loki-mode 7.20.0 → 7.22.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.20.0
+# Loki Mode v7.22.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -383,4 +383,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.20.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.22.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.20.0
+7.22.0

package/autonomy/lib/project-graph.sh

@@ -557,6 +557,32 @@ _lpg_find_git_root() {
 # Layer order: parent -> members -> subdir(root-to-leaf, deepest last)
 # -> scope. All paths are deduped via a tracked set of absolute paths.
 # Honors __LPG_TOTAL_CAP across all layers (stops at layer boundary).
+# _lpg_memory_file <dir>
+#
+# Resolve the per-directory memory/conventions file for the layered doc walker.
+# Prefers AGENTS.md (the agents.md standard: plain Markdown, nearest-file-wins,
+# read natively by Claude Code/Codex/etc.) and falls back to CLAUDE.md only when
+# AGENTS.md is absent in that directory. The two are never merged. The reader
+# (_lpg_read_layer / _append_layer) is filename-agnostic, so this is the single
+# point that decides which file each layer site reads.
+_lpg_memory_file() {
+    local dir="$1"
+    if [ -f "$dir/AGENTS.md" ]; then
+        printf '%s/AGENTS.md' "$dir"
+    else
+        printf '%s/CLAUDE.md' "$dir"
+    fi
+}
+
+# load_app_graph_context -- emit the layered conventions/doc context (parent,
+# member, subdir, and scope layers) as <!-- LOKI_LAYER --> blocks.
+#
+# NOTE (route asymmetry, conscious + pre-existing): the TS route has NO port of
+# this function. loki-ts/src/project_graph.ts is a membership graph, not a
+# doc-layer text emitter, so this layered AGENTS.md/CLAUDE.md walker is BASH-ONLY
+# by design (the layered-CLAUDE.md doc walker was never ported to TS). The
+# AGENTS.md precedence added here therefore lives only in bash; do not add a TS
+# walker to "fix" the asymmetry.
 load_app_graph_context() {
     local root="${LOKI_PROJECT_GRAPH_ROOT:-}"
 
@@ -634,7 +660,7 @@ load_app_graph_context() {
 
     # Parent layer first.
     if [ -n "$root" ]; then
-        _append_layer parent "$root/CLAUDE.md" || { printf '%s' "$out"; return 0; }
+        _append_layer parent "$(_lpg_memory_file "$root")" || { printf '%s' "$out"; return 0; }
     fi
 
     # Member layers (skip the scope member -- we add it as scope below).
@@ -644,7 +670,7 @@ load_app_graph_context() {
         if [ "$m" = "$target_dir" ]; then
             continue
         fi
-        _append_layer member "$m/CLAUDE.md" || { printf '%s' "$out"; return 0; }
+        _append_layer member "$(_lpg_memory_file "$m")" || { printf '%s' "$out"; return 0; }
     done
 
     # Subdir layers: ancestors of target_dir up to (and including) git_root,
@@ -674,12 +700,12 @@ load_app_graph_context() {
         # subdir_chain is leaf-to-root order; reverse so we emit root-to-leaf.
         local i count=${#subdir_chain[@]}
         for (( i = count - 1; i >= 0; i-- )); do
-            _append_layer subdir "${subdir_chain[$i]}/CLAUDE.md" || { printf '%s' "$out"; return 0; }
+            _append_layer subdir "$(_lpg_memory_file "${subdir_chain[$i]}")" || { printf '%s' "$out"; return 0; }
         done
     fi
 
     # Scope layer (target dir).
-    _append_layer scope "$target_dir/CLAUDE.md" || { printf '%s' "$out"; return 0; }
+    _append_layer scope "$(_lpg_memory_file "$target_dir")" || { printf '%s' "$out"; return 0; }
 
     printf '%s' "$out"
 }

package/autonomy/run.sh

@@ -2355,6 +2355,15 @@ notify_all_complete() {
 
 notify_intervention_needed() {
     local reason="$1"
+    # Delegate-then-notify: this helper ONLY fires the (gated) desktop ping. It
+    # deliberately does NOT write the durable COMPLETION.txt / completion.json
+    # record. Reason: notify_intervention_needed is also called from NON-terminal
+    # sites (the perpetual-mode PAUSE auto-clear branch, uncertainty escalation)
+    # where the run keeps going. Writing a "Needs input" durable file there would
+    # falsely tell a detached user the run is done / blocked when it is not. The
+    # durable intervention write now lives only at the genuinely blocking pause
+    # sites (immediately before handle_pause), so the durable state matches the
+    # actual run state.
     send_notification "Intervention Needed" "$reason" "critical"
 }
 
@@ -2363,6 +2372,265 @@ notify_rate_limit() {
     send_notification "Rate Limited" "Waiting ${wait_time}s before retry" "normal"
 }
 
