loki-mode 11.2.0 → 11.2.2

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.2.0'
+__version__ = '11.2.2'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.2.0",
+  "version": "11.2.2",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",

package/packages/control-plane/dist/server.js

@@ -6959,8 +6959,8 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync24, readFileSync as readFileSync30, statSync as statSync15 } from "fs";
-import { join as join39, resolve as resolve8, sep as sep14 } from "path";
+import { existsSync as existsSync24, readFileSync as readFileSync31, statSync as statSync15 } from "fs";
+import { join as join40, resolve as resolve8, sep as sep14 } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -17519,13 +17519,13 @@ function mount20(ctx) {
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync28, realpathSync as realpathSync17 } from "fs";
+import { readFileSync as readFileSync29, realpathSync as realpathSync17 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
-import { join as join37, sep as sep13 } from "path";
+import { join as join38, sep as sep13 } from "path";
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync22, readdirSync as readdirSync12, readFileSync as readFileSync27, statSync as statSync14 } from "fs";
-import { dirname as dirname14, join as join36 } from "path";
+import { existsSync as existsSync22, readdirSync as readdirSync13, readFileSync as readFileSync28, statSync as statSync14 } from "fs";
+import { dirname as dirname14, join as join37 } from "path";
 import { createHash as createHash10, createPublicKey as createPublicKey4, verify as verify3 } from "crypto";
 
 // ../../loki-ts/src/util/paths.ts
@@ -17550,9 +17550,9 @@ var REPO_ROOT = findRepoRoot();
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash9, randomBytes as randomBytes3, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, sign } from "crypto";
-import { chmodSync as chmodSync5, existsSync as existsSync21, readdirSync as readdirSync11, linkSync, mkdirSync as mkdirSync9, readFileSync as readFileSync25, statSync as statSync13, unlinkSync as unlinkSync4, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync as chmodSync5, existsSync as existsSync21, readdirSync as readdirSync12, linkSync, mkdirSync as mkdirSync10, readFileSync as readFileSync26, statSync as statSync13, unlinkSync as unlinkSync4, writeFileSync as writeFileSync13 } from "fs";
 import { homedir as homedir7 } from "os";
-import { basename as basename11, dirname as dirname13, join as join35 } from "path";
+import { basename as basename11, dirname as dirname13, join as join36 } from "path";
 
 // ../../loki-ts/src/e10ext/assert_delta.ts
 import { execFileSync as execFileSync4 } from "child_process";
@@ -18797,6 +18797,187 @@ async function crossReview(ctx, verdict, head) {
   }
 }
 
+// ../../loki-ts/src/runner/router/flag.ts
+function routerMode(env = process.env) {
+  const v = (env.LOKI_ROUTER ?? "").trim().toLowerCase();
+  if (v === "0" || v === "false" || v === "off")
+    return "opt-out";
+  if (v === "1" || v === "true" || v === "on")
+    return "on";
+  return "off";
+}
+var routerEnabled = (env = process.env) => routerMode(env) === "on";
+
+// ../../loki-ts/src/runner/router/route_block.ts
+var ALIAS = { haiku: "haiku-5.5", sonnet: "sonnet-5.5", opus: "opus-5.5" };
+var modelLabel = (m) => ALIAS[m] ?? m;
+function advisorUnavailableReason(env, provider) {
+  if (provider !== "claude")
+    return `provider ${provider} has no advisor tool`;
+  if (env["CLAUDE_CODE_USE_BEDROCK"] || env["CLAUDE_CODE_USE_VERTEX"] || env["CLAUDE_CODE_USE_FOUNDRY"])
+    return "advisor tool is unsupported on Bedrock, Vertex and Foundry";
+  if ((env["LOKI_ROUTER_ADVISOR"] ?? "").trim().toLowerCase() === "off")
+    return "LOKI_ROUTER_ADVISOR=off";
+  return null;
+}
+var nN = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
