loki-mode 9.26.1 → 9.27.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.26.1
+# Loki Mode v9.27.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.26.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.27.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.26.1
+9.27.0

package/autonomy/lib/config-map.sh

@@ -853,6 +853,22 @@ loki_config_unknown_keys() {
     local file="$1" fmt="$2"
     command -v python3 >/dev/null 2>&1 || return 0
 
+    # YAML needs a parser. The rest of this file reaches for yq first, so do the
+    # same: convert to JSON via yq and let the JSON walk below handle it. That
+    # keeps detection working on a host with yq but no pyyaml (CI installs
+    # neither by default, and yq is the more common of the two here). Without
+    # either parser the walk no-ops and YAML validates as it did before -- a
+    # missing parser must not invent a verdict.
+    local scratch_json=""
+    if [ "$fmt" = "yaml" ] && ! python3 -c "import yaml" >/dev/null 2>&1; then
+        command -v yq >/dev/null 2>&1 || return 0
+        scratch_json="$(mktemp "${TMPDIR:-/tmp}/loki-cfg-uk.XXXXXX")" || return 0
+        if ! yq eval -o=json '.' "$file" > "$scratch_json" 2>/dev/null; then
+            rm -f "$scratch_json"; return 0
+        fi
+        file="$scratch_json"; fmt="json"
+    fi
+
     local map_str="" mapping
     for mapping in "${LOKI_CONFIG_MAP[@]}"; do map_str+="${mapping%%:*}"$'\n'; done
 
@@ -912,7 +928,14 @@ def walk(node, prefix):
 walk(data, "")
 for u in unknown:
     print(u)
-' 2>/dev/null || return 0
+' 2>/dev/null
+    # Always succeed: this helper reports keys on stdout, and a parser that
+    # cannot run must degrade to "nothing to report" rather than failing the
+    # caller. The `[ -n ... ] && rm` form would return non-zero on the common
+    # empty-scratch path and discard the captured output, so clean up with an
+    # unconditional rm on a possibly-empty path instead.
+    rm -f "${scratch_json:-/dev/null}" 2>/dev/null
+    return 0
 }
 
 loki_config_validate_file() {

package/autonomy/lib/proof-generator.py

@@ -644,6 +644,66 @@ def _collect_model(loki_dir, observed):
     return "unavailable"
 
 
+def _collect_decisions(loki_dir):
+    """Which models actually ran, and did the configuration change mid-flight?
+
+    Reads the append-only trail at .loki/decisions/decisions.jsonl that
+    autonomy/lib/decision_record.py writes once per dispatch. That module
+    already computes the audit fact worth showing -- more than one model_id in
+    one project means the deciding component changed while the run was in
+    flight -- so this reuses summarize() rather than recomputing it.
+
+    THREE STATES, NEVER COLLAPSED, for the same reason _collect_model returns
+    the literal "unavailable" instead of guessing:
+
+      measured   -- records exist; counts and model_changed are real
+      no_records -- the trail is absent for this run
+      unreadable -- the trail exists but could not be read
+
+    A section that renders nothing when the trail is absent reads as "no swap
+    happened", which is exactly the false green this receipt exists to prevent.
+    Absence of evidence is reported as absence of evidence.
+
+    model_changed is a DISCLOSED FACT, not a failure. run.sh documents four
+    legitimate reasons a model changes mid-run (opus-pin force, LOKI_MAX_TIER
+    clamp, mid-flight override, fable collapse). It never touches the verdict.
+
+    Corrupt lines are surfaced via unparseable_lines rather than dropped: an
+    audit trail that quietly discards what it cannot parse is worse than one
+    that admits the gap.
+    """
+    try:
+        from decision_record import summarize as _summarize
+    except ImportError:
+        return {"status": "unreadable", "reason": "decision_record module unavailable"}
+
+    try:
+        raw = _summarize(loki_dir)
+    except Exception as exc:  # never let provenance reporting break the receipt
+        return {"status": "unreadable", "reason": str(exc)}
+
+    if not isinstance(raw, dict):
+        return {"status": "unreadable", "reason": "invalid summary"}
+
+    if raw.get("status") == "measured":
+        return {
+            "status": "measured",
+            "records": _to_int(raw.get("records"), 0),
+            "unparseable_lines": _to_int(raw.get("unparseable_lines"), 0),
+            "models": raw.get("models") or {},
+            "stages": raw.get("stages") or {},
+            "model_changed": bool(raw.get("model_changed")),
+            "temperature_changed": bool(raw.get("temperature_changed")),
+            # Never influences the verdict: this is provenance, not a gate.
+            "affects_verdict": False,
+        }
+
+    reason = str(raw.get("reason") or "unknown")
+    status = "no_records" if reason == "no_records" else "unreadable"
+    return {"status": status, "reason": reason,
+            "detail": str(raw.get("detail") or ""), "affects_verdict": False}
+
+
 def _collect_security(loki_dir):
     """Read .loki/quality/security-findings.json (the secure-by-default gate).
 
