loki-mode 11.3.9 → 11.5.1

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "11.3.9",
+  "version": "11.5.1",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",

package/plugins/loki-mode/README.md

@@ -35,7 +35,14 @@ Slash commands (namespaced as `loki-mode:<command>`):
 - `loki-mode:loki-spec-status` - check whether the spec has drifted from its
   lock using deterministic living-spec drift detection.
 - `loki-mode:loki-verify` - run Loki's deterministic PR verification on the
-  current change and summarize the evidence verdict.
+  current change and summarize the evidence verdict. `--fast [base]` runs
+  `loki verify --fast --diff-base ${base:-HEAD}` instead: deterministic, no
+  model or network call (exit 0 PASS, 1 FAIL, 3 INCONCLUSIVE).
+- `loki-mode:start <task or file>` - hand a task to Loki (`loki start --bg`).
+  Free-text tasks are written to `.loki/handoff-task.md` first. Claude Code
+  does not build it; Loki owns provider setup, budget and routing.
+- `loki-mode:handoff` - print `.loki/review/HANDOFF.md`, else `./HANDOFF.md`,
+  else `loki own`. Never invents text.
 
 MCP server (`loki-mode`): exposes Loki's tools (memory, task queue, code
 search, build management) to Claude Code.
@@ -82,6 +89,39 @@ runs before:
 With `LOKI_GUARD` unset the hook always allows the command through, so it never
 interferes unless you ask it to.
 
+## Optional Stop hook: fast verifier gate (off by default)
+
+The plugin ships a `Stop` hook (`scripts/loki-stop-verify.sh`, hook timeout
+30 s) that is a no-op unless `LOKI_STOP_VERIFY=1` (environment or Claude Code
+settings `env`) or the plugin option `CLAUDE_PLUGIN_OPTION_STOP_VERIFY` is set.
+It blocks completion only when `loki verify --fast --diff-base HEAD` exits 1
+(FAIL: at least one high-severity finding), emitting
+`{"decision":"block","reason":"..."}` with the first 15 verifier lines.
+
+It allows the stop (fail-open) when: not opted in; the event has
+`stop_hook_active: true` (never loops after one block); `loki`, `git` or a git
+work tree is absent; no tracked file has uncommitted changes; the verifier
+times out (`LOKI_STOP_VERIFY_TIMEOUT`, default 20 s); or it exits with anything
+other than 1 (INCONCLUSIVE is not a block). Untracked new files are outside the
+diff scope, and the fast verifier covers its detector set, not your test suite.
+
+## Configure Claude Code from the CLI
+
+```
+loki setup-skill --claude-code [--print] [--project] [--stop-hook] [--settings FILE]
+```
+
+Merges `extraKnownMarketplaces.loki-mode`, `enabledPlugins["loki-mode@loki-mode"]`
+and, with `--stop-hook`, `env.LOKI_STOP_VERIFY` into `~/.claude/settings.json`
+(`--project`: `./.claude/settings.json`). Existing keys are kept as you set them
+(even `false`), invalid JSON is refused (exit 3) with the file untouched,
+writes are atomic, and a second run reports `UNCHANGED`. `--print` prints the
+snippet and writes nothing. Then run `/reload-plugins` in Claude Code.
+
+Claude Code keeps tool permissions, the Stop-hook protocol, plugin
+install/update and the session itself; the plugin adds no model loop,
+permission system or sandbox.
+
 ## License
 
 SEE LICENSE IN LICENSE (BUSL-1.1, source-available). See the LICENSE file at the

package/plugins/loki-mode/commands/handoff.md

@@ -0,0 +1,12 @@
+---
+description: Print Loki's review handoff (.loki/review/HANDOFF.md) for the last run.
+allowed-tools: Read, Bash(ls:*), Bash(loki own:*)
+---
+
+Show the user what Loki handed off, verbatim.
+
+1. If `.loki/review/HANDOFF.md` exists, Read it and print it unchanged.
+2. Else if `HANDOFF.md` exists at the project root, Read and print that.
+3. Else run `loki own` and print its output.
+4. If none yields content, say no handoff exists yet and suggest
+   `/loki-mode:start <task>`. Do not invent a summary.

package/plugins/loki-mode/commands/loki-verify.md

@@ -1,7 +1,7 @@
 ---
 description: Run Loki's deterministic PR verification on the current change and summarize the evidence verdict.
-argument-hint: "[base-ref] (default: main)"
-allowed-tools: Bash(loki verify:*), Read
+argument-hint: "[--fast] [base-ref] (default: main; --fast defaults to HEAD, the uncommitted changes)"
+allowed-tools: Bash(loki verify:*), Bash(command -v:*), Read
 ---
 
 Run Loki's Autonomi Verify on the current working tree and report the verdict
@@ -9,6 +9,13 @@ with its evidence, not just an opinion in chat. The differentiator is the
 auditable artifact: a verdict that refuses to silently pass on inconclusive
 evidence.
 
