loki-mode 9.51.1 → 9.53.0

package/autonomy/run.sh

@@ -2678,7 +2678,7 @@ _advance_current_phase() {
     [ -f "$orch" ] || return 0
     # Values are passed via argv (not interpolated into the source) so a phase or
     # path containing quotes can never break or inject into the python.
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, sys
 f, phase = sys.argv[1], sys.argv[2]
 try:
@@ -4377,7 +4377,7 @@ _loki_receipt_facts() {
     local pj="$loki_dir/proofs/$rid/proof.json"
     [ -f "$pj" ] || return 0
     local headline=""
-    headline="$(python3 -c "
+    headline="$(python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, sys
 try:
     d = json.load(open(sys.argv[1]))
@@ -4999,7 +4999,7 @@ except Exception:
     _LOKI_CS_ASSUMPTIONS_HIGH="$assumptions_high" \
     _LOKI_CS_OUT_FILE="$loki_dir/state/completion.json" \
     _LOKI_CS_LAST_ERROR="$loki_dir/state/LAST_ERROR.json" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, tempfile
 out = os.environ['_LOKI_CS_OUT_FILE']
 def i(v):
@@ -5219,7 +5219,7 @@ print_completion_card() {
     # split would collapse adjacent empties). Any failure leaves the card
     # unrendered. Trailing-newline guard: NUL-free, fields are single-line.
     local _fields
-    _fields="$(python3 -c "
+    _fields="$(python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json,sys
 try:
     d=json.load(open(sys.argv[1]))
@@ -5541,7 +5541,8 @@ validate_exec_manifest_result() {
     result_file=$(mktemp "${TARGET_DIR}/.loki/.exec-manifest-result.XXXXXX") || return 1
     LOKI_RESULT_FILE="$result_file" LOKI_RESULT_STREAM="$stream_name" \
       LOKI_RESULT_BASE="$base_sha" LOKI_RESULT_BRANCH="$branch" \
-      LOKI_RESULT_REPO="$TARGET_DIR" python3 <<'PY'
+      LOKI_RESULT_REPO="$TARGET_DIR" python3 -E - <<'PY'
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os, subprocess
 paths = subprocess.check_output(
     ["git", "-C", os.environ["LOKI_RESULT_REPO"], "diff", "--name-only",
@@ -8098,7 +8099,7 @@ generate_proof_of_run() {
         ITERATION_COUNT="${ITERATION_COUNT:-0}" \
         PROVIDER_NAME="$provider" \
         PRD_PATH="${prd_path:-}" \
-        python3 "$gen" \
+        python3 -E "$gen" \
             --loki-dir "$loki_dir" \
             --loki-version "$ver" \
             --provider "$provider" \
@@ -8125,7 +8126,7 @@ generate_proof_of_run() {
     ITERATION_COUNT="${ITERATION_COUNT:-0}" \
     PROVIDER_NAME="$provider" \
     PRD_PATH="${prd_path:-}" \
-    python3 "$gen" \
+    python3 -E "$gen" \
         --loki-dir "$loki_dir" \
         --loki-version "$ver" \
         --provider "$provider" \
@@ -9132,6 +9133,21 @@ setup_agent_branch() {
 
     log_info "Branch protection enabled - creating agent branch: $branch_name (base: $cur)"
 
+    # Record the user's own untracked (not ignored) files, repo-wide,
+    # NUL-delimited and relative to the repo top, so commit_session_changes
+    # and the receipt (autonomy/lib/workspace_diff.py) leave them alone. Taken
+    # only when a branch is minted: on resume, untracked files can be the
+    # agent's own uncommitted work. .loki/ is self-ignored above.
+    local top="" snap=".loki/state/preexisting-untracked.z"
+    if top="$(git rev-parse --show-toplevel 2>/dev/null)" \
+       && git -C "$top" ls-files -z --others --exclude-standard > "$snap.tmp" 2>/dev/null \
+       && mv -f "$snap.tmp" "$snap" 2>/dev/null; then
+        :
+    else
+        rm -f "$snap.tmp" "$snap" 2>/dev/null
+        log_warn "Could not record pre-existing untracked files; the session commit may include them"
+    fi
+
     # Create and checkout the feature branch
     if ! git checkout -b "$branch_name" 2>/dev/null; then
         log_error "Failed to create agent branch: $branch_name"
@@ -9210,6 +9226,24 @@ commit_session_changes() {
         ':!*.key' ':!*.pem' ':!*.p12' ':!*.keystore' \
         ':!id_rsa*' ':!*.token' ':!credentials*' 2>/dev/null || true
 
