loki-mode 7.5.17 → 7.5.28

package/autonomy/run.sh

@@ -15,7 +15,7 @@
 #   ./autonomy/run.sh --parallel ./prd.md      # Parallel mode with PRD
 #
 # Environment Variables:
-#   LOKI_PROVIDER       - AI provider: claude (default), codex, gemini
+#   LOKI_PROVIDER       - AI provider: claude (default), codex, cline, aider
 #   LOKI_MAX_RETRIES    - Max retry attempts (default: 50)
 #   LOKI_BASE_WAIT      - Base wait time in seconds (default: 60)
 #   LOKI_MAX_WAIT       - Max wait time in seconds (default: 3600)
@@ -758,7 +758,7 @@ COMPLEXITY_TIER=${LOKI_COMPLEXITY:-auto}
 DETECTED_COMPLEXITY=""
 
 # Multi-Provider Support (v5.0.0)
-# Provider: claude (default), codex, gemini
+# Provider: claude (default), codex, cline, aider
 LOKI_PROVIDER=${LOKI_PROVIDER:-claude}
 
 # Source provider configuration
@@ -1291,7 +1291,7 @@ get_iteration_duration_ms() {
 validate_api_keys() {
     local provider="${LOKI_PROVIDER:-claude}"
 
-    # CLI tools (claude, codex, gemini) use their own login sessions.
+    # CLI tools (claude, codex, cline, aider) use their own login sessions.
     # Only require API keys inside Docker/K8s where CLI login isn't available.
     if [[ ! -f "/.dockerenv" ]] && [[ -z "${KUBERNETES_SERVICE_HOST:-}" ]]; then
         return 0
@@ -1301,7 +1301,6 @@ validate_api_keys() {
     case "$provider" in
         claude) key_var="ANTHROPIC_API_KEY" ;;
         codex)  key_var="OPENAI_API_KEY" ;;
-        gemini) key_var="GOOGLE_API_KEY" ;;
         cline)  # Cline manages its own keys via `cline auth`
             if ! command -v cline &>/dev/null; then
                 log_error "Cline CLI not found. Install: npm install -g cline"
@@ -1497,7 +1496,7 @@ get_phase_names() {
 
 # Global tier for current iteration (set by get_rarv_tier)
 CURRENT_TIER="development"
-# Export for provider helper functions (e.g., gemini.sh:provider_get_current_model)
+# Export for provider helper functions (e.g., provider_get_current_model)
 LOKI_CURRENT_TIER="$CURRENT_TIER"
 export LOKI_CURRENT_TIER
 
@@ -1573,14 +1572,6 @@ get_provider_tier_param() {
                 *) echo "high" ;;
             esac
             ;;
-        gemini)
-            case "$tier" in
-                planning) echo "${PROVIDER_THINKING_PLANNING:-high}" ;;
-                development) echo "${PROVIDER_THINKING_DEVELOPMENT:-medium}" ;;
-                fast) echo "${PROVIDER_THINKING_FAST:-low}" ;;
-                *) echo "medium" ;;
-            esac
-            ;;
         cline)
             echo "${CLINE_DEFAULT_MODEL:-${LOKI_CLINE_MODEL:-default}}"
             ;;
@@ -2402,10 +2393,6 @@ spawn_worktree_session() {
                     "Loki Mode: $task_prompt. Read .loki/CONTINUITY.md for context." \
                     >> "$log_file" 2>&1 || _wt_exit=$?
                 ;;
-            gemini)
-                invoke_gemini "Loki Mode: $task_prompt. Read .loki/CONTINUITY.md for context." \
-                    >> "$log_file" 2>&1 || _wt_exit=$?
-                ;;
             cline)
                 invoke_cline "Loki Mode: $task_prompt. Read .loki/CONTINUITY.md for context." \
                     >> "$log_file" 2>&1 || _wt_exit=$?
@@ -2605,10 +2592,6 @@ Output ONLY the resolved file content with no conflict markers. No explanations.
             codex)
                 resolution=$(codex exec --full-auto "$conflict_prompt" 2>/dev/null)
                 ;;
-            gemini)
-                # Uses invoke_gemini_capture for rate limit fallback to flash model
-                resolution=$(invoke_gemini_capture "$conflict_prompt" 2>/dev/null)
-                ;;
             cline)
                 resolution=$(invoke_cline_capture "$conflict_prompt" 2>/dev/null)
                 ;;
@@ -2895,10 +2878,6 @@ check_prerequisites() {
             codex)
                 log_info "Install: npm install -g @openai/codex"
                 ;;
-            gemini)
-                # TODO: Verify official Gemini CLI package name when available
-                log_info "Install: npm install -g @google/gemini-cli (or visit https://ai.google.dev/)"
-                ;;
             cline)
                 log_info "Install: npm install -g cline"
                 ;;
@@ -3003,7 +2982,7 @@ check_skill_installed() {
         fi
     done
 
