source)
+    skipped = []
+    for p in code:
+        if p in unsupported:
+            continue
+        full = os.path.join(repo, p)
+        try:
+            with open(full, "rb") as f:
+                source = f.read().decode("utf-8")
+            units = select_units(source, changed_lines(repo, base, p, p in untracked))
+        except (OSError, UnicodeDecodeError, SyntaxError, ValueError, RuntimeError) as e:
+            skipped.append("%s (%s)" % (p, type(e).__name__))
+            continue
+        if units:
+            plan.append((p, ablate_source(source, units)))
+
+    if not plan:
+        why = []
+        if unsupported:
+            why.append("changed code in a language ablation does not parse: %s"
+                       % ", ".join(sorted(unsupported)))
+        if skipped:
+            why.append("unreadable source: %s" % ", ".join(sorted(skipped)))
+        if not why:
+            why.append("the changed source lines sit outside any function, so "
+                       "there is no code unit to no-op")
+        return _record(loki_dir, STATUS_NOT_APPLICABLE, "; ".join(why), command, [], None)
+
+    snap = _Snapshot()
+    for p, _ in plan:
+        snap.save(os.path.join(repo, p))
+
+    def _on_signal(signum, _frame):
+        raise KeyboardInterrupt("signal %d" % signum)
+
+    old = {}
+    for sig in (signal.SIGTERM, signal.SIGHUP):
+        try:
+            old[sig] = signal.signal(sig, _on_signal)
+        except (ValueError, OSError):
+            pass
+    try:
+        for p, new_source in plan:
+            with open(os.path.join(repo, p), "wb") as f:
+                f.write(new_source.encode("utf-8"))
+        exit_code, timed_out = _run_command(repo, command, timeout)
+    finally:
+        errors = snap.restore()
+        for sig, handler in old.items():
+            signal.signal(sig, handler)
+    if errors:
+        raise RuntimeError("working tree restore failed: %s" % "; ".join(errors))
+
+    ablated = [p for p, _ in plan]
+    note = ""
+    if unsupported:
+        note = " (not ablated, unsupported language: %s)" % ", ".join(sorted(unsupported))
+    if timed_out:
+        return _record(loki_dir, STATUS_LOAD_BEARING,
+                       "with the changed code no-oped the checks did not finish "
+                       "within %ds, so they depend on it%s" % (timeout, note),
+                       command, ablated, None)
+    if exit_code != 0:
+        return _record(loki_dir, STATUS_LOAD_BEARING,
+                       "the checks failed (exit %d) with the changed code no-oped, "
+                       "so they exercise the change%s" % (exit_code, note),
+                       command, ablated, exit_code)
+    return _record(loki_dir, STATUS_NOT_LOAD_BEARING,
+                   "the checks still pass with the changed code no-oped, so they "
+                   "do not exercise the change%s" % note,
+                   command, ablated, exit_code)
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--repo", required=True)
+    ap.add_argument("--base", required=True)
+    ap.add_argument("--loki-dir", required=True)
+    ap.add_argument("--timeout", type=int, default=None,
+                    help="seconds for the ablated re-run (default LOKI_ABLATION_TIMEOUT or 600)")
+    args = ap.parse_args(argv)
+    timeout = args.timeout
+    if timeout is None:
+        try:
+            timeout = int(os.environ.get("LOKI_ABLATION_TIMEOUT", DEFAULT_TIMEOUT_SEC))
+        except ValueError:
+            timeout = DEFAULT_TIMEOUT_SEC
+    if not os.path.isdir(args.repo):
