loki-mode 7.7.29 → 7.7.31

package/README.md

@@ -38,6 +38,26 @@
 
 ## Get Started in 30 Seconds
 
+**Prerequisites**
+
+Loki drives a coding agent CLI and orchestrates real builds, so it needs a few tools on your PATH. `loki doctor` checks all of these and tells you what is missing.
+
+Required:
+
+- An agent provider CLI (at least one): [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`, Tier 1, recommended), or OpenAI Codex CLI (`codex`), Cline, or Aider.
+- Python 3.10+ (`python3`) for the dashboard, memory system, and orchestration helpers.
+- Git 2.x (`git`) for checkpoints and worktrees.
+- `curl` for installation and network calls.
+
+Recommended:
+
+- Bun 1.3.0+ (`bun`) for the fast runtime (the recommended install path below installs it).
+- Node.js 18+ and npm if you install via npm instead of Bun.
+- `jq` for nicer JSON handling in shell flows.
+- Docker if you want Loki's App Runner to run containerized projects, or to run Loki itself from the published image.
+
+You also need credentials for whichever provider you use (for Claude Code, an authenticated `claude` login or `ANTHROPIC_API_KEY`).
+
 **Recommended (Bun, fastest):**
 
 ```bash
@@ -66,7 +86,7 @@ loki quick "build a landing page with a signup form"
 |--------|---------|-------|
 | **Bun (recommended)** | `bun install -g loki-mode` | Fastest. v8 will be Bun-only. |
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` | Auto-installs Bun as a dep |
-| **Docker** | `docker pull asklokesh/loki-mode:7.5.11 && docker run --rm asklokesh/loki-mode:7.5.11 start prd.md` | Bun pre-installed in image |
+| **Docker** | `docker pull asklokesh/loki-mode:7.7.31 && docker run --rm asklokesh/loki-mode:7.7.31 start prd.md` | Bun pre-installed in image |
 | **npm (compat)** | `npm install -g loki-mode` | Works without Bun (bash fallback). Migrate any time with `loki self-update --to bun`. |
 
 **Upgrading:**
@@ -85,12 +105,12 @@ See the [Installation Guide](docs/INSTALLATION.md) for the long form.
 
 ## Runtime Architecture
 
-Loki Mode is in the middle of a phased migration from a Bash-based runtime to a TypeScript/Bun runtime. The work is happening on the `feat/bun-migration` branch and is being shipped incrementally.
+Loki Mode is in a phased migration from a Bash-based runtime to a TypeScript/Bun runtime. The migration has merged to `main` and ships incrementally with each release.
 
 **What ships today:**
 
-- A small set of read-only commands is routed to the Bun runtime when `bun` is on `PATH`. The router lives in `bin/loki` and currently routes: `version`, `--version`, `-v`, `status`, `stats`, `doctor`, `provider` (covers `provider show` and `provider list`), `memory` (covers `memory list` and `memory index`).
-- Every other command continues to execute on the existing Bash CLI (`autonomy/loki`).
+- Commands routed to the Bun runtime when `bun` is on `PATH` (the router lives in `bin/loki`): `version`, `--version`, `-v`, `status`, `stats`, `doctor`, `provider` (covers `provider show` and `provider list`), `memory` (covers `memory list` and `memory index`), `rollback`, `kpis`, and `internal`.
+- Every other command continues to execute on the existing Bash CLI (`autonomy/loki`), including the autonomous `loki start` / `loki run` loop which remains the Bash orchestrator (`autonomy/run.sh`).
 - If `bun` is not on `PATH`, the shim falls through to Bash silently. Existing users without Bun installed see no behavior change.
 
 **Rollback flag:**
@@ -126,7 +146,7 @@ The next major release sunsets the Bash runtime entirely. There is no firm calen
 | Method | Command |
 |--------|---------|
 | **Homebrew** | `brew tap asklokesh/tap && brew install loki-mode` |
-| **Docker** | `docker pull asklokesh/loki-mode:7.5.11` |
+| **Docker** | `docker pull asklokesh/loki-mode:7.7.31` |
 | **Inside Claude Code** | `claude --dangerously-skip-permissions` then type "Loki Mode" |
 | **Git clone** | `git clone https://github.com/asklokesh/loki-mode.git` |
 
@@ -137,7 +157,7 @@ See the full [Installation Guide](docs/INSTALLATION.md).
 <details>
 <summary><strong>Supported spec formats</strong></summary>
 
-A "spec" is whatever you hand `loki start`. Loki auto-detects the format and normalises it before the RARV loop. A Markdown PRD is one form of spec; the table below lists every input the v7.5.11 CLI accepts.
+A "spec" is whatever you hand `loki start`. Loki auto-detects the format and normalises it before the RARV loop. A Markdown PRD is one form of spec; the table below lists every input the CLI accepts.
 
 | Format | Example | Notes |
 |--------|---------|-------|

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-to-product system. Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product via the RARV-C closure loop, with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.7.29
+# Loki Mode v7.7.31
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -381,4 +381,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.7.29 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.7.31 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.7.29
+7.7.31

package/autonomy/loki

@@ -1781,22 +1781,33 @@ _stop_session_by_id() {
 # With session_id: stops only that specific session
 cmd_stop() {
     local target_session=""
+    local stop_all=false
 
     # Parse arguments
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki stop${NC} - Stop running sessions (v6.4.0)"
+                echo -e "${BOLD}loki stop${NC} - Stop running sessions (v7.7.30)"
                 echo ""
-                echo "Usage: loki stop [session-id]"
+                echo "Usage: loki stop [session-id] [--all]"
                 echo ""
-                echo "  loki stop          Stop all running sessions"
-                echo "  loki stop 52       Stop only session #52"
-                echo "  loki stop 54       Stop only session #54"
+                echo "  loki stop          Stop ONLY the current folder's session."
