loki-mode 7.7.13 → 7.7.15

package/SKILL.md

@@ -3,15 +3,15 @@ name: loki-mode
 description: Multi-agent autonomous startup system. Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.7.13
+# Loki Mode v7.7.15
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
 **Spec in, product out.** A "spec" is whatever describes the work: a Markdown PRD, a GitHub issue, an OpenAPI doc, a Jira ticket -- a PRD is one form of spec.
 
-**Multi-provider (stable since v5.0.0):** Claude/Codex/Cline/Aider with abstract model tiers and degraded mode for non-Claude providers. See `skills/providers.md`. **Current track (v7.5.x):** Phase 1 RARV-C closure -- real provider judges, gate-failure flock, synthetic PRD e2e, status `--json`, dead code cleanup.
+**Multi-provider (stable since v5.0.0):** Claude/Codex/Cline/Aider with abstract model tiers and degraded mode for non-Claude providers. Gemini deprecated v7.5.18. See `skills/providers.md`. **Current track (v7.7.x):** LSP grounding as first-class agent tool (v7.7.0-v7.7.9; lsp_get_diagnostics actually-returns-diagnostics regression fix v7.7.14), provider_source cli (v7.7.11-v7.7.12 bash/bun parity), Docker/bash-3.2 robustness (v7.7.13), audit chain cross-file verification fix (v7.7.15), Phase 1 RARV-C closure (real provider judges, gate-failure flock, synthetic PRD e2e, status `--json`).
 
-**Runtime migration in progress:** A bash-to-Bun migration is underway on the `feat/bun-migration` branch. The first phase (shipped in v7.3.0) routes a small set of read-only commands -- `version`, `status`, `stats`, `doctor`, `provider show/list`, `memory list/index` -- through a Bun runtime via `bin/loki`. Every other command remains on the Bash runtime (`autonomy/loki`). Rollback is available with `LOKI_LEGACY_BASH=1`. See `UPGRADING.md` and `docs/architecture/ADR-001-runtime-migration.md` for the full plan.
+**Runtime migration:** Bash-to-Bun migration. Read-only commands (`version`, `status`, `stats`, `doctor`, `provider show/list`, `memory list/index`) flow through Bun runtime via `bin/loki` since v7.3.0. Every other command remains on the Bash runtime (`autonomy/loki`). Rollback: `LOKI_LEGACY_BASH=1`. See `UPGRADING.md` and `docs/architecture/ADR-001-runtime-migration.md`.
 
 ---
 
@@ -381,4 +381,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.7.13 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.7.15 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.7.13
+7.7.15

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.7.13"
+__version__ = "7.7.15"
 
 # Expose the control app for easy import
 try:

package/dashboard/api_v2.py

@@ -541,24 +541,47 @@ async def query_audit_logs(
 
 @router.get("/audit/verify", dependencies=[Depends(auth.require_scope("audit"))])
 async def verify_audit_integrity():
-    """Verify audit log integrity across all log files."""
-    if not audit.AUDIT_DIR.exists():
-        return {"valid": True, "files_checked": 0, "results": []}
-
-    log_files = sorted(audit.AUDIT_DIR.glob("audit-*.jsonl"))
+    """Verify audit log integrity across all log files.
+
+    v7.7.15 (council fix): delegates to `audit.verify_all_logs()` which
+    threads the chain hash across rotated daily files. The previous
+    per-file loop always started each file from genesis "0"*64, so any
+    log file beyond the first ever rotated false-negatived. Per-file
+    breakdown still returned alongside the aggregate verdict for
+    operator visibility.
+    """
+    aggregate = audit.verify_all_logs()
+
+    # Per-file breakdown for operator visibility (sorted by mtime
+    # to match the aggregate chain-walk order)
     results = []
-    all_valid = True
-
-    for log_file in log_files:
-        result = audit.verify_log_integrity(str(log_file))
-        result["file"] = log_file.name
-        results.append(result)
-        if not result["valid"]:
-            all_valid = False
+    if audit.AUDIT_DIR.exists():
+        log_files = sorted(audit.AUDIT_DIR.glob("audit-*.jsonl"),
+                          key=lambda p: p.stat().st_mtime)
+        prev_hash = "0" * 64
+        for log_file in log_files:
+            if not audit._file_has_integrity(str(log_file)):
+                results.append({
+                    "file": log_file.name,
+                    "valid": True,
+                    "skipped_pre_integrity": True,
+                    "entries_checked": 0,
+                })
+                continue
+            r = audit.verify_log_integrity(str(log_file), start_hash=prev_hash)
+            r["file"] = log_file.name
+            results.append(r)
+            if r.get("valid"):
+                prev_hash = r.get("last_hash", prev_hash)
 
