loki-mode 7.117.0 → 7.117.2

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.117.0
+# Loki Mode v7.117.2
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.117.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.117.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.117.0
+7.117.2

package/autonomy/completion-council.sh

@@ -1753,7 +1753,7 @@ council_evidence_gate() {
     local test_inconclusive_reason=""
     if [ -f "$tr_file" ]; then
         local test_status
-        test_status=$(_TR_FILE="$tr_file" python3 -c "
+        test_status=$(_TR_FILE="$tr_file" python3 <<'PYEOF' 2>/dev/null || echo "INCONCLUSIVE:none:true"
 import json, os, sys
 tr_file = os.environ['_TR_FILE']
 try:
@@ -1781,7 +1781,8 @@ elif status == 'no_tests_run' or passed is not True:
     print('INCONCLUSIVE:%s:true' % runner)
 else:
     print('PASS:%s:true' % runner)
-" 2>/dev/null || echo "INCONCLUSIVE:none:true")
+PYEOF
+)
         local _verdict="${test_status%%:*}"
         local _rest="${test_status#*:}"
         test_runner="${_rest%%:*}"

package/autonomy/run.sh

@@ -1382,8 +1382,14 @@ _parse_json_field() {
     if command -v python3 >/dev/null 2>&1; then
         python3 -c "import json,sys; print(json.load(open(sys.argv[1])).get(sys.argv[2],''))" "$file" "$field" 2>/dev/null
     else
-        # Shell fallback: extract value for simple flat JSON
-        sed 's/.*"'"$field"'":\s*//' "$file" 2>/dev/null | sed 's/[",}].*//' | head -1
+        # Shell fallback (no python3): extract value for simple flat JSON. Handles
+        # BOTH quoted string values ("kind":"wrapper") and bare numeric values
+        # ("ppid":206). The prior impl stripped the leading quote's content to empty
+        # for string fields -- broke "kind" parsing on python3-less hosts, which
+        # would drop wrapper entries into the legacy child path (loki-mode #92).
+        sed 's/.*"'"$field"'":[[:space:]]*//' "$file" 2>/dev/null \
+            | sed 's/^"//' \
+            | sed 's/[",}].*//' | head -1
     fi
 }
 
