loki-mode 11.3.8 → 11.4.2

package/README.md

@@ -7,7 +7,7 @@ Your agent says done. Loki proves it: an autonomous coding agent that turns a ta
 [![Docker Pulls](https://img.shields.io/docker/pulls/asklokesh/loki-mode?style=for-the-badge&logo=docker&logoColor=white&color=2F71E3)](https://hub.docker.com/r/asklokesh/loki-mode)
 [![License](https://img.shields.io/badge/License-BUSL--1.1-36342E?style=for-the-badge)](LICENSE)
 
-[Website](https://www.autonomi.dev/) | [Install guide](docs/INSTALLATION.md) | [User guide](docs/v10/GUIDE.md) | [CLI reference](docs/CLI-REFERENCE.md) | [Changelog](CHANGELOG.md)
+[Website](https://www.autonomi.dev/) | [Quickstart](docs/QUICKSTART.md) | [Install guide](docs/INSTALLATION.md) | [User guide](docs/v10/GUIDE.md) | [CLI reference](docs/CLI-CORE-VERBS.md) | [Compare with opencode](docs/COMPARE-OPENCODE.md) | [Changelog](CHANGELOG.md)
 
 <!-- generated:facts -->
 The npm badge above tracks the current release; see [CHANGELOG.md](CHANGELOG.md) for release notes.
@@ -31,18 +31,19 @@ npx loki-mode tour    # prints a real receipt from a past build: no key, no spen
 
 ## First run
 
-Loki needs a model. An `ANTHROPIC_API_KEY` is enough, or an installed and logged-in [Claude Code](https://docs.claude.com/en/docs/claude-code) CLI.
+Loki needs a model. [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`) is the default provider: install it and log in. The bundled Agent SDK with an `ANTHROPIC_API_KEY` can stand in for the CLI on the main path. Other coding CLIs are optional. See [Requirements](#requirements).
 
 ```bash
-export ANTHROPIC_API_KEY=sk-...
 cd your-repo
-loki doctor                                  # names anything missing, exit 0 when ready
-loki quick "fix the login redirect loop"     # one small task, no PR
-loki "add rate limiting to /api/login"       # build, verify, seal a receipt, open a PR
-loki owner/repo#123                          # same, from a GitHub, GitLab or Jira issue
+loki setup                                   # first-run wizard (or: loki doctor --fix)
+loki start "add rate limiting to /api/login" # the primary path: build, verify, seal a receipt, open a PR
+loki start prd.md                            # same, from a PRD file
+loki start owner/repo#123                    # same, from a GitHub, GitLab or Jira issue
+loki edit "rename fooBar to foo_bar"         # one small change, no loop
+loki chat                                    # interactive alternative: Plan and Build modes
 ```
 
-`loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run on the Loki 10 engine by default. <!-- loki10-default --> Add `--no-pr` to build and verify without opening a pull request, `--max-cost <usd>` to cap spend (default $100 with an API key, no dollar cap on a subscription), and `--provider <name>` to pick another coding CLI.
+`loki start`, `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` all run on the Loki 10 engine by default, whatever the flag order or input form. <!-- loki10-default --> Add `--no-pr` to build and verify without opening a pull request, `--max-cost <usd>` to cap spend, and `--provider <name>` to pick another coding CLI. The spend cap defaults to $100 when `ANTHROPIC_API_KEY` or `OPENAI_API_KEY` is set and to no dollar cap on a subscription login; `budgets.per_run` in `loki.yaml` also sets it. Inspect the route without running: `loki route start prd.md` or `--explain-route`. New here? The [5-minute quickstart](docs/QUICKSTART.md) walks through it.
 