+var rec = (v) => v === null ? "not recorded" : String(v);
+var s0 = (v) => typeof v === "string" && v.trim() ? v.trim() : null;
+function toEsc(raw2) {
+  const esc2 = Array.isArray(raw2) ? raw2 : [];
+  return esc2.map((e) => ({ trigger: s0(e["trigger"]) ?? "unknown", from: modelLabel(s0(e["from"]) ?? "?"), to: modelLabel(s0(e["to"]) ?? "?"), evidence: s0(e["evidence"]) ?? "none recorded" }));
+}
+var assignedBy = (src, explicit) => s0(explicit) ?? (src === null || src === "opus" ? "opus" : src);
+function buildRouteBlock(env, provider, route, telemetry) {
+  if (!routerEnabled(env))
+    return null;
+  const executor = s0(route?.["executor"]);
+  const unavailable = s0(route?.["advisor_unavailable_reason"]) ?? advisorUnavailableReason(env, provider);
+  const total = nN(telemetry?.requests_total);
+  const over = nN(telemetry?.requests_over_100k);
+  const shape = s0(route?.["shape_key"]);
+  const escalations = toEsc(route?.["escalations"]);
+  const source = s0(route?.["source"]);
+  const reason = s0(route?.["reason"]) ?? (executor ? "no reason recorded" : "no route recorded by implement");
+  const rawUnits = Array.isArray(route?.["units"]) ? route["units"] : [];
+  const units = rawUnits.length > 0 ? rawUnits.map((u, i) => ({ id: s0(u["id"]) ?? String(i + 1), executor: modelLabel(s0(u["executor"]) ?? "unknown"), assigned_by: assignedBy(s0(u["source"]) ?? source, u["assigned_by"]), reason: s0(u["reason"]) ?? "no reason recorded", escalations: toEsc(u["escalations"]) })) : executor ? [{ id: "run", executor: modelLabel(executor), assigned_by: assignedBy(source, route?.["assigned_by"]), reason, escalations }] : [];
+  return {
+    routed: executor !== null || units.length > 0,
+    units,
+    executor: executor ? modelLabel(executor) : units[0]?.executor ?? null,
+    advisor: unavailable ? null : modelLabel(s0(route?.["advisor"]) ?? "opus"),
+    advisor_unavailable_reason: unavailable,
+    reason,
+    source,
+    shape_key: shape,
+    shape_parity: shape ? `NOT PROVEN (no B9 row for shape ${shape})` : "NOT PROVEN (no shape key recorded)",
+    escalations: units.length > 0 ? units.flatMap((u) => u.escalations) : escalations,
+    requests_total: total,
+    requests_over_100k: over,
+    over_100k_share: total !== null && over !== null && total > 0 ? Math.round(over / total * 1e4) / 1e4 : null,
+    advisor_calls: nN(telemetry?.advisor_calls),
+    advisor_input_tokens: nN(telemetry?.advisor_input_tokens),
+    advisor_output_tokens: nN(telemetry?.advisor_output_tokens)
+  };
+}
+var over = (r, unit) => r.requests_total === null || r.requests_over_100k === null ? "not recorded" : `${r.requests_over_100k} of ${r.requests_total}${unit} (${pct(r)})`;
+var pct = (r) => r.over_100k_share === null ? "n/a (no requests)" : `${(r.over_100k_share * 100).toFixed(1)}%`;
+function routePrLine(r) {
+  if (!r.routed)
+    return `Route: not routed (${r.reason})`;
+  const adv = r.advisor ? `advisor ${r.advisor}` : "advisor unavailable";
+  return `Route: executor ${r.executor}, ${adv}; advisor tokens ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out; over 100K: ${over(r, " requests")}`;
+}
+function routeReceiptLines(r) {
+  if (!r.routed)
+    return [`- Route: not routed (${r.reason})`, `- Route shape_parity: ${r.shape_parity}`];
+  return [
+    `- Route: executor ${r.executor}, ${r.advisor ? `advisor ${r.advisor}` : `advisor unavailable: ${r.advisor_unavailable_reason}`}: ${r.reason}`,
+    `- Route shape_key: ${r.shape_key ?? "unknown"}  shape_parity: ${r.shape_parity}`,
+    `- Route escalations: ${r.escalations.length === 0 ? "none" : r.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger}; evidence ${e.evidence})`).join("; ")}`,
+    `- Route advisor: ${rec(r.advisor_calls)} calls, ${rec(r.advisor_input_tokens)} in / ${rec(r.advisor_output_tokens)} out tokens`,
