loki-mode 7.85.0 → 7.87.0

package/autonomy/loki

@@ -16500,6 +16500,10 @@ main() {
             # Receipt surface): same subcommands (list/show/verify/open/share).
             cmd_proof "$@"
             ;;
+        secure)
+            # Secure-by-default gate surface: inspect findings + manage waivers.
+            cmd_secure "$@"
+            ;;
         bench)
             cmd_bench "$@"
             ;;
@@ -30434,6 +30438,110 @@ cmd_bench() {
     bash "$bench_sh" "$@"
 }
 
+# loki secure - the secure-by-default gate surface (v7.87.0).
+# Subcommands: list (show findings) | waive <rule> <file> [reason] | unwaive.
+# Waivers are written to .loki/quality/security-waivers.json, which the gate
+# (run.sh run_secure_scan) and the Evidence Receipt both READ + honor. The gate
+# is advisory by default; LOKI_SECURE_GATE=block makes un-waived HIGH findings
+# block. Honest: a waiver is RECORDED in the receipt (accepted with intent), never
+# silently hides a finding.
+cmd_secure() {
+    local loki_dir="${LOKI_DIR:-.loki}"
+    local quality_dir="${loki_dir}/quality"
+    local findings_file="${quality_dir}/security-findings.json"
+    local waivers_file="${quality_dir}/security-waivers.json"
+    local sub="${1:-}"
+    [ $# -gt 0 ] && shift
+    case "$sub" in
+        ""|--help|-h|help)
+            echo -e "${BOLD}loki secure${NC} - secure-by-default gate: findings + waivers"
+            echo ""
+            echo "Usage: loki secure <subcommand> [args]"
+            echo ""
+            echo "Subcommands:"
+            echo "  list                 Show security findings from the last scan"
+            echo "  waive <rule> <file> [reason]   Waive a finding (accepted with intent)"
+            echo "  unwaive <rule> <file>          Remove a waiver"
+            echo ""
+            echo "The gate is advisory by default; set LOKI_SECURE_GATE=block to make"
+            echo "un-waived HIGH findings block completion. Waivers are recorded in the"
+            echo "Evidence Receipt (loki proof show) -- they are never hidden."
+            [ "$sub" = "" ] && exit 1
+            exit 0
+            ;;
+        list)
+            if [ ! -f "$findings_file" ]; then
+                echo -e "${YELLOW}No security scan results yet.${NC} Run 'loki start' (the gate runs in the review phase)."
+                exit 0
+            fi
+            if command -v jq &>/dev/null; then
+                jq '.findings' "$findings_file" 2>/dev/null || cat "$findings_file"
+            else
+                LOKI_SEC_F="$findings_file" python3 -c "import json,os; d=json.load(open(os.environ['LOKI_SEC_F'])); [print('%s [%s] %s%s -- %s' % (f.get('severity','?'), f.get('rule','?'), f.get('file','?'), (':'+str(f['line'])) if f.get('line') else '', f.get('fix',''))) for f in d.get('findings',[])] or print('No findings.')"
+            fi
+            exit 0
+            ;;
+        waive)
+            local rule="${1:-}" file="${2:-}" reason="${3:-waived via loki secure}"
+            if [ -z "$rule" ] || [ -z "$file" ]; then
+                echo -e "${RED}Usage: loki secure waive <rule> <file> [reason]${NC}" >&2
+                exit 2
+            fi
+            mkdir -p "$quality_dir"
+            LOKI_SEC_W="$waivers_file" LOKI_SEC_RULE="$rule" LOKI_SEC_FILE="$file" LOKI_SEC_REASON="$reason" python3 - <<'PYW'
+import json, os
+p = os.environ["LOKI_SEC_W"]
+try:
+    with open(p) as f: data = json.load(f)
+    if not isinstance(data, dict): data = {}
+except Exception:
+    data = {}
+waivers = data.get("waivers")
+if not isinstance(waivers, list): waivers = []
+rule, fl, reason = os.environ["LOKI_SEC_RULE"], os.environ["LOKI_SEC_FILE"], os.environ["LOKI_SEC_REASON"]
+if not any(w.get("rule") == rule and w.get("file") == fl for w in waivers if isinstance(w, dict)):
+    waivers.append({"rule": rule, "file": fl, "reason": reason})
+data["waivers"] = waivers
+tmp = p + ".tmp"
+with open(tmp, "w") as f: json.dump(data, f, indent=2)
+os.replace(tmp, p)
+print("Waived %s on %s (recorded in the Evidence Receipt)." % (rule, fl))
+PYW
+            exit $?
+            ;;
+        unwaive)
+            local rule="${1:-}" file="${2:-}"
+            if [ -z "$rule" ] || [ -z "$file" ]; then
+                echo -e "${RED}Usage: loki secure unwaive <rule> <file>${NC}" >&2
+                exit 2
+            fi
+            [ -f "$waivers_file" ] || { echo "No waivers to remove."; exit 0; }
+            LOKI_SEC_W="$waivers_file" LOKI_SEC_RULE="$rule" LOKI_SEC_FILE="$file" python3 - <<'PYU'
+import json, os
+p = os.environ["LOKI_SEC_W"]
+try:
+    with open(p) as f: data = json.load(f)
+except Exception:
+    data = {}
+waivers = [w for w in (data.get("waivers") or [])
+           if not (isinstance(w, dict) and w.get("rule") == os.environ["LOKI_SEC_RULE"]
+                   and w.get("file") == os.environ["LOKI_SEC_FILE"])]
+data["waivers"] = waivers
+tmp = p + ".tmp"
+with open(tmp, "w") as f: json.dump(data, f, indent=2)
+os.replace(tmp, p)
+print("Removed waiver for %s on %s." % (os.environ["LOKI_SEC_RULE"], os.environ["LOKI_SEC_FILE"]))
+PYU
+            exit $?
+            ;;
+        *)
+            echo -e "${RED}Unknown subcommand: secure $sub${NC}" >&2
+            echo "Try: loki secure --help"
+            exit 2
+            ;;
+    esac
+}
+
 # loki proof - inspect and share proof-of-run artifacts (.loki/proofs/<id>/).
 # Subcommands: list | show <id> | open <id> | share <id>.
 # The proof.json schema is frozen (R1 spec). Reads are tolerant of missing

