loki-mode 7.39.1 → 7.40.0

package/README.md

@@ -105,7 +105,7 @@ loki quick "build a landing page with a signup form"
 |--------|---------|-------|
 | **Bun (recommended)** | `bun install -g loki-mode` | Fastest startup for CLI commands. |
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` | Auto-installs Bun as a dep |
-| **Docker** | `docker pull asklokesh/loki-mode:7.31.0 && docker run --rm asklokesh/loki-mode:7.31.0 start prd.md` | Bun pre-installed in image |
+| **Docker** | `docker pull asklokesh/loki-mode:7.40.0 && docker run --rm asklokesh/loki-mode:7.40.0 start prd.md` | Bun pre-installed in image |
 | **npm (compat)** | `npm install -g loki-mode` | Works without Bun (bash fallback). Migrate any time with `loki self-update --to bun`. |
 
 **Upgrading:**
@@ -165,7 +165,7 @@ The next major release sunsets the Bash runtime entirely. There is no firm calen
 | Method | Command |
 |--------|---------|
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` |
-| **Docker** | `docker pull asklokesh/loki-mode:7.31.0` |
+| **Docker** | `docker pull asklokesh/loki-mode:7.40.0` |
 | **Inside Claude Code** | `claude --dangerously-skip-permissions` then type "Loki Mode" |
 | **Git clone** | `git clone https://github.com/asklokesh/loki-mode.git` |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.39.1
+# Loki Mode v7.40.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -398,4 +398,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.39.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.40.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.39.1
+7.40.0

package/autonomy/run.sh

@@ -10887,6 +10887,20 @@ build_prompt() {
     # the result is diff-friendly for later incremental updates).
     local analysis_instruction="CODEBASE_ANALYSIS_MODE: No PRD provided. Reverse-engineer a precise PRD from the existing code in three passes, cheaply and without blind full scans. PASS 1 (orient): list the top two directory levels; read ONLY high-signal manifests that exist (package.json, requirements.txt, pyproject.toml, Cargo.toml, go.mod, pom.xml, build.gradle, composer.json) to identify language, framework, and scripts; read README and any docs index. PASS 2 (locate): from the manifests and conventional layout, identify the entrypoints, the public API or CLI surface, the test directory and runner, and the config or env contract; read those first; skip generated, vendored, and lockfile content; prefer LSP workspace symbols when the lsp-proxy server is available. PASS 3 (write): write .loki/generated-prd.md with these sections: Overview, Detected Stack, Entrypoints and Components, Existing Behavior and Requirements (reverse-engineered, observable), Test and Build Setup, Gaps and TODOs, Out of Scope. Keep it under 200 lines, plain Markdown, no emojis, no em dashes. Do not invent features not evidenced by the code. THEN execute SDLC phases against that PRD."
 
+    # v7.40.0 (#584): when the autonomous complexity-gated decision in
+    # run_autonomous chose the Claude Code Dynamic Workflow path
+    # (USE_WORKFLOW_ANALYSIS=1), prefix the read-only analysis instruction with
+    # "ultracode: " so the three-pass reverse-engineer-a-PRD flow runs as a
+    # workflow fan-out. The decision (and its one-time stderr disclosure) is made
+    # ONCE in run_autonomous, not here -- this subshell only reads the resolved
+    # global so the prefix is deterministic per iteration. When the global is 0 /
+    # unset (simple/standard + var unset, or non-Claude, or degraded, or escape
+    # hatch =0), the instruction stays byte-identical to before. Parity-locked
+    # with analysisInstruction() in loki-ts/src/runner/build_prompt.ts.
+    if [ "${USE_WORKFLOW_ANALYSIS:-0}" = "1" ]; then
+        analysis_instruction="ultracode: ${analysis_instruction}"
+    fi
+
     # v7.8.1: incremental-update instruction for when a generated PRD already
     # exists and the codebase changed (GENERATED_PRD_ACTION=update). Reconcile,
     # do not regenerate, so the PRD stays continuous and the update is cheap.
@@ -12547,6 +12561,62 @@ except Exception as exc:
         return 1
     fi
 