     return {
-        "valid": all_valid,
-        "files_checked": len(log_files),
+        "valid": aggregate["valid"],
+        "files_checked": aggregate["files_checked"],
+        "files_skipped": aggregate.get("files_skipped", 0),
+        "entries_checked": aggregate.get("entries_checked", 0),
+        "genesis_file": aggregate.get("genesis_file"),
+        "first_tampered_file": aggregate.get("first_tampered_file"),
+        "first_tampered_line": aggregate.get("first_tampered_line"),
         "results": results,
     }
 

package/dashboard/audit.py

@@ -408,15 +408,27 @@ def is_audit_enabled() -> bool:
     return ENTERPRISE_AUDIT_ENABLED
 
 
-def verify_log_integrity(log_file: str) -> dict:
+def verify_log_integrity(log_file: str, start_hash: Optional[str] = None) -> dict:
     """Verify the integrity chain of a JSONL audit log file.
 
-    Reads each line, recomputes the chain hash from the genesis hash,
-    and compares it to the stored _integrity_hash. If any entry has been
-    tampered with, all subsequent hashes will also fail to match.
+    Reads each line, recomputes the chain hash, and compares to the
+    stored _integrity_hash. If any entry has been tampered with, all
+    subsequent hashes will also fail to match.
+
+    v7.7.15 fix: now accepts an optional `start_hash`. Audit logs rotate
+    daily and `_recover_last_hash()` carries the chain across file
+    boundaries at WRITE time. Without `start_hash`, verifying any log
+    file beyond the first-ever produces a false-negative (the file's
+    first entry was hashed against the PREVIOUS file's last hash, not
+    against the genesis "0"*64). Pass the previous file's final hash to
+    verify correctly, or use the new `verify_all_logs()` wrapper to
+    verify the entire chain across all rotated files.
 
     Args:
         log_file: Path to the JSONL audit log file to verify.
+        start_hash: Optional 64-hex starting hash for the chain. If
+            omitted, uses the genesis hash "0"*64 (correct only for the
+            very first audit log ever created on this machine).
 
     Returns:
         A dict with:
@@ -424,8 +436,10 @@ def verify_log_integrity(log_file: str) -> dict:
           - entries_checked (int): Number of entries verified.
           - first_tampered_line (int | None): 1-based line number of the
             first entry where the hash chain broke, or None if valid.
+          - last_hash (str): The final hash in this file (caller chains
+            this into the next file's verification).
     """
-    prev_hash = "0" * 64  # Genesis hash
+    prev_hash = start_hash if start_hash is not None else ("0" * 64)
     entries_checked = 0
 
     try:
@@ -442,6 +456,7 @@ def verify_log_integrity(log_file: str) -> dict:
                         "valid": False,
                         "entries_checked": entries_checked,
                         "first_tampered_line": line_num,
+                        "last_hash": prev_hash,
                     }
 
                 stored_hash = entry.pop("_integrity_hash", None)
@@ -451,6 +466,7 @@ def verify_log_integrity(log_file: str) -> dict:
                         "valid": False,
                         "entries_checked": entries_checked,
                         "first_tampered_line": line_num,
+                        "last_hash": prev_hash,
                     }
 
                 entry_json = json.dumps(entry, sort_keys=True, default=str)
@@ -461,12 +477,108 @@ def verify_log_integrity(log_file: str) -> dict:
                         "valid": False,
                         "entries_checked": entries_checked,
                         "first_tampered_line": line_num,
+                        "last_hash": prev_hash,
                     }
 
                 prev_hash = stored_hash
                 entries_checked += 1
 
     except FileNotFoundError:
-        return {"valid": True, "entries_checked": 0, "first_tampered_line": None}
+        return {"valid": True, "entries_checked": 0, "first_tampered_line": None,
+                "last_hash": prev_hash}
+
+    # Normal exit (no rows or all rows passed): valid + carry last_hash forward
+    return {"valid": True, "entries_checked": entries_checked,
+            "first_tampered_line": None, "last_hash": prev_hash}
+
 
