loki-mode 7.16.1 → 7.17.0

package/docs/R10-MARKETPLACE-PLAN.md

@@ -0,0 +1,137 @@
+# R10: Agent + Template Marketplace (install-from-source)
+
+Status: implemented in this worktree (isolated; not committed to main).
+Scope: the install MECHANISM + a manifest format. There is NO hosted
+central registry. This is honest install-from-source (git / local / url).
+A central hub server is future work.
+
+## Goal
+
+Network effects: let users install community agents and PRD templates from
+a shared source, the way Claude Code installs skills/plugins. Pairs with R8
+(R8 exports shareable assets; R10 installs them). Shared assets become a
+network effect that keeps users in the ecosystem.
+
+## What already exists (verified, reused -- NOT rebuilt)
+
+- `agents/types.json` -- a JSON ARRAY of 41 built-in agent objects. Fields
+  (union): `type`, `name`, `swarm`, `persona`, `focus` (list), `capabilities`.
+  Swarms: business, data, engineering, growth, operations, orchestration,
+  product, review.
+- `agents/managed_registry.py` -- a DIFFERENT registry: it materializes
+  Managed Agent IDs via the Anthropic beta SDK, gated on managed-memory.
+  It treats `types.json` as read-only source of truth. NOT related to
+  install-from-source; no collision. We did not touch it.
+- `cmd_agent()` (`autonomy/loki`) -- subcommands `list`, `info`, `run`,
+  `start`, `review`. Each reads `types.json` directly in inline python
+  blocks (5 sites).
+- `templates/` -- 21 built-in PRD templates as `*.md` files (plus README).
+- `cmd_init()` (`autonomy/loki`) -- `loki init --template <name>` is the
+  consumer of templates: it validates `<name>` against a hardcoded
+  `TEMPLATE_NAMES` array, resolves `$SKILL_DIR/templates/<name>.md` (or
+  `examples/`), and writes a `prd.md`. `--stdout` prints the body.
+- `cmd_quick()` -- generates an ad-hoc PRD; does not read `templates/`.
+- Bun route (`loki-ts/src/cli.ts` + `bin/loki` shim): only ~12 high-traffic
+  commands run on Bun; `agent` and `template` are NOT among them, so the
+  shim execs the bash CLI for both. Parity is automatic and identical.
+- R8 asset-export bundle format: NOT present in this tree yet. R10 defines
+  the install side and a manifest format R8 can target. (Coordinate: R8
+  exports a manifest of the same shape; R10 installs it.)
+
+## What R10 adds (enhance-in-place)
+
+### New module: `agents/hub_install.py`
+Single source of truth for manifest validation + install. Importable for
+tests; also a small CLI (`python3 hub_install.py <cmd> [source]`) used by
+the bash CLI via env-passed JSON. DATA-ONLY: it never eval/imports/runs
+anything from a source. For git/url it reads the manifest file only and
+never runs build hooks, npm install, make, or scripts in the tree.
+
+### Manifest format (JSON, `schema_version: 1`)
+
+Agent:
+```json
+{
+  "schema_version": 1,
+  "kind": "agent",
+  "type": "community-rust-pro",
+  "name": "Rust Pro",
+  "swarm": "engineering",
+  "persona": "You are a senior Rust engineer...",
+  "focus": ["rust", "tokio"],
+  "capabilities": "Rust, tokio, async"
+}
+```
+
+Template:
+```json
+{
+  "schema_version": 1,
+  "kind": "template",
+  "name": "rust-cli",
+  "label": "Rust CLI Tool",
+  "description": "A CLI tool in Rust",
+  "body": "# PRD: Rust CLI\n..."
+}
+```
+(`body_file: "prd.md"` may be used instead of `body` for local/git sources;
+the sibling markdown file is inlined, with traversal-safe name validation.)
+
+### Store layout (project-local, under `.loki/`)
+- `.loki/agents/installed.json` -- list of installed agent manifests
+- `.loki/templates/<name>.md` -- installed template body
+- `.loki/templates/installed.json` -- index of installed templates
+
+Rationale: project-local keeps installs scoped and never writes into the
+read-only package `agents/` or `templates/` dirs (those are wiped on
+npm/Docker upgrade and would dirty cherry-pick). A user-global `~/.loki`
+store is a natural future extension; not implemented here.