-    # For providers without skill system (Codex, Gemini), this is expected
+    # For providers without skill system (Codex, Aider), this is expected
     if [ -z "${PROVIDER_SKILL_DIR:-}" ]; then
         log_info "Provider ${PROVIDER_NAME:-unknown} has no native skill directory"
         log_info "Skill will be passed via prompt injection"
@@ -3186,88 +3165,13 @@ _write_pricing_json() {
     "opus":            {"input": 5.00,  "output": 25.00, "label": "Opus (latest)",   "provider": "claude"},
     "sonnet":          {"input": 3.00,  "output": 15.00, "label": "Sonnet (latest)", "provider": "claude"},
     "haiku":           {"input": 1.00,  "output": 5.00,  "label": "Haiku (latest)",  "provider": "claude"},
-    "gpt-5.3-codex":   {"input": 1.50,  "output": 12.00, "label": "GPT-5.3 Codex", "provider": "codex"},
-    "gemini-3-pro":    {"input": 1.25,  "output": 10.00, "label": "Gemini 3 Pro",   "provider": "gemini"},
-    "gemini-3-flash":  {"input": 0.10,  "output": 0.40,  "label": "Gemini 3 Flash", "provider": "gemini"}
+    "gpt-5.3-codex":   {"input": 1.50,  "output": 12.00, "label": "GPT-5.3 Codex", "provider": "codex"}
   }
 }
 PRICING_EOF
     log_info "Pricing data written: .loki/pricing.json (provider: ${provider})"
 }
 
-#===============================================================================
-# Gemini Invocation with Rate Limit Fallback
-#===============================================================================
-
-# Invoke Gemini with automatic fallback to flash model on rate limit
-# Usage: invoke_gemini "prompt" [additional args...]
-# Returns: exit code from gemini CLI
-invoke_gemini() {
-    local prompt="$1"
-    shift
-
-    # BUG-PROV-001/006 fix: Use dynamic model resolution instead of frozen PROVIDER_MODEL.
-    # provider_get_current_model() resolves based on LOKI_CURRENT_TIER at runtime.
-    # Falls back to provider_get_tier_param if available, then to GEMINI_DEFAULT_PRO.
-    local model
-    if type provider_get_current_model &>/dev/null; then
-        model=$(provider_get_current_model)
-    else
-        model="${GEMINI_DEFAULT_PRO:-gemini-3-pro-preview}"
-    fi
-    local fallback="${PROVIDER_MODEL_FALLBACK:-${GEMINI_DEFAULT_FLASH:-gemini-3-flash-preview}}"
-
-    # Create temp file for output to preserve streaming while checking for rate limit
-    local tmp_output
-    tmp_output=$(mktemp)
-
-    # Try primary model first
-    gemini --approval-mode=yolo --model "$model" "$prompt" "$@" < /dev/null 2>&1 | tee "$tmp_output"
-    local exit_code=${PIPESTATUS[0]}
-
-    # Check for rate limit in output
-    if [[ $exit_code -ne 0 ]] && grep -qiE "(rate.?limit|429|quota|resource.?exhausted)" "$tmp_output"; then
-        log_warn "Rate limit hit on $model, falling back to $fallback"
-        rm -f "$tmp_output"
-        gemini --approval-mode=yolo --model "$fallback" "$prompt" "$@" < /dev/null
-        exit_code=$?
-    else
-        rm -f "$tmp_output"
-    fi
-
-    return $exit_code
-}
-
-# Invoke Gemini and capture output (for variable assignment)
-# Usage: result=$(invoke_gemini_capture "prompt")
-# Falls back to flash model on rate limit
-invoke_gemini_capture() {
-    local prompt="$1"
-    shift
-
-    # BUG-PROV-001/006 fix: Use dynamic model resolution instead of frozen PROVIDER_MODEL
-    local model
-    if type provider_get_current_model &>/dev/null; then
-        model=$(provider_get_current_model)
-    else
-        model="${GEMINI_DEFAULT_PRO:-gemini-3-pro-preview}"
-    fi
-    local fallback="${PROVIDER_MODEL_FALLBACK:-${GEMINI_DEFAULT_FLASH:-gemini-3-flash-preview}}"
-    local output
-
-    # Try primary model first
-    output=$(gemini --approval-mode=yolo --model "$model" "$prompt" "$@" < /dev/null 2>&1)
-    local exit_code=$?
-
-    # Check for rate limit in output
-    if [[ $exit_code -ne 0 ]] && echo "$output" | grep -qiE "(rate.?limit|429|quota|resource.?exhausted)"; then
-        log_warn "Rate limit hit on $model, falling back to $fallback" >&2
-        output=$(gemini --approval-mode=yolo --model "$fallback" "$prompt" "$@" < /dev/null 2>&1)
-    fi
-
-    echo "$output"
-}
-
 #===============================================================================
 # Cline Invocation (Tier 2 - Near-Full)
 #===============================================================================
@@ -3334,7 +3238,7 @@ invoke_aider_capture() {
 copy_skill_files() {
     # Copy skill files from the CLI package to the project's .loki/ directory.
     # This makes the CLI self-contained - no need to install Claude Code skill separately.
-    # All providers (Claude, Gemini, Codex) use the same .loki/skills/ location.
+    # All providers (Claude, Codex, Cline, Aider) use the same .loki/skills/ location.
 
