loki-mode 7.100.0 → 7.101.0

package/README.md

@@ -138,6 +138,14 @@ status check in your repository's branch-protection settings.
 
 ## Get Started in 30 Seconds
 
+Zero install, zero key, zero spend. See a real Evidence Receipt right now:
+
+```bash
+npx loki-mode tour                             # replay a real sample receipt (no install, no key, no spend)
+```
+
+Ready to build? Install and run the guided first build:
+
 ```bash
 bun install -g loki-mode                       # install (npm/brew/Docker also work, see below)
 loki quickstart                                # one guided command: your first real build

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.100.0
+# Loki Mode v7.101.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.100.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.101.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.100.0
+7.101.0

package/autonomy/lib/proof-generator.py

@@ -843,12 +843,17 @@ def _compute_headline(facts, degraded):
     if tests_verified and not degraded and diff_nonempty:
         return "VERIFIED"
     # Any fact verified at all (tests/build verified, or a passed gate)?
+    # A non-empty diff is a PREREQUISITE for VERIFIED (checked above), NOT a
+    # positive fact of passage: code was written, but nothing was shown to pass.
+    # Including diff_nonempty here let a build that ran ZERO tests/gates but
+    # produced code emit "VERIFIED WITH GAPS" - a fake-green at the receipt. Only
+    # a fact that actually ran and passed (tests/build verified, or a passed gate)
+    # may qualify; otherwise the honest headline is NOT VERIFIED.
     any_verified = (
         tests.get("status") == "verified"
         or build.get("status") == "verified"
         or any(g.get("status") == "passed"
                for g in (facts.get("quality_gates") or []))
-        or diff_nonempty
     )
     if any_verified and degraded:
         return "VERIFIED WITH GAPS"

package/autonomy/loki

@@ -922,6 +922,7 @@ show_help() {
     echo "  loki start --bg ./prd.md      # Start in background"
     echo "  loki start --parallel ./prd.md   # Parallel mode (git worktrees)"
     echo "  loki quick \"add dark mode\"  # Single-task mode (3 iters max)"
+    echo "  loki tour                     # See a real sample result (no provider, no key, no spend)"
     echo "  loki demo                     # Build a sample todo app end to end"
     echo "  loki init -t saas-starter     # Scaffold from template"
     echo "  loki template install <src>   # Install a community PRD template"
@@ -1037,6 +1038,7 @@ show_landing() {
     echo -e "First time here? ${CYAN}loki doctor${NC} checks your setup (an AI provider CLI is required)."
     echo ""
     echo "Get started (in order):"
+    echo -e "  ${CYAN}loki tour${NC}             See a real result now (no provider, no key, no spend)"
     echo -e "  ${CYAN}loki doctor${NC}           Check your setup is ready (a few seconds)"
     echo -e "  ${CYAN}loki quickstart${NC}       Guided first build from your idea (no PRD needed)"
     echo -e "  ${CYAN}loki start ./prd.md${NC}   Build from a spec (PRD file, GitHub issue, or no arg)"
@@ -5446,6 +5448,7 @@ cmd_welcome_terminal() {
     echo -e "  ${CYAN}Cross-project memory${NC}     Lessons compound, so agents stop repeating mistakes."
     echo -e "  ${CYAN}Provider-agnostic${NC}        Claude, Codex, Cline, or Aider. Your keys, your infra."
     echo ""
+    echo -e "  Try it now:   ${BOLD}loki tour${NC} (a real sample result, no provider, no key, no spend)"
     echo -e "  Quick start:  ${BOLD}loki quickstart${NC} (from your idea) or ${BOLD}loki start ./prd.md${NC} (from a spec)"
     echo -e "  Docs:         ${BOLD}https://www.autonomi.dev/docs${NC}"
     echo ""

package/autonomy/run.sh

@@ -2023,6 +2023,35 @@ _loki_check_git_present() {
     return 0
 }
 
+# _loki_check_workspace_writable: the build writes state, proofs, and source into
+# the working directory and its .loki/ subtree on every iteration. A read-only
+# volume, a permission-denied directory, or a full disk would otherwise fail
+# silently deep inside the loop (every state write swallows errors with
+# `2>/dev/null || true`), leaving the user with a confusing half-built run. Catch
+# it once, up front, with one actionable message instead. HARD requirement.
