loki-mode 11.69.1 → 11.70.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.69.1
+# Loki Mode v11.70.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -476,4 +476,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.69.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.70.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.69.1
+11.70.0

package/agents/managed_registry.py

@@ -166,7 +166,7 @@ def _call_create_agent(pool_name: str) -> str:
     translate to a fallback-capable flow.
     """
     # Deferred import to keep the module SDK-free at import time.
-    from providers.managed import _get_client  # local import of shared client
+    from providers.managed import _get_client, agent_model  # local import of shared client
 
     client = _get_client()
     beta = getattr(client, "beta", None)
@@ -183,6 +183,7 @@ def _call_create_agent(pool_name: str) -> str:
     try:
         created = agents_ns.create(
             name=display_name,
+            model=agent_model(),
             system=persona,
             metadata={"loki_pool": pool_name},
         )

package/autonomy/loki

@@ -2996,6 +2996,7 @@ cmd_start() {
                 echo "  --ship                Worktree + PR + auto-merge"
                 echo "  --detach, -d          Run in background (implies --worktree)"
                 echo "  --resume [RUN_ID]     Resume an interrupted run at the stage it stopped in"
+                echo "                        Exit 4 means the run cannot be resumed OR the resumed run ended BLOCKED; read the printed line to tell them apart."
                 echo ""
                 echo "Preview without spending (any input mode):"
                 echo "  loki plan <PRD>       Analyze a spec WITHOUT executing: complexity,"

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.69.1"
+__version__ = "11.70.0"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.69.1. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.70.0. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.69.1
+**Version:** v11.70.0
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/dev/architecture-reference.md

@@ -114,3 +114,22 @@ extract_learnings_from_session (autonomy/run.sh) mirrors learnings and decisions
 - Lessons: every sealed run appends a receipt fact (`LOKI_AUTO_LEARN_PR`, default on) outside the receipt body; `implement.ts` injects lessons and relevant learnings inside the untrusted-data fence; `loki memory brief --task T` prints the same block.
 
 - Wall publish (FC-VERIFIED-PR-WITHOUT-ITS-TEST): on a VERIFIED seal only, `publishWall` (`util/check_result.ts`, called from `stages/seal.ts`) makes ONE child commit (trailer `Loki-Wall-Publish: <runId>`) of the SEALED Wall bytes (`runDir/wall`, hash-checked against `wall.files[].sha256`) that verify ran and passed (`publishableWall`). Before writing, the realpath of each Wall file's parent directory must be inside the repo, and an existing file or symlink is removed first. The child commit runs with hooks and signing OFF (the default `git()` call, no `userHooks`), so a pre-commit hook cannot add files or rewrite the Wall bytes. Afterwards the commit must touch exactly the published paths and each committed blob must equal the blob hash of the sealed bytes (computed in process, never read from the worktree); on any mismatch the child is rolled back (`update-ref` HEAD to the product head plus `read-tree`), nothing is published and a NOT PROVEN note is added. The receipt binds the PRODUCT head (head_sha, tree, diff_sha256 are computed before the child commit). A re-seal binds `HEAD^` only when HEAD's message has the exact trailer line for this run, HEAD touches only paths of this run's `wall.files`, and every blob sha256 matches (`wallChild`); a forged trailer is not enough. `util/seal_drift.ts` accepts a moved HEAD after head_sha as benign only when every commit after it is such a Wall publish commit (linear, trailer line for the receipt's run_id, only `wall.files` paths, blob sha256 equal to the sealed one); any commit after head_sha that carries this run's trailer but fails that check is head drift (UNCHECKED). Later commits without the trailer stay under the TEN-GATES-16 sealed-path overlap rule. The PR body gains an "Acceptance tests" section. Commit stage and `backstopCommit` still drop Wall files. `LOKI_COMMIT_WALL=0` restores the old behavior (nothing published).
+
+### Python anthropic SDK (RQ-105: pinned `anthropic==2.2.0`)
+
+`mcp/requirements.txt` pins the Python SDK exactly (was `>=0.40,<1.0.0`; the resolver landed on 0.125.0). Requires Python >=3.10 (Ubuntu 24.04 image ships 3.12). The SDK runs on `httpx2`; no repo code passes `httpx` objects to it. v2.0.0 changes (API version 2026-10-21): `temperature`/`top_p`/`top_k` removed from Messages (no call site uses them), Admin API field renames (unused). Python-side call sites: `memory/managed_memory/client.py` (the only importer) and `providers/managed.py` (lazy import, `tests/managed/test_registry_lazy.py` contract unchanged).
+
+| Capability (SDK release notes 0.40 to 2.2.0) | Status | Evidence / reason |
+| --- | --- | --- |
+| Client construction `anthropic.Anthropic(api_key, timeout, default_headers)` | WIRED | `memory/managed_memory/client.py:76`, `providers/managed.py:223`; unchanged in 2.x |
+| Managed Agents memory stores (`beta.memory_stores`) | WIRED | `memory/managed_memory/client.py:127`; `create()` has no `scope` in 2.x, scope now sent as `metadata` |
+| Memories nested at `beta.memory_stores.memories` (`memory_store_id`) | WIRED | `memory/managed_memory/client.py:96`; legacy `beta.memories` kept for fakes/preview |
+| Memory paths | WIRED | 2.x paths are absolute and unique per store: `client.py:157` `_abs` plus leading "/" logical paths (`shadow_write.py` verdict/pattern/episode, `retrieve.py` list prefixes); wire test `RealSdkWireTests` asserts the request path |
+| Memories list view and paging | WIRED | `client.py:242` `memories_list` sends `view="full"` (default basic view returns null content), follows `next_page` (20 per page) and drops `memory_prefix` rows; wire test pages 45 rows over 3 requests |
+| Memory create precondition | NOT ADOPTED | 2.x `memories.create` has no precondition; an existing path answers 409 (`client.py:161`, status kept visible) |
+| Memory update with `content_sha256` precondition | WIRED | `client.py:198` `memory_update`; the shadow-write 409 path (`shadow_write.py:197`) re-reads, merges, then updates with the hash of the content currently stored, never the hash of the new content |
+| Memory versions (`memory_stores.memory_versions`) | NOT ADOPTED | `redact` path still reads the legacy shape; separate slice, behind ManagedDisabled fallback |
+| Managed Agents sessions, environments, multiagent coordinator | WIRED | `providers/managed.py` `_RealMultiagentSession.run`: coordinator agent (`multiagent={"type":"coordinator"}`) + cached environment, then `sessions.create(agent=, environment_id=, initial_events=)`; ids cached in `.loki/managed/agent_ids.json`; contract test binds kwargs to the real SDK signatures. Fails safe (ManagedUnavailable) on timeout, terminated status, or any reply set that is not exactly one reply per roster agent; replies are the coordinator's `agent.thread_message_received` events, attributed via `from_session_thread_id` and `sessions.threads.list` to thread.agent.id (agent threads only); the session is ready only when every roster agent has replied; coordinator cache key includes the model, resolved from the model catalog (non-Claude env overrides ignored). WIRED, live reply shape NOT PROVEN (no key) |
+| Vaults, deployments, dreams, webhooks | NOT ADOPTED | no Loki consumer; research preview |
+| Tool runner (`beta.messages.tool_runner`), compaction, structured outputs, adaptive thinking, advisor tool, citations, files API, web search / code execution, prompt cache TTL | NOT ADOPTED | Loki drives models through provider CLIs and the TS Agent SDK; the Python SDK is only the managed-agents bridge |
+| Bedrock / Vertex clients | NOT ADOPTED | no use |