+    # Unstage exactly the files that were untracked when the branch was minted
+    # (setup_agent_branch): they are the user's, not this session's work, and
+    # committing them here would delete them from disk on a later checkout of
+    # the base. Agent-created files stay staged. Skip an empty snapshot: an
+    # empty --pathspec-from-file resets the WHOLE index. No snapshot (older
+    # session): behave as before. If the unstage fails (git < 2.25), commit
+    # nothing rather than sweep the user's files in.
+    local preexisting="$PWD/.loki/state/preexisting-untracked.z" top=""
+    if [ -s "$preexisting" ]; then
+        if ! { top="$(git rev-parse --show-toplevel 2>/dev/null)" \
+               && git -C "$top" --literal-pathspecs reset -q \
+                      --pathspec-from-file="$preexisting" --pathspec-file-nul >/dev/null 2>&1; }; then
+            git reset -q >/dev/null 2>&1 || true
+            log_warn "Left uncommitted: could not exclude your pre-existing untracked files from the session commit (needs git 2.25+). Review and commit manually."
+            return 0
+        fi
+    fi
+
     # Nothing staged = clean no-op, never an error.
     if git diff --cached --quiet 2>/dev/null; then
         return 0
@@ -10227,7 +10261,8 @@ _loki_supervised_build_result_passes() {
     local result_file="$1"
     ! loki_is_supervised_simple_web && return 0
     [ -s "$result_file" ] || return 1
-    python3 - "$result_file" <<'PYEOF' 2>/dev/null
+    python3 -E - "$result_file" <<'PYEOF' 2>/dev/null
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json
 import sys
 
@@ -10712,7 +10747,8 @@ SAEMPTYEOF
     # not product-specific copy or design opinions.
     local _ui_contract_out="" _ui_contract_rc=0
     _ui_contract_out=$(
-        _LOKI_CHANGED_FILES="$changed_files" python3 - "${TARGET_DIR:-.}" <<'PYEOF' 2>/dev/null
+        _LOKI_CHANGED_FILES="$changed_files" python3 -E - "${TARGET_DIR:-.}" <<'PYEOF' 2>/dev/null
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import os
 import re
 import sys
@@ -10778,8 +10814,14 @@ PYEOF
             [ -f "${TARGET_DIR:-.}/$f" ] || continue
             total_checked=$((total_checked + 1))
             local _py_compile_rc=0
+            # Same check as `python3 -m py_compile` (importlib's source_to_code
+            # is compile(bytes, path, "exec", dont_inherit=True)), but it
+            # writes no __pycache__/*.pyc into the user's repo, where the
+            # session commit would pick it up. -E and the sys.path filter
+            # (D7): the repo under check must not supply modules to the gate.
             LOKI_DEADLINE_IDLE_TIMEOUT=0 _loki_with_deadline "$gate_timeout" \
-                python3 -m py_compile "${TARGET_DIR:-.}/$f" 2>&1 || _py_compile_rc=$?
+                python3 -E -c 'import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]; compile(open(sys.argv[1], "rb").read(), sys.argv[1], "exec", dont_inherit=True)' \
+                "${TARGET_DIR:-.}/$f" 2>&1 || _py_compile_rc=$?
             if [ "$_py_compile_rc" -ne 0 ]; then
                 findings=$((findings + 1))
                 if [ "$_py_compile_rc" -eq 124 ]; then
@@ -11096,7 +11138,7 @@ SECEMPTY
 
