loki-mode 7.97.0 → 7.99.0

package/README.md

@@ -197,7 +197,7 @@ loki quick "build a landing page with a signup form"
 | **Bun (recommended)** | `bun install -g loki-mode` | Fastest startup for CLI commands. |
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` | Auto-installs Bun as a dep |
 | **Docker (easiest)** | `loki docker start prd.md` | Host wrapper: runs loki in the published image with zero config. Bind-mounts the current folder so `.loki` state, resume, and continuity work exactly like local. Auto-detects auth (`ANTHROPIC_API_KEY`, else your host Claude Code login). Needs loki + Docker on the host. See DOCKER_README.md |
-| **Docker (raw)** | `docker pull asklokesh/loki-mode:7.58.1 && docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" asklokesh/loki-mode:7.58.1 start prd.md` | Bun + Claude CLI pre-installed; needs an API key, or use docker compose with a .env file, see DOCKER_README.md |
+| **Docker (raw)** | `docker pull asklokesh/loki-mode:latest && docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" asklokesh/loki-mode:latest start prd.md` | Bun + Claude CLI pre-installed; needs an API key, or use docker compose with a .env file, see DOCKER_README.md |
 | **npm (compat)** | `npm install -g loki-mode` | Works without Bun (bash fallback). Migrate any time with `loki self-update --to bun`. |
 
 **Upgrading:**
@@ -257,7 +257,7 @@ The next major release sunsets the Bash runtime entirely. There is no firm calen
 | Method | Command |
 |--------|---------|
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` |
-| **Docker** | `docker pull asklokesh/loki-mode:7.58.1` |
+| **Docker** | `docker pull asklokesh/loki-mode:latest` |
 | **Inside Claude Code** | `claude --dangerously-skip-permissions` then type "Loki Mode" |
 | **Git clone** | `git clone https://github.com/asklokesh/loki-mode.git` |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.97.0
+# Loki Mode v7.99.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.97.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.99.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.97.0
+7.99.0

package/autonomy/checklist-verify.py

@@ -97,8 +97,30 @@ def run_check(check: dict, project_dir: str, timeout: int) -> dict:
                         text=True,
                         timeout=timeout,
                     )
-                    result["passed"] = proc.returncode == 0
-                    result["output"] = (proc.stdout + proc.stderr)[:500]
+                    combined = proc.stdout + proc.stderr
+                    # Trust gate: a tests_pass check REQUIRES that at least one
+                    # test was actually discovered and run. jest is invoked with
+                    # --passWithNoTests, so a zero-match pattern exits 0 ("No
+                    # tests found ...") -- that would be a fake-green (a required
+                    # verification passing with nothing run). pytest exits 5 when
+                    # it collects no tests. Detect either no-test signal and fail
+                    # the check rather than report success on an empty run.
+                    no_tests = (
+                        "No tests found" in combined
+                        or "no tests ran" in combined.lower()
+                        or "no tests to run" in combined.lower()
+                        or proc.returncode == 5  # pytest: no tests collected
+                    )
+                    if no_tests:
+                        result["passed"] = False
+                        result["output"] = (
+                            "No tests discovered for required check "
+                            f"(pattern={pattern!r}); a tests_pass check must run "
+                            "at least one test. Output: "
+                        ) + combined[:400]
+                    else:
+                        result["passed"] = proc.returncode == 0
+                        result["output"] = combined[:500]
                 except subprocess.TimeoutExpired:
                     result["passed"] = None  # timeout = pending
                     result["output"] = f"Timed out after {timeout}s"

