loki-mode 8.2.0 → 8.3.1

package/README.md

@@ -15,12 +15,67 @@ _The free, source-available autonomous coding agent by [Autonomi](https://www.au
 
 [Website](https://www.autonomi.dev/) | [Documentation](wiki/Home.md) | [Installation](docs/INSTALLATION.md) | [Changelog](CHANGELOG.md) | [Purple Lab -- deprecated v7.44.0](#purple-lab)
 
-**Current release: v8.2.0**
+**Current release: v8.3.1**
 
 </div>
 
 ---
 
+## See the receipt before you install anything
+
+Every agent claims it finished. Ours hands you an artifact you can check:
+
+```bash
+npx loki-mode tour     # no install, no API key, no spend, no network
+```
+
+That prints a real Evidence Receipt from a past build. Note what it says:
+
+```
+Headline: VERIFIED WITH GAPS
+
+| Fact          | Value                                    |
+| Files changed | 8                                        |
+| Diff sha256   | c2be6fff3e774c387f276277b25fc424f07b667… |
+| Tests         | verified (node-test)                     |
+| Build         | not_run                                  |
+| Security      | findings                                 |
+| Cost          | $10.3218                                 |
+```
+
+**"WITH GAPS" is the point.** Build was not run. Security has findings. The
+receipt says so on its own front page, and separates deterministic FACTS -- the
+diff hash, the test result, the cost -- from AI ASSESSMENTS, because only four
+of the eight quality gates are agent-independent and a receipt that implied
+otherwise would be marketing.
+
+Recompute the diff hash yourself and check it matches. That is the whole idea:
+you are not asked to trust the agent's self-report.
+
+Self-reported completion is the failure users actually hit. A survey of the
+open issue trackers of seven coding harnesses (OpenHands, Cline, Aider,
+SWE-agent, Roo-Code, OpenCode, Continue) found the recurring complaint is the
+agent silently not doing the work -- "always stuck at Preparing write"
+([opencode#11112](https://github.com/anomalyco/opencode/issues/11112), 76
+comments), "Continue not making changes to code"
+([continue#7143](https://github.com/continuedev/continue/issues/7143)), "Agent
+does not execute functions"
+([continue#5696](https://github.com/continuedev/continue/issues/5696)). None of
+those seven publishes a machine-checkable completion artifact.
+
+We have not audited the closed-source products (Cursor, Devin, Replit Agent)
+feature by feature, so treat this as "unclaimed as far as we can verify" rather
+than a proven first. The receipt stands on its own either way: run the tour and
+check the hash.
+
+**Evaluating this against something else?** [docs/EVALUATING.md](docs/EVALUATING.md)
+puts a runnable command next to every claim we make, and states plainly what we
+do not have (no enterprise case studies, no independent benchmark placement, and
+generation is not air-gapped). It ends with the one question worth asking any
+agent vendor, including us.
+
+---
+
 > **How it works:** Drop a spec -- a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. Loki Mode classifies complexity (`run.sh:detect_complexity()`), assembles an agent team from 41 specialized agent roles across 8 domains - prompt-defined specifications the orchestrator adopts per phase, with parallel review (blind council) and optional worktree streams on Claude Code, sequential on other providers - and runs autonomous RARV cycles (Reason - Act - Reflect - Verify, see `run.sh:run_autonomous()`) with 8 quality gates (see `skills/quality-gates.md`). Code is not "done" until it passes automated verification. Output is a Git repo with source, tests, configs, and audit logs.
 
 ---

package/VERSION

@@ -1 +1 @@
-8.2.0
+8.3.1

package/autonomy/loki

@@ -10772,6 +10772,15 @@ cmd_doctor() {
 
     local pass_count=0
     local fail_count=0
+    # FUNNEL FIX (v8.2.x): collect the NAME + FIX of every hard failure, not just
+    # a count. A first-time user on a bare machine sees 15 warnings (sentrux, GPG
+    # signing, bash 4, Bun, python3.12, truecolor, inline-image probe -- all
+    # OPTIONAL) around 2 real blockers, then a summary that says only "Some
+    # required prerequisites are missing" without naming them. That is the point
+    # where someone closes the terminal. Naming the blockers and their exact
+    # install command turns a wall of yellow into a two-line to-do.
+    local _doctor_blockers=""
+    _doctor_block() { _doctor_blockers="${_doctor_blockers}\n  - $1"; }
     local warn_count=0
 
