loki-mode 9.78.0 → 9.81.0

package/README.md

@@ -909,6 +909,25 @@ See [benchmarks/](benchmarks/) for methodology.
 
 ---
 
+## Loki 10 engine (preview)
+
+Opt-in: set LOKI_ENGINE=v10 <!-- loki10-default -->
+
+A rewritten engine is under active development. Full guide, provider
+table and the 5-line summary format: [docs/v10/GUIDE.md](docs/v10/GUIDE.md).
+
+```
+LOKI_ENGINE=v10 loki "fix the login redirect loop" --no-pr
+```
+
+The router (bin/loki), the CLI surface (`--help`), and the run itself
+(intake, plan, wall, implement, verify, seal, PR) are on main, so the
+command above executes a real build end to end. `status`, `verify` and
+`dashboard` are also built. The guide says exactly what is still wired up
+(`--resume`, Slack) and what already runs.
+
+---
+
 ## Limitations
 
 | Area | What Works | What Doesn't (Yet) |

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.78.0
+# Loki Mode v9.81.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.78.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.81.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.78.0
+9.81.0

package/autonomy/lib/engine10-legacy-notice.txt

@@ -0,0 +1,3 @@
+Legacy engine: deprecated in v10.0.0, still fully supported.
+No removal this release. Set LOKI_ENGINE=legacy to pin it.
+Guide: docs/v10/GUIDE.md

package/autonomy/lib/engine10-push-gitlab.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# Loki 10 engine P4 push child for GitLab (ENGINE.md sections 6, 7 and 13).
+#
+#   engine10-push-gitlab.sh push-mr <repo-dir> <branch> <title> <body-file> [--draft]
+#
+# Prints the merge request URL. Holds GitLab credentials, runs no LLM, reads
+# no untrusted text beyond argv. The target project comes only from the origin
+# P0 pinned before any provider ran (_LOKI_ORIGIN_PINNED=1
+# _LOKI_PINNED_ORIGIN=<url>), and that origin must be a literal gitlab.com
+# https or ssh URL. _loki_trusted_push refuses non-github.com origins, so this
+# mirrors its shape: the branch is fetched into a fresh --template= repo and
+# pushed from there, so no agent-repo hook or config runs in the credentialed
+# process; glab runs from / with the host fixed to gitlab.com.
+set -o pipefail
+
+die() { printf 'engine10-push-gitlab: %s\n' "$*" >&2; exit "${2:-2}"; }
+
+# <url> -> GROUP[/SUBGROUP...]/PROJECT on stdout, or rc 1. Literal gitlab.com
+# only: no host alias, no port, no embedded credentials, no odd characters.
+_e10_gitlab_project_from_url() {
+    local u="${1:-}" lc pre p
+    lc="$(printf '%s' "$u" | tr '[:upper:]' '[:lower:]')"
+    case "$lc" in
+        https://gitlab.com/*) pre="https://gitlab.com/" ;;
+        git@gitlab.com:*) pre="git@gitlab.com:" ;;
+        ssh://git@gitlab.com/*) pre="ssh://git@gitlab.com/" ;;
+        *) return 1 ;;
+    esac
+    p="${u:${#pre}}"
+    p="${p%/}"
+    p="${p%.git}"
+    case "$p" in
+        /* | */ | *//* | */.* | .* | *..* | */-/* | *[!A-Za-z0-9._/-]*) return 1 ;;
+        ?*/?*) printf '%s\n' "$p" ;;
+        *) return 1 ;;
+    esac
+}
+
+# Neutral glab: cwd /, no git dir, host pinned so an ambient GITLAB_HOST
+# cannot send the token elsewhere.
+_e10_glab() {
+    (
+        cd / || exit 1
+        unset GIT_DIR GIT_WORK_TREE GL_HOST GITLAB_API_HOST
+        export GITLAB_HOST=gitlab.com
+        command glab "$@"
+    )
+}
+
+[ "${_LOKI_ORIGIN_PINNED:-}" = "1" ] || die "origin not pinned (_LOKI_ORIGIN_PINNED=1 required)"
+url="${_LOKI_PINNED_ORIGIN:-}"
+proj="$(_e10_gitlab_project_from_url "$url")" \
+    || die "pinned origin refused: not a literal gitlab.com https or ssh GROUP/PROJECT URL"
+
+mode="${1:-}"
+shift || true
+[ "$mode" = "push-mr" ] || die "usage: engine10-push-gitlab.sh push-mr <repo-dir> <branch> <title> <body-file> [--draft]"
+[ "$#" -ge 4 ] && [ "$#" -le 5 ] || die "usage: push-mr <repo-dir> <branch> <title> <body-file> [--draft]"
+dir="$1" branch="$2" title="$3" body="$4" draft=()
+if [ "$#" -eq 5 ]; then
+    [ "$5" = "--draft" ] || die "unknown flag: $5"
+    draft=(--draft)
+fi
+[ -f "$body" ] || die "body file not found: $body"
+dir="$(cd "$dir" 2>/dev/null && pwd -P)" || die "repo dir not found"
+git check-ref-format --branch "$branch" >/dev/null 2>&1 || die "bad branch name"
+case "$branch" in
+    main | master | HEAD) die "Not pushing branch '$branch': Loki never pushes directly to a default branch." ;;
+esac
+cur="$(git -C "$dir" config --get remote.origin.url 2>/dev/null)" || cur=""
+[ "$cur" = "$url" ] || die "Not pushing branch '$branch': origin changed during the run; Loki does not push to a destination the agent could have chosen."
+
+enc="${proj//\//%2F}"
+def="$(_e10_glab api "projects/$enc" 2>/dev/null \
+    | python3 -c 'import json,sys; print(json.load(sys.stdin).get("default_branch") or "")' 2>/dev/null)" || def=""
+[ -n "$def" ] || die "Not pushing branch '$branch': could not resolve the default branch of $proj."
+[ "$branch" != "$def" ] || die "Not pushing branch '$branch': it is the default branch of $proj."
+
+tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push-gl.XXXXXX")" || die "mktemp failed" 1
+trap 'rm -rf "$tmp"' EXIT
+git init -q --template= "$tmp" >/dev/null 2>&1 \
+    && git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1 \
+    && git -C "$tmp" rev-parse -q --verify "refs/heads/$branch" >/dev/null 2>&1 \
+    || die "could not stage branch '$branch' in a fresh repo"
+git -C "$tmp" push -q "$url" "refs/heads/$branch:refs/heads/$branch" || die "push failed (rc=$?)"
+
+mr="$(_e10_glab mr list --repo "$proj" --source-branch "$branch" --output json 2>/dev/null \
+    | python3 -c 'import json,sys; d=json.load(sys.stdin); print(d[0].get("web_url","") if d else "")' 2>/dev/null)" \
+    || die "glab mr list failed"
+if [ -z "$mr" ]; then
+    mr="$(_e10_glab mr create --repo "$proj" --source-branch "$branch" --title "$title" \
+        --description "$(cat "$body")" --yes "${draft[@]}" | grep -Eo 'https://gitlab\.com/[^[:space:]]+' | tail -n 1)" \
+        || die "glab mr create failed"
+    [ -n "$mr" ] || die "glab mr create printed no URL"
+fi
+printf '%s\n' "$mr"

