loki-mode 7.77.0 → 7.78.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.77.0
+# Loki Mode v7.78.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -406,4 +406,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.77.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.78.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.77.0
+7.78.0

package/autonomy/NOTIFY_INTEGRATION.md

@@ -2,6 +2,15 @@
 
 This document describes how to integrate multi-channel notifications (Slack, Discord, Webhook) into run.sh.
 
+> Note (v7.78.0): the convenience wrappers `notify_task_started`,
+> `notify_task_completed`, `notify_task_failed`, `notify_phase_complete`, and
+> `notify_all_complete` were never wired into the runtime and were removed as dead
+> code. The live notification helpers are `notify_intervention_needed` and
+> `notify_rate_limit` (plus the `notify_channels` snippets shown below). Snippets
+> in this guide that reference the removed wrappers are illustrative of where a
+> notification COULD be emitted; use `notify_channels` (or the live helpers) when
+> actually wiring one.
+
 ## Quick Start
 
 ```bash

package/autonomy/run.sh

@@ -40,7 +40,12 @@
 #   LOKI_AUDIT_DISABLED     - Disable audit logging (default: false)
 #   LOKI_MAX_PARALLEL_AGENTS - Limit concurrent agent spawning (default: 10)
 #   LOKI_SANDBOX_MODE       - Run in sandboxed container (default: false, requires Docker)
-#   LOKI_ALLOWED_PATHS      - Comma-separated paths agents can modify (default: all)
+#   LOKI_ALLOWED_PATHS      - Reserved: comma-separated path allowlist. NOT YET
+#                             ENFORCED by the runtime (the value is read from
+#                             config but no path-restriction check consumes it).
+#                             Do not rely on it as a security control. Agent file
+#                             writes are constrained by the OS user + container
+#                             sandbox (LOKI_SANDBOX_MODE), not by this var.
 #   LOKI_BLOCKED_COMMANDS   - Comma-separated blocked shell commands (default: rm -rf /)
 #
 # OIDC / SSO Authentication (optional, works alongside token auth):
@@ -588,7 +593,7 @@ STAGED_AUTONOMY=${LOKI_STAGED_AUTONOMY:-false}           # Require plan approval
 AUDIT_LOG_ENABLED=${LOKI_AUDIT_LOG:-true}                # Enable audit logging (on by default)
 MAX_PARALLEL_AGENTS=${LOKI_MAX_PARALLEL_AGENTS:-10}      # Limit concurrent agents
 SANDBOX_MODE=${LOKI_SANDBOX_MODE:-false}                 # Docker sandbox mode (informational; the real dispatch reads LOKI_SANDBOX_MODE at autonomy/loki:1965 and execs sandbox.sh -- this var is not consumed in run.sh)
-ALLOWED_PATHS=${LOKI_ALLOWED_PATHS:-""}                  # Empty = all paths allowed
+ALLOWED_PATHS=${LOKI_ALLOWED_PATHS:-""}                  # Reserved, NOT enforced (see header note). No runtime path check reads this; kept only so config plumbing + a future enforcement wiring have a single var to bind. Not a security control today.
 BLOCKED_COMMANDS=${LOKI_BLOCKED_COMMANDS:-"rm -rf /,dd if=,mkfs,:(){ :|:& };:"}
 
 # Process Supervision (opt-in)
@@ -1902,41 +1907,7 @@ detect_complexity() {
 }
 
 # Get phases based on complexity tier
-get_complexity_phases() {
-    case "$DETECTED_COMPLEXITY" in
-        simple)
-            echo "3"
-            ;;
-        standard)
-            echo "6"
-            ;;
-        complex)
-            echo "8"
-            ;;
-        *)
-            echo "6"  # Default to standard
-            ;;
-    esac
-}
-
 # Get phase names based on complexity tier
-get_phase_names() {
-    case "$DETECTED_COMPLEXITY" in
-        simple)
-            echo "IMPLEMENT TEST DEPLOY"
-            ;;
-        standard)
-            echo "RESEARCH DESIGN IMPLEMENT TEST REVIEW DEPLOY"
-            ;;
-        complex)
-            echo "RESEARCH ARCHITECTURE DESIGN IMPLEMENT TEST REVIEW SECURITY DEPLOY"
-            ;;
-        *)
-            echo "RESEARCH DESIGN IMPLEMENT TEST REVIEW DEPLOY"
-            ;;
-    esac
-}
-
 #===============================================================================
 # Dynamic Tier Selection (RARV-aware model routing)
 #===============================================================================
@@ -2629,32 +2600,6 @@ send_notification() {
     return 0
 }
 
-# Convenience notification functions
-notify_task_started() {
-    local task_name="$1"
-    send_notification "Task Started" "$task_name" "low"
-}
-
-notify_task_completed() {
-    local task_name="$1"
-    send_notification "Task Completed" "$task_name" "normal"
-}
-
-notify_task_failed() {
-    local task_name="$1"
-    local error="${2:-Unknown error}"
-    send_notification "Task Failed" "$task_name: $error" "critical"
-}
-
-notify_phase_complete() {
-    local phase_name="$1"
-    send_notification "Phase Complete" "$phase_name" "normal"
-}
-
-notify_all_complete() {
-    send_notification "All Tasks Complete" "Loki Mode has finished all tasks" "normal"
-}
-
 notify_intervention_needed() {
     local reason="$1"
     # Delegate-then-notify: this helper ONLY fires the (gated) desktop ping. It
@@ -3722,23 +3667,6 @@ init_parallel_streams() {
 }
 
 # Spawn feature worktree from task
-spawn_feature_stream() {
-    local feature_name="$1"
-    local task_description="$2"
-
-    # Check worktree limit
-    # BUG-PAR-012: Worktree count subtracts 1 for main (git worktree list includes main)
-    local worktree_count_raw=$(git -C "$TARGET_DIR" worktree list 2>/dev/null | wc -l)
-    local worktree_count=$((worktree_count_raw > 0 ? worktree_count_raw - 1 : 0))
-    if [ "$worktree_count" -ge "$MAX_WORKTREES" ]; then