@@ -1237,6 +1297,9 @@ def _build_proof(args, loki_dir, target_dir, repo_root):
     termination = _collect_termination(loki_dir, args.session_exit_code)
     tests = _collect_tests(loki_dir)
     security = _collect_security(loki_dir)
+    # Model provenance: which models actually ran, and did that change
+    # mid-flight. Provenance only -- affects_verdict is False.
+    decisions = _collect_decisions(loki_dir)
     functional = _collect_functional(loki_dir)  # FV-2 record-half: descriptive only
     healthcheck = _collect_healthcheck(loki_dir)  # Evidence Receipt record-half
     evidence_gate = _collect_evidence_gate(loki_dir)
@@ -1429,6 +1492,7 @@ def _build_proof(args, loki_dir, target_dir, repo_root):
         "diffs": diffs,
         "council": council,
         "quality_gates": quality_gates,
+        "decisions": decisions,
         "cost": cost,
         "deployment": deployment,
         # Typed compatibility mirror for consumers that do not traverse facts.
@@ -1815,6 +1879,41 @@ def _render_fallback_html(proof):
                     "who produced them, so this receipt trusts its generator. "
                     "To sign future receipts, set LOKI_PROOF_GPG_KEY to a gpg "
                     "key id (see docs/SIGNED-RECEIPTS.md).</p>")
+
+    # Model provenance, mirrored here for the same reason the signature row is:
+    # this fallback "must not be quieter about provenance than the page it
+    # stands in for". Three states, never collapsed -- an absent trail is
+    # reported as absent, not rendered as silence that reads like "no change".
+    dec = proof.get("decisions") or {}
+    dstatus = dec.get("status")
+    if dstatus == "measured":
+        models = dec.get("models") or {}
+        listing = ", ".join(
+            "%s (%s)" % (esc(k2), esc(v2)) for k2, v2 in sorted(models.items())
+        ) or "none recorded"
+        if dec.get("model_changed"):
+            change = ("The model CHANGED during this run. That is disclosed, not a "
+                      "fault -- a tier clamp, an operator override or a mid-flight "
+                      "failover all cause it legitimately.")
+        else:
+            change = "One model ran for the whole project; no mid-flight change."
+        bad = _to_int(dec.get("unparseable_lines"), 0)
+        badnote = ""
+        if bad > 0:
+            badnote = (" %d trail line(s) could not be parsed and are counted "
+                       "rather than dropped, so the list may be incomplete." % bad)
+        rows.append("<p>Models dispatched (append-only decision trail): %s. %s%s "
+                    "Provenance only; never changes the verdict.</p>"
+                    % (listing, change, badnote))
+    elif dstatus == "no_records":
+        rows.append("<p>Models dispatched: no decision trail was recorded for this "
+                    "run, so per-iteration model attribution cannot be confirmed. "
+                    "Absence of the trail is reported as absence of evidence, not "
+                    "as proof that nothing changed.</p>")
+    elif dstatus:
+        rows.append("<p>Models dispatched: the decision trail could not be read "
+                    "(%s), so per-iteration model attribution is unavailable. "
+                    "Reported rather than omitted.</p>" % esc(dec.get("reason", "unknown")))
     red = proof.get("redaction", {})
     rows.append("<p>Redaction applied: %s (%s redactions, rules v%s)</p>" % (
         esc(red.get("applied")), esc(red.get("redactions_count")),

package/autonomy/lib/proof-template.html

@@ -1268,10 +1268,60 @@
     var signNote = signed
       ? '<p class="hash-note">This receipt carries a detached GPG signature over the same canonical bytes that were hashed. A verifier holding the signer public key can confirm its provenance offline with <code>loki proof verify</code>.</p>'
       : '<p class="hash-note">This receipt is UNSIGNED, so it trusts the generator that produced it (<code>loki proof verify</code> reports <code>generator_trusted: true</code>). To sign future receipts, set <code>LOKI_PROOF_GPG_KEY</code> to a GPG key id before the run.</p>';
+    // Model provenance from the append-only decision trail
+    // (.loki/decisions/decisions.jsonl, written once per dispatch).
+    //
+    // The "Model" row above is the run-level model. It cannot answer the
+    // question a regulated buyer actually asks: did the deciding component
+    // change while the run was in flight? Two model ids in one project is
+    // exactly that case, and the trail proves it either way.
+    //
+    // THREE STATES, NEVER COLLAPSED. A section that renders nothing when the
+    // trail is absent reads as "no swap happened" -- the false green this
+    // receipt exists to prevent. An older receipt predating this field has no
+    // "decisions" key at all and is left silent rather than described, since a
+    // receipt that never recorded the trail cannot honestly report on it.
+    var dec = g(p, "decisions", null);
+    var decNote = "";
+    if (dec && g(dec, "status", "")) {
+      var dstatus = g(dec, "status", "");
+      if (dstatus === "measured") {
+        var models = g(dec, "models", {}) || {};
+        var names = [];
+        for (var mk in models) {
+          if (Object.prototype.hasOwnProperty.call(models, mk)) {
+            names.push(esc(mk) + " (" + num(models[mk]) + ")");
+          }
+        }
+        var changed = !!g(dec, "model_changed", false);
+        var bad = num(g(dec, "unparseable_lines", 0));
+        decNote = '<p class="hash-note">Models dispatched, from the run\u2019s own ' +
+          "append-only decision trail: " + (names.length ? names.join(", ") : "none recorded") +
+          ". " +
+          (changed
+            ? "The model CHANGED during this run. That is disclosed, not a fault -- a tier clamp, an " +
+              "operator override or a mid-flight failover all cause it legitimately -- but it is the " +
+              "thing you would otherwise have to take on trust."
+            : "One model ran for the whole project; the trail shows no mid-flight change.") +
+          (bad > 0
+            ? " " + bad + " line" + (bad === 1 ? "" : "s") + " of the trail could not be parsed and " +
+              "are counted here rather than dropped, so this list may be incomplete."
+            : "") +
+          " This is provenance and never changes the verdict.</p>";
+      } else if (dstatus === "no_records") {
+        decNote = '<p class="hash-note">No decision trail was recorded for this run, so which ' +
+          "model served each iteration cannot be confirmed from this receipt. Absence of the trail " +
+          "is reported as absence of evidence, not as proof that nothing changed.</p>";
+      } else {
+        decNote = '<p class="hash-note">The decision trail for this run could not be read (' +
+          esc(g(dec, "reason", "unknown")) + "), so per-iteration model attribution is unavailable. " +
+          "Reported rather than omitted.</p>";
+      }
+    }
     card.innerHTML = '<div class="kv">' + kv + "</div>" +
       (hash ? '<p class="hash-note">The integrity hash is a ' + esc(algo) +
               " digest of this proof. It proves the artifact has not been altered after it was emitted. It does not, by itself, prove who or what produced the work.</p>" : "") +
-      signNote;
+      signNote + decNote;
   }
 
   function renderCta(p) {

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.26.1"
+__version__ = "9.27.0"
 
