loki-mode 9.2.0 → 9.3.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.2.0
+# Loki Mode v9.3.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -469,4 +469,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.2.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.3.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.2.0
+9.3.0

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.2.0"
+__version__ = "9.3.0"
 
 # Expose the control app for easy import
 try:

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="9.2.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
+var m_=Object.create;var{getPrototypeOf:u_,defineProperty:eK,getOwnPropertyNames:p_}=Object;var d_=Object.prototype.hasOwnProperty;function c_(Z){return this[Z]}var l_,i_,a_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?l_??=new WeakMap:i_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?m_(u_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of p_(Z))if(!d_.call(K,$))eK(K,$,{get:c_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var s_=(Z)=>Z;function n_(Z,X){this[Z]=s_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:n_.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var e0=import.meta.require;var kO={};l0(kO,{lokiDir:()=>j0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as n7,dirname as Z$}from"path";import{fileURLToPath as o_}from"url";import{existsSync as UQ}from"fs";import{homedir as r_}from"os";function t_(){let Z=RO;for(let X=0;X<6;X++){if(UQ(n7(Z,"VERSION"))&&UQ(n7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return n7(RO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(n7(X,"VERSION"))&&UQ(n7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return n7(Z,"..","..","..")}function j0(){return process.env.LOKI_DIR??n7(process.cwd(),".loki")}function R4(){return n7(r_(),".loki")}var RO,i0;var H8=p(()=>{RO=Z$(o_(import.meta.url));i0=t_()});import{readFileSync as e_}from"fs";import{resolve as Zf,dirname as Xf}from"path";import{fileURLToPath as Qf}from"url";function h3(){if(h5!==null)return h5;let Z="9.3.0";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Xf(Qf(import.meta.url)),Q=X$(X);h5=e_(Zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{H8()});var bO={};l0(bO,{runOrThrow:()=>jf,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Tf,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>yO});async function NQ(Z,X=yO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let W=$.byteLength-(z-X);J+=Y.decode($.subarray(0,W),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function jf(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Mf(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Mf(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Tf(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var yO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return wf?"":Z}var wf,L0,F8,p0,zV0,a0,W8,Q9,v;var S6=p(()=>{wf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),p0=o7("\x1B[1;33m"),zV0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),v=o7("\x1B[0m")});import{existsSync as bf}from"fs";async function E7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(bf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function Y7(Z,X={}){let Q=await E7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var ZL={};l0(ZL,{runStatus:()=>Kh});import{existsSync as Y9,readFileSync as g3,readdirSync as iO,statSync as aO}from"fs";import{resolve as h8,basename as rf}from"path";import{homedir as tf}from"os";function sO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function nO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*LQ/X);if(J>LQ)J=LQ;let z=LQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=p0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),W=sO(Z),V=sO(X);return`  ${W8}${Q}${v} ${K}[${$}]${v} ${Y}% (${W} / ${V})`}async function Zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${v}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1232,4 +1232,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (h_(),f_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(v_),2}}cO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var uW0=await mW0(Bun.argv.slice(2));process.exit(uW0);
 
-//# debugId=F7F47FC30C33C44064756E2164756E21
+//# debugId=869F9122829FD31C64756E2164756E21

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.2.0'
+__version__ = '9.3.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.2.0",
+  "version": "9.3.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.2.0",
+  "version": "9.3.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/tools/policy-diff.py

