loki-mode 11.56.3 → 11.56.5

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.56.3
+# Loki Mode v11.56.5
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -476,4 +476,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.56.3 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.56.5 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.56.3
+11.56.5

package/autonomy/loki

@@ -2848,9 +2848,10 @@ cmd_start() {
         fi
         return "$_ps_drc"
     fi
-    # P12-07b: a bare `loki start --resume [run-id]` goes to the same engine10
-    # resume path as `loki resume` (util/run_outputs.ts resumeMain), never into a
-    # new build. Exit codes go through _loki_e10_resume_map (0 and 4 -> 0, 5 -> 1); any other code, such as 3 for nothing to resume, is returned as is.
+    # P12-07b, #352: a bare `loki start --resume [run-id]` goes to the engine10 stage
+    # resume that `loki "<task>" --resume` uses (util/run_outputs.ts resumeFlag), never into a
+    # new build and never to the reporter (resumeMain). The exit code is returned unchanged:
+    # 3 nothing to resume, 2 refused, 4 blocked, 5 stalled; only `loki resume` maps codes.
     local _ps_resume=0 _ps_resume_args=() _ps_rskip=0 _ps_unknown=""
     for _ps_a in ${_ps_rest[@]+"${_ps_rest[@]}"}; do
         if [ "$_ps_rskip" = 1 ]; then _ps_rskip=0; continue; fi
@@ -2877,9 +2878,8 @@ cmd_start() {
                     return 2 ;;
             esac
         done
-        ( _loki_bun_delegate engine10 resume ${_ps_resume_args[@]+"${_ps_resume_args[@]}"} ) || _ps_rrc=$?
-        _loki_e10_resume_map "$_ps_rrc" || true
-        return "$_LOKI_E10_RC"
+        ( _loki_bun_delegate engine10 --resume ${_ps_resume_args[@]+"${_ps_resume_args[@]}"} ) || _ps_rrc=$?
+        return "$_ps_rrc"
     fi
     set -- ${_ps_rest[@]+"${_ps_rest[@]}"}
 
@@ -19656,12 +19656,12 @@ cmd_verify() {
     # verified by the engine10 verifier directly; bin/loki sends a bare verify back here.
     for _pk_arg in "$@"; do
         case "$_pk_arg" in
-            --sign-deploy|--sign-provenance|--url|--receipt|composite.json|*/composite.json|--seal-composite|--seal-composite=*|--max-age|--max-age=*|.loki/groups/*/receipt.json|*/.loki/groups/*/receipt.json)
+            --sign-deploy|--sign-provenance|--url|--receipt|composite.json|*/composite.json|--seal-composite|--seal-composite=*|--max-age|--max-age=*|.loki/groups/*/receipt.json|*/.loki/groups/*/receipt.json|.loki/runs/e10-*/receipt.json|*/.loki/runs/e10-*/receipt.json)
                 _loki_bun_delegate engine10 verify "$@"
                 return $? ;;
-            # A signed deploy record (.loki/deploys/*.json, schema loki.deploy/1) is re-checked by the same verifier.
+            # A signed deploy record (.loki/deploys/*.json, schema loki.deploy/1) or a run receipt anywhere (schema loki.v10.receipt) is re-checked by the same verifier.
             *.json)
-                if [ -f "$_pk_arg" ] && grep -q 'loki\.deploy/1' "$_pk_arg" 2>/dev/null; then
+                if [ -f "$_pk_arg" ] && grep -Eq 'loki\.deploy/1|"schema" *: *"loki\.v10\.receipt' "$_pk_arg" 2>/dev/null; then
                     _loki_bun_delegate engine10 verify "$@"
                     return $?
                 fi ;;

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.56.3"
+__version__ = "11.56.5"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.56.3. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.56.5. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.56.3
+**Version:** v11.56.5
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/FAILURE-CLASSES.md