package/docs/v10/FAILURE-CLASSES.md

@@ -1549,6 +1549,7 @@ L0 review rule (ENGINE-LAWS.md L0): a fix that adds an `if` or a regex about the
 - Cause (measured): the legacy start branch delegated `engine10 resume` (resumeMain, the reporter) instead of `engine10 --resume` (resumeFlag, the stage resume) and mapped its exit 4 to 0; cmd_verify routed only composite, group and deploy receipts to engine10, so a run receipt fell through to the diff verifier. tests/test-next-resume-agree.sh pinned `STUB-ARGV:engine10 resume` with a stub that exits 0, so it passed while the user path resumed nothing (a guard that passed its own mutation).
 - Siblings swept: `loki resume` (the reporter, keeps its 0/4/5 map), `loki "<task>" --resume` (already resumeFlag), bare `loki verify` and `loki verify e10-*` (already v10 in bin/loki), `--pubkey` verify (already v10), a git ref and a non-receipt .json (stay on the diff verifier, pinned as controls).
 - Mechanism: `start --resume` delegates `engine10 --resume [run-id]` and returns the code unchanged; cmd_verify sends `.loki/runs/e10-*/receipt.json` paths and any existing file whose schema starts `loki.v10.receipt` to `engine10 verify`.
+- Exit 4 is shared: `start --resume` returns the engine code unchanged, and 4 is both "cannot resume" (for example a run whose base commit is gone) and EXIT.BLOCKED (engine10/output.ts), so a resumed run that ends BLOCKED also exits 4. A script cannot tell the two apart from the code alone; the printed line does. No doc may claim 4 means only "cannot resume". The codes are unchanged.
 - Fixture: tests/test-next-resume-agree.sh drives the real Bun entry on a seeded interrupted run (asserts `engine10: resume from stage implement`, exit 2 not 0) and a stub that exits 4 (asserts 4); tests/test-verify-receipt-route.sh covers the path forms, a tampered receipt (TAMPERED, never CONCERNS) and the diff-verifier controls. Red on origin/main (17 and 4 failures), green after; mutants (delegate back to `resume`, schema route removed) turn them red.
 
