loki-mode 11.63.9 → 11.64.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.63.9
+# Loki Mode v11.64.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -476,4 +476,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.63.9 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.64.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.63.9
+11.64.0

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.63.9"
+__version__ = "11.64.0"
 
 __all__ = ["__version__"]

package/dashboard/build_supervisor.py

@@ -44,41 +44,21 @@ _CHILD_ENV_NAMES = {
     "TERM",
     "USER",
 }
-_CHILD_LOKI_ENV_NAMES = {
-    "LOKI_ADVISOR_MODEL",
-    "LOKI_APP_RUNNER",
-    "LOKI_AUTONOMY_OVERRIDE",
-    "LOKI_BUILD_PROFILE",
-    "LOKI_CLAUDE_MODEL_DEVELOPMENT",
-    "LOKI_CLAUDE_MODEL_FAST",
-    "LOKI_CLAUDE_MODEL_PLANNING",
-    "LOKI_CLAUDE_TASK_BUDGET",
-    "LOKI_CODEX_MODEL",
-    "LOKI_CODEX_REASONING_EFFORT",
-    "LOKI_CODEX_WEB_SEARCH",
-    "LOKI_COMPLEXITY",
-    "LOKI_COUNCIL_ENABLED",
-    "LOKI_COUNCIL_SIZE",
-    "LOKI_COUNCIL_TIMEOUT_MS",
-    "LOKI_ENTERPRISE_AUTH",
-    "LOKI_FIRST_PASS_EXCELLENCE",
-    "LOKI_GEMINI_MODEL",
-    "LOKI_HOST_GUARD",
-    "LOKI_HOST_GUARD_SETTINGS_JSON",
-    "LOKI_LEGACY_BASH",
-    "LOKI_MAX_ITERATIONS",
-    "LOKI_NO_SESSION_PERSIST",
-    "LOKI_PARTIAL_MESSAGES",
-    "LOKI_PROMPT_INJECTION",
-    "LOKI_SDK_LOOP",
-    "LOKI_SDK_MODE",
-    "LOKI_SESSION_MODEL",
-    "LOKI_SETTING_SOURCES",
-    "LOKI_SKILL_DIR",
-    "LOKI_SPEC_SHA256",
-    "LOKI_SPEC_CONTRADICTION_FASTFAIL",
-    "LOKI_WORKSPACE_ROOTS",
-}
+# The LOKI_* names forwarded to a supervised build come from one data file that
+# also lists every name loki-ts/src reads but deliberately does not forward; a
+# guard in tests/dashboard/test_build_supervisor.py fails on an unlisted read.
+_CHILD_ENV_DATA = Path(__file__).resolve().parent.parent / "loki-ts" / "data" / "child-env.json"
+
+
+def _load_child_loki_env_names() -> frozenset[str]:
+    """Read the forwarded LOKI_* names; a missing or empty list is a hard error."""
+    names = json.loads(_CHILD_ENV_DATA.read_text(encoding="utf-8"))["forwarded"]
+    if not names or not all(isinstance(n, str) and n.startswith("LOKI_") for n in names):
+        raise RuntimeError(f"{_CHILD_ENV_DATA} has no valid forwarded LOKI_* names")
+    return frozenset(names)
+
+
+_CHILD_LOKI_ENV_NAMES = _load_child_loki_env_names()
 _SYSTEM_RUNTIME_READ_PATHS = (
     "/System",
     "/usr",

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.63.9. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.64.0. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/COMPETITIVE-SCORECARD.md

@@ -519,6 +519,20 @@ done
 bash autonomy/loki deploy --execute       # refuses, naming each failed check
 ```
 
+### 3f. Run replay baseline, measured 2026-10-23 (issue #422, R100-082)
+
+Question: can a user step through a finished run stage by stage and see the diff, tests and cost at each step?
+
+| Product | Replay or step-through | Evidence |
+|---|---|---|
+| Loki Mode | Yes: run page scrubber, one position per stage, values read from the run journal (`--` where the journal recorded none) | `[measured]` `cd packages/control-plane && bun test ./test/ui/timeline.test.ts ./test/ui/run.test.tsx` |
+| Claude Code 2.1.309 | None found in help; session resume only | `[measured]` `claude --help \| grep -iE 'resume\|history'` printed only `--resume <session-id>` and `--continue` lines |
+| Codex CLI | UNKNOWN: `codex` is not installed on the measuring machine, so no help output was read | probe not run |
+| Factory droid 0.190.0 | None found in help; session resume and fork only | `[measured]` `droid --help \| grep -iE 'resume\|history'` printed `-r, --resume [sessionId]` and `--fork <sessionId>` |
+| Devin | Session Insights page | `[sourced: https://docs.devin.ai/product-guides/session-insights.md]` not tested |
+
+"None found in help" is weaker than "does not exist"; see section 4.
+
 ## 4. What we do NOT know
 
 This section is mandatory and is not empty.

