loki-mode 9.22.11 → 9.23.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.22.11
+# Loki Mode v9.23.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -434,7 +434,7 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 | Feature | Added | Notes |
 |---------|-------|-------|
-| Multi-provider support (4 providers) | v5.0.0 | claude, codex, cline, aider -- see `providers/` |
+| Multi-provider support (5 providers) | v5.0.0 | claude, codex, cline, aider, opencode -- see `providers/` |
 | CONTINUITY.md working memory | v5.35.0 | Auto-managed by run.sh, updated each iteration |
 | Quality gates 3-reviewer system | v5.35.0 | 5 specialist reviewers in `skills/quality-gates.md`; execution in run.sh |
 | Memory System (episodic/semantic/procedural) | v5.15.0 | Full implementation in `memory/` |
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.22.11 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.23.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.22.11
+9.23.1

package/autonomy/lib/claude-flags.sh

@@ -762,10 +762,12 @@ loki_caveman_suppress_env() {
 # this so the operator is never surprised.
 #
 # HARDENING: the npx call is forced non-interactive (--non-interactive, plus
-# </dev/null so no stdin read can ever block) and time-bounded (timeout when
-# available) so a stalled network or an unexpected prompt can never hang a user's
-# first `loki start`. caveman's installer is already auto-non-interactive without
-# a TTY, but we belt-and-suspenders it.
+# </dev/null so no stdin read can ever block), time-bounded, and run from a
+# disposable directory. The upstream installer may create project-local agent
+# files while wiring its global Claude hook; isolating its cwd prevents those
+# files, lockfiles, or compiled Python cache entries from polluting the user's
+# feature branch and proof diff. caveman's installer is already auto-
+# non-interactive without a TTY, but we belt-and-suspenders it.
 loki_caveman_bootstrap() {
     [ "${LOKI_CAVEMAN:-1}" = "0" ] && return 1
     [ "${LOKI_CAVEMAN_AUTO_BOOTSTRAP:-1}" = "0" ] && return 1
@@ -796,7 +798,19 @@ loki_caveman_bootstrap() {
     if command -v timeout >/dev/null 2>&1; then
         _cm_runner="timeout 120 npx"
     fi
-    if CAVEMAN_REF="v${ver}" $_cm_runner -y "github:JuliusBrussee/caveman#v${ver}" -- --non-interactive >/dev/null 2>&1 </dev/null; then
+    local bootstrap_tmp=""
+    bootstrap_tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-caveman-bootstrap.XXXXXX")" || {
+        printf '%s\n' "[caveman] could not allocate an isolated bootstrap directory; run proceeds uncompressed." >&2
+        mkdir -p "$marker_dir" 2>/dev/null && : > "$marker" 2>/dev/null || true
+        return 1
+    }
+    local bootstrap_rc=1
+    (
+        cd "$bootstrap_tmp" || exit 1
+        CAVEMAN_REF="v${ver}" $_cm_runner -y "github:JuliusBrussee/caveman#v${ver}" -- --non-interactive >/dev/null 2>&1 </dev/null
+    ) && bootstrap_rc=0
+    rm -rf -- "$bootstrap_tmp" 2>/dev/null || true
+    if [ "$bootstrap_rc" -eq 0 ]; then
         mkdir -p "$marker_dir" 2>/dev/null && : > "$marker" 2>/dev/null || true
         if _loki_caveman_installed; then
             printf '%s\n' "[caveman] installed v${ver}." >&2
@@ -882,3 +896,53 @@ except Exception:
     pass
 RESUME_UUID_PY
 }
+
+# ---------- v9.23.0 subagent fleet capacity (Claude Code 2.1.217 defaults) ----------
+# WHY THIS EXISTS. Claude Code 2.1.217 changed two subagent defaults, and both
+# silently degrade a fan-out harness rather than failing loudly:
+#
+#   "Changed subagents to no longer spawn nested subagents by default; set
+#    CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH to allow deeper nesting"
+#   "Added a cap on concurrently-running subagents (default 20, override with
+#    CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS) so one message can't fan out
+#    unbounded background agents"
+#   -- https://github.com/anthropics/claude-code/releases/tag/v2.1.217
+#
+# The spawn-depth default dropped from 5 to 1 (mirrored in Agent SDK 0.3.217).
+# Loki's documented SDLC fleet pattern dispatches an agent that itself delegates
+# (skills/model-selection.md), so at depth 1 the second level never spawns: the
+# fleet quietly collapses to a single tier and the run still reports success.
+# That is the dangerous shape -- no error, just less work done than claimed.
+#
+# We set the depth EXPLICITLY rather than relying on any default, in either
+# direction. 2 is the depth Loki actually uses (orchestrator -> dev/reviewer
+# agent -> its own helpers); we do not raise it further, because unbounded
+# nesting is the runaway the upstream default exists to prevent.
+#
+# Concurrency is left at the upstream default of 20 unless the operator raises
+# it: the council (3 reviewers) and dev fleet (3-5) both sit well under it, and
+# a harness that silently raises a safety cap on every user's machine is the
+# wrong trade. We export it only when the operator asked for more, so the value
+# shows up in a diff rather than being an invisible default.
+#
+# Both are opt-out via LOKI_SUBAGENT_CAPACITY=0 and honor a pre-set value from
+# the environment, so an operator's own export always wins.
+loki_export_subagent_capacity() {
+    [ "${LOKI_SUBAGENT_CAPACITY:-1}" = "0" ] && return 0
+
+    if [ -z "${CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH:-}" ]; then
+        export CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH="${LOKI_SUBAGENT_SPAWN_DEPTH:-2}"
+    fi
+
+    # Only exported when explicitly requested; no silent raise of the cap.
+    if [ -n "${LOKI_SUBAGENT_CONCURRENCY:-}" ] && \
+       [ -z "${CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS:-}" ]; then
+        export CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS="$LOKI_SUBAGENT_CONCURRENCY"
+    fi
+    return 0
+}
+
+# Applied at SOURCE time, like the caveman default-off export above: the whole
+# subprocess tree inherits it, so every subcall site gets the same capacity
+# without each one having to remember to call this.
+loki_export_subagent_capacity