+#===============================================================================
+# Delegate-then-notify: completion summary (Release 2, "delegate then notify")
+#
+# build_completion_summary <outcome> writes two durable files that survive a
+# detached (--bg) run where the terminal is gone and a bell would be useless:
+#   .loki/COMPLETION.txt        human plain text (no emojis, no dashes)
+#   .loki/state/completion.json machine-readable record of the same facts
+# It also exports two strings for send_notification to consume:
+#   _LOKI_SUMMARY_TITLE  short notification subtitle
+#   _LOKI_SUMMARY_BODY   short notification body (outcome + branch + file count)
+#
+# All git reads are best-effort and non-fatal. The diff window is the run-start
+# SHA captured once at runner init (_LOKI_RUN_START_SHA); we REUSE it and never
+# recapture, so the reported diff matches the evidence gate's window exactly.
+#
+# This function NEVER sends a notification and NEVER gates on
+# NOTIFICATIONS_ENABLED: the files are state, not a notification, and must be
+# written even when desktop notifications are disabled. emit_completion_summary
+# below is the wrapper that writes the files AND (gated) fires the desktop ping.
+#===============================================================================
+build_completion_summary() {
+    local outcome="${1:-complete}"
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    mkdir -p "$loki_dir/state" 2>/dev/null || true
+
+    # Human-readable outcome label and notification title.
+    local outcome_label notify_title
+    case "$outcome" in
+        complete)       outcome_label="Completed";        notify_title="Run complete" ;;
+        max_iterations) outcome_label="Max iterations";   notify_title="Run stopped (max iterations)" ;;
+        stopped)        outcome_label="Stopped";          notify_title="Run stopped" ;;
+        failed)         outcome_label="Failed";           notify_title="Run failed" ;;
+        intervention)   outcome_label="Needs input";      notify_title="Input needed" ;;
+        *)              outcome_label="$outcome";          notify_title="Run finished" ;;
+    esac
+
+    # Branch + diff stats vs the run-start SHA (best-effort; non-git or empty
+    # baseline yields empty values, which we render as "unknown"/"0").
+    local start_sha="${_LOKI_RUN_START_SHA:-}"
+    local branch="" head_sha="" diff_stat="" files_changed=0 insertions=0 deletions=0 review_cmd=""
+    branch="$( (cd "${TARGET_DIR:-.}" && git rev-parse --abbrev-ref HEAD) 2>/dev/null || true )"
+    [ -z "$branch" ] && branch="unknown"
+    head_sha="$( (cd "${TARGET_DIR:-.}" && git rev-parse HEAD) 2>/dev/null || true )"
+
+    if [ -n "$start_sha" ]; then
+        diff_stat="$( (cd "${TARGET_DIR:-.}" && git diff --stat "${start_sha}..HEAD") 2>/dev/null || true )"
+        # Parse the git diff --shortstat tail for counts (locale-stable enough
+        # for our display; failures leave the zeros in place).
+        local shortstat
+        shortstat="$( (cd "${TARGET_DIR:-.}" && git diff --shortstat "${start_sha}..HEAD") 2>/dev/null || true )"
+        if [ -n "$shortstat" ]; then
+            files_changed="$(printf '%s\n' "$shortstat" | grep -oE '[0-9]+ file' | grep -oE '[0-9]+' | head -1)"
+            insertions="$(printf '%s\n' "$shortstat" | grep -oE '[0-9]+ insertion' | grep -oE '[0-9]+' | head -1)"
+            deletions="$(printf '%s\n' "$shortstat" | grep -oE '[0-9]+ deletion' | grep -oE '[0-9]+' | head -1)"
+        fi
+        review_cmd="git diff ${start_sha}..HEAD"
+    else
+        review_cmd="git diff HEAD"
+    fi
+    [ -z "$files_changed" ] && files_changed=0
+    [ -z "$insertions" ] && insertions=0
+    [ -z "$deletions" ] && deletions=0
+
+    # Task counts: reuse the SAME queue reads as update_status_file.
+    local pending=0 in_progress=0 completed=0 failed=0
+    [ -f "$loki_dir/queue/pending.json" ] && pending=$(python3 -c "import json; print(len(json.load(open('$loki_dir/queue/pending.json'))))" 2>/dev/null || echo "0")
+    [ -f "$loki_dir/queue/in-progress.json" ] && in_progress=$(python3 -c "import json; print(len(json.load(open('$loki_dir/queue/in-progress.json'))))" 2>/dev/null || echo "0")
+    [ -f "$loki_dir/queue/completed.json" ] && completed=$(python3 -c "import json; print(len(json.load(open('$loki_dir/queue/completed.json'))))" 2>/dev/null || echo "0")
+    [ -f "$loki_dir/queue/failed.json" ] && failed=$(python3 -c "import json; print(len(json.load(open('$loki_dir/queue/failed.json'))))" 2>/dev/null || echo "0")
+
+    # Optional delegate-mode extras populated by Slice 3 (branch isolation / PR).
+    local delegate_branch="${_LOKI_DELEGATE_BRANCH_NAME:-}"
+    local pr_url="${_LOKI_DELEGATE_PR_URL:-}"
+
+    local ts
+    ts="$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date)"
+
+    # ---- Durable human-readable file: .loki/COMPLETION.txt --------------------
+    {
+        echo "Loki Mode run summary"
+        echo "====================="
+        echo ""
+        echo "Outcome:   $outcome_label"
+        echo "Branch:    $branch"
+        echo "Files changed: $files_changed (+$insertions / -$deletions)"
+        echo "Finished:  $ts"
+        echo ""
+        if [ -n "$delegate_branch" ]; then
+            echo "Delegate branch: $delegate_branch"
+        fi
+        if [ -n "$pr_url" ]; then
+            echo "Pull request: $pr_url"
+        elif [ "$outcome" = "complete" ]; then
+            echo "Pull request: not opened (set LOKI_DELEGATE_PR=1 to open one)"
+        fi
+        echo ""
+        echo "Tasks: pending=$pending in_progress=$in_progress completed=$completed failed=$failed"
+        echo ""
+        echo "Review the work:"
+        echo "  $review_cmd"
+        echo ""
+        if [ -n "$diff_stat" ]; then
+            echo "Diff stat:"
+            echo "$diff_stat"
+        else
+            echo "Diff stat: (no changes detected vs run start, or git unavailable)"
+        fi
+    } > "$loki_dir/COMPLETION.txt" 2>/dev/null || true
+
+    # ---- Durable machine-readable file: .loki/state/completion.json -----------
+    _LOKI_CS_OUTCOME="$outcome" \
+    _LOKI_CS_BRANCH="$branch" \
+    _LOKI_CS_START_SHA="$start_sha" \
+    _LOKI_CS_HEAD_SHA="$head_sha" \
+    _LOKI_CS_FILES="$files_changed" \
+    _LOKI_CS_INS="$insertions" \
+    _LOKI_CS_DEL="$deletions" \
+    _LOKI_CS_REVIEW="$review_cmd" \
+    _LOKI_CS_DELEGATE_BRANCH="$delegate_branch" \
+    _LOKI_CS_PR_URL="$pr_url" \
+    _LOKI_CS_TS="$ts" \
+    _LOKI_CS_OUT_FILE="$loki_dir/state/completion.json" \
+    python3 -c "
+import json, os, tempfile
+out = os.environ['_LOKI_CS_OUT_FILE']
+def i(v):
+    try: return int(v)
+    except (TypeError, ValueError): return 0
+rec = {
+    'outcome': os.environ.get('_LOKI_CS_OUTCOME', ''),
+    'branch': os.environ.get('_LOKI_CS_BRANCH', ''),
+    'start_sha': os.environ.get('_LOKI_CS_START_SHA', ''),
+    'head_sha': os.environ.get('_LOKI_CS_HEAD_SHA', ''),
+    'files_changed': i(os.environ.get('_LOKI_CS_FILES')),