-    return {"valid": True, "entries_checked": entries_checked, "first_tampered_line": None}
+def _file_has_integrity(log_file: str) -> bool:
+    """Return True iff the first non-empty entry in `log_file` has an
+    `_integrity_hash` field. Used by `verify_all_logs` to skip
+    pre-integrity-era files entirely (integrity hashing was introduced
+    after some audit logs already existed)."""
+    try:
+        with open(log_file, "r") as f:
+            for line in f:
+                line = line.strip()
+                if not line:
+                    continue
+                try:
+                    entry = json.loads(line)
+                except json.JSONDecodeError:
+                    return False
+                return "_integrity_hash" in entry
+    except OSError:
+        return False
+    return False
+
+
+def verify_all_logs() -> dict:
+    """v7.7.15: verify the entire audit chain across all rotated log files.
+
+    Walks `AUDIT_DIR/audit-*.jsonl` in chronological order, threading
+    the chain hash from one file to the next via `start_hash`. Skips
+    files from the pre-integrity era (files whose first entry has no
+    `_integrity_hash` field, because integrity hashing was introduced
+    after some audit logs already existed).
+
+    Returns:
+        A dict with:
+          - valid (bool): True if the entire cross-file chain is intact.
+          - files_checked (int): Count of integrity-bearing files inspected.
+          - files_skipped (int): Count of pre-integrity files skipped.
+          - entries_checked (int): Total entries verified across all files.
+          - first_tampered_file (str | None): Path to the first file
+            whose chain broke, or None if valid.
+          - first_tampered_line (int | None): 1-based line number in
+            that file where the chain broke, or None if valid.
+          - genesis_file (str | None): Path to the first integrity-bearing
+            log file (the chain's genesis on this machine), or None if
+            no integrity-bearing files exist.
+    """
+    if not AUDIT_DIR.exists():
+        return {"valid": True, "files_checked": 0, "files_skipped": 0,
+                "entries_checked": 0, "first_tampered_file": None,
+                "first_tampered_line": None, "genesis_file": None}
+    # v7.7.15 council fix (Opus 2): rotated files have name shape
+    # `audit-YYYY-MM-DD.HHMMSS.jsonl` (from `_rotate_logs_if_needed` at
+    # line 167). Lexicographic sort puts `audit-2026-05-04.123456.jsonl`
+    # BEFORE `audit-2026-05-04.jsonl` (because `.1` < `.j` ASCII), which
+    # would break chain ordering and false-negative on any user who hit
+    # size-based rotation. Sort by mtime instead -- mirrors what
+    # `_cleanup_old_logs` already does at line 178.
+    files = sorted(AUDIT_DIR.glob("audit-*.jsonl"), key=lambda p: p.stat().st_mtime)
+    prev_hash = "0" * 64
+    total_entries = 0
+    files_checked = 0
+    files_skipped = 0
+    genesis_file = None
+    for log_file in files:
+        if genesis_file is None and not _file_has_integrity(str(log_file)):
+            files_skipped += 1
+            continue
+        if genesis_file is None:
+            genesis_file = str(log_file)
+        result = verify_log_integrity(str(log_file), start_hash=prev_hash)
+        files_checked += 1
+        total_entries += result.get("entries_checked", 0)
+        if not result.get("valid", False):
+            return {
+                "valid": False,
+                "files_checked": files_checked,
+                "files_skipped": files_skipped,
+                "entries_checked": total_entries,
+                "first_tampered_file": str(log_file),
+                "first_tampered_line": result.get("first_tampered_line"),
+                "genesis_file": genesis_file,
+            }
+        prev_hash = result.get("last_hash", prev_hash)
+    return {
+        "valid": True,
+        "files_checked": files_checked,
+        "files_skipped": files_skipped,
+        "entries_checked": total_entries,
+        "first_tampered_file": None,
+        "first_tampered_line": None,
+        "genesis_file": genesis_file,
+    }

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.7.13
+**Version:** v7.7.15
 
 ---
 

package/docs/plans/UT2-6-LSP-DIAGNOSTIC-BROADCAST.md

@@ -34,6 +34,18 @@ So v1 keeps the N-process model and adds a publish/subscribe channel. v2 (out of
 