 # Expose the control app for easy import
 try:

package/docs/COMPETITIVE-NEXT-10.md

@@ -0,0 +1,204 @@
+# The next items vs Factory.ai and 8090
+
+Written 2026-09-09. Every item below cites a file:line, a command output, or a
+fetched URL. Items that research proposed but that turned out to be **already
+shipped** are listed at the bottom under "Not items" with the evidence, because
+a plan that re-builds working code is worse than a shorter plan.
+
+There are **seven** real items, not ten. Three of the research's candidates were
+already implemented, and two more are architecturally unavailable to Loki as
+designed. Padding to ten would mean inventing work.
+
+---
+
+## What the market actually rewards
+
+Both competitors lead with **governance, not speed**. Factory.ai ($150M Series C,
+Apr 2026) sells fleets of droids under "engineers governing how much autonomy
+each workflow receives". 8090 ($135M Series A, EY partnership) sells a "governed
+multiplayer platform under human-led oversight".
+
+Loki's wedge is the same shape and sharper: **the only agent that hands you a
+receipt you can check yourself.** The items below are ranked by how much each
+one strengthens a claim a buyer can verify without trusting us.
+
+---
+
+## 1. Model provenance on the receipt -- SHIPPED v9.27.0
+
+**Corrected.** An earlier draft of this item claimed the exogenous/advisory gate
+split, files-changed and cost "do not reach the top of the receipt". That was
+wrong, and reading the renderers disproved it: `proof-template.html:1165-1192`
+already renders the split with the strongest honesty framing in the repo
+("a model that is confidently wrong scores itself green here"), plus
+disabled-gate disclosure, cost, tokens, wall clock and files changed.
+
+Five of the six fields were already shipped. **One was genuinely missing:**
+per-iteration model attribution. `autonomy/lib/decision_record.py` writes an
+append-only trail to `.loki/decisions/decisions.jsonl` once per dispatch, and
+already computes the audit fact worth showing -- `model_changed`, meaning more
+than one model id served one project. The proof generator read that file
+**zero times**.
+
+That is the question a regulated buyer actually asks, and the one Factory users
+complain about: did the deciding component change mid-run without anyone saying
+so? The run-level "Model" row cannot answer it.
+
+**Shipped in v9.27.0** in both renderers, with three states never collapsed --
+`measured`, `no_records`, `unreadable`. An absent trail is reported as absent
+rather than rendered as silence that reads like "no swap happened", corrupt
+trail lines are counted rather than dropped, and `affects_verdict` is `false`:
+a mid-flight change is a disclosed fact (tier clamp, operator override,
+failover all cause it legitimately), never a fault and never a verdict input.
+
+## 2. Make the machine contract discoverable
+
+**Status: the contract exists and is documented; it is invisible where a user
+would look.**
+
+`docs/exit-codes.md` documents a genuinely good tiered contract: with
+`LOKI_DURABLE_STATE=1`, `loki start` distinguishes "failed the quality gate"
+from "crashed" -- written for a Kubernetes Job or an ECS task. `loki verify` has
+its own documented contract (`docs/exit-codes.md:53`).
+
+But `loki start --help` mentions `LOKI_DURABLE_STATE` **zero times** (measured).
+A CI author reads `--help`, sees "0 on success, nonzero on failure", and builds
+the coarse gate. Factory's `droid exec` advertises its exit codes in its own help
+output; ours are a doc you have to already know exists.
+
+**Do:** surface the durable contract in `loki start --help` and `loki verify
+--help`, with a one-line pointer to `docs/exit-codes.md`.
+
+**Note:** the research framed this as "Loki has no headless one-shot contract".
+That framing was wrong -- the contract exists. The defect is discoverability,
+which is a much cheaper fix.
+
+---
+
+## 3. Publish a measured kill-switch latency
+
+**Status: mechanism exists, number does not.**
+
+`check_human_intervention()` (`autonomy/run.sh`) implements PAUSE/STOP/INPUT.
+There is no stated termination window anywhere in `docs/` (measured: zero
+matches for "termination window" or "kill switch").
+
+An enterprise buyer asks "how fast can I stop it?" Factory answers with a number.
+"There is a stop signal" is not an answer.
+
+**Do:** measure worst-case latency from signal to process exit across the bash
+and Bun routes, publish the number, and add a test that fails if it regresses
+past the published bound.
+
+**Care:** publish the measured worst case, not the median. A number we beat 50%
+of the time is worse than no number.
+
+---
+
+## 4. Close the config-diagnostic gap for the remaining format
+
+**Status: shipped for JSON, `.env`, and YAML. Narrow residual gap only.**
+
+`loki config validate` reports unknown keys in JSON and `.env` (v9.26.1) and in
+YAML via pyyaml with a `yq` fallback (v9.26.2). `yq` is preinstalled on the
+GitHub ubuntu-24.04 runner, and the fallback was verified against a stand-in
+honouring both invocation shapes the real `yq` is called with, so CI and any
+Linux host with either parser get full detection.
+
+The residual gap is narrow: a host with **neither** pyyaml nor `yq` (a stock
+macOS dev machine) gets no YAML detection. It degrades quietly, which is correct
+-- a missing parser must never invent a verdict -- but silently.
+
+**Do:** state the dependency in `loki config validate --help` so the gap is
+visible rather than silent. Vendoring a YAML scanner is not worth it for one
+host shape that already has a documented fallback available via `brew install
+yq`.
+
+---
+
+## 5. `loki init` writes a config nothing reads
+
+**Status: confirmed defect, low blast radius.**
+
+`loki init` writes `.loki/loki.config.json` with six behavioral-looking keys --
+`provider`, `complexity`, `quality_gates`, `parallel_mode`, `dashboard` -- and
+labels it "project configuration" (`autonomy/loki:16598`). **Nothing reads any
+of them** (measured: 0 read sites for all five; the only `template` match is a
+comment). A user who sets `"quality_gates": false` is silently ignored.
+
+Note this is a *different file* from `.loki/config.json`, which is live and is
+read for `memory.disabled` and `otel_endpoint`.
+
+**Mitigated already:** as of v9.26.1, `loki config validate` on that file
+reports each dead key by name. The gap is now diagnosable rather than silent.
+
+**Do:** the honest minimum is to stop describing it as "project configuration".
+Removing the keys outright flips `tests/test-init-command.sh:141`, which asserts
+`'provider' in d` -- so that is a deliberate contract change, not a cleanup.
+
+---
+
+## 6. Verdict influence for the LLM review stage
+
+**Status: stage ships in v9.26.0/9.26.1; verdict influence deliberately deferred.**
+
+`llm_review` now runs by default and is recorded, but `affects_verdict` is
+`false`. That was the right call for the release -- flipping it would silently
+break anyone gating CI on exit 0.
+
+**Do:** measure the reviewer on real diffs, then promote verdict influence behind
+an explicit flag (`--llm-blocks`) before considering it as a default. The
+sequencing matters more than the speed: a reviewer that returns CONCERNS where
+deterministic-only returned VERIFIED is a breaking change to a published exit
+contract.
+
+---
+
+## 7. Make the deferred-suite gap structural
+
+**Status: process defect, cost two broken releases this cycle.**
+
+v9.25.0 and v9.25.1 both failed to publish because a check that guards the
+shipped artifact was **deferred by the fast tier** -- the only tier that runs
+before every push. v9.26.0 failed the same way on repo-wide ShellCheck.
+
+CLAUDE.md already states the rule ("a check that guards the shipped artifact must
+run in the FAST tier"). The rule is not enforced.
+
+**Shipped in v9.26.3** as `scripts/guard-changed.sh`: runs the suites that
+reference the files in your diff, plus ShellCheck on the changed shell files.
+Measured 8s for a one-file change, ~135s worst case, against 26m50s for the FULL
+tier. Verified it would have blocked the v9.26.0 push locally.
+
+**Remaining:** it is necessary, not sufficient. It cannot catch a failure that
+depends on CI differing from your machine -- which is exactly how v9.26.2 failed,
+on a suite this script selects and runs. The follow-on work is making
+environment-conditional assertions name their condition (`command -v yq`) rather
+than assume the author's host. That is a review habit, not a script.
+
+---
+
+## Not items (research proposed these; they are already shipped)
+
+- **Signed receipts default-off is a moat gated behind an env var.** The receipt
+  already states signature status explicitly in both directions
+  (`proof-generator.py:1808-1820`): SIGNED, or UNSIGNED with the honest line that
+  the integrity hash "does NOT prove who produced them, so this receipt trusts
+  its generator." That is the shippable version. Do **not** flip
+  `LOKI_PROOF_GPG_KEY` to default-on: with no key present it would either fail
+  the run or silently emit no signature, and the second is the false-green this
+  project exists to prevent. Key distribution is a founder decision.
+- **OTEL to a customer-owned collector.** Already implemented -- `otel_endpoint`
+  is persisted and read (`autonomy/loki:26755`, `:26828-26837`).
+- **A headless exec contract with documented exit codes.** Already exists via
+  `LOKI_DURABLE_STATE=1`; see item 2, which is the real (smaller) gap.
+
+## Architecturally unavailable, and worth saying so
+
+- **Per-command risk tiers** and a **hard command blocklist** ("cannot be
+  bypassed by approval", per Factory's docs). `autonomy/run.sh:515` documents
+  that `LOKI_ALLOWED_PATHS` "does NOT restrict provider-driven agent writes
+  (run.sh never sees them)". You cannot classify a command you never observe.
+  The only honest form is a sandbox-boundary blocklist, which is a different and
+  much larger piece of work. Attempting a partial version would ship a security
+  claim we cannot keep.

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.26.1
+**Version:** v9.27.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var St=Object.create;var{getPrototypeOf:yt,defineProperty:jG,getOwnPropertyNames:bt}=Object;var ft=Object.prototype.hasOwnProperty;function _t($){return this[$]}var vt,ht,gt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?vt??=new WeakMap:ht??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?St(yt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of bt($))if(!ft.call(J,q))jG(J,q,{get:_t.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var mt=($)=>$;function ut($,X){this[$]=mt.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:ut.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var YR={};B1(YR,{lokiDir:()=>h0,homeLokiDir:()=>HQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as dt}from"url";import{existsSync as Zq}from"fs";import{homedir as pt}from"os";function ct(){let $=VR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(VR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function HQ(){return h2(pt(),".loki")}var VR,L1;var k1=s(()=>{VR=LG(dt(import.meta.url));L1=ct()});import{readFileSync as lt}from"fs";import{resolve as it,dirname as at}from"path";import{fileURLToPath as ot}from"url";function j9(){if(n3!==null)return n3;let $="9.26.1";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=at(ot(import.meta.url)),Q=AG(X);n3=lt(it(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var GR={};B1(GR,{runOrThrow:()=>Ue,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>We,commandExists:()=>g5,ShellError:()=>CG,MAX_STDOUT_BYTES:()=>WR});async function Jq($,X=WR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Ue($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new CG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=He($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function He($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function We($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var WR=16777216,CG;var y8=s(()=>{CG=class CG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Ge?"":$}var Ge,p0,$5,q1,L61,A1,f1,m5,r;var t7=s(()=>{Ge=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),L61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as De}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(De($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var yR={};B1(yR,{runStatus:()=>oe});import{existsSync as u5,readFileSync as A9,readdirSync as RR,statSync as IR}from"fs";import{resolve as A5,basename as ge}from"path";import{homedir as me}from"os";function wR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function PR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=wR($),Y=wR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function de(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
+var St=Object.create;var{getPrototypeOf:yt,defineProperty:jG,getOwnPropertyNames:bt}=Object;var ft=Object.prototype.hasOwnProperty;function _t($){return this[$]}var vt,ht,gt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?vt??=new WeakMap:ht??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?St(yt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of bt($))if(!ft.call(J,q))jG(J,q,{get:_t.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var mt=($)=>$;function ut($,X){this[$]=mt.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:ut.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var YR={};B1(YR,{lokiDir:()=>h0,homeLokiDir:()=>HQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as dt}from"url";import{existsSync as Zq}from"fs";import{homedir as pt}from"os";function ct(){let $=VR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(VR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function HQ(){return h2(pt(),".loki")}var VR,L1;var k1=s(()=>{VR=LG(dt(import.meta.url));L1=ct()});import{readFileSync as lt}from"fs";import{resolve as it,dirname as at}from"path";import{fileURLToPath as ot}from"url";function j9(){if(n3!==null)return n3;let $="9.27.0";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=at(ot(import.meta.url)),Q=AG(X);n3=lt(it(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var GR={};B1(GR,{runOrThrow:()=>Ue,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>We,commandExists:()=>g5,ShellError:()=>CG,MAX_STDOUT_BYTES:()=>WR});async function Jq($,X=WR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Ue($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new CG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=He($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function He($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function We($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var WR=16777216,CG;var y8=s(()=>{CG=class CG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Ge?"":$}var Ge,p0,$5,q1,L61,A1,f1,m5,r;var t7=s(()=>{Ge=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),L61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as De}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(De($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var yR={};B1(yR,{runStatus:()=>oe});import{existsSync as u5,readFileSync as A9,readdirSync as RR,statSync as IR}from"fs";import{resolve as A5,basename as ge}from"path";import{homedir as me}from"os";function wR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function PR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=wR($),Y=wR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function de(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1334,4 +1334,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:z}=await Promise.resolve().then(() => (Et(),Pt));return z(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(xt),2}}DR();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var X61=await $61(Bun.argv.slice(2));process.exit(X61);
 
-//# debugId=B98225BA72BA8822593D774679C4FF5C
+//# debugId=61F0F6125299578AD6E69225C0CFE191

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.26.1'
+__version__ = '9.27.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.26.1",
+  "version": "9.27.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider, opencode).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.26.1",
+  "version": "9.27.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",