loki-mode 9.77.0 → 9.80.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.77.0
+# Loki Mode v9.80.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.77.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.80.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.77.0
+9.80.1

package/autonomy/lib/engine10-legacy-notice.txt

@@ -0,0 +1,3 @@
+Legacy engine: deprecated in v10.0.0, still fully supported.
+No removal this release. Set LOKI_ENGINE=legacy to pin it.
+Guide: docs/v10/GUIDE.md

package/autonomy/lib/engine10-push-gitlab.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# Loki 10 engine P4 push child for GitLab (ENGINE.md sections 6, 7 and 13).
+#
+#   engine10-push-gitlab.sh push-mr <repo-dir> <branch> <title> <body-file> [--draft]
+#
+# Prints the merge request URL. Holds GitLab credentials, runs no LLM, reads
+# no untrusted text beyond argv. The target project comes only from the origin
+# P0 pinned before any provider ran (_LOKI_ORIGIN_PINNED=1
+# _LOKI_PINNED_ORIGIN=<url>), and that origin must be a literal gitlab.com
+# https or ssh URL. _loki_trusted_push refuses non-github.com origins, so this
+# mirrors its shape: the branch is fetched into a fresh --template= repo and
+# pushed from there, so no agent-repo hook or config runs in the credentialed
+# process; glab runs from / with the host fixed to gitlab.com.
+set -o pipefail
+
+die() { printf 'engine10-push-gitlab: %s\n' "$*" >&2; exit "${2:-2}"; }
+
+# <url> -> GROUP[/SUBGROUP...]/PROJECT on stdout, or rc 1. Literal gitlab.com
+# only: no host alias, no port, no embedded credentials, no odd characters.
+_e10_gitlab_project_from_url() {
+    local u="${1:-}" lc pre p
+    lc="$(printf '%s' "$u" | tr '[:upper:]' '[:lower:]')"
+    case "$lc" in
+        https://gitlab.com/*) pre="https://gitlab.com/" ;;
+        git@gitlab.com:*) pre="git@gitlab.com:" ;;
+        ssh://git@gitlab.com/*) pre="ssh://git@gitlab.com/" ;;
+        *) return 1 ;;
+    esac
+    p="${u:${#pre}}"
+    p="${p%/}"
+    p="${p%.git}"
+    case "$p" in
+        /* | */ | *//* | */.* | .* | *..* | */-/* | *[!A-Za-z0-9._/-]*) return 1 ;;
+        ?*/?*) printf '%s\n' "$p" ;;
+        *) return 1 ;;
+    esac
+}
+
+# Neutral glab: cwd /, no git dir, host pinned so an ambient GITLAB_HOST
+# cannot send the token elsewhere.
+_e10_glab() {
+    (
+        cd / || exit 1
+        unset GIT_DIR GIT_WORK_TREE GL_HOST GITLAB_API_HOST
+        export GITLAB_HOST=gitlab.com
+        command glab "$@"
+    )
+}
+
+[ "${_LOKI_ORIGIN_PINNED:-}" = "1" ] || die "origin not pinned (_LOKI_ORIGIN_PINNED=1 required)"
+url="${_LOKI_PINNED_ORIGIN:-}"