package/autonomy/completion-council.sh

@@ -44,7 +44,37 @@
 # Council configuration
 COUNCIL_ENABLED=${LOKI_COUNCIL_ENABLED:-true}
 COUNCIL_SIZE=${LOKI_COUNCIL_SIZE:-3}
+# Guard COUNCIL_SIZE: a non-positive/non-numeric size would make the 2/3 floor 0
+# and let an empty council "approve" by default (fake-green). Force a sane floor.
+case "$COUNCIL_SIZE" in
+    ''|*[!0-9]*) COUNCIL_SIZE=3 ;;
+esac
+[ "$COUNCIL_SIZE" -lt 1 ] 2>/dev/null && COUNCIL_SIZE=3
 COUNCIL_THRESHOLD=${LOKI_COUNCIL_THRESHOLD:-2}
+
+# Effective completion threshold: the operator's COUNCIL_THRESHOLD may only ever
+# TIGHTEN the gate, never weaken it below the 2/3-majority safety floor. Before
+# this, the operator's COUNCIL_THRESHOLD was silently ignored by the vote (a
+# hardcoded 2/3 formula was used), so an operator who set a stricter threshold
+# got a no-op while the logs claimed it was active. We honor it as a floor-raise
+# only: effective = max(ceil(2/3*size), operator_threshold), clamped to size.
+_council_effective_threshold() {
+    # Optional $1 = the size to compute against (e.g. the actual number of voters
+    # present in this round); defaults to COUNCIL_SIZE. The 2/3 floor + the
+    # operator clamp are both relative to this size, so the helper works for both
+    # the configured council size and a per-round member count.
+    local _size="${1:-$COUNCIL_SIZE}"
+    case "$_size" in ''|*[!0-9]*) _size="$COUNCIL_SIZE" ;; esac
+    [ "$_size" -lt 1 ] 2>/dev/null && _size=1
+    local _floor=$(( (_size * 2 + 2) / 3 ))
+    local _op="${COUNCIL_THRESHOLD:-0}"
+    case "$_op" in ''|*[!0-9]*) _op=0 ;; esac
+    local _eff="$_floor"
+    [ "$_op" -gt "$_eff" ] 2>/dev/null && _eff="$_op"
+    [ "$_eff" -gt "$_size" ] 2>/dev/null && _eff="$_size"
+    [ "$_eff" -lt 1 ] 2>/dev/null && _eff=1
+    printf '%s' "$_eff"
+}
 COUNCIL_CHECK_INTERVAL=${LOKI_COUNCIL_CHECK_INTERVAL:-5}
 # Guard against invalid interval (must be positive integer)
 if ! [[ "$COUNCIL_CHECK_INTERVAL" =~ ^[1-9][0-9]*$ ]]; then
@@ -608,8 +638,11 @@ council_vote() {
     log_header "COMPLETION COUNCIL - Iteration $ITERATION_COUNT"
     log_info "Convening ${COUNCIL_SIZE}-member council..."
 
-    # Compute threshold using ceiling(2/3) formula, consistent with council_aggregate_votes
-    local effective_threshold=$(( (COUNCIL_SIZE * 2 + 2) / 3 ))
+    # Effective threshold honors the operator's COUNCIL_THRESHOLD as a floor-raise
+    # over the 2/3-majority safety floor (tighten-only); see
+    # _council_effective_threshold.
+    local effective_threshold
+    effective_threshold=$(_council_effective_threshold)
 
     # Gather evidence for council members
     local evidence_file="$vote_dir/evidence.md"
@@ -2604,7 +2637,13 @@ print(json.dumps(out))
 " 2>/dev/null || echo "[]")
 
     # Calculate threshold: 2/3 majority
-    local threshold=$(( (total_members * 2 + 2) / 3 ))  # ceiling of 2/3
+    # Effective threshold honors the operator's COUNCIL_THRESHOLD as a tighten-only
+    # floor-raise over the 2/3 ceiling, computed against the actual member count.
+    # This is the PRIMARY completion-decision path (council_should_stop ->
+    # council_evaluate -> council_aggregate_votes), so it must use the same helper
+    # as council_vote, not a separate hardcoded formula.
+    local threshold
+    threshold=$(_council_effective_threshold "$total_members")
     local verdict="CONTINUE"
     if [ "$complete_count" -ge "$threshold" ]; then
         verdict="COMPLETE"
@@ -2833,7 +2872,8 @@ council_evaluate() {
     fi
 
     # Compute threshold using the same ceiling(2/3) formula as council_vote and council_aggregate_votes
-    local _eval_threshold=$(( (COUNCIL_SIZE * 2 + 2) / 3 ))
+    local _eval_threshold
+    _eval_threshold=$(_council_effective_threshold)
 