-        log_warn "Max worktrees reached ($MAX_WORKTREES). Queuing feature: $feature_name"
-        return 1
-    fi
-
-    create_worktree "feature-$feature_name" "feature/$feature_name"
-    spawn_worktree_session "feature-$feature_name" "$task_description"
-}
-
 # Cleanup all worktrees on exit
 cleanup_parallel_streams() {
     log_header "Cleaning Up Parallel Streams"
@@ -4352,55 +4280,6 @@ EOF
 LAST_KNOWN_PHASE=""
 
 # Set the current phase and emit event if changed
-set_phase() {
-    local new_phase="$1"
-    local orch_file=".loki/state/orchestrator.json"
-
-    mkdir -p .loki/state
-
-    # Get current phase
-    local current_phase=""
-    if [ -f "$orch_file" ]; then
-        current_phase=$(python3 -c "import json; print(json.load(open('$orch_file')).get('currentPhase', ''))" 2>/dev/null || echo "")
-    fi
-
-    # Only emit event if phase changed
-    if [ "$new_phase" != "$current_phase" ]; then
-        emit_event_json "phase_change" \
-            "from=$current_phase" \
-            "to=$new_phase" \
-            "iteration=$ITERATION_COUNT"
-
-        log_info "Phase changed: $current_phase -> $new_phase"
-
-        # Update orchestrator state (atomic via temp file + mv)
-        # BUG ARCH-001 fix: prevent state corruption if process is killed mid-write
-        if [ -f "$orch_file" ]; then
-            python3 -c "
-import json, sys, os, tempfile
-orch_file = sys.argv[1]
-new_phase = sys.argv[2]
-with open(orch_file, 'r') as f:
-    data = json.load(f)
-data['currentPhase'] = new_phase
-orch_dir = os.path.dirname(orch_file)
-fd, tmp = tempfile.mkstemp(dir=orch_dir, suffix='.json')
-with os.fdopen(fd, 'w') as f:
-    json.dump(data, f, indent=2)
-os.replace(tmp, orch_file)
-" "$orch_file" "$new_phase" 2>/dev/null || true
-        fi
-    fi
-
-    LAST_KNOWN_PHASE="$new_phase"
-
-    # v7.5.12: Append a structured log entry to the active iteration task so
-    # the dashboard shows per-phase progress (REASON / ACT / REFLECT / VERIFY).
-    # No-op if no iteration is active or queue file is missing/corrupt.
-    append_iteration_task_log "${ITERATION_COUNT:-0}" "$new_phase" "info" \
-        "Phase entered: $new_phase" 2>/dev/null || true
-}
-
 # v7.5.12: append a log entry to the iteration-N task in in-progress.json.
 # Args: iteration, phase, level, message. All silent on failure -- this
 # must NEVER kill the run.
@@ -5729,438 +5608,6 @@ stop_status_monitor() {
 # Web Dashboard
 #===============================================================================
 
-generate_dashboard() {
-    # Copy dashboard from skill installation (v4.0.0 with Anthropic design language)
-    local skill_dashboard="$SCRIPT_DIR/.loki/dashboard/index.html"
-    local project_name=$(basename "$(pwd)")
-    local project_path=$(pwd)
-
-    if [ -f "$skill_dashboard" ]; then
-        # v7.5.8: Escape sed-special chars in project_name/project_path before
-        # interpolating into the substitution RHS. Without this, a project
-        # whose path contains '|' (the chosen sed delimiter), '&' (RHS
-        # backref), '\' or '/' would either break the substitution or allow
-        # attacker-controlled text to be smuggled into the served HTML.
-        local project_name_sed project_path_sed
-        project_name_sed=$(printf '%s' "$project_name" | sed -e 's/[\\&|/]/\\&/g')
-        project_path_sed=$(printf '%s' "$project_path" | sed -e 's/[\\&|/]/\\&/g')
-
-        # Copy and inject project info
-        sed -e "s|Loki Mode</title>|Loki Mode - ${project_name_sed}</title>|g" \
-            -e "s|<div class=\"project-name\" id=\"project-name\">--|<div class=\"project-name\" id=\"project-name\">${project_name_sed}|g" \
-            -e "s|<div class=\"project-path\" id=\"project-path\" title=\"\">--|<div class=\"project-path\" id=\"project-path\" title=\"${project_path_sed}\">${project_path_sed}|g" \
-            "$skill_dashboard" > .loki/dashboard/index.html
-        log_info "Dashboard copied from skill installation"
-        log_info "Project: $project_name ($project_path)"
-        return
-    fi
-
-    # Fallback: Generate basic dashboard if external file not found
-    cat > .loki/dashboard/index.html << 'DASHBOARD_HTML'
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Loki Mode Dashboard</title>
-    <style>
-        * { box-sizing: border-box; margin: 0; padding: 0; }
-        body {
-            font-family: 'Söhne', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-            background: #FAF9F6;
-            color: #1A1A1A;
-            padding: 24px;
-            min-height: 100vh;
-        }
-        .header {
-            text-align: center;
-            padding: 32px 20px;
-            margin-bottom: 32px;
-        }
-        .header h1 {
-            color: #D97757;
-            font-size: 28px;
-            font-weight: 600;
-            letter-spacing: -0.5px;
-            margin-bottom: 8px;
-        }
-        .header .subtitle {
-            color: #666;
-            font-size: 14px;
-            font-weight: 400;
-        }
-        .header .phase {
-            display: inline-block;
-            margin-top: 16px;
-            padding: 8px 16px;
-            background: #FFF;
-            border: 1px solid #E5E3DE;
-            border-radius: 20px;
-            font-size: 13px;
-            color: #1A1A1A;
-            font-weight: 500;
-        }
-        .stats {
-            display: flex;
-            justify-content: center;
-            gap: 16px;
-            margin-bottom: 40px;
-            flex-wrap: wrap;
-        }
-        .stat {
-            background: #FFF;
-            border: 1px solid #E5E3DE;
-            border-radius: 12px;
-            padding: 20px 32px;
