loki-mode 7.28.0 → 7.28.2

package/README.md

@@ -43,40 +43,50 @@
 
 ## Get Started in 30 Seconds
 
-**Prerequisites**
+```bash
+bun install -g loki-mode                       # install (npm/brew/Docker also work, see below)
+loki init my-app --template simple-todo-app    # scaffold a starter PRD
+cd my-app && loki start prd.md                 # autonomous build from the spec
+```
 
-Loki drives a coding agent CLI and orchestrates real builds, so it needs a few tools on your PATH. `loki doctor` checks all of these and tells you what is missing.
+That is the happy path. One thing to know first: Loki drives a separate coding-agent CLI (Claude Code is the recommended one) and needs it plus a couple of common tools on your PATH. Run `loki doctor` any time and it tells you exactly what is present and what is missing, with a copy-pasteable install command for each gap.
+
+```bash
+loki doctor                                    # check your setup before the first build
+```
+
+<details>
+<summary><strong>What Loki needs (and what loki doctor checks)</strong></summary>
 
 Required:
 
-- An agent provider CLI: [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`, Tier 1, recommended and E2E-verified - the provider Loki Mode is built for). Codex, Cline, and Aider are supported as experimental providers (wiring in place; not yet E2E-verified by us).
+- An agent provider CLI: [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`, Tier 1, recommended and E2E-verified - the provider Loki Mode is built for). Codex, Cline, and Aider are supported as experimental providers (wiring in place; not yet E2E-verified by us). Loki cannot run a build without one of these installed and authenticated.
 - Python 3.10+ (`python3`) for the dashboard, memory system, and orchestration helpers.
 - Git 2.x (`git`) for checkpoints and worktrees.
 - `curl` for installation and network calls.
 
 Recommended:
 
-- Bun 1.3.0+ (`bun`) for the fast runtime (the recommended install path below installs it).
+- Bun 1.3.0+ (`bun`) for the fast runtime (the recommended install path above installs it).
 - Node.js 18+ and npm if you install via npm instead of Bun.
 - `jq` for nicer JSON handling in shell flows.
 - Docker if you want Loki's App Runner to run containerized projects, or to run Loki itself from the published image.
 
-You also need credentials for whichever provider you use (for Claude Code, an authenticated `claude` login or `ANTHROPIC_API_KEY`).
+You also need credentials for whichever provider you use (for Claude Code, an authenticated `claude` login or `ANTHROPIC_API_KEY`). `loki doctor` flags a missing or unauthenticated provider as the first thing to fix.
+
+</details>
+
+If you do not have Bun yet:
+
+```bash
+curl -fsSL https://bun.sh/install | bash       # macOS / Linux (or: brew install oven-sh/bun/bun)
+```
 
-**Recommended (Bun, fastest):**
+Other spec sources work the same way:
 
 ```bash
-# Install Bun once (skip if you already have it)
-curl -fsSL https://bun.sh/install | bash      # macOS / Linux
-# or: brew install oven-sh/bun/bun
-
-bun install -g loki-mode
-loki doctor                                   # verify environment
-loki init my-app --template simple-todo-app
-cd my-app
-loki start prd.md                             # autonomous build from a Markdown PRD
-loki start owner/repo#123                     # ...or a GitHub issue
-loki start ./openapi.yaml                     # ...or an OpenAPI/YAML spec
+loki start owner/repo#123                       # a GitHub issue
+loki start ./openapi.yaml                        # an OpenAPI/YAML spec
 ```
 
 Or skip scaffolding and go straight to a quick task:
@@ -91,7 +101,7 @@ loki quick "build a landing page with a signup form"
 |--------|---------|-------|
 | **Bun (recommended)** | `bun install -g loki-mode` | Fastest startup for CLI commands. |
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` | Auto-installs Bun as a dep |
-| **Docker** | `docker pull asklokesh/loki-mode:7.28.0 && docker run --rm asklokesh/loki-mode:7.28.0 start prd.md` | Bun pre-installed in image |
+| **Docker** | `docker pull asklokesh/loki-mode:7.28.2 && docker run --rm asklokesh/loki-mode:7.28.2 start prd.md` | Bun pre-installed in image |
 | **npm (compat)** | `npm install -g loki-mode` | Works without Bun (bash fallback). Migrate any time with `loki self-update --to bun`. |
 
