loki-mode 7.67.0 → 7.68.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.67.0
+# Loki Mode v7.68.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -406,4 +406,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.67.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.68.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.67.0
+7.68.0

package/autonomy/loki

@@ -3071,7 +3071,7 @@ cmd_status_json() {
     local dashboard_port="${LOKI_DASHBOARD_PORT:-57374}"
     local env_provider="${LOKI_PROVIDER:-claude}"
 
-    python3 -c "
+    if ! python3 -c "
 import json, os, sys, time
 
 skill_dir = sys.argv[1]
@@ -3359,9 +3359,14 @@ if os.path.isfile(gate_count_file):
 result['phase1'] = phase1
 
 print(json.dumps(result, indent=2))
-" "$skill_dir" "$loki_dir" "$dashboard_port" "$env_provider"
-
-    if [ $? -ne 0 ]; then
+" "$skill_dir" "$loki_dir" "$dashboard_port" "$env_provider"; then
+        # WAVE8 loki-F2: under `set -euo pipefail` a bare python3 call aborts
+        # the whole function on non-zero exit, so the old post-call
+        # `if [ $? -ne 0 ]` fallback was DEAD code -- a missing/broken python3
+        # crashed `loki status --json` instead of degrading. Guarding the call
+        # with `if ! ...; then` catches the non-zero exit and emits the honest
+        # error object. (Most malformed state files already degrade internally
+        # via per-file try/except; this covers the interpreter-failure case.)
         echo '{"error": "Failed to generate JSON status. Ensure python3 is available."}' >&2
         return 1
     fi
@@ -12485,18 +12490,27 @@ for f in data.get('frictions', []):
 
     # Initialize or update healing progress
     if [[ ! -f "$heal_dir/healing-progress.json" ]] || [ "$do_resume" != "true" ]; then
+        # WAVE8 loki-est: pass codebase/phase/strict/out-path via env instead of
+        # interpolating raw bash into the python source. A codebase path or phase
+        # containing an apostrophe made this a SyntaxError; under `|| true` the
+        # progress file was then silently never written (and the later
+        # prev_phase read would fail), breaking healing resume.
+        LOKI_HEAL_CODEBASE="$codebase_path" \
+        LOKI_HEAL_PHASE_VAL="$phase" \
+        LOKI_HEAL_STRICT_VAL="$strict" \
+        LOKI_HEAL_OUT="$heal_dir/healing-progress.json" \
         python3 -c "
-import json
+import json, os
 from datetime import datetime
 progress = {
-    'codebase': '$codebase_path',
+    'codebase': os.environ.get('LOKI_HEAL_CODEBASE', ''),
     'started': datetime.now().isoformat(),
-    'current_phase': '$phase',
-    'strict_mode': $( [ "$strict" = "true" ] && echo "True" || echo "False" ),
+    'current_phase': os.environ.get('LOKI_HEAL_PHASE_VAL', ''),
+    'strict_mode': os.environ.get('LOKI_HEAL_STRICT_VAL', '') == 'true',
     'components': [],
     'overall_health': 0.0
 }
-with open('$heal_dir/healing-progress.json', 'w') as f:
+with open(os.environ['LOKI_HEAL_OUT'], 'w') as f:
     json.dump(progress, f, indent=2)
 " || true
     fi