+                echo "                     Other folders keep running. Marks this"
+                echo "                     project stopped in the dashboard registry."
+                echo "  loki stop 52       Stop only session #52 in this folder."
+                echo "  loki stop --all    Stop EVERY loki runner on this machine"
+                echo "                     (legacy machine-wide behavior)."
                 echo ""
-                echo "Use 'loki status' to see all running sessions."
+                echo "The shared dashboard stays up if other projects are still"
+                echo "running; it is stopped only when no project remains (or --all)."
+                echo ""
+                echo "Use 'loki status' to see this folder's sessions."
                 exit 0
                 ;;
+            --all)
+                stop_all=true
+                shift
+                ;;
             -*)
                 echo -e "${RED}Unknown option: $1${NC}"
                 echo "Run 'loki stop --help' for usage."
@@ -1876,11 +1887,6 @@ cmd_stop() {
             fi
         done
 
-        # Also kill any orphaned loki-run temp scripts (SIGTERM then SIGKILL)
-        pkill -f "loki-run-" 2>/dev/null || true
-        sleep 0.5
-        pkill -9 -f "loki-run-" 2>/dev/null || true
-
         # Mark session.json as stopped (skill-invoked sessions)
         # BUG-ST-008: Atomic session.json update via temp file + mv (matches run.sh)
         if [ -f "$LOKI_DIR/session.json" ]; then
@@ -1900,15 +1906,69 @@ except (json.JSONDecodeError, OSError): pass
 " 2>/dev/null || true
         fi
 
+        # v7.7.30: mark THIS project stopped in the shared dashboard registry
+        # so the multi-project switcher reflects it. Best-effort, never fatal.
+        # Honors LOKI_SKIP_PROJECT_REGISTRY (matches run.sh registration).
+        if [ -z "${LOKI_SKIP_PROJECT_REGISTRY:-}" ] && command -v python3 >/dev/null 2>&1; then
+            LOKI_REG_TARGET="$(pwd)" LOKI_REG_SKILL="${SKILL_DIR:-$PROJECT_DIR}" \
+            python3 - <<'PYSTOP' >/dev/null 2>&1 || true
+import os, sys
+sys.path.insert(0, os.environ.get("LOKI_REG_SKILL", "."))
+try:
+    from dashboard import registry
+    registry.mark_project_stopped(os.path.abspath(os.environ["LOKI_REG_TARGET"]))
+except Exception:
+    pass
+PYSTOP
+        fi
+
         # Clean up control files
         rm -f "$LOKI_DIR/STOP" "$LOKI_DIR/PAUSE" "$LOKI_DIR/PAUSED.md" 2>/dev/null
 
-        # Kill dashboard if running. Check BOTH the project-local in-build
-        # dashboard (.loki/dashboard) and the standalone one
-        # (~/.loki/dashboard) so cleanup never leaves an orphan regardless of
-        # which path started it.
+        # Kill dashboard if running.
+        # v7.7.30: the project-local dashboard (.loki/dashboard) belongs solely
+        # to this folder and is ALWAYS killed. The shared standalone dashboard
+        # (~/.loki/dashboard) is killed ONLY when no OTHER registered project is
+        # still running, so we never tear down a dashboard other folders need.
+        # For --all, the shared dashboard is always killed (tear everything down).
+        local _kill_shared_dash=false
+        if [ "$stop_all" = true ]; then
+            _kill_shared_dash=true
+        elif command -v python3 >/dev/null 2>&1; then
+            # Query the registry (after mark_project_stopped excluded this
+            # project) for any OTHER project whose pid is still alive.
+            local _dash_decision
+            _dash_decision=$(LOKI_REG_SKILL="${SKILL_DIR:-$PROJECT_DIR}" \
+                python3 - <<'PYDASH' 2>/dev/null || true
+import os, sys
+sys.path.insert(0, os.environ.get("LOKI_REG_SKILL", "."))
+try:
+    from dashboard import registry
+    alive = 0
+    for p in registry.list_projects(include_inactive=True):
+        pid = p.get("pid")
+        if isinstance(pid, int) and pid > 0:
+            try:
+                os.kill(pid, 0)
+                alive += 1
+            except OSError:
+                pass
+    print("CLEAR" if alive == 0 else "KEEP")
+except Exception:
+    print("CLEAR")
+PYDASH
+            )
+            [ "$_dash_decision" = "CLEAR" ] && _kill_shared_dash=true
+        else
+            # python3 unavailable: fall back to legacy behavior (kill shared)
+            # to avoid leaking the shared dashboard on minimal systems.
+            _kill_shared_dash=true
+        fi
+
         local _dash_pidf
-        for _dash_pidf in "$LOKI_DIR/dashboard/dashboard.pid" "${HOME}/.loki/dashboard/dashboard.pid"; do
+        local _dash_targets=("$LOKI_DIR/dashboard/dashboard.pid")
+        [ "$_kill_shared_dash" = true ] && _dash_targets+=("${HOME}/.loki/dashboard/dashboard.pid")
+        for _dash_pidf in "${_dash_targets[@]}"; do
             if [ -f "$_dash_pidf" ]; then
                 local dash_pid
                 dash_pid=$(cat "$_dash_pidf" 2>/dev/null)
@@ -1967,6 +2027,16 @@ except (json.JSONDecodeError, OSError): pass
             echo "Start a session with: loki start"
         fi
     fi
+
+    # v7.7.30: --all preserves the legacy machine-wide kill. It runs even when
+    # the current folder has no live session (the "clean everything" use case),
+    # reaping every folder's orphaned loki-run-* temp script (SIGTERM, SIGKILL).