     # Helper: check command exists and optionally check version
@@ -10784,6 +10793,7 @@ cmd_doctor() {
         if ! command -v "$cmd" &> /dev/null; then
             if [ "$required" = "required" ]; then
                 echo -e "  ${RED}FAIL${NC}  $name - not found"
+                _doctor_block "$name is not installed"
                 fail_count=$((fail_count + 1))
             elif [ "$required" = "recommended" ]; then
                 echo -e "  ${YELLOW}WARN${NC}  $name - not found (recommended)"
@@ -10849,6 +10859,7 @@ cmd_doctor() {
                { [ "$cur_major" -eq "$min_major" ] 2>/dev/null && [ "$cur_minor" -lt "$min_minor" ] 2>/dev/null; }; then
                 if [ "$required" = "required" ]; then
                     echo -e "  ${RED}FAIL${NC}  $name$version_display - requires >= $min_version"
+                    _doctor_block "$name must be >= $min_version"
                     fail_count=$((fail_count + 1))
                 else
                     echo -e "  ${YELLOW}WARN${NC}  $name$version_display - recommended >= $min_version"
@@ -10920,6 +10931,7 @@ cmd_doctor() {
         else
             echo -e "  ${RED}FAIL${NC}  No AI provider CLI installed -- at least one is required"
             echo -e "         ${YELLOW}Install: npm install -g @anthropic-ai/claude-code${NC}"
+            _doctor_block "No AI provider CLI. Fix: npm install -g @anthropic-ai/claude-code"
             fail_count=$((fail_count + 1))
             # v7.29.0: on a TTY (non-json), append the consent-gated install offer.
             # In report mode the helper is a no-op on non-TTY/CI, so the doctor
@@ -11024,6 +11036,7 @@ except Exception:
             _target=$(readlink "$sdir" 2>/dev/null || echo "unknown")
             echo -e "  ${RED}FAIL${NC}  $sname  ${DIM}(broken symlink -> $_target)${NC}"
             echo -e "         ${YELLOW}Fix: loki setup-skill${NC}"
+            _doctor_block "$sname is a broken symlink. Fix: loki setup-skill"
             fail_count=$((fail_count + 1))
         else
             echo -e "  ${YELLOW}WARN${NC}  $sname  ${DIM}(not found - run 'loki setup-skill')${NC}"
@@ -11187,6 +11200,7 @@ except Exception:
         if [ -n "$disk_avail" ] && [ "$disk_avail" -gt 0 ] 2>/dev/null; then
             if [ "$disk_avail" -lt 1 ]; then
                 echo -e "  ${RED}FAIL${NC}  Disk space: ${disk_avail}GB available (need >= 1GB)"
+                _doctor_block "Free up disk: ${disk_avail}GB available, need >= 1GB"
                 fail_count=$((fail_count + 1))
             elif [ "$disk_avail" -lt 5 ]; then
                 echo -e "  ${YELLOW}WARN${NC}  Disk space: ${disk_avail}GB available (low)"
@@ -11289,8 +11303,11 @@ except Exception:
     echo ""
 
     if [ "$fail_count" -gt 0 ]; then
-        echo -e "${RED}Some required prerequisites are missing.${NC}"
-        echo "Install missing dependencies and run 'loki doctor' again."
+        echo -e "${RED}Blocking ($fail_count). Everything else above is optional.${NC}"
+        printf '%b\n' "$_doctor_blockers"
+        echo ""
+        echo "Then re-run: loki doctor"
+        echo "Meanwhile 'loki tour' works right now -- no provider, no key, no spend."
         return 1
     elif [ "$warn_count" -gt 0 ]; then
         echo -e "${YELLOW}All required checks passed with some warnings.${NC}"
@@ -19104,7 +19121,7 @@ $(cat "$f" 2>/dev/null)
 
     # --- Tally results ---
     local count_critical=0 count_high=0 count_medium=0 count_low=0 count_info=0
-    for f in "${findings[@]}"; do
+    for f in "${findings[@]+"${findings[@]}"}"; do
         local sev
         sev=$(echo "$f" | cut -d'|' -f3)
         case "$sev" in
@@ -19126,7 +19143,7 @@ $(cat "$f" 2>/dev/null)
     if [ "$review_format" = "json" ]; then
         local json_findings="["
         local first=true
-        for f in "${findings[@]}"; do
+        for f in "${findings[@]+"${findings[@]}"}"; do
             local f_file f_line f_sev f_cat f_finding f_suggestion
             f_file=$(echo "$f" | cut -d'|' -f1)
             f_line=$(echo "$f" | cut -d'|' -f2)
@@ -19155,7 +19172,7 @@ $(cat "$f" 2>/dev/null)
             # Group by severity
             for sev_name in CRITICAL HIGH MEDIUM LOW INFO; do
                 local printed_header=false
-                for f in "${findings[@]}"; do
+                for f in "${findings[@]+"${findings[@]}"}"; do
                     local f_sev
                     f_sev=$(echo "$f" | cut -d'|' -f3)
                     [ "$f_sev" != "$sev_name" ] && continue
@@ -30081,7 +30098,7 @@ TEST_SUGGEST_PY
 
