loki-mode 7.8.3 → 7.9.1

package/autonomy/run.sh

@@ -4091,6 +4091,36 @@ print(json.dumps(rec))
 " > "$tmp" 2>/dev/null && mv -f "$tmp" "$loki_dir/state/prd-signature.json" 2>/dev/null || rm -f "$tmp" 2>/dev/null
 }
 
+# generate_proof_of_run: thin fire-and-forget wrapper around the standalone
+# proof-of-run generator (autonomy/lib/proof-generator.py). Runs on both
+# success and failure session ends. The generator owns the schema, redaction
+# chokepoint, and HTML rendering; this wrapper only resolves the path and
+# invokes python3. Never fails the session (|| true at the call site).
+# NOTE: no inline python here on purpose -- keep this wrapper apostrophe-free
+# to avoid the bash single-quote trap.
+generate_proof_of_run() {
+    # $1 (session result) is accepted for call-site symmetry but the generator
+    # derives success/failure from queue state, so it is intentionally unused.
+    local _result="${1:-0}"
+    : "$_result"
+    local gen="$SCRIPT_DIR/lib/proof-generator.py"
+    [ -f "$gen" ] || return 0
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    [ -d "$loki_dir" ] || return 0
+    local ver provider
+    ver="$(get_version 2>/dev/null || echo unknown)"
+    provider="${PROVIDER_NAME:-claude}"
+    ITERATION_COUNT="${ITERATION_COUNT:-0}" \
+    PROVIDER_NAME="$provider" \
+    PRD_PATH="${prd_path:-}" \
+    python3 "$gen" \
+        --loki-dir "$loki_dir" \
+        --loki-version "$ver" \
+        --provider "$provider" \
+        --quiet >/dev/null 2>&1 || true
+    return 0
+}
+
 track_iteration_complete() {
     local iteration="$1"
     local exit_code="${2:-0}"
@@ -13277,6 +13307,12 @@ main() {
     # Write structured handoff for future sessions (v5.49.0)
     write_structured_handoff "session_end_result_${result}" 2>/dev/null || true
 
+    # Generate shareable proof-of-run artifact (R1). Default-on, opt out with
+    # LOKI_PROOF=0. Fire-and-forget on both success and failure runs.
+    if [ "${LOKI_PROOF:-1}" != "0" ]; then
+        generate_proof_of_run "$result" || true
+    fi
+
     # Create PR from agent branch if branch protection was enabled
     create_session_pr
     audit_agent_action "session_stop" "Session ended" "result=$result,iterations=$ITERATION_COUNT"

package/bin/loki

@@ -116,7 +116,7 @@ fi
 # Two-token routes (provider show/list, memory list/index) match on the first
 # token only; the Bun dispatcher handles subcommand routing internally.
 case "${1:-}" in
-    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis)
+    version|--version|-v|status|stats|doctor|provider|memory|rollback|internal|kpis|proof)
         # v7.5.2: rollback added (wires loki-ts/src/commands/rollback.ts).
         # v7.5.3: internal added for autonomy/run.sh phase1-hooks calls.
         # v7.5.28: kpis added (Phase K MVP: read-only KPI snapshot).

package/completions/_loki

@@ -88,6 +88,14 @@ function _loki {
                         '--format[Report format]:format:(text markdown html)' \
                         '--help[Show help]'
                     ;;
+                proof)
+                    _arguments \
+                        '--yes[Skip redaction-preview confirmation]' \
+                        '--private[Create a secret gist when sharing]' \
+                        '--hosted[Hosted publishing (coming in R9)]' \
+                        '--help[Show help]' \
+                        '1:subcommand:(list show open share)'
+                    ;;
                 completions)
                     _arguments '1:shell:(bash zsh)'
                     ;;
@@ -140,6 +148,7 @@ function _loki_commands {
         'onboard:Analyze repo and generate CLAUDE.md'
         'metrics:Session productivity report'
         'share:Share session report as GitHub Gist'
+        'proof:Inspect/share proof-of-run artifacts'
         'context:Context window management'
         'code:Codebase intelligence'
         'version:Show version'