-            text-align: center;
-            min-width: 140px;
-            transition: box-shadow 0.2s ease;
-        }
-        .stat:hover { box-shadow: 0 4px 12px rgba(0,0,0,0.06); }
-        .stat .number { font-size: 36px; font-weight: 600; margin-bottom: 4px; }
-        .stat .label { font-size: 12px; color: #888; text-transform: uppercase; letter-spacing: 0.5px; }
-        .stat.pending .number { color: #D97757; }
-        .stat.progress .number { color: #5B8DEF; }
-        .stat.completed .number { color: #2E9E6E; }
-        .stat.failed .number { color: #D44F4F; }
-        .stat.agents .number { color: #9B6DD6; }
-        .section-header {
-            text-align: center;
-            font-size: 16px;
-            font-weight: 600;
-            color: #666;
-            margin: 40px 0 20px 0;
-            text-transform: uppercase;
-            letter-spacing: 1px;
-        }
-        .agents-grid {
-            display: grid;
-            grid-template-columns: repeat(auto-fill, minmax(320px, 1fr));
-            gap: 16px;
-            max-width: 1400px;
-            margin: 0 auto 40px auto;
-        }
-        .agent-card {
-            background: #FFF;
-            border: 1px solid #E5E3DE;
-            border-radius: 12px;
-            padding: 16px;
-            transition: box-shadow 0.2s ease, border-color 0.2s ease;
-        }
-        .agent-card:hover {
-            box-shadow: 0 4px 12px rgba(0,0,0,0.06);
-            border-color: #9B6DD6;
-        }
-        .agent-card .agent-header {
-            display: flex;
-            justify-content: space-between;
-            align-items: flex-start;
-            margin-bottom: 12px;
-        }
-        .agent-card .agent-id {
-            font-size: 11px;
-            color: #999;
-            font-family: monospace;
-        }
-        .agent-card .model-badge {
-            padding: 4px 10px;
-            border-radius: 6px;
-            font-size: 10px;
-            font-weight: 600;
-            text-transform: uppercase;
-            letter-spacing: 0.5px;
-        }
-        .agent-card .model-badge.sonnet {
-            background: #E8F0FD;
-            color: #5B8DEF;
-        }
-        .agent-card .model-badge.haiku {
-            background: #FFF4E6;
-            color: #F59E0B;
-        }
-        .agent-card .model-badge.opus {
-            background: #F3E8FF;
-            color: #9B6DD6;
-        }
-        .agent-card .agent-type {
-            font-size: 14px;
-            font-weight: 600;
-            color: #1A1A1A;
-            margin-bottom: 8px;
-        }
-        .agent-card .agent-status {
-            display: inline-block;
-            padding: 3px 8px;
-            border-radius: 4px;
-            font-size: 10px;
-            font-weight: 500;
-            margin-bottom: 12px;
-        }
-        .agent-card .agent-status.active {
-            background: #E6F5EE;
-            color: #2E9E6E;
-        }
-        .agent-card .agent-status.completed {
-            background: #F0EFEA;
-            color: #666;
-        }
-        .agent-card .agent-work {
-            font-size: 12px;
-            color: #666;
-            line-height: 1.5;
-            margin-bottom: 8px;
-        }
-        .agent-card .agent-meta {
-            display: flex;
-            gap: 12px;
-            font-size: 11px;
-            color: #999;
-            margin-top: 8px;
-            padding-top: 8px;
-            border-top: 1px solid #F0EFEA;
-        }
-        .agent-card .agent-meta span {
-            display: flex;
-            align-items: center;
-            gap: 4px;
-        }
-        .columns {
-            display: flex;
-            gap: 20px;
-            overflow-x: auto;
-            padding-bottom: 24px;
-            max-width: 1400px;
-            margin: 0 auto;
-        }
-        .column {
-            flex: 1;
-            min-width: 300px;
-            max-width: 350px;
-            background: #FFF;
-            border: 1px solid #E5E3DE;
-            border-radius: 12px;
-            padding: 20px;
-        }
-        .column h2 {
-            font-size: 13px;
-            font-weight: 600;
-            color: #666;
-            margin-bottom: 16px;
-            display: flex;
-            align-items: center;
-            gap: 10px;
-            text-transform: uppercase;
-            letter-spacing: 0.5px;
-        }
-        .column h2 .count {
-            background: #F0EFEA;
-            padding: 3px 10px;
-            border-radius: 12px;
-            font-size: 11px;
-            color: #1A1A1A;
-        }
-        .column.pending h2 .count { background: #FCEEE8; color: #D97757; }
-        .column.progress h2 .count { background: #E8F0FD; color: #5B8DEF; }
-        .column.completed h2 .count { background: #E6F5EE; color: #2E9E6E; }
-        .column.failed h2 .count { background: #FCE8E8; color: #D44F4F; }
-        .task {
-            background: #FAF9F6;
-            border: 1px solid #E5E3DE;
-            border-radius: 8px;
-            padding: 14px;
-            margin-bottom: 12px;
-            transition: border-color 0.2s ease;
-        }
-        .task:hover { border-color: #D97757; }
-        .task .id { font-size: 10px; color: #999; margin-bottom: 6px; font-family: monospace; }
-        .task .type {
-            display: inline-block;
-            background: #FCEEE8;
-            color: #D97757;
-            padding: 3px 10px;
-            border-radius: 4px;
-            font-size: 11px;
-            font-weight: 500;
-            margin-bottom: 8px;
-        }
-        .task .title { font-size: 13px; color: #1A1A1A; line-height: 1.5; }
