loki-mode 7.129.0 → 7.129.1

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.129.0
+# Loki Mode v7.129.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.129.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.129.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.129.0
+7.129.1

package/autonomy/loki

@@ -2348,6 +2348,44 @@ cmd_start() {
         fi
     fi
 
+    # Shared-checkout concurrency guard (client bug: N `loki start ... --detach`
+    # in ONE working dir with a SHARED .loki/ collide on non-namespaced worktree
+    # paths + branches, producing missing worktrees and log spam). Issue-mode
+    # namespaces pids PER SESSION, so the global loki.pid check below never trips
+    # for DIFFERENT issues -- there was no guard on concurrent runs per checkout.
+    # Detect a LIVE sibling loki running in THIS checkout via per-run pid markers
+    # (crash-safe: dead markers are pruned via kill -0, so no deadlock). A run
+    # that isolates its state (a distinct LOKI_DIR, i.e. NOT the default .loki) is
+    # exempt -- that IS the safe per-issue pattern. Escape hatch:
+    # LOKI_ALLOW_SHARED_CHECKOUT=1.
+    local _co_loki_dir="${LOKI_DIR:-.loki}"
+    if [ "${LOKI_ALLOW_SHARED_CHECKOUT:-0}" != "1" ] \
+       && { [ -z "${LOKI_DIR:-}" ] || [ "$(cd "${LOKI_DIR}" 2>/dev/null && pwd)" = "$(cd .loki 2>/dev/null && pwd)" ]; }; then
+        local _co_runs_dir="$_co_loki_dir/checkout-runs"
+        mkdir -p "$_co_runs_dir" 2>/dev/null || true
+        local _co_marker _co_pid _co_live=""
+        for _co_marker in "$_co_runs_dir"/*; do
+            [ -f "$_co_marker" ] || continue
+            _co_pid=$(cat "$_co_marker" 2>/dev/null | tr -dc '0-9')
+            if [ -n "$_co_pid" ] && [ "$_co_pid" != "$$" ] && kill -0 "$_co_pid" 2>/dev/null; then
+                _co_live="$_co_pid"; break
+            fi
+            # Prune a dead marker.
+            [ -n "$_co_pid" ] && rm -f "$_co_marker" 2>/dev/null || true
+        done
+        if [ -n "$_co_live" ]; then
+            echo -e "${RED}Error: another loki run (pid $_co_live) is active in this checkout ($(pwd)).${NC}" >&2
+            echo -e "${YELLOW}Running several issues at once from ONE checkout + shared .loki/ collides on worktrees and branches.${NC}" >&2
+            echo -e "${YELLOW}Give each issue its own worktree AND state dir, e.g.:${NC}" >&2
+            echo -e "${YELLOW}  git worktree add ../repo-issue-N -b loki/issue-N && (cd ../repo-issue-N && LOKI_DIR=\"\$PWD/.loki\" loki start owner/repo#N --pr --detach)${NC}" >&2
+            echo -e "${YELLOW}See 'skills/github-integration.md' (Multiple issues at once). Override with LOKI_ALLOW_SHARED_CHECKOUT=1.${NC}" >&2
+            exit 1
+        fi
+        # Register our own marker for the duration of this run (best-effort;
+        # pruned by the next start if we die, and by 'loki stop').
+        echo "$$" > "$_co_runs_dir/$$" 2>/dev/null || true
+    fi
+
     # v7.5.12 Gap B: Stale-PID detection. Hard-kill (Ctrl+C followed by SIGKILL or
     # `loki stop`) can leave .loki/loki.pid + .loki/session.lock orphaned. The
     # next `loki start` then refuses to launch -- or worse, run.sh's downstream