+    ...r.units.map((u) => `- Route unit ${u.id}: executor ${u.executor}, assigned by ${u.assigned_by}: ${u.reason}; escalation: ${u.escalations.length === 0 ? "none" : u.escalations.map((e) => `${e.from} -> ${e.to} (${e.trigger})`).join(", ")}`),
+    `- Route requests over 100K: ${over(r, "")}`
+  ];
+}
+function routeNotProven(r) {
+  return [
+    ...r.advisor_unavailable_reason ? [`advisor: NOT PROVEN (owner provider): ${r.advisor_unavailable_reason}`] : [],
+    `route.shape_parity: ${r.shape_parity}`
+  ];
+}
+
+// ../../loki-ts/src/engine10/cost.ts
+import { mkdirSync as mkdirSync8, readdirSync as readdirSync10, readFileSync as readFileSync23, writeFileSync as writeFileSync11 } from "fs";
+import { join as join33 } from "path";
+var UNMETERED = "cli-invoker-unmetered";
+function routerTelemetryOn(env = process.env) {
+  return routerEnabled(env);
+}
+function num3(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+function resultCostPath(lokiRoot, iteration) {
+  return join33(lokiRoot, "metrics", `result-cost-${iteration}.json`);
+}
+function sumResultCosts(lokiRoot, iterations) {
+  const out2 = {
+    usd: null,
+    partialUsd: 0,
+    measuredCount: 0,
+    totalCount: iterations.length,
+    input_tokens: 0,
+    output_tokens: 0,
+    cache_read_tokens: 0,
+    cache_creation_tokens: 0,
+    ...routerTelemetryOn() ? { router: {
+      requests_total: 0,
+      requests_over_100k: 0,
+      over_100k_input_tokens: 0,
+      over_100k_output_tokens: 0,
+      advisor_calls: 0,
+      advisor_input_tokens: 0,
+      advisor_output_tokens: 0
+    } } : {},
+    model: null,
+    source: "",
+    missing: []
+  };
+  const sources2 = [];
+  let usd = 0;
+  for (const iter of iterations) {
+    const path = resultCostPath(lokiRoot, iter);
+    let rec2;
+    try {
+      rec2 = JSON.parse(readFileSync23(path, "utf8"));
+    } catch {
+      out2.missing.push(iter);
+      continue;
+    }
+    const inTok = num3(rec2["input_tokens"]);
+    const outTok = num3(rec2["output_tokens"]);
+    const cacheR = num3(rec2["cache_read_tokens"]);
+    const cacheC = num3(rec2["cache_creation_tokens"]);
+    out2.input_tokens += inTok;
+    out2.output_tokens += outTok;
+    out2.cache_read_tokens += cacheR;
+    out2.cache_creation_tokens += cacheC;
+    if (out2.router)
+      out2.router["requests_total"] += num3(rec2["requests_total"]);
+    if (out2.router)
+      out2.router["requests_over_100k"] += num3(rec2["requests_over_100k"]);
+    if (out2.router)
+      out2.router["over_100k_input_tokens"] += num3(rec2["over_100k_input_tokens"]);
+    if (out2.router)
+      out2.router["over_100k_output_tokens"] += num3(rec2["over_100k_output_tokens"]);
+    if (out2.router)
+      out2.router["advisor_calls"] += num3(rec2["advisor_calls"]);
+    if (out2.router)
+      out2.router["advisor_input_tokens"] += num3(rec2["advisor_input_tokens"]);
+    if (out2.router)
+      out2.router["advisor_output_tokens"] += num3(rec2["advisor_output_tokens"]);
+    if (typeof rec2["model"] === "string" && rec2["model"])
+      out2.model = rec2["model"];
+    sources2.push(path);
+    const c = rec2["total_cost_usd"];
+    const unmetered = rec2["source"] === UNMETERED;
+    if (unmetered)
+      out2.unmetered = true;
+    const noUsage = !unmetered && inTok === 0 && outTok === 0 && cacheR === 0 && cacheC === 0;
+    if (typeof c !== "number" || !Number.isFinite(c) || noUsage) {
+      out2.missing.push(iter);
+      continue;
+    }
+    usd += c;
+    out2.partialUsd += c;
+    out2.measuredCount++;
+  }
+  out2.source = sources2.join(",");
+  if (iterations.length > 0 && out2.missing.length === 0)
+    out2.usd = usd;
+  return out2;
+}
+
 // ../../loki-ts/src/util/check_result.ts
 var NO_TESTS_REASON = "no tests executed";
 var UNCONFIRMED_REASON = "test count could not be confirmed";
@@ -18805,8 +18986,8 @@ var isExecutedProof = (c) => c.result === "pass" && typeof c.n === "number" && c
 var hasExecutedProof = (checks) => checks.some(isExecutedProof);
