loki-mode 7.99.0 → 7.100.0

package/README.md

@@ -140,11 +140,33 @@ status check in your repository's branch-protection settings.
 
 ```bash
 bun install -g loki-mode                       # install (npm/brew/Docker also work, see below)
+loki quickstart                                # one guided command: your first real build
+```
+
+`loki quickstart` is the recommended way to start. It asks a few quick questions
+(setup check, one-line idea, template pick, plan review), quotes the real
+cost/time estimate before anything is spent, and then runs the build. Pressing
+Enter through every step builds the sample Todo app.
+
+Want a taste with zero key and zero spend first? Run:
+
+```bash
+loki demo --offline                            # replay a real sample Evidence Receipt (no key, no spend)
+```
+
+It replays a real past build's Evidence Receipt so you can see Loki's honest
+verdict (VERIFIED / VERIFIED WITH GAPS / NOT VERIFIED) in seconds, with no
+provider, no API key, no spend, and no network. It is a sample (a replay), not a
+verdict on your own code.
+
+Prefer the explicit, scriptable path? Scaffold a PRD and run the build yourself:
+
+```bash
 loki init my-app --template simple-todo-app    # scaffold a starter PRD
 cd my-app && loki start prd.md                 # autonomous build from the spec
 ```
 
-That is the happy path. One thing to know first: Loki drives a separate coding-agent CLI (Claude Code is the recommended one) and needs it plus a couple of common tools on your PATH. Run `loki doctor` any time and it tells you exactly what is present and what is missing, with a copy-pasteable install command for each gap.
+One thing to know first: Loki drives a separate coding-agent CLI (Claude Code is the recommended one) and needs it plus a couple of common tools on your PATH. Run `loki doctor` any time and it tells you exactly what is present and what is missing, with a copy-pasteable install command for each gap.
 
 ```bash
 loki doctor                                    # check your setup before the first build

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.99.0
+# Loki Mode v7.100.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.99.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.100.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.99.0
+7.100.0

package/autonomy/loki

@@ -11380,15 +11380,23 @@ cmd_demo() {
         echo "runs 'loki start' to build it end-to-end. Shows a summary when done"
         echo "and offers to open the result in a browser."
         echo ""
+        echo "With --offline, instead replays a bundled real Evidence Receipt so"
+        echo "you can see what Loki produces with no provider, no API key, no"
+        echo "spend, and no network. This is a sample (a replay of a past build),"
+        echo "not a verdict on your own code."
+        echo ""
         echo "Usage: loki demo [options]"
         echo ""
         echo "Options:"
+        echo "  --offline     Replay a bundled sample receipt (no key, no spend)"
         echo "  --dir PATH    Use a specific directory instead of a temp dir"
         echo "  --keep        Keep the temp directory on exit (default: kept)"
         echo "  --provider P  AI provider to use (default: claude)"
         echo "  --dry-run     Show what would happen without running"
         echo ""
         echo "Examples:"
+        echo "  loki demo --offline              # Replay a sample receipt (no spend)"
+        echo "  loki tour                        # Same as 'loki demo --offline'"
         echo "  loki demo                        # Build todo app in temp dir"
         echo "  loki demo --dir ~/demo-project   # Build in specific directory"
         echo "  loki demo --provider codex       # Use Codex instead of Claude"
@@ -11411,6 +11419,7 @@ cmd_demo() {
     local demo_dir=""
     local provider=""
     local dry_run=false
+    local offline=false
     local start_args=()
     # v7.29.0 (feature #4): demo now shows the FORCED-simple cost estimate
     # before spending and asks for confirmation. --yes / LOKI_ASSUME_YES skip
@@ -11459,6 +11468,10 @@ cmd_demo() {
                 dry_run=true
                 shift
                 ;;
+            --offline|--tour)
+                offline=true
+                shift
+                ;;
             *)
                 echo -e "${RED}Unknown option: $1${NC}"
                 echo "Run 'loki demo --help' for usage."
@@ -11467,6 +11480,60 @@ cmd_demo() {
         esac
     done
 
+    # Offline taste path (feature #2): replay a bundled REAL Evidence Receipt
+    # with NO provider, NO key, NO spend, NO network. This is the zero-friction
+    # path a newcomer can run before installing or authenticating anything, so
+    # it MUST run before (and bypass) the provider_offer_gate below. It never
+    # builds, never calls cmd_start, and returns in well under 10s.
