loki-mode 11.63.7 → 11.63.9

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.63.7'
+__version__ = '11.63.9'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.63.7",
+  "version": "11.63.9",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",
@@ -160,5 +160,5 @@
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2"
   },
-  "gitHead": "d88d9353867c6fd4e04f94357ca0ef0cd4eca602"
+  "gitHead": "3f958a8df48b094a2cc397e0981f75b7b3193366"
 }

package/packages/control-plane/dist/server.js

@@ -7841,6 +7841,11 @@ var init_watchdog = __esm(() => {
   warned = new Set;
 });
 
+// ../../loki-ts/src/runner/retry_class.ts
+var init_retry_class = __esm(() => {
+  init_redact();
+});
+
 // ../../loki-ts/src/util/cost_breakdown.ts
 function costBreakdown(recs, missing = []) {
   const out2 = { usd: missing.length > 0 ? null : 0, per_stage: {}, retry_usd: missing.length > 0 ? null : 0, retry_sessions: 0 };
@@ -9094,6 +9099,7 @@ var init_sdk_stream_parser = __esm(() => {
   init_budget();
   init_advisor_probe();
   init_paths();
+  init_retry_class();
 });
 
 // ../../loki-ts/src/runner/trim.ts
@@ -9110,6 +9116,7 @@ var _installedVersionCache;
 var init_providers = __esm(() => {
   init_shell();
   init_paths();
+  init_retry_class();
   init_claude_flags();
   init_mcp_config();
   init_lean_prefix();
@@ -9168,6 +9175,7 @@ var init_budget_cap = __esm(() => {
 var STDERR_TAIL_BYTES, ADVISOR_MARKED_STAGES, sessionEffort, lastStageEnd;
 var init_session = __esm(() => {
   init_watchdog();
+  init_retry_class();
   init_run_pid();
   init_provider_cost();
   init_model_routes();
@@ -10228,6 +10236,12 @@ function runnerCmd(t, repoDir) {
       return CARGO_TEST_FILE_RE.test(t.path) ? ["cargo", ["test", "--test", basename12(t.path, ".rs")]] : ["cargo", ["test"]];
   }
 }
+function fullSuiteCmd(runner, repoDir) {
+  if (runner !== "pytest")
+    return FULL_SUITE_STATIC[runner];
+  const [cmd, interpreter, pre] = resolveTool(repoDir, "python", "python3", "python");
+  return { cmd, args: [...pre, "-m", "pytest", "-q"], interpreter };
+}
 function commandFor(t, repoDir, api) {
   const site = siteFor(api, repoDir, t.path);
   const [cmd, args, interpreter] = runnerCmd(site ? { runner: t.runner, path: site.file } : t, repoDir);
@@ -10312,7 +10326,7 @@ var NO_TESTS_REASON = "no tests executed", NO_RUNNER_REASON = "no runner of this
 }, EXCERPT_GROUP_CAP = 1500, EXCERPT_TOTAL_CAP = 6144, verifyJobs = () => {
   const n2 = Number.parseInt(process.env["LOKI_E10_VERIFY_JOBS"] ?? "", 10);
   return Number.isFinite(n2) && n2 >= 1 ? Math.min(n2, 8) : 1;
-}, FULL_SUITE_CMD, ALREADY_FAILING_ON_BASE = "already failing on base, not caused by this change", SKIPPED_BY_REPO = "skipped by the repo on base and head", checkResultLabel = (result, preRed, repoSkipped = false) => result === "fail" && preRed ? `fail (${ALREADY_FAILING_ON_BASE})` : result === "not_run" && repoSkipped ? `not_run (${SKIPPED_BY_REPO})` : result, blobSha = (b, hex) => createHash8(hex === 64 ? "sha256" : "sha1").update(Buffer.concat([Buffer.from(`blob ${b.length}\x00`), b])).digest("hex");
+}, FULL_SUITE_STATIC, ALREADY_FAILING_ON_BASE = "already failing on base, not caused by this change", SKIPPED_BY_REPO = "skipped by the repo on base and head", checkResultLabel = (result, preRed, repoSkipped = false) => result === "fail" && preRed ? `fail (${ALREADY_FAILING_ON_BASE})` : result === "not_run" && repoSkipped ? `not_run (${SKIPPED_BY_REPO})` : result, blobSha = (b, hex) => createHash8(hex === 64 ? "sha256" : "sha1").update(Buffer.concat([Buffer.from(`blob ${b.length}\x00`), b])).digest("hex");
 var init_check_result = __esm(() => {
   init_resolve();
   init_testmap();
@@ -10362,8 +10376,7 @@ var init_check_result = __esm(() => {
   DOC_FILE = /\.(md|mdx|txt|rst|adoc)$/i;
   OWNER_FILES = [".github/CODEOWNERS", "CODEOWNERS", "docs/CODEOWNERS"];
   CRITICAL_TOKENS = /^(release|publish|sign|signing|signer|auth|security|seal|verif\w*)$/i;
-  FULL_SUITE_CMD = {
-    pytest: { cmd: "python", args: ["-m", "pytest", "-q"] },
+  FULL_SUITE_STATIC = {
     vitest: { cmd: "npx", args: ["vitest", "run"] },
     jest: { cmd: "npx", args: ["jest"] },
     bun: { cmd: "bun", args: ["test"] },
@@ -14510,9 +14523,6 @@ var init_secure_scan = __esm(() => {
   MAX_ADDED_FILE_BYTES = 64 * 1024 * 1024;
 });
 