+    'insertions': i(os.environ.get('_LOKI_CS_INS')),
+    'deletions': i(os.environ.get('_LOKI_CS_DEL')),
+    'review_cmd': os.environ.get('_LOKI_CS_REVIEW', ''),
+    'delegate_branch': os.environ.get('_LOKI_CS_DELEGATE_BRANCH', ''),
+    'pr_url': os.environ.get('_LOKI_CS_PR_URL', ''),
+    'timestamp': os.environ.get('_LOKI_CS_TS', ''),
+}
+d = os.path.dirname(out)
+fd, tmp = tempfile.mkstemp(dir=d, suffix='.json')
+with os.fdopen(fd, 'w') as f:
+    json.dump(rec, f, indent=2)
+os.replace(tmp, out)
+" 2>/dev/null || true
+
+    # ---- Short strings for the desktop notification --------------------------
+    # Desktop body stays terse; full detail lives in COMPLETION.txt.
+    _LOKI_SUMMARY_TITLE="$notify_title"
+    _LOKI_SUMMARY_BODY="${outcome_label} on ${branch}: ${files_changed} files changed"
+    if [ -n "$pr_url" ]; then
+        _LOKI_SUMMARY_BODY="${_LOKI_SUMMARY_BODY}. PR: ${pr_url}"
+    fi
+    export _LOKI_SUMMARY_TITLE _LOKI_SUMMARY_BODY
+    return 0
+}
+
+#===============================================================================
+# emit_completion_summary <outcome> [urgency]
+#
+# The single entry point every terminal state calls. It ALWAYS writes the
+# durable summary files (state, not a notification) and then fires ONE desktop
+# notification gated by the existing LOKI_NOTIFICATIONS flag (send_notification
+# already short-circuits when disabled, so the gate is implicit but explicit
+# here for clarity). Centralizing this keeps the success-only PR side effect
+# (Slice 3) in one place and prevents duplicate notifications.
+#===============================================================================
+emit_completion_summary() {
+    local outcome="${1:-complete}"
+    local urgency="${2:-normal}"
+    build_completion_summary "$outcome"
+    send_notification "${_LOKI_SUMMARY_TITLE:-Run finished}" "${_LOKI_SUMMARY_BODY:-}" "$urgency"
+    return 0
+}
+
+#===============================================================================
+# on_run_complete  (Slice 3: opt-in local git output on success)
+#
+# Called from every SUCCESS exit BEFORE emit_completion_summary so the PR url it
+# discovers is folded into the summary. Default behavior is a no-op: it only
+# acts when LOKI_DELEGATE_PR=1.
+#
+# LOKI_DELEGATE_PR=1 opens a LOCAL pull request from the user's machine, only if:
+#   - this is a GitHub repo (gh + a github.com remote), AND
+#   - `gh auth status` succeeds, AND
+#   - the current branch is not main/master (never PR a default branch to itself)
+# It mirrors the proven pattern at autonomy/loki:5524-5527: push the branch,
+# then `gh pr create --head <branch>`. NO auto-merge. Every call is best-effort
+# (`|| true`); failures never block completion. This is a single sanctioned
+# local network call, never CI.
+#
+# Reconciliation with the existing GITHUB_PR path (run.sh create_github_pr,
+# invoked after run_autonomous returns when LOKI_GITHUB_PR=true): if GITHUB_PR
+# is already true we DEFER to that path and do nothing here, so a user who set
+# both knobs never gets a double PR.
+#===============================================================================
+on_run_complete() {
+    # Default OFF.
+    if [ "${LOKI_DELEGATE_PR:-0}" != "1" ]; then
+        return 0
+    fi
+    # Defer to the existing dedicated PR path to avoid a double PR.
+    if [ "${GITHUB_PR:-false}" = "true" ]; then
+        return 0
+    fi
+    # Network-call timeout guard: a stalled network / auth prompt would
+    # otherwise hang the completion path indefinitely in --bg. Run each network
+    # call through `timeout 30` when available; fall back to the bare call if
+    # timeout is not installed (a local wrapper keeps this set -u safe on bash
+    # 3.2, where an empty array expansion would error). Keeps every existing
+    # `|| true` non-fatal behavior.
+    _loki_net() {
+        if command -v timeout >/dev/null 2>&1; then
+            timeout 30 "$@"
+        else
+            "$@"
+        fi
+    }
+    # Require gh + auth.
+    if ! command -v gh >/dev/null 2>&1; then
+        return 0
+    fi
+    if ! (cd "${TARGET_DIR:-.}" && _loki_net gh auth status) >/dev/null 2>&1; then
+        return 0
+    fi
+    # Require a GitHub remote (skip silently on non-GitHub repos).
+    local remote_url
+    remote_url="$( (cd "${TARGET_DIR:-.}" && git config --get remote.origin.url) 2>/dev/null || true )"
+    case "$remote_url" in
+        *github.com*) : ;;
+        *) return 0 ;;
+    esac
+    # Resolve current branch; never PR a default branch to itself.
+    local branch
+    branch="$( (cd "${TARGET_DIR:-.}" && git rev-parse --abbrev-ref HEAD) 2>/dev/null || true )"
+    case "$branch" in
+        ""|main|master|HEAD) return 0 ;;
+    esac
+    log_info "LOKI_DELEGATE_PR=1: opening a local pull request for branch '$branch'..."
+    # Push, then create. Non-interactive (no tty in --bg). Best-effort, each
+    # network call bounded by the timeout guard above.
+    (cd "${TARGET_DIR:-.}" && _loki_net git push -u origin "$branch") >/dev/null 2>&1 || true
+    local pr_title
+    pr_title="Loki Mode: ${branch}"
+    local pr_url=""
+    pr_url="$( (cd "${TARGET_DIR:-.}" && _loki_net gh pr create --title "$pr_title" --body "Opened by Loki Mode (delegate mode). Review locally before merge." --head "$branch") 2>/dev/null || true )"
+    if [ -n "$pr_url" ]; then
+        # Export so build_completion_summary folds the url into the summary.
+        _LOKI_DELEGATE_PR_URL="$pr_url"
+        export _LOKI_DELEGATE_PR_URL
+        log_info "Pull request opened: $pr_url"
+    else
+        log_warn "LOKI_DELEGATE_PR=1: gh pr create did not return a URL (a PR may already exist for this branch)."
+    fi
+    return 0
+}
+
 #===============================================================================
 # Parallel Workflow Functions (Git Worktrees)
 #===============================================================================
@@ -10068,6 +10336,14 @@ build_prompt() {
     # is the single most leveraged grounding primitive per OpenCode research.
     local lsp_grounding_instruction="LSP_GROUNDING: When the loki-mode-lsp-proxy MCP server is available, prefer LSP tools for symbol verification BEFORE writing code that references those symbols. Workflow: (1) Need to call \`foo.bar()\` you have not already read? -> mcp__loki-mode-lsp-proxy__lsp_check_exists with symbol='bar' (sub-200ms when cached). If exists:false, do NOT write the call -- use mcp__loki-mode-lsp-proxy__lsp_workspace_symbols with the concept name to find the real symbol, or use Read to see the actual API. (2) Just edited a file? -> mcp__loki-mode-lsp-proxy__lsp_get_diagnostics on that file to see new errors before the next iteration. (3) Need to jump to a definition by name (no file:line known)? -> mcp__loki-mode-lsp-proxy__lsp_find_definition_by_name. Skip these tools silently when the server is not available -- check the tool list, do not retry on errors. Goal: eliminate hallucinated API calls before they ship."
 
