loki-mode 7.33.0 → 7.34.1

package/README.md

@@ -8,7 +8,7 @@
 
 [![npm version](https://img.shields.io/npm/v/loki-mode?style=for-the-badge&logo=npm&logoColor=white&color=553DE9)](https://www.npmjs.com/package/loki-mode)
 [![npm downloads](https://img.shields.io/npm/dt/loki-mode?style=for-the-badge&logo=npm&logoColor=white&color=1FC5A8&label=downloads)](https://www.npmjs.com/package/loki-mode)
-[![GitHub stars](https://img.shields.io/github/stars/asklokesh/loki-mode?style=for-the-badge&logo=github&color=553DE9)](https://github.com/asklokesh/loki-mode)
+[![GitHub stars](https://img.shields.io/github/stars/asklokesh/loki-mode?style=for-the-badge&logo=github&color=553DE9&cacheSeconds=86400)](https://github.com/asklokesh/loki-mode/stargazers)
 [![Docker Pulls](https://img.shields.io/docker/pulls/asklokesh/loki-mode?style=for-the-badge&logo=docker&logoColor=white&color=2F71E3)](https://hub.docker.com/r/asklokesh/loki-mode)
 [![License](https://img.shields.io/badge/License-BUSL--1.1-36342E?style=for-the-badge)](LICENSE)
 
@@ -36,7 +36,7 @@
 - **Intelligent `loki start`** -- For interactive foreground runs the dashboard auto-opens in the browser (cross-platform; skipped in CI, SSH-without-TTY, and piped runs; opt out with `LOKI_NO_AUTO_OPEN=1`). The completion summary shows "Your app is live at <url>" so you know exactly where to try what Loki just built. The autonomous loop passes Claude Code's `--effort`, `--max-budget-usd`, and `--fallback-model` on every iteration (each gated on CLI support and individual opt-out env vars) for better long-run unattended execution (v7.25.0).
 - **Cross-project memory** -- Episodic/semantic/procedural memory with vector search; knowledge learned on one project surfaces on the next (v5.15.0+, see `memory/engine.py`)
 - **Self-hosted and private** -- Your keys, your infrastructure, no data leaves your network
-- **Legacy system healing** -- `loki heal` archaeology/stabilize/isolate/modernize/validate phases (v6.67.0, see `skills/healing.md`)
+- **Legacy system healing** -- `loki modernize heal` archaeology/stabilize/isolate/modernize/validate phases (v6.67.0, see `skills/healing.md`)
 - **MCP server** -- 34 tools (including ChromaDB code search) plus 3 resources and 2 prompts (`mcp/server.py`, with magic tools registered from `mcp/magic_tools.py` and the managed-memory tool from `mcp/managed_tools.py`). Of the 34, 33 are always available; `loki_memory_redact` is registered but only succeeds when `LOKI_MANAGED_AGENTS=true` and `LOKI_MANAGED_MEMORY=true`. Launch with `loki mcp` (bootstraps the Python MCP SDK on first run).
 - **Full-stack output** -- Source code, tests, Docker Compose stacks (multi-service with healthchecks), CI/CD pipelines, audit logs
 - **Provider-agnostic** -- runs on Claude, Codex, Cline, or Aider with automatic failover (`loki-ts/src/runner/providers.ts`); no vendor lock-in. Gemini CLI deprecated v7.5.18; Antigravity CLI coming soon.
@@ -366,17 +366,17 @@ Status legend: "E2E-verified" means we run real spec-to-code builds on it oursel
 |---------|-------------|
 | `loki start [PRD]` | Start with optional PRD file (also accepts an issue ref; replaces deprecated `loki run`). Auto-opens the dashboard in the browser for interactive runs and passes native `--effort`/`--max-budget-usd`/`--fallback-model` for resilience (v7.25.0) |
 | `loki stop` | Stop execution |
-| `loki heal <path>` | Legacy system healing (archaeology, stabilize, isolate, modernize, validate -- v6.67.0) |
+| `loki modernize heal <path>` | Legacy system healing (archaeology, stabilize, isolate, modernize, validate -- v6.67.0; was: `loki heal`) |
 | `loki pause` / `resume` | Pause/resume after current session |
 | `loki status` | Show current status |
 | `loki dashboard` | Open web dashboard |
-| `loki preview` / `loki open` | Print running app URL and open in browser (Live App Preview, v7.24.0) |
+| `loki preview` | Print running app URL and open in browser (Live App Preview, v7.24.0; was: `loki open`) |
 | `loki web` | Launch Purple Lab web UI |
 | `loki doctor` | Check environment and dependencies |
 | `loki plan [PRD]` | Pre-execution analysis: complexity, cost, iterations |
 | `loki review [--staged\|--diff]` | AI-powered code review with severity filtering |
 | `loki test [--file\|--dir\|--changed]` | AI test generation (8 languages, 9 frameworks) |
-| `loki onboard [path]` | Project analysis and CLAUDE.md generation |
+| `loki analyze onboard [path]` | Project analysis and CLAUDE.md generation (was: `loki onboard`) |
 | `loki import` | Import GitHub issues as tasks |
 | `loki ci` | CI/CD quality gate integration |
 | `loki failover` | Cross-provider auto-failover management |