@@ -1435,6 +1441,93 @@ kill_registered_pid() {
     unregister_pid "$pid"
 }
 
+# Register the CURRENTLY-RUNNING loki-run wrapper itself in the registry.
+# The wrapper registers its children but historically never itself, so a wrapper
+# whose launching session dies is never reaped (loki-mode #92). We record the
+# LAUNCHER's mortal pid (NOT $$ -- $$ is the wrapper's own pid, which would make
+# the parent-death check always succeed and the reaper INERT; NOT $PPID either --
+# in the detached setsid/nohup path bash caches getppid()==1 at exec, and kill -0 1
+# is always true -> also inert). The launcher exports LOKI_LAUNCHER_PID=$$ at each
+# backgrounding site; that launcher shell exits immediately after backgrounding, so
+# the recorded ppid genuinely dies and the parent-death precondition CAN fire. For
+# the foreground path LOKI_LAUNCHER_PID is unset -> $PPID (the user's shell) is the
+# correct mortal fallback. Reap-vs-spare is then decided by the LIVENESS predicate,
+# not by parentage alone. Uses a "kind":"wrapper" tag so cleanup_orphan_pids routes
+# only wrapper entries through the predicate and keeps child entries byte-identical.
+register_self_wrapper() {
+    [ -z "$PID_REGISTRY_DIR" ] && init_pid_registry
+    local launcher_ppid="${LOKI_LAUNCHER_PID:-$PPID}"
+    case "$launcher_ppid" in ''|*[!0-9]*) launcher_ppid="$PPID" ;; esac
+    local entry_file="$PID_REGISTRY_DIR/$$.json"
+    cat > "$entry_file" << EOF
+{"pid":$$,"label":"loki-wrapper","started":"$(date -u +%Y-%m-%dT%H:%M:%SZ)","ppid":$launcher_ppid,"kind":"wrapper","extra":""}
+EOF
+}
+
+# Pure, side-effect-free reap predicate (loki-mode #92). ALL inputs are
+# pre-computed scalars (0/1 booleans or integer ms); NO stat/kill/pgrep inside so
+# it is hermetically unit-testable. Prints "1" (reap) or "0" (spare); returns 0.
+# Reap ONLY when: parent dead AND no live engine child AND idle past the budget.
+# Mirrors the SaaS BFF sweepStuckBuilds and the #91 worker "no-activity != dead"
+# symmetry: a genuinely-detached run that keeps writing .loki activity is spared.
+#   parent_alive:     1 if recorded ppid is still alive, else 0
+#   last_activity_ms: epoch-ms of most recent .loki activity (0 if none found)
+#   now_ms:           current epoch-ms
+#   idle_budget_ms:   generous idle budget (default 900000 = 15 min)
+#   has_live_child:   1 if wrapper has a live ENGINE child (claude/node), else 0
+shouldReapOrphan() {
+    local parent_alive="$1" last_activity_ms="$2" now_ms="$3" idle_budget_ms="$4" has_live_child="$5"
+    if [ "$parent_alive" = "0" ] && [ "$has_live_child" = "0" ] \
+       && [ $(( now_ms - last_activity_ms )) -ge "$idle_budget_ms" ]; then
+        echo 1
+    else
+        echo 0
+    fi
+}
+
+# Most-recent .loki activity as epoch-ms across events.jsonl, signals/*,
+# autonomy-state.json. Cross-platform stat (macOS -f %m / Linux -c %Y). On a stat
+# PARSE FAILURE we default to now_ms (SPARE), never 0 -- a wrong flag must not make a
+# live run look maximally idle and get reaped. "No activity files exist" legitimately
+# yields 0 (reap-eligible); that is distinct from a stat error.
+_loki_last_activity_ms() {
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    local newest=0 f mt stat_ok=0
+    local candidates=()
+    [ -f "$loki_dir/events.jsonl" ] && candidates+=("$loki_dir/events.jsonl")
+    [ -f "$loki_dir/autonomy-state.json" ] && candidates+=("$loki_dir/autonomy-state.json")
+    if [ -d "$loki_dir/signals" ]; then
+        for f in "$loki_dir/signals"/*; do [ -e "$f" ] && candidates+=("$f"); done
+    fi
+    for f in "${candidates[@]:-}"; do
+        [ -e "$f" ] || continue
+        mt=$(stat -f %m "$f" 2>/dev/null) || mt=""
+        [ -z "$mt" ] && { mt=$(stat -c %Y "$f" 2>/dev/null) || mt=""; }
+        case "$mt" in ''|*[!0-9]*) continue ;; esac
+        stat_ok=1
+        [ "$mt" -gt "$newest" ] && newest="$mt"
+    done
+    # candidates present but every stat failed -> parse failure -> spare (now_ms)
+    if [ "${#candidates[@]}" -gt 0 ] && [ "$stat_ok" = "0" ]; then
+        echo "$(( $(date +%s) * 1000 ))"
+        return 0
+    fi
+    echo "$(( newest * 1000 ))"
+}
+
+# Count LIVE ENGINE children of a wrapper (claude/node), EXCLUDING sleep and the
+# status/resource monitors. The observed 3h orphan had only sleep children, so a
+# naive `pgrep -P` (any child) would falsely spare it; the comm filter is what makes
+# the reaper actually fire on the real orphan shape. Prints 1 (has engine child) or 0.
+_loki_has_live_engine_child() {
+    local wrapper_pid="$1" c cc
+    for c in $(pgrep -P "$wrapper_pid" 2>/dev/null); do
+        cc=$(ps -o comm= -p "$c" 2>/dev/null)
+        case "$cc" in *claude*|*node*) echo 1; return 0 ;; esac
+    done
+    echo 0
+}
+
 # Scan registry for orphaned processes and kill them
 # Called on startup and by `loki cleanup`
 # Returns: number of orphans killed
@@ -1457,6 +1550,9 @@ cleanup_orphan_pids() {
             ''|*[!0-9]*) continue ;;
         esac
 
+        # Never reap the currently-running wrapper itself (loki-mode #92 self-skip).
+        [ "$pid" = "$$" ] && continue
+
         if kill -0 "$pid" 2>/dev/null; then
             # Process is alive -- check if its parent session is dead
             local ppid_val=""
@@ -1464,7 +1560,30 @@ cleanup_orphan_pids() {
 