+proj="$(_e10_gitlab_project_from_url "$url")" \
+    || die "pinned origin refused: not a literal gitlab.com https or ssh GROUP/PROJECT URL"
+
+mode="${1:-}"
+shift || true
+[ "$mode" = "push-mr" ] || die "usage: engine10-push-gitlab.sh push-mr <repo-dir> <branch> <title> <body-file> [--draft]"
+[ "$#" -ge 4 ] && [ "$#" -le 5 ] || die "usage: push-mr <repo-dir> <branch> <title> <body-file> [--draft]"
+dir="$1" branch="$2" title="$3" body="$4" draft=()
+if [ "$#" -eq 5 ]; then
+    [ "$5" = "--draft" ] || die "unknown flag: $5"
+    draft=(--draft)
+fi
+[ -f "$body" ] || die "body file not found: $body"
+dir="$(cd "$dir" 2>/dev/null && pwd -P)" || die "repo dir not found"
+git check-ref-format --branch "$branch" >/dev/null 2>&1 || die "bad branch name"
+case "$branch" in
+    main | master | HEAD) die "Not pushing branch '$branch': Loki never pushes directly to a default branch." ;;
+esac
+cur="$(git -C "$dir" config --get remote.origin.url 2>/dev/null)" || cur=""
+[ "$cur" = "$url" ] || die "Not pushing branch '$branch': origin changed during the run; Loki does not push to a destination the agent could have chosen."
+
+enc="${proj//\//%2F}"
+def="$(_e10_glab api "projects/$enc" 2>/dev/null \
+    | python3 -c 'import json,sys; print(json.load(sys.stdin).get("default_branch") or "")' 2>/dev/null)" || def=""
+[ -n "$def" ] || die "Not pushing branch '$branch': could not resolve the default branch of $proj."
+[ "$branch" != "$def" ] || die "Not pushing branch '$branch': it is the default branch of $proj."
+
+tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push-gl.XXXXXX")" || die "mktemp failed" 1
+trap 'rm -rf "$tmp"' EXIT
+git init -q --template= "$tmp" >/dev/null 2>&1 \
+    && git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1 \
+    && git -C "$tmp" rev-parse -q --verify "refs/heads/$branch" >/dev/null 2>&1 \
+    || die "could not stage branch '$branch' in a fresh repo"
+git -C "$tmp" push -q "$url" "refs/heads/$branch:refs/heads/$branch" || die "push failed (rc=$?)"
+
+mr="$(_e10_glab mr list --repo "$proj" --source-branch "$branch" --output json 2>/dev/null \
+    | python3 -c 'import json,sys; d=json.load(sys.stdin); print(d[0].get("web_url","") if d else "")' 2>/dev/null)" \
+    || die "glab mr list failed"
+if [ -z "$mr" ]; then
+    mr="$(_e10_glab mr create --repo "$proj" --source-branch "$branch" --title "$title" \
+        --description "$(cat "$body")" --yes "${draft[@]}" | grep -Eo 'https://gitlab\.com/[^[:space:]]+' | tail -n 1)" \
+        || die "glab mr create failed"
+    [ -n "$mr" ] || die "glab mr create printed no URL"
+fi
+printf '%s\n' "$mr"