     # Step 1: Aggregate votes from all members.
     # Phase C (v7.5.20): try the Claude `--agents <json>` + `--json-schema`

package/autonomy/run.sh

@@ -947,8 +947,24 @@ PYCHECK
         fi
         # (d) Defense-in-depth: reclaim the dashboard port only in the CLEAR
         # case, so we never kill a shared dashboard another project owns.
+        # BUT never kill a HEALTHY dashboard already serving on the port: that is
+        # almost always the user's own live dashboard (open in their browser), and
+        # killing it mid-use drops their session (ERR_CONNECTION_REFUSED, WS fail).
+        # A healthy server is reusable by every project, so probe /api/status first
+        # and only reclaim the port when nothing is answering (a genuinely stale
+        # listener). Opt out of the probe with LOKI_DASHBOARD_FORCE_RECLAIM=1.
         if command -v lsof >/dev/null 2>&1; then
-            lsof -ti:"${DASHBOARD_PORT:-57374}" -sTCP:LISTEN 2>/dev/null | xargs kill 2>/dev/null || true
+            local _dash_port="${DASHBOARD_PORT:-57374}"
+            local _dash_alive=""
+            if [ "${LOKI_DASHBOARD_FORCE_RECLAIM:-}" != "1" ] && command -v curl >/dev/null 2>&1; then
+                _dash_alive=$(curl -s -o /dev/null -w '%{http_code}' --max-time 1 \
+                    "http://127.0.0.1:${_dash_port}/api/status" 2>/dev/null || true)
+            fi
+            if [ "$_dash_alive" = "200" ]; then
+                log_info "Reusing the healthy dashboard already serving on port ${_dash_port} (not reclaiming)."
+            else
+                lsof -ti:"${_dash_port}" -sTCP:LISTEN 2>/dev/null | xargs kill 2>/dev/null || true
+            fi
         fi
     fi
 }
@@ -2058,6 +2074,25 @@ validate_api_keys() {
         return 1
     fi
 
+    # Zero-friction auth preflight for LOCAL runs (must run BEFORE the early
+    # return below, which exits for non-Docker/K8s envs). When claude is the
+    # provider, the claude CLI is on PATH, there is no ANTHROPIC_API_KEY, and no
+    # OAuth credentials file exists (the user installed claude but never ran
+    # `claude login`), the build would otherwise enter, make a failing call, and
+    # 401 -- the worst first impression -- forcing the user to run `loki why`.
+    # Fail fast with the one-step fix instead. Opt out with LOKI_SKIP_AUTH_PREFLIGHT=1.
+    if [[ "$provider" == "claude" && "${LOKI_SKIP_AUTH_PREFLIGHT:-}" != "1" && -z "${ANTHROPIC_API_KEY:-}" ]] \
+       && command -v claude >/dev/null 2>&1; then
+        local _local_creds="${CLAUDE_CONFIG_DIR:-$HOME/.claude}/.credentials.json"
+        if [[ ! -s "$_local_creds" ]]; then
+            log_error "Claude Code is installed but not logged in -- the build would stall instead of running."
+            log_error "Log in once, then retry:"
+            log_error "    claude login"
+            log_error "(or set ANTHROPIC_API_KEY, or LOKI_SKIP_AUTH_PREFLIGHT=1 to bypass this check)"
+            return 1
+        fi
+    fi
+
     # CLI tools (claude, codex, cline, aider) use their own login sessions.
     # Only require API keys inside Docker/K8s where CLI login isn't available.
     if [[ ! -f "/.dockerenv" ]] && [[ -z "${KUBERNETES_SERVICE_HOST:-}" ]]; then
@@ -2162,6 +2197,9 @@ except Exception:
                 return 1
             fi
         fi
+        # NOTE: the never-logged-in (no credentials file) case is handled earlier,
+        # BEFORE the local early-return, so it covers local runs too (this Docker/
+        # K8s-only block would otherwise be unreachable for that case).
     fi
 
