loki-mode 11.17.86 → 11.17.87

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.86
+# Loki Mode v11.17.87
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.86 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.87 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.86
+11.17.87

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.86"
+__version__ = "11.17.87"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.86. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.87. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.86
+**Version:** v11.17.87
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/FAILURE-CLASSES.md

@@ -1280,3 +1280,4 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Siblings swept: the escape-only assumption lived in one place (the report condition in `ev`); outOfRepoTarget, seal's addedSymlinkNotes and the implement repro-test path make no such assumption.
 - Mechanism: `strayInTestDir` in phantomRepoPaths additionally reports a path that stays inside the test dir when its first segment is absent from the test dir but present at the package or repo root (the author meant a repo path). Same exemptions (plan with parent, created, ignored by the VCS, write/expect/tmp lines); fixtures the test dir lacks (fixtures/a.json) and __self__ stay unreported.
 - Fixture: fc23_wall_conventions.test.ts "in-testdir phantom" (incident lines report tests/plugins/ralph-loop; plan-named, fixtures, created and __self__ paths pass). Red before the fix, green after.
+- Siblings swept (review of 11.17.85): the package-root fallback trusts a known project model fully (its package cwd, else the repo root) and otherwise walks up to the nearest manifest-shaped JSON (string name plus another key); config files (tsconfig, linter, test-runner, xml, cfg, toml) are never roots, so they cannot hide a real phantom (fixture "fallback no false root"). Known limit: a nameless manifest or a non-JSON-manifest package resolves only through the model; without one the repo root is the cwd. The vendor-dir exemption is the ignore check alone, with no vendor-dir name or `*_modules` pattern, so src/my_modules/x and src/feature_modules/x are reported (fixture "modules dir phantom"). The release-gate pytest guard strips only the pip install segment before checking (tests/test-release-gate-dedup.sh M10).

package/docs/v10/PROGRESS.md

@@ -2632,3 +2632,6 @@ v11.17.21 published (Release success on 462fbc40a; npm latest 11.17.21, next 11.
 
 ## 2026-10-19T10:37Z (CoS) v11.17.86
 - 11.17.86: FC-WALL-PHANTOM-PATH in-testdir sibling (f2b930627 cherry-picked as 3f75ea650 onto 0a897c42c). HIGH opus APPROVE: revert red 32/1, gates 150 pass 0 fail, end-to-end runWall re-ask then discard verified on the #81826 shape, tsc 0 errors in engine10/project_model; route_matrix_mutation unverified (50 min suite). Non-blocking: helper-generated fixture with a root fixtures/ dir can cost one re-ask.
+
+## 2026-10-19T10:49Z (CoS) v11.17.87
+- 11.17.87: 11.17.85 review follow-ups (53549dba0, 29a44f936). HIGH opus BLOCK on 53549dba0 (extension/nameless-JSON fallback hid phantoms in 6 repros), fixed in 29a44f936, HIGH APPROVE: 6 repros + incident shapes report, revert red (fallback no false root, modules dir phantom), gate 186/0, dedup 13/0 incl M10, tsc clean for engine10/project_model. Follow-up: fixture for the model-known branch (stale multi-root M4).