+        print("ablation: --repo is not a directory: %s" % args.repo, file=sys.stderr)
+        return 2
+    try:
+        rec = ablate(args.repo, args.base, args.loki_dir, timeout=max(timeout, 1))
+    except (OSError, RuntimeError) as e:
+        print("ablation: %s" % e, file=sys.stderr)
+        return 2
+    print("ablation: %s - %s" % (rec["status"], rec["reason"]))
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.28"
+__version__ = "11.17.30"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.28. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.30. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |
@@ -44,10 +44,11 @@ Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for th
 | `loki wiki generate` | Generate the wiki |
 | `loki wiki show` | Show a section |
 | `loki wiki ask` | Ask a question |
-| `loki control` | Control Plane (serve, backfill, prune, status) |
+| `loki control` | Control Plane (serve, backfill, prune, stop, status) |
 | `loki control serve` | Run the control plane and UI |
 | `loki control backfill` | Ship DIR/.loki/runs to the control plane |
 | `loki control prune` | Delete matching runs |
+| `loki control stop` | Stop the running control plane |
 | `loki control status` | Show control plane reachability |
 | `loki intent` | Show a past run's intent card |
 | `loki intent show` | Print the intent card and answer |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.28
+**Version:** v11.17.30
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/BOARD.md

@@ -1103,24 +1103,24 @@ Source: ~/git/autonomi-dev/research/2026-09-30-adoption/SWARM-PROMPT-ADOPTION.md
 | TEN-UX-03-F1 | build_verified payload asserted to carry only headline and route | tests/test-first-run-funnel-coverage.sh | LOW | adding an extra arg to loki_emit_build_verified_enum turns the test red | building@2026-10-17T05:43Z | UX-03 TL review non-blocking 1 |
 | TEN-RELEASE-FAST | one-command ship: scripts/release.sh --ship --notes FILE bumps, writes the CHANGELOG section, rebuilds dist, commits, checks ancestry and gitleaks, waits for an in-flight Release run, pushes and verifies origin/main | scripts/release.sh, tests/test-release-sh.sh (extend; it owns release.sh) | HIGH | --ship on a fixture repo with a fake origin completes all phases and prints per-phase timings; a non-ancestor origin, a gitleaks hit, a forbidden staged file and a CHANGELOG c[7] mismatch each abort before push (red mutation per guard) | building@2026-10-17T05:43Z | D103; target under 90s wall for the whole ship |
 | TEN-SEC-PREPUSH-MERGE-WARN | pre-push .gitleaksignore-growth warning diffs merges against the first parent only, so a merge of an older slice no longer reports lines main already had | .githooks/pre-push (line ~621 diff-tree -m), tests/test-security-audit-config.sh or the existing pre-push test that owns this warning; docs/v10/FAILURE-CLASSES.md (row first) | LOW | pushing a merge of a branch based before an ignore line was added prints no warning; a commit that really adds an ignore line still warns (red mutation: put -m back) | released v11.17.28 | v11.17.25 push printed 5 false warnings for merges c6d3894f1..0a16434e1 while git diff 7d4d0ffb2 HEAD -- .gitleaksignore was empty |
-| TEN-COST-16-F1 | haiku-first downgrade row: router-override test, and the cascade override is reported only when cascadeDowngrade(run model) is non-null | loki-ts/src/runner/model_downgrades.ts, loki-ts/tests/engine10/session_l1_model.test.ts | LOW | router+haiku-first names the router override; cascade on a sonnet run reports the haiku-first row, matching implement.ts:106 precedence | building@2026-10-17T05:43Z | COST-16 r2 TL non-blocking N2, N3 |