 ## 3. Prerequisite: fix the orphan `pending_diagnostics` reference
 
+> **UPDATE 2026-05-27 (v7.7.14):** RESOLVED. The fix described below
+> shipped in v7.7.14. `LSPClient` now spawns a dedicated daemon reader
+> thread at end of `start()` that owns `proc.stdout`, routes responses
+> by id to per-request `Queue`s, and routes `publishDiagnostics` into
+> `self.pending_diagnostics`. `request()` parks on its Queue instead
+> of reading stdout. Re-spawn after crash drains old reader cleanly.
+> Reader-death drain pushes error sentinel to all pending waiters.
+> See `mcp/lsp_proxy.py` and `tests/test-lsp-diagnostics-regression.sh`
+> (5/5 PASS). The broadcast layer described in sections 4-13 can now
+> be built on top of a working reader. The section below is kept for
+> historical context.
+
 `lsp_proxy.py` line 867 (in `lsp_get_diagnostics`) reads:
 
 ```python

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var _7=Object.defineProperty;var I7=(K)=>K;function P7(K,$){this[K]=I7.bind(null,$)}var b=(K,$)=>{for(var z in $)_7(K,z,{get:$[z],enumerable:!0,configurable:!0,set:P7.bind($,z)})};var R=(K,$)=>()=>(K&&($=K(K=0)),$);var V1=import.meta.require;var e1={};b(e1,{lokiDir:()=>P,homeLokiDir:()=>k1,findRepoRootForVersion:()=>N1,REPO_ROOT:()=>p});import{resolve as u,dirname as S1}from"path";import{fileURLToPath as L7}from"url";import{existsSync as J1}from"fs";import{homedir as R7}from"os";function E7(){let K=i1;for(let $=0;$<6;$++){if(J1(u(K,"VERSION"))&&J1(u(K,"autonomy/run.sh")))return K;let z=S1(K);if(z===K)break;K=z}return u(i1,"..","..","..")}function N1(K){let $=K;for(let z=0;z<6;z++){if(J1(u($,"VERSION"))&&J1(u($,"autonomy/run.sh")))return $;let Q=S1($);if(Q===$)break;$=Q}return u(K,"..","..","..")}function P(){return process.env.LOKI_DIR??u(process.cwd(),".loki")}function k1(){return u(R7(),".loki")}var i1,p;var y=R(()=>{i1=S1(L7(import.meta.url));p=E7()});import{readFileSync as x7}from"fs";import{resolve as F7,dirname as w7}from"path";import{fileURLToPath as S7}from"url";function G1(){if(n!==null)return n;let K="7.7.13";if(typeof K==="string"&&K.length>0)return n=K,n;try{let $=w7(S7(import.meta.url)),z=N1($);n=x7(F7(z,"VERSION"),"utf-8").trim()}catch{n="unknown"}return n}var n=null;var D1=R(()=>{y()});var $0={};b($0,{runOrThrow:()=>N7,run:()=>S,commandVersion:()=>D7,commandExists:()=>D,ShellError:()=>C1});async function S(K,$={}){let z=Bun.spawn({cmd:[...K],stdout:"pipe",stderr:"pipe",env:$.env?{...process.env,...$.env}:process.env,cwd:$.cwd}),Q,X;if($.timeoutMs&&$.timeoutMs>0)Q=setTimeout(()=>{try{z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{z.kill("SIGKILL")}catch{}},2000)},$.timeoutMs);try{let[H,Z,q]=await Promise.all([new Response(z.stdout).text(),new Response(z.stderr).text(),z.exited]);return{stdout:H,stderr:Z,exitCode:q}}finally{if(Q)clearTimeout(Q);if(X)clearTimeout(X)}}async function N7(K,$={}){let z=await S(K,$);if(z.exitCode!==0)throw new C1(`command failed (${z.exitCode}): ${K.join(" ")}`,z.exitCode,z.stdout,z.stderr);return z}async function D(K){let $=k7(K),z=await S(["sh","-c",`command -v ${$}`],{timeoutMs:5000});if(z.exitCode===0)return z.stdout.trim()||null;return null}function k7(K){if(!/^[A-Za-z0-9._/-]+$/.test(K))throw Error(`refused to shell-escape suspect token: ${K}`);return K}async function D7(K,$="--version"){if(!await D(K))return null;let Q=await S([K,$],{timeoutMs:5000});if(Q.exitCode!==0)return null;return((Q.stdout||Q.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var C1;var c=R(()=>{C1=class C1 extends Error{message;exitCode;stdout;stderr;constructor(K,$,z,Q){super(K);this.message=K;this.exitCode=$;this.stdout=z;this.stderr=Q;this.name="ShellError"}}});function l(K){return C7?"":K}var C7,E,C,x,O6,O,k,F,W;var a=R(()=>{C7=(process.env.NO_COLOR??"").length>0;E=l("\x1B[0;31m"),C=l("\x1B[0;32m"),x=l("\x1B[1;33m"),O6=l("\x1B[0;34m"),O=l("\x1B[0;36m"),k=l("\x1B[1m"),F=l("\x1B[2m"),W=l("\x1B[0m")});import{existsSync as c7}from"fs";async function t(){if(z1!==void 0)return z1;let K="/opt/homebrew/bin/python3.12";if(c7(K))return z1=K,K;let $=await D("python3.12");if($)return z1=$,$;let z=await D("python3");return z1=z,z}async function s(K,$={}){let z=await t();if(!z)return{stdout:"",stderr:"python3 not found",exitCode:127};return S([z,"-c",K],$)}var z1;var Q1=R(()=>{c()});var G0={};b(G0,{runStatus:()=>z5});import{existsSync as N,readFileSync as Z1,readdirSync as H0,statSync as W0}from"fs";import{resolve as w,basename as a7}from"path";async function r7(){if(await D("jq"))return!0;return process.stdout.write(`${E}Error: jq is required but not installed.${W}