+    if [ "$stop_all" = true ]; then
+        pkill -f "loki-run-" 2>/dev/null || true
+        sleep 0.5
+        pkill -9 -f "loki-run-" 2>/dev/null || true
+        echo -e "${RED}--all: signalled all loki-run-* processes on this machine.${NC}"
+    fi
 }
 
 # Kill orphaned processes from crashed sessions

package/autonomy/run.sh

@@ -785,6 +785,76 @@ except Exception:
     pass
 PYREG
 }
+
+# v7.7.30: deliberate-exit teardown for the shared dashboard + registry.
+# Marks THIS project (abspath of TARGET_DIR) stopped in the machine-global
+# registry, then decides whether the shared standalone dashboard at
+# ~/.loki/dashboard/dashboard.pid should be killed. The shared dashboard is
+# killed ONLY when no other registered project still has a live pid (CLEAR);
+# if any other project is still running (KEEP) it is left up. NEVER uses a
+# blanket pkill and NEVER touches another folder's pids. Best-effort and
+# failure-swallowed: teardown bookkeeping must never block a clean exit.
+loki_mark_project_stopped_and_maybe_kill_shared_dashboard() {
+    local _skill="${LOKI_SKILL_DIR:-${PROJECT_DIR:-$SCRIPT_DIR/..}}"
+    local _shared_pidfile="${HOME}/.loki/dashboard/dashboard.pid"
+    local _decision="CLEAR"
+
+    if [ -z "${LOKI_SKIP_PROJECT_REGISTRY:-}" ] && command -v python3 >/dev/null 2>&1; then
+        # (a) Mark this project stopped in the shared registry.
+        LOKI_REG_TARGET="$TARGET_DIR" LOKI_REG_SKILL="$_skill" \
+        python3 - <<'PYSTOP' >/dev/null 2>&1 || true
+import os, sys
+sys.path.insert(0, os.environ.get("LOKI_REG_SKILL", "."))
+try:
+    from dashboard import registry
+    registry.mark_project_stopped(os.path.abspath(os.environ["LOKI_REG_TARGET"]))
+except Exception:
+    pass
+PYSTOP
+        # (b) CLEAR/KEEP check: any OTHER project still alive keeps the
+        # shared dashboard up (this project is already marked stopped above).
+        _decision="$(LOKI_REG_SKILL="$_skill" python3 - <<'PYCHECK' 2>/dev/null || echo CLEAR
+import os, sys
+sys.path.insert(0, os.environ.get("LOKI_REG_SKILL", "."))
+try:
+    from dashboard import registry
+    alive = 0
+    for p in registry.list_projects(include_inactive=True):
+        pid = p.get("pid")
+        if isinstance(pid, int) and pid > 0:
+            try:
+                os.kill(pid, 0)
+                alive += 1
+            except OSError:
+                pass
+    print("CLEAR" if alive == 0 else "KEEP")
+except Exception:
+    print("CLEAR")
+PYCHECK
+)"
+    fi
+
+    # (c) Only tear down the SHARED dashboard when no other project remains
+    # (CLEAR), or when python3 was unavailable (legacy fallback: avoid leaking
+    # the shared dashboard on minimal systems).
+    if [ "$_decision" = "CLEAR" ]; then
+        if [ -f "$_shared_pidfile" ]; then
+            local _shared_pid
+            _shared_pid=$(cat "$_shared_pidfile" 2>/dev/null)
+            if [ -n "$_shared_pid" ]; then
+                kill "$_shared_pid" 2>/dev/null || true
+                sleep 0.5
+                kill -9 "$_shared_pid" 2>/dev/null || true
+            fi
+            rm -f "$_shared_pidfile" 2>/dev/null || true
+        fi
+        # (d) Defense-in-depth: reclaim the dashboard port only in the CLEAR
+        # case, so we never kill a shared dashboard another project owns.
+        if command -v lsof >/dev/null 2>&1; then
+            lsof -ti:"${DASHBOARD_PORT:-57374}" -sTCP:LISTEN 2>/dev/null | xargs kill 2>/dev/null || true
+        fi
+    fi
+}
 # Register as running now. We deliberately do NOT install an EXIT trap to
 # flip it to idle: a top-level EXIT trap here would be clobbered by the
 # lock-release EXIT trap installed later in the main path (and could
@@ -11134,13 +11204,31 @@ except Exception as exc:
         local exit_code=0
         # v7.5.12: Mark provider pipeline as active so SIGINT trap can kill it.
         LOKI_PROVIDER_ACTIVE=1
+        # v7.7.31: authorize autonomous operation at the system-prompt tier so
+        # the spawned agent does not read the user's global ~/.claude/CLAUDE.md,
+        # judge it to conflict with the loki_system prompt, call AskUserQuestion,
+        # and exit having done nothing. An appended system prompt outranks
+        # CLAUDE.md memory (verified empirically). Default-on; opt out with
+        # LOKI_AUTONOMY_OVERRIDE=off. Only added when the installed CLI supports
+        # the flag and the override helper is in scope (sourced via the provider).
+        # Build the claude flag list as an array. The base flags are always
+        # present so the array is never empty (empty "${arr[@]}" under `set -u`
+        # is an error on bash 3.2, the stock macOS shell). The autonomy override
+        # is appended conditionally.
