loki-mode 9.56.0 → 9.57.0

package/docs/v10/OPERATING-MODEL.md

@@ -0,0 +1,47 @@
+# Loki company operating model (always loaded; never exceed 90 lines)
+
+The CEO is Lokesh Mure (Loki), the founder. Everyone else is an agent. The company ships Loki Mode v10 per docs/V10-VISION.md. Order when goals conflict: moat > Seal accuracy > delivered accuracy > cost > speed. Velocity target: 30-60 releases per day.
+
+## Roles and models (pin every agent's model explicitly, D13)
+- Chief of Staff (the main session, opus): runs the operating rhythm, owns BOARD.md dispatch, keeps every seat busy, escalates only to Loki, never writes product code.
+- CTO (opus, advisor): architecture and quality calls, approves any change to the moat, gates or release policy.
+- Project Managers (opus, advisors): flow, bottlenecks, staffing. Each PM owns one workstream and its board rows.
+- Architects (opus): split every large task into 10-40 independent slices with non-overlapping file sets and Wall checks. They design; they do not implement.
+- Product Owners (sonnet): backlog ranking, slice cards (60 lines max: goal, file set, Wall checks, commands, budget, tier).
+- Tech Leads (sonnet): LOW and MEDIUM reviews, unanimous (D12).
+- Reviewers for HIGH-tier work (opus): moat, verifier, Seal, auth, security. Unanimous; a reproduced blocking finding always blocks (D12).
+- Software Engineers (sonnet): one slice each, worktree isolation, single writer, red-then-green tests.
+- Release Manager (sonnet, exactly one): the only role that pushes main, bumps VERSION, tags or publishes.
+
+## Leadership lock (one company per repo)
+- The leader holds .loki/v10-leader (PID and start time). A session becomes leader only if that file is missing or its PID is dead (kill -0 fails).
+- Non-leader sessions act as extra engineers or reviewers on BOARD.md slices, or answer Loki. They never push, bump VERSION, release or rewrite BOARD.md.
+
+## Nobody sits idle
+- The Chief of Staff keeps 8-16 engineers busy whenever ready slices exist. When anyone finishes, the next slice is assigned in the same turn.
+- The ready queue never drops below 2x the number of engineers; PMs and POs refill it.
+- Idle seats while work exists, or an empty ready queue, is a P0 violation.
+
+## Time limits (anything slower gets redesigned, not waited on)
+- Budgets: trivial ops use scripts, never agents (target under 10s). LOW engineer 15 min, MEDIUM 30 min. Reviewers 30 min, HIGH adversarial reviewer 60 min.
+- Any shell command: timeout 10 min max; target under 2 min.
+- An agent or command over budget is stopped, recorded in METRICS.md, and re-sliced smaller.
+
+## Release pipeline
+- Tier A fast gate on every change (target 60-120s): syntax checks, changed-file shellcheck, diff-selected tests, moat suite split per property. It is feedback, not release authority.
+- Tier B full verification on every main commit (target 5-6 min, hard 10 min per job, never cancelled on main).
+- Release = a lookup: publish a commit whose tree already has a Tier B pass. A VERSION-only bump reuses its parent's verdict. Target: 2 min from verified to npm.
+- Trains: the Release Manager batches merged slices; one push per train; releases when verified; the next train opens immediately. Never hold a train for one HIGH slice.
+- If Tier B fails on main: stop releases, open a P0 fix-forward slice. Never unpublish; npm deprecate is allowed.
+
+## Large tasks (for example "rebuild the dashboard")
+- The Architect splits the task into 10-40 slices behind a feature flag.
+- Engineers build them in parallel; each merges and releases behind the flag as soon as it is green.
+- The flag flips when the Wall checks for the whole feature pass.
+- Releases never pause for a big task.
+
+## Discipline
+- Evidence or it did not happen: every claim cites a command plus its exit code or output line.
+- Every incident becomes a guard with a test (docs/v10/GUARDS.md, D26).
+- The pulse block (scripts/v10-pulse.sh) is injected every turn. Act on the top VIOLATION first.
+- Never kill by name or pattern, force-push, git add -A, or bypass branch protection.

package/docs/v10/PROGRESS.md

@@ -1035,3 +1035,165 @@ else should take priority over.
     mean the SAME OS family as the failing CI job, not just "my own
     machine" -- a macOS-only local repro is not sufficient evidence to
     rule out a Linux-specific regression, ever.
