loki-mode 8.66.0 → 8.68.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v8.66.0
+# Loki Mode v8.68.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -469,4 +469,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v8.66.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v8.68.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-8.66.0
+8.68.0

package/autonomy/loki

@@ -906,7 +906,7 @@ show_help() {
     echo "  next             Run the right next step for you (resume / ship / why)"
     echo "  stop             Stop execution immediately"
     echo "  pause            Pause after current session"
-    echo "  resume           Resume paused execution"
+    echo "  resume           Resume a paused or interrupted run (after Ctrl-C or a crash)"
     echo "  steer \"<note>\"    Nudge a running build (needs LOKI_PROMPT_INJECTION=1)"
     echo ""
     echo "Verify / trust:"
@@ -3605,18 +3605,88 @@ cmd_steer() {
     return 0
 }
 
+# Print the one copy-pasteable command that gets an INTERRUPTED run going again,
+# naming what was found (iteration reached, when it stopped) so the user can tell
+# it is their run and not a stale directory. Returns 0 when a hint was printed,
+# 1 when there is nothing resumable (caller then prints its own message).
+#
+# Keyed on status == "interrupted" ONLY, deliberately. run.sh's load_state
+# preserves iterationCount for exactly paused|interrupted|budget_exceeded|
+# stopped and RESETS it to 0 for everything else -- including "running", which
+# is what an uncatchable SIGKILL leaves behind. Printing "resume from iteration
+# 7" on a "running" record would promise progress that load_state is about to
+# throw away, on a dev box without LOKI_DURABLE_STATE=1. A hint pointing at
+# nothing is worse than silence, so the narrow key is the point, not an
+# oversight. budget_exceeded / max_iterations_reached already get their own
+# tailored guidance from _loki_next_action (raise the cap FIRST, then resume);
+# duplicating them here would contradict it.
+#
+# Read-only: reads state, writes nothing, spends nothing.
+_loki_print_interrupted_resume_hint() {
+    local status
+    status="$(_loki_resolve_run_status 2>/dev/null)" || return 1
+    [ "$status" = "interrupted" ] || return 1
+
+    local state_file="$LOKI_DIR/autonomy-state.json"
+    if [ -n "${LOKI_SESSION_ID:-}" ] && [ -f "$LOKI_DIR/sessions/${LOKI_SESSION_ID}/autonomy-state.json" ]; then
+        state_file="$LOKI_DIR/sessions/${LOKI_SESSION_ID}/autonomy-state.json"
+    fi
+    [ -f "$state_file" ] || return 1
+
+    # iteration, lastRun and prdPath in one read. Tab-separated so a spec path
+    # containing spaces survives; python3 is already a hard dep of this file.
+    local fields iteration last_run prd_path
+    fields="$(_LOKI_RH_STATE="$state_file" python3 -c "
+import json, os
+try:
+    d = json.load(open(os.environ['_LOKI_RH_STATE']))
+except Exception:
+    d = {}
+# save_state() writes "iteration" (autonomy/run.sh:6707). Reading only
+# "iterationCount" made every REAL interrupted run report iteration 0 -- the
+# one number that makes this message reassuring rather than alarming. The
+# fixture that first exercised this used the other spelling, so the test
+# passed while the shipped path was wrong. Accept both, real key first.
+print('\t'.join([
+    str(d.get('iteration', d.get('iterationCount', 0))),
+    str(d.get('lastRun', '') or 'unknown'),
+    str(d.get('prdPath', '') or ''),
+]))" 2>/dev/null)" || return 1
+    IFS=$'\t' read -r iteration last_run prd_path <<< "$fields"
+
+    # The spec path is what makes the command RESUME this run rather than start a
+    # different one, so only interpolate it when it still exists on disk. A stale
+    # path would produce a command that fails on paste.
+    local resume_cmd="loki start"
+    if [ -n "$prd_path" ] && [ -f "$prd_path" ]; then
+        resume_cmd="loki start \"$prd_path\""
+    fi
+
+    echo -e "${YELLOW}Interrupted run found.${NC} Stopped at iteration ${BOLD}${iteration}${NC} (last activity: ${last_run})."
+    echo "Saved progress is intact. Resume it with:"
+    echo ""
+    echo -e "  ${BOLD}${resume_cmd}${NC}"
+    echo ""
+    echo -e "${DIM}It picks up from iteration ${iteration}; verification re-runs, so nothing inherits a stale PASS.${NC}"
+    return 0
+}
+
 # Resume paused execution
 cmd_resume() {
     # v7.6.2 B-13 fix: --help must print help, not act on session state.
     case "${1:-}" in
         --help|-h|help)
-            echo -e "${BOLD}Loki Mode -- resume paused session${NC}"
+            echo -e "${BOLD}Loki Mode -- resume a paused or interrupted session${NC}"
             echo ""
             echo "Usage: loki resume [options]"
             echo ""
             echo "Clears the paused flag and lets the autonomous runner continue"
             echo "from where 'loki pause' stopped it."
             echo ""
+            echo "If the run was interrupted instead (Ctrl-C, crash, closed laptop)"
+            echo "there is no flag to clear, so this prints the iteration it reached"
+            echo "and the exact command to continue from that saved state."
+            echo ""
             echo "Options:"
             echo "  --help, -h   Show this help and exit"
             echo ""
@@ -3638,8 +3708,17 @@ cmd_resume() {
     local session_running=false
     is_session_running && session_running=true
 
