loki-mode 11.57.5 → 11.57.6

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.57.5
+# Loki Mode v11.57.6
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -476,4 +476,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.57.5 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.57.6 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.57.5
+11.57.6

package/autonomy/lib/skill-link-heal.sh

@@ -16,6 +16,11 @@
 #   - the running install is durable (npm global root, bun global dir, Homebrew
 #     prefix); an npx cache, temp dir or arbitrary prefix is refused with one
 #     stderr line and the link is left untouched
+#   - (FC-SKILL-LINK-HIJACK) the running root is not under a temp root ($TMPDIR, /tmp,
+#     /var/folders ...), even when a scratch npm prefix makes it look durable
+#   - (FC-SKILL-LINK-HIJACK) a live link is never repointed to an older VERSION
+#   - (FC-SKILL-LINK-HIJACK) a plain run (the bin/loki shim) repairs only a dangling
+#     link; repointing a still-valid link is for the postinstall mode alone
 
 _loki_skill_is_install_path() {
     case "${1%/}" in
@@ -54,6 +59,47 @@ _loki_skill_npm_root() {
     return "$rc"
 }
 
+# FC-SKILL-LINK-HIJACK: a throwaway copy (a packed tarball extracted under $TMPDIR, a run-owned
+# temp dir) is never a link target, whatever npm prefix it was installed with. The root list is
+# overridable (LOKI_SKILL_LINK_TEMP_ROOTS, newline separated) so tests can model a non-temp host.
+_loki_skill_under_temp() {
+    local root_p="$1" t tp roots="${LOKI_SKILL_LINK_TEMP_ROOTS:-}"
+    [ -n "$roots" ] || roots="${TMPDIR:-}
+/tmp
+/private/tmp
+/var/tmp
+/var/folders
+/private/var/folders"
+    while IFS= read -r t; do
+        [ -n "$t" ] || continue
+        tp="$(_loki_skill_dir_p "$t")" || tp="$t"
+        tp="${tp%/}"
+        [ -n "$tp" ] || continue
+        case "$root_p" in "$tp"/*) return 0 ;; esac
+    done <<EOT
+$roots
+EOT
+    return 1
+}
+
+# Dotted-numeric compare of two VERSION strings; returns 0 when $1 < $2. Unreadable input is "not older".
+_loki_skill_version_lt() {
+    local a="${1%%[-+]*}" b="${2%%[-+]*}" i x y
+    [ -n "$a" ] && [ -n "$b" ] || return 1
+    local IFS=.
+    # shellcheck disable=SC2086
+    set -- $a; local -a av=("$@")
+    # shellcheck disable=SC2086
+    set -- $b; local -a bv=("$@")
+    for i in 0 1 2; do
+        x="${av[$i]:-0}"; y="${bv[$i]:-0}"
+        case "$x$y" in *[!0-9]*) return 1 ;; esac
+        [ "$x" -lt "$y" ] && return 0
+        [ "$x" -gt "$y" ] && return 1
+    done
+    return 1
+}
+
 _loki_skill_root_durable() {
     local root_p="$1" cand cands="" npmroot prefix rc
     case "$root_p" in
@@ -92,12 +138,18 @@ EOT
 
 loki_skill_link_heal() {
     [ "${LOKI_NO_SKILL_LINK_HEAL:-}" = "1" ] && return 0
-    local root="${1:-}" home="${HOME:-}" root_p rel link tgt live_p tmp durable="" why
+    local root="${1:-}" mode="${2:-run}" home="${HOME:-}" root_p rel link tgt live_p tmp durable="" why cur_v run_v
     [ -n "$root" ] && [ -n "$home" ] || return 0
     [ -f "$root/SKILL.md" ] || return 0
     root_p="$(cd "$root" 2>/dev/null && pwd -P)" || return 0
     _loki_skill_is_install_path "$root_p" || _loki_skill_is_install_path "$root" || return 0
 
+    if _loki_skill_under_temp "$root_p"; then
+        printf 'loki: not repointing skill links: running install %s is under a temp directory\n' "$root_p" >&2
+        return 0
+    fi
+    run_v="$(head -n 1 "$root_p/VERSION" 2>/dev/null | tr -d '[:space:]')"
+
     for rel in .claude .codex .cline .aider; do
         link="$home/$rel/skills/loki-mode"
         [ -L "$link" ] || continue
@@ -107,6 +159,12 @@ loki_skill_link_heal() {
         if [ -e "$link" ]; then
             live_p="$(cd "$link" 2>/dev/null && pwd -P)" || live_p=""
             [ "$live_p" = "$root_p" ] && continue
+            [ "$mode" = "postinstall" ] || continue # a valid link is repointed only by an install, never by a plain run
+            cur_v="$(head -n 1 "$link/VERSION" 2>/dev/null | tr -d '[:space:]')"
+            if _loki_skill_version_lt "$run_v" "$cur_v"; then
+                printf 'loki: not repointing skill link %s: running %s is older than %s\n' "$link" "$run_v" "$cur_v" >&2
+                continue
+            fi
         fi
         if [ -z "$durable" ]; then
             if why="$(_loki_skill_root_durable "$root_p")"; then

package/bin/loki-postinstall.js

@@ -4,7 +4,7 @@ try {
   const { spawnSync } = require("node:child_process");
   const path = require("node:path");
   const root = path.join(__dirname, "..");
-  spawnSync("bash", ["-c", '. "$1/autonomy/lib/skill-link-heal.sh" && loki_skill_link_heal "$1"', "_", root], { stdio: ["ignore", "ignore", "inherit"], timeout: 10000 });
+  spawnSync("bash", ["-c", '. "$1/autonomy/lib/skill-link-heal.sh" && loki_skill_link_heal "$1" postinstall', "_", root], { stdio: ["ignore", "ignore", "inherit"], timeout: 10000 });
   if (!process.env.CI && process.env.LOKI_NO_COMPLETIONS !== "1") {
     spawnSync(path.join(__dirname, "loki"), ["completion", "--postinstall"], { stdio: "ignore", timeout: 20000 });
   }

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.57.5"
+__version__ = "11.57.6"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.57.5. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.57.6. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.57.5
+**Version:** v11.57.6
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/FAILURE-CLASSES.md

