loki-mode 7.86.0 → 7.88.0

package/autonomy/loki

@@ -16500,6 +16500,16 @@ main() {
             # Receipt surface): same subcommands (list/show/verify/open/share).
             cmd_proof "$@"
             ;;
+        secure)
+            # Secure-by-default gate surface: inspect findings + manage waivers.
+            cmd_secure "$@"
+            ;;
+        own|handoff)
+            # Finish-and-own: a plain-English ownership handoff for a non-technical
+            # owner (what was built, is it working, how to run/deploy, what is left).
+            # `loki handoff` is an alias for `loki own`.
+            cmd_own "$@"
+            ;;
         bench)
             cmd_bench "$@"
             ;;
@@ -30434,6 +30444,164 @@ cmd_bench() {
     bash "$bench_sh" "$@"
 }
 
+# loki own - finish-and-own (v7.88.0): a plain-English ownership handoff for a
+# NON-technical owner. A pure render (autonomy/lib/own-render.py) over the data
+# Loki already captured -- the Evidence Receipt, the completion summary, and
+# USAGE.md -- so it cannot fabricate: the "is it working?" verdict comes verbatim
+# from the receipt's honest headline and is never green unless the receipt is
+# VERIFIED. Default prints the doc; --md writes HANDOFF.md; --json for tooling.
+# `loki handoff` is an alias.
+cmd_own() {
+    local renderer="${_LOKI_SCRIPT_DIR}/lib/own-render.py"
+    if [ ! -f "$renderer" ]; then
+        echo -e "${RED}Finish-and-own renderer not found (autonomy/lib/own-render.py).${NC}" >&2
+        exit 2
+    fi
+    case "${1:-}" in
+        --help|-h|help)
+            echo -e "${BOLD}loki own${NC} - a plain-English ownership handoff (alias: loki handoff)"
+            echo ""
+            echo "Usage: loki own [--md | --json]"
+            echo ""
+            echo "Explains, in plain language for a non-technical owner: what was"
+            echo "built, whether Loki verified it works, how to run it, how to put"
+            echo "it online, what a developer needs to know, and what is left to do."
+            echo "It reads the last build's Evidence Receipt + completion summary;"
+            echo "the 'is it working' verdict is the receipt's honest headline (never"
+            echo "green unless the build is VERIFIED)."
+            echo ""
+            echo "Options:"
+            echo "  --md     Write HANDOFF.md to the project root"
+            echo "  --json   Emit the structured handoff as JSON"
+            exit 0
+            ;;
+    esac
+    # --md writes HANDOFF.md at the project root (matches the help). The renderer
+    # prints markdown on stdout; the CLI places it as a file, atomically (temp+mv)
+    # so a partial write never leaves a truncated HANDOFF.md. Any other args
+    # (--json, default) pass through and print.
+    if [ "${1:-}" = "--md" ]; then
+        local _handoff="${TARGET_DIR:-.}/HANDOFF.md"
+        local _handoff_tmp="${TARGET_DIR:-.}/.HANDOFF.md.tmp"
+        if python3 "$renderer" --loki-dir "${LOKI_DIR:-.loki}" --md > "$_handoff_tmp" 2>/dev/null; then
+            mv -f "$_handoff_tmp" "$_handoff" && \
+                echo -e "${GREEN}Wrote ${_handoff}${NC} - open it or hand it to whoever owns this build." || \
+                { rm -f "$_handoff_tmp" 2>/dev/null; echo -e "${RED}Could not write HANDOFF.md${NC}" >&2; exit 1; }
+        else
+            rm -f "$_handoff_tmp" 2>/dev/null
+            echo -e "${RED}Could not render the ownership handoff${NC}" >&2
+            exit 1
+        fi
+        exit 0
+    fi
+    python3 "$renderer" --loki-dir "${LOKI_DIR:-.loki}" "$@"
+    exit $?
+}
+
+# loki secure - the secure-by-default gate surface (v7.87.0).
+# Subcommands: list (show findings) | waive <rule> <file> [reason] | unwaive.