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.63.9
+**Version:** v11.64.0
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/FAILURE-CLASSES.md

@@ -1808,3 +1808,12 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Siblings swept: every line-anchored reader of the log text (session.ts parseMarkers reads LOKI_ALREADY_DONE and LOKI_SPEC_CONFLICT, which the agent is meant to write, so they are not engine markers; budget.ts isRateLimited is an unanchored keyword heuristic on prose by design, not a trusted marker). Engine-written markers in the log: `[sdk-loop error:` (parser frame line, providers.ts catch) and `[rate_limit]` (a keyword the heuristic already matches in prose, so a forgery gains nothing). Also covered: the claude, codex, cline, aider and opencode CLI paths (all four writeCaptured stdout sites) and the `said` text inside the real frame line.
 - Mechanism: retry_class.ts neutralizeEngineMarkers rewrites `[sdk-loop error:` to `[agent-text sdk-loop error:` anywhere in agent text (capture(), the frame's `said`, and every CLI stdout before writeCaptured). sdkAuthCause also returns redactSecrets(...) because provider_error goes into events.jsonl unredacted.
 - Fixture: sdk_stream_parser.test.ts cases named FC-AGENT-TEXT-FORGES-ENGINE-MARKER (forged assistant and result text at line start and mid-line, mid-line quote read as null by sdkAuthCause, real frame still classified and redacted for an sk-ant- value) and fatal_e2e.test.ts (forged stdout plus exit 1 is not fatal). Each is red with neutralizeEngineMarkers as identity, the `^` anchor dropped, or the redaction removed.
+
+## FC-CHILD-ENV-HAND-ALLOWLIST-DRIFT The LOKI_* names a dashboard-started build receives were a hand-typed set in build_supervisor.py, so a setting the runner reads but the set omits is silently dropped (#305)
+- User-visible vs raw: user-visible. A LOKI_* setting exported before starting a build from the dashboard has no effect and nothing says so.
+- Law: an allowlist that must track what the code reads is derived from, or checked against, what the code reads; it is never kept by hand alone.
+- Cause (measured): dashboard/build_supervisor.py `_CHILD_LOKI_ENV_NAMES` listed 33 names. A scan of `env.LOKI_X` and `env["LOKI_X"]` reads under loki-ts/src at origin/main 8cc2534f5 finds 316 distinct names; 18 are in the set and 298 are not (15 of the 33 set names are read only outside loki-ts/src). Examples not forwarded today: LOKI_PROVIDER, LOKI_E10_MODEL_DEFAULT, LOKI_BUDGET_LIMIT, LOKI_E10_MAX_COST_USD.
+- Siblings swept: `_CHILD_ENV_NAMES` (non-LOKI system names) is a fixed OS list, not a reflection of code reads, and is unchanged. The bash route's env is out of scope.
+- Mechanism: loki-ts/data/child-env.json holds `forwarded` (the original 33, no addition) and `not_forwarded` (the other 298 read names, a baseline that preserves today's behavior and needs a per-name decision to move). build_supervisor.py loads `forwarded` at import and fails hard if it is missing or empty. A test scans loki-ts/src and fails naming any read that is in neither list, and fails if a forwarded name is secret-shaped (TOKEN, SECRET, KEY, PASSWORD, CRED) or listed twice.
+- Known limit: a read through destructuring (`const { LOKI_X } = process.env`) or a computed key is not seen by the scan.
+- Fixture: tests/dashboard/test_build_supervisor.py: a child sees LOKI_CLAUDE_TASK_BUDGET=64000 read from its own env, never LOKI_PR_BOT_TOKEN or LOKI_RECEIPT_SIGNING_KEY; a planted `process.env["LOKI_PLANTED_X"]` fixture is reported. Mutants: loader returns an empty set (2 tests red); scan drops the `env.X` form (planted test red).