@@ -1544,3 +1544,11 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Mechanism: route.ts asks run_group.originSlug before choosing the real group runner (task or mission) and otherwise takes the existing sequential fallback with the reason named. run_group.ts keeps its own refusal for a direct call.
 - Sibling not closed: originSlug accepts any path-shaped origin with two segments (a local bare path reads as a slug), while backlog.py accepts github.com only; tightening it would change GitHub Enterprise hosts, so it is left and noted here.
 - Fixture: loki-ts/tests/engine10/route_group.test.ts (no origin: sequential with reason, not NOT PROVEN, task and mission; control: an owner/repo origin still reaches the group runner). Red with the two gates in route.ts removed (3 failures).
+
+## FC-SKILL-LINK-HIJACK A plain run rewrites the user's global skill link to itself
+- User saw: running any loki binary repointed ~/.claude/skills/loki-mode, once into a loki-run temp dir and later, on `loki --version` from global 11.17.103, back to that older install.
+- Mechanism (measured): bin/loki calls `loki_skill_link_heal` on every run (FC-30). The heal repointed a LIVE link to a different Loki install whenever the running root looked like an install path, with no check on temp roots, on which install was newer, or on whether the caller was an install step. Raw cause is a repair that treated "any running install" as the owner of the link.
+- Law: L0 (repair only what is provably the harness's own, never take over a user-visible global). L2 (the verdict about the host must not depend on which binary was run last).
+- Siblings: swept every writer of provider skill links. `loki_skill_link_heal` (all four provider dirs, one mechanism, fixed here); `cmd_setup_skill` (autonomy/loki ~14954) is an explicit command and refuses an existing target, so it stays; `cmd_remote` (autonomy/loki ~29612) only creates when SKILL.md is absent, never replaces a valid link; doctor.ts is read-only; shell completions do not touch skill dirs.
+- Mechanism of the fix: one shared function. A plain run (mode run) repairs only dangling links; only `bin/loki-postinstall.js` (mode postinstall) repoints a live link to another install. A running root under TMPDIR, /tmp, /var/tmp or /var/folders is refused. A live link is never repointed to a lower VERSION than its current target. Opt-out LOKI_NO_SKILL_LINK_HEAL=1 unchanged.
+- Fixture: tests/test-skill-link-heal.sh cases 15-18 (temp-rooted scratch prefix refused, plain run leaves a valid link, downgrade refused, upgrade by postinstall repoints as positive control), fake HOME only. Red on the old lib (3 of 4 fail, the control passes). Mutants: drop temp check, drop mode gate, drop version guard each turn exactly one case red.

