loki-mode 5.26.2 → 5.27.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Multi-agent autonomous startup system. Triggers on "Loki Mode". Takes PRD to deployed product with zero human intervention. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v5.26.2
+# Loki Mode v5.27.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -260,4 +260,4 @@ Auto-detected or force with `LOKI_COMPLEXITY`:
 
 ---
 
-**v5.26.2 | Dashboard/shell/UX fixes, security hardening | ~270 lines core**
+**v5.27.1 | Unified dashboard data flow, overview component, backend fixes | ~270 lines core**

package/VERSION

@@ -1 +1 @@
-5.26.2
+5.27.1

package/autonomy/completion-council.sh

@@ -226,6 +226,7 @@ council_vote() {
             1) role="requirements_verifier" ;;
             2) role="test_auditor" ;;
             3) role="devils_advocate" ;;
+            *) role="generalist" ;;
         esac
 
         log_info "Council member $member/$COUNCIL_SIZE ($role) reviewing..."
@@ -255,7 +256,24 @@ council_vote() {
         ((member++))
     done
 
-    # Record vote results
+    # Anti-sycophancy check: if unanimous APPROVE, run devil's advocate
+    if [ $approve_count -eq $COUNCIL_SIZE ] && [ $COUNCIL_SIZE -ge 3 ]; then
+        log_warn "Unanimous approval detected - running anti-sycophancy check..."
+        local contrarian_verdict
+        contrarian_verdict=$(council_devils_advocate "$evidence_file" "$vote_dir")
+        local contrarian_vote
+        contrarian_vote=$(echo "$contrarian_verdict" | grep -oE "VOTE:\s*(APPROVE|REJECT)" | grep -oE "APPROVE|REJECT" | head -1)
+
+        if [ "$contrarian_vote" = "REJECT" ]; then
+            log_warn "Anti-sycophancy: Devil's advocate REJECTED unanimous approval"
+            log_warn "Overriding to require one more iteration for verification"
+            approve_count=$((approve_count - 1))
+        else
+            log_info "Anti-sycophancy: Devil's advocate confirmed approval"
+        fi
+    fi
+
+    # Record vote results (AFTER anti-sycophancy check so verdict reflects any override)
     _COUNCIL_STATE_FILE="$COUNCIL_STATE_DIR/state.json" \
     _COUNCIL_SIZE="$COUNCIL_SIZE" \
     _COUNCIL_APPROVE="$approve_count" \
@@ -291,23 +309,6 @@ with open(state_file, 'w') as f:
     json.dump(state, f, indent=2)
 " || log_warn "Failed to record council vote results"
 
-    # Anti-sycophancy check: if unanimous APPROVE, run devil's advocate
-    if [ $approve_count -eq $COUNCIL_SIZE ] && [ $COUNCIL_SIZE -ge 3 ]; then
-        log_warn "Unanimous approval detected - running anti-sycophancy check..."
-        local contrarian_verdict
-        contrarian_verdict=$(council_devils_advocate "$evidence_file" "$vote_dir")
-        local contrarian_vote
-        contrarian_vote=$(echo "$contrarian_verdict" | grep -oE "VOTE:\s*(APPROVE|REJECT)" | grep -oE "APPROVE|REJECT" | head -1)
-
-        if [ "$contrarian_vote" = "REJECT" ]; then
-            log_warn "Anti-sycophancy: Devil's advocate REJECTED unanimous approval"
-            log_warn "Overriding to require one more iteration for verification"
-            approve_count=$((approve_count - 1))
-        else
-            log_info "Anti-sycophancy: Devil's advocate confirmed approval"
-        fi
-    fi
-
     echo ""
     log_info "Council verdict: $approve_count APPROVE / $reject_count REJECT (threshold: $COUNCIL_THRESHOLD)"
     echo -e "$verdicts"

package/autonomy/hooks/quality-gate.sh

@@ -29,7 +29,7 @@ fi
 
 # Check for TODO/FIXME in recent changes
 if [ -d "$CWD/.git" ]; then
-    TODOS=$(git -C "$CWD" diff HEAD~1 2>/dev/null | grep -c "TODO\|FIXME" || echo "0")
+    TODOS=$(git -C "$CWD" diff HEAD~1 2>/dev/null | grep -c "TODO\|FIXME" 2>/dev/null) || TODOS=0
     if [ "$TODOS" -gt 0 ]; then
         GATE_RESULTS+=("new_todos: $TODOS")
     fi

package/autonomy/hooks/track-metrics.sh

@@ -11,6 +11,7 @@ METRICS_DIR="$CWD/.loki/metrics"
 mkdir -p "$METRICS_DIR"
 
