loki-mode 11.3.0 → 11.3.2

package/autonomy/loki

@@ -1691,6 +1691,22 @@ _help_answer() {
     echo "and sets LOKI_NO_BROWSER=1."
 }
 
+# `loki help verify-pr`: a Bun-only command (loki-ts), so its help lives here.
+_help_verify_pr() {
+    echo -e "${BOLD}loki verify-pr${NC} - Verify a PR against its linked issue (experimental, LOKI_VERIFY_PR=1)"
+    echo ""
+    echo "Usage: loki verify-pr <https://github.com/o/r/pull/N | o/r#N> [--out DIR]"
+    echo ""
+    echo "Derives a check from the PR's linked issue (Check: \`cmd\` or a loki-check fence)."
+    echo "VERIFIED only if the check fails on the PR base, passes on its head, and the"
+    echo "touched packages' suites pass. A PR with no linked issue, no check, a removed"
+    echo "test or a non-discriminating check is NOT PROVEN. Writes verify-pr-result.json."
+    echo "PR code runs only in the container sandbox (scripts/verify-pr-sandbox.sh); set"
+    echo "LOKI_VPR_IMAGE to a locally present image."
+    echo ""
+    echo "Exit codes: 0 verified, 2 usage or sandbox blocked, 4 not proven."
+}
+
 # Appended to `loki help verify`: the v10 DSSE export flag (docs/exit-codes.md).
 _help_verify_dsse() {
     echo ""
@@ -1763,6 +1779,7 @@ show_help() {
     echo "  review [opts]    Standalone code review with quality gates"
     echo "  ultracode \"task\" Run a task as a native Claude Code Dynamic Workflow (opt-in, Claude-only)"
     echo "  trust [cmd]      Visible trust trajectory; 'trust detail' for metrics"
+    echo "  undo <run> [--plan]  Plan or apply (LOKI_UNDO=1) an undo of a run; verifies the receipt"
     echo ""
     echo "Observe:"
     echo "  dashboard [cmd]  Operations UI server (start|stop|status|url|open)"
@@ -1798,13 +1815,9 @@ show_help() {
     echo ""
     echo "Options for 'start':"
     echo "  --provider NAME  AI provider: claude (default), codex, cline, aider, opencode"
-    echo "  --parallel       Enable parallel mode with git worktrees"
-    echo "  --bg, --background  Run in background mode"
     echo "  --simple         Force simple complexity tier (3 phases)"
     echo "  --complex        Force complex complexity tier (8 phases)"
-    echo "  --github         Enable GitHub issue import"
     echo "  --no-dashboard   Disable web dashboard"
-    echo "  --sandbox        Run in Docker sandbox for isolation (default: off; requires Docker)"
     echo "  --isolation LVL  Per-run isolation dial: none (default) | worktree | docker"
     echo "  --skip-memory    Skip loading memory context at startup"
     echo "  --fresh-prd      Regenerate the PRD from the codebase (no-PRD runs; ignores the reusable generated PRD)"
@@ -1824,8 +1837,6 @@ show_help() {
     echo "  loki start ./prd.md           # Start with PRD file"
     echo "  loki start owner/repo#123     # GitHub issue (auto-fetches)"
     echo "  loki start PROJ-456           # Jira issue"
-    echo "  loki start --bg ./prd.md      # Start in background"
-    echo "  loki start --parallel ./prd.md   # Parallel mode (git worktrees)"
     echo "  loki quick \"add dark mode\"  # Single-task mode (Loki 10 engine)"
     echo "  loki tour                     # See a real sample result (no provider, no key, no spend)"
     echo "  loki demo                     # Build a sample todo app end to end"
@@ -1860,7 +1871,7 @@ show_help() {
     echo "  #       only the OpenAI-shaped /v1/chat/completions. Use the aider or"
     echo "  #       cline route above for OpenRouter."
     echo ""
-    echo "  # Cross-project context (Phase F v7.5.23+)"
+    echo "  # Cross-project context (Phase F)"
     echo "  # Drop .loki/app.json with {schema_version:1,app_id:myapp,members:[ui,api]}"
     echo "  # at the parent of related repos for shared CLAUDE.md + memory."
     echo ""
@@ -1871,7 +1882,7 @@ show_help() {
     echo ""
     echo "  # Config + dashboard"
     echo "  loki config set maxTier sonnet   # Cap model cost"
-    echo "  loki dashboard start          # Web dashboard at localhost:57374"
+    echo "  loki dashboard start          # Open the Control Plane UI"
     echo "  loki watch                    # Auto-rerun on PRD changes"
     echo "  loki cockpit                  # Live multi-repo cockpit (terminal image)"
     echo "  loki remote                   # Remote session (phone/browser)"
@@ -1898,13 +1909,13 @@ show_help() {
     echo "  merge resume review rollback run sandbox secrets secure self-update sentrux"
     echo "  serve setup-skill share ship spec start state stats status steer stop"
     echo "  syslog telemetry template test tour trigger trust trust-metrics"
-    echo "  ultracode update verify version voice watch watchdog web welcome why"
+    echo "  ultracode undo update verify version voice watch watchdog web welcome why"
     echo "  wiki workspace worktree (wt)"
     echo "  control"
     echo ""
     echo "Any command: loki <command> --help"
     echo ""
-    echo "Phase A-J features (v7.5.18 - v7.5.28) are default-on. See CHANGELOG."
