loki-mode 11.56.5 → 11.57.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (72) hide show
  1. package/SKILL.md +2 -2
  2. package/VERSION +1 -1
  3. package/autonomy/lib/os_sandbox.py +600 -0
  4. package/autonomy/lib/secret-paths.json +9 -0
  5. package/dashboard/__init__.py +1 -1
  6. package/dashboard/build_supervisor.py +17 -204
  7. package/docs/CLI-REFERENCE.md +1 -1
  8. package/docs/INSTALLATION.md +1 -1
  9. package/docs/v10/FAILURE-CLASSES.md +4 -1
  10. package/docs/v10/PROGRESS.md +9 -0
  11. package/loki-ts/dist/loki.js +2 -2
  12. package/mcp/__init__.py +1 -1
  13. package/package.json +2 -2
  14. package/plugins/loki-mode/.claude-plugin/plugin.json +1 -1
  15. package/src/policies/claude_permissions.js +3 -1
  16. package/web-app/dist/assets/{AdminPage-Dimx1yBh.js → AdminPage-BdXC7R8h.js} +1 -1
  17. package/web-app/dist/assets/{Avatar-Dc3bWhBo.js → Avatar-CODU48Je.js} +1 -1
  18. package/web-app/dist/assets/{Badge-b2X7zLeT.js → Badge-DZE8yEMw.js} +1 -1
  19. package/web-app/dist/assets/{Button-WmENJAsd.js → Button--S_2rEVE.js} +1 -1
  20. package/web-app/dist/assets/{CockpitPage-8RQI3bm-.js → CockpitPage-CtB-8Nlu.js} +1 -1
  21. package/web-app/dist/assets/{ComparePage-CifTx_ce.js → ComparePage-Dy3RDGLA.js} +1 -1
  22. package/web-app/dist/assets/{ErrorBoundary-BWf3qZVi.js → ErrorBoundary-S_BL6WG6.js} +1 -1
  23. package/web-app/dist/assets/{EvidenceReceiptPanel-COEJUdCv.js → EvidenceReceiptPanel-BgMrHNQg.js} +1 -1
  24. package/web-app/dist/assets/{GitHubIssuesPanel-BuoEObIg.js → GitHubIssuesPanel-D6C_vIxF.js} +1 -1
  25. package/web-app/dist/assets/{GitHubPRsPanel-k338Akq5.js → GitHubPRsPanel-BXZnJQVR.js} +1 -1
  26. package/web-app/dist/assets/{HomePage-Dw89TygE.js → HomePage-Dskf8roM.js} +2 -2
  27. package/web-app/dist/assets/{LoginPage-Go7X1UUz.js → LoginPage-DX0Fyjt4.js} +1 -1
  28. package/web-app/dist/assets/{MagicPage-l9yI0QuR.js → MagicPage-jaBIYBr_.js} +1 -1
  29. package/web-app/dist/assets/{MetricsPage-CqYbIdOq.js → MetricsPage-3oJ92FcY.js} +1 -1
  30. package/web-app/dist/assets/{NotFoundPage-DDY07nmT.js → NotFoundPage-n1YqSjoo.js} +1 -1
  31. package/web-app/dist/assets/{ProjectPage-BI3YXMvn.js → ProjectPage-Chwc-9aM.js} +3 -3
  32. package/web-app/dist/assets/{ProjectsPage-B-e-jZCX.js → ProjectsPage-CoOhk5aW.js} +1 -1
  33. package/web-app/dist/assets/{SettingsPage-D5yeF0Ib.js → SettingsPage-BCU-XapP.js} +1 -1
  34. package/web-app/dist/assets/{ShowcasePage-Cp4lhM2Q.js → ShowcasePage-fNLEQOhc.js} +1 -1
  35. package/web-app/dist/assets/{SystemSettingsPage-CGgunfcK.js → SystemSettingsPage-Bt3PzbqL.js} +1 -1
  36. package/web-app/dist/assets/{TeamsPage-CH4-Ec82.js → TeamsPage-Ds26rBSS.js} +1 -1
  37. package/web-app/dist/assets/{TemplatesPage-DphuBvfB.js → TemplatesPage-DZo92LGJ.js} +1 -1
  38. package/web-app/dist/assets/{TerminalOutput-BppH3g5s.js → TerminalOutput-1wnKnqaX.js} +1 -1
  39. package/web-app/dist/assets/{activity-BWs18kHl.js → activity-DqpbPJ8F.js} +1 -1
  40. package/web-app/dist/assets/{bell-CJcKaBBF.js → bell-9AK7Jw2Y.js} +1 -1
  41. package/web-app/dist/assets/{bot-DzNrwUlE.js → bot-Cr73CI7v.js} +1 -1
  42. package/web-app/dist/assets/{check-BwXjvRFD.js → check-DWWc7ugy.js} +1 -1
  43. package/web-app/dist/assets/{chevron-left-CtR6I6_X.js → chevron-left-D1v_bvlW.js} +1 -1
  44. package/web-app/dist/assets/{circle-alert-Buh7j2ty.js → circle-alert-CIp3gtHi.js} +1 -1
  45. package/web-app/dist/assets/{clock-s2f9N3Vx.js → clock-DEx7rYki.js} +1 -1
  46. package/web-app/dist/assets/{cloud-DEOd_pzL.js → cloud-Bycn90xL.js} +1 -1
  47. package/web-app/dist/assets/{code-xml-C4xFPVwf.js → code-xml-DOcXrNJU.js} +1 -1
  48. package/web-app/dist/assets/{database-BnoHUFDF.js → database-Bot4zvdk.js} +1 -1
  49. package/web-app/dist/assets/{dollar-sign-DtvGSyex.js → dollar-sign-CVKwI0OJ.js} +1 -1
  50. package/web-app/dist/assets/{file-code-corner-DzzG_aWp.js → file-code-corner-BKPI_yF0.js} +1 -1
  51. package/web-app/dist/assets/{file-plus-D44fKKeH.js → file-plus-_SUeeSwB.js} +1 -1
  52. package/web-app/dist/assets/{globe-BmRQoo61.js → globe-C4SNVyp2.js} +1 -1
  53. package/web-app/dist/assets/{hammer-DlnGJRRm.js → hammer-D0KhRJjv.js} +1 -1
  54. package/web-app/dist/assets/{index-yNuJC1nz.js → index-HJdspB0z.js} +3 -3
  55. package/web-app/dist/assets/{layers-Mp7J961W.js → layers-th1FZl4L.js} +1 -1
  56. package/web-app/dist/assets/{loader-circle-BXbrKzAM.js → loader-circle-DGNwlM9d.js} +1 -1
  57. package/web-app/dist/assets/{lock--G0xB_sg.js → lock-CmxRlOjc.js} +1 -1
  58. package/web-app/dist/assets/{package-ffXQaNr5.js → package-CCFqDhcx.js} +1 -1
  59. package/web-app/dist/assets/{plus-D-SjJwMh.js → plus-DMvUUGHR.js} +1 -1
  60. package/web-app/dist/assets/{refresh-cw-YZez-e-J.js → refresh-cw-jk9yDNHG.js} +1 -1
  61. package/web-app/dist/assets/{rotate-ccw-DJeBzW7L.js → rotate-ccw-B4qtnPb5.js} +1 -1
  62. package/web-app/dist/assets/{scroll-text-BczZXyxh.js → scroll-text-Cc6YtNmC.js} +1 -1
  63. package/web-app/dist/assets/{server-Cgf89eCI.js → server-BYpNb-G1.js} +1 -1
  64. package/web-app/dist/assets/{shield-alert-CfnIh_vZ.js → shield-alert-DzVX8vEK.js} +1 -1
  65. package/web-app/dist/assets/{thumbs-up-DVWVUs2p.js → thumbs-up-nzGDRPjQ.js} +1 -1
  66. package/web-app/dist/assets/{trash-2-C7y11wmM.js → trash-2-B7g04h8R.js} +1 -1
  67. package/web-app/dist/assets/{trending-down-bTE7raGc.js → trending-down-ayXC-U0B.js} +1 -1
  68. package/web-app/dist/assets/{trending-up-CWUE8let.js → trending-up-DWZsi8PX.js} +1 -1
  69. package/web-app/dist/assets/{upload-DV61LMnd.js → upload-BPhRYbnh.js} +1 -1
  70. package/web-app/dist/assets/{usePolling-CsmEvZkA.js → usePolling-B6qLkExQ.js} +1 -1
  71. package/web-app/dist/assets/{user-JuKWf6JG.js → user-MAp5FNR4.js} +1 -1
  72. package/web-app/dist/index.html +1 -1
@@ -12,7 +12,6 @@ import json
12
12
  import os
13
13
  import re
14
14
  import signal
15
- import socket
16
15
  import subprocess
17
16
  import sys
18
17
  import tempfile
@@ -24,6 +23,7 @@ from pathlib import Path
24
23
  from typing import Any, Iterator
25
24
 