+var _7=Object.defineProperty;var I7=(K)=>K;function P7(K,$){this[K]=I7.bind(null,$)}var b=(K,$)=>{for(var z in $)_7(K,z,{get:$[z],enumerable:!0,configurable:!0,set:P7.bind($,z)})};var R=(K,$)=>()=>(K&&($=K(K=0)),$);var V1=import.meta.require;var e1={};b(e1,{lokiDir:()=>P,homeLokiDir:()=>k1,findRepoRootForVersion:()=>N1,REPO_ROOT:()=>p});import{resolve as u,dirname as S1}from"path";import{fileURLToPath as L7}from"url";import{existsSync as J1}from"fs";import{homedir as R7}from"os";function E7(){let K=i1;for(let $=0;$<6;$++){if(J1(u(K,"VERSION"))&&J1(u(K,"autonomy/run.sh")))return K;let z=S1(K);if(z===K)break;K=z}return u(i1,"..","..","..")}function N1(K){let $=K;for(let z=0;z<6;z++){if(J1(u($,"VERSION"))&&J1(u($,"autonomy/run.sh")))return $;let Q=S1($);if(Q===$)break;$=Q}return u(K,"..","..","..")}function P(){return process.env.LOKI_DIR??u(process.cwd(),".loki")}function k1(){return u(R7(),".loki")}var i1,p;var y=R(()=>{i1=S1(L7(import.meta.url));p=E7()});import{readFileSync as x7}from"fs";import{resolve as F7,dirname as w7}from"path";import{fileURLToPath as S7}from"url";function G1(){if(n!==null)return n;let K="7.7.15";if(typeof K==="string"&&K.length>0)return n=K,n;try{let $=w7(S7(import.meta.url)),z=N1($);n=x7(F7(z,"VERSION"),"utf-8").trim()}catch{n="unknown"}return n}var n=null;var D1=R(()=>{y()});var $0={};b($0,{runOrThrow:()=>N7,run:()=>S,commandVersion:()=>D7,commandExists:()=>D,ShellError:()=>C1});async function S(K,$={}){let z=Bun.spawn({cmd:[...K],stdout:"pipe",stderr:"pipe",env:$.env?{...process.env,...$.env}:process.env,cwd:$.cwd}),Q,X;if($.timeoutMs&&$.timeoutMs>0)Q=setTimeout(()=>{try{z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{z.kill("SIGKILL")}catch{}},2000)},$.timeoutMs);try{let[H,Z,q]=await Promise.all([new Response(z.stdout).text(),new Response(z.stderr).text(),z.exited]);return{stdout:H,stderr:Z,exitCode:q}}finally{if(Q)clearTimeout(Q);if(X)clearTimeout(X)}}async function N7(K,$={}){let z=await S(K,$);if(z.exitCode!==0)throw new C1(`command failed (${z.exitCode}): ${K.join(" ")}`,z.exitCode,z.stdout,z.stderr);return z}async function D(K){let $=k7(K),z=await S(["sh","-c",`command -v ${$}`],{timeoutMs:5000});if(z.exitCode===0)return z.stdout.trim()||null;return null}function k7(K){if(!/^[A-Za-z0-9._/-]+$/.test(K))throw Error(`refused to shell-escape suspect token: ${K}`);return K}async function D7(K,$="--version"){if(!await D(K))return null;let Q=await S([K,$],{timeoutMs:5000});if(Q.exitCode!==0)return null;return((Q.stdout||Q.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var C1;var c=R(()=>{C1=class C1 extends Error{message;exitCode;stdout;stderr;constructor(K,$,z,Q){super(K);this.message=K;this.exitCode=$;this.stdout=z;this.stderr=Q;this.name="ShellError"}}});function l(K){return C7?"":K}var C7,E,C,x,O6,O,k,F,W;var a=R(()=>{C7=(process.env.NO_COLOR??"").length>0;E=l("\x1B[0;31m"),C=l("\x1B[0;32m"),x=l("\x1B[1;33m"),O6=l("\x1B[0;34m"),O=l("\x1B[0;36m"),k=l("\x1B[1m"),F=l("\x1B[2m"),W=l("\x1B[0m")});import{existsSync as c7}from"fs";async function t(){if(z1!==void 0)return z1;let K="/opt/homebrew/bin/python3.12";if(c7(K))return z1=K,K;let $=await D("python3.12");if($)return z1=$,$;let z=await D("python3");return z1=z,z}async function s(K,$={}){let z=await t();if(!z)return{stdout:"",stderr:"python3 not found",exitCode:127};return S([z,"-c",K],$)}var z1;var Q1=R(()=>{c()});var G0={};b(G0,{runStatus:()=>z5});import{existsSync as N,readFileSync as Z1,readdirSync as H0,statSync as W0}from"fs";import{resolve as w,basename as a7}from"path";async function r7(){if(await D("jq"))return!0;return process.stdout.write(`${E}Error: jq is required but not installed.${W}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -584,4 +584,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${$}