-        .task .error {
-            font-size: 11px;
-            color: #D44F4F;
-            margin-top: 10px;
-            padding: 10px;
-            background: #FCE8E8;
-            border-radius: 6px;
-            font-family: monospace;
-        }
-        .refresh {
-            position: fixed;
-            bottom: 24px;
-            right: 24px;
-            background: #D97757;
-            color: white;
-            border: none;
-            padding: 12px 24px;
-            border-radius: 8px;
-            cursor: pointer;
-            font-size: 14px;
-            font-weight: 500;
-            transition: background 0.2s ease;
-            box-shadow: 0 4px 12px rgba(217, 119, 87, 0.3);
-        }
-        .refresh:hover { background: #C56747; }
-        .updated {
-            text-align: center;
-            color: #999;
-            font-size: 12px;
-            margin-top: 24px;
-        }
-        .empty {
-            color: #999;
-            font-size: 13px;
-            text-align: center;
-            padding: 24px;
-            font-style: italic;
-        }
-        .powered-by {
-            text-align: center;
-            margin-top: 40px;
-            padding-top: 24px;
-            border-top: 1px solid #E5E3DE;
-            color: #999;
-            font-size: 12px;
-        }
-        .powered-by span { color: #D97757; font-weight: 500; }
-    </style>
-</head>
-<body>
-    <div class="header">
-        <h1>LOKI MODE</h1>
-        <div class="subtitle">Autonomous Spec-to-Product System</div>
-        <div class="phase" id="phase">Loading...</div>
-    </div>
-    <div class="stats">
-        <div class="stat agents"><div class="number" id="agents-count">-</div><div class="label">Active Agents</div></div>
-        <div class="stat pending"><div class="number" id="pending-count">-</div><div class="label">Pending</div></div>
-        <div class="stat progress"><div class="number" id="progress-count">-</div><div class="label">In Progress</div></div>
-        <div class="stat completed"><div class="number" id="completed-count">-</div><div class="label">Completed</div></div>
-        <div class="stat failed"><div class="number" id="failed-count">-</div><div class="label">Failed</div></div>
-    </div>
-    <div class="section-header">Active Agents</div>
-    <div class="agents-grid" id="agents-grid"></div>
-    <div class="section-header">Task Queue</div>
-    <div class="columns">
-        <div class="column pending"><h2>Pending <span class="count" id="pending-badge">0</span></h2><div id="pending-tasks"></div></div>
-        <div class="column progress"><h2>In Progress <span class="count" id="progress-badge">0</span></h2><div id="progress-tasks"></div></div>
-        <div class="column completed"><h2>Completed <span class="count" id="completed-badge">0</span></h2><div id="completed-tasks"></div></div>
-        <div class="column failed"><h2>Failed <span class="count" id="failed-badge">0</span></h2><div id="failed-tasks"></div></div>
-    </div>
-    <div class="updated" id="updated">Last updated: -</div>
-    <div class="powered-by">Powered by <span>${PROVIDER_DISPLAY_NAME:-Claude}</span></div>
-    <button class="refresh" onclick="loadData()">Refresh</button>
-    <script>
-        async function loadJSON(path) {
-            try {
-                const res = await fetch(path + '?t=' + Date.now());
-                if (!res.ok) return [];
-                const text = await res.text();
-                if (!text.trim()) return [];
-                const data = JSON.parse(text);
-                return Array.isArray(data) ? data : (data.tasks || data.agents || []);
-            } catch { return []; }
-        }
-        function getModelClass(model) {
-            if (!model) return 'sonnet';
-            const m = model.toLowerCase();
-            if (m.includes('haiku')) return 'haiku';
-            if (m.includes('opus')) return 'opus';
-            return 'sonnet';
-        }
-        function formatDuration(isoDate) {
-            if (!isoDate) return 'Unknown';
-            const start = new Date(isoDate);
-            const now = new Date();
-            const seconds = Math.floor((now - start) / 1000);
-            if (seconds < 60) return seconds + 's';
-            if (seconds < 3600) return Math.floor(seconds / 60) + 'm';
-            return Math.floor(seconds / 3600) + 'h ' + Math.floor((seconds % 3600) / 60) + 'm';
-        }
-        function renderAgent(agent) {
-            const modelClass = getModelClass(agent.model);
-            const modelName = agent.model || 'Sonnet 4.5';
-            const agentType = agent.agent_type || 'general-purpose';
-            const status = agent.status === 'completed' ? 'completed' : 'active';
-            const currentTask = agent.current_task || (agent.tasks_completed && agent.tasks_completed.length > 0
-                ? 'Completed: ' + agent.tasks_completed.join(', ')
-                : 'Initializing...');
-            const duration = formatDuration(agent.spawned_at);
-            const tasksCount = agent.tasks_completed ? agent.tasks_completed.length : 0;
-
-            return `
-                <div class="agent-card">
-                    <div class="agent-header">
-                        <div class="agent-id">${agent.agent_id || 'Unknown'}</div>
-                        <div class="model-badge ${modelClass}">${modelName}</div>
-                    </div>
-                    <div class="agent-type">${agentType}</div>
-                    <div class="agent-status ${status}">${status}</div>
-                    <div class="agent-work">${currentTask}</div>