-    # If nothing is paused/stopped and no session is running, exit early
+    # If nothing is paused/stopped and no session is running, the run may still
+    # be RESUMABLE: a Ctrl-C / crash / closed laptop leaves no PAUSE or STOP
+    # file, only autonomy-state.json with status "interrupted" and the iteration
+    # it reached. This branch used to print "No session to resume" and send the
+    # user to `loki start`, hiding real saved progress -- and because
+    # `loki next` maps interrupted -> cmd_resume, the one command whose job is
+    # "do the right next thing" hit the same dead end. Surface it instead.
     if ! $has_pause_signal && ! $has_stop_signal && ! $session_running; then
+        if _loki_print_interrupted_resume_hint; then
+            return 0
+        fi
         echo -e "${YELLOW}No session to resume.${NC}"
         echo "Start a session with: loki start"
         exit 0
@@ -4528,6 +4607,12 @@ cmd_status() {
         echo -e "${RED}Status: STOPPED${NC}"
         echo -e "${DIM}  Clear with: loki resume${NC}"
         echo ""
+    elif _loki_print_interrupted_resume_hint; then
+        # An interrupted run (Ctrl-C / crash / closed laptop) leaves no signal
+        # file, so the two branches above miss it entirely. Same hint cmd_resume
+        # prints. elif, not a separate block: it is mutually exclusive with an
+        # explicit PAUSE/STOP, and must not stack onto the "Last run:" line.
+        echo ""
     fi
 
     # Check status file
@@ -11282,6 +11367,18 @@ cmd_doctor() {
     fi
     echo ""
 
+    # Provider Availability. Which provider a build would ACTUALLY pick, which
+    # is decided by providers/loader.sh auto_detect_provider, not by PATH order
+    # and not by the section above. Rendered by the shared helper in
+    # provider-offer.sh so the Bun route prints the identical bytes (doctor
+    # stdout is byte-compared -- tests/test-doctor-blocker-parity.sh). Skipped
+    # silently, with no error, when loader.sh is missing or unsourceable.
+    if declare -f render_provider_availability >/dev/null 2>&1; then
+        if render_provider_availability; then
+            echo ""
+        fi
+    fi
+
     echo -e "${CYAN}API Keys:${NC}"
     # Note: CLI tools use their own login sessions outside Docker/K8s.
     # This section helps first-time users verify they can authenticate.
@@ -11763,6 +11860,16 @@ else:
 cmd_doctor_json() {
     local _loki_version
     _loki_version=$(get_version)
+    # Provider availability, computed in bash and handed to the python program
+    # as an env var (same pattern as LOKI_VERSION). Computed here rather than
+    # inside the program because the answer comes from sourcing loader.sh.
+    # Empty when loader.sh is unavailable, and the key is then null: the same
+    # graceful skip the text section performs.
+    local _provider_availability=""
+    if declare -f provider_availability_json >/dev/null 2>&1; then
+        _provider_availability="$(provider_availability_json 2>/dev/null || true)"
+    fi
+    LOKI_PROVIDER_AVAILABILITY="$_provider_availability" \
     LOKI_VERSION="$_loki_version" \
     LOKI_CATALOG_PATH="${LOKI_MODEL_CATALOG:-${_LOKI_SCRIPT_DIR}/../providers/model_catalog.json}" \
     python3 -c "
@@ -11966,9 +12073,20 @@ except Exception:
     model_catalog = {'status': 'warn', 'updated': None, 'age_days': None,
                      'detail': 'Catalog unreadable or missing an ISO \"updated\" date -- cannot determine age'}
 