@@ -12504,7 +12518,7 @@ with open('$heal_dir/healing-progress.json', 'w') as f:
     # BUG-HEAL-004: Validate phase gate when resuming from a previous phase
     if [ "$do_resume" = "true" ] && [[ -f "$heal_dir/healing-progress.json" ]] && type hook_healing_phase_gate &>/dev/null; then
         local prev_phase
-        prev_phase=$(python3 -c "import json; print(json.load(open('$heal_dir/healing-progress.json')).get('current_phase', 'archaeology'))" 2>/dev/null || echo "archaeology")
+        prev_phase=$(LOKI_HEAL_PROG="$heal_dir/healing-progress.json" python3 -c "import json, os; print(json.load(open(os.environ['LOKI_HEAL_PROG'])).get('current_phase', 'archaeology'))" 2>/dev/null || echo "archaeology")
         if [[ "$prev_phase" != "$phase" ]]; then
             local gate_result
             if ! gate_result=$(hook_healing_phase_gate "$prev_phase" "$phase" 2>&1); then
@@ -22834,35 +22848,39 @@ cmd_onboard() {
         fi
         # Extract metadata from package.json
         if command -v python3 &>/dev/null; then
+            # WAVE8 loki-est (same class as cmd_explain): pass the repo path via
+            # env (os.environ) instead of interpolating into the python source.
+            # A path with an apostrophe made each heredoc a SyntaxError, silently
+            # dropping the package.json name/version/description under `|| true`.
             local pkg_name
-            pkg_name=$(python3 -c "
-import json, sys
+            pkg_name=$(LOKI_ONB_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_ONB_PKG']))
     print(d.get('name', ''))
 except: pass
 " 2>/dev/null || true)
             if [ -n "$pkg_name" ]; then
                 project_name="$pkg_name"
             fi
-            project_description=$(python3 -c "
-import json, sys
+            project_description=$(LOKI_ONB_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_ONB_PKG']))
     print(d.get('description', ''))
 except: pass
 " 2>/dev/null || true)
-            project_version=$(python3 -c "
-import json, sys
+            project_version=$(LOKI_ONB_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_ONB_PKG']))
     print(d.get('version', ''))
 except: pass
 " 2>/dev/null || true)
-            entry_points=$(python3 -c "
-import json, sys
+            entry_points=$(LOKI_ONB_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_ONB_PKG']))
     main = d.get('main', '')
     if main: print(main)
     scripts = d.get('scripts', {})
@@ -23242,10 +23260,11 @@ $imports"
     if [ -f "$target_path/package.json" ]; then
         if command -v python3 &>/dev/null; then
             local scripts_json
-            scripts_json=$(python3 -c "
-import json
+            # WAVE8 loki-est: env-passed path (see cmd_onboard metadata block).
+            scripts_json=$(LOKI_ONB_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_ONB_PKG']))
     s = d.get('scripts', {})
     for k in ['build', 'dev', 'start', 'test', 'lint', 'format', 'check', 'typecheck']:
         if k in s:
@@ -23637,10 +23656,14 @@ cmd_explain() {
 