+    #
+    # Fake-green guardrail: the headline shown is the bundled receipt's REAL
+    # honest headline (rendered by the same render_evidence_receipt_md the PR
+    # path uses, which is never green unless genuinely VERIFIED). It is framed
+    # as a SAMPLE/replay -- never presented as a verdict on the user's code.
+    if [ "$offline" = true ]; then
+        local sample_proof="$SKILL_DIR/skills/fixtures/demo-receipt/proof.json"
+        if [ ! -f "$sample_proof" ]; then
+            echo -e "${RED}Error: bundled sample receipt not found.${NC}" >&2
+            echo "Expected at: $sample_proof" >&2
+            return 1
+        fi
+        if ! declare -f render_evidence_receipt_md >/dev/null 2>&1; then
+            echo -e "${RED}Error: receipt renderer unavailable.${NC}" >&2
+            echo "Expected autonomy/lib/proof-pr.sh to be sourced." >&2
+            return 1
+        fi
+
+        echo -e "${BOLD}Loki Mode v$version - Sample Receipt (offline replay)${NC}"
+        echo ""
+        echo -e "${YELLOW}This is a SAMPLE: a replay of a real past build, not a"
+        echo -e "verdict on your code. No provider, no API key, no spend, no"
+        echo -e "network were used to show it.${NC}"
+        echo ""
+        echo -e "${DIM}It is what Loki produces after a build: an Evidence Receipt"
+        echo -e "with an honest headline you can recompute yourself.${NC}"
+        echo ""
+
+        # Print-only renderer; always returns 0. The headline label inside is
+        # the receipt's genuine honesty.headline.
+        render_evidence_receipt_md "$sample_proof" "" ""
+
+        # The receipt prints a "verify it yourself" command. For a real build
+        # that command works against .loki/proofs/. This bundled sample is for
+        # display only (no local proof store entry, hash neutralized), so make
+        # that explicit rather than let a newcomer run a command that fails.
+        echo ""
+        echo -e "${DIM}The 'verify it yourself' command above is what you run against the"
+        echo -e "real builds you create (their proofs live in .loki/proofs/). This"
+        echo -e "bundled sample is for display only.${NC}"
+
+        echo ""
+        echo -e "${DIM}---------------------------------------${NC}"
+        echo -e "${BOLD}That was a sample. Build your own:${NC}"
+        echo -e "  ${CYAN}loki quickstart${NC}                  # one guided command, your first real build"
+        echo -e "  ${CYAN}loki demo${NC}                        # build a bundled sample app for real"
+        return 0
+    fi
+
     # v7.29.0: provider pre-flight gate (skipped for --dry-run, which never
     # spends). On a TTY, offer to install; on non-TTY/CI, print honest manual
     # instructions and exit 2 before any spend. Detect-first, so the nested
@@ -16450,6 +16517,17 @@ main() {
         demo)
             cmd_demo "$@"
             ;;
+        tour)
+            # Zero-key/zero-spend taste path: an alias for 'demo --offline' that
+            # replays a bundled real Evidence Receipt. --help routes straight to
+            # the demo help (which documents --offline / tour); otherwise inject
+            # --offline ahead of any user args.
+            if [ "${1:-}" = "--help" ] || [ "${1:-}" = "-h" ]; then
+                cmd_demo --help
+            else
+                cmd_demo --offline "$@"
+            fi
+            ;;
         quickstart)
             cmd_quickstart "$@"
             ;;
@@ -31218,6 +31296,59 @@ PYEOF
                     echo "Ready to post:"
                     echo "  ${hook}"
                 fi
+
+                # Copy-paste "Verified by Loki" markdown badge (word-of-mouth
+                # loop). The badge color + message derive ONLY from the receipt's
+                # honest headline (honesty.headline), which proof-generator
+                # computes deterministically from real facts and which is
+                # impossible to forge from an LLM opinion. We exact-match the
+                # three headline strings:
+                #   VERIFIED            -> brightgreen "verified"
+                #   VERIFIED WITH GAPS  -> orange "verified with gaps"
+                #   NOT VERIFIED        -> red "not verified"
+                # Anything else (missing/null/legacy proof) OMITS the badge: we
+                # never paint a non-VERIFIED receipt green, and we do not force a
+                # fine old-format proof red. We deliberately do NOT fall back to
+                # council.final_verdict here -- that is an LLM verdict and the
+                # exact fake-green path the headline exists to override.
