loki-mode 7.41.2 → 7.41.4

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.41.2
+# Loki Mode v7.41.4
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -398,4 +398,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.41.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.41.4 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.41.2
+7.41.4

package/autonomy/app-runner.sh

@@ -200,6 +200,24 @@ _app_runner_reconcile_port() {
 
     [ -n "$real_port" ] || return 0
     if [ "$real_port" != "$_APP_RUNNER_PORT" ]; then
+        # Liveness guard: only overwrite the recorded port when the reconciled
+        # port ACTUALLY serves HTTP. A log line can name a non-serving port (a
+        # metrics endpoint like ":9464" or a DB connection like ":5432") emitted
+        # after the real serving URL; committing that would clobber a correct
+        # recorded port and point the preview at a dead port. We deliberately do
+        # NOT use curl -f: any HTTP response (including 404/401/500) proves a
+        # server is bound and serving on that port (Spring Boot whitelabel 404,
+        # REST-only roots, and auth-gated "/" all return non-2xx but ARE live).
+        # A dead/unbound port produces a connection error, which curl reports as
+        # a non-zero exit even without -f. If curl is unavailable we cannot
+        # verify, so fall back to the prior behavior and commit the parsed port
+        # (no regression on curl-less hosts).
+        if command -v curl >/dev/null 2>&1; then
+            if ! curl -s -o /dev/null -m 2 "http://localhost:${real_port}/" 2>/dev/null; then
+                log_info "App Runner: skipped reconcile to port $real_port (no HTTP response); keeping recorded port $_APP_RUNNER_PORT"
+                return 0
+            fi
+        fi
         log_info "App Runner: reconciled port $_APP_RUNNER_PORT -> $real_port (from app.log listen line)"
         _APP_RUNNER_PORT="$real_port"
         _APP_RUNNER_URL="http://localhost:${real_port}"
@@ -212,6 +230,16 @@ _app_runner_reconcile_port() {
 # shapes in priority order and returns the LAST (most recent) plausible port,
 # tolerating ANSI color codes that dev servers emit. Validates 1-65535. Echoes
 # the port or nothing.
+#
+# Tiers 1 and 2 are restricted to lines that ALSO carry a serving keyword
+# (listen|running|ready|started|serving|server|local) so that non-serving noise
+# such as a DB connection string ("Connecting to database on port 5432") or an
+# outbound URL does not win. Note: a metrics endpoint line like
+# "Prometheus metrics server listening on http://0.0.0.0:9464" DOES carry
+# serving keywords ("server"/"listening") and so can still be returned here; the
+# reconcile caller liveness-verifies the parsed port before committing it, which
+# is the layer that rejects a non-serving metrics/DB port.
+_SERVING_KEYWORDS='listen|running|ready|started|serving|server|local'
 _parse_listen_port() {
     local file="$1"
     [ -f "$file" ] || return 0
@@ -220,16 +248,28 @@ _parse_listen_port() {
     clean=$(sed -E $'s/\x1b\\[[0-9;]*m//g' "$file" 2>/dev/null) || clean=$(cat "$file" 2>/dev/null)
     [ -n "$clean" ] || return 0
 