+_loki_check_workspace_writable() {
+    local dir="${TARGET_DIR:-$(pwd)}"
+    local probe="${dir}/.loki/.write-probe.$$"
+    # Ensure the .loki subtree can be created and written to.
+    if ! mkdir -p "${dir}/.loki" 2>/dev/null; then
+        if [ ! -w "$dir" ]; then
+            log_error "Cannot create ${dir}/.loki -- the working directory is not writable. Fix permissions (e.g. chmod u+w '${dir}') or run from a directory you own, then retry."
+        else
+            log_error "Cannot create ${dir}/.loki. If the disk is full, free space (df -h '${dir}'); if it is a read-only mount, run from a writable location, then retry."
+        fi
+        return 1
+    fi
+    # Confirm we can actually write a byte (catches full disk / read-only mount
+    # where the directory exists but writes fail).
+    if ! (: > "$probe") 2>/dev/null; then
+        rm -f "$probe" 2>/dev/null || true
+        log_error "Cannot write to ${dir}/.loki -- check free disk space (df -h '${dir}') and that the volume is not read-only, then retry."
+        return 1
+    fi
+    rm -f "$probe" 2>/dev/null || true
+    return 0
+}
+
 # _loki_check_network_reachable: ADVISORY only. A fast (3s) reachability probe to
 # the active provider endpoint that WARNS and continues if it cannot reach it -- a
 # curl failure does not prove the provider CLI cannot connect (3s timeout under
@@ -2070,6 +2099,9 @@ validate_api_keys() {
     if ! _loki_check_git_present; then
         return 1
     fi
+    if ! _loki_check_workspace_writable; then
+        return 1
+    fi
     if ! _loki_check_network_reachable "$provider"; then
         return 1
     fi
@@ -3229,6 +3261,22 @@ except Exception:
         else
             echo "Diff stat: (no changes detected vs run start, or git unavailable)"
         fi
+        # Empty-diff remedy (mirrors emit_completion_summary's on-screen line) so
+        # a --bg or dashboard user reading COMPLETION.txt gets the same honest,
+        # actionable guidance as a foreground user. Never implies success.
+        case "$files_changed" in
+            ''|0)
+                case "$outcome" in
+                    complete|max_iterations)
+                        echo ""
+                        echo "No file changes were produced this run. Likely the spec was too vague"
+                        echo "or already satisfied. Next: re-run with a more concrete spec, e.g."
+                        echo "  loki start \"<one concrete, testable change you want>\""
+                        echo "or inspect what happened: loki why"
+                        ;;
+                esac
+                ;;
+        esac
     } > "$loki_dir/COMPLETION.txt" 2>/dev/null || true
 
     # ---- Durable machine-readable file: .loki/state/completion.json -----------
@@ -3515,6 +3563,24 @@ except Exception:
     fi
     echo -e "${GREEN}|${NC} Branch: ${BOLD}${_branch}${NC}"
     echo -e "${GREEN}|${NC} Files:  ${BOLD}${_files}${NC} changed  ${GREEN}+${_ins}${NC} / ${RED}-${_del}${NC}"
+    # Empty-diff guard (honest, not fake-green): a run that ended without
+    # producing ANY file change is the classic confusing new-user outcome
+    # ("it said done, but nothing happened"). Never imply success on a 0-file
+    # run -- surface it plainly with one actionable next step. Only for the
+    # non-failure outcomes (a "failed"/"stopped" box already explains itself).
+    case "$_files" in
+        ''|0)
+            case "$_outcome" in
+                complete|max_iterations)
+                    echo -e "${GREEN}|${NC}"
+                    echo -e "${GREEN}|${NC} ${YELLOW}No file changes were produced this run.${NC} Likely the spec was too vague"
+                    echo -e "${GREEN}|${NC} or already satisfied. Next: re-run with a more concrete spec, e.g."
