loki-mode 11.2.2 → 11.3.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.2.2
+# Loki Mode v11.3.1
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
 
@@ -15,7 +15,7 @@ description: An autonomous software factory that knows what it is supposed to de
 
 **Provider-agnostic (stable since v5.0.0):** runs on Claude/Codex/Cline/Aider with abstract model tiers and degraded mode for non-Claude providers; no vendor lock-in. Gemini deprecated v7.5.18. See `skills/providers.md`. **Legacy track (v8.0.0):** the Anthropic Agent SDK route (see below), spec-mode expansion for OpenAPI/GraphQL/Postman contracts, the runtime-boot and secret-leak evidence axes, and `loki steer` / `loki why` for mid-run control. Earlier tracks: LSP grounding as a first-class agent tool (v7.7.x) and Phase 1 RARV-C closure (real provider judges, gate-failure flock, synthetic PRD e2e, status `--json`).
 
-**Runtime migration:** Bash-to-Bun migration. `bin/loki` is the router: the commands in its Bun-route `case` (read-only ones such as `version`, `status`, `stats`, `doctor`, `provider`, `memory`, plus stateful ones such as `rollback`, `trust`, `proof`/`receipt`, `control`, `answer`) run through `loki-ts/src/cli.ts` on Bun; the rest, and some flag forms (for example `doctor --airgap`, `trust detail`), run on Bash (`autonomy/loki`). `start` is Bash by default and goes to Bun only for the SDK loop (`LOKI_SDK_LOOP=1`) or Loki 10 engine inputs (issue refs, multi-word tasks). Read `bin/loki` and `cli.ts` for the exact set rather than trusting a list here. Rollback: `LOKI_LEGACY_BASH=1`. See `UPGRADING.md` and `docs/architecture/ADR-001-runtime-migration.md`.
+**Runtime migration:** Bash-to-Bun migration. `bin/loki` is the router: the commands in its Bun-route `case` (read-only ones such as `version`, `status`, `stats`, `doctor`, `provider`, `memory`, plus stateful ones such as `rollback`, `trust`, `proof`/`receipt`, `control`, `answer`) run through `loki-ts/src/cli.ts` on Bun; the rest, and some flag forms (for example `doctor --airgap`, `trust detail`), run on Bash (`autonomy/loki`). `start` is Bash by default and goes to Bun only for the SDK loop (`LOKI_SDK_LOOP=1`) or Loki 10 engine inputs (issue refs, multi-word tasks). Read `bin/loki` and `cli.ts` for the exact set rather than trusting a list here. Rollback: `LOKI_LEGACY_BASH=1`. See `docs/architecture/ADR-001-runtime-migration.md`.
 
 **Anthropic Agent SDK route (v8.0.0, opt-in, default-off):** a claude-binary-free path where the RARV loop runs on `@anthropic-ai/claude-agent-sdk` `query()` and judges run on the raw `@anthropic-ai/sdk`. One operator switch `LOKI_SDK_MODE` (`off` default / `judges` / `full`), mirrored byte-for-byte in bash (`autonomy/lib/sdk-mode.sh`) and TypeScript (`loki-ts/src/runner/sdk_mode.ts`). Unset = byte-identical to the claude-CLI route. See `references/sdk-mode.md`.
 
@@ -200,7 +200,7 @@ This protocol governs **skill module** loading -- task-scoped instruction files
 <!-- generated:commands -->
 Commands (generated from `loki-ts/src/cli/registry.ts`; full reference in `docs/CLI-REFERENCE.md`):
 
-`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
+`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `queue`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
 <!-- /generated -->
 
 ---
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.2.2 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.3.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.2.2
+11.3.1

package/autonomy/completion-council.sh

@@ -3233,7 +3233,7 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                         else _cv_wrap=""; fi
                         _cv_out="$($_cv_wrap "$_cv_loki" internal sdk-text \
                             --prompt-file "$_cv_pf" \
-                            --model "${LOKI_SDK_COUNCIL_MODEL:-claude-haiku-4-5}" --effort medium \
+                            --model "${LOKI_SDK_COUNCIL_MODEL:-haiku}" --effort medium \
                             --timeout-ms "$(( _cv_to_s * 1000 ))" 2>/dev/null)" || _cv_rc=$?
                         rm -f "$_cv_pf" 2>/dev/null || true
                         if [ "$_cv_rc" -eq 0 ] && [ -n "$_cv_out" ]; then
@@ -3458,7 +3458,7 @@ REASON: your reasoning"
                         else _dv_wrap=""; fi
                         _dv_out="$($_dv_wrap "$_dv_loki" internal sdk-text \
                             --prompt-file "$_dv_pf" \
-                            --model "${LOKI_SDK_COUNCIL_MODEL:-claude-haiku-4-5}" --effort medium \
+                            --model "${LOKI_SDK_COUNCIL_MODEL:-haiku}" --effort medium \
                             --timeout-ms "$(( _dv_to_s * 1000 ))" 2>/dev/null)" || _dv_rc=$?
                         rm -f "$_dv_pf" 2>/dev/null || true
                         if [ "$_dv_rc" -eq 0 ] && [ -n "$_dv_out" ]; then