+    echo "Phase A-J features are default-on. See CHANGELOG."
     echo ""
     echo "Environment variables an operator would set: docs/environment-variables.md"
     echo "Cost controls (budget, iteration and wall-clock caps): docs/cost-controls.md"
@@ -2534,7 +2545,7 @@ cmd_start() {
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki start${NC} - Unified entry point for Loki Mode (v6.84.0)"
+                echo -e "${BOLD}loki start${NC} - Unified entry point for Loki Mode"
                 echo ""
                 echo "Usage: loki start [REPO|PRD|ISSUE-REF] [options]"
                 echo ""
@@ -2563,17 +2574,15 @@ cmd_start() {
                 echo "                        Token from LOKI_REMOTE_TOKEN / LOKI_REMOTE_TOKEN_FILE"
                 echo "                        (never an argument). Env: LOKI_REMOTE_URL."
                 echo "  --provider NAME       AI provider: claude (default), codex, cline, aider, opencode"
-                echo "  --parallel            Enable parallel mode with git worktrees"
                 echo "  --allow-haiku         Enable Haiku model for the fast tier (default: disabled)"
-                echo "  --bg, --background    Run in background mode"
                 echo "  --simple              Force simple complexity tier (3 phases)"
                 echo "  --complex             Force complex complexity tier (8 phases)"
-                echo "  --github              Enable GitHub issue import"
                 echo "  --no-dashboard        Disable web dashboard"
                 echo "  --api                 Start dashboard API server alongside the build"
-                echo "  --sandbox             Run in Docker sandbox (default: off; requires Docker)"
                 echo "  --isolation LEVEL     Per-run isolation: none (default) | worktree | docker."
-                echo "                        Unified dial; --parallel = worktree, --sandbox = docker."
+                echo "                        Unified dial."
+                echo "  --attempts N          Run N (1-5, default 1) independent attempts in separate git worktrees;"
+                echo "                        the most executed passing checks wins, losers are recorded on the receipt"
                 echo "  --skip-memory         Skip loading memory context at startup"
                 echo "  --fresh-prd           Regenerate the PRD from the codebase on a no-PRD run"
                 echo "                        (ignores the reusable generated PRD; aliases: --regen-prd,"
@@ -2606,7 +2615,6 @@ cmd_start() {
                 echo "  --worktree, -w        Git worktree isolation (separate branch)"
                 echo "  --pr                  Worktree + auto-create PR"
                 echo "  --ship                Worktree + PR + auto-merge"
-                echo "  --detach, -d          Run in background"
                 echo ""
                 echo "Preview without spending (any input mode):"
                 echo "  loki plan <PRD>       Analyze a spec WITHOUT executing: complexity,"
@@ -2635,7 +2643,6 @@ cmd_start() {
                 echo "  loki start 123                          # ISSUE mode (current repo GitHub issue)"
                 echo "  loki start PROJ-456                     # ISSUE mode (Jira)"
                 echo "  loki start owner/repo#789               # ISSUE mode (GitHub specific repo)"
-                echo "  loki start --prd ./prd.md --parallel    # Explicit PRD, parallel mode"
                 echo "  loki start --issue 123 --ship           # Explicit issue, full automation"
                 echo "  loki start --provider codex             # Use OpenAI Codex CLI"
                 echo "  loki start --bmad-project ./my-project  # Start from BMAD artifacts"
@@ -2728,6 +2735,17 @@ cmd_start() {
                 args+=("--parallel")
                 shift
                 ;;
+            --attempts)
+                # 11.3.0 T5: N>=2 is routed to the Bun route by bin/loki; N=1 is today's behavior.
+                if [[ "${2:-}" != "1" ]]; then
+                    echo -e "${RED}--attempts N (2-5) needs the Bun route: run via bin/loki${NC}"
+                    exit 1
+                fi
+                shift 2
+                ;;
+            --attempts=1)
+                shift
+                ;;
             --allow-haiku)
                 # Enable Haiku for the fast tier. Mirrors the LOKI_ALLOW_HAIKU=true
                 # env var (consumed by providers/claude.sh and run.sh). Documented in
@@ -4232,7 +4250,7 @@ cmd_stop() {
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki stop${NC} - Stop running sessions (v7.7.30)"
+                echo -e "${BOLD}loki stop${NC} - Stop running sessions"
                 echo ""
                 echo "Usage: loki stop [session-id] [--all]"
                 echo ""
@@ -6411,22 +6429,35 @@ except Exception:
         fi
     fi
 