+
+### CLI surface
+- `loki agent install <source>` / `loki agent installed`
+- `loki template install <source>` / `loki template list`
+- `<source>` = local path | dir containing `manifest.json` | git repo URL
+  (cloned shallow to temp, manifest read, temp discarded) | raw http(s)
+  manifest URL.
+
+### Reader integration (avoids write-only)
+- `cmd_agent list / info / run / start / review`: union built-in
+  `types.json` with `.loki/agents/installed.json` at read time, so installed
+  agents are immediately visible to the existing consumers.
+- `cmd_init --template <name>`: also resolves an installed template body
+  (`.loki/templates/<name>.md`) and accepts the name as valid. Built-in
+  templates and `init --list` are unchanged.
+
+## Security model (no arbitrary code execution)
+
+Validation rejects, BEFORE any write:
+- Path traversal in `type` / template `name`: `..`, `/`, `\`, absolute
+  paths, null bytes; names must match `^[a-z0-9][a-z0-9-]{0,79}$`.
+- Built-in shadowing: a manifest claiming a built-in agent `type` or a
+  built-in template `name` is rejected (cannot silently replace the
+  security-reviewer persona, etc.).
+- Wrong field types, oversized fields (persona/body/focus caps), manifest
+  size cap, wrong `kind`, unsupported `schema_version`.
+- Executable-looking fields (`postinstall`, `preinstall`, `scripts`,
+  `exec`, `command`, `cmd`, `hooks`, `run`, `shell`, `eval`) are IGNORED,
+  never run, stripped from the stored entry, and reported to the operator.
+- Git clone is shallow, `--no-tags`, `GIT_TERMINAL_PROMPT=0`; only files
+  are read. URL fetch uses urllib (no shell), with a size cap.
+
+## Tests
+- `tests/test_hub_install.py` -- 34 module assertions (install agent/template
+  local + body_file, install from file:// git repo, malformed rejection,
+  path-traversal rejection, built-in-shadow rejection, no-code-execution
+  sentinel, unknown-source rejection, merged/installed read paths).
+- `tests/cli/test-hub-install.sh` -- 14 end-to-end CLI assertions through
+  `autonomy/loki` (install, list, agent list/info union, init --template
+  resolves installed, git file:// source, security rejections, no-exec
+  sentinel). No network.
+
+## Honesty / gaps
+- No hosted central marketplace server. Help text and this note say so.
+- Store is project-local only (user-global `~/.loki` is future).
+- No uninstall/update subcommand yet (re-install replaces in place).
+- R8 export side is not in this tree; R10 defines the manifest shape R8
+  should target.
+- Dashboard UI for browsing/installing is out of scope for this pass.

package/docs/R8-SHAREABLE-TEAM-ASSETS-PLAN.md

@@ -0,0 +1,129 @@
+# R8: Shareable Team Assets - Design Note
+
+Status: implemented in this worktree (isolated; not committed to main).
+Goal (per arc): turn individual setup into org lock-in / network effects by
+making a team's invested assets EXPORTABLE and IMPORTABLE across a team or org,
+so setup compounds into shared value (the skills-marketplace stickiness dynamic).