package/autonomy/context-tracker.py

@@ -38,10 +38,10 @@ from pathlib import Path
 # of this provider-keyed fallback.
 PRICING_BY_PROVIDER = {
     "claude": {
-        "input": 3.0,
-        "output": 15.0,
-        "cache_read": 0.30,
-        "cache_creation": 3.75,
+        "input": 2.0,
+        "output": 10.0,
+        "cache_read": 0.10,
+        "cache_creation": 2.5,
     },
     "codex": {
         "input": 2.0,

package/autonomy/council-v2.sh

@@ -386,7 +386,7 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                         else _c2_wrap=""; fi
                         _c2_sdk_out="$($_c2_wrap "$_c2_sdk_loki" internal sdk-judge \
                             --prompt-file "$_c2_sdk_pf" --schema-file "$_c2_sdk_schema" \
-                            --model "${LOKI_SDK_JUDGE_MODEL:-claude-haiku-4-5}" --effort low \
+                            --model "${LOKI_SDK_JUDGE_MODEL:-haiku}" --effort low \
                             --timeout-ms "$(( _c2_to_s * 1000 ))" 2>/dev/null)" || _c2_sdk_rc=$?
                         rm -f "$_c2_sdk_pf" 2>/dev/null || true
                         if [ "$_c2_sdk_rc" -eq 0 ] && [ -n "$_c2_sdk_out" ]; then

package/autonomy/grill.sh

@@ -218,7 +218,7 @@ grill_invoke_provider() {
                         else _gs_wrap=""; fi
                         _gs_out="$($_gs_wrap "$_gs_loki" internal sdk-text \
                             --prompt-file "$_gs_pf" \
-                            --model "${LOKI_SDK_GRILL_MODEL:-claude-sonnet-5}" --effort high \
+                            --model "${LOKI_SDK_GRILL_MODEL:-sonnet}" --effort high \
                             --timeout-ms "$(( _gs_to_s * 1000 ))" 2>/dev/null)" || _gs_rc=$?
                         rm -f "$_gs_pf" 2>/dev/null || true
                         if [ "$_gs_rc" -eq 0 ] && [ -n "$_gs_out" ]; then

package/autonomy/lib/done-recognition.sh

@@ -121,7 +121,7 @@ _loki_done_recog_invoke() {
                 else _sdk_wrap=""; fi
                 _sdk_out="$($_sdk_wrap "$_sdk_loki" internal sdk-judge \
                     --prompt-file "$_sdk_prompt_f" --schema-file "$_sdk_schema" \
-                    --model "${LOKI_SDK_JUDGE_MODEL:-claude-haiku-4-5}" --effort low \
+                    --model "${LOKI_SDK_JUDGE_MODEL:-haiku}" --effort low \
                     --timeout-ms "$(( ${LOKI_DONE_RECOG_TIMEOUT:-180} * 1000 ))" 2>/dev/null)" || _sdk_rc=$?
                 rm -f "$_sdk_prompt_f" 2>/dev/null || true
                 if [ "$_sdk_rc" -eq 0 ] && [ -n "$_sdk_out" ]; then

package/autonomy/lib/prd-enrich.sh

@@ -65,7 +65,7 @@ _loki_prd_enrich_invoke() {
                 else _pe_wrap=""; fi
                 _pe_out="$($_pe_wrap "$_pe_loki" internal sdk-text \
                     --prompt-file "$_pe_pf" \
-                    --model "${LOKI_SDK_PRD_ENRICH_MODEL:-claude-sonnet-5}" --effort medium \
+                    --model "${LOKI_SDK_PRD_ENRICH_MODEL:-sonnet}" --effort medium \
                     --timeout-ms "$(( _pe_to_s * 1000 ))" 2>/dev/null)" || _pe_rc=$?
                 rm -f "$_pe_pf" 2>/dev/null || true
                 if [ "$_pe_rc" -eq 0 ] && [ -n "$_pe_out" ]; then

package/autonomy/lib/skill-link-heal.sh

@@ -13,6 +13,9 @@
 #   - its target is missing, or resolves to a different install than the running one
 #   - the running root is itself an install path with a SKILL.md, so a dev checkout
 #     or worktree never hijacks the user's global link
+#   - the running install is durable (npm global root, bun global dir, Homebrew
+#     prefix); an npx cache, temp dir or arbitrary prefix is refused with one
+#     stderr line and the link is left untouched
 
 _loki_skill_is_install_path() {
     case "${1%/}" in
@@ -21,9 +24,75 @@ _loki_skill_is_install_path() {
     return 1
 }
 