     local skills_src="$PROJECT_DIR/skills"
     local skills_dst=".loki/skills"
@@ -4020,8 +3924,6 @@ track_iteration_complete() {
     local model_tier="${PROVIDER_MODEL_DEVELOPMENT:-sonnet}"
     if [ "${PROVIDER_NAME:-claude}" = "codex" ]; then
         model_tier="${PROVIDER_MODEL_DEVELOPMENT:-${CODEX_DEFAULT_MODEL:-gpt-5.3-codex}}"
-    elif [ "${PROVIDER_NAME:-claude}" = "gemini" ]; then
-        model_tier="${PROVIDER_MODEL_DEVELOPMENT:-${GEMINI_DEFAULT_PRO:-gemini-3-pro}}"
     elif [ "${PROVIDER_NAME:-claude}" = "cline" ]; then
         model_tier="${CLINE_DEFAULT_MODEL:-${LOKI_CLINE_MODEL:-sonnet}}"
     elif [ "${PROVIDER_NAME:-claude}" = "aider" ]; then
@@ -4973,7 +4875,6 @@ check_command_allowed() {
     # input. Command execution is handled by the AI CLI's own permission model:
     #   - Claude Code: --dangerously-skip-permissions (with its own allowlist)
     #   - Codex CLI: --full-auto or exec --dangerously-bypass-approvals-and-sandbox
-    #   - Gemini CLI: --approval-mode=yolo
     #
     # HUMAN_INPUT.md content is injected as a text prompt to the AI agent (not
     # executed as a shell command), and is already guarded by:
@@ -6821,10 +6722,6 @@ BUILD_PROMPT
                     codex exec --full-auto "$prompt_text" \
                         > "$review_output" 2>/dev/null
                     ;;
-                gemini)
-                    invoke_gemini_capture "$prompt_text" \
-                        > "$review_output" 2>/dev/null
-                    ;;
                 cline)
                     invoke_cline_capture "$prompt_text" \
                         > "$review_output" 2>/dev/null
@@ -7041,12 +6938,6 @@ ADVERSARIAL_EOF
                     > "$result_file" 2>/dev/null || true
             fi
             ;;
-        gemini)
-            if command -v gemini &>/dev/null; then
-                invoke_gemini_capture "$adversarial_prompt" \
-                    > "$result_file" 2>/dev/null || true
-            fi
-            ;;
         cline)
             if command -v cline &>/dev/null; then
                 invoke_cline_capture "$adversarial_prompt" \
@@ -7683,12 +7574,12 @@ init_failover_state() {
     mkdir -p "$failover_dir"
 