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync19, lstatSync as lstatSync8, mkdirSync as mkdirSync8, readFileSync as readFileSync23, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname11, join as join33 } from "path";
+import { existsSync as existsSync19, lstatSync as lstatSync8, mkdirSync as mkdirSync9, readFileSync as readFileSync24, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname11, join as join34 } from "path";
 import { createHash as createHash7 } from "crypto";
 var MAX_CRITERIA = 50;
 var MAX_TEXT = 500;
@@ -18841,7 +19022,7 @@ function untracedLines(trace) {
   return trace.criteria.filter((c) => c.status === "no_match").map((c) => `contract ${sanitizeCriterion(c.id)} untraced (no keyword match in changed files): ${sanitizeCriterion(c.text)}`);
 }
 function contractPath(repoDir) {
-  return join33(repoDir, ".loki", "contract.json");
+  return join34(repoDir, ".loki", "contract.json");
 }
 var MAX_CONTRACT_BYTES = 1024 * 1024;
 function readContract(repoDir) {
@@ -18858,7 +19039,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync23(p);
+    raw2 = readFileSync24(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -18922,31 +19103,31 @@ function sealContract(repoDir, body, rawDiff, checks, env = process.env, snap) {
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync20, readdirSync as readdirSync10, readFileSync as readFileSync24, statSync as statSync12 } from "fs";
-import { dirname as dirname12, join as join34 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync11, readFileSync as readFileSync25, statSync as statSync12 } from "fs";
+import { dirname as dirname12, join as join35 } from "path";
 var ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 var PASSING = new Set(["VERIFIED", "ALREADY_SATISFIED"]);
 var sha2 = (b) => createHash8("sha256").update(b).digest("hex");
 var isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "";
-var num3 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-var unitsDir = (runDir) => join34(runDir, "group", "units");
+var num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
+var unitsDir = (runDir) => join35(runDir, "group", "units");
 var readJson3 = (p) => {
   try {
-    return JSON.parse(readFileSync24(p, "utf8"));
+    return JSON.parse(readFileSync25(p, "utf8"));
   } catch {
     return;
   }
 };
 var dirNames = (d) => {
   try {
-    return readdirSync10(d).filter((n2) => !n2.startsWith(".")).sort();
+    return readdirSync11(d).filter((n2) => !n2.startsWith(".")).sort();
   } catch {
     return null;
   }
 };
 function sealGroup(runDir, rh) {
-  const manifestPath = join34(runDir, "group", "manifest.json");
+  const manifestPath = join35(runDir, "group", "manifest.json");
   if (!existsSync20(manifestPath))
     return { section: undefined, notProven: [], problems: 0, allUnitsPass: true };
   const notProven = [];
@@ -18971,10 +19152,10 @@ function sealGroup(runDir, rh) {
       return fail(`unit ${index2} has an invalid, duplicate or case-colliding id`);
     seen.add(id);
     seenLower.add(id.toLowerCase());
-    const dir = join34(unitsDir(runDir), id), rp = join34(dir, "receipt.json"), ep = join34(dir, "events.jsonl");
+    const dir = join35(unitsDir(runDir), id), rp = join35(dir, "receipt.json"), ep = join35(dir, "events.jsonl");
     let bytes;
     try {
-      bytes = readFileSync24(rp);
+      bytes = readFileSync25(rp);
     } catch {
       return fail(`unit ${id} sub-receipt missing`);
     }
@@ -18991,12 +19172,12 @@ function sealGroup(runDir, rh) {
       unit_id: id,
       sub_receipt_sha256: sha2(bytes),
       receipt_sha256: sub["receipt_sha256"],
-      events_file_sha256: existsSync20(ep) ? sha2(readFileSync24(ep)) : null,
+      events_file_sha256: existsSync20(ep) ? sha2(readFileSync25(ep)) : null,
       verdict,
       goal: text2(u["goal"], 200),
       files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
