loki-mode 7.117.2 → 7.118.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.117.2
+# Loki Mode v7.118.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.117.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.118.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.117.2
+7.118.0

package/autonomy/completion-council.sh

@@ -92,6 +92,42 @@ COUNCIL_MIN_ITERATIONS=${LOKI_COUNCIL_MIN_ITERATIONS:-3}
 if [ "$COUNCIL_MIN_ITERATIONS" -lt 1 ] 2>/dev/null; then
     COUNCIL_MIN_ITERATIONS=1
 fi
+
+# _council_effective_min_iter (SaaS #122): resolve the effective MIN_ITERATIONS
+# floor as a function of DETECTED_COMPLEXITY, computed at council-run time (NOT at
+# source time -- DETECTED_COMPLEXITY is populated by run.sh:detect_complexity
+# before the loop, but AFTER this file is sourced). The floor is a HARD gate in
+# council_should_stop: while ITERATION_COUNT < floor the council is not allowed to
+# even evaluate, so a genuinely-complete SIMPLE app (e.g. a small invoice app) that
+# claims done at iteration 1 was still FORCED through ~2 extra idle iterations
+# (~15min) before the council could approve. Lowering the floor to 1 for the
+# `simple` tier removes only those FORCED idle iterations; it does NOT skip any
+# verification. At floor=1, `ITERATION_COUNT=1` makes `1 -lt 1` false, so the
+# council is ALLOWED to convene -- the evidence gate, checklist gate, aggregate
+# vote, provenance, boot smoke and devil's advocate all still run and can still
+# reject. Standard/complex keep floor 3.
+#
+# Precedence (the explicit-override case must win so a user who sets
+# LOKI_COUNCIL_MIN_ITERATIONS=3 on a simple app is honored, not silently lowered):
+#   1. explicit LOKI_COUNCIL_MIN_ITERATIONS env set (non-empty) -> that value
+#      (already clamped into COUNCIL_MIN_ITERATIONS above), verbatim.
+#   2. DETECTED_COMPLEXITY == simple (default floor, no override) -> 1.
+#   3. otherwise -> COUNCIL_MIN_ITERATIONS (the standard/complex default of 3).
+# When DETECTED_COMPLEXITY is empty (unset) this returns COUNCIL_MIN_ITERATIONS --
+# a no-op that preserves the historical standard-path behavior.
+_council_effective_min_iter() {
+    # Explicit user override wins: read the RAW env var (COUNCIL_MIN_ITERATIONS
+    # collapses "user set 3" and "default 3" into one value and can't distinguish).
+    if [ -n "${LOKI_COUNCIL_MIN_ITERATIONS:-}" ]; then
+        printf '%s' "${COUNCIL_MIN_ITERATIONS}"
+        return 0
+    fi
+    if [ "${DETECTED_COMPLEXITY:-}" = "simple" ]; then
+        printf '%s' 1
+        return 0
+    fi
+    printf '%s' "${COUNCIL_MIN_ITERATIONS}"
+}
 COUNCIL_CONVERGENCE_WINDOW=${LOKI_COUNCIL_CONVERGENCE_WINDOW:-3}
 COUNCIL_STAGNATION_LIMIT=${LOKI_COUNCIL_STAGNATION_LIMIT:-5}
 COUNCIL_DONE_SIGNAL_LIMIT=${LOKI_COUNCIL_DONE_SIGNAL_LIMIT:-10}
@@ -3470,7 +3506,10 @@ _council_should_check_now() {
     local completion_claimed="${2:-false}"
     local iter="${ITERATION_COUNT:-0}"
     local interval="${COUNCIL_CHECK_INTERVAL:-5}"
-    local min_iter="${COUNCIL_MIN_ITERATIONS:-3}"
+    # SaaS #122: tier-aware effective floor (simple->1) so the no-claim early
+    # check can also fire at iteration 1 on a genuinely-done simple app.
+    local min_iter
+    min_iter="$(_council_effective_min_iter)"
 
     # Circuit breaker and explicit-claim paths are UNCHANGED (they already bypass
     # the interval); return check-now for them without touching the early logic.
@@ -3505,8 +3544,16 @@ council_should_stop() {
         return 1  # Council disabled, don't stop
     fi
 