+
+## 1. Inventory of existing machinery (verified against real source)
+
+Before writing anything, the existing export/import/share + memory machinery
+was read in full. Findings:
+
+| Mechanism | Location | What it actually does | Reused? |
+|---|---|---|---|
+| `cmd_export` | `autonomy/loki:6254` | Per-run SESSION SNAPSHOT: json / markdown / csv / timeline of one `.loki/` run. Not portable across teams, not redacted. | Reused its `_export_check_overwrite` guard. |
+| `cmd_import` | `autonomy/loki:4722` | Imports GitHub ISSUES into `.loki/queue/`. Unrelated to assets. | Not applicable (different domain). |
+| `cmd_share` | `autonomy/loki:25147` | Uploads a session REPORT as a GitHub gist. | Not applicable (report, not assets). |
+| `cmd_memory` | `autonomy/loki:14475` | Lists/show cross-project learnings in `~/.loki/learnings/*.jsonl`. No tarball export. | Same source dir reused as an asset category. |
+| `proof_redact.py` | `autonomy/lib/proof_redact.py` | Single redaction chokepoint (R1). `redact_tree(obj)`, `redact_value(s)`, `set_context()`, `RULES_VERSION`. | REUSED as-is. No second redactor written. |
+| agent registry | `agents/types.json` | 41 shipped agent types. `cmd_agent` (`autonomy/loki:19509`) reads it from the install dir. | Bundled as the `agents` category. |
+| PRD templates | `templates/*.md` | 21 templates; read from `$SKILL_DIR/templates` at runtime (`autonomy/loki:9781`, `8840`). | Bundled as `templates`. |
+| council config | `<project>/.loki/council/*.json` | `config.json` / `state.json` (`autonomy/loki:16688`, `autonomy/run.sh:3643`). | Bundled as `council`. |
+| project memory | `<project>/.loki/memory/{episodic,semantic,skills,...}` (`autonomy/run.sh:3183`) | Per-project episodic/semantic/procedural memory. | Bundled as `memory`. |
+| R5 wiki | `<project>/.loki/wiki/**` (`autonomy/loki:22881`) | Cited per-project wiki. | Bundled as `wiki` (opt-in). |
+
+Key negative finding: there is NO separate per-user "custom agent" store.
+"Custom agents" == the `agents/types.json` registry. We do not invent one
+(that would be the parallel-machinery trap the task forbids).
+
+## 2. Why `loki assets` is NOT a duplicate of `cmd_export`
+
+- `cmd_export` = per-run session snapshot, one format at a time, not redacted,
+  not portable. Scope: "what happened in this run".
+- `loki assets` = portable, redacted, multi-category TEAM-ASSET tarball.
+  Scope: "the reusable setup a team invested in", designed to travel to
+  another clone/org. Different scope, different artifact, different lifetime.
+
+Concrete reuse (not a fork): `_export_check_overwrite` (overwrite guard) and
+the `proof_redact` chokepoint. No new redactor, no parallel exporter.
+
+## 3. Asset map and the deliberate export/import asymmetry
+
+| Category | Export source | Bundle path | Import restore root |
+|---|---|---|---|
+| learnings | `~/.loki/learnings/*.jsonl` | `learnings/` | `$HOME/.loki/learnings` |
+| memory | `<project>/.loki/memory/**` | `memory/` | `<cwd>/.loki/memory` |
+| agents | `$SKILL_DIR/agents/types.json` | `agents/` | `<cwd>/agents` |
+| templates | `$SKILL_DIR/templates/*.md` | `templates/` | `<cwd>/templates` |
+| council | `<project>/.loki/council/*.json` | `council/` | `<cwd>/.loki/council` |
+| wiki (opt-in) | `<project>/.loki/wiki/**` | `wiki/` | `<cwd>/.loki/wiki` |
+
+The export and import repo_root values are DELIBERATELY DIFFERENT (enforced in
+`cmd_assets`, not in the Python helper):
+
+- EXPORT reads agents/templates from the loki install (`$SKILL_DIR`), because
+  that is where a team's edited registry/templates live and are read at
+  runtime.
+- IMPORT writes agents/templates under the caller's cwd (the target clone
+  root) BY DEFAULT, NEVER silently back into the install. Writing into
+  `$SKILL_DIR` would clobber the live install with redacted copies (this was
+  caught and fixed during development: a bash smoke test that used `$SKILL_DIR`
+  on import overwrote the worktree's real `agents/types.json` and templates;
+  default restore root changed to cwd, damage reverted).
+- `loki assets import --into-install` opts back into `$SKILL_DIR` for
+  agents/templates only, so a GLOBAL-INSTALL user (the primary install path per
+  CLAUDE.md) gets them read at runtime. This is the symmetric round-trip
+  (export reads $SKILL_DIR, import --into-install writes $SKILL_DIR). It is
+  opt-in because the default cwd target is non-destructive.