 ## What you get
 
@@ -56,9 +57,9 @@ Every run starts from a delivery contract derived from your task, writes checks
 loki verify              # newest run; or: loki verify <run-id>
 ```
 
-`loki verify` re-hashes the receipt, checks its signature and checks it against the run's event log. It prints VERIFIED (exit 0), TAMPERED (1), UNCHECKED (2) or UNSIGNED (3). On another machine, export the public key with `loki keys export` and pass it with `loki verify --pubkey <file>`. A receipt claims only what its checks ran, and lists what they did not; signing proves who produced it, not that the code is bug-free. Details: [docs/SIGNED-RECEIPTS.md](docs/SIGNED-RECEIPTS.md).
+`loki verify` re-hashes the receipt, checks its signature and checks it against the run's event log. It prints a verdict and exits 0 (VERIFIED), 1 (CONCERNS), 2 (BLOCKED), 3 (verifier error, never a silent pass) or 64 (usage error); `[ $rc -eq 0 ]` is the only safe test for "verified". Full table: [docs/exit-codes.md](docs/exit-codes.md). On another machine, export the public key with `loki keys export` and pass it with `loki verify --pubkey <file>`. A receipt claims only what its checks ran, and lists what they did not; signing proves who produced it, not that the code is bug-free. Details: [docs/SIGNED-RECEIPTS.md](docs/SIGNED-RECEIPTS.md).
 
-A finished run prints a short summary:
+A finished run prints a short summary (every run on both engines also ends with a unified Result, Files, Cost, Elapsed, Receipt and `next:` block; `--quiet` prints only that block, `--json` adds a `summary` object):
 
 ```
 Outcome:    VERIFIED
@@ -73,19 +74,33 @@ Time:       4m12s (intake 11s, plan 20s, implement 3m10s, verify 31s)
 
 | Command | What it does |
 |---------|--------------|
-| `loki "<task>"` | Build a task, verify it, seal a receipt, open a PR (`--no-pr`, `--deep`, `--provider`, `--max-cost`) |
-| `loki owner/repo#N` | The same, from a GitHub, GitLab or Jira issue (issue URLs work too) |
-| `loki quick "<task>"` | One small task, no PR |
+| `loki start "<task>"` | The primary path: build a task, PRD file or issue, verify it, seal a receipt, open a PR (`--no-pr`, `--deep`, `--provider`, `--max-cost`). `loki "<task>"` and `loki owner/repo#N` are shorthand |
+| `loki edit "<change>"` | One targeted change in one pass, no PR, plan or council (`--verify`, `--receipt`, `--commit`, `--dry-run`) |
+| `loki quick "<task>"` | One small task with a verify loop, no PR |
+| `loki chat` | Interactive alternative: Plan and Build modes, slash commands, `/run` starts a `loki start` run, `--attach` joins one |
+| `loki route start <args>` | Show the engine, provider, model and reason without running (also `--explain-route`) |
+| `loki setup` | First-run wizard: tools, Claude login, provider, model route, spend cap |
+| `loki config list\|get\|set\|path` | Read and write settings |
+| `loki models [--local]` | List model routes (OpenRouter, Ollama, LM Studio, llama.cpp, vLLM, custom); discover local models |
+| `loki agents list\|new\|show\|export --claude` | Custom child agents in `.loki/agents/*.md` |
 | `loki status [run-id]` | Status of the latest run, or of a given run |
 | `loki verify [run-id]` | Check a receipt's hash, signature and event log |
 | `loki answer [run-id]` | Resume a BLOCKED run with your answer (`--text "..."`) |
-| `loki doctor [--json]` | Check prerequisites, providers and login |
+| `loki doctor [--fix] [--json]` | Check prerequisites, providers and login; `--fix` applies safe fixes |
 | `loki control serve` | Start the Control Plane (see below) |
 | `loki dashboard` | Open the Control Plane UI, starting it if needed |
 | `loki tour` | Show a sample receipt offline |
 | `loki --help` | Everything else; `loki help <command>` for one command |
 
-Full reference: [docs/CLI-REFERENCE.md](docs/CLI-REFERENCE.md). Engine guide, provider table and model routing: [docs/v10/GUIDE.md](docs/v10/GUIDE.md).
+Core verbs: [docs/CLI-CORE-VERBS.md](docs/CLI-CORE-VERBS.md). Every command (generated): [docs/CLI-REFERENCE.md](docs/CLI-REFERENCE.md). Engine guide, provider table, model routes, custom agents and chat: [docs/v10/GUIDE.md](docs/v10/GUIDE.md). Honest comparison with opencode: [docs/COMPARE-OPENCODE.md](docs/COMPARE-OPENCODE.md).
+
+### Models, providers and local models
+
+Claude Code is the default Tier-1 provider. `--provider codex|cline|aider|opencode` (or `LOKI_PROVIDER`) picks another; on all of them the Loki 10 engine enforces the wall-clock limit and a post-iteration guard scan, and measures cost for codex, cline and aider (parsed from CLI output or estimated, flagged `estimated`) so `--max-cost` applies. For OpenRouter or a local model, set `LOKI_MODEL_ROUTE=<kind>/<id>` (kinds: `openrouter`, `ollama`, `lmstudio`, `llamacpp`, `vllm`, `custom`) before `loki start`; `loki models --local` finds local runtimes and prints ready-to-paste values.
+
+```bash
+LOKI_MODEL_ROUTE=ollama/qwen3-coder loki start prd.md
+```
 