             # Validate ppid_val is numeric before using with kill
             case "$ppid_val" in ''|*[!0-9]*) ppid_val="" ;; esac
-            if [ -n "$ppid_val" ] && [ "$ppid_val" != "$$" ]; then
+
+            # Route WRAPPER entries through the liveness predicate; CHILD entries
+            # (no "kind" field) keep the exact parent-death-only behavior (#92).
+            local kind=""
+            kind=$(_parse_json_field "$entry_file" "kind") || true
+
+            if [ "$kind" = "wrapper" ]; then
+                # Wrapper: reap only if orphaned AND idle-past-budget AND no live
+                # engine child. Compute the impure inputs here (predicate stays pure).
+                if [ -n "$ppid_val" ]; then
+                    local parent_alive=0
+                    kill -0 "$ppid_val" 2>/dev/null && parent_alive=1
+                    local last_activity_ms now_ms has_live_child idle_budget_ms
+                    last_activity_ms=$(_loki_last_activity_ms)
+                    now_ms=$(( $(date +%s) * 1000 ))
+                    has_live_child=$(_loki_has_live_engine_child "$pid")
+                    idle_budget_ms="${LOKI_WRAPPER_IDLE_BUDGET_MS:-900000}"
+                    if [ "$(shouldReapOrphan "$parent_alive" "$last_activity_ms" "$now_ms" "$idle_budget_ms" "$has_live_child")" = "1" ]; then
+                        log_warn "Reaping idle orphaned loki wrapper PID=$pid (parent $ppid_val dead, idle >=$((idle_budget_ms/60000))m, no engine child)" >&2
+                        kill_registered_pid "$pid"
+                        orphan_count=$((orphan_count + 1))
+                    fi
+                fi
+            elif [ -n "$ppid_val" ] && [ "$ppid_val" != "$$" ]; then
                 if ! kill -0 "$ppid_val" 2>/dev/null; then
                     # Parent is dead -- this is an orphan
                     local label=""
@@ -1498,6 +1617,9 @@ kill_all_registered() {
         case "$pid" in
             ''|*[!0-9]*) continue ;;
         esac
+        # Never SIGKILL the running wrapper itself mid-shutdown (loki-mode #92):
+        # it now self-registers, so it would otherwise appear in this sweep.
+        [ "$pid" = "$$" ] && continue
         kill_registered_pid "$pid"
     done
 }
@@ -9023,6 +9145,21 @@ _loki_zero_tests_executed() {
             fi
             return 1
             ;;
+        go-test)
+            # #89: `go test ./...` on a package with NO *_test.go EXITS 0 and prints
+            # `?   <pkg>  [no test files]` -- so a Go project with source but no
+            # tests would score `pass` (a mini fake-green; unlike vitest/pytest/
+            # mocha which exit NON-zero on zero tests and are already not-pass, so
+            # go-test is the only runner in this class that needs detection).
+            # POSITIVE detection: a `[no test files]` line AND no ran-package result
+            # (`ok `/`FAIL`). A mixed run (some pkgs tested) has `ok`, so it is NOT
+            # downgraded. Verified: real passing prints `ok  <pkg>  0.2s`.
+            if printf '%s' "$_zt_out" | grep -qE '\[no test files\]' 2>/dev/null \
+               && ! printf '%s' "$_zt_out" | grep -qE '^(ok|FAIL|--- FAIL)' 2>/dev/null; then
+                return 0
+            fi
+            return 1
+            ;;
         *)
             # Unknown/unparseable runner -> never claim zero-tests (safe default).
             return 1
@@ -9753,12 +9890,41 @@ run_doc_quality_gate() {
     local score=100
     local issues=()
 
+    # F52 (doc-scope, gate half): for a "simple"-tier project the accepted
+    # documentation standard is README.md + USAGE.md, NOT the .loki/docs/
+    # architecture suite. auto_generate_docs_if_needed deliberately skips the
+    # suite for simple tier, so the manifest / API.md checks below MUST NOT
+    # penalize it (else the gate would nag for docs we intentionally did not
+    # generate, forcing extra iterations -- the exact waste F52 removes). Score
+    # simple tier on README + USAGE only. Mirrors DOC_SCOPE_INSTRUCTION_SIMPLE.
+    local doc_tier="${DETECTED_COMPLEXITY:-standard}"
+
     # Check 1: README.md exists
     if [ ! -f "$project_dir/README.md" ] || [ ! -s "$project_dir/README.md" ]; then
         score=$((score - 20))
         issues+=("README.md missing or empty")
     fi
 