+| TEN-COST-16-F1 | haiku-first downgrade row: router-override test, and the cascade override is reported only when cascadeDowngrade(run model) is non-null | loki-ts/src/runner/model_downgrades.ts, loki-ts/tests/engine10/session_l1_model.test.ts | LOW | router+haiku-first names the router override; cascade on a sonnet run reports the haiku-first row, matching implement.ts:106 precedence | released v11.17.29 | COST-16 r2 TL non-blocking N2, N3 |
 | TEN-COST-25 | fix: --cost lean stops forcing a plan session: drop LOKI_ROUTER from the lean profile (router makes plan.ts:65 plan every small task and overrides haiku-first) and add LOKI_IMPLEMENT_HAIKU_FIRST=1 plus the COST-26 sizing knobs | loki-ts/src/util/cost_profile.ts, loki-ts/tests/util/cost_profile.test.ts | MEDIUM | red: resolveCostProfile('lean') yields LOKI_ROUTER=1 and no LOKI_IMPLEMENT_HAIKU_FIRST; green: lean env has LOKI_IMPLEMENT_HAIKU_FIRST=1, no LOKI_ROUTER, and the COST-26 knobs; balanced/max unchanged | ready@2026-10-17T05:54Z | depends: TEN-COST-26, TEN-COST-16-F1. goal: cost-2x lever; C-F1 run4 small tasks were 1.415x raw from fixed plan+Wall cost (cf1-20261017T025219Z, plan_skipped=false on all 31) |
-| TEN-COST-26 | feature: sizing knobs LOKI_E10_SMALL_MAX_CHARS (default 600, unchanged) and opt-in LOKI_E10_SMALL_NO_RUNNER=1 so a missing test runner no longer forces normal (smallTaskPath still routes it to wall) | loki-ts/src/engine10/sizing.ts (at most 3 core lines), loki-ts/tests/engine10/sizing.test.ts | MEDIUM | red: a 700-char task with LOKI_E10_SMALL_MAX_CHARS=800 sizes normal, and a no-runner task with LOKI_E10_SMALL_NO_RUNNER=1 sizes normal; green: both small, defaults byte-identical | ready@2026-10-17T05:54Z | goal: C-F1 run4 sized all 31 tasks normal (19 'no test runner detected', 12 also >600 chars at 683/724); core budget 4937/5000 |
+| TEN-COST-26 | feature: sizing knobs LOKI_E10_SMALL_MAX_CHARS (default 600, unchanged) and opt-in LOKI_E10_SMALL_NO_RUNNER=1 so a missing test runner no longer forces normal (smallTaskPath still routes it to wall) | loki-ts/src/engine10/sizing.ts (at most 3 core lines), loki-ts/tests/engine10/sizing.test.ts | MEDIUM | red: a 700-char task with LOKI_E10_SMALL_MAX_CHARS=800 sizes normal, and a no-runner task with LOKI_E10_SMALL_NO_RUNNER=1 sizes normal; green: both small, defaults byte-identical | released v11.17.29 | goal: C-F1 run4 sized all 31 tasks normal (19 'no test runner detected', 12 also >600 chars at 683/724); core budget 4937/5000 |
 | TEN-COST-27 | enhancement: loki start reads cost.profile from loki.yaml as the team default; --cost flag and LOKI_COST_PROFILE env still win | loki-ts/src/commands/start.ts (cost flag resolution near line 279 only; not the help block DEPLOY rows own), loki-ts/tests/commands/start.test.ts | LOW | red: loki.yaml cost.profile: lean with no flag resolves balanced; green: resolves lean, flag and env override it, invalid value warns and falls back | ready@2026-10-17T05:54Z | depends: TEN-COST-25. goal: teams opt in to the lean lever once; reuse util/yaml_key.ts yamlKey |
-| TEN-SPEED-01 | feature: cost_claim reports a paired elapsed_s ratio (raw/loki) with the same bootstrap CI as the cost ratio | benchmarks/bench/cost_claim.py, benchmarks/bench/tests/test_cost_claim.py | LOW | red: cost_claim JSON has no time_ratio key for paired rows carrying elapsed_s; green: time_ratio and time_ci present, rows missing elapsed_s are excluded and counted | ready@2026-10-17T05:54Z | goal: speed has no measured number today (cost_claim has no time metric; attribution.py:351-355 already writes elapsed_s); first SPEED row |