package/loki-ts/data/child-env.json

@@ -0,0 +1,337 @@
+{
+ "forwarded": [
+  "LOKI_ADVISOR_MODEL",
+  "LOKI_APP_RUNNER",
+  "LOKI_AUTONOMY_OVERRIDE",
+  "LOKI_BUILD_PROFILE",
+  "LOKI_CLAUDE_MODEL_DEVELOPMENT",
+  "LOKI_CLAUDE_MODEL_FAST",
+  "LOKI_CLAUDE_MODEL_PLANNING",
+  "LOKI_CLAUDE_TASK_BUDGET",
+  "LOKI_CODEX_MODEL",
+  "LOKI_CODEX_REASONING_EFFORT",
+  "LOKI_CODEX_WEB_SEARCH",
+  "LOKI_COMPLEXITY",
+  "LOKI_COUNCIL_ENABLED",
+  "LOKI_COUNCIL_SIZE",
+  "LOKI_COUNCIL_TIMEOUT_MS",
+  "LOKI_ENTERPRISE_AUTH",
+  "LOKI_FIRST_PASS_EXCELLENCE",
+  "LOKI_GEMINI_MODEL",
+  "LOKI_HOST_GUARD",
+  "LOKI_HOST_GUARD_SETTINGS_JSON",
+  "LOKI_LEGACY_BASH",
+  "LOKI_MAX_ITERATIONS",
+  "LOKI_NO_SESSION_PERSIST",
+  "LOKI_PARTIAL_MESSAGES",
+  "LOKI_PROMPT_INJECTION",
+  "LOKI_SDK_LOOP",
+  "LOKI_SDK_MODE",
+  "LOKI_SESSION_MODEL",
+  "LOKI_SETTING_SOURCES",
+  "LOKI_SKILL_DIR",
+  "LOKI_SPEC_CONTRADICTION_FASTFAIL",
+  "LOKI_SPEC_SHA256",
+  "LOKI_WORKSPACE_ROOTS"
+ ],
+ "not_forwarded": [
+  "LOKI_ABLATION_TIMEOUT",
+  "LOKI_ACTOR",
+  "LOKI_ADVISOR",
+  "LOKI_ADVISOR_SCOPE",
+  "LOKI_AGENTS_PROJECT_DIR",
+  "LOKI_AGENTS_USER_DIR",
+  "LOKI_AIDER_FLAGS",
+  "LOKI_AIDER_MODEL",
+  "LOKI_AI_MARKING",
+  "LOKI_ALLOW_AGENT_GITHUB_TOKEN",
+  "LOKI_ALLOW_HAIKU",
+  "LOKI_ANSWER_SHA",
+  "LOKI_AUTO_GIT_INIT",
+  "LOKI_AUTO_LEARNINGS",
+  "LOKI_AUTO_LEARNINGS_EPISODE",
+  "LOKI_AUTO_LEARN_PR",
+  "LOKI_BARE_SUBCALLS",
+  "LOKI_BEFORE_AFTER",
+  "LOKI_BMAD_STORY_ID",
+  "LOKI_BUDGET_LEDGER",
+  "LOKI_BUDGET_LIMIT",
+  "LOKI_CACHE_ROOT",
+  "LOKI_CAPABILITY_ROUTER",
+  "LOKI_CAVEMAN",
+  "LOKI_CAVEMAN_LEVEL",
+  "LOKI_CAVEMAN_USER_MODE",
+  "LOKI_CAVEMAN_VERSION",
+  "LOKI_CHANGE_TIER",
+  "LOKI_CLINE_MODEL",
+  "LOKI_CLI_VERSION",
+  "LOKI_COCKPIT_PROTOCOL",
+  "LOKI_CODEX_OUTPUT_LAST",
+  "LOKI_COMMIT_WALL",
+  "LOKI_CONFIDENCE_SPIKE",
+  "LOKI_CONFIRM",
+  "LOKI_CONTRACT",
+  "LOKI_CONTROL",
+  "LOKI_CONTROL_ANSWER_DIR",
+  "LOKI_CONTROL_AUTOINGEST",
+  "LOKI_CONTROL_DB",
+  "LOKI_CONTROL_PLANE_URL",
+  "LOKI_CONTROL_PORT",
+  "LOKI_CONTROL_TOKEN",
+  "LOKI_CONTROL_URL",
+  "LOKI_COST_CONFIRM",
+  "LOKI_COST_FIRST",
+  "LOKI_COST_PREVIEW",
+  "LOKI_COST_PROFILE",
+  "LOKI_COUNCIL_REVIEW_TIMEOUT",
+  "LOKI_CURRENT_MODEL",
+  "LOKI_CURRENT_TIER",
+  "LOKI_DASHBOARD_PORT",
+  "LOKI_DATA_DIR",
+  "LOKI_DIR",
+  "LOKI_DOCTOR_HELPER_TIMEOUT_MS",
+  "LOKI_DURABLE_STATE",
+  "LOKI_DYNAMIC_PROMPT_SECTIONS",
+  "LOKI_E10_ATTEMPT",
+  "LOKI_E10_BASE",
+  "LOKI_E10_BASE_JOBS",
+  "LOKI_E10_BRIEF",
+  "LOKI_E10_CACHE_GAP_MS",
+  "LOKI_E10_CACHE_TTL",
+  "LOKI_E10_CANCEL_GRACE_MS",
+  "LOKI_E10_CAP_FIXED_S",
+  "LOKI_E10_CAP_S",
+  "LOKI_E10_CASCADE",
+  "LOKI_E10_COST_ESTIMATE",
+  "LOKI_E10_DASHBOARD_PORT",
+  "LOKI_E10_DISALLOWED_TOOLS",
+  "LOKI_E10_EFFORT",
+  "LOKI_E10_EFFORT_POLICY",
+  "LOKI_E10_FIX_RESUME",
+  "LOKI_E10_INSTALL",
+  "LOKI_E10_INVOKER",
+  "LOKI_E10_ISSUE_JSON",
+  "LOKI_E10_MAX_COST_USD",
+  "LOKI_E10_MODEL_DEFAULT",
+  "LOKI_E10_NOTIFY_TIMEOUT_MS",
+  "LOKI_E10_NO_FETCH",
+  "LOKI_E10_PLAN",
+  "LOKI_E10_PREFIX",
+  "LOKI_E10_PROJECT_MODEL",
+  "LOKI_E10_PROVIDER",
+  "LOKI_E10_READINESS_FOLD",
+  "LOKI_E10_REPOMAP_MAX_FILES",
+  "LOKI_E10_REPO_DIR",
+  "LOKI_E10_REPRO",
