loki-mode 11.91.0 → 11.92.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Runs an autonomous software factory that knows what it is supposed to deliver and proves it did, with a signed receipt. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.91.0
+# Loki Mode v11.92.0
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -475,4 +475,4 @@ Implemented, planned and deprecated items, with the version each landed in: `ski
 
 ---
 
-**v11.91.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.92.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.91.0
+11.92.0

package/autonomy/completion-council.sh

@@ -3268,6 +3268,13 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                 # out of scope when this file is sourced standalone, so each is
                 # type-guarded (degrades to the prior bare invocation).
                 local _cm_argv=("--model" "$council_model")
+                local _cm_shell
+                _cm_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _cm_shell=""
+                [ -n "$_cm_shell" ] || _cm_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _cm_argv+=("--bare")
                 fi
@@ -3299,7 +3306,7 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                 # required safe default. pipefail (run.sh:172) makes the assignment's
                 # $? equal timeout's 124 when the CLI is killed. _provider_rc is read
                 # after the case to force a conservative REJECT on timeout.
-                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null)
+                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env "SHELL=$_cm_shell" CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null)
                 _provider_rc=$?
             fi
             ;;
@@ -3476,6 +3483,13 @@ REASON: one-line justification citing path:line evidence"
                 # reviewer must never mutate the tree). Gated + opt-out
                 # LOKI_BARE_SUBCALLS=0 / LOKI_REVIEW_TOOL_GUARD=0; type-guarded.
                 local _co_argv=("--model" "$council_model")
+                local _co_shell
+                _co_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _co_shell=""
+                [ -n "$_co_shell" ] || _co_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _co_argv+=("--bare")
                 fi
@@ -3491,7 +3505,7 @@ REASON: one-line justification citing path:line evidence"
                 # bash-F3: timeout-guard the devil's-advocate subcall (same 600s
                 # default as the member subcalls / Bun council.ts). An empty
                 # verdict on timeout hits the conservative REJECT fallback below.
-                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null)
+                verdict=$(echo "$prompt" | timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" env "SHELL=$_co_shell" CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null)
             fi
             ;;
         codex)

package/autonomy/council-v2.sh

@@ -426,6 +426,14 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                 # opt-out LOKI_BARE_SUBCALLS=0 / LOKI_REVIEW_TOOL_GUARD=0;
                 # type-guarded for standalone sourcing.
                 local _c2_argv=("--model" "${_c2_agent_model:-haiku}")
+                # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+                local _c2_shell
+                _c2_shell="$(
+                    type _loki_claude_shell_value >/dev/null 2>&1 \
+                        || . "${BASH_SOURCE[0]%/*}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+                    _loki_claude_shell_value
+                )" || _c2_shell=""
+                [ -n "$_c2_shell" ] || _c2_shell="${SHELL-}"
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _c2_argv+=("--bare")
                 fi
@@ -458,7 +466,7 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                     local _c2_schema_content _c2_json
                     _c2_schema_content="$(cat "$_c2_schema" 2>/dev/null)" || _c2_schema_content=""
                     if [ -n "$_c2_schema_content" ]; then
-                        _c2_json="$(echo "$full_prompt" | CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p \
+                        _c2_json="$(echo "$full_prompt" | SHELL="$_c2_shell" CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p \
                             --json-schema "$_c2_schema_content" --output-format json 2>/dev/null)" || _c2_json=""
                         if [ -n "$_c2_json" ]; then
                             # Pull the schema-validated object out of the envelope.
@@ -480,7 +488,7 @@ except Exception:
                 fi
                 # Fall through to the plain text call (+ sed-carve) on any miss.
                 if [ -z "$result" ]; then
-                    result=$(echo "$full_prompt" | CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p 2>/dev/null || echo '{"verdict":"INCONCLUSIVE","justification":"review execution failed (no verdict obtained; NOT a rejection)","issues":[]}')
+                    result=$(echo "$full_prompt" | SHELL="$_c2_shell" CAVEMAN_DEFAULT_MODE=off claude "${_c2_argv[@]}" -p 2>/dev/null || echo '{"verdict":"INCONCLUSIVE","justification":"review execution failed (no verdict obtained; NOT a rejection)","issues":[]}')
                 fi
             else
                 result='{"verdict":"INCONCLUSIVE","justification":"reviewer CLI unavailable (no verdict obtained; NOT a rejection)","issues":[]}'