     # Run the scanner. exit 0 = no findings, 1 = findings, 2 = bad input.
     local raw rc=0
-    raw=$(python3 "$scanner" "${TARGET_DIR:-.}" --json 2>/dev/null) || rc=$?
+    raw=$(python3 -E "$scanner" "${TARGET_DIR:-.}" --json 2>/dev/null) || rc=$?
     if [ "$rc" -eq 2 ] || [ -z "$raw" ]; then
         cat > "$out_file" << 'SECEMPTY'
 {"rules_version":null,"findings":[],"summary":{"total":0,"by_severity":{}},"skipped":"scanner-error"}
@@ -11110,7 +11152,7 @@ SECEMPTY
     # It prints a final line: ACTIVE_HIGH=<n>\tACTIVE_TOTAL=<n>\tWAIVED=<n>
     # and writes the enriched receipt (findings carry a "waived" bool).
     local verdict
-    verdict=$(_SEC_RAW="$raw" _SEC_WAIVERS="$waivers_file" _SEC_OUT="$out_file" python3 -c '
+    verdict=$(_SEC_RAW="$raw" _SEC_WAIVERS="$waivers_file" _SEC_OUT="$out_file" python3 -E -c 'import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os, sys
 raw = os.environ.get("_SEC_RAW", "")
 waivers_file = os.environ.get("_SEC_WAIVERS", "")
@@ -11610,7 +11652,7 @@ measure_test_coverage() {
                   --coverage.reportsDirectory=.loki/quality/vitest-cov >/dev/null 2>&1) || true
             local f="$target_dir/.loki/quality/vitest-cov/coverage-summary.json"
             if [ -f "$f" ]; then
-                COVERAGE_PCT=$(_LOKI_COV_F="$f" python3 -c "
+                COVERAGE_PCT=$(_LOKI_COV_F="$f" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     d=json.load(open(os.environ['_LOKI_COV_F']))
@@ -11629,7 +11671,7 @@ except Exception:
                   --coverageDirectory=.loki/quality/jest-cov --passWithNoTests >/dev/null 2>&1) || true
             local f="$target_dir/.loki/quality/jest-cov/coverage-summary.json"
             if [ -f "$f" ]; then
-                COVERAGE_PCT=$(_LOKI_COV_F="$f" python3 -c "
+                COVERAGE_PCT=$(_LOKI_COV_F="$f" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     d=json.load(open(os.environ['_LOKI_COV_F']))
@@ -11649,7 +11691,7 @@ except Exception:
                 _loki_run_pytest_with_timeout "$target_dir" \
                     --cov --cov-report="json:$pyc_json" -q >/dev/null 2>&1 || true
                 if [ -f "$pyc_json" ]; then
-                    COVERAGE_PCT=$(_LOKI_COV_F="$pyc_json" python3 -c "
+                    COVERAGE_PCT=$(_LOKI_COV_F="$pyc_json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     d=json.load(open(os.environ['_LOKI_COV_F']))
@@ -11689,7 +11731,7 @@ except Exception:
                 local out
                 out=$(cd "$target_dir" && timeout "$gate_timeout" cargo llvm-cov --json 2>/dev/null) || true
                 if [ -n "$out" ]; then
-                    COVERAGE_PCT=$(_LOKI_COV_JSON="$out" python3 -c "
+                    COVERAGE_PCT=$(_LOKI_COV_JSON="$out" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     d=json.loads(os.environ['_LOKI_COV_JSON'])
@@ -12412,7 +12454,7 @@ TREOF
         local cov_below=false
         if [ "$COVERAGE_MEASURED" = "true" ] && [ -n "$COVERAGE_PCT" ]; then
             # Float-safe compare via python3 (pct may be e.g. 87.5).
-            if _LOKI_COV_PCT="$COVERAGE_PCT" _LOKI_COV_MIN="$min_coverage" python3 -c "
+            if _LOKI_COV_PCT="$COVERAGE_PCT" _LOKI_COV_MIN="$min_coverage" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import os, sys
 try:
     pct=float(os.environ['_LOKI_COV_PCT']); mn=float(os.environ['_LOKI_COV_MIN'])
@@ -12437,7 +12479,7 @@ sys.exit(0 if pct < mn else 1)
         _LOKI_COV_BLOCKED="$coverage_block" \
         _LOKI_COV_RUNNER="$test_runner" \
         _LOKI_COV_OUT="$quality_dir/coverage.json" \
-        python3 -c "
+        python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, tempfile
 out=os.environ['_LOKI_COV_OUT']
 measured = os.environ.get('_LOKI_COV_MEASURED','false') == 'true'
@@ -12498,7 +12540,7 @@ os.replace(tmp, out)
         _LOKI_COV_BLOCKED="false" \
         _LOKI_COV_RUNNER="$test_runner" \
         _LOKI_COV_OUT="$quality_dir/coverage.json" \
-        python3 -c "
+        python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, tempfile
 out=os.environ['_LOKI_COV_OUT']
 measured = os.environ.get('_LOKI_COV_MEASURED','false') == 'true'
@@ -12767,7 +12809,7 @@ run_doc_quality_gate() {
     local manifest="$project_dir/.loki/docs/docs-manifest.json"
     if [ -f "$manifest" ]; then
         local doc_sha
-        doc_sha=$(python3 -c "import json; print(json.load(open('$manifest')).get('git_sha', ''))" 2>/dev/null)
+        doc_sha=$(python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json; print(json.load(open('$manifest')).get('git_sha', ''))" 2>/dev/null)
         if [ -n "$doc_sha" ]; then
             local behind
             behind=$(git -C "$project_dir" rev-list --count "$doc_sha..HEAD" 2>/dev/null || echo "0")
@@ -13198,7 +13240,7 @@ enforce_lsp_diagnostics() {
     fi
 