+  "LOKI_E10_RESUME",
+  "LOKI_E10_RESUME_SESSION",
+  "LOKI_E10_REVIEW_BOX_S",
+  "LOKI_E10_SCOPE",
+  "LOKI_E10_SIGS",
+  "LOKI_E10_SMALL_MAX_CHARS",
+  "LOKI_E10_SMALL_NO_RUNNER",
+  "LOKI_E10_SNAPSHOT_MAX",
+  "LOKI_E10_SPEC_PATH",
+  "LOKI_E10_SPEC_SHA256",
+  "LOKI_E10_SPENT_USD",
+  "LOKI_E10_STABLE_PREFIX",
+  "LOKI_E10_STAGE",
+  "LOKI_E10_STALL_KILL_S",
+  "LOKI_E10_STALL_S",
+  "LOKI_E10_TASK_TEXT",
+  "LOKI_E10_TIER",
+  "LOKI_E10_TRIM",
+  "LOKI_E10_VERIFY_JOBS",
+  "LOKI_E10_WALL",
+  "LOKI_E10_WALL_CONCURRENT",
+  "LOKI_E10_WALL_FIRST",
+  "LOKI_E10_WALL_LIMIT_S",
+  "LOKI_E10_WALL_MANIFEST",
+  "LOKI_E10_WALL_TIER",
+  "LOKI_EXEC_MANIFEST",
+  "LOKI_EXOGENOUS_PROOF",
+  "LOKI_FAILOVER",
+  "LOKI_FAILOVER_PROVIDERS",
+  "LOKI_FETCH_ISSUE_TIMEOUT_MS",
+  "LOKI_FORECAST",
+  "LOKI_GATE_DEVILS_ADVOCATE",
+  "LOKI_GATE_INVARIANTS_BLOCK",
+  "LOKI_GATE_LSP_WRITER",
+  "LOKI_GATE_MAGIC_DEBATE",
+  "LOKI_GATE_SEMANTIC_TESTS_BLOCK",
+  "LOKI_GATE_TEST_COVERAGE_BLOCK",
+  "LOKI_GATE_TIMEOUT",
+  "LOKI_GOAL_SCORING",
+  "LOKI_GROUP_FIX_UNITS",
+  "LOKI_GROUP_RESUME",
+  "LOKI_GROUP_TEST_CMD",
+  "LOKI_HANDOFF_MD",
+  "LOKI_HARD_GATES",
+  "LOKI_HEAL_MODE",
+  "LOKI_HOOK_EVENTS",
+  "LOKI_HOOK_TIMEOUT",
+  "LOKI_HOSTED_ENDPOINT",
+  "LOKI_IMPLEMENT_HAIKU_FIRST",
+  "LOKI_INFERENCE_GEO",
+  "LOKI_INJECT_FINDINGS",
+  "LOKI_INTENT_CARD",
+  "LOKI_INTENT_TTY",
+  "LOKI_INVARIANT_DETECTOR",
+  "LOKI_ISSUES_GH_TIMEOUT_MS",
+  "LOKI_ITERATION",
+  "LOKI_JIRA_EMAIL",
+  "LOKI_JIRA_TOKEN",
+  "LOKI_JIRA_URL",
+  "LOKI_LEAN_CHILDREN",
+  "LOKI_LEGACY_COMPLETION_MATCH",
+  "LOKI_LEGACY_TIER_SWITCHING",
+  "LOKI_LESSONS_REJECTED",
+  "LOKI_LICENSE_KEY",
+  "LOKI_LINEAR_TOKEN",
+  "LOKI_LINEAR_URL",
+  "LOKI_MAX_TIER",
+  "LOKI_MCP_PROJECT",
+  "LOKI_MIN_FREE_MB",
+  "LOKI_MIROFISH_URL",
+  "LOKI_MODEL_API_KEY",
+  "LOKI_MODEL_BASE_URL",
+  "LOKI_MODEL_CATALOG",
+  "LOKI_MODEL_DEVELOPMENT",
+  "LOKI_MODEL_FAST",
+  "LOKI_MODEL_OVERRIDE",
+  "LOKI_MODEL_ROUTE",
+  "LOKI_MOD_OLD_RUNTIME",
+  "LOKI_MUTATION_PROOF",
+  "LOKI_MUTATION_STRICT",
+  "LOKI_NO_AUTO_OPEN",
+  "LOKI_NO_BROWSER",
+  "LOKI_NO_COMPLETIONS",
+  "LOKI_NO_PR_LESSONS",
+  "LOKI_NO_RESUME",
+  "LOKI_NO_UPDATE_CHECK",
+  "LOKI_OPENCODE_CLI",
+  "LOKI_OPENCODE_FLAGS",
+  "LOKI_OPENCODE_MODEL",
+  "LOKI_OTEL_ENDPOINT",
+  "LOKI_OVERRIDE_COUNCIL",
+  "LOKI_OVERRIDE_JUDGES",
+  "LOKI_OVERRIDE_PANEL_SIZE",
+  "LOKI_OVERRIDE_REAL_JUDGE",
+  "LOKI_PARENT_RUN",
+  "LOKI_PAUSE_TIMEOUT_S",
+  "LOKI_PERMISSION_POLICY",
+  "LOKI_POLICY_REQUIRE_NODE",
+  "LOKI_PRD_REGEN",
+  "LOKI_PREFLIGHT_PROBE",
+  "LOKI_PRICE_TABLE",
+  "LOKI_PROJECT_DIR",
+  "LOKI_PROJECT_GRAPH_APP_ID",
+  "LOKI_PROJECT_GRAPH_MEMBERS",
+  "LOKI_PROJECT_GRAPH_ROOT",
+  "LOKI_PROJECT_GRAPH_SHARED_MEMORY_DIR",
+  "LOKI_PROMOTED_DIR",
+  "LOKI_PROOF",
+  "LOKI_PROOF_ABLATION",
+  "LOKI_PROOF_APP_PROBE",
+  "LOKI_PROOF_GPG_KEY",
+  "LOKI_PROVIDER",
+  "LOKI_PROVIDER_CALL_TIMEOUT",
+  "LOKI_PR_BASE",
+  "LOKI_PR_BOT_TOKEN",
+  "LOKI_PR_DRAFT",
+  "LOKI_PR_FOOTER",
+  "LOKI_PR_LESSON_DEMOTE",
+  "LOKI_PR_REFS",
+  "LOKI_PR_RESPOND_CMD",
+  "LOKI_PR_RESPOND_MAX",
+  "LOKI_PUSH_PR_TIMEOUT_MS",
+  "LOKI_QUEUE_ITEM_TIMEOUT_MIN",
+  "LOKI_RECEIPT_RETIRED_PUBKEYS",