+Fast mode: if $ARGUMENTS starts with `--fast`, check `command -v loki` (stop if
+missing) and run `loki verify --fast --diff-base <ref>` (ref defaults to
+`HEAD`). It is deterministic, with no model or network call. Exit codes: 0 PASS,
+1 FAIL, 3 INCONCLUSIVE. Print the verdict line and each finding as
+`severity rule path:line`, say which findings block (severity high), and never
+describe INCONCLUSIVE as a pass. Skip the steps below.
+
 Steps:
 
 1. Run the verifier against the base ref ($ARGUMENTS, or `main` if empty):

package/plugins/loki-mode/commands/start.md

@@ -0,0 +1,20 @@
+---
+description: Hand the current task to Loki (loki start) in the background and report where the handoff will land.
+argument-hint: "<task description or path to a PRD/spec file>"
+allowed-tools: Bash(loki start:*), Bash(loki status:*), Bash(command -v:*), Bash(ls:*)
+---
+
+Delegate the task in $ARGUMENTS to Loki Mode so it runs autonomously while the
+user does something else. Do not start building the task yourself.
+
+1. Confirm the CLI exists: `command -v loki`. If missing, say
+   `npm install -g loki-mode` is required and stop.
+2. If $ARGUMENTS is an existing file path, run `loki start --bg <path>`.
+   Otherwise write the text to `.loki/handoff-task.md` (create `.loki/` if
+   needed) and run `loki start --bg .loki/handoff-task.md`. Do not pass any
+   permission-bypass flags of your own; `loki start` owns its provider setup.
+3. Report in at most five lines: that the run started in the background, the
+   command to check progress (`loki status`), and where results land:
+   `.loki/review/HANDOFF.md` (read it with `/loki-mode:handoff`) and the
+   evidence verdict (`/loki-mode:loki-verify --fast`).
+4. If `loki start` exits non-zero, show its first error line verbatim and stop.

package/plugins/loki-mode/hooks/hooks.json

@@ -10,6 +10,17 @@
           }
         ]
       }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}\"/scripts/loki-stop-verify.sh",
+            "timeout": 30
+          }
+        ]
+      }
     ]
   }
 }

package/plugins/loki-mode/scripts/loki-stop-verify.sh

@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+# Loki Stop hook: run the fast deterministic verifier on the working tree and
+# block completion when the uncommitted change carries a blocking finding.
+#
+# Opt-in. No-op unless LOKI_STOP_VERIFY is truthy (or the plugin option
+# CLAUDE_PLUGIN_OPTION_STOP_VERIFY is). Fail-open: every uncertain path
+# (loki missing, not a git repo, clean tree, timeout, verifier error,
+# INCONCLUSIVE, stop_hook_active) allows the stop. Only an explicit verifier
+# exit 1 (FAIL, a high-severity finding) blocks.
+#
+# Block contract: print {"decision":"block","reason":...} on stdout, exit 0.
+
+set -u
+
+allow() { exit 0; }
+
+truthy() {
+  case "$(printf '%s' "${1:-}" | tr '[:upper:]' '[:lower:]')" in
+    1 | true | yes | on | y) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+if ! truthy "${LOKI_STOP_VERIFY:-}" && ! truthy "${CLAUDE_PLUGIN_OPTION_STOP_VERIFY:-}"; then
+  allow
+fi
+
+event="$(cat 2>/dev/null || true)"
+
+# A previous block already re-entered the model once: never loop.
+case "$event" in
+  *'"stop_hook_active": true'* | *'"stop_hook_active":true'*) allow ;;
+esac
+
+command -v loki >/dev/null 2>&1 || allow
+command -v git >/dev/null 2>&1 || allow
+git rev-parse --is-inside-work-tree >/dev/null 2>&1 || allow
+
+# Nothing changed: nothing the agent could have broken.
+[ -n "$(git status --porcelain --untracked-files=no 2>/dev/null)" ] || allow
+
+limit="${LOKI_STOP_VERIFY_TIMEOUT:-20}"
+out_file="$(mktemp "${TMPDIR:-/tmp}/loki-stop-verify.XXXXXX")" || allow
+trap 'rm -f "$out_file"' EXIT
+
+run_verifier() { loki verify --fast --diff-base HEAD >"$out_file" 2>/dev/null; }
+
+if command -v timeout >/dev/null 2>&1; then
+  timeout -k 2 "$limit" loki verify --fast --diff-base HEAD >"$out_file" 2>/dev/null
+  rc=$?
+elif command -v gtimeout >/dev/null 2>&1; then
+  gtimeout -k 2 "$limit" loki verify --fast --diff-base HEAD >"$out_file" 2>/dev/null
+  rc=$?
+else
+  # No timeout binary (stock macOS): watchdog on the recorded child PID only.
+  run_verifier &
+  child=$!
+  ( sleep "$limit"; kill "$child" 2>/dev/null ) >/dev/null 2>&1 &
+  watchdog=$!
+  wait "$child" 2>/dev/null
+  rc=$?
+  kill "$watchdog" 2>/dev/null
+  wait "$watchdog" 2>/dev/null
+fi
+
+# Only an explicit FAIL blocks. 0, 2, 3, 64, 124, 137 and anything else allow.
+[ "$rc" -eq 1 ] || allow
+
+summary="$(head -n 15 "$out_file" 2>/dev/null)"
+reason="Loki fast verify found blocking problems in your uncommitted change. Fix them before finishing:
+${summary}
+Re-run: loki verify --fast --diff-base HEAD"
+
+if command -v python3 >/dev/null 2>&1; then
+  printf '%s' "$reason" | python3 -c '
+import sys, json
+print(json.dumps({"decision": "block", "reason": sys.stdin.read()}))
+'
+else
+  # No python3: single-line fallback with minimal escaping.
+  esc="$(printf '%s' "$reason" | tr '\n' ' ' | sed 's/\\/\\\\/g; s/"/\\"/g')"
+  printf '{"decision":"block","reason":"%s"}\n' "$esc"
+fi
+exit 0