package/autonomy/lib/engine10-push.sh

@@ -41,8 +41,66 @@ _LOKI_ORIGIN_PINNED="$_e10_pinned"
 _LOKI_PINNED_ORIGIN="$_e10_origin"
 
 [ "$_LOKI_ORIGIN_PINNED" = "1" ] || die "origin not pinned (_LOKI_ORIGIN_PINNED=1 required)"
-_e10_repo="$(_loki_github_repo_from_url "$_LOKI_PINNED_ORIGIN")" \
-    || die "pinned origin refused: $(_loki_origin_refusal "$_LOKI_PINNED_ORIGIN")"
+
+# E-41: the eval harness (eval/loki10/harness.py) pins origin to a local bare
+# repo and scores "PR opened" as a branch landing there. Only an absolute,
+# colon-free path whose own git dir is itself a bare repo qualifies; anything
+# else (URL, scp host:path, relative, non-bare, a subdirectory) takes the
+# GitHub path below and its refusal.
+_e10_local_bare() {
+    local p="$1" abs
+    case "$p" in /*) ;; *) return 1 ;; esac
+    case "$p" in *:*) return 1 ;; esac
+    abs="$(cd "$p" 2>/dev/null && pwd -P)" || return 1
+    [ "$(git -C "$abs" rev-parse --is-bare-repository 2>/dev/null)" = "true" ] || return 1
+    [ "$(git -C "$abs" rev-parse --absolute-git-dir 2>/dev/null)" = "$abs" ]
+}
+_e10_local=""
+_e10_git_env="GIT_DIR GIT_WORK_TREE GIT_COMMON_DIR GIT_CONFIG_PARAMETERS GIT_CONFIG_COUNT"
+# shellcheck disable=SC2086 # word-split list of variable names
+if (unset $_e10_git_env; _e10_local_bare "$_LOKI_PINNED_ORIGIN"); then
+    _e10_local=1
+else
+    _e10_repo="$(_loki_github_repo_from_url "$_LOKI_PINNED_ORIGIN")" \
+        || die "pinned origin refused: $(_loki_origin_refusal "$_LOKI_PINNED_ORIGIN")"
+fi
+
+# Local push: like _loki_trusted_push, the branch is fetched into a fresh
+# template-less repo and pushed from there, so the agent repo's config
+# (pushInsteadOf, remote.<url>.receivepack) and hooks never apply. The bare
+# repo's own receive-side hooks (and its core.hooksPath) DO run: git does not
+# pass -c core.hooksPath to the local receive-pack. What protects them is the
+# allowlisted env below: they inherit it, so no token, SSH agent or askpass
+# reaches them.
+_e10_git() {
+    env -i PATH="$PATH" HOME=/dev/null TMPDIR="${TMPDIR:-/tmp}" GIT_CONFIG_NOSYSTEM=1 \
+        GIT_CONFIG_GLOBAL=/dev/null GIT_TERMINAL_PROMPT=0 git -c core.hooksPath=/dev/null "$@"
+}
+_e10_local_push() {
+    local dir="$1" branch="$2" origin="$_LOKI_PINNED_ORIGIN" def tmp rc=1
+    dir="$(cd "$dir" 2>/dev/null && pwd -P)" || return 1
+    git check-ref-format --branch "$branch" >/dev/null 2>&1 || return 1
+    case "$branch" in
+        main | master | HEAD)
+            log_warn "Not pushing branch '$branch': Loki never pushes directly to a default branch."
+            return 2 ;;
+    esac
+    def="$(_e10_git -C "$origin" symbolic-ref --short HEAD 2>/dev/null)" || def=""
+    if [ -z "$def" ] || [ "$branch" = "$def" ]; then
+        log_warn "Not pushing branch '$branch': it is (or may be) the default branch of $origin."
+        return 2
+    fi
+    tmp="$(mktemp -d "${TMPDIR:-/tmp}/loki-push.XXXXXX")" || return 1
+    if _e10_git init -q --template= "$tmp" >/dev/null 2>&1 \
+        && _e10_git -C "$tmp" fetch -q --no-tags --update-shallow "$dir" \
+            "+refs/heads/$branch:refs/heads/$branch" >/dev/null 2>&1 \
+        && _e10_git -C "$tmp" rev-parse -q --verify "refs/heads/$branch" >/dev/null 2>&1; then
+        rc=0
+        _e10_git -C "$tmp" push -q "$origin" "refs/heads/$branch:refs/heads/$branch" || rc=$?
+    fi
+    rm -rf "$tmp"
+    return "$rc"
+}
 