-    # Don't check before minimum iterations
-    if [ "$ITERATION_COUNT" -lt "$COUNCIL_MIN_ITERATIONS" ]; then
+    # Don't check before minimum iterations. SaaS #122: the floor is tier-aware
+    # (simple->1) via _council_effective_min_iter so a genuinely-complete simple
+    # app that claims done at iteration 1 is not FORCED through ~2 extra idle
+    # iterations before the council may evaluate. This only changes WHETHER the
+    # council is allowed to convene early; every verification gate inside
+    # council_evaluate still runs and can still reject. Standard/complex keep 3,
+    # and an explicit LOKI_COUNCIL_MIN_ITERATIONS override is always honored.
+    local _min_iter
+    _min_iter="$(_council_effective_min_iter)"
+    if [ "$ITERATION_COUNT" -lt "$_min_iter" ]; then
         return 1
     fi
 

package/autonomy/hooks/migration-hooks.sh

@@ -652,6 +652,288 @@ with open(sys.argv[1], 'w') as f:
     return 0
 }
 
+#===============================================================================
+# RANK 4: Golden-master boundary-equivalence for heal/migrate
+#
+# The whole-suite exit-code check in hook_healing_phase_gate is necessary but not
+# sufficient: a transform can keep unit tests green while ALTERING an observable
+# boundary (CLI stdout, HTTP response, file/DB delta). Golden-master capture
+# records the OBSERVED output of each detected boundary during archaeology; the
+# modernize->validate gate re-runs each boundary and compares to that baseline
+# PER-BOUNDARY. A changed boundary is BLOCKED unless a documented-intentional-
+# change record exists for exactly that boundary.
+#
+# These are deterministic shell/python functions (NOT LLM calls), consistent with
+# the file contract at the top: they run whether the agent cooperates or not.
+#===============================================================================
+
+# Enumerate the boundaries to golden-master. Sources of truth (all merged, first
+# occurrence of a boundary id wins):
+#   1. .loki/healing/boundaries.json    -- canonical heal boundary manifest that
+#      archaeology is instructed to write (see the heal prompt). Array of
+#      {id, boundary_type, command} (or `characterization_test`).
+#   2. .loki/healing/features.json      -- the migrate-flow feature list; each
+#      entry's `characterization_test` is a reproducible boundary invocation.
+#   3. .loki/healing/characterization-tests/*.json -- per-boundary characterization
+#      files (heal archaeology's tool output); any object carrying a runnable
+#      `command`/`characterization_test`/`cmd` field is a boundary.
+# heal writes (1) and/or (3); migrate writes (2). Reading all three keeps the
+# golden-master populated in BOTH real flows, not just the synthetic fixture.
+# Emits one TSV line per boundary: <boundary_id>\t<invocation_command>
+# Prints nothing (returns 0) when no boundaries are detectable -- callers must
+# treat "no boundaries" as an honest degrade, never a green verdict.
+_heal_enumerate_boundaries() {
+    local heal_dir="$1"
+    HEAL_DIR="$heal_dir" python3 -c "
+import json, os, sys, glob
+
+heal_dir = os.environ['HEAL_DIR']
+seen = set()
+out = []
+
+def emit(bid, cmd):
+    if not cmd or not str(cmd).strip():
+        return
+    bid = str(bid).replace('\t', ' ').replace('\n', ' ').strip()
+    if not bid or bid in seen:
+        return
+    seen.add(bid)
+    out.append((bid, str(cmd).replace('\n', ' ').replace('\r', ' ')))
+
+def cmd_of(it):
+    for k in ('command', 'characterization_test', 'cmd'):
+        v = it.get(k)
+        if v and str(v).strip():
+            return v
+    return None
+
+def id_of(it, default='boundary'):
+    fid = it.get('id') or it.get('name') or it.get('description') or default