26
25
  from autonomy.lib import deadline as process_deadline
26
+ from autonomy.lib import os_sandbox
27
27
 
28
28
 
29
29
  SCHEMA_VERSION = 1
@@ -821,97 +821,15 @@ def _host_confinement_config(
821
821
  return {**config, "workspace": workspace, "spec": spec}
822
822
 
823
823
 
824
- def _seatbelt_path_filter(path: Path) -> str:
825
- kind = "subpath" if path.is_dir() else "literal"
826
- return f"({kind} {json.dumps(str(path), ensure_ascii=True)})"
827
-
828
-
829
824
  def _host_seatbelt_profile(
830
825
  workspace: Path,
831
826
  run_sh: Path,
832
827
  spec: Path,
833
828
  ) -> bytes:
834
829
  """Build the macOS local-acceptance sandbox profile for one workspace."""
835
- config = _host_confinement_config(workspace, run_sh, spec)
836
- quote = lambda value: json.dumps(str(value), ensure_ascii=True)
837
- lines = [
838
- "(version 1)",
839
- "(deny default)",
840
- "(allow process-fork process-exec*)",
841
- "(allow signal (target same-sandbox))",
842
- "(allow process-info* (target same-sandbox))",
843
- "(allow sysctl-read)",
844
- "(allow mach-lookup)",
845
- "(allow ipc-posix-shm ipc-posix-sem)",
846
- "(allow network-outbound (remote ip))",
847
- "(allow network-bind (local ip))",
848
- "(deny network-outbound (remote unix-socket))",
849
- '(allow network-outbound (literal "/private/var/run/mDNSResponder"))',
850
- ";; Preexisting cross-boundary hardlinks share one kernel inode.",
851
- ";; This path policy cannot prove which directory originally created it.",
852
- ]
853
- read_paths = {
854
- *config["system_read_paths"],
855
- *config["runtime_read_paths"],
856
- config["engine_source"],
857
- config["workspace"],
858
- config["spec"],
859
- }
860
- metadata_paths = {Path("/"), Path("/var"), Path("/tmp"), Path("/etc"), Path("/dev")}
861
- for path in (*read_paths, *config["runtime_write_paths"]):
862
- metadata_paths.update(path.parents)
863
- lines.append('(allow file-read-metadata file-read-data (literal "/"))')
864
- for path in sorted(metadata_paths - {Path("/")}, key=str):
865
- lines.append(
866
- f"(allow file-read-metadata (literal {quote(path)}))"
867
- )
868
- for path in sorted(read_paths, key=str):
869
- lines.append(
870
- f"(allow file-read* file-map-executable {_seatbelt_path_filter(path)})"
871
- )
872
- write_paths = {*config["runtime_write_paths"], config["workspace"]}
873
- for path in sorted(write_paths, key=str):
874
- lines.append(
875
- f"(allow file-read* file-write* file-map-executable "
876
- f"{_seatbelt_path_filter(path)})"
877
- )
878
- for device in ("/dev/null", "/dev/random", "/dev/urandom", "/dev/zero"):
879
- if Path(device).exists():
880
- lines.append(
881
- f"(allow file-read* file-write* (literal {quote(device)}))"
882
- )
883
- if Path("/dev/fd").exists():
884
- lines.append('(allow file-read* file-write* (subpath "/dev/fd"))')
885
- for port in config["ports"]:
886
- lines.append(
887
- f'(deny network-outbound (remote tcp "*:{port}"))'
888
- )
889
- # network-bind uses "tcp4", not "tcp": confirmed on macOS 27.0 (26A428)
890
- # that sandbox-exec's (local tcp "*:PORT") filter on network-bind never
891
- # matches an actual bind (a bind to 127.0.0.1 or 0.0.0.0 on the denied
892
- # port succeeds), while (local tcp4 "*:PORT") correctly denies it with
893
- # a clean PermissionError. network-outbound's "tcp" filter above is
894
- # unaffected (verified separately: an outbound connect to a denied
895
- # port is still refused), so only this line changes.
896
- #
897
- # Known residual gap, same platform bug family, found while fixing
898
- # the above (not introduced by it -- reproduced identically against
899
- # the un-patched "tcp" rule too): on this same macOS 27.0 build, EVERY
900
- # port-qualified network-bind filter for IPv6 ("tcp6 \"*:PORT\"" and
901
- # "ip6 \"*:PORT\"") also fails to match, so an IPv6 bind to the
902
- # reserved port (e.g. "::1"/"::") still succeeds even with a "tcp6"
903
- # deny added. Only a port-unqualified "(deny network-bind (local
904
- # ip6))" was confirmed to actually block IPv6 binds, which would deny
905
- # ALL IPv6 binding (not just the reserved ports) -- a materially wider
906
- # behavior change than this port-scoping fix, and nothing in this
907
- # codebase binds IPv6 today (grepped: no AF_INET6/IPv6 usage). Left
908
- # unfixed here to keep this change scoped to the failing test; the
909
- # reserved ports remain enforced for IPv4 (the only family in active
910
- # use), and a confined build could still self-expose a reserved port
911
- # over IPv6 loopback/wildcard. Tracked as a follow-up, not silently
912
- # closed.
913
- lines.append(f'(deny network-bind (local tcp4 "*:{port}"))')
914
- return ("\n".join(lines) + "\n").encode("utf-8")
830
+ return os_sandbox.seatbelt_profile(
831
+ _host_confinement_config(workspace, run_sh, spec)
832
+ )
915
833
 