+    # AGENTS.md instruction (agents.md standard: plain Markdown at repo root,
+    # nearest-file-wins, read natively by Claude Code/Codex/etc.). Loki prefers
+    # AGENTS.md and falls back to CLAUDE.md only when AGENTS.md is absent; the
+    # two are never merged. This string MUST stay byte-identical to
+    # AGENTS_MD_INSTRUCTION in loki-ts/src/runner/build_prompt.ts (parity-locked,
+    # same precedent as AUTONOMY_OVERRIDE_TEXT in providers/claude_flags.ts).
+    local agents_md_instruction="Project conventions: read AGENTS.md in the repository root for build, test, and style conventions. If AGENTS.md is absent, read CLAUDE.md instead. The nearest such file to the code you are editing takes precedence."
+
     # Load existing context if resuming
     local context_injection=""
     if [ $retry -gt 0 ]; then
@@ -10397,15 +10673,15 @@ except Exception:
         else
             if [ $retry -eq 0 ]; then
                 if [ -n "$prd" ]; then
-                    echo "Loki Mode with PRD at $prd. $update_instruction $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
+                    echo "Loki Mode with PRD at $prd. $update_instruction $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $agents_md_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
                 else
-                    echo "Loki Mode. $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $analysis_instruction $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
+                    echo "Loki Mode. $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $analysis_instruction $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $agents_md_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
                 fi
             else
                 if [ -n "$prd" ]; then
-                    echo "Loki Mode - Resume iteration #$iteration (retry #$retry). PRD: $prd. $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
+                    echo "Loki Mode - Resume iteration #$iteration (retry #$retry). PRD: $prd. $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $agents_md_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
                 else
-                    echo "Loki Mode - Resume iteration #$iteration (retry #$retry). $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section Use .loki/generated-prd.md if exists. $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
+                    echo "Loki Mode - Resume iteration #$iteration (retry #$retry). $human_directive $gate_failure_context $queue_tasks $bmad_context $openspec_context $mirofish_context $magic_context $checklist_status $app_runner_info $playwright_info $memory_context_section Use .loki/generated-prd.md if exists. $rarv_instruction $memory_instruction $usage_doc_instruction $lsp_grounding_instruction $agents_md_instruction $completion_instruction $sdlc_instruction $autonomous_suffix"
                 fi
             fi
         fi
@@ -10448,6 +10724,7 @@ except Exception:
         fi
         printf '%s\n' "$usage_doc_instruction"
         printf '%s\n' "$lsp_grounding_instruction"
+        printf '%s\n' "$agents_md_instruction"
         printf '</loki_system>\n'
         printf '[CACHE_BREAKPOINT]\n'
 