+    btype = it.get('boundary_type') or it.get('category') or it.get('type') or 'cli'
+    return '%s:%s' % (btype, fid)
+
+def load(path):
+    try:
+        with open(path) as f:
+            return json.load(f)
+    except Exception:
+        return None
+
+# (1) canonical heal boundary manifest
+data = load(os.path.join(heal_dir, 'boundaries.json'))
+if data is not None:
+    items = data if isinstance(data, list) else data.get('boundaries', data.get('features', []))
+    for it in items if isinstance(items, list) else []:
+        if isinstance(it, dict):
+            emit(id_of(it), cmd_of(it))
+
+# (2) migrate feature list
+data = load(os.path.join(heal_dir, 'features.json'))
+if data is not None:
+    items = data if isinstance(data, list) else data.get('features', [])
+    for it in items if isinstance(items, list) else []:
+        if isinstance(it, dict):
+            emit(id_of(it), cmd_of(it))
+
+# (3) per-boundary characterization files
+for path in sorted(glob.glob(os.path.join(heal_dir, 'characterization-tests', '*.json'))):
+    data = load(path)
+    if data is None:
+        continue
+    items = data if isinstance(data, list) else [data]
+    for it in items:
+        if isinstance(it, dict) and cmd_of(it):
+            base = os.path.splitext(os.path.basename(path))[0]
+            emit(id_of(it, default=base), cmd_of(it))
+
+for bid, cmd in out:
+    print('%s\t%s' % (bid, cmd))
+" 2>/dev/null || true
+}
+
+# Stable, filesystem-safe filename for a boundary id's golden-master artifact.
+_heal_boundary_artifact_name() {
+    local bid="$1"
+    # sha of the id keeps names stable + collision-free across weird chars.
+    local h
+    h=$(printf '%s' "$bid" | shasum 2>/dev/null | awk '{print $1}')
+    [[ -z "$h" ]] && h=$(printf '%s' "$bid" | cksum | awk '{print $1}')
+    printf 'boundary-%s.json' "$h"
+}
+
+# Run a single boundary invocation and capture OBSERVED output as a golden-master
+# artifact. Captures stdout (the compared channel) + exit code + the reproduction
+# command (so validate can re-run it). stderr is captured into a separate field and
+# is NOT compared: on a real Py2->Py3 boundary stderr carries DeprecationWarnings
+# and tracebacks that vary run-to-run and would false-block equivalence.
+# Deterministic-by-contract: the boundary command's STDOUT must not emit
+# nondeterministic tokens (timestamps/pids); normalization of such is a documented
+# limitation for the real integration, out of scope for the deterministic core.
+# Returns 0 on capture, 1 on failure to write.
+hook_capture_behavioral_baseline() {
+    local codebase_path="${1:-${LOKI_CODEBASE_PATH:-.}}"
+    local heal_dir="${codebase_path}/.loki/healing"
+    local baseline_dir="${heal_dir}/behavioral-baseline"
+
+    [[ "${LOKI_HEAL_MODE:-false}" != "true" ]] && return 0
+
+    mkdir -p "$baseline_dir" 2>/dev/null || return 1
+
+    local captured=0
+    local any=0
+    while IFS=$'\t' read -r bid cmd; do
+        [[ -z "$bid" || -z "$cmd" ]] && continue
+        any=1
+        local out rc art errf
+        errf=$(mktemp)
+        # stdout is the compared channel; stderr is diverted to $errf (recorded
+        # separately, never compared).
+        out=$(cd "$codebase_path" && eval "$cmd" 2>"$errf")
+        rc=$?
+        local err
+        err=$(cat "$errf" 2>/dev/null); rm -f "$errf"
+        art="$baseline_dir/$(_heal_boundary_artifact_name "$bid")"
+        # Write a self-describing artifact: id + reproduction command + observed
+        # stdout (compared) + stderr (recorded, not compared) + observed exit.
+        # validate re-runs `command` and compares stdout+exit only.
+        if BID="$bid" CMD="$cmd" OUT="$out" ERR="$err" RC="$rc" ART="$art" python3 -c "