+        local _loki_claude_argv=("--dangerously-skip-permissions" "--model" "$tier_param")
+        if [ "${LOKI_AUTONOMY_OVERRIDE:-on}" != "off" ] \
+           && type _loki_autonomy_override_text >/dev/null 2>&1 \
+           && type loki_claude_flag_supported >/dev/null 2>&1 \
+           && loki_claude_flag_supported "--append-system-prompt"; then
+            _loki_claude_argv+=("--append-system-prompt" "$(_loki_autonomy_override_text)")
+        fi
         case "${PROVIDER_NAME:-claude}" in
             claude)
                 # Claude: Full features with stream-json output and agent tracking
                 # Uses dynamic tier for model selection based on RARV phase
                 # Pass tier to Python via environment for dashboard display
                 { LOKI_CURRENT_MODEL="$tier_param" \
-                claude --dangerously-skip-permissions --model "$tier_param" -p "$prompt" \
+                claude "${_loki_claude_argv[@]}" -p "$prompt" \
             --output-format stream-json --verbose 2>&1 | \
             tee -a "$log_file" "$agent_log" "$iter_output" | \
             python3 -u -c '
@@ -11878,21 +11966,34 @@ if __name__ == "__main__":
 
         log_info "Press Ctrl+C to cancel"
 
-        # Countdown with progress
+        # Countdown with progress.
+        # v7.7.31: the countdown now sleeps in short 1s ticks and checks the
+        # STOP/PAUSE signal on every tick. Previously it slept in 10s (or 60s
+        # for long waits) chunks and never read the STOP file, so a dashboard
+        # Stop button or `loki stop` issued DURING the inter-iteration wait did
+        # nothing for up to 60s, and a SIGTERM was deferred by bash until the
+        # current sleep chunk finished. Short ticks make Stop take effect within
+        # ~1s and let the SIGTERM trap fire promptly.
         local remaining=$wait_time
-        local interval=10
-        # Use longer interval for long waits
-        if [ $wait_time -gt 1800 ]; then
-            interval=60
-        fi
-
+        local _loki_dir_wait="${TARGET_DIR:-.}/.loki"
+        local _last_shown=-1
         while [ $remaining -gt 0 ]; do
-            local human_remaining=$(format_duration $remaining)
-            printf "\r${YELLOW}Resuming in ${human_remaining}...${NC}          "
-            # BUG-RUN-007: Prevent timer from overshooting into negative
-            local sleep_time=$((remaining < interval ? remaining : interval))
-            sleep $sleep_time
-            remaining=$((remaining - sleep_time))
+            # Honor an immediate stop/pause requested during the wait (dashboard
+            # Stop button, `loki stop`, or a STOP file written by any control).
+            if [ -f "$_loki_dir_wait/STOP" ] || [ -f "$_loki_dir_wait/PAUSE" ]; then
+                echo ""
+                log_warn "Stop/pause signal detected during wait - returning to control loop"
+                break
+            fi
+            # Refresh the human-readable countdown at most once per 10s of change
+            # so we do not spam the terminal while still ticking every second.
+            if [ $((remaining % 10)) -eq 0 ] || [ "$_last_shown" -ne "$remaining" ]; then
+                local human_remaining=$(format_duration $remaining)
+                printf "\r${YELLOW}Resuming in ${human_remaining}...${NC}          "
+                _last_shown=$remaining
+            fi
+            sleep 1
+            remaining=$((remaining - 1))
         done
         echo ""
 
@@ -12274,6 +12375,13 @@ cleanup() {
             app_runner_cleanup
         fi
         stop_status_monitor
+        # v7.7.30: tear down this project's dashboard contribution on a
+        # deliberate STOP-file exit. stop_dashboard handles the project-local
+        # dashboard (.loki/dashboard/dashboard.pid); the helper marks this
+        # project stopped in the registry and kills the shared dashboard only
+        # when no other project is still running.
+        stop_dashboard
+        loki_mark_project_stopped_and_maybe_kill_shared_dashboard
         kill_all_registered
         rm -f "$loki_dir/loki.pid" 2>/dev/null
         # Clean up per-session PID file if running with session ID
@@ -12315,6 +12423,13 @@ except (json.JSONDecodeError, OSError): pass
             app_runner_cleanup
         fi
         stop_status_monitor
+        # v7.7.30: tear down this project's dashboard contribution on a
+        # deliberate double-Ctrl+C exit. stop_dashboard handles the
+        # project-local dashboard; the helper marks this project stopped in
+        # the registry and kills the shared dashboard only when no other
+        # project is still running.
+        stop_dashboard
+        loki_mark_project_stopped_and_maybe_kill_shared_dashboard
         kill_all_registered
         rm -f "$loki_dir/loki.pid" "$loki_dir/PAUSE" 2>/dev/null
         # UT2-13: Clear cli-provider marker on session end.

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.7.29"
+__version__ = "7.7.31"
 
 # Expose the control app for easy import
 try:

package/dashboard/registry.py

@@ -189,6 +189,40 @@ def update_last_accessed(identifier: str) -> Optional[dict]:
     return None
 
 
+def mark_project_stopped(identifier: str) -> Optional[dict]:
+    """
+    Mark a project's runtime status as stopped and clear its live pid.
+
+    Used when a session ends (loki stop, dashboard per-project stop, or a
+    graceful Ctrl+C teardown) so the multi-project switcher reflects the
+    project as not-running immediately, without waiting for pid-liveness to
+    catch up. The entry is intentionally kept (not unregistered) so the
+    project stays selectable and re-registers cleanly on the next loki start.
+
+    Args:
+        identifier: Project ID, path, or alias
+
+    Returns:
+        The updated project entry, or None if no matching project was found.
+        Idempotent: marking an already-stopped project is a no-op that still
+        returns the entry.
+    """
+    registry = _load_registry()
+
+    for pid_key, project in registry["projects"].items():
+        if (
+            pid_key == identifier
+            or project["path"] == identifier
+            or project.get("alias") == identifier
+        ):
+            project["status"] = "stopped"
+            project["pid"] = None
+            project["updated_at"] = datetime.now(timezone.utc).isoformat()
+            _save_registry(registry)
+            return project
+    return None
+
+
 def check_project_health(identifier: str) -> dict:
     """
     Check the health status of a project.