-    # v7.82: completion-aware one-liner. When a finished run left a completion
-    # record, show its outcome and point at \`loki why\` for the full story. Reads
-    # the persisted completion.json (no recompute); silent when absent.
-    if [ -f "$LOKI_DIR/state/completion.json" ]; then
-        local last_outcome
-        last_outcome=$(_LOKI_CJ="$LOKI_DIR/state/completion.json" python3 -c "
-import json, os
+    # 133-F4: newest sealed receipt's verdict, read from the receipt field only
+    # (never recomputed). Missing, empty or unparseable receipts never read as
+    # VERIFIED. This replaces the old completion.json one-liner (Bun never had it).
+    local receipt_line
+    receipt_line=$(_LOKI_RUNS="$LOKI_DIR/runs" python3 -c "
+import json, os, re
+runs = os.environ['_LOKI_RUNS']
 try:
-    d = json.load(open(os.environ['_LOKI_CJ']))
-    print(d.get('outcome', '') or '')
+    ids = sorted(d for d in os.listdir(runs) if os.path.isdir(os.path.join(runs, d)))
 except Exception:
-    print('')" 2>/dev/null)
-        if [ -n "$last_outcome" ]; then
-            echo -e "${DIM}Last run: ${last_outcome} - run 'loki why' for details${NC}"
-        fi
-    fi
+    ids = []
+if not ids:
+    print('Last run: no receipt (verdict NOT AVAILABLE)')
+else:
+    try:
+        d = json.load(open(os.path.join(runs, ids[-1], 'receipt.json')))
+        v = d['verdict']
+        h = d['receipt_sha256']
+        if not (isinstance(v, str) and re.fullmatch(r'[A-Z_]+', v) and isinstance(h, str)):
+            raise ValueError
+        h = h[7:] if h.startswith('sha256:') else h
+        if not re.fullmatch(r'[0-9a-f]{12,}', h):
+            raise ValueError
+        print('Last run: %s (receipt sha256:%s)' % (v, h[:12]))
+    except Exception:
+        print('Last run: receipt unreadable')
+" 2>/dev/null)
+    [ -n "$receipt_line" ] || receipt_line="Last run: receipt unreadable"
+    echo -e "${DIM}${receipt_line}${NC}"
 