 TIMESTAMP=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-echo "{\"timestamp\":\"$TIMESTAMP\",\"tool\":\"$TOOL_NAME\",\"event\":\"PostToolUse\"}" >> "$METRICS_DIR/tool-usage.jsonl"
+tool_escaped=$(printf '%s' "$TOOL_NAME" | sed 's/\\/\\\\/g; s/"/\\"/g')
+echo "{\"timestamp\":\"$TIMESTAMP\",\"tool\":\"$tool_escaped\",\"event\":\"PostToolUse\"}" >> "$METRICS_DIR/tool-usage.jsonl"
 
 exit 0

package/autonomy/hooks/validate-bash.sh

@@ -10,13 +10,13 @@ CWD=$(echo "$INPUT" | python3 -c "import sys,json; print(json.load(sys.stdin).ge
 
 # Dangerous command patterns
 BLOCKED_PATTERNS=(
-    "^rm -rf /$"
-    "^rm -rf ~$"
-    "^rm -rf \\\$HOME$"
+    "^rm -rf /"
+    "^rm -rf ~"
+    "^rm -rf \\\$HOME"
     "> /dev/sd"
     "^mkfs "
     "^dd if=/dev/zero"
-    "^chmod -R 777 /$"
+    "^chmod -R 777 /"
 )
 
 # Check for blocked patterns
@@ -38,7 +38,8 @@ done
 # Log command to audit trail
 LOG_DIR="$CWD/.loki/logs"
 mkdir -p "$LOG_DIR"
-echo "{\"timestamp\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"command\":$(echo "$COMMAND" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))')}" >> "$LOG_DIR/bash-audit.jsonl"
+printf '%s' "{\"timestamp\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"command\":$(echo "$COMMAND" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))')}" >> "$LOG_DIR/bash-audit.jsonl"
+echo >> "$LOG_DIR/bash-audit.jsonl"
 
 # Allow command
 cat << EOF

package/autonomy/loki

@@ -942,7 +942,7 @@ cmd_provider_set() {
                 echo "Install: npm install -g @openai/codex"
                 ;;
             gemini)
-                echo "Install: npm install -g @anthropic-ai/gemini-cli"
+                echo "Install: npm install -g @google/gemini-cli"
                 ;;
         esac
         echo ""
@@ -1026,7 +1026,7 @@ cmd_provider_info() {
             echo "Name:        Codex CLI"
             echo "Vendor:      OpenAI"
             echo "CLI:         codex"
-            echo "Flag:        exec --dangerously-bypass-approvals-and-sandbox"
+            echo "Flag:        --full-auto"
             echo ""
             echo "Features:"
             echo "  - Autonomous mode"
@@ -1038,7 +1038,7 @@ cmd_provider_info() {
             echo "Name:        Gemini CLI"
             echo "Vendor:      Google"
             echo "CLI:         gemini"
-            echo "Flag:        --yolo"
+            echo "Flag:        --approval-mode=yolo"
             echo ""
             echo "Features:"
             echo "  - Autonomous mode"
@@ -1572,7 +1572,7 @@ cmd_issue_parse() {
                 ;;
             --format)
                 format="${2:-yaml}"
-                shift 2
+                if [ $# -ge 2 ]; then shift 2; else shift; fi
                 ;;
             --format=*)
                 format="${1#*=}"
@@ -1580,7 +1580,7 @@ cmd_issue_parse() {
                 ;;
             --output|-o)
                 output_file="${2:-}"
-                shift 2
+                if [ $# -ge 2 ]; then shift 2; else shift; fi
                 ;;
             --output=*)
                 output_file="${1#*=}"
@@ -2291,7 +2291,7 @@ cmd_api() {
             fi
 
