loki-mode 7.90.2 → 7.91.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.90.2
+# Loki Mode v7.91.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.90.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.91.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.90.2
+7.91.0

package/autonomy/loki

@@ -9834,7 +9834,25 @@ cmd_doctor() {
         echo -e "  ${GREEN}PASS${NC}  ANTHROPIC_API_KEY is set"
         pass_count=$((pass_count + 1))
     elif command -v claude &>/dev/null; then
-        echo -e "  ${DIM}  --  ${NC}  ANTHROPIC_API_KEY not set (Claude CLI uses its own login)"
+        # Zero-network check: warn if the Claude OAuth login has expired. An
+        # expired token would otherwise pass and then 401 mid-build (the build
+        # stalls at BOOTSTRAP). Mirror run.sh's fail-fast preflight here so a
+        # user catches it with `loki doctor` BEFORE starting a build.
+        _claude_creds="${CLAUDE_CONFIG_DIR:-$HOME/.claude}/.credentials.json"
+        if [ -s "$_claude_creds" ] && [ "$(python3 -c "
+import json, sys, time
+try:
+    d = json.load(open(sys.argv[1]))
+    exp = d.get('claudeAiOauth', {}).get('expiresAt')
+    print('expired' if isinstance(exp,(int,float)) and exp>0 and (exp/1000.0)<=(time.time()+60) else 'ok')
+except Exception:
+    print('ok')
+" "$_claude_creds" 2>/dev/null || echo ok)" = "expired" ]; then
+            echo -e "  ${YELLOW}WARN${NC}  Claude login has EXPIRED -- run 'claude login' before a build (it would otherwise stall)"
+            warn_count=$((warn_count + 1))
+        else
+            echo -e "  ${DIM}  --  ${NC}  ANTHROPIC_API_KEY not set (Claude CLI uses its own login)"
+        fi
     fi
     if [ -n "${OPENAI_API_KEY:-}" ]; then
         echo -e "  ${GREEN}PASS${NC}  OPENAI_API_KEY is set"

package/autonomy/run.sh

@@ -829,6 +829,12 @@ CONCURRENCY_CRITICAL_THRESHOLD=${LOKI_CONCURRENCY_CRITICAL_THRESHOLD:-95}
 GATE_CLEAR_LIMIT=${LOKI_GATE_CLEAR_LIMIT:-3}
 GATE_ESCALATE_LIMIT=${LOKI_GATE_ESCALATE_LIMIT:-5}
 GATE_PAUSE_LIMIT=${LOKI_GATE_PAUSE_LIMIT:-10}
+# Workspace resolution: the build runs against TARGET_DIR, defaulting to the
+# launch cwd. A caller can pin a per-build workspace by exporting
+# LOKI_TARGET_DIR (and the matching LOKI_DIR=<dir>/.loki); the dashboard
+# /api/control/start `workspace` param (Track-1 S1) does exactly this so a
+# hosted build runs in its own dir instead of the engine's repo. Every
+# $TARGET_DIR/.loki reference below then resolves under that workspace.
 TARGET_DIR="${LOKI_TARGET_DIR:-$(pwd)}"
 PARALLEL_BLOG=${LOKI_PARALLEL_BLOG:-false}
 AUTO_MERGE=${LOKI_AUTO_MERGE:-true}
@@ -1428,6 +1434,30 @@ _loki_trust_run_id() {
     printf '%s' ""
 }
 
