loki-mode 9.45.0 → 9.47.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.45.0
+# Loki Mode v9.47.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.45.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.47.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.45.0
+9.47.0

package/autonomy/run.sh

@@ -6707,19 +6707,48 @@ copy_skill_files() {
     # Also copy SKILL.md to .loki/ and rewrite paths for workspace access
     if [ -f "$PROJECT_DIR/SKILL.md" ]; then
         # Rewrite skill paths from skills/ to .loki/skills/
-        sed -e 's|skills/00-index\.md|.loki/skills/00-index.md|g' \
-            -e 's|skills/model-selection\.md|.loki/skills/model-selection.md|g' \
-            -e 's|skills/quality-gates\.md|.loki/skills/quality-gates.md|g' \
-            -e 's|skills/testing\.md|.loki/skills/testing.md|g' \
-            -e 's|skills/troubleshooting\.md|.loki/skills/troubleshooting.md|g' \
-            -e 's|skills/production\.md|.loki/skills/production.md|g' \
-            -e 's|skills/parallel-workflows\.md|.loki/skills/parallel-workflows.md|g' \
-            -e 's|skills/providers\.md|.loki/skills/providers.md|g' \
-            -e 's|Read skills/|Read .loki/skills/|g' \
+        # ONE regex, not a hardcoded filename list. The old form named 8 skills
+        # explicitly plus a `Read skills/` catchall, so any NEW skill silently
+        # kept an unrewritten path, and three bare paths in SKILL.md survived
+        # because they say "See", not "Read". The negated class avoids rewriting
+        # an already-correct `.loki/skills/`.
+        # Sentinel-protect, rewrite, restore. This is PORTABLE and idempotent.
+        #
+        # The old form named 8 skills explicitly plus a `Read skills/` catchall,
+        # so any NEW skill silently kept an unrewritten path, and bare paths
+        # introduced by "See skills/..." survived because they are not "Read".
+        # A `sed -E 's|(^|[^.])skills/|...'` one-liner looks tidier but BSD sed
+        # rejects it ("RE error: parentheses not balanced"), which would fail
+        # SILENTLY on macOS and leave every path unrewritten -- verified by
+        # running it. Protecting the already-correct prefixes first is what lets
+        # the bare rewrite be unconditional.
+        sed -e 's|\.loki/skills/|@@LOKI_S@@|g' \
+            -e 's|\.loki/references/|@@LOKI_R@@|g' \
+            -e 's|skills/|.loki/skills/|g' \
+            -e 's|references/|.loki/references/|g' \
+            -e 's|@@LOKI_S@@|.loki/skills/|g' \
+            -e 's|@@LOKI_R@@|.loki/references/|g' \
             "$PROJECT_DIR/SKILL.md" > ".loki/SKILL.md"
     fi
 
-    log_info "Copied $copied skill files to .loki/skills/"
+    # ALSO copy references/. The copied skills cite references/*.md 21 times
+    # across 8 files, every one of which existed in the repo and was NEVER
+    # copied, so the agent followed 21 dead paths and silently lost the guidance
+    # this function believes it shipped. Copying skills without their references
+    # is shipping half a manual.
+    local refs_src="$PROJECT_DIR/references"
+    local refs_dst=".loki/references"
+    local refs_copied=0
+    if [ -d "$refs_src" ]; then
+        mkdir -p "$refs_dst"
+        for ref_file in "$refs_src"/*.md; do
+            if [ -f "$ref_file" ]; then
+                cp "$ref_file" "$refs_dst/" && refs_copied=$((refs_copied + 1))
+            fi
+        done
+    fi
+
+    log_info "Copied $copied skill files to .loki/skills/ and $refs_copied references to .loki/references/"
 }
 
 #===============================================================================
@@ -19411,6 +19440,7 @@ load_queue_tasks() {
     # Handles both formats, includes description, acceptance criteria, and user stories
     local extract_script='
 import json
+import os
 import sys
 
 def extract_tasks(filepath, prefix):
@@ -19422,7 +19452,23 @@ def extract_tasks(filepath, prefix):
             return ""
 
