loki-mode 9.22.6 → 9.22.7

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.22.6
+# Loki Mode v9.22.7
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.22.6 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.22.7 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.22.6
+9.22.7

package/autonomy/issue-providers.sh

@@ -190,20 +190,91 @@ fetch_github_issue() {
         }
     fi
 
-    # Normalize to common format (pass repo via env to prevent injection)
-    _LOKI_REPO_REF="$repo_ref" python3 -c "
+    # Normalize to common format only after binding the returned identity to the
+    # exact issue requested. A syntactically valid substituted response must not
+    # be allowed to seed an issue context or early journey plan.
+    _LOKI_REPO_REF="$repo_ref" _LOKI_ISSUE_NUMBER="$number" python3 -c "
 import json, sys, os
-data = json.loads(sys.stdin.read())
-print(json.dumps({
-    'provider': 'github',
-    'number': data.get('number', 0),
+from urllib.parse import urlsplit
+
+repo_ref = os.environ.get('_LOKI_REPO_REF', '')
+expected_number = os.environ.get('_LOKI_ISSUE_NUMBER', '')
+
+def refuse(reason):
+    raise SystemExit(f'Error: GitHub issue identity mismatch: {reason}')
+
+try:
+    data = json.loads(sys.stdin.read())
+except (json.JSONDecodeError, UnicodeDecodeError):
+    refuse('response is not valid JSON')
+if not isinstance(data, dict):
+    refuse('response root is not an object')
+if not repo_ref or repo_ref.count('/') != 1 or not all(repo_ref.split('/')):
+    refuse('requested repository could not be resolved')
+if not expected_number.isdigit():
+    refuse('requested issue number is invalid')
+expected_number_normalized = str(int(expected_number))
+
+returned_number = data.get('number')
+url = data.get('url')
+if type(returned_number) is not int or returned_number != int(expected_number):
+    refuse(f'expected issue {expected_number_normalized}, received {returned_number!r}')
+if not isinstance(url, str):
+    refuse('response URL is not a string')
+if any(character.isspace() or ord(character) < 32 or ord(character) == 127 for character in url):
+    refuse('response URL contains whitespace or control characters')
+
+expected_path = f'/{repo_ref}/issues/{expected_number_normalized}'
+try:
+    parsed_url = urlsplit(url)
+    parsed_hostname = parsed_url.hostname
+    parsed_port = parsed_url.port
+except ValueError:
+    refuse(f'expected https://github.com{expected_path}, received {url!r}')
+if (
+    parsed_url.scheme != 'https'
+    or (parsed_hostname or '').lower() != 'github.com'
+    or parsed_url.username is not None
+    or parsed_url.password is not None
+    or parsed_port is not None
+    or parsed_url.query
+    or parsed_url.fragment
+    or parsed_url.path.rstrip('/').casefold() != expected_path.casefold()
+):
+    refuse(f'expected https://github.com{expected_path}, received {url!r}')
+
+labels = data.get('labels', [])
+author = data.get('author') or {}
+if not isinstance(labels, list) or any(not isinstance(label, dict) for label in labels):
+    refuse('response labels are not an array of objects')
+if not isinstance(author, dict):
+    refuse('response author is not an object')
+scalar_fields = {
     'title': data.get('title', ''),
     'body': data.get('body', '') or '',
-    'labels': [l.get('name','') for l in data.get('labels', [])],
-    'author': data.get('author', {}).get('login', ''),
-    'url': data.get('url', ''),
-    'created_at': data.get('createdAt', ''),
-    'repo': os.environ.get('_LOKI_REPO_REF', '')
+    'createdAt': data.get('createdAt', ''),
+    'author.login': author.get('login', ''),
+}
+for field, value in scalar_fields.items():
+    if not isinstance(value, str):
+        refuse(f'response {field} is not a string')
+label_names = []
+for label in labels:
+    name = label.get('name', '')
+    if not isinstance(name, str):
+        refuse('response label name is not a string')
+    label_names.append(name)
+
+print(json.dumps({
+    'provider': 'github',
+    'number': returned_number,
+    'title': scalar_fields['title'],
+    'body': scalar_fields['body'],
+    'labels': label_names,
+    'author': scalar_fields['author.login'],
+    'url': url,
+    'created_at': scalar_fields['createdAt'],
+    'repo': repo_ref
 }))
 " <<< "$issue_json"
 }

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.22.6"
+__version__ = "9.22.7"
 
 # Expose the control app for easy import
 try:

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var l_=Object.create;var{getPrototypeOf:i_,defineProperty:eK,getOwnPropertyNames:a_}=Object;var n_=Object.prototype.hasOwnProperty;function s_(Z){return this[Z]}var o_,r_,t_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?o_??=new WeakMap:r_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?l_(i_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of a_(Z))if(!n_.call(K,$))eK(K,$,{get:s_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var e_=(Z)=>Z;function Zf(Z,X){this[Z]=e_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:Zf.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var t0=import.meta.require;var bO={};l0(bO,{lokiDir:()=>A0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as s7,dirname as Z$}from"path";import{fileURLToPath as Xf}from"url";import{existsSync as UQ}from"fs";import{homedir as Qf}from"os";function Yf(){let Z=yO;for(let X=0;X<6;X++){if(UQ(s7(Z,"VERSION"))&&UQ(s7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return s7(yO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(s7(X,"VERSION"))&&UQ(s7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return s7(Z,"..","..","..")}function A0(){return process.env.LOKI_DIR??s7(process.cwd(),".loki")}function R4(){return s7(Qf(),".loki")}var yO,i0;var V8=p(()=>{yO=Z$(Xf(import.meta.url));i0=Yf()});import{readFileSync as Jf}from"fs";import{resolve as zf,dirname as Kf}from"path";import{fileURLToPath as $f}from"url";function h3(){if(h5!==null)return h5;let Z="9.22.6";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Kf($f(import.meta.url)),Q=X$(X);h5=Jf(zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{V8()});var vO={};l0(vO,{runOrThrow:()=>Ff,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Ef,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>hO});async function NQ(Z,X=hO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let V=$.byteLength-(z-X);J+=Y.decode($.subarray(0,V),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function Ff(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Df(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Df(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Ef(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var hO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return Pf?"":Z}var Pf,L0,F8,_0,MW0,a0,W8,Q9,h;var S6=p(()=>{Pf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),_0=o7("\x1B[1;33m"),MW0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),h=o7("\x1B[0m")});import{existsSync as gf}from"fs";async function P7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(gf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function z7(Z,X={}){let Q=await P7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var JA={};l0(JA,{runStatus:()=>Gh});import{existsSync as Y9,readFileSync as g3,readdirSync as oO,statSync as rO}from"fs";import{resolve as h8,basename as Qh}from"path";import{homedir as Yh}from"os";function tO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function eO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*AQ/X);if(J>AQ)J=AQ;let z=AQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=_0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),V=tO(Z),W=tO(X);return`  ${W8}${Q}${h} ${K}[${$}]${h} ${Y}% (${V} / ${W})`}async function zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${h}
+var l_=Object.create;var{getPrototypeOf:i_,defineProperty:eK,getOwnPropertyNames:a_}=Object;var n_=Object.prototype.hasOwnProperty;function s_(Z){return this[Z]}var o_,r_,t_=(Z,X,Q)=>{var Y=Z!=null&&typeof Z==="object";if(Y){var J=X?o_??=new WeakMap:r_??=new WeakMap,z=J.get(Z);if(z)return z}Q=Z!=null?l_(i_(Z)):{};let K=X||!Z||!Z.__esModule?eK(Q,"default",{value:Z,enumerable:!0}):Q;for(let $ of a_(Z))if(!n_.call(K,$))eK(K,$,{get:s_.bind(Z,$),enumerable:!0});if(Y)J.set(Z,K);return K};var HQ=(Z,X)=>()=>(X||Z((X={exports:{}}).exports,X),X.exports);var e_=(Z)=>Z;function Zf(Z,X){this[Z]=e_.bind(null,X)}var l0=(Z,X)=>{for(var Q in X)eK(Z,Q,{get:X[Q],enumerable:!0,configurable:!0,set:Zf.bind(X,Q)})};var p=(Z,X)=>()=>(Z&&(X=Z(Z=0)),X);var t0=import.meta.require;var bO={};l0(bO,{lokiDir:()=>A0,homeLokiDir:()=>R4,findRepoRootForVersion:()=>X$,REPO_ROOT:()=>i0});import{resolve as s7,dirname as Z$}from"path";import{fileURLToPath as Xf}from"url";import{existsSync as UQ}from"fs";import{homedir as Qf}from"os";function Yf(){let Z=yO;for(let X=0;X<6;X++){if(UQ(s7(Z,"VERSION"))&&UQ(s7(Z,"autonomy/run.sh")))return Z;let Q=Z$(Z);if(Q===Z)break;Z=Q}return s7(yO,"..","..","..")