package/autonomy/grill.sh

@@ -251,6 +251,9 @@ grill_invoke_provider() {
             _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
             ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
             local _gr_argv=("${_LOKI_PERM_ARGV[@]}" "--model" "${LOKI_GRILL_MODEL:-sonnet}")
+            # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+            local _gr_shell
+            _gr_shell="$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")"
             # lean child flags (text-only role, no tools/MCP/slash commands) and
             # a ledger line per call via --output-format json (unwrapped below).
             local _gr_lf _gr_ledger=false
@@ -275,7 +278,7 @@ grill_invoke_provider() {
             # (not a bare VAR=val prefix) because the call goes through
             # _grill_with_timeout, where the first token is exec'd as the command.
             out="$(printf '%s' "$prompt" \
-                | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" env CAVEMAN_DEFAULT_MODE=off claude "${_gr_argv[@]}" -p - 2>/dev/null)"
+                | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" env "SHELL=$_gr_shell" CAVEMAN_DEFAULT_MODE=off claude "${_gr_argv[@]}" -p - 2>/dev/null)"
             if [ "$_gr_ledger" = true ] && [ -n "$out" ]; then
                 loki_child_ledger_append "$role" "$out" >/dev/null 2>&1 || true
                 out="$(printf '%s' "$out" | python3 -I -c 'import json,sys

package/autonomy/lib/done-recognition.sh

@@ -141,6 +141,14 @@ _loki_done_recog_invoke() {
         || . "$(dirname "${BASH_SOURCE[0]}")/../../providers/loader.sh" 2>/dev/null
     loki_claude_sidecall_allowed 2>/dev/null || return 1
     command -v claude >/dev/null 2>&1 || return 1
+    # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+    local _dr_shell
+    _dr_shell="$(
+        type _loki_claude_shell_value >/dev/null 2>&1 \
+            || . "$(dirname "${BASH_SOURCE[0]}")/claude-flags.sh" >/dev/null 2>&1 || exit 1
+        _loki_claude_shell_value
+    )" || _dr_shell=""
+    [ -n "$_dr_shell" ] || _dr_shell="${SHELL-}"
 
     # STRUCTURED VERDICT (v8.x): when the CLI supports --json-schema, force valid
     # JSON so parse_object never has to brace-slice prose. --json-schema takes
@@ -160,11 +168,11 @@ _loki_done_recog_invoke() {
             _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
             ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
             if command -v timeout >/dev/null 2>&1; then
-                _dr_json=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
+                _dr_json=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
                     claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" \
                     --json-schema "$_dr_schema_content" --output-format json 2>/dev/null) || _dr_json=""
             else
-                _dr_json=$(CAVEMAN_DEFAULT_MODE=off \
+                _dr_json=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off \
                     claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" \
                     --json-schema "$_dr_schema_content" --output-format json 2>/dev/null) || _dr_json=""
             fi
@@ -197,10 +205,10 @@ except Exception:
     _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
     ! type _loki_claude_permission_argv >/dev/null 2>&1 || _loki_claude_permission_argv
     if command -v timeout >/dev/null 2>&1; then
-        out=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
+        out=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_DONE_RECOG_TIMEOUT}" \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     else
-        out=$(CAVEMAN_DEFAULT_MODE=off \
+        out=$(SHELL="$_dr_shell" CAVEMAN_DEFAULT_MODE=off \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     fi
     [ "$rc" -ne 0 ] && return 1

