loki-mode 11.3.9 → 11.5.1

package/autonomy/setup-wizard.sh

@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+# setup-wizard.sh -- `loki setup`: the single first-run wizard.
+# Sourced by autonomy/loki; relies on cmd_config_set and SKILL_DIR from that
+# file. `loki welcome` (intro), `loki quickstart` (first build) and
+# `loki doctor` (health) remain separate entry points.
+#
+# REQUIRED (doctor fails without them): node >= 20, python3 >= 3.8, jq, git, curl
+# AT LEAST ONE of: a provider CLI (claude, codex, cline, aider, opencode) or the
+#   bundled Claude Agent SDK with credentials. Claude Code is the default.
+# OPTIONAL: bun (bundled by npm), bash >= 4, codex/cline/aider/opencode, ollama.
+
+_lsw_ask() {
+    # _lsw_ask PROMPT DEFAULT -> echoes the answer; DEFAULT when --yes or no TTY
+    local prompt="$1" def="$2" ans=""
+    if [ "$_LSW_YES" = "1" ] || [ ! -t 0 ]; then
+        printf '%s' "$def"
+        return 0
+    fi
+    printf '%s [%s]: ' "$prompt" "$def" >&2
+    read -r ans || ans=""
+    printf '%s' "${ans:-$def}"
+}
+
+_lsw_confirm() {
+    # _lsw_confirm PROMPT -> 0 for yes; --yes accepts, no TTY declines
+    local ans=""
+    [ "$_LSW_YES" = "1" ] && return 0
+    [ ! -t 0 ] && return 1
+    printf '%s [y/N] ' "$1" >&2
+    read -r ans || ans=""
+    case "$ans" in y|Y|yes|YES) return 0 ;; *) return 1 ;; esac
+}
+
+_lsw_fix() {
+    # _lsw_fix ID FALLBACK -> the one-line fix from the shared requirements table
+    # (autonomy/lib/setup-requirements.json), the same text loki doctor prints.
+    local out=""
+    out="$(jq -r --arg id "$1" '.requirements[] | select(.id == $id) | .fix' "${SKILL_DIR}/autonomy/lib/setup-requirements.json" 2>/dev/null | head -n 1)" || out=""
+    printf '%s' "${out:-$2}"
+}
+
+_lsw_tool() {
+    # _lsw_tool NAME LABEL INSTALL_HINT
+    if command -v "$1" >/dev/null 2>&1; then
+        printf '  [ OK ]  %-10s %s\n' "$1" "$2"
+        return 0
+    fi
+    printf '  [MISS]  %-10s %s. Install: %s\n' "$1" "$2" "$3"
+    [ "$2" = "REQUIRED" ] && _LSW_MISSING=$((_LSW_MISSING + 1))
+    return 1
+}
+
+_lsw_help() {
+    echo "loki setup - first-run wizard (tools, provider, model route, spend cap)"
+    echo ""
+    echo "Usage: loki setup [--yes] [--provider NAME] [--model ROUTE] [--budget USD] [--global] [--check]"
+    echo ""
+    echo "  --yes, -y         Non-interactive: accept defaults, never prompt"
+    echo "  --provider NAME   claude (default), codex, cline, aider, opencode"
+    echo "  --model ROUTE     claude (default), ollama/<model>, openrouter/<vendor>/<model>"
+    echo "  --budget USD      Spend cap in USD (default: none)"
+    echo "  --global          Write to ~/.config/loki-mode instead of .loki/config"
+    echo "  --check           Report only; change nothing"
+    echo ""
+    echo "Related: loki welcome (intro), loki quickstart (first build), loki doctor (health)."
+}
+
+cmd_setup() {
+    _LSW_YES=0
+    _LSW_MISSING=0
+    local provider="" model="" budget="" use_global="" check_only=0
+    while [ $# -gt 0 ]; do
+        case "$1" in
+            --yes|-y) _LSW_YES=1 ;;
+            --provider) provider="${2:-}"; shift ;;
+            --model) model="${2:-}"; shift ;;
+            --budget) budget="${2:-}"; shift ;;
+            --global) use_global="--global" ;;
+            --check) check_only=1 ;;
+            --help|-h) _lsw_help; return 0 ;;
+            *) echo "Unknown option: $1" >&2; _lsw_help >&2; return 2 ;;
+        esac
+        shift
+    done
+    [ -n "${CI:-}" ] && _LSW_YES=1
+
+    echo "Loki Mode setup"
+    echo ""
+    echo "1. Required tools"
+    _lsw_tool node REQUIRED "$(_lsw_fix node "install Node 20+ from https://nodejs.org")" || true