 **Upgrading:**
@@ -151,7 +161,7 @@ The next major release sunsets the Bash runtime entirely. There is no firm calen
 | Method | Command |
 |--------|---------|
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` |
-| **Docker** | `docker pull asklokesh/loki-mode:7.28.0` |
+| **Docker** | `docker pull asklokesh/loki-mode:7.28.2` |
 | **Inside Claude Code** | `claude --dangerously-skip-permissions` then type "Loki Mode" |
 | **Git clone** | `git clone https://github.com/asklokesh/loki-mode.git` |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.28.0
+# Loki Mode v7.28.2
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -392,4 +392,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.28.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.28.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.28.0
+7.28.2

package/autonomy/grill.sh

@@ -147,6 +147,24 @@ grill_check_provider() {
     return 0
 }
 
+# Run a command under a timeout when one is available. Mirrors the
+# invoke_with_timeout fallback chain in run.sh: GNU timeout, then gtimeout
+# (homebrew coreutils on macOS), then bare execution. Stock macOS ships
+# NEITHER, and the prior hard dependency made grill fail there with a
+# misleading "provider returned no output" (the command-not-found was
+# swallowed by 2>/dev/null). Caught by the grill success-path CI test on
+# macos-latest after shipping nowhere.
+_grill_with_timeout() {
+    local secs="$1"; shift
+    if command -v timeout >/dev/null 2>&1; then
+        timeout "$secs" "$@"
+    elif command -v gtimeout >/dev/null 2>&1; then
+        gtimeout "$secs" "$@"
+    else
+        "$@"
+    fi
+}
+
 grill_invoke_provider() {
     local prompt="$1"
     local provider="${LOKI_PROVIDER:-claude}"
@@ -161,7 +179,7 @@ grill_invoke_provider() {
             # Single-shot, non-interactive. Same pattern as the in-loop
             # adversarial reviewer (run.sh:7807) and USAGE regen (run.sh:9832).
             out="$(printf '%s' "$prompt" \
-                | timeout "${LOKI_GRILL_TIMEOUT:-180}" claude --dangerously-skip-permissions --model "${LOKI_GRILL_MODEL:-sonnet}" -p - 2>/dev/null)"
+                | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" claude --dangerously-skip-permissions --model "${LOKI_GRILL_MODEL:-sonnet}" -p - 2>/dev/null)"
             if [ -z "$out" ]; then
                 _grill_err "provider returned no output (timeout or invocation error)"
                 return $GRILL_EXIT_ERROR
@@ -175,7 +193,7 @@ grill_invoke_provider() {
                 return $GRILL_EXIT_ERROR
             fi
             local out
-            out="$(printf '%s' "$prompt" | timeout "${LOKI_GRILL_TIMEOUT:-180}" codex exec --full-auto - 2>/dev/null)"
+            out="$(printf '%s' "$prompt" | _grill_with_timeout "${LOKI_GRILL_TIMEOUT:-180}" codex exec --full-auto - 2>/dev/null)"
             if [ -z "$out" ]; then
                 _grill_err "provider returned no output"
                 return $GRILL_EXIT_ERROR

package/autonomy/loki

@@ -510,7 +510,7 @@ show_help() {
     echo "Usage: loki <command> [options]"
     echo ""
     echo "New here? Try one of these first:"
-    echo "  loki doctor               Check your setup is ready (instant)"
+    echo "  loki doctor               Check your setup is ready (a few seconds)"
     echo "  loki quick \"add a health endpoint\"   One small task, start to finish"
     echo "  loki demo                 Build a sample todo app end to end (real run)"
     echo "  loki start ./prd.md       Build from a spec (PRD file, GitHub issue, or no arg)"
@@ -675,6 +675,27 @@ show_help() {
     echo "  See: $RUN_SH (header comments) for full list."
 }
 