+# Durable-install rule (FC-30 amendment). A repoint writes a user-owned path, so
+# the running install must outlive this process: a one-off `npx loki-mode` run or
+# a scratch prefix would turn the link into a new dangling link. Durable means
+# the running root sits under the npm global root (`npm root -g`), the bun global
+# dir, or a Homebrew prefix. Prints a reason and returns 1 when it is not.
+_loki_skill_dir_p() { (cd "$1" 2>/dev/null && pwd -P); }
+
+# `npm root -g` bounded to 3s so a hung npm can never hang bin/loki. Output goes
+# to a file (not a pipe) so an orphaned grandchild cannot hold the caller open.
+# Returns 124 on timeout (callers fail closed), otherwise npm's own status.
+_loki_skill_npm_root() {
+    local out pid i=0 rc
+    out="$(mktemp "${TMPDIR:-/tmp}/loki-npmroot.XXXXXX")" || return 1
+    npm root -g >"$out" 2>/dev/null </dev/null &
+    pid=$!
+    while kill -0 "$pid" 2>/dev/null; do
+        if [ "$i" -ge 30 ]; then
+            kill "$pid" 2>/dev/null
+            rm -f "$out"
+            return 124
+        fi
+        sleep 0.1
+        i=$((i + 1))
+    done
+    wait "$pid"; rc=$?
+    [ "$rc" -eq 0 ] && head -n 1 "$out"
+    rm -f "$out"
+    return "$rc"
+}
+
+_loki_skill_root_durable() {
+    local root_p="$1" cand cands="" npmroot prefix rc
+    case "$root_p" in
+        */_npx/*) printf 'running from an npx cache (%s)' "$root_p"; return 1 ;;
+    esac
+    npmroot="$(_loki_skill_npm_root)"; rc=$?
+    if [ "$rc" -eq 124 ]; then
+        printf 'npm root -g timed out (running install %s not verified durable)' "$root_p"
+        return 1
+    fi
+    [ "$rc" -eq 0 ] || npmroot=""
+    [ -n "$npmroot" ] && cands="$cands
+$npmroot"
+    [ -n "${NPM_CONFIG_PREFIX:-}" ] && cands="$cands
+${NPM_CONFIG_PREFIX}/lib/node_modules"
+    cands="$cands
+${BUN_INSTALL:-${HOME:-}/.bun}/install/global/node_modules"
+    for prefix in "${HOMEBREW_PREFIX:-}" /opt/homebrew /usr/local /home/linuxbrew/.linuxbrew; do
+        [ -n "$prefix" ] || continue
+        cands="$cands
+$prefix/Cellar/loki-mode
+$prefix/opt/loki-mode
+$prefix/lib/node_modules"
+    done
+    while IFS= read -r cand; do
+        [ -n "$cand" ] || continue
+        cand="$(_loki_skill_dir_p "$cand")" || continue
+        [ "$root_p" = "$cand" ] && return 0
+        case "$root_p" in "$cand"/*) return 0 ;; esac
+    done <<EOT
+$cands
+EOT
+    printf 'running install %s is not a durable global install (npm global, bun global or Homebrew)' "$root_p"
+    return 1
+}
+
 loki_skill_link_heal() {
     [ "${LOKI_NO_SKILL_LINK_HEAL:-}" = "1" ] && return 0
-    local root="${1:-}" home="${HOME:-}" root_p rel link tgt live_p tmp
+    local root="${1:-}" home="${HOME:-}" root_p rel link tgt live_p tmp durable="" why
     [ -n "$root" ] && [ -n "$home" ] || return 0
     [ -f "$root/SKILL.md" ] || return 0
     root_p="$(cd "$root" 2>/dev/null && pwd -P)" || return 0
@@ -39,6 +108,14 @@ loki_skill_link_heal() {
             live_p="$(cd "$link" 2>/dev/null && pwd -P)" || live_p=""
             [ "$live_p" = "$root_p" ] && continue
         fi
+        if [ -z "$durable" ]; then
+            if why="$(_loki_skill_root_durable "$root_p")"; then
+                durable=yes
+            else
+                printf 'loki: not repointing skill links: %s\n' "$why" >&2
+                return 0
+            fi
+        fi
         tmp="${link}.heal.$$"
         rm -f "$tmp" 2>/dev/null
         ln -s "$root_p" "$tmp" 2>/dev/null || continue

package/autonomy/lib/voter-agents.sh

@@ -327,7 +327,7 @@ loki_council_dispatch_agents() {
                 else _va_wrap=""; fi
                 _va_out="$($_va_wrap "$_va_loki" internal sdk-judge \
                     --prompt-file "$_va_pf" --schema-file "$_va_schema_f" \
-                    --model "${LOKI_SDK_COUNCIL_MODEL:-claude-sonnet-5}" --effort high \
+                    --model "${LOKI_SDK_COUNCIL_MODEL:-sonnet}" --effort high \
                     --timeout-ms "$(( _va_to_s * 1000 ))" 2>"$COUNCIL_STATE_DIR/votes/dispatch-stderr-${iteration}.log")" || _va_rc=$?
                 rm -f "$_va_pf" 2>/dev/null || true
                 if [ "$_va_rc" -eq 0 ] && [ -n "$_va_out" ]; then