loki-mode 11.3.0 → 11.3.2

package/SKILL.md

@@ -3,9 +3,9 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.3.0
+# Loki Mode v11.3.2
 
-**Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
+**Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -15,7 +15,7 @@ description: An autonomous software factory that knows what it is supposed to de
 
 **Provider-agnostic (stable since v5.0.0):** runs on Claude/Codex/Cline/Aider with abstract model tiers and degraded mode for non-Claude providers; no vendor lock-in. Gemini deprecated v7.5.18. See `skills/providers.md`. **Legacy track (v8.0.0):** the Anthropic Agent SDK route (see below), spec-mode expansion for OpenAPI/GraphQL/Postman contracts, the runtime-boot and secret-leak evidence axes, and `loki steer` / `loki why` for mid-run control. Earlier tracks: LSP grounding as a first-class agent tool (v7.7.x) and Phase 1 RARV-C closure (real provider judges, gate-failure flock, synthetic PRD e2e, status `--json`).
 
-**Runtime migration:** Bash-to-Bun migration. `bin/loki` is the router: the commands in its Bun-route `case` (read-only ones such as `version`, `status`, `stats`, `doctor`, `provider`, `memory`, plus stateful ones such as `rollback`, `trust`, `proof`/`receipt`, `control`, `answer`) run through `loki-ts/src/cli.ts` on Bun; the rest, and some flag forms (for example `doctor --airgap`, `trust detail`), run on Bash (`autonomy/loki`). `start` is Bash by default and goes to Bun only for the SDK loop (`LOKI_SDK_LOOP=1`) or Loki 10 engine inputs (issue refs, multi-word tasks). Read `bin/loki` and `cli.ts` for the exact set rather than trusting a list here. Rollback: `LOKI_LEGACY_BASH=1`. See `UPGRADING.md` and `docs/architecture/ADR-001-runtime-migration.md`.
+**Runtime migration:** Bash-to-Bun migration. `bin/loki` is the router: the commands in its Bun-route `case` (read-only ones such as `version`, `status`, `stats`, `doctor`, `provider`, `memory`, plus stateful ones such as `rollback`, `trust`, `proof`/`receipt`, `control`, `answer`) run through `loki-ts/src/cli.ts` on Bun; the rest, and some flag forms (for example `doctor --airgap`, `trust detail`), run on Bash (`autonomy/loki`). `start` is Bash by default and goes to Bun only for the SDK loop (`LOKI_SDK_LOOP=1`) or Loki 10 engine inputs (issue refs, multi-word tasks). Read `bin/loki` and `cli.ts` for the exact set rather than trusting a list here. Rollback: `LOKI_LEGACY_BASH=1`. See `docs/architecture/ADR-001-runtime-migration.md`.
 
 **Anthropic Agent SDK route (v8.0.0, opt-in, default-off):** a claude-binary-free path where the RARV loop runs on `@anthropic-ai/claude-agent-sdk` `query()` and judges run on the raw `@anthropic-ai/sdk`. One operator switch `LOKI_SDK_MODE` (`off` default / `judges` / `full`), mirrored byte-for-byte in bash (`autonomy/lib/sdk-mode.sh`) and TypeScript (`loki-ts/src/runner/sdk_mode.ts`). Unset = byte-identical to the claude-CLI route. See `references/sdk-mode.md`.
 
@@ -200,7 +200,7 @@ This protocol governs **skill module** loading -- task-scoped instruction files
 <!-- generated:commands -->
 Commands (generated from `loki-ts/src/cli/registry.ts`; full reference in `docs/CLI-REFERENCE.md`):
 
-`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
+`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `queue`, `issues`, `undo`, `verify-pr`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
 <!-- /generated -->
 
 ---
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.3.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.3.2 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.3.0
+11.3.2

package/autonomy/completion-council.sh

@@ -3233,7 +3233,7 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                         else _cv_wrap=""; fi
                         _cv_out="$($_cv_wrap "$_cv_loki" internal sdk-text \
                             --prompt-file "$_cv_pf" \
-                            --model "${LOKI_SDK_COUNCIL_MODEL:-claude-haiku-4-5}" --effort medium \
+                            --model "${LOKI_SDK_COUNCIL_MODEL:-haiku}" --effort medium \
                             --timeout-ms "$(( _cv_to_s * 1000 ))" 2>/dev/null)" || _cv_rc=$?
                         rm -f "$_cv_pf" 2>/dev/null || true
                         if [ "$_cv_rc" -eq 0 ] && [ -n "$_cv_out" ]; then
@@ -3458,7 +3458,7 @@ REASON: your reasoning"
                         else _dv_wrap=""; fi
                         _dv_out="$($_dv_wrap "$_dv_loki" internal sdk-text \
                             --prompt-file "$_dv_pf" \
-                            --model "${LOKI_SDK_COUNCIL_MODEL:-claude-haiku-4-5}" --effort medium \
+                            --model "${LOKI_SDK_COUNCIL_MODEL:-haiku}" --effort medium \
                             --timeout-ms "$(( _dv_to_s * 1000 ))" 2>/dev/null)" || _dv_rc=$?
                         rm -f "$_dv_pf" 2>/dev/null || true
                         if [ "$_dv_rc" -eq 0 ] && [ -n "$_dv_out" ]; then