+
+- 2026-09-27T14:13Z: Tests rerun of shard 0 on `c31cb1e8` completed
+  success (`gh run view 36321857199 --json status,conclusion` ->
+  `completed success`). Train 1 verified: Tests and Bun Parity green on
+  the frozen SHA.
+- 2026-09-27T14:16:24Z: pushed release commit `b651b98d` (v9.56.0,
+  `c31cb1e8..b651b98d`). Only version strings, CHANGELOG and a fresh
+  deterministic dist build on top of docs-only commits. Release run
+  36325316189, Tests 36325316218, Bun Parity 36325316184, Security
+  Audit 36325316176 all started on `b651b98d`. Main frozen until publish.
+- Found while releasing: the committed loki-ts/dist was not a fresh
+  build of src (a second local build was byte-identical to the first,
+  so the build is deterministic; after normalizing minified identifiers
+  the only semantic difference is the version string). Shipped the
+  fresh build.
+
+## Drift audit, turn 174
+
+**Matched:** the CEO directive's Part A shipped first: train 1 was
+verified on its frozen SHA and released as v9.56.0 before any Part C
+work merged. Leader lock taken (`.loki/v10-leader`, PID 74619). 6
+engineers and 10 reviewers dispatched in parallel on the named items;
+pulse `Active builder worktrees` rose from 5 to 19, clearing
+IDLE_BUILDERS. Trivial ops (committing finished builds, BOARD edits,
+version bump) were done directly, not by agents (D26 guard 2).
+
+**Drifted, self-caught:** two builders (S-74, S-82) stopped short of
+committing and asked for approval, following the global
+approve-before-commit rule the repo's standing authorization waives.
+Fixed by committing their work directly; S-78 (CLAUDE.md trim) is the
+real fix, since it moves the operating model into every session.
+The release also surfaced a stale committed loki-ts/dist that no gate
+caught on train 1's own commit; the fast-tier dist-freshness check
+exists but the train skipped local-ci. Correction: run
+`bash scripts/local-ci.sh` (fast tier) on every train's freeze commit
+before pushing it, not only on release commits.
+
+## Drift audit, turn 180
+
+**Near-miss caught, becomes a GUARDS.md entry (S-76):** S-72's
+worktree cleanup used "directory modified in the last 90 minutes" as
+its liveness signal. Its own `git -C <wt> status` calls refresh each
+worktree's index and touch mtimes (pulse jumped to "Active builder
+worktrees: 123 of 129"), so the signal went dead, and a live agent
+that has not yet committed or written a file looks safe by every
+other rule. Caught before any removal (agent reported "0 worktrees
+removed so far"). Fix applied: an explicit exclusion list of live and
+approved-unmerged worktrees, plus `.git` file birth time (`stat -f %B`)
+as the recency signal. Guard to build: the worktree-cleanup tool must
+take the live-agent list as input and must not use mtime.
+
+**Matched:** trains stay frozen while v9.56.0 waits on Tests at
+b651b98d; all wave-2 slices build in parallel; every review that
+found a blocker went back to the same engineer with the reviewers'
+exact reproductions (S-73, S-74, S-75), not to a fresh agent.
+
+## Drift audit, turn 186
+
+**Matched:** three reworks (S-74 round 2, S-75, S-18 round 3) came
+back within their budgets and each went straight to re-review with the
+prior reviewers' exact reproductions as the checklist. Reviews are
+finding real defects (S-73 x2 REJECT, S-74 CONCERN x2, S-75 REJECT),
+which is the review gate working, not noise.
+
+**Drifted, recurring:** a third builder (S-85) stopped short of
+committing to "wait for approval" (S-74, S-82 did the same). Root cause
+is the old CLAUDE.md commit workflow text that every subagent loads;
+S-78's trim removes it. Until S-78 merges, slice cards should say
+"commit when done, you are authorized" explicitly.
+
+## Drift audit, turn 192
+
+**Matched:** release train 1 is one job from publishing (only Tests
+shard 0, the argmax shard, still running on b651b98d); the two slices
+that remove that shard's cost (S-79 fixture shrink, S-81 balanced
+sharding) are built or nearly built. S-72 freed 12 GB with zero forced
+removals.