+    # v7.40.0 (#584): autonomous complexity-gated decision for the no-PRD
+    # codebase-analysis dispatch. detect_complexity() is defined (~1611) but was
+    # never called on the bash route, so DETECTED_COMPLEXITY stayed "" and the
+    # gate was inert here. Call it ONCE per run, before the first build_prompt,
+    # so DETECTED_COMPLEXITY is populated for the gate AND for the existing
+    # complexity consumers (effort-for-tier, telemetry, phase selection) that
+    # previously always fell back to "standard" on bash. detect_complexity()
+    # sets the DETECTED_COMPLEXITY global directly (no echo); call once and let
+    # the cached value carry through every iteration so the static prompt prefix
+    # is stable across the run.
+    if [ -z "${DETECTED_COMPLEXITY:-}" ]; then
+        detect_complexity "$prd_path"
+    fi
+
+    # Decide the workflow-analysis dispatch ONCE here (parent shell), not inside
+    # build_prompt (which runs in a $(...) subshell where a write would not
+    # propagate). The decision is parity-locked with the Bun route
+    # (useClaudeWorkflowsForAnalysis in loki-ts/src/runner/build_prompt.ts) and
+    # evaluated in the SAME order:
+    #   provider != claude          -> three-pass (USE_WORKFLOW_ANALYSIS=0)
+    #   PROVIDER_DEGRADED=true       -> three-pass
+    #   LOKI_USE_CLAUDE_WORKFLOWS=0  -> three-pass (escape hatch)
+    #   LOKI_USE_CLAUDE_WORKFLOWS=1  -> workflow   (force on)
+    #   var UNSET                    -> workflow IFF DETECTED_COMPLEXITY == complex
+    # When the workflow path is chosen AUTONOMOUSLY (var unset + complex), emit a
+    # one-time cost disclosure to stderr (NOT stdout, which is the prompt). The
+    # decision is read by build_prompt to prefix the analysis instruction with
+    # "ultracode: ". This ONLY affects the read-only no-PRD analysis instruction,
+    # so the entire decision is gated on the no-PRD case ([ -z "$prd_path" ]).
+    # When a PRD exists, build_prompt never emits the analysis instruction, so
+    # USE_WORKFLOW_ANALYSIS stays 0 and no disclosure fires (the "no PRD found"
+    # message would be false otherwise). detect_complexity above stays
+    # unconditional because its other consumers run in PRD mode too.
+    USE_WORKFLOW_ANALYSIS=0
+    local _wf_autonomous=0
+    if [ -z "$prd_path" ] && [ "${LOKI_PROVIDER:-claude}" = "claude" ] && [ "${PROVIDER_DEGRADED:-false}" != "true" ]; then
+        if [ "${LOKI_USE_CLAUDE_WORKFLOWS:-}" = "0" ]; then
+            USE_WORKFLOW_ANALYSIS=0
+        elif [ "${LOKI_USE_CLAUDE_WORKFLOWS:-}" = "1" ]; then
+            USE_WORKFLOW_ANALYSIS=1
+        elif [ -z "${LOKI_USE_CLAUDE_WORKFLOWS:-}" ] && [ "${DETECTED_COMPLEXITY:-}" = "complex" ]; then
+            USE_WORKFLOW_ANALYSIS=1
+            _wf_autonomous=1
+        fi
+    fi
+    # One-time autonomous-decision disclosure to stderr. Only fires when this run
+    # took the workflow path on its own (not when forced via =1, not when off).
+    # No fabricated dollar figure (no price API): name the cost CLASS and the
+    # opt-out. Guard so it prints once per run.
+    if [ "$_wf_autonomous" = "1" ] && [ -z "${_LOKI_WORKFLOW_DISCLOSED:-}" ]; then
+        echo "Loki: no PRD found and this repo looks complex (complexity=complex), so the codebase-analysis pass is dispatching a Claude Code Dynamic Workflow (parallel fan-out). Workflows are more thorough but cost meaningfully more than the default three-pass analysis. Set LOKI_USE_CLAUDE_WORKFLOWS=0 to keep the cheaper three-pass pass." >&2
+        _LOKI_WORKFLOW_DISCLOSED=1
+        export _LOKI_WORKFLOW_DISCLOSED
+    fi
+    export USE_WORKFLOW_ANALYSIS
+
     while [ $retry -lt $MAX_RETRIES ]; do
         # Check for human intervention BEFORE incrementing iteration count
         # BUG-ST-010: Moved pause/stop checks before ITERATION_COUNT increment

