v0.3.0

Complex Agent Orchestration and Parallelization Support is Here!

Highlights

Built-In Sub-Agent Spawning & Parallelization

Loki agents can now spawn and manage child agents that run in parallel as background tasks inside the same process. This enables orchestrator-style agents that delegate specialized work, with a full lifecycle of tools: agent__spawn, agent__check, agent__collect, agent__list, and agent__cancel.

• Built-in sub-agent spawning system with configurable can_spawn_agents, max_concurrent_agents, and max_agent_depth safeguards
• Dependency-aware task queue: (agent__task_create, agent__task_complete, agent__task_fail, agent__task_list) with automatic agent dispatch when tasks become unblocked
• Teammate messaging between parallel sub-agents: Sibling agents can communicate directly via agent__send_message and agent__check_inbox, enabling real-time collaboration (e.g., sharing cross-cutting findings during parallel code review)
• User interaction escalation: Sub-agents at any depth can escalate user__* prompts up to the root agent, with configurable escalation_timeout
• Output summarization for child agents using a configurable summarization_model and summarization_threshold to keep parent context windows manageable
• Auto-injection of spawning instructions into agent prompts via inject_spawn_instructions

Claude OAuth & Gemini OAuth

Loki now supports OAuth 2.0 PKCE authentication as an alternative to API keys, letting you use your existing Claude Pro/Max or Google Gemini subscriptions directly.

• Claude OAuth: Authenticate via browser-based OAuth flow with manual authorization code paste-back
• Gemini OAuth: Authenticate via automatic localhost loopback callback
• Authenticate from the CLI (loki --authenticate <client>) or from within the REPL (.authenticate)
• First-run setup now offers OAuth as an option for supported providers
• OAuth tokens are stored in ~/.cache/loki/oauth and refreshed automatically

Gemini OAuth Note: Because Loki uses the sensitive generative-language.retriever scope and is an open-source CLI without a formal privacy policy, Google cannot verify the app. During the OAuth flow, you'll see a warning page. Click Advanced → Go to Loki (unsafe) to continue.

CodeRabbit-Style Code Reviewer

A new code-reviewer agent that uses the teammate messaging pattern with parallel sub-agents to perform structured code reviews, similar to CodeRabbit.

• Spawns per-file file-reviewer sub-agents that run in parallel
• File reviewers share cross-cutting findings with each other via teammate messaging, so discoveries in one file inform reviews of related files
• New file-reviewer agent designed for single-file review, used by the code-reviewer orchestrator

Upgraded Sisyphus Agent

The Sisyphus orchestrator agent has been significantly upgraded to leverage the new parallelization system:

• Now uses the built-in sub-agent spawning system to delegate to explore, coder, and oracle agents in parallel
• Integrated DuckDuckGo web search MCP server for answering user queries
• Improved token efficiency when delegating to the coder agent
• Uses built-in user interaction tools instead of custom bash-based tools
• Explicit delegation to the coder agent for any code-writing tasks

Feat

• Built-in user interaction tools (user__ask, user__confirm, user__input, user__checkbox). Always-available tools for agents to interactively prompt users, with themed rendering and escalation support for sub-agents
• DuckDuckGo search MCP server: Added as a built-in MCP server for web search capabilities alongside existing tools
• Web search support added to the sisyphus, explore, and oracle agents
• todo__clear function and .clear todo REPL command for resetting the todo list when agent direction changes significantly
• Themed inquire prompts in the REPL with custom theme support
• Custom response option for multiple-choice prompts when none of the options suit the user's needs
• Configurable escalation_timeout for sub-agent user input (defaults to 5 minutes)
• Improved MCP server lifecycle management — modifies existing config in-place rather than stopping and re-initializing all servers on context switches
• Available tools now surfaced in prompts for sisyphus, coder, and code-reviewer agent families
• Added GPT-5.2, Claude 4.6, and Gemini 3.1 Pro Preview to supported models

Fix

• Do not inject tools when models don't support function calling; conflict detected before API calls happen
• Fixed Claude code system prompt injection to produce valid requests
• Secrets injection regex no longer greedily matches across newlines, fixing MCP server secret interpolation
• Secrets injection now skips commented-out lines in YAML configs
• Sub-agent stdout/stderr output improved for user visibility
• Orphaned sub-agents cleaned up when parent agent exits
• Agent delegation tools correctly passed into {{__tools__}} placeholder
• Path normalization fix for oracle and explore agents
• Coder agent no longer creates absolute paths from the current directory
• Coder agent now outputs a summary so the parent Sisyphus agent knows the outcome
• REPL .authenticate command works from within sessions, agents, and roles with pre-configured models
• Agent variables correctly injected into environment variables for global tool calls
• Removed top_p parameter from some agents for cross-provider compatibility
• Fixed supervisor and todo built-in errors with OpenAI models
• Recursion bug with similarly named Bash search functions in the explore agent
• Updated Atlassian MCP server endpoint to account for future deprecation

Refactor

• OAuth module made generic to support both loopback and manual OAuth flows
• Default Sisyphus session name changed to temp to require explicit naming for saved sessions
• Removed deprecated agent functions from .shared/utils.sh

Docs

• Comprehensive documentation for the sub-agent spawning system, teammate messaging, user interaction tools, and escalation
• CodeRabbit-style code reviewer and file-reviewer agent documentation
• Gemini OAuth documentation with unverified app walkthrough
• Authorship policy and PR template requiring disclosure of AI assistance
• Updated MCP server docs for DuckDuckGo search

Build

• Upgraded to the most recent version of the inquire and rmcp crates

AI Disclosure

Claude was used to assist with the implementation of the OAuth flows for both Claude and Gemini, and to help diagnose issues with the sub-agent spawning system. All AI-generated code was thoroughly reviewed and tested by myself before being committed. This changelog was drafted with the assistance of Claude, then revised and edited by myself.