+# _advance_current_phase: atomically advance currentPhase in orchestrator.json.
+# This is the single source of truth for the build dashboard and the BFF
+# reconciliation gate (isTerminalPhase). The engine initialises it to "BOOTSTRAP"
+# at session start; call this to advance through the SDLC lifecycle phases.
+# Args: $1 = the new phase value (REASONING, BUILDING, VERIFYING, COMPLETED, etc.)
+_advance_current_phase() {
+    local new_phase="${1:?phase required}"
+    local loki_dir="${LOKI_DIR:-${TARGET_DIR:-.}}/.loki"
+    local orch="$loki_dir/state/orchestrator.json"
+    [ -f "$orch" ] || return 0
+    # Values are passed via argv (not interpolated into the source) so a phase or
+    # path containing quotes can never break or inject into the python.
+    python3 -c "
+import json, sys
+f, phase = sys.argv[1], sys.argv[2]
+try:
+    d = json.load(open(f))
+    d['currentPhase'] = phase
+    json.dump(d, open(f, 'w'))
+except (json.JSONDecodeError, OSError):
+    pass
+" "$orch" "$new_phase" 2>/dev/null || true
+}
+
 # Usage: record_trust_event_bash <event_type> [key=value ...]
 # Pass LOKI_TRUST_RUN_ID in the environment to override the resolved id (the
 # run_start site sets it to the freshly minted id so the first event matches).
@@ -1808,6 +1838,37 @@ validate_api_keys() {
     local masked="${key_value:0:8}...${key_value: -4}"
     log_info "API key $key_var: $masked (${#key_value} chars)"
 
+    # Fail-fast auth preflight (v7.91): for Claude OAuth logins, a present-but-
+    # EXPIRED token passes the presence check above but then 401s on the first
+    # provider call, leaving the build stalled at BOOTSTRAP with no clear cause.
+    # Catch that here with a zero-network, zero-token local expiry check so the
+    # user gets an instant, copy-pasteable fix instead of a silent stall.
+    # Opt out with LOKI_SKIP_AUTH_PREFLIGHT=1 (offline/odd setups).
+    if [[ "$provider" == "claude" && "${LOKI_SKIP_AUTH_PREFLIGHT:-}" != "1" && -z "${ANTHROPIC_API_KEY:-}" ]]; then
+        local _creds="${CLAUDE_CONFIG_DIR:-$HOME/.claude}/.credentials.json"
+        if [[ -s "$_creds" ]]; then
+            local _expired
+            _expired=$(python3 -c "
+import json, sys, time
+try:
+    d = json.load(open(sys.argv[1]))
+    exp = d.get('claudeAiOauth', {}).get('expiresAt')
+    # expiresAt is epoch milliseconds; compare with a 60s safety margin.
+    if isinstance(exp, (int, float)) and exp > 0 and (exp / 1000.0) <= (time.time() + 60):
+        print('expired')
+except Exception:
+    pass  # unreadable/unknown schema -> do not block (fail open, let the call decide)
+" "$_creds" 2>/dev/null || true)
+            if [[ "$_expired" == "expired" ]]; then
+                log_error "Your Claude Code login has expired -- the build would stall instead of running."
+                log_error "Fix it in one step, then retry:"
+                log_error "    claude login"
+                log_error "(or set ANTHROPIC_API_KEY, or LOKI_SKIP_AUTH_PREFLIGHT=1 to bypass this check)"
+                return 1
+            fi
+        fi
+    fi
+
     return 0
 }
 
@@ -17852,7 +17913,10 @@ main() {
         # Cleanup parallel streams
         cleanup_parallel_streams
     else
-        # Standard mode: single session
+        # Standard mode: single session. Advance phase from BOOTSTRAP to BUILDING
+        # before the first iteration so the dashboard shows real progress, not
+        # a stuck "Planning" state.
+        _advance_current_phase "BUILDING"
         run_autonomous "$PRD_PATH" || result=$?
     fi
 
@@ -17939,6 +18003,13 @@ main() {
         generate_proof_of_run "$result" || true
     fi
 
+    # Advance currentPhase to COMPLETED so the BFF reconciliation gate and the
+    # engine's own is_completed() recognise this session as terminal. Write the
+    # file-system COMPLETED marker (checked by is_completed() in the main loop).
+    _advance_current_phase "COMPLETED"
+    local loki_dir="${LOKI_DIR:-${TARGET_DIR:-.}}/.loki"
+    echo "Session completed at $(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$loki_dir/COMPLETED" 2>/dev/null || true
+
     # Finish-and-own (v7.88.0): write a plain-English ownership handoff
     # (HANDOFF.md) for a non-technical owner. Runs AFTER the proof so the
     # "is it working?" verdict reads the receipt's honest headline. Default-on,