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var hS0=Object.create;var{getPrototypeOf:fS0,defineProperty:eW,getOwnPropertyNames:Xi,getOwnPropertyDescriptor:gS0}=Object,Yi=Object.prototype.hasOwnProperty;function Qi(Z){return this[Z]}var mS0,uS0,pS0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?mS0??=new WeakMap:uS0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?hS0(fS0(Z)):{};let z=$||!Z||!Z.__esModule?eW(J,"default",{value:Z,enumerable:!0}):J;for(let W of Xi(Z))if(!Yi.call(z,W))eW(z,W,{get:Qi.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},cS0=(Z)=>{var $=(Ji??=new WeakMap).get(Z),J;if($)return $;if($=eW({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Xi(Z))if(!Yi.call($,X))eW($,X,{get:Qi.bind(Z,X),enumerable:!(J=gS0(Z,X))||J.enumerable})}return Ji.set(Z,$),$},Ji,IN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var dS0=(Z)=>Z;function lS0(Z,$){this[Z]=dS0.bind(null,$)}var L0=(Z,$)=>{for(var J in $)eW(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:lS0.bind($,J)})};var b=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var o9=import.meta.require;var Wi={};L0(Wi,{lokiDir:()=>P0,homeLokiDir:()=>U2,findRepoRootForVersion:()=>ZK,REPO_ROOT:()=>j0});import{resolve as OZ,dirname as BR}from"path";import{fileURLToPath as aS0}from"url";import{existsSync as TN}from"fs";import{homedir as iS0}from"os";function oS0(){let Z=zi;for(let $=0;$<6;$++){if(TN(OZ(Z,"VERSION"))&&TN(OZ(Z,"autonomy/run.sh")))return Z;let J=BR(Z);if(J===Z)break;Z=J}return OZ(zi,"..","..","..")}function ZK(Z){let $=Z;for(let J=0;J<6;J++){if(TN(OZ($,"VERSION"))&&TN(OZ($,"autonomy/run.sh")))return $;let X=BR($);if(X===$)break;$=X}return OZ(Z,"..","..","..")}function P0(){return process.env.LOKI_DIR??OZ(process.cwd(),".loki")}function U2(){return OZ(iS0(),".loki")}var zi,j0;var n0=b(()=>{zi=BR(aS0(import.meta.url));j0=oS0()});import{readFileSync as nS0}from"fs";import{resolve as sS0,dirname as rS0}from"path";import{fileURLToPath as tS0}from"url";function H6(){if(I1!==null)return I1;let Z="11.17.86";if(typeof Z==="string"&&Z.length>0)return I1=Z,I1;try{let $=rS0(tS0(import.meta.url)),J=ZK($);I1=nS0(sS0(J,"VERSION"),"utf-8").trim()}catch{I1="unknown"}return I1}var I1=null;var AZ=b(()=>{n0()});import{mkdirSync as MR,readFileSync as PN,realpathSync as eS0,statSync as Zb0,writeFileSync as OR}from"fs";import{dirname as oX,join as NR,resolve as Ki}from"path";function Qb0(){return Ki(U2(),"cache","update-check.json")}function LZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function $K(Z,$){let J=LZ(Z),X=LZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Vi(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function Gi(Z){try{let $=PN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&LZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function zb0(Z){try{let $=JSON.parse(PN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Wb0(Z,$){let J=Gi(Z);try{MR(oX(Z),{recursive:!0}),OR(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Kb0(Z,$){try{MR(oX(Z),{recursive:!0}),OR(Z,JSON.stringify($),"utf-8")}catch{}}async function Vb0(){try{let Z=await fetch($b0,{signal:AbortSignal.timeout(Xb0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&LZ($.version)!==null)return $.version}catch{}return null}async function Gb0(Z=Date.now(),$=Vb0,J=Qb0()){let X=Gi(J);if(X&&Z-X.checkedAt<Jb0)return X.latest;let Y=zb0(J);if(Y!==null&&Z-Y>=0&&Z-Y<Yb0)return null;let Q=await $();if(Q===null)return Wb0(J,Z),null;return Kb0(J,{checkedAt:Z,latest:Q}),Q}function Hb0(Z,$=process.env){if(LZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=NR(Q,"loki"),W;try{Zb0(z),W=eS0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=NR(oX(oX(W)),"package.json"),V=JSON.parse(PN(K,"utf8")).version;if(typeof V!=="string")continue;if($K(V,Z))return{path:z,version:V}}catch{continue}}return null}function qb0(){return Ki(U2(),"cache","last-seen-version.json")}function Ub0(Z,$={}){try{if(Vi())return!1;if(LZ(Z)===null)return!1;let J=$.seenFile??qb0(),X=null;try{let Q=JSON.parse(PN(J,"utf-8")).version;if(typeof Q==="string"&&LZ(Q)!==null)X=Q}catch{}if(X!==null&&!$K(Z,X))return!1;try{MR(oX(J),{recursive:!0}),OR(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
+var hS0=Object.create;var{getPrototypeOf:fS0,defineProperty:eW,getOwnPropertyNames:Xi,getOwnPropertyDescriptor:gS0}=Object,Yi=Object.prototype.hasOwnProperty;function Qi(Z){return this[Z]}var mS0,uS0,pS0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?mS0??=new WeakMap:uS0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?hS0(fS0(Z)):{};let z=$||!Z||!Z.__esModule?eW(J,"default",{value:Z,enumerable:!0}):J;for(let W of Xi(Z))if(!Yi.call(z,W))eW(z,W,{get:Qi.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},cS0=(Z)=>{var $=(Ji??=new WeakMap).get(Z),J;if($)return $;if($=eW({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Xi(Z))if(!Yi.call($,X))eW($,X,{get:Qi.bind(Z,X),enumerable:!(J=gS0(Z,X))||J.enumerable})}return Ji.set(Z,$),$},Ji,IN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var dS0=(Z)=>Z;function lS0(Z,$){this[Z]=dS0.bind(null,$)}var L0=(Z,$)=>{for(var J in $)eW(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:lS0.bind($,J)})};var b=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var o9=import.meta.require;var Wi={};L0(Wi,{lokiDir:()=>P0,homeLokiDir:()=>U2,findRepoRootForVersion:()=>ZK,REPO_ROOT:()=>j0});import{resolve as OZ,dirname as BR}from"path";import{fileURLToPath as aS0}from"url";import{existsSync as TN}from"fs";import{homedir as iS0}from"os";function oS0(){let Z=zi;for(let $=0;$<6;$++){if(TN(OZ(Z,"VERSION"))&&TN(OZ(Z,"autonomy/run.sh")))return Z;let J=BR(Z);if(J===Z)break;Z=J}return OZ(zi,"..","..","..")