-                    <div class="agent-meta">
-                        <span>${duration}</span>
-                        <span>${tasksCount} tasks</span>
-                    </div>
-                </div>
-            `;
-        }
-        function renderTask(task) {
-            const payload = task.payload || {};
-            const title = payload.description || payload.action || task.type || 'Task';
-            const error = task.lastError ? `<div class="error">${task.lastError}</div>` : '';
-            return `<div class="task"><div class="id">${task.id}</div><span class="type">${task.type || 'general'}</span><div class="title">${title}</div>${error}</div>`;
-        }
-        async function loadData() {
-            const [pending, progress, completed, failed, agents] = await Promise.all([
-                loadJSON('../queue/pending.json'),
-                loadJSON('../queue/in-progress.json'),
-                loadJSON('../queue/completed.json'),
-                loadJSON('../queue/failed.json'),
-                loadJSON('../state/agents.json')
-            ]);
-
-            // Agent stats
-            document.getElementById('agents-count').textContent = agents.length;
-            document.getElementById('agents-grid').innerHTML = agents.length
-                ? agents.map(renderAgent).join('')
-                : '<div class="empty">No active agents</div>';
-
-            // Task stats
-            document.getElementById('pending-count').textContent = pending.length;
-            document.getElementById('progress-count').textContent = progress.length;
-            document.getElementById('completed-count').textContent = completed.length;
-            document.getElementById('failed-count').textContent = failed.length;
-            document.getElementById('pending-badge').textContent = pending.length;
-            document.getElementById('progress-badge').textContent = progress.length;
-            document.getElementById('completed-badge').textContent = completed.length;
-            document.getElementById('failed-badge').textContent = failed.length;
-            document.getElementById('pending-tasks').innerHTML = pending.length ? pending.map(renderTask).join('') : '<div class="empty">No pending tasks</div>';
-            document.getElementById('progress-tasks').innerHTML = progress.length ? progress.map(renderTask).join('') : '<div class="empty">No tasks in progress</div>';
-            document.getElementById('completed-tasks').innerHTML = completed.length ? completed.slice(-10).reverse().map(renderTask).join('') : '<div class="empty">No completed tasks</div>';
-            document.getElementById('failed-tasks').innerHTML = failed.length ? failed.map(renderTask).join('') : '<div class="empty">No failed tasks</div>';
-
-            try {
-                const state = await fetch('../state/orchestrator.json?t=' + Date.now()).then(r => r.json());
-                document.getElementById('phase').textContent = 'Phase: ' + (state.currentPhase || 'UNKNOWN');
-            } catch { document.getElementById('phase').textContent = 'Phase: UNKNOWN'; }
-            document.getElementById('updated').textContent = 'Last updated: ' + new Date().toLocaleTimeString();
-        }
-        loadData();
-        setInterval(loadData, 3000);
-    </script>
-</body>
-</html>
-DASHBOARD_HTML
-}
-
 update_agents_state() {
     # Aggregate agent information from .agent/sub-agents/*.json into .loki/state/agents.json
     local agents_dir=".agent/sub-agents"
@@ -6853,34 +6300,6 @@ init_learnings_db() {
     log_info "Learnings database initialized at: $learnings_dir"
 }
 
-save_learning() {
-    # Save a learning to the cross-project database
-    local learning_type="$1"  # pattern, mistake, success
-    local category="$2"
-    local description="$3"
-    local project="${4:-$(basename "$(pwd)")}"
-
-    local learnings_dir="${HOME}/.loki/learnings"
-    local target_file="$learnings_dir/${learning_type}s.jsonl"
-
-    if [ ! -d "$learnings_dir" ]; then
-        init_learnings_db
-    fi
-
-    local learning_entry
-    if command -v jq >/dev/null 2>&1; then
-        learning_entry=$(jq -n --arg ts "$(date -u +%Y-%m-%dT%H:%M:%SZ)" --arg proj "$project" --arg cat "$category" --arg desc "$description" '{timestamp:$ts,project:$proj,category:$cat,description:$desc}')
-    else
-        local safe_proj safe_cat safe_desc
-        safe_proj=$(printf '%s' "$project" | sed 's/["\\]/\\&/g; s/\n/\\n/g')
-        safe_cat=$(printf '%s' "$category" | sed 's/["\\]/\\&/g; s/\n/\\n/g')
-        safe_desc=$(printf '%s' "$description" | sed 's/["\\]/\\&/g; s/\n/\\n/g')
-        learning_entry="{\"timestamp\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":\"$safe_proj\",\"category\":\"$safe_cat\",\"description\":\"$safe_desc\"}"
-    fi
-    echo "$learning_entry" >> "$target_file"
-    log_info "Saved $learning_type: $category"
-}
-
 get_relevant_learnings() {
     # Get learnings relevant to the current context
     local context="$1"
@@ -7882,24 +7301,6 @@ with open(gate_file, 'w') as f:
 " 2>/dev/null || true
 }
 
-get_gate_failure_count() {
-    local gate_name="$1"
-    local gate_file="${TARGET_DIR:-.}/.loki/quality/gate-failure-count.json"
-    [ -f "$gate_file" ] || { echo "0"; return; }
-
-    _GATE_FILE="$gate_file" _GATE_NAME="$gate_name" python3 -c "
-import json, os
-gate_file = os.environ['_GATE_FILE']
-gate_name = os.environ['_GATE_NAME']
-try:
-    with open(gate_file) as f:
-        counts = json.load(f)
-    print(counts.get(gate_name, 0))
-except (json.JSONDecodeError, FileNotFoundError, OSError):
-    print(0)
-" 2>/dev/null || echo "0"