-// ../../loki-ts/src/runner/retry_class.ts
-var init_retry_class = () => {};
-
 // ../../loki-ts/src/project_model/conventions.ts
 import { existsSync as existsSync34, readdirSync as readdirSync19, readFileSync as readFileSync44 } from "fs";
 import { basename as basename22, dirname as dirname21, isAbsolute as isAbsolute9, join as join53, relative as relative10, resolve as resolve18 } from "path";
@@ -15264,11 +15274,12 @@ async function sealEvidence(repoDir, runDir, o, notProven, signal, emit) {
   const ev = await captureVisualEvidence(repoDir, runDir, cf, { signal, onServer: (pgid) => emit?.("session.started", "seal", { session_id: "visual-evidence", provider: "visual-evidence", model: null, pgid }) });
   if (signal?.aborted)
     throw new Error("seal aborted: visual evidence discarded");
-  if (ev.skipped)
+  const noUi = ev.skipped !== null && ev.skipped !== undefined && /^no package\.json$|^no dev, preview or start script$/.test(ev.skipped) && process.env["LOKI_VISUAL_EVIDENCE"] !== "1" && !cf.some(isPageFile);
+  if (ev.skipped && !noUi)
     notProven.add(`visual evidence skipped: ${ev.skipped}`);
   if (ev.e2eSkipped)
     notProven.add(ev.e2eSkipped);
-  if (visualGateEnabled() && ev.skipped && !/^no changed page files/.test(ev.skipped))
+  if (visualGateEnabled() && ev.skipped && !noUi && !/^no changed page files/.test(ev.skipped))
     return { evidence_failed: ev.skipped };
   return ev.screens.length > 0 ? { evidence_screens: ev.screens } : {};
 }
@@ -15620,7 +15631,7 @@ async function runFullSuite(ctx, signal, opts, checks, notProven) {
     return;
   }
   for (const runner of map.runners) {
-    const spec = FULL_SUITE_CMD[runner];
+    const spec = fullSuiteCmd(runner, ctx.repoDir);
     const name = `full suite: ${runner}`;
     if (!Bun.which(spec.cmd, opts.path ? { PATH: opts.path } : undefined)) {
       checks.push({ name, cmd: [spec.cmd, ...spec.args].join(" "), result: "not_run", duration_s: 0 });
@@ -15854,7 +15865,7 @@ var init_deep = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/verify.ts
-import { existsSync as existsSync39, mkdtempSync as mkdtempSync10, rmSync as rmSync19 } from "fs";
+import { existsSync as existsSync39, mkdtempSync as mkdtempSync10, readFileSync as readFileSync48, rmSync as rmSync19 } from "fs";
 import { tmpdir as tmpdir11 } from "os";
 import { basename as basename23, isAbsolute as isAbsolute11, join as join60, relative as relative12 } from "path";
 async function runOnce2(cmd2, args, cwd, signal, opts) {
@@ -15971,13 +15982,25 @@ async function subtractBase(ctx, api, checks, tests, changed, wall, rel, signal,
 function isLokiModeRepo(repoDir) {
   return existsSync39(join60(repoDir, "scripts", "select-tests.sh"));
 }
+function projectDeclaresRuff(repoDir) {
+  if (["ruff.toml", ".ruff.toml"].some((f) => existsSync39(join60(repoDir, f))))
+    return true;
+  const files = ["pyproject.toml", "setup.cfg", "tox.ini", ".pre-commit-config.yaml", "Pipfile", "requirements.txt", "requirements-dev.txt", "dev-requirements.txt"];
+  return files.some((f) => {
+    try {
+      return /\bruff\b/i.test(readFileSync48(join60(repoDir, f), "utf8"));
+    } catch {
+      return false;
+    }
+  });
+}
 async function runLintChecks(ctx, changed, signal, checks, opts = {}) {
   const { api, ...runOpts } = opts;
   opts = runOpts;
   const pre = [];
   const py = changed.filter((f) => f.endsWith(".py"));
-  if (py.length) {
-    const [ruffCmd, interpreter, uvPre] = resolveTool(ctx.repoDir, "ruff", "ruff");
+  const [ruffCmd, interpreter, uvPre] = py.length ? resolveTool(ctx.repoDir, "ruff", "ruff") : ["ruff", "system", []];
+  if (py.length && (interpreter !== "system" || Bun.which("ruff", { PATH: process.env["PATH"] ?? "" }) || projectDeclaresRuff(ctx.repoDir))) {
     const c = await runCheck(ctx, "lint:ruff", ruffCmd, [...uvPre, "check", "--output-format=concise", ...py], signal, checks, { ...opts, interpreter, kind: "static" });
     if (await excuseLint(ctx, signal, c, "ruff", ruffCmd, [...uvPre, "check"], ctx.repoDir, py, opts))
       pre.push(c.name);
@@ -16192,7 +16215,7 @@ ${x}` : c.cmd };
 