-      tests: num3(u["tests"]),
-      tokens: num3(u["tokens"]),
+      tests: num4(u["tests"]),
+      tokens: num4(u["tokens"]),
       model: text2(u["model"], 64)
     });
   });
@@ -19016,7 +19197,7 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
   const bad = (reason) => ({ verdict: "TAMPERED", reason: `group: ${reason}` });
   const g = receipt["group"];
   if (g === undefined)
-    return existsSync20(join34(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
+    return existsSync20(join35(runDir, "group", "manifest.json")) ? bad("group directory present but the receipt has no group section") : null;
   if (!isObj10(g) || !ID_RE.test(String(g["group_id"] ?? "")) || !Array.isArray(g["units"]) || g["units"].length === 0)
     return bad("group section malformed");
   const entries = g["units"];
@@ -19028,20 +19209,20 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("unit directories do not match the receipt (missing or extra unit)");
   let unchecked = null;
   for (let i = 0;i < entries.length; i++) {
-    const e = entries[i], id = ids[i], dir = join34(unitsDir(runDir), id), rp = join34(dir, "receipt.json"), ep = join34(dir, "events.jsonl");
+    const e = entries[i], id = ids[i], dir = join35(unitsDir(runDir), id), rp = join35(dir, "receipt.json"), ep = join35(dir, "events.jsonl");
     if (e["index"] !== i)
       return bad(`unit ${id} is out of order (index ${String(e["index"])} at position ${i})`);
     let bytes;
     try {
       if (!statSync12(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync24(rp);
+      bytes = readFileSync25(rp);
     } catch {
       return bad(`unit ${id} sub-receipt missing`);
     }
     if (sha2(bytes) !== e["sub_receipt_sha256"])
       return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync20(ep) ? sha2(readFileSync24(ep)) : null;
+    const evSha = existsSync20(ep) ? sha2(readFileSync25(ep)) : null;
     if (evSha !== (e["events_file_sha256"] ?? null))
       return bad(`unit ${id} events.jsonl does not match its recorded hash`);
     const sub = readJson3(rp);
@@ -19096,9 +19277,9 @@ function loadSigningKey(generate = true) {
     let pem = inline ?? "";
     if (!inline) {
       const given = process.env["LOKI_RECEIPT_SIGNING_KEY_FILE"]?.trim();
-      const file = given || join35(process.env["HOME"] || homedir7(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
+      const file = given || join36(process.env["HOME"] || homedir7(), ".loki", "keys", RECEIPT_SIGNER_BASENAME);
       try {
-        pem = readFileSync25(file);
+        pem = readFileSync26(file);
         if (!given) {
           for (const [f, m] of [[file, 384], [dirname13(file), 448]])
             if (statSync13(f).mode & 63)
@@ -19107,10 +19288,10 @@ function loadSigningKey(generate = true) {
       } catch (e) {
         if (e.code !== "ENOENT" || !generate)
           return null;
-        mkdirSync9(dirname13(dirname13(file)), { recursive: true, mode: 448 });
-        mkdirSync9(dirname13(file), { recursive: true, mode: 448 });
+        mkdirSync10(dirname13(dirname13(file)), { recursive: true, mode: 448 });
+        mkdirSync10(dirname13(file), { recursive: true, mode: 448 });
         const tmp = `${file}.${randomBytes3(6).toString("hex")}.tmp`;
-        writeFileSync12(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
+        writeFileSync13(tmp, generateKeyPairSync("ed25519").privateKey.export({ type: "pkcs8", format: "pem" }), { flag: "wx", mode: 384 });
         try {
           linkSync(tmp, file);
         } catch (l) {
@@ -19119,7 +19300,7 @@ function loadSigningKey(generate = true) {
         } finally {
           unlinkSync4(tmp);
         }
-        pem = readFileSync25(file);
+        pem = readFileSync26(file);
       }
     }
     const k = createPrivateKey(pem);
@@ -19215,6 +19396,7 @@ function renderReceiptMd(r) {
     `- receipt_sha256: ${r.receipt_sha256}`,
