loki-mode 7.129.1 → 7.129.3

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.129.1
+# Loki Mode v7.129.3
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.129.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.129.3 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.129.1
+7.129.3

package/autonomy/loki

@@ -8057,6 +8057,16 @@ fi
 INNER_SCRIPT_EOF
         chmod +x "$run_script"
 
+        # Propagate the nested-agent signal into the detached run. CLAUDECODE (set
+        # by Claude Code / the Loki Mode skill) is NOT in the curated env list the
+        # inner script inherits, so run.sh's nested guard would never see it once
+        # detached. Forward it as LOKI_NESTED_AGENT (which run.sh honors) so the
+        # testing/docs worktree sub-streams stay OFF when nested even after the
+        # nohup fork. Already-set LOKI_NESTED_AGENT wins.
+        local _loki_nested_pass="${LOKI_NESTED_AGENT:-}"
+        if [ -z "$_loki_nested_pass" ] && [ -n "${CLAUDECODE:-}" ]; then
+            _loki_nested_pass=1
+        fi
         # Pass all variables safely via environment
         LOKI_RUN_DIR="$(pwd)" \
         LOKI_CMD="$loki_cmd" \
@@ -8069,6 +8079,7 @@ INNER_SCRIPT_EOF
         LOKI_AUTO_MERGE="$auto_merge" \
         LOKI_PR_TITLE="${title:-Implementation for issue ${issue_ref}}" \
         LOKI_ISSUE_NUMBER="${number:-}" \
+        LOKI_NESTED_AGENT="$_loki_nested_pass" \
         nohup bash "$run_script" > "$log_file" 2>&1 &
 
         local bg_pid=$!

package/autonomy/run.sh

@@ -10340,8 +10340,30 @@ auto_generate_docs_if_needed() {
     # Synchronous so docs exist before the gate scores. Provider-agnostic:
     # 'loki docs generate' picks the run's provider and falls back to
     # template-based docs when no provider CLI is available.
-    "$loki_bin" docs generate "$project_dir" >/dev/null 2>&1 || \
-        log_warn "Auto-documentation: generation did not complete (gate will score on what exists)"
+    #
+    # BOUNDED: 'loki docs generate' spawns a provider (claude) call that can hang
+    # with no cap. This runs AFTER completion, before the detached --pr push/PR
+    # step, so a hang here silently blocks the whole PR from ever being created
+    # (observed: a verified build stuck ~55 min in this step, work committed but
+    # never pushed). Wrap it in a timeout; docs are non-gating, so on timeout we
+    # warn and continue to the gate (which scores whatever docs exist).
+    local _doc_to="${LOKI_DOCS_TIMEOUT:-${LOKI_GATE_TIMEOUT:-300}}"
+    local _doc_cmd=()
+    if command -v gtimeout >/dev/null 2>&1; then
+        _doc_cmd=(gtimeout "${_doc_to}s")
+    elif command -v timeout >/dev/null 2>&1; then
+        _doc_cmd=(timeout "${_doc_to}s")
+    fi
+    if "${_doc_cmd[@]}" "$loki_bin" docs generate "$project_dir" >/dev/null 2>&1; then
+        :
+    else
+        local _doc_rc=$?
+        if [ "$_doc_rc" -eq 124 ]; then
+            log_warn "Auto-documentation: timed out after ${_doc_to}s (gate will score on what exists); continuing"
+        else
+            log_warn "Auto-documentation: generation did not complete (gate will score on what exists)"
+        fi
+    fi
 }
 
 # ============================================================================
@@ -11216,6 +11238,69 @@ run_code_review() {
         ':(exclude)__pycache__/' ':(exclude)**/__pycache__/**' \
         ':(exclude)vendor/' ':(exclude)**/vendor/**')
 