 `),process.stderr.write(j7),2}}process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var z6=await $6(Bun.argv.slice(2));process.exit(z6);
 
-//# debugId=4CE70B20232D2D2D64756E2164756E21
+//# debugId=E61F640A3343E84664756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.7.13'
+__version__ = '7.7.15'

package/mcp/lsp_proxy.py

@@ -43,6 +43,7 @@ import importlib.util
 import json
 import logging
 import os
+import queue
 import shutil
 import signal
 import site
@@ -249,13 +250,54 @@ class LSPClient:
         self._opened_uris: set = set()
         self._lock = threading.Lock()
         self._initialized = False
+        # v7.7.14 LSP regression fix (was broken since v7.7.0):
+        # publishDiagnostics notifications were dropped by request()'s
+        # busy-read loop. Now a dedicated reader thread (spawned at end
+        # of start()) owns proc.stdout, routes responses to per-request
+        # Queues, and routes `textDocument/publishDiagnostics` into
+        # `pending_diagnostics`. See docs/plans/UT2-6-LSP-DIAGNOSTIC-
+        # BROADCAST.md section 3 for the prior root-cause analysis.
+        self.pending_diagnostics: Dict[str, List[Dict[str, Any]]] = {}
+        self._response_queues: Dict[int, "queue.Queue[Dict[str, Any]]"] = {}
+        self._response_lock = threading.Lock()
+        self._reader_thread: Optional[threading.Thread] = None
+        self._reader_stop = threading.Event()
 
     def start(self) -> None:
         """Spawn the subprocess and perform the LSP `initialize` +
         `initialized` handshake. Idempotent: re-calling start() on an
-        already-initialized client is a no-op."""
+        already-initialized client is a no-op. If the subprocess died,
+        re-spawn cleanly: stop and join the previous reader thread first
+        to avoid leaking threads against a dead pipe.
+        """
         if self._initialized and self.proc and self.proc.poll() is None:
             return
+        # v7.7.14 (Opus 2 council fix): re-spawn after crash must not leak
+        # the previous reader thread. Signal stop + join with timeout, then
+        # reset routing state so the new reader starts clean.
+        if self._reader_thread and self._reader_thread.is_alive():
+            self._reader_stop.set()
+            # Close stale stdout to unblock the reader's _read_lsp() if any
+            try:
+                if self.proc and self.proc.stdout:
+                    self.proc.stdout.close()
+            except OSError:
+                pass
+            self._reader_thread.join(timeout=1.0)
+            self._reader_thread = None
+        # Drain any pending response waiters from the previous incarnation;
+        # they would otherwise hang for the full request() timeout.
+        with self._response_lock:
+            for waiter in self._response_queues.values():
+                try:
+                    waiter.put_nowait({'error': {'message': 'LSP restarted; request abandoned'}})
+                except queue.Full:
+                    pass
+            self._response_queues.clear()
+        with self._lock:
+            self.pending_diagnostics.clear()
+        self._opened_uris.clear()
+        self._initialized = False
         cmd = [self.binary_path] + self.extra_args
         self.proc = subprocess.Popen(
             cmd,
@@ -299,8 +341,89 @@ class LSPClient:
             'params': {},
         })
         self._initialized = True
+        # v7.7.14 fix: spawn the notification-reader thread AFTER the
+        # synchronous initialize handshake completes. From this point on,
+        # all reads from proc.stdout go through `_reader_loop`; request()
+        # parks on a per-request Queue keyed by request id.
+        self._reader_stop.clear()
+        self._reader_thread = threading.Thread(
+            target=self._reader_loop,
+            name=f"lsp-reader-{self.language}",
+            daemon=True,
+        )
+        self._reader_thread.start()
         _record_pid_to_disk(self.language, self.proc.pid)
 
+    def _reader_loop(self) -> None:
+        """v7.7.14 fix: dedicated reader thread that owns proc.stdout.