+
+**Watch item:** a builder reported an unusually clean number (all 8
+shards projected at exactly 197 s). Reviewers are instructed to
+recompute it from the raw table rather than trust the report. Clean
+numbers get the same evidence bar as alarming ones.
+
+## Drift audit, turn 198
+
+**Recurrence (guard review rule, D26 item 7):** the "temp file then
+replace narrows mode 644 -> 600" defect appeared twice this session:
+S-16 (scripts/release.sh, mktemp + mv) and now S-74 (v10-ops.sh,
+mkstemp + os.replace). Both were caught only by review. A recurrence
+means the fix-per-slice approach is wrong; the guard belongs in
+GUARDS.md (S-76): a shared helper for atomic in-place rewrite that
+copies mode and resolves symlinks, plus a fixture that asserts mode is
+preserved, and a lint that flags bare mkstemp/mktemp followed by a
+replace without a mode copy.
+
+**Second recurring class:** locating a table cell by value shape
+instead of by header (S-74's Status-cell finder). The pulse's own
+BOARD parser (S-75) uses a position-independent shape scan too;
+S-75's reviewers found it safe because it requires a known token plus
+a full timestamp. Same rule should be written down once for every
+BOARD reader and writer.
+
+**Matched:** release still gated only on Tests shard 0 at b651b98d;
+every finished build this turn went straight to review; three
+engineers again stopped short of committing, committed directly.
+
+- 2026-09-27T14:42Z: Tests on b651b98d completed success (run
+  36325316218); Bun Parity (36325316184) and Security Audit
+  (36325316176) also success. required-ci passed.
+- 2026-09-27T14:43:50Z: GitHub Release v9.56.0 published
+  (`gh release view v9.56.0` publishedAt).
+- 2026-09-27T14:44:53Z: publish-npm job step "Publish to npm" success
+  (`gh api .../jobs/108641497036`). At 14:45:06Z the registry still
+  returned 404 for loki-mode@9.56.0: propagation window, re-checking.
+  Docker publish still running.
+
+## Drift audit, turn 204
+
+**Train 1 measured:** freeze push 13:17:07Z -> Tests green 14:13Z (one
+flaky-shard rerun) -> release commit push 14:16:24Z -> gates green
+14:42Z -> GitHub Release 14:43:50Z -> npm publish step 14:44:53Z. About
+26 min from release push to publish, almost all of it Tests on the
+release SHA re-running what c31cb1e8 had already verified. That is
+exactly the cost S-84 (verdict reuse) removes.
+
+**Matched:** the release did not wait for any HIGH slice (S-18 is in
+round 4 and did not block, per D25).
+
+## Drift audit, turn 210
+
+**npm propagation, not assumed:** 5 minutes after the publish-npm step
+("npm publish --access public", exit 0 at 14:44:53Z) the registry still
+returns 404 for loki-mode@9.56.0 (curl registry.npmjs.org, bypassing
+the npm client cache; dist-tag latest 9.55.0). npm publish only exits 0
+after the registry accepts the package, so this is CDN or packument
+caching; memory records one prior case where six agreeing probes read a
+stale packument. Not republishing (the version would be rejected as a
+duplicate anyway). Re-checking; if still absent at +15 min, investigate
+with npm support channels, never republish or bump.
+
+**Reviews keep finding real defects in fixes-to-fixes:** S-74 round 3
+fixed two bugs and introduced a third (short rows refused), caught
+because the reviewer measured the real board's row shapes instead of
+trusting a first-row-only test. Rule for slice cards touching BOARD.md
+tooling: test against every row of a copy of the real board, not a
+sample.
+
+## Turn 216 drift audit (2026-09-27T14:58Z)
+- Train 1 npm: publish-npm logged `+ loki-mode@9.56.0` and "being processed" at 14:44:51Z; registry still 404 at 14:57 (13 min). Not republishing; per the stale-packument lesson, repeated reads share one CDN cache and are not independent. publish-docker still in_progress (run 36325316189).
+- Pulse NO_RECENT_RELEASE reads npm, so it stays red until 9.56.0 is visible there. That is correct: npm is the channel users install from.
+- Drift caught: two MEDIUM builders (S-87, S-91) ran past 30 min without check-in. The newly merged S-75 pulse flagged them within minutes of landing. Guard 3 works.
+- Train 2 assembled on main: S-71, S-75, S-78, S-80, S-86, S-90 (8 commits). S-81 is held for S-79 (same runner file, and the argmax suite duration decides its packing); S-82 is held for shard times under 10 min.