     echo ""
     echo -e "${DIM}  Tip: loki analyze context show   - detailed token breakdown${NC}"
@@ -7085,7 +7116,7 @@ cmd_provider() {
             echo "  info     Show provider details"
             echo "  models   Show resolved model configuration for all providers"
             echo ""
-            echo "Precedence (v7.7.2 -- highest wins):"
+            echo "Precedence (highest wins):"
             echo "  1. loki start --provider NAME         CLI flag (per-invocation)"
             echo "  2. .loki/state/provider               saved value (per-project)"
             echo "  3. LOKI_PROVIDER env var              shell session default"
@@ -7591,13 +7622,14 @@ cmd_dashboard_help() {
     echo ""
     echo "Usage: loki dashboard <command> [options]"
     echo ""
-    echo "Note: 'loki dashboard' is the operations/observability UI (port ${DASHBOARD_DEFAULT_PORT})."
-    echo "      It is NOT the same as 'loki web' (Purple Lab, port ${PURPLE_LAB_DEFAULT_PORT}, deprecated v7.44.0)."
-    echo "      Use 'loki dashboard' to monitor agents, tasks, costs, council, escalations,"
-    echo "      and to submit a PRD via the embedded 'Lab' tab (replaces the deprecated 'loki web')."
+    echo "'loki dashboard', 'loki dashboard start' and 'loki dashboard open' open the Control Plane,"
+    echo "the browser UI for runs, cost, receipts and events (default port 47821; override with"
+    echo "LOKI_CONTROL_PORT). Needs bun; see 'loki control --help'."
+    echo "The commands below manage the classic dashboard server, which serves the API only."
+    echo "Setting LOKI_LEGACY_DASHBOARD=1, or passing --host, --tls-cert or --tls-key, selects it."
     echo ""
     echo "Commands:"
-    echo "  start    Start the dashboard server"
+    echo "  start    Open the Control Plane (or start the classic API server with the flags below)"
     echo "  stop     Stop the dashboard server"
     echo "  status   Show server status and URL"
     echo "  url      Get the dashboard URL"
@@ -7605,7 +7637,7 @@ cmd_dashboard_help() {
     echo "  help     Show this help"
     echo ""
     echo "Options for 'start':"
-    echo "  --port PORT        Port to listen on (default: $DASHBOARD_DEFAULT_PORT)"
+    echo "  --port PORT        Port for the classic API server (default: see LOKI_DASHBOARD_PORT)"
     echo "  --host HOST        Host to bind to (default: $DASHBOARD_DEFAULT_HOST)"
     echo "  --tls-cert PATH    Path to PEM certificate (enables HTTPS)"
     echo "  --tls-key PATH     Path to PEM private key (enables HTTPS)"
@@ -7614,7 +7646,7 @@ cmd_dashboard_help() {
     echo "  --format FMT   Output format: text (default) or json"
     echo ""
     echo "Environment:"
-    echo "  LOKI_DASHBOARD_PORT  Default port (overrides $DASHBOARD_DEFAULT_PORT)"
+    echo "  LOKI_DASHBOARD_PORT  Port for the classic API server"
     echo "  LOKI_DASHBOARD_HOST  Default host (overrides $DASHBOARD_DEFAULT_HOST)"
     echo "  LOKI_TLS_CERT        Path to PEM certificate (enables HTTPS)"
     echo "  LOKI_TLS_KEY         Path to PEM private key (enables HTTPS)"
@@ -7625,7 +7657,7 @@ cmd_dashboard_help() {
     echo "  loki dashboard start --tls-cert cert.pem --tls-key key.pem"
     echo "  loki dashboard status                 # Check if running"
     echo "  loki dashboard url --format json      # Get URL as JSON"
-    echo "  loki dashboard open                   # Print the Control Plane hint (no browser)"
+    echo "  loki dashboard open                   # Open the Control Plane"
     echo "  loki dashboard stop                   # Stop server"
 }
 
@@ -8409,39 +8441,29 @@ cmd_web_redirect_to_dashboard() {
 }
 
 cmd_web_help() {
-    echo -e "${BOLD}Purple Lab -- Loki Mode Web UI (deprecated -- use the dashboard)${NC}"
+    echo -e "${BOLD}loki web${NC} - Deprecated alias for the Control Plane"
     echo ""
     echo "Usage: loki web [command] [options]"
     echo ""
-    echo "DEPRECATED as of v7.44.0: Purple Lab is consolidated into the dashboard."
-    echo "  'loki web' (no subcommand) now LAUNCHES THE DASHBOARD"
-    echo "  (http://localhost:${DASHBOARD_DEFAULT_PORT}) instead of the deprecated Purple"
-    echo "  Lab, so the obvious command lands you on the working UI. Use the embedded"
-    echo "  'Lab' tab there to submit a PRD. For the hosted platform, see Autonomi Cloud."
-    echo ""
-    echo "Note: the canonical command is 'loki dashboard' (operations UI, port ${DASHBOARD_DEFAULT_PORT})."
-    echo "      Use it to monitor running agents, tasks, costs, council, escalations."
+    echo "The standalone web UI was folded into the Control Plane. 'loki web' with no"
+    echo "subcommand launches the Control Plane (default port 47821, override with"
+    echo "LOKI_CONTROL_PORT). The canonical command is 'loki dashboard'."
     echo ""
     echo "Commands:"
-    echo "  start    Launch the dashboard (default; Purple Lab is deprecated)"
-    echo "  stop     Stop the Purple Lab server (if one was started the old way)"
-    echo "  status   Show Purple Lab server status"
-    echo "  logs     Show Purple Lab server logs"
+    echo "  start    Launch the Control Plane (default)"
+    echo "  stop     Stop a standalone web server started the old way"
+    echo "  status   Show standalone web server status"
+    echo "  logs     Show standalone web server logs"
     echo "  help     Show this help"
     echo ""
     echo "Options (for start):"
-    echo "  --port PORT    Use custom port (default: ${DASHBOARD_DEFAULT_PORT})"
-    echo "  --no-open      Accepted for back-compat; ignored (no-op on the dashboard)"
+    echo "  --port PORT    Use custom port"
+    echo "  --no-open      Accepted for back-compat; ignored (no-op)"
     echo ""
     echo "Examples:"
-    echo "  loki web                  Launch the dashboard"
-    echo "  loki web --no-open        Launch the dashboard (--no-open is a no-op)"
-    echo "  loki web stop             Stop a Purple Lab server started the old way"
-    echo ""
-    echo "Note (since v7.5.30):"
-    echo "  The same PRD-input UI is embedded in the dashboard as a 'Lab' sidebar entry."
-    echo "  'loki web stop|status|logs' still operate on a standalone Purple Lab"
-    echo "  process so anyone who started one the old way is never stranded."
+    echo "  loki web                  Launch the Control Plane"
+    echo "  loki web --no-open        Same (--no-open is a no-op)"
+    echo "  loki web stop             Stop a standalone web server started the old way"
 }
 