package/completions/loki.bash

@@ -5,7 +5,7 @@ _loki_completion() {
     _init_completion || return
 
     # Main subcommands (must match autonomy/loki main case statement)
-    local main_commands="start quick monitor demo init stop pause resume status dashboard logs serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets doctor watchdog audit metrics syslog onboard share explain plan report test ci watch telemetry agent context code run export review optimize heal migrate cluster worktree trigger failover remote version completions help"
+    local main_commands="start quick monitor demo init stop pause resume status dashboard logs serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets doctor watchdog audit metrics syslog onboard share proof explain plan report test ci watch telemetry agent context code run export review optimize heal migrate cluster worktree trigger failover remote version completions help"
 
     # 1. If we are on the first argument (subcommand)
     if [[ $cword -eq 1 ]]; then
@@ -178,6 +178,17 @@ _loki_completion() {
             fi
             ;;
 
+        proof)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--yes --private --hosted --help" -- "$cur") )
+                return 0
+            fi
+            if [[ $cword -eq 2 ]]; then
+                COMPREPLY=( $(compgen -W "list show open share" -- "$cur") )
+                return 0
+            fi
+            ;;
+
         monitor)
             # Complete with directories
             _filedir -d

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.8.3"
+__version__ = "7.9.1"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -7175,6 +7175,96 @@ async def get_escalation(filename: str):
     return PlainTextResponse(content=body, media_type="text/markdown")
 
 
+# ---------------------------------------------------------------------------
+# Proof-of-run artifacts (R1, Slice C).
+#
+# Directory-layout contract with the generator (autonomy/lib/proof-generator.py,
+# Slice A): each run's proof lives at
+#     <active project>/.loki/proofs/<run_id>/proof.json
+#     <active project>/.loki/proofs/<run_id>/index.html
+# This assumption is asserted explicitly so it is checkable: if Slice A emits a
+# flat layout instead, the /api/proofs routes below return empty / 404 rather
+# than reading the wrong files. Run-id segments are sanitized and every resolved
+# path is realpath-contained under .loki/proofs (mirrors the escalations route
+# guard at the get_escalation handler above).
+# ---------------------------------------------------------------------------
+def _proofs_dir() -> _Path:
+    return _get_loki_dir() / "proofs"
+
+
+def _safe_proof_run_dir(run_id: str) -> _Path:
+    """Resolve and validate a proof run directory, traversal-safe.
+
+    Rejects path separators, NUL, leading dot, and parent references in the
+    run_id, then realpath-contains the result under .loki/proofs. Raises
+    HTTPException(400) on any rejection.
+    """
+    if (not run_id or "/" in run_id or "\\" in run_id or "\x00" in run_id
+            or run_id.startswith(".") or ".." in run_id):
+        raise HTTPException(status_code=400, detail="invalid run id")
+    base = os.path.realpath(str(_proofs_dir()))
+    target = os.path.realpath(os.path.join(base, run_id))
+    if not target.startswith(base + os.sep):
+        raise HTTPException(status_code=400, detail="invalid run id")
+    return _Path(target)
+
+
+@app.get("/api/proofs")
+async def list_proofs():
+    """List proof-of-run artifacts for the active project's .loki/proofs/."""
+    proofs_dir = _proofs_dir()
+    items: list[dict] = []
+    try:
+        entries = sorted(proofs_dir.iterdir())
+    except (OSError, FileNotFoundError):
+        return {"proofs": []}
+    for entry in entries:
+        if not entry.is_dir():
+            continue
+        proof_json = entry / "proof.json"
+        if not proof_json.is_file():
+            continue
+        data = _safe_json_read(proof_json, default=None)
+        if not isinstance(data, dict):
+            continue
+        items.append({
+            "run_id": data.get("run_id", entry.name),
+            "generated_at": data.get("generated_at"),
+            "loki_version": data.get("loki_version"),
+            "cost_usd": (data.get("cost") or {}).get("usd"),
+            "files_changed": (data.get("files_changed") or {}).get("count"),
+            "final_verdict": (data.get("council") or {}).get("final_verdict"),
+            "has_html": (entry / "index.html").is_file(),
+        })
+    # Newest first when generated_at is present.
+    items.sort(key=lambda x: (x.get("generated_at") or ""), reverse=True)
+    return {"proofs": items}
+
+
+@app.get("/api/proofs/{run_id}")
+async def get_proof(run_id: str):
+    """Return the redacted proof.json for one run."""
+    run_dir = _safe_proof_run_dir(run_id)
+    proof_json = run_dir / "proof.json"
+    if not proof_json.is_file():
+        raise HTTPException(status_code=404, detail=f"proof not found: {run_id}")
+    data = _safe_json_read(proof_json, default=None)
+    if not isinstance(data, dict):
+        raise HTTPException(status_code=500, detail="proof.json unreadable")
+    return JSONResponse(content=data)
+
+
+@app.get("/api/proofs/{run_id}/html")
+async def get_proof_html(run_id: str):
+    """Serve the self-contained shareable proof page for one run."""
+    run_dir = _safe_proof_run_dir(run_id)
+    index_html = run_dir / "index.html"
+    if not index_html.is_file():
+        raise HTTPException(status_code=404,
+                            detail=f"proof page not found: {run_id}")
+    return FileResponse(str(index_html), media_type="text/html")
+
+
 # ---------------------------------------------------------------------------
 # SPA catch-all: serve index.html for any path not matched by API routes
 # or static asset mounts.  This lets the dashboard UI handle client-side routing.