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.90.2"
+__version__ = "7.91.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -430,6 +430,15 @@ class StatusResponse(BaseModel):
     # correlation-only (v7.34); "resume" = LOKI_RESUME_SESSION recovery resume.
     # Empty when the run predates this field or no claude session was stamped.
     claude_session_mode: str = ""
+    # Track-1 (S1): the trust run_id (the proof key, format
+    # run-<ts>-<pid>-<rand>) of the run in THIS engine's resolved .loki dir, read
+    # from .loki/state/trust-run-id. Lets a caller correlate the run with its
+    # proof/receipt without parsing the pid. Empty when no run has minted one
+    # yet, or the run predates the field. NOTE for hosted callers: this reflects
+    # the engine's GLOBAL/cwd .loki (_get_loki_dir), so for a build started with a
+    # distinct workspace param it does NOT track that workspace's run -- read
+    # <workspace>/.loki/state/trust-run-id directly for the per-workspace build.
+    current_run_id: str = ""
     # Concurrent sessions (v6.4.0)
     sessions: list[SessionInfo] = []
 
@@ -1158,6 +1167,18 @@ async def get_status() -> StatusResponse:
         except (json.JSONDecodeError, OSError, KeyError, AttributeError):
             pass
 
+    # Track-1 (S1): the trust run_id (proof key) for the run in this resolved
+    # .loki dir. Best-effort read; empty when no run has minted one yet. Lets a
+    # caller correlate the run with its proof without parsing the pid.
+    current_run_id = ""
+    trust_run_id_file = loki_dir / "state" / "trust-run-id"
+    if trust_run_id_file.exists():
+        try:
+            _rid = trust_run_id_file.read_text(encoding="utf-8").strip()
+            current_run_id = _rid if isinstance(_rid, str) else ""
+        except OSError:
+            pass
+
     # Read dashboard state (with retry for concurrent writes)
     _has_dashboard_state = False
     if state_file.exists():
@@ -1412,6 +1433,7 @@ async def get_status() -> StatusResponse:
         current_task=current_task,
         claude_session_id=claude_session_id,
         claude_session_mode=claude_session_mode,
+        current_run_id=current_run_id,
         sessions=active_session_list,
     )
 
@@ -3018,6 +3040,14 @@ class StartBuildRequest(BaseModel):
     prd_path: Optional[str] = None
     provider: str = "claude"
     parallel: bool = False
+    # Track-1 (S1): an OPTIONAL per-build workspace directory. When present and
+    # path-guarded, the build runs against THIS dir (its own cwd + .loki) instead
+    # of the engine's own project dir, so a hosted caller (the SaaS BFF) can run a
+    # build outside the engine repo without polluting it. When OMITTED, behavior
+    # is byte-identical to before this field existed (the global project dir).
+    # The path is path-guarded against ALLOWED_WORKSPACE_ROOTS (see
+    # _validate_workspace) -- it is NOT a free-form filesystem write target.
+    workspace: Optional[str] = None
 
     def validate_provider(self) -> None:
         """Validate provider is from the supported list.
@@ -3071,6 +3101,88 @@ def _validate_prd_path(raw_path: str, project_dir: _Path) -> _Path:
     raise ValueError(f"PRD path is outside allowed directories: {raw_path}")
 