+# Tight newcomer landing for the bare `loki` invocation (no args).
+# v7.28.x UX: the full 70-command table lives in `loki help`; a no-args run
+# now shows only a calm ~12-line orientation so the "what do I do first"
+# block is never buried under the command wall. `loki help`/`--help` are
+# unchanged (still call show_help).
+show_landing() {
+    local version
+    version=$(get_version)
+    echo -e "${BOLD}Loki Mode v$version${NC} - the spec-driven builder that verifies its own work."
+    echo ""
+    echo -e "First time here? ${CYAN}loki doctor${NC} checks your setup (an AI provider CLI is required)."
+    echo ""
+    echo "Get started:"
+    echo -e "  ${CYAN}loki start ./prd.md${NC}   Build from a spec (PRD file, GitHub issue, or no arg)"
+    echo -e "  ${CYAN}loki demo${NC}             Build a sample todo app end to end (real run)"
+    echo -e "  ${CYAN}loki dashboard start${NC}  Start the live run monitor (then: loki dashboard open)"
+    echo ""
+    echo -e "Need help? ${CYAN}loki help${NC} lists every command."
+    echo "Tip: preview cost and scope before building: loki plan <your-prd.md>"
+}
+
 # Detect argument type for unified `loki start` (v6.84.0)
 # Returns one of: prd | issue | empty | unknown
 # Logic:
@@ -3369,7 +3390,7 @@ cmd_provider_set() {
     if [ -z "$new_provider" ]; then
         echo -e "${RED}Error: Provider name required${NC}"
         echo "Usage: loki provider set <claude|codex|cline|aider>"
-        exit 1
+        exit 2
     fi
 
     # Validate provider
@@ -3923,12 +3944,16 @@ cmd_dashboard_start() {
 
     if kill -0 "$new_pid" 2>/dev/null; then
         local url="${url_scheme}://${host}:${port}"
-        echo -e "${GREEN}Dashboard server started${NC}"
+        echo -e "${GREEN}Dashboard (live run monitor) started${NC}"
         echo ""
         echo "  PID:  $new_pid"
         echo "  URL:  $url"
         echo "  Logs: $log_file"
         echo ""
+        # v7.28.x UX #5: distinguish the two browser UIs up front so a newcomer
+        # who wants to submit a spec does not land on the ops monitor by mistake.
+        echo -e "${DIM}Looking for the project web UI to submit a spec? loki web (:${PURPLE_LAB_DEFAULT_PORT:-57375})${NC}"
+        echo ""
         echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
         echo -e "Check status:    ${CYAN}loki dashboard status${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
@@ -4541,12 +4566,15 @@ cmd_web_start() {
     local url="http://${PURPLE_LAB_DEFAULT_HOST}:${port}/lab/"
 
     if [ "$server_ready" = true ]; then
-        echo -e "${GREEN}Purple Lab running at: $url${NC} (PID: $pid)"
+        echo -e "${GREEN}Purple Lab (project web UI) running at: $url${NC} (PID: $pid)"
     else
-        echo -e "${YELLOW}Purple Lab starting at: $url${NC} (PID: $pid)"
+        echo -e "${YELLOW}Purple Lab (project web UI) starting at: $url${NC} (PID: $pid)"
         echo "Server may still be loading. Refresh the browser if it does not load immediately."
     fi
     echo -e "Logs: $log_file"
+    # v7.28.x UX #5: distinguish the two browser UIs so the ops monitor and the
+    # spec-input web UI are never confused for each other.
+    echo -e "${DIM}Looking for the live run monitor? loki dashboard (:${DASHBOARD_DEFAULT_PORT:-57374})${NC}"
     echo -e "Stop with: ${CYAN}loki web stop${NC}"
 
     # Open browser only after server is confirmed ready
@@ -5133,7 +5161,7 @@ cmd_issue_parse() {
     if [[ -z "$issue_ref" ]]; then
         echo -e "${RED}Error: Issue reference required${NC}"
         echo "Usage: loki issue parse <issue-ref>"
-        exit 1
+        exit 2
     fi
 
     # Find and run issue-parser.sh
@@ -5177,7 +5205,7 @@ cmd_issue_view() {
     if [[ -z "$issue_ref" ]]; then
         echo -e "${RED}Error: Issue reference required${NC}"
         echo "Usage: loki issue view <issue-ref>"
-        exit 1
+        exit 2
     fi
 
     # Find and run issue-parser.sh
@@ -5515,7 +5543,7 @@ cmd_run() {
         echo "  loki run owner/repo#789         # GitHub with specific repo"
         echo ""
         echo "Run 'loki run --help' for full usage."
-        exit 1
+        exit 2
     fi
 