+# Waivers are written to .loki/quality/security-waivers.json, which the gate
+# (run.sh run_secure_scan) and the Evidence Receipt both READ + honor. The gate
+# is advisory by default; LOKI_SECURE_GATE=block makes un-waived HIGH findings
+# block. Honest: a waiver is RECORDED in the receipt (accepted with intent), never
+# silently hides a finding.
+cmd_secure() {
+    local loki_dir="${LOKI_DIR:-.loki}"
+    local quality_dir="${loki_dir}/quality"
+    local findings_file="${quality_dir}/security-findings.json"
+    local waivers_file="${quality_dir}/security-waivers.json"
+    local sub="${1:-}"
+    [ $# -gt 0 ] && shift
+    case "$sub" in
+        ""|--help|-h|help)
+            echo -e "${BOLD}loki secure${NC} - secure-by-default gate: findings + waivers"
+            echo ""
+            echo "Usage: loki secure <subcommand> [args]"
+            echo ""
+            echo "Subcommands:"
+            echo "  list                 Show security findings from the last scan"
+            echo "  waive <rule> <file> [reason]   Waive a finding (accepted with intent)"
+            echo "  unwaive <rule> <file>          Remove a waiver"
+            echo ""
+            echo "The gate is advisory by default; set LOKI_SECURE_GATE=block to make"
+            echo "un-waived HIGH findings block completion. Waivers are recorded in the"
+            echo "Evidence Receipt (loki proof show) -- they are never hidden."
+            [ "$sub" = "" ] && exit 1
+            exit 0
+            ;;
+        list)
+            if [ ! -f "$findings_file" ]; then
+                echo -e "${YELLOW}No security scan results yet.${NC} Run 'loki start' (the gate runs in the review phase)."
+                exit 0
+            fi
+            if command -v jq &>/dev/null; then
+                jq '.findings' "$findings_file" 2>/dev/null || cat "$findings_file"
+            else
+                LOKI_SEC_F="$findings_file" python3 -c "import json,os; d=json.load(open(os.environ['LOKI_SEC_F'])); [print('%s [%s] %s%s -- %s' % (f.get('severity','?'), f.get('rule','?'), f.get('file','?'), (':'+str(f['line'])) if f.get('line') else '', f.get('fix',''))) for f in d.get('findings',[])] or print('No findings.')"
+            fi
+            exit 0
+            ;;
+        waive)
+            local rule="${1:-}" file="${2:-}" reason="${3:-waived via loki secure}"
+            if [ -z "$rule" ] || [ -z "$file" ]; then
+                echo -e "${RED}Usage: loki secure waive <rule> <file> [reason]${NC}" >&2
+                exit 2
+            fi
+            mkdir -p "$quality_dir"
+            LOKI_SEC_W="$waivers_file" LOKI_SEC_RULE="$rule" LOKI_SEC_FILE="$file" LOKI_SEC_REASON="$reason" python3 - <<'PYW'
+import json, os
+p = os.environ["LOKI_SEC_W"]
+try:
+    with open(p) as f: data = json.load(f)
+    if not isinstance(data, dict): data = {}
+except Exception:
+    data = {}
+waivers = data.get("waivers")
+if not isinstance(waivers, list): waivers = []
+rule, fl, reason = os.environ["LOKI_SEC_RULE"], os.environ["LOKI_SEC_FILE"], os.environ["LOKI_SEC_REASON"]
+if not any(w.get("rule") == rule and w.get("file") == fl for w in waivers if isinstance(w, dict)):
+    waivers.append({"rule": rule, "file": fl, "reason": reason})
+data["waivers"] = waivers
+tmp = p + ".tmp"
+with open(tmp, "w") as f: json.dump(data, f, indent=2)
+os.replace(tmp, p)
+print("Waived %s on %s (recorded in the Evidence Receipt)." % (rule, fl))
+PYW
+            exit $?