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.33.0
+# Loki Mode v7.34.1
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -398,4 +398,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.33.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.34.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.33.0
+7.34.1

package/autonomy/context-tracker.py

@@ -304,7 +304,13 @@ def update_tracking(loki_dir, iteration, window_size, provider="claude",
         if result["new_offset"] == last_offset:
             return  # Nothing new
 
-        # Update session ID and offset
+        # Update session ID and offset.
+        # v7.34.0 Phase 1: when LOKI_SESSION_STAMP=1, run.sh passes a
+        # per-iteration --session-id, so claude names the JSONL after that uuid
+        # and jsonl_path.stem is that uuid rather than a claude-minted one. This
+        # is just a string label for the tracking record; any value (uuid or
+        # otherwise) is fine here, so no reconcile/parse is needed and there is
+        # no crash path from the id differing.
         tracking["session_id"] = jsonl_path.stem
         tracking["updated_at"] = datetime.now(timezone.utc).isoformat()
         offset_file.write_text(str(result["new_offset"]))

package/autonomy/lib/claude-flags.sh

@@ -226,3 +226,64 @@ loki_review_guard_denylist() {
     # global-flag-before-subcommand evasion of the bare git-mutation rules.
     printf '%s' "Edit,Write,NotebookEdit,Bash(git commit:*),Bash(git reset:*),Bash(git push:*),Bash(git checkout:*),Bash(git clean:*),Bash(git rm:*),Bash(git stash:*),Bash(git -C:*),Bash(git --git-dir:*),Bash(git -c:*)"
 }
+
+# ---------- v7.34.0 Claude session-id stamping (Phase 1, correlation-only) -----
+# Derive a deterministic per-run UUID from the existing trust-run-id so the same
+# run always maps to the same claude session UUID, and the bash + Bun routes
+# produce BYTE-IDENTICAL uuids for the same run id. We use RFC-4122 UUIDv5
+# (SHA-1 over a stable namespace + the name). The namespace below is a fixed,
+# Loki-specific constant; never change it (changing it re-keys every run's uuid).
+# The TS mirror is loki-ts/src/providers/claude_flags.ts claudeSessionUuid().
+#
+# Phase 1 is correlation-only: the uuid is written to a metadata file and (only
+# when LOKI_SESSION_STAMP=1) emitted as a PER-ITERATION --session-id on the main
+# loop. It NEVER pins one id across the run (that is Phase 2 continuity, which
+# would accumulate transcript and compete with Loki's own injected memory).
+LOKI_CLAUDE_SESSION_NS="b6f3c7a2-9d41-5e8b-9c2a-3f7d6e1a4b50"
+
+# UUIDv5 over the Loki session namespace + an arbitrary name string. Pure
+# (stdout only), deterministic, no side effects. Uses python3 (always present on
+# the bash route; every other helper here already depends on it). Emits empty on