     # --- Tally findings ---
     local count_critical=0 count_high=0 count_medium=0 count_low=0 count_info=0
-    for f in "${findings[@]}"; do
+    for f in "${findings[@]+"${findings[@]}"}"; do
         local sev
         sev=$(echo "$f" | cut -d'|' -f3)
         case "$sev" in
@@ -30097,7 +30114,7 @@ TEST_SUGGEST_PY
     # Determine exit code based on --fail-on threshold
     local exit_code=0
     if [ "$fail_threshold" -lt 99 ]; then
-        for f in "${findings[@]}"; do
+        for f in "${findings[@]+"${findings[@]}"}"; do
             local sev sev_num
             sev=$(echo "$f" | cut -d'|' -f3)
             sev_num=$(_ci_sev_level "$sev")
@@ -30117,7 +30134,7 @@ TEST_SUGGEST_PY
     if [ "$ci_format" = "json" ]; then
         # JSON output via python for proper escaping
         export LOKI_CI_JSON_FINDINGS=""
-        for f in "${findings[@]}"; do
+        for f in "${findings[@]+"${findings[@]}"}"; do
             LOKI_CI_JSON_FINDINGS+="${f}"$'\n'
         done
         export LOKI_CI_JSON_META="ci_env=${ci_env}|pr=${ci_pr_number}|ts=${report_timestamp}|files=${file_count}|exit=${exit_code}"
@@ -30199,7 +30216,7 @@ CI_JSON_OUT
             echo ""
             for sev_name in CRITICAL HIGH MEDIUM LOW INFO; do
                 local has_sev=false
-                for f in "${findings[@]}"; do
+                for f in "${findings[@]+"${findings[@]}"}"; do
                     local f_sev
                     f_sev=$(echo "$f" | cut -d'|' -f3)
                     [ "$f_sev" != "$sev_name" ] && continue
@@ -30259,7 +30276,7 @@ for t in tests:
         else
             for sev_name in CRITICAL HIGH MEDIUM LOW INFO; do
                 local printed_header=false
-                for f in "${findings[@]}"; do
+                for f in "${findings[@]+"${findings[@]}"}"; do
                     local f_sev
                     f_sev=$(echo "$f" | cut -d'|' -f3)
                     [ "$f_sev" != "$sev_name" ] && continue

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "8.2.0"
+__version__ = "8.3.1"
 
 # Expose the control app for easy import
 try:

package/docs/COMPARISON.md

@@ -1,6 +1,13 @@
 # Autonomous Coding Agents Comparison (2025-2026)
 
-> Last Updated: January 25, 2026 (v2.36.9)
+> **STALE. Last updated January 25, 2026 against v2.36.9; the current release is
+> v8.2.0.** Roughly six months and thirty releases of drift, and every cell in
+> the grids below is a subjective grade assigned by the vendor being graded --
+> which is exactly the kind of comparison a serious evaluator discounts.
+>
+> For claims you can actually check, see **[EVALUATING.md](EVALUATING.md)**: a
+> runnable command next to every assertion, plus an explicit list of what we do
+> not have. This file is kept for historical reference only.
 >
 > A comprehensive comparison of Loki Mode against major autonomous coding agents and AI IDEs in the market.
 > Deep-dive comparisons validated by Opus feedback loops.