+                    echo -e "${GREEN}|${NC}   ${BOLD}loki start \"<one concrete, testable change you want>\"${NC}"
+                    echo -e "${GREEN}|${NC} or inspect what happened: ${BOLD}loki why${NC}"
+                    ;;
+            esac
+            ;;
+    esac
     case "$_atotal" in ''|0) : ;; *)
         echo -e "${GREEN}|${NC} Spec assumptions recorded: ${BOLD}${_atotal}${NC} (${_ahigh} high) ${DIM}see .loki/assumptions/ledger.md${NC}"
         ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.100.0"
+__version__ = "7.101.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/static/index.html

@@ -851,6 +851,116 @@
 
     /* Overview handled by <loki-overview> shadow DOM */
 
+    /* First-run hero: shown only to a brand-new user (no completed runs,
+       no active session, no current spec). Gated in JS on /api/spec/history
+       being empty so a returning-but-idle user never sees it. Hidden by
+       default; JS adds .first-run-hero--visible after the signal confirms. */
+    .first-run-hero {
+      display: none;
+    }
+    .first-run-hero--visible {
+      display: block;
+      margin-bottom: 28px;
+      background: var(--loki-bg-card);
+      border: 1px solid var(--loki-border);
+      border-radius: 8px;
+      padding: 28px 28px 24px;
+    }
+    .first-run-hero__top {
+      display: flex;
+      align-items: center;
+      gap: 12px;
+      margin-bottom: 6px;
+    }
+    .first-run-hero__icon {
+      width: 40px;
+      height: 40px;
+      flex-shrink: 0;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      border-radius: 9999px;
+      background: var(--loki-accent-glow);
+      color: var(--loki-accent);
+    }
+    .first-run-hero__icon svg { width: 22px; height: 22px; }
+    .first-run-hero__title {
+      font-family: 'DM Serif Display', Georgia, serif;
+      font-size: 1.5rem;
+      font-weight: 400;
+      color: var(--loki-text-primary);
+      letter-spacing: -0.01em;
+    }
+    .first-run-hero__desc {
+      font-size: 14px;
+      line-height: 1.6;
+      color: var(--loki-text-secondary);
+      max-width: 620px;
+      margin: 0 0 18px;
+    }
+    .first-run-hero__cmd-label {
+      font-size: 11px;
+      font-weight: 600;
+      text-transform: uppercase;
+      letter-spacing: 0.05em;
+      color: var(--loki-text-muted);
+      margin-bottom: 6px;
+    }
+    .first-run-hero__cmd {
+      display: flex;
+      align-items: center;
+      gap: 10px;
+      background: var(--loki-bg-tertiary);
+      border: 1px solid var(--loki-border);
+      border-radius: 6px;
+      padding: 10px 12px;
+      max-width: 420px;
+      margin-bottom: 14px;
+    }
+    .first-run-hero__cmd code {
+      flex: 1;
+      font-family: var(--loki-font-mono, 'JetBrains Mono', monospace);
+      font-size: 13px;
+      color: var(--loki-text-primary);
+      white-space: nowrap;
+      overflow-x: auto;
+    }
+    .first-run-hero__copy {
+      flex-shrink: 0;
+      display: inline-flex;
+      align-items: center;
+      gap: 5px;
+      background: var(--loki-accent);
+      color: #ffffff;
+      border: none;
+      border-radius: 5px;
+      padding: 6px 12px;
+      font-size: 12px;
+      font-weight: 600;
+      font-family: inherit;
+      cursor: pointer;
+      transition: background 0.15s ease;
+    }
+    .first-run-hero__copy:hover { background: var(--loki-accent-hover); }
+    .first-run-hero__copy:focus-visible {
+      outline: 2px solid var(--loki-accent);
+      outline-offset: 2px;
+    }
+    .first-run-hero__copy svg { width: 13px; height: 13px; }
+    .first-run-hero__secondary {
+      font-size: 13px;
+      color: var(--loki-text-muted);
+      line-height: 1.6;
+    }
+    .first-run-hero__secondary code {
+      font-family: var(--loki-font-mono, 'JetBrains Mono', monospace);
+      font-size: 12px;
+      background: var(--loki-bg-tertiary);
+      color: var(--loki-text-secondary);
+      padding: 1px 6px;
