loki-mode 7.129.5 → 8.0.1

package/autonomy/lib/prd-enrich.sh

@@ -42,6 +42,40 @@
 # precedent at autonomy/lib/voter-agents.sh:259.
 _loki_prd_enrich_invoke() {
     local prompt="$1"
+    # v8 RAW-SDK TEXT PATH (opt-in LOKI_SDK_PRD_ENRICH=1). Free-form enrichment
+    # via the pure-HTTPS @anthropic-ai/sdk (no claude binary) through the loki-ts
+    # `internal sdk-text` bridge. Runs BEFORE the claude-binary guard so the
+    # no-binary deploy win holds. Fail-closed: on ANY miss (flag off, no key,
+    # bun/entrypoint absent, non-zero, empty) fall straight through to the claude
+    # path below -- zero behavior change when off or unavailable. The output is
+    # free-form text the caller consumes verbatim, same as the claude path.
+    if [ "${LOKI_SDK_PRD_ENRICH:-0}" = "1" ]; then
+        local _pe_root _pe_loki _pe_pf _pe_out _pe_rc
+        _pe_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+        _pe_loki="${_pe_root}/bin/loki"
+        if [ -x "$_pe_loki" ] && command -v bun >/dev/null 2>&1; then
+            _pe_pf="$(mktemp 2>/dev/null)" || _pe_pf=""
+            if [ -n "$_pe_pf" ]; then
+                printf '%s' "$prompt" > "$_pe_pf"
+                _pe_rc=0
+                local _pe_to_s="${LOKI_PRD_ENRICH_TIMEOUT:-180}"
+                local _pe_wrap
+                if command -v timeout >/dev/null 2>&1; then _pe_wrap="timeout $(( _pe_to_s + 15 ))"
+                elif command -v gtimeout >/dev/null 2>&1; then _pe_wrap="gtimeout $(( _pe_to_s + 15 ))"
+                else _pe_wrap=""; fi
+                _pe_out="$($_pe_wrap "$_pe_loki" internal sdk-text \
+                    --prompt-file "$_pe_pf" \
+                    --model "${LOKI_SDK_PRD_ENRICH_MODEL:-claude-sonnet-5}" --effort medium \
+                    --timeout-ms "$(( _pe_to_s * 1000 ))" 2>/dev/null)" || _pe_rc=$?
+                rm -f "$_pe_pf" 2>/dev/null || true
+                if [ "$_pe_rc" -eq 0 ] && [ -n "$_pe_out" ]; then
+                    printf '%s' "$_pe_out"
+                    return 0
+                fi
+            fi
+        fi
+        # fall through to the claude path (fail-closed)
+    fi
     command -v claude >/dev/null 2>&1 || return 1
     local rc=0
     local out=""
@@ -65,6 +99,14 @@ _loki_prd_enrich_invoke() {
 _loki_prd_enrich_provider_ok() {
     [ "${LOKI_PROVIDER:-claude}" = "claude" ] || return 1
     [ "${PROVIDER_DEGRADED:-false}" != "true" ] || return 1
+    # v8: the raw-SDK enrich path (LOKI_SDK_PRD_ENRICH=1) needs no claude binary,
+    # so attempt is viable when that path is usable (bridge + bun). The invoke fn
+    # still fails closed to claude on an SDK miss.
+    if [ "${LOKI_SDK_PRD_ENRICH:-0}" = "1" ] \
+       && [ -x "$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)/bin/loki" ] \
+       && command -v bun >/dev/null 2>&1; then
+        return 0
+    fi
     command -v claude >/dev/null 2>&1 || return 1
     return 0
 }

package/autonomy/lib/proof-analytics-props.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Emit the FIXED analytics allowlist from a finished proof.json as key=value
+lines, one per line, for loki_emit_build_verified (autonomy/telemetry.sh).
+
+This is the SINGLE authoritative allowlist for opt-in build-outcome analytics.
+Only already-computed scalars are ever emitted -- never code, spec/PRD text,
+paths, or file names. Anything not named here is never read, so a proof.json
+schema change cannot silently start leaking a new field.
+
+Free-text-shaped fields are excluded on purpose:
+  - headline is a bounded enum (VERIFIED / VERIFIED WITH GAPS / NOT VERIFIED),
+    computed deterministically from facts -- never spec/project text.
+  - files_changed is emitted as a COUNT only, never the paths list.
+
+Usage: proof-analytics-props.py <proof.json>
+Fail-open: any error prints nothing and exits non-zero; the caller drops it.
+"""
+import json
+import sys
+
+
+def main():
+    if len(sys.argv) < 2:
+        return 1
+    try:
+        p = json.load(open(sys.argv[1]))
+    except Exception:
+        return 1
+
+    honesty = p.get("honesty") or {}
+    council = p.get("council") or {}
+    facts = p.get("facts") or {}
+    qg = p.get("quality_gates") or {}
+    fc = p.get("files_changed") or {}
+
+    gates_passed = qg.get("passed")
+    gates_total = qg.get("total")
+    try:
+        rate = round(int(gates_passed) / int(gates_total), 3) if gates_total else None
+    except Exception:
+        rate = None
+
+    out = {
+        "headline": str(honesty.get("headline") or ""),  # bounded enum only
+        "evidence_gate_verdict": str(
+            honesty.get("evidence_gate_verdict")
+            or (facts.get("evidence_gate") or {}).get("verdict")
+            or ""
+        ),
+        "final_verdict": str(council.get("final_verdict") or ""),
+        "iterations": p.get("iterations"),
+        "files_changed_count": fc.get("count") if isinstance(fc, dict) else None,
+        "wall_clock_sec": p.get("wall_clock_sec"),
+        "gates_passed": gates_passed,
+        "gates_total": gates_total,
+        "gate_pass_rate": rate,
+    }
+
+    for k, v in out.items():
+        if v is None or v == "":
+            continue
+        # key=value; sanitize so a value can never inject a second pair or a newline.
+        v = str(v).replace("\n", " ").replace("=", "-")
+        sys.stdout.write("%s=%s\n" % (k, v))
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())