 _e10_gh() { _loki_with_github_tokens _loki_run_neutral "$_e10_repo" command gh "$@"; }
 
@@ -57,6 +115,11 @@ case "$mode" in
             draft=(--draft)
         fi
         [ -f "$body" ] || die "body file not found: $body"
+        if [ -n "$_e10_local" ]; then
+            _e10_local_push "$dir" "$branch" || die "push refused or failed (rc=$?)"
+            printf 'local://%s#%s\n' "$_LOKI_PINNED_ORIGIN" "$branch"
+            exit 0
+        fi
         _loki_trusted_push _loki_with_github_tokens "$dir" "$branch" || die "push refused or failed (rc=$?)"
         url="$(_e10_gh pr list --repo "$_e10_repo" --head "$branch" --state open --json url --jq '.[0].url')" \
             || die "gh pr list failed"
@@ -71,12 +134,14 @@ case "$mode" in
         [ "$#" -eq 2 ] || die "usage: comment <pr-number> <body-file>"
         case "$1" in '' | *[!0-9]*) die "pr number must be digits" ;; esac
         [ -f "$2" ] || die "body file not found: $2"
+        [ -z "$_e10_local" ] || { log_info "local origin: no PR to comment on (no-op)"; exit 0; }
         _e10_gh pr comment "$1" --repo "$_e10_repo" --body-file "$2" || die "gh pr comment failed"
         ;;
     status)
         [ "$#" -eq 3 ] || die "usage: status <sha> <state> <description>"
         [[ "$1" =~ ^[0-9a-f]{40}$ ]] || die "sha must be 40 lowercase hex characters"
         case "$2" in pending | success | failure | error) ;; *) die "bad state: $2" ;; esac
+        [ -z "$_e10_local" ] || { log_info "local origin: no commit status to set (no-op)"; exit 0; }
         _e10_gh api "repos/$_e10_repo/statuses/$1" -f "state=$2" -f context=loki/deep-verify \
             -f "description=$3" >/dev/null || die "gh api status failed"
         ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.78.0"
+__version__ = "9.81.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.78.0
+**Version:** v9.81.0
 
 ---
 

package/docs/dev/tmp-cleanup.md

@@ -62,11 +62,11 @@ loki_run_tmp_create() {
 # usage string, a filesystem block, an empty result, or a concatenation of any
 # of those is rejected on every platform.
 loki_run_tmp_stat_field() {
-    local gnu_fmt="$1" bsd_fmt="$2" path="$3" value
+    local gnu_fmt="$1" bsd_fmt="$2" target_path="$3" value
 
-    value="$(stat -c "$gnu_fmt" -- "$path" 2>/dev/null)" || value=''
+    value="$(stat -c "$gnu_fmt" -- "$target_path" 2>/dev/null)" || value=''
     case "$value" in
-        '' | *[!0-9]*) value="$(stat -f "$bsd_fmt" -- "$path" 2>/dev/null)" || value='' ;;
+        '' | *[!0-9]*) value="$(stat -f "$bsd_fmt" -- "$target_path" 2>/dev/null)" || value='' ;;
     esac
     case "$value" in
         '' | *[!0-9]*) return 1 ;;