+# any failure so the caller degrades to metadata-only without breaking the run.
+_loki_uuid5() {
+    local name="${1:-}"
+    [ -z "$name" ] && return 0
+    command -v python3 >/dev/null 2>&1 || return 0
+    LOKI_CLAUDE_SESSION_NS="$LOKI_CLAUDE_SESSION_NS" _LOKI_UUID5_NAME="$name" \
+    python3 - <<'UUID5_PY' 2>/dev/null || true
+import os, uuid
+ns = uuid.UUID(os.environ["LOKI_CLAUDE_SESSION_NS"])
+print(uuid.uuid5(ns, os.environ["_LOKI_UUID5_NAME"]))
+UUID5_PY
+}
+
+# The stable per-run claude session UUID: UUIDv5 of the trust-run-id. Same run
+# id -> same uuid, on every route. Emits empty when no run id is resolvable.
+_loki_claude_session_uuid() {
+    local run_id="${1:-${LOKI_TRUST_RUN_ID:-}}"
+    [ -z "$run_id" ] && return 0
+    _loki_uuid5 "$run_id"
+}
+
+# The PER-ITERATION session UUID emitted on the main loop when LOKI_SESSION_STAMP=1.
+# UUIDv5 of "<run-id>:<iteration>", so every iteration gets a DISTINCT, deterministic
+# id. This is deliberately NOT the stable per-run uuid: a single pinned id reused
+# across iterations would make claude RESUME (accumulate transcript), which is
+# Phase 2 continuity, explicitly out of scope here. Distinct-per-iteration keeps
+# each iteration a fresh stateless session (byte-identical default behavior to
+# v7.33 except for the added correlation flag).
+_loki_claude_iteration_session_uuid() {
+    local run_id="${1:-${LOKI_TRUST_RUN_ID:-}}"
+    local iteration="${2:-${ITERATION_COUNT:-0}}"
+    [ -z "$run_id" ] && return 0
+    _loki_uuid5 "${run_id}:${iteration}"
+}
+
+# Predicate: emit the per-iteration --session-id ARGV flag? CONSERVATIVE DEFAULT
+# is OFF (metadata-file-only) so the default claude argv stays byte-identical to
+# v7.33 (the UX-monotonicity requirement). Opt IN with LOKI_SESSION_STAMP=1.
+# Gated on CLI support so an older claude degrades gracefully (no flag emitted).
+loki_session_stamp_enabled() {
+    [ "${LOKI_SESSION_STAMP:-0}" = "1" ] || return 1
+    loki_claude_flag_supported "--session-id"
+}

package/autonomy/loki

@@ -685,7 +685,7 @@ show_help() {
     echo "  modernize [cmd]  Legacy modernization: heal|migrate"
     echo ""
     echo "Config:"
-    echo "  config [cmd]     Manage configuration + provider (show|set|get|provider)"
+    echo "  config [cmd]     Manage configuration (show|init|edit|path|set|get)"
     echo "  doctor [--json]  Check system prerequisites and skill symlinks"
     echo ""
     echo "  version          Show version"
@@ -2888,8 +2888,8 @@ cmd_status() {
     fi
 
     echo ""
-    echo -e "${DIM}  Tip: loki context show   - detailed token breakdown${NC}"
-    echo -e "${DIM}  Tip: loki code overview   - codebase intelligence${NC}"
+    echo -e "${DIM}  Tip: loki analyze context show   - detailed token breakdown${NC}"
+    echo -e "${DIM}  Tip: loki analyze code overview  - codebase intelligence${NC}"
 }
 