+                # The badge links to the gist we just published (no new egress).
+                # shields.io static/v1 query endpoint avoids structural hyphens.
+                local badge
+                badge=$(LOKI_PROOF_JSON="$pj" LOKI_GIST_URL="$LOKI_LAST_GIST_URL" python3 - <<'PYEOF' 2>/dev/null || true
+import json, os
+from urllib.parse import quote
+try:
+    d = json.load(open(os.environ["LOKI_PROOF_JSON"]))
+except Exception:
+    d = {}
+headline = (d.get("honesty") or {}).get("headline")
+# Exact-match ONLY. council.final_verdict is intentionally NOT consulted: it is
+# an LLM opinion, the precise fake-green source the deterministic headline
+# overrides. Unmapped headline -> no entry -> badge omitted.
+mapping = {
+    "VERIFIED": ("verified", "brightgreen"),
+    "VERIFIED WITH GAPS": ("verified with gaps", "orange"),
+    "NOT VERIFIED": ("not verified", "red"),
+}
+entry = mapping.get(headline)
+url = os.environ.get("LOKI_GIST_URL", "").strip()
+# Omit the badge for any unmapped headline (never green, never forced red),
+# and when we have no link target to point at.
+if entry and url:
+    message, color = entry
+    badge_img = (
+        "https://img.shields.io/static/v1?label=Loki"
+        "&message=" + quote(message)
+        + "&color=" + color
+    )
+    print("[![Loki: {msg}]({img})]({url})".format(msg=message, img=badge_img, url=url))
+PYEOF
+)
+                if [ -n "$badge" ]; then
+                    echo ""
+                    echo "Markdown badge (paste into a README or PR):"
+                    echo "  ${badge}"
+                fi
             fi
             exit 0
             ;;

package/autonomy/run.sh

@@ -11246,6 +11246,7 @@ start_dashboard() {
     local original_port=$DASHBOARD_PORT
     local max_attempts=10
     local attempt=0
+    local DASHBOARD_REUSED=0
 
     while lsof -i :$DASHBOARD_PORT &>/dev/null && [ $attempt -lt $max_attempts ]; do
         # Check if it's our own dashboard
@@ -11254,7 +11255,24 @@ start_dashboard() {
             # Only kill if it's a Python/uvicorn dashboard process
             local proc_cmd=$(ps -p "$existing_pid" -o comm= 2>/dev/null || true)
             if [[ "$proc_cmd" == *python* ]] || [[ "$proc_cmd" == *uvicorn* ]]; then
-                log_step "Killing existing dashboard on port $DASHBOARD_PORT (PID: $existing_pid)..."
+                # Never kill a HEALTHY dashboard already serving here: it is almost
+                # always the user's own live dashboard (open in their browser), and
+                # killing it on `loki start` drops their session mid-use. A healthy
+                # server is reusable by this build too, so probe /api/status and, if
+                # it answers 200, REUSE it (skip starting our own). Only kill a
+                # dashboard process that is NOT serving (a genuinely stuck/dead one).
+                # Opt out with LOKI_DASHBOARD_FORCE_RECLAIM=1.
+                local _dash_alive=""
+                if [ "${LOKI_DASHBOARD_FORCE_RECLAIM:-}" != "1" ] && command -v curl >/dev/null 2>&1; then
+                    _dash_alive=$(curl -s -o /dev/null -w '%{http_code}' --max-time 1 \
+                        "http://127.0.0.1:${DASHBOARD_PORT}/api/status" 2>/dev/null || true)
+                fi
+                if [ "$_dash_alive" = "200" ]; then
+                    log_info "Reusing the healthy dashboard already serving on port $DASHBOARD_PORT (not killing it)."
+                    DASHBOARD_REUSED=1
+                    break
+                fi
+                log_step "Killing stuck dashboard on port $DASHBOARD_PORT (PID: $existing_pid, not serving)..."
                 kill "$existing_pid" 2>/dev/null || true
                 sleep 1
                 break
@@ -11276,6 +11294,15 @@ start_dashboard() {
         return 1
     fi
 
+    # If we found a HEALTHY dashboard already serving on the port, reuse it: do
+    # NOT launch a second server (that would fight for the port / kill the user's
+    # live one). The existing server already serves this project's state.
+    if [ "${DASHBOARD_REUSED:-0}" = "1" ]; then
+        export LOKI_DASHBOARD_PORT="$DASHBOARD_PORT"
+        log_info "Dashboard already live on port $DASHBOARD_PORT; reusing it."