+      border-radius: 3px;
+    }
+
     /* Offline Banner */
     .offline-banner {
       position: fixed;
@@ -1135,6 +1245,35 @@
     <main class="main-content" id="main-content">
       <!-- Overview + Tasks (combined) -->
       <div class="section-page active" id="page-overview">
+        <!-- First-run hero: a brand-new user (zero completed runs) lands here
+             with nothing to show. Instead of three stacked passive empty
+             states, give them one branded next action. Hidden by default;
+             initFirstRunHero() reveals it only when /api/spec/history is
+             empty AND no session is active AND no spec is loaded. A returning
+             user who has shipped a run never sees it. -->
+        <section class="first-run-hero" id="first-run-hero" role="region" aria-label="Get started with Loki" hidden>
+          <div class="first-run-hero__top">
+            <span class="first-run-hero__icon" aria-hidden="true">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polygon points="13 2 3 14 12 14 11 22 21 10 12 10 13 2"></polygon></svg>
+            </span>
+            <h2 class="first-run-hero__title">Start your first build</h2>
+          </div>
+          <p class="first-run-hero__desc">
+            Loki turns a spec (a PRD, a GitHub issue, or a one-line idea) into a verified, working product.
+            No build has run in this project yet. Run the guided quickstart in your terminal to kick off your first one, then watch it here live.
+          </p>
+          <div class="first-run-hero__cmd-label">Run in your terminal</div>
+          <div class="first-run-hero__cmd">
+            <code id="first-run-cmd">loki quickstart</code>
+            <button type="button" class="first-run-hero__copy" id="first-run-copy" aria-label="Copy command: loki quickstart" data-copy="loki quickstart">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path></svg>
+              <span id="first-run-copy-label">Copy</span>
+            </button>
+          </div>
+          <p class="first-run-hero__secondary">
+            Just looking? Try a zero-key, zero-spend sample receipt: <code>loki tour</code>
+          </p>
+        </section>
         <!-- Active spec: what Loki is building from + history of past specs -->
         <div style="margin-bottom: 28px;">
           <div class="section-page-header">
@@ -15819,7 +15958,82 @@ document.addEventListener('DOMContentLoaded', function() {
 
   // Overview cards are now handled by the <loki-overview> component
   // which polls /api/status reactively via the unified API client.
+
+  // First-run hero: reveal only for a genuinely brand-new user. The honest
+  // "has this project ever produced a build?" signal is /api/spec/history,
+  // which is derived from real Evidence Receipts (never faked). We additionally
+  // require no active session and no current spec so the hero never overlaps a
+  // live or just-finished run. A returning-but-idle user (history > 0) never
+  // sees it. Any fetch error -> leave the hero hidden (fail safe, no false
+  // "you've never built" claim).
+  (function initFirstRunHero() {
+    var hero = document.getElementById('first-run-hero');
+    if (!hero) return;
+
+    var copyBtn = document.getElementById('first-run-copy');
+    if (copyBtn) {
+      copyBtn.addEventListener('click', function() {
+        var cmd = copyBtn.getAttribute('data-copy') || 'loki quickstart';
+        var label = document.getElementById('first-run-copy-label');
+        var done = function() {
+          if (!label) return;
+          var prev = label.textContent;
+          label.textContent = 'Copied';
+          setTimeout(function() { label.textContent = prev; }, 1600);
+        };
+        if (navigator.clipboard && navigator.clipboard.writeText) {
+          navigator.clipboard.writeText(cmd).then(done).catch(function() {});
+        } else {
+          // Older/insecure-context fallback: select + execCommand.