         results = []
-        for i, task in enumerate(tasks[:3]):  # Limit to first 3 tasks
+        # BOUND BY CHARACTERS, NOT BY AN ARBITRARY TASK COUNT.
+        #
+        # This was `tasks[:3]`, applied SEPARATELY to in-progress.json and
+        # pending.json. A release doc decomposed into 5 tasks silently lost 2
+        # from each file: the agent received a plan it was never told was
+        # truncated, and the founder-facing case ("hand it a release doc") was
+        # quietly capped at 3.
+        #
+        # A count is the wrong bound anyway: one rich PRD task with a 300-char
+        # description plus acceptance criteria can outweigh ten legacy one-liners.
+        # The real constraint is prompt budget, so bound on that and say so when
+        # the budget is hit, rather than truncating in silence.
+        _budget = int(os.environ.get("LOKI_QUEUE_TASK_CHARS", "6000") or "6000")
+        _max_tasks = int(os.environ.get("LOKI_QUEUE_MAX_TASKS", "25") or "25")
+        _used = 0
+        _shown = 0
+        for i, task in enumerate(tasks[:_max_tasks]):
             if not isinstance(task, dict):
                 continue
             task_id = task.get("id") or "unknown"
@@ -19446,7 +19492,11 @@ def extract_tasks(filepath, prefix):
                 story = task.get("user_story", "")
                 if story:
                     lines.append(f"  User Story: {story}")
-                results.append("\n".join(lines))
+                _entry = "\n".join(lines)
+                if _used + len(_entry) > _budget and _shown > 0:
+                    break
+                results.append(_entry)
+                _used += len(_entry); _shown += 1
             else:
                 # Legacy format: extract action from payload
                 task_type = task.get("type") or "unknown"
@@ -19462,8 +19512,21 @@ def extract_tasks(filepath, prefix):
                 action = str(action).replace("\n", " ").replace("\r", "")[:500]
                 if len(str(action)) > 500:
                     action += "..."
-                results.append(f"{prefix}[{i+1}] id={task_id} type={task_type}: {action}")
-
+                _entry = f"{prefix}[{i+1}] id={task_id} type={task_type}: {action}"
+                if _used + len(_entry) > _budget and _shown > 0:
+                    break
+                results.append(_entry)
+                _used += len(_entry); _shown += 1
+
+        # Disclose truncation instead of hiding it. An agent told it has the
+        # whole plan when it does not will confidently build the wrong subset.
+        _remaining = len(tasks) - _shown
+        if _remaining > 0:
+            results.append(
+                "[... %d more task(s) not shown: prompt budget %d chars reached. "
+                "Raise LOKI_QUEUE_TASK_CHARS or LOKI_QUEUE_MAX_TASKS to include them.]"
+                % (_remaining, _budget)
+            )
         return "\n".join(results)
     except:
         return ""

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.45.0"
+__version__ = "9.47.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.45.0
+**Version:** v9.47.0
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var _t=Object.create;var{getPrototypeOf:vt,defineProperty:jG,getOwnPropertyNames:ht}=Object;var gt=Object.prototype.hasOwnProperty;function mt($){return this[$]}var ut,dt,pt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?ut??=new WeakMap:dt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?_t(vt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of ht($))if(!gt.call(J,q))jG(J,q,{get:mt.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var ct=($)=>$;function lt($,X){this[$]=ct.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:lt.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var UR={};B1(UR,{lokiDir:()=>h0,homeLokiDir:()=>WQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as it}from"url";import{existsSync as Zq}from"fs";import{homedir as at}from"os";function ot(){let $=YR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(YR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function WQ(){return h2(at(),".loki")}var YR,L1;var k1=s(()=>{YR=LG(it(import.meta.url));L1=ot()});import{readFileSync as st}from"fs";import{resolve as nt,dirname as rt}from"path";import{fileURLToPath as tt}from"url";function j9(){if(n3!==null)return n3;let $="9.45.0";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=rt(tt(import.meta.url)),Q=AG(X);n3=st(nt(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var OR={};B1(OR,{runOrThrow:()=>Be,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>Me,commandExists:()=>g5,ShellError:()=>TG,MAX_STDOUT_BYTES:()=>MR});async function Jq($,X=MR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Be($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new TG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=Ne($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Ne($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Me($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var MR=16777216,TG;var y8=s(()=>{TG=class TG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Oe?"":$}var Oe,p0,$5,q1,D61,A1,f1,m5,r;var t7=s(()=>{Oe=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),D61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as we}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(we($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var vR={};B1(vR,{runStatus:()=>te});import{existsSync as u5,readFileSync as C9,readdirSync as ER,statSync as xR}from"fs";import{resolve as A5,basename as pe}from"path";import{homedir as ce}from"os";function kR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function SR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=kR($),Y=kR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function ie(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
+var _t=Object.create;var{getPrototypeOf:vt,defineProperty:jG,getOwnPropertyNames:ht}=Object;var gt=Object.prototype.hasOwnProperty;function mt($){return this[$]}var ut,dt,pt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?ut??=new WeakMap:dt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?_t(vt($)):{};let J=X||!$||!$.__esModule?jG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of ht($))if(!gt.call(J,q))jG(J,q,{get:mt.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var ct=($)=>$;function lt($,X){this[$]=ct.bind(null,X)}var B1=($,X)=>{for(var Q in X)jG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:lt.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var UR={};B1(UR,{lokiDir:()=>h0,homeLokiDir:()=>WQ,findRepoRootForVersion:()=>AG,REPO_ROOT:()=>L1});import{resolve as h2,dirname as LG}from"path";import{fileURLToPath as it}from"url";import{existsSync as Zq}from"fs";import{homedir as at}from"os";function ot(){let $=YR;for(let X=0;X<6;X++){if(Zq(h2($,"VERSION"))&&Zq(h2($,"autonomy/run.sh")))return $;let Q=LG($);if(Q===$)break;$=Q}return h2(YR,"..","..","..")}function AG($){let X=$;for(let Q=0;Q<6;Q++){if(Zq(h2(X,"VERSION"))&&Zq(h2(X,"autonomy/run.sh")))return X;let z=LG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function WQ(){return h2(at(),".loki")}var YR,L1;var k1=s(()=>{YR=LG(it(import.meta.url));L1=ot()});import{readFileSync as st}from"fs";import{resolve as nt,dirname as rt}from"path";import{fileURLToPath as tt}from"url";function j9(){if(n3!==null)return n3;let $="9.47.0";if(typeof $==="string"&&$.length>0)return n3=$,n3;try{let X=rt(tt(import.meta.url)),Q=AG(X);n3=st(nt(Q,"VERSION"),"utf-8").trim()}catch{n3="unknown"}return n3}var n3=null;var Kq=s(()=>{k1()});var OR={};B1(OR,{runOrThrow:()=>Be,run:()=>$1,readStreamCapped:()=>Jq,commandVersion:()=>Me,commandExists:()=>g5,ShellError:()=>TG,MAX_STDOUT_BYTES:()=>MR});async function Jq($,X=MR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function $1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([Jq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Be($,X={}){let Q=await $1($,X);if(Q.exitCode!==0)throw new TG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=Ne($),Q=await $1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function Ne($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Me($,X="--version"){if(!await g5($))return null;let z=await $1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var MR=16777216,TG;var y8=s(()=>{TG=class TG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Oe?"":$}var Oe,p0,$5,q1,D61,A1,f1,m5,r;var t7=s(()=>{Oe=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),q1=g2("\x1B[1;33m"),D61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),r=g2("\x1B[0m")});import{existsSync as we}from"fs";async function Z2(){if(GQ!==void 0)return GQ;let $="/opt/homebrew/bin/python3.12";if(we($))return GQ=$,$;let X=await g5("python3.12");if(X)return GQ=X,X;let Q=await g5("python3");return GQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return $1([Q,"-c",$],X)}var GQ;var m2=s(()=>{y8()});var vR={};B1(vR,{runStatus:()=>te});import{existsSync as u5,readFileSync as C9,readdirSync as ER,statSync as xR}from"fs";import{resolve as A5,basename as pe}from"path";import{homedir as ce}from"os";function kR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function SR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Vq/X);if(Z>Vq)Z=Vq;let K=Vq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=q1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=kR($),Y=kR(X);return`  ${f1}${Q}${r} ${J}[${q}]${r} ${z}% (${V} / ${Y})`}async function ie(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${r}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1337,4 +1337,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:z}=await Promise.resolve().then(() => (yt(),St));return z(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(bt),2}}wR();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var K61=await Z61(Bun.argv.slice(2));process.exit(K61);
 
