loki-mode 11.36.5 → 11.37.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.36.5
+# Loki Mode v11.37.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -476,4 +476,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.36.5 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.37.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.36.5
+11.37.0

package/autonomy/sandbox.sh

@@ -1255,8 +1255,16 @@ _sandbox_egress_proxy_args() {
 # Create the internal network and proxy sidecar. Echoes the internal network name.
 _sandbox_egress_up() {
     local hosts="$1" net="${CONTAINER_NAME}-internal" script
-    local dir="${LOKI_RUN_TMP:-${TMPDIR:-/tmp}/loki-egress-${CONTAINER_NAME}}"
-    mkdir -p "$dir" && chmod 700 "$dir" || return 1
+    local dir="${LOKI_RUN_TMP:-}" rec troot
+    if [[ -z "$dir" ]]; then
+        # Resolve the temp root first (macOS TMPDIR ends in a slash), so the dir is T/loki-egress.X and matches at teardown.
+        # mktemp -d picks an unpredictable name with mode 700, so a planted symlink in a shared temp dir is never followed.
+        troot="$(cd "${TMPDIR:-/tmp}" 2>/dev/null && pwd -P)" || return 1
+        dir="$(mktemp -d "${troot}/loki-egress.XXXXXXXX")" || return 1
+        rec="$(_sandbox_egress_record)"
+        if ! { mkdir -p "$(dirname "$rec")" && chmod 700 "$(dirname "$rec")" && printf '%s\n' "$dir" > "$rec"; }; then rm -rf -- "$dir"; return 1; fi
+    fi
+    chmod 700 "$dir" || return 1
     script="$dir/egress-proxy.py"
     _sandbox_egress_proxy_source > "$script"
     docker rm -f "${CONTAINER_NAME}-egress" >/dev/null 2>&1 || true
@@ -1269,9 +1277,24 @@ _sandbox_egress_up() {
     printf '%s\n' "$net"
 }
 
+# Host-side state file naming the fallback egress dir for this container. It lives outside PROJECT_DIR on purpose:
+# the project is mounted rw at /workspace, so a record there could be forged by the agent.
+_sandbox_egress_record() { printf '%s\n' "${LOKI_SANDBOX_STATE_DIR:-${HOME}/.loki/sandbox-state}/egress-${CONTAINER_NAME}.dir"; }
+
 _sandbox_egress_down() {
-    local fb="${TMPDIR:-/tmp}/loki-egress-${CONTAINER_NAME}"
-    if [[ -z "${LOKI_RUN_TMP:-}" && -d "$fb" && ! -L "$fb" ]]; then rm -rf -- "$fb"; fi
+    local rec fb root
+    rec="$(_sandbox_egress_record)"
+    if [[ -f "$rec" && ! -L "$rec" ]]; then
+        IFS= read -r fb < "$rec" || fb=""
+        root="$(cd "${TMPDIR:-/tmp}" 2>/dev/null && pwd -P)" || root=""
+        # Remove only a real, own, unlinked loki-egress.XXXXXXXX directory that sits directly in the resolved temp root.
+        if [[ -n "$root" && "$(dirname -- "$fb")" == "$root" ]] \
+            && [[ "$(basename -- "$fb")" =~ ^loki-egress\.[A-Za-z0-9]{8}$ ]] \
+            && [[ -d "$fb" && ! -L "$fb" && -O "$fb" && "$(cd "$fb" 2>/dev/null && pwd -P)" == "$fb" ]]; then
+            rm -rf -- "$fb"
+        fi
+        rm -f -- "$rec"
+    fi
     docker rm -f "${CONTAINER_NAME}-egress" >/dev/null 2>&1 || true
     docker network rm "${CONTAINER_NAME}-internal" >/dev/null 2>&1 || true
 }

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.36.5"
+__version__ = "11.37.0"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.36.5. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.37.0. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.36.5
+**Version:** v11.37.0
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).