package/autonomy/lib/engine10-push.sh

@@ -0,0 +1,149 @@
+#!/usr/bin/env bash
+# Loki 10 engine P4 push child (ENGINE.md sections 6 and 7).
+#
+#   engine10-push.sh push-pr <repo-dir> <branch> <title> <body-file> [--draft]
+#   engine10-push.sh comment <pr-number> <body-file>
+#   engine10-push.sh status  <sha> <pending|success|failure|error> <description>
+#
+# Holds GitHub credentials, runs no LLM, reads no untrusted text. Inputs come
+# only from argv and the origin pinned by P0 before any provider ran
+# (_LOKI_ORIGIN_PINNED=1 _LOKI_PINNED_ORIGIN=<url>). The target repository is
+# always derived from that pin, never from the agent-writable tree.
+#
+# The push and gh helpers are not copied: this sources exactly the run.sh
+# region tests/test-trusted-push-agent-config.sh extracts, by the same awk
+# anchors, and fails closed when an anchor is missing.
+set -o pipefail
+
+log_warn() { printf 'WARN: %s\n' "$*" >&2; }
+log_info() { printf 'INFO: %s\n' "$*" >&2; }
+die() { printf 'engine10-push: %s\n' "$*" >&2; exit "${2:-2}"; }
+
+# Capture the pin before sourcing: the region resets both variables to "".
+_e10_pinned="${_LOKI_ORIGIN_PINNED:-}"
+_e10_origin="${_LOKI_PINNED_ORIGIN:-}"
+
+_e10_run_sh="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." 2>/dev/null && pwd -P)/run.sh"
+[ -f "$_e10_run_sh" ] || die "run.sh not found at $_e10_run_sh" 3
+_e10_region="$(awk '
+    /^_LOKI_WITHHELD_TOKENS=""$/ { on = 1 }
+    on { print }
+    on && /^_loki_withhold_github_tokens\(\) \{$/ { last = 1 }
+    last && /^}$/ { done = 1; exit }
+    END { if (!done) exit 3 }
+' "$_e10_run_sh")" || die "run.sh trusted-push anchors not found; refusing to push" 3
+for _e10_fn in _loki_trusted_push _loki_with_github_tokens _loki_run_neutral _loki_github_repo_from_url; do
+    printf '%s\n' "$_e10_region" | grep -q "^${_e10_fn}() {\$" \
+        || die "run.sh region lacks ${_e10_fn}; refusing to push" 3
+done
+eval "$_e10_region" || die "run.sh region failed to load" 3
+_LOKI_ORIGIN_PINNED="$_e10_pinned"
+_LOKI_PINNED_ORIGIN="$_e10_origin"
+
+[ "$_LOKI_ORIGIN_PINNED" = "1" ] || die "origin not pinned (_LOKI_ORIGIN_PINNED=1 required)"
+
+# E-41: the eval harness (eval/loki10/harness.py) pins origin to a local bare
+# repo and scores "PR opened" as a branch landing there. Only an absolute,
+# colon-free path whose own git dir is itself a bare repo qualifies; anything
+# else (URL, scp host:path, relative, non-bare, a subdirectory) takes the
+# GitHub path below and its refusal.
+_e10_local_bare() {
+    local p="$1" abs
+    case "$p" in /*) ;; *) return 1 ;; esac
+    case "$p" in *:*) return 1 ;; esac
+    abs="$(cd "$p" 2>/dev/null && pwd -P)" || return 1
+    [ "$(git -C "$abs" rev-parse --is-bare-repository 2>/dev/null)" = "true" ] || return 1
+    [ "$(git -C "$abs" rev-parse --absolute-git-dir 2>/dev/null)" = "$abs" ]
+}
+_e10_local=""
+_e10_git_env="GIT_DIR GIT_WORK_TREE GIT_COMMON_DIR GIT_CONFIG_PARAMETERS GIT_CONFIG_COUNT"
+# shellcheck disable=SC2086 # word-split list of variable names
+if (unset $_e10_git_env; _e10_local_bare "$_LOKI_PINNED_ORIGIN"); then
+    _e10_local=1
+else
+    _e10_repo="$(_loki_github_repo_from_url "$_LOKI_PINNED_ORIGIN")" \
+        || die "pinned origin refused: $(_loki_origin_refusal "$_LOKI_PINNED_ORIGIN")"
+fi
+
+# Local push: like _loki_trusted_push, the branch is fetched into a fresh
+# template-less repo and pushed from there, so the agent repo's config
+# (pushInsteadOf, remote.<url>.receivepack) and hooks never apply. The bare
+# repo's own receive-side hooks (and its core.hooksPath) DO run: git does not
+# pass -c core.hooksPath to the local receive-pack. What protects them is the
+# allowlisted env below: they inherit it, so no token, SSH agent or askpass
+# reaches them.
+_e10_git() {