package/docs/EVALUATING.md

@@ -0,0 +1,142 @@
+# Evaluating Loki Mode
+
+For someone deciding whether to trust an autonomous coding agent with a real
+codebase. Every claim below has a command next to it. Run them; do not take our
+word for it.
+
+We have deliberately not written a feature grid scoring ourselves against ten
+competitors. Those grids are written by the vendor being scored, the criteria
+are chosen by the vendor, and no reader can check a single cell. This page only
+makes claims you can falsify in a terminal.
+
+---
+
+## 1. The agent hands you a receipt, and it admits what it did not verify
+
+```bash
+npx loki-mode tour     # no install, no API key, no spend, no network
+```
+
+Output includes:
+
+```
+Headline: VERIFIED WITH GAPS
+
+| Files changed | 8                                        |
+| Diff sha256   | c2be6fff3e774c387f276277b25fc424f07b667… |
+| Tests         | verified (node-test)                     |
+| Build         | not_run                                  |
+| Security      | findings                                 |
+| Cost          | $10.3218                                 |
+```
+
+**What to notice:** the headline is not "SUCCESS". Build was not run. Security
+has findings. The receipt says so on its own front page.
+
+**Why that is the product.** Every coding agent reports its own completion, and
+self-reporting is the thing they are structurally worst at. The receipt
+separates deterministic FACTS (diff hash, test result, cost) from AI
+ASSESSMENTS, because only four of our eight quality gates are agent-independent
+and a receipt implying otherwise would be marketing.
+
+**Check it yourself:** recompute the diff sha256 over the same range and confirm
+it matches. If it does not, the receipt is worthless and you should not use us.
+
+---
+
+## 2. Verification runs air-gapped
+
+Deterministic verification makes zero network calls, so it runs inside a
+perimeter on code that may never leave the building.
+
+```bash
+bash tests/test-airgap-verify.sh
+```
+
+That test blackholes every proxy variable, strips the environment, and asserts a
+real verdict still comes back. Measured: **8.43 ms**.
+
+**Scope, stated honestly:** verification is air-gapped. **Generation is not.**
+Every provider we ship calls a hosted API, and local-weight generation needs
+models you would supply. We are not claiming the generation half, and any vendor
+who claims a fully air-gapped LLM agent without shipping weights is worth a
+second question.
+
+---
+
+## 3. On an existing codebase, the read-only path is genuinely read-only
+
+Brownfield is the harder problem, and the reason to distrust an agent near it is
+obvious. So the entry point writes nothing:
+
+```bash
+loki modernize heal ./your-repo --assess
+git status        # clean. no scratch files, no .loki/, no commits.
+```
+
+**Enforced, not promised:**
+
+```bash
+bash tests/test-brownfield-assess-readonly.sh
+```
+
+That test hashes every file before and after, compares HEAD, and requires a
+clean working tree. It is content-addressed, so it does not care *how* a write
+might happen.
+
+---
+
+## 4. The harness is model-invariant (and we do not overclaim it)
+
+```bash
+cat benchmarks/results/cross-model-eval.json
+```
+
+- **Claimed:** the same gates run, the same acceptance is checked, and the same
+  receipt semantics apply regardless of which model is behind it.
+- **Explicitly NOT claimed:** identical quality or identical speed across
+  models. That is not deliverable and we do not assert it.
+
+Measured runs are in that file with wall-clock and iteration counts. Two runs is
+two runs; it is not a benchmark suite, and the file says so.
+
+---
+
+## 5. Verification is fast enough to embed
+
+```bash
+python3 autonomy/lib/fast_verify.py --path . --diff-base HEAD~1
+```
+
+Measured on this repository, 1,932 tracked source files: **11,040 ms before,
+19 ms diff-scoped** (298 ms cold, 87 ms warm). That is the difference between a
+check you run at the end and a check something else can call as a dependency.
+
+---
+
+## What we do not have
+
+Stating this plainly, because you will find it out anyway and it is cheaper for
+both of us if you find it here.
+
+- **No published enterprise case studies.** We have adoption signal (fork ratio
+  well above the norm for a tool this size) but no named enterprise references.
+- **No independent third-party benchmark placement.** The SWE-bench Verified
+  leaderboard is months stale and every entry on it is self-reported, ours would
+  be too.
+- **No audit of the closed-source products.** We have verified that seven open
+  harnesses (OpenHands, Cline, Aider, SWE-agent, Roo-Code, OpenCode, Continue)
+  publish no machine-checkable completion artifact. Cursor, Devin, Replit Agent
+  and Claude Code we have **not** audited feature by feature, so treat the
+  receipt as "unclaimed as far as we can verify", not as a proven first.
+- **Generation is not air-gapped.** See section 2.
+
+---
+
+## The one question worth asking any agent vendor
+
+> When your agent says it finished, what artifact can I check that does not come
+> from the agent's own narrative?
+
+Ours is the Evidence Receipt, and section 1 is a two-minute test of whether the
+answer holds up. Ask the same question everywhere else.

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var S_=Object.create;var{getPrototypeOf:y_,defineProperty:oK,getOwnPropertyNames:b_}=Object;var __=Object.prototype.hasOwnProperty;function f_(Z){return this[Z]}var h_,v_,g_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?h_??=new WeakMap:v_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?S_(y_(Z)):{};let K=X||!Z||!Z.__esModule?oK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of b_(Z))if(!__.call(K,$))oK(K,$,{get:f_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var VQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var m_=(Z)=>Z;function u_(Z,X){this[Z]=m_.bind(null,X)}var c0=(Z,X)=>{for(var Q in X)oK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:u_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var t0=import.meta.require;var IO={};c0(IO,{lokiDir:()=>j0,homeLokiDir:()=>I4,findRepoRootForVersion:()=>tK,REPO_ROOT:()=>Q8});import{resolve as s7,dirname as rK}from"path";import{fileURLToPath as p_}from"url";import{existsSync as qQ}from"fs";import{homedir as d_}from"os";function c_(){let Z=EO;for(let X=0;X<6;X++){if(qQ(s7(Z,"VERSION"))&&qQ(s7(Z,"autonomy/run.sh")))return Z;let Q=rK(Z);if(Q===Z)break;Z=Q}return s7(EO,"..","..","..")}function tK(Z){let X=Z;for(let Q=0;Q<6;Q++){if(qQ(s7(X,"VERSION"))&&qQ(s7(X,"autonomy/run.sh")))return X;let Y=rK(X);if(Y===X)break;X=Y}return s7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??s7(process.cwd(),".loki")}function I4(){return s7(d_(),".loki")}var EO,Q8;var G8=p(()=>{EO=rK(p_(import.meta.url));Q8=c_()});import{readFileSync as l_}from"fs";import{resolve as i_,dirname as a_}from"path";import{fileURLToPath as s_}from"url";function _3(){if(f5!==null)return f5;let Z="8.2.0";if(typeof Z==="string"&&Z.length>0)return f5=Z,f5;try{let X=a_(s_(import.meta.url)),Q=tK(X);f5=l_(i_(Q,"VERSION"),"utf-8").trim()}catch{f5="unknown"}return f5}var f5=null;var GQ=p(()=>{G8()});var xO={};c0(xO,{runOrThrow:()=>qf,run:()=>E0,readStreamCapped:()=>HQ,commandVersion:()=>Hf,commandExists:()=>X9,ShellError:()=>eK,MAX_STDOUT_BYTES:()=>kO});async function HQ(Z,X=kO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([HQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function qf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new eK(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Gf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Gf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Hf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var kO=16777216,eK;var k9=p(()=>{eK=class eK extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function n7(Z){return Uf?"":Z}var Uf,M0,k8,l0,dW0,a0,H8,Q9,g;var S6=p(()=>{Uf=(process.env.NO_COLOR??"").length>0;M0=n7("\x1B[0;31m"),k8=n7("\x1B[0;32m"),l0=n7("\x1B[1;33m"),dW0=n7("\x1B[0;34m"),a0=n7("\x1B[0;36m"),H8=n7("\x1B[1m"),Q9=n7("\x1B[2m"),g=n7("\x1B[0m")});import{existsSync as Ff}from"fs";async function F7(){if(R4!==void 0)return R4;let Z="/opt/homebrew/bin/python3.12";if(Ff(Z))return R4=Z,Z;let X=await X9("python3.12");if(X)return R4=X,X;let Q=await X9("python3");return R4=Q,Q}async function D7(Z,X={}){let Q=await F7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var R4;var o7=p(()=>{k9()});var rO={};c0(rO,{runStatus:()=>tf});import{existsSync as Y9,readFileSync as h3,readdirSync as dO,statSync as cO}from"fs";import{resolve as h8,basename as pf}from"path";import{homedir as df}from"os";function lO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function iO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*BQ/X);if(J>BQ)J=BQ;let z=BQ-J,K=k8;if(Y>=80)K=M0;else if(Y>=50)K=l0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=lO(Z),V=lO(X);return`  ${H8}${Q}${g} ${K}[${$}]${g} ${Y}% (${W} / ${V})`}async function lf(){if(await X9("jq"))return!0;return process.stdout.write(`${M0}Error: jq is required but not installed.${g}