 cmd_web_start() {
@@ -11836,7 +11858,7 @@ cmd_watch() {
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki watch${NC} - Auto-rerun on PRD file changes (v6.33.0)"
+                echo -e "${BOLD}loki watch${NC} - Auto-rerun on PRD file changes"
                 echo ""
                 echo "Usage: loki watch [prd-path] [options]"
                 echo ""
@@ -12134,7 +12156,7 @@ cmd_cockpit() {
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki cockpit${NC} - Live multi-repo status as a terminal inline image (v7.128.0)"
+                echo -e "${BOLD}loki cockpit${NC} - Live multi-repo status as a terminal inline image"
                 echo ""
                 echo "Usage: loki cockpit [options]"
                 echo ""
@@ -12380,7 +12402,7 @@ cmd_export() {
 
     case "$format" in
         --help|-h)
-            echo -e "${BOLD}loki export${NC} - Export session data (v6.0.0)"
+            echo -e "${BOLD}loki export${NC} - Export session data"
             echo ""
             echo "Usage: loki export <format> [output-path]"
             echo ""
@@ -12390,6 +12412,9 @@ cmd_export() {
             echo "  csv        Task queue as CSV"
             echo "  timeline   Iteration timeline as JSON"
             echo ""
+            echo "Flags:"
+            echo "  --sarif [run-id]   Write .loki/runs/<id>/findings.sarif (SARIF 2.1.0; needs bun)"
+            echo ""
             echo "Examples:"
             echo "  loki export json                         # Print to stdout"
             echo "  loki export json session-export.json     # Save to file"
@@ -12412,6 +12437,10 @@ cmd_export() {
             require_jq || return 1
             _export_timeline "$output_path"
             ;;
+        --sarif)
+            echo -e "${RED}loki export --sarif needs bun (https://bun.sh).${NC}" >&2
+            return 1
+            ;;
         *)
             echo -e "${RED}Unknown format: $format${NC}"
             echo "Supported: json, markdown, csv, timeline"
@@ -12936,7 +12965,7 @@ cmd_config() {
             echo "  schema          Print the key -> env-var mapping table"
             echo "  validate [FILE] Validate loki.yaml (no FILE: repo root, then ~/.loki) or a --config file"
             echo ""
-            echo "Settable keys (v6.0.0):"
+            echo "Settable keys:"
             echo "  maxTier              Cost ceiling: opus, sonnet, haiku (default: opus)"
             echo "  model.planning       Model for planning tier"
             echo "  model.development    Model for development tier"
@@ -13291,7 +13320,7 @@ cmd_config_show() {
     echo "  max_iterations:   ${LOKI_MAX_ITERATIONS:-1000}"
     echo "  autonomy_mode:    ${LOKI_AUTONOMY_MODE:-perpetual}"
     echo ""
-    echo "v6.0.0 Settings:"
+    echo "Settings:"
     echo "  maxTier:              ${LOKI_MAX_TIER:-(unlimited)}"
     echo "  blind_validation:     ${LOKI_BLIND_VALIDATION:-true}"
     echo "  adversarial_testing:  ${LOKI_ADVERSARIAL_TESTING:-true}"
@@ -14396,7 +14425,7 @@ cmd_logs() {
     # Resolve the log the runner ACTUALLY writes.
     #
     # This read a logs/session.log path that nothing in the tree writes (other
-    # readers of it exist in web-app/ and api-examples/, all equally dead). So
+    # readers of it exist in web-app/ and examples/api/, all equally dead). So
     # `loki logs`, the
     # most natural "what is it doing?" command, reported "No log file found"
     # while the real logs sat in that same directory. run.sh:22409 writes
@@ -14585,7 +14614,7 @@ cmd_api() {
             echo "  status   Check if dashboard server is running"
             echo ""
             echo "Environment:"
-            echo "  LOKI_DASHBOARD_PORT  Port to listen on (default: 57374)"
+            echo "  LOKI_DASHBOARD_PORT  Port for the API server"
             echo ""
             echo "Endpoints:"
             echo "  GET  /api/health  - Health check"
@@ -17957,7 +17986,7 @@ cmd_mcp() {
 }
 