package/autonomy/lib/prd-enrich.sh

@@ -101,13 +101,16 @@ _loki_prd_enrich_invoke() {
         _pe_ledger=true
         _pe_argv+=("--output-format" "json")
     fi
+    # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user shell).
+    local _pe_shell
+    _pe_shell="$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")"
     if command -v timeout >/dev/null 2>&1; then
-        out=$(CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_PRD_ENRICH_TIMEOUT}" \
+        out=$(SHELL="$_pe_shell" CAVEMAN_DEFAULT_MODE=off timeout "${LOKI_PRD_ENRICH_TIMEOUT}" \
                   claude "${_pe_argv[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     else
         # No coreutils timeout (e.g. bare macOS). Run without it; the model
         # call is a one-shot and the caller still tolerates failure.
-        out=$(CAVEMAN_DEFAULT_MODE=off \
+        out=$(SHELL="$_pe_shell" CAVEMAN_DEFAULT_MODE=off \
                   claude "${_pe_argv[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     fi
     if [ "$rc" -eq 0 ] && [ "$_pe_ledger" = true ] && [ -n "$out" ]; then

package/autonomy/lib/voter-agents.sh

@@ -401,7 +401,7 @@ loki_council_dispatch_agents() {
         _va_fmt=(--output-format json)
     fi
     response=$(timeout "${LOKI_COUNCIL_REVIEW_TIMEOUT:-600}" \
-                      env CAVEMAN_DEFAULT_MODE=off claude "${_LOKI_PERM_ARGV[@]}" \
+                      env "SHELL=$(_loki_claude_shell_value 2>/dev/null || printf '%s' "${SHELL-}")" CAVEMAN_DEFAULT_MODE=off claude "${_LOKI_PERM_ARGV[@]}" \
                       ${_va_lean[@]+"${_va_lean[@]}"} \
                       ${_va_fmt[@]+"${_va_fmt[@]}"} \
                       -p "$prompt" \