+    # Client fix (code_review NO_OUTPUT on oversized diffs): the hardcoded excludes
+    # above miss dirs that are git-TRACKED but listed in the target repo's
+    # .gitignore -- e.g. a dir committed before the ignore rule was added. The
+    # `git add -A` temp index below stages those tracked files, so an 11MB
+    # tracked-but-ignored dir bloats the review diff, overflows the reviewer
+    # prompt, and every reviewer returns NO_OUTPUT. Filter them out DYNAMICALLY:
+    # list the tracked files the repo's own .gitignore would ignore (check-ignore
+    # --no-index evaluates the rules even for already-tracked paths) and exclude
+    # each at the EXACT depth of its containing directory -- NOT a collapsed
+    # top-level prefix. Excluding the top-level prefix would drop sibling REAL
+    # changes (e.g. ignoring loki-ts/dist/ must NOT exclude all of loki-ts/), and
+    # because the empty-diff guard below reuses this same pathspec, that
+    # over-exclusion could blind the guard and let a real change PASS unreviewed
+    # (council-caught fail-closed hole). Nested paths are pruned to the shallowest
+    # ignored dir so a/b and a/b/c collapse to a/b (one exclude, still precise).
+    # Capped so a pathological repo cannot build a giant argv. Opt out
+    # LOKI_REVIEW_GITIGNORE_FILTER=0. No-op (byte-identical diff) when nothing is
+    # tracked-but-ignored.
+    if [ "${LOKI_REVIEW_GITIGNORE_FILTER:-1}" != "0" ]; then
+        local _gi_cap="${LOKI_REVIEW_GITIGNORE_MAX_EXCLUDES:-200}"
+        local _gi_dirs _gi_count=0 _gi_d _gi_prev=""
+        # tracked-and-ignored files -> the DIRNAME of each (exact depth), sorted so
+        # a parent dir sorts before its children for the nested-prune below. A file
+        # ignored at repo root (dirname ".") is excluded by its own exact path, not
+        # a directory.
+        _gi_dirs="$( (cd "${TARGET_DIR:-.}" && \
+            git ls-files -z 2>/dev/null | git check-ignore --no-index --stdin -z 2>/dev/null) \
+            | tr '\0' '\n' | grep -v '^$' \
+            | while IFS= read -r _f; do d="$(dirname "$_f")"; [ "$d" = "." ] && printf '%s\n' "$_f" || printf '%s\n' "$d"; done \
+            | sort -u || true )"
+        if [ -n "$_gi_dirs" ]; then
+            while IFS= read -r _gi_d; do
+                [ -n "$_gi_d" ] || continue
+                # nested-prune: if this path is under the previously-kept dir, skip
+                # it (the parent exclude already covers it). Relies on the sort so a
+                # parent precedes its children.
+                if [ -n "$_gi_prev" ] && case "$_gi_d/" in "$_gi_prev"/*) true ;; *) false ;; esac; then
+                    continue
+                fi
+                if [ "$_gi_count" -ge "$_gi_cap" ]; then
+                    log_warn "Code review: gitignore-exclude cap ($_gi_cap) reached; some tracked-but-ignored paths remain in the diff. Raise LOKI_REVIEW_GITIGNORE_MAX_EXCLUDES or 'git rm --cached' them."
+                    break
+                fi
+                # Exact-path exclude (a leading-path pathspec matches that path and
+                # everything under it; it does NOT match siblings). No '**/' variant
+                # -- that would re-introduce the over-broad match this fix removes.
+                # A trailing '/' anchors a DIRECTORY; a root-level ignored FILE
+                # (dirname was ".", so _gi_d is the file itself) must be excluded by
+                # its EXACT path with no '/', else the pathspec matches nothing and
+                # the ignored file leaks back into the diff (council note: safe
+                # direction, but this makes it exact). Decide by what is on disk.
+                if [ -d "${TARGET_DIR:-.}/${_gi_d}" ]; then
+                    _review_pathspec+=(":(exclude)${_gi_d}/")
+                else
+                    _review_pathspec+=(":(exclude)${_gi_d}")
+                fi
+                _gi_prev="$_gi_d"
+                _gi_count=$((_gi_count + 1))
+            done <<< "$_gi_dirs"
+            [ "$_gi_count" -gt 0 ] && log_info "Code review: excluded $_gi_count tracked-but-gitignored dir(s) from the review diff (e.g. $(printf '%s' "$_gi_dirs" | head -3 | tr '\n' ' '))"
+        fi
+    fi
+
     # Plan #16 (A-2): make the review diff base robust to shallow/fresh history,
     # and surface NEW (untracked) files -- the whole greenfield build is new
     # files, which `git diff <base>` (tracked-only) never shows.
@@ -11259,6 +11344,28 @@ run_code_review() {
         rm -f "$_rev_idx" 2>/dev/null || true
     fi
 