package/providers/claude.sh

@@ -151,6 +151,11 @@ unset _loki_dap_root
 
 # Source the v7.5.22 Phase D mcp-config helper (idempotent).
 # shellcheck source=../autonomy/lib/mcp-config.sh
+# OC-MODELS: model routes (openrouter/ollama/... over the Claude harness).
+_loki_model_routes_helper="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/model_routes.sh"
+# shellcheck disable=SC1090
+[ -f "$_loki_model_routes_helper" ] && . "$_loki_model_routes_helper"
+
 _loki_mcp_config_helper="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)/autonomy/lib/mcp-config.sh"
 if [ -f "$_loki_mcp_config_helper" ]; then
     # shellcheck disable=SC1090
@@ -385,7 +390,8 @@ provider_invoke() {
     # array is empty, and a bare "${arr[@]}" under `set -u` aborts with "unbound
     # variable" on bash 3.2 (stock macOS /bin/bash). ${arr[@]+...} expands to
     # nothing when unset/empty and preserves spaced elements otherwise.
-    claude --dangerously-skip-permissions "${_LOKI_CLAUDE_AUTO_FLAGS[@]+"${_LOKI_CLAUDE_AUTO_FLAGS[@]}"}" -p "$prompt" "$@" < /dev/null
+    loki_model_route_prefix
+    "${_LOKI_ROUTE_EXEC[@]+"${_LOKI_ROUTE_EXEC[@]}"}" claude --dangerously-skip-permissions "${_LOKI_CLAUDE_AUTO_FLAGS[@]+"${_LOKI_CLAUDE_AUTO_FLAGS[@]}"}" -p "$prompt" "$@" < /dev/null
 }
 
 # provider_invoke_argv <tier> <prompt> -- populate _LOKI_INVOKE_ARGV with the
@@ -427,7 +433,9 @@ provider_invoke_argv() {
     # silently unenforced on exactly the timeout-safe seam. resolve_model_for_tier
     # is base -> route -> clamp -> alt-provider in one call; keep both paths on it.
     model="$(resolve_model_for_tier "$tier" 2>/dev/null || provider_get_tier_param "$tier")"
+    loki_model_route_prefix
     _LOKI_INVOKE_ARGV=(
+        "${_LOKI_ROUTE_EXEC[@]+"${_LOKI_ROUTE_EXEC[@]}"}"
         claude --dangerously-skip-permissions
         "${_LOKI_CLAUDE_AUTO_FLAGS[@]+"${_LOKI_CLAUDE_AUTO_FLAGS[@]}"}"
     )
@@ -638,6 +646,11 @@ resolve_model_for_tier() {
         model="$LOKI_MODEL_OVERRIDE"
     fi
 