package/autonomy/loki

@@ -143,6 +143,17 @@ _loki_caveman_narration_level() {
 # claude-flags.sh (like the caveman wrapper above) and fills _LOKI_PERM_ARGV; unset
 # LOKI_PERMISSION_POLICY=legacy keeps --dangerously-skip-permissions byte-identically.
 _loki_perm_argv_for() {
+    # Also sets _LOKI_CLAUDE_SHELL, the SHELL value every claude spawn in this CLI
+    # pins (/bin/bash; LOKI_E10_KEEP_USER_SHELL=1 keeps the user's). Computed in a
+    # subshell so the helper's top-level exports never leak. Falls back to the
+    # user's SHELL when the lib is unavailable. Spawn sites that need only the
+    # shell call this with output discarded.
+    _LOKI_CLAUDE_SHELL="$(
+        # shellcheck source=autonomy/lib/claude-flags.sh
+        . "${_LOKI_SCRIPT_DIR}/lib/claude-flags.sh" >/dev/null 2>&1 || exit 1
+        _loki_claude_shell_value
+    )" || _LOKI_CLAUDE_SHELL=""
+    [ -n "$_LOKI_CLAUDE_SHELL" ] || _LOKI_CLAUDE_SHELL="${SHELL-}"
     _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
     # Legacy policy: return before sourcing anything (claude-flags.sh exports caveman vars).
     [ "${LOKI_PERMISSION_POLICY:-}" = "legacy" ] && return 0
@@ -19851,7 +19862,7 @@ Tasks:
             _loki_perm_argv_for "$codebase_path"
             case "$provider_name" in
                 claude)
-                    { (cd "$codebase_path" && if [ -n "$_loki_mig_cm" ]; then CAVEMAN_DEFAULT_MODE="$_loki_mig_cm" claude "${_LOKI_PERM_ARGV[@]}" -p "$phase_prompt" --output-format stream-json --verbose 2>&1; else claude "${_LOKI_PERM_ARGV[@]}" -p "$phase_prompt" --output-format stream-json --verbose 2>&1; fi) | \
+                    { (cd "$codebase_path" && if [ -n "$_loki_mig_cm" ]; then SHELL="$_LOKI_CLAUDE_SHELL" CAVEMAN_DEFAULT_MODE="$_loki_mig_cm" claude "${_LOKI_PERM_ARGV[@]}" -p "$phase_prompt" --output-format stream-json --verbose 2>&1; else SHELL="$_LOKI_CLAUDE_SHELL" claude "${_LOKI_PERM_ARGV[@]}" -p "$phase_prompt" --output-format stream-json --verbose 2>&1; fi) | \
                         while IFS= read -r line; do
                             # Extract text from stream-json
                             if echo "$line" | python3 -c "
@@ -20029,7 +20040,7 @@ IMPORTANT RULES:
         _loki_perm_argv_for "$codebase_path"
         case "$provider_name" in
             claude)
-                { (cd "$codebase_path" && if [ -n "$_loki_doc_cm" ]; then CAVEMAN_DEFAULT_MODE="$_loki_doc_cm" claude "${_LOKI_PERM_ARGV[@]}" -p "$doc_prompt" --output-format stream-json --verbose 2>&1; else claude "${_LOKI_PERM_ARGV[@]}" -p "$doc_prompt" --output-format stream-json --verbose 2>&1; fi) | \
+                { (cd "$codebase_path" && if [ -n "$_loki_doc_cm" ]; then SHELL="$_LOKI_CLAUDE_SHELL" CAVEMAN_DEFAULT_MODE="$_loki_doc_cm" claude "${_LOKI_PERM_ARGV[@]}" -p "$doc_prompt" --output-format stream-json --verbose 2>&1; else SHELL="$_LOKI_CLAUDE_SHELL" claude "${_LOKI_PERM_ARGV[@]}" -p "$doc_prompt" --output-format stream-json --verbose 2>&1; fi) | \
                     while IFS= read -r line; do
                         if echo "$line" | python3 -c "
 import sys, json
@@ -21095,7 +21106,7 @@ Begin healing now. Follow the RARV cycle for each action."
         claude)
             _loki_perm_argv_for "$codebase_path"
             local run_args=("${_LOKI_PERM_ARGV[@]}" -p "$heal_prompt" --output-format stream-json --verbose)
-            (cd "$codebase_path" && if [ -n "$_loki_heal_cm" ]; then CAVEMAN_DEFAULT_MODE="$_loki_heal_cm" claude "${run_args[@]}" 2>&1; else claude "${run_args[@]}" 2>&1; fi) | \
+            (cd "$codebase_path" && if [ -n "$_loki_heal_cm" ]; then SHELL="$_LOKI_CLAUDE_SHELL" CAVEMAN_DEFAULT_MODE="$_loki_heal_cm" claude "${run_args[@]}" 2>&1; else SHELL="$_LOKI_CLAUDE_SHELL" claude "${run_args[@]}" 2>&1; fi) | \
                 while IFS= read -r line; do
                     if echo "$line" | python3 -c "
 import sys, json
@@ -23135,6 +23146,28 @@ print(target)
 PY
 }
 