package/dashboard/static/proofs.html

@@ -0,0 +1,119 @@
+<!DOCTYPE html>
+<!--
+  Loki Mode - Proofs index (zero-build standalone fallback, R1 Slice C).
+
+  Self-contained: all CSS inlined, no external resources. Fetches /api/proofs
+  and links each entry to /api/proofs/<run_id>/html. This page exists so the
+  proofs surface works without knowing the dashboard SPA build source dir.
+-->
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Loki Mode - Proofs of Run</title>
+<style>
+  :root {
+    --bg: #0f1115; --panel: #171a21; --panel-2: #1d2129; --border: #2a2f3a;
+    --text: #e7e9ee; --muted: #9aa1ad; --faint: #6b7280; --accent: #6f7bf7;
+    --green: #34d399; --red: #f87171; --amber: #fbbf24;
+    --mono: ui-monospace, "SF Mono", "Menlo", "Consolas", monospace;
+    --sans: 'Inter', system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  }
+  * { box-sizing: border-box; }
+  body { margin: 0; background: var(--bg); color: var(--text); font-family: var(--sans); line-height: 1.5; }
+  a { color: var(--accent); text-decoration: none; }
+  a:hover { text-decoration: underline; }
+  .wrap { max-width: 880px; margin: 0 auto; padding: 40px 20px 80px; }
+  .head { display: flex; align-items: baseline; justify-content: space-between; margin-bottom: 8px; }
+  h1 { font-size: 24px; font-weight: 650; letter-spacing: -0.3px; margin: 0; }
+  .head a { font-size: 13px; }
+  .sub { color: var(--muted); font-size: 14px; margin: 0 0 26px; }
+  .list { display: flex; flex-direction: column; gap: 12px; }
+  .row {
+    display: block; background: var(--panel); border: 1px solid var(--border);
+    border-radius: 12px; padding: 16px 18px; color: var(--text);
+  }
+  .row:hover { border-color: var(--accent); text-decoration: none; }
+  .row .top { display: flex; align-items: baseline; gap: 12px; flex-wrap: wrap; }
+  .row .rid { font-family: var(--mono); font-size: 14px; font-weight: 600; }
+  .row .usd { font-family: var(--mono); font-size: 16px; font-weight: 650; }
+  .row .ts { color: var(--faint); font-size: 12px; margin-left: auto; }
+  .row .meta { color: var(--muted); font-size: 13px; margin-top: 6px; display: flex; gap: 14px; flex-wrap: wrap; }
+  .badge { font-size: 12px; font-weight: 600; padding: 2px 8px; border-radius: 6px; border: 1px solid var(--border); }
+  .b-approve { color: var(--green); border-color: rgba(52,211,153,0.4); }
+  .b-reject { color: var(--red); border-color: rgba(248,113,113,0.4); }
+  .b-concern { color: var(--amber); border-color: rgba(251,191,36,0.4); }
+  .empty { color: var(--muted); background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 28px; text-align: center; }
+  .empty code { font-family: var(--mono); color: var(--text); background: var(--panel-2); padding: 2px 6px; border-radius: 5px; }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <div class="head">
+    <h1>Proofs of Run</h1>
+    <a href="/">Back to dashboard</a>
+  </div>
+  <p class="sub">Shareable, self-contained proof pages generated at the end of each run. Anyone can open them, no account needed.</p>