     `- Signature: ${sig}`,
     `- Provider: ${r.provider} (${r.model})  Cost: ${usd}  Wall: ${r.time.wall_s}s`,
+    ...r.route ? routeReceiptLines(r.route) : [],
     "",
     "### Checks",
     ...r.checks.length ? r.checks.map((c) => `- ${c.result}: ${c.name} (\`${c.cmd}\`, ${c.duration_s}s)`) : ["- none"],
@@ -19263,7 +19445,7 @@ var sealStage = {
     if (wallNotRun > 0) {
       try {
         const kept = new Set((Array.isArray(o.wall?.files) ? o.wall.files : []).map((f) => basename11(String(f.path))));
-        for (const n2 of readdirSync11(join35(ctx.runDir, "wall")).sort())
+        for (const n2 of readdirSync12(join36(ctx.runDir, "wall")).sort())
           if (!kept.has(n2))
             notProven.add(`wall test discarded: ${n2} (not_run)`);
       } catch {}
@@ -19326,11 +19508,15 @@ var sealStage = {
     const cost = ctx.cost.read(ctx.repoDir, iterIds);
     if (cost.unmetered)
       notProven.add("cost unmetered (CLI invoker; recorded as 0)");
-    const eventsPath = join35(ctx.runDir, "events.jsonl");
+    const eventsPath = join36(ctx.runDir, "events.jsonl");
     const wallFiles = Array.isArray(o.wall?.files) ? o.wall.files : [];
     const wallPassed = typeof o.verify?.wall_passed === "boolean" ? o.verify.wall_passed : null;
     if (wallFiles.length > 0 && wallPassed === null)
       notProven.add("wall result not recorded by verify");
+    const routeBlock = buildRouteBlock(process.env, ctx.provider, o.implement?.route, cost.router ?? (routerEnabled(process.env) ? sumResultCosts(join36(ctx.repoDir, ".loki"), iterIds).router : undefined));
+    if (routeBlock)
+      for (const l of routeNotProven(routeBlock))
+        notProven.add(l);
     const body = {
       schema: "loki.v10.receipt/1",
       run_id: ctx.runId,
@@ -19363,9 +19549,10 @@ var sealStage = {
       provider: ctx.provider,
       model: ctx.model,
       resumed: o.intake?.resumed === true,
-      events_sha256: sha2562(existsSync21(eventsPath) ? readFileSync25(eventsPath) : ""),
+      events_sha256: sha2562(existsSync21(eventsPath) ? readFileSync26(eventsPath) : ""),
       ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
-      log_seal: true
+      log_seal: true,
+      ...routeBlock ? { route: routeBlock } : {}
     };
     for (const l of sealContract(ctx.repoDir, body, rawDiff, checks, process.env, o.intake?.contract_snapshot))
       notProven.add(l);
@@ -19377,21 +19564,21 @@ var sealStage = {
       hash = receiptSha256(body);
     }
     const receipt = { ...body, receipt_sha256: hash, verification: { jwt: sig.jwt, kid: sig.kid } };
-    mkdirSync9(ctx.runDir, { recursive: true });
-    const path = join35(ctx.runDir, "receipt.json");
-    writeFileSync12(path, JSON.stringify(receipt, null, 2) + `
+    mkdirSync10(ctx.runDir, { recursive: true });
+    const path = join36(ctx.runDir, "receipt.json");
+    writeFileSync13(path, JSON.stringify(receipt, null, 2) + `
 `);
-    writeFileSync12(join35(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
+    writeFileSync13(join36(ctx.runDir, "receipt.md"), renderReceiptMd(receipt));
     const signed = sig.jwt !== null;
-    const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven };
-    ctx.emit("receipt.sealed", "seal", { path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven });
+    const data = { receipt_path: path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} };
+    ctx.emit("receipt.sealed", "seal", { path, receipt_sha256: hash, signed, kid: sig.kid, verdict, not_proven: receipt.not_proven, ...routeBlock ? { route_line: routePrLine(routeBlock) } : {} });
     return { status: "completed", data: { ...data, summary: `${verdict} receipt ${hash.slice(0, 12)} ${signed ? `SIGNED kid ${sig.kid}` : "UNSIGNED"}` } };
   }
 };
 
 // ../../loki-ts/src/features/receipt_dsse.ts
 import { createPublicKey as createPublicKey3, sign as sign2, verify as verify2 } from "crypto";