 # JSON output for loki status --json
@@ -8697,8 +8697,12 @@ cmd_api() {
 
     # Parse --host/--port (the old code ignored them, so `loki serve --port X`
     # silently bound 57374 and `--host 0.0.0.0` was dropped).
+    # A trailing --help/-h on any subcommand (e.g. `loki api start --help`)
+    # short-circuits to the help text instead of being swallowed and starting
+    # the server (#574).
     while [ $# -gt 0 ]; do
         case "$1" in
+            --help|-h) subcommand="help"; break ;;
             --port) port="${2:-$port}"; shift 2 ;;
             --port=*) port="${1#*=}"; shift ;;
             --host) host="${2:-$host}"; shift 2 ;;

package/autonomy/run.sh

@@ -12324,6 +12324,26 @@ except Exception:
         LOKI_TRUST_RUN_ID="$(_loki_trust_run_id --new)"
         export LOKI_TRUST_RUN_ID
         record_trust_event_bash "run_start" "start_sha=${_LOKI_RUN_START_SHA:-}" 2>/dev/null || true
+
+        # v7.34.0 Phase 1 (correlation-only): write a deterministic claude
+        # session UUID derived from the trust-run-id to .loki/state/claude-session.json.
+        # mode is "stamp" (Phase 1); Phase 2 continuity is a separate, opt-in arc.
+        # Best-effort: the helper is in scope via providers/claude.sh sourcing
+        # claude-flags.sh; if absent (e.g. non-claude provider, no python3) we
+        # skip silently and never fail the run. The dashboard reads this file to
+        # surface it for correlating the run with its Claude session JSONL.
+        if type _loki_claude_session_uuid >/dev/null 2>&1; then
+            local _loki_session_uuid
+            _loki_session_uuid="$(_loki_claude_session_uuid "$LOKI_TRUST_RUN_ID")"
+            if [ -n "$_loki_session_uuid" ]; then
+                local _loki_session_created
+                _loki_session_created="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+                mkdir -p ".loki/state" 2>/dev/null || true
+                printf '{"run_id":"%s","claude_session_uuid":"%s","mode":"stamp","created_at":"%s"}\n' \
+                    "$LOKI_TRUST_RUN_ID" "$_loki_session_uuid" "$_loki_session_created" \
+                    > ".loki/state/claude-session.json" 2>/dev/null || true
+            fi
+        fi
     fi
 
     # Notify dashboard of active project directory (for AI Chat cross-directory usage)
@@ -12719,6 +12739,20 @@ except Exception as exc:
            && loki_claude_flag_supported "--include-partial-messages"; then
             _loki_claude_argv+=("--include-partial-messages")
         fi
+        # v7.34.0 Phase 1 (correlation-only): per-iteration --session-id. OPT-IN
+        # via LOKI_SESSION_STAMP=1 (CONSERVATIVE DEFAULT is OFF so the default
+        # argv stays byte-identical to v7.33 -- the UX-monotonicity requirement).
+        # The id is a DISTINCT, deterministic UUIDv5 of "<run-id>:<iteration>",
+        # never one pinned id across the run: a reused id would make claude RESUME
+        # and accumulate transcript (Phase 2 continuity, out of scope). This keeps
+        # each iteration a fresh stateless session while making its ~/.claude
+        # JSONL name predictable for dashboard correlation. Gated on CLI support.
+        if type loki_session_stamp_enabled >/dev/null 2>&1 \
+           && loki_session_stamp_enabled; then
+            local _loki_iter_session_uuid
+            _loki_iter_session_uuid="$(_loki_claude_iteration_session_uuid "${LOKI_TRUST_RUN_ID:-}" "$ITERATION_COUNT")"
+            [ -n "$_loki_iter_session_uuid" ] && _loki_claude_argv+=("--session-id" "$_loki_iter_session_uuid")
+        fi
         # ---- Bash<->Bun invocation-flag convergence ledger (v7.25.0) ----------
         # The fixture corpus covers build_prompt/stats output, NOT this claude
         # argv, so drift here is invisible to parity tests. Keep this ledger
@@ -12729,8 +12763,13 @@ except Exception as exc:
         # today.
         # Bash argv (canonical, live): --dangerously-skip-permissions --model M
         #   [--append-system-prompt] [--setting-sources] [--include-partial-messages]
+        #   [--session-id UUID (only when LOKI_SESSION_STAMP=1, v7.34.0)]
         #   [--effort] [--max-budget-usd] [--fallback-model] -p PROMPT
         #   --output-format stream-json --verbose
+        # v7.34.0: --session-id is emitted ONLY on this MAIN loop, only under
+        #   LOKI_SESSION_STAMP=1, as a per-iteration distinct UUIDv5; the DEFAULT
+        #   argv (knob unset) is byte-identical to v7.33. Bun mirror lives in
+        #   loki-ts/src/runner/providers.ts (sessionStampArgv).
         # Bun buildAutoFlags also emits: --exclude-dynamic-system-prompt-sections
         #   (cost-only), --mcp-config (bash gets MCP via --setting-sources +
         #   .mcp.json discovery; a how-difference, likely behavior-equivalent),