+            ;;
+        unwaive)
+            local rule="${1:-}" file="${2:-}"
+            if [ -z "$rule" ] || [ -z "$file" ]; then
+                echo -e "${RED}Usage: loki secure unwaive <rule> <file>${NC}" >&2
+                exit 2
+            fi
+            [ -f "$waivers_file" ] || { echo "No waivers to remove."; exit 0; }
+            LOKI_SEC_W="$waivers_file" LOKI_SEC_RULE="$rule" LOKI_SEC_FILE="$file" python3 - <<'PYU'
+import json, os
+p = os.environ["LOKI_SEC_W"]
+try:
+    with open(p) as f: data = json.load(f)
+except Exception:
+    data = {}
+waivers = [w for w in (data.get("waivers") or [])
+           if not (isinstance(w, dict) and w.get("rule") == os.environ["LOKI_SEC_RULE"]
+                   and w.get("file") == os.environ["LOKI_SEC_FILE"])]
+data["waivers"] = waivers
+tmp = p + ".tmp"
+with open(tmp, "w") as f: json.dump(data, f, indent=2)
+os.replace(tmp, p)
+print("Removed waiver for %s on %s." % (os.environ["LOKI_SEC_RULE"], os.environ["LOKI_SEC_FILE"]))
+PYU
+            exit $?
+            ;;
+        *)
+            echo -e "${RED}Unknown subcommand: secure $sub${NC}" >&2
+            echo "Try: loki secure --help"
+            exit 2
+            ;;
+    esac
+}
+
 # loki proof - inspect and share proof-of-run artifacts (.loki/proofs/<id>/).
 # Subcommands: list | show <id> | open <id> | share <id>.
 # The proof.json schema is frozen (R1 spec). Reads are tolerant of missing

package/autonomy/run.sh

@@ -7309,6 +7309,157 @@ SAFEOF
     fi
 }
 
+# ============================================================================
+# Secure-by-default scan (v7.87.0 - Loop 4)
+# Runs the high-precision rule engine (autonomy/lib/secure-scan.py) over the
+# generated app and reports known-bad security patterns.
+#
+# ADVISORY BY DEFAULT (mirrors the ktlint/detekt advisory linters above):
+# findings are reported via log_warn + the receipt json, but do NOT block. This
+# guarantees no existing build starts blocking on this new gate.
+#
+# OPT-IN BLOCK: only when LOKI_SECURE_GATE=block do un-waived HIGH findings
+# cause a blocking gate failure (return 1, same mechanism the other gates use).
+#
+# Waivers: .loki/quality/security-waivers.json ({"waivers":[{rule,file},...]})
+# is READ here and honored (matched findings recorded as waived, never counted
+# active). The waiver-write surface is a separate slice.
+#
+# Honest degrade: if python3 or secure-scan.py is absent, pass through cleanly
+# (no crash, no block), exactly like the optional linters.
+# ============================================================================
+run_secure_scan() {
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    local quality_dir="$loki_dir/quality"
+    mkdir -p "$quality_dir"
+
+    local out_file="$quality_dir/security-findings.json"
+    local waivers_file="$quality_dir/security-waivers.json"
+    local scanner="$SCRIPT_DIR/lib/secure-scan.py"
+
+    # Honest pass-through if the engine or python3 is unavailable. Still write a
+    # valid (empty) receipt so downstream consumers never read malformed JSON.
+    if ! command -v python3 >/dev/null 2>&1 || [ ! -f "$scanner" ]; then
+        cat > "$out_file" << 'SECEMPTY'
+{"rules_version":null,"findings":[],"summary":{"total":0,"by_severity":{}},"skipped":"scanner-unavailable"}
+SECEMPTY
+        log_info "Security scan: secure-scan.py or python3 not available, skipping (pass-through)"
+        return 0
+    fi
+
+    # Run the scanner. exit 0 = no findings, 1 = findings, 2 = bad input.
+    local raw rc=0
+    raw=$(python3 "$scanner" "${TARGET_DIR:-.}" --json 2>/dev/null) || rc=$?
+    if [ "$rc" -eq 2 ] || [ -z "$raw" ]; then
+        cat > "$out_file" << 'SECEMPTY'
+{"rules_version":null,"findings":[],"summary":{"total":0,"by_severity":{}},"skipped":"scanner-error"}
+SECEMPTY
+        log_info "Security scan: scanner returned no parseable output, skipping (pass-through)"
+        return 0
+    fi
+
+    # Apply waivers, build the receipt json, and emit a machine-readable verdict.