 
+def _allowed_workspace_roots() -> list[_Path]:
+    """Resolved roots a caller-supplied workspace may live under (Track-1 S1).
+
+    Configured via LOKI_WORKSPACE_ROOTS (os.pathsep-separated absolute dirs).
+    Each entry is expanded and resolved; nonexistent / non-absolute / relative
+    entries are dropped (a misconfigured root must NOT silently widen the guard
+    to the CWD). When the env var is unset or yields no valid root, the list is
+    empty and _validate_workspace rejects every workspace -- the feature is
+    opt-in by configuration, fail-closed by default.
+
+    This is deliberately NARROWER than the PRD-path roots ([project_dir, home]):
+    a build cwd runs an autonomous agent, so its root must be an explicitly
+    operator-allowed location (e.g. the BFF's ENGINE_WORKSPACE_ROOT, default
+    /workspaces), never the engine repo or the whole home directory.
+    """
+    raw = os.environ.get("LOKI_WORKSPACE_ROOTS", "").strip()
+    if not raw:
+        return []
+    roots: list[_Path] = []
+    for entry in raw.split(os.pathsep):
+        entry = entry.strip()
+        if not entry:
+            continue
+        candidate = _Path(entry).expanduser()
+        if not candidate.is_absolute():
+            continue
+        try:
+            resolved = candidate.resolve()
+        except OSError:
+            continue
+        if resolved.is_dir():
+            roots.append(resolved)
+    return roots
+
+
+def _validate_workspace(raw_path: str) -> _Path:
+    """Path-guard a caller-supplied per-build workspace dir (Track-1 S1).
+
+    Unlike _validate_prd_path, the workspace need NOT exist yet (the BFF passes
+    <ENGINE_WORKSPACE_ROOT>/<buildId>, created on first build); this guard
+    normalizes a possibly-nonexistent path and verifies CONTAINMENT under one of
+    LOKI_WORKSPACE_ROOTS, then the caller mkdirs it. Returns the resolved,
+    verified, absolute workspace path. Raises ValueError on any unsafe path.
+
+    Guard order:
+      1. Reject literal ".." traversal sequences before any resolution.
+      2. Require an absolute input (a relative path would resolve against the
+         dashboard CWD -- never an intended workspace).
+      3. resolve() (follows symlinks on existing parents) then assert the real
+         path is under an allowed root -- catches a symlinked parent that
+         escaped the no-".." check.
+    """
+    if not raw_path or not raw_path.strip():
+        raise ValueError("workspace must be a non-empty path")
+    raw_path = raw_path.strip()
+    if ".." in raw_path:
+        raise ValueError("workspace contains path traversal sequence (..)")
+
+    candidate = _Path(raw_path).expanduser()
+    if not candidate.is_absolute():
+        raise ValueError("workspace must be an absolute path")
+
+    try:
+        ws = candidate.resolve()
+    except OSError as e:
+        raise ValueError(f"workspace path could not be resolved: {e}")
+
+    roots = _allowed_workspace_roots()
+    if not roots:
+        raise ValueError(
+            "workspace param is not enabled: set LOKI_WORKSPACE_ROOTS to one or "
+            "more absolute directories before passing a workspace"
+        )
+    for root in roots:
+        try:
+            ws.relative_to(root)
+            return ws
+        except ValueError:
+            continue
+    raise ValueError(f"workspace is outside allowed roots: {raw_path}")
+
+
 def _write_spec_text(prd_text: str, project_dir: _Path) -> _Path:
     """Persist an inline spec to .loki/specs/ and return its path.
 
@@ -3153,10 +3265,34 @@ async def start_build(request: Request, body: StartBuildRequest):
             detail="Provide exactly one of prd_text or prd_path",
         )
 
-    # Resolve the target project directory from the active dashboard project.
-    loki_dir = _get_loki_dir()
-    project_dir = loki_dir.parent if loki_dir.name == ".loki" else _Path.cwd()
-    project_dir = project_dir.resolve()
+    # Resolve the target project directory. When the caller supplies a
+    # path-guarded workspace (Track-1 S1), the build runs against THAT dir (its
+    # own cwd + .loki) so a hosted caller can build outside the engine repo.
+    # When omitted, behavior is byte-identical to before: the active dashboard
+    # project (the engine's own _get_loki_dir).
+    workspace_dir: Optional[_Path] = None
+    if body.workspace and body.workspace.strip():
+        try:
+            workspace_dir = _validate_workspace(body.workspace)
+        except ValueError as e:
+            raise HTTPException(status_code=400, detail=str(e))
+
+    if workspace_dir is not None:
+        # The build's project dir IS the workspace; its .loki lives inside it.
+        # Create it now so single-flight + spec-write below operate on the real
+        # build dir (the BFF passes <root>/<buildId>, absent on first build).
+        try:
+            workspace_dir.mkdir(parents=True, exist_ok=True)
+        except OSError as e:
+            raise HTTPException(
+                status_code=500, detail=f"Could not create workspace: {e}"
+            )
+        project_dir = workspace_dir
+        loki_dir = workspace_dir / ".loki"
+    else:
+        loki_dir = _get_loki_dir()
+        project_dir = loki_dir.parent if loki_dir.name == ".loki" else _Path.cwd()
+        project_dir = project_dir.resolve()
 