-//# debugId=1DD437C40F72C7156A78843ECF29A101
+//# debugId=F841E90B748FCDE3BB7AD1804EE3AED0

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.45.0'
+__version__ = '9.47.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.45.0",
+  "version": "9.47.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider, opencode).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.45.0",
+  "version": "9.47.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/providers/claude.sh

@@ -204,6 +204,35 @@ _loki_build_claude_auto_flags() {
         _LOKI_CLAUDE_AUTO_FLAGS+=("--exclude-dynamic-system-prompt-sections")
     fi
 
+    # --add-dir: grant the agent READ access to sibling repositories.
+    #
+    # THE DEFECT THIS CLOSES: an agent asked to change a shared type in
+    # ../service-b could not read it, did not error, and GUESSED. The user got a
+    # change that does not compile with no signal why. Silent wrong output is
+    # the worst failure mode this product has.
+    #
+    # LOKI_ADD_DIRS is a colon-separated list, matching PATH convention so an
+    # operator does not have to learn a new separator. Each entry is passed as
+    # its own `--add-dir <path>` pair.
+    #
+    # Only EXISTING directories are passed. A typo would otherwise abort the CLI
+    # and take the whole run with it, turning a convenience into an outage.
+    # Skipped entries are announced, because silently dropping a directory the
+    # operator asked for is the same silent-wrong-output defect in a new place.
+    if [ -n "${LOKI_ADD_DIRS:-}" ] && loki_claude_flag_supported "--add-dir"; then
+        local _ad_old_ifs="$IFS"
+        IFS=':'
+        for _ad in ${LOKI_ADD_DIRS}; do
+            [ -n "$_ad" ] || continue
+            if [ -d "$_ad" ]; then
+                _LOKI_CLAUDE_AUTO_FLAGS+=("--add-dir" "$_ad")
+            else
+                printf 'loki: LOKI_ADD_DIRS entry is not a directory, skipping: %s\n' "$_ad" >&2
+            fi
+        done
+        IFS="$_ad_old_ifs"
+    fi
+
     # --mcp-config (Phase D, v7.5.22). Variadic flag (Commander `<configs...>`):
     # Claude expects SEPARATE argv elements per path, not one space-joined
     # value. Per Dev-C parity concern -- spread each path as its own argv