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.39.1"
+__version__ = "7.40.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.39.1
+**Version:** v7.40.0
 
 ---
 
@@ -40,7 +40,8 @@ setting any flag to `0`.
 
 ## Table of Contents
 
-- [npm (Recommended)](#npm-recommended)
+- [Bun (Recommended)](#bun-recommended)
+- [npm](#npm)
 - [Homebrew](#homebrew)
 - [Quick Start](#quick-start)
 - [Verify Installation](#verify-installation)
@@ -57,17 +58,39 @@ setting any flag to `0`.
 
 ---
 
-## npm (Recommended)
+## Bun (Recommended)
+
+```bash
+bun install -g loki-mode
+```
+
+Installs the `loki` CLI. Bun is the recommended path: the `loki` shim runs the
+faster TypeScript runtime when `bun` is on `PATH`, and the stable bash engine
+(the autonomous loop, quality gates, and completion council) runs underneath on
+every route, so you lose nothing by choosing Bun. Run `loki setup-skill` once
+after install to create the per-provider skill symlinks (Claude Code, Codex CLI).
+
+**Prerequisites:** Bun 1.3+ (`curl -fsSL https://bun.sh/install | bash`, or
+`brew install oven-sh/bun/bun`). No separate Node install is required.
+
+**Update:** `bun update -g loki-mode`
+
+**Uninstall:** `bun remove -g loki-mode`
+
+---
+
+## npm
 
 ```bash
 npm install -g loki-mode
 ```
 
-Installs the `loki` CLI. As of v7.4.12 there is no postinstall step; run
-`loki setup-skill` once after install to create the per-provider skill
-symlinks (Claude Code, Codex CLI). The `loki` shim auto-routes
-read-only commands to the Bun runtime when `bun` is on `PATH` and falls
-back to the bash CLI otherwise.
+A fully supported alternative when you prefer npm or do not have Bun. As of
+v7.4.12 there is no postinstall step; run `loki setup-skill` once after install
+to create the per-provider skill symlinks (Claude Code, Codex CLI). The `loki`
+shim auto-routes read-only commands to the Bun runtime when `bun` is on `PATH`
+and falls back to the bash CLI otherwise (the core autonomous engine is the
+same on both routes).
 
 **Prerequisites:** Node.js 18+. Bun 1.3+ optional but recommended for the
 faster routed commands and forward-compat with v8.0.0.
@@ -117,7 +140,7 @@ and orchestrator components ship via npm, Docker, and Homebrew only.
 pip install loki-mode-sdk
 
 # Install the full CLI (recommended)
-npm install -g loki-mode  # or: brew tap asklokesh/tap && brew install loki-mode
+bun install -g loki-mode  # or: npm install -g loki-mode, or: brew tap asklokesh/tap && brew install loki-mode
 ```
 
 The naming asymmetry (`loki-mode` on npm vs `loki-mode-sdk` on PyPI) is

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.39.1";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
+var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.40.0";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -789,4 +789,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(o6),2}}p1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var ZZ=await QZ(Bun.argv.slice(2));process.exit(ZZ);
 
-//# debugId=A84007347C5EA4D964756E2164756E21
+//# debugId=CE2296A3A5523BAE64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.39.1'
+__version__ = '7.40.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.39.1",
+  "version": "7.40.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.39.1",
+  "version": "7.40.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 11 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",