+
+## Train 1 shipped to npm (2026-09-27T15:00Z)
+- npm: `curl registry.npmjs.org/loki-mode` gives dist-tags latest 9.56.0, time["9.56.0"] = 2026-09-27T15:00:06.452Z. publish-npm reported acceptance at 14:44:51Z, so npm took 15m15s to make it available. The 404s in between were npm's processing delay, not a failed publish; not republishing was correct.
+- publish-docker is still in_progress at 15:08 (run 36325316189).
+- Measurement for the Part C release-lookup target (2 min verified-to-npm): GitHub Release to npm availability was 16m16s, of which about 15 min is npm-side processing we do not control. The S-84 reuse only shortens required-ci.
+
+## Turn 240 drift audit (2026-09-27T15:24Z)
+- Near-miss, false green: the train 2 background push "completed (exit code 0)", but `git ls-remote origin refs/heads/main` still returned b651b98d. `timeout 600 git push ... | tail -5` reported tail's status, not the push's. The first attempt had already been killed by a 120s timeout during the pre-push hook's serial pytest. Correction: after every push, compare `git ls-remote` with `git rev-parse HEAD`; never trust a piped exit code. GUARDS.md candidate (S-76 follow-up): a push helper in scripts/v10-ops.sh that asserts remote == local.
+- The local-ci fast tier took more than 10 min under swarm load (90 of 173 checks at 600s, EXIT=124). Its one real failure (CLAUDE.md tool count after S-78) was fixed in 6f1e68eb. This conflicts with the 10-min command cap; S-91 (Tier A) is the planned replacement. Until then, release on GitHub CI plus the packaging checks run by hand (npm pack contents: 938 entries, 9/9 required).
+- Standing drift check: slices finished inside workflows leave BOARD rows at building until the orchestrator reads the result, which fed 5 false AGENT_OVER_BUDGET hits at 15:15. Read workflow results the same turn they complete.

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var ct=Object.create;var{getPrototypeOf:lt,defineProperty:OG,getOwnPropertyNames:it}=Object;var at=Object.prototype.hasOwnProperty;function ot($){return this[$]}var st,nt,rt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?st??=new WeakMap:nt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?ct(lt($)):{};let J=X||!$||!$.__esModule?OG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of it($))if(!at.call(J,q))OG(J,q,{get:ot.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var Zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var tt=($)=>$;function et($,X){this[$]=tt.bind(null,X)}var B1=($,X)=>{for(var Q in X)OG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:et.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var HR={};B1(HR,{lokiDir:()=>h0,homeLokiDir:()=>GQ,findRepoRootForVersion:()=>LG,REPO_ROOT:()=>O1});import{resolve as h2,dirname as jG}from"path";import{fileURLToPath as $e}from"url";import{existsSync as Kq}from"fs";import{homedir as Xe}from"os";function Qe(){let $=UR;for(let X=0;X<6;X++){if(Kq(h2($,"VERSION"))&&Kq(h2($,"autonomy/run.sh")))return $;let Q=jG($);if(Q===$)break;$=Q}return h2(UR,"..","..","..")}function LG($){let X=$;for(let Q=0;Q<6;Q++){if(Kq(h2(X,"VERSION"))&&Kq(h2(X,"autonomy/run.sh")))return X;let z=jG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function GQ(){return h2(Xe(),".loki")}var UR,O1;var k1=s(()=>{UR=jG($e(import.meta.url));O1=Qe()});import{readFileSync as ze}from"fs";import{resolve as Ze,dirname as Ke}from"path";import{fileURLToPath as Je}from"url";function L9(){if(t3!==null)return t3;let $="9.56.0";if(typeof $==="string"&&$.length>0)return t3=$,t3;try{let X=Ke(Je(import.meta.url)),Q=LG(X);t3=ze(Ze(Q,"VERSION"),"utf-8").trim()}catch{t3="unknown"}return t3}var t3=null;var Jq=s(()=>{k1()});var jR={};B1(jR,{runOrThrow:()=>Te,run:()=>X1,readStreamCapped:()=>qq,commandVersion:()=>Fe,commandExists:()=>g5,ShellError:()=>CG,MAX_STDOUT_BYTES:()=>OR});async function qq($,X=OR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function X1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([qq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Te($,X={}){let Q=await X1($,X);if(Q.exitCode!