 ## Control Plane
 
@@ -105,15 +120,16 @@ While it is running, runs on this machine ship to it automatically. Guides: [doc
 
 Required:
 
-- A model: `ANTHROPIC_API_KEY`, or a provider CLI such as Claude Code (`claude`). Cline, Codex, Aider and opencode are supported as experimental providers.
+- Claude Code (`claude`), installed and logged in: the default provider and the only one with every feature. The bundled Agent SDK with `ANTHROPIC_API_KEY` can stand in on the main `loki start` path, but `loki edit` and `loki chat` call the `claude` CLI.
 - Python 3.8+ (`python3`)
-- Node.js 20+ (`node`)
+- Node.js 18+ (`node`; 20+ recommended)
 - `jq`
 - Git 2.x (`git`)
 - `curl`
 
-Recommended:
+Optional:
 
+- Other coding CLIs: Codex, Cline, Aider, opencode (`--provider`). Ollama or an OpenRouter key for model routes.
 - Bun 1.3+ (`bun`) on your PATH (the npm package also bundles it).
 - Docker, to run Loki from the published image.
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v11.3.8
+# Loki Mode v11.4.2
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the previous bash loop. PRD-file starts (`loki start ./prd.md`) and the opencode provider still run on it until FC38-SWEEP ports them; the legacy-engine command and the LOKI_ENGINE switch remain removed. Prefer `loki owner/repo#N` for issues.
 
@@ -200,7 +200,7 @@ This protocol governs **skill module** loading -- task-scoped instruction files
 <!-- generated:commands -->
 Commands (generated from `loki-ts/src/cli/registry.ts`; full reference in `docs/CLI-REFERENCE.md`):
 
-`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `queue`, `issues`, `undo`, `verify-pr`, `answer`, `engine10`, `help`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
+`version`, `status`, `doctor`, `provider`, `memory`, `rollback`, `proof`, `wiki`, `control`, `kpis`, `report`, `trust`, `crash`, `contract`, `start`, `slack`, `queue`, `issues`, `undo`, `verify-pr`, `answer`, `engine10`, `help`, `chat`, `edit`, `diff`, `models`, `setup`, `quick`, `quickstart`, `init`, `template`, `verify`, `keys`, `review`, `dashboard`, `config`, `mcp`, `acp`, `stop`, `pause`, `resume`, `why`, `next`, `logs`, `ship`, `deploy`, `import`, `github`, `issue`, `ci`, `modernize`, `share`, `assets`, `export`, `notify`, `tour`, `welcome`, `onboard`, `setup-skill`, `self-update`, `remote`, `cockpit`, `code`, `context`, `secrets`, `api`, `sandbox`, `docker`, `web`, `preview`, `telemetry`, `syslog`, `explain`, `docs`, `test`, `bench`, `voice`, `own`, `secure`, `compliance`, `enterprise`, `projects`, `audit`, `cost`, `metrics`, `sentrux`, `magic`
 <!-- /generated -->
 
 ---
@@ -483,4 +483,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v11.3.8 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v11.4.2 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-11.3.8
+11.4.2

