loki-mode 11.17.99 → 11.17.101

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.17.99
+# Loki Mode v11.17.101
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.17.99 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.17.101 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.17.99
+11.17.101

package/autonomy/lib/engine10-push-gitlab.sh

@@ -78,8 +78,32 @@ def="$(_e10_glab api "projects/$enc" 2>/dev/null \
 
 tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push-gl.XXXXXX")" || die "mktemp failed" 1
 trap 'rm -rf "$tmp"' EXIT
+# FC-TRUSTED-PUSH-PARTIAL-CLONE: logically equivalent to the seeding in run.sh
+# _loki_trusted_push (this child cannot source run.sh). A partial agent clone
+# cannot serve objects it never downloaded, so seed the temp repo with the
+# pinned origin as a promisor remote and fetch its refs first. The agent pack
+# is thin, so the client lazy-fetches delta bases from the origin during the
+# agent fetch; the agent-dir upload-pack (the process that reads agent config)
+# runs through env -i: no token, no helper config, no HOME, no lazy fetch.
+partial="" up=""
+if [ -n "$(git -C "$dir" config --get extensions.partialclone 2>/dev/null)" ] \
+    || git -C "$dir" config --get-regexp '^remote\..*\.promisor$' 2>/dev/null | grep -Eqi ' (true|yes|on|1)$'; then
+    partial=1
+    up="/usr/bin/env -i PATH=/usr/bin:/bin GIT_NO_LAZY_FETCH=1 $(printf '%q' "$(command -v git)") upload-pack"
+fi
 git init -q --template= "$tmp" >/dev/null 2>&1 \
-    && git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1 \
+    && { [ -z "$partial" ] || {
+        git -C "$tmp" config core.repositoryformatversion 1 \
+        && git -C "$tmp" config extensions.partialclone loki-base \
+        && git -C "$tmp" config remote.loki-base.url "$url" \
+        && git -C "$tmp" config remote.loki-base.promisor true \
+        && git -C "$tmp" config remote.loki-base.partialclonefilter blob:none \
+        && GIT_TERMINAL_PROMPT=0 git -C "$tmp" fetch -q --no-tags --filter=blob:none loki-base "+refs/heads/*:refs/remotes/loki-base/*" >/dev/null 2>&1; }; } \
+    && { if [ -n "$partial" ]; then
+        GIT_TERMINAL_PROMPT=0 git -C "$tmp" fetch -q --no-tags --update-shallow --upload-pack "$up" "$dir" "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1
+    else
+        git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1
+    fi; } \
     && git -C "$tmp" rev-parse -q --verify "refs/heads/$branch" >/dev/null 2>&1 \
     || die "could not stage branch '$branch' in a fresh repo"
 git -C "$tmp" push -q "$url" "refs/heads/$branch:refs/heads/$branch" || die "push failed (rc=$?)"