 cmd_heal_help() {
-    echo -e "${BOLD}loki heal${NC} - Legacy system healing (v6.67.0)"
+    echo -e "${BOLD}loki heal${NC} - Legacy system healing"
     echo ""
     echo "Heal legacy codebases by understanding their real behaviors -- the quirks,"
     echo "delays, error states, and invisible dependencies -- then modernizing"
@@ -18992,7 +19021,7 @@ cmd_cluster() {
 
     case "$subcmd" in
         --help|-h|help)
-            echo -e "${BOLD}loki cluster${NC} - Custom workflow templates (v6.3.0)"
+            echo -e "${BOLD}loki cluster${NC} - Custom workflow templates"
             echo ""
             echo "Usage: loki cluster <command> [options]"
             echo ""
@@ -19710,7 +19739,7 @@ with open(failover_file, 'w') as f: json.dump(d, f, indent=2)
                 shift
                 ;;
             --help|-h)
-                echo -e "${BOLD}loki failover${NC} - Cross-provider auto-failover management (v6.19.0)"
+                echo -e "${BOLD}loki failover${NC} - Cross-provider auto-failover management"
                 echo ""
                 echo "Usage: loki failover [options]"
                 echo ""
@@ -19949,7 +19978,7 @@ def _resolve_session_pin(alias):
         # fable unavailable, collapse to opus. Claude Fable 5 is not available at
         # the Claude API (advises use Opus 4.8); the runner dispatches opus for a
         # fable pin (claude.sh resolve_model_for_tier, run.sh dispatch backstop).
-        # Quote opus pricing (\$5/\$25) so the estimator agrees with dispatch and
+        # Quote opus pricing (\$4/\$20) so the estimator agrees with dispatch and
         # the dashboard (v7.39.1).
         _m = 'opus'
     else:  # development (and the '*' fallthrough)
@@ -20279,22 +20308,23 @@ tokens_per_tier = {
     'fast': {'input': 30000, 'output': 5000, 'model': 'Haiku'},
 }
 
-# Pricing per 1M tokens. Fable 5 is the top-tier advisory model at exactly 2x
-# Opus per token (published \$10/\$50 in/out vs Opus \$5/\$25). The Opus row was
-# corrected from a stale \$15/\$75 to the real Opus 4.8 \$5/\$25, and the Haiku
-# row from a stale \$0.25/\$1.25 (Haiku 3.5) to the published Claude Haiku 4.5
-# price of \$1/\$5 (anthropic.com/news/claude-haiku-4-5), so all four rows now
+# Pricing per 1M tokens. Fable 5 is the top-tier advisory model at 2.5x
+# Opus per token (published \$10/\$50 in/out vs Opus 5.5 \$4/\$20). The Opus row was
+# corrected to the published Opus 5.5 \$4/\$20 (platform.claude.com pricing, 2026-10-08), and the Haiku
+# row from a stale \$0.25/\$1.25 (Haiku 3.5) to Haiku 5.5 \$0.10/\$0.50 (the haiku alias target
+# in the model catalog, up to 100K prompt tokens), so all four rows now
 # match the three canonical model-keyed tables (run.sh pricing.json, run.sh
 # check_budget_limit, dashboard _DEFAULT_PRICING). The Fable row (\$10/\$50) is
 # kept as the reference price, but since v7.39.1 fable is unavailable at the API
 # and a fable pin RESOLVES to Opus everywhere -- so a fable-pinned run both
-# dispatches AND quotes Opus (\$5/\$25), matching the runner. The Fable price row
+# dispatches AND quotes Opus (\$4/\$20), matching the runner. The Fable price row
 # is only reachable as an explicit advisory reference, not via a session pin.
 pricing = {
     'Fable':  {'input': 10.00, 'output': 50.00},
-    'Opus':   {'input': 5.00, 'output': 25.00},
+    'Opus':   {'input': 4.00, 'output': 20.00},
     'Sonnet': {'input': 2.00, 'output': 10.00},
-    'Haiku':  {'input': 1.00, 'output': 5.00},
+    # Haiku = Haiku 5.5 up to 100K prompt tokens (alias target in the model catalog)
+    'Haiku':  {'input': 0.10, 'output': 0.50},
 }
 