+    if [ "$doc_tier" = "simple" ]; then
+        # USAGE.md is the always-on end-user handoff doc (usage_doc_instruction);
+        # for a simple project it plus README is sufficient. Penalize only if the
+        # always-on USAGE.md is absent/empty.
+        if [ ! -f "$project_dir/USAGE.md" ] || [ ! -s "$project_dir/USAGE.md" ]; then
+            score=$((score - 20))
+            issues+=("USAGE.md missing or empty")
+        fi
+        if [ ${#issues[@]} -gt 0 ]; then
+            log_warn "Documentation Gate: Score $score/100 (simple tier: README + USAGE)"
+            for issue in "${issues[@]}"; do
+                log_warn "  - $issue"
+            done
+        else
+            log_info "Documentation Gate: PASS (Score $score/100, simple tier: README + USAGE)"
+        fi
+        [ "$score" -ge 70 ]
+        return $?
+    fi
+
     # Check 2: Documentation freshness
     local manifest="$project_dir/.loki/docs/docs-manifest.json"
     if [ -f "$manifest" ]; then
@@ -9819,6 +9985,22 @@ run_doc_quality_gate() {
 auto_generate_docs_if_needed() {
     [ "${LOKI_AUTO_DOCS:-true}" = "true" ] || return 0
 
+    # F52 (doc-scope, generator half): a trivial "simple"-tier project does not
+    # warrant the eight-file architecture suite. 'loki docs generate' runs the
+    # provider agentically (claude -p), which writes ARCHITECTURE/API/COMPONENTS/
+    # DECISIONS/SETUP/TESTING/README/CLAUDE to the project -- ~270s of pure token
+    # + wall-clock burn with no reader for a 5-line CLI. The agent already wrote
+    # README.md + USAGE.md under DOC_SCOPE_INSTRUCTION_SIMPLE, so skip the suite.
+    # Parity: this is the generator-side mirror of DOC_SCOPE_INSTRUCTION_SIMPLE
+    # (build_prompt.ts / run.sh:14421); the gate half (run_doc_quality_gate)
+    # accepts README+USAGE for simple so skipping here does not fail Gate 7.
+    # DETECTED_COMPLEXITY is set once by run_autonomous before the first
+    # build_prompt, so it is populated by the time this runs (post code-review).
+    if [ "${DETECTED_COMPLEXITY:-standard}" = "simple" ]; then
+        log_info "Auto-documentation: simple project -- README + USAGE only, skipping architecture suite (F52 doc-scope)"
+        return 0
+    fi
+
     local project_dir="${TARGET_DIR:-.}"
     local manifest="$project_dir/.loki/docs/docs-manifest.json"
     local needs_gen=false
@@ -16171,6 +16353,47 @@ except Exception:
         if type spec_interrogation_run &>/dev/null; then
             spec_interrogation_run "$prd_path" || true
         fi
+        # #87: no-HITL fast-fail on an unresolved spec-INTERNAL contradiction.
+        # A contradiction (class=contradictory) is NEVER auto-acked (P2-4) and only
+        # a human sets confirmed=true, so in an AUTONOMOUS run it can never clear ->
+        # the completion gate blocks EVERY iteration -> the loop grinds to
+        # max-iterations (~20min, opaque). This run is already doomed; here we fail
+        # FAST + HONEST + NAMED instead. Honesty: this is the no-HITL rule verbatim
+        # ("when unsafe to decide, inconclusive-and-proceed, never fake-green") --
+        # it NEVER declares done/green (inconclusive_spec_contradiction maps to a
+        # terminal-failure exit, tested), it just replaces the opaque grind.
+        # SCOPE (deliberately narrow, no regression): fires ONLY when
+        #   (a) non-interactive/no-HITL (a TTY human COULD resolve it -> let them), AND
+        #   (b) LOKI_ASSUMPTIONS_REQUIRE_CONFIRM != 1 (that knob means a human WILL
+        #       confirm -> do not pre-empt), AND
+        #   (c) there is >=1 UNRESOLVED class=contradictory entry (the contradiction-
+        #       specific count, NOT the broader high-unresolved which includes
+        #       auto-ackable non-contradictions).
+        # Opt-out: LOKI_SPEC_CONTRADICTION_FASTFAIL=0.
+        if [ "${LOKI_SPEC_CONTRADICTION_FASTFAIL:-1}" = "1" ] \
+           && [ ! -t 0 ] \
+           && [ "${LOKI_ASSUMPTIONS_REQUIRE_CONFIRM:-0}" != "1" ] \
+           && type spec_ledger_contradiction_unresolved_count &>/dev/null; then
+            _sc_out="$(spec_ledger_contradiction_unresolved_count 2>/dev/null)"
+            _sc_n="$(printf '%s' "$_sc_out" | head -1)"
+            case "$_sc_n" in ''|*[!0-9]*) _sc_n=0 ;; esac
+            if [ "$_sc_n" -ge 1 ]; then
+                # Option C: name the contradicting clauses so `loki why` is actionable.
+                local _sc_titles
+                _sc_titles="$(printf '%s' "$_sc_out" | tail -n +2 | sed 's/^/  - /' | head -5)"
+                log_error "Spec has ${_sc_n} unresolved internal contradiction(s); an autonomous run cannot resolve them (only a human can). Failing fast instead of grinding to max-iterations."
+                [ -n "$_sc_titles" ] && printf '%s\n' "$_sc_titles" >&2
+                if type _loki_write_last_error &>/dev/null; then
+                    _loki_write_last_error 0 "spec_contradiction" \
+                        "Spec is internally inconsistent (${_sc_n} unresolved contradiction(s)); resolve the conflicting requirements, then re-run."
+                fi
+                save_state "$retry" "inconclusive_spec_contradiction" 0
+                if type emit_completion_summary &>/dev/null; then
+                    emit_completion_summary inconclusive_spec_contradiction 2>/dev/null || true
+                fi
+                return 20
+            fi
+        fi
     fi
 