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var ch0=Object.create;var{getPrototypeOf:dh0,defineProperty:pK,getOwnPropertyNames:Mn,getOwnPropertyDescriptor:lh0}=Object,On=Object.prototype.hasOwnProperty;function An(Z){return this[Z]}var ah0,ih0,oh0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?ah0??=new WeakMap:ih0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?ch0(dh0(Z)):{};let z=$||!Z||!Z.__esModule?pK(J,"default",{value:Z,enumerable:!0}):J;for(let W of Mn(Z))if(!On.call(z,W))pK(z,W,{get:An.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},nh0=(Z)=>{var $=(Nn??=new WeakMap).get(Z),J;if($)return $;if($=pK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Mn(Z))if(!On.call($,X))pK($,X,{get:An.bind(Z,X),enumerable:!(J=lh0(Z,X))||J.enumerable})}return Nn.set(Z,$),$},Nn,qM=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var sh0=(Z)=>Z;function rh0(Z,$){this[Z]=sh0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)pK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:rh0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var e9=import.meta.require;var jn={};j0(jn,{lokiDirFor:()=>BM,lokiDir:()=>D0,homeLokiDir:()=>T2,findRepoRootForVersion:()=>cK,REPO_ROOT:()=>F0});import{resolve as wZ,dirname as aE}from"path";import{fileURLToPath as th0}from"url";import{existsSync as UM}from"fs";import{homedir as eh0}from"os";function Zf0(){let Z=Ln;for(let $=0;$<6;$++){if(UM(wZ(Z,"VERSION"))&&UM(wZ(Z,"autonomy/run.sh")))return Z;let J=aE(Z);if(J===Z)break;Z=J}return wZ(Ln,"..","..","..")}function cK(Z){let $=Z;for(let J=0;J<6;J++){if(UM(wZ($,"VERSION"))&&UM(wZ($,"autonomy/run.sh")))return $;let X=aE($);if(X===$)break;$=X}return wZ(Z,"..","..","..")}function BM(Z){return process.env.LOKI_DIR??wZ(Z,".loki")}function D0(){return BM(process.cwd())}function T2(){return wZ(eh0(),".loki")}var Ln,F0;var s0=S(()=>{Ln=aE(th0(import.meta.url));F0=Zf0()});import{readFileSync as $f0}from"fs";import{resolve as Jf0,dirname as Xf0}from"path";import{fileURLToPath as Yf0}from"url";function O6(){if(f1!==null)return f1;let Z="11.69.1";if(typeof Z==="string"&&Z.length>0)return f1=Z,f1;try{let $=Xf0(Yf0(import.meta.url)),J=cK($);f1=$f0(Jf0(J,"VERSION"),"utf-8").trim()}catch{f1="unknown"}return f1}var f1=null;var _Z=S(()=>{s0()});import{mkdirSync as oE,readFileSync as NM,realpathSync as Qf0,statSync as zf0,writeFileSync as nE}from"fs";import{dirname as MY,join as iE,resolve as Cn}from"path";function Hf0(){return Cn(T2(),"cache","update-check.json")}function xZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function dK(Z,$){let J=xZ(Z),X=xZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Fn(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function In(Z){try{let $=NM(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&xZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function qf0(Z){try{let $=JSON.parse(NM(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Uf0(Z,$){let J=In(Z);try{oE(MY(Z),{recursive:!0}),nE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Bf0(Z,$){try{oE(MY(Z),{recursive:!0}),nE(Z,JSON.stringify($),"utf-8")}catch{}}async function Nf0(){try{let Z=await fetch(Wf0,{signal:AbortSignal.timeout(Vf0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&xZ($.version)!==null)return $.version}catch{}return null}async function Mf0(Z=Date.now(),$=Nf0,J=Hf0()){let X=In(J);if(X&&Z-X.checkedAt<Kf0)return X.latest;let Y=qf0(J);if(Y!