loki-mode 7.91.1 → 7.92.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.91.1
+# Loki Mode v7.92.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.91.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.92.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.91.1
+7.92.0

package/autonomy/loki

@@ -313,6 +313,112 @@ get_version() {
     fi
 }
 
+# Stale-install nudge (bash route; mirrors loki-ts/src/util/update_check.ts).
+# Best-effort, fail-silent, and adds zero latency on the hot path:
+#   - skipped entirely on non-TTY / CI / LOKI_NO_UPDATE_CHECK=1;
+#   - result cached in ~/.loki/cache/update-check-bash.json for >= 24h, so the
+#     network is hit at most once a day (separate file from the Bun cache, which
+#     stores millisecond timestamps; this file stores Unix seconds);
+#   - the registry fetch has a hard 1.5s timeout and is fully fail-silent;
+#   - the hint goes to STDERR so stdout stays byte-identical for scripts and the
+#     bash<->Bun parity tests.
+# We never fabricate a version: the hint prints only when a real check (or a
+# fresh cache from one) reports a strictly newer stable semver.
+_loki_update_cache_path() {
+    echo "$HOME/.loki/cache/update-check-bash.json"
+}
+
+# _loki_semver_newer <latest> <current> -> 0 (true) iff latest is strictly newer.
+# Rejects anything that is not a plain MAJOR.MINOR.PATCH (e.g. "unknown",
+# prereleases): on any unparseable input it returns 1 (never nudge).
+_loki_semver_newer() {
+    local latest="$1" current="$2"
+    case "$latest" in
+        [0-9]*.[0-9]*.[0-9]*) ;;
+        *) return 1 ;;
+    esac
+    case "$current" in
+        [0-9]*.[0-9]*.[0-9]*) ;;
+        *) return 1 ;;
+    esac
+    # Reject prerelease / build suffixes (anything past the third number).
+    case "$latest" in *[!0-9.]*) return 1 ;; esac
+    case "$current" in *[!0-9.]*) return 1 ;; esac
+    local l_maj l_min l_pat c_maj c_min c_pat
+    IFS='.' read -r l_maj l_min l_pat _ <<EOF
+$latest
+EOF
+    IFS='.' read -r c_maj c_min c_pat _ <<EOF
+$current
+EOF
+    # Default any empty component to 0 (defensive).
+    l_maj=${l_maj:-0}; l_min=${l_min:-0}; l_pat=${l_pat:-0}
+    c_maj=${c_maj:-0}; c_min=${c_min:-0}; c_pat=${c_pat:-0}
+    if [ "$l_maj" -ne "$c_maj" ]; then [ "$l_maj" -gt "$c_maj" ]; return; fi
+    if [ "$l_min" -ne "$c_min" ]; then [ "$l_min" -gt "$c_min" ]; return; fi
+    [ "$l_pat" -gt "$c_pat" ]
+}
+
+# maybe_print_update_hint: print the one-line update nudge to stderr if (and
+# only if) a successful, non-fabricated check reports a strictly newer release.
+# Never blocks, never slows the command, never touches stdout. Always returns 0.
+maybe_print_update_hint() {
+    # Opt-out / non-interactive / CI: do nothing, touch neither disk nor network.
+    [ "${LOKI_NO_UPDATE_CHECK:-}" = "1" ] && return 0
+    [ -n "${CI:-}" ] && return 0
+    [ ! -t 1 ] && return 0
+
+    local current
+    current=$(get_version)
+    case "$current" in
+        [0-9]*.[0-9]*.[0-9]*) ;;
+        *) return 0 ;;  # "unknown" or non-semver -> never nudge
+    esac
+
+    local cache_file latest=""
+    cache_file=$(_loki_update_cache_path)
+
+    # Fast path: a fresh (< 24h) cache means zero network.
+    if [ -f "$cache_file" ]; then
+        local checked_at now age
+        checked_at=$(sed -n 's/.*"checkedAt"[[:space:]]*:[[:space:]]*\([0-9]\{1,\}\).*/\1/p' "$cache_file" 2>/dev/null | head -1)
+        latest=$(sed -n 's/.*"latest"[[:space:]]*:[[:space:]]*"\([0-9][0-9.]*\)".*/\1/p' "$cache_file" 2>/dev/null | head -1)
+        if [ -n "$checked_at" ] && [ -n "$latest" ]; then
+            now=$(date +%s 2>/dev/null || echo 0)
+            age=$(( now - checked_at ))
+            if [ "$age" -ge 0 ] && [ "$age" -lt 86400 ]; then
+                if _loki_semver_newer "$latest" "$current"; then
+                    printf 'A newer loki-mode is available (%s). Update: bun install -g loki-mode\n' "$latest" >&2
+                fi
+                return 0
+            fi
+        fi
+        latest=""  # stale cache -> fall through to a fresh fetch
+    fi
+
+    # Cache miss/stale: query the registry. Hard timeout, fail-silent.
+    if command -v curl >/dev/null 2>&1; then
+        latest=$(curl -fsS --max-time 1.5 "https://registry.npmjs.org/loki-mode/latest" 2>/dev/null \
+            | sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([0-9][0-9.]*\)".*/\1/p' | head -1)
+    fi
+    # No usable result -> print nothing, write nothing (never fabricate).
+    case "$latest" in
+        [0-9]*.[0-9]*.[0-9]*) ;;
+        *) return 0 ;;
+    esac
+
+    # Persist the fresh result (best-effort; a non-writable HOME must not break).
+    local now2
+    now2=$(date +%s 2>/dev/null || echo 0)