     # Auto-derive completion promise from PRD (v6.10.0)
@@ -19039,13 +19262,13 @@ main() {
         # pgid.
         case "$_sess_launcher" in
             setsid)
-                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 nohup setsid "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
+                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 LOKI_LAUNCHER_PID=$$ nohup setsid "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
             perl-setsid)
-                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 nohup perl -e 'use POSIX qw(setsid); setsid(); exec @ARGV or exit 127;' "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
+                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 LOKI_LAUNCHER_PID=$$ nohup perl -e 'use POSIX qw(setsid); setsid(); exec @ARGV or exit 127;' "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
             python-setsid)
-                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 nohup python3 -c 'import os,sys; os.setsid(); os.execvp(sys.argv[1], sys.argv[1:])' "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
+                LOKI_RUNNING_FROM_TEMP='' LOKI_OWN_SESSION=1 LOKI_LAUNCHER_PID=$$ nohup python3 -c 'import os,sys; os.setsid(); os.execvp(sys.argv[1], sys.argv[1:])' "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
             *)
-                LOKI_RUNNING_FROM_TEMP='' nohup "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
+                LOKI_RUNNING_FROM_TEMP='' LOKI_LAUNCHER_PID=$$ nohup "$original_script" "${cmd_args[@]}" > "$log_file" 2>&1 & ;;
         esac
         local bg_pid=$!
         echo "$bg_pid" > "$pid_file"
@@ -19224,8 +19447,11 @@ main() {
         echo "${LOKI_SESSION_ID}" > ".loki/sessions/${LOKI_SESSION_ID}/session_id"
     fi
 