package/agents/custom_agents.py

@@ -0,0 +1,280 @@
+#!/usr/bin/env python3
+"""User-configurable child agents: .loki/agents/<name>.md and ~/.config/loki/agents/<name>.md.
+
+Markdown with simple YAML frontmatter (name, description, model, provider, tools,
+deny, permission). Body is the system prompt. Project definitions override user ones.
+Stdlib only. CLI: list | new | show | export | resolve.
+"""
+import json
+import os
+import re
+import sys
+
+PERMISSIONS = ("plan", "edit", "full")
+KEYS = ("name", "description", "model", "provider", "tools", "deny", "permission", "role")
+LIST_KEYS = ("tools", "deny")
+NAME_RE = re.compile(r"^[a-z0-9][a-z0-9_-]{0,63}$")
+PROVIDERS = ("claude", "codex", "cline", "aider", "opencode")
+# Tools a plan-permission agent must not use when exported to Claude Code.
+PLAN_DENY = ["Edit", "Write", "NotebookEdit", "Bash"]
+
+
+class AgentError(Exception):
+    pass
+
+
+def project_dir():
+    return os.environ.get("LOKI_AGENTS_PROJECT_DIR") or os.path.join(os.getcwd(), ".loki", "agents")
+
+
+def user_dir():
+    d = os.environ.get("LOKI_AGENTS_USER_DIR")
+    if d:
+        return d
+    base = os.environ.get("XDG_CONFIG_HOME") or os.path.join(os.path.expanduser("~"), ".config")
+    return os.path.join(base, "loki", "agents")
+
+
+def _unquote(v):
+    v = v.strip()
+    if len(v) >= 2 and v[0] == v[-1] and v[0] in "\"'":
+        return v[1:-1]
+    return v
+
+
+def _parse_list(v):
+    v = v.strip()
+    if v.startswith("[") and v.endswith("]"):
+        v = v[1:-1]
+    return [_unquote(x) for x in v.split(",") if x.strip()]
+
+
+def parse(text, path="<agent>"):
+    lines = text.splitlines()
+    if not lines or lines[0].strip() != "---":
+        raise AgentError("%s: missing YAML frontmatter (file must start with '---')" % path)
+    end = None
+    for i in range(1, len(lines)):
+        if lines[i].strip() == "---":
+            end = i
+            break
+    if end is None:
+        raise AgentError("%s: frontmatter is not closed with '---'" % path)
+    meta = {}
+    cur = None
+    for n, raw in enumerate(lines[1:end], start=2):
+        if not raw.strip() or raw.lstrip().startswith("#"):
+            continue
+        m = re.match(r"^\s+-\s+(.*)$", raw)
+        if m and cur in LIST_KEYS:
+            meta.setdefault(cur, []).append(_unquote(m.group(1)))
+            continue
+        m = re.match(r"^([A-Za-z_]+)\s*:\s*(.*)$", raw)
+        if not m:
+            raise AgentError("%s:%d: cannot parse frontmatter line: %r" % (path, n, raw))
+        k, v = m.group(1).lower(), m.group(2)
+        if k not in KEYS:
+            raise AgentError("%s:%d: unknown key %r (allowed: %s)" % (path, n, k, ", ".join(KEYS)))
+        cur = k
+        if k in LIST_KEYS:
+            meta[k] = _parse_list(v) if v.strip() else []
+        else:
+            meta[k] = _unquote(v)
+    body = "\n".join(lines[end + 1:]).strip()
+    return meta, body
+
+
+def validate(meta, body, path, stem):
+    name = meta.get("name") or stem
+    if not NAME_RE.match(name):
+        raise AgentError("%s: invalid name %r (use lowercase letters, digits, '-' or '_')" % (path, name))
+    if name != stem:
+        raise AgentError("%s: name %r does not match file name %r" % (path, name, stem))
+    if not meta.get("description"):
+        raise AgentError("%s: 'description' is required" % path)
+    perm = meta.get("permission", "plan")
+    if perm not in PERMISSIONS:
+        raise AgentError("%s: permission must be one of %s (got %r)" % (path, "|".join(PERMISSIONS), perm))
+    prov = meta.get("provider", "claude")
+    if prov not in PROVIDERS:
+        raise AgentError("%s: provider must be one of %s (got %r)" % (path, "|".join(PROVIDERS), prov))
+    if not body:
+        raise AgentError("%s: body (system prompt) is empty" % path)
+    both = set(meta.get("tools", [])) & set(meta.get("deny", []))
+    if both:
+        raise AgentError("%s: tool(s) in both tools and deny: %s" % (path, ", ".join(sorted(both))))
+    return {
+        "name": name,
+        "description": meta["description"],
+        "model": meta.get("model", ""),
+        "provider": prov,
+        "tools": meta.get("tools", []),
+        "deny": meta.get("deny", []),
+        "permission": perm,
+        "role": meta.get("role", ""),
+        "prompt": body,
+        "path": path,
+    }
+
+
+def load_file(path):
+    stem = os.path.basename(path)[:-3]
+    with open(path, encoding="utf-8") as f:
+        meta, body = parse(f.read(), path)
+    return validate(meta, body, path, stem)
+
+
+def load_all():
+    """Return (agents dict name->agent, errors list). Project overrides user."""
+    agents, errors = {}, []
+    for scope, d in (("user", user_dir()), ("project", project_dir())):
+        if not os.path.isdir(d):
+            continue
+        for fn in sorted(os.listdir(d)):
+            if not fn.endswith(".md") or fn.startswith("."):
+                continue
+            p = os.path.join(d, fn)
+            try:
+                a = load_file(p)
+                a["scope"] = scope
+                agents[a["name"]] = a
+            except (AgentError, OSError, UnicodeDecodeError) as e:
+                errors.append(str(e))
+    return agents, errors
+
+
+TEMPLATE = """---
+name: {name}
