loki-mode 7.39.0 → 7.40.0

package/README.md

@@ -105,7 +105,7 @@ loki quick "build a landing page with a signup form"
 |--------|---------|-------|
 | **Bun (recommended)** | `bun install -g loki-mode` | Fastest startup for CLI commands. |
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` | Auto-installs Bun as a dep |
-| **Docker** | `docker pull asklokesh/loki-mode:7.31.0 && docker run --rm asklokesh/loki-mode:7.31.0 start prd.md` | Bun pre-installed in image |
+| **Docker** | `docker pull asklokesh/loki-mode:7.40.0 && docker run --rm asklokesh/loki-mode:7.40.0 start prd.md` | Bun pre-installed in image |
 | **npm (compat)** | `npm install -g loki-mode` | Works without Bun (bash fallback). Migrate any time with `loki self-update --to bun`. |
 
 **Upgrading:**
@@ -165,7 +165,7 @@ The next major release sunsets the Bash runtime entirely. There is no firm calen
 | Method | Command |
 |--------|---------|
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` |
-| **Docker** | `docker pull asklokesh/loki-mode:7.31.0` |
+| **Docker** | `docker pull asklokesh/loki-mode:7.40.0` |
 | **Inside Claude Code** | `claude --dangerously-skip-permissions` then type "Loki Mode" |
 | **Git clone** | `git clone https://github.com/asklokesh/loki-mode.git` |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.39.0
+# Loki Mode v7.40.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -398,4 +398,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.39.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.40.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.39.0
+7.40.0

package/autonomy/loki

@@ -13433,7 +13433,12 @@ def _resolve_session_pin(alias):
     elif _pin_tier == 'fast':
         _m = _provider_model_fast()
     elif _pin_tier == 'fable':
-        _m = 'fable'
+        # fable unavailable, collapse to opus. Claude Fable 5 is not available at
+        # the Claude API (advises use Opus 4.8); the runner dispatches opus for a
+        # fable pin (claude.sh resolve_model_for_tier, run.sh dispatch backstop).
+        # Quote opus pricing (\$5/\$25) so the estimator agrees with dispatch and
+        # the dashboard (v7.39.1).
+        _m = 'opus'
     else:  # development (and the '*' fallthrough)
         _m = _provider_model_development()
     # Apply the shared LOKI_MAX_TIER clamp with the REAL tier and resolved model
@@ -13467,6 +13472,16 @@ if _is_override:
 else:
     _dispatched_model = _resolve_session_pin(session_model_env)
 
+# fable unavailable, collapse to opus (final dispatch backstop, mirrors run.sh).
+# The override-path clamp (_loki_clamp_alias) leaves an uncapped fable override as
+# 'fable', but the runner's dispatch backstop collapses tier_param=='fable' to
+# opus before --model. Apply the same collapse here so the OVERRIDE route quotes
+# opus too, agreeing with dispatch and the dashboard. The session-pin route is
+# already collapsed inside _resolve_session_pin; this also covers a fable override
+# file (v7.39.1).
+if _dispatched_model == 'fable':
+    _dispatched_model = 'opus'
+
 # Keep session_model_env (the alias) for token-volume tier mapping and provenance,
 # but record when the cost ceiling actually changed the dispatched model so the
 # provenance line is honest about the clamp.
@@ -13757,12 +13772,16 @@ for i in range(estimated_iterations):
     # IS the dispatched model. In session-pinned mode (the default) the runner
     # resolves the pin through provider config (_dispatched_model): a sonnet pin
     # dispatches opus, so we price Opus, not the tier's static 'Sonnet' label.
-    # The fable-architect iteration 0 genuinely dispatches fable (already cap-
-    # cleared above when it would clamp), so it keeps the advisor tier's Fable.
+    # The fable-architect iteration 0 collapses to opus at dispatch (Fable 5 is
+    # unavailable at the claude API), so it is priced as Opus, not Fable (v7.39.1).
     if legacy_tier_switching:
         model = info['model']
     elif _fable_architect and i == 0:
-        model = info['model']  # advisor tier -> Fable
+        # Architect opt-in iter-0: fable unavailable, the runner dispatches opus
+        # for the architecture pass (LOKI_FABLE_ARCHITECT collapses to opus in
+        # run.sh / claude.sh). Token VOLUME stays the advisor/planning tier
+        # (50k/8k), but the priced model is Opus, not Fable (v7.39.1).
+        model = 'Opus'
     else:
         model = _priced_model_for(_dispatched_model)
     inp = info['input']
@@ -13969,7 +13988,10 @@ else:
     else:
         print(f'  {DIM}(pinned via {_session_model_source}={session_model_env}; set LOKI_LEGACY_TIER_SWITCHING=true to rotate){NC}')
     if _fable_architect:
-        print(f'  {DIM}(+ 1 architecture iteration on Fable via LOKI_FABLE_ARCHITECT=1){NC}')
+        # fable unavailable: the architect opt-in now runs the architecture pass
+        # on opus (Claude Fable 5 is not available at the Claude API). Disclose
+        # Opus so the quote matches dispatch (v7.39.1).
+        print(f'  {DIM}(+ 1 architecture iteration on Opus via LOKI_FABLE_ARCHITECT=1){NC}')
     if fable_n > 0:
         print(f'  {YELLOW}Fable 5 is the top-tier advisory model priced at 2x Opus ({chr(36)}10/{chr(36)}50 per MTok).{NC}')
 

