loki-mode 11.2.1 → 11.3.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.2.1
+# Loki Mode v11.3.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.2.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.3.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.2.1
+11.3.0

package/autonomy/lib/skill-link-heal.sh

@@ -13,6 +13,9 @@
 #   - its target is missing, or resolves to a different install than the running one
 #   - the running root is itself an install path with a SKILL.md, so a dev checkout
 #     or worktree never hijacks the user's global link
+#   - the running install is durable (npm global root, bun global dir, Homebrew
+#     prefix); an npx cache, temp dir or arbitrary prefix is refused with one
+#     stderr line and the link is left untouched
 
 _loki_skill_is_install_path() {
     case "${1%/}" in
@@ -21,9 +24,75 @@ _loki_skill_is_install_path() {
     return 1
 }
 
+# Durable-install rule (FC-30 amendment). A repoint writes a user-owned path, so
+# the running install must outlive this process: a one-off `npx loki-mode` run or
+# a scratch prefix would turn the link into a new dangling link. Durable means
+# the running root sits under the npm global root (`npm root -g`), the bun global
+# dir, or a Homebrew prefix. Prints a reason and returns 1 when it is not.
+_loki_skill_dir_p() { (cd "$1" 2>/dev/null && pwd -P); }
+
+# `npm root -g` bounded to 3s so a hung npm can never hang bin/loki. Output goes
+# to a file (not a pipe) so an orphaned grandchild cannot hold the caller open.
+# Returns 124 on timeout (callers fail closed), otherwise npm's own status.
+_loki_skill_npm_root() {
+    local out pid i=0 rc
+    out="$(mktemp "${TMPDIR:-/tmp}/loki-npmroot.XXXXXX")" || return 1
+    npm root -g >"$out" 2>/dev/null </dev/null &
+    pid=$!
+    while kill -0 "$pid" 2>/dev/null; do
+        if [ "$i" -ge 30 ]; then
+            kill "$pid" 2>/dev/null
+            rm -f "$out"
+            return 124
+        fi
+        sleep 0.1
+        i=$((i + 1))
+    done
+    wait "$pid"; rc=$?
+    [ "$rc" -eq 0 ] && head -n 1 "$out"
+    rm -f "$out"
+    return "$rc"
+}
+
+_loki_skill_root_durable() {
+    local root_p="$1" cand cands="" npmroot prefix rc
+    case "$root_p" in
+        */_npx/*) printf 'running from an npx cache (%s)' "$root_p"; return 1 ;;
+    esac
+    npmroot="$(_loki_skill_npm_root)"; rc=$?
+    if [ "$rc" -eq 124 ]; then
+        printf 'npm root -g timed out (running install %s not verified durable)' "$root_p"
+        return 1
+    fi
+    [ "$rc" -eq 0 ] || npmroot=""
+    [ -n "$npmroot" ] && cands="$cands
+$npmroot"
+    [ -n "${NPM_CONFIG_PREFIX:-}" ] && cands="$cands
+${NPM_CONFIG_PREFIX}/lib/node_modules"
+    cands="$cands
+${BUN_INSTALL:-${HOME:-}/.bun}/install/global/node_modules"
+    for prefix in "${HOMEBREW_PREFIX:-}" /opt/homebrew /usr/local /home/linuxbrew/.linuxbrew; do
+        [ -n "$prefix" ] || continue
+        cands="$cands
+$prefix/Cellar/loki-mode
+$prefix/opt/loki-mode
+$prefix/lib/node_modules"
+    done
+    while IFS= read -r cand; do
+        [ -n "$cand" ] || continue
+        cand="$(_loki_skill_dir_p "$cand")" || continue
+        [ "$root_p" = "$cand" ] && return 0
+        case "$root_p" in "$cand"/*) return 0 ;; esac
+    done <<EOT
+$cands
+EOT
+    printf 'running install %s is not a durable global install (npm global, bun global or Homebrew)' "$root_p"
+    return 1
+}
+
 loki_skill_link_heal() {
     [ "${LOKI_NO_SKILL_LINK_HEAL:-}" = "1" ] && return 0
-    local root="${1:-}" home="${HOME:-}" root_p rel link tgt live_p tmp
+    local root="${1:-}" home="${HOME:-}" root_p rel link tgt live_p tmp durable="" why
     [ -n "$root" ] && [ -n "$home" ] || return 0
     [ -f "$root/SKILL.md" ] || return 0
     root_p="$(cd "$root" 2>/dev/null && pwd -P)" || return 0
@@ -39,6 +108,14 @@ loki_skill_link_heal() {
             live_p="$(cd "$link" 2>/dev/null && pwd -P)" || live_p=""
             [ "$live_p" = "$root_p" ] && continue
         fi
+        if [ -z "$durable" ]; then
+            if why="$(_loki_skill_root_durable "$root_p")"; then
+                durable=yes
+            else
+                printf 'loki: not repointing skill links: %s\n' "$why" >&2
+                return 0
+            fi
+        fi
         tmp="${link}.heal.$$"
         rm -f "$tmp" 2>/dev/null
         ln -s "$root_p" "$tmp" 2>/dev/null || continue