loki-mode 8.85.0 → 8.86.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v8.85.0
+# Loki Mode v8.86.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -469,4 +469,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v8.85.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v8.86.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-8.85.0
+8.86.0

package/autonomy/lib/doctor-fix.py

@@ -0,0 +1,279 @@
+#!/usr/bin/env python3
+"""Turn a `loki doctor --json` report into an ordered remediation plan.
+
+WHY THIS EXISTS. `loki doctor` tells you WHAT is broken. It does not tell you
+what to type. On a bare machine the report names two blockers and the user is
+left to work out the commands and the ORDER themselves -- and the order is not
+obvious: doctor's own fix for a missing provider is
+`npm install -g @anthropic-ai/claude-code`, which cannot run until Node.js is
+installed, and Node.js is the OTHER blocker. Handing someone two commands in
+report order makes the first one fail.
+
+WHAT IT REFUSES TO DO, and this is the actual product:
+
+  1. It never invents a command. A blocker with no remedy we can justify is
+     printed as "no automated fix known", verbatim and unadorned. A wrong
+     command is strictly worse than no command: the user runs it, it succeeds
+     at doing something irrelevant, and now they trust a broken system. Every
+     remedy here is either lifted from the report's own text or from a table
+     whose provenance is cited below.
+  2. It never executes. It prints. `loki doctor` is a read-only diagnosis and
+     so is this; the human runs the commands.
+  3. It never reads an empty result as success. Zero derived blockers means
+     "healthy" ONLY when the input actually parsed as a doctor report -- see
+     the vacuity guard in plan().
+
+PROVENANCE OF EVERY REMEDY. Nothing here is a parallel table invented to sit
+alongside the repo's existing knowledge:
+
+  - Provider install commands come from the report itself. `ai_provider.detail`
+    carries the literal string "No AI provider CLI. Fix: npm install -g
+    @anthropic-ai/claude-code" (written at autonomy/loki:11519 for the text
+    path and in cmd_doctor_json for --json). We PARSE that "Fix:" rather than
+    restating it, so doctor stays the single source of truth: change the
+    command there and this follows automatically.
+  - _TOOL_FIXES is MIXED provenance, and the split is stated per entry in the
+    table itself rather than summarised here, because "derived from the repo"
+    and "conventional package-manager command" are different strengths of
+    claim and this file exists to keep them apart:
+      SOURCED   `brew install python3` (autonomy/loki:500), `brew install jq`
+                (:552), and `https://nodejs.org` (autonomy/provider-offer.sh:321)
+                are the commands the CLI already prints for these same tools.
+                Duplicated rather than imported because they live in bash
+                `echo` statements inside cmd_* functions.
+      UNSOURCED `brew install node`, `brew install git`, `brew install curl`
+                and every `apt-get install ...` appear NOWHERE else in this
+                repo. They are the standard invocations for these packages,
+                not something doctor told us. They are included because they
+                are the ordinary, verifiable way to install these tools -- but
+                do not read them as repo-derived, and if one is ever wrong the
+                fault is here, not upstream.
+  - Auth remedies are deliberately ABSENT. `cmd_why`'s PROVIDER_AUTH map
+    (autonomy/loki:4185) keys on a LAST_ERROR error_class, which is a
+    different axis entirely -- `loki doctor --json` has no auth blocker to map
+    from. Manufacturing one so this tool could show off an ordering
+    dependency would be exactly the fabrication requirement 1 forbids.
+
+INPUT CONTRACT. Blockers are DERIVED, not read: `doctor --json` emits no
+blocker list (that string is built only in the text path, autonomy/loki:11367).
+Anything with status "fail" is a blocker, and failable things live in three
+places -- `checks[]`, plus the siblings `ai_provider` and `disk`. The advisory
+siblings (`sentrux`, `receipt_signing`, `memory`, `model_catalog`) are never
+"fail" by construction and are not scanned.
+
+KNOWN LIMITATION, stated rather than papered over: the text path reports two
+blockers that have NO representation in --json at all -- a broken skill symlink
+(autonomy/loki:11636) and missing quality-gate detectors (:11968). This tool
+cannot see them, because the JSON it consumes does not carry them. It handles
+them if they ever appear as blocker text, but it cannot derive them today.
+"""
+
+import argparse
+import json
+import re
+import sys
+
+# Prerequisite ordering. Lower rank runs first. The only edges asserted are