 # Build per-iteration plan
@@ -20888,6 +20918,23 @@ main() {
     # (CLI > config). The pre-pass SCANS without consuming; the per-command
     # loops carry consume-and-ignore arms for the three aliases. Gated to
     # start/run/quick so status/config/stop never trigger a config load.
+    # T5-D2 (FC-38 sweep): the bash entries have no attempts engine. --attempts (any value) is refused
+    # here, before cmd_start / cmd_run / cmd_quick / cmd_demo can reach the legacy loop. bin/loki sends
+    # `start --attempts N` to the Bun start command and never gets here with it.
+    case "$command" in
+        start|run|quick|demo|tour)
+            local _att_a
+            for _att_a in "$@"; do
+                case "$_att_a" in
+                    --attempts|--attempts=*)
+                        echo -e "${RED}--attempts is only supported by 'loki start --attempts N --no-pr' (the Loki 10 engine); 'loki $command' would run the removed legacy loop.${NC}" >&2
+                        exit 2
+                        ;;
+                esac
+            done
+            ;;
+    esac
+
     case "$command" in
         start|run|quick)
             if declare -f loki_maybe_apply_config_file >/dev/null 2>&1; then
@@ -21017,13 +21064,13 @@ main() {
                     echo "Usage: loki serve [options]"
                     echo ""
                     echo "Alias for 'loki api start'. Starts the dashboard HTTP API"
-                    echo "server (FastAPI, port 57374 by default)."
+                    echo "server (FastAPI)."
                     echo ""
                     echo "For the UI, run 'loki' (opens the Control Plane) or 'loki control serve'."
                     echo ""
                     echo "Options:"
                     echo "  --host HOST    Bind host (default: 127.0.0.1)"
-                    echo "  --port PORT    Bind port (default: 57374)"
+                    echo "  --port PORT    Bind port (default: LOKI_DASHBOARD_PORT)"
                     echo "  --help, -h     Show this help and exit"
                     echo ""
                     echo "Side effects: starts a long-running HTTP server bound to a TCP port."
@@ -21179,6 +21226,11 @@ main() {
         mcp)
             cmd_mcp "$@"
             ;;
+        undo)
+            # UNDO-1: Bun-only (verifies the receipt with the Bun verifier); bin/loki routes here only when bun is absent.
+            echo "loki undo needs the Bun runtime (install bun, then re-run: loki undo <run-id> --plan)" >&2
+            exit 2
+            ;;
         acp)
             # ACP agent over stdio; stdout is protocol-only. See docs/acp-editors.md.
             LOKI_ACP_LOKI="${LOKI_ACP_LOKI:-$_LOKI_SCRIPT_DIR/loki}" exec python3 "$_LOKI_SCRIPT_DIR/acp-agent.py"
@@ -21391,6 +21443,8 @@ main() {
                             show_help
                         elif [ "$_help_target" = "answer" ]; then
                             _help_answer
+                        elif [ "$_help_target" = "verify-pr" ]; then
+                            _help_verify_pr
                         else
                             LOKI_HELP_ONLY=1 "$0" "$_help_target" --help "$@"
                             local _help_rc=$?
@@ -22449,7 +22503,7 @@ MERGE_VALIDATE_PY
             ;;
 
         --help|-h|help)
-            echo -e "${BOLD}loki worktree${NC} - Manage parallel worktrees (v6.7.0)"
+            echo -e "${BOLD}loki worktree${NC} - Manage parallel worktrees"
             echo ""
             echo "Usage: loki worktree <command>"
             echo ""
@@ -22475,7 +22529,7 @@ cmd_state() {
 