916
834
 
917
835
  def _child_environment(workspace: Path, loki_dir: Path) -> dict[str, str]:
@@ -1041,7 +959,7 @@ def confined_provider_auth_status(
1041
959
  workspace = workspace.resolve(strict=True)
1042
960
  run_sh = run_sh.resolve(strict=True)
1043
961
  spec = spec.resolve(strict=True)
1044
- sandbox_exec = Path("/usr/bin/sandbox-exec")
962
+ sandbox_exec = os_sandbox.SANDBOX_EXEC
1045
963
  if sys.platform != "darwin" or not sandbox_exec.is_file():
1046
964
  return {
1047
965
  "provider": provider,
@@ -1164,125 +1082,20 @@ def smoke_probe_host_seatbelt(workspace_root: Path, run_sh: Path) -> dict[str, s
1164
1082
  """Prove the configured kernel profile before advertising confinement."""
1165
1083
  if sys.platform != "darwin":
1166
1084
  raise RuntimeError("LOKI host Seatbelt is available only on macOS")
1167
- sandbox_exec = Path("/usr/bin/sandbox-exec")
1168
- if not sandbox_exec.is_file() or not os.access(sandbox_exec, os.X_OK):
1169
- raise RuntimeError("LOKI host Seatbelt requires /usr/bin/sandbox-exec")
1170
-
1171
1085
  workspace_root = _required_path(
1172
1086
  "workspace_root", str(workspace_root), directory=True
1173
1087
  )
1174
- with tempfile.TemporaryDirectory(
1175
- prefix=".seatbelt-probe-workspace-", dir=workspace_root
1176
- ) as workspace_raw, tempfile.TemporaryDirectory(
1177
- prefix=".seatbelt-probe-sibling-", dir=workspace_root
1178
- ) as sibling_raw:
1179
- workspace = Path(workspace_raw).resolve()
1180
- sibling = Path(sibling_raw).resolve()
1181
- spec = workspace / "spec.md"
1182
- spec.write_text("seatbelt probe", encoding="utf-8")
1183
- secret = sibling / "secret.txt"
1184
- secret.write_text("must remain unreadable", encoding="utf-8")
1185
- unix_socket_path = workspace / "probe.sock"
1186
-
1187
- config = _host_confinement_config(workspace, run_sh, spec)
1188
- probe_port = 0
1189
- for port in config["ports"]:
1190
- with socket.socket() as candidate:
1191
- try:
1192
- candidate.bind(("127.0.0.1", port))
1193
- except OSError:
1194
- continue
1195
- probe_port = port
1196
- break
1197
- if not probe_port:
1198
- raise RuntimeError("no reserved port was free for the Seatbelt probe")
1199
-
1200
- profile = _host_seatbelt_profile(workspace, run_sh, spec)
1201
- profile_path = workspace / "probe.sb"
1202
- profile_path.write_bytes(profile)
1203
- output_path = workspace / "probe.txt"
1204
- probe_code = """
1205
- import errno
1206
- import os
1207
- import signal
1208
- import socket
1209
- import subprocess
1210
- import sys
1211
-
1212
- output, sibling, unix_path, port = sys.argv[1:]
1213
- open(output, "w", encoding="utf-8").write("confined")
1214
- open("/etc/hosts", encoding="utf-8").read(1)
1215
- child = subprocess.Popen(
1216
- ["/bin/sh", "-c", "/bin/sleep 5 & wait"],
1217
- stdin=subprocess.DEVNULL,
1218
- stdout=subprocess.DEVNULL,
1219
- stderr=subprocess.DEVNULL,
1220
- preexec_fn=os.setpgrp,
1221
- )
1222
- os.killpg(child.pid, signal.SIGKILL)
1223
- child.wait(timeout=2)
1224
- try:
1225
- open(sibling, encoding="utf-8").read(1)
1226
- except OSError:
1227
- pass
1228
- else:
1229
- raise SystemExit(41)
1230
- with socket.socket(socket.AF_UNIX) as client:
1231
- try:
1232
- client.connect(unix_path)
1233
- except OSError:
1234
- pass
1235
- else:
1236
- raise SystemExit(42)
1237
- with socket.socket() as listener:
1238
- try:
1239
- listener.bind(("127.0.0.1", int(port)))
1240
- except OSError as exc:
1241
- if exc.errno not in (errno.EACCES, errno.EPERM):
1242
- raise
1243
- else:
1244
- raise SystemExit(43)
1245
- """
1246
- with socket.socket(socket.AF_UNIX) as unix_server:
1247
- unix_server.bind(str(unix_socket_path))
1248
- unix_server.listen(1)
1249
- try:
1250
- result = subprocess.run(
1251
- [
1252
- str(sandbox_exec),
1253
- "-f",
1254
- str(profile_path),
1255
- "/usr/bin/python3",
1256
- "-c",
1257
- probe_code,
1258
- str(output_path),
1259
- str(secret),
1260
- str(unix_socket_path),
1261
- str(probe_port),
1262
- ],
1263
- cwd=str(workspace),
1264
- env={
1265
- "HOME": os.environ.get("HOME", "/var/empty"),
1266
- "LANG": os.environ.get("LANG", "C"),
1267
- "PATH": os.environ.get(
1268
- "LOKI_HOST_CHILD_PATH", "/usr/bin:/bin:/usr/sbin:/sbin"
1269
- ),
1270
- "TMPDIR": str(workspace),
1271
- },
1272
- capture_output=True,
1273
- text=True,
1274
- timeout=15,
1275
- )
1276
- except subprocess.SubprocessError as exc:
1277
- raise RuntimeError("Seatbelt kernel smoke probe did not finish") from exc
1278
- if result.returncode != 0 or output_path.read_text(encoding="utf-8") != "confined":
1279
- raise RuntimeError(
1280
- f"Seatbelt kernel smoke probe failed with exit {result.returncode}"
1281
- )
1282
- return {
1283
- **host_confinement_identity(workspace_root, run_sh),
1284
- "probe_sha256": sha256_bytes(profile),
1285
- }
1088
+ ports = _host_boundary_config(run_sh)["ports"]
1089
+ probe_sha256 = os_sandbox.seatbelt_smoke_probe(
1090
+ workspace_root,
1091
+ lambda workspace, spec: _host_seatbelt_profile(workspace, run_sh, spec),
1092
+ ports,
1093
+ os.environ.get("LOKI_HOST_CHILD_PATH", "/usr/bin:/bin:/usr/sbin:/sbin"),
1094
+ )
1095
+ return {
1096
+ **host_confinement_identity(workspace_root, run_sh),
1097
+ "probe_sha256": probe_sha256,
1098
+ }
1286
1099
 
