loki-mode 11.9.1 → 11.10.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.9.1
+# Loki Mode v11.10.1
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.9.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.10.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.9.1
+11.10.1

package/autonomy/lib/backlog.py

@@ -196,7 +196,7 @@ def load_dag(path, group):
             raise ValueError("unit %s task text starts with '-' and would be read as an option" % uid)
         units.append({"n": n, "id": uid, "deps": deps[uid], "write_set": list(u.get("writeSet") or []),
                       "task": task, "done": u.get("done") is True,
-                      "base": str(u["base"]) if re.match(r"^[0-9a-f]{7,64}$", str(u.get("base") or "")) else "",
+                      "base": str(u.get("base") or ""),
                       "spec": u["spec"] if isinstance(u.get("spec"), str) and os.path.isabs(u["spec"]) else ""})
     return group, units
 
@@ -266,6 +266,17 @@ def main(argv):
         return die("this checkout's origin is %r, not %s; cd into a checkout of %s"
                    % (origin_slug(top) or "unknown", a.repo, a.repo))
 
+    for u in dag_units:
+        b = u["base"]
+        if not b or re.match(r"^[0-9a-f]{7,64}$", b):
+            continue
+        # A ref-name base is resolved to a SHA; an unresolvable one fails loudly, never falls back to origin/HEAD.
+        r = git("rev-parse", "--verify", "-q", "--end-of-options", b + "^{commit}", cwd=top) if not b.startswith("-") else None
+        sha = r.stdout.strip() if r is not None and r.returncode == 0 else ""
+        if not re.match(r"^[0-9a-f]{40,64}$", sha):
+            return die("unit %s base %r is not a commit SHA or a resolvable ref" % (u["id"], b))
+        u["base"] = sha
+
     try:
         issues = ([{"number": n, "title": ""} for n in numbers] if numbers
                   else list_issues(a.repo, a.label, env) if (a.all or a.label) else [])

package/autonomy/loki

@@ -11075,6 +11075,7 @@ cmd_run() {
                 echo "  --sandbox          Run in Docker sandbox (default: off; requires Docker)"
                 echo "  --no-plan          Skip auto-shown PRD analysis at startup"
                 echo "  --budget USD       Per-run cost cap (default $(loki_budget_default_usd))"
+                echo "  --brief-text TEXT  (internal) set by 'loki start --brief'; not for direct use"
                 echo ""
                 echo "Progressive Isolation:"
                 echo "  --worktree, -w     Git worktree isolation (separate branch)"
@@ -11491,7 +11492,8 @@ fi
 if [[ "$LOKI_AUTO_MERGE" == "true" ]]; then
     branch_current=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
     if gh pr merge "$branch_current" --squash --delete-branch 2>/dev/null; then
-        if [[ -n "${LOKI_ISSUE_NUMBER:-}" ]]; then
+        # A brief run carries a synthetic ref (b<epoch>), not a real issue: close only numeric refs.
+        if [[ "${LOKI_ISSUE_NUMBER:-}" =~ ^[0-9]+$ ]]; then
             gh issue close "$LOKI_ISSUE_NUMBER" --comment "Resolved by Loki Mode" 2>/dev/null || true
         fi
     fi
@@ -11738,7 +11740,7 @@ ${_gh_receipt}"
         if $auto_merge; then
             echo -e "${GREEN}Auto-merging...${NC}"
             case "${issue_provider:-github}" in
-                github)
+                github|brief)
                     local branch_current
                     branch_current=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
                     if gh pr merge "$branch_current" --squash --delete-branch 2>/dev/null; then

package/autonomy/trigger-server.py

@@ -748,6 +748,27 @@ def verify_teams_signature(token, body, authorization):
     return constant_time_equals(expected, value.strip())
 
 
+def teams_dedup_key(activity):
+    """Dedup key for a Teams activity: activity ids are unique only within a
+    conversation, so scope by conversation id plus serviceUrl and tenant when
+    present. Empty string (never deduplicated) when the activity id is absent."""
+    act_id = activity.get("id")
+    if not isinstance(act_id, str) or not act_id:
+        return ""
+
+    def _s(v):
+        return v if isinstance(v, str) else ""
+
+    conv = activity.get("conversation")
+    conv = conv if isinstance(conv, dict) else {}
+    cdata = activity.get("channelData")
+    tenant = cdata.get("tenant") if isinstance(cdata, dict) else None
+    tenant_id = _s(tenant.get("id")) if isinstance(tenant, dict) else ""
+    tenant_id = tenant_id or _s(conv.get("tenantId"))
+    return "teams:" + json.dumps(
+        [_s(conv.get("id")), _s(activity.get("serviceUrl")), tenant_id, act_id])
+
+
 def teams_fresh(activity, now=None):
     """The activity's ISO-8601 `timestamp` must be within the skew window."""
     raw = activity.get("timestamp")
@@ -1794,8 +1815,7 @@ class WebhookHandler(http.server.BaseHTTPRequestHandler):
                                   "text": "Usage: @loki <brief>. One-line brief, "
                                           "not starting with '-'."})
             return
-        act_id = activity.get("id")
-        if self.dispatcher.seen_delivery(act_id if isinstance(act_id, str) else ""):
+        if self.dispatcher.seen_delivery(teams_dedup_key(activity)):
             self._send_json(200, {"type": "message", "text": "Duplicate, already queued."})
             return
         job_id = self._enqueue_job(brief, pr=True)