-import { readFileSync as readFileSync26 } from "fs";
+import { readFileSync as readFileSync27 } from "fs";
 var DSSE_PAYLOAD_TYPE = "application/vnd.in-toto+json";
 var STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
 var PREDICATE_TYPE = "https://autonomi.dev/loki/receipt/v10";
@@ -19472,7 +19659,7 @@ function verifyDsseReceipt(env, d) {
 }
 function runIdGuard(receiptPath, runId) {
   try {
-    return envelopeRunIdProblem(JSON.parse(readFileSync26(receiptPath, "utf8")), runId);
+    return envelopeRunIdProblem(JSON.parse(readFileSync27(receiptPath, "utf8")), runId);
   } catch {
     return null;
   }
@@ -19486,7 +19673,7 @@ function pubFor(kid, given) {
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync27(f))];
+      return [createPublicKey4(readFileSync28(f))];
     } catch {
       return [];
     }
@@ -19518,10 +19705,10 @@ function checkEventLog(receiptPath, receipt) {
   const bound = receipt["events_sha256"];
   if (typeof bound !== "string" || bound === createHash10("sha256").digest("hex"))
     return null;
-  const path = join36(dirname14(receiptPath), "events.jsonl");
+  const path = join37(dirname14(receiptPath), "events.jsonl");
   if (!existsSync22(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync27(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
+  const raw2 = readFileSync28(path, "utf8"), events2 = readEvents(path), lines = raw2.split(`
 `).filter((l) => l.trim() !== "");
   if (events2.length !== lines.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
@@ -19537,7 +19724,7 @@ function checkEventLog(receiptPath, receipt) {
   return h.digest("hex") === bound ? null : "events.jsonl does not match the hash recorded at seal";
 }
 function checkLogSeal(receiptPath, hash, kid, given) {
-  const path = join36(dirname14(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
+  const path = join37(dirname14(receiptPath), "events.jsonl"), events2 = readEvents(path), done = events2.findIndex((e) => e.type === "run.completed");
   if (!events2.some((e) => e.type === "receipt.sealed" && e.data["receipt_sha256"] === hash))
     return { verdict: "TAMPERED", reason: "events.jsonl has no receipt.sealed event for this receipt" };
   if (done < 0)
@@ -19545,7 +19732,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines = readFileSync27(path, "utf8").split(`
+  const lines = readFileSync28(path, "utf8").split(`
 `).filter((l) => l.trim() !== ""), sha3 = createHash10("sha256").update(lines.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
@@ -19559,7 +19746,7 @@ async function verifyReceipt(receiptPath, deps = {}) {
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync27(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync28(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -19627,11 +19814,11 @@ function mount21(ctx) {
       return done(404, "receipt not available", "not_found");
     let runDir, file;
     try {
-      const root = realpathSync17(join37(repo.p, ".loki", "runs"));
-      runDir = realpathSync17(join37(root, run2));
-      if (runDir !== join37(root, run2))
+      const root = realpathSync17(join38(repo.p, ".loki", "runs"));
+      runDir = realpathSync17(join38(root, run2));
+      if (runDir !== join38(root, run2))
         return done(404, "receipt not found", "not_found");
-      file = realpathSync17(join37(runDir, "receipt.json"));
+      file = realpathSync17(join38(runDir, "receipt.json"));
     } catch {
       return done(404, "receipt not found", "not_found");
     }
@@ -19650,7 +19837,7 @@ function mount21(ctx) {
         sha3 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync28(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync29(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -19712,8 +19899,8 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync23, readFileSync as readFileSync29 } from "fs";