     # Source issue provider abstraction
@@ -5994,7 +6022,7 @@ cmd_issue() {
         echo -e "${RED}Error: No issue number specified${NC}"
         echo "Usage: loki issue <number> or loki issue --number <number>"
         echo "Run 'loki issue --help' for full usage."
-        exit 1
+        exit 2
     fi
 
     # Auto-detect repo if not specified
@@ -6912,7 +6940,7 @@ cmd_config_set() {
     if [[ -z "$key" || -z "$value" ]]; then
         echo -e "${RED}Usage: loki config set [--global] <key> <value>${NC}"
         echo "Run 'loki config' for list of settable keys."
-        return 1
+        return 2
     fi
 
     # Determine config directory: --global writes to ~/.config/loki-mode/
@@ -7059,7 +7087,7 @@ cmd_config_get() {
 
     if [[ -z "$key" ]]; then
         echo -e "${RED}Usage: loki config get <key>${NC}"
-        return 1
+        return 2
     fi
 
     local config_store="$LOKI_DIR/config/settings.json"
@@ -8781,7 +8809,7 @@ cmd_notify_send() {
     if [ -z "$message" ]; then
         echo -e "${RED}Error: Message required${NC}"
         echo "Usage: loki notify $channel <message>"
-        exit 1
+        exit 2
     fi
 
     case "$channel" in
@@ -9349,7 +9377,7 @@ cmd_quick() {
         echo "  loki quick \"fix the login bug in auth.js\""
         echo "  loki quick \"add input validation to the signup form\""
         echo "  loki quick \"write unit tests for the API endpoints\""
-        exit 1
+        exit 2
     fi
 
     local task_desc="$*"
@@ -10692,7 +10720,7 @@ cmd_migrate_start() {
         echo "Specify the migration target (e.g. --target typescript, --target react, --target microservices)"
         echo ""
         echo "Run 'loki migrate --help' for usage."
-        return 1
+        return 2
     fi
 
     # Validate compliance preset
@@ -11662,7 +11690,7 @@ for f in data.get('frictions', []):
     if [ -z "$codebase_path" ]; then
         echo -e "${RED}Error: Codebase path is required${NC}"
         echo "Usage: loki heal <path-to-codebase> [options]"
-        return 1
+        return 2
     fi
 
     if [[ ! -d "$codebase_path" ]]; then
@@ -12030,7 +12058,7 @@ cmd_migrate() {
         echo "Usage: loki migrate <path-to-codebase> --target <target>"
         echo ""
         echo "Run 'loki migrate --help' for usage."
-        return 1
+        return 2
     fi
 
     cmd_migrate_start "$codebase_path" "$target" "$plan_only" "$phase" "$parallel" "$compliance" "$dry_run" "$do_resume" "$multi_repo" "$export_report" "$no_dashboard" "$no_docs"
@@ -13333,7 +13361,7 @@ cmd_plan() {
     if [ -z "$prd_file" ]; then
         echo -e "${RED}Usage: loki plan <PRD file>${NC}"
         echo "Run 'loki plan --help' for usage."
-        return 1
+        return 2
     fi
 
     if [ ! -f "$prd_file" ]; then
@@ -13388,7 +13416,9 @@ main() {
     fi
 
     if [ $# -eq 0 ]; then
-        show_help
+        # v7.28.x UX: bare `loki` shows a tight newcomer landing, not the full
+        # command wall. `loki help`/`--help` still print show_help unchanged.
+        show_landing
         exit 0
     fi
 
@@ -17722,7 +17752,7 @@ cmd_enterprise() {
                     if [ -z "$name" ]; then
                         echo -e "${RED}Error: Token name required${NC}"
                         echo "Usage: loki enterprise token generate <name> [--scopes '*'] [--expires 30]"
-                        exit 1
+                        exit 2
                     fi
 
                     # Validate name is not a flag
@@ -17890,7 +17920,7 @@ else:
 
                     if [ -z "$identifier" ]; then
                         echo -e "${RED}Error: Token ID or name required${NC}"
-                        exit 1
+                        exit 2
                     fi
 
                     python3 -c "
@@ -17929,7 +17959,7 @@ else:
 
                     if [ -z "$identifier" ]; then
                         echo -e "${RED}Error: Token ID or name required${NC}"
-                        exit 1
+                        exit 2
                     fi
 
                     python3 -c "