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var kv0=Object.create;var{getPrototypeOf:Sv0,defineProperty:EK,getOwnPropertyNames:ho,getOwnPropertyDescriptor:yv0}=Object,fo=Object.prototype.hasOwnProperty;function go(Z){return this[Z]}var bv0,vv0,hv0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?bv0??=new WeakMap:vv0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?kv0(Sv0(Z)):{};let z=$||!Z||!Z.__esModule?EK(J,"default",{value:Z,enumerable:!0}):J;for(let W of ho(Z))if(!fo.call(z,W))EK(z,W,{get:go.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},fv0=(Z)=>{var $=(vo??=new WeakMap).get(Z),J;if($)return $;if($=EK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of ho(Z))if(!fo.call($,X))EK($,X,{get:go.bind(Z,X),enumerable:!(J=yv0(Z,X))||J.enumerable})}return vo.set(Z,$),$},vo,sN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var gv0=(Z)=>Z;function mv0(Z,$){this[Z]=gv0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)EK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:mv0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var r9=import.meta.require;var uo={};j0(uo,{lokiDirFor:()=>tN,lokiDir:()=>E0,homeLokiDir:()=>L2,findRepoRootForVersion:()=>DK,REPO_ROOT:()=>C0});import{resolve as CZ,dirname as CE}from"path";import{fileURLToPath as uv0}from"url";import{existsSync as rN}from"fs";import{homedir as pv0}from"os";function cv0(){let Z=mo;for(let $=0;$<6;$++){if(rN(CZ(Z,"VERSION"))&&rN(CZ(Z,"autonomy/run.sh")))return Z;let J=CE(Z);if(J===Z)break;Z=J}return CZ(mo,"..","..","..")}function DK(Z){let $=Z;for(let J=0;J<6;J++){if(rN(CZ($,"VERSION"))&&rN(CZ($,"autonomy/run.sh")))return $;let X=CE($);if(X===$)break;$=X}return CZ(Z,"..","..","..")}function tN(Z){return process.env.LOKI_DIR??CZ(Z,".loki")}function E0(){return tN(process.cwd())}function L2(){return CZ(pv0(),".loki")}var mo,C0;var n0=S(()=>{mo=CE(uv0(import.meta.url));C0=cv0()});import{readFileSync as dv0}from"fs";import{resolve as lv0,dirname as av0}from"path";import{fileURLToPath as iv0}from"url";function U6(){if(x1!==null)return x1;let Z="11.57.5";if(typeof Z==="string"&&Z.length>0)return x1=Z,x1;try{let $=av0(iv0(import.meta.url)),J=DK($);x1=dv0(lv0(J,"VERSION"),"utf-8").trim()}catch{x1="unknown"}return x1}var x1=null;var FZ=S(()=>{n0()});import{mkdirSync as IE,readFileSync as eN,realpathSync as ov0,statSync as nv0,writeFileSync as TE}from"fs";import{dirname as WY,join as FE,resolve as po}from"path";function Zh0(){return po(L2(),"cache","update-check.json")}function IZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function wK(Z,$){let J=IZ(Z),X=IZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function co(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function lo(Z){try{let $=eN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&IZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function $h0(Z){try{let $=JSON.parse(eN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Jh0(Z,$){let J=lo(Z);try{IE(WY(Z),{recursive:!0}),TE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Xh0(Z,$){try{IE(WY(Z),{recursive:!0}),TE(Z,JSON.stringify($),"utf-8")}catch{}}async function Yh0(){try{let Z=await fetch(sv0,{signal:AbortSignal.timeout(tv0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&IZ($.version)!==null)return $.version}catch{}return null}async function Qh0(Z=Date.now(),$=Yh0,J=Zh0()){let X=lo(J);if(X&&Z-X.checkedAt<rv0)return X.latest;let Y=$h0(J);if(Y!==null&&Z-Y>=0&&Z-Y<ev0)return null;let Q=await $();if(Q===null)return Jh0(J,Z),null;return Xh0(J,{checkedAt:Z,latest:Q}),Q}function zh0(Z,$=process.env){if(IZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=FE(Q,"loki"),W;try{nv0(z),W=ov0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=FE(WY(WY(W)),"package.json"),V=JSON.parse(eN(K,"utf8")).version;if(typeof V!=="string")continue;if(wK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Wh0(){return po(L2(),"cache","last-seen-version.json")}function Kh0(Z,$={}){try{if(co())return!1;if(IZ(Z)===null)return!1;let J=$.seenFile??Wh0(),X=null;try{let Q=JSON.parse(eN(J,"utf-8")).version;if(typeof Q==="string"&&IZ(Q)!==null)X=Q}catch{}if(X!==null&&!wK(Z,X))return!1;try{IE(WY(J),{recursive:!0}),TE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
+var kv0=Object.create;var{getPrototypeOf:Sv0,defineProperty:EK,getOwnPropertyNames:ho,getOwnPropertyDescriptor:yv0}=Object,fo=Object.prototype.hasOwnProperty;function go(Z){return this[Z]}var bv0,vv0,hv0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?bv0??=new WeakMap:vv0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?kv0(Sv0(Z)):{};let z=$||!Z||!Z.__esModule?EK(J,"default",{value:Z,enumerable:!0}):J;for(let W of ho(Z))if(!fo.call(z,W))EK(z,W,{get:go.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},fv0=(Z)=>{var $=(vo??=new WeakMap).get(Z),J;if($)return $;if($=EK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of ho(Z))if(!fo.call($,X))EK($,X,{get:go.bind(Z,X),enumerable:!(J=yv0(Z,X))||J.enumerable})}return vo.set(Z,$),$},vo,sN=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var gv0=(Z)=>Z;function mv0(Z,$){this[Z]=gv0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)EK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:mv0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var r9=import.meta.require;var uo={};j0(uo,{lokiDirFor:()=>tN,lokiDir:()=>E0,homeLokiDir:()=>L2,findRepoRootForVersion:()=>DK,REPO_ROOT:()=>C0});import{resolve as CZ,dirname as CE}from"path";import{fileURLToPath as uv0}from"url";import{existsSync as rN}from"fs";import{homedir as pv0}from"os";function cv0(){let Z=mo;for(let $=0;$<6;$++){if(rN(CZ(Z,"VERSION"))&&rN(CZ(Z,"autonomy/run.sh")))return Z;let J=CE(Z);if(J===Z)break;Z=J}return CZ(mo,"..","..","..")}function DK(Z){let $=Z;for(let J=0;J<6;J++){if(rN(CZ($,"VERSION"))&&rN(CZ($,"autonomy/run.sh")))return $;let X=CE($);if(X===$)break;$=X}return CZ(Z,"..","..","..")}function tN(Z){return process.env.LOKI_DIR??CZ(Z,".loki")}function E0(){return tN(process.cwd())}function L2(){return CZ(pv0(),".loki")}var mo,C0;var n0=S(()=>{mo=CE(uv0(import.meta.url));C0=cv0()});import{readFileSync as dv0}from"fs";import{resolve as lv0,dirname as av0}from"path";import{fileURLToPath as iv0}from"url";function U6(){if(x1!==null)return x1;let Z="11.57.6";if(typeof Z==="string"&&Z.length>0)return x1=Z,x1;try{let $=av0(iv0(import.meta.url)),J=DK($);x1=dv0(lv0(J,"VERSION"),"utf-8").trim()}catch{x1="unknown"}return x1}var x1=null;var FZ=S(()=>{n0()});import{mkdirSync as IE,readFileSync as eN,realpathSync as ov0,statSync as nv0,writeFileSync as TE}from"fs";import{dirname as WY,join as FE,resolve as po}from"path";function Zh0(){return po(L2(),"cache","update-check.json")}function IZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function wK(Z,$){let J=IZ(Z),X=IZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function co(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function lo(Z){try{let $=eN(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&IZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function $h0(Z){try{let $=JSON.parse(eN(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Jh0(Z,$){let J=lo(Z);try{IE(WY(Z),{recursive:!0}),TE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Xh0(Z,$){try{IE(WY(Z),{recursive:!0}),TE(Z,JSON.stringify($),"utf-8")}catch{}}async function Yh0(){try{let Z=await fetch(sv0,{signal:AbortSignal.timeout(tv0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&IZ($.version)!==null)return $.version}catch{}return null}async function Qh0(Z=Date.now(),$=Yh0,J=Zh0()){let X=lo(J);if(X&&Z-X.checkedAt<rv0)return X.latest;let Y=$h0(J);if(Y!==null&&Z-Y>=0&&Z-Y<ev0)return null;let Q=await $();if(Q===null)return Jh0(J,Z),null;return Xh0(J,{checkedAt:Z,latest:Q}),Q}function zh0(Z,$=process.env){if(IZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=FE(Q,"loki"),W;try{nv0(z),W=ov0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=FE(WY(WY(W)),"package.json"),V=JSON.parse(eN(K,"utf8")).version;if(typeof V!=="string")continue;if(wK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Wh0(){return po(L2(),"cache","last-seen-version.json")}function Kh0(Z,$={}){try{if(co())return!1;if(IZ(Z)===null)return!1;let J=$.seenFile??Wh0(),X=null;try{let Q=JSON.parse(eN(J,"utf-8")).version;if(typeof Q==="string"&&IZ(Q)!==null)X=Q}catch{}if(X!==null&&!wK(Z,X))return!1;try{IE(WY(J),{recursive:!0}),TE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
 `),!0}catch{return!1}}function Vh0(Z){let $=Z.replace(/\\/g,"/");if($.includes("/Cellar/"))return"brew upgrade loki-mode";if(/\/pnpm\//.test($)||$.includes("/.pnpm/"))return"pnpm add -g loki-mode  (or npm i -g loki-mode)";if($.includes("/yarn/global/")||$.includes("/.yarn/"))return"yarn global add loki-mode  (or npm i -g loki-mode)";if($.includes("/.bun/"))return"bun install -g loki-mode  (or npm i -g loki-mode)";if($.includes("/lib/node_modules/"))return"npm i -g loki-mode  (or bun install -g loki-mode)";if($.includes("/homebrew/"))return"brew upgrade loki-mode";return"bun install -g loki-mode  (or npm i -g loki-mode)"}async function ao(Z,$={}){try{if(co())return;if(IZ(Z)===null)return;let J=$.write??((Q)=>process.stderr.write(Q));Kh0(Z,{write:J,...$.cacheFile?{seenFile:FE(WY($.cacheFile),"last-seen-version.json")}:{}});let X=zh0(Z,$.env??process.env);if(X!==null){J(`Loki Mode ${X.version} is installed but not the one running (you are running ${Z}).
   Another loki earlier on PATH is winning. Newer copy: ${X.path}
   Run \`which -a loki\` to see the order, then remove or re-point the earlier entry.
@@ -3277,4 +3277,4 @@ Unknown commands exit 2 with a suggestion; run 'loki help' for the full list.
 `);{let{suggestCommand:X}=await Promise.resolve().then(() => (J7(),Pn)),Y=$===void 0?void 0:X($);if(Y)process.stderr.write(`Did you mean 'loki ${Y}'?
 `)}return process.stderr.write(Pv0),2}}VI0();var Rv0=()=>globalThis[Symbol.for("loki.ownsStopSignals")]===!0;process.on("SIGINT",()=>{if(!Rv0())process.exit(130)});process.on("SIGTERM",()=>{if(!Rv0())process.exit(143)});var fB9=await hB9(Bun.argv.slice(2));process.exit(fB9);
 
-//# debugId=68E077A8BA532E667DD2B7E90767805A
+//# debugId=1D461F0F7FE4CD46AAFC12B15BAE413E

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.57.5'
+__version__ = '11.57.6'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.57.5",
+  "version": "11.57.6",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",
@@ -160,5 +160,5 @@
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2"
   },
-  "gitHead": "4b0bbb0ca97e2d79035019a9f627dd2521e03ffb"
+  "gitHead": "9556d6f16ffdf09ce62d81de5963d61114908a31"
 }

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.57.5",
+  "version": "11.57.6",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/web-app/dist/assets/{AdminPage-CajnEHO8.js → AdminPage-BFJFE977.js}

@@ -1,4 +1,4 @@
-import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-BuRhdhPP.js";import{B as C}from"./Button-CEArQlHh.js";import{T as $e}from"./trending-up-BXqMHUix.js";import{C as z}from"./clock-BhG_btal.js";import{A as Be,U as ue,M as De}from"./Avatar-M-1vKAI-.js";import{A as J}from"./activity-CEOdk-QH.js";import{R as pe}from"./refresh-cw-DLqQwQxZ.js";import{G as ze}from"./globe-CXIO0KJd.js";import{C as Le}from"./chevron-left-kDHzei8G.js";import{C as je}from"./check-B3hY5e7w.js";import{D as Y}from"./dollar-sign-Da2Czyw1.js";import{U as Te}from"./user-B2wEFhLl.js";import{D as Me}from"./database-BExPokwv.js";import{L as Ue}from"./lock-Bl1Lrp4I.js";import{S as Re}from"./scroll-text-DSaNtMoc.js";import{S as Ie}from"./shield-alert-DMPmyPWh.js";/**
+import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-UjAJJj8Z.js";import{B as C}from"./Button-licSuMdm.js";import{T as $e}from"./trending-up-B17eor8J.js";import{C as z}from"./clock-dRmTZ7Uq.js";import{A as Be,U as ue,M as De}from"./Avatar-IHLj9tBj.js";import{A as J}from"./activity-BOT2KX_1.js";import{R as pe}from"./refresh-cw-CggWBDhJ.js";import{G as ze}from"./globe-DWAt0Lb0.js";import{C as Le}from"./chevron-left-DkGJcBKa.js";import{C as je}from"./check-DcuXTnah.js";import{D as Y}from"./dollar-sign-Bz8a0_Y2.js";import{U as Te}from"./user-BlDljlzn.js";import{D as Me}from"./database-CVrwNPEh.js";import{L as Ue}from"./lock-BizI4CGp.js";import{S as Re}from"./scroll-text-Dh7AFgtA.js";import{S as Ie}from"./shield-alert-pQIIXBq0.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Avatar-M-1vKAI-.js → Avatar-IHLj9tBj.js}

@@ -1,4 +1,4 @@
-import{c as l,j as s}from"./index-BuRhdhPP.js";/**
+import{c as l,j as s}from"./index-UjAJJj8Z.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Badge-CitZO35c.js → Badge-DVeUe9vQ.js}

@@ -1 +1 @@
-import{j as e}from"./index-BuRhdhPP.js";import{C as r}from"./clock-BhG_btal.js";import{C as a}from"./circle-alert-Fwog7eDs.js";import{C as l}from"./check-B3hY5e7w.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
+import{j as e}from"./index-UjAJJj8Z.js";import{C as r}from"./clock-dRmTZ7Uq.js";import{C as a}from"./circle-alert-DxhV87Yn.js";import{C as l}from"./check-DcuXTnah.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};

package/web-app/dist/assets/{Button-CEArQlHh.js → Button-licSuMdm.js}

@@ -1 +1 @@
-import{r as p,j as t}from"./index-BuRhdhPP.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
+import{r as p,j as t}from"./index-UjAJJj8Z.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};

package/web-app/dist/assets/{CockpitPage-p1h_Jp2Q.js → CockpitPage-3TTGS2fJ.js}

@@ -1,4 +1,4 @@
-import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-BuRhdhPP.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-BZgtk-oH.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-CdclJ4W5.js";import{C as oe}from"./check-B3hY5e7w.js";import{C as Ye}from"./clock-BhG_btal.js";import{D as Xe}from"./dollar-sign-Da2Czyw1.js";import{U as Ze}from"./upload-CF5rZxmj.js";import{L as V}from"./loader-circle-DT0L6jjt.js";/**
+import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-UjAJJj8Z.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-BJbvANH3.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-C51-Z6zF.js";import{C as oe}from"./check-DcuXTnah.js";import{C as Ye}from"./clock-dRmTZ7Uq.js";import{D as Xe}from"./dollar-sign-Bz8a0_Y2.js";import{U as Ze}from"./upload-b8xNMGpJ.js";import{L as V}from"./loader-circle-CHHN0PGv.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{ComparePage-CBrDK7Hz.js → ComparePage-CBOu17kz.js}

@@ -1 +1 @@
-import{r as o,j as e}from"./index-BuRhdhPP.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};
+import{r as o,j as e}from"./index-UjAJJj8Z.js";function f({value:r,prefix:t="",suffix:s=""}){const[u,n]=o.useState(0),c=o.useRef(0);return o.useEffect(()=>{const a=c.current,h=r-a;if(h===0)return;const i=600,d=performance.now();function l(b){const v=b-d,m=Math.min(v/i,1),N=1-Math.pow(1-m,3),p=Math.round(a+h*N);n(p),c.current=p,m<1&&requestAnimationFrame(l)}requestAnimationFrame(l)},[r]),e.jsxs("span",{className:"tabular-nums",children:[t,u.toLocaleString(),s]})}function g(){const[r,t]=o.useState(5),[s,u]=o.useState(30),[n,c]=o.useState(75),a=.4,i=Math.round(r*s*a*4.33),d=Math.round(i*n);return e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-6 shadow-sm",children:[e.jsx("h3",{className:"text-lg font-bold text-[#36342E] mb-1",children:"ROI Calculator"}),e.jsx("p",{className:"text-sm text-[#6B6960] mb-6",children:"Estimate how much your team could save with autonomous development."}),e.jsxs("div",{className:"space-y-5",children:[e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Team size"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[r," developers"]})]}),e.jsx("input",{type:"range",min:1,max:50,value:r,onChange:l=>t(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"1"}),e.jsx("span",{children:"50"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Hours coding per week"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:[s,"h"]})]}),e.jsx("input",{type:"range",min:5,max:60,value:s,onChange:l=>u(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"5h"}),e.jsx("span",{children:"60h"})]})]}),e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between mb-2",children:[e.jsx("label",{className:"text-sm font-medium text-[#36342E]",children:"Average hourly rate"}),e.jsxs("span",{className:"text-sm font-semibold text-[#553DE9] tabular-nums",children:["$",n,"/hr"]})]}),e.jsx("input",{type:"range",min:25,max:250,step:5,value:n,onChange:l=>c(Number(l.target.value)),className:"w-full h-2 bg-[#ECEAE3] rounded-full appearance-none cursor-pointer accent-[#553DE9]"}),e.jsxs("div",{className:"flex justify-between text-xs text-[#939084] mt-1",children:[e.jsx("span",{children:"$25"}),e.jsx("span",{children:"$250"})]})]})]}),e.jsxs("div",{className:"mt-6 pt-6 border-t border-[#ECEAE3]",children:[e.jsxs("div",{className:"grid grid-cols-2 gap-4 text-center",children:[e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#553DE9]",children:e.jsx(f,{value:i,suffix:"h"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. hours saved / month"})]}),e.jsxs("div",{children:[e.jsx("div",{className:"text-2xl font-bold text-[#1FC5A8]",children:e.jsx(f,{value:d,prefix:"$"})}),e.jsx("div",{className:"text-xs text-[#6B6960] mt-1",children:"Est. cost saved / month"})]})]}),e.jsxs("div",{className:"mt-4 p-3 rounded-lg bg-[#553DE9]/5 border border-[#553DE9]/10",children:[e.jsxs("p",{className:"text-sm text-[#36342E] text-center",children:["If Loki Mode saved ",Math.round(a*100),"% of coding time, your team could save"," ",e.jsxs("span",{className:"font-bold text-[#553DE9]",children:[i.toLocaleString()," hours"]})," ","and"," ",e.jsxs("span",{className:"font-bold text-[#1FC5A8]",children:["$",d.toLocaleString()]})," ","per month."]}),e.jsxs("p",{className:"mt-2 text-xs text-[#6B6960] text-center",children:["The ",Math.round(a*100),"% is an assumption, not a measurement. Model and API spend is not included."]})]})]})]})}const j=[{feature:"Claude (Opus/Sonnet/Haiku)",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!0},{feature:"GPT-4o / Codex",category:"AI Models",lokiMode:!0,boltNew:!0,replit:!0,lovable:!1},{feature:"5-provider auto-failover",category:"AI Models",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"8 automated quality gates",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Blind 3-reviewer code review",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Anti-sycophancy checks",category:"Quality",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Automated test generation",category:"Quality",lokiMode:!0,boltNew:!1,replit:"Partial",lovable:!1},{feature:"Docker container generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"CI/CD pipeline generation",category:"Deployment",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"One-click cloud deploy",category:"Deployment",lokiMode:"Planned",boltNew:!0,replit:!0,lovable:!0},{feature:"Self-hosted (your keys)",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"Free tier available",category:"Cost",lokiMode:"Source-available (BUSL-1.1)",boltNew:!0,replit:!0,lovable:!0},{feature:"No vendor lock-in",category:"Cost",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1},{feature:"SSO / OIDC authentication",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"RBAC access control",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Audit logging",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!0,lovable:!1},{feature:"Air-gapped deployment",category:"Enterprise",lokiMode:!0,boltNew:!1,replit:!1,lovable:!1}];function y(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M20 6L9 17l-5-5",stroke:"currentColor",strokeWidth:"2.5",strokeLinecap:"round",strokeLinejoin:"round"})})}function w(){return e.jsx("svg",{width:"18",height:"18",viewBox:"0 0 24 24",fill:"none",className:"text-[#C45B5B]/40",children:e.jsx("path",{d:"M18 6L6 18M6 6l12 12",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})}function x({value:r}){return typeof r=="string"?e.jsx("span",{className:"text-xs text-[#6B6960] font-medium",children:r}):r?e.jsx(y,{}):e.jsx(w,{})}const k=[{title:"Full Autonomy",description:"Describe what you want. Loki Mode handles planning, coding, testing, and verification automatically.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#553DE9]",children:e.jsx("path",{d:"M13 2L3 14h9l-1 8 10-12h-9l1-8z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Production Quality",description:"8 quality gates, blind code review, and anti-sycophancy checks ensure code that actually works.",icon:e.jsx("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#1FC5A8]",children:e.jsx("path",{d:"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})})},{title:"Your Infrastructure",description:"Self-hosted, source-available (BUSL-1.1), no data leaves your network. Use your own API keys across 5 providers.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#2F71E3]",children:[e.jsx("rect",{x:"2",y:"2",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("rect",{x:"2",y:"14",width:"20",height:"8",rx:"2",stroke:"currentColor",strokeWidth:"2"}),e.jsx("circle",{cx:"6",cy:"6",r:"1",fill:"currentColor"}),e.jsx("circle",{cx:"6",cy:"18",r:"1",fill:"currentColor"})]})},{title:"Built for Teams",description:"Enterprise auth, RBAC, audit logs, and parallel workflows for teams of any size.",icon:e.jsxs("svg",{width:"24",height:"24",viewBox:"0 0 24 24",fill:"none",className:"text-[#E93D82]",children:[e.jsx("path",{d:"M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"}),e.jsx("circle",{cx:"9",cy:"7",r:"4",stroke:"currentColor",strokeWidth:"2"}),e.jsx("path",{d:"M23 21v-2a4 4 0 00-3-3.87M16 3.13a4 4 0 010 7.75",stroke:"currentColor",strokeWidth:"2",strokeLinecap:"round",strokeLinejoin:"round"})]})}];function C(){const r=[...new Set(j.map(t=>t.category))];return e.jsx("div",{className:"min-h-screen bg-[#FAF9F6]",children:e.jsxs("div",{className:"max-w-6xl mx-auto px-6 py-8",children:[e.jsxs("div",{className:"mb-8",children:[e.jsx("h1",{className:"text-2xl font-bold text-[#36342E]",children:"Compare"}),e.jsx("p",{className:"text-[#6B6960] mt-1",children:"See how Loki Mode stacks up against other AI development platforms."})]}),e.jsx("div",{className:"bg-white border border-[#ECEAE3] rounded-xl overflow-hidden shadow-sm",children:e.jsx("div",{className:"overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-[#ECEAE3]",children:[e.jsx("th",{className:"text-left px-4 py-3 font-medium text-[#6B6960] w-[240px]",children:"Feature"}),e.jsx("th",{className:"text-center px-4 py-3 font-bold text-[#553DE9] bg-[#553DE9]/5 w-[130px]",children:"Loki Mode"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"bolt.new"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Replit"}),e.jsx("th",{className:"text-center px-4 py-3 font-medium text-[#6B6960] w-[130px]",children:"Lovable"})]})}),e.jsx("tbody",{children:r.map(t=>e.jsxs(e.Fragment,{children:[e.jsx("tr",{className:"bg-[#FAF9F6]",children:e.jsx("td",{colSpan:5,className:"px-4 py-2 text-xs font-bold text-[#939084] uppercase tracking-wider",children:t})},`cat-${t}`),j.filter(s=>s.category===t).map(s=>e.jsxs("tr",{className:"border-b border-[#ECEAE3] last:border-b-0",children:[e.jsx("td",{className:"px-4 py-2.5 text-[#36342E]",children:s.feature}),e.jsx("td",{className:"px-4 py-2.5 text-center bg-[#553DE9]/5",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lokiMode})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.boltNew})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.replit})})}),e.jsx("td",{className:"px-4 py-2.5 text-center",children:e.jsx("div",{className:"flex justify-center",children:e.jsx(x,{value:s.lovable})})})]},s.feature))]}))})]})})}),e.jsxs("div",{className:"mt-12",children:[e.jsx("h2",{className:"text-xl font-bold text-[#36342E] mb-6",children:"Why developers choose Loki Mode"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 gap-5",children:k.map(t=>e.jsxs("div",{className:"bg-white border border-[#ECEAE3] rounded-xl p-5 shadow-sm hover:shadow-md transition-shadow",children:[e.jsx("div",{className:"mb-3",children:t.icon}),e.jsx("h3",{className:"text-base font-bold text-[#36342E] mb-1",children:t.title}),e.jsx("p",{className:"text-sm text-[#6B6960]",children:t.description})]},t.title))})]}),e.jsx("div",{className:"mt-12 max-w-xl mx-auto",children:e.jsx(g,{})})]})})}export{C as default};

package/web-app/dist/assets/{ErrorBoundary-BZgtk-oH.js → ErrorBoundary-BJbvANH3.js}

@@ -1,4 +1,4 @@
-import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-BuRhdhPP.js";/**
+import{c as o,r as a,j as e,T as n,h as i,p as c}from"./index-UjAJJj8Z.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{EvidenceReceiptPanel-r4D1wQd2.js → EvidenceReceiptPanel-BX0wnCRP.js}

@@ -1 +1 @@
-import{r as l,a as x,j as e}from"./index-BuRhdhPP.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};
+import{r as l,a as x,j as e}from"./index-UjAJJj8Z.js";const N={verified:{badge:"bg-success/10 text-success border-success/20",dot:"bg-success",label:"Verified",proven:"The server recomputed the integrity hash and it matches, and the gpg signature verified against its keyring.",notProven:"That the code is correct, or that the recorded diff still matches your repo. A receipt records which checks ran, not that the result is right."},unsigned:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Unsigned",proven:"The server recomputed the integrity hash and it matches these receipt bytes.",notProven:"Who produced it. An unsigned receipt is forgeable: whoever controls the builder can rewrite the facts and recompute the hash."},unchecked:{badge:"bg-warning/10 text-warning border-warning/20",dot:"bg-warning",label:"Not checked",proven:"The server recomputed the integrity hash and it matches.",notProven:"Provenance. A signature is present but was not evaluated here, which is not the same as a bad signature."},tampered:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Tampered",proven:"Nothing. The server recomputed the integrity hash and it does not match the contents.",notProven:"Anything at all. This receipt was edited after it was written. Do not trust this build."},failed:{badge:"bg-danger/10 text-danger border-danger/20",dot:"bg-danger",label:"Failed verification",proven:"Nothing. A verification check ran on the server and said no.",notProven:"Anything the receipt claims. Read the reason below."},not_verified:{badge:"border-muted/20 text-muted",dot:"bg-muted/40",label:"Not verified here",proven:"Nothing. No verification result was computed for this receipt here.",notProven:"Integrity or provenance. Run the command below to check it yourself."}};function w(t){const n=t==null?void 0:t.integrity_check,r=t==null?void 0:t.verification;return n?n.status==="tampered"?"tampered":n.status==="failed"?"failed":n.status!=="verified"?"not_verified":n.gpg_ok===!0?"verified":r!=null&&r.attestation||r!=null&&r.gpg_signature?"unchecked":"unsigned":"not_verified"}const v=[{key:"verified",label:"Verified",bar:"bg-success",text:"text-success"},{key:"with_gaps",label:"With gaps",bar:"bg-warning",text:"text-warning"},{key:"not_verified",label:"Not verified",bar:"bg-danger",text:"text-danger"},{key:"unknown",label:"Unknown",bar:"bg-muted/40",text:"text-muted"}];function y({summary:t}){const n=t.total_receipts;return n?e.jsxs("div",{className:"space-y-2",children:[e.jsx("div",{className:"flex h-1.5 rounded-full overflow-hidden bg-muted/10",children:v.map(({key:r,bar:s})=>{const i=t[r];return i?e.jsx("div",{className:s,style:{width:`${i/n*100}%`},title:`${i} ${r}`},r):null})}),e.jsx("div",{className:"flex flex-wrap gap-x-4 gap-y-1 text-xs",children:v.map(({key:r,label:s,text:i})=>{const c=t[r];return c?e.jsxs("span",{className:i,children:[e.jsx("span",{className:"font-semibold",children:c})," ",s.toLowerCase()]},r):null})}),e.jsxs("p",{className:"text-muted text-xs",children:["Recorded verdicts across ",n," receipt",n===1?"":"s",", not re-verified here."]})]}):null}function u({label:t,value:n}){return e.jsxs("div",{className:"flex items-baseline gap-2 text-xs",children:[e.jsx("span",{className:"text-muted w-28 flex-shrink-0",children:t}),e.jsx("span",{className:"font-mono truncate",title:n,children:n})]})}function k({proof:t}){var m,p,g,f,b;const[n,r]=l.useState(!1),[s,i]=l.useState(null),[c,d]=l.useState(null);l.useEffect(()=>{if(!n||s||c)return;let o=!1;return x.getProof(t.run_id).then(h=>{o||i(h)}).catch(h=>{o||d((h==null?void 0:h.message)||"could not load this receipt")}),()=>{o=!0}},[n,t.run_id,s,c]);const a=N[w(s)],j=t.generated_at?new Date(t.generated_at).toLocaleString():"unknown";return e.jsxs("div",{className:`border rounded-card overflow-hidden ${s?a.badge:"border-muted/20"}`,children:[e.jsxs("button",{type:"button",className:"w-full flex items-center gap-3 px-3 py-2.5 text-left",onClick:()=>r(!n),"aria-expanded":n,children:[e.jsx("span",{className:`w-2 h-2 rounded-full flex-shrink-0 ${s?a.dot:"bg-muted/40"}`}),e.jsx("span",{className:"text-sm font-medium flex-1 truncate",children:t.headline?`Recorded: ${t.headline}`:t.run_id}),t.final_verdict&&e.jsxs("span",{className:"text-xs font-mono uppercase tracking-wider flex-shrink-0 text-muted",children:["council ",t.final_verdict]}),e.jsx("span",{className:"text-muted text-xs flex-shrink-0",children:n?"−":"+"})]}),n&&e.jsxs("div",{className:"px-3 pb-3 space-y-3 border-t border-current/10 pt-3",children:[c&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load this receipt: ",c]}),!c&&!s&&e.jsx("p",{className:"text-xs text-muted",children:"Loading receipt…"}),s&&e.jsxs(e.Fragment,{children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(u,{label:"Run",value:s.run_id}),e.jsx(u,{label:"Generated",value:j}),e.jsx(u,{label:"Loki version",value:s.loki_version||"unknown"}),e.jsx(u,{label:"Cost",value:typeof((m=s.cost)==null?void 0:m.usd)=="number"?`${s.cost.cost_partial===!0?"at least ":""}$${s.cost.usd.toFixed(2)}`:"unknown"}),e.jsx(u,{label:"Files changed",value:typeof((p=s.files_changed)==null?void 0:p.count)=="number"?String(s.files_changed.count):"unknown"}),((g=s.verification)==null?void 0:g.hash)&&e.jsx(u,{label:"Recorded hash",value:s.verification.hash})]}),e.jsxs("div",{className:`rounded-card border px-3 py-2 ${a.badge}`,children:[e.jsx("p",{className:"text-xs font-semibold uppercase tracking-wider mb-1",children:a.label}),e.jsxs("p",{className:"text-xs mb-1",children:[e.jsx("span",{className:"font-semibold",children:"Proven: "}),a.proven]}),e.jsxs("p",{className:"text-xs opacity-80",children:[e.jsx("span",{className:"font-semibold",children:"Not proven: "}),a.notProven]}),(((f=s.integrity_check)==null?void 0:f.reasons)||[]).slice(0,2).map(o=>e.jsx("p",{className:"text-xs opacity-80 mt-1",children:o},o))]}),e.jsxs("p",{className:"text-xs text-muted",children:["Verify it yourself (also re-derives the diff against your repo):"," ",e.jsxs("code",{className:"font-mono",children:["loki proof verify ",s.run_id,(b=s.verification)!=null&&b.attestation?" --jwks <url|file>":""]})]}),t.pr_url&&e.jsx("a",{href:t.pr_url,target:"_blank",rel:"noreferrer noopener",className:"text-xs text-primary underline",children:"View the pull request"})]})]})]})}function P(){const[t,n]=l.useState(null),[r,s]=l.useState(null),[i,c]=l.useState(null);return l.useEffect(()=>{let d=!1;return x.listProofs().then(a=>{d||n(a.proofs||[])}).catch(a=>{d||c((a==null?void 0:a.message)||"could not load receipts")}),x.proofsSummary().then(a=>{d||s(a)}).catch(()=>{}),()=>{d=!0}},[]),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-sm font-semibold",children:"Evidence Receipts"}),e.jsx("p",{className:"text-muted text-xs mt-1",children:"What each build actually checked, recorded so you can verify it yourself."})]}),i&&e.jsxs("p",{className:"text-xs text-danger",children:["Could not load receipts: ",i]}),!i&&t===null&&e.jsx("p",{className:"text-xs text-muted",children:"Loading…"}),r&&e.jsx(y,{summary:r}),t!==null&&t.length===0&&e.jsxs("p",{className:"text-xs text-muted",children:["No receipts yet. One is written at the end of each run (set ",e.jsx("code",{className:"font-mono",children:"LOKI_PROOF=0"})," to opt out)."]}),e.jsx("div",{className:"space-y-2",children:t==null?void 0:t.map(d=>e.jsx(k,{proof:d},d.run_id))})]})}export{P as E};