+  "LOKI_RECEIPT_SIGNING_KEY",
+  "LOKI_RECEIPT_SIGNING_KEY_FILE",
+  "LOKI_RECOVERY_MAX_COST",
+  "LOKI_RECOVERY_POLICY",
+  "LOKI_REPO_BASELINE",
+  "LOKI_REPO_PROFILE",
+  "LOKI_RESUME_SESSION",
+  "LOKI_REVIEWER_BRIEF",
+  "LOKI_REVIEWER_TIER_ROUTING",
+  "LOKI_REVIEW_ALLOWLIST",
+  "LOKI_REVIEW_INCONCLUSIVE_BLOCK",
+  "LOKI_REVIEW_JSON_SCHEMA",
+  "LOKI_REVIEW_MERGEABILITY_MIN",
+  "LOKI_REVIEW_PROVIDER",
+  "LOKI_REVIEW_STAGGER_MS",
+  "LOKI_REVIEW_TOOL_GUARD",
+  "LOKI_REVIEW_UNAVAILABLE_BLOCK",
+  "LOKI_RISK_OVERRIDE_REASON",
+  "LOKI_RISK_TIER",
+  "LOKI_ROUTER",
+  "LOKI_ROUTER_ADVISOR",
+  "LOKI_ROUTER_EXECUTOR",
+  "LOKI_RUN_TMP",
+  "LOKI_SAFE_GIT_CONFIG_TIMEOUT_MS",
+  "LOKI_SATISFACTION",
+  "LOKI_SDK",
+  "LOKI_SDK_CODE_REVIEW",
+  "LOKI_SDK_COUNCIL_MODEL",
+  "LOKI_SDK_MODE_DEBUG",
+  "LOKI_SDK_NODE_MODULES",
+  "LOKI_SDK_OAUTH_DEV",
+  "LOKI_SDK_PROMPT_CACHE",
+  "LOKI_SDK_REVIEW_MODEL",
+  "LOKI_SDK_REVIEW_TIMEOUT",
+  "LOKI_SDK_VOTER_AGENTS",
+  "LOKI_SECURE_SCAN",
+  "LOKI_SECURE_SCAN_BASE",
+  "LOKI_SEEDED_DEFECTS_DIR",
+  "LOKI_SELF_HEAL",
+  "LOKI_SEMANTIC_DETECTOR",
+  "LOKI_SESSION_FORK",
+  "LOKI_SESSION_STAMP",
+  "LOKI_SIMPLE",
+  "LOKI_SKIP_MEMORY",
+  "LOKI_SLACK_ALLOWED_USERS",
+  "LOKI_SLACK_ALLOWED_USERS_FILE",
+  "LOKI_SLACK_INBOUND",
+  "LOKI_SLACK_WEBHOOK_ENV",
+  "LOKI_SMART_RETRY",
+  "LOKI_SPEED",
+  "LOKI_STATIC_ANALYSIS_CONCURRENCY",
+  "LOKI_STATUS_PROBE_RETRY_DELAY_MS",
+  "LOKI_STATUS_PROBE_TIMEOUT_MS",
+  "LOKI_STRICT_MCP",
+  "LOKI_SUPPLY_GUARD",
+  "LOKI_SUPPLY_MIN_AGE_DAYS",
+  "LOKI_TARGET_DIR",
+  "LOKI_TELEMETRY",
+  "LOKI_TELEMETRY_DISABLED",
+  "LOKI_TEST",
+  "LOKI_TIER",
+  "LOKI_TIER_ROUTING",
+  "LOKI_TRACKER_INTAKE",
+  "LOKI_TRUST_RUN_ID",
+  "LOKI_TS_ENTRY",
+  "LOKI_UNIT_ID",
+  "LOKI_UNIT_SPEC",
+  "LOKI_UNIT_SPEC_FROZEN",
+  "LOKI_UNIT_USD_PER_MTOK",
+  "LOKI_USE_CLAUDE_WORKFLOWS",
+  "LOKI_VERIFY_ALLOW_HEAD_DRIFT",
+  "LOKI_VERIFY_ALLOW_UNSIGNED",
+  "LOKI_VERIFY_PR",
+  "LOKI_VERIFY_REQUIRE_EXOGENOUS",
+  "LOKI_VERIFY_TASK_FILE",
+  "LOKI_VISUAL_EVIDENCE",
+  "LOKI_VISUAL_GATE",
+  "LOKI_VPR_GH_TIMEOUT_MS",
+  "LOKI_VPR_IMAGE",
+  "LOKI_WALL_HARNESS_RUNNER",
+  "LOKI_WALL_HOLDOUT",
+  "LOKI_WALL_HOLDOUT_RATIO",
+  "LOKI_WARM_SOCK",
+  "LOKI_WRITEBACK_ISSUE",
+  "LOKI_WRITEBACK_KIND",
+  "LOKI_XVENDOR_DEFAULT"
+ ]
+}

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var Ih0=Object.create;var{getPrototypeOf:Th0,defineProperty:vK,getOwnPropertyNames:Kn,getOwnPropertyDescriptor:Ph0}=Object,Vn=Object.prototype.hasOwnProperty;function Gn(Z){return this[Z]}var Rh0,Eh0,Dh0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?Rh0??=new WeakMap:Eh0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?Ih0(Th0(Z)):{};let z=$||!Z||!Z.__esModule?vK(J,"default",{value:Z,enumerable:!0}):J;for(let W of Kn(Z))if(!Vn.call(z,W))vK(z,W,{get:Gn.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},wh0=(Z)=>{var $=(Wn??=new WeakMap).get(Z),J;if($)return $;if($=vK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Kn(Z))if(!Vn.call($,X))vK($,X,{get:Gn.bind(Z,X),enumerable:!