loki-mode 11.90.0 → 11.92.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.90.0
+# Loki Mode v11.92.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -475,4 +475,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.90.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.92.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.90.0
+11.92.0

package/autonomy/completion-council.sh

@@ -3268,6 +3268,13 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                 # out of scope when this file is sourced standalone, so each is
                 # type-guarded (degrades to the prior bare invocation).
                 local _cm_argv=("--model" "$council_model")
+                local _cm_shell
+                _cm_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _cm_shell=""
+                [ -n "$_cm_shell" ] || _cm_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _cm_argv+=("--bare")
                 fi
@@ -3299,7 +3306,7 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                 # required safe default. pipefail (run.sh:172) makes the assignment's
                 # $? equal timeout's 124 when the CLI is killed. _provider_rc is read
                 # after the case to force a conservative REJECT on timeout.
-                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null)
+                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env "SHELL=$_cm_shell" CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null)
                 _provider_rc=$?
             fi
             ;;
@@ -3476,6 +3483,13 @@ REASON: one-line justification citing path:line evidence"
                 # reviewer must never mutate the tree). Gated + opt-out
                 # LOKI_BARE_SUBCALLS=0 / LOKI_REVIEW_TOOL_GUARD=0; type-guarded.
                 local _co_argv=("--model" "$council_model")
+                local _co_shell
+                _co_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _co_shell=""
+                [ -n "$_co_shell" ] || _co_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _co_argv+=("--bare")
                 fi
@@ -3491,7 +3505,7 @@ REASON: one-line justification citing path:line evidence"
                 # bash-F3: timeout-guard the devil's-advocate subcall (same 600s
                 # default as the member subcalls / Bun council.ts). An empty
                 # verdict on timeout hits the conservative REJECT fallback below.
-                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null)
+                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env "SHELL=$_co_shell" CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null)
             fi
             ;;
         codex)

package/autonomy/council-v2.sh

@@ -426,6 +426,14 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                 # opt-out LOKI_BARE_SUBCALLS=0 / LOKI_REVIEW_TOOL_GUARD=0;
                 # type-guarded for standalone sourcing.
                 local _c2_argv=("--model" "${_c2_agent_model:-haiku}")
+                # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+                local _c2_shell
+                _c2_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _c2_shell=""
+                [ -n "$_c2_shell" ] || _c2_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _c2_argv+=("--bare")
                 fi
@@ -458,7 +466,7 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                     local _c2_schema_content _c2_json
                     _c2_schema_content="$(cat "$_c2_schema" 2>/dev/null)" || _c2_schema_content=""
                     if [ -n "$_c2_schema_content" ]; then
-                        _c2_json="$(echo "$full_prompt" | CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p \
+                        _c2_json="$(echo "$full_prompt" | SHELL="$_c2_shell" CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p \
                             --json-schema "$_c2_schema_content" --output-format json 2>/dev/null)" || _c2_json=""
                         if [ -n "$_c2_json" ]; then
                             # Pull the schema-validated object out of the envelope.
@@ -480,7 +488,7 @@ except Exception:
                 fi
                 # Fall through to the plain text call (+ sed-carve) on any miss.
                 if [ -z "$result" ]; then
-                    result=$(echo "$full_prompt" | CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p 2>/dev/null || echo '{"verdict":"INCONCLUSIVE","justification":"review execution failed (no verdict obtained; NOT a rejection)","issues":[]}')
+                    result=$(echo "$full_prompt" | SHELL="$_c2_shell" CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p 2>/dev/null || echo '{"verdict":"INCONCLUSIVE","justification":"review execution failed (no verdict obtained; NOT a rejection)","issues":[]}')
                 fi
             else
                 result='{"verdict":"INCONCLUSIVE","justification":"reviewer CLI unavailable (no verdict obtained; NOT a rejection)","issues":[]}'