-import { join as join38 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync30 } from "fs";
+import { join as join39 } from "path";
 
 // src/server/legacy/routes.ts
 var LEGACY_ROUTES = [
@@ -20085,10 +20272,10 @@ var logged = new Set;
 var toHono = (p) => p.replace(/\{([A-Za-z_]+):path\}/g, ":$1{.+}").replace(/\{([A-Za-z_]+)\}/g, ":$1");
 var NOT_SUPPORTED = "not yet supported by the Control Plane";
 var repoVersion = () => {
-  for (const f of [join38(import.meta.dir, "../../../../../VERSION")]) {
+  for (const f of [join39(import.meta.dir, "../../../../../VERSION")]) {
     try {
       if (existsSync23(f))
-        return readFileSync29(f, "utf8").trim();
+        return readFileSync30(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -20270,7 +20457,7 @@ function legacyShim(opts) {
 
 // src/server/app.ts
 var MAX_BODY2 = 1e6;
-var defaultUiDir = () => [join39(import.meta.dir, "../../ui/dist"), join39(import.meta.dir, "../ui/dist")].find((d) => existsSync24(join39(d, "index.html")));
+var defaultUiDir = () => [join40(import.meta.dir, "../../ui/dist"), join40(import.meta.dir, "../ui/dist")].find((d) => existsSync24(join40(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -20299,10 +20486,10 @@ function createApp(opts) {
     await next();
   });
   const readInstalled = () => {
-    for (const f of [process.env.LOKI_VERSION_FILE, join39(import.meta.dir, "../../../../VERSION")]) {
+    for (const f of [process.env.LOKI_VERSION_FILE, join40(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
-          return readFileSync30(f, "utf8").trim() || "unknown";
+          return readFileSync31(f, "utf8").trim() || "unknown";
       } catch {}
     }
     return "unknown";
@@ -20417,7 +20604,7 @@ function createApp(opts) {
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join39(root, "index.html")));
+    return new Response(Bun.file(join40(root, "index.html")));
   });
   return { app, db, close: () => {
     clearInterval(reconciler);

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.2.0",
+  "version": "11.2.2",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/web-app/dist/assets/{AdminPage-Bs4Vyd9R.js → AdminPage-C-iMLNxe.js}

@@ -1,4 +1,4 @@
-import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-83w75NC1.js";import{B as C}from"./Button-BpGXXEPk.js";import{T as $e}from"./trending-up-BvdD9XmQ.js";import{C as z}from"./clock-BUUN5rWU.js";import{A as Be,U as ue,M as De}from"./Avatar-Dmf_rtmv.js";import{A as J}from"./activity-DW6jRbjj.js";import{R as pe}from"./refresh-cw-DJL2nFq0.js";import{G as ze}from"./globe-BV7yxcQ_.js";import{C as Le}from"./chevron-left-Djgr5pg-.js";import{C as je}from"./check-BVC4A8YK.js";import{D as Y}from"./dollar-sign-CBx9DWbM.js";import{U as Te}from"./user-CWmKQURs.js";import{D as Me}from"./database-DUauMcIC.js";import{L as Ue}from"./lock-DbvZW7dV.js";import{S as Re}from"./scroll-text-CAMgtDYH.js";import{S as Ie}from"./shield-alert-DqQ5wzQ6.js";/**
+import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-BcXljIAO.js";import{B as C}from"./Button-_iHlH_yL.js";import{T as $e}from"./trending-up-BIiwQbWV.js";import{C as z}from"./clock-COzFIiWi.js";import{A as Be,U as ue,M as De}from"./Avatar-C7VUvwsO.js";import{A as J}from"./activity-CPyi45gt.js";import{R as pe}from"./refresh-cw-D3dWHBd6.js";import{G as ze}from"./globe-CPlrM_IC.js";import{C as Le}from"./chevron-left-CkxonN0X.js";import{C as je}from"./check-DPj99ArM.js";import{D as Y}from"./dollar-sign-CVcApzcD.js";import{U as Te}from"./user-kGzXC3V2.js";import{D as Me}from"./database-D555S5Km.js";import{L as Ue}from"./lock-B9t6oWI0.js";import{S as Re}from"./scroll-text-ktmD_xJY.js";import{S as Ie}from"./shield-alert-968j9z0V.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Avatar-Dmf_rtmv.js → Avatar-C7VUvwsO.js}

@@ -1,4 +1,4 @@
-import{c as l,j as s}from"./index-83w75NC1.js";/**
+import{c as l,j as s}from"./index-BcXljIAO.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.