@@ -10480,6 +10757,7 @@ except Exception:
     printf '%s\n' "$memory_instruction"
     printf '%s\n' "$usage_doc_instruction"
     printf '%s\n' "$lsp_grounding_instruction"
+    printf '%s\n' "$agents_md_instruction"
     # For codebase-analysis mode (no PRD), analysis_instruction is part of the
     # static prefix so it remains cache-stable.
     if [ -z "$prd" ]; then
@@ -11463,6 +11741,28 @@ run_autonomous() {
     # file, which the gate treats as inconclusive (pass-through).
     local _start_sha_file=".loki/state/start-sha"
     mkdir -p ".loki/state"
+
+    # Delegate-then-notify (Slice 3): LOKI_DELEGATE_BRANCH=1 (default OFF)
+    # isolates this run's work on a fresh branch loki/delegate-<timestamp> so the
+    # user's working branch stays clean. Created IN-PROCESS (plain git, no
+    # detached child) only on a genuine fresh run (ITERATION_COUNT==0) so a
+    # resume does not spawn a new branch each time. Best-effort: a non-git repo,
+    # dirty tree that blocks checkout, or any git failure leaves the run on the
+    # current branch (default behavior preserved). Done BEFORE the start-sha
+    # capture so the diff window baselines to the new branch HEAD.
+    if [ "${LOKI_DELEGATE_BRANCH:-0}" = "1" ] && [ "${ITERATION_COUNT:-0}" -eq 0 ]; then
+        if (cd "${TARGET_DIR:-.}" && git rev-parse --git-dir) >/dev/null 2>&1; then
+            local _delegate_branch="loki/delegate-$(date +%Y%m%d-%H%M%S)"
+            if (cd "${TARGET_DIR:-.}" && git checkout -b "$_delegate_branch") >/dev/null 2>&1; then
+                _LOKI_DELEGATE_BRANCH_NAME="$_delegate_branch"
+                export _LOKI_DELEGATE_BRANCH_NAME
+                log_info "LOKI_DELEGATE_BRANCH=1: isolated work on new branch '$_delegate_branch'"
+            else
+                log_warn "LOKI_DELEGATE_BRANCH=1: could not create branch (dirty tree or git error); continuing on current branch."
+            fi
+        fi
+    fi
+
     if [ "${ITERATION_COUNT:-0}" -eq 0 ] || [ ! -s "$_start_sha_file" ]; then
         (cd "${TARGET_DIR:-.}" && git rev-parse HEAD 2>/dev/null) > "$_start_sha_file" 2>/dev/null || true
     fi
@@ -11546,6 +11846,13 @@ except Exception as exc:
     # Check max iterations before starting
     if check_max_iterations; then
         log_error "Max iterations already reached. Reset with: rm .loki/autonomy-state.json"
+        # Delegate-then-notify: terminal state. Mirror the in-loop max-iterations
+        # site so a detached (--bg) run still writes COMPLETION.txt + fires the
+        # ping on this pre-loop exit. _LOKI_RUN_START_SHA is already exported
+        # above (runner init), so the diff window is correct. This return is
+        # mutually exclusive with the in-loop site (it returns before the loop),
+        # so there is no double-emit.
+        emit_completion_summary max_iterations
         return 1
     fi
 