(J=Ph0(Z,X))||J.enumerable})}return Wn.set(Z,$),$},Wn,YM=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var _h0=(Z)=>Z;function xh0(Z,$){this[Z]=_h0.bind(null,$)}var C0=(Z,$)=>{for(var J in $)vK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:xh0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var t9=import.meta.require;var qn={};C0(qn,{lokiDirFor:()=>zM,lokiDir:()=>D0,homeLokiDir:()=>T2,findRepoRootForVersion:()=>hK,REPO_ROOT:()=>F0});import{resolve as RZ,dirname as uE}from"path";import{fileURLToPath as kh0}from"url";import{existsSync as QM}from"fs";import{homedir as Sh0}from"os";function yh0(){let Z=Hn;for(let $=0;$<6;$++){if(QM(RZ(Z,"VERSION"))&&QM(RZ(Z,"autonomy/run.sh")))return Z;let J=uE(Z);if(J===Z)break;Z=J}return RZ(Hn,"..","..","..")}function hK(Z){let $=Z;for(let J=0;J<6;J++){if(QM(RZ($,"VERSION"))&&QM(RZ($,"autonomy/run.sh")))return $;let X=uE($);if(X===$)break;$=X}return RZ(Z,"..","..","..")}function zM(Z){return process.env.LOKI_DIR??RZ(Z,".loki")}function D0(){return zM(process.cwd())}function T2(){return RZ(Sh0(),".loki")}var Hn,F0;var s0=S(()=>{Hn=uE(kh0(import.meta.url));F0=yh0()});import{readFileSync as bh0}from"fs";import{resolve as vh0,dirname as hh0}from"path";import{fileURLToPath as fh0}from"url";function N6(){if(v1!==null)return v1;let Z="11.63.9";if(typeof Z==="string"&&Z.length>0)return v1=Z,v1;try{let $=hh0(fh0(import.meta.url)),J=hK($);v1=bh0(vh0(J,"VERSION"),"utf-8").trim()}catch{v1="unknown"}return v1}var v1=null;var EZ=S(()=>{s0()});import{mkdirSync as cE,readFileSync as WM,realpathSync as gh0,statSync as mh0,writeFileSync as dE}from"fs";import{dirname as qY,join as pE,resolve as Un}from"path";function lh0(){return Un(T2(),"cache","update-check.json")}function DZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function fK(Z,$){let J=DZ(Z),X=DZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Bn(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function Nn(Z){try{let $=WM(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&DZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function ah0(Z){try{let $=JSON.parse(WM(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function ih0(Z,$){let J=Nn(Z);try{cE(qY(Z),{recursive:!0}),dE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function oh0(Z,$){try{cE(qY(Z),{recursive:!0}),dE(Z,JSON.stringify($),"utf-8")}catch{}}async function nh0(){try{let Z=await fetch(uh0,{signal:AbortSignal.timeout(ch0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&DZ($.version)!==null)return $.version}catch{}return null}async function sh0(Z=Date.now(),$=nh0,J=lh0()){let X=Nn(J);if(X&&Z-X.checkedAt<ph0)return X.latest;let Y=ah0(J);if(Y!==null&&Z-Y>=0&&Z-Y<dh0)return null;let Q=await $();if(Q===null)return ih0(J,Z),null;return oh0(J,{checkedAt:Z,latest:Q}),Q}function rh0(Z,$=process.env){if(DZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=pE(Q,"loki"),W;try{mh0(z),W=gh0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=pE(qY(qY(W)),"package.json"),V=JSON.parse(WM(K,"utf8")).version;if(typeof V!=="string")continue;if(fK(V,Z))return{path:z,version:V}}catch{continue}}return null}function th0(){return Un(T2(),"cache","last-seen-version.json")}function eh0(Z,$={}){try{if(Bn())return!1;if(DZ(Z)===null)return!1;let J=$.seenFile??th0(),X=null;try{let Q=JSON.parse(WM(J,"utf-8")).version;if(typeof Q==="string"&&DZ(Q)!==null)X=Q}catch{}if(X!==null&&!fK(Z,X))return!1;try{cE(qY(J),{recursive:!0}),dE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