     # Single-flight: refuse if a run is already active in this project.
     active_pid = _project_run_active(loki_dir)
@@ -3191,6 +3327,19 @@ async def start_build(request: Request, body: StartBuildRequest):
     args.append("--bg")
     args.append(str(spec_file))
 
+    # When a workspace is given, pass an explicit env that PINS run.sh to the
+    # workspace. cwd alone is not enough: `loki` exports LOKI_DIR (default
+    # .loki) into the dashboard process, and run.sh resolves its workspace as
+    # ${LOKI_DIR:-${LOKI_TARGET_DIR:-$(pwd)}/.loki} -- an inherited LOKI_DIR
+    # would override the workspace cwd and the build would write into the
+    # engine's own .loki. Setting both LOKI_DIR and LOKI_TARGET_DIR makes the
+    # workspace authoritative. When no workspace is given, env=None (inherit) so
+    # behavior is byte-identical to before this feature.
+    popen_env = None
+    if workspace_dir is not None:
+        popen_env = dict(os.environ)
+        popen_env["LOKI_TARGET_DIR"] = str(workspace_dir)
+        popen_env["LOKI_DIR"] = str(loki_dir)
     try:
         process = subprocess.Popen(
             args,
@@ -3198,6 +3347,7 @@ async def start_build(request: Request, body: StartBuildRequest):
             stderr=subprocess.DEVNULL,
             start_new_session=True,
             cwd=str(project_dir),
+            env=popen_env,
         )
     except (OSError, subprocess.SubprocessError) as e:
         raise HTTPException(status_code=500, detail=f"Failed to start build: {e}")
@@ -3242,12 +3392,34 @@ async def start_build(request: Request, body: StartBuildRequest):
         ip_address=request.client.host if request.client else None,
     )
 
+    # Best-effort: surface the trust run_id (the proof key) so the caller can
+    # correlate this build to its Evidence Receipt without parsing the pid.
+    # run.sh mints it into <loki_dir>/state/trust-run-id at run-start; the 0.3s
+    # liveness poll above usually does NOT outlast the mint, so this is often
+    # null at start time. It is RELIABLY derivable later by the caller, which
+    # owns the workspace path: read <workspace>/.loki/state/trust-run-id (or the
+    # newest proof under <workspace>/.loki). Null here is expected, not an error.
+    run_id = ""
+    try:
+        rid_file = loki_dir / "state" / "trust-run-id"
+        if rid_file.is_file():
+            run_id = rid_file.read_text(encoding="utf-8").strip()
+    except OSError:
+        pass
+
     return {
         "success": True,
         "message": f"Build started with provider {body.provider}",
         "pid": process.pid,
         "spec": str(spec_file),
         "provider": body.provider,
+        # The workspace this build runs in (echoed back; empty == engine's own
+        # project dir, today's default). The caller derives the proof path from
+        # this: <workspace>/.loki/state/trust-run-id.
+        "workspace": str(workspace_dir) if workspace_dir is not None else "",
+        # The trust run_id if already minted, else "" (see note above). When "",
+        # derive it from the workspace's .loki/state/trust-run-id.
+        "run_id": run_id,
     }
 
 

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.90.2
+**Version:** v7.91.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.90.2 start ./my-spec.md
+  asklokesh/loki-mode:7.91.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.90.2";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.91.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -802,4 +802,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(Z8),2}}r1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var FZ=await jZ(Bun.argv.slice(2));process.exit(FZ);
 
-//# debugId=0A25C50D5896B93C64756E2164756E21
+//# debugId=2A4ACA24DD51A05A64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.90.2'
+__version__ = '7.91.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.90.2",
+  "version": "7.91.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.90.2",
+  "version": "7.91.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",