+var S_=Object.create;var{getPrototypeOf:y_,defineProperty:oK,getOwnPropertyNames:b_}=Object;var __=Object.prototype.hasOwnProperty;function f_(Z){return this[Z]}var h_,v_,g_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?h_??=new WeakMap:v_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?S_(y_(Z)):{};let K=X||!Z||!Z.__esModule?oK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of b_(Z))if(!__.call(K,$))oK(K,$,{get:f_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var VQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var m_=(Z)=>Z;function u_(Z,X){this[Z]=m_.bind(null,X)}var c0=(Z,X)=>{for(var Q in X)oK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:u_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var t0=import.meta.require;var IO={};c0(IO,{lokiDir:()=>j0,homeLokiDir:()=>I4,findRepoRootForVersion:()=>tK,REPO_ROOT:()=>Q8});import{resolve as s7,dirname as rK}from"path";import{fileURLToPath as p_}from"url";import{existsSync as qQ}from"fs";import{homedir as d_}from"os";function c_(){let Z=EO;for(let X=0;X<6;X++){if(qQ(s7(Z,"VERSION"))&&qQ(s7(Z,"autonomy/run.sh")))return Z;let Q=rK(Z);if(Q===Z)break;Z=Q}return s7(EO,"..","..","..")}function tK(Z){let X=Z;for(let Q=0;Q<6;Q++){if(qQ(s7(X,"VERSION"))&&qQ(s7(X,"autonomy/run.sh")))return X;let Y=rK(X);if(Y===X)break;X=Y}return s7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??s7(process.cwd(),".loki")}function I4(){return s7(d_(),".loki")}var EO,Q8;var G8=p(()=>{EO=rK(p_(import.meta.url));Q8=c_()});import{readFileSync as l_}from"fs";import{resolve as i_,dirname as a_}from"path";import{fileURLToPath as s_}from"url";function _3(){if(f5!==null)return f5;let Z="8.3.1";if(typeof Z==="string"&&Z.length>0)return f5=Z,f5;try{let X=a_(s_(import.meta.url)),Q=tK(X);f5=l_(i_(Q,"VERSION"),"utf-8").trim()}catch{f5="unknown"}return f5}var f5=null;var GQ=p(()=>{G8()});var xO={};c0(xO,{runOrThrow:()=>qf,run:()=>E0,readStreamCapped:()=>HQ,commandVersion:()=>Hf,commandExists:()=>X9,ShellError:()=>eK,MAX_STDOUT_BYTES:()=>kO});async function HQ(Z,X=kO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([HQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function qf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new eK(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Gf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Gf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Hf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var kO=16777216,eK;var k9=p(()=>{eK=class eK extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function n7(Z){return Uf?"":Z}var Uf,M0,k8,l0,dW0,a0,H8,Q9,g;var S6=p(()=>{Uf=(process.env.NO_COLOR??"").length>0;M0=n7("\x1B[0;31m"),k8=n7("\x1B[0;32m"),l0=n7("\x1B[1;33m"),dW0=n7("\x1B[0;34m"),a0=n7("\x1B[0;36m"),H8=n7("\x1B[1m"),Q9=n7("\x1B[2m"),g=n7("\x1B[0m")});import{existsSync as Ff}from"fs";async function F7(){if(R4!==void 0)return R4;let Z="/opt/homebrew/bin/python3.12";if(Ff(Z))return R4=Z,Z;let X=await X9("python3.12");if(X)return R4=X,X;let Q=await X9("python3");return R4=Q,Q}async function D7(Z,X={}){let Q=await F7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var R4;var o7=p(()=>{k9()});var rO={};c0(rO,{runStatus:()=>tf});import{existsSync as Y9,readFileSync as h3,readdirSync as dO,statSync as cO}from"fs";import{resolve as h8,basename as pf}from"path";import{homedir as df}from"os";function lO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function iO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*BQ/X);if(J>BQ)J=BQ;let z=BQ-J,K=k8;if(Y>=80)K=M0;else if(Y>=50)K=l0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=lO(Z),V=lO(X);return`  ${H8}${Q}${g} ${K}[${$}]${g} ${Y}% (${W} / ${V})`}async function lf(){if(await X9("jq"))return!0;return process.stdout.write(`${M0}Error: jq is required but not installed.${g}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1206,4 +1206,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (R_(),P_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(k_),2}}uO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var DW0=await FW0(Bun.argv.slice(2));process.exit(DW0);
 
-//# debugId=BF5245603E575A0964756E2164756E21
+//# debugId=56EE84E87CC3B43564756E2164756E21

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "8.2.0",
+  "version": "8.3.1",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "8.2.0",
+  "version": "8.3.1",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",