+    # Restrict candidate lines to those carrying a serving keyword. This drops
+    # DB-connection and outbound-URL noise before any port extraction.
+    local serving
+    serving=$(printf '%s\n' "$clean" | grep -iE "$_SERVING_KEYWORDS")
+
     local candidate=""
     # 1) Explicit URL with a port: http://host:PORT  (most reliable).
-    candidate=$(printf '%s\n' "$clean" \
+    candidate=$(printf '%s\n' "$serving" \
         | grep -oiE 'https?://[a-z0-9.\-]+:[0-9]{1,5}' \
         | grep -oE ':[0-9]{1,5}' | tr -d ':' | tail -1)
-    # 2) A number anchored to the literal word "port": "port 8080", "port=3000",
+    # 2a) Spring Boot form: "Tomcat started on port(s): 8081". The literal
+    #     "(s):" breaks the generic port[ =:]+ scan below, so match it first.
+    if [ -z "$candidate" ]; then
+        candidate=$(printf '%s\n' "$serving" \
+            | grep -ioE 'port\(s\):[ ]*[0-9]{1,5}' \
+            | grep -oE '[0-9]{1,5}' | tail -1)
+    fi
+    # 2b) A number anchored to the literal word "port": "port 8080", "port=3000",
     #    "port: 5000". This runs BEFORE the bare host:port scan so a clock-style
     #    timestamp on the same line (e.g. "12:30:45 ... port 8080") cannot win.
     if [ -z "$candidate" ]; then
-        candidate=$(printf '%s\n' "$clean" \
+        candidate=$(printf '%s\n' "$serving" \
             | grep -ioE 'port[ =:]+[0-9]{1,5}' \
             | grep -oE '[0-9]{1,5}' | tail -1)
     fi
@@ -238,8 +278,7 @@ _parse_listen_port() {
     #    or a dot immediately left of the colon excludes "HH:MM" timestamps,
     #    which have a digit there.
     if [ -z "$candidate" ]; then
-        candidate=$(printf '%s\n' "$clean" \
-            | grep -iE 'listen|running on|ready|started|serving|server' \
+        candidate=$(printf '%s\n' "$serving" \
             | grep -oiE '[a-z.][a-z0-9.\-]*:[0-9]{1,5}' \
             | grep -oE ':[0-9]{1,5}' | tr -d ':' | tail -1)
     fi

package/autonomy/completion-council.sh

@@ -549,6 +549,31 @@ print(str(rc) + ' ' + json.dumps(new_state))
 # Council Voting - 3 independent reviewers check completion
 #===============================================================================
 
+# _council_parse_vote: extract a canonical council verdict from a reviewer's
+# raw output. Returns exactly one of APPROVE | REJECT | CANNOT_VALIDATE | ""
+# (empty when no canonical VOTE line is present).
+#
+# Hardening (v7.41.3):
+#   - Word-bounded verdict: "VOTE: APPROVED" / "VOTE: APPROVE_WITH_CONCERNS"
+#     do NOT match APPROVE (non-canonical tokens are unparseable -> empty ->
+#     caller treats as REJECT). A trailing class [^A-Za-z0-9_] (or end of line)
+#     enforces the boundary; "\b" is a GNU-grep extension that BSD grep on this
+#     machine ignores, so it is deliberately avoided for dual-route parity.
+#   - Markdown / quote tolerance both BEFORE the keyword and AFTER the colon, so
+#     "**VOTE:** APPROVE", "> VOTE: APPROVE", and "VOTE:APPROVE" all match.
+#   - Conservative tie-break: only a clean canonical APPROVE yields APPROVE;
+#     anything ambiguous yields the empty string, which every caller maps to the
+#     conservative outcome (REJECT / re-iterate).
+_council_parse_vote() {
+    local raw="$1"
+    # markdown/whitespace/quote class allowed around the keyword and colon
+    local _pat='[*_> [:space:]]*VOTE[*_ [:space:]]*:[*_> [:space:]]*(APPROVE|REJECT|CANNOT_VALIDATE)([^A-Za-z0-9_]|$)'
+    printf '%s' "$raw" \
+        | grep -oE "$_pat" \
+        | grep -oE "APPROVE|REJECT|CANNOT_VALIDATE" \
+        | head -1
+}
+
 council_vote() {
     local prd_path="${COUNCIL_PRD_PATH:-}"
     local loki_dir="${TARGET_DIR:-.}/.loki"
@@ -596,7 +621,7 @@ council_vote() {
         verdict=$(council_member_review "$member" "$role" "$evidence_file" "$vote_dir")
 
         local vote_result
-        vote_result=$(echo "$verdict" | grep -oE "VOTE:\s*(APPROVE|REJECT|CANNOT_VALIDATE)" | grep -oE "APPROVE|REJECT|CANNOT_VALIDATE" | head -1)
+        vote_result=$(_council_parse_vote "$verdict")
 