-}
-
 # ============================================================================
 # Hard Quality Gate: Test Coverage (v6.7.0)
 # Detects test runner and runs tests with coverage reporting
@@ -10102,182 +9503,6 @@ DA_AGG_PATCH
 # Only runs when complexity >= standard (6+ agents).
 #===============================================================================
 
-run_adversarial_testing() {
-    local loki_dir="${TARGET_DIR:-.}/.loki"
-    local adversarial_dir="$loki_dir/quality/adversarial"
-    local test_id
-    test_id="adversarial-$(date -u +%Y%m%dT%H%M%SZ)-${ITERATION_COUNT:-0}"
-    mkdir -p "$adversarial_dir/$test_id"
-
-    # Only run for Standard+ complexity
-    local complexity="${LOKI_COMPLEXITY:-auto}"
-    if [ "$complexity" = "simple" ]; then
-        log_debug "Adversarial testing skipped: simple complexity tier"
-        return 0
-    fi
-
-    # Check if adversarial testing is disabled
-    if [ "${LOKI_ADVERSARIAL_TESTING:-true}" = "false" ]; then
-        log_debug "Adversarial testing disabled via LOKI_ADVERSARIAL_TESTING=false"
-        return 0
-    fi
-
-    log_header "ADVERSARIAL TESTING: $test_id"
-
-    # Get diff for adversarial analysis
-    local diff_content
-    diff_content=$(git -C "${TARGET_DIR:-.}" diff HEAD~1 2>/dev/null || git -C "${TARGET_DIR:-.}" diff --cached 2>/dev/null || echo "")
-    if [ -z "$diff_content" ]; then
-        log_info "Adversarial testing: No diff to test, skipping"
-        return 0
-    fi
-
-    local changed_files
-    changed_files=$(git -C "${TARGET_DIR:-.}" diff --name-only HEAD~1 2>/dev/null || git -C "${TARGET_DIR:-.}" diff --name-only --cached 2>/dev/null || echo "")
-
-    # Write analysis files -- use printf to prevent shell variable expansion (#78)
-    local diff_file="$adversarial_dir/$test_id/diff.txt"
-    local files_file="$adversarial_dir/$test_id/files.txt"
-    printf '%s\n' "$diff_content" > "$diff_file"
-    printf '%s\n' "$changed_files" > "$files_file"
-
-    # Build adversarial prompt -- use heredoc with quoted delimiter to prevent
-    # shell variable expansion in diff content (fixes #78)
-    local files_content changed_content
-    files_content=$(cat "$files_file")
-    changed_content=$(head -500 "$diff_file")
-    local adversarial_prompt
-    read -r -d '' adversarial_prompt <<'ADVERSARIAL_EOF' || true
-You are an ADVERSARIAL TESTER. Your goal is to BREAK the implementation.
-
-CHANGED FILES:
-__FILES_PLACEHOLDER__
-
-DIFF:
-__DIFF_PLACEHOLDER__
-
-YOUR MISSION:
-1. Find edge cases that will cause crashes or incorrect behavior
-2. Identify inputs that bypass validation
-3. Find race conditions or concurrency issues
-4. Discover security vulnerabilities (injection, auth bypass, SSRF)
-5. Find resource exhaustion vectors (unbounded loops, memory leaks)
-6. Identify error handling gaps (missing try/catch, unchecked returns)
-
-OUTPUT FORMAT (STRICT):
-ATTACK_VECTORS:
-- [severity] [category] description | reproduction steps
-  Severity: Critical, High, Medium, Low
-  Category: crash, security, correctness, performance, resource
-
-SUGGESTED_TESTS:
-- Test description that would catch this issue
-
-OVERALL_RISK: HIGH or MEDIUM or LOW
-ADVERSARIAL_EOF
-    # Substitute placeholders with actual content (safe from shell expansion)
-    adversarial_prompt="${adversarial_prompt/__FILES_PLACEHOLDER__/$files_content}"
-    adversarial_prompt="${adversarial_prompt/__DIFF_PLACEHOLDER__/$changed_content}"
-
-    local result_file="$adversarial_dir/$test_id/result.txt"
-
-    # Run adversarial agent
-    log_info "Spawning adversarial agent..."
-    case "${PROVIDER_NAME:-claude}" in
-        claude)
-            if command -v claude &>/dev/null; then
-                # EMBED 2 + 3 (v7.33.0). Adversarial probe subcall.
-                # $adversarial_prompt is fully self-contained (instructions +
-                # changed files + diff inlined via the heredoc above) and output
-                # is captured to $result_file. So:
-                #   EMBED 2 (--bare): no hooks/LSP/CLAUDE.md/MCP needed; cheaper.
-                #     Opt out LOKI_BARE_SUBCALLS=0.
-                #   EMBED 3 (--disallowedTools): keep an adversarial agent from
-                #     casually mutating the tree. Deny Edit/Write/NotebookEdit +
-                #     git mutation forms (incl. git -C / --git-dir evasions);
-                #     read-only git stays allowed. Guardrail, not a sandbox.
-                #     Opt out LOKI_REVIEW_TOOL_GUARD=0.
-                local _adv_argv=("--dangerously-skip-permissions")
-                if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
-                    _adv_argv+=("--bare")
-                fi
-                if type loki_review_guard_enabled >/dev/null 2>&1 && loki_review_guard_enabled; then
-                    _adv_argv+=("--disallowedTools" "$(loki_review_guard_denylist)")
-                fi
-                #   EMBED 3b (--allowedTools, #167): positive least-privilege
-                #     allowlist. DEFAULT OFF (opt-in LOKI_REVIEW_ALLOWLIST=1).
-                #     Emitted ALONGSIDE the denylist (deny precedence verified
-                #     live, holds under --dangerously-skip-permissions). See
-                #     loki_review_allowlist.
-                if type loki_review_allowlist_enabled >/dev/null 2>&1 && loki_review_allowlist_enabled; then
-                    _adv_argv+=("--allowedTools" "$(loki_review_allowlist)")
-                fi
-                # caveman HARD-SUPPRESS (parsed output): the adversarial probe's
-                # output is parsed for findings/severity. Disable caveman
-                # unconditionally (CAVEMAN_DEFAULT_MODE=off) so compression cannot
-                # drop or reword a finding. No-op when caveman is absent.