         if command -v python3 &>/dev/null; then
             local pkg_meta
-            pkg_meta=$(python3 -c "
-import json
+            # WAVE8 loki-est: pass the path via env (os.environ) instead of
+            # interpolating into the python source -- a repo path containing an
+            # apostrophe broke the string literal and dropped all package.json
+            # metadata.
+            pkg_meta=$(LOKI_EXP_PKG="$target_path/package.json" python3 -c "
+import json, os
 try:
-    d = json.load(open('$target_path/package.json'))
+    d = json.load(open(os.environ['LOKI_EXP_PKG']))
     print(d.get('name', ''))
     print(d.get('description', ''))
     print(d.get('version', ''))
@@ -23869,17 +23892,67 @@ $devdeps_list"
 
     # --- JSON output ---
     if [ "$output_json" = true ]; then
+        # WAVE8 loki-est: pass every value via the environment and read it with
+        # os.environ instead of interpolating raw bash into the python source.
+        # Interpolation broke on any apostrophe/quote/newline in a project name,
+        # version, description, or path (e.g. a dir named `my'app`), silently
+        # degrading real analysis to `{"error": "JSON generation failed"}`.
+        # env-passing is injection-proof and keeps the same output shape.
+        LOKI_EXP_NAME="$project_name" \
+        LOKI_EXP_DESC="$project_description" \
+        LOKI_EXP_VERSION="$project_version" \
+        LOKI_EXP_PATH="$target_path" \
+        LOKI_EXP_LANGUAGES="$languages" \
+        LOKI_EXP_FRAMEWORKS="$frameworks" \
+        LOKI_EXP_BUILD="$build_system" \
+        LOKI_EXP_PKGMGR="$package_manager" \
+        LOKI_EXP_TESTFW="$test_framework" \
+        LOKI_EXP_CI="$ci_system" \
+        LOKI_EXP_PATTERNS="$detected_patterns" \
+        LOKI_EXP_TOTAL="$total_files" \
+        LOKI_EXP_SRC="$src_count" \
+        LOKI_EXP_TEST="$test_count" \
+        LOKI_EXP_DOC="$doc_count" \
+        LOKI_EXP_CONFIG="$config_count" \
+        LOKI_EXP_BUILDCMD="$build_cmd" \
+        LOKI_EXP_RUNCMD="$run_cmd" \
+        LOKI_EXP_TESTCMD="$test_cmd" \
+        LOKI_EXP_LINTCMD="$lint_cmd" \
+        LOKI_EXP_ENTRY="$major_files" \
+        LOKI_EXP_MONOREPO="$is_monorepo" \
+        LOKI_EXP_DOCKER="$has_docker" \
         python3 -c "
-import json
+import json, os
+
+def _s(name):
+    return os.environ.get(name, '')
+
+def _list(name):
+    v = _s(name).strip()
+    return v.split() if v else []
+
+def _opt(name):
+    v = _s(name).strip()
+    return v or None
+
+def _int(name):
+    try:
+        return int(_s(name).strip())
+    except (ValueError, TypeError):
+        return 0
+
+def _bool(name):
+    return _s(name).strip() == 'true'
+
 data = {
-    'project': {'name': '$project_name', 'description': '''$(echo "$project_description" | sed "s/'/\\\\'/g")''', 'version': '$project_version', 'path': '$target_path'},
-    'stack': {'languages': '${languages}'.split() if '${languages}'.strip() else [], 'frameworks': '${frameworks}'.split() if '${frameworks}'.strip() else [], 'build_system': '$build_system' or None, 'package_manager': '$package_manager' or None, 'test_framework': '${test_framework}'.split() if '${test_framework}'.strip() else [], 'ci': '${ci_system}'.strip() or None},
-    'patterns': '${detected_patterns}'.split() if '${detected_patterns}'.strip() else [],
-    'files': {'total': $total_files, 'source': $src_count, 'test': $test_count, 'docs': $doc_count, 'config': $config_count},
-    'commands': {'build': '${build_cmd}' or None, 'run': '${run_cmd}' or None, 'test': '${test_cmd}' or None, 'lint': '${lint_cmd}' or None},
-    'entry_points': '${major_files}'.split() if '${major_files}'.strip() else [],
-    'monorepo': $( [ "$is_monorepo" = true ] && echo "True" || echo "False" ),
-    'has_docker': $( [ "$has_docker" = true ] && echo "True" || echo "False" )
+    'project': {'name': _s('LOKI_EXP_NAME'), 'description': _s('LOKI_EXP_DESC'), 'version': _s('LOKI_EXP_VERSION'), 'path': _s('LOKI_EXP_PATH')},
+    'stack': {'languages': _list('LOKI_EXP_LANGUAGES'), 'frameworks': _list('LOKI_EXP_FRAMEWORKS'), 'build_system': _opt('LOKI_EXP_BUILD'), 'package_manager': _opt('LOKI_EXP_PKGMGR'), 'test_framework': _list('LOKI_EXP_TESTFW'), 'ci': _opt('LOKI_EXP_CI')},
+    'patterns': _list('LOKI_EXP_PATTERNS'),
+    'files': {'total': _int('LOKI_EXP_TOTAL'), 'source': _int('LOKI_EXP_SRC'), 'test': _int('LOKI_EXP_TEST'), 'docs': _int('LOKI_EXP_DOC'), 'config': _int('LOKI_EXP_CONFIG')},
+    'commands': {'build': _opt('LOKI_EXP_BUILDCMD'), 'run': _opt('LOKI_EXP_RUNCMD'), 'test': _opt('LOKI_EXP_TESTCMD'), 'lint': _opt('LOKI_EXP_LINTCMD')},
+    'entry_points': _list('LOKI_EXP_ENTRY'),
+    'monorepo': _bool('LOKI_EXP_MONOREPO'),
+    'has_docker': _bool('LOKI_EXP_DOCKER')
 }
 print(json.dumps(data, indent=2))
 " 2>/dev/null || echo '{"error": "JSON generation failed"}'