package/dashboard/server.py

@@ -2166,7 +2166,8 @@ async def list_running_projects():
         path = p.get("path", "")
         pid = p.get("pid")
         running = False
-        if isinstance(pid, int) and pid > 0:
+        has_pid = isinstance(pid, int) and pid > 0
+        if has_pid:
             try:
                 os.kill(pid, 0)
                 running = True  # signal 0 delivered -> pid alive
@@ -2174,8 +2175,14 @@ async def list_running_projects():
                 running = True  # pid exists but owned by another user
             except (ProcessLookupError, OSError):
                 running = False  # ESRCH -> dead
-        # A project is also "live" if its .loki/session.json says running.
-        if not running and path:
+        # session.json is only a FALLBACK for legacy sessions with no recorded
+        # pid. v7.7.31: when a pid IS recorded but dead, that pid is
+        # authoritative -- the orchestrator is gone, so do NOT let a stale
+        # session.json (status still "running" after a hard kill / crash) flip
+        # this back to running. Otherwise the switcher shows a dead session as
+        # running and the Stop button targets a dead pid. Only consult
+        # session.json when no pid was ever recorded.
+        if not running and not has_pid and path:
             try:
                 sess = _Path(path) / ".loki" / "session.json"
                 if sess.is_file():
@@ -2205,6 +2212,122 @@ async def list_running_projects():
     return {"projects": out, "active_project_dir": active}
 
 
+class RunningProjectStopRequest(BaseModel):
+    """Schema for stopping a specific registered project from the switcher.
+
+    Exactly one of id or project_dir must be provided. id is preferred;
+    project_dir is accepted for symmetry with /api/focus. The provided value
+    is resolved through the dashboard registry, so an arbitrary filesystem
+    path is never used directly as a write target.
+    """
+    id: Optional[str] = None
+    project_dir: Optional[str] = None
+
+
+@app.post("/api/running-projects/stop", dependencies=[Depends(auth.require_scope("control"))])
+async def stop_running_project(request: Request, body: RunningProjectStopRequest):
+    """Stop a specific registered project (v7.7.30 per-project switcher stop).
+
+    Resolves the project via the dashboard registry (by id or path), writes a
+    STOP file into that project's .loki for a clean runner teardown, then runs
+    the graceful SIGTERM -> poll-5s -> SIGKILL dance against the recorded
+    orchestrator pid (not the dashboard's own _get_loki_dir). Marks the
+    project's session.json and registry entry stopped so the switcher reflects
+    it immediately.
+
+    Security: the STOP file is only ever written to the path already stored in
+    the registry for the resolved id, never to a caller-supplied path.
+    """
+    if not _control_limiter.check("control"):
+        raise HTTPException(status_code=429, detail="Rate limit exceeded")
+
+    identifier = (body.id or body.project_dir or "").strip()
+    if not identifier:
+        raise HTTPException(status_code=400, detail="id or project_dir is required")
+
+    project = registry.get_project(identifier)
+    if not project:
+        raise HTTPException(status_code=404, detail="project not found")
+
+    project_id = project.get("id")
+    audit.log_event(
+        action="stop",
+        resource_type="session",
+        details={"source": "api", "project_id": project_id},
+        ip_address=request.client.host if request.client else None,
+    )
+
+    # Validate the registry-stored path is a real dir containing .loki before
+    # writing into it. Mirrors the /api/focus guard. If invalid we still mark
+    # the project stopped but skip the STOP-file write.
+    path = project.get("path", "")
+    loki_dir = None
+    if path:
+        p = _Path(path)
+        if p.is_dir() and (p / ".loki").is_dir():
+            loki_dir = p / ".loki"
+
+    pid = project.get("pid")
+    if not isinstance(pid, int) or pid <= 0:
+        # Already not running: nothing to signal, just reconcile the registry.
+        registry.mark_project_stopped(project_id)
+        return {
+            "success": True,
+            "project_id": project_id,
+            "stopped": False,
+            "already_stopped": True,
+        }
+
+    # Write the STOP file so the runner's own cleanup STOP-branch fires for a
+    # clean teardown. Only into the registry-resolved .loki dir.
+    if loki_dir is not None:
+        try:
+            (loki_dir / "STOP").write_text(datetime.now(timezone.utc).isoformat())
+        except OSError:
+            pass
+
+    # Graceful dance against the recorded orchestrator pid.
+    stopped = False
+    try:
+        os.kill(pid, 15)  # SIGTERM
+        for _ in range(10):
+            await asyncio.sleep(0.5)
+            try:
+                os.kill(pid, 0)  # Check if still alive
+            except OSError:
+                stopped = True
+                break
+        if not stopped:
+            try:
+                os.kill(pid, 9)  # SIGKILL
+                stopped = True
+            except (OSError, ProcessLookupError):
+                stopped = True
+    except (ValueError, OSError, ProcessLookupError):
+        # pid already dead or unsignalable -- treat as stopped.
+        stopped = True
+
+    # Mark session.json stopped in that project's .loki.