package/autonomy/grill.sh

@@ -251,6 +251,9 @@ grill_invoke_provider() {
             _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
             ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
             local _gr_argv=("${_LOKI_PERM_ARGV[@]}" "--model" "${LOKI_GRILL_MODEL:-sonnet}")
+            # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+            local _gr_shell
+            _gr_shell="$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")"
             # lean child flags (text-only role, no tools/MCP/slash commands) and
             # a ledger line per call via --output-format json (unwrapped below).
             local _gr_lf _gr_ledger=false
@@ -275,7 +278,7 @@ grill_invoke_provider() {
             # (not a bare VAR=val prefix) because the call goes through
             # _grill_with_timeout, where the first token is exec'd as the command.
             out="$(printf '%s' "$prompt" \
-                | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" env CAVEMAN_DEFAULT_MODE=off claude "${_gr_argv[@]}" -p - 2>/dev/null)"
+                | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" env "SHELL=$_gr_shell" CAVEMAN_DEFAULT_MODE=off claude "${_gr_argv[@]}" -p - 2>/dev/null)"
             if [ "$_gr_ledger" = true ] && [ -n "$out" ]; then
                 loki_child_ledger_append "$role" "$out" >/dev/null 2>&1 || true
                 out="$(printf '%s' "$out" | python3 -I -c 'import json,sys

package/autonomy/lib/done-recognition.sh

@@ -141,6 +141,14 @@ _loki_done_recog_invoke() {
         || . "$(dirname "${BASH_SOURCE[0]}")/../../providers/loader.sh" 2>/dev/null
     loki_claude_sidecall_allowed 2>/dev/null || return 1
     command -v claude >/dev/null 2>&1 || return 1
+    # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+    local _dr_shell
+    _dr_shell="$(
+        type _loki_claude_shell_value >/dev/null 2>&1 \
+            || . "$(dirname "${BASH_SOURCE[0]}")/claude-flags.sh" >/dev/null 2>&1 || exit 1
+        _loki_claude_shell_value
+    )" || _dr_shell=""
+    [ -n "$_dr_shell" ] || _dr_shell="${SHELL-}"
 
     # STRUCTURED VERDICT (v8.x): when the CLI supports --json-schema, force valid
     # JSON so parse_object never has to brace-slice prose. --json-schema takes
@@ -160,11 +168,11 @@ _loki_done_recog_invoke() {
             _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
             ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
             if command -v timeout >/dev/null 2>&1; then
-                _dr_json=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
+                _dr_json=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
                     claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" \
                     --json-schema "$_dr_schema_content" --output-format json 2>/dev/null) || _dr_json=""
             else
-                _dr_json=$(CAVEMAN_DEFAULT_MODE=off \
+                _dr_json=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off \
                     claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" \
                     --json-schema "$_dr_schema_content" --output-format json 2>/dev/null) || _dr_json=""
             fi
@@ -197,10 +205,10 @@ except Exception:
     _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
     ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
     if command -v timeout >/dev/null 2>&1; then
-        out=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
+        out=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     else
-        out=$(CAVEMAN_DEFAULT_MODE=off \
+        out=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     fi
     [ "$rc" -ne 0 ] && return 1

package/autonomy/lib/prd-enrich.sh

@@ -101,13 +101,16 @@ _loki_prd_enrich_invoke() {
         _pe_ledger=true
         _pe_argv+=("--output-format" "json")
     fi
+    # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+    local _pe_shell
+    _pe_shell="$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")"
     if command -v timeout >/dev/null 2>&1; then
-        out=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_PRD_ENRICH_TIMEOUT}" \
+        out=$(SHELL="$_pe_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_PRD_ENRICH_TIMEOUT}" \
                   claude "${_pe_argv[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     else
         # No coreutils timeout (e.g. bare macOS). Run without it; the model
         # call is a one-shot and the caller still tolerates failure.
-        out=$(CAVEMAN_DEFAULT_MODE=off \
+        out=$(SHELL="$_pe_shell" CAVEMAN_DEFAULT_MODE=off \
                   claude "${_pe_argv[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     fi
     if [ "$rc" -eq 0 ] && [ "$_pe_ledger" = true ] && [ -n "$out" ]; then

package/autonomy/lib/voter-agents.sh

@@ -401,7 +401,7 @@ loki_council_dispatch_agents() {
         _va_fmt=(--output-format json)
     fi
     response=$(timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" \
-                      env CAVEMAN_DEFAULT_MODE=off claude "${_LOKI_PERM_ARGV[@]}" \
+                      env "SHELL=$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")" CAVEMAN_DEFAULT_MODE=off claude "${_LOKI_PERM_ARGV[@]}" \
                       ${_va_lean[@]+"${_va_lean[@]}"} \
                       ${_va_fmt[@]+"${_va_fmt[@]}"} \
                       -p "$prompt" \