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.33.0"
+__version__ = "7.34.1"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -387,6 +387,11 @@ class StatusResponse(BaseModel):
     mode: str = ""
     provider: str = "claude"
     current_task: str = ""
+    # v7.34.0 Phase 1: the deterministic per-run Claude session UUID derived from
+    # the trust-run-id (read from .loki/state/claude-session.json). Surfaced so a
+    # user can correlate the run with its Claude session JSONL (in ~/.claude/projects). Empty when
+    # the run predates this field or no claude session was stamped.
+    claude_session_id: str = ""
     # Concurrent sessions (v6.4.0)
     sessions: list[SessionInfo] = []
 
@@ -954,6 +959,26 @@ async def get_status() -> StatusResponse:
     pending_tasks = 0
     running_agents = 0
 
+    # v7.34.0 Phase 1: the deterministic per-run Claude session UUID, written at
+    # run-start by run.sh (correlation-only). Best-effort read; empty when the
+    # file is absent (run predates the field, or a non-claude provider).
+    claude_session_id = ""
+    claude_session_file = loki_dir / "state" / "claude-session.json"
+    if claude_session_file.exists():
+        try:
+            _cs = _safe_json_read(claude_session_file, {})
+            # Guard against a syntactically-valid non-object JSON (array, string,
+            # number) that would make .get() raise AttributeError, AND a
+            # non-string VALUE that would fail StatusResponse's str validation
+            # (both -> 500). The normal writer (run.sh) always emits an object
+            # with a string uuid, so this only triggers on external file
+            # corruption, but /api/status must never 500 on it.
+            if isinstance(_cs, dict):
+                _v = _cs.get("claude_session_uuid", "")
+                claude_session_id = _v if isinstance(_v, str) else ""
+        except (json.JSONDecodeError, OSError, KeyError, AttributeError):
+            pass
+
     # Read dashboard state (with retry for concurrent writes)
     _has_dashboard_state = False
     if state_file.exists():
@@ -1206,6 +1231,7 @@ async def get_status() -> StatusResponse:
         mode=mode,
         provider=provider,
         current_task=current_task,
+        claude_session_id=claude_session_id,
         sessions=active_session_list,
     )
 

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.33.0
+**Version:** v7.34.1
 
 ---
 
@@ -534,7 +534,7 @@ Loki Mode uses two network ports for different services:
 LOKI_DASHBOARD_PORT=57374 loki dashboard start
 