     case "$subcmd" in
         --help|-h|help)
-            echo -e "${BOLD}loki state${NC} - Query the SQLite state layer (v6.3.0)"
+            echo -e "${BOLD}loki state${NC} - Query the SQLite state layer"
             echo ""
             echo "Usage: loki state <command> [options]"
             echo ""
@@ -24356,7 +24410,7 @@ except Exception as e:
             echo "  skill [name]      Show skill by name or list all skills"
             echo "  vectors [rebuild] Show vector index stats or rebuild indices"
             echo ""
-            echo "Namespace Commands (v5.19.0):"
+            echo "Namespace Commands:"
             echo "  namespace detect       Auto-detect namespace from current directory"
             echo "  namespace list         List all available namespaces"
             echo "  namespace create NAME  Create a new namespace"
@@ -24384,14 +24438,14 @@ except Exception as e:
             echo "  loki memory vectors"
             echo "  loki memory vectors rebuild"
             echo ""
-            echo "  loki memory ingest --from-claude-transcript <path>  # v7.7.18"
-            echo "  loki memory ingest --from-stdin                     # v7.7.18"
-            echo "  loki memory replay <episode-id> [--json]            # v7.7.22"
-            echo "  loki memory crossproject --for 'build api'          # v7.7.20"
-            echo "  loki memory graph --export graph.json               # v7.7.20"
-            echo "  loki memory graph rebuild                           # v7.7.20"
-            echo "  loki memory enable-hook                             # v7.7.20"
-            echo "  loki memory disable-hook                            # v7.7.20"
+            echo "  loki memory ingest --from-claude-transcript <path>"
+            echo "  loki memory ingest --from-stdin"
+            echo "  loki memory replay <episode-id> [--json]"
+            echo "  loki memory crossproject --for 'build api'"
+            echo "  loki memory graph --export graph.json"
+            echo "  loki memory graph rebuild"
+            echo "  loki memory enable-hook"
+            echo "  loki memory disable-hook"
             echo ""
             echo "  loki memory namespace detect"
             echo "  loki memory namespace list"
@@ -27166,15 +27220,17 @@ TELEM_DISABLE_PY
             echo "  status              Show OTEL config + collection state + pending crash reports"
             echo "  enable [endpoint]   Enable OTEL (default: http://localhost:4318)"
             echo "  disable             Disable OTEL for current project"
-            echo "  on                  Opt in to anonymous diagnostics (off by default)"
+            echo "  on                  Opt in explicitly to anonymous diagnostics"
             echo "  off                 Opt out of all anonymous diagnostics (telemetry + crash)"
             echo "  start               Alias for 'on' (persistent opt-in across all sessions)"
             echo "  stop                Alias for 'off' (persistent opt-out across all sessions)"
             echo "  analytics on|off|status"
             echo "                      Opt in/out of build-outcome analytics (off by default)"
             echo ""
-            echo "Anonymous diagnostics are OFF by default. Nothing is collected or"
-            echo "sent unless you opt in. See docs/PRIVACY.md for the full disclosure."
+            echo "Anonymous diagnostics are ON by default for individual interactive installs,"
+            echo "and OFF in CI, enterprise, air-gapped and non-interactive contexts. An opt-out"
+            echo "(loki telemetry off, LOKI_TELEMETRY=off or DO_NOT_TRACK=1) always wins."
+            echo "See docs/PRIVACY.md for the full disclosure."
             echo ""
             ;;
         *)
@@ -29829,7 +29885,7 @@ PYEOF
             ;;
 
         --help|-h|help)
-            echo -e "${BOLD}loki agent${NC} - Agent type dispatch (v6.7.0)"
+            echo -e "${BOLD}loki agent${NC} - Agent type dispatch"
             echo ""
             echo "Usage: loki agent <command> [args]"
             echo ""
@@ -30140,7 +30196,7 @@ except: pass
 
     # Detect shell scripts
     local shell_count=0
-    shell_count=$(find "$target_path" -maxdepth 2 -name "*.sh" -type f 2>/dev/null | wc -l | tr -d ' ')
+    shell_count=$(find "$target_path" -maxdepth 2 -name "*.sh" -type f 2>/dev/null | wc -l | tr -d ' ' || true)
     if [ "$shell_count" -gt 0 ]; then
         languages="$languages Bash"
     fi
@@ -30578,7 +30634,7 @@ Files: $src_count source, $test_count test, $doc_count docs"
                 if [ -d "$target_path/$dir" ]; then
                     # Count files in directory
                     local dir_count
-                    dir_count=$(echo "$tree_output" | grep "^${dir}/" | wc -l | tr -d ' ')
+                    dir_count=$(echo "$tree_output" | grep "^${dir}/" | wc -l | tr -d ' ' || true)
                     output="$output
 $dir/    ($dir_count files)"
                 else
@@ -31506,7 +31562,7 @@ _docs_invoke_provider() {
             # not the workload that needs the top tier. Pinned to the same
             # default the review subcall uses (run.sh:13762), and overridable
             # for anyone who wants a different trade.
-            result=$($t_prefix env CAVEMAN_DEFAULT_MODE=off claude -p --model "${LOKI_DOCS_MODEL:-claude-sonnet-5}" "$prompt" 2>/dev/null) || exit_code=$?
+            result=$($t_prefix env CAVEMAN_DEFAULT_MODE=off claude -p --model "${LOKI_DOCS_MODEL:-sonnet}" "$prompt" 2>/dev/null) || exit_code=$?
             ;;
         codex)
             result=$($t_prefix codex exec --sandbox workspace-write "$prompt" 2>/dev/null) || exit_code=$?
@@ -35029,7 +35085,7 @@ cmd_report_legacy() {
     while [[ $# -gt 0 ]]; do
         case "$1" in
             --help|-h)
-                echo -e "${BOLD}loki report${NC} - Session report generator (v6.27.0)"
+                echo -e "${BOLD}loki report${NC} - Session report generator"
                 echo ""
                 echo "Usage: loki report [subcommand] [options]"
                 echo ""