loki-mode 8.91.0 → 8.92.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v8.91.0
+# Loki Mode v8.92.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -469,4 +469,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v8.91.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v8.92.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-8.91.0
+8.92.0

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "8.91.0"
+__version__ = "8.92.0"
 
 # Expose the control app for easy import
 try:

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="8.91.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
+var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="8.92.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1232,4 +1232,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (h_(),f_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(v_),2}}cO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var uW0=await mW0(Bun.argv.slice(2));process.exit(uW0);
 
-//# debugId=8791DC1CFDEF673D64756E2164756E21
+//# debugId=E465E6ADABBF4BDF64756E2164756E21

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '8.91.0'
+__version__ = '8.92.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "8.91.0",
+  "version": "8.92.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "8.91.0",
+  "version": "8.92.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/tools/ci-gate.py

@@ -0,0 +1,222 @@
+#!/usr/bin/env python3
+"""One exit code for EVERY merge policy. The gate a CI job actually calls.
+
+WHY THIS EXISTS. The policies already ship, each with its own honest verdict:
+cost-guard.py decides budget, receipt-attest.py decides attestation. But CI
+jobs do not run verdicts, they run ONE command and branch on ONE exit code.
+Without this, every team wires its own `&&` chain, and every chain gets the
+aggregation subtly wrong in the same direction: toward green.
+
+THE RULE THAT MAKES IT A GATE RATHER THAN A DASHBOARD:
+
+    WEAKEST LINK. Never an average, never a majority.
+
+One policy failing fails the gate. "3 of 4 passed" is not a gate, it is a
+score, and a score cannot stop a merge. There is no threshold here to tune,
+because a tunable threshold is the request to let one known-bad policy through.
+
+THE SECOND RULE, WHICH IS THE ONE THAT GETS DROPPED:
+
+    A POLICY THAT COULD NOT BE EVALUATED HAS NOT PASSED.
+
+"We checked and it is fine" and "we could not check" are opposite facts about
+the world, and only one of them earns a merge. Collapsing the second into the
+first makes this gate loudest -- a confident green -- at exactly the moment its
+instrumentation broke and it is least entitled to speak. That is the hole this
+repo has now paid for repeatedly: four quality-gate detectors absent from the
+shipped package, a dist-freshness check deferred by the tier that justified it,
+a tarball assertion that passed on "6 or more" of 6 patterns. Each was a check
+reporting a pass without having checked.
+
+So three states, and three exit codes:
+
+    0  every configured policy was evaluated and passed
+    1  a policy was evaluated and FAILED
+    2  a policy could not be evaluated -- including no policy configured at all
+
+PRECEDENCE. When a run has both a failure and an unevaluable policy, this exits
+2, not 1. "Your gate is partly blind" outranks "this run is over budget": with
+1, the operator fixes the cost, re-runs, sees green, and is still blind on the
+dead axis. The per-policy table shows both regardless.
+
+NO POLICY CONFIGURED IS 2. A gate invoked with nothing to enforce has checked
+nothing, so it has no pass to report. Exit 0 there would let a CI job that lost
+its flags in a refactor go green forever while enforcing nothing at all -- a
+vacuously-green gate, which is worse than no gate, because it is trusted.
+
+NOTHING HERE RE-IMPLEMENTS A POLICY. Each is invoked as a subprocess via
+sys.executable and its verdict is mapped, never recomputed. A second copy of a
+rule is how the rule drifts, and this repo has proven that five times over with
+provider lists alone. The consequence is that a MISSING tool is UNEVALUABLE,
+never a pass: an absent policy file means the rule was not applied.
+
+Child exit codes are WHITELISTED to {0,1,2}. Anything else is unevaluable, with
+the raw code in the reason. receipt-attest.py returns 64 on a usage error, and
+under an `rc != 1 means pass` mapping that malformed call would read as green.
+For the same reason rc=1 with unparseable JSON on stdout is unevaluable, not a
+failure: an uncaught traceback in a child also exits 1, and is not a verdict.
+
+Usage:
+  tools/ci-gate.py [workspace] --max-usd 5.00 --require-receipt [--json]
+
+Exit: 0 all pass, 1 a policy failed, 2 a policy could not be evaluated.
+"""
+
+import argparse
+import glob
+import json
+import os
+import subprocess
+import sys
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+
+# Module-level so a test can point one at a nonexistent path and assert that a
+# missing policy tool reads as unevaluable rather than as a pass.
+_COST_GUARD = os.path.join(_HERE, "cost-guard.py")
+_RECEIPT_ATTEST = os.path.join(_HERE, "receipt-attest.py")
+
+PASS, FAIL, UNEVALUABLE = 0, 1, 2
+
+_STATE = {PASS: "PASS", FAIL: "FAIL", UNEVALUABLE: "UNEVALUABLE"}
+
+
+def _row(policy, code, reason):
+    return {"policy": policy, "state": _STATE[code], "exit_code": code,
+            "reason": reason}
+
+
+def _run(policy, argv):
+    """Invoke a policy tool and map its exit code. Never recompute its rule."""
+    tool = argv[0]
+    if not os.path.isfile(tool):
+        # An absent policy file means the rule was never applied. That is the
+        # absence of evidence, not evidence of compliance.
+        return _row(policy, UNEVALUABLE,
