loki-mode 11.17.45 → 11.17.47

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.45
+# Loki Mode v11.17.47
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.45 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.47 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.45
+11.17.47

package/autonomy/lib/secret-scan.sh

@@ -46,6 +46,10 @@ _commit_scan_secret_file() {
         'sk-ant-[A-Za-z0-9_-]{20,}'                 # Anthropic API key (hyphenated body)
         'AIza[0-9A-Za-z_-]{35}'                     # Google API key
         'glpat-[A-Za-z0-9_-]{20,}'                  # GitLab personal access token
+        '(^|[^A-Za-z0-9_])hf_[A-Za-z0-9]{34,}'      # Hugging Face token
+        '(^|[^A-Za-z0-9])SG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}'  # SendGrid API key
+        '(^|[^A-Za-z0-9])SK[0-9a-f]{32}([^A-Za-z0-9]|$)'  # Twilio API key SID
+        'AccountKey=[A-Za-z0-9+/]{40,}={0,2}'       # Azure storage account key
     )
     local p
     for p in "${tier1[@]}"; do

package/autonomy/loki

@@ -1769,7 +1769,7 @@ _help_verify_pr() {
     echo "PR code runs only in the container sandbox (scripts/verify-pr-sandbox.sh); set"
     echo "LOKI_VPR_IMAGE to a locally present image."
     echo ""
-    echo "Exit codes: 0 verified, 2 usage or sandbox blocked, 4 not proven."
+    echo "Exit codes: 0 verified, 2 usage or sandbox blocked, 3 no proof to run (no linked issue or no trusted runnable check), 4 proof ran and failed."
 }
 
 # Appended to `loki help verify`: the v10 DSSE export flag (docs/exit-codes.md).
@@ -7514,7 +7514,17 @@ cmd_provider() {
         models)
             cmd_provider_models
             ;;
+        help|--help|-h)
+            _cmd_provider_help
+            ;;
         *)
+            echo "loki provider: unknown subcommand '${subcommand}' (see 'loki provider help')" >&2
+            return 2
+            ;;
+    esac
+}
+
+_cmd_provider_help() {
             echo -e "${BOLD}Loki Mode Provider Management${NC}"
             echo ""
             echo "Usage: loki provider <command>"
@@ -7543,8 +7553,6 @@ cmd_provider() {
             echo "  loki provider list"
             echo "  loki provider info codex"
             echo "  loki provider models"
-            ;;
-    esac
 }
 
 cmd_provider_show() {
@@ -14141,7 +14149,7 @@ cmd_config() {
         validate)
             cmd_config_validate "$@"
             ;;
-        *)
+        help|--help|-h)
             echo -e "${YELLOW}Usage: loki config [show|list|init|edit|path|set|get|example|schema|validate]${NC}"
             echo ""
             echo "  show            Show current configuration (default)"
@@ -14171,6 +14179,10 @@ cmd_config() {
             echo "  notify.discord       Discord webhook URL"
             echo "  budget               Cost budget limit in USD"
             ;;
+        *)
+            echo "loki config: unknown subcommand '${subcommand}' (see 'loki config help')" >&2
+            return 2
+            ;;
     esac
 }
 
@@ -15929,7 +15941,7 @@ cmd_api() {
             fi
             ;;
 
-        *)
+        help|--help|-h)
             echo -e "${BOLD}Loki Mode Dashboard/API Server${NC}"
             echo ""
             echo "Usage: loki api <command>"
@@ -15952,6 +15964,10 @@ cmd_api() {
             echo "  POST /api/pause   - Pause session"
             echo "  POST /api/resume  - Resume session"
             ;;
+        *)
+            echo "loki api: unknown subcommand '${subcommand}' (see 'loki api help')" >&2
+            return 2
+            ;;
     esac
 }
 
@@ -35041,7 +35057,10 @@ cmd_control() {
             echo "Commands:"
             echo "  serve [--port N] [--db PATH]   Run the control plane + UI on 127.0.0.1"
             echo "  backfill [DIR]                 Ship DIR/.loki/runs to the control plane"
-            echo "  status                         Show whether the control plane is reachable"
+            echo "  prune --repo OWNER/NAME | --before ISO_DATE [--dry-run] [--db PATH]"
+            echo "                                 Delete matching runs, their events and orphaned sources"
+            echo "  stop                           Stop the running control plane"
+            echo "  status [--json]                Show whether the control plane is reachable (--json: one JSON object)"
             return 0
             ;;
     esac