+# Provider availability, handed in from bash (see cmd_doctor_json). Null when
+# providers/loader.sh could not be sourced, mirroring the text sections skip.
+# CAUTION: this block lives inside a DOUBLE-QUOTED python3 -c program, so no
+# apostrophes and no double quotes anywhere here, comments included.
+try:
+    _pa_raw = os.environ.get('LOKI_PROVIDER_AVAILABILITY', '').strip()
+    provider_availability = json.loads(_pa_raw) if _pa_raw else None
+except Exception:
+    provider_availability = None
+
 result = {
     'loki_mode_version': os.environ.get('LOKI_VERSION', 'unknown'),
     'checks': checks,
+    'provider_availability': provider_availability,
     'disk': {
         'available_gb': disk_gb,
         'status': disk_status

package/autonomy/provider-offer.sh

@@ -35,6 +35,22 @@ else
     _PO_NC=$'\033[0m'
 fi
 
+# Section colors for render_provider_availability. Deliberately gated on
+# NO_COLOR ALONE, unlike the _PO_* set above which also blanks on a non-TTY.
+# The section is printed inside `loki doctor` next to blocks colored by loki own
+# CYAN/GREEN/NC, and those are blanked on NO_COLOR only (autonomy/loki:37). A
+# TTY test here would strip color from this one section whenever doctor stdout
+# is piped while every neighbour kept its escapes.
+if [ -n "${NO_COLOR:-}" ]; then
+    _PO_S_CYAN=''; _PO_S_GREEN=''; _PO_S_YELLOW=''; _PO_S_DIM=''; _PO_S_NC=''
+else
+    _PO_S_CYAN=$'\033[0;36m'
+    _PO_S_GREEN=$'\033[0;32m'
+    _PO_S_YELLOW=$'\033[1;33m'
+    _PO_S_DIM=$'\033[2m'
+    _PO_S_NC=$'\033[0m'
+fi
+
 # The one canonical install command. Quoted everywhere; never re-derived.
 _PO_INSTALL_CMD="npm install -g @anthropic-ai/claude-code"
 