+
+memory/learnings/council/wiki restore to `$HOME/.loki` or `<cwd>/.loki` and
+take effect immediately regardless of the flag.
+
+## 4. Redaction (single chokepoint, all file types)
+
+`autonomy/lib/assets_bundle.py` calls `proof_redact.set_context(home, repo)`
+then dispatches by extension before any byte is written into the tarball:
+- `.json` -> parse -> `redact_tree` -> reserialize
+- `.jsonl` -> per-line parse -> `redact_tree` -> reserialize
+- `.md` / `.txt` / other -> `redact_value` on the whole string
+
+Originals on disk are never modified (verified by test). Secrets seeded into
+each of md, jsonl, and json are all stripped (verified by test + live leak
+scan).
+
+Scope of redaction (honest): proof_redact strips SECRETS / KEYS / TOKENS /
+connection-string credentials / absolute home+repo PATHS, per its frozen
+`RULES_VERSION`. It does NOT do general PII (emails, author names, free text).
+The accurate claim for this feature is "no secrets/keys/home-paths leak," not
+"no PII." The authoritative evidence is the leak-scan test
+(`test_imported_assets_contain_no_secrets`), not the manifest count.
+
+## 5. Honest gaps / limitations
+
+- agents/templates restore relative to cwd by default; loki reads them from its
+  install at runtime, so a global-install user should pass `--into-install` (or
+  copy the restored `agents/` + `templates/` into their install). Documented in
+  `--help` and the module docstring. memory/learnings/council/wiki are
+  effective immediately.
+- Round-trip is SEMANTICALLY FAITHFUL but REFORMATTED, not byte-identical:
+  JSON files come back `indent=2`, and JSONL merge canonicalizes lines
+  (sort_keys). Content/semantics are preserved; whitespace/key-order are not.
+- The export-reads-install / import-writes-cwd asymmetry lives in the bash
+  `cmd_assets`, not the Python helper. The Python tests pass roots explicitly
+  so they cover the helper mechanics; the bash asymmetry is covered by
+  `tests/test_assets_cli.sh` (export with SKILL_DIR=A, import from cwd=B,
+  assert agents land in B).
+- The manifest `redactions` count covers structured (json/jsonl) redactions
+  only; `redact_value` (md/text) and path collapses are not counted (the
+  redaction still HAPPENS). The authoritative no-PII evidence is the
+  `test_imported_assets_contain_no_secrets` leak-scan test, not the count.
+- `agents/types.json` and `templates/*.md` are repo-shipped defaults; a bundle
+  from a fresh checkout re-ships the stock set. Value = captured team DELTAS
+  travelling with the baseline.
+- The placement tests assert files land at the mapped path; they do not assert
+  the importing loki reads them at runtime (that is the global-install gap
+  above).
+
+## 6. bash + Bun parity
+
+`assets` is NOT in the `bin/loki` Bun allowlist (`bin/loki:119`), so it falls
+through the shim's default branch to the bash CLI (`bin/loki:145`), exactly like
+`bench`. Parity is free via fall-through; no Bun command is needed or added.
+
+## 7. Files
+
+- `autonomy/lib/assets_bundle.py` (new) - bundler/redactor/restorer helper.
+- `autonomy/loki` (modified) - `cmd_assets` + dispatch case.
+- `tests/test_assets_bundle.py` (new) - 13 tests.
+- `docs/R8-SHAREABLE-TEAM-ASSETS-PLAN.md` (this note).