package/autonomy/run.sh

@@ -817,8 +817,27 @@ fi
 PARALLEL_MODE=${LOKI_PARALLEL_MODE:-false}
 MAX_WORKTREES=${LOKI_MAX_WORKTREES:-5}
 MAX_PARALLEL_SESSIONS=${LOKI_MAX_PARALLEL_SESSIONS:-3}
-PARALLEL_TESTING=${LOKI_PARALLEL_TESTING:-true}
-PARALLEL_DOCS=${LOKI_PARALLEL_DOCS:-true}
+# Nested-agent guard: the fixed testing/docs sub-streams each spawn a FURTHER
+# nested `claude` session in a NON-namespaced worktree (`<project>-testing`,
+# `<project>-docs`). When Loki itself runs inside another agent session (Claude
+# Code sets CLAUDECODE; the Loki Mode skill, or a user driving the CLI as a
+# background process from an agent), those nested spawns fight over the shared
+# checkout/worktree paths and flood the log -- the reported "N issues in one dir"
+# failure. So default the sub-streams OFF when nested; the core issue work still
+# runs. Explicit LOKI_PARALLEL_TESTING/DOCS=true overrides (opt back in). This
+# does NOT disable the user's own --parallel/--pr issue work, only the auxiliary
+# testing/docs fan-out that is unsafe to nest.
+_loki_nested_agent=false
+if [ -n "${CLAUDECODE:-}" ] || [ -n "${LOKI_NESTED_AGENT:-}" ]; then
+    _loki_nested_agent=true
+fi
+if [ "$_loki_nested_agent" = "true" ]; then
+    PARALLEL_TESTING=${LOKI_PARALLEL_TESTING:-false}
+    PARALLEL_DOCS=${LOKI_PARALLEL_DOCS:-false}
+else
+    PARALLEL_TESTING=${LOKI_PARALLEL_TESTING:-true}
+    PARALLEL_DOCS=${LOKI_PARALLEL_DOCS:-true}
+fi
 
 # Dynamic resource-aware session concurrency (Release 3, slice 3).
 # DEFAULT OFF: when LOKI_DYNAMIC_CONCURRENCY is unset, effective_session_cap()
@@ -4423,6 +4442,7 @@ process_pending_merges() {
     local failed=0
 
     for signal_file in "$signals_dir"/MERGE_REQUESTED_*; do
+        case "$signal_file" in *.ack) continue ;; esac
         [ -f "$signal_file" ] || continue
         local stream_name
         stream_name=$(basename "$signal_file" | sed 's/MERGE_REQUESTED_//')
@@ -4465,12 +4485,28 @@ check_merge_queue() {
     fi
 
     for signal in "$signals_dir"/MERGE_REQUESTED_*; do
+        # Skip our own acknowledgement markers (*.ack) so they are not treated
+        # as signals themselves.
+        case "$signal" in *.ack) continue ;; esac
         if [ -f "$signal" ]; then
             local feature=$(basename "$signal" | sed 's/MERGE_REQUESTED_//')
-            log_info "Merge requested: $feature"
 
             if [ "$AUTO_MERGE" = "true" ]; then
+                # Auto-merge consumes the signal (merge_feature rm's it), so the
+                # log line fires exactly once per completed feature.
+                log_info "Merge requested: $feature"
                 merge_feature "$feature"
+            else
+                # Auto-merge is OFF (e.g. `--pr` without `--ship`): the PR is left
+                # for a human to merge, so the signal is INTENTIONALLY not consumed.
+                # Log ONCE (guarded by a sibling .ack marker) instead of re-logging
+                # the same "Merge requested" line every orchestrator pass -- that
+                # re-log was a 90-minute "looks stuck" spam while real work was
+                # already done. The signal itself is preserved untouched.
+                if [ ! -f "${signal}.ack" ]; then
+                    log_info "Merge requested: $feature (PR ready; auto-merge off -- merge the PR, or use --ship to auto-merge)"
+                    : > "${signal}.ack" 2>/dev/null || true
+                fi
             fi
         fi
     done
@@ -4585,8 +4621,9 @@ merge_feature() {
         fi
     fi
 
-    # Remove signal
-    rm -f "$TARGET_DIR/.loki/signals/MERGE_REQUESTED_$feature"
+    # Remove signal (and its log-once .ack marker, if any)
+    rm -f "$TARGET_DIR/.loki/signals/MERGE_REQUESTED_$feature" \
+          "$TARGET_DIR/.loki/signals/MERGE_REQUESTED_$feature.ack"
 
     # Remove worktree
     remove_worktree "feature-$clean_feature"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.129.0"
+__version__ = "7.129.1"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.129.0
+**Version:** v7.129.1
 