==null&&Z-Y>=0&&Z-Y<Gf0)return null;let Q=await $();if(Q===null)return Uf0(J,Z),null;return Bf0(J,{checkedAt:Z,latest:Q}),Q}function Of0(Z,$=process.env){if(xZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=iE(Q,"loki"),W;try{zf0(z),W=Qf0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=iE(MY(MY(W)),"package.json"),V=JSON.parse(NM(K,"utf8")).version;if(typeof V!=="string")continue;if(dK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Af0(){return Cn(T2(),"cache","last-seen-version.json")}function Lf0(Z,$={}){try{if(Fn())return!1;if(xZ(Z)===null)return!1;let J=$.seenFile??Af0(),X=null;try{let Q=JSON.parse(NM(J,"utf-8")).version;if(typeof Q==="string"&&xZ(Q)!==null)X=Q}catch{}if(X!==null&&!dK(Z,X))return!1;try{oE(MY(J),{recursive:!0}),nE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
+var ch0=Object.create;var{getPrototypeOf:dh0,defineProperty:pK,getOwnPropertyNames:Mn,getOwnPropertyDescriptor:lh0}=Object,On=Object.prototype.hasOwnProperty;function An(Z){return this[Z]}var ah0,ih0,oh0=(Z,$,J)=>{var X=Z!=null&&typeof Z==="object";if(X){var Y=$?ah0??=new WeakMap:ih0??=new WeakMap,Q=Y.get(Z);if(Q)return Q}J=Z!=null?ch0(dh0(Z)):{};let z=$||!Z||!Z.__esModule?pK(J,"default",{value:Z,enumerable:!0}):J;for(let W of Mn(Z))if(!On.call(z,W))pK(z,W,{get:An.bind(Z,W),enumerable:!0});if(X)Y.set(Z,z);return z},nh0=(Z)=>{var $=(Nn??=new WeakMap).get(Z),J;if($)return $;if($=pK({},"__esModule",{value:!0}),Z&&typeof Z==="object"||typeof Z==="function"){for(var X of Mn(Z))if(!On.call($,X))pK($,X,{get:An.bind(Z,X),enumerable:!(J=lh0(Z,X))||J.enumerable})}return Nn.set(Z,$),$},Nn,qM=(Z,$)=>()=>($||Z(($={exports:{}}).exports,$),$.exports);var sh0=(Z)=>Z;function rh0(Z,$){this[Z]=sh0.bind(null,$)}var j0=(Z,$)=>{for(var J in $)pK(Z,J,{get:$[J],enumerable:!0,configurable:!0,set:rh0.bind($,J)})};var S=(Z,$)=>()=>(Z&&($=Z(Z=0)),$);var e9=import.meta.require;var jn={};j0(jn,{lokiDirFor:()=>BM,lokiDir:()=>D0,homeLokiDir:()=>T2,findRepoRootForVersion:()=>cK,REPO_ROOT:()=>F0});import{resolve as wZ,dirname as aE}from"path";import{fileURLToPath as th0}from"url";import{existsSync as UM}from"fs";import{homedir as eh0}from"os";function Zf0(){let Z=Ln;for(let $=0;$<6;$++){if(UM(wZ(Z,"VERSION"))&&UM(wZ(Z,"autonomy/run.sh")))return Z;let J=aE(Z);if(J===Z)break;Z=J}return wZ(Ln,"..","..","..")}function cK(Z){let $=Z;for(let J=0;J<6;J++){if(UM(wZ($,"VERSION"))&&UM(wZ($,"autonomy/run.sh")))return $;let X=aE($);if(X===$)break;$=X}return wZ(Z,"..","..","..")}function BM(Z){return process.env.LOKI_DIR??wZ(Z,".loki")}function D0(){return BM(process.cwd())}function T2(){return wZ(eh0(),".loki")}var Ln,F0;var s0=S(()=>{Ln=aE(th0(import.meta.url));F0=Zf0()});import{readFileSync as $f0}from"fs";import{resolve as Jf0,dirname as Xf0}from"path";import{fileURLToPath as Yf0}from"url";function O6(){if(f1!==null)return f1;let Z="11.70.0";if(typeof Z==="string"&&Z.length>0)return f1=Z,f1;try{let $=Xf0(Yf0(import.meta.url)),J=cK($);f1=$f0(Jf0(J,"VERSION"),"utf-8").trim()}catch{f1="unknown"}return f1}var f1=null;var _Z=S(()=>{s0()});import{mkdirSync as oE,readFileSync as NM,realpathSync as Qf0,statSync as zf0,writeFileSync as nE}from"fs";import{dirname as MY,join as iE,resolve as Cn}from"path";function Hf0(){return Cn(T2(),"cache","update-check.json")}function xZ(Z){let $=/^(\d+)\.(\d+)\.(\d+)$/.exec(Z.trim());if(!$)return null;return[Number($[1]),Number($[2]),Number($[3])]}function dK(Z,$){let J=xZ(Z),X=xZ($);if(!J||!X)return!1;let[Y,Q,z]=J,[W,K,V]=X;if(Y!==W)return Y>W;if(Q!==K)return Q>K;return z>V}function Fn(){let Z=(process.env.LOKI_NO_UPDATE_CHECK??"").trim().toLowerCase();if(Z==="1"||Z==="true"||Z==="yes")return!0;if(process.env.CI)return!0;if(!process.stdout.isTTY)return!0;return!1}function In(Z){try{let $=NM(Z,"utf-8"),J=JSON.parse($);if(typeof J.checkedAt==="number"&&typeof J.latest==="string"&&xZ(J.latest)!