+        Routes JSON-RPC responses to per-request Queues keyed by id;
+        routes `textDocument/publishDiagnostics` notifications into
+        `self.pending_diagnostics`. Exits cleanly on EOF or stop signal.
+
+        v7.7.14 council fix (Opus 2): on exit, drain pending request
+        waiters with an error sentinel so they fail fast instead of
+        hanging for the full request() timeout. Log the exit reason so
+        a silently-dead reader does not silently break the whole proxy.
+        """
+        exit_reason = "stop signal"
+        try:
+            while not self._reader_stop.is_set():
+                try:
+                    if not self.proc or not self.proc.stdout:
+                        exit_reason = "proc/stdout missing"
+                        break
+                    msg = _read_lsp(self.proc.stdout)
+                except Exception as exc:
+                    exit_reason = f"read exception: {type(exc).__name__}: {exc}"
+                    break
+                if msg is None:
+                    exit_reason = "EOF (subprocess closed stdout)"
+                    break
+                msg_id = msg.get('id')
+                method = msg.get('method')
+                if msg_id is not None and method is None:
+                    # Response to a prior request: hand off to waiter
+                    with self._response_lock:
+                        waiter = self._response_queues.get(msg_id)
+                    if waiter is not None:
+                        try:
+                            waiter.put_nowait(msg)
+                        except queue.Full:
+                            pass
+                elif method == 'textDocument/publishDiagnostics':
+                    params = msg.get('params') or {}
+                    uri = params.get('uri')
+                    diags = params.get('diagnostics') or []
+                    if uri:
+                        with self._lock:
+                            self.pending_diagnostics[uri] = diags
+                # Other notifications (window/logMessage, $/progress, etc.)
+                # silently ignored. Server-to-client requests are not handled
+                # (we declared no capabilities, so servers should not send any).
+        finally:
+            # Drain any outstanding request waiters with an error sentinel.
+            # Without this, request() callers hang the full timeout (5s+) on
+            # reader death; downstream tools surface as silent slow paths.
+            with self._response_lock:
+                waiters = list(self._response_queues.items())
+                self._response_queues.clear()
+            for rid, waiter in waiters:
+                try:
+                    waiter.put_nowait({'error': {
+                        'message': f'LSP reader thread exited: {exit_reason}',
+                        'request_id': rid,
+                    }})
+                except queue.Full:
+                    pass
+            try:
+                logger.warning(
+                    "LSP reader thread for language=%s exited: %s "
+                    "(drained %d pending waiters)",
+                    self.language, exit_reason, len(waiters),
+                )
+            except Exception:
+                pass
+
     def _next_request_id(self) -> int:
         rid = self._next_id
         self._next_id += 1
@@ -335,29 +458,41 @@ class LSPClient:
         self._opened_uris.add(uri)
 
     def request(self, method: str, params: Dict[str, Any], timeout: float = 5.0) -> Dict[str, Any]:
-        """Send a JSON-RPC request and block until its response (or
-        timeout / EOF) arrives. Returns the decoded LSP response dict
-        (which has 'result' on success and 'error' on failure)."""
+        """Send a JSON-RPC request and block until its response arrives.
+
+        v7.7.14: parks on a per-request Queue instead of reading stdout
+        directly (which would race the reader thread). The reader thread
+        spawned in start() routes responses to this Queue by request id.
+        """
         rid = self._next_request_id()
-        _write_lsp(self.proc.stdin, {
-            'jsonrpc': '2.0',