}function ZK(Z){let $=Z;for(let J=0;J<6;J++){if(TN(OZ($,"VERSION"))&&TN(OZ($,"autonomy/run.sh")))return $;let X=BR($);if(X===$)break;$=X}return OZ(Z,"..","..","..")}function P0(){return process.env.LOKI_DIR??OZ(process.cwd(),".loki")}function U2(){return OZ(iS0(),".loki")}var zi,j0;var n0=b(()=>{zi=BR(aS0(import.meta.url));j0=oS0()});import{readFileSync as nS0}from"fs";import{resolve as sS0,dirname as rS0}from"path";import{fileURLToPath as tS0}from"url";function H6(){if(I1!==null)return I1;let Z="11.17.87";if(typeof Z==="string"&&Z.length>0)return I1=Z,I1;try{let $=rS0(tS0(import.meta.url)),J=ZK($);I1=nS0(sS0(J,"VERSION"),"utf-8").trim()}catch{I1="unknown"}return I1}var I1=null;var AZ=b(()=>{n0()});import{mkdirSync as MR,readFileSync as PN,realpathSync as eS0,statSync as Zb0,writeFileSync as OR}from"fs";import{dirname as oX,join as NR,resolve as Ki}from"path";function Qb0(){return Ki(U2(),"cache","update-check.json")}function LZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function $K(Z,$){let J=LZ(Z),X=LZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Vi(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function Gi(Z){try{let $=PN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&LZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function zb0(Z){try{let $=JSON.parse(PN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Wb0(Z,$){let J=Gi(Z);try{MR(oX(Z),{recursive:!0}),OR(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Kb0(Z,$){try{MR(oX(Z),{recursive:!0}),OR(Z,JSON.stringify($),"utf-8")}catch{}}async function Vb0(){try{let Z=await fetch($b0,{signal:AbortSignal.timeout(Xb0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&LZ($.version)!==null)return $.version}catch{}return null}async function Gb0(Z=Date.now(),$=Vb0,J=Qb0()){let X=Gi(J);if(X&&Z-X.checkedAt<Jb0)return X.latest;let Y=zb0(J);if(Y!==null&&Z-Y>=0&&Z-Y<Yb0)return null;let Q=await $();if(Q===null)return Wb0(J,Z),null;return Kb0(J,{checkedAt:Z,latest:Q}),Q}function Hb0(Z,$=process.env){if(LZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=NR(Q,"loki"),W;try{Zb0(z),W=eS0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=NR(oX(oX(W)),"package.json"),V=JSON.parse(PN(K,"utf8")).version;if(typeof V!=="string")continue;if($K(V,Z))return{path:z,version:V}}catch{continue}}return null}function qb0(){return Ki(U2(),"cache","last-seen-version.json")}function Ub0(Z,$={}){try{if(Vi())return!1;if(LZ(Z)===null)return!1;let J=$.seenFile??qb0(),X=null;try{let Q=JSON.parse(PN(J,"utf-8")).version;if(typeof Q==="string"&&LZ(Q)!==null)X=Q}catch{}if(X!==null&&!$K(Z,X))return!1;try{MR(oX(J),{recursive:!0}),OR(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
 `),!0}catch{return!1}}function Bb0(Z){let $=Z.replace(/\\/g,"/");if($.includes("/Cellar/"))return"brew upgrade loki-mode";if(/\/pnpm\//.test($)||$.includes("/.pnpm/"))return"pnpm add -g loki-mode  (or npm i -g loki-mode)";if($.includes("/yarn/global/")||$.includes("/.yarn/"))return"yarn global add loki-mode  (or npm i -g loki-mode)";if($.includes("/.bun/"))return"bun install -g loki-mode  (or npm i -g loki-mode)";if($.includes("/lib/node_modules/"))return"npm i -g loki-mode  (or bun install -g loki-mode)";if($.includes("/homebrew/"))return"brew upgrade loki-mode";return"bun install -g loki-mode  (or npm i -g loki-mode)"}async function Hi(Z,$={}){try{if(Vi())return;if(LZ(Z)===null)return;let J=$.write??((Q)=>process.stderr.write(Q));Ub0(Z,{write:J,...$.cacheFile?{seenFile:NR(oX($.cacheFile),"last-seen-version.json")}:{}});let X=Hb0(Z,$.env??process.env);if(X!==null){J(`Loki Mode ${X.version} is installed but not the one running (you are running ${Z}).
   Another loki earlier on PATH is winning. Newer copy: ${X.path}
   Run \`which -a loki\` to see the order, then remove or re-point the earlier entry.
@@ -745,8 +745,8 @@ app_runner_stop >/dev/null 2>&1
 `)}}let H=await j$(z,{scriptPath:$.scriptPath,timeoutMs:$.timeoutMs,secretsEverywhere:!0});if(!H.ok)return H;let q=new Map;for(let B of H.findings){if(B.rule!=="secret-in-client-file")continue;let N=K.get(B.file.split(mK0).join("/"));if(N)B={...B,file:N.file,line:N.lines[B.line-1]??B.line};let M=/A live (\S+)/.exec(B.message)?.[1]??"provider key",O=`${B.file}|${B.line}`,A=q.get(O);if(!A||A.kind==="openai-key"&&M!=="openai-key")q.set(O,{f:B,kind:M})}return{ok:!0,findings:[...[...q.values()].map(({f:B,kind:N})=>{return{rule:dl8,file:B.file,line:B.line,severity:"HIGH",message:`A ${N} was added at ${B.file}:${B.line}; the value is withheld here.`,fix:"Remove the key from the change, rotate it (assume it is compromised), and read it at runtime from an environment variable or secret manager."}}),...Q]}}finally{hl8(z,{recursive:!0,force:!0})}}var dl8="provider-key-in-added-line",uK0=67108864,ll8=1e6,tj=250000,al8=512,il8="untracked-file-not-scanned",ol8=120000;var ej=b(()=>{n0();n5();_0();j9()});function Rv(Z){let $=Z??"";if($.trim()==="")return{klass:"transient",reason:"empty_output"};if(Ja8.test($))return{klass:"non_retryable",reason:"quota_exhausted"};if($a8.test($))return{klass:"transient",reason:"transient_marker"};for(let[J,X]of Za8)if(X.test($))return{klass:"non_retryable",reason:J};return{klass:"transient",reason:"unrecognized"}}function pK0(Z,$=process.env){if($.LOKI_SMART_RETRY==="0")return!1;return Z.klass==="non_retryable"}function Ev(Z){if(Z.exit===0)return null;let $=Z.stderrTail??"",J=Xa8.exec($);return J?J[1]?"auth":"quota_exhausted":Rv($).reason}async function cK0(Z,$,J,X,Y,Q){let z=J.sleep??za8,W=await Z(),K=J.now(),V=0,G=()=>Math.max(J.now(),K+V);for(let H=0;$(W)==="quota_exhausted"&&!X?.aborted&&!Q?.