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var I7=Object.defineProperty;var P7=($)=>$;function L7($,Q){this[$]=P7.bind(null,Q)}var g=($,Q)=>{for(var K in Q)I7($,K,{get:Q[K],enumerable:!0,configurable:!0,set:L7.bind(Q,K)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var z1=import.meta.require;var w$={};g(w$,{lokiDir:()=>L,homeLokiDir:()=>c1,findRepoRootForVersion:()=>u1,REPO_ROOT:()=>p});import{resolve as o,dirname as f1}from"path";import{fileURLToPath as k7}from"url";import{existsSync as P1}from"fs";import{homedir as j7}from"os";function F7(){let $=A$;for(let Q=0;Q<6;Q++){if(P1(o($,"VERSION"))&&P1(o($,"autonomy/run.sh")))return $;let K=f1($);if(K===$)break;$=K}return o(A$,"..","..","..")}function u1($){let Q=$;for(let K=0;K<6;K++){if(P1(o(Q,"VERSION"))&&P1(o(Q,"autonomy/run.sh")))return Q;let Z=f1(Q);if(Z===Q)break;Q=Z}return o($,"..","..","..")}function L(){return process.env.LOKI_DIR??o(process.cwd(),".loki")}function c1(){return o(j7(),".loki")}var A$,p;var m=k(()=>{A$=f1(k7(import.meta.url));p=F7()});import{readFileSync as R7}from"fs";import{resolve as E7,dirname as S7}from"path";import{fileURLToPath as x7}from"url";function L1(){if($1!==null)return $1;let $="7.16.1";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=S7(x7(import.meta.url)),K=u1(Q);$1=R7(E7(K,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var p1=k(()=>{m()});var P$={};g(P$,{runOrThrow:()=>N7,run:()=>F,commandVersion:()=>D7,commandExists:()=>v,ShellError:()=>l1});async function F($,Q={}){let K=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),Z,z;if(Q.timeoutMs&&Q.timeoutMs>0)Z=setTimeout(()=>{try{K.kill("SIGTERM")}catch{}z=setTimeout(()=>{try{K.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[U,X,W]=await Promise.all([new Response(K.stdout).text(),new Response(K.stderr).text(),K.exited]);return{stdout:U,stderr:X,exitCode:W}}finally{if(Z)clearTimeout(Z);if(z)clearTimeout(z)}}async function N7($,Q={}){let K=await F($,Q);if(K.exitCode!==0)throw new l1(`command failed (${K.exitCode}): ${$.join(" ")}`,K.exitCode,K.stdout,K.stderr);return K}async function v($){let Q=C7($),K=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(K.exitCode===0)return K.stdout.trim()||null;return null}function C7($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function D7($,Q="--version"){if(!await v($))return null;let Z=await F([$,Q],{timeoutMs:5000});if(Z.exitCode!==0)return null;return((Z.stdout||Z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var l1;var n=k(()=>{l1=class l1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,K,Z){super($);this.message=$;this.exitCode=Q;this.stdout=K;this.stderr=Z;this.name="ShellError"}}});function a($){return h7?"":$}var h7,O,C,I,I3,A,x,h,H;var l=k(()=>{h7=(process.env.NO_COLOR??"").length>0;O=a("\x1B[0;31m"),C=a("\x1B[0;32m"),I=a("\x1B[1;33m"),I3=a("\x1B[0;34m"),A=a("\x1B[0;36m"),x=a("\x1B[1m"),h=a("\x1B[2m"),H=a("\x1B[0m")});import{existsSync as l7}from"fs";async function X1(){if(G1!==void 0)return G1;let $="/opt/homebrew/bin/python3.12";if(l7($))return G1=$,$;let Q=await v("python3.12");if(Q)return G1=Q,Q;let K=await v("python3");return G1=K,K}async function Q1($,Q={}){let K=await X1();if(!K)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([K,"-c",$],Q)}var G1;var B1=k(()=>{n()});var D$={};g(D$,{runStatus:()=>z8});import{existsSync as b,readFileSync as H1,readdirSync as R$,statSync as E$}from"fs";import{resolve as N,basename as s7}from"path";import{homedir as r7}from"os";async function i7(){if(await v("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${H}