     if [ ! -f "$failover_file" ]; then
-        local chain="${LOKI_FAILOVER_CHAIN:-claude,codex,gemini}"
+        local chain="${LOKI_FAILOVER_CHAIN:-claude,codex}"
         local primary="${PROVIDER_NAME:-claude}"
         cat > "$failover_file" << FEOF
 {
   "enabled": true,
-  "chain": $(printf '%s' "$chain" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read().strip().split(",")))' 2>/dev/null || echo '["claude","codex","gemini"]'),
+  "chain": $(printf '%s' "$chain" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read().strip().split(",")))' 2>/dev/null || echo '["claude","codex"]'),
   "currentProvider": "$primary",
   "primaryProvider": "$primary",
   "lastFailover": null,
@@ -7717,7 +7608,7 @@ import json, os
 try:
     with open(os.path.join(os.environ.get('TARGET_DIR', '.'), '.loki/state/failover.json')) as f:
         d = json.load(f)
-    chain = ','.join(d.get('chain', ['claude','codex','gemini']))
+    chain = ','.join(d.get('chain', ['claude','codex']))
     print(f'FAILOVER_ENABLED={str(d.get("enabled", False)).lower()}')
     print(f'FAILOVER_CHAIN="{chain}"')
     print(f'FAILOVER_CURRENT="{d.get("currentProvider", "claude")}"')
@@ -7820,18 +7711,6 @@ check_provider_health() {
             command -v codex &>/dev/null || return 1
             [ -n "${OPENAI_API_KEY:-}" ] || return 1
             ;;
-        gemini)
-            command -v gemini &>/dev/null || return 1
-            # BUG-PROV-003: Also accept GEMINI_API_KEY and gcloud ADC
-            if [ -n "${GOOGLE_API_KEY:-}" ] || [ -n "${GEMINI_API_KEY:-}" ]; then
-                return 0
-            fi
-            # Check for gcloud Application Default Credentials
-            if [ -f "${HOME}/.config/gcloud/application_default_credentials.json" ]; then
-                return 0
-            fi
-            return 1
-            ;;
         cline)
             command -v cline &>/dev/null || return 1
             ;;
@@ -8105,7 +7984,7 @@ detect_rate_limit() {
         claude)
             wait_secs=$(parse_claude_reset_time "$log_file")
             ;;
-        codex|gemini|cline|aider|*)
+        codex|cline|aider|*)
             # No provider-specific reset time format known
             # Fall through to generic parsing
             ;;
@@ -8186,8 +8065,6 @@ pricing = {
     'sonnet': {'input': 3.00, 'output': 15.00},
     'haiku': {'input': 1.00, 'output': 5.00},
     'gpt-5.3-codex': {'input': 1.50, 'output': 12.00},
-    'gemini-3-pro': {'input': 1.25, 'output': 10.00},
-    'gemini-3-flash': {'input': 0.10, 'output': 0.40},
 }
 for f in glob.glob('${efficiency_dir}/*.json'):
     try:
@@ -8349,7 +8226,7 @@ except Exception:
 # v7.4.17: also accepts a file-based fallback at .loki/signals/
 # COMPLETION_REQUESTED -- the LLM can `touch` this file directly when the
 # MCP tool isn't surfaced in its environment (e.g., harness limitations,
-# Codex CLI, Gemini CLI). User reproduction: the LLM said "the
+# Codex CLI). User reproduction: the LLM said "the
 # loki_complete_task MCP tool isn't loaded in this environment" and
 # tried to signal completion via state files; we now honor that.
 #
@@ -9284,7 +9161,7 @@ build_prompt() {
     # instead of emitting a prose completion string.
     local completion_instruction=""
     # v7.4.17: explicit fallback path. The loki_complete_task MCP tool is
-    # not always surfaced in the LLM's environment (Codex CLI, Gemini CLI,
+    # not always surfaced in the LLM's environment (Codex CLI,
     # certain Claude Code harness configs). When unavailable, the LLM
     # should `touch .loki/signals/COMPLETION_REQUESTED` instead -- the
     # runner's check_task_completion_signal honors that file as a
@@ -9354,6 +9231,22 @@ build_prompt() {
         context_injection="$context_injection $memory_context"
     fi
 