1287
1100
 
1288
1101
  def _host_confined_args(
@@ -1297,7 +1110,7 @@ def _host_confined_args(
1297
1110
  return args, None
1298
1111
  if sys.platform != "darwin":
1299
1112
  raise RuntimeError("LOKI host Seatbelt is available only on macOS")
1300
- sandbox_exec = Path("/usr/bin/sandbox-exec")
1113
+ sandbox_exec = os_sandbox.SANDBOX_EXEC
1301
1114
  if not sandbox_exec.is_file() or not os.access(sandbox_exec, os.X_OK):
1302
1115
  raise RuntimeError("LOKI host Seatbelt requires /usr/bin/sandbox-exec")
1303
1116
 
@@ -1,6 +1,6 @@
1
1
  # CLI reference
2
2
 
3
- Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.56.5. Do not edit by hand.
3
+ Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.57.1. Do not edit by hand.
4
4
  Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
5
5
 
6
6
  | Command | Description |
@@ -2,7 +2,7 @@
2
2
 
3
3
  Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
4
4
 
5
- **Version:** v11.56.5
5
+ **Version:** v11.57.1
6
6
 
7
7
  **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
8
8
 
@@ -1479,13 +1479,16 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
1479
1479
  - User-visible vs raw: user-visible. After 11.53.0, 11.53.1 and 11.54.0 shipped within 8 minutes, dist-tags read latest=11.53.1 and next=11.54.0, so `npm i loki-mode` installed an older release than the newest.
1480
1480
  - Law: a dist-tag only ever moves to the highest published version, and the final state is read back, not assumed from the write.
1481
1481
  - Cause (measured, partly inferred): publish-npm logs show the writes in order (11.53.1 "+latest" 23:31:01Z, 11.54.0 "+latest" 23:34:42Z), so the runs did not run out of order and the lagging CUR read could only cause a skip, not a backwards move. The registry's time field shows 11.53.1 became served at 23:36:13Z, after 11.54.0's tag write; the observed latest=11.53.1 is consistent with the registry applying 11.53.1's tag write late. That mechanism is inferred from timestamps, not directly observed.
1482
- - Siblings swept: publish-ts-sdk has the same CUR-vs-VERSION compare (loki-mode-sdk, lower traffic; follow-up), the CoS-dispatched force_republish run 39898474372 re-asserted 11.54.0 at 04:06:43Z.
1482
+ - Siblings swept: publish-ts-sdk had the same CUR-vs-VERSION compare for loki-mode-sdk; fixed in slice pd/sdktags, it now calls scripts/npm-dist-tags.sh with LOKI_DISTTAG_PKG=loki-mode-sdk (no second copy of the logic). publish-python-sdk has no dist-tag step and needs none: PyPI has no tags and orders releases by version, so a late upload of a lower version cannot become the latest the installer resolves (twine --skip-existing keeps reruns idempotent). The CoS-dispatched force_republish run 39898474372 re-asserted 11.54.0 at 04:06:43Z.
1483
1483
  - Mechanism: scripts/npm-dist-tags.sh targets max(VERSION, latest, next, every published stable version), never lower; it re-reads both tags after writing and again after a pause, re-asserting the target until both settle or the tries run out (red). Every read (latest, next, published versions) must succeed and be non-empty before any write; an error or empty answer refuses with "refusing to move latest (fail closed)" and zero writes (review rev-a: an outage otherwise made VERSION the only candidate).
1484
1484
  - Fixture: tests/test-npm-dist-tags.sh (7 cases incl. late overtaking write restored and view outage error/empty with zero writes). Mutants (ignore tags, no re-read, target=VERSION, outage guard removed) each fail a case.
1485
1485
 
1486
1486
  - Mechanism: scripts/npm-dist-tags.sh targets max(VERSION, latest, next, every published stable version), never lower than its own reads; a per-tag read above the target (another run moved it) or an empty one re-reads and writes nothing, and npm has no compare-and-set so a window of milliseconds between the last read and the write remains; it re-reads both tags after writing and again after a pause, re-asserting the target until both settle or the tries run out (red). Every read (latest, next, published versions) must succeed and be non-empty before any write; an error or empty answer refuses with "refusing to move latest (fail closed)" and zero writes (review rev-a: an outage otherwise made VERSION the only candidate).
1487
1487
  - Fixture: tests/test-npm-dist-tags.sh (8 cases incl. a fresh-higher read never written backwards; incl. late overtaking write restored and view outage error/empty with zero writes). Mutants (ignore tags, no re-read, target=VERSION, outage guard removed) each fail a case.
1488
1488
 