+| TEN-SPEED-01 | feature: cost_claim reports a paired elapsed_s ratio (raw/loki) with the same bootstrap CI as the cost ratio | benchmarks/bench/cost_claim.py, benchmarks/bench/tests/test_cost_claim.py | LOW | red: cost_claim JSON has no time_ratio key for paired rows carrying elapsed_s; green: time_ratio and time_ci present, rows missing elapsed_s are excluded and counted | released v11.17.29 | goal: speed has no measured number today (cost_claim has no time metric; attribution.py:351-355 already writes elapsed_s); first SPEED row |
 | TEN-SPEED-02 | enhancement: bench-suite times loki verify --fast and records p95 to migration_bench.jsonl | loki-ts/scripts/bench-suite.ts, loki-ts/tests/scripts/bench_suite_argv.test.ts | LOW | red: benchRouteArgv has no verify --fast route and no p95 field; green: argv test asserts the route and the record carries p95_ms | ready@2026-10-17T05:54Z | goal: METRICS lists verify --fast p95 as not measured; fills it with a repeatable command |
-| TEN-UX-09 | feature: loki control stop stops the detached control plane via instance.json PID plus a /health identity check, never by name | loki-ts/src/commands/control.ts, loki-ts/tests/commands/control.test.ts, loki-ts/src/cli/registry.ts (control row sub list only), completions/_loki and completions/loki.bash (control subcommands only) | MEDIUM | red: loki control stop is an unknown subcommand (control.ts:175-181 handles serve/status/prune/backfill); green: stop ends the recorded PID, refuses a PID whose /health does not match, exits 0 when nothing runs | ready@2026-10-17T05:54Z | goal: bare loki leaves a nohup control serve with no stop (observed PID 50904 + server.js on 47821); reuse restartStaleControlPlane control.ts:52-70 |
+| TEN-UX-09 | feature: loki control stop stops the detached control plane via instance.json PID plus a /health identity check, never by name | loki-ts/src/commands/control.ts, loki-ts/tests/commands/control.test.ts, loki-ts/src/cli/registry.ts (control row sub list only), completions/_loki and completions/loki.bash (control subcommands only) | MEDIUM | red: loki control stop is an unknown subcommand (control.ts:175-181 handles serve/status/prune/backfill); green: stop ends the recorded PID, refuses a PID whose /health does not match, exits 0 when nothing runs | released v11.17.29 | goal: bare loki leaves a nohup control serve with no stop (observed PID 50904 + server.js on 47821); reuse restartStaleControlPlane control.ts:52-70 |
 | TEN-UX-10 | fix: bare loki prints next steps (give work with loki start "<brief>"; stop the UI with loki control stop) after the URL instead of the URL alone | autonomy/loki (_loki_control_ui only), tests/test-control-plane.sh | LOW | red: bare loki stdout is exactly the URL line; green: the URL line is first and both next-step lines follow; --json or non-TTY output unchanged if it has a contract | ready@2026-10-17T05:54Z | depends: TEN-UX-09. goal: first-run UX; today a new user sees only http://127.0.0.1:47821 and a background daemon |
 | TEN-UX-11 | enhancement: the run summary Time line marks the first sealed PR in a repo (time to first sealed PR) so METRICS row 14 can be read from run output | loki-ts/src/engine10/output.ts (Time line input field only), loki-ts/tests/engine10/output.test.ts | LOW | red: summary with firstSealed=true renders the same Time line as any run; green: Time line appends 'first sealed PR in this repo' only when set, golden for other runs unchanged | ready@2026-10-17T05:54Z | goal: time to first sealed PR is not measured (METRICS row 14); caller wiring is a follow-up row |