 # API port (default: 57374)
-loki serve --port 57374
+loki api start --port 57374   # was: loki serve
 ```
 
 ### CORS Configuration

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.33.0";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
+var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.34.1";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -42,8 +42,8 @@ var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null
 `)}let J=D($,"state","context-usage.json");if(v(J)){let B=a1(J,"window_size",200000),O=a1(J,"used_tokens",0),M=0;if(B>0)M=Math.floor(O*100/B);process.stdout.write(`${w}Context:${q} ${M}% (${O} / ${B} tokens)
 `)}let G=[D($,"dashboard","dashboard.pid"),D(NQ(),".loki","dashboard","dashboard.pid")].find((B)=>v(B))??"";if(G&&v(G)){let B=R$(G);if(B!==null&&k$(B)){let O=D(G,".."),M=(_,k)=>{let u=D(O,_);try{return v(u)?U$(u,"utf-8").trim()||k:k}catch{return k}},x=M("scheme","http"),N=M("host","127.0.0.1"),b=M("port",process.env.LOKI_DASHBOARD_PORT||"57374");if(N==="0.0.0.0")N="127.0.0.1";process.stdout.write(`${w}Dashboard:${q} ${x}://${N}:${b}/
 `)}}return await hQ($),process.stdout.write(`
-`),process.stdout.write(`${y}  Tip: loki context show   - detailed token breakdown${q}
-`),process.stdout.write(`${y}  Tip: loki code overview   - codebase intelligence${q}
+`),process.stdout.write(`${y}  Tip: loki analyze context show   - detailed token breakdown${q}
+`),process.stdout.write(`${y}  Tip: loki analyze code overview  - codebase intelligence${q}
 `),0}async function hQ($){let Q=D($,"state"),Z=yQ(Q),z=D(Q,"relevant-learnings.json"),X=D($,"escalations"),W=Z.length>0,K=v(z),U=v(X);if(!W&&!K&&!U)return;if(process.stdout.write(`
 ${w}Phase 1 artifacts:${q}
 `),W){let V=Z[Z.length-1],H=s1(V);if(H&&Array.isArray(H.findings)){let J={Critical:0,High:0,Medium:0,Low:0};for(let G of H.findings){let B=String(G.severity??"");if(B in J)J[B]=(J[B]??0)+1}let Y=Object.entries(J).filter(([,G])=>G>0).map(([G,B])=>`${B} ${G.toLowerCase()}`).join(", ");process.stdout.write(`  Findings (iter ${H.iteration??"?"}): ${Y||"none"} -- ${H.findings.length} total
@@ -789,4 +789,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(o6),2}}p1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var ZZ=await QZ(Bun.argv.slice(2));process.exit(ZZ);
 
-//# debugId=27D659E047A7DB5564756E2164756E21
+//# debugId=F6F45F7E10405C2564756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.33.0'
+__version__ = '7.34.1'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.33.0",
+  "version": "7.34.1",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/providers/claude.sh

@@ -247,6 +247,17 @@ _loki_build_claude_auto_flags() {
        && loki_claude_flag_supported "--include-partial-messages"; then
         _LOKI_CLAUDE_AUTO_FLAGS+=("--include-partial-messages")
     fi
+
+    # --no-session-persistence (v7.34.0): boolean flag that disables Claude's
+    # own session persistence (it would otherwise write transcript JSONL under
+    # ~/.claude/projects). OPT-IN only via LOKI_NO_SESSION_PERSIST=1; DEFAULT OFF
+    # so this is zero behavior change (the flag is never emitted unless the user
+    # asks for it). Useful for ephemeral/CI runs that do not want on-disk
+    # transcripts. Gated on CLI support so an older claude degrades gracefully.
+    if [ "${LOKI_NO_SESSION_PERSIST:-0}" = "1" ] \
+       && loki_claude_flag_supported "--no-session-persistence"; then
+        _LOKI_CLAUDE_AUTO_FLAGS+=("--no-session-persistence")
+    fi
 }
 
 # The system-prompt text that authorizes autonomous operation and resolves