@@ -0,0 +1,211 @@
+#!/usr/bin/env python3
+"""Diff two policy files by SAFETY DIRECTION, because a loosening looks like any other line.
+
+WHY THIS EXISTS. tools/policy-load.py put the merge policy in a version-
+controlled file so lowering a ceiling would look like a code change. It does.
+So does RAISING one. In a 400-line PR diff, this:
+
+    -  "max_usd": 5,
+    +  "max_usd": 50,
+
+is one line of JSON, the same visual weight as a renamed variable, and it has
+just given every merge a 10x cost ceiling. `git diff` is direction-blind by
+construction: it reports that a value changed, and leaves the safety reasoning
+to a reviewer who is 300 lines from the end and has no schema in their head.
+
+Doing that reasoning FOR the reviewer is the entire product. Not "max_usd:
+5 -> 50" -- that is what git already said. "WEAKENS".
+
+Three rules follow, each one a way a loosening gets waved through:
+
+  A CHANGE WE CANNOT CLASSIFY READS "UNKNOWN DIRECTION", NEVER "unchanged" and
+  never assumed safe. policy-load.KNOWN_KEYS will grow. A key added there but
+  not here is a fully valid policy edit that diffs cleanly -- exactly the shape
+  a silent loosening hides in. Falling through to "changed" makes the new axis
+  invisible on the one surface built to see it. So the fallthrough is loud, and
+  a test asserts DIRECTIONS covers every KNOWN_KEYS entry -- UNKNOWN is the
+  runtime safety net for whatever still slips past, not the accepted resting
+  state for a key we ship.
+
+  REMOVING A KEY IS ALWAYS WEAKENING. Not "removed". Deleting `max_usd` does
+  not lower a ceiling, it stops enforcing cost AT ALL, which is strictly weaker
+  than any number you could have written. This holds for `require_receipt:
+  false -> absent` too, where the tempting reading is "it enforced nothing
+  either way, so it is neutral". A per-case exception here is the hole: the
+  reviewer needs one rule they can trust, not a rule with a footnote about
+  which removals are the safe kind.
+
+  BOTH FILES MUST BE VALID POLICIES FIRST. A diff of a file policy-load would
+  reject is a confident verdict about a document no gate would ever honour --
+  the vacuously-green shape one level over. Refuse, name the file, name the
+  reason.
+
+Exit 0 means the diff was produced, INCLUDING when it found weakenings; that is
+a successful answer to the question asked. --fail-on-weaken is what turns a
+finding into a build failure, so CI can require a human ack on a loosening.
+
+Usage:
+  tools/policy-diff.py <old.json> <new.json> [--json] [--fail-on-weaken]
+"""
+
+import argparse
+import importlib.util
+import json
+import os
+import sys
+
+sys.dont_write_bytecode = True
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+
+# policy-load.py is hyphenated, so it is not importable by name. Load it by
+# path rather than re-implementing validation: a second copy of the schema is a
+# second thing to forget to update, and this tool's whole claim is that it
+# refuses exactly what the loader refuses.
+_spec = importlib.util.spec_from_file_location(
+    "policy_load", os.path.join(_HERE, "policy-load.py"))
+policy_load = importlib.util.module_from_spec(_spec)
+_spec.loader.exec_module(policy_load)
+
+WEAKENS = "WEAKENS"
+TIGHTENS = "TIGHTENS"
+UNKNOWN = "UNKNOWN DIRECTION"
+
+
+class _Missing:
+    """A key absent from a policy. Not None: `null` is a value a file can hold."""
+
+    def __repr__(self):
+        return "<absent>"
+
+
+MISSING = _Missing()
+
+# Exit codes, per the convention tests/test_tool_exit_contract.py enforces.
+EXIT_OK = 0
+EXIT_FAILED = 1
+EXIT_CANNOT_EVALUATE = 2
+EXIT_USAGE = 64
+EXIT_INPUT_MISSING = 66
+
+
+def _direction_max_usd(old, new):
+    """A higher ceiling admits runs the old policy would have blocked."""
+    return WEAKENS if new > old else TIGHTENS
+
+
+def _direction_require_receipt(old, new):
+    # Only false -> true tightens; true -> false drops the requirement.
+    return TIGHTENS if new else WEAKENS
+
+
+# Keyed by policy key. The DEFAULT is UNKNOWN, never "changed": see the module
+# docstring. Adding a key to policy-load.KNOWN_KEYS without adding it here is
+# caught by a test, but until someone fixes it the output must still be loud.
+DIRECTIONS = {
+    "max_usd": _direction_max_usd,
+    "require_receipt": _direction_require_receipt,