 // ../../loki-ts/src/engine10/stages/wall.ts
 import { spawnSync as spawnSync7 } from "child_process";
-import { existsSync as existsSync40, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync11, readFileSync as readFileSync48, readdirSync as readdirSync21, rmSync as rmSync20, writeFileSync as writeFileSync28 } from "fs";
+import { existsSync as existsSync40, mkdirSync as mkdirSync25, mkdtempSync as mkdtempSync11, readFileSync as readFileSync49, readdirSync as readdirSync21, rmSync as rmSync20, writeFileSync as writeFileSync28 } from "fs";
 import { tmpdir as tmpdir12 } from "os";
 import { dirname as dirname26, join as join61, relative as relative13 } from "path";
 
@@ -16262,7 +16285,7 @@ function loadTaskText(ctx, fromPrior) {
   const issueJsonPath = process.env.LOKI_E10_ISSUE_JSON ?? join61(ctx.runDir, "issue.json");
   if (existsSync40(issueJsonPath)) {
     try {
-      const issue = JSON.parse(readFileSync48(issueJsonPath, "utf8"));
+      const issue = JSON.parse(readFileSync49(issueJsonPath, "utf8"));
       const text2 = [issue.title, issue.body].filter((s) => typeof s === "string" && s.length > 0).join(`
 
 `);
@@ -16322,20 +16345,20 @@ async function wallAuthor(ctx, signal, retry) {
   }
   const planText = typeof prior.plan?.plan === "string" ? prior.plan.plan : null, repoFiles = repoMap?.files ?? [];
   const oor = () => readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)).flatMap((name) => {
-    const text2 = readFileSync48(join61(cwd, name), "utf8"), why = outOfRepoTarget(text2) ?? phantomReason(phantomRepoPaths(text2, name, targetDir, ctx.repoDir, planText), repoFiles, relative13(ctx.repoDir, targetDir), pkg?.root ?? "");
+    const text2 = readFileSync49(join61(cwd, name), "utf8"), why = outOfRepoTarget(text2) ?? phantomReason(phantomRepoPaths(text2, name, targetDir, ctx.repoDir, planText), repoFiles, relative13(ctx.repoDir, targetDir), pkg?.root ?? "");
     return why ? [{ name, why }] : [];
   });
   const bad1 = oor();
   if (bad1.length > 0 && !signal.aborted && !ctx.overCap?.())
     await ctx.sessions.run({ stage: "wall", brief: withStagePrefix(outOfRepoReask("Rewrite these Wall files in place, keeping the same names and acceptance coverage.", bad1)), tier: "development", model, iterationId: `${iterationId}-oor`, limitS: wallLimitS(sz.size), signal, cwd });
-  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !oorBad.has(n2) && !conventionViolation(conv2, n2, readFileSync48(join61(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
+  const oorBad = new Map(oor().map((b) => [b.name, b.why])), all = readdirSync21(cwd).filter((f) => f.startsWith(WALL_PREFIX)), held = stashHoldout({ runId: ctx.runId, repoDir: ctx.repoDir, srcDir: cwd, targetDir, names: all.filter((n2) => !oorBad.has(n2) && !conventionViolation(conv2, n2, readFileSync49(join61(cwd, n2), "utf8"))), runnerOf: (n2) => guessRunner(n2, runners) }), generated = all.filter((n2) => !held?.names.has(n2));
   const sealedDir = join61(ctx.runDir, "wall");
   if (generated.length > 0)
     mkdirSync25(sealedDir, { recursive: true });
   const contents = new Map;
   const discarded = [];
   for (const name of generated) {
-    const content = readFileSync48(join61(cwd, name), "utf8"), oorWhy = oorBad.get(name), bad = oorWhy ?? conventionViolation(conv2, name, content);
+    const content = readFileSync49(join61(cwd, name), "utf8"), oorWhy = oorBad.get(name), bad = oorWhy ?? conventionViolation(conv2, name, content);
     writeFileSync28(join61(sealedDir, name), content, "utf8");
     if (oorWhy)
       discarded.push({ file: name, reason: `${oorWhy}; wall test discarded after one rewrite request` });
@@ -16459,7 +16482,7 @@ var init_wall = __esm(() => {
 });
 