+    ( mkdir -p "$(dirname "$cache_file")" 2>/dev/null \
+        && printf '{"checkedAt":%s,"latest":"%s"}\n' "$now2" "$latest" > "$cache_file" 2>/dev/null ) || true
+
+    if _loki_semver_newer "$latest" "$current"; then
+        printf 'A newer loki-mode is available (%s). Update: bun install -g loki-mode\n' "$latest" >&2
+    fi
+    return 0
+}
+
 # Ensure dashboard Python venv with all deps installed.
 # Uses ~/.loki/dashboard-venv (persistent, writable, survives npm/brew upgrades).
 # Sets DASHBOARD_PYTHON to the venv python3 path on success.
@@ -717,11 +823,11 @@ show_help() {
     echo ""
     echo "Usage: loki <command> [options]"
     echo ""
-    echo "New here? Try one of these first:"
+    echo "New here? Try these in order:"
     echo "  loki doctor               Check your setup is ready (a few seconds)"
-    echo "  loki quick \"add a health endpoint\"   One small task, start to finish"
-    echo "  loki demo                 Build a sample todo app end to end (real run)"
+    echo "  loki quickstart           Guided first build from your idea (no PRD needed)"
     echo "  loki start ./prd.md       Build from a spec (PRD file, GitHub issue, or no arg)"
+    echo "  quickstart = guided first build; quick = one small task (3 iters max)."
     echo "  Docs: https://github.com/asklokesh/loki-mode  |  Report a problem: loki crash"
     echo ""
     # CLI consolidation (Phase A): the front page presents ~17 canonical
@@ -778,11 +884,11 @@ show_help() {
     echo "  version          Show version"
     echo "  help             Show this help ('loki help aliases' for old names)"
     echo ""
-    echo "More commands (ship, grill, spec, deploy, cleanup, init, watch, demo, web, api,"
-    echo "logs, github, import, council, proof, audit, compliance, agent, template,"
-    echo "magic, docs, wiki, ci, test, bench, secrets, telemetry, crash, worktree,"
-    echo "failover, monitor, remote, ...) are dispatchable and documented via"
-    echo "'loki <command> --help'."
+    echo "More commands (the most useful; many more are dispatchable):"
+    echo "  Advanced:    ship, deploy, init, web"
+    echo "  Cloud + CI:  github, import, ci"
+    echo "  Debugging:   logs, crash, cleanup"
+    echo "...run 'loki help <name>' for any command."
     echo ""
     echo "Aliases (deprecated): older command names still work; they print a"
     echo "one-line pointer to stderr and never alter --json output. See the full"
@@ -804,19 +910,8 @@ show_help() {
     echo "  --bmad-project PATH  Use BMAD Method project artifacts as input"
     echo "  --openspec PATH      Use OpenSpec change directory as input"
     echo ""
-    echo "Options for 'run' (v6.0.0):"
-    echo "  --dry-run          Preview generated PRD without starting"
-    echo "  --no-start         Generate PRD but don't start execution"
-    echo "  --output FILE      Save PRD to custom path"
-    echo "  --provider NAME    AI provider: claude (default), codex, cline, aider"
-    echo "  --parallel         Enable parallel mode with git worktrees"
-    echo "  --budget USD       Set cost budget limit"
-    echo ""
-    echo "Progressive Isolation (for 'run'):"
-    echo "  --worktree, -w     Git worktree isolation (separate branch)"
-    echo "  --pr               Auto-create PR after completion (implies --worktree)"
-    echo "  --ship             Auto-merge after PR (implies --pr)"
-    echo "  --detach, -d       Run in background (implies --worktree)"
+    echo "Deprecated alias 'run': 'loki run <issue-ref>' still works as an alias"
+    echo "for 'loki start'. See its options with 'loki run --help'."
     echo ""
     echo "Examples:"
     echo ""
@@ -941,11 +1036,11 @@ show_landing() {
     echo ""
     echo -e "First time here? ${CYAN}loki doctor${NC} checks your setup (an AI provider CLI is required)."
     echo ""
-    echo "Get started:"
+    echo "Get started (in order):"
+    echo -e "  ${CYAN}loki doctor${NC}           Check your setup is ready (a few seconds)"
     echo -e "  ${CYAN}loki quickstart${NC}       Guided first build from your idea (no PRD needed)"
     echo -e "  ${CYAN}loki start ./prd.md${NC}   Build from a spec (PRD file, GitHub issue, or no arg)"
-    echo -e "  ${CYAN}loki demo${NC}             Build a sample todo app end to end (real run)"
-    echo -e "  ${CYAN}loki dashboard start${NC}  Start the live run monitor (then: loki dashboard open)"
+    echo "  quickstart = guided first build; quick = one small task (3 iters max)."
     echo ""
     echo -e "Need help? ${CYAN}loki help${NC} lists every command."
     echo "Tip: preview cost and scope before building: loki plan <your-prd.md>"
@@ -3408,7 +3503,8 @@ cmd_why() {
     fi
 