 ---
 
@@ -396,7 +396,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.129.0 start ./my-spec.md
+  asklokesh/loki-mode:7.129.1 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.129.0";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
+var q8=Object.defineProperty;var J8=($)=>$;function V8($,Q){this[$]=J8.bind(null,Q)}var b=($,Q)=>{for(var Z in Q)q8($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:V8.bind(Q,Z)})};var P=($,Q)=>()=>($&&(Q=$($=0)),Q);var J$=import.meta.require;var m1={};b(m1,{lokiDir:()=>j,homeLokiDir:()=>T$,findRepoRootForVersion:()=>$1,REPO_ROOT:()=>h});import{resolve as t,dirname as e$}from"path";import{fileURLToPath as W8}from"url";import{existsSync as N$}from"fs";import{homedir as H8}from"os";function G8(){let $=v1;for(let Q=0;Q<6;Q++){if(N$(t($,"VERSION"))&&N$(t($,"autonomy/run.sh")))return $;let Z=e$($);if(Z===$)break;$=Z}return t(v1,"..","..","..")}function $1($){let Q=$;for(let Z=0;Z<6;Z++){if(N$(t(Q,"VERSION"))&&N$(t(Q,"autonomy/run.sh")))return Q;let z=e$(Q);if(z===Q)break;Q=z}return t($,"..","..","..")}function j(){return process.env.LOKI_DIR??t(process.cwd(),".loki")}function T$(){return t(H8(),".loki")}var v1,h;var C=P(()=>{v1=e$(W8(import.meta.url));h=G8()});import{readFileSync as U8}from"fs";import{resolve as Y8,dirname as B8}from"path";import{fileURLToPath as M8}from"url";function S$(){if(Q$!==null)return Q$;let $="7.129.1";if(typeof $==="string"&&$.length>0)return Q$=$,Q$;try{let Q=B8(M8(import.meta.url)),Z=$1(Q);Q$=U8(Y8(Z,"VERSION"),"utf-8").trim()}catch{Q$="unknown"}return Q$}var Q$=null;var Q1=P(()=>{C()});var p1={};b(p1,{runOrThrow:()=>S8,run:()=>R,readStreamCapped:()=>c1,commandVersion:()=>C8,commandExists:()=>u,ShellError:()=>Z1,MAX_STDOUT_BYTES:()=>u1});async function c1($,Q=u1){let Z=$.getReader(),z=new TextDecoder,X="",q=0;try{while(q<Q){let{done:K,value:W}=await Z.read();if(K)break;if(!W)continue;if(q+=W.byteLength,q>Q){let V=W.byteLength-(q-Q);X+=z.decode(W.subarray(0,V),{stream:!0});break}X+=z.decode(W,{stream:!0})}X+=z.decode()}finally{try{await Z.cancel()}catch{}Z.releaseLock()}return X}async function R($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[q,K,W]=await Promise.all([c1(Z.stdout),new Response(Z.stderr).text(),Z.exited]);return{stdout:q,stderr:K,exitCode:W}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function S8($,Q={}){let Z=await R($,Q);if(Z.exitCode!==0)throw new Z1(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function u($){let Q=D8($),Z=await R(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function D8($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function C8($,Q="--version"){if(!await u($))return null;let z=await R([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var u1=16777216,Z1;var o=P(()=>{Z1=class Z1 extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function r($){return b8?"":$}var b8,M,S,_,tZ,L,k,y,J;var p=P(()=>{b8=(process.env.NO_COLOR??"").length>0;M=r("\x1B[0;31m"),S=r("\x1B[0;32m"),_=r("\x1B[1;33m"),tZ=r("\x1B[0;34m"),L=r("\x1B[0;36m"),k=r("\x1B[1m"),y=r("\x1B[2m"),J=r("\x1B[0m")});import{existsSync as l8}from"fs";async function Z$(){if(A$!==void 0)return A$;let $="/opt/homebrew/bin/python3.12";if(l8($))return A$=$,$;let Q=await u("python3.12");if(Q)return A$=Q,Q;let Z=await u("python3");return A$=Z,Z}async function z$($,Q={}){let Z=await Z$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return R([Z,"-c",$],Q)}var A$;var V$=P(()=>{o()});var V0={};b(V0,{runStatus:()=>U3});import{existsSync as v,readFileSync as H$,readdirSync as $0,statSync as Q0}from"fs";import{resolve as D,basename as z3}from"path";import{homedir as X3}from"os";function Z0($){let Q=Math.trunc($);if(Q>=1e6)return`${(Math.trunc(Q/1e6*10)/10).toFixed(1)}M`;if(Q>=1000)return`${(Math.trunc(Q/1000*10)/10).toFixed(1)}K`;return String(Q)}function z0($,Q,Z){if(Q===0)return null;let z=Math.trunc($*100/Q),X=Math.trunc($*C$/Q);if(X>C$)X=C$;let q=C$-X,K=S;if(z>=80)K=M;else if(z>=50)K=_;let W="=".repeat(Math.max(0,X))+" ".repeat(Math.max(0,q)),V=Z0($),H=Z0(Q);return`  ${k}${Z}${J} ${K}[${W}]${J} ${z}% (${V} / ${H})`}async function q3(){if(await u("jq"))return!0;return process.stdout.write(`${M}Error: jq is required but not installed.${J}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -814,4 +814,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(K8),2}}e1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var SZ=await NZ(Bun.argv.slice(2));process.exit(SZ);
 