();H++){let q=Y-G(),U=Math.min(Ya8*2**H,Qa8);if(U>=q){for(let B=0;B<5&&J.now()<Y&&!X?.aborted;B++)await z(Math.max(0,Y-J.now()),X);return W}if(await z(U,X),V+=U,X?.aborted||Q?.())return W;W=await Z()}return W}var Za8,$a8,Ja8,Xa8,Ya8=30000,Qa8=300000,za8=(Z,$)=>new Promise((J)=>{let X=setTimeout(J,Math.max(0,Z));$?.addEventListener("abort",()=>{clearTimeout(X),J()},{once:!0})});var Dv=b(()=>{Za8=[["auth",/\b(?:invalid[_ -]?api[_ -]?key|invalid[_ -]?x-api-key|authentication[_ -]?(?:failed|error))/i],["unknown_model",/\b(?:model[_ -]?not[_ -]?found|unknown[_ -]?model|does not exist.{0,20}model)/i],["bad_request",/\b(?:invalid[_ -]?request[_ -]?error|malformed[_ -]?request)/i],["quota_exhausted",/\b(?:insufficient[_ -]?(?:quota|credit|funds)|billing[_ -]?(?:hard[_ -]?limit|issue)|credit[_ -]?balance[_ -]?(?:is[_ -]?)?too[_ -]?low|exceeded your current quota|check your plan and billing details)/i]],$a8=/\b(?:rate[_ -]?limit|429\b|overloaded|please try again|temporarily unavailable|timeout|timed out|ETIMEDOUT|ECONNRESET|ECONNREFUSED|EAI_AGAIN|socket hang up|502\b|503\b|504\b|529\b|bad gateway|gateway time-?out|service unavailable)/i,Ja8=/\b(?:insufficient_quota|check your plan and billing details)/i;Xa8=/\[sdk-loop error: [^\n]*?(?:(Failed to authenticate|API key is invalid|Not logged in)|(credit balance))/});import{existsSync as Wa8,readFileSync as Ka8,renameSync as Va8,writeFileSync as Ga8}from"fs";import{join as iK0}from"path";function nK0(Z,$,J=Date.now()){let X=iK0(Z,oK0),Y=`${X}.${process.pid}.tmp`;Ga8(Y,JSON.stringify({action:$,ts:J})),Va8(Y,X)}function ZF(Z){let $=iK0(Z,oK0);if(!Wa8($))return null;try{let J=JSON.parse(Ka8($,"utf8")).action;return typeof J==="string"&&Ha8.has(J)?J:null}catch{return null}}function Ua8(){if(process.ppid!==lK0)return!1;try{return process.kill(lK0,0),!0}catch{return!1}}function Ba8(Z=process.env){let $=Z.LOKI_PAUSE_TIMEOUT_S,J=Number($),X=$!==void 0&&$!==""&&Number.isFinite(J)&&J>=0;if(!X&&$!==void 0&&$!==""&&!aK0.has($))aK0.add($),process.stderr.write(`loki: LOKI_PAUSE_TIMEOUT_S="${$}" is not a non-negative number of seconds; using the default ${dK0}s
 `);return(X?J:dK0)*1000}async function sK0(Z,$,J={}){let X=typeof J==="function"?{sleep:J}:J,Y=X.sleep??(()=>qa8(1000)),Q=X.alive??Ua8,z=X.now??Date.now,W=X.timeoutMs??Ba8(),K=z(),V=ZF(Z),G=null;while(V==="pause"){if(!Q()){G="owner_gone";break}if(W>0&&z()-K>=W){G="timeout_abandon";break}await Y(),V=ZF(Z)}if(V!=="cancel"&&!G)return!1;let H=G?{reason:G}:void 0;return $("cancel_requested",H),$("cancel_effective",H),!0}var oK0="control-request.json",Ha8,qa8=(Z)=>new Promise(($)=>setTimeout($,Z)),dK0=3600,lK0,aK0;var wv=b(()=>{Ha8=new Set(["pause","resume","cancel"]);lK0=process.ppid;aK0=new Set});import{existsSync as zz,readdirSync as tK0,readFileSync as eK0}from"fs";import{basename as Na8,dirname as JF,isAbsolute as Ma8,join as i4,relative as $F,resolve as rK0}from"path";function Oa8(Z){let $="",J=0;while(J<Z.length){let X=Z[J],Y=Z[J+1];if(X==='"'){let Q=J+1;while(Q<Z.length&&Z[Q]!=='"')Q+=Z[Q]==="\\"?2:1;$+=Z.slice(J,Q+1),J=Q+1}else if(X==="/"&&Y==="/")while(J<Z.length&&Z[J]!==`
 `)J++;else if(X==="/"&&Y==="*"){let Q=Z.indexOf("*/",J+2);J=Q<0?Z.length:Q+2}else $+=X,J++}return JSON.parse($.replace(/,(\s*[}\]])/g,"$1"))}function ZV0(Z,$=0){let J=_v(Z);if(!J||$>4)return null;let X=J.compilerOptions?.module;if(typeof X==="string")return X.toLowerCase();let Y=typeof J.extends==="string"?J.extends:null;if(!Y||!Y.startsWith("."))return null;let Q=i4(JF(Z),Y.endsWith(".json")?Y:`${Y}.json`);return zz(Q)?ZV0(Q,$+1):null}function $V0(Z,$=null){let J=[];try{J=tK0(Z).filter((W)=>W.endsWith(".json")).sort((W,K)=>W.length-K.length||W.localeCompare(K))}catch{return null}let X=null,Y=null;for(let W of J){let K=_v(i4(Z,W));if(!K)continue;if(X===null&&typeof K.type==="string"&&typeof K.name==="string")X=K.type;if(Y===null&&K.compilerOptions!==void 0)Y=ZV0(i4(Z,W))}if(X===null&&Y===null)return null;return{moduleSystem:Y===null||Y==="node16"||Y==="nodenext"?X==="module"?"esm":"commonjs":/^(commonjs|amd|umd|system)$/.test(Y)?"commonjs":"esm",packageType:X,tsModule:Y,runner:$}}function JV0(Z){if(!Z)return"";let $=`manifest type: ${Z.packageType??"(unset)"}, compiler module: ${Z.tsModule??"(unset)"}${Z.runner?`, test runner: ${Z.runner}`:""}`;return Z.moduleSystem==="commonjs"?`Package conventions (${$}): this package compiles as CommonJS. Never use import.meta or top-level await (TS1470, the package's own tsc rejects them); use __dirname and __filename for paths. In files the package's own compiler processes write import statements (they compile to CommonJS) and never require(): a package lint config commonly forbids require() and runs over your file; use require() only in plain .js or .cjs files.`:`Package conventions (${$}): this package is ES modules. Use import syntax; use import.meta.url for file locations; never use require(), __dirname or __filename.`}function xv(Z,$,J){if(!Z||Z.moduleSystem!=="commonjs"||!/\.[cm]?[jt]sx?$/.test($)||/\.m[jt]s$/.test($))return null;let X=J.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1").replace(/(["'`])(?:\\.|(?!\1)[^\\\n])*\1/g,'""');return/\bimport\.meta\b/.test(X)?"import.meta is not allowed in a CommonJS package (TS1470)":null}function kv(Z){let J=Z.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1").replace(/(^|\s)#.*$/gm,"$1").split(`