package/autonomy/lib/contract-scaffold/scaffold.sh

@@ -137,7 +137,7 @@ cat > "$OUT/tsconfig.json" <<'JSON'
   "compilerOptions": {
     "strict": true, "noEmit": true, "jsx": "react-jsx",
     "module": "ESNext", "moduleResolution": "Bundler",
-    "target": "ES2022", "lib": ["ES2022", "DOM"], "skipLibCheck": true
+    "target": "ES2022", "lib": ["ES2022", "DOM", "DOM.Iterable"], "skipLibCheck": true
   },
   "include": ["src"]
 }

package/autonomy/lib/mcp-config.sh

@@ -17,7 +17,7 @@
 #                                  Returns 0 on success, 1 only if the dir
 #                                  cannot be created or the file cannot be
 #                                  written.
-#   loki_user_mcp_config_path   -- emit absolute path to ~/.claude/mcp.json
+#   loki_user_mcp_config_path   -- emit a bounded, current-schema ~/.claude/mcp.json
 #                                  if present + readable, else empty. Always
 #                                  returns 0.
 #   loki_mcp_config_argv        -- emit one space-separated string of paths
@@ -127,12 +127,35 @@ print(os.path.abspath(os.environ['_MCP_OUT']))
 }
 
 # ---------- User overlay path ----------
-# Echoes ~/.claude/mcp.json if it exists and is readable, else empty.
-# Always returns 0 -- a missing overlay is a normal state, not an error.
+# Echoes ~/.claude/mcp.json only when it is valid JSON with the current Claude
+# Code top-level `mcpServers` object. Older files using `servers` are not valid
+# inputs to `claude --mcp-config`: passing one makes Claude refuse before the
+# first provider turn. Ignore those files with an actionable warning so Loki's
+# own valid bundle can still start the run.
+# The 1 MiB bound prevents a local overlay from turning provider startup into an
+# unbounded read. Always returns 0 -- a missing/invalid overlay is recoverable,
+# not fatal.
 loki_user_mcp_config_path() {
     local user_path="${HOME}/.claude/mcp.json"
     if [ -f "$user_path" ] && [ -r "$user_path" ]; then
-        printf '%s' "$user_path"
+        if _LOKI_USER_MCP="$user_path" python3 -c "
+import json, os, sys
+try:
+    path = os.environ['_LOKI_USER_MCP']
+    if os.path.getsize(path) > 1024 * 1024:
+        sys.exit(1)
+    with open(path, encoding='utf-8') as handle:
+        value = json.load(handle)
+except (OSError, ValueError):
+    sys.exit(1)
+sys.exit(0 if isinstance(value, dict) and isinstance(value.get('mcpServers'), dict) else 1)
+" 2>/dev/null; then
+            printf '%s' "$user_path"
+        else
+            printf '%s\n' \
+                'loki: ignoring ~/.claude/mcp.json: Claude Code requires a top-level "mcpServers" object; update or remove the legacy/invalid file.' \
+                >&2
+        fi
     fi
     return 0
 }