@@ -11573,6 +11880,9 @@ except Exception as exc:
         # Check max iterations
         if check_max_iterations; then
             save_state $retry "max_iterations_reached" 0
+            # Delegate-then-notify: terminal state, write summary + ping so a
+            # detached run tells the user it stopped at the iteration cap.
+            emit_completion_summary max_iterations
             return 0
         fi
 
@@ -12469,7 +12779,11 @@ if __name__ == "__main__":
                 log_info "Council voted to stop (convergence detected + requirements verified)"
                 log_info "Running memory consolidation..."
                 run_memory_consolidation
-                notify_all_complete
+                # Delegate-then-notify: optional local PR on success, then the
+                # durable summary + desktop ping. on_run_complete is idempotent
+                # and only opens a PR when LOKI_DELEGATE_PR=1 (default OFF).
+                on_run_complete
+                emit_completion_summary complete
                 save_state $retry "council_approved" 0
                 rm -f "$iter_output" 2>/dev/null
                 return 0
@@ -12532,7 +12846,10 @@ if __name__ == "__main__":
                 # Run memory consolidation on successful completion
                 log_info "Running memory consolidation..."
                 run_memory_consolidation
-                notify_all_complete
+                # Delegate-then-notify: optional local PR on success, then the
+                # durable summary + desktop ping (see on_run_complete).
+                on_run_complete
+                emit_completion_summary complete
                 save_state $retry "completion_promise_fulfilled" 0
                 rm -f "$iter_output" 2>/dev/null
                 return 0
@@ -12626,6 +12943,9 @@ if __name__ == "__main__":
 
     log_error "Max retries ($MAX_RETRIES) exceeded"
     save_state $retry "failed" 1
+    # Delegate-then-notify: terminal failure. critical urgency so the desktop
+    # ping is louder; the summary file records where the partial work landed.
+    emit_completion_summary failed critical
     return 1
 }
 