1489
+ - Late materialization (recurrence 2026-10-23): the registry applies a publish 3 to 6 minutes after the client prints "+ loki-mode@X" (registry time field: 11.53.0 +4m10s, 11.53.1 +5m13s, 11.54.0 +6m12s). 11.54.1 uploaded 04:34:24Z, served 04:39:34Z; 11.54.2 uploaded 04:38:07Z, served 04:41:17Z, leaving latest=11.54.1 next=11.54.2. The 15s settle in the script is far shorter than the lag, so a write made in publish-npm can be overtaken after it settles (mechanism inferred, not directly observed). Fix: verify-npm-registry (and verify-sdk-registry for loki-mode-sdk) run scripts/npm-dist-tags.sh again after the version resolves; the script is convergent (max stable, never lower), so it is safe outside the release-npm lock.
1490
+ - Fixture: tests/test-npm-dist-tags.sh (9 cases incl. latest dragged down after the first settle restored by a second run, a settled converge run writing nothing, late overtaking write restored and view outage error/empty with zero writes). Mutants (ignore tags, no re-read, target=VERSION, outage guard removed) each fail a case.
1491
+
1489
1492
  ## FC-CATALOG-CAPABILITY-DRIFT-UNCHECKED A catalog entry whose capabilities drifted from the API failed only at request time
1490
1493
  - User-visible: a catalog entry whose thinking types or effort levels drifted from what the model accepts fails only at request time, as an API error mid-run. Raw: the catalog (providers/model_catalog.json) is static and never compared with models.retrieve.
1491
1494
  - Law broken: a capability the harness relies on is claimed without being checked against its source of truth.
@@ -2708,3 +2708,12 @@ v11.17.21 published (Release success on 462fbc40a; npm latest 11.17.21, next 11.
2708
2708
  - Reboot wiped the scratchpad clones and reviewer state; release clone rebuilt at ~/git/lm-wt/lm-rel, worktrees now under ~/git/lm-wt.
2709
2709
  - Re-review of lost verdicts: #318 BLOCK (orphaned run.sh test anchor, voter_agents.ts conflict; rework pd/318r). Security batch BLOCK on #303b (unredacted input_summary in events.jsonl), #315 (backslash authority bypass sends MCP auth over http), #325e (doctor --airgap prints webhook secrets), #329 (dashboard _write_secret unswept, receipt sweep untested); rework pd/303c and pd/mcpchain. #305fix-rb pending full bun test.
2710
2710
  - Founder 2026-10-23: act as CTO and CoS without asking; 10/10 versus competitors in every category and measured 100x UX. Head-to-head bench (loki 11.54.0 vs bare claude -p, 8 hidden-test tasks, n=2) running on pd/h2h; codex not installed (UNMEASURED), droid unauthenticated. Architect filing win-category slices plus the UX scorecard tracking issue.
2711
+
2712
+
2713
+ ## 2026-10-23T05:37Z (CoS) checkpoint, v11.54.0..v11.56.5 shipped
2714
+ - origin/main 39fd953b5 = v11.56.5 (cw17: start --resume reaches stage resume, Refs #352). npm at 05:36Z: latest 11.56.4, next 11.56.3 (propagation window; re-check).
2715
+ - #352 criterion 5 (resume outcome within 21s) NOT MET: 3x3 healthy resume 21-31s, posted at issue comment 6358142565. Ruling on the 21s target goes to the founder. cw17b (honest exit 4 only for runs that truly cannot resume) assigned to eng-314f.
2716
+ - P0 harness PARTIAL root-caused (one paid run, about $0.08, D108): full suite uses bare `python` (check_result.ts FULL_SUITE_CMD) and ignores .venv; Wall files `loki_wall_*.py` are never in pytest discovery, so verify never runs them; "one reviewer" is a consequence; "repo not recorded" is a no-origin fixture plus wording. Three slices: eng-314f interpreter, eng-cw12 Wall discovery (verify.ts), eng-318r wording.
2717
+ - Blocked in review: cw04 e220a18ff (rev-a B1 signed blocks read from agent-writable run-dir files with no engine writer; B2 strict bypass; B3 sandbox fails open). Ruling: label unverified, strict absent/malformed = PARTIAL, sandbox on with malformed or non-allowlisted kind = FAILED, absent = PARTIAL until the cw01 writer lands. cw18 c1def44f5 (4 blockers incl. e10ext 1520 > 1500 lines).
2718
+ - Approved: skilllink 32890c693 (tl-324 MEDIUM, 19/0, mutant red). In review: #328 bef58ca69 (rev-c), #332 c5a6d4d2b (tl-324), #309 f230e3fce (rev-b).
2719
+ - Founder machine: global loki and ~/.claude/skills/loki-mode still at 11.17.103 (left untouched).
@@ -1,5 +1,5 @@
1
1
  // @bun
2
- var wv0=Object.create;var{getPrototypeOf:_v0,defineProperty:RK,getOwnPropertyNames:vo,getOwnPropertyDescriptor:xv0}=Object,ho=Object.prototype.hasOwnProperty;function fo(Z){return this[Z]}var kv0,Sv0,bv0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?kv0??=new WeakMap:Sv0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?wv0(_v0(Z)):{};let z=$||!Z||!Z.__esModule?RK(J,"default",{value:Z,enumerable:!0}):J;for(let W of vo(Z))if(!ho.call(z,W))RK(z,W,{get:fo.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},yv0=(Z)=>{var $=(yo??=new WeakMap).get(Z),J;if($)return $;if($=RK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of vo(Z))if(!ho.call($,X))RK($,X,{get:fo.bind(Z,X),enumerable:!(J=xv0(Z,X))||J.enumerable})}return yo.set(Z,$),$},yo,sN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var vv0=(Z)=>Z;function hv0(Z,$){this[Z]=vv0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)RK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:hv0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var r9=import.meta.require;var mo={};j0(mo,{lokiDirFor:()=>tN,lokiDir:()=>E0,homeLokiDir:()=>L2,findRepoRootForVersion:()=>EK,REPO_ROOT:()=>C0});import{resolve as CZ,dirname as ME}from"path";import{fileURLToPath as fv0}from"url";import{existsSync as rN}from"fs";import{homedir as gv0}from"os";function mv0(){let Z=go;for(let $=0;$<6;$++){if(rN(CZ(Z,"VERSION"))&&rN(CZ(Z,"autonomy/run.sh")))return Z;let J=ME(Z);if(J===Z)break;Z=J}return CZ(go,"..","..","..")}function EK(Z){let $=Z;for(let J=0;J<6;J++){if(rN(CZ($,"VERSION"))&&rN(CZ($,"autonomy/run.sh")))return $;let X=ME($);if(X===$)break;$=X}return CZ(Z,"..","..","..")}function tN(Z){return process.env.LOKI_DIR??CZ(Z,".loki")}function E0(){return tN(process.cwd())}function L2(){return CZ(gv0(),".loki")}var go,C0;var n0=S(()=>{go=ME(fv0(import.meta.url));C0=mv0()});import{readFileSync as uv0}from"fs";import{resolve as pv0,dirname as cv0}from"path";import{fileURLToPath as dv0}from"url";function U6(){if(x1!==null)return x1;let Z="11.56.5";if(typeof Z==="string"&&Z.length>0)return x1=Z,x1;try{let $=cv0(dv0(import.meta.url)),J=EK($);x1=uv0(pv0(J,"VERSION"),"utf-8").trim()}catch{x1="unknown"}return x1}var x1=null;var FZ=S(()=>{n0()});import{mkdirSync as AE,readFileSync as eN,realpathSync as lv0,statSync as av0,writeFileSync as LE}from"fs";import{dirname as zY,join as OE,resolve as uo}from"path";function rv0(){return uo(L2(),"cache","update-check.json")}function IZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function DK(Z,$){let J=IZ(Z),X=IZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function po(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function co(Z){try{let $=eN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&IZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function tv0(Z){try{let $=JSON.parse(eN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function ev0(Z,$){let J=co(Z);try{AE(zY(Z),{recursive:!0}),LE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Zh0(Z,$){try{AE(zY(Z),{recursive:!0}),LE(Z,JSON.stringify($),"utf-8")}catch{}}async function $h0(){try{let Z=await fetch(iv0,{signal:AbortSignal.timeout(nv0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&IZ($.version)!