+    _lsw_tool python3 REQUIRED "$(_lsw_fix python3 "install python3")" || true
+    _lsw_tool jq REQUIRED "$(_lsw_fix jq "install jq")" || true
+    _lsw_tool git REQUIRED "$(_lsw_fix git "install git")" || true
+    _lsw_tool curl REQUIRED "$(_lsw_fix curl "install curl")" || true
+    _lsw_tool bun OPTIONAL "$(_lsw_fix bun "bundled by npm; else see https://bun.sh")" || true
+    if [ "$_LSW_MISSING" -gt 0 ]; then
+        echo ""
+        echo "Install the missing REQUIRED tools above with your package manager (setup never installs system packages), then rerun: loki setup"
+        return 1
+    fi
+
+    echo ""
+    echo "2. Provider CLI (Claude Code is the default and the only Tier-1 provider)"
+    local p
+    for p in codex cline aider opencode; do
+        _lsw_tool "$p" OPTIONAL "$(_lsw_fix "$p" "see 'loki doctor' for the command")" || true
+    done
+    if command -v claude >/dev/null 2>&1; then
+        printf '  [ OK ]  %-10s DEFAULT\n' claude
+        if claude auth status 2>/dev/null | grep -q '"loggedIn"[[:space:]]*:[[:space:]]*true'; then
+            echo "          claude is logged in."
+        else
+            echo "          claude is installed but not logged in. Run: claude auth login"
+            if [ "$check_only" = 0 ] && _lsw_confirm "Run 'claude auth login' now?"; then
+                claude auth login || true
+            fi
+        fi
+    else
+        echo "  [MISS]  claude     DEFAULT. Install: $(_lsw_fix claude "npm install -g @anthropic-ai/claude-code")   (then: claude auth login)"
+        if [ "$check_only" = 0 ] && [ -f "${SKILL_DIR}/autonomy/provider-offer.sh" ]; then
+            if _lsw_confirm "Run that install command now?"; then
+                # shellcheck disable=SC1091
+                . "${SKILL_DIR}/autonomy/provider-offer.sh"
+                LOKI_ASSUME_YES="$_LSW_YES" _po_do_install || true
+            fi
+        fi
+        if ! command -v claude >/dev/null 2>&1; then
+            echo "          Claude Code is not mandatory if another provider above is installed,"
+            echo "          or if you use the Anthropic API-key path (LOKI_SDK_MODE=full with ANTHROPIC_API_KEY)."
+            echo "          Requirements per path: loki doctor --requirements"
+        fi
+    fi
+
+    if [ "$check_only" = 1 ]; then
+        echo ""
+        echo "Check only: no config written."
+        return 0
+    fi
+
+    echo ""
+    echo "3. Provider and model route"
+    [ -z "$provider" ] && provider="$(_lsw_ask "Provider (claude|codex|cline|aider|opencode)" claude)"
+    [ -z "$model" ] && model="$(_lsw_ask "Model route (claude | ollama/<model> | openrouter/<vendor>/<model>)" claude)"
+    echo ""
+    echo "4. Spend cap"
+    [ -z "$budget" ] && budget="$(_lsw_ask "Spend cap in USD (blank for none)" "")"
+
+    echo ""
+    echo "5. Writing config"
+    # shellcheck disable=SC2086
+    cmd_config_set $use_global provider "$provider" || return 1
+    if [ -n "$budget" ]; then
+        # shellcheck disable=SC2086
+        cmd_config_set $use_global budget "$budget" || return 1
+    fi
+    case "$model" in
+        ""|claude) ;;
+        ollama/*)
+            echo "  Model route: pass '--model $model' to loki start (Ollama must be running: ollama serve)."
+            ;;
+        openrouter/*)
+            echo "  Model route: pass '--model $model' and export OPENROUTER_API_KEY (setup never stores keys)."
+            ;;
+        *) echo "  Unrecognized route '$model'; using the provider default." ;;
+    esac
+
+    echo ""
+    echo "Done. Next: loki doctor (verify), loki quickstart (first build). Inspect: loki config list"
+    return 0
+}