-`),X=J.findIndex((K)=>/\bprocess\.env\.(HOME|USERPROFILE)\s*=(?!=)|\benv\[\s*["'](HOME|USERPROFILE)["']\s*\]\s*=(?!=)|^\s*(export\s+)?(HOME|USERPROFILE)=|\bexport\s+(HOME|USERPROFILE)\b|\bsetenv\(\s*["'](HOME|USERPROFILE)["']|\benv\s*:\s*\{[^}]*\b(HOME|USERPROFILE)\s*:|\bpatch\.dict\([^)]*["'](HOME|USERPROFILE)["']/.test(K)),Y=/\bhomedir\s*\(|\bPath\.home\s*\(|\bexpanduser\s*\(|\$\{?HOME\b|\$\{?USERPROFILE\b|\bprocess\.env\.(HOME|USERPROFILE)\b|["'`]~\//,Q=String.raw`(?:file:\/\/)?(?:\/(?:Users|home|root)\/|[A-Za-z]:\\+Users\\)`,z=new RegExp(String.raw`\b(?:from|import|require)\s*\(?\s*["'`+"`"+String.raw`]${Q}|^\s*(?:source|\.)\s+["']?${Q}`),W=/["'`\/]\.[A-Za-z][\w-]*(?:[\/"'`]|$)|\b(?:import|require|source|spawn\w*|exec\w*|pathToFileURL|readFile\w*)\b/;for(let K of J.slice(0,X<0?J.length:X)){if(/^\s*(?:await\s+)?(?:expect|assert\w*)\b/.test(K))continue;if(Y.test(K)&&W.test(K)||z.test(K))return"resolves the code under test outside the repo via a home-directory path; target repo-relative paths (relative to this test file or the repo root) so the check exercises the change"}return null}function Aa8(Z,$,J){let X=fG(M9($),$,$F($,i4(Z,J)));if(X)return X.cwd;let Y=(z)=>{try{return tK0(z).some((W)=>{if(!W.endsWith(".json"))return!1;let K=_v(i4(z,W));return!!K&&typeof K.name==="string"&&Object.keys(K).length>1})}catch{return!1}},Q=Z;while(Q!==$&&Q!==JF(Q)&&!Y(Q))Q=JF(Q);return Q}function YV0(Z,$,J,X,Y){if(!/\.[cm]?[jt]sx?$/.test($))return[];let Q=Z.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1").replace(/\(\s+/g,"(").replace(/\s+\)/g,")").replace(/,\s*\n\s*/g,", ").replace(/=\s*\n\s*/g,"= "),z=Aa8(J,X,$),W=(N)=>{let M=[],O=0,A="",j="";for(let F=0;F<N.length;F++){let I=N[F];if(A){if(j+=I,I==="\\")j+=N[++F]??"";else if(I===A)A=""}else if(I==='"'||I==="'"||I==="`")A=I,j+=I;else if("([{".includes(I))O++,j+=I;else if(")]}".includes(I))O--,j+=I;else if(I===","&&O===0)M.push(j),j="";else j+=I}if(j.trim())M.push(j);return M},K=(N,M)=>{let O=0;for(let A=M;A<N.length;A++)if(N[A]==="(")O++;else if(N[A]===")"&&--O===0)return A;return-1},V=(N)=>{let M=$F(J,N).split("/")[0];return!!M&&M!=="__self__"&&!zz(i4(J,M))&&[z,X].some((O)=>O!==J&&zz(i4(O,M)))},G=(N)=>{let M=new Map,O=new Map,A=[],j=0,F=(I,T)=>{let C=I.trim().replace(/^await\s+/,"").replace(/\s+as\s+\w+$/,"").replace(/!$/,"");if(/^import\.meta\.(dir|dirname)$|^__dirname$/.test(C))return J;if(C==="process.cwd()")return N;let P=/^process\.env(?:\.[\w$]+|\[[^\]]+\])\s*(?:\?\?|\|\|)\s*([\s\S]+)$/.exec(C);if(P)return F(P[1],T);if(C==="fileURLToPath(import.meta.url)"||C==="__filename")return i4(J,"__self__");let D=/^fileURLToPath\(new URL\((["'])([^"']*)\1\s*,\s*import\.meta\.url\)\)$/.exec(C);if(D)return rK0(J,D[2]);let R=/^(["'`])((?:\\.|(?!\1)[^\\])*)\1$/.exec(C);if(R)return R[2].includes("${")?null:R[2];if(/^[A-Za-z_$][\w$]*$/.test(C))return M.get(C)??null;let E=/^(?:path\.)?(join|resolve|dirname)\(([\s\S]*)\)$/.exec(C);if(!E)return null;let w=W(E[2]),_=w.map((y)=>F(y,T));if(_.some((y)=>y===null))return null;if(E[1]==="dirname")return JF(_[0]);let h=rK0(..._);if(T&&($F(J,h).startsWith("..")||V(h))&&w.some((y)=>/^\s*["'`]/.test(y)))O.set(`${j}|${C}`,{out:h,rel:$F(X,h)});return h};for(let I of Q.split(`
-`)){j++;for(let P of I.matchAll(La8)){let D=K(I,P.index+P[0].length-1);if(D>0)for(let R of W(I.slice(P.index+P[0].length,D))){let E=F(R,!1);if(E)A.push(E)}}let T=/^\s*(?:await\s+)?(?:expect|assert\w*)\b|\b(?:write\w*|mkdir\w*|rm\w*|cp\w*|copy\w*|rename\w*|symlink\w*|mkdtemp\w*|tmpdir|outputFile|touch)\b/.test(I),C=/^\s*(?:export\s+)?(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*(?::[^=]+)?=\s*(.+?);?\s*$/.exec(I);if(C){let P=F(C[2],!T);if(P!==null)M.set(C[1],P);continue}if(T)continue;for(let P of I.matchAll(/(?:path\.)?(?:join|resolve)\(/g)){let D=K(I,P.index+P[0].length-1);if(D>0)F(I.slice(P.index,D+1),!0)}}return{reports:O,created:A}},H=[...new Set([z,X])].map(G),q=(N)=>!!Y&&N.split("/").some((M,O,A)=>{let j=A.slice(0,O+1).join("/");return(O>0||A.length===1)&&!zz(i4(X,j))&&new RegExp(`(?<![\\w-])${j.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?![\\w-])`).test(Y)}),U=(N,M)=>{let O=N.rel;if(!O||O.startsWith("..")||Ma8(O)||/(^|\/)(\w*_modules|\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(O)||zz(N.out)||q(O))return!1;if(M.some((A)=>A===N.out||A.startsWith(N.out+"/")||N.out.startsWith(A+"/")))return!1;return r8(X,["check-ignore","-q","--",O],{timeout:5000}).status!==0},B=[];for(let[N,M]of H[0].reports)if(H.every((O)=>O.reports.has(N)&&U(O.reports.get(N),O.created))&&!B.includes(M.rel))B.push(M.rel);return B.slice(0,3)}function QV0(Z,$){if(Z.length===0)return null;let J=(X)=>{let Y=Na8(X),Q=[...new Set($.flatMap((z)=>{let W=z.split("/"),K=W.indexOf(Y);return K>=0&&W.slice(0,K+1).join("/")!==X?[W.slice(0,K+1).join("/")]:[]}))].slice(0,3);return Q.length?`${X} (a path named ${Y} exists at ${Q.join(", ")})`:X};return`references repo path(s) that do not exist in the repository and that the plan does not create: ${Z.map(J).join("; ")}. Locate the real code by searching the repository; do not copy a name from the task text as a path`}var _v=(Z)=>{try{let $=Oa8(eK0(Z,"utf8"));return $&&typeof $==="object"&&!Array.isArray($)?$:null}catch{return null}},XF=(Z,$)=>[`${Z} Each was rejected:
+`),X=J.findIndex((K)=>/\bprocess\.env\.(HOME|USERPROFILE)\s*=(?!=)|\benv\[\s*["'](HOME|USERPROFILE)["']\s*\]\s*=(?!=)|^\s*(export\s+)?(HOME|USERPROFILE)=|\bexport\s+(HOME|USERPROFILE)\b|\bsetenv\(\s*["'](HOME|USERPROFILE)["']|\benv\s*:\s*\{[^}]*\b(HOME|USERPROFILE)\s*:|\bpatch\.dict\([^)]*["'](HOME|USERPROFILE)["']/.test(K)),Y=/\bhomedir\s*\(|\bPath\.home\s*\(|\bexpanduser\s*\(|\$\{?HOME\b|\$\{?USERPROFILE\b|\bprocess\.env\.(HOME|USERPROFILE)\b|["'`]~\//,Q=String.raw`(?:file:\/\/)?(?:\/(?:Users|home|root)\/|[A-Za-z]:\\+Users\\)`,z=new RegExp(String.raw`\b(?:from|import|require)\s*\(?\s*["'`+"`"+String.raw`]${Q}|^\s*(?:source|\.)\s+["']?${Q}`),W=/["'`\/]\.[A-Za-z][\w-]*(?:[\/"'`]|$)|\b(?:import|require|source|spawn\w*|exec\w*|pathToFileURL|readFile\w*)\b/;for(let K of J.slice(0,X<0?J.length:X)){if(/^\s*(?:await\s+)?(?:expect|assert\w*)\b/.test(K))continue;if(Y.test(K)&&W.test(K)||z.test(K))return"resolves the code under test outside the repo via a home-directory path; target repo-relative paths (relative to this test file or the repo root) so the check exercises the change"}return null}function Aa8(Z,$,J){let X=M9($);if(X)return fG(X,$,$F($,i4(Z,J)))?.cwd??$;let Y=(z)=>{try{return tK0(z).some((W)=>{if(!W.endsWith(".json"))return!1;let K=_v(i4(z,W));return!!K&&typeof K.name==="string"&&Object.keys(K).length>1})}catch{return!1}},Q=Z;while(Q!==$&&Q!==JF(Q)&&!Y(Q))Q=JF(Q);return Q}function YV0(Z,$,J,X,Y){if(!/\.[cm]?[jt]sx?$/.test($))return[];let Q=Z.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1").replace(/\(\s+/g,"(").replace(/\s+\)/g,")").replace(/,\s*\n\s*/g,", ").replace(/=\s*\n\s*/g,"= "),z=Aa8(J,X,$),W=(N)=>{let M=[],O=0,A="",j="";for(let F=0;F<N.length;F++){let I=N[F];if(A){if(j+=I,I==="\\")j+=N[++F]??"";else if(I===A)A=""}else if(I==='"'||I==="'"||I==="`")A=I,j+=I;else if("([{".includes(I))O++,j+=I;else if(")]}".includes(I))O--,j+=I;else if(I===","&&O===0)M.push(j),j="";else j+=I}if(j.trim())M.push(j);return M},K=(N,M)=>{let O=0;for(let A=M;A<N.length;A++)if(N[A]==="(")O++;else if(N[A]===")"&&--O===0)return A;return-1},V=(N)=>{let M=$F(J,N).split("/")[0];return!!M&&M!=="__self__"&&!zz(i4(J,M))&&[z,X].some((O)=>O!==J&&zz(i4(O,M)))},G=(N)=>{let M=new Map,O=new Map,A=[],j=0,F=(I,T)=>{let C=I.trim().replace(/^await\s+/,"").replace(/\s+as\s+\w+$/,"").replace(/!$/,"");if(/^import\.meta\.(dir|dirname)$|^__dirname$/.test(C))return J;if(C==="process.cwd()")return N;let P=/^process\.env(?:\.[\w$]+|\[[^\]]+\])\s*(?:\?\?|\|\|)\s*([\s\S]+)$/.exec(C);if(P)return F(P[1],T);if(C==="fileURLToPath(import.meta.url)"||C==="__filename")return i4(J,"__self__");let D=/^fileURLToPath\(new URL\((["'])([^"']*)\1\s*,\s*import\.meta\.url\)\)$/.exec(C);if(D)return rK0(J,D[2]);let R=/^(["'`])((?:\\.|(?!\1)[^\\])*)\1$/.exec(C);if(R)return R[2].includes("${")?null:R[2];if(/^[A-Za-z_$][\w$]*$/.test(C))return M.get(C)??null;let E=/^(?:path\.)?(join|resolve|dirname)\(([\s\S]*)\)$/.exec(C);if(!E)return null;let w=W(E[2]),_=w.map((y)=>F(y,T));if(_.some((y)=>y===null))return null;if(E[1]==="dirname")return JF(_[0]);let h=rK0(..._);if(T&&($F(J,h).startsWith("..")||V(h))&&w.some((y)=>/^\s*["'`]/.test(y)))O.set(`${j}|${C}`,{out:h,rel:$F(X,h)});return h};for(let I of Q.split(`
+`)){j++;for(let P of I.matchAll(La8)){let D=K(I,P.index+P[0].length-1);if(D>0)for(let R of W(I.slice(P.index+P[0].length,D))){let E=F(R,!1);if(E)A.push(E)}}let T=/^\s*(?:await\s+)?(?:expect|assert\w*)\b|\b(?:write\w*|mkdir\w*|rm\w*|cp\w*|copy\w*|rename\w*|symlink\w*|mkdtemp\w*|tmpdir|outputFile|touch)\b/.test(I),C=/^\s*(?:export\s+)?(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*(?::[^=]+)?=\s*(.+?);?\s*$/.exec(I);if(C){let P=F(C[2],!T);if(P!==null)M.set(C[1],P);continue}if(T)continue;for(let P of I.matchAll(/(?:path\.)?(?:join|resolve)\(/g)){let D=K(I,P.index+P[0].length-1);if(D>0)F(I.slice(P.index,D+1),!0)}}return{reports:O,created:A}},H=[...new Set([z,X])].map(G),q=(N)=>!!Y&&N.split("/").some((M,O,A)=>{let j=A.slice(0,O+1).join("/");return(O>0||A.length===1)&&!zz(i4(X,j))&&new RegExp(`(?<![\\w-])${j.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?![\\w-])`).test(Y)}),U=(N,M)=>{let O=N.rel;if(!O||O.startsWith("..")||Ma8(O)||/(^|\/)(\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(O)||zz(N.out)||q(O))return!1;if(M.some((A)=>A===N.out||A.startsWith(N.out+"/")||N.out.startsWith(A+"/")))return!1;return r8(X,["check-ignore","-q","--",O],{timeout:5000}).status!==0},B=[];for(let[N,M]of H[0].reports)if(H.every((O)=>O.reports.has(N)&&U(O.reports.get(N),O.created))&&!B.includes(M.rel))B.push(M.rel);return B.slice(0,3)}function QV0(Z,$){if(Z.length===0)return null;let J=(X)=>{let Y=Na8(X),Q=[...new Set($.flatMap((z)=>{let W=z.split("/"),K=W.indexOf(Y);return K>=0&&W.slice(0,K+1).join("/")!==X?[W.slice(0,K+1).join("/")]:[]}))].slice(0,3);return Q.length?`${X} (a path named ${Y} exists at ${Q.join(", ")})`:X};return`references repo path(s) that do not exist in the repository and that the plan does not create: ${Z.map(J).join("; ")}. Locate the real code by searching the repository; do not copy a name from the task text as a path`}var _v=(Z)=>{try{let $=Oa8(eK0(Z,"utf8"));return $&&typeof $==="object"&&!Array.isArray($)?$:null}catch{return null}},XF=(Z,$)=>[`${Z} Each was rejected:
 ${$.map((J)=>`- ${J.name}: ${J.why}`).join(`
 `)}`,'Point every reference at the repository code with repo-relative paths (for example join(import.meta.dir, "..", "<repo path>") or the equivalent for this runner). Do not read the home directory, $HOME or an environment variable that falls back to one. Write nothing else.'].join(`
 