package/autonomy/run.sh

@@ -7309,6 +7309,157 @@ SAFEOF
     fi
 }
 
+# ============================================================================
+# Secure-by-default scan (v7.87.0 - Loop 4)
+# Runs the high-precision rule engine (autonomy/lib/secure-scan.py) over the
+# generated app and reports known-bad security patterns.
+#
+# ADVISORY BY DEFAULT (mirrors the ktlint/detekt advisory linters above):
+# findings are reported via log_warn + the receipt json, but do NOT block. This
+# guarantees no existing build starts blocking on this new gate.
+#
+# OPT-IN BLOCK: only when LOKI_SECURE_GATE=block do un-waived HIGH findings
+# cause a blocking gate failure (return 1, same mechanism the other gates use).
+#
+# Waivers: .loki/quality/security-waivers.json ({"waivers":[{rule,file},...]})
+# is READ here and honored (matched findings recorded as waived, never counted
+# active). The waiver-write surface is a separate slice.
+#
+# Honest degrade: if python3 or secure-scan.py is absent, pass through cleanly
+# (no crash, no block), exactly like the optional linters.
+# ============================================================================
+run_secure_scan() {
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    local quality_dir="$loki_dir/quality"
+    mkdir -p "$quality_dir"
+
+    local out_file="$quality_dir/security-findings.json"
+    local waivers_file="$quality_dir/security-waivers.json"
+    local scanner="$SCRIPT_DIR/lib/secure-scan.py"
+
+    # Honest pass-through if the engine or python3 is unavailable. Still write a
+    # valid (empty) receipt so downstream consumers never read malformed JSON.
+    if ! command -v python3 >/dev/null 2>&1 || [ ! -f "$scanner" ]; then
+        cat > "$out_file" << 'SECEMPTY'
+{"rules_version":null,"findings":[],"summary":{"total":0,"by_severity":{}},"skipped":"scanner-unavailable"}
+SECEMPTY
+        log_info "Security scan: secure-scan.py or python3 not available, skipping (pass-through)"
+        return 0
+    fi
+
+    # Run the scanner. exit 0 = no findings, 1 = findings, 2 = bad input.
+    local raw rc=0
+    raw=$(python3 "$scanner" "${TARGET_DIR:-.}" --json 2>/dev/null) || rc=$?
+    if [ "$rc" -eq 2 ] || [ -z "$raw" ]; then
+        cat > "$out_file" << 'SECEMPTY'
+{"rules_version":null,"findings":[],"summary":{"total":0,"by_severity":{}},"skipped":"scanner-error"}
+SECEMPTY
+        log_info "Security scan: scanner returned no parseable output, skipping (pass-through)"
+        return 0
+    fi
+
+    # Apply waivers, build the receipt json, and emit a machine-readable verdict.
+    # All policy lives in this one python pass so the bash stays bash-3.2 safe.
+    # It prints a final line: ACTIVE_HIGH=<n>\tACTIVE_TOTAL=<n>\tWAIVED=<n>
+    # and writes the enriched receipt (findings carry a "waived" bool).
+    local verdict
+    verdict=$(_SEC_RAW="$raw" _SEC_WAIVERS="$waivers_file" _SEC_OUT="$out_file" python3 -c '
+import json, os, sys
+raw = os.environ.get("_SEC_RAW", "")
+waivers_file = os.environ.get("_SEC_WAIVERS", "")
+out_file = os.environ.get("_SEC_OUT", "")
+
+try:
+    data = json.loads(raw)
+except Exception:
+    data = {"rules_version": None, "findings": [], "summary": {"total": 0, "by_severity": {}}}
+
+# Load waivers: {"waivers":[{"rule":..,"file":..}, ...]}. Match on rule+file.
+waived_set = set()
+try:
+    with open(waivers_file) as f:
+        wdoc = json.load(f)
+    for w in wdoc.get("waivers", []):
+        r = w.get("rule"); fl = w.get("file")
+        if r is not None and fl is not None:
+            waived_set.add((r, fl))
+except (OSError, json.JSONDecodeError, AttributeError):
+    pass
+
+findings = data.get("findings", []) or []
+active_high = 0
+active_total = 0
+waived_count = 0
+for fnd in findings:
+    key = (fnd.get("rule"), fnd.get("file"))
+    is_waived = key in waived_set
+    fnd["waived"] = is_waived
+    if is_waived:
+        waived_count += 1
+    else:
+        active_total += 1
+        if str(fnd.get("severity", "")).upper() == "HIGH":
