loki-mode 7.103.0 → 7.104.1

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.103.0'
+__version__ = '7.104.1'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.103.0",
+  "version": "7.104.1",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",
@@ -71,6 +71,7 @@
     ".claude-plugin/marketplace.json",
     "autonomy/",
     "providers/",
+    "vendor/autonomi-verify/",
     "agents/",
     "skills/",
     "references/",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.103.0",
+  "version": "7.104.1",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/providers/claude.sh

@@ -52,8 +52,13 @@ PROVIDER_MAX_PARALLEL=10
 #   sonnet -> latest Sonnet (e.g. claude-sonnet-4-6)
 #   haiku  -> latest Haiku  (e.g. claude-haiku-4-5)
 # Override per tier with LOKI_CLAUDE_MODEL_PLANNING, _DEVELOPMENT, _FAST.
-CLAUDE_DEFAULT_PLANNING="opus"
-CLAUDE_DEFAULT_DEVELOPMENT="opus"  # Opus for dev (was sonnet)
+# v7.104.0: Sonnet 5 is the default execution model (was opus for planning+dev).
+# Cheaper + faster near-frontier builder; the trust gate is unchanged by default
+# and a strong Opus judge is opt-in via LOKI_ADVISOR_MODEL (see _dispatch_reviewer).
+# To restore Opus execution: LOKI_CLAUDE_MODEL_DEVELOPMENT=opus (and _PLANNING=opus),
+# or the dashboard "set all to opus". Planning-on-Opus is a one-line revert here.
+CLAUDE_DEFAULT_PLANNING="sonnet"
+CLAUDE_DEFAULT_DEVELOPMENT="sonnet"
 CLAUDE_DEFAULT_FAST="sonnet"
 
 if [ "${LOKI_ALLOW_HAIKU:-false}" = "true" ]; then
@@ -379,13 +384,14 @@ loki_apply_max_tier_clamp() {
 # Resolves a capability tier to a concrete model name at runtime.
 # Respects LOKI_MAX_TIER to cap cost via loki_apply_max_tier_clamp. NOTE the
 # ceiling clamps DOWN to the provider's configured tier model, not to the alias
-# named by the cap: with the stock config (CLAUDE_DEFAULT_DEVELOPMENT=opus, see
-# line 56), LOKI_MAX_TIER=sonnet resolves planning/fable DOWN to
-# PROVIDER_MODEL_DEVELOPMENT, which is still opus. To actually pin sonnet as the
-# ceiling, also set LOKI_ALLOW_HAIKU=true (which makes PROVIDER_MODEL_DEVELOPMENT
-# sonnet) or override LOKI_CLAUDE_MODEL_DEVELOPMENT=sonnet. This is intentional
-# and is mirrored byte-for-byte by the dashboard/estimator ports (parity-locked
-# in tests/test-model-override.sh).
+# named by the cap. As of v7.104.0 the stock config is
+# CLAUDE_DEFAULT_DEVELOPMENT=sonnet, so LOKI_MAX_TIER=sonnet resolves
+# planning/fable DOWN to PROVIDER_MODEL_DEVELOPMENT, which is now sonnet - the
+# ceiling genuinely pins sonnet with the stock config (previously it clamped to
+# opus because dev defaulted to opus). To cap harder, LOKI_MAX_TIER=haiku pins
+# everything to PROVIDER_MODEL_FAST. This is intentional and is mirrored
+# byte-for-byte by the dashboard/estimator ports (parity-locked in
+# tests/test-model-override.sh).
 # Capability aliases: "best" -> planning tier, "fast" -> fast tier, "balanced" -> development tier
 resolve_model_for_tier() {
     local tier="$1"