         # v6.0.0: Handle CANNOT_VALIDATE - validator lacks enough context to decide
         if [ "$vote_result" = "CANNOT_VALIDATE" ]; then
@@ -691,15 +716,21 @@ print('true' if ratio > budget else 'false')
         local contrarian_verdict
         contrarian_verdict=$(council_devils_advocate "$evidence_file" "$vote_dir")
         local contrarian_vote
-        contrarian_vote=$(echo "$contrarian_verdict" | grep -oE "VOTE:\s*(APPROVE|REJECT|CANNOT_VALIDATE)" | grep -oE "APPROVE|REJECT|CANNOT_VALIDATE" | head -1)
-
-        if [ "$contrarian_vote" = "REJECT" ] || [ "$contrarian_vote" = "CANNOT_VALIDATE" ]; then
-            log_warn "Anti-sycophancy: Devil's advocate REJECTED unanimous approval"
+        contrarian_vote=$(_council_parse_vote "$contrarian_verdict")
+
+        # Conservative tie-break (v7.41.3): ONLY a clean canonical APPROVE
+        # confirms the unanimous approval. Any other outcome -- REJECT,
+        # CANNOT_VALIDATE, or an unparseable/hedged verdict (empty) -- overrides
+        # to one more verification iteration. Previously the else-branch treated
+        # an empty/hedged contrarian verdict as "confirmed approval", letting a
+        # hedged "VOTE: APPROVED" ship; this flip closes that on the veto path.
+        if [ "$contrarian_vote" = "APPROVE" ]; then
+            log_info "Anti-sycophancy: Devil's advocate confirmed approval"
+        else
+            log_warn "Anti-sycophancy: Devil's advocate did not confirm unanimous approval (verdict: ${contrarian_vote:-unparseable})"
             log_warn "Overriding to require one more iteration for verification"
             approve_count=$((approve_count - 1))
             reject_count=$((reject_count + 1))
-        else
-            log_info "Anti-sycophancy: Devil's advocate confirmed approval"
         fi
     fi
 