package/autonomy/run.sh

@@ -1932,61 +1932,32 @@ get_provider_tier_param() {
 }
 
 #===============================================================================
-# Provider Spawn Timeout (v6.0.0)
-# Wraps provider invocation with timeout + retries.
-# Default: 120s timeout, 2 retries.
+# Provider Spawn Timeout (removed WAVE9 / provider-F2)
+#
+# A former invoke_with_timeout() helper (v6.0.0) wrapped a command in
+# `timeout <s> "$@"` with a retry loop. It was never wired to the main
+# provider invocation and is intentionally not revived, for two reasons:
+#
+#   1. No safe generous default. The main provider call is a long-running
+#      autonomous coding agent. Any fixed timeout short enough to catch a
+#      hang would also kill legitimate multi-minute iterations, and there is
+#      no "generous enough" value that is both safe and useful by default.
+#   2. Wrong retry semantics. The helper re-ran the same command on timeout.
+#      Re-running a coding agent mid-work (it may have already edited files)
+#      is actively harmful, not protective.
+#
+# The main invocation is also a pipeline (`claude | tee | python3`), which a
+# positional-arg `timeout "$@"` wrapper cannot wrap at all. Interrupting a
+# hung provider is handled by the SIGINT trap (kill_provider_child) instead.
+#
+# The `loki config spawn_timeout` / `spawn_retries` knobs (autonomy/loki) and
+# the config->env mapping in this file (`'spawn_timeout':'LOKI_SPAWN_TIMEOUT'`
+# in the config loader) still export LOKI_SPAWN_TIMEOUT / LOKI_SPAWN_RETRIES,
+# but nothing consumes them now. The mapping line is intentionally left in place
+# (a config-schema test may enumerate it); the full inert-knob removal spans
+# autonomy/loki too and is a separate cross-file follow-up.
 #===============================================================================
 
-PROVIDER_SPAWN_TIMEOUT=${LOKI_SPAWN_TIMEOUT:-120}
-PROVIDER_SPAWN_RETRIES=${LOKI_SPAWN_RETRIES:-2}
-
-# Invoke a command with timeout and retry logic
-# Usage: invoke_with_timeout <timeout_seconds> <retries> <command...>
-invoke_with_timeout() {
-    local timeout="$1"
-    local max_retries="$2"
-    shift 2
-
-    local attempt=0
-    while [ $attempt -le $max_retries ]; do
-        if [ $attempt -gt 0 ]; then
-            log_warn "Provider spawn retry $attempt/$max_retries..."
-        fi
-
-        local exit_code=0
-        # Use timeout command if available (GNU coreutils or macOS)
-        if command -v timeout &>/dev/null; then
-            timeout "$timeout" "$@"
-            exit_code=$?
-        elif command -v gtimeout &>/dev/null; then
-            gtimeout "$timeout" "$@"
-            exit_code=$?
-        else
-            # Fallback: no timeout wrapper, run directly
-            log_warn "timeout/gtimeout not available - running without timeout enforcement"
-            "$@"
-            exit_code=$?
-        fi
-
-        # Exit code 124 = timeout
-        if [ $exit_code -eq 124 ]; then
-            log_warn "Provider spawn timed out after ${timeout}s (attempt $((attempt+1))/$((max_retries+1)))"
-            ((attempt++))
-            continue
-        fi
-
-        return $exit_code
-    done
-
-    log_error "Provider spawn failed after $((max_retries+1)) attempts (timeout=${timeout}s)"
-    # Crash friction (retry_loop): provider spawn exhausted all retries -- a
-    # clear threshold (not a single retry). Best-effort, never blocks.
-    if type loki_crash_friction &>/dev/null; then
-        loki_crash_friction "retry_loop" "provider spawn failed after $((max_retries+1)) attempts" >/dev/null 2>&1 || true
-    fi
-    return 124
-}
-
 #===============================================================================
 # GitHub Integration Functions (v4.1.0)
 #===============================================================================
@@ -9978,6 +9949,16 @@ CPEOF
         find "$checkpoint_dir" -maxdepth 1 -type d -name "cp-*" 2>/dev/null \
             | while read -r p; do basename "$p"; done | sort -t'-' -k3 -n \
             | head -n "$to_remove" | while read -r old_cp; do
+            # WAVE9 (checkpoint leak): also delete the anchored worktree-snapshot
+            # ref so its stash commit becomes eligible for `git gc`. Without this,
+            # refs/loki/cp/<id> (and its commit) leaked forever even after the
+            # checkpoint directory was pruned. Targeted deletion of exactly the
+            # ids being pruned ONLY -- never a blanket refs/loki/cp/* sweep, since
+            # git refs are shared across worktrees of one repo while checkpoint
+            # dirs are per-TARGET_DIR; a parallel worktree may still need a ref we
+            # are not pruning here. `|| true` because not every checkpoint has a
+            # ref (only those where `git stash create` returned a non-empty sha).
+            git update-ref -d "refs/loki/cp/${old_cp}" 2>/dev/null || true
             old_cp="${checkpoint_dir}/${old_cp}"
             rm -rf "$old_cp" 2>/dev/null || true
         done
@@ -11492,7 +11473,11 @@ try:
     storage = MemoryStorage(f'{target_dir}/.loki/memory')
     retriever = MemoryRetrieval(storage)
     context = {'goal': goal, 'phase': phase}
-    results = retriever.retrieve_task_aware(context, top_k=3)
+    # The autonomous RARV loop opts into persist_boost so retrieved memories are
+    # reinforced on disk ("use it or lose it"). Manual surfaces (loki memory CLI,
+    # dashboard, MCP) keep the default persist_boost=False so a human browsing
+    # memories does not silently inflate their importance.
+    results = retriever.retrieve_task_aware(context, top_k=3, persist_boost=True)
     if results:
         print('RELEVANT MEMORIES:')
         for r in results[:3]:

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.67.0"
+__version__ = "7.68.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -8675,6 +8675,17 @@ def _get_migration_imports():
     return _migration_imports
 
 
+def _get_migration_terminal_phase():
+    """Return the last phase in the migration PHASE_ORDER (the terminal phase),
+    or None if the migration engine is unavailable. Used to let the terminal
+    phase be advanced/completed without a successor to_phase (WAVE9 F1)."""
+    try:
+        from dashboard.migration_engine import PHASE_ORDER
+        return PHASE_ORDER[-1] if PHASE_ORDER else None
+    except (ImportError, IndexError):
+        return None
+
+
 @app.get("/api/migration/list", dependencies=[Depends(auth.require_scope("read"))])
 def list_migrations_endpoint():
     """List all migrations."""
@@ -8825,7 +8836,16 @@ def advance_migration(migration_id: str, request_body: dict):
     MigrationPipeline, list_migrations = imports
     from_phase = request_body.get("from_phase")
     to_phase = request_body.get("to_phase")
-    if not from_phase or not to_phase:
+    # The terminal phase (the last in PHASE_ORDER, e.g. "verify") has no
+    # successor, so check_phase_gate can never pass for it and to_phase is
+    # meaningless. Without this carve-out the terminal phase could never be
+    # completed via the API, so overall_status could never reach "completed"
+    # (WAVE9 migration-F1). For the terminal phase we require only from_phase
+    # and skip the gate; advance_phase still validates the phase and the
+    # (ValueError, RuntimeError) -> 409 handler below preserves idempotency.
+    terminal_phase = _get_migration_terminal_phase()
+    is_terminal = terminal_phase is not None and from_phase == terminal_phase
+    if not from_phase or (not to_phase and not is_terminal):
         raise HTTPException(status_code=400, detail="from_phase and to_phase are required")
     # Load pipeline and check phase gate before the try/except to let
     # HTTPException and FileNotFoundError propagate naturally.
@@ -8833,9 +8853,10 @@ def advance_migration(migration_id: str, request_body: dict):
         pipeline = MigrationPipeline.load(migration_id)
     except FileNotFoundError:
         raise HTTPException(status_code=404, detail=f"Migration not found: {migration_id}")
-    passed, reason = pipeline.check_phase_gate(from_phase, to_phase)
-    if not passed:
-        raise HTTPException(status_code=409, detail=reason)
+    if not is_terminal:
+        passed, reason = pipeline.check_phase_gate(from_phase, to_phase)
+        if not passed:
+            raise HTTPException(status_code=409, detail=reason)
     try:
         result = pipeline.advance_phase(from_phase)
         return asdict(result) if hasattr(result, '__dataclass_fields__') else result