==null)return{checkedAt:J.checkedAt,latest:J.latest}}catch{}return null}function qf0(Z){try{let $=JSON.parse(NM(Z,"utf-8")).failedAt;if(typeof $==="number")return $}catch{}return null}function Uf0(Z,$){let J=In(Z);try{oE(MY(Z),{recursive:!0}),nE(Z,JSON.stringify({...J??{},failedAt:$}),"utf-8")}catch{}}function Bf0(Z,$){try{oE(MY(Z),{recursive:!0}),nE(Z,JSON.stringify($),"utf-8")}catch{}}async function Nf0(){try{let Z=await fetch(Wf0,{signal:AbortSignal.timeout(Vf0),headers:{accept:"application/json"}});if(!Z.ok)return null;let $=await Z.json();if(typeof $.version==="string"&&xZ($.version)!==null)return $.version}catch{}return null}async function Mf0(Z=Date.now(),$=Nf0,J=Hf0()){let X=In(J);if(X&&Z-X.checkedAt<Kf0)return X.latest;let Y=qf0(J);if(Y!==null&&Z-Y>=0&&Z-Y<Gf0)return null;let Q=await $();if(Q===null)return Uf0(J,Z),null;return Bf0(J,{checkedAt:Z,latest:Q}),Q}function Of0(Z,$=process.env){if(xZ(Z)===null)return null;let X=$.PATH;if(!X)return null;let Y=new Set;for(let Q of X.split(":")){if(!Q)continue;let z=iE(Q,"loki"),W;try{zf0(z),W=Qf0(z)}catch{continue}if(Y.has(W))continue;Y.add(W);try{let K=iE(MY(MY(W)),"package.json"),V=JSON.parse(NM(K,"utf8")).version;if(typeof V!=="string")continue;if(dK(V,Z))return{path:z,version:V}}catch{continue}}return null}function Af0(){return Cn(T2(),"cache","last-seen-version.json")}function Lf0(Z,$={}){try{if(Fn())return!1;if(xZ(Z)===null)return!1;let J=$.seenFile??Af0(),X=null;try{let Q=JSON.parse(NM(J,"utf-8")).version;if(typeof Q==="string"&&xZ(Q)!==null)X=Q}catch{}if(X!==null&&!dK(Z,X))return!1;try{oE(MY(J),{recursive:!0}),nE(J,JSON.stringify({version:Z}),"utf-8")}catch{return!1}if(X===null)return!1;return($.write??((Q)=>process.stderr.write(Q)))(`Loki Mode upgraded ${X} -> ${Z}. What is new: https://github.com/asklokesh/loki-mode/releases/tag/v${Z}
 `),!0}catch{return!1}}function jf0(Z){let $=Z.replace(/\\/g,"/");if($.includes("/Cellar/"))return"brew upgrade loki-mode";if(/\/pnpm\//.test($)||$.includes("/.pnpm/"))return"pnpm add -g loki-mode  (or npm i -g loki-mode)";if($.includes("/yarn/global/")||$.includes("/.yarn/"))return"yarn global add loki-mode  (or npm i -g loki-mode)";if($.includes("/.bun/"))return"bun install -g loki-mode  (or npm i -g loki-mode)";if($.includes("/lib/node_modules/"))return"npm i -g loki-mode  (or bun install -g loki-mode)";if($.includes("/homebrew/"))return"brew upgrade loki-mode";return"bun install -g loki-mode  (or npm i -g loki-mode)"}async function Tn(Z,$={}){try{if(Fn())return;if(xZ(Z)===null)return;let J=$.write??((Q)=>process.stderr.write(Q));Lf0(Z,{write:J,...$.cacheFile?{seenFile:iE(MY($.cacheFile),"last-seen-version.json")}:{}});let X=Of0(Z,$.env??process.env);if(X!==null){J(`Loki Mode ${X.version} is installed but not the one running (you are running ${Z}).
   Another loki earlier on PATH is winning. Newer copy: ${X.path}
   Run \`which -a loki\` to see the order, then remove or re-point the earlier entry.
@@ -3307,4 +3307,4 @@ Unknown commands exit 2 with a suggestion; run 'loki help' for the full list.
 `);{let{suggestCommand:X}=await Promise.resolve().then(() => (W7(),Ys)),Y=$===void 0?void 0:X($);if(Y)process.stderr.write(`Did you mean 'loki ${Y}'?
 `)}return process.stderr.write(vh0),2}}AT0();var hh0=()=>globalThis[Symbol.for("loki.ownsStopSignals")]===!0;process.on("SIGINT",()=>{if(!hh0())process.exit(130)});process.on("SIGTERM",()=>{if(!hh0())process.exit(143)});var TM9=await IM9(Bun.argv.slice(2));process.exit(TM9);
 