+    # All policy lives in this one python pass so the bash stays bash-3.2 safe.
+    # It prints a final line: ACTIVE_HIGH=<n>\tACTIVE_TOTAL=<n>\tWAIVED=<n>
+    # and writes the enriched receipt (findings carry a "waived" bool).
+    local verdict
+    verdict=$(_SEC_RAW="$raw" _SEC_WAIVERS="$waivers_file" _SEC_OUT="$out_file" python3 -c '
+import json, os, sys
+raw = os.environ.get("_SEC_RAW", "")
+waivers_file = os.environ.get("_SEC_WAIVERS", "")
+out_file = os.environ.get("_SEC_OUT", "")
+
+try:
+    data = json.loads(raw)
+except Exception:
+    data = {"rules_version": None, "findings": [], "summary": {"total": 0, "by_severity": {}}}
+
+# Load waivers: {"waivers":[{"rule":..,"file":..}, ...]}. Match on rule+file.
+waived_set = set()
+try:
+    with open(waivers_file) as f:
+        wdoc = json.load(f)
+    for w in wdoc.get("waivers", []):
+        r = w.get("rule"); fl = w.get("file")
+        if r is not None and fl is not None:
+            waived_set.add((r, fl))
+except (OSError, json.JSONDecodeError, AttributeError):
+    pass
+
+findings = data.get("findings", []) or []
+active_high = 0
+active_total = 0
+waived_count = 0
+for fnd in findings:
+    key = (fnd.get("rule"), fnd.get("file"))
+    is_waived = key in waived_set
+    fnd["waived"] = is_waived
+    if is_waived:
+        waived_count += 1
+    else:
+        active_total += 1
+        if str(fnd.get("severity", "")).upper() == "HIGH":
+            active_high += 1
+
+data["waived"] = waived_count
+data["active"] = active_total
+try:
+    with open(out_file, "w") as f:
+        json.dump(data, f, indent=2)
+except OSError:
+    pass
+
+sys.stdout.write("ACTIVE_HIGH=%d\tACTIVE_TOTAL=%d\tWAIVED=%d" % (active_high, active_total, waived_count))
+' 2>/dev/null) || verdict=""
+
+    if [ -z "$verdict" ]; then
+        # python policy pass failed unexpectedly; preserve the raw scan as the
+        # receipt so nothing is lost, and pass through (never crash the gate).
+        printf '%s\n' "$raw" > "$out_file" 2>/dev/null || true
+        log_info "Security scan: result recorded (policy pass unavailable, advisory)"
+        return 0
+    fi
+
+    local active_high active_total waived
+    active_high=$(printf '%s' "$verdict" | sed -n 's/.*ACTIVE_HIGH=\([0-9]*\).*/\1/p')
+    active_total=$(printf '%s' "$verdict" | sed -n 's/.*ACTIVE_TOTAL=\([0-9]*\).*/\1/p')
+    waived=$(printf '%s' "$verdict" | sed -n 's/.*WAIVED=\([0-9]*\).*/\1/p')
+    active_high=${active_high:-0}
+    active_total=${active_total:-0}
+    waived=${waived:-0}
+
+    if [ "$active_total" -eq 0 ]; then
+        log_info "Security scan: no active findings (waived: $waived)"
+        return 0
+    fi
+
+    # Actionable advisory summary: rule + file + fix, from the receipt json.
+    log_warn "Security scan: $active_total active finding(s) (HIGH: $active_high, waived: $waived)"
+    _SEC_OUT="$out_file" python3 -c '
+import json, os
+try:
+    with open(os.environ["_SEC_OUT"]) as f:
+        data = json.load(f)
+except Exception:
+    data = {"findings": []}
+for fnd in data.get("findings", []):
+    if fnd.get("waived"):
+        continue
+    print("  [%s] %s %s:%s -- %s | fix: %s" % (
+        fnd.get("severity", "?"), fnd.get("rule", "?"),
+        fnd.get("file", "?"), fnd.get("line", "?"),
+        fnd.get("message", ""), fnd.get("fix", "")))
+' 2>/dev/null | while IFS= read -r line; do log_warn "$line"; done
+
+    # OPT-IN BLOCK: only un-waived HIGH findings block, and only when explicitly
+    # enabled. Advisory default returns 0 (never surprise-blocks).