@@ -860,7 +891,10 @@ if not voters:
     if mdir.exists():
         for mf in sorted(mdir.glob('member-*.txt')):
             content = mf.read_text(errors='replace').strip()
-            vote_match = re.search(r'VOTE\s*:\s*(APPROVE|REJECT|CANNOT_VALIDATE)', content)
+            # v7.41.3: word-bounded + markdown-tolerant. VOTE:APPROVED and
+            # VOTE:APPROVE_WITH_CONCERNS must NOT match APPROVE; bold/quoted
+            # VOTE: APPROVE must match. Unmatched -> default REJECT (conservative).
+            vote_match = re.search(r'[*_> ]*VOTE[*_ ]*:[*_> ]*(APPROVE|REJECT|CANNOT_VALIDATE)(?![A-Za-z0-9_])', content)
             reason_match = re.search(r'REASON\s*:\s*(.+?)(?:\n|\$)', content)
             issues = []
             for im in re.finditer(r'ISSUES\s*:\s*(CRITICAL|HIGH|MEDIUM|LOW)\s*:\s*(.+?)(?:\n|\$)', content):
@@ -1783,27 +1817,33 @@ ISSUES: CRITICAL:description (optional, one per line per issue)"
                 # Set inline (not via a helper) so the carve-out holds even when
                 # this file is sourced standalone and the helpers are out of scope.
                 # Inlined on `claude` only (does not cross the pipe). No-op absent.
-                verdict=$(echo "$prompt" | env CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null | tail -20)
+                # v7.41.3 BUG A: do NOT tail-truncate before parsing. A thorough
+                # reviewer that lists >~18 ISSUES lines after VOTE would push its
+                # own VOTE: line out of a tail-20 window, making the parser find
+                # no VOTE and default a real APPROVE to REJECT. Capture the full
+                # output; the downstream parse already greps VOTE/REASON/ISSUES.
+                # CAVEMAN_DEFAULT_MODE=off suppression is preserved (see above).
+                verdict=$(echo "$prompt" | env CAVEMAN_DEFAULT_MODE=off claude "${_cm_argv[@]}" -p 2>/dev/null)
             fi
             ;;
         codex)
             if command -v codex &>/dev/null; then
-                verdict=$(codex exec --full-auto "$prompt" 2>/dev/null | tail -20)
+                verdict=$(codex exec --full-auto "$prompt" 2>/dev/null)
             fi
             ;;
         gemini)
             if command -v gemini &>/dev/null; then
-                verdict=$(echo "$prompt" | gemini 2>/dev/null | tail -20)
+                verdict=$(echo "$prompt" | gemini 2>/dev/null)
             fi
             ;;
         cline)
             if command -v cline &>/dev/null; then
-                verdict=$(cline -y "$prompt" 2>/dev/null | tail -20)
+                verdict=$(cline -y "$prompt" 2>/dev/null)
             fi
             ;;
         aider)
             if command -v aider &>/dev/null; then
-                verdict=$(aider --message "$prompt" --yes-always --no-auto-commits --no-git 2>/dev/null | tail -20)
+                verdict=$(aider --message "$prompt" --yes-always --no-auto-commits --no-git 2>/dev/null)
             fi
             ;;
     esac
@@ -1882,27 +1922,29 @@ REASON: your reasoning"
                 # (contrarian) vote is parsed for "VOTE:". Disable caveman
                 # unconditionally so compression cannot flip the contrarian vote.
                 # Inlined on `claude` only (does not cross the pipe). No-op absent.
-                verdict=$(echo "$prompt" | env CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null | tail -20)
+                # v7.41.3 BUG A: full capture, no tail-truncation (see member
+                # subcall note). CAVEMAN_DEFAULT_MODE=off suppression preserved.
+                verdict=$(echo "$prompt" | env CAVEMAN_DEFAULT_MODE=off claude "${_co_argv[@]}" -p 2>/dev/null)
             fi
             ;;
         codex)
             if command -v codex &>/dev/null; then
-                verdict=$(codex exec --full-auto "$prompt" 2>/dev/null | tail -20)
+                verdict=$(codex exec --full-auto "$prompt" 2>/dev/null)
             fi
             ;;
         gemini)
             if command -v gemini &>/dev/null; then
-                verdict=$(echo "$prompt" | gemini 2>/dev/null | tail -20)
+                verdict=$(echo "$prompt" | gemini 2>/dev/null)
             fi
             ;;
         cline)
             if command -v cline &>/dev/null; then
-                verdict=$(cline -y "$prompt" 2>/dev/null | tail -20)
+                verdict=$(cline -y "$prompt" 2>/dev/null)
             fi
             ;;
         aider)
             if command -v aider &>/dev/null; then
-                verdict=$(aider --message "$prompt" --yes-always --no-auto-commits --no-git 2>/dev/null | tail -20)
+                verdict=$(aider --message "$prompt" --yes-always --no-auto-commits --no-git 2>/dev/null)
             fi
             ;;
     esac