+            active_high += 1
+
+data["waived"] = waived_count
+data["active"] = active_total
+try:
+    with open(out_file, "w") as f:
+        json.dump(data, f, indent=2)
+except OSError:
+    pass
+
+sys.stdout.write("ACTIVE_HIGH=%d\tACTIVE_TOTAL=%d\tWAIVED=%d" % (active_high, active_total, waived_count))
+' 2>/dev/null) || verdict=""
+
+    if [ -z "$verdict" ]; then
+        # python policy pass failed unexpectedly; preserve the raw scan as the
+        # receipt so nothing is lost, and pass through (never crash the gate).
+        printf '%s\n' "$raw" > "$out_file" 2>/dev/null || true
+        log_info "Security scan: result recorded (policy pass unavailable, advisory)"
+        return 0
+    fi
+
+    local active_high active_total waived
+    active_high=$(printf '%s' "$verdict" | sed -n 's/.*ACTIVE_HIGH=\([0-9]*\).*/\1/p')
+    active_total=$(printf '%s' "$verdict" | sed -n 's/.*ACTIVE_TOTAL=\([0-9]*\).*/\1/p')
+    waived=$(printf '%s' "$verdict" | sed -n 's/.*WAIVED=\([0-9]*\).*/\1/p')
+    active_high=${active_high:-0}
+    active_total=${active_total:-0}
+    waived=${waived:-0}
+
+    if [ "$active_total" -eq 0 ]; then
+        log_info "Security scan: no active findings (waived: $waived)"
+        return 0
+    fi
+
+    # Actionable advisory summary: rule + file + fix, from the receipt json.
+    log_warn "Security scan: $active_total active finding(s) (HIGH: $active_high, waived: $waived)"
+    _SEC_OUT="$out_file" python3 -c '
+import json, os
+try:
+    with open(os.environ["_SEC_OUT"]) as f:
+        data = json.load(f)
+except Exception:
+    data = {"findings": []}
+for fnd in data.get("findings", []):
+    if fnd.get("waived"):
+        continue
+    print("  [%s] %s %s:%s -- %s | fix: %s" % (
+        fnd.get("severity", "?"), fnd.get("rule", "?"),
+        fnd.get("file", "?"), fnd.get("line", "?"),
+        fnd.get("message", ""), fnd.get("fix", "")))
+' 2>/dev/null | while IFS= read -r line; do log_warn "$line"; done
+
+    # OPT-IN BLOCK: only un-waived HIGH findings block, and only when explicitly
+    # enabled. Advisory default returns 0 (never surprise-blocks).
+    if [ "${LOKI_SECURE_GATE:-advisory}" = "block" ] && [ "$active_high" -gt 0 ]; then
+        log_warn "Security gate: $active_high un-waived HIGH finding(s) - BLOCK (LOKI_SECURE_GATE=block)"
+        return 1
+    fi
+    return 0
+}
+
 #===============================================================================
 # Gate Failure Tracking (v6.10.0)
 #===============================================================================
@@ -15262,6 +15413,18 @@ if __name__ == "__main__":
                     log_warn "Static analysis FAILED ($sa_count consecutive) - findings injected into next iteration"
                 fi
             fi
+            # Secure-by-default scan (v7.87.0). Advisory by default (never
+            # blocks); records .loki/quality/security-findings.json each
+            # iteration. Blocks only on un-waived HIGH when LOKI_SECURE_GATE=block.
+            log_info "Quality gate: security scan (advisory)..."
+            if run_secure_scan; then
+                clear_gate_failure "security_scan"
+            else
+                local sec_count
+                sec_count=$(track_gate_failure "security_scan")
+                gate_failures="${gate_failures}security_scan,"
+                log_warn "Security gate BLOCKED ($sec_count consecutive) - un-waived HIGH findings (LOKI_SECURE_GATE=block)"
+            fi
             # BUG-ST-002: Check pause signal between quality gates
             if [ -f "${TARGET_DIR:-.}/.loki/PAUSE" ] || [ -f "${TARGET_DIR:-.}/.loki/STOP" ]; then
                 log_warn "Pause/stop signal detected between quality gates - deferring remaining gates"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.85.0"
+__version__ = "7.87.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -10110,6 +10110,62 @@ async def list_proofs():
     return {"proofs": items}
 