+    # Client fix (fail LOUD on oversized diff): measure the review diff and, if it
+    # exceeds LOKI_REVIEW_MAX_DIFF_BYTES (default 400KB ~ the reviewer prompt
+    # ceiling), emit an EXPLICIT, actionable warning + a telemetry event instead
+    # of letting the reviewers silently overflow to NO_OUTPUT. We still RUN the
+    # review (a large-but-parseable diff may work); the all-NO_OUTPUT block below
+    # references this so the block is self-explanatory. Names the biggest tracked
+    # dirs so the operator sees the culprit without repo archaeology.
+    local _review_diff_bytes=0
+    _review_diff_bytes=$(printf '%s' "$diff_content" | wc -c | tr -d ' ')
+    local _review_max_bytes="${LOKI_REVIEW_MAX_DIFF_BYTES:-400000}"
+    if [ "${_review_diff_bytes:-0}" -gt "$_review_max_bytes" ] 2>/dev/null; then
+        # biggest contributors: top changed dirs by line count in the diff
+        local _big_dirs
+        _big_dirs=$(printf '%s\n' "$changed_files" | sed 's#/.*##' | grep -v '^$' | sort | uniq -c | sort -rn | head -3 | awk '{print $2" ("$1" files)"}' | tr '\n' ' ')
+        log_warn "Code review: review diff is ${_review_diff_bytes} bytes (limit ${_review_max_bytes}). This can overflow reviewer prompts and force NO_OUTPUT. Biggest dirs: ${_big_dirs:-unknown}. Remedy: 'git rm -r --cached <stale-tracked-dir>' if it is gitignored, or raise LOKI_REVIEW_MAX_DIFF_BYTES."
+        emit_event_json "code_review_diff_oversized" \
+            "review_id=$review_id" \
+            "diff_bytes=$_review_diff_bytes" \
+            "limit_bytes=$_review_max_bytes" \
+            "iteration=${ITERATION_COUNT:-0}" 2>/dev/null || true
+    fi
+
     if [ -z "$diff_content" ]; then
         # Honesty (Finding #596 class): a silent PASS on an empty diff is a trust
         # gap ONLY when the run actually produced changes we failed to diff.
@@ -11601,6 +11708,15 @@ BUILD_PROMPT
         unset LOKI_REVIEW_PROMPT_NAME LOKI_REVIEW_PROMPT_FOCUS LOKI_REVIEW_PROMPT_CHECKS
         unset LOKI_REVIEW_PROMPT_DIFF_FILE LOKI_REVIEW_PROMPT_FILES_FILE LOKI_REVIEW_PROMPT_OUT
 
+        # Client fix (log the actual prompt/diff size per reviewer): so a
+        # NO_OUTPUT post-mortem is a one-line log read, not repo archaeology.
+        # Record the prompt byte size (and the shared diff size) both to the log
+        # and to a per-review sizes.json for the dashboard/telemetry.
+        local _prompt_bytes=0
+        [ -f "$review_prompt_file" ] && _prompt_bytes=$(wc -c < "$review_prompt_file" 2>/dev/null | tr -d ' ')
+        log_info "Reviewer $reviewer_name: prompt ${_prompt_bytes:-0} bytes (review diff ${_review_diff_bytes:-0} bytes)"
+        printf '%s\t%s\n' "$reviewer_name" "${_prompt_bytes:-0}" >> "$review_dir/$review_id/sizes.tsv" 2>/dev/null || true
+
         log_step "Dispatching reviewer: $reviewer_name"
 
         # Launch blind review in background (shared dispatch helper).
@@ -11724,6 +11840,12 @@ BUILD_PROMPT
         review_inconclusive=true
         log_error "CODE REVIEW INCONCLUSIVE: only $real_verdict_count of $reviewer_count reviewers returned a usable verdict (no_output=$no_output_count)"
         log_error "  A partial review drops dissent; refusing to pass the gate without every reviewer's verdict."
+        # Client fix: make the block self-explanatory. When the diff was oversized,
+        # NO_OUTPUT is almost certainly a prompt overflow -- say so + the remedy,
+        # instead of leaving the operator to guess (the reported failure mode).
+        if [ "${_review_diff_bytes:-0}" -gt "${_review_max_bytes:-400000}" ] 2>/dev/null; then
+            log_error "  LIKELY CAUSE: the review diff is ${_review_diff_bytes} bytes (> ${_review_max_bytes} limit), which overflows reviewer prompts -> empty output. Check for a large tracked-but-gitignored dir: 'git ls-files | git check-ignore --no-index --stdin' then 'git rm -r --cached <dir>'. Per-reviewer prompt sizes: $review_dir/$review_id/sizes.tsv"
+        fi
         if [ "${LOKI_REVIEW_RETRY:-1}" = "1" ] && [ "${_LOKI_REVIEW_RETRYING:-0}" != "1" ]; then
             log_warn "  Retrying code review once (LOKI_REVIEW_RETRY=1)..."
             _LOKI_REVIEW_RETRYING=1 run_code_review

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.129.1"
+__version__ = "7.129.3"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.129.1
+**Version:** v7.129.2
 
 ---
 
@@ -396,7 +396,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.129.1 start ./my-spec.md
+  asklokesh/loki-mode:7.129.2 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.129.1";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
+var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.129.3";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -814,4 +814,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(K8),2}}e1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var SZ=await NZ(Bun.argv.slice(2));process.exit(SZ);
 
-//# debugId=E67A22525236ED6C64756E2164756E21
+//# debugId=D9F70CA0E419CE7264756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.129.1'
+__version__ = '7.129.3'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.129.1",
+  "version": "7.129.3",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.129.1",
+  "version": "7.129.3",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",