==0)throw new CG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=De($),Q=await X1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function De($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Fe($,X="--version"){if(!await g5($))return null;let z=await X1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var OR=16777216,CG;var y8=s(()=>{CG=class CG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Re?"":$}var Re,p0,$5,Z1,y61,A1,f1,m5,n;var e7=s(()=>{Re=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),Z1=g2("\x1B[1;33m"),y61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),n=g2("\x1B[0m")});import{existsSync as fe}from"fs";async function Z2(){if(BQ!==void 0)return BQ;let $="/opt/homebrew/bin/python3.12";if(fe($))return BQ=$,$;let X=await g5("python3.12");if(X)return BQ=X,X;let Q=await g5("python3");return BQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return X1([Q,"-c",$],X)}var BQ;var m2=s(()=>{y8()});var hR={};B1(hR,{runStatus:()=>J00});import{existsSync as u5,readFileSync as T9,readdirSync as xR,statSync as kR}from"fs";import{resolve as A5,basename as re}from"path";import{homedir as te}from"os";function SR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function yR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Yq/X);if(Z>Yq)Z=Yq;let K=Yq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=Z1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=SR($),Y=SR(X);return`  ${f1}${Q}${n} ${J}[${q}]${n} ${z}% (${V} / ${Y})`}async function $00(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${n}
+var ct=Object.create;var{getPrototypeOf:lt,defineProperty:OG,getOwnPropertyNames:it}=Object;var at=Object.prototype.hasOwnProperty;function ot($){return this[$]}var st,nt,rt=($,X,Q)=>{var z=$!=null&&typeof $==="object";if(z){var Z=X?st??=new WeakMap:nt??=new WeakMap,K=Z.get($);if(K)return K}Q=$!=null?ct(lt($)):{};let J=X||!$||!$.__esModule?OG(Q,"default",{value:$,enumerable:!0}):Q;for(let q of it($))if(!at.call(J,q))OG(J,q,{get:ot.bind($,q),enumerable:!0});if(z)Z.set($,J);return J};var Zq=($,X)=>()=>(X||$((X={exports:{}}).exports,X),X.exports);var tt=($)=>$;function et($,X){this[$]=tt.bind(null,X)}var B1=($,X)=>{for(var Q in X)OG($,Q,{get:X[Q],enumerable:!0,configurable:!0,set:et.bind(X,Q)})};var s=($,X)=>()=>($&&(X=$($=0)),X);var w5=import.meta.require;var HR={};B1(HR,{lokiDir:()=>h0,homeLokiDir:()=>GQ,findRepoRootForVersion:()=>LG,REPO_ROOT:()=>O1});import{resolve as h2,dirname as jG}from"path";import{fileURLToPath as $e}from"url";import{existsSync as Kq}from"fs";import{homedir as Xe}from"os";function Qe(){let $=UR;for(let X=0;X<6;X++){if(Kq(h2($,"VERSION"))&&Kq(h2($,"autonomy/run.sh")))return $;let Q=jG($);if(Q===$)break;$=Q}return h2(UR,"..","..","..")}function LG($){let X=$;for(let Q=0;Q<6;Q++){if(Kq(h2(X,"VERSION"))&&Kq(h2(X,"autonomy/run.sh")))return X;let z=jG(X);if(z===X)break;X=z}return h2($,"..","..","..")}function h0(){return process.env.LOKI_DIR??h2(process.cwd(),".loki")}function GQ(){return h2(Xe(),".loki")}var UR,O1;var k1=s(()=>{UR=jG($e(import.meta.url));O1=Qe()});import{readFileSync as ze}from"fs";import{resolve as Ze,dirname as Ke}from"path";import{fileURLToPath as Je}from"url";function L9(){if(t3!