+    # Phase F (v7.5.23): inject layered CLAUDE.md context from sibling repos
+    # when this target is part of a cross-project graph. Silent no-op when
+    # LOKI_PROJECT_GRAPH_ROOT is unset (single-project workflows untouched).
+    local _pg_helper_rs="${PROJECT_DIR}/autonomy/lib/project-graph.sh"
+    if [ -f "$_pg_helper_rs" ]; then
+        # shellcheck disable=SC1090
+        . "$_pg_helper_rs" 2>/dev/null || true
+        if [ -n "${LOKI_PROJECT_GRAPH_ROOT:-}" ] && declare -f load_app_graph_context >/dev/null 2>&1; then
+            local app_graph_context=""
+            app_graph_context=$(load_app_graph_context 2>/dev/null || true)
+            if [ -n "$app_graph_context" ]; then
+                context_injection="$context_injection APP_GRAPH_CONTEXT: $app_graph_context"
+            fi
+        fi
+    fi
+
     # Gate failure injection (v6.7.0) - tells LLM what to fix
     local gate_failure_context=""
     if [ -f "${TARGET_DIR:-.}/.loki/quality/gate-failures.txt" ]; then
@@ -10849,7 +10742,7 @@ except Exception as exc:
             esac
         fi
         # Export LOKI_CURRENT_TIER so provider helper functions
-        # (e.g., gemini.sh:provider_get_current_model) can resolve the correct model.
+        # can resolve the correct model.
         # Without this, LOKI_CURRENT_TIER is always empty and defaults to "planning".
         LOKI_CURRENT_TIER="$CURRENT_TIER"
         export LOKI_CURRENT_TIER
@@ -10972,6 +10865,53 @@ def save_in_progress(tasks):
     except:
         pass
 
+# Phase D (v7.5.22): hook-event emission.
+# Mirror events/emit.sh::safe_append_event_jsonl semantics from inside
+# python by holding an fcntl.flock on .loki/events.jsonl.lock for the
+# duration of the append. Bash function is not callable from this
+# embedded process; fcntl matches the flock(1) path one-to-one.
+EVENTS_JSONL = ".loki/events.jsonl"
+HOOK_EVENTS_ENABLED = os.environ.get("LOKI_HOOK_EVENTS", "on") != "off"
+
+def append_hook_event(event_name, payload):
+    """Append a claude_hook_<event_name> record to .loki/events.jsonl."""
+    if not HOOK_EVENTS_ENABLED:
+        return
+    try:
+        import fcntl
+    except ImportError:
+        fcntl = None
+    try:
+        events_dir = os.path.dirname(EVENTS_JSONL)
+        if events_dir:
+            os.makedirs(events_dir, exist_ok=True)
+        record = {
+            "type": "claude_hook_" + str(event_name).lower(),
+            "source": "claude_cli",
+            "timestamp": datetime.now(timezone.utc).isoformat().replace("+00:00", "Z"),
+            "payload": payload,
+        }
+        line = json.dumps(record, default=str)
+        lock_path = EVENTS_JSONL + ".lock"
+        if fcntl is not None:
+            # flock path: serialize across processes.
+            with open(lock_path, "a") as lf:
+                try:
+                    fcntl.flock(lf.fileno(), fcntl.LOCK_EX)
+                    with open(EVENTS_JSONL, "a") as ef:
+                        ef.write(line + "\n")
+                finally:
+                    try:
+                        fcntl.flock(lf.fileno(), fcntl.LOCK_UN)
+                    except Exception:
+                        pass
+        else:
+            # No fcntl available (extremely rare on POSIX). Best-effort.
+            with open(EVENTS_JSONL, "a") as ef:
+                ef.write(line + "\n")
+    except Exception as e:
+        print(f"{YELLOW}[Hook event append error: {e}]{NC}", file=sys.stderr)
+
 def process_stream():
     global active_agents
     active_agents = load_agents()
@@ -11095,6 +11035,20 @@ def process_stream():
                         else:
                             print(f"{DIM}[Result]{NC} ", end="", flush=True)
 
+            elif msg_type == "hook_event":
+                # Phase D (v7.5.22): forward Claude hook lifecycle events
+                # into .loki/events.jsonl as claude_hook_<eventname>.
+                # Schema not fully specified upstream; probe common field
+                # names for the event identifier and lowercase it.
+                event_name = (
+                    data.get("hook_event")
+                    or data.get("event")
+                    or data.get("name")
+                    or data.get("hook")
+                    or "unknown"
+                )
+                append_hook_event(event_name, data)
+
             elif msg_type == "result":
                 # Session complete - mark all agents as completed
                 completed_at = datetime.now(timezone.utc).isoformat().replace("+00:00", "Z")
@@ -11143,51 +11097,6 @@ if __name__ == "__main__":
                 } && exit_code=0 || exit_code=$?
                 ;;
 