+                    "policy tool is missing from disk: %s -- the rule was "
+                    "never applied, so this is not a pass" % tool)
+    try:
+        proc = subprocess.run([sys.executable] + argv, capture_output=True,
+                              text=True)
+    except OSError as exc:
+        return _row(policy, UNEVALUABLE, "could not run %s: %s" % (tool, exc))
+
+    rc = proc.returncode
+    detail = None
+    try:
+        detail = json.loads(proc.stdout)
+    except (ValueError, TypeError):
+        detail = None
+
+    if rc not in _STATE:
+        # 64 (usage error), 2xx signals, an import blowup: not a verdict.
+        return _row(policy, UNEVALUABLE,
+                    "%s exited %d, which is not a verdict this gate "
+                    "recognises: %s" % (os.path.basename(tool), rc,
+                                        (proc.stderr or proc.stdout).strip()
+                                        or "no output"))
+    if rc == FAIL and detail is None:
+        # An uncaught traceback also exits 1. A failure this gate reports must
+        # be one the policy actually rendered.
+        return _row(policy, UNEVALUABLE,
+                    "%s exited 1 but emitted no JSON verdict, so the failure "
+                    "cannot be attributed to the policy: %s"
+                    % (os.path.basename(tool),
+                       (proc.stderr or "no output").strip()))
+    return _row(policy, rc, _reason(detail, proc))
+
+
+def _reason(detail, proc):
+    """The child's own words. Never this file's paraphrase of its rule."""
+    if isinstance(detail, dict):
+        # reason/why are null on a clean pass, so status/verdict carry it there.
+        for key in ("reason", "why", "headline", "verdict", "status", "state"):
+            value = detail.get(key)
+            if isinstance(value, str) and value.strip():
+                return value.strip()
+    # Falling back to raw stdout, a pretty-printed JSON body would put a bare
+    # "{" in the table -- a cell that reports nothing while looking filled in.
+    text = (proc.stdout or proc.stderr or "").strip()
+    if text.startswith(("{", "[")):
+        text = (proc.stderr or "").strip()
+    return text.splitlines()[0] if text else "no detail reported"
+
+
+def _newest_receipt(workspace):
+    root = workspace
+    if os.path.basename(os.path.normpath(workspace)) == ".loki":
+        root = os.path.dirname(os.path.normpath(workspace)) or "."
+    found = glob.glob(os.path.join(root, ".loki", "proofs", "*", "proof.json"))
+    return max(found, key=os.path.getmtime) if found else None
+
+
+def evaluate(workspace=".", max_usd=None, require_receipt=False):
+    """Run every configured policy. Returns the verdict dict with exit_code."""
+    rows = []
+
+    if max_usd is not None:
+        rows.append(_run("cost", [_COST_GUARD, workspace,
+                                  "--max-usd", str(max_usd), "--json"]))
+
+    if require_receipt:
+        receipt = _newest_receipt(workspace)
+        if receipt is None:
+            # Checked, and the answer is no. That is a FAIL, not a blind spot:
+            # 2 is reserved for a receipt that exists and could not be checked.
+            rows.append(_row("receipt", FAIL,
+                             "--require-receipt was given but no receipt "
+                             "exists under %s/.loki/proofs/*/proof.json"
+                             % workspace))
+        else:
+            rows.append(_run("receipt", [_RECEIPT_ATTEST, receipt, "--json"]))
+
+    if not rows:
+        # A gate with nothing to enforce has checked nothing, so it has no pass
+        # to report.
+        return {"exit_code": UNEVALUABLE, "state": _STATE[UNEVALUABLE],
+                "policies": [],
+                "reason": "no policy configured: pass --max-usd and/or "
+                          "--require-receipt. A gate with nothing to enforce "
+                          "checked nothing, and must not report a pass for it."}
+
+    # THE DECISION. Weakest link, with unevaluable outranking failure. Written
+    # once, here, so a mutation of it has nowhere to hide.
+    codes = [r["exit_code"] for r in rows]
+    worst = UNEVALUABLE if UNEVALUABLE in codes else (
+        FAIL if FAIL in codes else PASS)
+
+    return {"exit_code": worst, "state": _STATE[worst], "policies": rows,
+            "reason": "%d of %d policies passed" % (codes.count(PASS),
+                                                    len(codes))}
+
+
+def render(d):
+    lines = ["%-10s %-12s %s" % ("POLICY", "STATE", "DETAIL")]
+    for row in d["policies"]:
+        lines.append("%-10s %-12s %s" % (row["policy"], row["state"],
+                                         row["reason"]))
+    lines.append("")
+    lines.append("GATE: %s -- %s" % (d["state"], d["reason"]))
+    return "\n".join(lines)
+
+
+def main(argv=None):
+    ap = argparse.ArgumentParser(
+        description="One exit code over every configured merge policy.")
+    ap.add_argument("workspace", nargs="?", default=".",
+                    help="workspace root (or its .loki dir); default .")
+    ap.add_argument("--max-usd", type=float,
+                    help="enforce a cost ceiling via cost-guard.py")
+    ap.add_argument("--require-receipt", action="store_true",
+                    help="enforce receipt attestation via receipt-attest.py")
+    ap.add_argument("--json", action="store_true", dest="as_json",
+                    help="emit the verdict as JSON")
+    args = ap.parse_args(argv)
+
+    d = evaluate(args.workspace, args.max_usd, args.require_receipt)
+    print(json.dumps(d, indent=2) if args.as_json else render(d))
+    return d["exit_code"]
+
+
+if __name__ == "__main__":
+    sys.exit(main())