package/autonomy/run.sh

@@ -1822,18 +1822,23 @@ get_provider_tier_param() {
                     if [ -n "${PROVIDER_MODEL_PLANNING:-}" ]; then
                         echo "${PROVIDER_MODEL_PLANNING}"
                     elif [ "${LOKI_FABLE_ARCHITECT:-0}" = "1" ]; then
-                        echo "fable"
+                        # fable unavailable, collapse to opus. Claude Fable 5 is
+                        # not available at the Claude API ("use Opus 4.8"); the
+                        # architect opt-in now runs opus. Matches claude.sh
+                        # resolve_model_for_tier and the estimator/dashboard.
+                        echo "opus"
                     else
                         echo "opus"
                     fi
                     ;;
                 development) echo "${PROVIDER_MODEL_DEVELOPMENT:-opus}" ;;
                 fast) echo "${PROVIDER_MODEL_FAST:-sonnet}" ;;
-                # Honor the fable lever here too: without this arm an
+                # fable unavailable, collapse to opus. Without this arm an
                 # unsourced-claude.sh environment (this static fallback) would
                 # silently downgrade a fable-pinned tier to sonnet via the `*`
-                # default. Matches resolve_model_for_tier's explicit fable) arm.
-                fable) echo "fable" ;;
+                # default. Matches resolve_model_for_tier's explicit fable) arm,
+                # which now resolves to opus (Fable 5 unavailable at the API).
+                fable) echo "opus" ;;
                 *) echo "sonnet" ;;
             esac
             ;;
@@ -10882,6 +10887,20 @@ build_prompt() {
     # the result is diff-friendly for later incremental updates).
     local analysis_instruction="CODEBASE_ANALYSIS_MODE: No PRD provided. Reverse-engineer a precise PRD from the existing code in three passes, cheaply and without blind full scans. PASS 1 (orient): list the top two directory levels; read ONLY high-signal manifests that exist (package.json, requirements.txt, pyproject.toml, Cargo.toml, go.mod, pom.xml, build.gradle, composer.json) to identify language, framework, and scripts; read README and any docs index. PASS 2 (locate): from the manifests and conventional layout, identify the entrypoints, the public API or CLI surface, the test directory and runner, and the config or env contract; read those first; skip generated, vendored, and lockfile content; prefer LSP workspace symbols when the lsp-proxy server is available. PASS 3 (write): write .loki/generated-prd.md with these sections: Overview, Detected Stack, Entrypoints and Components, Existing Behavior and Requirements (reverse-engineered, observable), Test and Build Setup, Gaps and TODOs, Out of Scope. Keep it under 200 lines, plain Markdown, no emojis, no em dashes. Do not invent features not evidenced by the code. THEN execute SDLC phases against that PRD."
 