+    # OC-MODELS: an active model route (openrouter/ollama/...) wins; plain ids unchanged.
+    local _route_model
+    _route_model="$(loki_model_route_model 2>/dev/null || true)"
+    [ -n "$_route_model" ] && model="$_route_model"
+
     echo "$model"
 }
 
@@ -656,5 +669,6 @@ provider_invoke_with_tier() {
     # Guard empty auto-flag array under `set -u` on bash 3.2 (stock macOS): a bare
     # "${arr[@]}" on an empty array aborts with "unbound variable". ${arr[@]+...}
     # expands to nothing when empty and preserves spaced elements otherwise.
-    claude --dangerously-skip-permissions --model "$model" "${_LOKI_CLAUDE_AUTO_FLAGS[@]+"${_LOKI_CLAUDE_AUTO_FLAGS[@]}"}" -p "$prompt" "$@" < /dev/null
+    loki_model_route_prefix
+    "${_LOKI_ROUTE_EXEC[@]+"${_LOKI_ROUTE_EXEC[@]}"}" claude --dangerously-skip-permissions --model "$model" "${_LOKI_CLAUDE_AUTO_FLAGS[@]+"${_LOKI_CLAUDE_AUTO_FLAGS[@]}"}" -p "$prompt" "$@" < /dev/null
 }

package/providers/model_route_exec.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+# Exec a command (the claude CLI) with the active model route applied to ITS env
+# only. The token is read from the already-inherited env here, so it never
+# appears on any command line and is never printed.
+# Usage: bash model_route_exec.sh claude [args...]
+_dir="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd)"
+# shellcheck source=model_routes.sh
+. "$_dir/model_routes.sh"
+
+spec="$(loki_model_route_spec)"
+if [ -n "$spec" ] && loki_model_route_parse "$spec"; then
+    token=""
+    if [ -n "$LOKI_ROUTE_TOKEN_VAR" ]; then
+        token="${!LOKI_ROUTE_TOKEN_VAR:-}"
+    fi
+    export ANTHROPIC_BASE_URL="$LOKI_ROUTE_BASE"
+    export ANTHROPIC_MODEL="$LOKI_ROUTE_MODEL"
+    export ANTHROPIC_SMALL_FAST_MODEL="$LOKI_ROUTE_MODEL"
+    export ANTHROPIC_AUTH_TOKEN="${token:-loki-local-route}"
+    export ANTHROPIC_API_KEY=""
+fi
+exec "$@"