+var I7=Object.defineProperty;var P7=($)=>$;function L7($,Q){this[$]=P7.bind(null,Q)}var g=($,Q)=>{for(var K in Q)I7($,K,{get:Q[K],enumerable:!0,configurable:!0,set:L7.bind(Q,K)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var z1=import.meta.require;var w$={};g(w$,{lokiDir:()=>L,homeLokiDir:()=>c1,findRepoRootForVersion:()=>u1,REPO_ROOT:()=>p});import{resolve as o,dirname as f1}from"path";import{fileURLToPath as k7}from"url";import{existsSync as P1}from"fs";import{homedir as j7}from"os";function F7(){let $=A$;for(let Q=0;Q<6;Q++){if(P1(o($,"VERSION"))&&P1(o($,"autonomy/run.sh")))return $;let K=f1($);if(K===$)break;$=K}return o(A$,"..","..","..")}function u1($){let Q=$;for(let K=0;K<6;K++){if(P1(o(Q,"VERSION"))&&P1(o(Q,"autonomy/run.sh")))return Q;let Z=f1(Q);if(Z===Q)break;Q=Z}return o($,"..","..","..")}function L(){return process.env.LOKI_DIR??o(process.cwd(),".loki")}function c1(){return o(j7(),".loki")}var A$,p;var m=k(()=>{A$=f1(k7(import.meta.url));p=F7()});import{readFileSync as R7}from"fs";import{resolve as E7,dirname as S7}from"path";import{fileURLToPath as x7}from"url";function L1(){if($1!==null)return $1;let $="7.17.0";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=S7(x7(import.meta.url)),K=u1(Q);$1=R7(E7(K,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var p1=k(()=>{m()});var P$={};g(P$,{runOrThrow:()=>N7,run:()=>F,commandVersion:()=>D7,commandExists:()=>v,ShellError:()=>l1});async function F($,Q={}){let K=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),Z,z;if(Q.timeoutMs&&Q.timeoutMs>0)Z=setTimeout(()=>{try{K.kill("SIGTERM")}catch{}z=setTimeout(()=>{try{K.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[U,X,W]=await Promise.all([new Response(K.stdout).text(),new Response(K.stderr).text(),K.exited]);return{stdout:U,stderr:X,exitCode:W}}finally{if(Z)clearTimeout(Z);if(z)clearTimeout(z)}}async function N7($,Q={}){let K=await F($,Q);if(K.exitCode!==0)throw new l1(`command failed (${K.exitCode}): ${$.join(" ")}`,K.exitCode,K.stdout,K.stderr);return K}async function v($){let Q=C7($),K=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(K.exitCode===0)return K.stdout.trim()||null;return null}function C7($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function D7($,Q="--version"){if(!await v($))return null;let Z=await F([$,Q],{timeoutMs:5000});if(Z.exitCode!==0)return null;return((Z.stdout||Z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var l1;var n=k(()=>{l1=class l1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,K,Z){super($);this.message=$;this.exitCode=Q;this.stdout=K;this.stderr=Z;this.name="ShellError"}}});function a($){return h7?"":$}var h7,O,C,I,I3,A,x,h,H;var l=k(()=>{h7=(process.env.NO_COLOR??"").length>0;O=a("\x1B[0;31m"),C=a("\x1B[0;32m"),I=a("\x1B[1;33m"),I3=a("\x1B[0;34m"),A=a("\x1B[0;36m"),x=a("\x1B[1m"),h=a("\x1B[2m"),H=a("\x1B[0m")});import{existsSync as l7}from"fs";async function X1(){if(G1!==void 0)return G1;let $="/opt/homebrew/bin/python3.12";if(l7($))return G1=$,$;let Q=await v("python3.12");if(Q)return G1=Q,Q;let K=await v("python3");return G1=K,K}async function Q1($,Q={}){let K=await X1();if(!K)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([K,"-c",$],Q)}var G1;var B1=k(()=>{n()});var D$={};g(D$,{runStatus:()=>z8});import{existsSync as b,readFileSync as H1,readdirSync as R$,statSync as E$}from"fs";import{resolve as N,basename as s7}from"path";import{homedir as r7}from"os";async function i7(){if(await v("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${H}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -748,4 +748,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(w7),2}}process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var H3=await U3(Bun.argv.slice(2));process.exit(H3);
 
-//# debugId=5AF2A03AC937F25664756E2164756E21
+//# debugId=34E49D55E4F12E2764756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.16.1'
+__version__ = '7.17.0'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loki-mode",
-  "version": "7.16.1",
+  "version": "7.17.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",