     return 0
@@ -12224,16 +12262,31 @@ check_task_completion_signal() {
         local fb_statement="${fb_content:-All PRD requirements implemented and tests passing}"
         # Build minimal JSON payload
         signal_file="$fallback_file"
-        # Write the synthesized payload back into the signal file so the
-        # rest of this function can read it uniformly.
-        python3 -c "
+        # Synthesize the payload into a TEMP file then atomically move it into
+        # place, so the signal file is never observed truncated/empty/malformed:
+        # a bare `python3 ... > "$fallback_file"` truncates the file BEFORE python
+        # runs, so a python crash (or missing interpreter) mid-write would leave
+        # an empty/partial file that downstream json.loads then silently drops.
+        local _fb_tmp="${fallback_file}.tmp.$$"
+        if python3 -c "
 import json, sys
-print(json.dumps({
+sys.stdout.write(json.dumps({
     'statement': sys.argv[1][:1000],
     'evidence': 'file-based completion via COMPLETION_REQUESTED fallback',
     'confidence': 'medium',
     'source': 'completion_requested_file_fallback'
-}))" "$fb_statement" > "$fallback_file" 2>/dev/null || echo '{}' > "$fallback_file"
+}))" "$fb_statement" > "$_fb_tmp" 2>/dev/null && [ -s "$_fb_tmp" ]; then
+            mv -f "$_fb_tmp" "$fallback_file" 2>/dev/null || rm -f "$_fb_tmp" 2>/dev/null
+        else
+            # python unavailable or produced nothing: write a hand-built minimal
+            # valid JSON (statement embedded with a conservative escape) atomically.
+            rm -f "$_fb_tmp" 2>/dev/null
+            local _fb_esc
+            _fb_esc=$(printf '%s' "$fb_statement" | tr -d '"\\\n\r' | cut -c1-1000)
+            printf '{"statement":"%s","evidence":"file-based completion via COMPLETION_REQUESTED fallback","confidence":"medium","source":"completion_requested_file_fallback"}' "$_fb_esc" > "${fallback_file}.tmp2.$$" 2>/dev/null \
+                && mv -f "${fallback_file}.tmp2.$$" "$fallback_file" 2>/dev/null \
+                || { rm -f "${fallback_file}.tmp2.$$" 2>/dev/null; printf '{"statement":"completion requested","evidence":"fallback","confidence":"low","source":"completion_requested_file_fallback"}' > "$fallback_file" 2>/dev/null; }
+        fi
     fi
 
     if [ ! -f "$signal_file" ]; then

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.97.0"
+__version__ = "7.99.0"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -6240,9 +6240,14 @@ def _compute_cost_snapshot() -> dict:
     budget_used = 0.0
     budget_remaining = None
 
-    # Read efficiency files (one JSON file per iteration/task)
+    # Read efficiency files (one JSON file per iteration/task).
+    # Use the iteration-*.json pattern so this reader sees the same
+    # authoritative file set as _compute_budget_snapshot and
+    # _compute_cost_timeline (both glob iteration-*.json, mirroring
+    # check_budget_limit in run.sh). A bare *.json would also pick up
+    # non-iteration JSON in the dir and make the three cost readers disagree.
     if efficiency_dir.exists():
-        for eff_file in sorted(efficiency_dir.glob("*.json")):
+        for eff_file in sorted(efficiency_dir.glob("iteration-*.json")):
             try:
                 data = json.loads(eff_file.read_text())
                 # A corrupt/truncated efficiency file can parse to a non-object

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.97.0
+**Version:** v7.99.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.97.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.99.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -802,4 +802,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(Z8),2}}r1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var FZ=await jZ(Bun.argv.slice(2));process.exit(FZ);
 
-//# debugId=ABBB64E42A394DE264756E2164756E21
+//# debugId=2654E1AA878C0D9664756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.97.0'
+__version__ = '7.99.0'

package/memory/retrieval.py

@@ -680,8 +680,10 @@ class MemoryRetrieval:
         for ns in namespaces:
             ns_retrieval = self.with_namespace(ns)
 