-    # Initialize PID registry and clean up orphans from previous sessions
+    # Initialize PID registry, self-register this wrapper (loki-mode #92 -- so a
+    # future session can reap it if this run is orphaned+idle), then clean up
+    # orphans from previous sessions.
     init_pid_registry
+    register_self_wrapper
     local orphan_count
     orphan_count=$(cleanup_orphan_pids)
     if [ "$orphan_count" -gt 0 ]; then
@@ -19552,7 +19778,7 @@ main() {
         case "$_final_status" in
             council_approved|council_force_approved|completion_promise_fulfilled|force_stopped|paused|interrupted|budget_exceeded|stopped)
                 result=0 ;;
-            failed|max_iterations_reached|max_retries_exceeded|policy_blocked)
+            failed|max_iterations_reached|max_retries_exceeded|policy_blocked|inconclusive_spec_contradiction)
                 result=20 ;;
             *)
                 # Unknown/running/exited terminal: leave $result as-is (nonzero on a

package/autonomy/spec-interrogation.sh

@@ -784,6 +784,44 @@ print(n)
 ' 2>/dev/null || printf '0'
 }
 
+# #87: the count of UNRESOLVED spec-INTERNAL CONTRADICTIONS (class=contradictory,
+# not confirmed, not acknowledged). This is the SUBSET of high-unresolved that can
+# NEVER clear in an autonomous run: contradictions are the only high entries that
+# spec_ledger_acknowledge_all deliberately refuses to auto-ack (P2-4), and only a
+# human sets confirmed=true. So >0 here means the completion gate will block every
+# iteration -> the run is ALREADY doomed to grind to max-iterations. run.sh uses
+# this at DISCOVERY to fail fast+honest (inconclusive_spec_contradiction) instead
+# of the opaque grind. Distinct from spec_ledger_high_unresolved_count (which
+# includes non-contradiction highs that CAN auto-ack and must NOT trigger fast-fail).
+# Also prints the contradicting assumption titles (one per line after the count)
+# so the terminal can NAME the cause (Option C).
+spec_ledger_contradiction_unresolved_count() {
+    local dir
+    dir="$(_spec_ledger_dir)"
+    if [ ! -d "$dir" ]; then printf '0'; return 0; fi
+    _SL_DIR="$dir" python3 -c '
+import glob, json, os
+d = os.environ["_SL_DIR"]
+n = 0
+titles = []
+for p in sorted(glob.glob(os.path.join(d, "a-*.json"))):
+    try:
+        with open(p) as f:
+            r = json.load(f)
+    except Exception:
+        continue
+    if (r.get("class") == "contradictory"
+            and not r.get("confirmed")
+            and not r.get("acknowledged")):
+        n += 1
+        t = r.get("title") or r.get("assumption") or r.get("finding") or "(unnamed contradiction)"
+        titles.append(str(t).replace("\n", " ")[:200])
+print(n)
+for t in titles:
+    print(t)
+' 2>/dev/null || printf '0'
+}
+
 # Total ledger entries + high count, "total high" on one line. For summaries.
 spec_ledger_counts() {
     local dir

package/autonomy/verify.sh

@@ -334,6 +334,22 @@ _verify_zero_tests_executed() {
             fi
             return 1
             ;;
+        go-test)
+            # #89: `go test ./...` on a package with NO *_test.go files prints
+            # `?   <pkg>  [no test files]` and EXITS 0 (unlike vitest/pytest/mocha,
+            # which exit non-zero on zero tests and are already caught as not-pass).
+            # So a Go project with source but no tests would score `pass` -- a mini
+            # fake-green. Detect it POSITIVELY: at least one `[no test files]` line
+            # AND ZERO package results that actually ran (`ok `/`FAIL`). A mixed
+            # run (some pkgs tested -> `ok`, others not -> `[no test files]`) has
+            # `ok` present, so it is NOT downgraded (verified: real passing prints
+            # `ok  <pkg>  0.2s`, a bare pkg prints `[no test files]`).
+            if printf '%s' "$_zt_out" | grep -qE '\[no test files\]' 2>/dev/null \
+               && ! printf '%s' "$_zt_out" | grep -qE '^(ok|FAIL|--- FAIL)' 2>/dev/null; then
+                return 0
+            fi
+            return 1
+            ;;
         *)
             return 1
             ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.117.0"
+__version__ = "7.117.2"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.117.0
+**Version:** v7.117.2
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.117.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
+var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.117.2";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -814,4 +814,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(K8),2}}e1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var SZ=await NZ(Bun.argv.slice(2));process.exit(SZ);
 
-//# debugId=54117DFE71A29F8B64756E2164756E21
+//# debugId=01CA3D14238C4AE464756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.117.0'
+__version__ = '7.117.2'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.117.0",
+  "version": "7.117.2",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.117.0",
+  "version": "7.117.2",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",