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.28.0"
+__version__ = "7.28.2"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.28.0
+**Version:** v7.28.2
 
 ---
 

package/docs/alternative-installations.md

@@ -1,6 +1,6 @@
 # Alternative Installation Methods
 
-The recommended installation is via npm or Homebrew (see [README](../README.md#installation)). These alternatives serve specific use cases.
+The recommended installation is via npm or Homebrew (see [README](../README.md#get-started-in-30-seconds)). These alternatives serve specific use cases.
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var f8=Object.defineProperty;var u8=($)=>$;function c8($,Q){this[$]=u8.bind(null,Q)}var g=($,Q)=>{for(var Z in Q)f8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:c8.bind(Q,Z)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var X1=import.meta.require;var F$={};g(F$,{lokiDir:()=>P,homeLokiDir:()=>o1,findRepoRootForVersion:()=>d1,REPO_ROOT:()=>f});import{resolve as n,dirname as l1}from"path";import{fileURLToPath as p8}from"url";import{existsSync as L1}from"fs";import{homedir as l8}from"os";function d8(){let $=j$;for(let Q=0;Q<6;Q++){if(L1(n($,"VERSION"))&&L1(n($,"autonomy/run.sh")))return $;let Z=l1($);if(Z===$)break;$=Z}return n(j$,"..","..","..")}function d1($){let Q=$;for(let Z=0;Z<6;Z++){if(L1(n(Q,"VERSION"))&&L1(n(Q,"autonomy/run.sh")))return Q;let z=l1(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o1(){return n(l8(),".loki")}var j$,f;var y=k(()=>{j$=l1(p8(import.meta.url));f=d8()});import{readFileSync as o8}from"fs";import{resolve as n8,dirname as a8}from"path";import{fileURLToPath as s8}from"url";function k1(){if($1!==null)return $1;let $="7.28.0";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=a8(s8(import.meta.url)),Z=d1(Q);$1=o8(n8(Z,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var n1=k(()=>{y()});var E$={};g(E$,{runOrThrow:()=>t8,run:()=>j,commandVersion:()=>i8,commandExists:()=>v,ShellError:()=>a1});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,K;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}K=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[H,X,q]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:H,stderr:X,exitCode:q}}finally{if(z)clearTimeout(z);if(K)clearTimeout(K)}}async function t8($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function v($){let Q=r8($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function r8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function i8($,Q="--version"){if(!await v($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a1;var d=k(()=>{a1=class a1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return e8?"":$}var e8,T,N,_,KZ,A,R,h,J;var c=k(()=>{e8=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),N=a("\x1B[0;32m"),_=a("\x1B[1;33m"),KZ=a("\x1B[0;34m"),A=a("\x1B[0;36m"),R=a("\x1B[1m"),h=a("\x1B[2m"),J=a("\x1B[0m")});import{existsSync as U7}from"fs";async function Q1(){if(B1!