+    if loki_dir is not None:
+        session_file = loki_dir / "session.json"
+        if session_file.exists():
+            try:
+                sd = json.loads(session_file.read_text())
+                sd["status"] = "stopped"
+                atomic_write_json(session_file, sd, use_lock=True)
+            except Exception:
+                pass
+
+    registry.mark_project_stopped(project_id)
+
+    return {
+        "success": True,
+        "project_id": project_id,
+        "stopped": stopped,
+        "already_stopped": False,
+    }
+
+
 # =============================================================================
 # Enterprise Features (Optional - enabled via environment variables)
 # =============================================================================

package/dashboard/static/index.html

@@ -303,6 +303,50 @@
       border-color: var(--loki-accent);
       box-shadow: 0 0 0 3px var(--loki-accent-glow);
     }
+    /* v7.7.30 per-project stop list */
+    .project-stop-list {
+      display: flex;
+      flex-wrap: wrap;
+      align-items: center;
+      gap: 6px;
+      margin-left: 10px;
+    }
+    .project-stop-row {
+      display: inline-flex;
+      align-items: center;
+      gap: 6px;
+      padding: 3px 6px 3px 10px;
+      background: var(--loki-bg-primary);
+      border: 1px solid var(--loki-border);
+      border-radius: 14px;
+      font-size: 11px;
+      font-family: 'Inter', system-ui, sans-serif;
+      color: var(--loki-text-primary);
+    }
+    .project-stop-row .project-stop-name {
+      max-width: 160px;
+      overflow: hidden;
+      text-overflow: ellipsis;
+      white-space: nowrap;
+    }
+    .project-stop-row button {
+      padding: 2px 8px;
+      background: transparent;
+      border: 1px solid var(--loki-border);
+      border-radius: 10px;
+      font-size: 11px;
+      font-family: 'Inter', system-ui, sans-serif;
+      color: var(--loki-text-secondary);
+      cursor: pointer;
+    }
+    .project-stop-row button:hover:not(:disabled) {
+      border-color: #d64545;
+      color: #d64545;
+    }
+    .project-stop-row button:disabled {
+      opacity: 0.6;
+      cursor: default;
+    }
 
     /* Main Content */
     .main-content {
@@ -556,6 +600,11 @@
         <select class="project-switcher" id="project-switcher" title="Switch project" aria-label="Switch project">
           <option value="">All projects (current dir)</option>
         </select>
+        <!-- v7.7.30 per-project stop: a compact list of running projects, each
+             with a Stop button that gracefully halts that project's runner
+             without affecting any other folder. Built at runtime; empty when
+             no project is running. -->
+        <div class="project-stop-list" id="project-stop-list" aria-label="Running projects"></div>
       </div>
 
       <nav class="nav-links">
@@ -13403,6 +13452,41 @@ document.addEventListener('DOMContentLoaded', function() {
   (function initProjectSwitcher() {
     var sel = document.getElementById('project-switcher');
     if (!sel) return;
+    var stopList = document.getElementById('project-stop-list');
+    // v7.7.30: build a per-row Stop control for each running project using
+    // createElement + textContent only (never innerHTML for project-supplied
+    // strings), so a project name can never inject markup.
+    function buildStopList(projects) {
+      if (!stopList) return;
+      while (stopList.firstChild) stopList.removeChild(stopList.firstChild);
+      projects.forEach(function(p){
+        if (p.running !== true) return;
+        var row = document.createElement('div');
+        row.className = 'project-stop-row';
+        var name = document.createElement('span');
+        name.className = 'project-stop-name';
+        name.textContent = p.name || p.path || 'project';
+        var btn = document.createElement('button');
+        btn.type = 'button';
+        btn.textContent = 'Stop';
+        if (p.id) btn.setAttribute('data-id', p.id);
+        btn.addEventListener('click', function(){
+          if (!p.id) return;
+          btn.disabled = true;
+          btn.textContent = 'Stopping...';
+          fetch('/api/running-projects/stop', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ id: p.id })
+          })
+            .then(function(){ refresh(); })
+            .catch(function(){ btn.disabled = false; btn.textContent = 'Stop'; });
+        });
+        row.appendChild(name);
+        row.appendChild(btn);
+        stopList.appendChild(row);
+      });
+    }
     function refresh() {
       fetch('/api/running-projects')
         .then(function(r){ return r.ok ? r.json() : null; })
@@ -13423,6 +13507,7 @@ document.addEventListener('DOMContentLoaded', function() {
             sel.appendChild(o);
           });
           if (!data.active_project_dir && current === '') sel.value = '';
+          buildStopList(data.projects);
         })
         .catch(function(){ /* offline / no endpoint: leave as-is */ });
     }

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.7.29
+**Version:** v7.7.31