package/providers/model_routes.sh

@@ -0,0 +1,188 @@
+#!/usr/bin/env bash
+# Model routes: run non-Anthropic models through the Tier-1 Claude harness.
+#
+# Claude Code honors ANTHROPIC_BASE_URL, ANTHROPIC_AUTH_TOKEN and ANTHROPIC_MODEL,
+# so any Anthropic-compatible endpoint keeps every Loki control (cost, kill
+# blocking, receipts). Mirror of loki-ts/src/providers/model_routes.ts.
+#
+# Spec forms (env LOKI_MODEL_ROUTE, or LOKI_MODEL_OVERRIDE when it is a route):
+#   openrouter/<id>   https://openrouter.ai/api   token: OPENROUTER_API_KEY
+#   ollama/<id>       http://localhost:11434
+#   lmstudio/<id>     http://localhost:1234
+#   llamacpp/<id>     http://localhost:8080
+#   vllm/<id>         http://localhost:8000
+#   custom/<id>       LOKI_MODEL_BASE_URL (+ optional LOKI_MODEL_API_KEY)
+# Plain Claude ids (opus, sonnet, claude-*) are not routes: behavior unchanged.
+#
+# The env is applied only inside providers/model_route_exec.sh, which execs the
+# claude child. It is never exported into the parent shell, and the token is
+# never placed on a command line or logged.
+
+# kind -> "base_url|token_var"
+loki_model_route_table() {
+    case "$1" in
+        openrouter) echo "https://openrouter.ai/api|OPENROUTER_API_KEY" ;;
+        ollama)     echo "http://localhost:11434|" ;;
+        lmstudio)   echo "http://localhost:1234|" ;;
+        llamacpp)   echo "http://localhost:8080|" ;;
+        vllm)       echo "http://localhost:8000|" ;;
+        custom)     echo "${LOKI_MODEL_BASE_URL:-}|LOKI_MODEL_API_KEY" ;;
+        *) return 1 ;;
+    esac
+}
+
+# Echo the active route spec, or nothing when none is configured.
+loki_model_route_spec() {
+    local s="${LOKI_MODEL_ROUTE:-}"
+    if [ -z "$s" ]; then
+        s="${LOKI_MODEL_OVERRIDE:-}"
+        case "$s" in
+            */*) loki_model_route_table "${s%%/*}" >/dev/null 2>&1 || s="" ;;
+            *) s="" ;;
+        esac
+    fi
+    [ -n "$s" ] && printf '%s\n' "$s"
+    return 0
+}
+
+# Parse a spec. Sets LOKI_ROUTE_KIND, LOKI_ROUTE_MODEL, LOKI_ROUTE_BASE, LOKI_ROUTE_TOKEN_VAR.
+# Returns 1 when the spec is not a usable route.
+loki_model_route_parse() {
+    local spec="${1:-}" kind model entry
+    case "$spec" in */*) ;; *) return 1 ;; esac
+    kind="${spec%%/*}"
+    model="${spec#*/}"
+    [ -n "$model" ] || return 1
+    entry="$(loki_model_route_table "$kind")" || return 1
+    LOKI_ROUTE_KIND="$kind"
+    LOKI_ROUTE_MODEL="$model"
+    LOKI_ROUTE_BASE="${entry%%|*}"
+    LOKI_ROUTE_TOKEN_VAR="${entry#*|}"
+    [ -n "$LOKI_ROUTE_BASE" ] || return 1
+    return 0
+}
+
+# Echo the model id served by the active route (empty when none).
+loki_model_route_model() {
+    local spec
+    spec="$(loki_model_route_spec)"
+    [ -n "$spec" ] || return 0
+    loki_model_route_parse "$spec" && printf '%s\n' "$LOKI_ROUTE_MODEL"
+    return 0
+}
+
+# Populate _LOKI_ROUTE_EXEC with a command prefix for the claude child. Empty
+# array when no route is active, so callers expand it with ${arr[@]+...}.
+loki_model_route_prefix() {
+    _LOKI_ROUTE_EXEC=()
+    local spec dir
+    spec="$(loki_model_route_spec)"
+    [ -n "$spec" ] || return 0
+    loki_model_route_parse "$spec" || return 0
+    dir="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" 2>/dev/null && pwd)"
+    _LOKI_ROUTE_EXEC=(bash "$dir/model_route_exec.sh")
+}
+
+# Local runtime probe: print "<runtime>\t<model id>" per discovered model.
+# 1s timeouts. Uses python3 only to parse JSON.
+loki_models_probe_local() {
+    local rt url path body
+    for rt in "ollama|http://localhost:11434|/api/tags" \
+              "lmstudio|http://localhost:1234|/v1/models" \
+              "llamacpp|http://localhost:8080|/v1/models" \
+              "vllm|http://localhost:8000|/v1/models"; do
+        IFS='|' read -r name url path <<EOF
+$rt
+EOF
+        body="$(curl -s --connect-timeout 1 --max-time 1 "${url}${path}" 2>/dev/null)" || continue
+        [ -n "$body" ] || continue
+        printf '%s' "$body" | python3 -c '
+import json, sys
+name = sys.argv[1]
+try:
+    d = json.load(sys.stdin)
+except Exception:
+    sys.exit(0)
+items = d.get("models") if isinstance(d, dict) and "models" in d else d.get("data", []) if isinstance(d, dict) else []
+for m in items or []:
+    mid = (m.get("name") or m.get("model") or m.get("id")) if isinstance(m, dict) else None
+    if mid:
+        print(name + "\t" + mid)
+' "$name"
+    done
+}
+
+# loki models [--routes] [--local] [--json]
+loki_models_cmd() {
+    local want_local=0 json=0 arg
+    for arg in "$@"; do
+        case "$arg" in
+            --local) want_local=1 ;;
+            --json) json=1 ;;
+            --routes) ;;
+            -h|--help)
+                echo "Usage: loki models [--local] [--json]"
+                echo ""
+                echo "  (default)  List model routes usable as --model / LOKI_MODEL_ROUTE values"
+                echo "  --local    Probe local runtimes (ollama, lmstudio, llamacpp, vllm) for models"
+                echo "  --json     Machine-readable output"
+                echo ""
+                echo "Route env: LOKI_MODEL_ROUTE=openrouter/<id> | ollama/<id> | lmstudio/<id> |"
+                echo "           llamacpp/<id> | vllm/<id> | custom/<id> (needs LOKI_MODEL_BASE_URL)"
+                return 0
+                ;;
+            *) echo "loki models: unknown option: $arg" >&2; return 2 ;;
+        esac
+    done
+
+    local kinds="openrouter ollama lmstudio llamacpp vllm custom" k entry base tvar
+    if [ "$want_local" = "1" ]; then
+        local found
+        found="$(loki_models_probe_local)"
+        if [ "$json" = "1" ]; then
+            printf '%s' "$found" | python3 -c '
+import json, sys
+out = []
+for line in sys.stdin.read().splitlines():
+    rt, _, mid = line.partition("\t")
+    out.append({"runtime": rt, "id": mid, "model": rt + "/" + mid})
+print(json.dumps({"local": out}, indent=2))
+'
+        elif [ -z "$found" ]; then
+            echo "No local runtimes responded (probed :11434 ollama, :1234 lmstudio, :8080 llamacpp, :8000 vllm)."
+        else
+            echo "Discovered local models (paste as LOKI_MODEL_ROUTE=<value>):"
+            printf '%s\n' "$found" | while IFS="$(printf '\t')" read -r rt mid; do
+                echo "  $rt/$mid"
+            done
+        fi
+        return 0
+    fi
+
+    if [ "$json" = "1" ]; then
+        local sep="" first=1
+        printf '{"routes": ['
+        for k in $kinds; do
+            entry="$(loki_model_route_table "$k")"; base="${entry%%|*}"; tvar="${entry#*|}"
+            [ "$first" = "1" ] || printf ','
+            first=0
+            printf '{"kind":"%s","base_url":"%s","token_env":"%s","example":"%s/<model-id>"}' "$k" "$base" "$tvar" "$k"
+        done
+        printf ']}\n'
+        return 0
+    fi
+    echo "Model routes (run any Anthropic-compatible endpoint through the Claude harness):"
+    for k in $kinds; do
+        entry="$(loki_model_route_table "$k")"; base="${entry%%|*}"; tvar="${entry#*|}"
+        [ "$k" = "custom" ] && base="\$LOKI_MODEL_BASE_URL"
+        printf '  %-11s %-28s %s\n' "$k/<id>" "$base" "${tvar:+token: \$$tvar}"
+    done
+    echo ""
+    echo "Use: LOKI_MODEL_ROUTE=ollama/qwen3-coder loki start ./prd.md"
+    echo "Discover local models: loki models --local"
+}
+
+# Allow direct execution: bash providers/model_routes.sh [args]
+if [ "${BASH_SOURCE[0]:-}" = "$0" ]; then
+    loki_models_cmd "$@"
+fi