-                CAVEMAN_DEFAULT_MODE=off \
-                claude "${_adv_argv[@]}" -p "$adversarial_prompt" \
-                    --output-format text > "$result_file" 2>/dev/null || true
-            fi
-            ;;
-        codex)
-            if command -v codex &>/dev/null; then
-                codex exec --sandbox workspace-write --skip-git-repo-check "$adversarial_prompt" \
-                    > "$result_file" 2>/dev/null || true
-            fi
-            ;;
-        cline)
-            if command -v cline &>/dev/null; then
-                invoke_cline_capture "$adversarial_prompt" \
-                    > "$result_file" 2>/dev/null || true
-            fi
-            ;;
-        aider)
-            if command -v aider &>/dev/null; then
-                invoke_aider_capture "$adversarial_prompt" \
-                    > "$result_file" 2>/dev/null || true
-            fi
-            ;;
-        *)
-            echo "ATTACK_VECTORS: None (unknown provider)" > "$result_file"
-            echo "OVERALL_RISK: LOW" >> "$result_file"
-            ;;
-    esac
-
-    if [ ! -s "$result_file" ]; then
-        log_warn "Adversarial agent produced no output"
-        return 0
-    fi
-
-    # Parse risk level
-    local risk_level
-    risk_level=$(grep -i "OVERALL_RISK:" "$result_file" | head -1 | sed 's/.*OVERALL_RISK:[[:space:]]*//' | awk '{print toupper($1)}')
-
-    # Count critical/high attack vectors
-    local critical_count high_count
-    critical_count=$(grep -ci "\[critical\]" "$result_file" 2>/dev/null || echo "0")
-    high_count=$(grep -ci "\[high\]" "$result_file" 2>/dev/null || echo "0")
-
-    log_info "Adversarial testing complete: risk=$risk_level, critical=$critical_count, high=$high_count"
-
-    emit_event_json "adversarial_test_complete" \
-        "test_id=$test_id" \
-        "risk_level=${risk_level:-UNKNOWN}" \
-        "critical_count=$critical_count" \
-        "high_count=$high_count" \
-        "iteration=$ITERATION_COUNT"
-
-    # Block on critical findings
-    if [ "$critical_count" -gt 0 ]; then
-        log_error "ADVERSARIAL TEST BLOCKED: $critical_count critical attack vectors found"
-        log_error "Details: $adversarial_dir/$test_id/result.txt"
-        return 1
-    fi
-
-    return 0
-}
-
 load_solutions_context() {
     # Load relevant structured solutions for the current task context
     local context="$1"
@@ -10567,118 +9792,6 @@ print(json.dumps({'id':m['id'],'ts':m['timestamp'],'iter':m['iteration'],'task':
     _LAST_CHECKPOINT_ID="$checkpoint_id"
 }
 
-rollback_to_checkpoint() {
-    # Rollback state files to a specific checkpoint
-    # Args: $1 = checkpoint_id
-    local checkpoint_id="$1"
-    local checkpoint_dir=".loki/state/checkpoints"
-
-    # Validate checkpoint ID (prevent path traversal)
-    if [[ ! "$checkpoint_id" =~ ^[a-zA-Z0-9_-]+$ ]]; then
-        log_error "Invalid checkpoint ID: must be alphanumeric, hyphens, underscores only"
-        return 1
-    fi
-
-    local cp_dir="${checkpoint_dir}/${checkpoint_id}"
-
-    if [ ! -d "$cp_dir" ]; then
-        log_error "Checkpoint not found: ${checkpoint_id}"
-        return 1
-    fi
-
-    # Read checkpoint metadata
-    local git_sha
-    git_sha=$(_CP_META="${cp_dir}/metadata.json" python3 -c "import json, os; print(json.load(open(os.environ['_CP_META']))['git_sha'])" 2>/dev/null || echo "")
-
-    log_warn "Rolling back to checkpoint: ${checkpoint_id}"
-
-    # R6 re-undoability invariant: force a pre-rollback snapshot of CURRENT state
-    # before overwriting, even if the git tree is clean (the .loki/ state we are
-    # about to clobber is not git-tracked). _LOKI_CP_FORCE bypasses the clean-tree
-    # guard. Capture the snapshot id so we can tell the user how to undo the undo.
-    _LOKI_CP_FORCE=1 create_checkpoint "pre-rollback snapshot (before restoring ${checkpoint_id})" "rollback"
-    local pre_rollback_id="${_LAST_CHECKPOINT_ID:-}"
-    if [ -n "$pre_rollback_id" ]; then
-        log_info "Saved prior state as ${pre_rollback_id} (undo this rollback with: loki rollback to ${pre_rollback_id})"
-    fi
-
-    # Restore state files (R6: CONTINUITY.md restores iteration/conversation context)
-    for f in state/orchestrator.json queue/pending.json queue/completed.json queue/in-progress.json queue/current-task.json CONTINUITY.md; do
-        if [ -f "${cp_dir}/${f}" ]; then
-            local target_dir=".loki/$(dirname "$f")"
-            mkdir -p "$target_dir"
-            cp "${cp_dir}/${f}" ".loki/${f}" 2>/dev/null || true
-        fi
-    done
-
-    # Log the rollback (use python3 for safe JSON serialization)
-    # v7.5.10: route through safe_append_event_jsonl() so parallel-worktree
-    # rollbacks cannot interleave partial JSONL lines (POSIX append is
-    # only atomic for <PIPE_BUF and not all platforms honor it).
-    local timestamp rb_event
-    timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
-    rb_event=$(_RB_CPID="$checkpoint_id" _RB_SHA="$git_sha" _RB_TS="$timestamp" \
-    python3 -c "
-import json,os
-print(json.dumps({'event':'rollback','checkpoint':os.environ['_RB_CPID'],'git_sha':os.environ['_RB_SHA'],'timestamp':os.environ['_RB_TS']}))
-" 2>/dev/null) || rb_event=""
-    if [ -n "$rb_event" ]; then
-        # Source the emit lib once per call to get safe_append_event_jsonl.
-        # Lib-only mode skips the emit script's normal CLI execution.
-        # shellcheck disable=SC1091
-        if [ -z "${_LOKI_EMIT_LIB_LOADED:-}" ]; then
-            LOKI_EMIT_LIB_ONLY=1 . "$(dirname "${BASH_SOURCE[0]}")/../events/emit.sh" 2>/dev/null \
-                && _LOKI_EMIT_LIB_LOADED=1
-        fi
-        if declare -f safe_append_event_jsonl >/dev/null 2>&1; then
-            safe_append_event_jsonl ".loki/events.jsonl" "$rb_event" 2>/dev/null || true
-        else
-            # Last-resort fallback: bare append (preserves prior behavior).