package/providers/model_catalog.json

@@ -1,16 +1,16 @@
 {
   "_comment": "Canonical model catalog. Update this single file when a provider ships a new model. Providers/web-app/docs read from here.",
   "schema_version": 1,
-  "updated": "2026-04-18",
+  "updated": "2026-06-30",
   "providers": {
     "claude": {
-      "latest_planning": "claude-opus-4-7",
-      "latest_development": "claude-opus-4-7",
-      "latest_fast": "claude-sonnet-4-6",
+      "latest_planning": "claude-opus-4-8",
+      "latest_development": "claude-sonnet-5",
+      "latest_fast": "claude-sonnet-5",
       "cli_aliases": {
         "fable": "claude-fable-5",
-        "opus": "claude-opus-4-7",
-        "sonnet": "claude-sonnet-4-6",
+        "opus": "claude-opus-4-8",
+        "sonnet": "claude-sonnet-5",
         "haiku": "claude-haiku-4-5"
       },
       "models": [
@@ -23,7 +23,7 @@
           "notes": "Top-tier advisory model. Pricing 2x Opus ($10/$50 per MTok). Doc-supported for architecture/root-cause; opt-in only (cost). Refuses cyber content, so NOT used for security review."
         },
         {
-          "id": "claude-opus-4-7",
+          "id": "claude-opus-4-8",
           "alias": "opus",
           "tier": "planning",
           "context_window": 1000000,
@@ -31,11 +31,12 @@
           "notes": "Adaptive thinking, xhigh effort for agentic coding"
         },
         {
-          "id": "claude-sonnet-4-6",
+          "id": "claude-sonnet-5",
           "alias": "sonnet",
           "tier": "development",
           "context_window": 1000000,
-          "max_output": 64000
+          "max_output": 64000,
+          "notes": "Default execution model as of v7.104.0. Intro price $2/$10 per MTok through 2026-08-31; list price $3/$15 per MTok."
         },
         {
           "id": "claude-haiku-4-5",
@@ -58,22 +59,22 @@
       "notes": "Codex uses a single model with effort level (xhigh/high/low) for tier differentiation"
     },
     "cline": {
-      "latest_planning": "claude-opus-4-7",
-      "latest_development": "claude-opus-4-7",
-      "latest_fast": "claude-sonnet-4-6",
+      "latest_planning": "claude-opus-4-8",
+      "latest_development": "claude-sonnet-5",
+      "latest_fast": "claude-sonnet-5",
       "models": [
-        { "id": "claude-opus-4-7", "tier": "planning" },
-        { "id": "claude-sonnet-4-6", "tier": "development" },
+        { "id": "claude-opus-4-8", "tier": "planning" },
+        { "id": "claude-sonnet-5", "tier": "development" },
         { "id": "gpt-4.1", "tier": "development" }
       ]
     },
     "aider": {
-      "latest_planning": "claude-opus-4-7",
-      "latest_development": "claude-opus-4-7",
-      "latest_fast": "claude-sonnet-4-6",
+      "latest_planning": "claude-opus-4-8",
+      "latest_development": "claude-sonnet-5",
+      "latest_fast": "claude-sonnet-5",
       "models": [
-        { "id": "claude-opus-4-7", "tier": "planning" },
-        { "id": "claude-sonnet-4-6", "tier": "development" },
+        { "id": "claude-opus-4-8", "tier": "planning" },
+        { "id": "claude-sonnet-5", "tier": "development" },
         { "id": "gpt-4.1", "tier": "development" },
         { "id": "ollama_chat/deepseek-coder", "tier": "fast" }
       ]

package/vendor/autonomi-verify/LICENSE

@@ -0,0 +1,39 @@
+AUTONOMI VERIFY - COMMERCIAL LICENSE NOTICE
+
+Copyright (c) 2026 Autonomi. All rights reserved.
+
+This directory contains a pre-built, dependency-free bundle ("the Bundle") of
+the Autonomi Verify engine. The Bundle is proprietary commercial software of
+Autonomi and is provided to you ONLY as an embedded component of Loki Mode.
+
+This Commercial License Notice is SEPARATE FROM and DISTINCT FROM the Business
+Source License 1.1 (BUSL-1.1) that governs the rest of the Loki Mode
+repository. The BUSL-1.1 terms do NOT apply to the Bundle. The Bundle is not
+open source.
+
+PERMITTED USE
+  You may execute the Bundle solely as invoked by Loki Mode for the purpose of
+  verifying your own changes (the `loki verify --hosted` path). No other use is
+  granted.
+
+RESTRICTIONS
+  Except as expressly permitted above, you may NOT:
+    - copy, redistribute, sublicense, sell, or host the Bundle as a service;
+    - reverse engineer, decompile, or disassemble the Bundle, or attempt to
+      derive its source code, except to the limited extent applicable law
+      expressly permits despite this restriction;
+    - remove or alter this notice.
+
+NO SOURCE GRANT
+  The source code of the Autonomi Verify engine is NOT included in this
+  repository and is NOT licensed to you. Only the built Bundle is distributed
+  here.
+
+NO WARRANTY
+  THE BUNDLE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+  FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL
+  AUTONOMI BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING FROM,
+  OUT OF, OR IN CONNECTION WITH THE BUNDLE OR ITS USE.
+
+For licensing inquiries beyond the permitted use above, contact Autonomi.