 // ../../loki-ts/src/e10ext/discard.ts
-import { chmodSync as chmodSync6, closeSync as closeSync9, lstatSync as lstatSync16, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync49, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync7, writeFileSync as writeFileSync29 } from "fs";
+import { chmodSync as chmodSync6, closeSync as closeSync9, lstatSync as lstatSync16, mkdirSync as mkdirSync26, openSync as openSync9, readFileSync as readFileSync50, realpathSync as realpathSync23, rmdirSync, unlinkSync as unlinkSync7, writeFileSync as writeFileSync29 } from "fs";
 import { dirname as dirname27, join as join62, relative as relative14, sep as sep14 } from "path";
 function safeRestore(repoDir, f, want, mode) {
   const root = realpathSync23(repoDir), fp = join62(root, f), rel = relative14(root, dirname27(fp));
@@ -16484,7 +16507,7 @@ function safeRestore(repoDir, f, want, mode) {
   } catch {
     st = null;
   }
-  if (st?.isFile() && readFileSync49(fp).equals(want)) {
+  if (st?.isFile() && readFileSync50(fp).equals(want)) {
     chmodSync6(fp, mode);
     return;
   }
@@ -16586,14 +16609,14 @@ var init_scope2 = __esm(() => {
 });
 
 // ../../loki-ts/src/council/role_agents.ts
-import { existsSync as existsSync41, readdirSync as readdirSync22, readFileSync as readFileSync50 } from "fs";
+import { existsSync as existsSync41, readdirSync as readdirSync22, readFileSync as readFileSync51 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join63 } from "path";
 function agentDirs(repoDir, env = process.env) {
   return [env["LOKI_AGENTS_PROJECT_DIR"] || join63(repoDir, ".loki", "agents"), env["LOKI_AGENTS_USER_DIR"] || join63(env["XDG_CONFIG_HOME"] || join63(homedir9(), ".config"), "loki", "agents")];
 }
 function parseAgent(file, stem2) {
-  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync50(file, "utf8"));
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(readFileSync51(file, "utf8"));
   if (!m)
     return null;
   const body = m[2].trim();
@@ -16713,14 +16736,14 @@ var init_colors = __esm(() => {
 });
 
 // ../../loki-ts/src/util/run_summary.ts
-import { existsSync as existsSync42, mkdirSync as mkdirSync28, readFileSync as readFileSync51, renameSync as renameSync13, statSync as statSync20, writeFileSync as writeFileSync30 } from "fs";
+import { existsSync as existsSync42, mkdirSync as mkdirSync28, readFileSync as readFileSync52, renameSync as renameSync13, statSync as statSync20, writeFileSync as writeFileSync30 } from "fs";
 import { join as join65 } from "path";
 function readRiskRecord(repoDir, sinceMs = 0) {
   try {
     const p = join65(repoDir, ".loki", "state", "risk-tier.json");
     if (statSync20(p).mtimeMs < sinceMs)
       return null;
-    const r = JSON.parse(readFileSync51(p, "utf8"));
+    const r = JSON.parse(readFileSync52(p, "utf8"));
     return r && typeof r === "object" ? r : null;
   } catch {
     return null;
@@ -16736,7 +16759,7 @@ var init_run_summary = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/stages/xreview.ts
-import { existsSync as existsSync43, readFileSync as readFileSync52 } from "fs";
+import { existsSync as existsSync43, readFileSync as readFileSync53 } from "fs";
 import { join as join66 } from "path";
 function minVerdict(verdict, review) {
   const ceiling = review?.level === "block" ? "PARTIAL" : verdict;
@@ -16754,7 +16777,7 @@ function explicitReview(repoDir, env) {
     if (!existsSync43(p))
       continue;
     try {
-      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync52(p, "utf8"));
+      const m = /^review:[ \t]*["']?([A-Za-z]+)["']?[ \t]*(?:#.*)?$/m.exec(readFileSync53(p, "utf8"));
       const v = asProvider(m?.[1]);
       if (v)
         return v;
@@ -16949,7 +16972,7 @@ See also: loki cost --detail (what a run ALREADY spent)
 });
 
 // ../../loki-ts/src/features/contract.ts
-import { existsSync as existsSync44, lstatSync as lstatSync17, mkdirSync as mkdirSync29, readFileSync as readFileSync53, rmSync as rmSync21, writeFileSync as writeFileSync31 } from "fs";
+import { existsSync as existsSync44, lstatSync as lstatSync17, mkdirSync as mkdirSync29, readFileSync as readFileSync54, rmSync as rmSync21, writeFileSync as writeFileSync31 } from "fs";
 import { dirname as dirname29, join as join67 } from "path";
 import { createHash as createHash18 } from "crypto";
 function contractEnabled(env = process.env) {
@@ -16998,7 +17021,7 @@ function readContract(repoDir) {
     return { contract: null, notes: ["contract unreadable: too large"], sha256: null };
   let raw2;
   try {
-    raw2 = readFileSync53(p);
+    raw2 = readFileSync54(p);
   } catch {
     return { contract: null, notes: ["contract unreadable: read failed"], sha256: null };
   }
@@ -17073,7 +17096,7 @@ var init_contract = __esm(() => {
 