+    if [ "${LOKI_SECURE_GATE:-advisory}" = "block" ] && [ "$active_high" -gt 0 ]; then
+        log_warn "Security gate: $active_high un-waived HIGH finding(s) - BLOCK (LOKI_SECURE_GATE=block)"
+        return 1
+    fi
+    return 0
+}
+
 #===============================================================================
 # Gate Failure Tracking (v6.10.0)
 #===============================================================================
@@ -15262,6 +15413,18 @@ if __name__ == "__main__":
                     log_warn "Static analysis FAILED ($sa_count consecutive) - findings injected into next iteration"
                 fi
             fi
+            # Secure-by-default scan (v7.87.0). Advisory by default (never
+            # blocks); records .loki/quality/security-findings.json each
+            # iteration. Blocks only on un-waived HIGH when LOKI_SECURE_GATE=block.
+            log_info "Quality gate: security scan (advisory)..."
+            if run_secure_scan; then
+                clear_gate_failure "security_scan"
+            else
+                local sec_count
+                sec_count=$(track_gate_failure "security_scan")
+                gate_failures="${gate_failures}security_scan,"
+                log_warn "Security gate BLOCKED ($sec_count consecutive) - un-waived HIGH findings (LOKI_SECURE_GATE=block)"
+            fi
             # BUG-ST-002: Check pause signal between quality gates
             if [ -f "${TARGET_DIR:-.}/.loki/PAUSE" ] || [ -f "${TARGET_DIR:-.}/.loki/STOP" ]; then
                 log_warn "Pause/stop signal detected between quality gates - deferring remaining gates"
@@ -17204,6 +17367,30 @@ main() {
         generate_proof_of_run "$result" || true
     fi
 
+    # Finish-and-own (v7.88.0): write a plain-English ownership handoff
+    # (HANDOFF.md) for a non-technical owner. Runs AFTER the proof so the
+    # "is it working?" verdict reads the receipt's honest headline. Default-on,
+    # opt out with LOKI_HANDOFF=0. Fire-and-forget: best-effort, never blocks
+    # completion (same contract as the proof + usage-regen). A pure render over
+    # the proof + completion + USAGE.md, so it cannot fabricate.
+    if [ "${LOKI_HANDOFF:-1}" != "0" ]; then
+        local _own_render="$SCRIPT_DIR/lib/own-render.py"
+        if [ -f "$_own_render" ] && command -v python3 >/dev/null 2>&1; then
+            # The renderer prints the plain-English doc on stdout (--md); the hook
+            # places it at the project root as HANDOFF.md. Write to a temp then
+            # move, so a partial write never leaves a truncated HANDOFF.md.