@@ -1506,3 +1506,19 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 
 - Late materialization (recurrence 2026-10-23): the registry applies a publish 3 to 6 minutes after the client prints "+ loki-mode@X" (registry time field: 11.53.0 +4m10s, 11.53.1 +5m13s, 11.54.0 +6m12s). 11.54.1 uploaded 04:34:24Z, served 04:39:34Z; 11.54.2 uploaded 04:38:07Z, served 04:41:17Z, leaving latest=11.54.1 next=11.54.2. The 15s settle in the script is far shorter than the lag, so a write made in publish-npm can be overtaken after it settles (mechanism inferred, not directly observed). Fix: verify-npm-registry runs scripts/npm-dist-tags.sh again after loki-mode@VERSION resolves; the script is convergent (max stable, never lower), so it is safe outside the release-npm lock.
 - Fixture: tests/test-npm-dist-tags.sh (9 cases incl. latest dragged down after the first settle restored by a second run, a settled converge run writing nothing, late overtaking write restored and view outage error/empty with zero writes). Mutants (ignore tags, no re-read, target=VERSION, outage guard removed) each fail a case.
+
+## FC-THINKING-TYPE-ACCEPTED-BY-CLI-REJECTED-BY-API A thinking type the CLI accepted was a 400 for the model, and the usage error stated a rule the model did not have
+- User-visible vs raw: user-visible. `loki internal sdk-judge|sdk-text --model claude-sonnet-5-5 --thinking disabled` at effort high or below was sent as `thinking: {type: "disabled"}`, which the API rejects with a 400 at every effort for that model (claude-api skill, Thinking & Effort table: Sonnet 5.5 "disabled returns 400; to turn thinking off send between_tools"). The judge failed closed and the bash caller fell back. Separately, the usage error "disabled cannot combine with --effort xhigh or max" was printed for claude-opus-5 and claude-haiku-5-5, which #314 clamps instead of refusing.
+- Law: a request parameter is derived from the model catalog, never hand-written per model; a message never states a rule the catalog does not record.
+- Cause (measured): #314 encoded only the effort ceiling (thinking.max_effort) and kept one model-blind sentence in two callers; the catalog had no way to say that a type is never valid for a model and what replaces it.
+- Siblings swept: claude-opus-5-5, claude-fable-5-1 and claude-fable-5 list only adaptive in thinking.types, so disabled is a 400 at every effort for them (review of 37d4eb08d): claudeThinkingAccepted(model, type) is false for a type absent from types with no substitute, thinkingConflictsEffort refuses it at every effort, thinkingUsageError says "disabled is not accepted by <model>", and clampThinkingForEffort sends adaptive with a ledger record; claude-haiku-4-5 (no disabled substitute is invented), the max_effort clamp (still applied to the substituted type), thinkingConflictsEffort (a substituted model no longer conflicts), both callers of the usage error.
+- Mechanism: catalog thinking.substitute maps a requested type to the type sent (claude-sonnet-5-5: disabled to between_tools). clampThinkingForEffort applies the substitute, then the max_effort clamp to the substituted type, and the ledger thinking_clamp records `disabled->between_tools@<effort> (max high)` or `disabled->adaptive@<effort> (max high)`. thinkingUsageError builds the sentence from the substitute and max_effort of the resolved model.
+- Fixture: loki-ts/tests/providers/claude_flags.test.ts "thinking substitute and usage message (#314 follow-up)", loki-ts/tests/runner/sdk_invoker.test.ts "thinking substitute (#314)", tests/test-model-catalog-single-source.sh pins thinking.substitute. Three mutants (drop the catalog substitute, hand-write the message, clamp on the requested type) each turn them red.
+
+## FC-PRINTED-COMMAND-REACHES-WRONG-ENGINE The two commands the product prints for a user (`loki start --resume`, `loki verify <receipt path>`) were routed to an engine that could not do the job, and reported success or a wrong verdict
+- User-visible vs raw: user-visible. After a crash in implement, `loki start --resume` printed "phase implement is not auto-resumable ... start a new run", resumed nothing and exited 0 in 0.46s (the stage resume resumed the same crash in 20.8s through `loki "<task>" --resume`). `loki verify .loki/runs/<id>/receipt.json` on a VERIFIED run printed `VERDICT: CONCERNS` with the receipt path used as a git base ref ("Diff: 0 files"), where bare `loki verify` said VERIFIED.
+- Law: a command the product tells the user to run reaches the engine that owns the artifact it names, and its exit code is the engine's, never a success the engine did not report.
+- Cause (measured): the legacy start branch delegated `engine10 resume` (resumeMain, the reporter) instead of `engine10 --resume` (resumeFlag, the stage resume) and mapped its exit 4 to 0; cmd_verify routed only composite, group and deploy receipts to engine10, so a run receipt fell through to the diff verifier. tests/test-next-resume-agree.sh pinned `STUB-ARGV:engine10 resume` with a stub that exits 0, so it passed while the user path resumed nothing (a guard that passed its own mutation).
+- Siblings swept: `loki resume` (the reporter, keeps its 0/4/5 map), `loki "<task>" --resume` (already resumeFlag), bare `loki verify` and `loki verify e10-*` (already v10 in bin/loki), `--pubkey` verify (already v10), a git ref and a non-receipt .json (stay on the diff verifier, pinned as controls).
+- Mechanism: `start --resume` delegates `engine10 --resume [run-id]` and returns the code unchanged; cmd_verify sends `.loki/runs/e10-*/receipt.json` paths and any existing file whose schema starts `loki.v10.receipt` to `engine10 verify`.
+- Fixture: tests/test-next-resume-agree.sh drives the real Bun entry on a seeded interrupted run (asserts `engine10: resume from stage implement`, exit 2 not 0) and a stub that exits 4 (asserts 4); tests/test-verify-receipt-route.sh covers the path forms, a tampered receipt (TAMPERED, never CONCERNS) and the diff-verifier controls. Red on origin/main (17 and 4 failures), green after; mutants (delegate back to `resume`, schema route removed) turn them red.