+import json, os
+art = {
+    'boundary': os.environ['BID'],
+    'boundary_type': os.environ['BID'].split(':', 1)[0],
+    'command': os.environ['CMD'],
+    'stdout': os.environ['OUT'],
+    'stderr': os.environ.get('ERR', ''),
+    'exit_code': int(os.environ['RC']),
+    'captured_by': 'hook_capture_behavioral_baseline',
+    'note': 'stdout+exit_code are the compared channels; stderr is informational only.',
+}
+with open(os.environ['ART'], 'w') as f:
+    json.dump(art, f, indent=2, sort_keys=True)
+" 2>/dev/null; then
+            captured=$((captured + 1))
+        fi
+    done < <(_heal_enumerate_boundaries "$heal_dir")
+
+    if [[ "$any" -eq 0 ]]; then
+        # Honest degrade: no boundaries detected. Do NOT fabricate artifacts.
+        echo "BASELINE: no boundaries detected (no runnable boundary command in boundaries.json / features.json / characterization-tests/); nothing to golden-master."
+        return 0
+    fi
+    echo "BASELINE: captured ${captured} golden-master artifact(s) into behavioral-baseline/"
+    return 0
+}
+
+# Compare current boundary outputs to the golden-master baseline PER-BOUNDARY.
+# Emits a diff report enumerating EVERY changed boundary. A boundary is "changed"
+# when its current stdout OR exit code differs from the baseline artifact, UNLESS
+# a documented-intentional-change record exists for exactly that boundary id in
+# behavioral-baseline/intentional-changes.json.
+# Echoes a human-readable report on stdout.
+# Returns:
+#   0  - no baseline / no boundaries (honest degrade; caller falls through), OR
+#        all boundaries equivalent (or every change documented-intentional).
+#   1  - at least one undocumented boundary change -> caller must BLOCK.
+hook_compare_behavioral_baseline() {
+    local codebase_path="${1:-${LOKI_CODEBASE_PATH:-.}}"
+    local heal_dir="${codebase_path}/.loki/healing"
+    local baseline_dir="${heal_dir}/behavioral-baseline"
+    local intentional="${baseline_dir}/intentional-changes.json"
+
+    # Honest degrade: off/greenfield/no-baseline -> byte-identical no-op. The
+    # caller falls through to its existing whole-suite check unchanged.
+    [[ "${LOKI_HEAL_MODE:-false}" != "true" ]] && return 0
+    [[ -d "$baseline_dir" ]] || return 0
+    # Any golden-master artifacts at all?
+    local art_count
+    art_count=$(find "$baseline_dir" -type f -name 'boundary-*.json' 2>/dev/null | wc -l | tr -d ' ')
+    if [[ "${art_count:-0}" -eq 0 ]]; then
+        echo "BOUNDARY-CHECK: no golden-master baseline present; skipping per-boundary comparison (honest degrade)."
+        return 0
+    fi
+
+    local changed=0
+    local report=""
+    local art
+    while IFS= read -r art; do
+        [[ -z "$art" ]] && continue
+        # Read stored boundary id + reproduction command in one python call. A
+        # trailing sentinel is appended to each so command-substitution's trailing
+        # -newline strip does not corrupt a value (bid/cmd are single-line by
+        # construction, but this keeps the read exact and robust).
+        local bid cmd base_rc
+        bid=$(ART="$art" python3 -c "import json,os;print(json.load(open(os.environ['ART']))['boundary'])" 2>/dev/null) || continue
+        cmd=$(ART="$art" python3 -c "import json,os;print(json.load(open(os.environ['ART']))['command'])" 2>/dev/null) || continue
+        base_rc=$(ART="$art" python3 -c "import json,os;print(json.load(open(os.environ['ART']))['exit_code'])" 2>/dev/null)
+
+        # Re-run the boundary NOW. stderr diverted (not compared), matching the
+        # capture channel; only stdout + exit are compared.
+        local cur_out cur_rc
+        cur_out=$(cd "$codebase_path" && eval "$cmd" 2>/dev/null)
+        cur_rc=$?
+