+# One line per supported provider (names from SUPPORTED_PROVIDERS in providers/loader.sh), printed once.
+try_print_provider_setup() {
+    local want="$1" known p hint
+    known="$(sed -n 's/^SUPPORTED_PROVIDERS=(\(.*\))$/\1/p' "$_LOKI_SCRIPT_DIR/../providers/loader.sh" 2>/dev/null | tr -d '"' | head -1)"
+    if [ -z "$known" ]; then
+        echo "loki try: cannot read SUPPORTED_PROVIDERS from providers/loader.sh" >&2
+        return 1
+    fi
+    echo "loki try: no provider is ready for '$want'. Set up one of these, then run loki try again (or preview with --dry-run):"
+    for p in $known; do
+        case "$p" in
+            claude) hint="claude login   (or set ANTHROPIC_API_KEY)" ;;
+            codex) hint="codex login   (or set OPENAI_API_KEY)" ;;
+            opencode) hint="opencode auth login" ;;
+            aider) hint="install aider and set OPENAI_API_KEY or ANTHROPIC_API_KEY" ;;
+            cline) hint="install the cline CLI and configure its API key" ;;
+            *) hint="install the $p CLI (no login command is mapped for it)" ;;
+        esac
+        echo "  $p: $hint"
+    done
+}
+
 _cmd_try_body() {
     local tmp="$1" url="$2" dry_run="$3" provider="$4" max_cost="$5"
     local dest="$tmp/repo" task
@@ -23167,7 +23200,7 @@ _cmd_try_body() {
     if receipt="$(try_keep_receipt "$dest" "$stamp")"; then
         echo ""
         echo "Receipt: $receipt"
-        echo "Check it: loki verify $receipt"
+        echo "Check it: npx loki-mode verify \"$receipt\""
     else
         echo ""
         echo "No receipt was written (run exited $rc)."
@@ -23252,8 +23285,8 @@ cmd_try() {
         *) echo "loki try: unknown provider '$use_provider' (use claude, opencode, codex, cline or aider)" >&2; return 2 ;;
     esac
     if [ "$dry_run" != true ] && ! wow_provider_ready "$use_provider"; then
-        echo "loki try: no provider ready for '$use_provider'. Run 'loki doctor', or preview with --dry-run." >&2
-        return 1
+        try_print_provider_setup "$use_provider" >&2
+        return 2
     fi
 
     local tmp rc=0
@@ -24270,7 +24303,8 @@ _review_ultra() {
     echo -e "${DIM}Running: claude ${ur_argv[*]}${NC}" >&2
     echo "" >&2
     local ur_rc=0
-    claude "${ur_argv[@]}" || ur_rc=$?
+    _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+    SHELL="$_LOKI_CLAUDE_SHELL" claude "${ur_argv[@]}" || ur_rc=$?
     if [ "$ur_rc" -ne 0 ] && [ "$trust_ws" != true ] && [ "$ur_trust_ok" = true ]; then
         echo "If claude reported an untrusted folder, re-run: loki review --ultra --yes --trust-workspace" >&2
     fi
@@ -24397,7 +24431,8 @@ _run_ultracode() {
 
     echo -e "${DIM}Running: claude -p \"ultracode: ...\" --model opus${NC}" >&2
     echo "" >&2
-    claude "${uc_argv[@]}"
+    _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+    SHELL="$_LOKI_CLAUDE_SHELL" claude "${uc_argv[@]}"
     return $?
 }
 
@@ -30554,7 +30589,8 @@ cmd_remote() {
     # If workspace isn't trusted, it exits immediately with an error.
     # Use || true to prevent set -e from killing the script before auto-recovery.
     local rc_exit=0
-    claude remote-control ${rc_flags[@]+"${rc_flags[@]}"} || rc_exit=$?
+    _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+    SHELL="$_LOKI_CLAUDE_SHELL" claude remote-control ${rc_flags[@]+"${rc_flags[@]}"} || rc_exit=$?
 
     # Exit 0 = normal session end
     if [ $rc_exit -eq 0 ]; then
@@ -30594,7 +30630,8 @@ print('ok')
     echo ""
     echo -e "${GREEN}Launching remote control...${NC}"
     echo ""
-    exec claude remote-control ${rc_flags[@]+"${rc_flags[@]}"}
+    _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+    SHELL="$_LOKI_CLAUDE_SHELL" exec claude remote-control ${rc_flags[@]+"${rc_flags[@]}"}
 }
 