 
+@app.get("/api/proofs/summary",
+         dependencies=[Depends(auth.require_scope("read"))])
+async def proofs_summary():
+    """Honest aggregate over the active project's Evidence Receipts.
+
+    Counts are computed ONLY from real proof.json files; nothing is invented.
+    The single source of truth for "verified" is the v1.1 deterministic
+    honesty.headline (proof-generator.py::_compute_headline), which a forger
+    cannot turn green without real exit_code:0 evidence. Buckets:
+
+      verified      -> honesty.headline == "VERIFIED"
+      with_gaps     -> honesty.headline == "VERIFIED WITH GAPS"
+      not_verified  -> honesty.headline == "NOT VERIFIED"
+      unknown       -> no honesty block (schema v1.0 proofs) or any other/
+                       missing headline. We refuse to count these as verified
+                       because we cannot prove they were.
+
+    Empty or missing proofs dir -> all zeros (200), an honest empty state.
+    Mirrors list_proofs' iteration + _safe_json_read so the counts can never
+    drift from what the list endpoint shows.
+    """
+    proofs_dir = _proofs_dir()
+    total = verified = with_gaps = not_verified = unknown = 0
+    try:
+        entries = sorted(proofs_dir.iterdir())
+    except (OSError, FileNotFoundError):
+        entries = []
+    for entry in entries:
+        if not entry.is_dir():
+            continue
+        proof_json = entry / "proof.json"
+        if not proof_json.is_file():
+            continue
+        data = _safe_json_read(proof_json, default=None)
+        if not isinstance(data, dict):
+            continue
+        total += 1
+        honesty = data.get("honesty")
+        headline = honesty.get("headline") if isinstance(honesty, dict) else None
+        if headline == "VERIFIED":
+            verified += 1
+        elif headline == "VERIFIED WITH GAPS":
+            with_gaps += 1
+        elif headline == "NOT VERIFIED":
+            not_verified += 1
+        else:
+            unknown += 1
+    return {
+        "total_receipts": total,
+        "verified": verified,
+        "with_gaps": with_gaps,
+        "not_verified": not_verified,
+        "unknown": unknown,
+    }
+
+
 @app.get("/api/proofs/{run_id}", dependencies=[Depends(auth.require_scope("read"))])
 async def get_proof(run_id: str):
     """Return the redacted proof.json for one run."""