package/skills/providers.md

@@ -19,6 +19,7 @@ Loki Mode supports five AI providers for autonomous execution.
 | **Model Tiers** | 3 (opus/sonnet/haiku) | 1 (effort param) | 1 (external) | 1 (external) | 1 (external) |
 | **Multi-Provider** | Claude only | OpenAI only | 12+ providers | 18+ providers | 75+ providers + custom endpoints |
 | **Skill Directory** | ~/.claude/skills | None | None | None | ~/.config/opencode |
+| **Guardrails (engine10)** | Native hooks + permission flags | Timeout + budget kill, diff scan, sandbox flag | Timeout + budget kill, diff scan | Timeout + budget kill, diff scan, no-auto-commits | Timeout + budget kill, diff scan |
 
 ## Provider Selection
 
@@ -396,3 +397,15 @@ PROVIDER_DEGRADED=false
 | Local models (Ollama, free) | opencode, Aider, or Cline |
 | Architect mode (dual model) | Aider |
 | Sequential-only is acceptable | Codex or Aider |
+
+---
+
+## Guardrail Parity (engine10)
+
+Claude blocks destructive commands inline through its hooks and permission flags. For codex, cline, aider and opencode, engine10 applies `loki-ts/src/providers/provider_guard.ts` around every session:
+
+1. Wall-clock timeout (`limitS`) and a budget-stop poll (`BUDGET_LIMIT`) kill the whole process group.
+2. After each session a diff scan fails the iteration and reverts: mass deletion of tracked files, `.git/config` edits, new git hooks, symlinks or paths that point outside the project.
+3. Native CLI flags are used where they exist: codex `--sandbox workspace-write`, aider `--no-auto-commits`. Cline and opencode have no filesystem sandbox flag.
+
+The scan is post-hoc, not inline, so the receipt still lists `kill blocking not enforced` for non-Claude providers. Violations emit a `guard.violation` event.

package/templates/agents/planner.md

@@ -0,0 +1,10 @@
+---
+name: planner
+description: Breaks a goal into small ordered tasks with acceptance checks
+model: opus
+provider: claude
+permission: plan
+tools: [Read, Grep, Glob]
+deny: [Edit, Write, Bash]
+---
+You are a planning agent. Read the repository and split the goal into small, independently verifiable tasks. For each task give: goal, files likely touched, acceptance check, and risk. Order tasks by dependency. Do not write code.