+    # v7.40.0 (#584): when the autonomous complexity-gated decision in
+    # run_autonomous chose the Claude Code Dynamic Workflow path
+    # (USE_WORKFLOW_ANALYSIS=1), prefix the read-only analysis instruction with
+    # "ultracode: " so the three-pass reverse-engineer-a-PRD flow runs as a
+    # workflow fan-out. The decision (and its one-time stderr disclosure) is made
+    # ONCE in run_autonomous, not here -- this subshell only reads the resolved
+    # global so the prefix is deterministic per iteration. When the global is 0 /
+    # unset (simple/standard + var unset, or non-Claude, or degraded, or escape
+    # hatch =0), the instruction stays byte-identical to before. Parity-locked
+    # with analysisInstruction() in loki-ts/src/runner/build_prompt.ts.
+    if [ "${USE_WORKFLOW_ANALYSIS:-0}" = "1" ]; then
+        analysis_instruction="ultracode: ${analysis_instruction}"
+    fi
+
     # v7.8.1: incremental-update instruction for when a generated PRD already
     # exists and the codebase changed (GENERATED_PRD_ACTION=update). Reconcile,
     # do not regenerate, so the PRD stays continuous and the update is cheap.
@@ -12542,6 +12561,62 @@ except Exception as exc:
         return 1
     fi
 
+    # v7.40.0 (#584): autonomous complexity-gated decision for the no-PRD
+    # codebase-analysis dispatch. detect_complexity() is defined (~1611) but was
+    # never called on the bash route, so DETECTED_COMPLEXITY stayed "" and the
+    # gate was inert here. Call it ONCE per run, before the first build_prompt,
+    # so DETECTED_COMPLEXITY is populated for the gate AND for the existing
+    # complexity consumers (effort-for-tier, telemetry, phase selection) that
+    # previously always fell back to "standard" on bash. detect_complexity()
+    # sets the DETECTED_COMPLEXITY global directly (no echo); call once and let
+    # the cached value carry through every iteration so the static prompt prefix
+    # is stable across the run.
+    if [ -z "${DETECTED_COMPLEXITY:-}" ]; then
+        detect_complexity "$prd_path"
+    fi
+
+    # Decide the workflow-analysis dispatch ONCE here (parent shell), not inside
+    # build_prompt (which runs in a $(...) subshell where a write would not
+    # propagate). The decision is parity-locked with the Bun route
+    # (useClaudeWorkflowsForAnalysis in loki-ts/src/runner/build_prompt.ts) and
+    # evaluated in the SAME order:
+    #   provider != claude          -> three-pass (USE_WORKFLOW_ANALYSIS=0)
+    #   PROVIDER_DEGRADED=true       -> three-pass
+    #   LOKI_USE_CLAUDE_WORKFLOWS=0  -> three-pass (escape hatch)
+    #   LOKI_USE_CLAUDE_WORKFLOWS=1  -> workflow   (force on)
+    #   var UNSET                    -> workflow IFF DETECTED_COMPLEXITY == complex
+    # When the workflow path is chosen AUTONOMOUSLY (var unset + complex), emit a
+    # one-time cost disclosure to stderr (NOT stdout, which is the prompt). The
+    # decision is read by build_prompt to prefix the analysis instruction with
+    # "ultracode: ". This ONLY affects the read-only no-PRD analysis instruction,
+    # so the entire decision is gated on the no-PRD case ([ -z "$prd_path" ]).
+    # When a PRD exists, build_prompt never emits the analysis instruction, so
+    # USE_WORKFLOW_ANALYSIS stays 0 and no disclosure fires (the "no PRD found"
+    # message would be false otherwise). detect_complexity above stays
+    # unconditional because its other consumers run in PRD mode too.
+    USE_WORKFLOW_ANALYSIS=0
+    local _wf_autonomous=0
+    if [ -z "$prd_path" ] && [ "${LOKI_PROVIDER:-claude}" = "claude" ] && [ "${PROVIDER_DEGRADED:-false}" != "true" ]; then
+        if [ "${LOKI_USE_CLAUDE_WORKFLOWS:-}" = "0" ]; then
+            USE_WORKFLOW_ANALYSIS=0
+        elif [ "${LOKI_USE_CLAUDE_WORKFLOWS:-}" = "1" ]; then
+            USE_WORKFLOW_ANALYSIS=1
+        elif [ -z "${LOKI_USE_CLAUDE_WORKFLOWS:-}" ] && [ "${DETECTED_COMPLEXITY:-}" = "complex" ]; then
+            USE_WORKFLOW_ANALYSIS=1
+            _wf_autonomous=1
+        fi
+    fi
+    # One-time autonomous-decision disclosure to stderr. Only fires when this run
+    # took the workflow path on its own (not when forced via =1, not when off).
+    # No fabricated dollar figure (no price API): name the cost CLASS and the
+    # opt-out. Guard so it prints once per run.
+    if [ "$_wf_autonomous" = "1" ] && [ -z "${_LOKI_WORKFLOW_DISCLOSED:-}" ]; then
+        echo "Loki: no PRD found and this repo looks complex (complexity=complex), so the codebase-analysis pass is dispatching a Claude Code Dynamic Workflow (parallel fan-out). Workflows are more thorough but cost meaningfully more than the default three-pass analysis. Set LOKI_USE_CLAUDE_WORKFLOWS=0 to keep the cheaper three-pass pass." >&2
+        _LOKI_WORKFLOW_DISCLOSED=1
+        export _LOKI_WORKFLOW_DISCLOSED
+    fi
+    export USE_WORKFLOW_ANALYSIS
+
     while [ $retry -lt $MAX_RETRIES ]; do
         # Check for human intervention BEFORE incrementing iteration count
         # BUG-ST-010: Moved pause/stop checks before ITERATION_COUNT increment
@@ -12781,6 +12856,17 @@ except Exception as exc:
                 log_warn "Ignoring invalid model override '$_loki_override_file' (allowed: haiku, sonnet, opus, fable); using tier $tier_param"
             fi
         fi
+        # fable unavailable, collapse to opus (final dispatch backstop). Claude
+        # Fable 5 is not available at the Claude API ("use Opus 4.8"). Any path
+        # that left tier_param="fable" (static fallback, override file, architect
+        # opt-in) is collapsed to opus here, after all tier_param mutations and
+        # before the claude argv is built (--model "$tier_param"). Keeps dispatch,
+        # the cost quote, and the dashboard effective-model in agreement. Only for
+        # the claude provider: codex/cline/aider map tier_param to their own
+        # effort/model strings and have no fable equivalent (v7.39.1).
+        if [ "${PROVIDER_NAME:-claude}" = "claude" ] && [ "$tier_param" = "fable" ]; then
+            tier_param="opus"
+        fi
         echo "=== RARV Phase: $rarv_phase, Tier: $CURRENT_TIER ($tier_param) ===" | tee -a "$log_file" "$agent_log"
         log_info "RARV Phase: $rarv_phase -> Tier: $CURRENT_TIER ($tier_param)"
 