     if [ "$as_json" = "1" ]; then
-        _LOKI_WHY_STATE="$state_file" _LOKI_WHY_COMPLETION="$completion_file" python3 - <<'WHYJSON'
+        _LOKI_WHY_STATE="$state_file" _LOKI_WHY_COMPLETION="$completion_file" \
+        _LOKI_WHY_LAST_ERROR="$loki_dir/state/LAST_ERROR.json" python3 - <<'WHYJSON'
 import json, os
 def load(p):
     try:
@@ -3416,7 +3512,8 @@ def load(p):
     except Exception: return {}
 state = load(os.environ.get("_LOKI_WHY_STATE", ""))
 comp = load(os.environ.get("_LOKI_WHY_COMPLETION", ""))
-print(json.dumps({"state": state, "completion": comp}, indent=2))
+last_error = load(os.environ.get("_LOKI_WHY_LAST_ERROR", ""))
+print(json.dumps({"state": state, "completion": comp, "last_error": last_error}, indent=2))
 WHYJSON
         return 0
     fi
@@ -3428,6 +3525,7 @@ WHYJSON
     _why_head_sha="$(git rev-parse HEAD 2>/dev/null || echo "")"
     _LOKI_WHY_STATE="$state_file" _LOKI_WHY_COMPLETION="$completion_file" \
     _LOKI_WHY_HEAD_SHA="$_why_head_sha" \
+    _LOKI_WHY_LAST_ERROR="$loki_dir/state/LAST_ERROR.json" \
     _LOKI_WHY_HANDOFFS="$loki_dir/memory/handoffs" python3 - <<'WHYTXT'
 import json, os, glob
 def load(p):
@@ -3519,6 +3617,28 @@ print()
 print(f"  What happened: {meaning}")
 print(f"  What to do   : {action}")
 
+# Surface the structured per-iteration error record, if one exists at
+# .loki/state/LAST_ERROR.json (the run.sh writer that produces it ships in the
+# SAME v7.92.0 release; on an older engine the file is simply absent and this
+# block stays dormant - never fabricated). run.sh clears it at the start of every
+# fresh run, so a present record belongs to the CURRENT run. We still only show it
+# when THIS run's outcome is itself a failure - never beside a success verdict
+# (that would be a fake-green-adjacent lie) - using the same SUCCESS set below.
+SUCCESS_STATUSES = {"council_approved", "completion_promise_fulfilled", "complete", "completed"}
+le = {}
+try:
+    with open(os.environ.get("_LOKI_WHY_LAST_ERROR", "")) as f:
+        le = json.load(f)
+except Exception:
+    le = {}
+if isinstance(le, dict) and le.get("error_class") and status not in SUCCESS_STATUSES:
+    print()
+    _it = le.get("iteration")
+    _it_s = f" (iteration {_it})" if _it not in (None, "") else ""
+    print(f"  Last error  : {le.get('error_class')}{_it_s}")
+    if le.get("brief"):
+        print(f"                {le.get('brief')}")
+
 # Surface the latest structured handoff (already-captured context), honestly.
 hd = sorted(glob.glob(os.path.join(os.environ.get("_LOKI_WHY_HANDOFFS",""), "*.md")))
 if hd:
@@ -10104,6 +10224,9 @@ except Exception:
     echo ""
     echo "Next: loki quickstart (guided first build from your idea, no PRD needed)"
     echo "      or loki demo (builds a sample todo app end to end) or loki start ./prd.md"
+    # Best-effort stale-install nudge (stderr only; never blocks; off on
+    # non-TTY/CI). Reached only on the human-readable path (--json returns above).
+    maybe_print_update_hint
     return 0
 }
 
@@ -10476,6 +10599,9 @@ cmd_version() {
             ;;
     esac
     echo "Loki Mode v$(get_version)"
+    # Best-effort stale-install nudge (stderr only; never blocks; off on
+    # non-TTY/CI). Mirrors the Bun route's update check for parity.
+    maybe_print_update_hint
 }
 