@@ -12768,11 +13088,19 @@ check_human_intervention() {
                 log_warn "PAUSE file created by budget limit - NOT auto-clearing in perpetual mode"
                 log_warn "Budget limit reached. Remove .loki/signals/BUDGET_EXCEEDED and .loki/PAUSE to continue."
                 notify_intervention_needed "Budget limit reached - execution paused" 2>/dev/null || true
+                # Genuinely blocking pause: write the durable intervention record
+                # now (state-only; the ping above already fired). This is the
+                # correct site for the durable file because the run actually halts
+                # here until the operator clears the budget signal.
+                build_completion_summary intervention 2>/dev/null || true
                 local pause_result
                 handle_pause
                 pause_result=$?
                 rm -f "$loki_dir/PAUSE"
                 if [ "$pause_result" -eq 1 ]; then
+                    # STOP requested DURING the pause: relabel the durable record
+                    # as stopped (state-only; the user typed STOP and is aware).
+                    build_completion_summary stopped 2>/dev/null || true
                     return 2
                 fi
                 return 1
@@ -12786,12 +13114,17 @@ check_human_intervention() {
         fi
         log_warn "PAUSE file detected - pausing execution"
         notify_intervention_needed "Execution paused via PAUSE file"
+        # Genuinely blocking pause: write the durable intervention record now
+        # (state-only; the ping above already fired).
+        build_completion_summary intervention 2>/dev/null || true
         local pause_result
         handle_pause
         pause_result=$?
         rm -f "$loki_dir/PAUSE"
         if [ "$pause_result" -eq 1 ]; then
-            # STOP was requested during pause
+            # STOP was requested during pause: relabel the durable record as
+            # stopped (state-only; the user typed STOP and is aware).
+            build_completion_summary stopped 2>/dev/null || true
             return 2
         fi
         return 1
@@ -12804,11 +13137,16 @@ check_human_intervention() {
             rm -f "$loki_dir/PAUSE_AT_CHECKPOINT"
             notify_intervention_needed "Execution paused at checkpoint"
             touch "$loki_dir/PAUSE"
+            # Genuinely blocking pause: write the durable intervention record now
+            # (state-only; the ping above already fired).
+            build_completion_summary intervention 2>/dev/null || true
             local pause_result
             handle_pause
             pause_result=$?
             rm -f "$loki_dir/PAUSE"
             if [ "$pause_result" -eq 1 ]; then
+                # STOP requested during pause: relabel as stopped (state-only).
+                build_completion_summary stopped 2>/dev/null || true
                 return 2
             fi
             return 1
@@ -12876,7 +13214,11 @@ check_human_intervention() {
             fi
             log_info "Running memory consolidation..."
             run_memory_consolidation
-            notify_all_complete
+            # Delegate-then-notify: force-review approval is a real completion
+            # (returns 2, which the run loop maps to a clean return 0). Treat it
+            # like the other success exits: optional local PR + summary + ping.
+            on_run_complete
+            emit_completion_summary complete
             save_state ${RETRY_COUNT:-0} "council_force_approved" 0
             return 2  # Stop
         fi
@@ -12887,6 +13229,12 @@ check_human_intervention() {
     if [ -f "$loki_dir/STOP" ]; then
         log_warn "STOP file detected - stopping execution"
         rm -f "$loki_dir/STOP"
+        # Delegate-then-notify: an explicit STOP file is a deliberate stop, but
+        # a detached (--bg) user still benefits from a summary of partial work.
+        # NOTE: the SIGTERM/`loki stop` group-kill path (cleanup handler near the
+        # end of this file) is intentionally NOT notified: that user is at a
+        # terminal issuing the stop and is already aware.
+        emit_completion_summary stopped
         return 2
     fi
 
@@ -13354,6 +13702,9 @@ main() {
         echo -e "  ${DIM}Logs:${NC}       tail -f $log_file"
         echo -e "  ${DIM}Status:${NC}     cat .loki/STATUS.txt"
         echo ""
+        echo -e "${GREEN}You will be notified when done (or if input is needed).${NC}"
+        echo -e "  ${DIM}Summary on completion:${NC} cat .loki/COMPLETION.txt"
+        echo ""
 