 | TEN-UX-12 | fix: the preflight 'could not confirm the Claude login' warning never adds a stdout line in quiet mode (stderr only) | loki-ts/src/engine10/preflight.ts (warning emit at line ~28 only), loki-ts/tests/engine10/preflight.test.ts | LOW | red: quiet run with an unanswered auth status prints 9 stdout lines (e2e.test.ts:130 A-130 limit 8); green: warning on stderr, quiet stdout within 8 lines | ready@2026-10-17T05:54Z | depends: TEN-P9-FIX-F1 (owns preflight.test.ts). goal: quiet-mode contract and a likely cause of the red main Tests runs |
 | TEN-ADOPTION-09 | feature: engine10 pr stage routes a gitlab.com pinned origin to engine10-push-gitlab.sh push-mr and accepts the MR URL | loki-ts/src/engine10/stages/pr.ts, loki-ts/tests/engine10/pr.test.ts | HIGH | red: gitlab origin calls DEFAULT_PUSH_SH engine10-push.sh (pr.ts:42) and an MR URL fails PR_URL_RE (pr.ts:72); green: push-mr is invoked and the MR URL is recorded; github path byte-identical | ready@2026-10-17T05:54Z | goal: GitLab teams; the script and tests/test-engine10-push-gitlab.sh exist but nothing in loki-ts/src references it |
 | TEN-ADOPTION-10 | fix: reviewer instructions name the receipt-check action with a copyable uses: line pinned to the current version instead of 'adds the receipt-check action' | loki-ts/src/e10ext/reviewer_body.ts, loki-ts/tests/engine10/pr_body_golden.test.ts | LOW | red: reviewer body line 54 has no uses: reference; green: body contains uses: <repo>/.github/actions/receipt-check@v<VERSION> and the golden is updated | ready@2026-10-17T05:54Z | goal: .github/actions/receipt-check exists (tests/test-receipt-check-action.sh) but no user-facing text tells a reviewer how to add it |
-| TEN-GATES-11 | feature: build autonomy/lib/ablation.py to the tests/moat/p8-load-bearing-proof.sh contract and promote the 3 P8 ablation lines in tests/moat/pending.txt | autonomy/lib/ablation.py (new: the p8 header names this exact path and no module owns it), tests/test_ablation.py (new: the new module's own test), tests/moat/pending.txt (3 P8 lines only) | HIGH | red: bash tests/moat/p8-load-bearing-proof.sh fails, ablation.py missing; green: P8.ablation-runtime-change-load-bearing, P8.ablation-dead-code-not-sealed, P8.ablation-na-docs-only pass and leave pending.txt; restore is byte-for-byte | ready@2026-10-17T05:54Z | goal: moat 2/9 proven; consumer already built (proof-generator.py:874 _collect_ablation, :2052 headline refusal), producer missing |
+| TEN-GATES-11 | feature: build autonomy/lib/ablation.py to the tests/moat/p8-load-bearing-proof.sh contract and promote the 3 P8 ablation lines in tests/moat/pending.txt | autonomy/lib/ablation.py (new: the p8 header names this exact path and no module owns it), tests/test_ablation.py (new: the new module's own test), tests/moat/pending.txt (3 P8 lines only) | HIGH | red: bash tests/moat/p8-load-bearing-proof.sh fails, ablation.py missing; green: P8.ablation-runtime-change-load-bearing, P8.ablation-dead-code-not-sealed, P8.ablation-na-docs-only pass and leave pending.txt; restore is byte-for-byte | released v11.17.29 | goal: moat 2/9 proven; consumer already built (proof-generator.py:874 _collect_ablation, :2052 headline refusal), producer missing |
 | TEN-GATES-12 | enhancement: loki start proof path runs ablation.py before proof-generator so quality/ablation.json exists on engine10 runs | loki-ts/src/runner/proof.ts (pre-proof hook only), loki-ts/tests/runner/proof.test.ts | HIGH | red: an engine10 run with a load-bearing change leaves no quality/ablation.json; green: file present with status load_bearing, ablation failure is recorded not_applicable and never blocks the proof | ready@2026-10-17T05:54Z | depends: TEN-GATES-07, TEN-GATES-11. goal: the P8 property reaches real runs, not just the moat script |