package/autonomy/context-tracker.py

@@ -38,10 +38,10 @@ from pathlib import Path
 # of this provider-keyed fallback.
 PRICING_BY_PROVIDER = {
     "claude": {
-        "input": 3.0,
-        "output": 15.0,
-        "cache_read": 0.30,
-        "cache_creation": 3.75,
+        "input": 2.0,
+        "output": 10.0,
+        "cache_read": 0.10,
+        "cache_creation": 2.5,
     },
     "codex": {
         "input": 2.0,

package/autonomy/council-v2.sh

@@ -386,7 +386,7 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                         else _c2_wrap=""; fi
                         _c2_sdk_out="$($_c2_wrap "$_c2_sdk_loki" internal sdk-judge \
                             --prompt-file "$_c2_sdk_pf" --schema-file "$_c2_sdk_schema" \
-                            --model "${LOKI_SDK_JUDGE_MODEL:-claude-haiku-4-5}" --effort low \
+                            --model "${LOKI_SDK_JUDGE_MODEL:-haiku}" --effort low \
                             --timeout-ms "$(( _c2_to_s * 1000 ))" 2>/dev/null)" || _c2_sdk_rc=$?
                         rm -f "$_c2_sdk_pf" 2>/dev/null || true
                         if [ "$_c2_sdk_rc" -eq 0 ] && [ -n "$_c2_sdk_out" ]; then

package/autonomy/grill.sh

@@ -218,7 +218,7 @@ grill_invoke_provider() {
                         else _gs_wrap=""; fi
                         _gs_out="$($_gs_wrap "$_gs_loki" internal sdk-text \
                             --prompt-file "$_gs_pf" \
-                            --model "${LOKI_SDK_GRILL_MODEL:-claude-sonnet-5}" --effort high \
+                            --model "${LOKI_SDK_GRILL_MODEL:-sonnet}" --effort high \
                             --timeout-ms "$(( _gs_to_s * 1000 ))" 2>/dev/null)" || _gs_rc=$?
                         rm -f "$_gs_pf" 2>/dev/null || true
                         if [ "$_gs_rc" -eq 0 ] && [ -n "$_gs_out" ]; then

package/autonomy/lib/done-recognition.sh

@@ -121,7 +121,7 @@ _loki_done_recog_invoke() {
                 else _sdk_wrap=""; fi
                 _sdk_out="$($_sdk_wrap "$_sdk_loki" internal sdk-judge \
                     --prompt-file "$_sdk_prompt_f" --schema-file "$_sdk_schema" \
-                    --model "${LOKI_SDK_JUDGE_MODEL:-claude-haiku-4-5}" --effort low \
+                    --model "${LOKI_SDK_JUDGE_MODEL:-haiku}" --effort low \
                     --timeout-ms "$(( ${LOKI_DONE_RECOG_TIMEOUT:-180} * 1000 ))" 2>/dev/null)" || _sdk_rc=$?
                 rm -f "$_sdk_prompt_f" 2>/dev/null || true
                 if [ "$_sdk_rc" -eq 0 ] && [ -n "$_sdk_out" ]; then

package/autonomy/lib/efficiency_cost.py

@@ -192,6 +192,9 @@ def collect_efficiency(loki_dir):
     # real observation, and nulling it would be its own dishonesty (existing
     # contract: test_genuine_zero_cost_stays_zero_not_null). What is unknown is a
     # record that never carried the field at all.
+    # FC-44: a record flagged tokens_measured:false (an ambiguous resumed session) carries no usage keys. One of them makes every
+    # token total NOT RECORDED (None); the flag keys are added only then, so a complete run's dict is unchanged.
+    _unmeasured_tokens = sum(1 for r in _records if r.get("tokens_measured") is False)
     _any_cost = any("cost_usd" in r for r in _records)
     _missing_cost = sum(1 for r in _records if "cost_usd" not in r)
     if collected and _observed:
@@ -208,6 +211,11 @@ def collect_efficiency(loki_dir):
             # Some records priced, others not: the total is a LOWER BOUND.
             cost["cost_partial"] = _missing_cost > 0
             cost["cost_unpriced_records"] = _missing_cost
+        if _unmeasured_tokens:
+            for key in ("input_tokens", "output_tokens", "cache_read_tokens", "cache_creation_tokens"):
+                cost[key] = None
+            cost["tokens_partial"] = True
+            cost["tokens_unmeasured_records"] = _unmeasured_tokens
     else:
         # No record means unavailable, never an observed zero.
         for key in (

