loki-mode 7.122.1 → 7.123.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.122.1
+# Loki Mode v7.123.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.122.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.123.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.122.1
+7.123.1

package/autonomy/completion-council.sh

@@ -1184,9 +1184,34 @@ EVIDENCE_SECTION
         echo "## PRD Checklist Verification Results" >> "$evidence_file"
         cat ".loki/checklist/verification-results.json" >> "$evidence_file" 2>/dev/null || true
     else
+        # Scope honesty (rec #5): a missing checklist is not neutral -- it means
+        # "done" cannot be verified against derived acceptance criteria on this
+        # run. Say so explicitly so a council member weights their vote on the
+        # OTHER evidence (tests, diff, build) rather than reading silence as a
+        # pass. Distinguish "a spec exists but yielded no checklist" (a real
+        # scope-honesty concern -- the criteria were underivable) from "no spec
+        # was provided" (a one-line brief; checklist absence is expected, not a
+        # gap). Never fabricate coverage that does not exist.
         echo "" >> "$evidence_file"
         echo "## PRD Checklist Verification Results" >> "$evidence_file"
-        echo "No PRD checklist has been created yet." >> "$evidence_file"
+        local _has_spec="no"
+        if [ -n "$prd_path" ] && [ -f "$prd_path" ]; then
+            _has_spec="yes"
+        elif [ -f ".loki/prd.md" ] || [ -f ".loki/spec/spec.md" ]; then
+            _has_spec="yes"
+        fi
+        if [ "$_has_spec" = "yes" ]; then
+            echo "SCOPE-HONESTY: A spec/PRD is present but NO checklist of" \
+                "acceptance criteria was derived from it. \"Done\" cannot be" \
+                "verified against explicit criteria on this run -- treat" \
+                "completion as UNVERIFIED-BY-CHECKLIST and rely on the other" \
+                "evidence below (tests, diff, build). Do not read the absence" \
+                "of a checklist as a pass." >> "$evidence_file"
+        else
+            echo "No PRD checklist has been created yet (no spec/PRD provided;" \
+                "checklist-based completion criteria are not applicable to this" \
+                "run). Completion rests on the other evidence below." >> "$evidence_file"
+        fi
     fi
 
     # Playwright smoke test results (v5.46.0 - advisory only)

package/autonomy/verify.sh

@@ -112,6 +112,9 @@ _verify_render_explain() {
         "${VERIFY_BASE_REF:-?}"
     printf 'Evidence freshness: run %s -> %s (this run; gates re-executed now)\n' \
         "$started_at" "$completed_at"
+    printf 'Graded tree: HEAD %s, worktree %s. Re-check later with: loki verify --check-fresh\n' \
+        "${VERIFY_HEAD_SHA:0:12}" \
+        "$([ "${VERIFY_WORKTREE_CLEAN:-}" = "true" ] && echo "clean" || echo "had uncommitted changes")"
     printf '\n'
     printf '  %-18s %-12s %-14s %-6s %s\n' "GATE" "STATUS" "RUNNER" "REPRO" "EVIDENCE"
     printf '  %-18s %-12s %-14s %-6s %s\n' "----" "------" "------" "-----" "--------"
@@ -1669,6 +1672,7 @@ verify_emit_evidence() {
     _V_TOOLVER="$tool_version" \
     _V_REPO="$repo_name" \
     _V_HEAD="${VERIFY_HEAD_SHA:-}" \
+    _V_WT_CLEAN="${VERIFY_WORKTREE_CLEAN:-}" \
     _V_BASE="${VERIFY_BASE_REF:-}" \
     _V_MB="${VERIFY_MERGE_BASE:-}" \
     _V_FILES="${VERIFY_DIFF_FILES:-0}" \
@@ -1741,6 +1745,7 @@ doc = {
         "repo": os.environ["_V_REPO"],
         "pr_number": None,
         "head_sha": os.environ["_V_HEAD"],
+        "worktree_clean_at_grade": (os.environ.get("_V_WT_CLEAN") == "true"),
         "base_branch": os.environ["_V_BASE"],
         "merge_base_sha": os.environ["_V_MB"],
         "diff_stats": {
@@ -1908,6 +1913,14 @@ OPTIONS:
                        produced the evidence, whether it is reproducible, plus
                        freshness and the diff graded. Additive render before the
                        VERDICT banner; never changes the verdict or exit code.
+    --check-fresh      Do NOT re-run gates. Read a prior <out>/evidence.json and
+                       decide whether its verdict still applies to the CURRENT
+                       repo. FRESH (0) when the graded head_sha matches HEAD and
+                       the worktree is clean (ignoring .loki/); STALE (2) when
+                       HEAD drifted or the tree changed; ERROR (3) when evidence
+                       is missing/unparseable. Fail-closed: stale or unreadable
+                       evidence never reports FRESH. For CI / proof consumers that
+                       must not trust a cached green after the code moved on.
     --hosted           Opt-in. When the embedded Autonomi Verify engine is
                        usable (bun present + bundle present), fold its verdict
                        fields into evidence.json under a "hosted" key. Additive
@@ -2353,6 +2366,102 @@ PYEOF
     return 0
 }
 
+# Worktree dirtiness for freshness purposes, EXCLUDING verify's own output
+# directory (.loki/). `git status --porcelain` lists every change one per line;
+# we drop any path under .loki/ so evidence.json/report.md written by this very
+# run never register as code drift. Emits the filtered porcelain (empty = clean).
+_verify_dirty_porcelain() {
+    git status --porcelain 2>/dev/null | grep -v -E '(^|[[:space:]])"?\.loki/' || true
+}
+
+# ---------------------------------------------------------------------------
+# Freshness gate (--check-fresh)
+# ---------------------------------------------------------------------------
+# Reads a prior <out>/evidence.json and decides whether the verdict it records
+# still applies to the CURRENT repo state. This is the consumer-side half of the
+# trust contract: --explain shows WHAT the evidence is; --check-fresh proves it
+# is CURRENT before anyone trusts a stored green.
+#
+# Fail-closed, always:
+#   fresh (graded head_sha == current HEAD, worktree clean)     -> VERIFIED (0)
+#   drifted (HEAD moved) or worktree dirty                      -> BLOCKED  (2)
+#   evidence missing / unparseable / no head_sha / not in a repo-> ERROR    (3)
+# A stale or unreadable evidence document NEVER yields VERIFIED. The whole point
+# is that "it passed once" is not "it passes now".
+_verify_check_fresh() {
+    local out_dir="$1"
+    local ev_path="$out_dir/evidence.json"
+
+    if [ ! -f "$ev_path" ]; then
+        _verify_err "no evidence at $ev_path; run 'loki verify' first (fail-closed)"
+        VERIFY_VERDICT="ERROR"; VERIFY_EXIT=$VERIFY_EXIT_ERROR
+        printf 'VERDICT: NOT FRESH (no evidence)\n'
+        return $VERIFY_EXIT_ERROR
+    fi
+
+    local cur_head cur_dirty
+    cur_head="$(git rev-parse HEAD 2>/dev/null || echo "")"
+    if [ -z "$cur_head" ]; then
+        _verify_err "not inside a git repository; cannot check freshness (fail-closed)"
+        VERIFY_VERDICT="ERROR"; VERIFY_EXIT=$VERIFY_EXIT_ERROR
+        printf 'VERDICT: NOT FRESH (no git HEAD)\n'
+        return $VERIFY_EXIT_ERROR
+    fi
+    # Any tracked-or-untracked change means the graded tree is not the live tree.
+    # Exclude .loki/ -- verify writes its own evidence.json/report.md there, so
+    # counting it would make every run report its own output as drift.
+    if [ -n "$(_verify_dirty_porcelain)" ]; then
+        cur_dirty="true"
+    else
+        cur_dirty="false"
+    fi
+
+    # Parse the graded head_sha out of the evidence document. python3 is the same
+    # dependency the emitter uses; a parse failure is fail-closed (ERROR).
+    local graded_head parse_rc
+    graded_head="$(_VF_EV="$ev_path" python3 - <<'PYEOF' 2>/dev/null
+import json, os, sys
+try:
+    doc = json.load(open(os.environ["_VF_EV"]))
+    print((doc.get("subject") or {}).get("head_sha") or "")
+except Exception:
+    sys.exit(1)
+PYEOF
+)"
+    parse_rc=$?
+    if [ "$parse_rc" -ne 0 ]; then
+        _verify_err "evidence.json unparseable at $ev_path (fail-closed)"
+        VERIFY_VERDICT="ERROR"; VERIFY_EXIT=$VERIFY_EXIT_ERROR
+        printf 'VERDICT: NOT FRESH (unparseable evidence)\n'
+        return $VERIFY_EXIT_ERROR
+    fi
+    if [ -z "$graded_head" ]; then
+        _verify_err "evidence.json has no subject.head_sha (fail-closed)"
+        VERIFY_VERDICT="ERROR"; VERIFY_EXIT=$VERIFY_EXIT_ERROR
+        printf 'VERDICT: NOT FRESH (evidence records no graded head_sha)\n'
+        return $VERIFY_EXIT_ERROR
+    fi
+
+    if [ "$graded_head" != "$cur_head" ]; then
+        _verify_log "freshness: HEAD drifted ${graded_head:0:12} -> ${cur_head:0:12}"
+        VERIFY_VERDICT="BLOCKED"; VERIFY_EXIT=$VERIFY_EXIT_BLOCKED
+        printf 'VERDICT: STALE (graded %s, now %s) -- re-run loki verify\n' \
+            "${graded_head:0:12}" "${cur_head:0:12}"
+        return $VERIFY_EXIT_BLOCKED
+    fi
+    if [ "$cur_dirty" = "true" ]; then
+        _verify_log "freshness: worktree dirty since grade"
+        VERIFY_VERDICT="BLOCKED"; VERIFY_EXIT=$VERIFY_EXIT_BLOCKED
+        printf 'VERDICT: STALE (worktree modified since %s) -- re-run loki verify\n' \
+            "${graded_head:0:12}"
+        return $VERIFY_EXIT_BLOCKED
+    fi
+
+    VERIFY_VERDICT="VERIFIED"; VERIFY_EXIT=$VERIFY_EXIT_VERIFIED
+    printf 'VERDICT: FRESH (evidence matches HEAD %s, clean worktree)\n' "${cur_head:0:12}"
+    return $VERIFY_EXIT_VERIFIED
+}
+
 # ---------------------------------------------------------------------------
 # Entry point
 # ---------------------------------------------------------------------------
@@ -2365,6 +2474,10 @@ verify_main() {
     VERIFY_HOSTED_SUMMARY=""
     # Opt-in one-screen trust-proof render (--explain). Default 0 = exactly today.
     VERIFY_EXPLAIN=0
+    # Opt-in freshness gate (--check-fresh). Default 0 = exactly today. When set,
+    # verify does NOT re-run gates: it reads a prior evidence.json and fails
+    # closed if the repo has drifted since that evidence was graded.
+    VERIFY_CHECK_FRESH=0
 