package/autonomy/council-v2.sh

@@ -151,8 +151,19 @@ print('{:.3f}'.format(detect_sycophancy(votes)))
     fi
 
     # Step 6: Calibration tracking
+    # Compute threshold using ceiling(2/3) formula, consistent with
+    # completion-council.sh (council_should_stop, council_aggregate_votes,
+    # council_evaluate). An explicit operator override via LOKI_COUNCIL_THRESHOLD
+    # is honored; otherwise scale with council_size instead of a flat default of 2.
+    local effective_threshold
+    if [ -n "${LOKI_COUNCIL_THRESHOLD:-}" ]; then
+        effective_threshold="$LOKI_COUNCIL_THRESHOLD"
+    else
+        effective_threshold=$(( (council_size * 2 + 2) / 3 ))
+    fi
+
     local final_decision
-    if [ "$approve_count" -ge "${COUNCIL_THRESHOLD:-2}" ]; then
+    if [ "$approve_count" -ge "$effective_threshold" ]; then
         final_decision="approve"
     else
         final_decision="reject"
@@ -194,7 +205,7 @@ SUMMARY_EOF
         "iteration=$iteration" \
         "approve=$approve_count" \
         "reject=$reject_count" \
-        "threshold=${COUNCIL_THRESHOLD:-2}" \
+        "threshold=$effective_threshold" \
         "sycophancy_score=$sycophancy_score" \
         "result=$(echo "$final_decision" | tr '[:lower:]' '[:upper:]')" 2>/dev/null || true
 

package/autonomy/hooks/migration-hooks.sh

@@ -110,10 +110,33 @@ detect_test_command() {
     elif [[ -d "${codebase_path}/tests" ]]; then
         echo "cd '${codebase_path}' && python -m pytest tests/ -q"
     else
-        echo "echo 'No test command detected. Set LOKI_TEST_COMMAND.'"
+        # No framework detected and LOKI_TEST_COMMAND unset.
+        # In healing mode the gates MUST fail closed: "no tests" can never be
+        # treated as "tests passed", or the behavioral-preservation guarantee
+        # is silently defeated. Emit a sentinel the healing consumers detect and
+        # turn into a hard BLOCK (see is_no_test_cmd). The bare token also fails
+        # if eval'd directly (command-not-found, exit 127) so the default is
+        # fail-closed even if a string check is ever missed.
+        # Outside healing mode, preserve the prior fail-open behavior: the
+        # non-healing consumers (post_file_edit, post_step, pre_phase_gate) run
+        # this via `eval` and a bare token there would exit 127 -> taken block
+        # -> destructive (e.g. reverting a user edit in a repo with no tests).
+        if [[ "${LOKI_HEAL_MODE:-false}" == "true" ]]; then
+            echo "__LOKI_NO_TEST_CMD__"
+        else
+            echo "echo 'No test command detected. Set LOKI_TEST_COMMAND.'"
+        fi
     fi
 }
 
+# Returns 0 (true) when detect_test_command yielded the no-test-command
+# sentinel, i.e. no framework was detected and LOKI_TEST_COMMAND is unset.
+# Used by the healing gates to distinguish "no tests available" (block) from
+# "tests ran and passed" (allow) and "tests ran and failed" (block).
+is_no_test_cmd() {
+    [[ "${1:-}" == "__LOKI_NO_TEST_CMD__" ]]
+}
+
 # Hook: post_file_edit - runs after ANY agent modifies a source file
 hook_post_file_edit() {
     local file_path="${1:-}"
@@ -342,6 +365,17 @@ hook_post_healing_modify() {
     # Run characterization tests
     local test_cmd
     test_cmd=$(detect_test_command "$codebase_path")
+
+    # No test command available in healing mode -> fail closed. "No tests" can
+    # never count as "characterization tests passed". Do not git-revert here:
+    # there is no test-driven baseline to restore against, and the actionable
+    # fix is to provide a test command.
+    if is_no_test_cmd "$test_cmd"; then
+        echo "HOOK_BLOCKED: no test command available; set LOKI_TEST_COMMAND"
+        echo "Characterization tests cannot run for healing modification to ${file_path}; refusing to treat absence of tests as success."
+        return 1
+    fi
+
     local test_result_file
     test_result_file=$(mktemp)
 