-            printf '%s\n' "$rb_event" >> ".loki/events.jsonl" 2>/dev/null || true
-        fi
-    fi
-
-    log_info "State files restored from checkpoint: ${checkpoint_id}"
-
-    # R6: the prior hint `git reset --hard ${git_sha}` was MISLEADING. git_sha is
-    # HEAD (the last commit), and Loki does not commit per iteration, so a hard
-    # reset would discard the iteration's work rather than reconstruct it. The
-    # correct, durable recovery is the anchored working-tree snapshot, if present.
-    if [ -f "${cp_dir}/worktree-snapshot.txt" ]; then
-        log_info "To also restore the working tree to this checkpoint:"
-        log_info "  git stash apply refs/loki/cp/${checkpoint_id}"
-    elif [ -n "$git_sha" ] && [ "$git_sha" != "no-git" ]; then
-        log_info "Git SHA at checkpoint (last commit): ${git_sha}"
-        log_info "Note: no working-tree snapshot was captured for this checkpoint;"
-        log_info "code changes since the last commit are not restorable from here."
-    fi
-}
-
-list_checkpoints() {
-    # List recent checkpoints
-    local checkpoint_dir=".loki/state/checkpoints"
-    local index_file="${checkpoint_dir}/index.jsonl"
-    local limit="${1:-10}"
-
-    if [ ! -f "$index_file" ]; then
-        echo "No checkpoints found."
-        return
-    fi
-
-    tail -n "$limit" "$index_file" | python3 -c "
-import sys, json
-lines = sys.stdin.readlines()
-for line in reversed(lines):
-    try:
-        cp = json.loads(line)
-        sha = cp.get('sha','')[:8]
-        task = cp.get('task','')[:60]
-        print(f\"  {cp['id']}  {cp['ts']}  [{sha}]  {task}\")
-    except:
-        continue
-"
-}
-
 start_dashboard() {
     log_header "Starting Loki Dashboard"
 
@@ -11928,17 +11041,6 @@ except Exception as e:
 }
 
 # Load relevant learnings
-load_learnings_context() {
-    local learnings=""
-
-    # Get recent learnings (last 7 days)
-    for learning in $(find .loki/memory/learnings -name "*.md" -mtime -7 2>/dev/null | head -5); do
-        learnings+="$(head -30 "$learning")\n---\n"
-    done
-
-    echo -e "$learnings"
-}
-
 # Load pre-computed relevant learnings from CLI startup (SYN-008)
 # Reads .loki/state/memory-context.json written by load_memory_context() in CLI
 # Note: Different from get_relevant_learnings() which writes to relevant-learnings.json
@@ -12700,75 +11802,7 @@ PYEOF
 #===============================================================================
 
 # Enrich prompt context with relevant cross-project patterns
-enrich_from_knowledge_graph() {
-    local context="$1"
-    local max_patterns="${2:-5}"
-
-    _LOKI_KG_CONTEXT="$context" _LOKI_KG_MAX="$max_patterns" \
-    _LOKI_PROJECT_DIR="$PROJECT_DIR" \
-    python3 << 'PYEOF' 2>/dev/null || echo ""
-import sys
-import os
-import json
-
-project_dir = os.environ.get('_LOKI_PROJECT_DIR', '')
-context = os.environ.get('_LOKI_KG_CONTEXT', '')
-max_results = int(os.environ.get('_LOKI_KG_MAX', '5'))
-
-if not project_dir:
-    sys.exit(0)
-sys.path.insert(0, project_dir)
-try:
-    from memory.knowledge_graph import OrganizationKnowledgeGraph
-    kg = OrganizationKnowledgeGraph()
-    patterns = kg.query_patterns(context, max_results=max_results)
-    if patterns:
-        output = "\n## Cross-Project Knowledge (from knowledge graph)\n"
-        for p in patterns:
-            name = p.get('name', p.get('pattern', 'unnamed'))
-            category = p.get('category', '')
-            desc = p.get('description', '')
-            output += f"- **{name}** ({category}): {desc}\n"
-        print(output)
-except Exception:
-    pass
-PYEOF
-}
-
 # Store new patterns to the knowledge graph after successful iterations
-store_to_knowledge_graph() {
-    local target_dir="${TARGET_DIR:-.}"
-
-    _LOKI_PROJECT_DIR="$PROJECT_DIR" _LOKI_TARGET_DIR="$target_dir" \
-    python3 << 'PYEOF' 2>/dev/null || true
-import sys
-import os
-
-project_dir = os.environ.get('_LOKI_PROJECT_DIR', '')
-target_dir = os.environ.get('_LOKI_TARGET_DIR', '.')
-
-sys.path.insert(0, project_dir)
-try:
-    from memory.knowledge_graph import OrganizationKnowledgeGraph
-    from pathlib import Path
-
-    kg = OrganizationKnowledgeGraph()
-    project_dirs = [Path(target_dir)]
-
-    # Extract and store patterns
-    patterns = kg.extract_patterns(project_dirs)
-    if patterns:
-        patterns = kg.deduplicate_patterns(patterns)
-        kg.save_patterns(patterns)
-
-    # Rebuild graph
-    kg.build_graph(project_dirs)
-    kg.save_graph()
-except Exception:
-    pass
-PYEOF
-}
-
 #===============================================================================
 # Save/Load Wrapper State
 #===============================================================================

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.77.0"
+__version__ = "7.78.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.77.0
+**Version:** v7.78.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.77.0 start ./my-spec.md
+  asklokesh/loki-mode:7.78.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.77.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
+var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.78.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -793,4 +793,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write($Q),2}}s1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var qZ=await KZ(Bun.argv.slice(2));process.exit(qZ);
 
-//# debugId=3E9A351BF52A74EB64756E2164756E21
+//# debugId=753B9888BD0ED74B64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.77.0'
+__version__ = '7.78.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.77.0",
+  "version": "7.78.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.77.0",
+  "version": "7.78.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",