 # Syslog/SIEM integration management
@@ -31711,21 +31748,22 @@ METRICS_SCRIPT
 
     # Handle --share flag
     if [ "$share_flag" = true ]; then
-        local tmpfile
-        tmpfile=$(mktemp "/tmp/loki-metrics-XXXXXX.md")
+        local tmpdir tmpfile
+        tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/loki-metrics.XXXXXXXX") || exit 1
+        tmpfile="$tmpdir/metrics.md"
         echo "$metrics_output" > "$tmpfile"
 
         if ! command -v gh &>/dev/null; then
             echo -e "${RED}gh CLI not found -- cannot share${NC}"
             echo "Install: brew install gh"
-            rm -f "$tmpfile"
+            rm -f "$tmpfile"; rmdir "$tmpdir" 2>/dev/null || true
             exit 1
         fi
 
         if ! gh auth status &>/dev/null 2>&1; then
             echo -e "${RED}GitHub CLI not authenticated${NC}"
             echo "Run 'gh auth login' to authenticate."
-            rm -f "$tmpfile"
+            rm -f "$tmpfile"; rmdir "$tmpdir" 2>/dev/null || true
             exit 1
         fi
 
@@ -31739,7 +31777,7 @@ METRICS_SCRIPT
         fi
         gist_url=$(gh gist create "$tmpfile" --desc "$gist_desc" $share_visibility 2>&1)
         local gist_exit=$?
-        rm -f "$tmpfile"
+        rm -f "$tmpfile"; rmdir "$tmpdir" 2>/dev/null || true
 
         if [ $gist_exit -ne 0 ]; then
             echo -e "${RED}Failed to create gist${NC}"
@@ -32834,7 +32872,8 @@ USER TASK: ${prompt}"
             local agent_exit=0
             case "$provider" in
                 claude)
-                    claude -p "$full_prompt" 2>&1 || agent_exit=$?
+                    _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+                    SHELL="$_LOKI_CLAUDE_SHELL" claude -p "$full_prompt" 2>&1 || agent_exit=$?
                     ;;
                 codex)
                     codex exec --sandbox workspace-write "$full_prompt" 2>&1 || agent_exit=$?
@@ -32975,7 +33014,7 @@ $diff"
             [ -f ".loki/state/provider" ] && provider=$(cat ".loki/state/provider" 2>/dev/null)
 
             case "$provider" in
-                claude)  claude -p "$review_prompt" 2>&1 ;;
+                claude)  _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true; SHELL="$_LOKI_CLAUDE_SHELL" claude -p "$review_prompt" 2>&1 ;;
                 codex)   codex exec --sandbox workspace-write "$review_prompt" 2>&1 ;;
                 cline)   cline -y "$review_prompt" 2>&1 ;;
                 aider)   aider --message "$review_prompt" --yes-always --no-auto-commits < /dev/null 2>&1 ;;
@@ -34743,7 +34782,8 @@ _docs_invoke_provider() {
             declare -F loki_child_ledger_append >/dev/null 2>&1 && _ledger=true
             local _fmt=()
             [ "$_ledger" = true ] && _fmt=(--output-format json)
-            result=$($t_prefix env CAVEMAN_DEFAULT_MODE=off claude -p ${_lean[@]+"${_lean[@]}"} ${_fmt[@]+"${_fmt[@]}"} --model "${LOKI_DOCS_MODEL:-sonnet}" "$prompt" 2>/dev/null) || exit_code=$?
+            _loki_perm_argv_for "$PWD" >/dev/null 2>&1 || true
+            result=$($t_prefix env "SHELL=$_LOKI_CLAUDE_SHELL" CAVEMAN_DEFAULT_MODE=off claude -p ${_lean[@]+"${_lean[@]}"} ${_fmt[@]+"${_fmt[@]}"} --model "${LOKI_DOCS_MODEL:-sonnet}" "$prompt" 2>/dev/null) || exit_code=$?
             if [ "$_ledger" = true ] && [ -n "$result" ]; then
                 loki_child_ledger_append docs "$result" >/dev/null 2>&1 || true
                 result=$(printf '%s' "$result" | python3 -c 'import json,sys
@@ -39023,20 +39063,21 @@ cmd_share() {
     esac
 