-//# debugId=DAFC53AD1017703BFF9B82DD12811830
+//# debugId=AF862D650A323CA44BB592AEDC2434A2

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '11.69.1'
+__version__ = '11.70.0'

package/mcp/requirements.txt

@@ -2,8 +2,9 @@
 # Phase N (v7.5.27): added upper bounds to cap risk of a future major-version
 # break installing on a fresh `pip install`. Tested locally against the upper
 # end of the installed range on this Mac:
-#   mcp 1.27.0, chromadb 1.5.1, anthropic 0.40+
+#   mcp 1.27.0, chromadb 1.5.1, anthropic 2.2.0
 # Update upper bound when a new tested major drops.
+# anthropic is pinned exactly: 2.x requires Python >=3.10 and API version 2026-10-21.
 mcp>=1.19.0,<2.0.0
 chromadb>=1.5.9,<2.0.0
-anthropic>=0.40,<1.0.0
+anthropic==2.2.0

package/memory/managed_memory/client.py

@@ -93,6 +93,19 @@ class ManagedClient:
             raise ManagedDisabled("anthropic SDK missing `beta` namespace")
         return beta
 
+    def _memories(self):
+        """Return (namespace, id_kwarg) for the memories resource.
+
+        SDK 2.x nests it at `beta.memory_stores.memories` and names the store
+        argument `memory_store_id`. Older/preview shapes (and test fakes) expose
+        `beta.memories` with `store_id`.
+        """
+        beta = self._beta()
+        nested = getattr(getattr(beta, "memory_stores", None), "memories", None)
+        if nested is not None:
+            return nested, "memory_store_id"
+        return getattr(beta, "memories", None), "store_id"
+
     # ---------- stores --------------------------------------------------
 
     def stores_list(self) -> List[Dict[str, Any]]:
@@ -123,7 +136,15 @@ class ManagedClient:
         if stores is None or not hasattr(stores, "create"):
             raise ManagedDisabled("memory_stores.create not available in SDK")
         try:
-            created = stores.create(name=name, description=description, scope=scope)
+            if hasattr(stores, "memories"):
+                # SDK 2.x create() has no `scope` argument; carry it as metadata.
+                created = stores.create(
+                    name=name, description=description, metadata={"scope": scope}
+                )
+            else:
+                created = stores.create(
+                    name=name, description=description, scope=scope
+                )
         except ManagedDisabled:
             raise
         except Exception as e:
@@ -132,6 +153,11 @@ class ManagedClient:
 
     # ---------- memories ------------------------------------------------
 
+    @staticmethod
+    def _abs(path: str) -> str:
+        """Memory paths are absolute in SDK 2.x: they must start with "/"."""
+        return path if path.startswith("/") else "/" + path
+
     def memory_create(
         self,
         store_id: str,
@@ -142,37 +168,71 @@ class ManagedClient:
         """
         Create a memory entry at `path` in `store_id`.
 
-        When sha256_precondition is supplied, this is an optimistic
-        concurrency hint: if the store already holds a different hash the
-        SDK is expected to surface a 409-shaped error. Callers handle the
-        409 by re-reading, merging, and retrying once.
+        SDK 2.x paths are unique per store and create() has no precondition:
+        creating an existing path raises a 409-shaped error, which callers
+        handle by re-reading, merging, and calling memory_update with the
+        stored content hash. The legacy shape (and test fakes) still accept
+        `sha256_precondition` as an optimistic concurrency hint.
         """
-        beta = self._beta()
-        memories = getattr(beta, "memories", None)
+        memories, id_kw = self._memories()
         if memories is None or not hasattr(memories, "create"):
             raise ManagedDisabled("memories.create not available in SDK")
         kwargs: Dict[str, Any] = {
-            "store_id": store_id,
-            "path": path,
+            id_kw: store_id,
+            "path": self._abs(path),
             "content": content,
         }
-        if sha256_precondition:
+        if sha256_precondition and id_kw == "store_id":
             kwargs["if_match_sha256"] = sha256_precondition
         try:
             created = memories.create(**kwargs)
         except ManagedDisabled:
             raise
         except Exception as e:
+            if getattr(e, "status_code", None) == 409:
+                # Keep the 409 visible so the caller can merge and update.
+                raise
             raise ManagedDisabled(f"memory_create failed: {e!s}") from e
         return self._to_dict(created)
 