-            'id': rid,
-            'method': method,
-            'params': params,
-        })
-        deadline = time.time() + timeout
-        while time.time() < deadline:
-            msg = _read_lsp(self.proc.stdout)
-            if msg is None:
-                return {'error': {'message': 'LSP EOF before response'}}
-            if msg.get('id') == rid:
-                return msg
-            # Ignore notifications and unrelated request responses.
-        return {'error': {'message': f'LSP timeout after {timeout}s'}}
+        wait_q: "queue.Queue[Dict[str, Any]]" = queue.Queue(maxsize=1)
+        with self._response_lock:
+            self._response_queues[rid] = wait_q
+        try:
+            try:
+                _write_lsp(self.proc.stdin, {
+                    'jsonrpc': '2.0',
+                    'id': rid,
+                    'method': method,
+                    'params': params,
+                })
+            except (BrokenPipeError, OSError) as exc:
+                return {'error': {'message': f'LSP I/O failure on write: {exc}'}}
+            try:
+                return wait_q.get(timeout=timeout)
+            except queue.Empty:
+                return {'error': {'message': f'LSP timeout after {timeout}s'}}
+        finally:
+            with self._response_lock:
+                self._response_queues.pop(rid, None)
 
     def shutdown(self) -> None:
         """Send `shutdown` + `exit`, then SIGTERM after a 2s grace and
         SIGKILL after another 1s if still alive."""
+        # v7.7.14: signal the reader thread to stop. It will also exit on
+        # its own once proc.stdout closes (EOF), but the flag is belt-and-
+        # suspenders for the kill path below.
+        self._reader_stop.set()
         if not self.proc or self.proc.poll() is not None:
             return
         try:
@@ -859,21 +994,20 @@ async def lsp_get_diagnostics(file: str) -> str:
         client.did_open(abs_file)
     except (BrokenPipeError, OSError) as exc:
         return json.dumps({'error': f'LSP I/O failure on didOpen: {exc}', 'language': language})
-    # The LSPClient implementation buffers received notifications; if the
-    # client doesn't expose a buffer, we fall back to a synthetic empty list.
-    # This is intentional: callers see no false errors when the buffer is
-    # absent; integration test asserts the elapsed-ms budget either way.
+    # v7.7.14: reader thread populates client.pending_diagnostics on
+    # textDocument/publishDiagnostics notifications. Poll for up to ~1s
+    # (matches docstring "waits up to 1 second"). Pyright cold-pass on
+    # a small file lands diagnostics in 100-400ms; gopls/rust-analyzer
+    # vary. If the buffer never fills, return empty (no false errors).
     diagnostics: List[Dict[str, Any]] = []
-    if hasattr(client, 'pending_diagnostics'):
-        target_uri = _path_to_uri(abs_file)
-        # Drain whatever has arrived so far (up to ~250ms wait if empty).
-        for _ in range(5):
-            with getattr(client, '_lock', threading.Lock()):
-                buf = getattr(client, 'pending_diagnostics', {})
-                if isinstance(buf, dict) and target_uri in buf:
-                    diagnostics = list(buf.get(target_uri) or [])
-                    break
-            time.sleep(0.05)
+    target_uri = _path_to_uri(abs_file)
+    for _ in range(20):
+        with client._lock:
+            buf = client.pending_diagnostics
+            if target_uri in buf:
+                diagnostics = list(buf.get(target_uri) or [])
+                break
+        time.sleep(0.05)
     err_count = sum(1 for d in diagnostics if d.get('severity') == 1)
     warn_count = sum(1 for d in diagnostics if d.get('severity') == 2)
     return json.dumps({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loki-mode",
-  "version": "7.7.13",
+  "version": "7.7.15",
   "description": "Loki Mode by Autonomi. Multi-agent autonomous SDLC framework. Spec to deployed app: PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. 4 AI providers (Claude Code, OpenAI Codex, Cline, Aider). 11 quality gates.",
   "keywords": [
     "agent",