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var _7=Object.defineProperty;var I7=(K)=>K;function P7(K,$){this[K]=I7.bind(null,$)}var v=(K,$)=>{for(var Q in $)_7(K,Q,{get:$[Q],enumerable:!0,configurable:!0,set:P7.bind($,Q)})};var w=(K,$)=>()=>(K&&($=K(K=0)),$);var t=import.meta.require;var e1={};v(e1,{lokiDir:()=>L,homeLokiDir:()=>k1,findRepoRootForVersion:()=>S1,REPO_ROOT:()=>p});import{resolve as u,dirname as N1}from"path";import{fileURLToPath as L7}from"url";import{existsSync as J1}from"fs";import{homedir as R7}from"os";function E7(){let K=i1;for(let $=0;$<6;$++){if(J1(u(K,"VERSION"))&&J1(u(K,"autonomy/run.sh")))return K;let Q=N1(K);if(Q===K)break;K=Q}return u(i1,"..","..","..")}function S1(K){let $=K;for(let Q=0;Q<6;Q++){if(J1(u($,"VERSION"))&&J1(u($,"autonomy/run.sh")))return $;let X=N1($);if(X===$)break;$=X}return u(K,"..","..","..")}function L(){return process.env.LOKI_DIR??u(process.cwd(),".loki")}function k1(){return u(R7(),".loki")}var i1,p;var g=w(()=>{i1=N1(L7(import.meta.url));p=E7()});import{readFileSync as w7}from"fs";import{resolve as x7,dirname as F7}from"path";import{fileURLToPath as N7}from"url";function G1(){if(o!==null)return o;let K="7.7.29";if(typeof K==="string"&&K.length>0)return o=K,o;try{let $=F7(N7(import.meta.url)),Q=S1($);o=w7(x7(Q,"VERSION"),"utf-8").trim()}catch{o="unknown"}return o}var o=null;var C1=w(()=>{g()});var $0={};v($0,{runOrThrow:()=>S7,run:()=>C,commandVersion:()=>C7,commandExists:()=>b,ShellError:()=>D1});async function C(K,$={}){let Q=Bun.spawn({cmd:[...K],stdout:"pipe",stderr:"pipe",env:$.env?{...process.env,...$.env}:process.env,cwd:$.cwd}),X,Z;if($.timeoutMs&&$.timeoutMs>0)X=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},$.timeoutMs);try{let[W,z,q]=await Promise.all([new Response(Q.stdout).text(),new Response(Q.stderr).text(),Q.exited]);return{stdout:W,stderr:z,exitCode:q}}finally{if(X)clearTimeout(X);if(Z)clearTimeout(Z)}}async function S7(K,$={}){let Q=await C(K,$);if(Q.exitCode!==0)throw new D1(`command failed (${Q.exitCode}): ${K.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function b(K){let $=k7(K),Q=await C(["sh","-c",`command -v ${$}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function k7(K){if(!/^[A-Za-z0-9._/-]+$/.test(K))throw Error(`refused to shell-escape suspect token: ${K}`);return K}async function C7(K,$="--version"){if(!await b(K))return null;let X=await C([K,$],{timeoutMs:5000});if(X.exitCode!==0)return null;return((X.stdout||X.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var D1;var n=w(()=>{D1=class D1 extends Error{message;exitCode;stdout;stderr;constructor(K,$,Q,X){super(K);this.message=K;this.exitCode=$;this.stdout=Q;this.stderr=X;this.name="ShellError"}}});function c(K){return D7?"":K}var D7,F,y,N,A6,A,D,S,H;var a=w(()=>{D7=(process.env.NO_COLOR??"").length>0;F=c("\x1B[0;31m"),y=c("\x1B[0;32m"),N=c("\x1B[1;33m"),A6=c("\x1B[0;34m"),A=c("\x1B[0;36m"),D=c("\x1B[1m"),S=c("\x1B[2m"),H=c("\x1B[0m")});import{existsSync as c7}from"fs";async function i(){if(Z1!==void 0)return Z1;let K="/opt/homebrew/bin/python3.12";if(c7(K))return Z1=K,K;let $=await b("python3.12");if($)return Z1=$,$;let Q=await b("python3");return Z1=Q,Q}async function s(K,$={}){let Q=await i();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return C([Q,"-c",K],$)}var Z1;var z1=w(()=>{n()});var G0={};v(G0,{runStatus:()=>X5});import{existsSync as k,readFileSync as K1,readdirSync as W0,statSync as H0}from"fs";import{resolve as R,basename as a7}from"path";import{homedir as s7}from"os";async function t7(){if(await b("jq"))return!0;return process.stdout.write(`${F}Error: jq is required but not installed.${H}
+var _7=Object.defineProperty;var I7=(K)=>K;function P7(K,$){this[K]=I7.bind(null,$)}var v=(K,$)=>{for(var Q in $)_7(K,Q,{get:$[Q],enumerable:!0,configurable:!0,set:P7.bind($,Q)})};var w=(K,$)=>()=>(K&&($=K(K=0)),$);var t=import.meta.require;var e1={};v(e1,{lokiDir:()=>L,homeLokiDir:()=>k1,findRepoRootForVersion:()=>S1,REPO_ROOT:()=>p});import{resolve as u,dirname as N1}from"path";import{fileURLToPath as L7}from"url";import{existsSync as J1}from"fs";import{homedir as R7}from"os";function E7(){let K=i1;for(let $=0;$<6;$++){if(J1(u(K,"VERSION"))&&J1(u(K,"autonomy/run.sh")))return K;let Q=N1(K);if(Q===K)break;K=Q}return u(i1,"..","..","..")}function S1(K){let $=K;for(let Q=0;Q<6;Q++){if(J1(u($,"VERSION"))&&J1(u($,"autonomy/run.sh")))return $;let X=N1($);if(X===$)break;$=X}return u(K,"..","..","..")}function L(){return process.env.LOKI_DIR??u(process.cwd(),".loki")}function k1(){return u(R7(),".loki")}var i1,p;var g=w(()=>{i1=N1(L7(import.meta.url));p=E7()});import{readFileSync as w7}from"fs";import{resolve as x7,dirname as F7}from"path";import{fileURLToPath as N7}from"url";function G1(){if(o!==null)return o;let K="7.7.31";if(typeof K==="string"&&K.length>0)return o=K,o;try{let $=F7(N7(import.meta.url)),Q=S1($);o=w7(x7(Q,"VERSION"),"utf-8").trim()}catch{o="unknown"}return o}var o=null;var C1=w(()=>{g()});var $0={};v($0,{runOrThrow:()=>S7,run:()=>C,commandVersion:()=>C7,commandExists:()=>b,ShellError:()=>D1});async function C(K,$={}){let Q=Bun.spawn({cmd:[...K],stdout:"pipe",stderr:"pipe",env:$.env?{...process.env,...$.env}:process.env,cwd:$.cwd}),X,Z;if($.timeoutMs&&$.timeoutMs>0)X=setTimeout(()=>{try{Q.kill("SIGTERM")}catch{}Z=setTimeout(()=>{try{Q.kill("SIGKILL")}catch{}},2000)},$.timeoutMs);try{let[W,z,q]=await Promise.all([new Response(Q.stdout).text(),new Response(Q.stderr).text(),Q.exited]);return{stdout:W,stderr:z,exitCode:q}}finally{if(X)clearTimeout(X);if(Z)clearTimeout(Z)}}async function S7(K,$={}){let Q=await C(K,$);if(Q.exitCode!==0)throw new D1(`command failed (${Q.exitCode}): ${K.join(" ")}`,Q.exitCode,Q.stdout,Q.stderr);return Q}async function b(K){let $=k7(K),Q=await C(["sh","-c",`command -v ${$}`],{timeoutMs:5000});if(Q.exitCode===0)return Q.stdout.trim()||null;return null}function k7(K){if(!