     # Generate report to temp file
-    local tmpfile
-    tmpfile=$(mktemp "/tmp/loki-share-XXXXXX.$ext")
+    local tmpdir tmpfile
+    tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/loki-share.XXXXXXXX") || exit 1
+    tmpfile="$tmpdir/session-report.$ext"
 
     echo "Generating session report..."
     if ! "$0" report --format "$format" > "$tmpfile" 2>/dev/null; then
         echo -e "${RED}Failed to generate session report${NC}"
-        rm -f "$tmpfile"
+        rm -f "$tmpfile"; rmdir "$tmpdir" 2>/dev/null || true
         exit 1
     fi
 
     # Verify report is not empty
     if [ ! -s "$tmpfile" ]; then
         echo -e "${RED}Generated report is empty${NC}"
-        rm -f "$tmpfile"
+        rm -f "$tmpfile"; rmdir "$tmpdir" 2>/dev/null || true
         exit 1
     fi
 
@@ -39076,8 +39117,12 @@ _loki_gist_upload() {
     gist_err=$(cat "$errfile" 2>/dev/null)
     [ "$errfile" != "/dev/null" ] && rm -f "$errfile"
 
-    # Cleanup temp file
+    # Cleanup temp file and its private loki-* directory (rmdir only removes
+    # an empty directory).
     rm -f "$file"
+    case "$(basename "$(dirname "$file")")" in
+        loki-*) rmdir "$(dirname "$file")" 2>/dev/null || true ;;
+    esac
 
     if [ $gist_exit -ne 0 ]; then
         echo -e "${RED}Failed to create gist${NC}"
@@ -39200,8 +39245,9 @@ PYEOF
 
     # POST the redacted HTML. Auth header is sent only if a license key exists;
     # OSS users with their own endpoint need no key.
-    local tmp_body tmp_code
-    tmp_body=$(mktemp "/tmp/loki-hosted-XXXXXX.out")
+    local tmp_body tmp_code tmp_body_dir
+    tmp_body_dir=$(mktemp -d "${TMPDIR:-/tmp}/loki-hosted.XXXXXXXX") || return 1
+    tmp_body="$tmp_body_dir/response.out"
     local -a curl_args=(-sS -o "$tmp_body" -w '%{http_code}' -X POST
         -H "Content-Type: text/html"
         -H "X-Loki-Proof-Id: ${id}"
@@ -39215,7 +39261,7 @@ PYEOF
     if [ "$curl_exit" -ne 0 ]; then
         echo -e "${RED}Failed to reach hosted endpoint (curl exit ${curl_exit}).${NC}" >&2
         echo "Check LOKI_HOSTED_ENDPOINT or publish to a gist: loki proof share ${id}" >&2
-        rm -f "$tmp_body"
+        rm -f "$tmp_body"; rmdir "$tmp_body_dir" 2>/dev/null || true
         return 1
     fi
 
@@ -39242,7 +39288,7 @@ except Exception:
 print(url)
 PYEOF
 )
-            rm -f "$tmp_body"
+            rm -f "$tmp_body"; rmdir "$tmp_body_dir" 2>/dev/null || true
             if [ -n "$published_url" ]; then
                 echo -e "${GREEN}Published: ${published_url}${NC}"
             else
@@ -39259,7 +39305,7 @@ PYEOF
                 echo "" >&2
             fi
             echo "Nothing was published. Or publish to a gist: loki proof share ${id}" >&2
-            rm -f "$tmp_body"
+            rm -f "$tmp_body"; rmdir "$tmp_body_dir" 2>/dev/null || true
             return 1
             ;;
     esac
@@ -40294,8 +40340,9 @@ PYEOF
             fi
 