 | TEN-GATES-13 | feature: seeded-defect corpus at benchmarks/seeded-defects/manifest.json (schema loki.seeded-defects/v2, >=100 defects, generated) and promote P4.seeded-defect-corpus-present | benchmarks/seeded-defects/ (new dir: the p4 contract names this path), tests/moat/pending.txt (1 P4 line only) | HIGH | red: P4.seeded-defect-corpus-present fails, directory absent; green: manifest validates, count >=100, generator rerun is byte-identical, pending line removed | ready@2026-10-17T05:54Z | depends: TEN-GATES-11 (shared pending.txt, one line each). goal: Seal accuracy cannot be measured without the corpus |
 | TEN-DEPLOY-10 | feature: loki status --probe re-probes the last deploy health URL and exits non-zero on regression | loki-ts/src/commands/status.ts (renderLastDeploy region only), loki-ts/tests/commands/status.test.ts | MEDIUM | red: --probe is an unknown flag; green: healthy URL exits 0, a 500 or timeout exits 1 with the URL and status, no last deploy exits 0 with a note | ready@2026-10-17T05:54Z | goal: post-deploy watch; deploy health is recorded once and never rechecked |
-| TEN-STABILITY-09 | fix: engine10 stub e2e suites answer claude auth status so the P9 login probe never stalls or warns in stub runs | loki-ts/tests/engine10/e2e.test.ts (and its stub fixture only) | MEDIUM | red: on main the A-130 quiet, Rule of Two canary, cost cap, eval PR, issue-ref and SIGINT e2e cases fail; green: all pass with the stub answering auth status | ready@2026-10-17T05:54Z | depends: none; first confirm still red on 7d4d0ffb2/0463f084b. goal: main Tests failed 11 of 13 recent runs; e2e.test.ts untouched since TEN-UX-01 |
-| TEN-STABILITY-10 | fix: pulse merged-not-released check reads merges with one git log pass indexed by slice ID instead of one git log per row | scripts/v10-pulse.sh (lookup near line 1993 and check_merged_not_released_stale only), tests/test-v10-pulse.sh | MEDIUM | red: a board with 50 merged rows runs 50 git log calls and one timeout raises RuntimeError for row D63-C5; green: one git call, same rows flagged, git failure still reported UNKNOWN not 'nothing to flag' | ready@2026-10-17T05:54Z | goal: pulse at 05:51Z reported 'git log --merges failed for row D63-C5: rc=None: TIMEOUT'; the anti-drift signal goes dark under load |
+| TEN-STABILITY-09 | fix: engine10 stub e2e suites answer claude auth status so the P9 login probe never stalls or warns in stub runs | loki-ts/tests/engine10/e2e.test.ts (and its stub fixture only) | MEDIUM | red: on main the A-130 quiet, Rule of Two canary, cost cap, eval PR, issue-ref and SIGINT e2e cases fail; green: all pass with the stub answering auth status | released v11.17.30 | depends: none; first confirm still red on 7d4d0ffb2/0463f084b. goal: main Tests failed 11 of 13 recent runs; e2e.test.ts untouched since TEN-UX-01 |
+| TEN-STABILITY-10 | fix: pulse merged-not-released check reads merges with one git log pass indexed by slice ID instead of one git log per row | scripts/v10-pulse.sh (lookup near line 1993 and check_merged_not_released_stale only), tests/test-v10-pulse.sh | MEDIUM | red: a board with 50 merged rows runs 50 git log calls and one timeout raises RuntimeError for row D63-C5; green: one git call, same rows flagged, git failure still reported UNKNOWN not 'nothing to flag' | released v11.17.30 | goal: pulse at 05:51Z reported 'git log --merges failed for row D63-C5: rc=None: TIMEOUT'; the anti-drift signal goes dark under load |