-            gemini)
-                # Gemini: Degraded mode - no stream-json, no agent tracking
-                # Uses invoke_gemini helper for rate limit fallback to flash model
-                # BUG-PROV-001 fix: Use tier_param (resolved model) instead of frozen PROVIDER_MODEL
-                # tier_param is computed above via get_provider_tier_param() -> resolve_model_for_tier()
-                # which returns the correct model name for the current RARV tier
-                local model="$tier_param"
-                local fallback="${PROVIDER_MODEL_FALLBACK:-${GEMINI_DEFAULT_FLASH:-gemini-3-flash-preview}}"
-                echo "[loki] Gemini model: $model (fallback: $fallback), tier: $CURRENT_TIER" >> "$log_file"
-                echo "[loki] Gemini model: $model (fallback: $fallback), tier: $CURRENT_TIER" >> "$agent_log"
-
-                # BUG-PROV-003: Resolve API key (supports GEMINI_API_KEY alias and ADC)
-                if type _gemini_resolve_api_key &>/dev/null; then
-                    _gemini_resolve_api_key || true
-                fi
-
-                # Try primary model, fallback on rate limit or auth error
-                local tmp_output tmp_stderr
-                tmp_output=$(mktemp)
-                tmp_stderr=$(mktemp)
-                # BUG-RUN-011/RUN-013: Use PIPESTATUS[0] for primary invocation too
-                gemini --approval-mode=yolo --model "$model" "$prompt" < /dev/null 2>"$tmp_stderr" | tee "$tmp_output" | tee -a "$log_file" "$agent_log" "$iter_output"
-                exit_code=${PIPESTATUS[0]}
-
-                # BUG-PROV-003: Handle auth errors with API key rotation
-                if [[ $exit_code -ne 0 ]] && grep -qiE "(401|403|unauthorized|forbidden|invalid.?api.?key|permission.?denied)" "$tmp_stderr" 2>/dev/null; then
-                    if type _gemini_rotate_api_key &>/dev/null && _gemini_rotate_api_key; then
-                        log_warn "Auth error on Gemini, rotated to next API key"
-                        rm -f "$tmp_output" "$tmp_stderr"
-                        tmp_output=$(mktemp)
-                        tmp_stderr=$(mktemp)
-                        gemini --approval-mode=yolo --model "$model" "$prompt" < /dev/null 2>"$tmp_stderr" | tee "$tmp_output" | tee -a "$log_file" "$agent_log" "$iter_output"
-                        exit_code=${PIPESTATUS[0]}
-                    fi
-                fi
-
-                if [[ $exit_code -ne 0 ]] && grep -qiE "(rate.?limit|429|quota|resource.?exhausted)" "$tmp_stderr" "$tmp_output" 2>/dev/null; then
-                    log_warn "Rate limit hit on $model, falling back to $fallback"
-                    echo "[loki] Fallback to $fallback due to rate limit" >> "$log_file"
-                    gemini --approval-mode=yolo --model "$fallback" "$prompt" < /dev/null 2>&1 | tee -a "$log_file" "$agent_log" "$iter_output"
-                    exit_code=${PIPESTATUS[0]}
-                fi
-                rm -f "$tmp_output" "$tmp_stderr"
-                ;;
-
             cline)
                 # Cline: Tier 2 - near-full mode with subagents and MCP
                 echo "[loki] Cline model: ${LOKI_CLINE_MODEL:-default}, tier: $tier_param" >> "$log_file"
@@ -11626,7 +11535,7 @@ INTERRUPT_LAST_TIME=0
 PAUSED=false
 
 # v7.5.12: Track active provider invocation for SIGINT propagation.
-# When non-zero, indicates a provider pipeline (claude/codex/gemini/cline/aider)
+# When non-zero, indicates a provider pipeline (claude/codex/cline/aider)
 # is currently running and should be killed on Ctrl+C.
 LOKI_PROVIDER_ACTIVE=0
 