@@ -437,6 +471,10 @@ except: print(0)
 
             local test_cmd
             test_cmd=$(detect_test_command "$codebase_path")
+            if is_no_test_cmd "$test_cmd"; then
+                echo "GATE_BLOCKED: no test command available; set LOKI_TEST_COMMAND"
+                return 1
+            fi
             if ! eval "$test_cmd" >/dev/null 2>&1; then
                 echo "GATE_BLOCKED: Characterization tests do not pass"
                 return 1
@@ -445,6 +483,10 @@ except: print(0)
         stabilize:isolate)
             local test_cmd
             test_cmd=$(detect_test_command "$codebase_path")
+            if is_no_test_cmd "$test_cmd"; then
+                echo "GATE_BLOCKED: no test command available; set LOKI_TEST_COMMAND"
+                return 1
+            fi
             if ! eval "$test_cmd" >/dev/null 2>&1; then
                 echo "GATE_BLOCKED: Tests do not pass after stabilization"
                 return 1
@@ -453,6 +495,10 @@ except: print(0)
         isolate:modernize)
             local test_cmd
             test_cmd=$(detect_test_command "$codebase_path")
+            if is_no_test_cmd "$test_cmd"; then
+                echo "GATE_BLOCKED: no test command available; set LOKI_TEST_COMMAND"
+                return 1
+            fi
             if ! eval "$test_cmd" >/dev/null 2>&1; then
                 echo "GATE_BLOCKED: Tests do not pass after isolation"
                 return 1
@@ -461,6 +507,10 @@ except: print(0)
         modernize:validate)
             local test_cmd
             test_cmd=$(detect_test_command "$codebase_path")
+            if is_no_test_cmd "$test_cmd"; then
+                echo "GATE_BLOCKED: no test command available; set LOKI_TEST_COMMAND"
+                return 1
+            fi
             if ! eval "$test_cmd" >/dev/null 2>&1; then
                 echo "GATE_BLOCKED: Tests do not pass after modernization"
                 return 1

package/autonomy/loki

@@ -6708,14 +6708,23 @@ cmd_assets() {
     shift 2>/dev/null || true
 
     local helper="$_LOKI_SCRIPT_DIR/lib/assets_bundle.py"
-    if [ ! -f "$helper" ]; then
-        echo -e "${RED}Error: assets helper not found at $helper${NC}" >&2
-        return 1
-    fi
-    if ! command -v python3 &>/dev/null; then
-        echo -e "${RED}Error: python3 is required for 'loki assets'${NC}" >&2
-        return 1
-    fi
+    # The help path needs neither the python3 helper nor python3 itself, so
+    # guard these preconditions to skip help/empty subcommands. Otherwise
+    # `loki assets --help` would error on a missing helper/python3 instead of
+    # printing help (same class as #574 / the cmd_monitor fix).
+    case "$subcommand" in
+        --help|-h|help|"") ;;
+        *)
+            if [ ! -f "$helper" ]; then
+                echo -e "${RED}Error: assets helper not found at $helper${NC}" >&2
+                return 1
+            fi
+            if ! command -v python3 &>/dev/null; then
+                echo -e "${RED}Error: python3 is required for 'loki assets'${NC}" >&2
+                return 1
+            fi
+            ;;
+    esac
 
     # Project dir holds .loki/ (memory, council, wiki). Default to cwd.
     local project_dir
@@ -9878,16 +9887,11 @@ QPRDEOF
 
 # Docker Compose monitoring with auto-fix (v6.67.0)
 cmd_monitor() {
-    # Verify Docker is available
-    if ! command -v docker &>/dev/null; then
-        echo -e "${RED}Docker is not installed. Install from https://docker.com${NC}"
-        return 1
-    fi
-    if ! docker info &>/dev/null 2>&1; then
-        echo -e "${RED}Docker daemon is not running. Start Docker Desktop or the Docker service.${NC}"
-        return 1
-    fi
-
+    # A --help/-h in any position (e.g. `loki monitor --help`) short-circuits
+    # to the help text BEFORE the Docker preconditions, so `monitor --help`
+    # works even when Docker is down (same class as #574). The arg parser's
+    # existing --help arm below prints the help; we just defer the Docker
+    # checks until after parsing so help is reachable.
     local project_dir="."
     local watch_only=false
     local poll_interval="${LOKI_MONITOR_INTERVAL:-10}"
@@ -9945,6 +9949,17 @@ cmd_monitor() {
         esac
     done
 
