Environment Variables

Environment Variables

Complete reference for all Loki Mode environment variables.

---

Core Settings

Variable	Default	Description
LOKI_PROVIDER	claude	AI provider: claude, codex, gemini
LOKI_MAX_RETRIES	50	Maximum retry attempts
LOKI_BASE_WAIT	60	Base wait time (seconds)
LOKI_MAX_WAIT	3600	Maximum wait time (seconds)
LOKI_SKIP_PREREQS	false	Skip prerequisite checks

---

Dashboard & API

Variable	Default	Description
LOKI_DASHBOARD	true	Enable web dashboard
LOKI_DASHBOARD_PORT	57374	Dashboard + API server port (FastAPI)
LOKI_DASHBOARD_HOST	127.0.0.1	Dashboard + API server bind address
LOKI_DASHBOARD_CORS	http://localhost:57374,http://127.0.0.1:57374	Comma-separated allowed CORS origins
LOKI_TLS_CERT	-	Path to PEM certificate file (enables HTTPS)
LOKI_TLS_KEY	-	Path to PEM private key file (enables HTTPS)
LOKI_API_PORT	(deprecated)	Legacy variable, no longer used. Dashboard serves API on unified port 57374 via LOKI_DASHBOARD_PORT
LOKI_API_HOST	localhost	Legacy API server host
LOKI_API_TOKEN	-	API authentication token (for legacy/remote access)

---

Resource Monitoring

Variable	Default	Description
LOKI_RESOURCE_CHECK_INTERVAL	300	Check interval (seconds)
LOKI_RESOURCE_CPU_THRESHOLD	80	CPU warning threshold (%)
LOKI_RESOURCE_MEM_THRESHOLD	80	Memory warning threshold (%)

---

Security & Autonomy

Variable	Default	Description
LOKI_STAGED_AUTONOMY	false	Require approval before execution
LOKI_AUDIT_LOG	true	Enable audit logging
LOKI_AUDIT_DISABLED	false	Disable audit logging
LOKI_MAX_PARALLEL_AGENTS	10	Max concurrent agents
LOKI_SANDBOX_MODE	false	Run in Docker sandbox
LOKI_ALLOWED_PATHS	-	Comma-separated allowed paths
LOKI_BLOCKED_COMMANDS	see below	Blocked shell commands
LOKI_PROMPT_INJECTION	false	Enable prompt injection (security risk)

Default Blocked Commands:

rm -rf /,dd if=,mkfs,:(){ :|:& };:

---

Enterprise Features

Variable	Default	Description
LOKI_ENTERPRISE_AUTH	false	Enable token authentication
LOKI_ENTERPRISE_AUDIT	false	Force audit on (legacy, audit is now on by default)
LOKI_AUDIT_DISABLED	false	Disable audit logging (overridden by LOKI_ENTERPRISE_AUDIT=true)
LOKI_AUDIT_SYSLOG_HOST	-	Syslog server hostname for audit forwarding
LOKI_AUDIT_SYSLOG_PORT	514	Syslog server port
LOKI_AUDIT_SYSLOG_PROTO	udp	Syslog protocol (udp or tcp)
LOKI_AUDIT_NO_INTEGRITY	false	Disable SHA-256 chain hashing on audit entries

OIDC / SSO Authentication (optional)

Variable	Default	Description
LOKI_OIDC_ISSUER	-	OIDC issuer URL (e.g., https://accounts.google.com, https://login.microsoftonline.com/{tenant}/v2.0)
LOKI_OIDC_CLIENT_ID	-	OIDC client/application ID from your identity provider
LOKI_OIDC_AUDIENCE	(client_id)	Expected JWT audience claim. Defaults to OIDC_CLIENT_ID if not set

OIDC is enabled when both LOKI_OIDC_ISSUER and LOKI_OIDC_CLIENT_ID are set. It works alongside token auth -- both methods can be active simultaneously. OIDC-authenticated users receive full access (["*"] scopes).