/^[A-Za-z0-9._/-]+$/.test(K))throw Error(`refused to shell-escape suspect token: ${K}`);return K}async function C7(K,$="--version"){if(!await b(K))return null;let X=await C([K,$],{timeoutMs:5000});if(X.exitCode!==0)return null;return((X.stdout||X.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var D1;var n=w(()=>{D1=class D1 extends Error{message;exitCode;stdout;stderr;constructor(K,$,Q,X){super(K);this.message=K;this.exitCode=$;this.stdout=Q;this.stderr=X;this.name="ShellError"}}});function c(K){return D7?"":K}var D7,F,y,N,A6,A,D,S,H;var a=w(()=>{D7=(process.env.NO_COLOR??"").length>0;F=c("\x1B[0;31m"),y=c("\x1B[0;32m"),N=c("\x1B[1;33m"),A6=c("\x1B[0;34m"),A=c("\x1B[0;36m"),D=c("\x1B[1m"),S=c("\x1B[2m"),H=c("\x1B[0m")});import{existsSync as c7}from"fs";async function i(){if(Z1!==void 0)return Z1;let K="/opt/homebrew/bin/python3.12";if(c7(K))return Z1=K,K;let $=await b("python3.12");if($)return Z1=$,$;let Q=await b("python3");return Z1=Q,Q}async function s(K,$={}){let Q=await i();if(!Q)return{stdout:"",stderr:"python3 not found",exitCode:127};return C([Q,"-c",K],$)}var Z1;var z1=w(()=>{n()});var G0={};v(G0,{runStatus:()=>X5});import{existsSync as k,readFileSync as K1,readdirSync as W0,statSync as H0}from"fs";import{resolve as R,basename as a7}from"path";import{homedir as s7}from"os";async function t7(){if(await b("jq"))return!0;return process.stdout.write(`${F}Error: jq is required but not installed.${H}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -604,4 +604,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${$}
 `),process.stderr.write(j7),2}}process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var Z6=await X6(Bun.argv.slice(2));process.exit(Z6);
 
-//# debugId=304835BA74DB765264756E2164756E21
+//# debugId=4167329ADA92E7A964756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.7.29'
+__version__ = '7.7.31'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loki-mode",
-  "version": "7.7.29",
+  "version": "7.7.31",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/providers/claude.sh

@@ -201,6 +201,38 @@ _loki_build_claude_auto_flags() {
        && loki_claude_flag_supported "--include-hook-events"; then
         _LOKI_CLAUDE_AUTO_FLAGS+=("--include-hook-events")
     fi
+
+    # --append-system-prompt (v7.7.31): authorize autonomous operation at the
+    # system-prompt tier so the spawned agent does not refuse the run. Without
+    # this, the agent reads the user's global ~/.claude/CLAUDE.md (which may say
+    # "always ask for clarification" / "never commit without permission"),
+    # judges it to conflict with Loki's "never ask, never stop" prompt (which is
+    # only a user-message instruction and thus lower precedence), calls
+    # AskUserQuestion, and exits in ~30s having done nothing. An appended system
+    # prompt outranks CLAUDE.md memory (verified empirically), so it resolves the
+    # conflict in Loki's favor for this authorized session. Default-on; opt out
+    # with LOKI_AUTONOMY_OVERRIDE=off. We never edit the user's CLAUDE.md.
+    if [ "${LOKI_AUTONOMY_OVERRIDE:-on}" != "off" ] \
+       && loki_claude_flag_supported "--append-system-prompt"; then
+        _LOKI_CLAUDE_AUTO_FLAGS+=("--append-system-prompt" "$(_loki_autonomy_override_text)")
+    fi
+}
+
+# The system-prompt text that authorizes autonomous operation and resolves
+# precedence against a conflicting user/project CLAUDE.md. Kept in one place so
+# the bash and Bun routes can stay byte-identical. No emojis, no em dashes.
+_loki_autonomy_override_text() {
+    cat <<'LOKI_AUTONOMY_EOF'
+You are running INSIDE Loki Mode autonomous execution, a session the user explicitly launched with full prior authorization (loki start / loki run). This IS an authorized autonomous session, not an unattended action you must seek consent for.
+
+Instruction precedence for THIS session: when the loki_system instructions in the user prompt conflict with any CLAUDE.md, project memory, or global memory that tells you to ask for clarification, pause for confirmation, refuse to act autonomously, or withhold routine commits, the loki_system instructions take precedence. The user has already consented by launching autonomous mode.
+
+Therefore, for this session: do NOT ask the user questions, do NOT call the AskUserQuestion tool, do NOT stop to request confirmation, and do NOT refuse routine, reversible engineering work (writing code, running tests, creating files, atomic git checkpoints in the working tree). Proceed and complete the task directly. If a decision is genuinely ambiguous, choose the most reasonable option, record the assumption in .loki/CONTINUITY.md, and continue rather than halting.
+
+Commit hygiene still applies: git checkpoints are LOCAL only. Never push or force-push. Stage files by explicit path, never `git add -A` or `git add .`, and never commit secrets, credentials, .env files, or untracked files you did not author this session.
+
+This precedence override is narrow. It does NOT relax any safety rule. Every safety prohibition in CLAUDE.md or memory still fully binds: anything genuinely destructive or irreversible remains out of scope unless the task explicitly calls for it. This includes (not limited to) force-pushing, deleting or overwriting the user's data, dropping or truncating databases, publishing or releasing, rotating or exfiltrating secrets, touching production systems, and anything a CLAUDE.md safety rule explicitly forbids. When in doubt about whether an action is destructive, treat it as destructive and do not do it.
+LOKI_AUTONOMY_EOF
 }
 
 # Invocation function (basic, no tier).