+description: One line describing when to use this agent
+model: sonnet
+provider: claude
+permission: plan
+tools: [Read, Grep, Glob]
+deny: []
+---
+You are the {name} agent. Describe your role, method and output format here.
+"""
+
+
+def cmd_new(name, user=False):
+    if not NAME_RE.match(name or ""):
+        raise AgentError("invalid agent name %r (lowercase letters, digits, '-' or '_')" % name)
+    d = user_dir() if user else project_dir()
+    os.makedirs(d, exist_ok=True)
+    p = os.path.join(d, name + ".md")
+    if os.path.exists(p):
+        raise AgentError("already exists: %s" % p)
+    shipped = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "templates", "agents", name + ".md")
+    if os.path.isfile(shipped):
+        with open(shipped, encoding="utf-8") as src:
+            content = src.read()
+    else:
+        content = TEMPLATE.format(name=name)
+    with open(p, "w", encoding="utf-8") as f:
+        f.write(content)
+    print("Created %s" % p)
+
+
+def claude_export(a):
+    lines = ["---", "name: %s" % a["name"], "description: %s" % a["description"]]
+    if a["model"] and a["provider"] == "claude":
+        lines.append("model: %s" % a["model"])
+    tools = list(a["tools"])
+    if tools:
+        lines.append("tools: %s" % ", ".join(tools))
+    deny = list(a["deny"])
+    if a["permission"] == "plan":
+        deny += [t for t in PLAN_DENY if t not in deny and t not in tools]
+    if deny:
+        lines.append("disallowedTools: %s" % ", ".join(deny))
+    lines += ["---", a["prompt"], ""]
+    return "\n".join(lines)
+
+
+ALIASES = {
+    "code_quality_reviewer": ["reviewer"],
+    "requirements_verifier": ["reviewer"],
+    "test_auditor": ["tester", "reviewer"],
+    "devils_advocate": ["security", "reviewer"],
+}
+
+
+def resolve(role):
+    """Pick a configured agent for a council role: exact name, then aliases."""
+    agents, _ = load_all()
+    for cand in [role] + ALIASES.get(role, []):
+        for k in (cand, cand.replace("_", "-")):
+            if k in agents:
+                return agents[k]
+    return None
+
+
+def main(argv):
+    cmd = argv[0] if argv else "list"
+    rest = argv[1:]
+    try:
+        if cmd == "list":
+            agents, errors = load_all()
+            if not agents:
+                print("No configured agents. Create one with: loki agents new <name>")
+            else:
+                print("%-16s %-8s %-8s %-6s %s" % ("NAME", "SCOPE", "PROVIDER", "PERM", "DESCRIPTION"))
+                for n in sorted(agents):
+                    a = agents[n]
+                    print("%-16s %-8s %-8s %-6s %s" % (n, a["scope"], a["provider"], a["permission"], a["description"]))
+            for e in errors:
+                sys.stderr.write("invalid agent: %s\n" % e)
+            return 1 if errors else 0
+        if cmd == "new":
+            names = [x for x in rest if not x.startswith("--")]
+            if not names:
+                raise AgentError("usage: loki agents new <name> [--user]")
+            cmd_new(names[0], "--user" in rest)
+            return 0
+        if cmd == "show":
+            if not rest:
+                raise AgentError("usage: loki agents show <name>")
+            agents, errors = load_all()
+            a = agents.get(rest[0])
+            if not a:
+                for e in errors:
+                    sys.stderr.write("invalid agent: %s\n" % e)
+                raise AgentError("agent not found: %s (see: loki agents list)" % rest[0])
+            for k in ("name", "scope", "path", "description", "provider", "model", "permission", "tools", "deny"):
+                v = a[k]
+                print("%-12s %s" % (k + ":", ", ".join(v) if isinstance(v, list) else (v or "(default)")))
+            print("\n" + a["prompt"])
+            return 0
+        if cmd == "export":
+            if "--claude" not in rest:
+                raise AgentError("usage: loki agents export --claude [--user]")
+            agents, errors = load_all()
+            for e in errors:
+                sys.stderr.write("invalid agent: %s\n" % e)
+            if not agents:
+                raise AgentError("no configured agents to export")
+            if "--user" in rest:
+                out = os.path.expanduser("~/.claude/agents")
+            else:
+                out = os.path.join(os.getcwd(), ".claude", "agents")
+            os.makedirs(out, exist_ok=True)
+            for n in sorted(agents):
+                p = os.path.join(out, n + ".md")
+                with open(p, "w", encoding="utf-8") as f:
+                    f.write(claude_export(agents[n]))
+                print("Wrote %s" % p)
+            return 1 if errors else 0
+        if cmd == "resolve":
+            a = resolve(rest[0]) if rest else None
+            if a:
+                print(json.dumps({"name": a["name"], "model": a["model"], "provider": a["provider"],
+                                  "permission": a["permission"], "deny": a["deny"], "prompt": a["prompt"]}))
+            return 0
+        raise AgentError("unknown subcommand %r (list|new|show|export)" % cmd)
+    except AgentError as e:
+        sys.stderr.write("Error: %s\n" % e)
+        return 1
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv[1:]))