package/autonomy/run.sh

@@ -6071,6 +6071,7 @@ _loki_trusted_push() {
             return 2 ;;
     esac
     _repo="$(_loki_github_repo_from_url "$_url")"
+    local _origin_url="$_url"
     if [ -n "$_dest" ]; then
         if ! _loki_github_repo_from_url "https://github.com/${_dest}.git" >/dev/null; then
             log_warn "Not pushing branch '$_branch': fork destination '$_dest' is not a plain OWNER/REPO."
@@ -6088,11 +6089,41 @@ _loki_trusted_push() {
         return 2
     fi
     _tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push.XXXXXX")" || return 1
+    # FC-TRUSTED-PUSH-PARTIAL-CLONE: a partial agent clone (extensions.partialclone,
+    # or a remote.<n>.promisor true/yes/on/1 on newer git; both read as data)
+    # holds objects it never downloaded, and upload-pack does not lazy-fetch
+    # them, so the branch fetch below dies. Seed the temp repo with the
+    # validated origin (_origin_url, captured before a fork _dest overwrites
+    # _url) as a promisor remote and fetch its refs first. The agent pack is
+    # thin (deltas against blobs the temp repo only knows by id), so the client
+    # lazy-fetches those delta bases from loki-base during the agent fetch: that
+    # fetch therefore runs under "$_runner" too. The credentials stay on the
+    # client side only: the agent-dir upload-pack, the one process that reads
+    # agent config, is started through `env -i` with no credentials, no helper
+    # config, no HOME and no lazy fetch. GIT_TERMINAL_PROMPT=0 so a refused
+    # token never waits on a username. Non-partial repos skip all of this.
+    local _partial="" _up=""
+    if [ -n "$(git -C "$_dir" config --get extensions.partialclone 2>/dev/null)" ] \
+        || git -C "$_dir" config --get-regexp '^remote\..*\.promisor$' 2>/dev/null | grep -Eqi ' (true|yes|on|1)$'; then
+        _partial=1
+        _up="/usr/bin/env -i PATH=/usr/bin:/bin GIT_NO_LAZY_FETCH=1 $(printf '%q' "$(command -v git)") upload-pack"
+    fi
     # --update-shallow: a shallow agent repo's history ends in shallow roots,
     # which a plain fetch rejects while still exiting 0. The rev-parse makes a
     # silently empty fetch fail here instead of at the push.
     if git init -q --template= "$_tmp" >/dev/null 2>&1 \
-        && git -C "$_tmp" fetch -q --no-tags --update-shallow "$_dir" "+refs/heads/$_branch:refs/heads/$_branch" >/dev/null 2>&1 \
+        && { [ -z "$_partial" ] || {
+            git -C "$_tmp" config core.repositoryformatversion 1 \
+            && git -C "$_tmp" config extensions.partialclone loki-base \
+            && git -C "$_tmp" config remote.loki-base.url "$_origin_url" \
+            && git -C "$_tmp" config remote.loki-base.promisor true \
+            && git -C "$_tmp" config remote.loki-base.partialclonefilter blob:none \
+            && GIT_TERMINAL_PROMPT=0 "$_runner" git -C "$_tmp" fetch -q --no-tags --filter=blob:none loki-base "+refs/heads/*:refs/remotes/loki-base/*" >/dev/null 2>&1; }; } \
+        && { if [ -n "$_partial" ]; then
+            GIT_TERMINAL_PROMPT=0 "$_runner" git -C "$_tmp" fetch -q --no-tags --update-shallow --upload-pack "$_up" "$_dir" "+refs/heads/$_branch:refs/heads/$_branch" >/dev/null 2>&1
+        else
+            git -C "$_tmp" fetch -q --no-tags --update-shallow "$_dir" "+refs/heads/$_branch:refs/heads/$_branch" >/dev/null 2>&1
+        fi; } \
         && git -C "$_tmp" rev-parse -q --verify "refs/heads/$_branch" >/dev/null 2>&1; then
         _rc=0
         # `-C "$_tmp"`: git starts repository discovery in the fresh repo, so

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.17.99"
+__version__ = "11.17.101"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.99. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.17.101. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.17.99
+**Version:** v11.17.101
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/FAILURE-CLASSES.md

@@ -1269,6 +1269,14 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Mechanism: execution evidence, never proof text (a text or path match is gameable, and the real Wall locates scripts by basename search, never naming a path). One `execProves` plus `wallRedOnBaseOf` in package_suite.ts, fed by verify.ts through the existing runFullSuite opts (`wallBaseRed` from wall.base_run). A test-less package is N/A when (a) the Wall was red on base (base_run.fail > 0; missing, all not_run or green never credits), (b) it passed on head (proofFiles non-empty from wallProofOf, which already needs every Wall and holdout check to pass), and (c) the diff is known, non-empty after dropping this run's own Wall files, has no quoted path, and every remaining file is owned by that package. A red-on-base, green-on-head Wall over a diff confined to one package necessarily exercised that package's change. A diff spanning packages gets no credit from this rule; the in-package proof rule is kept.
 - Fixture: loki-ts/tests/engine10/monorepo_cwd.test.ts describe "FC-WALL-PROOF-PACKAGE-BLIND" (credited with base red and a single-package diff; NOT PROVEN with base green, base_run missing, a two-package diff, unknown, empty or quoted diff, Wall failed on head; wallRedOnBaseOf cases). Red before the fix, green after.
 