 // ../../loki-ts/src/features/speed/seal_group.ts
 import { createHash as createHash19 } from "crypto";
-import { existsSync as existsSync45, mkdirSync as mkdirSync30, readdirSync as readdirSync23, readFileSync as readFileSync54, renameSync as renameSync14, statSync as statSync21, writeFileSync as writeFileSync32 } from "fs";
+import { existsSync as existsSync45, mkdirSync as mkdirSync30, readdirSync as readdirSync23, readFileSync as readFileSync55, renameSync as renameSync14, statSync as statSync21, writeFileSync as writeFileSync32 } from "fs";
 import { dirname as dirname30, join as join68 } from "path";
 function sealGroup(runDir, rh) {
   const manifestPath = join68(runDir, "group", "manifest.json");
@@ -17104,7 +17127,7 @@ function sealGroup(runDir, rh) {
     const dir = join68(unitsDir(runDir), id), rp = join68(dir, "receipt.json"), ep = join68(dir, "events.jsonl");
     let bytes;
     try {
-      bytes = readFileSync54(rp);
+      bytes = readFileSync55(rp);
     } catch {
       return fail2(`unit ${id} sub-receipt missing`);
     }
@@ -17121,7 +17144,7 @@ function sealGroup(runDir, rh) {
       unit_id: id,
       sub_receipt_sha256: sha3(bytes),
       receipt_sha256: sub2["receipt_sha256"],
-      events_file_sha256: existsSync45(ep) ? sha3(readFileSync54(ep)) : null,
+      events_file_sha256: existsSync45(ep) ? sha3(readFileSync55(ep)) : null,
       verdict,
       goal: text2(u["goal"], 200),
       files: (Array.isArray(u["files"]) ? u["files"] : []).map((f) => text2(f, 200)).filter(Boolean).slice(0, 50),
@@ -17165,13 +17188,13 @@ async function verifyGroup(receiptPath, receipt, rh, verifyOne, deps = {}) {
     try {
       if (!statSync21(dir).isDirectory())
         return bad(`unit ${id} is not a directory`);
-      bytes = readFileSync54(rp);
+      bytes = readFileSync55(rp);
     } catch {
       return bad(`unit ${id} sub-receipt missing`);
     }
     if (sha3(bytes) !== e["sub_receipt_sha256"])
       return bad(`unit ${id} sub-receipt does not match its recorded hash`);
-    const evSha = existsSync45(ep) ? sha3(readFileSync54(ep)) : null;
+    const evSha = existsSync45(ep) ? sha3(readFileSync55(ep)) : null;
     if (evSha !== (e["events_file_sha256"] ?? null))
       return bad(`unit ${id} events.jsonl does not match its recorded hash`);
     const sub2 = readJson6(rp);
@@ -17196,7 +17219,7 @@ function compositeVerdict(childVerdicts) {
 }
 var ID_RE, PASSING, sha3 = (b) => createHash19("sha256").update(b).digest("hex"), isObj10 = (v) => v !== null && typeof v === "object" && !Array.isArray(v), text2 = (v, cap) => typeof v === "string" ? v.replace(/[\x00-\x1f\x7f]+/g, " ").trim().slice(0, cap) : "", num4 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0, unitsDir = (runDir) => join68(runDir, "group", "units"), readJson6 = (p) => {
   try {
-    return JSON.parse(readFileSync54(p, "utf8"));
+    return JSON.parse(readFileSync55(p, "utf8"));
   } catch {
     return;
   }
@@ -17214,7 +17237,7 @@ var init_seal_group = __esm(() => {
 });
 