+    env -i PATH="$PATH" HOME=/dev/null TMPDIR="${TMPDIR:-/tmp}" GIT_CONFIG_NOSYSTEM=1 \
+        GIT_CONFIG_GLOBAL=/dev/null GIT_TERMINAL_PROMPT=0 git -c core.hooksPath=/dev/null "$@"
+}
+_e10_local_push() {
+    local dir="$1" branch="$2" origin="$_LOKI_PINNED_ORIGIN" def tmp rc=1
+    dir="$(cd "$dir" 2>/dev/null && pwd -P)" || return 1
+    git check-ref-format --branch "$branch" >/dev/null 2>&1 || return 1
+    case "$branch" in
+        main | master | HEAD)
+            log_warn "Not pushing branch '$branch': Loki never pushes directly to a default branch."
+            return 2 ;;
+    esac
+    def="$(_e10_git -C "$origin" symbolic-ref --short HEAD 2>/dev/null)" || def=""
+    if [ -z "$def" ] || [ "$branch" = "$def" ]; then
+        log_warn "Not pushing branch '$branch': it is (or may be) the default branch of $origin."
+        return 2
+    fi
+    tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push.XXXXXX")" || return 1
+    if _e10_git init -q --template= "$tmp" >/dev/null 2>&1 \
+        && _e10_git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" \
+            "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1 \
+        && _e10_git -C "$tmp" rev-parse -q --verify "refs/heads/$branch" >/dev/null 2>&1; then
+        rc=0
+        _e10_git -C "$tmp" push -q "$origin" "refs/heads/$branch:refs/heads/$branch" || rc=$?
+    fi
+    rm -rf "$tmp"
+    return "$rc"
+}
+
+_e10_gh() { _loki_with_github_tokens _loki_run_neutral "$_e10_repo" command gh "$@"; }
+
+mode="${1:-}"
+shift || true
+case "$mode" in
+    push-pr)
+        [ "$#" -ge 4 ] && [ "$#" -le 5 ] || die "usage: push-pr <repo-dir> <branch> <title> <body-file> [--draft]"
+        dir="$1" branch="$2" title="$3" body="$4" draft=()
+        if [ "$#" -eq 5 ]; then
+            [ "$5" = "--draft" ] || die "unknown flag: $5"
+            draft=(--draft)
+        fi
+        [ -f "$body" ] || die "body file not found: $body"
+        if [ -n "$_e10_local" ]; then
+            _e10_local_push "$dir" "$branch" || die "push refused or failed (rc=$?)"
+            printf 'local://%s#%s\n' "$_LOKI_PINNED_ORIGIN" "$branch"
+            exit 0
+        fi
+        _loki_trusted_push _loki_with_github_tokens "$dir" "$branch" || die "push refused or failed (rc=$?)"
+        url="$(_e10_gh pr list --repo "$_e10_repo" --head "$branch" --state open --json url --jq '.[0].url')" \
+            || die "gh pr list failed"
+        if [ -z "$url" ] || [ "$url" = "null" ]; then
+            url="$(_e10_gh pr create --repo "$_e10_repo" --head "$branch" --title "$title" --body-file "$body" "${draft[@]}")" \
+                || die "gh pr create failed"
+            url="$(printf '%s\n' "$url" | tail -n 1)"
+        fi
+        printf '%s\n' "$url"
+        ;;
+    comment)
+        [ "$#" -eq 2 ] || die "usage: comment <pr-number> <body-file>"
+        case "$1" in '' | *[!0-9]*) die "pr number must be digits" ;; esac
+        [ -f "$2" ] || die "body file not found: $2"
+        [ -z "$_e10_local" ] || { log_info "local origin: no PR to comment on (no-op)"; exit 0; }
+        _e10_gh pr comment "$1" --repo "$_e10_repo" --body-file "$2" || die "gh pr comment failed"
+        ;;
+    status)
+        [ "$#" -eq 3 ] || die "usage: status <sha> <state> <description>"
+        [[ "$1" =~ ^[0-9a-f]{40}$ ]] || die "sha must be 40 lowercase hex characters"
+        case "$2" in pending | success | failure | error) ;; *) die "bad state: $2" ;; esac
+        [ -z "$_e10_local" ] || { log_info "local origin: no commit status to set (no-op)"; exit 0; }
+        _e10_gh api "repos/$_e10_repo/statuses/$1" -f "state=$2" -f context=loki/deep-verify \
+            -f "description=$3" >/dev/null || die "gh api status failed"
+        ;;
+    *) die "usage: engine10-push.sh push-pr|comment|status ..." ;;
+esac