+## FC-WALL-FILE-OWNS-EVERY-PACKAGE The run's own passing Wall file at the repo root has no owning package, so every test-less package read as owning the diff and stayed NOT PROVEN
+- User-visible vs raw: user-visible. `loki start anthropics/claude-code#81826` on loki 11.17.99 sealed PARTIAL with "full suite: package scripts defines no test command" although the whole diff was under plugins/ (package `plugins`, credited by FC-WALL-PROOF-PACKAGE-BLIND) and `scripts` was untouched. Run e10-20261019T165943Z-a552: wall base_run fail=1, Wall green on head.
+- Law: a proof is not product. Ownership of a diff is decided by the product files it changes; an unknown, quoted or unowned product path still fails safe to owned.
+- Cause (measured): runPackageSuites `owns` counted changed files with no owning package as owned by every package; tests/loki_wall_*.test.ts (the root Wall) is such a file. execProves already excluded the Wall files; `owns` did not.
+- Siblings swept: execProves (already excludes Wall files), the proofFiles credit path (unchanged), and the quoted-path and unresolved-path rows of FC-CHANGED-PATH-QUOTED (still owned: only this run's passing Wall files, from proofFiles, are excluded).
+- Mechanism: one `product` list in runPackageSuites, the changed files minus this run's passing Wall files (the same set execProves excludes). Unknown diff or a Wall-only diff stays owned (fail-safe). A failed Wall has no proofFiles, so nothing is excluded.
+- Fixture: loki-ts/tests/engine10/monorepo_cwd.test.ts test "FC-WALL-FILE-OWNS-EVERY-PACKAGE" (N/A with a passing root Wall and an untouched test-less package; NOT PROVEN when the Wall failed or an unowned product path is present). Red on HEAD 2739c8e26 (1 fail), green after (38/0).
+
 ## FC-CHANGED-PATH-QUOTED A non-ASCII changed path came back from git as a quoted octal escape, so no consumer of changedFiles could match it to a package, Wall file or test
 - User-visible vs raw: user-visible. A diff in `frontend/src/café.ts` made the test-less frontend package read as not owned by the diff, its note became N/A, not_proven was empty and the run could seal VERIFIED with the frontend edit unproven (HIGH re-review of FC-SEAL-NA-AS-UNPROVEN r2).
 - Law broken: a git path must be the real path; an unresolvable path must fail safe, never read as "not in the package".
@@ -1356,3 +1364,11 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Fixture: loki-ts/tests/util/safe_git_extdiff.test.ts describe "FC-REVIEWER-GIT-CONFIG-EXEC reviewerGitEnv" (control: plain git fires fsmonitor, diff.external and the driver command; with the real builder none fire and status, diff, show -p and log -p still return real patches; wiring check on both TS spawns). Mutation-checked: dropping the driver-key enumeration, the fsmonitor entry or the GIT_EXTERNAL_DIFF override each turns the fixture red.
 - Round 2 (HIGH review block): the same mechanism now also covers gpg exec (log.showSignature=false and gpg.program, gpg.openpgp.program, gpg.ssh.program, gpg.x509.program set to false), partial-clone lazy fetch firing core.sshCommand (GIT_NO_LAZY_FETCH=1 plus repo network command keys enumerated with NET_CMD_KEY_RE and blanked), a shim that ends options with `--` so a file named `-n` is a path, textconv blanked to `cat` (a blank one dies on log -p), and GIT_PAGER=cat. reviewerGitEnv takes a required base, and the two TS reviewer spawns pass tokenFreeEnv(process.env); full_env_spawn_guard.test.ts flags a reviewerGitEnv call with no base or a non-token-free base in the spawning reviewers. Fixtures in safe_git_extdiff.test.ts (gpg, lazy fetch, `-n`, textconv) and the guard test; each mutation (drop gpg entries, drop GIT_NO_LAZY_FETCH, drop `--`, textconv to blank, non-token-free base) turns its fixture red.
 - Round 3: remote.<n>.uploadpack/receivepack are first-value-wins, so a repo-local value beats an env blank. reviewerGitEnv therefore throws when the repo sets either key, and throws on a partial clone (extensions.partialClone) when git is older than 2.44 (GIT_NO_LAZY_FETCH is ignored there); both fixtures are mutation-checked. The spawn guard now requires tokenFreeEnv( on every reviewerGitEnv call (per call, not per file); the only raw process.env base is the cli.ts reviewer-git-env print, an explicit file-and-line row that fails the guard when stale.
+
+## FC-TRUSTED-PUSH-PARTIAL-CLONE The trusted push fetches the run branch out of a partial (--filter=blob:none) agent clone into a temp repo, and upload-pack dies serving objects the clone never downloaded, so a VERIFIED run ends with no PR
+- User-visible vs raw: user-visible. A VERIFIED loki 11.17.100 run on anthropics/claude-code#81826 (clone made with --filter=blob:none) ended `engine10-push: push to fork asklokesh/claude-code refused or failed (rc=1)` and opened no PR.
+- Law broken: a verified result must reach the user on every supported checkout shape (full, shallow, partial); a push helper must not depend on the agent repo being able to serve every reachable object.
+- Cause (measured): `_loki_trusted_push` fetches from the agent repo path into a fresh template-less repo. On a partial clone upload-pack runs pack-objects over history whose blobs were never downloaded and modern git sets no lazy fetch there: `git-pack-objects died with error ... possible repository corruption on the remote side`.
+- Siblings swept: autonomy/lib/engine10-push.sh `_e10_local_push` (same fetch-from-path into a temp repo, left unchanged on purpose: its pinned origin is a local path, so a lazy blob fetch would read the operator's own local repo, which holds every object, and there is no remote network credential to seed; the partial-clone failure is a remote-origin shape); autonomy/lib/engine10-push-gitlab.sh (same fetch from "$dir"; fixed with the same seeding, kept logically equivalent in the child because it is a standalone script that cannot source run.sh, and tests/test-engine10-push-gitlab.sh runs it that way); loki-ts/src/runner/attempts.ts only calls the shell push and holds no copy. No other fetch or clone from the agent repo path exists in autonomy/ or loki-ts/src.
+- Mechanism: in `_loki_trusted_push`, when the agent repo is partial (extensions.partialclone non-empty, or any remote.<n>.promisor true/yes/on/1, both read as data), the temp repo is seeded with the validated origin URL (captured before a fork destination overwrites it) as promisor remote `loki-base`, and its refs are fetched with --filter=blob:none under the credential runner. The agent pack is thin (deltas against blobs the temp repo knows only by id), so the client lazy-fetches those delta bases from loki-base during the agent fetch; that fetch therefore also runs under the runner, with the agent-dir upload-pack (the only process that reads agent config) started through `--upload-pack '/usr/bin/env -i PATH=/usr/bin:/bin GIT_NO_LAZY_FETCH=1 git upload-pack'`, so no token, helper config, HOME or lazy fetch reaches it. Option chosen over prefetching delta-base blobs (git may pick any blob in the edge trees as a base, so an enumeration is a heuristic that fails closed only on private origins and costs a tree walk on large repos) and over an unfiltered seed (downloads full history). GIT_TERMINAL_PROMPT=0 on both fetches. Non-partial repos take the old path with no extra network or runner. A failed seeding or agent fetch fails closed.
+- Fixture: tests/test-engine10-push-gitlab.sh (partial-clone block, red before with "could not stage branch", green after) and tests/test-trusted-push-agent-config.sh "FC-TRUSTED-PUSH-PARTIAL-CLONE" block (a real blob:none clone of a local origin with a history-only blob; pushes the agent branch; asserts the non-partial path never writes remote.loki-base config). Red before (rc=1, no push), green after. Review round 1 (HIGH, reproduced): the agent fetch ran token-less, so a private origin refused the lazy delta-base fetch; both fixtures now add a 20000-line file edited by the agent, an origin that refuses token-less reads through a packObjectsHook in the test global config, and a spy on the agent-dir upload-pack environment. Red on 95bf13b9a for the GitHub path (rc=1, nothing pushed); the GitLab child holds its token process-wide, so only its env-scrub assertion was red there.