 // ../../loki-ts/src/supply/supply_guard.ts
-import { existsSync as existsSync46, readFileSync as readFileSync55, statSync as statSync22 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync56, statSync as statSync22 } from "fs";
 import { basename as basename25, join as join69 } from "path";
 function supplyEnabled(env) {
   return env["LOKI_SUPPLY_GUARD"] !== "0";
@@ -17236,7 +17259,7 @@ function readDeclared(repoDir) {
   try {
     if (statSync22(p).size > MAX_FILE_BYTES)
       return { deps: [], problem: "declaration file too large" };
-    const j = JSON.parse(readFileSync55(p, "utf8"));
+    const j = JSON.parse(readFileSync56(p, "utf8"));
     if (!Array.isArray(j))
       return { deps: [], problem: "declaration is not a JSON array" };
     const deps = [];
@@ -17260,7 +17283,7 @@ function readAllowlist(repoDir) {
   if (!existsSync46(p))
     return new Set;
   try {
-    return new Set(readFileSync55(p, "utf8").split(`
+    return new Set(readFileSync56(p, "utf8").split(`
 `).map((l) => l.replace(/#.*$/, "").trim()).filter(Boolean));
   } catch {
     return new Set;
@@ -17443,7 +17466,7 @@ var MIN_AGE_DAYS = 7, DECLARED_FILE = "supply-declared.json", MAX_CHECKED = 50,
   }
 }, PUBLIC_HOSTS, hostOf = (u) => u.trim().toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "").replace(/^www\./, "").split(/[/?#\s]/)[0].replace(/^[^@]*@/, "").replace(/:\d+$/, ""), privateUrl = (u) => /[a-z0-9]/i.test(u) && !PUBLIC_HOSTS.has(hostOf(u)), readSmall = (p) => {
   try {
-    return statSync22(p).size <= MAX_FILE_BYTES ? readFileSync55(p, "utf8") : "";
+    return statSync22(p).size <= MAX_FILE_BYTES ? readFileSync56(p, "utf8") : "";
   } catch {
     return "";
   }
@@ -17459,7 +17482,7 @@ var init_supply_guard = __esm(() => {
 
 // ../../loki-ts/src/engine10/stages/seal.ts
 import { createHash as createHash20 } from "crypto";
-import { existsSync as existsSync47, readdirSync as readdirSync24, mkdirSync as mkdirSync31, readFileSync as readFileSync56 } from "fs";
+import { existsSync as existsSync47, readdirSync as readdirSync24, mkdirSync as mkdirSync31, readFileSync as readFileSync57 } from "fs";
 import { basename as basename26, isAbsolute as isAbsolute13, join as join70, relative as relative15 } from "path";
 function receiptSha256(r) {
   const { verification: _v, receipt_sha256: _h, ...body } = r;
@@ -17725,7 +17748,7 @@ var init_seal = __esm(() => {
       if (mp?.outcome === "no")
         notProven.add(`Wall tests passed without the fix (mutation proof)${verdict !== verdict2 ? "; verdict downgraded to PARTIAL (LOKI_MUTATION_STRICT=1, declared behavior change)" : ""}`);
       if (repo === null)
-        notProven.add("repo not recorded by intake");
+        notProven.add(o.intake && "repo" in o.intake ? "repo identity unknown: the repo has no origin remote (run: git remote add origin <url>)" : "repo not recorded by intake");
       if (typeof o.intake?.resumed !== "boolean")
         notProven.add("resume state not recorded by intake");
       const stages = {};
@@ -17786,7 +17809,7 @@ var init_seal = __esm(() => {
         provider: ctx.provider,
         model: ctx.model,
         resumed: o.intake?.resumed === true,
-        events_sha256: sha2562(existsSync47(eventsPath) ? readFileSync56(eventsPath) : ""),
+        events_sha256: sha2562(existsSync47(eventsPath) ? readFileSync57(eventsPath) : ""),
         ...await sealEvidence(ctx.repoDir, ctx.runDir, o, notProven, signal, ctx.emit),
         log_seal: true,
         toolchain: collectToolchain(),
@@ -17842,14 +17865,14 @@ var init_seal = __esm(() => {
 });
 
 // ../../loki-ts/src/util/composite_seal.ts
-import { existsSync as existsSync48, readFileSync as readFileSync57 } from "fs";
+import { existsSync as existsSync48, readFileSync as readFileSync58 } from "fs";
 import { basename as basename27, dirname as dirname32, join as join71 } from "path";
 function logProblem(runDir, integ) {
   if (typeof integ["log_sha256"] !== "string")
     return null;
   let b;
   try {
-    b = readFileSync57(join71(runDir, "integration.log"));
+    b = readFileSync58(join71(runDir, "integration.log"));
   } catch {
     return "integration.log is missing but integration.json records its hash";
   }
@@ -17872,7 +17895,7 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
     return bad("body malformed");
   let ibytes;
   try {
-    ibytes = readFileSync57(join71(runDir, "integration.json"));
+    ibytes = readFileSync58(join71(runDir, "integration.json"));
   } catch {
     return bad("integration.json missing");
   }
@@ -17916,7 +17939,7 @@ async function verifyComposite(receiptPath, receipt, rh, verifyOne, deps = {}) {
     const rp = join71(runDir, rel);
     let bytes;
     try {
-      bytes = readFileSync57(rp);
+      bytes = readFileSync58(rp);
     } catch {
       return bad(`child ${repo} receipt missing`);
     }
@@ -17965,7 +17988,7 @@ var init_keys_cmd = __esm(() => {
 });
 