     if [ -f "$lsp_file" ]; then
-        verdict=$(_LOKI_LSP_FILE="$lsp_file" python3 -c '
+        verdict=$(_LOKI_LSP_FILE="$lsp_file" python3 -E -c 'import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os, sys
 try:
     with open(os.environ["_LOKI_LSP_FILE"], encoding="utf-8") as handle:
@@ -13537,7 +13579,8 @@ council_verdicts_to_txt_files() {
     local out_dir_env="$review_dir"
     export LOKI_COUNCIL_OUT_DIR="$out_dir_env"
     export LOKI_COUNCIL_VERDICTS_JSON="$verdicts_json"
-    python3 << 'COUNCIL_WRITE'
+    python3 -E - << 'COUNCIL_WRITE'
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json
 import os
 import re
@@ -13626,6 +13669,9 @@ _run_managed_review_council() {
 
     local result_json
     result_json=$(python3 << 'MANAGED_REVIEW' 2>&1
+# Drops the cwd (the agent's repo) from sys.path. No -E here: the
+# LOKI_MANAGED_REVIEW_FAKE_MODULE test hook below is found through PYTHONPATH.
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json
 import os
 import sys
@@ -13724,7 +13770,7 @@ MANAGED_REVIEW
     fi
 
     local status
-    status=$(printf '%s' "$result_json" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print(d.get('status',''))" 2>/dev/null || echo "")
+    status=$(printf '%s' "$result_json" | python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,sys; d=json.loads(sys.stdin.read() or '{}'); print(d.get('status',''))" 2>/dev/null || echo "")
 
     if [ "$status" != "ok" ]; then
         local reason
@@ -16384,7 +16430,8 @@ REVIEW_WAVE_TIMING
     export LOKI_REVIEW_AGG_QSCORE="$quality_score"
     export LOKI_REVIEW_AGG_QMED="$nonblocking_medium"
     export LOKI_REVIEW_AGG_QLOW="$nonblocking_low"
-    python3 << 'AGG_SCRIPT'
+    python3 -E - << 'AGG_SCRIPT'
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 result = {
     "review_id": os.environ["LOKI_REVIEW_AGG_ID"],
@@ -16527,7 +16574,8 @@ AGG_SCRIPT
 