==null)return $.version}catch{}return null}async function Jh0(Z=Date.now(),$=$h0,J=rv0()){let X=co(J);if(X&&Z-X.checkedAt<ov0)return X.latest;let Y=tv0(J);if(Y!==null&&Z-Y>=0&&Z-Y<sv0)return null;let Q=await $();if(Q===null)return ev0(J,Z),null;return Zh0(J,{checkedAt:Z,latest:Q}),Q}function Xh0(Z,$=process.env){if(IZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=OE(Q,"loki"),W;try{av0(z),W=lv0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=OE(zY(zY(W)),"package.json"),V=JSON.parse(eN(K,"utf8")).version;if(typeof V!=="string")continue;if(DK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Yh0(){return uo(L2(),"cache","last-seen-version.json")}function Qh0(Z,$={}){try{if(po())return!1;if(IZ(Z)===null)return!1;let J=$.seenFile??Yh0(),X=null;try{let Q=JSON.parse(eN(J,"utf-8")).version;if(typeof Q==="string"&&IZ(Q)!==null)X=Q}catch{}if(X!==null&&!DK(Z,X))return!1;try{AE(zY(J),{recursive:!0}),LE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
2
+ var wv0=Object.create;var{getPrototypeOf:_v0,defineProperty:RK,getOwnPropertyNames:vo,getOwnPropertyDescriptor:xv0}=Object,ho=Object.prototype.hasOwnProperty;function fo(Z){return this[Z]}var kv0,Sv0,bv0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?kv0??=new WeakMap:Sv0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?wv0(_v0(Z)):{};let z=$||!Z||!Z.__esModule?RK(J,"default",{value:Z,enumerable:!0}):J;for(let W of vo(Z))if(!ho.call(z,W))RK(z,W,{get:fo.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},yv0=(Z)=>{var $=(yo??=new WeakMap).get(Z),J;if($)return $;if($=RK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of vo(Z))if(!ho.call($,X))RK($,X,{get:fo.bind(Z,X),enumerable:!(J=xv0(Z,X))||J.enumerable})}return yo.set(Z,$),$},yo,sN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var vv0=(Z)=>Z;function hv0(Z,$){this[Z]=vv0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)RK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:hv0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var r9=import.meta.require;var mo={};j0(mo,{lokiDirFor:()=>tN,lokiDir:()=>E0,homeLokiDir:()=>L2,findRepoRootForVersion:()=>EK,REPO_ROOT:()=>C0});import{resolve as CZ,dirname as ME}from"path";import{fileURLToPath as fv0}from"url";import{existsSync as rN}from"fs";import{homedir as gv0}from"os";function mv0(){let Z=go;for(let $=0;$<6;$++){if(rN(CZ(Z,"VERSION"))&&rN(CZ(Z,"autonomy/run.sh")))return Z;let J=ME(Z);if(J===Z)break;Z=J}return CZ(go,"..","..","..")}function EK(Z){let $=Z;for(let J=0;J<6;J++){if(rN(CZ($,"VERSION"))&&rN(CZ($,"autonomy/run.sh")))return $;let X=ME($);if(X===$)break;$=X}return CZ(Z,"..","..","..")}function tN(Z){return process.env.LOKI_DIR??CZ(Z,".loki")}function E0(){return tN(process.cwd())}function L2(){return CZ(gv0(),".loki")}var go,C0;var n0=S(()=>{go=ME(fv0(import.meta.url));C0=mv0()});import{readFileSync as uv0}from"fs";import{resolve as pv0,dirname as cv0}from"path";import{fileURLToPath as dv0}from"url";function U6(){if(x1!==null)return x1;let Z="11.57.1";if(typeof Z==="string"&&Z.length>0)return x1=Z,x1;try{let $=cv0(dv0(import.meta.url)),J=EK($);x1=uv0(pv0(J,"VERSION"),"utf-8").trim()}catch{x1="unknown"}return x1}var x1=null;var FZ=S(()=>{n0()});import{mkdirSync as AE,readFileSync as eN,realpathSync as lv0,statSync as av0,writeFileSync as LE}from"fs";import{dirname as zY,join as OE,resolve as uo}from"path";function rv0(){return uo(L2(),"cache","update-check.json")}function IZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function DK(Z,$){let J=IZ(Z),X=IZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function po(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function co(Z){try{let $=eN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&IZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function tv0(Z){try{let $=JSON.parse(eN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function ev0(Z,$){let J=co(Z);try{AE(zY(Z),{recursive:!0}),LE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Zh0(Z,$){try{AE(zY(Z),{recursive:!0}),LE(Z,JSON.stringify($),"utf-8")}catch{}}async function $h0(){try{let Z=await fetch(iv0,{signal:AbortSignal.timeout(nv0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&IZ($.version)!==null)return $.version}catch{}return null}async function Jh0(Z=Date.now(),$=$h0,J=rv0()){let X=co(J);if(X&&Z-X.checkedAt<ov0)return X.latest;let Y=tv0(J);if(Y!==null&&Z-Y>=0&&Z-Y<sv0)return null;let Q=await $();if(Q===null)return ev0(J,Z),null;return Zh0(J,{checkedAt:Z,latest:Q}),Q}function Xh0(Z,$=process.env){if(IZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=OE(Q,"loki"),W;try{av0(z),W=lv0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=OE(zY(zY(W)),"package.json"),V=JSON.parse(eN(K,"utf8")).version;if(typeof V!=="string")continue;if(DK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Yh0(){return uo(L2(),"cache","last-seen-version.json")}function Qh0(Z,$={}){try{if(po())return!1;if(IZ(Z)===null)return!1;let J=$.seenFile??Yh0(),X=null;try{let Q=JSON.parse(eN(J,"utf-8")).version;if(typeof Q==="string"&&IZ(Q)!==null)X=Q}catch{}if(X!==null&&!DK(Z,X))return!1;try{AE(zY(J),{recursive:!0}),LE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
3
3
  `),!0}catch{return!1}}function zh0(Z){let $=Z.replace(/\\/g,"/");if($.includes("/Cellar/"))return"brew upgrade loki-mode";if(/\/pnpm\//.test($)||$.includes("/.pnpm/"))return"pnpm add -g loki-mode (or npm i -g loki-mode)";if($.includes("/yarn/global/")||$.includes("/.yarn/"))return"yarn global add loki-mode (or npm i -g loki-mode)";if($.includes("/.bun/"))return"bun install -g loki-mode (or npm i -g loki-mode)";if($.includes("/lib/node_modules/"))return"npm i -g loki-mode (or bun install -g loki-mode)";if($.includes("/homebrew/"))return"brew upgrade loki-mode";return"bun install -g loki-mode (or npm i -g loki-mode)"}async function lo(Z,$={}){try{if(po())return;if(IZ(Z)===null)return;let J=$.write??((Q)=>process.stderr.write(Q));Qh0(Z,{write:J,...$.cacheFile?{seenFile:OE(zY($.cacheFile),"last-seen-version.json")}:{}});let X=Xh0(Z,$.env??process.env);if(X!==null){J(`Loki Mode ${X.version} is installed but not the one running (you are running ${Z}).
4
4
  Another loki earlier on PATH is winning. Newer copy: ${X.path}
5
5
  Run \`which -a loki\` to see the order, then remove or re-point the earlier entry.
@@ -3275,4 +3275,4 @@ Unknown commands exit 2 with a suggestion; run 'loki help' for the full list.
3275
3275
  `);{let{suggestCommand:X}=await Promise.resolve().then(() => (J7(),Tn)),Y=$===void 0?void 0:X($);if(Y)process.stderr.write(`Did you mean 'loki ${Y}'?
3276
3276
  `)}return process.stderr.write(Fv0),2}}zI0();var Iv0=()=>globalThis[Symbol.for("loki.ownsStopSignals")]===!0;process.on("SIGINT",()=>{if(!Iv0())process.exit(130)});process.on("SIGTERM",()=>{if(!Iv0())process.exit(143)});var SB9=await kB9(Bun.argv.slice(2));process.exit(SB9);
3277
3277
 