+var Ih0=Object.create;var{getPrototypeOf:Th0,defineProperty:vK,getOwnPropertyNames:Kn,getOwnPropertyDescriptor:Ph0}=Object,Vn=Object.prototype.hasOwnProperty;function Gn(Z){return this[Z]}var Rh0,Eh0,Dh0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?Rh0??=new WeakMap:Eh0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?Ih0(Th0(Z)):{};let z=$||!Z||!Z.__esModule?vK(J,"default",{value:Z,enumerable:!0}):J;for(let W of Kn(Z))if(!Vn.call(z,W))vK(z,W,{get:Gn.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},wh0=(Z)=>{var $=(Wn??=new WeakMap).get(Z),J;if($)return $;if($=vK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Kn(Z))if(!Vn.call($,X))vK($,X,{get:Gn.bind(Z,X),enumerable:!(J=Ph0(Z,X))||J.enumerable})}return Wn.set(Z,$),$},Wn,YM=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var _h0=(Z)=>Z;function xh0(Z,$){this[Z]=_h0.bind(null,$)}var C0=(Z,$)=>{for(var J in $)vK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:xh0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var t9=import.meta.require;var qn={};C0(qn,{lokiDirFor:()=>zM,lokiDir:()=>D0,homeLokiDir:()=>T2,findRepoRootForVersion:()=>hK,REPO_ROOT:()=>F0});import{resolve as RZ,dirname as uE}from"path";import{fileURLToPath as kh0}from"url";import{existsSync as QM}from"fs";import{homedir as Sh0}from"os";function yh0(){let Z=Hn;for(let $=0;$<6;$++){if(QM(RZ(Z,"VERSION"))&&QM(RZ(Z,"autonomy/run.sh")))return Z;let J=uE(Z);if(J===Z)break;Z=J}return RZ(Hn,"..","..","..")}function hK(Z){let $=Z;for(let J=0;J<6;J++){if(QM(RZ($,"VERSION"))&&QM(RZ($,"autonomy/run.sh")))return $;let X=uE($);if(X===$)break;$=X}return RZ(Z,"..","..","..")}function zM(Z){return process.env.LOKI_DIR??RZ(Z,".loki")}function D0(){return zM(process.cwd())}function T2(){return RZ(Sh0(),".loki")}var Hn,F0;var s0=S(()=>{Hn=uE(kh0(import.meta.url));F0=yh0()});import{readFileSync as bh0}from"fs";import{resolve as vh0,dirname as hh0}from"path";import{fileURLToPath as fh0}from"url";function N6(){if(v1!==null)return v1;let Z="11.64.0";if(typeof Z==="string"&&Z.length>0)return v1=Z,v1;try{let $=hh0(fh0(import.meta.url)),J=hK($);v1=bh0(vh0(J,"VERSION"),"utf-8").trim()}catch{v1="unknown"}return v1}var v1=null;var EZ=S(()=>{s0()});import{mkdirSync as cE,readFileSync as WM,realpathSync as gh0,statSync as mh0,writeFileSync as dE}from"fs";import{dirname as qY,join as pE,resolve as Un}from"path";function lh0(){return Un(T2(),"cache","update-check.json")}function DZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function fK(Z,$){let J=DZ(Z),X=DZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Bn(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function Nn(Z){try{let $=WM(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&DZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function ah0(Z){try{let $=JSON.parse(WM(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function ih0(Z,$){let J=Nn(Z);try{cE(qY(Z),{recursive:!0}),dE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function oh0(Z,$){try{cE(qY(Z),{recursive:!0}),dE(Z,JSON.stringify($),"utf-8")}catch{}}async function nh0(){try{let Z=await fetch(uh0,{signal:AbortSignal.timeout(ch0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&DZ($.version)!