@@ -11642,7 +11551,7 @@ kill_provider_child() {
     fi
     # Also kill provider leaf processes by name in case they were reparented.
     local proc
-    for proc in claude codex gemini aider cline; do
+    for proc in claude codex aider cline; do
         pkill -TERM -f "^${proc}( |$)" 2>/dev/null && killed=1
     done
 
@@ -12102,7 +12011,7 @@ main() {
                     fi
                     shift 2
                 else
-                    log_error "--provider requires a value (claude, codex, gemini, cline, aider)"
+                    log_error "--provider requires a value (claude, codex, cline, aider)"
                     exit 1
                 fi
                 ;;
@@ -12136,7 +12045,7 @@ main() {
                 echo "Options:"
                 echo "  --parallel           Enable git worktree-based parallel workflows"
                 echo "  --allow-haiku        Enable Haiku model for fast tier (default: disabled)"
-                echo "  --provider <name>    Provider: claude (default), codex, gemini, cline, aider"
+                echo "  --provider <name>    Provider: claude (default), codex, cline, aider"
                 echo "  --bg, --background   Run in background mode"
                 echo "  --interactive-prd    Interactive PRD pre-flight analysis"
                 echo "  --help, -h           Show this help message"

package/bin/loki

@@ -88,6 +88,16 @@ if [ -z "${LOKI_TELEMETRY_DISABLED:-}" ] && [ "${DO_NOT_TRACK:-}" != "1" ] && [
     fi
 fi
 
+# v7.5.18: Guard against deprecated LOKI_PROVIDER=gemini before routing.
+# Fires for all commands (Bun-routed and bash-routed) so users get a clear
+# error regardless of which subcommand they invoke.
+if [ "${LOKI_PROVIDER:-}" = "gemini" ]; then
+    echo "Error: Provider 'gemini' is deprecated as of v7.5.18 and has been removed." >&2
+    echo "Active providers: claude, codex, cline, aider" >&2
+    echo "Unset LOKI_PROVIDER or use: LOKI_PROVIDER=claude" >&2
+    exit 1
+fi
+
 # Force-fall-through to bash when the rollback flag is set.
 if [ "${LOKI_LEGACY_BASH:-0}" = "1" ] || [ "${LOKI_LEGACY_BASH:-}" = "true" ]; then
     exec "$BASH_CLI" "$@"
@@ -103,9 +113,10 @@ fi
 # Two-token routes (provider show/list, memory list/index) match on the first
 # token only; the Bun dispatcher handles subcommand routing internally.
 case "${1:-}" in
-    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal)
+    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis)
         # v7.5.2: rollback added (wires loki-ts/src/commands/rollback.ts).
         # v7.5.3: internal added for autonomy/run.sh phase1-hooks calls.
+        # v7.5.28: kpis added (Phase K MVP: read-only KPI snapshot).
         exec bun "$BUN_CLI" "$@"
         ;;
     *)

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.5.17"
+__version__ = "7.5.28"
 
 # Expose the control app for easy import
 try:

package/dashboard/requirements.txt

@@ -1,9 +1,14 @@
 # Loki Mode Dashboard Dependencies
-# Using >= instead of == to avoid build failures on different Python/platform combos
-fastapi>=0.100.0
-uvicorn>=0.20.0
-sqlalchemy>=2.0.0
-aiosqlite>=0.19.0
-greenlet>=3.0.0
-pydantic>=2.0.0
-websockets>=12.0
+# Using >= instead of == to avoid build failures on different Python/platform
+# combos. Phase N (v7.5.27) added upper bounds to cap the risk of a future
+# major-version break installing on a fresh `pip install -r requirements.txt`.
+# Tested locally on this Mac at: fastapi 0.128.0, uvicorn 0.40.0,
+# sqlalchemy 2.0.46, aiosqlite 0.22.1, greenlet 3.3.1, pydantic 2.12.5,
+# websockets 15.0.1. Update upper bounds when next major is tested.
+fastapi>=0.100.0,<1.0.0
+uvicorn>=0.20.0,<1.0.0
+sqlalchemy>=2.0.0,<3.0.0
+aiosqlite>=0.19.0,<1.0.0
+greenlet>=3.0.0,<4.0.0
+pydantic>=2.0.0,<3.0.0
+websockets>=12.0,<16.0