==void 0)return B1;let $="/opt/homebrew/bin/python3.12";if(U7($))return B1=$,$;let Q=await v("python3.12");if(Q)return B1=Q,Q;let Z=await v("python3");return B1=Z,Z}async function Z1($,Q={}){let Z=await Q1();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B1;var H1=k(()=>{d()});var d$={};g(d$,{runStatus:()=>N7});import{existsSync as b,readFileSync as q1,readdirSync as v$,statSync as f$}from"fs";import{resolve as D,basename as P7}from"path";import{homedir as L7}from"os";async function j7(){if(await v("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var f8=Object.defineProperty;var u8=($)=>$;function c8($,Q){this[$]=u8.bind(null,Q)}var g=($,Q)=>{for(var Z in Q)f8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:c8.bind(Q,Z)})};var k=($,Q)=>()=>($&&(Q=$($=0)),Q);var X1=import.meta.require;var F$={};g(F$,{lokiDir:()=>P,homeLokiDir:()=>o1,findRepoRootForVersion:()=>d1,REPO_ROOT:()=>f});import{resolve as n,dirname as l1}from"path";import{fileURLToPath as p8}from"url";import{existsSync as L1}from"fs";import{homedir as l8}from"os";function d8(){let $=j$;for(let Q=0;Q<6;Q++){if(L1(n($,"VERSION"))&&L1(n($,"autonomy/run.sh")))return $;let Z=l1($);if(Z===$)break;$=Z}return n(j$,"..","..","..")}function d1($){let Q=$;for(let Z=0;Z<6;Z++){if(L1(n(Q,"VERSION"))&&L1(n(Q,"autonomy/run.sh")))return Q;let z=l1(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o1(){return n(l8(),".loki")}var j$,f;var y=k(()=>{j$=l1(p8(import.meta.url));f=d8()});import{readFileSync as o8}from"fs";import{resolve as n8,dirname as a8}from"path";import{fileURLToPath as s8}from"url";function k1(){if($1!==null)return $1;let $="7.28.2";if(typeof $==="string"&&$.length>0)return $1=$,$1;try{let Q=a8(s8(import.meta.url)),Z=d1(Q);$1=o8(n8(Z,"VERSION"),"utf-8").trim()}catch{$1="unknown"}return $1}var $1=null;var n1=k(()=>{y()});var E$={};g(E$,{runOrThrow:()=>t8,run:()=>j,commandVersion:()=>i8,commandExists:()=>v,ShellError:()=>a1});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,K;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}K=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[H,X,q]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:H,stderr:X,exitCode:q}}finally{if(z)clearTimeout(z);if(K)clearTimeout(K)}}async function t8($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function v($){let Q=r8($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function r8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function i8($,Q="--version"){if(!await v($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a1;var d=k(()=>{a1=class a1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return e8?"":$}var e8,T,N,_,KZ,A,R,h,J;var c=k(()=>{e8=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),N=a("\x1B[0;32m"),_=a("\x1B[1;33m"),KZ=a("\x1B[0;34m"),A=a("\x1B[0;36m"),R=a("\x1B[1m"),h=a("\x1B[2m"),J=a("\x1B[0m")});import{existsSync as U7}from"fs";async function Q1(){if(B1!==void 0)return B1;let $="/opt/homebrew/bin/python3.12";if(U7($))return B1=$,$;let Q=await v("python3.12");if(Q)return B1=Q,Q;let Z=await v("python3");return B1=Z,Z}async function Z1($,Q={}){let Z=await Q1();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B1;var H1=k(()=>{d()});var d$={};g(d$,{runStatus:()=>N7});import{existsSync as b,readFileSync as q1,readdirSync as v$,statSync as f$}from"fs";import{resolve as D,basename as P7}from"path";import{homedir as L7}from"os";async function j7(){if(await v("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -787,4 +787,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(v8),2}}g$();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var l3=await p3(Bun.argv.slice(2));process.exit(l3);
 