==null)return t3;let $="9.57.0";if(typeof $==="string"&&$.length>0)return t3=$,t3;try{let X=Ke(Je(import.meta.url)),Q=LG(X);t3=ze(Ze(Q,"VERSION"),"utf-8").trim()}catch{t3="unknown"}return t3}var t3=null;var Jq=s(()=>{k1()});var jR={};B1(jR,{runOrThrow:()=>Te,run:()=>X1,readStreamCapped:()=>qq,commandVersion:()=>Fe,commandExists:()=>g5,ShellError:()=>CG,MAX_STDOUT_BYTES:()=>OR});async function qq($,X=OR){let Q=$.getReader(),z=new TextDecoder,Z="",K=0;try{while(K<X){let{done:J,value:q}=await Q.read();if(J)break;if(!q)continue;if(K+=q.byteLength,K>X){let V=q.byteLength-(K-X);Z+=z.decode(q.subarray(0,V),{stream:!0});break}Z+=z.decode(q,{stream:!0})}Z+=z.decode()}finally{try{await Q.cancel()}catch{}Q.releaseLock()}return Z}async function X1($,X={}){let Q=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:X.env?{...process.env,...X.env}:process.env,cwd:X.cwd}),z,Z;if(X.timeoutMs&&X.timeoutMs>0)z=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},X.timeoutMs);try{let[K,J,q]=await Promise.all([qq(Q.stdout),new Response(Q.stderr).text(),Q.exited]);return{stdout:K,stderr:J,exitCode:q}}finally{if(z)clearTimeout(z);if(Z)clearTimeout(Z)}}async function Te($,X={}){let Q=await X1($,X);if(Q.exitCode!==0)throw new CG(`command failed (${Q.exitCode}): ${$.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function g5($){let X=De($),Q=await X1(["sh","-c",`command -v ${X}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function De($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function Fe($,X="--version"){if(!await g5($))return null;let z=await X1([$,X],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var OR=16777216,CG;var y8=s(()=>{CG=class CG extends Error{message;exitCode;stdout;stderr;constructor($,X,Q,z){super($);this.message=$;this.exitCode=X;this.stdout=Q;this.stderr=z;this.name="ShellError"}}});function g2($){return Re?"":$}var Re,p0,$5,Z1,y61,A1,f1,m5,n;var e7=s(()=>{Re=(process.env.NO_COLOR??"").length>0;p0=g2("\x1B[0;31m"),$5=g2("\x1B[0;32m"),Z1=g2("\x1B[1;33m"),y61=g2("\x1B[0;34m"),A1=g2("\x1B[0;36m"),f1=g2("\x1B[1m"),m5=g2("\x1B[2m"),n=g2("\x1B[0m")});import{existsSync as fe}from"fs";async function Z2(){if(BQ!==void 0)return BQ;let $="/opt/homebrew/bin/python3.12";if(fe($))return BQ=$,$;let X=await g5("python3.12");if(X)return BQ=X,X;let Q=await g5("python3");return BQ=Q,Q}async function I4($,X={}){let Q=await Z2();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return X1([Q,"-c",$],X)}var BQ;var m2=s(()=>{y8()});var hR={};B1(hR,{runStatus:()=>J00});import{existsSync as u5,readFileSync as T9,readdirSync as xR,statSync as kR}from"fs";import{resolve as A5,basename as re}from"path";import{homedir as te}from"os";function SR($){let X=Math.trunc($);if(X>=1e6)return`${(Math.trunc(X/1e6*10)/10).toFixed(1)}M`;if(X>=1000)return`${(Math.trunc(X/1000*10)/10).toFixed(1)}K`;return String(X)}function yR($,X,Q){if(X===0)return null;let z=Math.trunc($*100/X),Z=Math.trunc($*Yq/X);if(Z>Yq)Z=Yq;let K=Yq-Z,J=$5;if(z>=80)J=p0;else if(z>=50)J=Z1;let q="=".repeat(Math.max(0,Z))+" ".repeat(Math.max(0,K)),V=SR($),Y=SR(X);return`  ${f1}${Q}${n} ${J}[${q}]${n} ${z}% (${V} / ${Y})`}async function $00(){if(await g5("jq"))return!0;return process.stdout.write(`${p0}Error: jq is required but not installed.${n}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -1349,4 +1349,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}case"start":{let{runStart:z}=await Promise.resolve().then(() => (ut(),mt));return z(Q)}default:return process.stderr.write(`Unknown command: ${X}
 `),process.stderr.write(dt),2}}PR();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var N61=await B61(Bun.argv.slice(2));process.exit(N61);
 
-//# debugId=AF4E056DAC4D3D5B742E33E3BB5AEAB7
+//# debugId=F76B88433C16492BF932B310B0E94366

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '9.56.0'
+__version__ = '9.57.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "9.56.0",
+  "version": "9.57.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider, opencode).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "9.56.0",
+  "version": "9.57.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",