@@ -351,6 +367,109 @@ provider_offer_gate() {
     return 2
 }
 
+# render_provider_availability: print the "Provider Availability" doctor section.
+#
+# WHY IT LIVES HERE. `loki doctor` stdout is compared byte for byte between the
+# bash route and the Bun route (tests/test-doctor-blocker-parity.sh, and the
+# bun-parity workflow). Two independent renderers drift; one shared renderer
+# cannot. This is the same parity-by-construction seam the install offer and the
+# detect-sdk probe already use, so doctor.ts calls this instead of reimplementing
+# the priority list in TypeScript.
+#
+# WHY IT DOES NOT REUSE THE EXISTING "AI Providers" BLOCK. That block answers a
+# different question -- is each CLI on PATH, and how do I install it. This one
+# answers "which provider would a build actually pick", which is a property of
+# providers/loader.sh auto_detect_provider, not of PATH. It also covers opencode,
+# which the older block never listed.
+#
+# THE ORDER IS NOT SUPPORTED_PROVIDERS. auto_detect_provider walks
+# claude cline codex aider opencode; SUPPORTED_PROVIDERS is declared
+# claude codex cline aider opencode -- codex and cline are SWAPPED. Marking the
+# first installed entry of SUPPORTED_PROVIDERS would name codex on a machine
+# where a build would really pick cline. So the selected provider is always
+# whatever auto_detect_provider returns, never re-derived here.
+#
+# DEGRADES SILENTLY. Requirement: if loader.sh cannot be sourced, the section is
+# skipped rather than erroring. Everything runs inside one subshell, so a missing
+# or broken loader returns non-zero with nothing printed and doctor continues.
+render_provider_availability() {
+    # Path derived from THIS FILE, never from SKILL_DIR or _LOKI_SCRIPT_DIR:
+    # those belong to autonomy/loki and are unset when doctor.ts spawns this
+    # script standalone, which would blank the section on the Bun route only.
+    local _po_here
+    _po_here="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." 2>/dev/null && pwd)" || return 1
+    local _loader="$_po_here/providers/loader.sh"
+    [ -f "$_loader" ] || return 1
+
+    (
+        # shellcheck source=/dev/null
+        source "$_loader" >/dev/null 2>&1 || exit 1
+        declare -f auto_detect_provider >/dev/null 2>&1 || exit 1
+        [ "${#SUPPORTED_PROVIDERS[@]}" -gt 0 ] 2>/dev/null || exit 1
+
+        local _selected
+        _selected="$(auto_detect_provider 2>/dev/null)"
+
+        printf '%s\n' "${_PO_S_CYAN}Provider Availability:${_PO_S_NC}"
+        local _p
+        for _p in "${SUPPORTED_PROVIDERS[@]}"; do
+            if check_provider_installed "$_p" >/dev/null 2>&1; then
+                if [ "$_p" = "$_selected" ]; then
+                    printf '%s\n' "  ${_PO_S_GREEN}PASS${_PO_S_NC}  $_p - installed ${_PO_S_DIM}(auto-selected)${_PO_S_NC}"
+                else
+                    printf '%s\n' "  ${_PO_S_GREEN}PASS${_PO_S_NC}  $_p - installed"
+                fi
+            else
+                printf '%s\n' "  ${_PO_S_YELLOW}WARN${_PO_S_NC}  $_p - not installed"
+            fi
+        done
+
+        if [ -n "$_selected" ]; then
+            printf '%s\n' "  ${_PO_S_DIM}Auto-selected provider: ${_selected} (override with LOKI_PROVIDER)${_PO_S_NC}"
+        else
+            printf '%s\n' "  ${_PO_S_DIM}Auto-selected provider: none (no supported CLI installed)${_PO_S_NC}"
+        fi
+    ) || return 1
+}
+
+# provider_availability_json: the same data as one JSON object, for doctor --json.
+# Separate from the renderer so neither format has to parse the other. Same
+# degrade rule: no loader means no output and a non-zero status.
+provider_availability_json() {
+    local _po_here
+    _po_here="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." 2>/dev/null && pwd)" || return 1
+    local _loader="$_po_here/providers/loader.sh"
+    [ -f "$_loader" ] || return 1
+
+    (
+        # shellcheck source=/dev/null
+        source "$_loader" >/dev/null 2>&1 || exit 1
+        declare -f auto_detect_provider >/dev/null 2>&1 || exit 1
+        [ "${#SUPPORTED_PROVIDERS[@]}" -gt 0 ] 2>/dev/null || exit 1
+
+        local _selected _p _rows=""
+        _selected="$(auto_detect_provider 2>/dev/null)"
+        for _p in "${SUPPORTED_PROVIDERS[@]}"; do
+            if check_provider_installed "$_p" >/dev/null 2>&1; then
+                _rows="${_rows}${_p}=true"$'\n'
+            else
+                _rows="${_rows}${_p}=false"$'\n'
+            fi
+        done
+        _PA_SELECTED="$_selected" _PA_ROWS="$_rows" python3 -c '
+import json, os
+rows = []
+for line in os.environ.get("_PA_ROWS", "").splitlines():
+    if not line:
+        continue
+    name, _, installed = line.partition("=")
+    rows.append({"name": name, "installed": installed == "true"})
+selected = os.environ.get("_PA_SELECTED", "") or None
+print(json.dumps({"selected": selected, "providers": rows}, indent=2))
+' 2>/dev/null || exit 1
+    ) || return 1
+}
+
 # Executed directly (doctor.ts child_process bridge, or manual): run the offer.
 # When sourced by autonomy/loki, this block does not run.
 if [ "${BASH_SOURCE[0]}" = "$0" ]; then
@@ -362,6 +481,10 @@ if [ "${BASH_SOURCE[0]}" = "$0" ]; then
         # (loki-ts/src/commands/doctor.ts). Prints nothing, so it cannot perturb
         # the parity-captured stdout.
         detect-sdk)   detect_bundled_sdk_provider ;;
+        # Doctor "Provider Availability" section + its --json payload. Both
+        # routes call these so the two renderings cannot drift apart.
+        providers)      render_provider_availability ;;
+        providers-json) provider_availability_json ;;
         *)            offer_provider_install report ;;
     esac
 fi

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "8.66.0"
+__version__ = "8.68.0"
 
 # Expose the control app for easy import
 try: