loki-mode 9.37.0 → 9.39.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.37.0
+# Loki Mode v9.39.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.37.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.39.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.37.0
+9.39.0

package/autonomy/lib/efficiency_cost.py

@@ -127,6 +127,7 @@ def collect_efficiency(loki_dir):
     }
     model = ""
     collected = False
+    _records = []
     eff_dir = os.path.join(loki_dir, "metrics", "efficiency")
     try:
         names = sorted(os.listdir(eff_dir))
@@ -139,6 +140,7 @@ def collect_efficiency(loki_dir):
         if not isinstance(rec, dict):
             continue
         collected = True
+        _records.append(rec)
         cost["usd"] += _to_float(rec.get("cost_usd"))
         cost["input_tokens"] += _to_int(rec.get("input_tokens"))
         cost["output_tokens"] += _to_int(rec.get("output_tokens"))
@@ -171,11 +173,41 @@ def collect_efficiency(loki_dir):
         "cache_read_tokens": cost["cache_read_tokens"],
         "cache_creation_tokens": cost["cache_creation_tokens"],
     })
+    # COST AND TOKENS ARE MEASURED SEPARATELY, so they must be reported
+    # separately. `_observed` is true when EITHER a cost or a token count was
+    # seen, which is right for "did we measure anything" -- but it let a run with
+    # real token counts and NO priced record report usd=0.0 available=True. The
+    # receipt then asserts the run cost nothing while its own token counts prove
+    # work happened, which is a fabricated fact of exactly the kind this module
+    # exists to prevent. Measured, before this fix:
+    #   [{"input_tokens":100,"output_tokens":200}]  -> usd=0.0  available=True
+    # A partially-priced run has the same shape: an iteration missing cost_usd
+    # contributes 0.0 to the sum and silently understates total spend.
+    #
+    # So usd is now null unless at least one record actually carried a cost, and
+    # cost_partial marks the case where some did and some did not. Tokens are
+    # unaffected: they keep reporting whatever was observed.
+    # PRESENCE of the key, not its value. An explicit {"cost_usd": 0} is a
+    # GENUINE measured zero and must stay 0.0 -- a free cache-hit iteration is a
+    # real observation, and nulling it would be its own dishonesty (existing
+    # contract: test_genuine_zero_cost_stays_zero_not_null). What is unknown is a
+    # record that never carried the field at all.
+    _any_cost = any("cost_usd" in r for r in _records)
+    _missing_cost = sum(1 for r in _records if "cost_usd" not in r)
     if collected and _observed:
         # Round usd to a sane precision but keep it precise (anti-pattern:
         # round suspiciously-clean numbers). 4 decimals preserves odd values.
         cost["usd"] = round(cost["usd"], 4)
         cost["available"] = True
+        if not _any_cost:
+            # Tokens were observed but nothing was priced: unknown, not zero.
+            cost["usd"] = None
+            cost["cost_available"] = False
+        else:
+            cost["cost_available"] = True
+            # Some records priced, others not: the total is a LOWER BOUND.
+            cost["cost_partial"] = _missing_cost > 0
+            cost["cost_unpriced_records"] = _missing_cost
     else:
         # No record means unavailable, never an observed zero.
         for key in (

package/autonomy/lib/proof-generator.py

@@ -173,9 +173,21 @@ def _collect_council(loki_dir):
                     ) + (" [round %s]" % round_tag if round_tag else ""),
                 })
             continue
+        # Skip non-reviewer records. The nested path above already refuses a row
+        # with a blank role AND blank vote ("noise, not a reviewer"); this flat
+        # path did not, so any council/*.json that is not a verdict file was
+        # rendered as a phantom reviewer. Observed on a real run: the glob picked
+        # up `evidence-gate-details.json` and `state.json`, inflating a genuine
+        # 3-voter council to a larger roster of mostly-empty rows. The receipt's
+        # council block is the central trust signal, so a padded roster
+        # overstates how much independent review actually happened.
+        _flat_role = str(rec.get("role") or rec.get("reviewer") or "")
+        _flat_vote = str(rec.get("vote") or rec.get("decision") or "")
+        if not _flat_role and not _flat_vote:
+            continue
         reviewers.append({
-            "role": str(rec.get("role") or rec.get("reviewer") or ""),
-            "vote": str(rec.get("vote") or rec.get("decision") or ""),
+            "role": _flat_role,
+            "vote": _flat_vote,
             # Full text here; truncation to <=300 happens AFTER redaction so a
             # secret straddling the cap cannot be sliced into a sub-pattern
             # fragment that escapes the redactor.
@@ -1025,7 +1037,25 @@ def _empty_tree_sha(repo_dir):
 
     Diffing against this yields "everything that currently exists", which is the
     truthful baseline for a run that started from a repo with no commits.
+
+    REQUIRES AN ACTUAL REPOSITORY. `git hash-object -t tree /dev/null` is a pure
+    hash computation: it succeeds OUTSIDE a repo too, returning the same
+    constant 4b825dc6... So without this guard a run in a non-git directory got
+    a well-formed, plausible-looking base_sha implying a real baseline had been
+    captured, when no repository existed at all -- and every other git fact in
+    the receipt (head_sha, tree_sha256, diff) was simultaneously empty. A
+    fabricated-looking identifier beside empty siblings is worse than an honest
+    empty string, because a reader checks the SHA and finds it valid.
     """
+    try:
+        inside = subprocess.run(
+            ["git", "rev-parse", "--is-inside-work-tree"],
+            cwd=repo_dir, capture_output=True, text=True, timeout=10,
+        )
+        if inside.returncode != 0:
+            return ""
+    except Exception:
+        return ""
     try:
         out = subprocess.run(
             ["git", "hash-object", "-t", "tree", os.devnull],

package/autonomy/loki

@@ -24582,6 +24582,20 @@ except Exception as e:
             fi
             local _settings="$HOME/.claude/settings.json"
             local _hook_script="${SKILL_DIR:-$(pwd)}/claude/hooks/loki-session-end.sh"
+            # FAIL CLOSED on a missing script. This path was built unguarded and
+            # written into the user's REAL ~/.claude/settings.json, then reported
+            # green "installed" -- while claude/ was absent from package.json
+            # files[], so for every npm user the hook pointed at a file that did
+            # not exist. The install claimed success and transcripts were never
+            # ingested; the SessionEnd failure surfaces nowhere the user reads.
+            # Writing a settings entry we cannot honor is worse than not writing
+            # one, so refuse and say why instead of mutating their config.
+            if [ ! -f "$_hook_script" ]; then
+                echo -e "${RED}Cannot install the SessionEnd hook: script not found${NC}" >&2
+                echo -e "${YELLOW}  expected: $_hook_script${NC}" >&2
+                echo -e "${YELLOW}  ~/.claude/settings.json was NOT modified.${NC}" >&2
+                return 1
+            fi
             mkdir -p "$(dirname "$_settings")" 2>/dev/null || true
             [ ! -f "$_settings" ] && echo '{}' > "$_settings"
             _LOKI_HOOK_SCRIPT="$_hook_script" _LOKI_SETTINGS="$_settings" python3 -c "
@@ -29440,6 +29454,14 @@ USER TASK: ${prompt}"
                 aider)
                     aider --message "$full_prompt" --yes-always --no-auto-commits < /dev/null 2>&1 || agent_exit=$?
                     ;;
+                opencode)
+                    # Mirrors the working arm in the phase dispatcher (see the
+                    # opencode case alongside aider there). opencode was listed
+                    # as an active provider and accepted by `loki provider set`,
+                    # but this case had no arm, so `loki agent run` printed the
+                    # persona banner and then died with "Unknown provider".
+                    (source "$_LOKI_SCRIPT_DIR/../providers/opencode.sh" && provider_invoke "$full_prompt" 2>&1) || agent_exit=$?
+                    ;;
                 *)
                     echo -e "${RED}Unknown provider: $provider${NC}"
                     return 1
@@ -29565,6 +29587,8 @@ $diff"
                 claude)  claude -p "$review_prompt" 2>&1 ;;
                 codex)   codex exec --sandbox workspace-write "$review_prompt" 2>&1 ;;
                 cline)   cline -y "$review_prompt" 2>&1 ;;
+                aider)   aider --message "$review_prompt" --yes-always --no-auto-commits < /dev/null 2>&1 ;;
+                opencode) (source "$_LOKI_SCRIPT_DIR/../providers/opencode.sh" && provider_invoke "$review_prompt" 2>&1) ;;
                 *)       echo -e "${RED}Unknown provider: $provider${NC}"; return 1 ;;
             esac
             ;;

package/autonomy/run.sh

@@ -831,6 +831,17 @@ print(catalog["providers"]["claude"]["cli_aliases"].get(os.environ["_LOKI_SELECT
 
     export LOKI_PHASE_UNIT_TESTS LOKI_PHASE_E2E_TESTS
     export LOKI_PHASE_CODE_REVIEW LOKI_PHASE_SECURITY LOKI_PHASE_ACCESSIBILITY
+    # EXPORT THE PHASES THIS PROFILE TURNS OFF, not only the ones it leaves on.
+    # The receipt derives quality_gates.disabled_phases by scanning the
+    # environment for LOKI_PHASE_* set to false (proof-generator.py:470-478), so
+    # a phase that is disabled but never exported is INVISIBLE to it: the receipt
+    # reported disabled_phases [] and all_phases_enabled true while six phases
+    # were switched off. That defeats the field's stated purpose -- "a receipt
+    # must be able to say what was NOT checked" -- and makes a narrowed run look
+    # identical to a full one. The sibling loki_apply_scoped_change_profile
+    # already exports the phases it changes; this one exported only its enables.
+    export LOKI_PHASE_API_TESTS LOKI_PHASE_INTEGRATION LOKI_PHASE_PERFORMANCE
+    export LOKI_PHASE_REGRESSION LOKI_PHASE_UAT LOKI_PHASE_WEB_RESEARCH
     export LOKI_COUNCIL_ENABLED LOKI_EVIDENCE_GATE LOKI_PROOF_GATE LOKI_PROOF
     export LOKI_DASHBOARD LOKI_PARALLEL_MODE LOKI_MAX_PARALLEL_AGENTS
     export LOKI_MAX_ITERATIONS LOKI_MAX_RETRIES LOKI_BASE_WAIT LOKI_MAX_WAIT

package/claude/hooks/loki-session-end.sh

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+# v7.7.18 sample Claude Code SessionEnd hook (MANUAL install only).
+#
+# Pipes the Claude Code session transcript through `loki memory ingest`
+# so the project's .loki/memory/ store accumulates real episodes from
+# every Claude Code session (not just `loki start <prd>` sessions).
+#
+# v7.7.18 council fix (Opus 2): supports BOTH (a) the documented JSON-
+# on-stdin payload format with `transcript_path` key, AND (b) the legacy
+# $CLAUDE_TRANSCRIPT_PATH env var as fallback. Whichever Claude Code
+# version is running, one of them works.
+#
+# Manual installation (recommended -- automated installer deferred to
+# v7.7.19 pending empirical schema verification):
+#   1. Add to your ~/.claude/settings.json:
+#      {
+#        "hooks": {
+#          "SessionEnd": [
+#            {
+#              "matcher": "clear",
+#              "hooks": [
+#                {
+#                  "type": "command",
+#                  "command": "/absolute/path/to/loki-session-end.sh"
+#                }
+#              ]
+#            }
+#          ]
+#        }
+#      }
+#   2. Reload Claude Code (or open a new session).
+#   3. End a session with `/clear` to trigger the hook.
+#
+# Note: SessionEnd only fires on /clear, NOT on normal exits per the
+# Claude Code documentation. To capture EVERY session, alternative
+# event types may be needed (researched in v7.7.19+).
+#
+# Escape hatches:
+#   LOKI_MEMORY_CAPTURE_DISABLED=true   # blocks ingest at the engine
+#
+# Privacy: the ingester scrubs credential keywords + high-entropy
+# token shapes (sk-, ghp_/ghs_, xox*, AIza, AKIA) before writing.
+# Path-aware scrubbing for sensitive directories added in v7.7.18.
+set -u
+
+if [ "${LOKI_MEMORY_CAPTURE_DISABLED:-}" = "true" ]; then
+    exit 0
+fi
+
+# Resolve transcript path from EITHER stdin JSON OR env var.
+TRANSCRIPT=""
+
+# 1. Try stdin JSON (documented Claude Code hook payload format).
+#    Only read stdin if it's not a TTY (i.e. there's actual data).
+if [ ! -t 0 ]; then
+    # Read up to 16KB of stdin (JSON payloads are tiny)
+    STDIN_DATA=$(head -c 16384 2>/dev/null || true)
+    if [ -n "$STDIN_DATA" ] && command -v python3 >/dev/null 2>&1; then
+        TRANSCRIPT=$(printf '%s' "$STDIN_DATA" | python3 -c "
+import json, sys
+try:
+    d = json.loads(sys.stdin.read())
+    print(d.get('transcript_path', ''), end='')
+except Exception:
+    pass
+" 2>/dev/null || true)
+    fi
+fi
+
+# 2. Fallback to env var (legacy / undocumented variant).
+if [ -z "$TRANSCRIPT" ]; then
+    TRANSCRIPT="${CLAUDE_TRANSCRIPT_PATH:-}"
+fi
+
+if [ -z "$TRANSCRIPT" ] || [ ! -f "$TRANSCRIPT" ]; then
+    # Nothing to ingest -- silent exit so we never block SessionEnd.
+    exit 0
+fi
+
+# Find the loki binary; silent skip if not installed.
+if ! command -v loki >/dev/null 2>&1; then
+    exit 0
+fi
+
+# Fire-and-forget ingest. Backgrounded so SessionEnd is not blocked.
+loki memory ingest --from-claude-transcript "$TRANSCRIPT" >/dev/null 2>&1 &
+disown 2>/dev/null || true
+
+exit 0

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.37.0"
+__version__ = "9.39.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.37.0
+**Version:** v9.39.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var _t=Object.create;var{getPrototypeOf:vt,defineProperty:jG,getOwnPropertyNames:ht}=Object;var gt=Object.prototype.hasOwnProperty;function mt($){return this[$]}var ut,dt,pt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?ut??=new WeakMap:dt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?_t(vt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of ht($))if(!gt.call(J,q))jG(J,q,{get:mt.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var ct=($)=>$;function lt($,X){this[$]=ct.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:lt.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var UR={};B1(UR,{lokiDir:()=>h0,homeLokiDir:()=>WQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as it}from"url";import{existsSync as Zq}from"fs";import{homedir as at}from"os";function ot(){let $=YR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(YR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function WQ(){return h2(at(),".loki")}var YR,L1;var k1=s(()=>{YR=LG(it(import.meta.url));L1=ot()});import{readFileSync as st}from"fs";import{resolve as nt,dirname as rt}from"path";import{fileURLToPath as tt}from"url";function j9(){if(n3!==null)return n3;let $="9.37.0";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=rt(tt(import.meta.url)),Q=AG(X);n3=st(nt(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var OR={};B1(OR,{runOrThrow:()=>Be,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>Me,commandExists:()=>g5,ShellError:()=>TG,MAX_STDOUT_BYTES:()=>MR});async function Jq($,X=MR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Be($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new TG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=Ne($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Ne($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Me($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var MR=16777216,TG;var y8=s(()=>{TG=class TG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Oe?"":$}var Oe,p0,$5,q1,D61,A1,f1,m5,r;var t7=s(()=>{Oe=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),D61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as we}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(we($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var vR={};B1(vR,{runStatus:()=>te});import{existsSync as u5,readFileSync as C9,readdirSync as ER,statSync as xR}from"fs";import{resolve as A5,basename as pe}from"path";import{homedir as ce}from"os";function kR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function SR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=kR($),Y=kR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function ie(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
+var _t=Object.create;var{getPrototypeOf:vt,defineProperty:jG,getOwnPropertyNames:ht}=Object;var gt=Object.prototype.hasOwnProperty;function mt($){return this[$]}var ut,dt,pt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?ut??=new WeakMap:dt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?_t(vt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of ht($))if(!gt.call(J,q))jG(J,q,{get:mt.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var ct=($)=>$;function lt($,X){this[$]=ct.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:lt.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var UR={};B1(UR,{lokiDir:()=>h0,homeLokiDir:()=>WQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as it}from"url";import{existsSync as Zq}from"fs";import{homedir as at}from"os";function ot(){let $=YR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(YR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function WQ(){return h2(at(),".loki")}var YR,L1;var k1=s(()=>{YR=LG(it(import.meta.url));L1=ot()});import{readFileSync as st}from"fs";import{resolve as nt,dirname as rt}from"path";import{fileURLToPath as tt}from"url";function j9(){if(n3!==null)return n3;let $="9.39.0";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=rt(tt(import.meta.url)),Q=AG(X);n3=st(nt(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var OR={};B1(OR,{runOrThrow:()=>Be,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>Me,commandExists:()=>g5,ShellError:()=>TG,MAX_STDOUT_BYTES:()=>MR});async function Jq($,X=MR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Be($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new TG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=Ne($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Ne($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Me($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var MR=16777216,TG;var y8=s(()=>{TG=class TG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Oe?"":$}var Oe,p0,$5,q1,D61,A1,f1,m5,r;var t7=s(()=>{Oe=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),D61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as we}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(we($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var vR={};B1(vR,{runStatus:()=>te});import{existsSync as u5,readFileSync as C9,readdirSync as ER,statSync as xR}from"fs";import{resolve as A5,basename as pe}from"path";import{homedir as ce}from"os";function kR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function SR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=kR($),Y=kR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function ie(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1337,4 +1337,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:z}=await Promise.resolve().then(() => (yt(),St));return z(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(bt),2}}wR();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var K61=await Z61(Bun.argv.slice(2));process.exit(K61);
 
-//# debugId=DBEFF219B28673BB40CF832D5C8A4D9F
+//# debugId=F2D05F5DF5DCE17BC281BF37D76CAB57

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.37.0'
+__version__ = '9.39.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.37.0",
+  "version": "9.39.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider, opencode).",
   "keywords": [
     "agent",
@@ -69,6 +69,7 @@
     "tools/",
     "plugins/",
     ".claude-plugin/marketplace.json",
+    "claude/hooks/",
     "autonomy/",
     "providers/",
     "vendor/autonomi-verify/",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.37.0",
+  "version": "9.39.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",