+# ones with a real causal dependency, because a fabricated ordering is the same
+# class of lie as a fabricated command.
+#
+#   disk (0)      -- every remedy below writes files; no space means they all fail.
+#   runtime (1)   -- node/python3 are what the package managers RUN.
+#   tool (2)      -- jq/git/curl: independent, but cheap and unblocking.
+#   provider (3)  -- MUST follow runtime: doctor's own provider fix is
+#                    `npm install -g ...`, and npm ships with Node.js. On the
+#                    real capture that produced this file, Node.js and the
+#                    provider were both blockers simultaneously.
+#   unknown (9)   -- last: we cannot reason about what we cannot identify.
+_RANK = {"disk": 0, "runtime": 1, "tool": 2, "provider": 3, "unknown": 9}
+
+# Per-tool remedies, keyed on doctor's own `name` field. A tool ABSENT from
+# this table gets an honest "no known fix" -- never a guess. Adding a row is
+# therefore the one place fabrication can enter this file, so each row is
+# tagged with where its command came from:
+#   [repo]  this exact command is printed elsewhere in loki-mode (line cited)
+#   [conv]  conventional package-manager invocation, NOT found in this repo
+# If you add a row, tag it. An untagged row is an unaudited claim.
+_TOOL_FIXES = {
+    # [repo] https://nodejs.org -- autonomy/provider-offer.sh:321. [conv] brew install node.
+    "Node.js": ("runtime", "Install Node.js 18+: brew install node    (macOS)  |  https://nodejs.org"),
+    # [repo] autonomy/loki:500.
+    "Python 3": ("runtime", "Install Python 3.8+: brew install python3    (macOS)"),
+    # [repo] brew arm -- autonomy/loki:552. [conv] apt-get arm.
+    "jq": ("tool", "brew install jq    (macOS)  |  apt-get install jq    (Debian/Ubuntu)"),
+    # [conv] both arms.
+    "git": ("tool", "brew install git    (macOS)  |  apt-get install git    (Debian/Ubuntu)"),
+    # [conv] both arms.
+    "curl": ("tool", "brew install curl    (macOS)  |  apt-get install curl    (Debian/Ubuntu)"),
+}
+
+_NO_FIX = "no automated fix known for this blocker -- diagnose manually, then re-run: loki doctor"
+
+# doctor embeds its own remedy as "Fix: <cmd>" or "Reinstall: <cmd>". Parsing it
+# keeps doctor authoritative instead of duplicating the command here.
+_EMBEDDED_FIX = re.compile(r"(?:Fix|Reinstall):\s*(.+?)\s*$")
+
+
+def _embedded_fix(text):
+    """Return the command doctor embedded in its own blocker text, else None.
+
+    None is a real answer, not a failure to try: it routes the blocker to the
+    honest no-fix path instead of to a guess.
+    """
+    if not text:
+        return None
+    m = _EMBEDDED_FIX.search(str(text).strip())
+    return m.group(1) if m else None
+
+
+def derive_blockers(report):
+    """Every status=="fail" item in a doctor report, as (id, category, title, fix).
+
+    fix is None when we have no justified remedy. Callers MUST render None as
+    the no-fix line rather than substituting anything.
+    """
+    out = []
+    if not isinstance(report, dict):
+        return out
+
+    for chk in report.get("checks") or []:
+        if not isinstance(chk, dict) or chk.get("status") != "fail":
+            continue
+        name = str(chk.get("name") or "unknown check")
+        # Distinguish absent from too-old: same blocker name, different user
+        # experience, and doctor already knows which it is.
+        if chk.get("found") and chk.get("min_version"):
+            title = "%s is older than the required %s (found %s)" % (
+                name, chk["min_version"], chk.get("version") or "unknown")
+        else:
+            title = "%s is not installed" % name
+        category, fix = _TOOL_FIXES.get(name, ("unknown", None))
+        out.append((name, category, title, fix))
+
+    ai = report.get("ai_provider")
+    if isinstance(ai, dict) and ai.get("status") == "fail":
+        detail = ai.get("detail")
+        # Reuse doctor's embedded command; do not restate it.
+        out.append(("ai_provider", "provider",
+                    "No AI provider CLI installed (at least one is required)",
+                    _embedded_fix(detail)))
+
+    disk = report.get("disk")
+    if isinstance(disk, dict) and disk.get("status") == "fail":
+        gb = disk.get("available_gb")
+        avail = "unknown" if gb is None else "%sGB" % gb
+        out.append(("disk", "disk",
+                    "Insufficient disk space (%s available, need >= 1GB)" % avail,
+                    "Free at least 1GB on your home volume, then re-run: loki doctor"))
+
+    return out
+
+
+def plan(report):
+    """Ordered remediation plan for a doctor report.
+
+    Returns a dict with `status` in {healthy, action_required, not_a_report}
+    and `steps`. The three-way status is the vacuity guard: an empty blocker
+    list means HEALTHY only if the input was recognisably a doctor report.
+    `{}` on stdin also yields zero blockers, and calling that healthy would be