+}
+
+
+def classify(key, old, new):
+    """Return (direction, detail) for one key. `old`/`new` may be MISSING."""
+    if old == new:
+        return None, None
+    if new is MISSING:
+        # Never "removed". The gate stops enforcing this axis entirely, which
+        # is weaker than any value that could have been there.
+        return WEAKENS, "{} removed (was {}) -- this axis is no longer enforced at all".format(
+            key, json.dumps(old))
+    if old is MISSING:
+        return TIGHTENS, "{} added = {} -- a new axis is now enforced".format(
+            key, json.dumps(new))
+    decide = DIRECTIONS.get(key)
+    if decide is None:
+        return UNKNOWN, "{}: {} -> {} -- this tool does not know which direction is safer".format(
+            key, json.dumps(old), json.dumps(new))
+    return decide(old, new), "{}: {} -> {}".format(
+        key, json.dumps(old), json.dumps(new))
+
+
+def diff(old_policy, new_policy):
+    """Every classified change between two validated policies."""
+    changes = []
+    for key in sorted(set(old_policy) | set(new_policy)):
+        direction, detail = classify(
+            key, old_policy.get(key, MISSING), new_policy.get(key, MISSING))
+        if direction is not None:
+            changes.append({"key": key, "direction": direction, "detail": detail})
+    return changes
+
+
+def _load_or_die(path, label):
+    """Validated policy, or an exit code. Missing file and invalid file differ."""
+    if not os.path.exists(path):
+        print("policy-diff: {} file does not exist: {}".format(label, path),
+              file=sys.stderr)
+        return None, EXIT_INPUT_MISSING
+    try:
+        return policy_load.load(path), None
+    except policy_load.PolicyError as exc:
+        # Refusing to diff is "could not be checked", not "the check failed".
+        print("policy-diff: refusing to diff -- the {} file is not a valid "
+              "policy: {}".format(label, exc), file=sys.stderr)
+        return None, EXIT_CANNOT_EVALUATE
+
+
+class _Parser(argparse.ArgumentParser):
+    # argparse exits 2 on a usage error, and 2 means "could not be checked" in
+    # this repo. Overriding error() (not parse_args) leaves --help exiting 0.
+    def error(self, message):
+        self.print_usage(sys.stderr)
+        print("{}: error: {}".format(self.prog, message), file=sys.stderr)
+        raise SystemExit(EXIT_USAGE)
+
+
+def main(argv=None):
+    ap = _Parser(description="Classify every policy change as WEAKENS or TIGHTENS.")
+    ap.add_argument("old", help="the policy file as it is today")
+    ap.add_argument("new", help="the policy file as proposed")
+    ap.add_argument("--json", action="store_true", dest="as_json",
+                    help="emit the classified changes as JSON")
+    ap.add_argument("--fail-on-weaken", action="store_true", dest="fail_on_weaken",
+                    help="exit non-zero if any change weakens the gate")
+    args = ap.parse_args(argv)
+
+    old, rc = _load_or_die(args.old, "old")
+    if rc is not None:
+        return rc
+    new, rc = _load_or_die(args.new, "new")
+    if rc is not None:
+        return rc
+
+    changes = diff(old, new)
+    weakenings = [c for c in changes if c["direction"] == WEAKENS]
+    unknowns = [c for c in changes if c["direction"] == UNKNOWN]
+
+    if args.as_json:
+        print(json.dumps({
+            "changes": changes,
+            "weakens": len(weakenings),
+            "unknown_direction": len(unknowns),
+        }, indent=2, sort_keys=True))
+    elif not changes:
+        print("no change: the two policies enforce the same gate")
+    else:
+        for c in changes:
+            print("{}: {}".format(c["direction"], c["detail"]))
+        # UNKNOWN is called out beside the weakenings, not buried in the list:
+        # it is the count a reviewer must resolve by hand.
+        print("{} weakening(s), {} unknown direction, {} change(s) total".format(
+            len(weakenings), len(unknowns), len(changes)))
+
+    if weakenings and args.fail_on_weaken:
+        print("policy-diff: {} weakening(s) require an explicit human ack".format(
+            len(weakenings)), file=sys.stderr)
+        return EXIT_FAILED
+    return EXIT_OK
+
+
+if __name__ == "__main__":
+    sys.exit(main())