package/web-app/dist/assets/{GitHubIssuesPanel-CcABVJDo.js → GitHubIssuesPanel-DadVrgRd.js}

@@ -1,4 +1,4 @@
-import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-BuRhdhPP.js";import{B as N}from"./Button-CEArQlHh.js";import{C as y}from"./thumbs-up-CdclJ4W5.js";import{R as S}from"./refresh-cw-DLqQwQxZ.js";import{C as z}from"./circle-alert-Fwog7eDs.js";import{U as D}from"./user-B2wEFhLl.js";import{L as G}from"./loader-circle-DT0L6jjt.js";import{R as T}from"./rotate-ccw-BIf4pgdG.js";/**
+import{c as _,r as o,a as k,j as e,m as B,J as v,N as h,a5 as H,M as L,l as q}from"./index-UjAJJj8Z.js";import{B as N}from"./Button-licSuMdm.js";import{C as y}from"./thumbs-up-C51-Z6zF.js";import{R as S}from"./refresh-cw-CggWBDhJ.js";import{C as z}from"./circle-alert-DxhV87Yn.js";import{U as D}from"./user-BlDljlzn.js";import{L as G}from"./loader-circle-CHHN0PGv.js";import{R as T}from"./rotate-ccw-BodVR-ZL.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{GitHubPRsPanel-CgG1QzGj.js → GitHubPRsPanel-4Knh78OV.js}

@@ -1,4 +1,4 @@
-import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-BuRhdhPP.js";import{B as y}from"./Button-CEArQlHh.js";import{C as ge}from"./chevron-left-kDHzei8G.js";import{G as P}from"./thumbs-up-CdclJ4W5.js";import{R as $}from"./refresh-cw-DLqQwQxZ.js";import{C as Ne}from"./circle-alert-Fwog7eDs.js";import{L as Q,S as je}from"./ProjectPage-CVoyPNXz.js";import{S as se}from"./shield-alert-DMPmyPWh.js";import{F as ye}from"./file-code-corner-iApBPt7x.js";import{C as V}from"./clock-BhG_btal.js";import{C as re}from"./check-B3hY5e7w.js";import"./ErrorBoundary-BZgtk-oH.js";import"./TerminalOutput-DfcgKLbF.js";import"./lock-Bl1Lrp4I.js";import"./package-CcxE6MPU.js";import"./file-plus-6ubHB9tY.js";import"./activity-CEOdk-QH.js";import"./scroll-text-DSaNtMoc.js";import"./bot-DxbkWf3E.js";import"./loader-circle-DT0L6jjt.js";import"./hammer-B4CdWulK.js";import"./dollar-sign-Da2Czyw1.js";import"./globe-CXIO0KJd.js";import"./trash-2-D5F7PiYG.js";import"./upload-CF5rZxmj.js";import"./plus-F7HAxgbp.js";import"./rotate-ccw-BIf4pgdG.js";import"./code-xml-CCOyuz6R.js";import"./trending-up-BXqMHUix.js";import"./layers-Dtm_S1Q9.js";import"./trending-down-CdOBQaS5.js";import"./server-BI_iO5Wm.js";/**
+import{c as I,r as c,a as b,j as e,G as me,A as ue,S as Z,k as ee,m as pe,h as he,p as fe,X as te,M as be}from"./index-UjAJJj8Z.js";import{B as y}from"./Button-licSuMdm.js";import{C as ge}from"./chevron-left-DkGJcBKa.js";import{G as P}from"./thumbs-up-C51-Z6zF.js";import{R as $}from"./refresh-cw-CggWBDhJ.js";import{C as Ne}from"./circle-alert-DxhV87Yn.js";import{L as Q,S as je}from"./ProjectPage-CSvSlMYJ.js";import{S as se}from"./shield-alert-pQIIXBq0.js";import{F as ye}from"./file-code-corner-CLLefddD.js";import{C as V}from"./clock-dRmTZ7Uq.js";import{C as re}from"./check-DcuXTnah.js";import"./ErrorBoundary-BJbvANH3.js";import"./TerminalOutput-4oimA-es.js";import"./lock-BizI4CGp.js";import"./package-BoH7-j91.js";import"./file-plus-DzDua71M.js";import"./activity-BOT2KX_1.js";import"./scroll-text-Dh7AFgtA.js";import"./bot-DYzNpqax.js";import"./loader-circle-CHHN0PGv.js";import"./hammer-DSgWxvTT.js";import"./dollar-sign-Bz8a0_Y2.js";import"./globe-DWAt0Lb0.js";import"./trash-2-CGxoeOTr.js";import"./upload-b8xNMGpJ.js";import"./plus-CiUN4yZ1.js";import"./rotate-ccw-BodVR-ZL.js";import"./code-xml-BcRpe7Kf.js";import"./trending-up-B17eor8J.js";import"./layers-CAv5auJY.js";import"./trending-down-DiX5ncD2.js";import"./server-BhvMlOFF.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.