package/dashboard/static/index.html

@@ -204,6 +204,41 @@
       font-weight: 500;
     }
 
+    /* Verified-receipts badge: an honest trust signal next to the brand.
+       Counts are pulled live from /api/proofs/summary and reflect only real,
+       deterministic Evidence Receipts. Hidden until we have data; shows a muted
+       "No receipts yet" at zero; never a fabricated number. */
+    .receipts-badge {
+      display: none;
+      align-items: center;
+      gap: 5px;
+      margin-top: 6px;
+      padding: 3px 8px;
+      width: fit-content;
+      max-width: 100%;
+      border: 1px solid var(--loki-border);
+      border-radius: 999px;
+      background: var(--loki-bg-card);
+      font-family: 'Inter', system-ui, sans-serif;
+      font-size: 10px;
+      font-weight: 500;
+      line-height: 1.2;
+      color: var(--loki-text-secondary);
+      cursor: default;
+    }
+    .receipts-badge.show { display: inline-flex; }
+    .receipts-badge.empty { color: var(--loki-text-muted); }
+    .receipts-badge .receipts-dot {
+      width: 6px;
+      height: 6px;
+      border-radius: 50%;
+      background: var(--loki-success);
+      flex: 0 0 auto;
+    }
+    .receipts-badge.empty .receipts-dot { background: var(--loki-text-muted); }
+    .receipts-badge .receipts-verified { color: var(--loki-success); font-weight: 600; }
+    .receipts-badge.empty .receipts-verified { color: var(--loki-text-muted); font-weight: 500; }
+
     /* Navigation: the only scrolling region. min-height:0 + overflow-y:auto so
        a long grouped nav scrolls within the sidebar while the header + footer
        stay pinned. */
@@ -851,6 +886,15 @@
         </button>
         <span class="logo-brand">Loki Mode</span>
         <span class="logo-subtitle">powered by Autonomi</span>
+        <!-- Verified-receipts badge: honest trust signal. Populated at runtime
+             from /api/proofs/summary; hidden until data arrives, shows a muted
+             empty state at zero, and degrades silently if the endpoint is
+             unavailable. Every receipt is a deterministic, re-verifiable
+             Evidence Receipt (loki proof verify). -->
+        <span class="receipts-badge" id="receipts-badge" role="status">
+          <span class="receipts-dot" aria-hidden="true"></span>
+          <span id="receipts-badge-text"></span>
+        </span>
         <!-- v7.84 single project switcher: ONE searchable <select> with two
              <optgroup>s ("Running" and "All projects"), built at runtime from
              /api/running-projects. A running-app count pill sits beside it; the
@@ -15250,6 +15294,55 @@ document.addEventListener('DOMContentLoaded', function() {
     } catch (err) { /* polling fallback still covers it */ }
   })();
 