3278
- //# debugId=0B91EAC7C8DE821CCB88DA514068E1F0
3278
+ //# debugId=72A1D4AD66CA0A5F77CCB6E54ED2EF1F
package/mcp/__init__.py CHANGED
@@ -75,4 +75,4 @@ try:
75
75
  except ImportError:
76
76
  __all__ = ['mcp']
77
77
 
78
- __version__ = '11.56.5'
78
+ __version__ = '11.57.1'
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "loki-mode",
3
3
  "mcpName": "io.github.asklokesh/loki-mode",
4
- "version": "11.56.5",
4
+ "version": "11.57.1",
5
5
  "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
6
6
  "keywords": [
7
7
  "agent",
@@ -160,5 +160,5 @@
160
160
  "dependencies": {
161
161
  "@resvg/resvg-wasm": "^2.6.2"
162
162
  },
163
- "gitHead": "39fd953b57f7e5eb151f7885b8273a41ade82c29"
163
+ "gitHead": "c4a7f1f4c74a5326bd220a6edf9b4df6ba46a0e7"
164
164
  }
@@ -2,7 +2,7 @@
2
2
  "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
3
3
  "name": "loki-mode",
4
4
  "displayName": "Loki Mode",
5
- "version": "11.56.5",
5
+ "version": "11.57.1",
6
6
  "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
7
7
  "author": {
8
8
  "name": "Autonomi",
@@ -38,7 +38,9 @@ function failClosed(why, warnings) {
38
38
  // Read denies use the bare '.env*' glob on purpose: a deny beats any allow, so a name list cannot carve out
39
39
  // the templates (.env.example, .env.sample, .env.template) without missing secret names such as .envrc,
40
40
  // .env.prod, .env.keys, .env.vault and .env.bak. The templates are blocked too.
41
- var CRED_DENY = ['Read(//**/.env*)', 'Read(//**/.aws/**)', 'Read(//**/.ssh/**)', 'Read(//**/*.pem)'];
41
+ // The list lives in autonomy/lib/secret-paths.json, shared with the OS sandbox (autonomy/lib/os_sandbox.py).
42
+ var CRED_DENY = JSON.parse(fs.readFileSync(path.join(__dirname, '..', '..', 'autonomy', 'lib', 'secret-paths.json'), 'utf8'))
43
+ .rules.map(function (r) { return r.kind === 'file' ? 'Read(//**/' + r.glob + ')' : 'Read(//**/' + r.name + '/**)'; });
42
44
  var HOST_RE = /^(\*\.)?[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/i;
43
45
 