         exit 0
     fi

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.20.0"
+__version__ = "7.22.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.20.0
+**Version:** v7.22.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var f8=Object.defineProperty;var u8=($)=>$;function c8($,Q){this[$]=u8.bind(null,Q)}var g=($,Q)=>{for(var Z in Q)f8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:c8.bind(Q,Z)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var X1=import.meta.require;var F$={};g(F$,{lokiDir:()=>P,homeLokiDir:()=>o1,findRepoRootForVersion:()=>d1,REPO_ROOT:()=>f});import{resolve as n,dirname as l1}from"path";import{fileURLToPath as p8}from"url";import{existsSync as L1}from"fs";import{homedir as l8}from"os";function d8(){let $=j$;for(let Q=0;Q<6;Q++){if(L1(n($,"VERSION"))&&L1(n($,"autonomy/run.sh")))return $;let Z=l1($);if(Z===$)break;$=Z}return n(j$,"..","..","..")}function d1($){let Q=$;for(let Z=0;Z<6;Z++){if(L1(n(Q,"VERSION"))&&L1(n(Q,"autonomy/run.sh")))return Q;let z=l1(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o1(){return n(l8(),".loki")}var j$,f;var y=k(()=>{j$=l1(p8(import.meta.url));f=d8()});import{readFileSync as o8}from"fs";import{resolve as n8,dirname as a8}from"path";import{fileURLToPath as s8}from"url";function k1(){if($1!==null)return $1;let $="7.20.0";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=a8(s8(import.meta.url)),Z=d1(Q);$1=o8(n8(Z,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var n1=k(()=>{y()});var E$={};g(E$,{runOrThrow:()=>t8,run:()=>j,commandVersion:()=>i8,commandExists:()=>v,ShellError:()=>a1});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,K;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}K=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[H,X,q]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:H,stderr:X,exitCode:q}}finally{if(z)clearTimeout(z);if(K)clearTimeout(K)}}async function t8($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function v($){let Q=r8($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function r8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function i8($,Q="--version"){if(!await v($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a1;var d=k(()=>{a1=class a1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return e8?"":$}var e8,T,N,_,KZ,A,R,h,J;var c=k(()=>{e8=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),N=a("\x1B[0;32m"),_=a("\x1B[1;33m"),KZ=a("\x1B[0;34m"),A=a("\x1B[0;36m"),R=a("\x1B[1m"),h=a("\x1B[2m"),J=a("\x1B[0m")});import{existsSync as U7}from"fs";async function Q1(){if(B1!==void 0)return B1;let $="/opt/homebrew/bin/python3.12";if(U7($))return B1=$,$;let Q=await v("python3.12");if(Q)return B1=Q,Q;let Z=await v("python3");return B1=Z,Z}async function Z1($,Q={}){let Z=await Q1();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B1;var H1=k(()=>{d()});var d$={};g(d$,{runStatus:()=>N7});import{existsSync as b,readFileSync as q1,readdirSync as v$,statSync as f$}from"fs";import{resolve as D,basename as P7}from"path";import{homedir as L7}from"os";async function j7(){if(await v("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var f8=Object.defineProperty;var u8=($)=>$;function c8($,Q){this[$]=u8.bind(null,Q)}var g=($,Q)=>{for(var Z in Q)f8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:c8.bind(Q,Z)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var X1=import.meta.require;var F$={};g(F$,{lokiDir:()=>P,homeLokiDir:()=>o1,findRepoRootForVersion:()=>d1,REPO_ROOT:()=>f});import{resolve as n,dirname as l1}from"path";import{fileURLToPath as p8}from"url";import{existsSync as L1}from"fs";import{homedir as l8}from"os";function d8(){let $=j$;for(let Q=0;Q<6;Q++){if(L1(n($,"VERSION"))&&L1(n($,"autonomy/run.sh")))return $;let Z=l1($);if(Z===$)break;$=Z}return n(j$,"..","..","..")}function d1($){let Q=$;for(let Z=0;Z<6;Z++){if(L1(n(Q,"VERSION"))&&L1(n(Q,"autonomy/run.sh")))return Q;let z=l1(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o1(){return n(l8(),".loki")}var j$,f;var y=k(()=>{j$=l1(p8(import.meta.url));f=d8()});import{readFileSync as o8}from"fs";import{resolve as n8,dirname as a8}from"path";import{fileURLToPath as s8}from"url";function k1(){if($1!==null)return $1;let $="7.22.0";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=a8(s8(import.meta.url)),Z=d1(Q);$1=o8(n8(Z,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var n1=k(()=>{y()});var E$={};g(E$,{runOrThrow:()=>t8,run:()=>j,commandVersion:()=>i8,commandExists:()=>v,ShellError:()=>a1});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,K;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}K=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[H,X,q]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:H,stderr:X,exitCode:q}}finally{if(z)clearTimeout(z);if(K)clearTimeout(K)}}async function t8($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function v($){let Q=r8($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function r8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function i8($,Q="--version"){if(!await v($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a1;var d=k(()=>{a1=class a1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return e8?"":$}var e8,T,N,_,KZ,A,R,h,J;var c=k(()=>{e8=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),N=a("\x1B[0;32m"),_=a("\x1B[1;33m"),KZ=a("\x1B[0;34m"),A=a("\x1B[0;36m"),R=a("\x1B[1m"),h=a("\x1B[2m"),J=a("\x1B[0m")});import{existsSync as U7}from"fs";async function Q1(){if(B1!==void 0)return B1;let $="/opt/homebrew/bin/python3.12";if(U7($))return B1=$,$;let Q=await v("python3.12");if(Q)return B1=Q,Q;let Z=await v("python3");return B1=Z,Z}async function Z1($,Q={}){let Z=await Q1();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B1;var H1=k(()=>{d()});var d$={};g(d$,{runStatus:()=>N7});import{existsSync as b,readFileSync as q1,readdirSync as v$,statSync as f$}from"fs";import{resolve as D,basename as P7}from"path";import{homedir as L7}from"os";async function j7(){if(await v("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -787,4 +787,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(v8),2}}g$();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var l3=await p3(Bun.argv.slice(2));process.exit(l3);
 
-//# debugId=A7D2C59E16AFDEA864756E2164756E21
+//# debugId=BA6A18624E28A6CC64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.20.0'
+__version__ = '7.22.0'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loki-mode",
-  "version": "7.20.0",
+  "version": "7.22.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",