+        return 0
+    fi
+
     # Start FastAPI dashboard server (unified UI + API)
     log_step "Starting unified dashboard server..."
     local log_file=".loki/dashboard/logs/dashboard.log"

package/completions/_loki

@@ -125,6 +125,7 @@ function _loki_commands {
         'quickstart:Guided first build from your idea'
         'monitor:Monitor Docker Compose services with auto-fix'
         'demo:Interactive 60-second demo'
+        'tour:Offline sample receipt replay (no key, no spend)'
         'init:Interactive PRD builder'
         'stop:Stop execution'
         'pause:Pause execution'

package/completions/loki.bash

@@ -5,7 +5,7 @@ _loki_completion() {
     _init_completion || return
 
     # Main subcommands (must match autonomy/loki main case statement)
-    local main_commands="start quick monitor demo init stop pause resume status next ship dashboard web serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets doctor watchdog audit metrics syslog onboard share proof explain plan report cost kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help"
+    local main_commands="start quick monitor demo tour init stop pause resume status next ship dashboard web serve api sandbox notify import github issue config provider reset memory compound checkpoint council dogfood projects enterprise secrets doctor watchdog audit metrics syslog onboard share proof explain plan report cost kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash open otel preview quickstart rc rollback self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help"
 
     # 1. If we are on the first argument (subcommand)
     if [[ $cword -eq 1 ]]; then

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.99.0"
+__version__ = "7.100.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.99.0
+**Version:** v7.100.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.99.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
+var z8=Object.defineProperty;var X8=($)=>$;function K8($,Q){this[$]=X8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)z8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:K8.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var y1={};b(y1,{lokiDir:()=>P,homeLokiDir:()=>T$,findRepoRootForVersion:()=>e$,REPO_ROOT:()=>h});import{resolve as t,dirname as i$}from"path";import{fileURLToPath as q8}from"url";import{existsSync as E$}from"fs";import{homedir as J8}from"os";function V8(){let $=h1;for(let Q=0;Q<6;Q++){if(E$(t($,"VERSION"))&&E$(t($,"autonomy/run.sh")))return $;let Z=i$($);if(Z===$)break;$=Z}return t(h1,"..","..","..")}function e$($){let Q=$;for(let Z=0;Z<6;Z++){if(E$(t(Q,"VERSION"))&&E$(t(Q,"autonomy/run.sh")))return Q;let z=i$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function P(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(J8(),".loki")}var h1,h;var C=L(()=>{h1=i$(q8(import.meta.url));h=V8()});import{readFileSync as W8}from"fs";import{resolve as U8,dirname as H8}from"path";import{fileURLToPath as G8}from"url";function N$(){if(Q$!==null)return Q$;let $="7.100.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=H8(G8(import.meta.url)),Z=e$(Q);Q$=W8(U8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var $1=L(()=>{C()});var u1={};b(u1,{runOrThrow:()=>x8,run:()=>F,readStreamCapped:()=>f1,commandVersion:()=>N8,commandExists:()=>f,ShellError:()=>Q1,MAX_STDOUT_BYTES:()=>m1});async function f1($,Q=m1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function F($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([f1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function x8($,Q={}){let Z=await F($,Q);if(Z.exitCode!==0)throw new Q1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=E8($),Z=await F(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function E8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function N8($,Q="--version"){if(!await f($))return null;let z=await F([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var m1=16777216,Q1;var d=L(()=>{Q1=class Q1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return S8?"":$}var S8,T,S,_,lZ,I,k,y,J;var c=L(()=>{S8=(process.env.NO_COLOR??"").length>0;T=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),lZ=r("\x1B[0;34m"),I=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as u8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(u8($))return A$=$,$;let Q=await f("python3.12");if(Q)return A$=Q,Q;let Z=await f("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return F([Z,"-c",$],Q)}var A$;var V$=L(()=>{d()});var q0={};b(q0,{runStatus:()=>W3});import{existsSync as v,readFileSync as U$,readdirSync as i1,statSync as e1}from"fs";import{resolve as D,basename as $3}from"path";import{homedir as Q3}from"os";function $0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function Q0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*D$/Q);if(X>D$)X=D$;let q=D$-X,K=S;if(z>=80)K=T;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=$0($),U=$0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${U})`}async function z3(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -802,4 +802,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(Z8),2}}r1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var FZ=await jZ(Bun.argv.slice(2));process.exit(FZ);
 
-//# debugId=2654E1AA878C0D9664756E2164756E21
+//# debugId=D8F1E717478FB03A64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.99.0'
+__version__ = '7.100.0'

package/memory/retrieval.py

@@ -856,12 +856,24 @@ class MemoryRetrieval:
                         return self.retrieve_by_keyword(
                             query.split(), collection)[:top_k]
 
-        # Generate query embedding
-        query_embedding = self.embedding_engine.embed(query)
-
-        # Search vector index
+        # Generate query embedding and search the vector index. If the embedding
+        # engine has fallen back to a different model/dimension since the index
+        # was built, the query vector dimension will not match the stored index
+        # and VectorSearchIndex.search raises ValueError. That must NOT crash
+        # retrieval or return wrong-dimension neighbors -- degrade to keyword
+        # search (the honest, accurate fallback), same as the staleness path.
         index = self.vector_indices[collection]
-        results = index.search(query_embedding, top_k)
+        try:
+            query_embedding = self.embedding_engine.embed(query)
+            results = index.search(query_embedding, top_k)
+        except ValueError as exc:
+            logger.info(
+                "%s vector search failed (%s); likely an embedding "
+                "dimension change since index build. Falling back to keyword "
+                "search for accuracy.",
+                collection, exc,
+            )
+            return self.retrieve_by_keyword(query.split(), collection)[:top_k]
 
         # Convert to standard format
         items: List[Dict[str, Any]] = []

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.99.0",
+  "version": "7.100.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.99.0",
+  "version": "7.100.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/skills/fixtures/demo-receipt/README.md

@@ -0,0 +1,18 @@
+# Demo Evidence Receipt fixture
+
+`proof.json` here is a real Loki Mode Evidence Receipt, copied from an actual
+build and sanitized (no machine paths, no secrets). It is bundled so that
+`loki demo --offline` (and `loki tour`) can show a newcomer a real receipt with
+zero provider, zero key, zero spend, and zero network.
+
+What is real: the headline (`VERIFIED WITH GAPS`), the test result, the security
+findings, the cost, and the diff stats are the genuine recorded results of that
+build.
+
+What is changed for sanitization: `run_id`, `loki_version`, timestamps, the
+spec brief, and `verification.hash` are neutralized. `verification.hash` is set
+to `sample-not-reproducible` on purpose so this replay fixture is never mistaken
+for a locally-reproducible run. It is for display only.
+
+This is a SAMPLE (a replay of a past real build), not a verdict on the user's
+own code. The CLI labels it as such.

package/skills/fixtures/demo-receipt/proof.json

@@ -0,0 +1,166 @@
+{
+  "schema_version": "1.1",
+  "run_id": "run-sample-demo-replay",
+  "generated_at": "2026-06-27T17:21:37Z",
+  "loki_version": "sample",
+  "started_at": "2026-06-27T16:42:44Z",
+  "wall_clock_sec": 2333,
+  "spec": {
+    "source": "./.loki/generated-prd.md",
+    "brief": "Sample Evidence Receipt bundled with Loki Mode for the offline demo (loki demo --offline / loki tour). Copied from a real build and sanitized: no machine paths, no secrets. The verification facts below (tests, security, cost, diff) are the real recorded results of that build. This file is for replay/display only."