package/docs/v10/PROGRESS.md

@@ -2671,3 +2671,9 @@ v11.17.21 published (Release success on 462fbc40a; npm latest 11.17.21, next 11.
 
 ## 2026-10-19T16:47Z (CoS) v11.17.99
 - 11.17.99: one batched release per founder directive. FC-WALL-PROOF-PACKAGE-BLIND (opus APPROVE r2), FC-REVIEWER-GIT-CONFIG-EXEC (opus APPROVE r3), engine10 budget fix, plus CI pruned to release.yml (1fc608f34). Targeted suites 203 pass 0 fail; tests/util 476/0; tsc clean. Full bun suite hung past 1700s (no verdict).
+
+## 2026-10-19T17:09Z (CoS) v11.17.100
+- 11.17.100: FC-WALL-FILE-OWNS-EVERY-PACKAGE (opus HIGH review). claude-code#81826 on 11.17.99 sealed PARTIAL on untouched package `scripts` because the root Wall file read as owned by every test-less package. monorepo_cwd 38/0 (red on HEAD 2739c8e26: 1 fail), tsc clean.
+
+## 2026-10-19T18:37Z (CoS) v11.17.101
+- 11.17.101: FC-TRUSTED-PUSH-PARTIAL-CLONE (opus HIGH APPROVE; trusted-push-agent-config 62/0, engine10-push-gitlab 25/0). claude-code#81826 on 11.17.100 sealed VERIFIED but the fork push failed rc=1 in a partial clone.