     # Fail-closed defaults. These globals are read at the end of this function
     # (the VERDICT banner and the function return code). verify_compute_verdict()
@@ -2398,6 +2511,18 @@ verify_main() {
                 # unchanged. This is the "why you can trust this" surface -- Loki
                 # runs more verification than competitors but proved it worse.
                 VERIFY_EXPLAIN=1; shift ;;
+            --check-fresh)
+                # Freshness gate for CONSUMERS of a prior verify run (CI, proof
+                # share, a council reading a cached green). Does NOT re-run gates:
+                # reads <out>/evidence.json and fails CLOSED if the current repo
+                # HEAD differs from the graded head_sha, or the worktree is dirty,
+                # or the evidence is missing/unparseable. A stored VERIFIED that
+                # no longer matches the code it was graded against is not trust --
+                # it is a stale cache, and trusting it is exactly the fake-green
+                # the moat forbids. Fresh -> exit 0; drifted -> exit 2 (BLOCKED);
+                # missing/unreadable -> exit 3 (ERROR). Never prints VERIFIED for
+                # stale evidence.
+                VERIFY_CHECK_FRESH=1; shift ;;
             --hosted)
                 # Opt-in: when the embedded Autonomi Verify engine is usable
                 # (bun present + bundle present), enrich evidence.json with the
@@ -2442,6 +2567,24 @@ verify_main() {
         # Still emit an evidence doc with inconclusive verdict (never silent pass).
     fi
 
+    # --check-fresh short-circuits BEFORE any gate runs: it is a pure freshness
+    # gate over a prior evidence.json, not a verification. Dispatch here so it
+    # never spawns runners/scanners and never rewrites the evidence document.
+    if [ "${VERIFY_CHECK_FRESH:-0}" = "1" ]; then
+        _verify_check_fresh "$out_dir"
+        return $?
+    fi
+
+    # Record the worktree state at grade time so a later --check-fresh (and any
+    # external consumer) knows whether this evidence was graded against a clean
+    # tree. Empty porcelain output = clean. Best-effort; defaults to unknown-safe
+    # "false" (treated as not-clean) if git cannot answer.
+    if [ -z "$(_verify_dirty_porcelain)" ] && git rev-parse HEAD >/dev/null 2>&1; then
+        VERIFY_WORKTREE_CLEAN="true"
+    else
+        VERIFY_WORKTREE_CLEAN="false"
+    fi
+
     _VERIFY_FINDINGS_FILE="$(mktemp -t loki-verify-findings.XXXXXX)" || { _verify_err "mktemp failed"; return $VERIFY_EXIT_ERROR; }
     _VERIFY_GATES_FILE="$(mktemp -t loki-verify-gates.XXXXXX)" || { _verify_err "mktemp failed"; return $VERIFY_EXIT_ERROR; }
     # shellcheck disable=SC2064

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.122.1"
+__version__ = "7.123.1"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.122.1
+**Version:** v7.123.1
 
 ---
 
@@ -396,7 +396,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.122.1 start ./my-spec.md
+  asklokesh/loki-mode:7.123.1 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.122.1";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
+var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.123.1";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -814,4 +814,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(K8),2}}e1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var SZ=await NZ(Bun.argv.slice(2));process.exit(SZ);
 
-//# debugId=EB9A5D1CD7D5B98164756E2164756E21
+//# debugId=55CB80637F3CD12064756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.122.1'
+__version__ = '7.123.1'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.122.1",
+  "version": "7.123.1",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.122.1",
+  "version": "7.123.1",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",