             # Start server
-            mkdir -p "$LOKI_DIR"
+            mkdir -p "$LOKI_DIR/logs"
             nohup node "$api_server" --port "$port" > "$LOKI_DIR/logs/api.log" 2>&1 &
             local new_pid=$!
             echo "$new_pid" > "$pid_file"
@@ -2612,6 +2612,8 @@ send_slack_notification() {
     project_name=$(basename "$(pwd)")
     local timestamp
     timestamp=$(date '+%Y-%m-%d %H:%M:%S')
+    local message_escaped
+    message_escaped=$(printf '%s' "$message" | sed 's/\\/\\\\/g; s/"/\\"/g; s/	/\\t/g')
 
     # Build Slack payload with blocks for better formatting
     local payload
@@ -2629,7 +2631,7 @@ send_slack_notification() {
             "type": "section",
             "text": {
                 "type": "mrkdwn",
-                "text": "$message"
+                "text": "$message_escaped"
             }
         },
         {
@@ -2666,6 +2668,8 @@ send_discord_notification() {
     project_name=$(basename "$(pwd)")
     local timestamp
     timestamp=$(date '+%Y-%m-%d %H:%M:%S')
+    local message_escaped
+    message_escaped=$(printf '%s' "$message" | sed 's/\\/\\\\/g; s/"/\\"/g; s/	/\\t/g')
 
     # Build Discord embed payload
     local payload
@@ -2674,7 +2678,7 @@ send_discord_notification() {
     "embeds": [
         {
             "title": "Loki Mode: $event_type",
-            "description": "$message",
+            "description": "$message_escaped",
             "color": 5814783,
             "footer": {
                 "text": "Project: $project_name | $timestamp"
@@ -2705,6 +2709,8 @@ send_webhook_notification() {
     project_name=$(basename "$(pwd)")
     local timestamp
     timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+    local message_escaped
+    message_escaped=$(printf '%s' "$message" | sed 's/\\/\\\\/g; s/"/\\"/g; s/	/\\t/g')
 
     # Build generic JSON payload
     local payload
@@ -2712,7 +2718,7 @@ send_webhook_notification() {
 {
     "source": "loki-mode",
     "event": "$event_type",
-    "message": "$message",
+    "message": "$message_escaped",
     "project": "$project_name",
     "timestamp": "$timestamp",
     "cwd": "$(pwd)"
@@ -3085,11 +3091,11 @@ if count == 0:
                     ;;
 
                 all)
-                    cmd_memory show patterns --limit "$limit"
+                    cmd_memory show patterns --limit "$limit" --project "$project"
                     echo ""
-                    cmd_memory show mistakes --limit "$limit"
+                    cmd_memory show mistakes --limit "$limit" --project "$project"
                     echo ""
-                    cmd_memory show successes --limit "$limit"
+                    cmd_memory show successes --limit "$limit" --project "$project"
                     ;;
 
                 *)
@@ -3110,12 +3116,13 @@ if count == 0:
             echo -e "${BOLD}Search Results for: $query${NC}"
             echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 
+            local query_escaped="${query//\'/\'\\\'\'}"
             python3 -c "
 import json
 import os
 
 learnings_dir = '$learnings_dir'
-query = '$query'.lower()
+query = '${query_escaped}'.lower()
 
 for filename in ['patterns.jsonl', 'mistakes.jsonl', 'successes.jsonl']:
     filepath = os.path.join(learnings_dir, filename)

package/autonomy/run.sh

@@ -582,6 +582,8 @@ else
     # shellcheck disable=SC2178
     WORKTREE_PATHS=""
 fi
+# Track background install PIDs for cleanup (indexed array, works on all bash versions)
+WORKTREE_INSTALL_PIDS=()
 
 # Colors
 RED='\033[0;31m'
@@ -1052,9 +1054,15 @@ import_github_issues() {
     local pending_file=".loki/queue/pending.json"
     local task_count=0
 
-    # Ensure pending.json exists
+    # Ensure pending.json exists with correct format for GitHub import
     if [ ! -f "$pending_file" ]; then
         echo '{"tasks":[]}' > "$pending_file"
+    elif jq -e 'type == "array"' "$pending_file" &>/dev/null; then
+        # Normalize bare array format to {"tasks":[...]} for GitHub import compatibility
+        local _tmp_normalize
+        _tmp_normalize=$(mktemp)
+        jq '{tasks: .}' "$pending_file" > "$_tmp_normalize" && mv "$_tmp_normalize" "$pending_file"
+        rm -f "$_tmp_normalize"
     fi
 
     # Parse issues and add to pending queue
@@ -1468,6 +1476,8 @@ create_worktree() {
                 cargo build --quiet 2>/dev/null || true
             fi
         ) &
+        # Capture install PID for cleanup on exit
+        WORKTREE_INSTALL_PIDS+=($!)
 
         log_info "Created worktree: $worktree_path"
         return 0
@@ -1776,6 +1786,14 @@ spawn_feature_stream() {
 cleanup_parallel_streams() {
     log_header "Cleaning Up Parallel Streams"
 
+    # Kill background install processes
+    for pid in "${WORKTREE_INSTALL_PIDS[@]}"; do
+        if kill -0 "$pid" 2>/dev/null; then
+            kill "$pid" 2>/dev/null || true
+        fi
+    done
+    WORKTREE_INSTALL_PIDS=()
+
     # Kill all sessions
     for stream in "${!WORKTREE_PIDS[@]}"; do
         local pid="${WORKTREE_PIDS[$stream]}"
@@ -2294,11 +2312,12 @@ write_dashboard_state() {
     local failed_tasks="[]"
     local review_tasks="[]"
 
-    [ -f ".loki/queue/pending.json" ] && pending_tasks=$(cat ".loki/queue/pending.json" 2>/dev/null || echo "[]")
-    [ -f ".loki/queue/in-progress.json" ] && in_progress_tasks=$(cat ".loki/queue/in-progress.json" 2>/dev/null || echo "[]")
-    [ -f ".loki/queue/completed.json" ] && completed_tasks=$(cat ".loki/queue/completed.json" 2>/dev/null || echo "[]")
-    [ -f ".loki/queue/failed.json" ] && failed_tasks=$(cat ".loki/queue/failed.json" 2>/dev/null || echo "[]")
-    [ -f ".loki/queue/review.json" ] && review_tasks=$(cat ".loki/queue/review.json" 2>/dev/null || echo "[]")
+    # Read queue files, normalizing {"tasks":[...]} format to plain array
+    [ -f ".loki/queue/pending.json" ] && pending_tasks=$(jq 'if type == "object" then .tasks // [] else . end' ".loki/queue/pending.json" 2>/dev/null || echo "[]")
+    [ -f ".loki/queue/in-progress.json" ] && in_progress_tasks=$(jq 'if type == "object" then .tasks // [] else . end' ".loki/queue/in-progress.json" 2>/dev/null || echo "[]")
+    [ -f ".loki/queue/completed.json" ] && completed_tasks=$(jq 'if type == "object" then .tasks // [] else . end' ".loki/queue/completed.json" 2>/dev/null || echo "[]")
+    [ -f ".loki/queue/failed.json" ] && failed_tasks=$(jq 'if type == "object" then .tasks // [] else . end' ".loki/queue/failed.json" 2>/dev/null || echo "[]")
+    [ -f ".loki/queue/review.json" ] && review_tasks=$(jq 'if type == "object" then .tasks // [] else . end' ".loki/queue/review.json" 2>/dev/null || echo "[]")
 
     # Get agents state
     local agents="[]"
@@ -2351,11 +2370,12 @@ write_dashboard_state() {
         council_state=$(cat ".loki/council/state.json" 2>/dev/null || echo '{"enabled":false}')
     fi
 
-    # Write comprehensive JSON state
+    # Write comprehensive JSON state (atomic via temp file + mv)
     local project_name=$(basename "$(pwd)")
     local project_path=$(pwd)
+    local _tmp_state="${output_file}.tmp"
 
-    cat > "$output_file" << EOF
+    cat > "$_tmp_state" << EOF
 {
   "timestamp": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
   "version": "$version",
@@ -2396,6 +2416,7 @@ write_dashboard_state() {
   "council": $council_state
 }
 EOF
+    mv "$_tmp_state" "$output_file"
 }
 
 #===============================================================================
@@ -2419,13 +2440,15 @@ track_iteration_start() {
         "provider=${PROVIDER_NAME:-claude}" \
         "prd=${prd:-Codebase Analysis}"
 
-    # Create task entry
+    # Create task entry (escape PRD path for safe JSON embedding)
+    local prd_escaped
+    prd_escaped=$(printf '%s' "${prd:-Codebase Analysis}" | sed 's/\\/\\\\/g; s/"/\\"/g; s/\t/\\t/g')
     local task_json=$(cat <<EOF
 {
   "id": "$task_id",
   "type": "iteration",
   "title": "Iteration $iteration",
-  "description": "PRD: ${prd:-Codebase Analysis}",
+  "description": "PRD: ${prd_escaped}",
   "status": "in_progress",
   "priority": "medium",
   "startedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
@@ -4317,6 +4340,9 @@ build_prompt() {
     local human_directive=""
     if [ -n "${LOKI_HUMAN_INPUT:-}" ]; then
         human_directive="HUMAN_DIRECTIVE (PRIORITY): $LOKI_HUMAN_INPUT Execute this directive BEFORE continuing normal tasks."
+        # Clear after consumption so it doesn't repeat every iteration
+        unset LOKI_HUMAN_INPUT
+        rm -f "${TARGET_DIR:-.}/.loki/HUMAN_INPUT.md"
     fi
 
     # Queue task injection (from dashboard or API)
@@ -4883,8 +4909,8 @@ check_human_intervention() {
     if [ -f "$loki_dir/PAUSE" ]; then
         log_warn "PAUSE file detected - pausing execution"
         notify_intervention_needed "Execution paused via PAUSE file"
-        rm -f "$loki_dir/PAUSE"
         handle_pause
+        rm -f "$loki_dir/PAUSE"
         return 1
     fi
 
@@ -4933,6 +4959,12 @@ check_human_intervention() {
         rm -f "$loki_dir/signals/COUNCIL_REVIEW_REQUESTED"
         if type council_vote &>/dev/null && council_vote; then
             log_header "COMPLETION COUNCIL: FORCE REVIEW - PROJECT COMPLETE"
+            # Complete the missing steps: COMPLETED marker, memory consolidation, report
+            touch "$loki_dir/COMPLETED"
+            log_info "Running memory consolidation..."
+            run_memory_consolidation
+            notify_all_complete
+            save_state ${RETRY_COUNT:-0} "council_force_approved" 0
             return 2  # Stop
         fi
         log_info "Council force-review: voted to continue"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "5.26.2"
+__version__ = "5.27.1"
 
 # Expose the control app for easy import
 try:

package/dashboard/control.py

@@ -5,7 +5,7 @@ FastAPI-based session control endpoints for the Loki Mode dashboard.
 Provides start/stop/pause/resume functionality and real-time status updates.
 
 Usage:
-    uvicorn dashboard.control:app --host 0.0.0.0 --port 8420
+    uvicorn dashboard.control:app --host 0.0.0.0 --port 57374
     # Or run with the CLI:
     loki dashboard start
 """
@@ -510,5 +510,5 @@ async def asyncio_sleep(seconds: float):
 # Run with uvicorn if executed directly
 if __name__ == "__main__":
     import uvicorn
-    port = int(os.environ.get("LOKI_DASHBOARD_PORT", "8420"))
+    port = int(os.environ.get("LOKI_DASHBOARD_PORT", "57374"))
     uvicorn.run(app, host="0.0.0.0", port=port)