+  <div id="content"><p class="sub">Loading...</p></div>
+</div>
+<script>
+(function () {
+  "use strict";
+  function esc(s) {
+    s = (s === null || s === undefined) ? "" : String(s);
+    return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+  }
+  function fmtUsd(n) {
+    n = Number(n);
+    if (!isFinite(n)) return "";
+    var s = n.toFixed(4).replace(/0+$/, "").replace(/\.$/, "");
+    if (s.indexOf(".") === -1) s += ".00";
+    else if (s.split(".")[1].length === 1) s += "0";
+    return "$" + s;
+  }
+  function badgeClass(v) {
+    v = String(v || "").toUpperCase();
+    if (v.indexOf("APPROVE") === 0 || v === "PASS" || v === "PASSED") return "b-approve";
+    if (v.indexOf("REJECT") === 0 || v.indexOf("BLOCK") === 0 || v === "FAIL") return "b-reject";
+    if (v.indexOf("CONCERN") === 0) return "b-concern";
+    return "";
+  }
+  function render(proofs) {
+    var c = document.getElementById("content");
+    if (!proofs || proofs.length === 0) {
+      c.innerHTML = '<div class="empty">No proofs yet. They are generated automatically at the end of a run' +
+        ' (set <code>LOKI_PROOF=0</code> to opt out).</div>';
+      return;
+    }
+    var rows = "";
+    for (var i = 0; i < proofs.length; i++) {
+      var p = proofs[i];
+      var rid = esc(p.run_id);
+      var usd = (p.cost_usd !== null && p.cost_usd !== undefined) ? fmtUsd(p.cost_usd) : "";
+      var fc = (p.files_changed !== null && p.files_changed !== undefined) ? (p.files_changed + " files") : "";
+      var verdict = p.final_verdict ? '<span class="badge ' + badgeClass(p.final_verdict) + '">' + esc(p.final_verdict) + "</span>" : "";
+      var ver = p.loki_version ? ("v" + esc(p.loki_version)) : "";
+      var ts = p.generated_at ? esc(p.generated_at) : "";
+      var href = p.has_html ? ("/api/proofs/" + encodeURIComponent(p.run_id) + "/html") : ("/api/proofs/" + encodeURIComponent(p.run_id));
+      var meta = [usd ? '<span class="usd">' + usd + "</span>" : "", fc, ver].filter(Boolean).join(" ");
+      rows += '<a class="row" href="' + href + '">' +
+        '<div class="top"><span class="rid">' + rid + "</span>" + verdict +
+        (ts ? '<span class="ts">' + ts + "</span>" : "") + "</div>" +
+        (meta ? '<div class="meta">' + meta + "</div>" : "") +
+        "</a>";
+    }
+    c.innerHTML = '<div class="list">' + rows + "</div>";
+  }
+  function renderError(msg) {
+    document.getElementById("content").innerHTML =
+      '<div class="empty">Could not load proofs. ' + esc(msg || "") + "</div>";
+  }
+  fetch("/api/proofs", { headers: { "Accept": "application/json" } })
+    .then(function (r) { if (!r.ok) throw new Error("HTTP " + r.status); return r.json(); })
+    .then(function (d) { render((d && d.proofs) || []); })
+    .catch(function (e) { renderError(e && e.message); });
+})();
+</script>
+</body>
+</html>

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.8.3
+**Version:** v7.9.1
 
 ---