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.67.0
+**Version:** v7.68.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.67.0 start ./my-spec.md
+  asklokesh/loki-mode:7.68.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var t6=Object.defineProperty;var i6=($)=>$;function e6($,Q){this[$]=i6.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)t6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:e6.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var D1={};b(D1,{lokiDir:()=>j,homeLokiDir:()=>s$,findRepoRootForVersion:()=>a$,REPO_ROOT:()=>g});import{resolve as a,dirname as n$}from"path";import{fileURLToPath as $Q}from"url";import{existsSync as F$}from"fs";import{homedir as QQ}from"os";function ZQ(){let $=S1;for(let Q=0;Q<6;Q++){if(F$(a($,"VERSION"))&&F$(a($,"autonomy/run.sh")))return $;let Z=n$($);if(Z===$)break;$=Z}return a(S1,"..","..","..")}function a$($){let Q=$;for(let Z=0;Z<6;Z++){if(F$(a(Q,"VERSION"))&&F$(a(Q,"autonomy/run.sh")))return Q;let z=n$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function j(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function s$(){return a(QQ(),".loki")}var S1,g;var C=P(()=>{S1=n$($Q(import.meta.url));g=ZQ()});import{readFileSync as zQ}from"fs";import{resolve as XQ,dirname as KQ}from"path";import{fileURLToPath as qQ}from"url";function R$(){if(Q$!==null)return Q$;let $="7.67.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=KQ(qQ(import.meta.url)),Z=a$(Q);Q$=zQ(XQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var r$=P(()=>{C()});var b1={};b(b1,{runOrThrow:()=>VQ,run:()=>R,commandVersion:()=>WQ,commandExists:()=>f,ShellError:()=>t$});async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function VQ($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new t$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=JQ($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function JQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function WQ($,Q="--version"){if(!await f($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var t$;var d=P(()=>{t$=class t$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return UQ?"":$}var UQ,T,S,_,_Z,I,k,h,V;var c=P(()=>{UQ=(process.env.NO_COLOR??"").length>0;T=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as _Q}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(_Q($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var Y$;var V$=P(()=>{d()});var e1={};b(e1,{runStatus:()=>cQ});import{existsSync as y,readFileSync as W$,readdirSync as d1,statSync as o1}from"fs";import{resolve as D,basename as CQ}from"path";import{homedir as bQ}from"os";function n1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function a1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*x$/Q);if(X>x$)X=x$;let q=x$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=n1($),U=n1(Q);return`  ${k}${Z}${V} ${K}[${W}]${V} ${z}% (${J} / ${U})`}async function yQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${V}
+var t6=Object.defineProperty;var i6=($)=>$;function e6($,Q){this[$]=i6.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)t6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:e6.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var D1={};b(D1,{lokiDir:()=>j,homeLokiDir:()=>s$,findRepoRootForVersion:()=>a$,REPO_ROOT:()=>g});import{resolve as a,dirname as n$}from"path";import{fileURLToPath as $Q}from"url";import{existsSync as F$}from"fs";import{homedir as QQ}from"os";function ZQ(){let $=S1;for(let Q=0;Q<6;Q++){if(F$(a($,"VERSION"))&&F$(a($,"autonomy/run.sh")))return $;let Z=n$($);if(Z===$)break;$=Z}return a(S1,"..","..","..")}function a$($){let Q=$;for(let Z=0;Z<6;Z++){if(F$(a(Q,"VERSION"))&&F$(a(Q,"autonomy/run.sh")))return Q;let z=n$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function j(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function s$(){return a(QQ(),".loki")}var S1,g;var C=P(()=>{S1=n$($Q(import.meta.url));g=ZQ()});import{readFileSync as zQ}from"fs";import{resolve as XQ,dirname as KQ}from"path";import{fileURLToPath as qQ}from"url";function R$(){if(Q$!==null)return Q$;let $="7.68.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=KQ(qQ(import.meta.url)),Z=a$(Q);Q$=zQ(XQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var r$=P(()=>{C()});var b1={};b(b1,{runOrThrow:()=>VQ,run:()=>R,commandVersion:()=>WQ,commandExists:()=>f,ShellError:()=>t$});async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function VQ($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new t$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=JQ($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function JQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function WQ($,Q="--version"){if(!await f($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var t$;var d=P(()=>{t$=class t$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return UQ?"":$}var UQ,T,S,_,_Z,I,k,h,V;var c=P(()=>{UQ=(process.env.NO_COLOR??"").length>0;T=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as _Q}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(_Q($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var Y$;var V$=P(()=>{d()});var e1={};b(e1,{runStatus:()=>cQ});import{existsSync as y,readFileSync as W$,readdirSync as d1,statSync as o1}from"fs";import{resolve as D,basename as CQ}from"path";import{homedir as bQ}from"os";function n1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function a1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*x$/Q);if(X>x$)X=x$;let q=x$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=n1($),U=n1(Q);return`  ${k}${Z}${V} ${K}[${W}]${V} ${z}% (${J} / ${U})`}async function yQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${V}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -793,4 +793,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(r6),2}}l1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var qZ=await KZ(Bun.argv.slice(2));process.exit(qZ);
 
-//# debugId=E02AAB86B1B0FD5664756E2164756E21
+//# debugId=33EB4AF09F8F2C5564756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.67.0'
+__version__ = '7.68.0'

package/memory/consolidation.py

@@ -839,6 +839,20 @@ class ConsolidationPipeline:
         if best_match is None or best_similarity < 0.5:
             return new_pattern
 