+        # Byte-exact stdout comparison via python (handles trailing newlines /
+        # binary-ish content that shell string compare would mangle).
+        if ART="$art" CUR="$cur_out" python3 -c "
+import json, os, sys
+base = json.load(open(os.environ['ART']))['stdout']
+sys.exit(0 if base == os.environ['CUR'] else 1)
+" 2>/dev/null && [[ "$cur_rc" == "$base_rc" ]]; then
+            continue
+        fi
+        # Recover baseline stdout for the report (may be multi-line).
+        local base_out
+        base_out=$(ART="$art" python3 -c "import json,os,sys;sys.stdout.write(json.load(open(os.environ['ART']))['stdout'])" 2>/dev/null)
+
+        # Boundary changed. Is it documented-intentional for THIS boundary id?
+        local is_doc="false"
+        if [[ -f "$intentional" ]]; then
+            is_doc=$(INT="$intentional" BID="$bid" python3 -c "
+import json, os
+try:
+    data = json.load(open(os.environ['INT']))
+except Exception:
+    print('false'); raise SystemExit
+changes = data.get('changes', []) if isinstance(data, dict) else []
+bid = os.environ['BID']
+for c in changes:
+    if isinstance(c, dict) and c.get('boundary') == bid and c.get('is_intentional') is True:
+        print('true'); break
+else:
+    print('false')
+" 2>/dev/null || echo false)
+        fi
+
+        if [[ "$is_doc" == "true" ]]; then
+            report+="  [documented-intentional] ${bid}: change accepted (intentional-changes.json)"$'\n'
+            continue
+        fi
+
+        changed=$((changed + 1))
+        report+="  [CHANGED] ${bid}"$'\n'
+        report+="    command:  ${cmd}"$'\n'
+        report+="    baseline: exit=${base_rc} stdout=$(printf '%q' "$base_out")"$'\n'
+        report+="    current:  exit=${cur_rc} stdout=$(printf '%q' "$cur_out")"$'\n'
+    done < <(find "$baseline_dir" -type f -name 'boundary-*.json' 2>/dev/null)
+
+    if [[ "$changed" -gt 0 ]]; then
+        echo "BOUNDARY-DIFF REPORT (${changed} undocumented boundary change(s)):"
+        printf '%s' "$report"
+        echo "  To accept a change intentionally, add a record to:"
+        echo "    ${intentional}"
+        echo "    {\"changes\":[{\"boundary\":\"<id>\",\"is_intentional\":true,\"reason\":\"...\"}]}"
+        return 1
+    fi
+
+    if [[ -n "$report" ]]; then
+        echo "BOUNDARY-CHECK: all changed boundaries are documented-intentional:"
+        printf '%s' "$report"
+    else
+        echo "BOUNDARY-CHECK: all ${art_count} boundary(ies) equivalent to golden-master baseline."
+    fi
+    return 0
+}
+
 # Hook: healing_phase_gate - mechanical verification before healing phase transition
 hook_healing_phase_gate() {
     local from_phase="${1:-}"
@@ -748,6 +1030,20 @@ except: print(0)
                 echo "GATE_BLOCKED: Tests do not pass after modernization"
                 return 1
             fi
+            # RANK 4: whole-suite exit code is necessary but NOT sufficient. A
+            # transform can keep unit tests green while altering an observable
+            # boundary. Compare each boundary to its golden-master baseline; block
+            # any undocumented boundary change. Honest degrade (no baseline / no
+            # boundaries) falls through as a no-op -- never a false-green.
+            local boundary_report boundary_rc
+            boundary_report=$(hook_compare_behavioral_baseline "$codebase_path")
+            boundary_rc=$?
+            if [[ "$boundary_rc" -ne 0 ]]; then
+                echo "GATE_BLOCKED: boundary equivalence violated after modernization (unit tests green but an observable boundary changed)."
+                echo "$boundary_report"
+                return 1
+            fi
+            [[ -n "$boundary_report" ]] && echo "$boundary_report"
             ;;
     esac
 