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.9.1"
+__version__ = "11.10.1"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.9.1. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.10.1. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/v10/CLI-MODERN.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.9.1
+**Version:** v11.10.1
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).
 

package/docs/v10/PROGRESS.md

@@ -2359,3 +2359,15 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - v11.9.0 (b46960893): Tests run 38811268755 and Release 38811268450 failed: python test_trigger_server_hardening BriefPr test assumed a host provider CLI; bun static shape (engine10 outside the cli.ts arm, from ESTIMATE-ONE) and its E-12 shell twin; bun L0 guard (runner_config probes unlisted, two stale verify.ts rows); DOC-02 (docs/sentry-intake.md:56 named `loki job`). Not published; npm next stays 11.8.1.
 - Fix c42d7fd22 (TL review APPROVE: 140 pass 0 fail plus 26 pass 0 fail on a git-archive copy), merged 9da6e2772.
 - Guards on 9da6e2772 after dist rebuild (build rc=0): help-changelog-drift, sigpipe-guard, help-and-log-cap, ci-only-divergence, platform-infra, engine10-dispatch, docs-cli-drift, structural-checks all rc=0; pytest test_trigger_server_hardening 70 passed; bun budget, l2_destructive_registry, fc25, spawn_env, start_flag_parity, l0_guard, cli static shape 57 pass 0 fail.
+
+## 2026-10-15T22:17Z (CoS) v11.10.0 train merged, release pending
+- 11.9.1 (9d64d1461): Release and Tests completed/success; npm next=11.9.1, latest=11.8.1; GitHub release body set.
+- Merged into main with --no-ff (workflow wf_2c49533d-407, all reviews APPROVE): BRIEF-SHIP-FIX fb08048ef (a5f19f4c9), TEAMS-DEDUP ae7c8a7e5 (81d06e674), BASE-AND-SUBDIR 21f7d2581 (f02699857), A-112b bfd6b98d8 (b4e63c1ff), S41-13 e3607718c after rework (eb6c8d762; dist conflict resolved by rebuild, build rc=0).
+- Not shipped: M-15 (Opus BLOCK at unit.ts:164, symlinked conftest.py reaches PROVEN); round 3 rework in workflow wf_1d55d32c-a65. M-17..M-29 and G-05 stay blocked on it.
+- Advisory to card: TEAMS-DEDUP collision test is toothless; use conv='a|b',svc='c' against conv='a',svc='b|c'.
+- Guards on eb6c8d762: structural-checks and bun budget failed (core engine10 5000 >= 5000; A-112b split the verify.ts git helper over three lines). Folded it back to one line, no behaviour change. After dist rebuild (build rc=0): help-changelog-drift, sigpipe-guard, help-and-log-cap, ci-only-divergence, platform-infra, engine10-dispatch, docs-cli-drift, structural-checks all rc=0; pytest test_trigger_server_hardening 74 passed; bun budget, l2_destructive_registry, l0_guard, fc25, spawn_env, start_flag_parity, cli static shape, attempts, implement, verify 131 pass 0 fail.
+
+## 2026-10-15T22:37Z (CoS) v11.10.0 failed CI, v11.10.1 fix-forward
+- v11.10.0 (58344ed27): Tests run 38816323342 and Release failed: bun route_matrix_mutation B3 and B6 (anchor "let session = await ctx.sessions.run(first);" no longer exists after S41-13, so the mutations were not applied). Not published; npm next stays 11.9.1.
+- Fix: anchor updated to the S41-13 line in loki-ts/tests/engine10/route_matrix_mutation.test.ts (33 pass 0 fail); bun test tests/engine10 2037 pass 0 fail 1 skip.
+- M-15 round 4 (1c9a5e56a) Opus BLOCK: case-insensitive Conftest.py and symlinks under SKIP_DIRS; round 5 (class fixes) in flight.