package/vendor/autonomi-verify/README.md

@@ -0,0 +1,58 @@
+# Autonomi Verify (embedded bundle)
+
+This directory contains a single pre-built, dependency-free JavaScript bundle of
+the Autonomi Verify deterministic verification engine.
+
+- `embed.js` - the bundled engine (runtime: `bun`). Built from the PRIVATE
+  Autonomi Verify source repository; only the built artifact is committed here.
+  The TypeScript source is NOT included and is NOT part of this repository.
+- `LICENSE` - the COMMERCIAL license notice covering `embed.js`. This is
+  distinct from the Business Source License 1.1 that governs the rest of
+  Loki Mode. `embed.js` is proprietary and is not open source.
+
+## What it does
+
+`embed.js` observes a local git working directory read-only and runs the
+Autonomi Verify evidence gate, printing the verdict fields as one JSON object on
+stdout. It performs NO network access and NEVER executes the project's tests
+(that is reserved for the hosted/sandboxed Phase 2 surface).
+
+Invocation contract:
+
+```
+bun vendor/autonomi-verify/embed.js --dir <path> [--base <ref>] [--head <ref>]
+```
+
+Output (stdout, on a produced verdict, exit 0):
+
+```json
+{
+  "engine": "autonomi-verify",
+  "engine_version": "<version>",
+  "verified": true,
+  "inconclusive": false,
+  "inconclusive_reason": null,
+  "evidence": {
+    "diff_nonempty": true,
+    "diff_files_changed": 1,
+    "diff_base_sha": "<sha>",
+    "tests_ran": false,
+    "tests_passed": true,
+    "test_runner": "none"
+  }
+}
+```
+
+On a genuine observation failure (git missing, path absent) it exits nonzero and
+prints nothing parseable on stdout. The caller (`loki verify --hosted`) treats a
+nonzero exit, a missing bundle, or a missing `bun` as "engine unusable" and
+falls open to the deterministic bash verdict. It never turns an unusable engine
+into a silent pass.
+
+## How it is used by `loki verify`
+
+`loki verify` (no flags) does NOT touch this bundle and is byte-identical to its
+prior behavior. Only the opt-in `loki verify --hosted` path probes for `bun` and
+this bundle and, when both are present, folds the engine's verdict fields into
+`evidence.json` under a `hosted` key. The bash deterministic verdict remains
+authoritative for the exit code.