+    def memory_update(
+        self,
+        store_id: str,
+        memory_id: str,
+        content: str,
+        sha256_precondition: str,
+    ) -> Dict[str, Any]:
+        """
+        Overwrite an existing memory. `sha256_precondition` must be the
+        content_sha256 of the content currently stored (not of the new
+        content); the server answers 409 if the memory changed since.
+        """
+        memories, id_kw = self._memories()
+        if memories is None or not hasattr(memories, "update"):
+            raise ManagedDisabled("memories.update not available in SDK")
+        try:
+            updated = memories.update(
+                memory_id,
+                **{id_kw: store_id},
+                content=content,
+                precondition={
+                    "type": "content_sha256",
+                    "content_sha256": sha256_precondition,
+                },
+            )
+        except ManagedDisabled:
+            raise
+        except Exception as e:
+            raise ManagedDisabled(f"memory_update failed: {e!s}") from e
+        return self._to_dict(updated)
+
     def memory_read(self, store_id: str, memory_id: str) -> Dict[str, Any]:
-        beta = self._beta()
-        memories = getattr(beta, "memories", None)
+        memories, id_kw = self._memories()
         if memories is None or not hasattr(memories, "retrieve"):
             raise ManagedDisabled("memories.retrieve not available in SDK")
         try:
-            got = memories.retrieve(store_id=store_id, memory_id=memory_id)
+            extra = {"view": "full"} if id_kw == "memory_store_id" else {}
+            got = memories.retrieve(**{id_kw: store_id}, memory_id=memory_id, **extra)
         except ManagedDisabled:
             raise
         except Exception as e:
@@ -182,21 +242,41 @@ class ManagedClient:
     def memories_list(
         self, store_id: str, path_prefix: Optional[str] = None
     ) -> List[Dict[str, Any]]:
-        beta = self._beta()
-        memories = getattr(beta, "memories", None)
+        """
+        List memories under `path_prefix`, content included.
+
+        SDK 2.x defaults to the basic view (content null) and pages at most
+        20 items, so request view="full" and follow the cursor until it ends.
+        Prefix rows (type "memory_prefix") are not memories and are dropped.
+        """
+        memories, id_kw = self._memories()
         if memories is None or not hasattr(memories, "list"):
             raise ManagedDisabled("memories.list not available in SDK")
-        kwargs: Dict[str, Any] = {"store_id": store_id}
+        kwargs: Dict[str, Any] = {id_kw: store_id}
         if path_prefix:
-            kwargs["path_prefix"] = path_prefix
+            kwargs["path_prefix"] = self._abs(path_prefix)
+        paged = id_kw == "memory_store_id"
+        if paged:
+            kwargs["view"] = "full"
+        rows: List[Dict[str, Any]] = []
+        seen_pages = set()
         try:
-            result = memories.list(**kwargs)
+            while True:
+                result = memories.list(**kwargs)
+                data = getattr(result, "data", result)
+                rows.extend(self._to_dict(x) for x in (data or []))
+                nxt = getattr(result, "next_page", None) if paged else None
+                if not nxt:
+                    break
+                if nxt in seen_pages:
+                    raise ManagedDisabled("memories.list cursor did not advance")
+                seen_pages.add(nxt)
+                kwargs["page"] = nxt
         except ManagedDisabled:
             raise
         except Exception as e:
             raise ManagedDisabled(f"memories_list failed: {e!s}") from e
-        data = getattr(result, "data", result)
-        return [self._to_dict(x) for x in (data or [])]
+        return [r for r in rows if r.get("type", "memory") == "memory"]
 
     # ---------- internal ------------------------------------------------
 

package/memory/managed_memory/fakes.py

@@ -15,7 +15,7 @@ from typing import Any, Dict, List, Optional
 
 
 class _Conflict(Exception):
-    """Simulated 409 raised by memory_create on sha256 mismatch."""
+    """Simulated 409: existing path on create, or stale sha on update."""
 
     status_code = 409
 
@@ -69,28 +69,59 @@ class FakeManagedClient:
                 "sha256_precondition": sha256_precondition,
             }
         )
+        # SDK 2.x semantics: paths are unique per store and absolute, and
+        # create() has no precondition, so an existing path is a 409.
         key = (store_id, path)
+        if not path.startswith("/"):
+            raise ValueError(f"memory path must start with '/': {path}")
+        if key in self.memories:
+            raise _Conflict(f"path already exists: {path}")
         sha = hashlib.sha256(content.encode("utf-8")).hexdigest()
-        existing = self.memories.get(key)
-        if existing is not None and sha256_precondition is not None:
-            if existing["sha"] != sha256_precondition:
-                # Simulated 409: caller must re-read + merge + retry.
-                raise _Conflict(
-                    f"sha256 mismatch for {path}: "
-                    f"have={existing['sha']}, want={sha256_precondition}"
-                )
-        version = (existing.get("version", 0) + 1) if existing else 1
         entry = {
             "id": f"mem_{abs(hash(key)) % 10**8:08d}",
+            "type": "memory",
             "store_id": store_id,
             "path": path,
             "content": content,
             "sha": sha,
-            "version": version,
+            "content_sha256": sha,
+            "version": 1,
         }
         self.memories[key] = entry
         return entry
 
+    def memory_update(
+        self,
+        store_id: str,
+        memory_id: str,
+        content: str,
+        sha256_precondition: str,
+    ) -> Dict[str, Any]:
+        self.calls.append(
+            {
+                "op": "memory_update",
+                "store_id": store_id,
+                "memory_id": memory_id,
+                "sha256_precondition": sha256_precondition,
+            }
+        )
+        for key, entry in self.memories.items():
+            if key[0] == store_id and entry["id"] == memory_id:
+                if entry["sha"] != sha256_precondition:
+                    raise _Conflict(
+                        f"content_sha256 mismatch for {entry['path']}: "
+                        f"have={entry['sha']}, want={sha256_precondition}"
+                    )
+                sha = hashlib.sha256(content.encode("utf-8")).hexdigest()
+                entry.update(
+                    content=content,
+                    sha=sha,
+                    content_sha256=sha,
+                    version=entry["version"] + 1,
+                )
+                return entry
+        raise KeyError(memory_id)
+
     def memory_read(self, store_id: str, memory_id: str) -> Dict[str, Any]:
         self.calls.append({"op": "memory_read", "memory_id": memory_id})
         for entry in self.memories.values():