         _LOKI_DA_AGG_FILE="$review_dir/$review_id/aggregate.json" \
             _LOKI_DA_STATUS="$da_status" _LOKI_DA_RC="$da_dispatch_rc" \
-            _LOKI_DA_SPECULATIVE="$da_speculative" python3 <<'DA_AGG_PATCH' 2>/dev/null || true
+            _LOKI_DA_SPECULATIVE="$da_speculative" python3 -E - <<'DA_AGG_PATCH' 2>/dev/null || true
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json
 import os
 
@@ -17895,7 +17943,7 @@ is_completed() {
     # Check orchestrator state
     if [ -f ".loki/state/orchestrator.json" ]; then
         if command -v python3 &> /dev/null; then
-            local phase=$(python3 -c "import json; print(json.load(open('.loki/state/orchestrator.json')).get('currentPhase', ''))" 2>/dev/null || echo "")
+            local phase=$(python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json; print(json.load(open('.loki/state/orchestrator.json')).get('currentPhase', ''))" 2>/dev/null || echo "")
             # Accept various completion states
             if [ "$phase" = "COMPLETED" ] || [ "$phase" = "complete" ] || [ "$phase" = "finalized" ] || [ "$phase" = "growth-loop" ]; then
                 return 0
@@ -21909,7 +21957,8 @@ _loki_supervised_completion_gates_pass() {
     local test_iteration="$quality_dir/.test-results.iter"
     if [ ! -s "$test_results" ] || [ ! -s "$test_iteration" ] \
        || [ "$(tr -d '[:space:]' < "$test_iteration" 2>/dev/null)" != "${ITERATION_COUNT:-0}" ] \
-       || ! python3 - "$test_results" <<'PYEOF' 2>/dev/null
+       || ! python3 -E - "$test_results" <<'PYEOF' 2>/dev/null
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json
 import sys
 
@@ -27102,7 +27151,7 @@ main() {
     local _terminal_status=""
     local _terminal_state_file
     _terminal_state_file="$(_loki_state_file)"
-    _terminal_status=$(LOKI_STATE_FILE="$_terminal_state_file" python3 -c "import json, os; print(json.load(open(os.environ['LOKI_STATE_FILE'])).get('status',''))" 2>/dev/null || true)
+    _terminal_status=$(LOKI_STATE_FILE="$_terminal_state_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(json.load(open(os.environ['LOKI_STATE_FILE'])).get('status',''))" 2>/dev/null || true)
     case "$_terminal_status" in
         deterministic_gates_passed|council_approved|council_force_approved|completion_promise_fulfilled|reuse_already_satisfied)
             if [ "$result" = "0" ]; then
@@ -27163,7 +27212,7 @@ main() {
     # Refresh its durable files against the final HEAD without notifying twice.
     local _completion_file="${TARGET_DIR:-.}/.loki/state/completion.json"
     local _completion_outcome=""
-    _completion_outcome=$(LOKI_COMPLETION_FILE="$_completion_file" python3 -c '
+    _completion_outcome=$(LOKI_COMPLETION_FILE="$_completion_file" python3 -E -c 'import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 try:
     value = json.load(open(os.environ["LOKI_COMPLETION_FILE"], encoding="utf-8")).get("outcome", "")
@@ -27288,7 +27337,7 @@ except Exception:
     if [ "${LOKI_DURABLE_STATE:-0}" = "1" ]; then
         local _final_status _final_state_file
         _final_state_file="$(_loki_state_file)"
-        _final_status=$(LOKI_STATE_FILE="$_final_state_file" python3 -c "import json, os; print(json.load(open(os.environ['LOKI_STATE_FILE'])).get('status','unknown'))" 2>/dev/null || echo "unknown")
+        _final_status=$(LOKI_STATE_FILE="$_final_state_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(json.load(open(os.environ['LOKI_STATE_FILE'])).get('status','unknown'))" 2>/dev/null || echo "unknown")
         case "$_final_status" in
             council_approved|council_force_approved|deterministic_gates_passed|completion_promise_fulfilled|paused|interrupted|stopped)
                 result=0 ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.51.1"
+__version__ = "9.53.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.51.1
+**Version:** v9.53.0
 
 ---
 
@@ -443,7 +443,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:8.0.0 start ./my-spec.md
+  asklokesh/loki-mode:latest start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)