 // ../../loki-ts/src/engine10/verify_cmd.ts
-import { existsSync as existsSync49, readFileSync as readFileSync58, renameSync as renameSync15, statSync as statSync24, writeFileSync as writeFileSync34 } from "fs";
+import { existsSync as existsSync49, readFileSync as readFileSync59, renameSync as renameSync15, statSync as statSync24, writeFileSync as writeFileSync34 } from "fs";
 import { basename as basename28, dirname as dirname33, join as join72 } from "path";
 import { createHash as createHash21, createPublicKey as createPublicKey4, verify as verify4 } from "crypto";
 function pubFor(kid, given) {
@@ -17974,7 +17997,7 @@ function pubFor(kid, given) {
   const active = loadSigningKey(false);
   const pubs = (process.env["LOKI_RECEIPT_RETIRED_PUBKEYS"] ?? "").split(":").map((f) => f.trim()).filter(Boolean).flatMap((f) => {
     try {
-      return [createPublicKey4(readFileSync58(f))];
+      return [createPublicKey4(readFileSync59(f))];
     } catch {
       return [];
     }
@@ -18021,7 +18044,7 @@ function checkEventLog(receiptPath, receipt) {
   const path = join72(dirname33(receiptPath), "events.jsonl");
   if (!existsSync49(path))
     return "events.jsonl is missing";
-  const raw2 = readFileSync58(path, "utf8"), events2 = readEvents(path), lines2 = raw2.split(`
+  const raw2 = readFileSync59(path, "utf8"), events2 = readEvents(path), lines2 = raw2.split(`
 `).filter((l) => l.trim() !== "");
   if (events2.length !== lines2.length || events2.some((e, i) => e.seq !== i))
     return "events.jsonl has a forged, edited or missing line";
@@ -18045,7 +18068,7 @@ function checkLogSeal(receiptPath, hash, kid, given) {
   const seal = events2[done + 1], d = seal?.type === "log.sealed" ? seal.data : null;
   if (!d)
     return { verdict: "TAMPERED", reason: "events.jsonl has no signed log.sealed line after run.completed" };
-  const lines2 = readFileSync58(path, "utf8").split(`
+  const lines2 = readFileSync59(path, "utf8").split(`
 `).filter((l) => l.trim() !== ""), sha4 = createHash21("sha256").update(lines2.slice(0, done + 1).join(`
 `) + `
 `).digest("hex");
@@ -18059,7 +18082,7 @@ async function verifyReceipt(receiptPath, deps = {}) {
     return { verdict: "UNCHECKED", reasons: [`receipt not found: ${receiptPath}`] };
   let receipt;
   try {
-    receipt = JSON.parse((deps.read ?? ((p) => readFileSync58(p, "utf8")))(receiptPath));
+    receipt = JSON.parse((deps.read ?? ((p) => readFileSync59(p, "utf8")))(receiptPath));
   } catch {
     return { verdict: "UNCHECKED", reasons: ["receipt.json is not valid JSON"] };
   }
@@ -18148,7 +18171,7 @@ var init_verify_cmd = __esm(() => {
 });
 
 // src/server/app.ts
-import { existsSync as existsSync51, readFileSync as readFileSync61, statSync as statSync25 } from "fs";
+import { existsSync as existsSync51, readFileSync as readFileSync62, statSync as statSync25 } from "fs";
 import { join as join75, resolve as resolve19, sep as sep16 } from "path";
 
 // node_modules/hono/dist/request/constants.js
@@ -28460,7 +28483,7 @@ function mount20(ctx) {
 }
 
 // src/server/routes/verify.ts
-import { readFileSync as readFileSync59, realpathSync as realpathSync25 } from "fs";
+import { readFileSync as readFileSync60, realpathSync as realpathSync25 } from "fs";
 import { createPublicKey as createPublicKey5 } from "crypto";
 import { join as join73, sep as sep15 } from "path";
 init_verify_cmd();
@@ -28512,7 +28535,7 @@ function mount21(ctx) {
         sha4 = r.receiptSha256 ?? null;
       }
       try {
-        outcome = outcomeOf(JSON.parse(readFileSync59(file, "utf8")));
+        outcome = outcomeOf(JSON.parse(readFileSync60(file, "utf8")));
       } catch {
         outcome = "UNREADABLE";
       }
@@ -28574,7 +28597,7 @@ function ttlCache(ttlMs = PROBE_CACHE_MS, now2 = Date.now) {
 }
 
 // src/server/legacy/shim.ts
-import { existsSync as existsSync50, readFileSync as readFileSync60 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync61 } from "fs";
 import { join as join74 } from "path";
 