+          var ta = document.createElement('textarea');
+          ta.value = cmd;
+          ta.setAttribute('readonly', '');
+          ta.style.position = 'absolute';
+          ta.style.left = '-9999px';
+          document.body.appendChild(ta);
+          ta.select();
+          try { document.execCommand('copy'); done(); } catch (e) { /* ignore */ }
+          document.body.removeChild(ta);
+        }
+      });
+    }
+
+    function showHero(show) {
+      if (show) {
+        hero.hidden = false;
+        hero.classList.add('first-run-hero--visible');
+      } else {
+        hero.classList.remove('first-run-hero--visible');
+        hero.hidden = true;
+      }
+    }
+
+    function evaluate() {
+      Promise.all([
+        fetch(detectedUrl + '/api/spec/history').then(function(r) { return r.ok ? r.json() : null; }).catch(function() { return null; }),
+        fetch(detectedUrl + '/api/status').then(function(r) { return r.ok ? r.json() : null; }).catch(function() { return null; }),
+        fetch(detectedUrl + '/api/spec').then(function(r) { return r.ok ? r.json() : null; }).catch(function() { return null; })
+      ]).then(function(res) {
+        var history = res[0];
+        var status = res[1];
+        var spec = res[2];
+        // Fail safe: if we cannot read the history signal, do not claim
+        // "you've never built" -- keep the hero hidden.
+        if (!history || !Array.isArray(history.history)) { showHero(false); return; }
+        var hasEverBuilt = history.history.length > 0;
+        var st = status && status.status ? String(status.status) : 'offline';
+        var sessionActive = (st === 'running' || st === 'autonomous' || st === 'paused');
+        var hasSpec = !!(spec && spec.type && spec.type !== 'none');
+        showHero(!hasEverBuilt && !sessionActive && !hasSpec);
+      }).catch(function() { showHero(false); });
+    }
+
+    evaluate();
+    // Re-check after a session starts/stops so the hero disappears once the
+    // first build begins and never reappears once a run has shipped.
+    setInterval(evaluate, 15000);
+  })();
 });
-  </script>
+</script>
 </body>
 </html>

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.100.0
+**Version:** v7.101.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.100.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.101.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -802,4 +802,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(Z8),2}}r1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var FZ=await jZ(Bun.argv.slice(2));process.exit(FZ);
 
-//# debugId=D8F1E717478FB03A64756E2164756E21
+//# debugId=01C60773ABB86B6464756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.100.0'
+__version__ = '7.101.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.100.0",
+  "version": "7.101.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.100.0",
+  "version": "7.101.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/bin/postinstall.js

@@ -1,244 +0,0 @@
-#!/usr/bin/env node
-/**
- * Loki Mode postinstall script
- * Sets up the skill symlink for Claude Code, Codex CLI, and Gemini CLI
- */
-
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const homeDir = os.homedir();
-const packageDir = path.join(__dirname, '..');
-
-const version = (() => {
-  try { return fs.readFileSync(path.join(packageDir, 'VERSION'), 'utf8').trim(); }
-  catch { return require(path.join(packageDir, 'package.json')).version; }
-})();
-
-console.log('');
-console.log(`Loki Mode v${version} installed!`);
-console.log('');
-
-// Multi-provider skill targets
-const skillTargets = [
-  { dir: path.join(homeDir, '.claude', 'skills', 'loki-mode'), name: 'Claude Code' },
-  { dir: path.join(homeDir, '.codex', 'skills', 'loki-mode'), name: 'Codex CLI' },
-  { dir: path.join(homeDir, '.gemini', 'skills', 'loki-mode'), name: 'Gemini CLI' },
-];
-
-const results = [];
-
-for (const target of skillTargets) {
-  try {
-    const skillParent = path.dirname(target.dir);
-
-    if (!fs.existsSync(skillParent)) {
-      fs.mkdirSync(skillParent, { recursive: true });
-    }
-
-    // Remove existing symlink/directory
-    if (fs.existsSync(target.dir)) {
-      const stats = fs.lstatSync(target.dir);
-      if (stats.isSymbolicLink()) {
-        fs.unlinkSync(target.dir);
-      } else {
-        // Existing real directory (not a symlink) - back it up and replace
-        const backupDir = target.dir + '.backup.' + Date.now();
-        console.log(`[WARNING] Existing non-symlink installation found at ${target.dir}`);
-        console.log(`  Backing up to: ${backupDir}`);
-        try {
-          fs.renameSync(target.dir, backupDir);
-        } catch (backupErr) {
-          console.log(`  Could not back up: ${backupErr.message}`);
-          results.push({ name: target.name, path: target.dir, ok: false });
-          continue;
-        }
-      }
-    }
-
-    // Create symlink
-    if (!fs.existsSync(target.dir)) {
-      fs.symlinkSync(packageDir, target.dir);
-    }
-    results.push({ name: target.name, path: target.dir, ok: true });
-  } catch (err) {
-    results.push({ name: target.name, path: target.dir, ok: false, error: err.message });
-  }
-}
-
-// Print summary
-console.log('Skills installed:');
-for (const r of results) {
-  const icon = r.ok ? 'OK' : 'SKIP';
-  const shortPath = r.path.replace(homeDir, '~');
-  if (r.ok) {
-    console.log(`  [${icon}] ${r.name.padEnd(12)} (${shortPath})`);
-  } else {
-    console.log(`  [${icon}] ${r.name.padEnd(12)} (${shortPath}) - ${r.error || 'backup failed'}`);
-  }
-}
-
-if (results.some(r => !r.ok)) {
-  console.log('');
-  console.log('To fix missing symlinks:');
-  console.log(`  loki setup-skill`);
-}
-
-// PATH check: warn if npm global bin is not in PATH, and auto-fix on macOS Homebrew
-try {
-  const { execSync } = require('child_process');
-  const npmBin = execSync('npm bin -g 2>/dev/null || npm prefix -g', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
-  const npmBinDir = npmBin.endsWith('/bin') ? npmBin : npmBin + '/bin';
-  const pathDirs = (process.env.PATH || '').split(':');
-  const lokiBinInPath = pathDirs.some(d => d === npmBinDir || d === npmBin);
-
-  // On macOS with Homebrew Node, npm global bin path changes on every Node version upgrade
-  // (e.g., /opt/homebrew/Cellar/node/22.x/bin -> /opt/homebrew/Cellar/node/23.x/bin).
-  // Use the npm prefix bin directory which is stable across upgrades.
-  if (os.platform() === 'darwin') {
-    let stableDir;
-    try {
-      stableDir = execSync('npm prefix -g', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim() + '/bin';
-    } catch {
-      stableDir = '/opt/homebrew/bin';
-    }
-    if (fs.existsSync(stableDir) && stableDir !== npmBinDir) {
-      for (const bin of ['loki', 'loki-mode']) {
-        const src = path.join(npmBinDir, bin);
-        const dest = path.join(stableDir, bin);
-        try {
-          if (fs.existsSync(src)) {
-            // Remove stale symlink or existing file
-            try { fs.unlinkSync(dest); } catch {}
-            fs.symlinkSync(src, dest);
-          }
-        } catch {
-          // Silently skip if no permission (non-root)
-        }
-      }
-    }
-  }
-
-  if (!lokiBinInPath) {
-    console.log('');
-    console.log('[IMPORTANT] The `loki` command may not be in your PATH.');
-    console.log('');
-    console.log('Add the npm global bin directory to your PATH:');
-    console.log(`  export PATH="${npmBinDir}:$PATH"`);
-    console.log('');
-    console.log('To make this permanent, add it to your shell config (~/.zshrc or ~/.bashrc):');
-    console.log(`  echo 'export PATH="${npmBinDir}:$PATH"' >> ~/.zshrc && source ~/.zshrc`);
-    console.log('');
-    console.log('Or use the Homebrew tap (sets PATH automatically):');
-    console.log('  brew tap asklokesh/tap && brew install loki-mode');
-  }
-} catch {
-  // If npm bin check fails, skip PATH warning silently
-}
-
-// Install Python dependencies for Purple Lab (pexpect, watchdog, httpx)
-try {
-  const { execSync } = require('child_process');
-  const pyDeps = ['pexpect', 'watchdog', 'httpx'];