+    # Verify Docker is available (deferred past arg parsing so --help works
+    # without a running daemon).
+    if ! command -v docker &>/dev/null; then
+        echo -e "${RED}Docker is not installed. Install from https://docker.com${NC}"
+        return 1
+    fi
+    if ! docker info &>/dev/null 2>&1; then
+        echo -e "${RED}Docker daemon is not running. Start Docker Desktop or the Docker service.${NC}"
+        return 1
+    fi
+
     # Resolve to absolute path
     if [[ ! "$project_dir" = /* ]]; then
         project_dir="$(cd "$project_dir" 2>/dev/null && pwd)" || {

package/autonomy/run.sh

@@ -14116,7 +14116,7 @@ if __name__ == "__main__":
             # refuse completion until the review passes.
             local _gate_block_for_completion=""
             case "${gate_failures:-}" in
-                *code_review,*|*code_review_ESCALATED*) _gate_block_for_completion="code_review" ;;
+                *code_review,*|*code_review_ESCALATED*|*code_review_PAUSED*) _gate_block_for_completion="code_review" ;;
             esac
             # DROP-FIX (v7.28): check_completion_promise -> check_task_completion_signal
             # CONSUMES the completion signal (rm -f) on the FIRST successful call.

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.41.2"
+__version__ = "7.41.4"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -5787,12 +5787,20 @@ async def create_checkpoint(body: CheckpointCreate = None):
     checkpoint_dir = checkpoints_dir / checkpoint_id
     checkpoint_dir.mkdir(parents=True, exist_ok=True)
 
-    # Capture git SHA
+    # Capture git SHA. Pass cwd= the active project root so the recorded
+    # git_sha belongs to the project being checkpointed, not whatever directory
+    # the dashboard process happens to run from (correctness bug for
+    # multi-project dashboards). Offload to a thread so the blocking git call
+    # does not stall the single-worker uvicorn event loop.
     git_sha = ""
+    git_cwd = str(loki_dir.parent) if loki_dir.name == ".loki" else None
     try:
-        result = subprocess.run(
-            ["git", "rev-parse", "HEAD"],
-            capture_output=True, text=True, timeout=5,
+        result = await asyncio.to_thread(
+            lambda: subprocess.run(
+                ["git", "rev-parse", "HEAD"],
+                capture_output=True, text=True, timeout=5,
+                cwd=git_cwd,
+            )
         )
         if result.returncode == 0:
             git_sha = result.stdout.strip()
@@ -5812,11 +5820,15 @@ async def create_checkpoint(body: CheckpointCreate = None):
             except Exception:
                 pass
 
-    # Copy queue directory if present
+    # Copy queue directory if present. Offload to a thread: a large queue tree
+    # would otherwise block the single-worker uvicorn event loop.
     queue_src = loki_dir / "queue"
     if queue_src.exists():
         try:
-            shutil.copytree(str(queue_src), str(checkpoint_dir / "queue"), dirs_exist_ok=True)
+            await asyncio.to_thread(
+                shutil.copytree,
+                str(queue_src), str(checkpoint_dir / "queue"), dirs_exist_ok=True,
+            )
         except Exception:
             pass
 