package/memory/managed_memory/retrieve.py

@@ -105,7 +105,7 @@ def retrieve_related_verdicts(
             store_id = store.get("id") or store.get("store_id")
         if not store_id:
             return []
-        entries = client.memories_list(store_id=store_id, path_prefix="verdicts/")
+        entries = client.memories_list(store_id=store_id, path_prefix="/verdicts/")
     except Exception as e:
         _warn_once(f"memories_list failed ({e}); returning empty")
         emit_managed_event(
@@ -192,7 +192,7 @@ def hydrate_patterns(
         store_id = store.get("id") or store.get("store_id")
         if not store_id:
             return 0
-        entries = client.memories_list(store_id=store_id, path_prefix="patterns/")
+        entries = client.memories_list(store_id=store_id, path_prefix="/patterns/")
     except Exception as e:
         emit_managed_event(
             "managed_agents_fallback",
@@ -329,7 +329,7 @@ def hydrate_skills(
         store_id = store.get("id") or store.get("store_id")
         if not store_id:
             return 0
-        entries = client.memories_list(store_id=store_id, path_prefix="skills/")
+        entries = client.memories_list(store_id=store_id, path_prefix="/skills/")
     except Exception as e:
         emit_managed_event(
             "managed_agents_fallback",

package/memory/managed_memory/shadow_write.py

@@ -137,7 +137,6 @@ def _shadow_write_blob(
             store_id=store_id,
             path=logical_path,
             content=content,
-            sha256_precondition=sha,
         )
         emit_managed_event(
             "managed_memory_shadow_write",
@@ -170,6 +169,11 @@ def _shadow_write_blob(
                     else None
                 )
                 if existing_entry and existing_sha:
+                    if existing_entry.get("content") is None:
+                        # Merging into unseen content would overwrite it.
+                        raise RuntimeError(
+                            f"stored content for {logical_path} not returned"
+                        )
                     # Simple merge: if existing content already contains a
                     # "versions" list, append; else seed it. We do NOT attempt
                     # semantic merging in Phase 1.
@@ -190,9 +194,9 @@ def _shadow_write_blob(
                     new_sha = compute_sha(merged_content)
                     # Precondition is the sha of the CURRENT remote state that
                     # we just read. The new sha is what the server will store.
-                    client.memory_create(
+                    client.memory_update(
                         store_id=store_id,
-                        path=logical_path,
+                        memory_id=existing_entry["id"],
                         content=merged_content,
                         sha256_precondition=existing_sha,
                     )
@@ -247,7 +251,7 @@ def shadow_write_verdict(verdict_json_path: str) -> bool:
     """
     Read a council verdict JSON from disk and shadow-write it.
 
-    The logical remote path is `verdicts/<iteration>.json`. If the file is
+    The logical remote path is `/verdicts/<iteration>.json`. If the file is
     missing or unreadable, the call is a no-op. Never raises.
     """
     if not is_enabled():
@@ -260,14 +264,14 @@ def shadow_write_verdict(verdict_json_path: str) -> bool:
         )
         return False
     iteration = payload.get("iteration") or payload.get("round") or "unknown"
-    logical = f"verdicts/iteration-{iteration}.json"
+    logical = f"/verdicts/iteration-{iteration}.json"
     return _shadow_write_blob(logical, payload, kind="verdict")
 
 
 def shadow_write_pattern(pattern: Dict[str, Any]) -> bool:
     """
     Shadow-write a SemanticPattern-shaped dict. Logical path is
-    `patterns/<pattern_id>.json`. Never raises.
+    `/patterns/<pattern_id>.json`. Never raises.
     """
     if not is_enabled():
         return False
@@ -278,14 +282,14 @@ def shadow_write_pattern(pattern: Dict[str, Any]) -> bool:
         )
         return False
     pid = pattern.get("pattern_id") or pattern.get("id") or "unknown"
-    logical = f"patterns/{pid}.json"
+    logical = f"/patterns/{pid}.json"
     return _shadow_write_blob(logical, pattern, kind="pattern")
 
 
 def shadow_write_episode(episode_path: str) -> bool:
     """
     Shadow-write a high-importance episode trace JSON. Logical path is
-    `episodes/<episode_id>.json`. Called from autonomy/run.sh's
+    `/episodes/<episode_id>.json`. Called from autonomy/run.sh's
     auto_capture_episode ONLY when importance >= 0.6. Never raises.
     """
     if not is_enabled():
@@ -298,7 +302,7 @@ def shadow_write_episode(episode_path: str) -> bool:
         )
         return False
     eid = payload.get("id") or payload.get("task_id") or Path(episode_path).stem
-    logical = f"episodes/{eid}.json"
+    logical = f"/episodes/{eid}.json"
     return _shadow_write_blob(logical, payload, kind="episode")
 
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "11.69.1",
+  "version": "11.70.0",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",
@@ -160,5 +160,5 @@
   "dependencies": {
     "@resvg/resvg-wasm": "^2.6.2"
   },
-  "gitHead": "ecd44795dcb33f5af1552bb23a9d925e575f86b9"
+  "gitHead": "6d57e1f3614ac584eaf7cfd78c80c6965481cd4e"
 }

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.69.1",
+  "version": "11.70.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",