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.39.0"
+__version__ = "7.40.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -2406,7 +2406,12 @@ def _resolve_session_pin(alias: str) -> str:
     elif pin_tier == "fast":
         model = _provider_model_fast()
     elif pin_tier == "fable":
-        model = "fable"
+        # fable unavailable, collapse to opus. Claude Fable 5 is not available at
+        # the Claude API ("use Opus 4.8"); the runner dispatches opus for a fable
+        # pin (claude.sh resolve_model_for_tier, run.sh dispatch backstop), and
+        # the estimator quotes opus. The dashboard effective model agrees so the
+        # session-pin parity matrix stays green (v7.39.1).
+        model = "opus"
     else:  # development (and the unknown-alias '*' fallthrough)
         model = _provider_model_development()
     max_tier = (os.environ.get("LOKI_MAX_TIER") or "").strip().lower()
@@ -2483,6 +2488,13 @@ async def get_session_model():
         effective = _clamp_to_max_tier(override)
     else:
         effective = _resolve_session_pin(default)
+    # fable unavailable, collapse to opus (final dispatch backstop, mirrors run.sh
+    # and the estimator). The override-path clamp leaves an uncapped fable override
+    # as "fable", but the runner dispatches opus for it; the session-pin route is
+    # already collapsed inside _resolve_session_pin. Apply the same collapse here so
+    # the reported effective model agrees with dispatch on BOTH routes (v7.39.1).
+    if effective == "fable":
+        effective = "opus"
     return {
         "override": override,
         "default": default,
@@ -2533,7 +2545,16 @@ async def set_session_model(request: SessionModelRequest):
     except OSError as exc:
         raise HTTPException(status_code=500, detail=f"Could not write override: {exc}")
     effective = _clamp_to_max_tier(model)
-    return {"model": model, "effective": effective, "clamped": effective != model}
+    # `clamped` reflects ONLY the LOKI_MAX_TIER cost ceiling, computed before the
+    # fable->opus collapse below (the collapse is model unavailability, not a cost
+    # clamp, so it must not flip `clamped`).
+    clamped = effective != model
+    # fable unavailable, collapse to opus (final dispatch backstop, mirrors run.sh
+    # and the estimator). An uncapped fable override clamps to "fable" above but the
+    # runner dispatches opus for it, so report opus as the effective model (v7.39.1).
+    if effective == "fable":
+        effective = "opus"
+    return {"model": model, "effective": effective, "clamped": clamped}
 
 
 @app.get("/api/running-projects")

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.39.0
+**Version:** v7.40.0
 
 ---
 
@@ -40,7 +40,8 @@ setting any flag to `0`.
 