@@ -5898,7 +5910,11 @@ async def rollback_checkpoint(checkpoint_id: str):
         src = loki_dir / dname
         if src.exists() and src.is_dir():
             try:
-                shutil.copytree(str(src), str(pre_dir / dname), dirs_exist_ok=True)
+                # Offload the (potentially large) directory copy off the event loop.
+                await asyncio.to_thread(
+                    shutil.copytree,
+                    str(src), str(pre_dir / dname), dirs_exist_ok=True,
+                )
             except Exception:
                 pass
     pre_meta = {
@@ -5928,7 +5944,11 @@ async def rollback_checkpoint(checkpoint_id: str):
         dest = loki_dir / item.name
         try:
             if item.is_dir():
-                shutil.copytree(str(item), str(dest), dirs_exist_ok=True)
+                # Offload the (potentially large) directory copy off the event loop.
+                await asyncio.to_thread(
+                    shutil.copytree,
+                    str(item), str(dest), dirs_exist_ok=True,
+                )
             else:
                 dest.parent.mkdir(parents=True, exist_ok=True)
                 shutil.copy2(str(item), str(dest))
@@ -6246,10 +6266,14 @@ async def get_github_status(token: Optional[dict] = Depends(auth.get_current_tok
     # Detect repo from git
     try:
         import subprocess
-        url = subprocess.run(
-            ["git", "remote", "get-url", "origin"],
-            capture_output=True, text=True, timeout=5,
-            cwd=str(loki_dir.parent) if loki_dir.name == ".loki" else None
+        # Offload the blocking git call so it does not stall the single-worker
+        # uvicorn event loop.
+        url = await asyncio.to_thread(
+            lambda: subprocess.run(
+                ["git", "remote", "get-url", "origin"],
+                capture_output=True, text=True, timeout=5,
+                cwd=str(loki_dir.parent) if loki_dir.name == ".loki" else None,
+            )
         )
         if url.returncode == 0:
             repo = url.stdout.strip()
@@ -8365,11 +8389,19 @@ async def post_wiki_ask(req: WikiAskRequest):
     if not ask_script.is_file():
         raise HTTPException(status_code=503, detail="wiki-ask backend missing")
     try:
-        proc = subprocess.run(
-            ["python3", str(ask_script), "--root", str(project_root),
-             "--question", req.question, "--k", str(req.k), "--json"],
-            capture_output=True, text=True, timeout=180,
-            cwd=str(project_root),
+        # Offload the blocking subprocess to a thread so the single-worker
+        # uvicorn event loop stays responsive (liveness, status, WS heartbeat)
+        # while wiki-ask runs (up to 180s). A direct subprocess.run here would
+        # freeze the whole server; this read-scoped endpoint is reachable by any
+        # reader. Mirrors the await asyncio.to_thread(...) pattern used by the
+        # stop endpoints.
+        proc = await asyncio.to_thread(
+            lambda: subprocess.run(
+                ["python3", str(ask_script), "--root", str(project_root),
+                 "--question", req.question, "--k", str(req.k), "--json"],
+                capture_output=True, text=True, timeout=180,
+                cwd=str(project_root),
+            )
         )
     except (OSError, subprocess.SubprocessError) as e:
         raise HTTPException(status_code=503, detail=f"wiki ask failed: {e}")

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.41.2
+**Version:** v7.41.4
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.41.2";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
+var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.41.4";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -789,4 +789,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(o6),2}}p1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var ZZ=await QZ(Bun.argv.slice(2));process.exit(ZZ);
 
-//# debugId=054C77BCD2DBFFE964756E2164756E21
+//# debugId=203776A170E08A4F64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.41.2'
+__version__ = '7.41.4'

package/memory/consolidation.py

@@ -766,6 +766,14 @@ class ConsolidationPipeline:
             usage_count=best_match.usage_count,
             last_used=best_match.last_used,
             links=best_match.links.copy(),
+            # Preserve retrieval/decay-relevant fields. The constructor previously
+            # omitted these, so the merged pattern fell back to schema defaults
+            # (importance=0.5, access_count=0, last_accessed=None), resetting a hot,
+            # high-importance pattern to the floor on every merge and corrupting
+            # apply_decay() + importance-weighted ranking in retrieval.
+            importance=max(best_match.importance, new_pattern.importance),
+            access_count=best_match.access_count,
+            last_accessed=best_match.last_accessed,
         )
 
         return merged

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.41.2",
+  "version": "7.41.4",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.41.2",
+  "version": "7.41.4",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 11 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",