+            local _handoff_dir _handoff_md _handoff_tmp
+            _handoff_dir="${TARGET_DIR:-.}"
+            _handoff_md="$_handoff_dir/HANDOFF.md"
+            _handoff_tmp="$_handoff_dir/.HANDOFF.md.tmp"
+            if python3 "$_own_render" --loki-dir "$LOKI_DIR" --md > "$_handoff_tmp" 2>/dev/null; then
+                mv -f "$_handoff_tmp" "$_handoff_md" 2>/dev/null || rm -f "$_handoff_tmp" 2>/dev/null || true
+            else
+                rm -f "$_handoff_tmp" 2>/dev/null || true
+            fi
+        fi
+    fi
+
     # R7 (zero-config first run): "what next / go deeper" framing. Only when the
     # CLI flagged this as a TTFV first run and stdout is a TTY, so it stays
     # silent in CI / pipes and never fires for normal PRD runs. The wording

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.86.0"
+__version__ = "7.88.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.86.0
+**Version:** v7.88.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.86.0 start ./my-spec.md
+  asklokesh/loki-mode:7.88.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.86.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
+var QQ=Object.defineProperty;var ZQ=($)=>$;function zQ($,Q){this[$]=ZQ.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)QQ($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:zQ.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var q$=import.meta.require;var h1={};b(h1,{lokiDir:()=>P,homeLokiDir:()=>i$,findRepoRootForVersion:()=>t$,REPO_ROOT:()=>g});import{resolve as a,dirname as r$}from"path";import{fileURLToPath as XQ}from"url";import{existsSync as R$}from"fs";import{homedir as KQ}from"os";function qQ(){let $=b1;for(let Q=0;Q<6;Q++){if(R$(a($,"VERSION"))&&R$(a($,"autonomy/run.sh")))return $;let Z=r$($);if(Z===$)break;$=Z}return a(b1,"..","..","..")}function t$($){let Q=$;for(let Z=0;Z<6;Z++){if(R$(a(Q,"VERSION"))&&R$(a(Q,"autonomy/run.sh")))return Q;let z=r$(Q);if(z===Q)break;Q=z}return a($,"..","..","..")}function P(){return process.env.LOKI_DIR??a(process.cwd(),".loki")}function i$(){return a(KQ(),".loki")}var b1,g;var C=L(()=>{b1=r$(XQ(import.meta.url));g=qQ()});import{readFileSync as VQ}from"fs";import{resolve as JQ,dirname as UQ}from"path";import{fileURLToPath as WQ}from"url";function E$(){if(Q$!==null)return Q$;let $="7.88.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=UQ(WQ(import.meta.url)),Z=t$(Q);Q$=VQ(JQ(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var e$=L(()=>{C()});var g1={};b(g1,{runOrThrow:()=>HQ,run:()=>F,readStreamCapped:()=>m1,commandVersion:()=>BQ,commandExists:()=>f,ShellError:()=>$1,MAX_STDOUT_BYTES:()=>v1});async function m1($,Q=v1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:U}=await Z.read();if(K)break;if(!U)continue;if(q+=U.byteLength,q>Q){let J=U.byteLength-(q-Q);X+=z.decode(U.subarray(0,J),{stream:!0});break}X+=z.decode(U,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,U]=await Promise.all([m1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function HQ($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new $1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=GQ($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function GQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function BQ($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var v1=16777216,$1;var d=L(()=>{$1=class $1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function s($){return YQ?"":$}var YQ,O,S,_,_Z,I,k,h,V;var c=L(()=>{YQ=(process.env.NO_COLOR??"").length>0;O=s("\x1B[0;31m"),S=s("\x1B[0;32m"),_=s("\x1B[1;33m"),_Z=s("\x1B[0;34m"),I=s("\x1B[0;36m"),k=s("\x1B[1m"),h=s("\x1B[2m"),V=s("\x1B[0m")});import{existsSync as jQ}from"fs";async function Z$(){if(Y$!==void 0)return Y$;let $="/opt/homebrew/bin/python3.12";if(jQ($))return Y$=$,$;let Q=await f("python3.12");if(Q)return Y$=Q,Q;let Z=await f("python3");return Y$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var Y$;var V$=L(()=>{d()});var X0={};b(X0,{runStatus:()=>oQ});import{existsSync as y,readFileSync as U$,readdirSync as r1,statSync as t1}from"fs";import{resolve as D,basename as vQ}from"path";import{homedir as mQ}from"os";function i1($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function e1($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*N$/Q);if(X>N$)X=N$;let q=N$-X,K=S;if(z>=80)K=O;else if(z>=50)K=_;let U="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),J=i1($),W=i1(Q);return`  ${k}${Z}${V} ${K}[${U}]${V} ${z}% (${J} / ${W})`}async function fQ(){if(await f("jq"))return!0;return process.stdout.write(`${O}Error: jq is required but not installed.${V}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -796,4 +796,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write($Q),2}}s1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var qZ=await KZ(Bun.argv.slice(2));process.exit(qZ);
 
-//# debugId=5E11AD9E3DCEB72F64756E2164756E21
+//# debugId=65E93B4739145ECE64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.86.0'
+__version__ = '7.88.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.86.0",
+  "version": "7.88.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.86.0",
+  "version": "7.88.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",