44
46
  // Throws on any non-ASCII, malformed or punycode (xn-- label) domain: an ASCII xn-- name can render as a
@@ -1,4 +1,4 @@
1
- import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-yNuJC1nz.js";import{B as C}from"./Button-WmENJAsd.js";import{T as $e}from"./trending-up-CWUE8let.js";import{C as z}from"./clock-s2f9N3Vx.js";import{A as Be,U as ue,M as De}from"./Avatar-Dc3bWhBo.js";import{A as J}from"./activity-BWs18kHl.js";import{R as pe}from"./refresh-cw-YZez-e-J.js";import{G as ze}from"./globe-BmRQoo61.js";import{C as Le}from"./chevron-left-CtR6I6_X.js";import{C as je}from"./check-BwXjvRFD.js";import{D as Y}from"./dollar-sign-DtvGSyex.js";import{U as Te}from"./user-JuKWf6JG.js";import{D as Me}from"./database-BnoHUFDF.js";import{L as Ue}from"./lock--G0xB_sg.js";import{S as Re}from"./scroll-text-BczZXyxh.js";import{S as Ie}from"./shield-alert-CfnIh_vZ.js";/**
1
+ import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-HJdspB0z.js";import{B as C}from"./Button--S_2rEVE.js";import{T as $e}from"./trending-up-DWZsi8PX.js";import{C as z}from"./clock-DEx7rYki.js";import{A as Be,U as ue,M as De}from"./Avatar-CODU48Je.js";import{A as J}from"./activity-DqpbPJ8F.js";import{R as pe}from"./refresh-cw-jk9yDNHG.js";import{G as ze}from"./globe-C4SNVyp2.js";import{C as Le}from"./chevron-left-D1v_bvlW.js";import{C as je}from"./check-DWWc7ugy.js";import{D as Y}from"./dollar-sign-CVKwI0OJ.js";import{U as Te}from"./user-MAp5FNR4.js";import{D as Me}from"./database-Bot4zvdk.js";import{L as Ue}from"./lock-CmxRlOjc.js";import{S as Re}from"./scroll-text-Cc6YtNmC.js";import{S as Ie}from"./shield-alert-DzVX8vEK.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.
@@ -1,4 +1,4 @@
1
- import{c as l,j as s}from"./index-yNuJC1nz.js";/**
1
+ import{c as l,j as s}from"./index-HJdspB0z.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.
@@ -1 +1 @@
1
- import{j as e}from"./index-yNuJC1nz.js";import{C as r}from"./clock-s2f9N3Vx.js";import{C as a}from"./circle-alert-Buh7j2ty.js";import{C as l}from"./check-BwXjvRFD.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
1
+ import{j as e}from"./index-HJdspB0z.js";import{C as r}from"./clock-DEx7rYki.js";import{C as a}from"./circle-alert-CIp3gtHi.js";import{C as l}from"./check-DWWc7ugy.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
@@ -1 +1 @@
1
- import{r as p,j as t}from"./index-yNuJC1nz.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
1
+ import{r as p,j as t}from"./index-HJdspB0z.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
@@ -1,4 +1,4 @@
1
- import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-yNuJC1nz.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-BWf3qZVi.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-DVWVUs2p.js";import{C as oe}from"./check-BwXjvRFD.js";import{C as Ye}from"./clock-s2f9N3Vx.js";import{D as Xe}from"./dollar-sign-DtvGSyex.js";import{U as Ze}from"./upload-DV61LMnd.js";import{L as V}from"./loader-circle-BXbrKzAM.js";/**
1
+ import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-HJdspB0z.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-S_BL6WG6.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-nzGDRPjQ.js";import{C as oe}from"./check-DWWc7ugy.js";import{C as Ye}from"./clock-DEx7rYki.js";import{D as Xe}from"./dollar-sign-CVKwI0OJ.js";import{U as Ze}from"./upload-BPhRYbnh.js";import{L as V}from"./loader-circle-DGNwlM9d.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.
@@ -1 +1 @@
1
- import{r as o,j as e}from"./index-yNuJC1nz.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};
1
+ import{r as o,j as e}from"./index-HJdspB0z.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};
@@ -1,4 +1,4 @@
1
- import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-yNuJC1nz.js";/**
1
+ import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-HJdspB0z.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.
@@ -1 +1 @@
1
- import{r as l,a as x,j as e}from"./index-yNuJC1nz.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};
1
+ import{r as l,a as x,j as e}from"./index-HJdspB0z.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};
@@ -1,4 +1,4 @@
1
- import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-yNuJC1nz.js";import{B as N}from"./Button-WmENJAsd.js";import{C as y}from"./thumbs-up-DVWVUs2p.js";import{R as S}from"./refresh-cw-YZez-e-J.js";import{C as z}from"./circle-alert-Buh7j2ty.js";import{U as D}from"./user-JuKWf6JG.js";import{L as G}from"./loader-circle-BXbrKzAM.js";import{R as T}from"./rotate-ccw-DJeBzW7L.js";/**
1
+ import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-HJdspB0z.js";import{B as N}from"./Button--S_2rEVE.js";import{C as y}from"./thumbs-up-nzGDRPjQ.js";import{R as S}from"./refresh-cw-jk9yDNHG.js";import{C as z}from"./circle-alert-CIp3gtHi.js";import{U as D}from"./user-MAp5FNR4.js";import{L as G}from"./loader-circle-DGNwlM9d.js";import{R as T}from"./rotate-ccw-B4qtnPb5.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.
@@ -1,4 +1,4 @@
1
- import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-yNuJC1nz.js";import{B as y}from"./Button-WmENJAsd.js";import{C as ge}from"./chevron-left-CtR6I6_X.js";import{G as P}from"./thumbs-up-DVWVUs2p.js";import{R as $}from"./refresh-cw-YZez-e-J.js";import{C as Ne}from"./circle-alert-Buh7j2ty.js";import{L as Q,S as je}from"./ProjectPage-BI3YXMvn.js";import{S as se}from"./shield-alert-CfnIh_vZ.js";import{F as ye}from"./file-code-corner-DzzG_aWp.js";import{C as V}from"./clock-s2f9N3Vx.js";import{C as re}from"./check-BwXjvRFD.js";import"./ErrorBoundary-BWf3qZVi.js";import"./TerminalOutput-BppH3g5s.js";import"./lock--G0xB_sg.js";import"./package-ffXQaNr5.js";import"./file-plus-D44fKKeH.js";import"./activity-BWs18kHl.js";import"./scroll-text-BczZXyxh.js";import"./bot-DzNrwUlE.js";import"./loader-circle-BXbrKzAM.js";import"./hammer-DlnGJRRm.js";import"./dollar-sign-DtvGSyex.js";import"./globe-BmRQoo61.js";import"./trash-2-C7y11wmM.js";import"./upload-DV61LMnd.js";import"./plus-D-SjJwMh.js";import"./rotate-ccw-DJeBzW7L.js";import"./code-xml-C4xFPVwf.js";import"./trending-up-CWUE8let.js";import"./layers-Mp7J961W.js";import"./trending-down-bTE7raGc.js";import"./server-Cgf89eCI.js";/**
1
+ import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-HJdspB0z.js";import{B as y}from"./Button--S_2rEVE.js";import{C as ge}from"./chevron-left-D1v_bvlW.js";import{G as P}from"./thumbs-up-nzGDRPjQ.js";import{R as $}from"./refresh-cw-jk9yDNHG.js";import{C as Ne}from"./circle-alert-CIp3gtHi.js";import{L as Q,S as je}from"./ProjectPage-Chwc-9aM.js";import{S as se}from"./shield-alert-DzVX8vEK.js";import{F as ye}from"./file-code-corner-BKPI_yF0.js";import{C as V}from"./clock-DEx7rYki.js";import{C as re}from"./check-DWWc7ugy.js";import"./ErrorBoundary-S_BL6WG6.js";import"./TerminalOutput-1wnKnqaX.js";import"./lock-CmxRlOjc.js";import"./package-CCFqDhcx.js";import"./file-plus-_SUeeSwB.js";import"./activity-DqpbPJ8F.js";import"./scroll-text-Cc6YtNmC.js";import"./bot-Cr73CI7v.js";import"./loader-circle-DGNwlM9d.js";import"./hammer-D0KhRJjv.js";import"./dollar-sign-CVKwI0OJ.js";import"./globe-C4SNVyp2.js";import"./trash-2-B7g04h8R.js";import"./upload-BPhRYbnh.js";import"./plus-DMvUUGHR.js";import"./rotate-ccw-B4qtnPb5.js";import"./code-xml-DOcXrNJU.js";import"./trending-up-DWZsi8PX.js";import"./layers-th1FZl4L.js";import"./trending-down-ayXC-U0B.js";import"./server-BYpNb-G1.js";/**
2
2
  * @license lucide-react v0.577.0 - ISC
3
3
  *
4
4
  * This source code is licensed under the ISC license.