             # Copy to a temp file so _loki_gist_upload can remove it after.
-            local tmpfile
-            tmpfile=$(mktemp "/tmp/loki-proof-XXXXXX.html")
+            local tmpfile tmpdir
+            tmpdir=$(mktemp -d "${TMPDIR:-/tmp}/loki-proof.XXXXXXXX") || exit 1
+            tmpfile="$tmpdir/proof.html"
             cp "$html" "$tmpfile"
             echo "Uploading proof page..."
             local gist_desc="Loki Mode proof-of-run ${id}"

package/autonomy/quickstart.sh

@@ -825,6 +825,17 @@ _qs_classify_invoke() {
     if command -v timeout >/dev/null 2>&1; then to="timeout"
     elif command -v gtimeout >/dev/null 2>&1; then to="gtimeout"; fi
     _LOKI_PERM_ARGV=(--dangerously-skip-permissions)
+    # Pin SHELL=/bin/bash for the claude child (LOKI_E10_KEEP_USER_SHELL=1 keeps the user
+    # shell). Computed in a subshell so the helper's top-level exports never leak.
+    local _qs_shell _qs_shell_lib
+    _qs_shell_lib="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)/lib/claude-flags.sh"
+    _qs_shell="$(
+        # shellcheck source=/dev/null
+        type _loki_claude_shell_value >/dev/null 2>&1 \
+            || . "$_qs_shell_lib" >/dev/null 2>&1 || exit 1
+        _loki_claude_shell_value
+    )" || _qs_shell=""
+    [ -n "$_qs_shell" ] || _qs_shell="${SHELL-}"
     if [ "${LOKI_PERMISSION_POLICY:-}" != "legacy" ]; then
         # P12-26b: nothing on this path sources claude-flags.sh. Compute in a subshell so its
         # top-level exports (caveman vars) never leak; fail closed to plan when unavailable.
@@ -844,10 +855,10 @@ _qs_classify_invoke() {
         fi
     fi
     if [ -n "$to" ]; then
-        out=$(CAVEMAN_DEFAULT_MODE=off "$to" "${LOKI_QUICKSTART_CLASSIFY_TIMEOUT}" \
+        out=$(SHELL="$_qs_shell" CAVEMAN_DEFAULT_MODE=off "$to" "${LOKI_QUICKSTART_CLASSIFY_TIMEOUT}" \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     else
-        out=$(CAVEMAN_DEFAULT_MODE=off \
+        out=$(SHELL="$_qs_shell" CAVEMAN_DEFAULT_MODE=off \
                   claude "${_LOKI_PERM_ARGV[@]}" -p "$prompt" 2>/dev/null) || rc=$?
     fi
     [ "$rc" -ne 0 ] && return 1

package/dashboard/__init__.py

@@ -7,6 +7,6 @@ Modules:
     control: Session control helpers (status, atomic writes, origin check)
 """
 
-__version__ = "11.91.0"
+__version__ = "11.92.0"
 
 __all__ = ["__version__"]

package/docs/CLI-REFERENCE.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.91.0. Do not edit by hand.
+Generated from `loki-ts/src/cli/registry.ts` by `scripts/generate-stale-zero.sh` for v11.92.0. Do not edit by hand.
 Hidden and legacy-only commands are omitted; see `docs/CLI-INVENTORY.md` for the full inventory.
 
 | Command | Description |

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 Loki Mode, by [Autonomi](https://www.autonomi.dev/), turns a spec or an issue into a verified pull request with a receipt you can check. This page covers installing it, a first run, and the options around it.
 
-**Version:** v11.91.0
+**Version:** v11.92.0
 
 **Engine note:** `loki start` is the primary command. `loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick` all run the Loki 10 engine, whatever the flag order or input form (PRD file, issue ref, task or one-word brief). The previous loop runs only on `--engine legacy`, `LOKI_ENGINE=legacy`, or for one call when a flag Loki 10 cannot honor is present. See the [user guide](v10/GUIDE.md) and the [5-minute quickstart](QUICKSTART.md).