+        # Idempotency guard (consolidation-C4): only boost confidence when the
+        # merge actually introduces NEW evidence. consolidate() reloads every
+        # episode in the since-window on each run (storage.list_episodes has no
+        # consolidated-state filter), so re-running over an unchanged episode set
+        # re-extracts identical patterns that re-match this existing pattern. A
+        # flat +0.05 every time would ratchet confidence up artificially with no
+        # new data. Comparing source_episodes (which round-trips through storage)
+        # makes the merge a no-op for confidence when no new source episode is
+        # present, while still rewarding a genuinely new similar episode.
+        new_source_episodes = (
+            set(new_pattern.source_episodes) - set(best_match.source_episodes)
+        )
+        confidence_boost = 0.05 if new_source_episodes else 0.0
+
         # Merge patterns
         merged = SemanticPattern(
             id=best_match.id,
@@ -847,7 +861,7 @@ class ConsolidationPipeline:
             conditions=list(set(best_match.conditions + new_pattern.conditions)),
             correct_approach=best_match.correct_approach or new_pattern.correct_approach,
             incorrect_approach=best_match.incorrect_approach or new_pattern.incorrect_approach,
-            confidence=min(best_match.confidence + 0.05, 0.99),
+            confidence=min(best_match.confidence + confidence_boost, 0.99),
             source_episodes=list(set(best_match.source_episodes + new_pattern.source_episodes)),
             usage_count=best_match.usage_count,
             last_used=best_match.last_used,

package/memory/retrieval.py

@@ -414,6 +414,7 @@ class MemoryRetrieval:
         context: Dict[str, Any],
         top_k: int = 5,
         token_budget: Optional[int] = None,
+        persist_boost: bool = False,
     ) -> List[Dict[str, Any]]:
         """
         Retrieve memories with task-type-aware weighting.
@@ -427,6 +428,12 @@ class MemoryRetrieval:
             token_budget: Optional maximum token budget for returned memories.
                          If specified, results will be optimized to fit within
                          this budget using importance/recency/relevance scoring.
+            persist_boost: When True, persist the retrieval-time importance boost
+                         to disk ("use it or lose it" reinforcement). Default
+                         False so manual/on-demand retrievals (dashboard, MCP)
+                         do NOT silently reinforce importance; only the autonomous
+                         RARV loop opts in. The in-memory boost that shapes the
+                         returned ranking is applied either way.
 
         Returns:
             List of memory items with source field indicating origin
@@ -476,10 +483,20 @@ class MemoryRetrieval:
         # Apply recency boost
         merged = self._apply_recency_boost(merged, boost_factor=0.1)
 
-        # Boost importance for retrieved memories (use it or lose it)
+        # Boost importance for retrieved memories (use it or lose it). The
+        # in-memory boost shapes the returned ranking; persist_boost writes the
+        # reinforcement to disk (retrieval-F1: boost_on_retrieval alone never
+        # persisted). Persistence is best-effort: a locked/missing record must
+        # never break retrieval, so failures are swallowed (mirrors other
+        # best-effort writes).
         if hasattr(self.storage, 'boost_on_retrieval'):
             for memory in merged[:top_k]:
                 self.storage.boost_on_retrieval(memory, boost=0.05)
+                if persist_boost and hasattr(self.storage, 'persist_boost'):
+                    try:
+                        self.storage.persist_boost(memory, boost=0.05)
+                    except Exception:
+                        pass
 
         # Apply token budget optimization if specified
         if token_budget is not None and token_budget > 0:

package/memory/storage.py

@@ -1383,6 +1383,142 @@ class MemoryStorage:
 