@@ -3227,4 +3227,4 @@ Unknown commands exit 2 with a suggestion; run 'loki help' for the full list.
 `);{let{suggestCommand:X}=await Promise.resolve().then(() => (o7(),ui)),Y=$===void 0?void 0:X($);if(Y)process.stderr.write(`Did you mean 'loki ${Y}'?
 `)}return process.stderr.write(_S0),2}}bj0();var xS0=()=>globalThis[Symbol.for("loki.ownsStopSignals")]===!0;process.on("SIGINT",()=>{if(!xS0())process.exit(130)});process.on("SIGTERM",()=>{if(!xS0())process.exit(143)});var pG9=await uG9(Bun.argv.slice(2));process.exit(pG9);
 
-//# debugId=37BB52F382956E4C7095686EA5B512AA
+//# debugId=89474DFF4C109BA7D8AE00272B0BB3B0

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.17.86'
+__version__ = '11.17.87'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.17.86",
+  "version": "11.17.87",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",
@@ -160,5 +160,5 @@
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2"
   },
-  "gitHead": "b42571cbb5e6bfc279ef234362578c32db016c35"
+  "gitHead": "a7797a00e98fef4bdb5c03277beeb397e9e4bd97"
 }

package/packages/control-plane/dist/server.js

@@ -13994,9 +13994,9 @@ function outOfRepoTarget(content) {
   return null;
 }
 function nearestPackageRoot(testDir, repoDir, fileName) {
-  const site = siteFor(loadProjectApi(repoDir), repoDir, relative8(repoDir, join53(testDir, fileName)));
-  if (site)
-    return site.cwd;
+  const api = loadProjectApi(repoDir);
+  if (api)
+    return siteFor(api, repoDir, relative8(repoDir, join53(testDir, fileName)))?.cwd ?? repoDir;
   const shaped = (d) => {
     try {
       return readdirSync19(d).some((f) => {
@@ -14135,7 +14135,7 @@ function phantomRepoPaths(content, fileName, testDir, repoDir, planText) {
   });
   const phantom = (r, created) => {
     const rel = r.rel;
-    if (!rel || rel.startsWith("..") || isAbsolute8(rel) || /(^|\/)(\w*_modules|\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(rel) || existsSync33(r.out) || planned(rel))
+    if (!rel || rel.startsWith("..") || isAbsolute8(rel) || /(^|\/)(\.git|\.loki|dist|build|coverage|tmp)(\/|$)/.test(rel) || existsSync33(r.out) || planned(rel))
       return false;
     if (created.some((c) => c === r.out || c.startsWith(r.out + "/") || r.out.startsWith(c + "/")))
       return false;

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.17.86",
+  "version": "11.17.87",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/web-app/dist/assets/{AdminPage-DJSuMB8i.js → AdminPage-CNeNhBA1.js}

@@ -1,4 +1,4 @@
-import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-C6s555Mx.js";import{B as C}from"./Button-v22j2c9E.js";import{T as $e}from"./trending-up--eVRmPag.js";import{C as z}from"./clock-B47_B_ii.js";import{A as Be,U as ue,M as De}from"./Avatar-BP5Nsb9e.js";import{A as J}from"./activity-D6nurgAK.js";import{R as pe}from"./refresh-cw-hMIy8me3.js";import{G as ze}from"./globe-PsguIjjJ.js";import{C as Le}from"./chevron-left-BG-zNcFK.js";import{C as je}from"./check-9DRZWn9M.js";import{D as Y}from"./dollar-sign-BRuvPGh1.js";import{U as Te}from"./user-CxzEETKP.js";import{D as Me}from"./database-C6TrAajN.js";import{L as Ue}from"./lock-Chgi8cYo.js";import{S as Re}from"./scroll-text-DtfT6L-s.js";import{S as Ie}from"./shield-alert-CvSJFTUU.js";/**
+import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-DIYVwOCP.js";import{B as C}from"./Button-WASlvC0u.js";import{T as $e}from"./trending-up-CPGnCK6B.js";import{C as z}from"./clock-D-SACcb_.js";import{A as Be,U as ue,M as De}from"./Avatar-C2SH7F16.js";import{A as J}from"./activity-C74Ipv7I.js";import{R as pe}from"./refresh-cw-MgXr8aKX.js";import{G as ze}from"./globe-leYG4Jfb.js";import{C as Le}from"./chevron-left-DhPjMUqL.js";import{C as je}from"./check-D1AZc9YJ.js";import{D as Y}from"./dollar-sign-BUSC6Q1K.js";import{U as Te}from"./user-BDpvchty.js";import{D as Me}from"./database-0PlmODzY.js";import{L as Ue}from"./lock-Bjpl86Tq.js";import{S as Re}from"./scroll-text-BUKnhDMH.js";import{S as Ie}from"./shield-alert-imWIwu4B.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Avatar-BP5Nsb9e.js → Avatar-C2SH7F16.js}

@@ -1,4 +1,4 @@
-import{c as l,j as s}from"./index-C6s555Mx.js";/**
+import{c as l,j as s}from"./index-DIYVwOCP.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Badge-BS8BK5L7.js → Badge-jMYWuRrA.js}