+    the exact fake-green this repo exists to refuse.
+    """
+    if not isinstance(report, dict) or not (
+            "checks" in report or "summary" in report or "ai_provider" in report):
+        return {
+            "status": "not_a_report",
+            "executed": False,
+            "steps": [],
+            "note": "Input is not a loki doctor report (no checks/summary/ai_provider). "
+                    "Produce one with: loki doctor --json",
+        }
+
+    blockers = derive_blockers(report)
+    steps = []
+    for i, (bid, category, title, fix) in enumerate(
+            sorted(blockers, key=lambda b: (_RANK.get(b[1], 9), b[0]))):
+        steps.append({
+            "order": i + 1,
+            "id": bid,
+            "category": category,
+            "blocker": title,
+            "command": fix,
+            "fix_known": fix is not None,
+        })
+
+    result = {
+        "status": "healthy" if not steps else "action_required",
+        "executed": False,
+        "steps": steps,
+    }
+
+    # Cross-check derivation against doctor's own tally. If doctor counted
+    # failures we could not turn into blockers, the gap is OURS -- say so,
+    # rather than reporting a short plan as a complete one.
+    summary = report.get("summary")
+    if isinstance(summary, dict):
+        failed = summary.get("failed")
+        if isinstance(failed, int) and failed > len(blockers):
+            result["parse_gap"] = (
+                "doctor reported %d failing checks but only %d could be mapped to a "
+                "blocker; the remainder are not represented in this plan" % (failed, len(blockers)))
+    return result
+
+
+def render(p):
+    """Human-readable plan. Mirrors plan() exactly -- no extra claims."""
+    lines = []
+    if p["status"] == "not_a_report":
+        lines.append("Cannot plan: %s" % p["note"])
+        return "\n".join(lines)
+
+    if p["status"] == "healthy":
+        lines.append("System is healthy -- loki doctor reported no blockers.")
+        lines.append("Nothing to remediate. Start a build: loki start <spec>")
+        return "\n".join(lines)
+
+    n = len(p["steps"])
+    lines.append("Remediation plan -- %d blocker%s, in order (prerequisites first)."
+                 % (n, "" if n == 1 else "s"))
+    lines.append("These commands are NOT run for you. Copy, review, then run them yourself.")
+    lines.append("")
+    for s in p["steps"]:
+        lines.append("%d. %s" % (s["order"], s["blocker"]))
+        lines.append("   %s" % (s["command"] if s["fix_known"] else _NO_FIX))
+        lines.append("")
+    if p.get("parse_gap"):
+        lines.append("Note: %s" % p["parse_gap"])
+        lines.append("")
+    lines.append("Then re-run: loki doctor")
+    return "\n".join(lines)
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser(
+        prog="doctor-fix.py",
+        description="Plan (never run) the fixes for a `loki doctor --json` report.")
+    ap.add_argument("--report", help="doctor JSON file; defaults to stdin")
+    ap.add_argument("--json", action="store_true", dest="as_json",
+                    help="emit the plan as JSON")
+    args = ap.parse_args(argv)
+
+    raw = open(args.report, encoding="utf-8").read() if args.report else sys.stdin.read()
+    try:
+        report = json.loads(raw)
+    except (ValueError, TypeError):
+        # Unparseable input is not "healthy" and not a blocker list either.
+        report = None
+
+    p = plan(report)
+    if args.as_json:
+        print(json.dumps(p, indent=2))
+    else:
+        print(render(p))
+    # Exit 1 on action_required so this is CI-gateable, matching doctor's own
+    # convention. not_a_report is exit 2: a broken input is not a clean bill of
+    # health and must never be mistaken for one.
+    return {"healthy": 0, "action_required": 1, "not_a_report": 2}[p["status"]]
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "8.85.0"
+__version__ = "8.86.0"
 
 # Expose the control app for easy import
 try:

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="8.85.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
+var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="8.86.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1232,4 +1232,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (h_(),f_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(v_),2}}cO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var uW0=await mW0(Bun.argv.slice(2));process.exit(uW0);
 
-//# debugId=4F01D2A6D41F31AE64756E2164756E21
+//# debugId=F5AA0FEF37EC655564756E2164756E21

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '8.85.0'
+__version__ = '8.86.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "8.85.0",
+  "version": "8.86.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "8.85.0",
+  "version": "8.86.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",