-  // Check if deps are already installed
-  const missing = pyDeps.filter(dep => {
-    try {
-      execSync(`python3 -c "import ${dep}"`, { stdio: 'pipe' });
-      return false;
-    } catch { return true; }
-  });
-  if (missing.length > 0) {
-    console.log(`Installing Python dependencies: ${missing.join(', ')}...`);
-    try {
-      execSync(`python3 -m pip install --break-system-packages ${missing.join(' ')}`, { stdio: 'pipe', timeout: 60000 });
-      console.log('  [OK] Python dependencies installed');
-    } catch {
-      try {
-        execSync(`python3 -m pip install ${missing.join(' ')}`, { stdio: 'pipe', timeout: 60000 });
-        console.log('  [OK] Python dependencies installed');
-      } catch {
-        console.log(`  [WARN] Could not install Python deps. Run: pip install ${missing.join(' ')}`);
-      }
-    }
-  }
-} catch {
-  // Python not available, skip silently
-}
-
-console.log('');
-console.log('CLI commands:');
-console.log('  loki start ./prd.md              Start with Claude (default)');
-console.log('  loki start --provider codex      Start with OpenAI Codex');
-console.log('  loki start --provider gemini     Start with Google Gemini');
-console.log('  loki status                      Check status');
-console.log('  loki doctor                      Verify installation');
-console.log('  loki welcome                     Quick tour, docs, and setup');
-console.log('  loki --help                      Show all commands');
-console.log('');
-console.log('New here? Run `loki welcome` for a 30-second tour.');
-console.log('');
-
-// Anonymous install telemetry (fire-and-forget, silent).
-// Collection is OPT-IN and OFF by default: a default `npm install` (including
-// air-gapped, GDPR, and FedRAMP environments) sends NOTHING. This precedence
-// mirrors loki_collection_enabled in autonomy/crash.sh, _is_enabled in
-// dashboard/telemetry.py, and _loki_telemetry_enabled in autonomy/telemetry.sh.
-//   1. Any opt-out flag present  -> false (hard kill, always wins)
-//   2. Else any opt-in flag present -> true
-//   3. Else (default)            -> false (no egress)
-function _lokiCollectionEnabled() {
-  const telem = (process.env.LOKI_TELEMETRY || '').toLowerCase();
-  // 1. Opt-out always wins.
-  if (telem === 'off') return false;
-  if (process.env.LOKI_TELEMETRY_DISABLED === 'true') return false;
-  if (process.env.DO_NOT_TRACK === '1') return false;
-  let configEnabled = false;
-  try {
-    const cfg = path.join(homeDir, '.loki', 'config');
-    const lines = fs.readFileSync(cfg, 'utf8').split('\n');
-    if (lines.some((l) => l.startsWith('TELEMETRY_DISABLED=true'))) return false;
-    if (lines.some((l) => l.startsWith('TELEMETRY_ENABLED=true'))) configEnabled = true;
-  } catch {}
-  // 2. Opt-in required.
-  if (telem === 'on') return true;
-  if (configEnabled) return true;
-  // 3. Default: OFF.
-  return false;
-}
-try {
-  if (_lokiCollectionEnabled()) {
-    const https = require('https');
-    const crypto = require('crypto');
-    const idFile = path.join(homeDir, '.loki-telemetry-id');
-    let distinctId;
-    try {
-      distinctId = fs.readFileSync(idFile, 'utf8').trim();
-    } catch {
-      distinctId = crypto.randomUUID();
-      try { fs.writeFileSync(idFile, distinctId + '\n'); } catch {}
-    }
-    const payload = JSON.stringify({
-      api_key: 'phc_ya0vGBru41AJWtGNfZZ8H9W4yjoZy4KON0nnayS7s87',
-      event: 'install',
-      distinct_id: distinctId,
-      properties: {
-        os: os.platform(),
-        arch: os.arch(),
-        version: version,
-        channel: 'npm',
-        node_version: process.version,
-        providers_installed: results.filter(r => r.ok).map(r => r.name).join(','),
-      },
-    });
-    const req = https.request({
-      hostname: 'us.i.posthog.com',
-      path: '/capture/',
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', 'Content-Length': payload.length },
-      timeout: 3000,
-    });
-    req.on('error', () => {});
-    req.end(payload);
-  }
-} catch {}