package/autonomy/lib/proof-generator.py

@@ -130,6 +130,46 @@ def _collect_council(loki_dir):
         rec = _read_json(os.path.join(votes_dir, vf), default=None)
         if not isinstance(rec, dict):
             continue
+        # completion-council.sh writes ROUND-SUMMARY files (round-N.json,
+        # devils-advocate-round-N.json) shaped
+        # {round, verdict, votes:[{member, role, vote, reason}]} -- NOT a flat
+        # per-reviewer record. When we see that shape, expand the nested votes[]
+        # into per-reviewer rows (the real trust signal) and adopt the round
+        # verdict; otherwise fall back to the flat single-record shape. Without
+        # this, rec.get("role") is empty and the proof's council section renders
+        # blank reviewers even though the council genuinely ran and voted (#125).
+        nested = rec.get("votes")
+        if isinstance(nested, list) and nested:
+            rv = str(rec.get("verdict") or rec.get("result") or "")
+            if rv and not final_verdict:
+                final_verdict = rv
+            if threshold is None and rec.get("threshold") is not None:
+                tm = rec.get("total_members")
+                threshold = (
+                    "%s/%s" % (rec.get("threshold"), tm)
+                    if tm is not None else rec.get("threshold")
+                )
+            round_tag = str(rec.get("round") or "")
+            da = "devil" in vf.lower()
+            for v in nested:
+                if not isinstance(v, dict):
+                    continue
+                role = str(v.get("role") or v.get("member") or "")
+                vote = str(v.get("vote") or v.get("decision") or "")
+                # Skip empty vote rows (a blank role AND blank vote is noise, not
+                # a reviewer) so the proof never shows a phantom "-> " reviewer.
+                if not role and not vote:
+                    continue
+                if da and role:
+                    role = "%s (devil's advocate)" % role
+                reviewers.append({
+                    "role": role,
+                    "vote": vote,
+                    "summary": str(
+                        v.get("reason") or v.get("summary") or v.get("rationale") or ""
+                    ) + (" [round %s]" % round_tag if round_tag else ""),
+                })
+            continue
         reviewers.append({
             "role": str(rec.get("role") or rec.get("reviewer") or ""),
             "vote": str(rec.get("vote") or rec.get("decision") or ""),
@@ -222,6 +262,57 @@ def _collect_quality_gates(loki_dir):
             total += 1
             if status == "passed":
                 passed += 1
+
+    # #125: run.sh does NOT write state/quality-gates.json; it writes the gate
+    # outcomes under .loki/quality/ (a "<gate>.pass" marker on pass, plus
+    # per-gate result JSONs). When the aggregate above is empty/absent, read the
+    # real per-gate artifacts so a build that genuinely ran+passed its gates is
+    # not reported as quality_gates:{passed:0,total:0} (a receipt understatement
+    # that reads as "no verification ran"). Deterministic FACT from disk markers,
+    # never an LLM opinion. Only fills gates the aggregate did not already cover.
+    if not gates:
+        quality_dir = os.path.join(loki_dir, "quality")
+        seen = set()
+        # (gate name in proof, marker/result filename stem under quality/)
+        markers = [
+            ("static_analysis", "static-analysis"),
+            ("unit_tests", "unit-tests"),
+        ]
+        for gate_name, stem in markers:
+            pass_marker = os.path.join(quality_dir, stem + ".pass")
+            result_json = os.path.join(quality_dir, stem + ".json")
+            status = None
+            if os.path.exists(pass_marker):
+                status = "passed"
+            elif os.path.exists(result_json):
+                rj = _read_json(result_json, default=None)
+                if isinstance(rj, dict):
+                    status = _norm_gate_status(
+                        rj.get("passed", rj.get("status", "not_run"))
+                    )
+            if status is not None:
+                gates.append({"name": gate_name, "status": status})
+                seen.add(gate_name)
+                total += 1
+                if status == "passed":
+                    passed += 1
+        # test-results.json carries the suite outcome even when no .pass marker
+        # (e.g. {status:"verified"} = tests ran and passed).
+        if "unit_tests" not in seen:
+            tr = _read_json(
+                os.path.join(quality_dir, "test-results.json"), default=None
+            )
+            if isinstance(tr, dict):
+                st = str(tr.get("status") or "")
+                if st in ("verified", "pass", "passed"):
+                    gates.append({"name": "unit_tests", "status": "passed"})
+                    total += 1
+                    passed += 1
+                elif st:
+                    gates.append(
+                        {"name": "unit_tests", "status": _norm_gate_status(st)}
+                    )
+                    total += 1
     return {"passed": passed, "total": total, "gates": gates}
 
 

package/autonomy/loki

@@ -14784,7 +14784,7 @@ HEALING RULES:
 5. INCREMENTAL ONLY: Change ONE component at a time. Verify ALL characterization tests pass after each change.
 