-            # Simple keyword search in this namespace
-            for collection in ["episodic", "semantic", "skills"]:
+            # Simple keyword search in this namespace.
+            # BUG-MEM-012: 'anti_patterns' was omitted, so anti-pattern
+            # memories were silently missed in cross-namespace search.
+            for collection in ["episodic", "semantic", "skills", "anti_patterns"]:
                 results = ns_retrieval.retrieve_by_keyword(
                     query.split(),
                     collection,
@@ -823,20 +825,36 @@ class MemoryRetrieval:
         if collection not in self.vector_indices:
             return self.retrieve_by_keyword(query.split(), collection)[:top_k]
 
-        # Check if indices need rebuilding after consolidation (BUG-MEM-002).
-        # If patterns.json was modified more recently than we last built
-        # indices, fall back to keyword search for accuracy.
-        if collection == "semantic" and self._indices_built_at is not None:
-            patterns_path = self.base_path / "semantic" / "patterns.json"
-            if patterns_path.exists():
+        # Check if indices need rebuilding after consolidation (BUG-MEM-002,
+        # BUG-MEM-007). Consolidation rewrites semantic/patterns.json (and may
+        # touch semantic/anti-patterns.json), so any index sourced from those
+        # files can go stale. The 'semantic' index reads patterns.json; the
+        # 'anti_patterns' index reads BOTH patterns.json and anti-patterns.json
+        # (consolidated anti-patterns are bridged from patterns.json). If a
+        # source file was modified more recently than we last built indices,
+        # fall back to keyword search for accuracy. (episodic/skills read their
+        # own per-record files and are not rewritten by consolidation, so they
+        # are not checked here.)
+        if self._indices_built_at is not None:
+            stale_sources: List[str] = []
+            if collection == "semantic":
+                stale_sources = ["semantic/patterns.json"]
+            elif collection == "anti_patterns":
+                stale_sources = ["semantic/patterns.json",
+                                 "semantic/anti-patterns.json"]
+            if stale_sources:
                 import os
-                patterns_mtime = os.path.getmtime(patterns_path)
-                if patterns_mtime > self._indices_built_at:
-                    logger.info(
-                        "Semantic index is stale (patterns modified after index build). "
-                        "Falling back to keyword search for accuracy."
-                    )
-                    return self.retrieve_by_keyword(query.split(), collection)[:top_k]
+                for rel in stale_sources:
+                    source_path = self.base_path / rel
+                    if source_path.exists() and \
+                            os.path.getmtime(source_path) > self._indices_built_at:
+                        logger.info(
+                            "%s index is stale (%s modified after index build). "
+                            "Falling back to keyword search for accuracy.",
+                            collection, rel,
+                        )
+                        return self.retrieve_by_keyword(
+                            query.split(), collection)[:top_k]
 
         # Generate query embedding
         query_embedding = self.embedding_engine.embed(query)
@@ -859,6 +877,34 @@ class MemoryRetrieval:
 
         return items
 
+    @staticmethod
+    def _anti_pattern_content_key(record: Dict[str, Any]) -> tuple:
+        """Normalized content key for an anti-pattern across both schemas.
+
+        Consolidation writes anti-patterns into semantic/patterns.json as
+        SemanticPattern objects (fields incorrect_approach|pattern /
+        description / correct_approach), while the legacy
+        semantic/anti-patterns.json uses what_fails / why / prevention. The
+        same anti-pattern can therefore appear in both stores (no migration
+        copies one into the other), which would double-count it on read and in
+        the vector index (BUG-MEM-011). Map both schemas onto the same
+        lowercased/stripped (what_fails, why, prevention) tuple so the two
+        representations of one anti-pattern collide on a single key.
+        """
+        def _norm(*candidates: Any) -> str:
+            for c in candidates:
+                if c:
+                    return str(c).strip().lower()
+            return ""
+
+        what_fails = _norm(record.get("what_fails"),
+                           record.get("incorrect_approach"),
+                           record.get("pattern"))
+        why = _norm(record.get("why"), record.get("description"))
+        prevention = _norm(record.get("prevention"),
+                           record.get("correct_approach"))
+        return (what_fails, why, prevention)
+
     @staticmethod
     def _parse_episode_timestamp(value: Any) -> Optional[datetime]:
         """Parse an episode timestamp to a tz-aware datetime, or None.
@@ -1746,6 +1792,25 @@ class MemoryRetrieval:
         """Keyword search in anti-patterns."""
         results: List[Dict[str, Any]] = []
         anti_data = self.storage.read_json("semantic/anti-patterns.json") or {}
+        patterns_data = self.storage.read_json("semantic/patterns.json") or {}
+
+        # BUG-MEM-011: an anti-pattern can live in BOTH the consolidated
+        # patterns.json (category="anti-pattern") and the legacy
+        # anti-patterns.json, with no migration copying one into the other.
+        # Reading both naively double-counts it. Pre-scan the consolidated
+        # store (which we keep) into a seen-set keyed by id AND normalized
+        # content, then skip any legacy record that collides with either.
+        seen_ids: set = set()
+        seen_content: set = set()
+        for pat in patterns_data.get("patterns", []):
+            if not isinstance(pat, dict):
+                continue
+            if pat.get("category") != "anti-pattern":
+                continue
+            pid = pat.get("id")
+            if pid:
+                seen_ids.add(pid)
+            seen_content.add(self._anti_pattern_content_key(pat))
 
         for anti in anti_data.get("anti_patterns", []):
             # Defensive: mirror the sibling loop below. A corrupt or
@@ -1753,6 +1818,11 @@ class MemoryRetrieval:
             # the isinstance guard and (x or "") avoid AttributeError.
             if not isinstance(anti, dict):
                 continue
+            # Dedup: skip a legacy record already represented in patterns.json.
+            aid = anti.get("id")
+            if (aid and aid in seen_ids) or \
+                    self._anti_pattern_content_key(anti) in seen_content:
+                continue
             what_fails = (anti.get("what_fails") or "").lower()
             why = (anti.get("why") or "").lower()
             prevention = (anti.get("prevention") or "").lower()
@@ -1774,7 +1844,6 @@ class MemoryRetrieval:
         # description / correct_approach. Without this bridge, consolidated
         # anti-patterns were never retrievable. Map them onto the same
         # what_fails / why / prevention scoring shape.
-        patterns_data = self.storage.read_json("semantic/patterns.json") or {}
         for pat in patterns_data.get("patterns", []):
             if not isinstance(pat, dict):
                 continue
@@ -1888,8 +1957,33 @@ class MemoryRetrieval:
 
         index = self.vector_indices["anti_patterns"]
         anti_data = self.storage.read_json("semantic/anti-patterns.json") or {}
+        patterns_data = self.storage.read_json("semantic/patterns.json") or {}
+
+        # BUG-MEM-011: the same anti-pattern may live in BOTH the consolidated
+        # patterns.json and the legacy anti-patterns.json. Indexing both
+        # double-counts it in the vector index. Pre-scan the consolidated store
+        # (which we keep) into a seen-set keyed by id AND normalized content,
+        # then skip any legacy record that collides with either.
+        seen_ids: set = set()
+        seen_content: set = set()
+        for pat in patterns_data.get("patterns", []):
+            if not isinstance(pat, dict):
+                continue
+            if pat.get("category") != "anti-pattern":
+                continue
+            pid = pat.get("id")
+            if pid:
+                seen_ids.add(pid)
+            seen_content.add(self._anti_pattern_content_key(pat))
 
         for anti in anti_data.get("anti_patterns", []):
+            if not isinstance(anti, dict):
+                continue
+            # Dedup: skip a legacy record already represented in patterns.json.
+            aid = anti.get("id")
+            if (aid and aid in seen_ids) or \
+                    self._anti_pattern_content_key(anti) in seen_content:
+                continue
             # Create text for embedding
             text = f"{anti.get('what_fails', '')} {anti.get('why', '')} {anti.get('prevention', '')}"
 
@@ -1904,7 +1998,6 @@ class MemoryRetrieval:
         # category="anti-pattern" entries in semantic/patterns.json, not the
         # legacy anti-patterns.json above. Bridge those into the vector index
         # too so embedding-based retrieval sees consolidated anti-patterns.
-        patterns_data = self.storage.read_json("semantic/patterns.json") or {}
         for pat in patterns_data.get("patterns", []):
             if not isinstance(pat, dict):
                 continue

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.97.0",
+  "version": "7.99.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.97.0",
+  "version": "7.99.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",