 // src/server/legacy/routes.ts
@@ -28956,7 +28979,7 @@ var repoVersion = () => {
   for (const f of [join74(import.meta.dir, "../../../../../VERSION")]) {
     try {
       if (existsSync50(f))
-        return readFileSync60(f, "utf8").trim();
+        return readFileSync61(f, "utf8").trim();
     } catch {}
   }
   return "unknown";
@@ -29170,7 +29193,7 @@ function createApp(opts) {
     for (const f of [process.env.LOKI_VERSION_FILE, join75(import.meta.dir, "../../../../VERSION")]) {
       try {
         if (f)
-          return readFileSync61(f, "utf8").trim() || "unknown";
+          return readFileSync62(f, "utf8").trim() || "unknown";
       } catch {}
     }
     return "unknown";

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.63.7",
+  "version": "11.63.9",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/web-app/dist/assets/{AdminPage-Cp2bWPgv.js → AdminPage-DVMNRlUX.js}

@@ -1,4 +1,4 @@
-import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-BQ_6SUYj.js";import{B as C}from"./Button-Bi9cmTkv.js";import{T as $e}from"./trending-up-C3BNDS1Z.js";import{C as z}from"./clock-ui1bNcXF.js";import{A as Be,U as ue,M as De}from"./Avatar-BWkjgfpQ.js";import{A as J}from"./activity-DO1Lb3p_.js";import{R as pe}from"./refresh-cw-Cyc0Be2K.js";import{G as ze}from"./globe-B8KkmQx6.js";import{C as Le}from"./chevron-left-xlhDqXSB.js";import{C as je}from"./check-0PtXKfN0.js";import{D as Y}from"./dollar-sign-BLLEGeDo.js";import{U as Te}from"./user-CTHngdi9.js";import{D as Me}from"./database-CKoePHfR.js";import{L as Ue}from"./lock-C_-piZan.js";import{S as Re}from"./scroll-text-DeoapOot.js";import{S as Ie}from"./shield-alert-Bon6ZnUv.js";/**
+import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-DhSRa3OQ.js";import{B as C}from"./Button-CIPzEBGi.js";import{T as $e}from"./trending-up-s2d_s3Dt.js";import{C as z}from"./clock-_dswOp5X.js";import{A as Be,U as ue,M as De}from"./Avatar-BNJ5Hy3D.js";import{A as J}from"./activity-J2SLOoNT.js";import{R as pe}from"./refresh-cw-CZ2b-hL5.js";import{G as ze}from"./globe-Cb9UTYDC.js";import{C as Le}from"./chevron-left-ntaBx_xF.js";import{C as je}from"./check-7SqhHzzP.js";import{D as Y}from"./dollar-sign-BYygqtPF.js";import{U as Te}from"./user-lWcI4YnK.js";import{D as Me}from"./database-DIncPJaM.js";import{L as Ue}from"./lock-DJ1UtPoh.js";import{S as Re}from"./scroll-text-B2BrQ69A.js";import{S as Ie}from"./shield-alert-xpurE7SL.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Avatar-BWkjgfpQ.js → Avatar-BNJ5Hy3D.js}

@@ -1,4 +1,4 @@
-import{c as l,j as s}from"./index-BQ_6SUYj.js";/**
+import{c as l,j as s}from"./index-DhSRa3OQ.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Badge-DplLKpsq.js → Badge-kTzAMem_.js}

@@ -1 +1 @@
-import{j as e}from"./index-BQ_6SUYj.js";import{C as r}from"./clock-ui1bNcXF.js";import{C as a}from"./circle-alert-GKhWaSzf.js";import{C as l}from"./check-0PtXKfN0.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
+import{j as e}from"./index-DhSRa3OQ.js";import{C as r}from"./clock-_dswOp5X.js";import{C as a}from"./circle-alert-BBSjoKIc.js";import{C as l}from"./check-7SqhHzzP.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};

package/web-app/dist/assets/{Button-Bi9cmTkv.js → Button-CIPzEBGi.js}

@@ -1 +1 @@
-import{r as p,j as t}from"./index-BQ_6SUYj.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
+import{r as p,j as t}from"./index-DhSRa3OQ.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};

package/web-app/dist/assets/{CockpitPage-ZBt9jJqb.js → CockpitPage-Cnekildp.js}

@@ -1,4 +1,4 @@
-import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-BQ_6SUYj.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-D7gzKuQl.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-98YsSw4r.js";import{C as oe}from"./check-0PtXKfN0.js";import{C as Ye}from"./clock-ui1bNcXF.js";import{D as Xe}from"./dollar-sign-BLLEGeDo.js";import{U as Ze}from"./upload-CGW0PxJo.js";import{L as V}from"./loader-circle-DNNb2uHm.js";/**
+import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-DhSRa3OQ.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-WSSOc7ES.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-Cn-1rP6c.js";import{C as oe}from"./check-7SqhHzzP.js";import{C as Ye}from"./clock-_dswOp5X.js";import{D as Xe}from"./dollar-sign-BYygqtPF.js";import{U as Ze}from"./upload-Cmg63NHC.js";import{L as V}from"./loader-circle-BDCpAcJw.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.