 Phase-specific instructions:
-- archaeology: Map dependencies, catalog friction, extract knowledge, write characterization tests. Do NOT modify source code.
+- archaeology: Map dependencies, catalog friction, extract knowledge, write characterization tests. Do NOT modify source code. ALSO write .loki/healing/boundaries.json: a JSON array of the OBSERVABLE system boundaries (CLI commands, HTTP endpoints, file/DB-producing entrypoints). Each element: {\"id\": string, \"boundary_type\": \"cli\"|\"http\"|\"file\"|\"db\", \"command\": string}. The \"command\" MUST be a deterministic shell invocation that exercises that boundary and prints its observable output to stdout (avoid timestamps/PIDs). These commands are golden-mastered into .loki/healing/behavioral-baseline/ and re-run at the modernize->validate gate to block any undocumented boundary change. If no observable boundary exists, write an empty array [] (do NOT invent one).
 - stabilize: Add logging and observability. Extract config. Add type hints. Do NOT change behavior.
 - isolate: Create adapter interfaces at component boundaries. Add integration tests.
 - modernize: Replace components behind adapters. Verify characterization tests pass.
@@ -14845,6 +14845,16 @@ except Exception: pass
 
     emit_event healing cli complete "phase=$phase" "exit=$heal_exit" 2>/dev/null || true
 
+    # RANK 4: populate .loki/healing/behavioral-baseline/ during archaeology.
+    # The dir is mkdir'd above but was never populated; the modernize->validate
+    # gate needs a golden-master per detected boundary to compare against.
+    # Deterministic capture (NOT an LLM call): re-runs each boundary's
+    # characterization_test and records observed stdout+exit. Honest degrade when
+    # no boundaries are detected. Byte-identical no-op when the hook is absent.
+    if [ "$phase" = "archaeology" ] && type hook_capture_behavioral_baseline &>/dev/null; then
+        hook_capture_behavioral_baseline "$codebase_path" 2>/dev/null || true
+    fi
+
     if [ "$heal_exit" -eq 0 ]; then
         echo ""
         echo -e "${GREEN}Healing phase '${phase}' complete.${NC}"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.117.2"
+__version__ = "7.118.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.117.2
+**Version:** v7.118.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.117.2";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
+var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.118.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -814,4 +814,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(K8),2}}e1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var SZ=await NZ(Bun.argv.slice(2));process.exit(SZ);
 
-//# debugId=01CA3D14238C4AE464756E2164756E21
+//# debugId=01D367D3C33A5E7664756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.117.2'
+__version__ = '7.118.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.117.2",
+  "version": "7.118.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.117.2",
+  "version": "7.118.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/skills/healing.md

@@ -411,10 +411,28 @@ When `loki heal` is active, the code review specialist pool includes:
   failure-modes.json             # Cataloged failure modes
   institutional-knowledge.md     # Extracted tribal knowledge
   healing-progress.json          # Component-by-component healing status
-  behavioral-baseline/           # Pre-healing system-boundary outputs
+  boundaries.json                # Observable system boundaries (archaeology writes)
+  behavioral-baseline/           # Golden-master per-boundary outputs (archaeology captures)
   characterization-tests/        # Tests that capture current behavior
 ```
 
+### Golden-master boundary equivalence (modernize -> validate gate)
+
+Whole-suite exit code is necessary but NOT sufficient: a transform can keep unit
+tests green while altering an observable boundary (CLI stdout/exit, HTTP, file/DB
+delta). Archaeology writes `.loki/healing/boundaries.json` -- a JSON array of
+`{"id","boundary_type":"cli"|"http"|"file"|"db","command"}` -- where `command` is a
+deterministic invocation that prints the boundary's observable output. During
+archaeology each boundary is golden-mastered into `behavioral-baseline/`
+(stdout + exit are the compared channels; stderr is recorded but never compared,
+so Py2->Py3 warnings do not false-block). At the `modernize -> validate` gate every
+boundary is re-run and compared PER-BOUNDARY; any change is BLOCKED with a diff
+report unless a per-boundary record exists in
+`behavioral-baseline/intentional-changes.json`
+(`{"changes":[{"boundary":"<id>","is_intentional":true,"reason":"..."}]}`).
+Honest degrade: no boundaries / no baseline / heal mode off is a byte-identical
+no-op, never a false-green. (Deterministic shell hooks, not LLM calls.)
+
 **Progress Tracking:**
 ```json
 {