+  // Verified-receipts badge: honest trust signal beside the brand. Fetches the
+  // real aggregate from /api/proofs/summary and shows "N receipts - M
+  // verified". At zero it shows a muted "No receipts yet"; if the endpoint is
+  // unavailable it stays hidden (no error spew). We never display a number the
+  // data does not support: "verified" here is the deterministic
+  // honesty.headline == VERIFIED count, re-verifiable via loki proof verify.
+  (function initReceiptsBadge() {
+    var badge = document.getElementById('receipts-badge');
+    var textEl = document.getElementById('receipts-badge-text');
+    if (!badge || !textEl) return;
+
+    function plural(n, word) { return n + ' ' + word + (n === 1 ? '' : 's'); }
+
+    function render(s) {
+      var total = (s && typeof s.total_receipts === 'number') ? s.total_receipts : 0;
+      var verified = (s && typeof s.verified === 'number') ? s.verified : 0;
+      if (total <= 0) {
+        // Honest empty state: no fabricated number.
+        badge.classList.add('empty');
+        textEl.textContent = 'No receipts yet';
+        badge.title = 'Evidence Receipts appear here once Loki completes a '
+          + 'verified run. Each is deterministic and re-verifiable with '
+          + '"loki proof verify".';
+        badge.classList.add('show');
+        return;
+      }
+      badge.classList.remove('empty');
+      // "N receipts - M verified" with the verified count emphasized.
+      textEl.innerHTML = plural(total, 'receipt') + ' - '
+        + '<span class="receipts-verified"></span> verified';
+      var vEl = textEl.querySelector('.receipts-verified');
+      if (vEl) vEl.textContent = String(verified);
+      badge.title = plural(verified, 'receipt') + ' of ' + total
+        + ' verified by a deterministic Evidence Receipt (re-verifiable with '
+        + '"loki proof verify"). "Verified" means tests passed with real '
+        + 'exit-code evidence, not an LLM opinion.';
+      badge.classList.add('show');
+    }
+
+    function poll() {
+      fetch('/api/proofs/summary', { headers: { 'Accept': 'application/json' } })
+        .then(function (r) { return r.ok ? r.json() : null; })
+        .then(function (d) { if (d) render(d); })
+        .catch(function () { /* endpoint unavailable: leave badge hidden */ });
+    }
+    poll();
+    setInterval(poll, 30000);
+  })();
+
   // Mobile menu toggle
   var mobileMenuBtn = document.getElementById('mobile-menu-btn');
   var sidebar = document.getElementById('sidebar');

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.85.0
+**Version:** v7.87.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.85.0 start ./my-spec.md
+  asklokesh/loki-mode:7.87.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.85.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
+var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.87.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -796,4 +796,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write($Q),2}}s1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var qZ=await KZ(Bun.argv.slice(2));process.exit(qZ);
 
-//# debugId=05CD23D774CD678C64756E2164756E21
+//# debugId=7982E696DB64940A64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.85.0'
+__version__ = '7.87.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.85.0",
+  "version": "7.87.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.85.0",
+  "version": "7.87.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",