package/templates/agents/reviewer.md

@@ -0,0 +1,10 @@
+---
+name: reviewer
+description: Skeptical code reviewer for correctness, tests and maintainability
+model: sonnet
+provider: claude
+permission: plan
+tools: [Read, Grep, Glob]
+deny: [Edit, Write]
+---
+You are a senior code reviewer. Review the supplied evidence for correctness bugs, missing tests, security problems and maintainability issues. Cite file and line for every finding. Do not modify files. Report APPROVE only when you found no blocking issue.

package/templates/agents/tester.md

@@ -0,0 +1,10 @@
+---
+name: tester
+description: Writes and runs focused tests for a change, reports gaps
+model: sonnet
+provider: claude
+permission: edit
+tools: [Read, Grep, Glob, Edit, Write, Bash]
+deny: []
+---
+You are a test engineer. For the given change, add the smallest set of tests that fail before the change and pass after. Run them and report exact commands and results. Do not alter production code; report any production bug you find instead.

package/web-app/dist/assets/{AdminPage-QK-i_x-O.js → AdminPage-Cbu3pXL8.js}

@@ -1,4 +1,4 @@
-import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-BLEnboSv.js";import{B as C}from"./Button--rePJOlQ.js";import{T as $e}from"./trending-up-Dbd7zrQj.js";import{C as z}from"./clock-DIsY_fa_.js";import{A as Be,U as ue,M as De}from"./Avatar-DblkLNjB.js";import{A as J}from"./activity-B2VsBl1C.js";import{R as pe}from"./refresh-cw-C0w1cdmF.js";import{G as ze}from"./globe-CXdqKgwd.js";import{C as Le}from"./chevron-left-B6Pa8IOX.js";import{C as je}from"./check-D1yp7Ndv.js";import{D as Y}from"./dollar-sign-DZEuTCs6.js";import{U as Te}from"./user-CzIihUy9.js";import{D as Me}from"./database-CWpdaykI.js";import{L as Ue}from"./lock-EiuaH1Ep.js";import{S as Re}from"./scroll-text-DSxiFtkc.js";import{S as Ie}from"./shield-alert-HBxMQOvH.js";/**
+import{c as L,r as x,j as e,w as re,Z as ne,m as le,h as ie,p as P,F as ye,U as I,X as ce,L as de,x as oe,M as Ae,T as Z,S as we,l as xe,k as me,y as Ce,E as Fe,a0 as Se,a as U,a2 as he}from"./index-4t-_IW2y.js";import{B as C}from"./Button-CpN2sO61.js";import{T as $e}from"./trending-up-BTcXLklK.js";import{C as z}from"./clock-C_dSJcDX.js";import{A as Be,U as ue,M as De}from"./Avatar-DGqGGcGx.js";import{A as J}from"./activity-BcWVWCqU.js";import{R as pe}from"./refresh-cw-D4i-NW3o.js";import{G as ze}from"./globe-Dy3lBJg1.js";import{C as Le}from"./chevron-left-CE9Cb30C.js";import{C as je}from"./check-DLlCpz9V.js";import{D as Y}from"./dollar-sign-CQ1vK_6q.js";import{U as Te}from"./user-BcDwUCsO.js";import{D as Me}from"./database-D2HOmxtl.js";import{L as Ue}from"./lock-DFFNbXDs.js";import{S as Re}from"./scroll-text-4qXOHTap.js";import{S as Ie}from"./shield-alert-D4tzjB1H.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Avatar-DblkLNjB.js → Avatar-DGqGGcGx.js}

@@ -1,4 +1,4 @@
-import{c as l,j as s}from"./index-BLEnboSv.js";/**
+import{c as l,j as s}from"./index-4t-_IW2y.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/web-app/dist/assets/{Badge-DIV2ny5H.js → Badge-Bhlipt6v.js}