package/vendor/autonomi-verify/embed.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env bun
+// @bun
+function D(j){let z=new Set;for(let A of[j.committed,j.unstaged,j.staged,j.untracked])for(let J of A){if(J==="")continue;if(/^\.loki\//.test(J))continue;z.add(J)}return z.size}function Z(j){let z=!1,A=0,J=!1,K="";if(!j.diff.is_git_repo)J=!0,K="no_git_repo";else if(!j.diff.base_sha)J=!0,K="no_run_start_sha";else if(A=D(j.diff.sources),A===0)z=!0;let X=!1,H="none",$=!0,C=!1,Y="";if(j.tests!==null){let L=j.tests.runner??"none",G=j.tests.pass??!0;if(H=L,L==="none")$=!0,C=!0,Y="no_test_runner";else if(G===!1)$=!1,X=!0;else $=!0}else H="none",$=!0,C=!0,Y="no_test_results";let U=z||X,W=null;if(U)if(z&&X)W="empty_diff_and_tests_red";else if(z)W="empty_diff";else W="tests_red";return{verdict:U?"block":"pass",gate_return_code:U?1:0,block_reason:W,diff:{ok:!z,base_sha:j.diff.base_sha??"",files_changed:A,inconclusive:J,inconclusive_reason:K},tests:{ok:!X,runner:H,pass:$,inconclusive:C,inconclusive_reason:Y}}}function q(j){return{diff_nonempty:j.diff.files_changed>0,diff_files_changed:j.diff.files_changed,diff_base_sha:j.diff.base_sha,tests_ran:j.tests.runner!=="none"&&!j.tests.inconclusive,tests_passed:j.tests.pass,test_runner:j.tests.runner}}function B(j){switch(j){case"no_git_repo":return"no_git_repo";case"no_run_start_sha":case"no_base_sha":return"no_base_sha";case"":return null;default:return null}}import{spawnSync as S}from"node:child_process";import{existsSync as N,statSync as V}from"node:fs";var k="unsigned:phase2-signing-pending";async function T(j,z){if(!z)throw Error("verifyCompletion: sandbox observation is Phase 2; supply a VerifyContext with pre-observed evidence to run the engine");let A=Z(z.observed),J=q(A),K=A.diff.inconclusive,X=B(A.diff.inconclusive_reason),H=A.verdict==="pass"&&!K;if(K&&j.options?.fail_on_inconclusive)H=!1;return{...{verification_id:z.verification_id??crypto.randomUUID(),verified:H,evidence:J,council_verdict:{ran:!1,verdict:null,reviewers:[]},cost_honesty_check:{ran:!1,quoted_model:null,dispatched_model:null,honest:null},inconclusive:K,inconclusive_reason:X,created_at:z.created_at??new Date().toISOString()},signature:k}}class Q extends Error{constructor(j){super(j);this.name="VerifyInputError"}}function x(j){return typeof j.dir==="string"}function M(j,z){let A=S("git",j,{cwd:z,encoding:"utf8"});if(A.error){let J=A.error;if(J.code==="ENOENT")throw new Q("cannot observe evidence: the `git` executable was not found on PATH");throw new Q(`cannot observe evidence: git ${j.join(" ")} failed: ${J.message}`)}return{status:A.status??1,stdout:(A.stdout||"").trim(),stderr:(A.stderr||"").trim()}}function P(j){if(!j)return[];return j.split("\x00").filter((z)=>z.length>0)}function h(j){let z=j.dir;if(!N(z))throw new Q(`cannot observe evidence: path does not exist: ${z}`);if(!V(z).isDirectory())throw new Q(`cannot observe evidence: not a directory: ${z}`);let A={committed:[],unstaged:[],staged:[],untracked:[]},J=M(["rev-parse","--is-inside-work-tree"],z);if(J.status!==0||J.stdout!=="true")return{is_git_repo:!1,base_sha:null,sources:A};if(!j.base)return{is_git_repo:!0,base_sha:null,sources:A};let K=M(["rev-parse","--verify","--quiet",j.base],z);if(K.status!==0||!K.stdout)return{is_git_repo:!0,base_sha:null,sources:A};let X=K.stdout,H=j.head??"HEAD",$=M(["diff","--name-only","-z",`${X}..${H}`],z);if($.status!==0)throw new Q(`cannot observe evidence: git diff ${X}..${H} failed: ${$.stderr}`);let C=P($.stdout),Y=M(["diff","--name-only","-z","--cached"],z),U=Y.status===0?P(Y.stdout):[],W=M(["diff","--name-only","-z"],z),L=W.status===0?P(W.stdout):[],G=M(["ls-files","--others","--exclude-standard","-z"],z),_=G.status===0?P(G.stdout):[];return{is_git_repo:!0,base_sha:X,sources:{committed:C,staged:U,unstaged:L,untracked:_}}}async function O(j){let z,A;if(x(j))z={diff:h(j),tests:j.tests??null},A=j.repo??"local";else{if(!j.observed)throw new Q("verify: provide either `observed` (pre-observed evidence) or `dir` (a local git working directory to observe)");z=j.observed,A=j.repo??"preobserved"}let J={repo:A,base_sha:z.diff.base_sha??"",options:j.options};return T(J,{observed:z,verification_id:j.verification_id,created_at:j.created_at})}function m(j){let z={};for(let A=0;A<j.length;A++){let J=j[A];if(J==="--dir")z.dir=j[++A];else if(J==="--base")z.base=j[++A];else if(J==="--head")z.head=j[++A];else if(J==="--version"||J==="-v")process.stdout.write(w+`
+`),process.exit(0);else throw Error(`unknown argument: ${J}`)}if(!z.dir)throw Error("--dir is required");return z}var w="1.0.0";async function y(){let j;try{j=m(process.argv.slice(2))}catch(z){return process.stderr.write(`[embed] ${z.message}
+`),2}try{let z=await O({dir:j.dir,base:j.base,head:j.head}),A={engine:"autonomi-verify",engine_version:w,verified:z.verified,inconclusive:z.inconclusive,inconclusive_reason:z.inconclusive_reason,evidence:{diff_nonempty:z.evidence.diff_nonempty,diff_files_changed:z.evidence.diff_files_changed,diff_base_sha:z.evidence.diff_base_sha,tests_ran:z.evidence.tests_ran,tests_passed:z.evidence.tests_passed,test_runner:z.evidence.test_runner}};return process.stdout.write(JSON.stringify(A)+`
+`),0}catch(z){let A=z instanceof Q?"input":"error";return process.stderr.write(`[embed][${A}] ${z.message}
+`),1}}y().then((j)=>process.exit(j),(j)=>{process.stderr.write(`[embed][fatal] ${j.message}
+`),process.exit(1)});