 | TEN-QUALITY-10 | fix: a traceback or file:line path missing from a truncated repo map (cap 2000) is still ranked when git tracks it | loki-ts/src/util/relevance.ts, loki-ts/src/engine10/relevant_files.ts (at most 2 core lines), loki-ts/tests/engine10/plan.test.ts | MEDIUM | red: repo with 2500 files and a traceback naming file 2400 never lists it as relevant; green: it ranks first; untracked or absent paths still ignored | ready@2026-10-17T05:54Z | goal: repomap.ts:19,34 MAX_FILES=2000 takes the first 2000 ls-files entries, so large repos lose explicit file hints |
 | TEN-QUALITY-11 | enhancement: a Python repo with uv.lock and no .venv runs tests and lint through uv run as the project interpreter | loki-ts/src/engine10/stages/verify.ts (resolveTool only, at most 3 core lines), loki-ts/tests/engine10/verify.test.ts | MEDIUM | red: uv.lock repo without .venv gets interpreter system and 'tests ran on the system interpreter' NOT PROVEN (verify.ts:43,339); green: interpreter project via uv run; no uv on PATH keeps today's system result | ready@2026-10-17T05:54Z | goal: avoid a false PARTIAL for uv projects; verify.ts has no uv handling today |
 | TEN-QUALITY-12 | enhancement: repo map cap configurable (LOKI_E10_REPOMAP_MAX_FILES) and truncation drops vendored or generated dirs before source | loki-ts/src/engine10/repomap.ts (at most 3 core lines), loki-ts/tests/engine10/repomap.test.ts | LOW | red: 2500-file repo with 1500 vendor/ files maps mostly vendor and ignores the env knob; green: knob honored, vendor/ node_modules dist dropped first, default 2000 unchanged | ready@2026-10-17T05:54Z | goal: plan context quality on large repos; complements TEN-QUALITY-10 with no shared file |

package/docs/v10/CLI-MODERN.md

@@ -11,7 +11,7 @@ Classes: KEEP-MODERN (v10-native or engine-neutral), UPDATE (live but needs mode
 - DROP-LEGACY: 31
 - DELETE: 14
 - Total rows: 141
-- Registry paths (commands and nested subcommands): 201
+- Registry paths (commands and nested subcommands): 202
 
 ## Commands
 

package/docs/v10/PROGRESS.md

@@ -2464,3 +2464,9 @@ v11.17.21 published (Release success on 462fbc40a; npm latest 11.17.21, next 11.
 
 ## 2026-10-17T06:08Z (CoS) v11.17.28
 - v11.17.26 Release run 39008106373 success, npm latest=next=11.17.26. v11.17.27 pushed e044e5395 (HEAD equals origin/main, gitleaks no leaks). Ships TEN-COST-04 (TL APPROVE b6562f67d: pytest 153 passed, mutation M1 3 failed) and TEN-SEC-PREPUSH-MERGE-WARN (TL APPROVE 78f48de3a: tests/test-pre-push-gitleaks.sh Passed 59 Failed 0, mutation case 19b red). TEN-COST-16-F1 built nothing (row uncommitted at dispatch); re-dispatched in wave Z with COST-26, SPEED-01, UX-09, GATES-11.
+
+## 2026-10-17T06:16Z (CoS) v11.17.29
+- v11.17.28 pushed 5f504d333 without waiting for the v11.17.27 Release run (release.yml has no concurrency group; publish has a never-backwards guard). Wave Z all APPROVE: COST-16-F1 d9b5917fd (47 pass, 2 mutations red), COST-26 ddaf2389a (30 pass, 2 mutations red), SPEED-01 a643883d7 (pytest 24 passed, inverted ratio 6 failed), UX-09 b80656d3e (64 pass, 2 mutations red), GATES-11 c7cc6a31b HIGH (p8 moat rc=0 3 of 3 PASS, pytest 23 passed, 5 mutations red). COST-26 hand-merge: test-only conflict in sizing.test.ts resolved as union, bun test sizing and wall 94 pass 0 fail. Moat P8 moved from pending to proven.
+
+## 2026-10-17T06:18Z (CoS) v11.17.30
+- Ships TEN-STABILITY-09 (TL APPROVE 57e3aa1f6: bun test 87 pass 0 fail, 2 stub mutations red) and TEN-STABILITY-10 (TL APPROVE f8b625ca1: tests/test-v10-pulse.sh 171 passed, 2 mutations red at T51b). v11.17.29 landed 1e4c2da03.