         return memory
 
+    def persist_boost(
+        self,
+        memory: Dict[str, Any],
+        boost: float = 0.1,
+    ) -> bool:
+        """
+        Persist a retrieval-time boost to disk ("use it or lose it").
+
+        boost_on_retrieval mutates an in-memory dict only; without this the
+        stored importance/access_count never rises, so repeated retrieval can
+        never reinforce a memory against decay (retrieval-F1). This method
+        applies the SAME boost math to the record as it currently exists on
+        disk, under one exclusive _file_lock spanning a FRESH read -> mutate
+        -> _atomic_write (mirrors _decay_episodic / _decay_semantic).
+
+        Race-safety: the boost is applied to the freshly-read record, NOT to
+        the passed-in `memory` dict. So a concurrent content edit landed by
+        another writer is preserved (we only overwrite importance,
+        access_count, last_accessed), and no retrieval-only transient fields
+        (_score, _source, _collection) leak into the stored record. This is
+        the lost-update-safe pattern WAVE6 established for decay.
+
+        Keyed by memory["id"] and the collection marker retrieval attaches
+        (_source, falling back to _collection). Covers episodic (per-file) and
+        semantic patterns.json. Collections without an updater degrade
+        gracefully (return False, no crash):
+          - skills are keyed on disk by name, not id, so an id-keyed boost
+            cannot reliably target the file; skipped honestly.
+          - the legacy semantic/anti-patterns.json store has NO updater
+            anywhere in this module, so there is nothing to write back to;
+            skipped honestly rather than fabricating a writer.
+
+        Args:
+            memory: A retrieved memory dict (must carry "id" and a source
+                marker). The dict itself is not written to disk.
+            boost: Amount to boost importance (default 0.1).
+
+        Returns:
+            True if a record was found and persisted, False otherwise.
+        """
+        memory_id = memory.get("id")
+        if not memory_id:
+            return False
+
+        source = memory.get("_source") or memory.get("_collection") or ""
+
+        if source == "episodic":
+            return self._persist_boost_episodic(str(memory_id), boost)
+        if source == "semantic":
+            return self._persist_boost_semantic(str(memory_id), boost)
+
+        # skills (keyed by name on disk) and the legacy anti-patterns.json
+        # store (no updater exists in this module) cannot be safely targeted
+        # by an id-keyed boost; skip rather than fabricate a writer.
+        return False
+
+    def _persist_boost_episodic(self, memory_id: str, boost: float) -> bool:
+        """Apply and persist a boost to one episodic record, keyed by id.
+
+        Locates the per-file record (task-<id>.json across date dirs) then does
+        a lock-spanning fresh-read -> boost -> atomic-write, mirroring
+        _decay_episodic. The id is sanitized exactly as save_episode does so a
+        sanitized-on-write filename is still found.
+        """
+        episodic_dir = self.base_path / "episodic"
+        if not episodic_dir.exists():
+            return False
+
+        safe_id = "".join(
+            c if c.isalnum() or c in "-_" else "_"
+            for c in memory_id
+        )
+
+        for date_dir in episodic_dir.iterdir():
+            if not date_dir.is_dir():
+                continue
+            file_path = date_dir / f"task-{safe_id}.json"
+            if not file_path.exists():
+                continue
+
+            # One exclusive lock spanning read-mutate-write. boost_on_retrieval
+            # mutates the freshly-read record in place (importance/access_count/
+            # last_accessed only), so a concurrent content edit on disk is
+            # preserved. _atomic_write re-enters the same reentrant lock.
+            with self._file_lock(file_path, exclusive=True):
+                if not file_path.exists():
+                    return False
+                try:
+                    with open(file_path, "r", encoding="utf-8") as f:
+                        data = json.load(f)
+                except (json.JSONDecodeError, OSError, UnicodeDecodeError):
+                    return False
+                if not data:
+                    return False
+                self.boost_on_retrieval(data, boost=boost)
+                self._atomic_write(file_path, data)
+            return True
+
+        return False
+
+    def _persist_boost_semantic(self, memory_id: str, boost: float) -> bool:
+        """Apply and persist a boost to one semantic pattern, keyed by id.
+
+        Patterns live in a single semantic/patterns.json list. Lock-spanning
+        fresh read -> boost the matching entry -> atomic write, mirroring
+        _decay_semantic / save_pattern.
+        """
+        patterns_path = self.base_path / "semantic" / "patterns.json"
+        if not patterns_path.exists():
+            return False
+
+        with self._file_lock(patterns_path, exclusive=True):
+            if not patterns_path.exists():
+                return False
+            try:
+                with open(patterns_path, "r", encoding="utf-8") as f:
+                    patterns_file = json.load(f)
+            except (json.JSONDecodeError, OSError, UnicodeDecodeError):
+                return False
+            if not patterns_file:
+                return False
+
+            patterns = patterns_file.get("patterns", [])
+            for pattern in patterns:
+                if not isinstance(pattern, dict):
+                    continue
+                if pattern.get("id") == memory_id:
+                    self.boost_on_retrieval(pattern, boost=boost)
+                    patterns_file["last_updated"] = datetime.now(
+                        timezone.utc
+                    ).isoformat()
+                    self._atomic_write(patterns_path, patterns_file)
+                    return True
+
+        return False
+
     def batch_apply_decay(
         self,
         collection: str = "all",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.67.0",
+  "version": "7.68.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.67.0",
+  "version": "7.68.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",