Branch Protection & Monitoring (v5.38.0)

Variable	Default	Description
LOKI_BRANCH_PROTECTION	false	Auto-create feature branches for agent sessions
LOKI_GEMINI_RPM	15	Gemini provider rate limit (requests per minute)

---

Budget Control (v5.37.0)

Variable	Default	Description
LOKI_BUDGET_LIMIT	-	Maximum cost in USD (e.g., 5.00). Session stops when exceeded

---

SDLC Phases

All phases are enabled by default (true).

Variable	Description
LOKI_PHASE_UNIT_TESTS	Run unit tests
LOKI_PHASE_API_TESTS	Functional API testing
LOKI_PHASE_E2E_TESTS	E2E/UI testing (Playwright)
LOKI_PHASE_SECURITY	Security scanning (OWASP)
LOKI_PHASE_INTEGRATION	Integration tests (SAML/OIDC/SSO)
LOKI_PHASE_CODE_REVIEW	3-reviewer parallel code review
LOKI_PHASE_WEB_RESEARCH	Competitor/feature research
LOKI_PHASE_PERFORMANCE	Load/performance testing
LOKI_PHASE_ACCESSIBILITY	WCAG compliance testing
LOKI_PHASE_REGRESSION	Regression testing
LOKI_PHASE_UAT	UAT simulation

Example - Disable E2E tests:

export LOKI_PHASE_E2E_TESTS=false

---

Completion & Loop Control

Variable	Default	Description
LOKI_COMPLETION_PROMISE	-	Explicit stop condition text
LOKI_MAX_ITERATIONS	1000	Maximum loop iterations
LOKI_PERPETUAL_MODE	false	Ignore ALL completion signals

Example - Custom completion promise:

export LOKI_COMPLETION_PROMISE="ALL TESTS PASSING 100%"

---

Completion Council (v5.25.0)

Variable	Default	Description
LOKI_COUNCIL_ENABLED	true	Enable the 3-member completion council
LOKI_COUNCIL_SIZE	3	Number of council members
LOKI_COUNCIL_THRESHOLD	2	Votes needed for completion decision
LOKI_COUNCIL_CHECK_INTERVAL	5	Check every N iterations
LOKI_COUNCIL_MIN_ITERATIONS	3	Minimum iterations before council runs
LOKI_COUNCIL_CONVERGENCE_WINDOW	3	Iterations to track for convergence
LOKI_COUNCIL_STAGNATION_LIMIT	5	Max iterations with no git changes

Example - Disable council:

export LOKI_COUNCIL_ENABLED=false

Example - More aggressive completion detection:

export LOKI_COUNCIL_CHECK_INTERVAL=3
export LOKI_COUNCIL_STAGNATION_LIMIT=3

---

Model Selection & Routing

Variable	Default	Description
LOKI_ALLOW_HAIKU	false	Enable Haiku for fast tier
LOKI_PROMPT_REPETITION	true	Prompt repetition for Haiku
LOKI_CONFIDENCE_ROUTING	true	Confidence-based model routing
LOKI_AUTONOMY_MODE	perpetual	perpetual, checkpoint, supervised

---

Parallel Workflows

Variable	Default	Description
LOKI_PARALLEL_MODE	false	Enable git worktree parallelism
LOKI_MAX_WORKTREES	5	Maximum parallel worktrees
LOKI_MAX_PARALLEL_SESSIONS	3	Maximum concurrent AI sessions
LOKI_PARALLEL_TESTING	true	Run testing in parallel
LOKI_PARALLEL_DOCS	true	Run docs in parallel
LOKI_PARALLEL_BLOG	false	Run blog in parallel
LOKI_AUTO_MERGE	true	Auto-merge completed features

---

Complexity Tier

Variable	Default	Description
LOKI_COMPLEXITY	auto	auto, simple, standard, complex

Tiers:

• simple: 3 phases (1-2 files, UI fixes)
• standard: 6 phases (3-10 files, features)
• complex: 8 phases (10+ files, integrations)

---

GitHub Integration

Variable	Default	Description
LOKI_GITHUB_IMPORT	false	Import issues as tasks
LOKI_GITHUB_PR	false	Create PR on completion
LOKI_GITHUB_SYNC	false	Sync status to issues
LOKI_GITHUB_REPO	-	Override repo (owner/repo)
LOKI_GITHUB_LABELS	-	Filter by labels
LOKI_GITHUB_MILESTONE	-	Filter by milestone
LOKI_GITHUB_ASSIGNEE	-	Filter by assignee
LOKI_GITHUB_LIMIT	100	Max issues to import
LOKI_GITHUB_PR_LABEL	-	Label for PRs

---

Notifications

Variable	Default	Description
LOKI_NOTIFICATIONS	true	Enable notifications
LOKI_NOTIFICATION_SOUND	true	Play notification sounds
LOKI_SLACK_WEBHOOK	-	Slack incoming webhook URL
LOKI_DISCORD_WEBHOOK	-	Discord webhook URL
LOKI_WEBHOOK_URL	-	Generic webhook URL
LOKI_PROJECT	-	Project name for notifications

Example - Slack notifications:

export LOKI_SLACK_WEBHOOK="https://hooks.slack.com/services/T00/B00/xxx"

---

Usage Examples

Minimal Setup (Individual)

# Just start - defaults work great
loki start ./my-prd.md

Development Setup

export LOKI_DASHBOARD=true
export LOKI_SLACK_WEBHOOK="https://hooks.slack.com/..."
export LOKI_MAX_RETRIES=100

TLS/HTTPS Setup

export LOKI_TLS_CERT=/path/to/cert.pem
export LOKI_TLS_KEY=/path/to/key.pem
loki dashboard start
# Or via CLI flags:
loki dashboard start --tls-cert /path/to/cert.pem --tls-key /path/to/key.pem

Enterprise Setup (Token Auth)

export LOKI_ENTERPRISE_AUTH=true
# Audit logging is enabled by default; no need to set LOKI_ENTERPRISE_AUDIT
export LOKI_SANDBOX_MODE=true
export LOKI_STAGED_AUTONOMY=true

Enterprise Setup (OIDC/SSO)

# Google Workspace example
export LOKI_OIDC_ISSUER=https://accounts.google.com
export LOKI_OIDC_CLIENT_ID=your-client-id.apps.googleusercontent.com

# Azure AD example
# export LOKI_OIDC_ISSUER=https://login.microsoftonline.com/{tenant-id}/v2.0
# export LOKI_OIDC_CLIENT_ID=your-application-id

# Okta example
# export LOKI_OIDC_ISSUER=https://your-org.okta.com
# export LOKI_OIDC_CLIENT_ID=your-client-id

# Optional: custom audience (defaults to client_id)
# export LOKI_OIDC_AUDIENCE=your-audience

# OIDC works alongside token auth -- both can be enabled simultaneously
export LOKI_ENTERPRISE_AUTH=true

CI/CD Setup

export LOKI_DASHBOARD=false
export LOKI_NOTIFICATIONS=false
export LOKI_MAX_ITERATIONS=100
export LOKI_COMPLEXITY=simple

Parallel Mode Setup

export LOKI_PARALLEL_MODE=true
export LOKI_MAX_WORKTREES=5
export LOKI_MAX_PARALLEL_SESSIONS=3
export LOKI_AUTO_MERGE=true

Monitoring Setup (v5.38.0)

# Prometheus scraping
# Point Prometheus scrape target at http://localhost:57374/metrics

# Syslog forwarding
export LOKI_AUDIT_SYSLOG_HOST=syslog.example.com
export LOKI_AUDIT_SYSLOG_PORT=514

# Branch protection
export LOKI_BRANCH_PROTECTION=true

# Budget limit
export LOKI_BUDGET_LIMIT=10.00