-//# debugId=4C57B2F2D01C30E264756E2164756E21
+//# debugId=E67A22525236ED6C64756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.129.0'
+__version__ = '7.129.1'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.129.0",
+  "version": "7.129.1",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.129.0",
+  "version": "7.129.1",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/skills/github-integration.md

@@ -171,6 +171,63 @@ LOKI_GITHUB_IMPORT=true \
 
 ---
 
+## Multiple issues at once (parallel, reliably)
+
+There are two safe ways to work several issues; pick by whether you want them
+concurrent.
+
+### Sequential (simplest, one process, one checkout)
+
+Import all open issues into one queue and let a single run drain them one at a
+time. No worktree/state collisions because there is only one run.
+
+```bash
+LOKI_GITHUB_IMPORT=true loki start        # drains .loki/queue sequentially
+```
+
+### Concurrent (one isolated run PER issue)
+
+To run N issues at the SAME time, each run needs its OWN git worktree AND its
+OWN state dir. `--pr`/`--worktree` isolates the git branch, but two runs in the
+same checkout still share one `.loki/` unless you also set a distinct `LOKI_DIR`.
+Give each issue its own checkout + `LOKI_DIR`:
+
+```bash
+for n in 101 102 103; do
+  git worktree add "../repo-issue-$n" -b "loki/issue-$n" >/dev/null
+  ( cd "../repo-issue-$n" \
+      && LOKI_DIR="$PWD/.loki" \
+         loki start "owner/repo#$n" --pr --detach )
+done
+loki status --all       # watch all runs
+```
+
+Each run is fully isolated: separate working tree, branch, and `.loki/` state, so
+they cannot corrupt each other's branches or worktrees.
+
+DO NOT run several `loki start ... --detach` from the SAME directory with a shared
+`.loki/`. The runs collide on shared (non-namespaced) worktree paths and state,
+which produces missing branches, "claimed worktree missing", and a repeating
+`Merge requested: testing/docs` log (the auxiliary sub-streams, not your issues).
+
+### Inside a Claude Code session (the Loki Mode skill)
+
+When you invoke Loki Mode from inside Claude Code, Loki detects the nested agent
+(`CLAUDECODE`) and automatically disables its internal `testing`/`docs`
+worktree sub-streams (they would spawn further nested `claude` sessions that
+collide) -- your issue work still runs. To fan out across several issues from a
+Claude Code session, prefer the per-issue-isolated loop above (each with its own
+worktree + `LOKI_DIR`), or let Claude Code orchestrate one Loki run per issue.
+Re-enable the sub-streams explicitly with `LOKI_PARALLEL_TESTING=true` /
+`LOKI_PARALLEL_DOCS=true` only if you know the checkout is not shared.
+
+Notes:
+- `--pr` leaves the PR for you to merge (auto-merge OFF). Use `--ship` to
+  auto-merge. Either way the "Merge requested" line now logs once, not on a loop.
+- `loki status --all` and `loki stop --all` operate across all runs/projects.
+
+---
+
 ## CLI Commands
 
 ```bash