==null)return $.version}catch{}return null}async function sh0(Z=Date.now(),$=nh0,J=lh0()){let X=Nn(J);if(X&&Z-X.checkedAt<ph0)return X.latest;let Y=ah0(J);if(Y!==null&&Z-Y>=0&&Z-Y<dh0)return null;let Q=await $();if(Q===null)return ih0(J,Z),null;return oh0(J,{checkedAt:Z,latest:Q}),Q}function rh0(Z,$=process.env){if(DZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=pE(Q,"loki"),W;try{mh0(z),W=gh0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=pE(qY(qY(W)),"package.json"),V=JSON.parse(WM(K,"utf8")).version;if(typeof V!=="string")continue;if(fK(V,Z))return{path:z,version:V}}catch{continue}}return null}function th0(){return Un(T2(),"cache","last-seen-version.json")}function eh0(Z,$={}){try{if(Bn())return!1;if(DZ(Z)===null)return!1;let J=$.seenFile??th0(),X=null;try{let Q=JSON.parse(WM(J,"utf-8")).version;if(typeof Q==="string"&&DZ(Q)!==null)X=Q}catch{}if(X!==null&&!fK(Z,X))return!1;try{cE(qY(J),{recursive:!0}),dE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
 `),!0}catch{return!1}}function Zf0(Z){let $=Z.replace(/\\/g,"/");if($.includes("/Cellar/"))return"brew upgrade loki-mode";if(/\/pnpm\//.test($)||$.includes("/.pnpm/"))return"pnpm add -g loki-mode  (or npm i -g loki-mode)";if($.includes("/yarn/global/")||$.includes("/.yarn/"))return"yarn global add loki-mode  (or npm i -g loki-mode)";if($.includes("/.bun/"))return"bun install -g loki-mode  (or npm i -g loki-mode)";if($.includes("/lib/node_modules/"))return"npm i -g loki-mode  (or bun install -g loki-mode)";if($.includes("/homebrew/"))return"brew upgrade loki-mode";return"bun install -g loki-mode  (or npm i -g loki-mode)"}async function Mn(Z,$={}){try{if(Bn())return;if(DZ(Z)===null)return;let J=$.write??((Q)=>process.stderr.write(Q));eh0(Z,{write:J,...$.cacheFile?{seenFile:pE(qY($.cacheFile),"last-seen-version.json")}:{}});let X=rh0(Z,$.env??process.env);if(X!==null){J(`Loki Mode ${X.version} is installed but not the one running (you are running ${Z}).
   Another loki earlier on PATH is winning. Newer copy: ${X.path}
   Run \`which -a loki\` to see the order, then remove or re-point the earlier entry.
@@ -3295,4 +3295,4 @@ Unknown commands exit 2 with a suggestion; run 'loki help' for the full list.
 `);{let{suggestCommand:X}=await Promise.resolve().then(() => (z7(),sn)),Y=$===void 0?void 0:X($);if(Y)process.stderr.write(`Did you mean 'loki ${Y}'?
 `)}return process.stderr.write(Mh0),2}}$T0();var Oh0=()=>globalThis[Symbol.for("loki.ownsStopSignals")]===!0;process.on("SIGINT",()=>{if(!Oh0())process.exit(130)});process.on("SIGTERM",()=>{if(!Oh0())process.exit(143)});var uN9=await mN9(Bun.argv.slice(2));process.exit(uN9);
 
-//# debugId=4574FFA9F80632C922826D763CA41907
+//# debugId=63AF2CCCBD16C9642B7A438BC6C5CCCF

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.63.9'
+__version__ = '11.64.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.63.9",
+  "version": "11.64.0",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",
@@ -160,5 +160,5 @@
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2"
   },
-  "gitHead": "3f958a8df48b094a2cc397e0981f75b7b3193366"
+  "gitHead": "5515fc787e93217e32a7e9f5335e8cf25ed2c844"
 }