 # Secrets / credential management
@@ -16704,7 +16830,8 @@ main() {
             if _suggestion=$(_suggest_command "$command"); then
                 echo "Did you mean 'loki ${_suggestion}'?" >&2
             fi
-            echo "Run 'loki help' for usage." >&2
+            # Always point to the full command list, even with no near-miss match.
+            echo "Run 'loki help' to see every command." >&2
             exit 1
             ;;
     esac

package/autonomy/provider-offer.sh

@@ -69,8 +69,15 @@ _po_non_interactive() {
 # successful install. Inherited stdio; Loki never handles credentials.
 _po_run_login() {
     # claude must actually be on PATH for login to make sense.
+    # If the install succeeded but the binary is not yet resolvable, npm's
+    # global bin is almost certainly not on PATH. Print the exact copy-paste
+    # fix. We print the literal $(npm config get prefix) form (single-quoted,
+    # NOT executed here) so the user runs it in their own shell and so this
+    # post-install path makes no extra npm invocation.
     if ! command -v claude >/dev/null 2>&1; then
-        printf "%sInstalled, but 'claude' is not on your PATH yet. You may need to restart your shell or add npm's global bin to PATH (npm config get prefix). Run 'loki doctor' to recheck.%s\n" "$_PO_YELLOW" "$_PO_NC"
+        printf "%sInstalled, but 'claude' is not on your PATH yet. Add npm's global bin to your shell:%s\n" "$_PO_YELLOW" "$_PO_NC"
+        printf '  export PATH="$(npm config get prefix)/bin:$PATH"\n'
+        printf "Then restart your shell (or source your rc) and run: loki doctor\n"
         return 0
     fi
 

package/autonomy/run.sh

@@ -1050,6 +1050,179 @@ log_error() { echo -e "${RED}[ERROR]${NC} $*"; }
 log_step() { echo -e "${CYAN}[STEP]${NC} $*"; }
 log_debug() { [[ "${LOKI_DEBUG:-}" == "true" ]] && echo -e "${CYAN}[DEBUG]${NC} $*" >&2 || true; }
 