@@ -1 +1 @@
-import{j as e}from"./index-BLEnboSv.js";import{C as r}from"./clock-DIsY_fa_.js";import{C as a}from"./circle-alert-D5jrL_Y7.js";import{C as l}from"./check-D1yp7Ndv.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};
+import{j as e}from"./index-4t-_IW2y.js";import{C as r}from"./clock-C_dSJcDX.js";import{C as a}from"./circle-alert-uou4bjua.js";import{C as l}from"./check-DLlCpz9V.js";const i={completed:"bg-[#1FC5A8]/10 text-[#1FC5A8]",running:"bg-[#553DE9]/10 text-[#553DE9]",failed:"bg-[#C45B5B]/10 text-[#C45B5B]",started:"bg-[#D4A03C]/10 text-[#D4A03C]",empty:"bg-[#F8F4F0] text-[#6B6960]",version:"bg-[#553DE9]/10 text-[#553DE9]"};function o({status:t}){switch(t){case"completed":return e.jsx(l,{size:12});case"running":return e.jsxs("span",{className:"relative flex h-2 w-2",children:[e.jsx("span",{className:"animate-ping motion-reduce:animate-none absolute inline-flex h-full w-full rounded-full bg-current opacity-75"}),e.jsx("span",{className:"relative inline-flex rounded-full h-2 w-2 bg-current"})]});case"failed":return e.jsx(a,{size:12});case"started":return e.jsx(r,{size:12});default:return null}}function f({status:t,children:n,className:s=""}){return e.jsxs("span",{className:["inline-flex items-center gap-1 rounded-btn px-2.5 py-0.5 text-xs font-semibold",i[t],s].filter(Boolean).join(" "),children:[e.jsx(o,{status:t}),n]})}export{f as B};

package/web-app/dist/assets/{Button--rePJOlQ.js → Button-CpN2sO61.js}

@@ -1 +1 @@
-import{r as p,j as t}from"./index-BLEnboSv.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};
+import{r as p,j as t}from"./index-4t-_IW2y.js";const m={primary:"bg-[#553DE9] text-white hover:bg-[#4432c4] shadow-button rounded-btn",secondary:"border border-[#553DE9] text-[#553DE9] hover:bg-[#E8E4FD] bg-transparent rounded-btn",ghost:"text-[#36342E] hover:bg-[#F8F4F0] rounded-btn",danger:"bg-[#C45B5B]/10 text-[#C45B5B] border border-[#C45B5B]/20 hover:bg-[#C45B5B]/20 rounded-btn"},b={sm:"px-3 py-1.5 text-xs",md:"px-4 py-2 text-sm",lg:"px-6 py-3 text-base"},u={sm:14,md:16,lg:18};function h({size:e}){return t.jsxs("svg",{className:"animate-spin",width:e,height:e,viewBox:"0 0 24 24",fill:"none",children:[t.jsx("circle",{className:"opacity-25",cx:"12",cy:"12",r:"10",stroke:"currentColor",strokeWidth:"4"}),t.jsx("path",{className:"opacity-75",fill:"currentColor",d:"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"})]})}const B=p.forwardRef(({variant:e="primary",size:o="md",icon:n,iconRight:i,loading:r=!1,disabled:a,className:c="",children:l,...x},d)=>{const s=u[o];return t.jsxs("button",{ref:d,disabled:a||r,className:["inline-flex items-center justify-center gap-2 font-medium transition-colors",m[e],b[o],(a||r)&&"opacity-60 cursor-not-allowed",c].filter(Boolean).join(" "),...x,children:[r?t.jsx(h,{size:s}):n?t.jsx(n,{size:s}):null,l,i&&!r&&t.jsx(i,{size:s})]})});B.displayName="Button";export{B};

package/web-app/dist/assets/{CockpitPage-BZlKxpGy.js → CockpitPage-BqeDJwdL.js}

@@ -1,4 +1,4 @@
-import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-BLEnboSv.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-DHG63CNr.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-DEgsHzSD.js";import{C as oe}from"./check-D1yp7Ndv.js";import{C as Ye}from"./clock-DIsY_fa_.js";import{D as Xe}from"./dollar-sign-DZEuTCs6.js";import{U as Ze}from"./upload-nhdFKAs1.js";import{L as V}from"./loader-circle-DodDmIZ3.js";/**
+import{c as $,r as l,j as e,G as we,Q as Se,F as Ce,h as Re,T as U,Z as Ee,a as S,V as Me,S as $e,Y as Te,X as Pe,P as ie,i as Ae,g as ze,C as Ie,l as Le,N as I,J as _e,K as De,O as Fe,u as Oe}from"./index-4t-_IW2y.js";import{P as K,S as He,E as Be}from"./ErrorBoundary-DTWsYrOm.js";import{C as qe,F as Ge,M as Ue,H as Ke,a as We,G as Ve,T as Qe}from"./thumbs-up-DZiRwdFj.js";import{C as oe}from"./check-DLlCpz9V.js";import{C as Ye}from"./clock-C_dSJcDX.js";import{D as Xe}from"./dollar-sign-CQ1vK_6q.js";import{U as Ze}from"./upload-fcHqwOxr.js";import{L as V}from"./loader-circle-CxgN1v4m.js";/**
  * @license lucide-react v0.577.0 - ISC
  *
  * This source code is licensed under the ISC license.