@@ -1 +1 @@
-import{j as e}from"./index-C6s555Mx.js";import{C as r}from"./clock-B47_B_ii.js";import{C as a}from"./circle-alert-Dcx0BAmt.js";import{C as l}from"./check-9DRZWn9M.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
+import{j as e}from"./index-DIYVwOCP.js";import{C as r}from"./clock-D-SACcb_.js";import{C as a}from"./circle-alert-BX-iquXZ.js";import{C as l}from"./check-D1AZc9YJ.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};

package/web-app/dist/assets/{Button-v22j2c9E.js → Button-WASlvC0u.js}

@@ -1 +1 @@
-import{r as p,j as t}from"./index-C6s555Mx.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
+import{r as p,j as t}from"./index-DIYVwOCP.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};

package/web-app/dist/assets/{CockpitPage-DKGG8nlL.js → CockpitPage-CQcCP-1A.js}

@@ -1,4 +1,4 @@
-import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-C6s555Mx.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-BBdE8Lt2.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-DHdI4zYf.js";import{C as oe}from"./check-9DRZWn9M.js";import{C as Ye}from"./clock-B47_B_ii.js";import{D as Xe}from"./dollar-sign-BRuvPGh1.js";import{U as Ze}from"./upload-CkAcFIGO.js";import{L as V}from"./loader-circle-D25Ogf8Z.js";/**
+import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-DIYVwOCP.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-COYUnFy7.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-W1aRbxAH.js";import{C as oe}from"./check-D1AZc9YJ.js";import{C as Ye}from"./clock-D-SACcb_.js";import{D as Xe}from"./dollar-sign-BUSC6Q1K.js";import{U as Ze}from"./upload-RADYcj7G.js";import{L as V}from"./loader-circle-BUFtZaWB.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{ComparePage-DQOwJ7uN.js → ComparePage-C4icvbbL.js}

@@ -1 +1 @@
-import{r as o,j as e}from"./index-C6s555Mx.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};
+import{r as o,j as e}from"./index-DIYVwOCP.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};

package/web-app/dist/assets/{ErrorBoundary-BBdE8Lt2.js → ErrorBoundary-COYUnFy7.js}

@@ -1,4 +1,4 @@
-import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-C6s555Mx.js";/**
+import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-DIYVwOCP.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{EvidenceReceiptPanel-BzcTQcMD.js → EvidenceReceiptPanel-C-I59Crn.js}

@@ -1 +1 @@
-import{r as l,a as x,j as e}from"./index-C6s555Mx.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};
+import{r as l,a as x,j as e}from"./index-DIYVwOCP.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};

package/web-app/dist/assets/{GitHubIssuesPanel-C1F_pefx.js → GitHubIssuesPanel-DGw_Q5MC.js}

@@ -1,4 +1,4 @@
-import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-C6s555Mx.js";import{B as N}from"./Button-v22j2c9E.js";import{C as y}from"./thumbs-up-DHdI4zYf.js";import{R as S}from"./refresh-cw-hMIy8me3.js";import{C as z}from"./circle-alert-Dcx0BAmt.js";import{U as D}from"./user-CxzEETKP.js";import{L as G}from"./loader-circle-D25Ogf8Z.js";import{R as T}from"./rotate-ccw-NWmygQVd.js";/**
+import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-DIYVwOCP.js";import{B as N}from"./Button-WASlvC0u.js";import{C as y}from"./thumbs-up-W1aRbxAH.js";import{R as S}from"./refresh-cw-MgXr8aKX.js";import{C as z}from"./circle-alert-BX-iquXZ.js";import{U as D}from"./user-BDpvchty.js";import{L as G}from"./loader-circle-BUFtZaWB.js";import{R as T}from"./rotate-ccw-Cc7sJF7Y.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{GitHubPRsPanel-BHfmCRZs.js → GitHubPRsPanel-BvhasF7o.js}

@@ -1,4 +1,4 @@
-import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-C6s555Mx.js";import{B as y}from"./Button-v22j2c9E.js";import{C as ge}from"./chevron-left-BG-zNcFK.js";import{G as P}from"./thumbs-up-DHdI4zYf.js";import{R as $}from"./refresh-cw-hMIy8me3.js";import{C as Ne}from"./circle-alert-Dcx0BAmt.js";import{L as Q,S as je}from"./ProjectPage-CShDo2NH.js";import{S as se}from"./shield-alert-CvSJFTUU.js";import{F as ye}from"./file-code-corner-BCBOQ1JD.js";import{C as V}from"./clock-B47_B_ii.js";import{C as re}from"./check-9DRZWn9M.js";import"./ErrorBoundary-BBdE8Lt2.js";import"./TerminalOutput-CBFWbQTl.js";import"./lock-Chgi8cYo.js";import"./package-DtR8QJB5.js";import"./file-plus-C3J6ZJfF.js";import"./activity-D6nurgAK.js";import"./scroll-text-DtfT6L-s.js";import"./bot-DQrZXFJ_.js";import"./loader-circle-D25Ogf8Z.js";import"./hammer-4HIqIKwM.js";import"./dollar-sign-BRuvPGh1.js";import"./globe-PsguIjjJ.js";import"./trash-2-DH6gMpd-.js";import"./upload-CkAcFIGO.js";import"./plus-5QPF_PWt.js";import"./rotate-ccw-NWmygQVd.js";import"./code-xml-D2ezV2Oj.js";import"./trending-up--eVRmPag.js";import"./layers-iHmKT5In.js";import"./trending-down-CFRHfOxQ.js";import"./server-Bq_cl9Y2.js";/**
+import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-DIYVwOCP.js";import{B as y}from"./Button-WASlvC0u.js";import{C as ge}from"./chevron-left-DhPjMUqL.js";import{G as P}from"./thumbs-up-W1aRbxAH.js";import{R as $}from"./refresh-cw-MgXr8aKX.js";import{C as Ne}from"./circle-alert-BX-iquXZ.js";import{L as Q,S as je}from"./ProjectPage-C-8Kf4rR.js";import{S as se}from"./shield-alert-imWIwu4B.js";import{F as ye}from"./file-code-corner-B6imbr2h.js";import{C as V}from"./clock-D-SACcb_.js";import{C as re}from"./check-D1AZc9YJ.js";import"./ErrorBoundary-COYUnFy7.js";import"./TerminalOutput-CTP1Erdi.js";import"./lock-Bjpl86Tq.js";import"./package-C_eU6Y7j.js";import"./file-plus-D3aLIswm.js";import"./activity-C74Ipv7I.js";import"./scroll-text-BUKnhDMH.js";import"./bot-DEE_soFP.js";import"./loader-circle-BUFtZaWB.js";import"./hammer-Dkyi8JPa.js";import"./dollar-sign-BUSC6Q1K.js";import"./globe-leYG4Jfb.js";import"./trash-2-BSTKn4aB.js";import"./upload-RADYcj7G.js";import"./plus--ec3h52W.js";import"./rotate-ccw-Cc7sJF7Y.js";import"./code-xml-DN0eETJo.js";import"./trending-up-CPGnCK6B.js";import"./layers-DlZqXoHB.js";import"./trending-down-C4t7CSx-.js";import"./server-DdxW5KGq.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.