package/autonomy/lib/engine10-push.sh

@@ -1,7 +1,8 @@
 #!/usr/bin/env bash
 # Loki 10 engine P4 push child (ENGINE.md sections 6 and 7).
 #
-#   engine10-push.sh push-pr <repo-dir> <branch> <title> <body-file> [--draft]
+#   engine10-push.sh push-pr <repo-dir> <branch> <title> <body-file> [--draft] [--base <branch>]
+#   engine10-push.sh check-origin   (exit 0 when the pinned origin is acceptable to push-pr, else the refusal; no network)
 #   engine10-push.sh comment <pr-number> <body-file>
 #   engine10-push.sh issue-comment <issue-ref> <body-file>
 #   engine10-push.sh status  <sha> <pending|success|failure|error> <description>
@@ -111,13 +112,26 @@ _e10_gh() { _loki_with_github_tokens _loki_run_neutral "$_e10_repo" command gh "
 mode="${1:-}"
 shift || true
 case "$mode" in
+    check-origin)
+        # The origin validation above already ran and died on a refusal; reaching here means push-pr would accept it.
+        exit 0
+        ;;
     push-pr)
-        [ "$#" -ge 4 ] && [ "$#" -le 5 ] || die "usage: push-pr <repo-dir> <branch> <title> <body-file> [--draft]"
-        dir="$1" branch="$2" title="$3" body="$4" draft=()
-        if [ "$#" -eq 5 ]; then
-            [ "$5" = "--draft" ] || die "unknown flag: $5"
-            draft=(--draft)
-        fi
+        [ "$#" -ge 4 ] && [ "$#" -le 7 ] || die "usage: push-pr <repo-dir> <branch> <title> <body-file> [--draft] [--base <branch>]"
+        dir="$1" branch="$2" title="$3" body="$4" draft=() base=()
+        shift 4
+        # MASS-2: --base stacks the PR on a parent slice's branch; a name git would not accept is refused.
+        while [ "$#" -gt 0 ]; do
+            case "$1" in
+                --draft) draft=(--draft); shift ;;
+                --base)
+                    [ "$#" -ge 2 ] || die "--base needs a branch"
+                    case "$2" in -* | '') die "invalid base branch: $2" ;; esac
+                    git check-ref-format --branch "$2" >/dev/null 2>&1 || die "invalid base branch: $2"
+                    base=(--base "$2"); shift 2 ;;
+                *) die "unknown flag: $1" ;;
+            esac
+        done
         [ -f "$body" ] || die "body file not found: $body"
         if [ -n "$_e10_local" ]; then
             _e10_local_push "$dir" "$branch" || die "push refused or failed (rc=$?)"
@@ -128,7 +142,7 @@ case "$mode" in
         url="$(_e10_gh pr list --repo "$_e10_repo" --head "$branch" --state open --json url --jq '.[0].url')" \
             || die "gh pr list failed"
         if [ -z "$url" ] || [ "$url" = "null" ]; then
-            url="$(_e10_gh pr create --repo "$_e10_repo" --head "$branch" --title "$title" --body-file "$body" "${draft[@]}")" \
+            url="$(_e10_gh pr create --repo "$_e10_repo" --head "$branch" --title "$title" --body-file "$body" "${draft[@]}" "${base[@]}")" \
                 || die "gh pr create failed"
             url="$(printf '%s\n' "$url" | tail -n 1)"
         fi

package/autonomy/lib/prd-enrich.sh

@@ -65,7 +65,7 @@ _loki_prd_enrich_invoke() {
                 else _pe_wrap=""; fi
                 _pe_out="$($_pe_wrap "$_pe_loki" internal sdk-text \
                     --prompt-file "$_pe_pf" \
-                    --model "${LOKI_SDK_PRD_ENRICH_MODEL:-claude-sonnet-5}" --effort medium \
+                    --model "${LOKI_SDK_PRD_ENRICH_MODEL:-sonnet}" --effort medium \
                     --timeout-ms "$(( _pe_to_s * 1000 ))" 2>/dev/null)" || _pe_rc=$?
                 rm -f "$_pe_pf" 2>/dev/null || true
                 if [ "$_pe_rc" -eq 0 ] && [ -n "$_pe_out" ]; then

package/autonomy/lib/voter-agents.sh

@@ -327,7 +327,7 @@ loki_council_dispatch_agents() {
                 else _va_wrap=""; fi
                 _va_out="$($_va_wrap "$_va_loki" internal sdk-judge \
                     --prompt-file "$_va_pf" --schema-file "$_va_schema_f" \
-                    --model "${LOKI_SDK_COUNCIL_MODEL:-claude-sonnet-5}" --effort high \
+                    --model "${LOKI_SDK_COUNCIL_MODEL:-sonnet}" --effort high \
                     --timeout-ms "$(( _va_to_s * 1000 ))" 2>"$COUNCIL_STATE_DIR/votes/dispatch-stderr-${iteration}.log")" || _va_rc=$?
                 rm -f "$_va_pf" 2>/dev/null || true
                 if [ "$_va_rc" -eq 0 ] && [ -n "$_va_out" ]; then