}function X$(Z){let X=Z;for(let Q=0;Q<6;Q++){if(UQ(s7(X,"VERSION"))&&UQ(s7(X,"autonomy/run.sh")))return X;let Y=Z$(X);if(Y===X)break;X=Y}return s7(Z,"..","..","..")}function A0(){return process.env.LOKI_DIR??s7(process.cwd(),".loki")}function R4(){return s7(Qf(),".loki")}var yO,i0;var V8=p(()=>{yO=Z$(Xf(import.meta.url));i0=Yf()});import{readFileSync as Jf}from"fs";import{resolve as zf,dirname as Kf}from"path";import{fileURLToPath as $f}from"url";function h3(){if(h5!==null)return h5;let Z="9.22.7";if(typeof Z==="string"&&Z.length>0)return h5=Z,h5;try{let X=Kf($f(import.meta.url)),Q=X$(X);h5=Jf(zf(Q,"VERSION"),"utf-8").trim()}catch{h5="unknown"}return h5}var h5=null;var BQ=p(()=>{V8()});var vO={};l0(vO,{runOrThrow:()=>Ff,run:()=>E0,readStreamCapped:()=>NQ,commandVersion:()=>Ef,commandExists:()=>X9,ShellError:()=>Q$,MAX_STDOUT_BYTES:()=>hO});async function NQ(Z,X=hO){let Q=Z.getReader(),Y=new TextDecoder,J="",z=0;try{while(z<X){let{done:K,value:$}=await Q.read();if(K)break;if(!$)continue;if(z+=$.byteLength,z>X){let V=$.byteLength-(z-X);J+=Y.decode($.subarray(0,V),{stream:!0});break}J+=Y.decode($,{stream:!0})}J+=Y.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return J}async function E0(Z,X={}){let Q=Bun.spawn({cmd:[...Z],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),Y,J;if(X.timeoutMs&&X.timeoutMs>0)Y=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}J=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[z,K,$]=await Promise.all([NQ(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:z,stderr:K,exitCode:$}}finally{if(Y)clearTimeout(Y);if(J)clearTimeout(J)}}async function Ff(Z,X={}){let Q=await E0(Z,X);if(Q.exitCode!==0)throw new Q$(`command failed (${Q.exitCode}): ${Z.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function X9(Z){let X=Df(Z),Q=await E0(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Df(Z){if(!/^[A-Za-z0-9._/-]+$/.test(Z))throw Error(`refused to shell-escape suspect token: ${Z}`);return Z}async function Ef(Z,X="--version"){if(!await X9(Z))return null;let Y=await E0([Z,X],{timeoutMs:5000});if(Y.exitCode!==0)return null;return((Y.stdout||Y.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var hO=16777216,Q$;var x9=p(()=>{Q$=class Q$ extends Error{message;exitCode;stdout;stderr;constructor(Z,X,Q,Y){super(Z);this.message=Z;this.exitCode=X;this.stdout=Q;this.stderr=Y;this.name="ShellError"}}});function o7(Z){return Pf?"":Z}var Pf,L0,F8,_0,MW0,a0,W8,Q9,h;var S6=p(()=>{Pf=(process.env.NO_COLOR??"").length>0;L0=o7("\x1B[0;31m"),F8=o7("\x1B[0;32m"),_0=o7("\x1B[1;33m"),MW0=o7("\x1B[0;34m"),a0=o7("\x1B[0;36m"),W8=o7("\x1B[1m"),Q9=o7("\x1B[2m"),h=o7("\x1B[0m")});import{existsSync as gf}from"fs";async function P7(){if(x4!==void 0)return x4;let Z="/opt/homebrew/bin/python3.12";if(gf(Z))return x4=Z,Z;let X=await X9("python3.12");if(X)return x4=X,X;let Q=await X9("python3");return x4=Q,Q}async function z7(Z,X={}){let Q=await P7();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return E0([Q,"-c",Z],X)}var x4;var r7=p(()=>{x9()});var JA={};l0(JA,{runStatus:()=>Gh});import{existsSync as Y9,readFileSync as g3,readdirSync as oO,statSync as rO}from"fs";import{resolve as h8,basename as Qh}from"path";import{homedir as Yh}from"os";function tO(Z){let X=Math.trunc(Z);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function eO(Z,X,Q){if(X===0)return null;let Y=Math.trunc(Z*100/X),J=Math.trunc(Z*AQ/X);if(J>AQ)J=AQ;let z=AQ-J,K=F8;if(Y>=80)K=L0;else if(Y>=50)K=_0;let $="=".repeat(Math.max(0,J))+" ".repeat(Math.max(0,z)),V=tO(Z),W=tO(X);return`  ${W8}${Q}${h} ${K}[${$}]${h} ${Y}% (${V} / ${W})`}async function zh(){if(await X9("jq"))return!0;return process.stdout.write(`${L0}Error: jq is required but not installed.${h}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1238,4 +1238,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:Y}=await Promise.resolve().then(() => (p_(),u_));return Y(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(d_),2}}nO();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var QW0=await XW0(Bun.argv.slice(2));process.exit(QW0);
 
-//# debugId=379386EB546861B164756E2164756E21
+//# debugId=D32CF1FDB032F37F64756E2164756E21

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.22.6'
+__version__ = '9.22.7'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.22.6",
+  "version": "9.22.7",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.22.6",
+  "version": "9.22.7",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",