+  },
+  "provider": {
+    "name": "claude",
+    "model": "opus"
+  },
+  "iterations": {
+    "count": 3,
+    "succeeded": 3,
+    "failed": 0
+  },
+  "files_changed": {
+    "count": 8,
+    "insertions": 1413,
+    "deletions": 35,
+    "files": [
+      { "path": "API.md", "insertions": 227, "deletions": 0, "status": "modified" },
+      { "path": "ARCHITECTURE.md", "insertions": 197, "deletions": 0, "status": "modified" },
+      { "path": "CLAUDE.md", "insertions": 94, "deletions": 0, "status": "modified" },
+      { "path": "COMPONENTS.md", "insertions": 206, "deletions": 0, "status": "modified" },
+      { "path": "DECISIONS.md", "insertions": 146, "deletions": 0, "status": "modified" },
+      { "path": "README.md", "insertions": 157, "deletions": 35, "status": "modified" },
+      { "path": "SETUP.md", "insertions": 236, "deletions": 0, "status": "modified" },
+      { "path": "TESTING.md", "insertions": 150, "deletions": 0, "status": "modified" }
+    ]
+  },
+  "diffs": null,
+  "council": {
+    "enabled": true,
+    "final_verdict": "",
+    "threshold": null,
+    "reviewers": [],
+    "findings_link": null
+  },
+  "quality_gates": {
+    "passed": 0,
+    "total": 0,
+    "gates": []
+  },
+  "cost": {
+    "usd": 10.3218,
+    "input_tokens": 18484,
+    "output_tokens": 43491,
+    "cache_read_tokens": 5868340,
+    "cache_creation_tokens": 246851
+  },
+  "deployment": {
+    "deployed_url": null,
+    "public_url": null
+  },
+  "facts": {
+    "git": {
+      "base_sha": "255d91cf3d688a42a6e9a5f0e1c042ecfc29de0c",
+      "head_sha": "a42cb14ae996eb7459c81b7a43c5686f3612072e",
+      "diff": {
+        "count": 8,
+        "insertions": 1413,
+        "deletions": 35,
+        "files": [
+          { "path": "API.md", "insertions": 227, "deletions": 0, "status": "modified" },
+          { "path": "ARCHITECTURE.md", "insertions": 197, "deletions": 0, "status": "modified" },
+          { "path": "CLAUDE.md", "insertions": 94, "deletions": 0, "status": "modified" },
+          { "path": "COMPONENTS.md", "insertions": 206, "deletions": 0, "status": "modified" },
+          { "path": "DECISIONS.md", "insertions": 146, "deletions": 0, "status": "modified" },
+          { "path": "README.md", "insertions": 157, "deletions": 35, "status": "modified" },
+          { "path": "SETUP.md", "insertions": 236, "deletions": 0, "status": "modified" },
+          { "path": "TESTING.md", "insertions": 150, "deletions": 0, "status": "modified" }
+        ]
+      },
+      "diff_sha256": "c2be6fff3e774c387f276277b25fc424f07b667b0f2c73d8804f954f37bd1356"
+    },
+    "build": {
+      "command": "",
+      "exit_code": null,
+      "ran": false,
+      "duration_sec": null,
+      "status": "not_run"
+    },
+    "tests": {
+      "runner": "node-test",
+      "command": "node-test",
+      "exit_code": 0,
+      "passed_count": null,
+      "failed_count": null,
+      "status": "verified",
+      "duration_sec": null
+    },
+    "quality_gates": [],
+    "security": {
+      "ran": true,
+      "total": 2,
+      "active": 2,
+      "waived": 0,
+      "high_active": 0,
+      "status": "findings",
+      "findings": [
+        { "rule": "cors-wildcard-credentials", "severity": "MEDIUM", "waived": false },
+        { "rule": "cors-wildcard-credentials", "severity": "MEDIUM", "waived": false }
+      ]
+    },
+    "cost": {
+      "usd": 10.3218,
+      "input_tokens": 18484,
+      "output_tokens": 43491,
+      "cache_read_tokens": 5868340,
+      "cache_creation_tokens": 246851
+    },
+    "meta": {
+      "run_id": "run-sample-demo-replay",
+      "loki_version": "sample",
+      "provider": "claude",
+      "model": "opus",
+      "started_at": "2026-06-27T16:42:44Z",
+      "generated_at": "2026-06-27T17:21:37Z",
+      "wall_clock_sec": 2333
+    }
+  },
+  "assessments": {
+    "_note": "AI judgment, not deterministic proof",
+    "council": {
+      "enabled": true,
+      "final_verdict": "",
+      "threshold": null,
+      "reviewers": [],
+      "findings_link": null
+    },
+    "completion_claim": {
+      "claimed": true,
+      "evidence_gate_verdict": "pass"
+    }
+  },
+  "honesty": {
+    "headline": "VERIFIED WITH GAPS",
+    "degraded": [
+      {
+        "item": "build",
+        "status": "not_run",
+        "reason": "build not run"
+      }
+    ],
+    "evidence_gate": {
+      "ran": true,
+      "verdict": "pass",
+      "baseline_established": true
+    }
+  },
+  "redaction": {
+    "applied": false,
+    "rules_version": "1.0",
+    "redactions_count": 0
+  },
+  "verification": {
+    "hash": "sample-not-reproducible",
+    "algo": "sha256",
+    "scope": "integrity"
+  }
+}