 ## Table of Contents
 
-- [npm (Recommended)](#npm-recommended)
+- [Bun (Recommended)](#bun-recommended)
+- [npm](#npm)
 - [Homebrew](#homebrew)
 - [Quick Start](#quick-start)
 - [Verify Installation](#verify-installation)
@@ -57,17 +58,39 @@ setting any flag to `0`.
 
 ---
 
-## npm (Recommended)
+## Bun (Recommended)
+
+```bash
+bun install -g loki-mode
+```
+
+Installs the `loki` CLI. Bun is the recommended path: the `loki` shim runs the
+faster TypeScript runtime when `bun` is on `PATH`, and the stable bash engine
+(the autonomous loop, quality gates, and completion council) runs underneath on
+every route, so you lose nothing by choosing Bun. Run `loki setup-skill` once
+after install to create the per-provider skill symlinks (Claude Code, Codex CLI).
+
+**Prerequisites:** Bun 1.3+ (`curl -fsSL https://bun.sh/install | bash`, or
+`brew install oven-sh/bun/bun`). No separate Node install is required.
+
+**Update:** `bun update -g loki-mode`
+
+**Uninstall:** `bun remove -g loki-mode`
+
+---
+
+## npm
 
 ```bash
 npm install -g loki-mode
 ```
 
-Installs the `loki` CLI. As of v7.4.12 there is no postinstall step; run
-`loki setup-skill` once after install to create the per-provider skill
-symlinks (Claude Code, Codex CLI). The `loki` shim auto-routes
-read-only commands to the Bun runtime when `bun` is on `PATH` and falls
-back to the bash CLI otherwise.
+A fully supported alternative when you prefer npm or do not have Bun. As of
+v7.4.12 there is no postinstall step; run `loki setup-skill` once after install
+to create the per-provider skill symlinks (Claude Code, Codex CLI). The `loki`
+shim auto-routes read-only commands to the Bun runtime when `bun` is on `PATH`
+and falls back to the bash CLI otherwise (the core autonomous engine is the
+same on both routes).
 
 **Prerequisites:** Node.js 18+. Bun 1.3+ optional but recommended for the
 faster routed commands and forward-compat with v8.0.0.
@@ -117,7 +140,7 @@ and orchestrator components ship via npm, Docker, and Homebrew only.
 pip install loki-mode-sdk
 
 # Install the full CLI (recommended)
-npm install -g loki-mode  # or: brew tap asklokesh/tap && brew install loki-mode
+bun install -g loki-mode  # or: npm install -g loki-mode, or: brew tap asklokesh/tap && brew install loki-mode
 ```
 
 The naming asymmetry (`loki-mode` on npm vs `loki-mode-sdk` on PyPI) is

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.39.0";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
+var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.40.0";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -789,4 +789,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(o6),2}}p1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var ZZ=await QZ(Bun.argv.slice(2));process.exit(ZZ);
 
-//# debugId=0053955F19A92CF864756E2164756E21
+//# debugId=CE2296A3A5523BAE64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.39.0'
+__version__ = '7.40.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.39.0",
+  "version": "7.40.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.39.0",
+  "version": "7.40.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 11 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/providers/claude.sh

@@ -398,7 +398,12 @@ resolve_model_for_tier() {
         planning)    model="$PROVIDER_MODEL_PLANNING" ;;
         development) model="$PROVIDER_MODEL_DEVELOPMENT" ;;
         fast)        model="$PROVIDER_MODEL_FAST" ;;
-        fable)       model="fable" ;;
+        # fable unavailable, collapse to opus. Claude Fable 5 is not available at
+        # the Claude API ("use Opus 4.8"). The fable tier label and session-pin
+        # parsing (loki_normalize_model_alias still accepts "fable") stay; only
+        # the RESOLVED dispatch model becomes opus, matching the estimator and
+        # dashboard so the session-pin parity matrix agrees (v7.39.1).
+        fable)       model="opus" ;;
         *)           model="$PROVIDER_MODEL_DEVELOPMENT" ;;
     esac