package/autonomy/run.sh

@@ -15033,7 +15033,7 @@ run_magic_debate_gate() {
     log_info "Magic Modules: running debate on '$latest_name'"
     local debate_out debate_rc
     debate_out=$(cd "$TARGET_DIR" && PYTHONPATH="$PROJECT_DIR" LOKI_PROVIDER="${PROVIDER_NAME:-claude}" \
-        timeout 300 "$PROJECT_DIR/autonomy/loki" magic debate "$latest_name" --rounds 2 2>&1) \
+        timeout -k 10 300 "$PROJECT_DIR/autonomy/loki" magic debate "$latest_name" --rounds 2 2>&1) \
         && debate_rc=0 || debate_rc=$?
 
     # A debate that could not RUN is not a debate that found nothing. The old
@@ -24120,7 +24120,7 @@ show_run_start_estimate() {
     [ -x "$loki_bin" ] || { command -v loki >/dev/null 2>&1 && loki_bin="loki" || return 0; }
 
     local plan_json=""
-    plan_json=$(timeout 30 "$loki_bin" plan "$prd_path" --json 2>/dev/null) || plan_json=""
+    plan_json=$(timeout -k 10 30 "$loki_bin" plan "$prd_path" --json 2>/dev/null) || plan_json=""
     [ -n "$plan_json" ] || { log_info "Estimate: unavailable (estimator did not return a result); the run continues."; return 0; }
 
     # Parse REAL numbers only. argv keeps the JSON out of the script body so

package/bin/loki

@@ -243,6 +243,27 @@ if [ "${LOKI_LEGACY_BASH:-0}" = "1" ] || [ "${LOKI_LEGACY_BASH:-}" = "true" ]; t
     exec "$BASH_CLI" "$@"
 fi
 
+# Loki 10 engine (D29): additive; skipped entirely unless LOKI_ENGINE=v10.
+if [ "${LOKI_ENGINE:-}" = "v10" ]; then
+    _e10=0
+    case "${1:-}" in
+        status|verify|dashboard) _e10=1 ;;
+        ""|-*) _e10=0 ;;
+        # http*://*/issues/* also covers GitLab's /-/issues/ URLs.
+        */*\#[0-9]*|http*://*/issues/*|http*://*/browse/*) _e10=1 ;;
+        *" "*) _e10=1 ;;
+        # ponytail: a one-word argument stays on the legacy CLI. The telemetry
+        # allowlist is not a command registry (estimate, intent, outcomes are
+        # missing from it), so it cannot decide routing. Multi-word tasks and
+        # issue refs reach v10.
+        *) _e10=0 ;;
+    esac
+    if [ "$_e10" = "1" ]; then
+        command -v bun >/dev/null 2>&1 || { echo "Error: LOKI_ENGINE=v10 needs bun. Unset LOKI_ENGINE to use the current engine." >&2; exit 1; }
+        exec bun "$BUN_CLI" engine10 "$@"
+    fi
+fi
+
 # Bun must be installed for the new path; if it isn't, fall through to bash
 # silently rather than fail. This keeps users on systems without Bun working.
 if ! command -v bun &>/dev/null; then

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.77.0"
+__version__ = "9.80.1"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.77.0
+**Version:** v9.80.1
 
 ---
 

package/docs/dev/tmp-cleanup.md

@@ -62,11 +62,11 @@ loki_run_tmp_create() {
 # usage string, a filesystem block, an empty result, or a concatenation of any
 # of those is rejected on every platform.
 loki_run_tmp_stat_field() {
-    local gnu_fmt="$1" bsd_fmt="$2" path="$3" value
+    local gnu_fmt="$1" bsd_fmt="$2" target_path="$3" value
 
-    value="$(stat -c "$gnu_fmt" -- "$path" 2>/dev/null)" || value=''
+    value="$(stat -c "$gnu_fmt" -- "$target_path" 2>/dev/null)" || value=''
     case "$value" in
-        '' | *[!0-9]*) value="$(stat -f "$bsd_fmt" -- "$path" 2>/dev/null)" || value='' ;;
+        '' | *[!0-9]*) value="$(stat -f "$bsd_fmt" -- "$target_path" 2>/dev/null)" || value='' ;;
     esac
     case "$value" in
         '' | *[!0-9]*) return 1 ;;