+#===============================================================================
+# Failure diagnosis helpers (T2.4 / T2.5 / T2.6)
+#
+# These make a failing or crashed build self-explanatory: a copy-pasteable
+# "loki why" hint on any non-zero exit, a durable CLASSIFIED LAST_ERROR record
+# on a failed iteration, and a best-effort terminal record on an untrapped
+# death. Every one is best-effort and NEVER alters the build's exit code.
+#===============================================================================
+
+# _loki_surface_why_hint (T2.4): print the "loki why" hint to stderr and write
+# it to .loki/NEXT_STEPS.txt. Called once from main() finalization when the run
+# failed (result != 0). Best-effort: never crashes, never changes exit code.
+_loki_surface_why_hint() {
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    local hint="For a plain-language diagnosis of what happened, run: loki why"
+    printf '%s\n' "$hint" >&2 || true
+    mkdir -p "$loki_dir" 2>/dev/null || true
+    printf '%s\n' "$hint" > "$loki_dir/NEXT_STEPS.txt" 2>/dev/null || true
+    return 0
+}
+
+# _loki_write_last_error (T2.5): write a durable, classified failure record to
+# .loki/state/LAST_ERROR.json. Schema:
+#   {
+#     "iteration":   <int>,
+#     "error_class": "provider_empty_output"|"build_timeout"|"rate_limited"
+#                    |"auth_error"|"unknown",
+#     "brief":       "<one honest sentence>",
+#     "timestamp":   "<UTC ISO-8601>"
+#   }
+# This is what `loki why` (in autonomy/loki, NOT owned here) can later read.
+# Built via python3 so the free-text brief can never break the JSON. Entirely
+# best-effort: any failure is swallowed and the build is never crashed.
+# Usage: _loki_write_last_error <iteration> <error_class> <brief>
+_loki_write_last_error() {
+    local iteration="${1:-0}"
+    local error_class="${2:-unknown}"
+    local brief="${3:-An iteration failed.}"
+    local loki_dir="${TARGET_DIR:-.}/.loki"
+    local state_dir="$loki_dir/state"
+    mkdir -p "$state_dir" 2>/dev/null || true
+    LOKI_LE_ITER="$iteration" \
+    LOKI_LE_CLASS="$error_class" \
+    LOKI_LE_BRIEF="$brief" \
+    LOKI_LE_FILE="$state_dir/LAST_ERROR.json" \
+    python3 -c "
+import json, os, tempfile
+try:
+    rec = {
+        'iteration': int(os.environ.get('LOKI_LE_ITER', '0') or 0),
+        'error_class': os.environ.get('LOKI_LE_CLASS', 'unknown'),
+        'brief': os.environ.get('LOKI_LE_BRIEF', ''),
+        'timestamp': __import__('datetime').datetime.utcnow().strftime('%Y-%m-%dT%H:%M:%SZ'),
+    }
+    target = os.environ['LOKI_LE_FILE']
+    d = os.path.dirname(target)
+    fd, tmp = tempfile.mkstemp(dir=d, suffix='.json')
+    with os.fdopen(fd, 'w') as f:
+        json.dump(rec, f)
+    os.replace(tmp, target)
+except Exception:
+    pass
+" 2>/dev/null || true
+    return 0
+}
+
+# _loki_classify_iteration_error (T2.5 helper): map an iteration's signals to one
+# of the LAST_ERROR error_class values. Conservative: only returns a specific
+# class when a signal confidently supports it, else "unknown". Never fabricates
+# build_timeout (no timeout signal is detected here, so it is reserved for a
+# caller that has one). Echoes the class on stdout.
+# Usage: _loki_classify_iteration_error <iter_output_file> <empty_output_flag 0|1>
+_loki_classify_iteration_error() {
+    local iter_output="${1:-}"
+    local empty_flag="${2:-0}"
+    if [ "$empty_flag" = "1" ]; then
+        echo "provider_empty_output"
+        return 0
+    fi
+    # Rate limit: reuse the same detector the retry path uses.
+    if [ -n "$iter_output" ] && [ -f "$iter_output" ] && detect_rate_limit "$iter_output" 2>/dev/null | grep -qE '^[1-9]'; then
+        echo "rate_limited"
+        return 0
+    fi
+    # Auth error: a clear 401/403/unauthorized in the output tail.
+    if [ -n "$iter_output" ] && [ -f "$iter_output" ]; then
+        local _tail
+        _tail="$(tail -n 40 "$iter_output" 2>/dev/null || true)"
+        if printf '%s\n' "$_tail" | grep -qiE '(http[ /]?40[13]|status[: ]+40[13]|unauthorized|invalid api key|authentication[_ ]error|401 )' 2>/dev/null; then
+            echo "auth_error"
+            return 0
+        fi
+    fi
+    echo "unknown"
+    return 0
+}
+
+# _loki_terminal_record (T2.6, SAFE SUBSET): on an untrapped exit where the
+# persisted run status is still "running" (a true mid-provider-call crash on a
+# trappable signal -- SIGTERM/SIGINT/SIGHUP via the lock-release trap), leave a
+# best-effort, classified LAST_ERROR record so a post-crash `loki why` is not
+# stale. Piggybacks the existing lock-release EXIT trap (see main()) -- it does
+# NOT install a new broad EXIT trap.
+#
+# IMPORTANT (why this does NOT rewrite autonomy-state.json): the resume-detection
+# block in this file (search "Durable resume") keys the ENT-2 pod-loss resume on
+# prev_status == "running". Flipping the status to "exited" here would make a
+# crashed-but-resumable build (LOKI_DURABLE_STATE=1) reset to iteration 0 on the
+# next start, destroying durable progress. So this writes ONLY the LAST_ERROR
+# side-record (which is what `loki why` reads) and deliberately leaves the
+# status untouched. SIGKILL / power-loss are uncatchable (no trap fires); the
+# ENT-2 durable-resume path covers those. Never alters the exit code; best-effort.
+_loki_terminal_record() {
+    local state_file
+    state_file="$(_loki_state_file 2>/dev/null)" || return 0
+    [ -n "$state_file" ] || return 0
+    [ -f "$state_file" ] || return 0
+    local _status
+    _status="$(LOKI_TR_FILE="$state_file" python3 -c "
+import json, os
+try:
+    print(json.load(open(os.environ['LOKI_TR_FILE'])).get('status','unknown'))
+except Exception:
+    print('unknown')
+" 2>/dev/null || echo "unknown")"
+    # Only act on a genuinely mid-flight "running" status. Any settled status
+    # (council_approved, failed, exited, paused, ...) is left untouched.
+    [ "$_status" = "running" ] || return 0
+    # Leave a classified LAST_ERROR so `loki why` has something honest -- WITHOUT
+    # touching autonomy-state.json (preserving the ENT-2 "running" resume signal).
+    _loki_write_last_error "${ITERATION_COUNT:-0}" "unknown" \
+        "The build process exited unexpectedly before finishing (possible crash or kill)." 2>/dev/null || true
+    return 0
+}
+
+# _loki_write_rate_limit_signal (T2.7): write a best-effort
+# .loki/signals/RATE_LIMITED file. This is FORWARD-LAID infrastructure: no
+# consumer reads it yet (a future dashboard / external watcher could, to tell a
+# normal provider rate-limit wait apart from a hang). The user-visible signal
+# today is the log_info line at the wait site; this file is the durable record. Schema:
+#   {"rate_limited": true, "wait_seconds": <int>, "reset_time": "<string>"}
+# Built via python3 so the reset-time string can never break the JSON. Entirely
+# best-effort: never crashes, never alters the build.
+# Usage: _loki_write_rate_limit_signal <wait_seconds> <reset_time>
+_loki_write_rate_limit_signal() {
+    local wait_seconds="${1:-0}"
+    local reset_time="${2:-}"
+    local signals_dir="${TARGET_DIR:-.}/.loki/signals"
+    mkdir -p "$signals_dir" 2>/dev/null || true
+    LOKI_RL_WAIT="$wait_seconds" \
+    LOKI_RL_RESET="$reset_time" \
+    LOKI_RL_FILE="$signals_dir/RATE_LIMITED" \
+    python3 -c "
+import json, os, tempfile
+try:
+    w = os.environ.get('LOKI_RL_WAIT', '0')
+    try:
+        w = int(w)
+    except Exception:
+        w = 0
+    rec = {'rate_limited': True, 'wait_seconds': w, 'reset_time': os.environ.get('LOKI_RL_RESET', '')}
+    target = os.environ['LOKI_RL_FILE']
+    d = os.path.dirname(target)
+    fd, tmp = tempfile.mkstemp(dir=d, suffix='.json')
+    with os.fdopen(fd, 'w') as f:
+        json.dump(rec, f)
+    os.replace(tmp, target)
+except Exception:
+    pass
+" 2>/dev/null || true
+    return 0
+}
+
 # Live Build HUD (v7.71.0): a single append-only per-iteration status line on the
 # interactive TTY path. Pure additive stdout decoration -- never piped into any
 # tee, so the dashboard agent.log and the stream-json parser are untouched. The
@@ -1798,9 +1971,93 @@ get_iteration_duration_ms() {
 # Supports Docker/K8s secret file mounts as fallback.
 #===============================================================================
 
+# Zero-friction preflight helpers (T1.1). These run for ALL environments
+# (not just Docker/K8s) BEFORE the build starts, via validate_api_keys. git is a
+# genuine hard requirement (the build inits a repo) so a missing git BLOCKS with a
+# copy-pasteable fix; node-version and network reachability are ADVISORY (warn and
+# continue, fail-open) so a probabilistic or optional signal never blocks a working
+# user. The goal: surface real problems early without ever wrongly refusing to start.
+#
+# _loki_check_node_version: ADVISORY only. If node is present and its major
+# version is < 18, log a warning (node only matters for node-based builds) and
+# continue. If node is absent entirely this is a NO-OP. Always returns 0 -- it
+# never blocks the build (fail-open); the real node call, if any, is the test.
+_loki_check_node_version() {
+    command -v node >/dev/null 2>&1 || return 0
+    local node_version major
+    node_version="$(node --version 2>/dev/null || echo '')"
+    # node --version -> "v20.11.0"; extract the leading major integer.
+    major="$(printf '%s' "$node_version" | sed -E 's/^v?([0-9]+).*/\1/')"
+    # Advisory only: node is OPTIONAL (absence is a no-op above, and many builds -
+    # Python/Go/Rust - never touch node). A present-but-old node only matters for
+    # node-based builds, so WARN and continue (fail-open); never hard-block a
+    # working user. The actual node call (only for JS/TS work) is the real test.
+    if [ -n "$major" ] && [[ "$major" =~ ^[0-9]+$ ]] && [ "$major" -lt 18 ]; then
+        log_warn "Node.js >= 18 recommended for node-based builds; found ${node_version:-unknown}. Upgrade if your project uses node: https://nodejs.org"
+    fi
+    return 0
+}
+
+# _loki_check_git_present: the build initializes a git repo, so git is required.
+_loki_check_git_present() {
+    if ! command -v git >/dev/null 2>&1; then
+        log_error "Git is required (the build initializes a repo). Install: https://git-scm.com/downloads"
+        return 1
+    fi
+    return 0
+}
+
+# _loki_check_network_reachable: ADVISORY only. A fast (3s) reachability probe to
+# the active provider endpoint that WARNS and continues if it cannot reach it -- a
+# curl failure does not prove the provider CLI cannot connect (3s timeout under
+# load, transient DNS, or a proxy set for the CLI but not the shell all curl-fail
+# while the real build succeeds). Always returns 0 (fail-open); the actual
+# provider call is the authoritative connectivity test. Skipped entirely when curl
+# is missing, when LOKI_SKIP_NET_PREFLIGHT=1, when ANTHROPIC_BASE_URL is set (alt
+# provider endpoint we cannot assume), or for any provider whose endpoint we do
+# not know. It NEVER blocks the build.
+_loki_check_network_reachable() {
+    local provider="${1:-claude}"
+    [ "${LOKI_SKIP_NET_PREFLIGHT:-}" = "1" ] && return 0
+    command -v curl >/dev/null 2>&1 || return 0
+    # Alternate provider base URL set -> do not assume the default endpoint.
+    [ -n "${ANTHROPIC_BASE_URL:-}" ] && return 0
+
+    local endpoint=""
+    case "$provider" in
+        claude) endpoint="https://api.anthropic.com" ;;
+        *)      return 0 ;;  # unknown endpoint -> fail open, never guess
+    esac
+
+    # Advisory only: a fast curl probe failing does NOT prove the provider CLI
+    # cannot connect (a 3s timeout under load, transient DNS, or a proxy set for
+    # the CLI but not the shell all curl-fail while the real build succeeds). WARN
+    # and continue - the actual provider call is the authoritative connectivity
+    # test. Silence this with LOKI_SKIP_NET_PREFLIGHT=1. Never hard-block here.
+    if ! curl -sS -m 3 -o /dev/null "$endpoint" 2>/dev/null; then
+        log_warn "Could not verify network reachability to the AI provider (firewall/VPN/transient?). Continuing; the provider call will be the real test. Silence with LOKI_SKIP_NET_PREFLIGHT=1."
+    fi
+    return 0
+}
+
 validate_api_keys() {
     local provider="${LOKI_PROVIDER:-claude}"
 
+    # Zero-friction preflight (T1.1): toolchain + reachability checks that apply
+    # to EVERY environment, run BEFORE the Docker/K8s early-return below so they
+    # are not silently skipped in the common local case. Node/git are genuinely
+    # required (node only when present-but-too-old); the network probe is
+    # fail-open and opt-out (LOKI_SKIP_NET_PREFLIGHT=1).
+    if ! _loki_check_node_version; then
+        return 1
+    fi
+    if ! _loki_check_git_present; then
+        return 1
+    fi
+    if ! _loki_check_network_reachable "$provider"; then
+        return 1
+    fi
+
     # CLI tools (claude, codex, cline, aider) use their own login sessions.
     # Only require API keys inside Docker/K8s where CLI login isn't available.
     if [[ ! -f "/.dockerenv" ]] && [[ -z "${KUBERNETES_SERVICE_HOST:-}" ]]; then
@@ -16170,9 +16427,13 @@ if __name__ == "__main__":
         esac
 
         # BUG-EC-013: Detect empty provider output (0 bytes = no work done)
+        # T2.5: track this distinct cause so the failure path can classify the
+        # durable LAST_ERROR record as provider_empty_output specifically.
+        local _empty_output=0
         if [ -f "$iter_output" ] && [ ! -s "$iter_output" ] && [ $exit_code -eq 0 ]; then
             log_warn "Provider returned empty output (0 bytes) despite exit code 0 -- treating as error"
             exit_code=1
+            _empty_output=1
         fi
 
         save_state $retry "exited" $exit_code
@@ -16967,6 +17228,24 @@ else:
         # the "Will retry" log_warn below. TTY-gated, `|| true`, never tee'd.
         render_build_hud "${ITERATION_COUNT:-0}" "${rarv_phase:-?}" "${duration:-0}" || true
 
+        # T2.5: durable, classified failure record for `loki why`. Best-effort,
+        # never crashes the build. Skip signal-induced exits (130 SIGINT /
+        # 143 SIGTERM / 137 SIGKILL): a user/operator interrupt is not an error
+        # to record (mirrors the crash-capture exclusion above). Classification
+        # is conservative -- provider_empty_output | rate_limited | auth_error,
+        # else unknown; never fabricates a class that no signal supports.
+        if [ "$exit_code" -ne 130 ] && [ "$exit_code" -ne 143 ] && [ "$exit_code" -ne 137 ]; then
+            local _err_class _err_brief
+            _err_class="$(_loki_classify_iteration_error "$iter_output" "${_empty_output:-0}")"
+            case "$_err_class" in
+                provider_empty_output) _err_brief="The provider returned no output (0 bytes) on this iteration -- no work was done." ;;
+                rate_limited)          _err_brief="The provider rate-limited the request; the build will wait and retry." ;;
+                auth_error)            _err_brief="The provider rejected the request as unauthorized (check your login or API key)." ;;
+                *)                     _err_brief="Iteration ${ITERATION_COUNT:-?} failed with exit code ${exit_code} (cause not classified)." ;;
+            esac
+            _loki_write_last_error "${ITERATION_COUNT:-0}" "$_err_class" "$_err_brief" || true
+        fi
+
         # Checkpoint failed iteration state (v5.57.0)
         create_checkpoint "iteration-${ITERATION_COUNT} failed (exit=$exit_code)" "iteration-${ITERATION_COUNT}-fail"
 
@@ -16986,7 +17265,15 @@ else:
             wait_time=$rate_limit_wait
             local human_time=$(format_duration $wait_time)
             log_warn "Rate limit detected! Waiting until reset (~$human_time)..."
-            log_info "Rate limit resets at approximately $(date -v+${wait_time}S '+%I:%M %p' 2>/dev/null || date -d "+${wait_time} seconds" '+%I:%M %p' 2>/dev/null || echo 'soon')"
+            local _reset_at
+            _reset_at="$(date -v+${wait_time}S '+%I:%M %p' 2>/dev/null || date -d "+${wait_time} seconds" '+%I:%M %p' 2>/dev/null || echo 'soon')"
+            log_info "Rate limit resets at approximately $_reset_at"
+            # T2.7: elevate the wait to an explicit, reassuring INFO line (the
+            # human time was previously only at DEBUG inside detect_rate_limit's
+            # calculated-backoff branch) so a multi-minute wait does not look
+            # like a hang, and persist a machine-readable signal for watchers.
+            log_info "Rate-limited by the provider; waiting ~${wait_time}s (resets ${_reset_at}). This is normal, not a hang."
+            _loki_write_rate_limit_signal "$wait_time" "$_reset_at" || true
             notify_rate_limit "$wait_time"
         else
             wait_time=$(calculate_wait $retry)
@@ -17026,6 +17313,10 @@ else:
         done
         echo ""
 
+        # T2.7: the wait is over -- clear the RATE_LIMITED signal so it never
+        # lingers stale once the build resumes. Best-effort.
+        rm -f "${TARGET_DIR:-.}/.loki/signals/RATE_LIMITED" 2>/dev/null || true
+
         # Clean up per-iteration output file
         rm -f "$iter_output" 2>/dev/null
 
@@ -18010,8 +18301,15 @@ main() {
         fi
         # Release on session-process exit so a fresh `loki start` can
         # immediately re-acquire after this one finishes / is killed.
+        # T2.6: piggyback the existing lock-release trap (we deliberately do NOT
+        # add a new broad EXIT trap) to write a best-effort terminal record on an
+        # untrapped non-zero exit where the run status is still "running" -- so a
+        # post-crash `loki why` is not stale. _loki_terminal_record is a strict
+        # no-op on every graceful path (status already settled) and never alters
+        # the exit code. SIGKILL/power-loss stay uncatchable (no trap fires); the
+        # ENT-2 durable-resume path covers those.
         # shellcheck disable=SC2064
-        trap "safe_release_lock '$lock_file'" EXIT INT TERM HUP
+        trap "_loki_terminal_record || true; safe_release_lock '$lock_file'" EXIT INT TERM HUP
 
         # Check PID file after acquiring lock
         if [ -f "$pid_file" ]; then
@@ -18174,6 +18472,13 @@ main() {
         fi
     fi
 
+    # Clear any stale per-run diagnosis record from a PRIOR run before this one
+    # starts. LAST_ERROR.json is a single side-record; if it survived a previous
+    # failed run it must not surface next to THIS run's outcome (a stale error
+    # shown beside a fresh success would be a fake-green-adjacent lie). Mirrors
+    # the RATE_LIMITED signal clear. Best-effort; never blocks the run.
+    rm -f "${TARGET_DIR:-.}/.loki/state/LAST_ERROR.json" 2>/dev/null || true
+
     if [ "$PARALLEL_MODE" = "true" ]; then
         # Parallel mode: orchestrate multiple worktrees
         log_header "Running in Parallel Mode"
@@ -18423,6 +18728,13 @@ except (json.JSONDecodeError, OSError): pass
 " 2>/dev/null || true
     fi
 
+    # T2.4: on ANY non-zero final result, surface a plain-language next step
+    # (print to stderr + write .loki/NEXT_STEPS.txt). Single chokepoint at the
+    # finalization exit so it fires once and never double-prints on success.
+    if [ "$result" != "0" ]; then
+        _loki_surface_why_hint || true
+    fi
+
     exit $result
 }
 

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.91.1"
+__version__ = "7.92.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.91.1
+**Version:** v7.92.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.91.1 start ./my-spec.md
+  asklokesh/loki-mode:7.92.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.91.1";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.92.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -402,9 +402,9 @@ Start a session with: loki start <prd>`}}let X=Y3(z);return{exitCode:0,stdout:Q?
 `);if(process.env.LOKI_TS_ENTRY)process.stdout.write(`  ${A("pass")}  LOKI_TS_ENTRY override: ${process.env.LOKI_TS_ENTRY}
 `);if(process.env.BUN_FROM_SOURCE==="1"||process.env.BUN_FROM_SOURCE==="true")process.stdout.write(`  ${A("pass")}  BUN_FROM_SOURCE set: shim prefers loki-ts/src/ over dist/
 `);let u=await Z$();if(u!==null){let x=(await F([u,"-c","import sys; print(f'{sys.version_info.major}.{sys.version_info.minor}.{sys.version_info.micro}')"],{timeoutMs:5000})).stdout.trim();if(x.startsWith("3.12"))process.stdout.write(`  ${A("pass")}  Python 3.12 (chromadb / sentence-transformers): ${x} at ${u}
-`);else if(x)process.stdout.write(`  ${A("warn")}  Python 3.12 NOT found -- using ${x} at ${u}; chromadb / sentence-transformers may fail. Install python3.12 (brew install python@3.12 / apt install python3.12).
-`);else process.stdout.write(`  ${A("warn")}  Python 3 found at ${u} but version probe failed; chromadb may not work.
-`)}else process.stdout.write(`  ${A("warn")}  Python 3 not on PATH -- memory + MCP integrations disabled.
+`);else if(x)process.stdout.write(`  ${A("warn")}  Python 3.12 recommended for memory vector search (chromadb / sentence-transformers); found ${x} at ${u}. Core memory and the rest of Loki work without it. Install: brew install python@3.12 (macOS) or apt install python3.12 (Debian/Ubuntu).
+`);else process.stdout.write(`  ${A("warn")}  Python 3 found at ${u} but version probe failed; memory vector search (chromadb / sentence-transformers) may not work. The rest of Loki is unaffected.
+`)}else process.stdout.write(`  ${A("warn")}  Python 3 not on PATH -- memory + MCP integrations disabled. The rest of Loki works without them.
 `);if(process.stdout.write(`
 `),process.stdout.write(`${k}Summary:${J} ${S}${$.pass} passed${J}, ${T}${$.fail} failed${J}, ${_}${$.warn} warnings${J}
 
@@ -802,4 +802,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(Z8),2}}r1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var FZ=await jZ(Bun.argv.slice(2));process.exit(FZ);
 
-//# debugId=66E8E0C857CDBC4264756E2164756E21
+//# debugId=AC88BFE80A60D0E764756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.91.1'
+__version__ = '7.92.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.91.1",
+  "version": "7.92.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.91.1",
+  "version": "7.92.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",