package/autonomy/council-v2.sh

@@ -339,6 +339,27 @@ council_v2_run_reviewer() {
             ;;
     esac
 
+    # User-configured agent (loki agents) for this role overrides prompt/model.
+    # No configured agents (the default) leaves everything unchanged.
+    local _c2_agent_model=""
+    local _c2_agents_helper
+    _c2_agents_helper="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/agents/custom_agents.py"
+    if [ -f "$_c2_agents_helper" ] && [ -n "$_c2_py" ] \
+       && { [ -d "${PWD}/.loki/agents" ] || [ -d "${XDG_CONFIG_HOME:-$HOME/.config}/loki/agents" ] || [ -n "${LOKI_AGENTS_USER_DIR:-}" ]; }; then
+        local _c2_agent_json
+        _c2_agent_json="$("$_c2_py" -I "$_c2_agents_helper" resolve "$role" 2>/dev/null)" || _c2_agent_json=""
+        if [ -n "$_c2_agent_json" ]; then
+            local _c2_agent_prompt
+            _c2_agent_prompt="$(printf '%s' "$_c2_agent_json" | "$_c2_py" -I -c 'import sys,json; print(json.load(sys.stdin)["prompt"])' 2>/dev/null)" || _c2_agent_prompt=""
+            _c2_agent_model="$(printf '%s' "$_c2_agent_json" | "$_c2_py" -I -c 'import sys,json; d=json.load(sys.stdin); print(d["model"] if d["provider"]=="claude" else "")' 2>/dev/null)" || _c2_agent_model=""
+            if [ -n "$_c2_agent_prompt" ]; then
+                prompt="$_c2_agent_prompt
+
+Output a JSON object with keys: verdict (APPROVE or REJECT), reasoning (string), issues (array of {severity, description})."
+            fi
+        fi
+    fi
+
     local evidence=""
     [ -f "$review_dir/evidence.md" ] && evidence=$(cat "$review_dir/evidence.md")
     local prd=""
@@ -404,7 +425,7 @@ Respond ONLY with a valid JSON object. No markdown fencing."
                 # both apply (a reviewer must never mutate the tree). Gated +
                 # opt-out LOKI_BARE_SUBCALLS=0 / LOKI_REVIEW_TOOL_GUARD=0;
                 # type-guarded for standalone sourcing.
-                local _c2_argv=("--model" "haiku")
+                local _c2_argv=("--model" "${_c2_agent_model:-haiku}")
                 if type loki_subcall_bare_enabled >/dev/null 2>&1 && loki_subcall_bare_enabled; then
                     _c2_argv+=("--bare")
                 fi