-//# debugId=E87B6D92D567BF2C64756E2164756E21
+//# debugId=C842AE10479263E664756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.28.0'
+__version__ = '7.28.2'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.28.0",
+  "version": "7.28.2",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/templates/simple-todo-app.md

@@ -1,148 +1,17 @@
-# PRD: Simple Todo App
+# Simple Todo App
 
-## Overview
-A minimal todo application for testing Loki Mode with a simple, well-defined scope. A single-page app called "Todos" with a React frontend, Express API, and SQLite persistence.
+A tiny single-page todo app built with plain HTML, CSS, and vanilla
+JavaScript in one folder. Todos are saved in the browser via localStorage so
+they survive a page refresh. There is no server and no build step: opening
+index.html in a browser runs the whole app.
 
-## Target Users
-- Individual users who want a simple way to track tasks
-- Developers testing Loki Mode's core generation pipeline
+## What it does
 
-## Features
+- Add a todo by typing a title and pressing Enter.
+- List every todo with a small checkbox beside it.
+- Toggle a todo done or not done by clicking its checkbox.
+- Remove a todo with a delete button next to it.
+- Show a friendly message when the list is empty.
 
-### MVP Features
-1. **Add Todo** - Users can add a new todo item with a title
-2. **View Todos** - Display list of all todos with completion status
-3. **Complete Todo** - Mark a todo as done (toggle)
-4. **Delete Todo** - Remove a todo from the list with confirmation
-
-### User Flow
-1. User opens app -> sees todo list (or empty state if none)
-2. Types a title in the input field -> presses Enter or clicks Add
-3. New todo appears at the top of the list, input clears
-4. Clicks checkbox to toggle complete -> visual strikethrough
-5. Clicks delete icon -> confirmation prompt -> todo removed
-6. Refreshes page -> all state persists from database
-
-## Tech Stack
-
-### Frontend
-- React 18 with TypeScript
-- Vite for bundling
-- TailwindCSS for styling
-
-### Backend
-- Node.js 18+
-- Express.js
-- SQLite via better-sqlite3
-- zod for input validation
-
-### Structure
-```
-/
-├── frontend/
-│   ├── src/
-│   │   ├── App.tsx                  # Main app component
-│   │   ├── components/
-│   │   │   ├── TodoList.tsx         # List of todo items
-│   │   │   ├── TodoItem.tsx         # Single todo with checkbox/delete
-│   │   │   ├── AddTodo.tsx          # Input form for new todos
-│   │   │   └── EmptyState.tsx       # Shown when no todos exist
-│   │   ├── hooks/
-│   │   │   └── useTodos.ts         # API fetch/mutate hook
-│   │   ├── types/
-│   │   │   └── index.ts            # Todo type definition
-│   │   └── main.tsx
-│   ├── package.json
-│   └── vite.config.ts
-├── backend/
-│   ├── src/
-│   │   ├── index.ts                # Express server setup
-│   │   ├── routes/
-│   │   │   └── todos.ts            # CRUD route handlers
-│   │   └── db/
-│   │       └── index.ts            # SQLite connection + init
-│   ├── package.json
-│   └── tsconfig.json
-├── tests/
-│   ├── todos.test.ts               # API endpoint tests
-│   └── components/
-│       └── TodoItem.test.tsx        # Component tests
-└── README.md
-```
-
-## Database Schema
-
-```sql
-CREATE TABLE todos (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  title TEXT NOT NULL,
-  completed INTEGER DEFAULT 0,       -- 0 = false, 1 = true
-  created_at DATETIME DEFAULT CURRENT_TIMESTAMP
-);
-```
-
-## API Endpoints
-
-### Todos
-- `GET /api/todos` - List all todos (ordered by created_at DESC)
-- `POST /api/todos` - Create todo (body: `{ title }`, returns created todo)
-- `PATCH /api/todos/:id` - Toggle completion (body: `{ completed }`)
-- `DELETE /api/todos/:id` - Delete todo (returns 204)
-
-### Health
-- `GET /health` - Returns `{ status: "ok" }`
-
-## Acceptance Criteria
-
-### Add Todo
-- [ ] Input field for todo title
-- [ ] Submit on Enter key or button click
-- [ ] New todo appears in list
-- [ ] Input clears after submit
-- [ ] Empty title is rejected (frontend + backend validation)
-
-### View Todos
-- [ ] Shows all todos in a list
-- [ ] Shows completion status (checkbox)
-- [ ] Empty state message when no todos exist
-
-### Complete Todo
-- [ ] Checkbox toggles complete/incomplete
-- [ ] Visual strikethrough for completed items
-- [ ] Persists after page refresh
-
-### Delete Todo
-- [ ] Delete button on each todo
-- [ ] Confirmation before delete
-- [ ] Removes from list and database
-
-## Requirements
-- TypeScript throughout
-- Input validation on both frontend and backend
-- Proper HTTP status codes (201 for create, 204 for delete, 400 for validation errors)
-- Loading states during API calls
-- Responsive design (usable on mobile)
-
-## Testing
-- API tests: All 4 CRUD endpoints with valid and invalid input (Vitest + supertest)
-- Component tests: TodoItem renders correctly, AddTodo form submission works
-- Minimum 6 test cases covering happy path and error cases
-
-## Out of Scope
-- User authentication
-- Due dates
-- Categories/tags
-- Mobile app
-- Cloud deployment
-
-## Success Criteria
-- All 4 CRUD features functional end-to-end
-- All tests pass
-- No console errors
-- Empty state displays correctly
-- Data persists across page refresh
-- Input validation rejects empty titles
-
----
-
-**Purpose:** This PRD is intentionally simple to allow quick testing of Loki Mode's core functionality without waiting for complex builds or deployments. Expect ~15-25 minutes for full execution.
+Keep the whole thing minimal and readable. The goal is a quick end-to-end
+build that finishes fast, not a production system.