package/autonomy/verify.sh

@@ -38,6 +38,8 @@
 #   1  CONCERNS
 #   2  BLOCKED
 #   3  verifier error (could not complete; never silently passes)
+#   64 usage error (unknown option / unexpected argument)
+#   Not a git repo exits 2; an empty diff exits 3 (enforced from v11.4.0).
 #
 # EXIT-CODE ORDERING, RECONCILED. An early draft spec listed
 # 0=VERIFIED, 1=BLOCKED, 2=CONCERNS, and this header used to say a human must
@@ -66,6 +68,7 @@ VERIFY_EXIT_VERIFIED=0
 VERIFY_EXIT_CONCERNS=1
 VERIFY_EXIT_BLOCKED=2
 VERIFY_EXIT_ERROR=3
+VERIFY_EXIT_USAGE=64
 VERIFY_SCHEMA_VERSION="1.0"
 
 # S-216: verify runs from the tree under review (tree="."), and a bare
@@ -355,8 +358,10 @@ verify_diff_base() {
     VERIFY_DIFF_INS=0
     VERIFY_DIFF_DEL=0
     VERIFY_DIFF_NAMES=""
+    VERIFY_NOT_GIT=0
 
     if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+        VERIFY_NOT_GIT=1
         _verify_log "not a git repository; diff base unresolved (inconclusive)"
         return 0
     fi
@@ -2187,6 +2192,16 @@ verify_compute_verdict() {
     elif [ "$has_nonblock_finding" = "true" ] || [ "$inconclusive" = "true" ]; then
         VERIFY_VERDICT="CONCERNS"
         VERIFY_EXIT=$VERIFY_EXIT_CONCERNS
+        # Exit contract (v11.4.0): the two inputs that give the verifier nothing
+        # to check map to their own codes. The verdict word stays CONCERNS so
+        # evidence.json is unchanged; only the process status is sharper.
+        if [ "$has_nonblock_finding" != "true" ]; then
+            if [ "${VERIFY_NOT_GIT:-0}" = "1" ]; then
+                VERIFY_EXIT=$VERIFY_EXIT_BLOCKED
+            elif [ "${VERIFY_DIFF_RESOLVED:-false}" = "true" ] && [ "${VERIFY_DIFF_FILES:-0}" -eq 0 ]; then
+                VERIFY_EXIT=$VERIFY_EXIT_ERROR
+            fi
+        fi
     else
         VERIFY_VERDICT="VERIFIED"
         VERIFY_EXIT=$VERIFY_EXIT_VERIFIED
@@ -2253,6 +2268,7 @@ verify_emit_evidence() {
     _V_SCOPE_SOFT_NET="${VERIFY_SCOPE_SOFT_NET_LINES:-}" \
     _V_SCOPE_MAX_FILES="${VERIFY_SCOPE_MAX_FILES:-}" \
     _V_SCOPE_MAX_NET="${VERIFY_SCOPE_MAX_NET_LINES:-}" \
+    _V_LIBDIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/lib" \
     _verify_py - <<'PYEOF'
 import json, os, hashlib, sys
 
@@ -2386,6 +2402,27 @@ if _scope_verdict:
         "thresholds": _thresholds,
     }
 
+# Verification record (docs/PROOF-PASSPORT.md): integrity, execution
+# validity (revision + environment) and requirement coverage, kept separate, plus
+# per-check status and a scoped label. Additive; verdict/exit_code are untouched.
+# A failure to build it is recorded, never swallowed into a clean-looking doc.
+try:
+    sys.path.insert(0, os.environ["_V_LIBDIR"])
+    import importlib.util
+    _spec = importlib.util.spec_from_file_location(
+        "loki_proof_verify", os.path.join(os.environ["_V_LIBDIR"], "proof-verify.py"))
+    _pv_mod = importlib.util.module_from_spec(_spec)
+    _spec.loader.exec_module(_pv_mod)
+    doc["verification"] = _pv_mod.build_for_evidence(
+        doc, repo_dir=".", loki_dir=os.environ.get("LOKI_DIR") or ".loki",
+        record_path="", fresh_capture=True)
+    # base_verdict duplicates doc["verdict"]; record_path would pin the output
+    # directory into a document that must be byte-identical across directories.
+    doc["verification"].pop("base_verdict", None)
+except Exception as _vr_exc:
+    doc["verification"] = {"schema_version": "1.0", "error": "verification record unavailable: %s" % _vr_exc,
+                           "label": doc["verdict"] + " (verification record unavailable)"}
+
 os.makedirs(out_dir, exist_ok=True)
 ev_path = os.path.join(out_dir, "evidence.json")
 with open(ev_path, "w") as f:
@@ -2422,6 +2459,10 @@ lines.append("# Autonomi Verify report")
 lines.append("")
 lines.append("Verdict: **%s** (exit %d)" % (doc["verdict"], doc["exit_code"]))
 lines.append("")
+_vr_label = (doc.get("verification") or {}).get("label")
+if _vr_label:
+    lines.append("Verification: %s" % _vr_label)
+    lines.append("")
 _llm = doc.get("llm_review") or {}
 _llm_status = _llm.get("status", "unavailable")
 if _llm_status == "reviewed":
@@ -2570,6 +2611,11 @@ EXIT CODES:
     1  CONCERNS
     2  BLOCKED
     3  verifier error (could not complete; never silently passes)
+    64 usage error (unknown option or unexpected argument)
+
+    Two inputs that leave nothing to check have their own codes: a directory
+    that is not a git repository exits 2, an empty diff vs base exits 3. The
+    VERDICT line still reads CONCERNS for both.
 
     Severity rises with the code, so `[ $rc -ge 2 ]` means "at least blocked".
     An early draft spec listed 1=BLOCKED, 2=CONCERNS; that ordering was
@@ -3238,10 +3284,10 @@ verify_main() {
             --allow-unsigned) VERIFY_ALLOW_UNSIGNED=1; shift ;;
             --) shift; break ;;
             -*)
-                _verify_err "unknown option: $1"; verify_help; return $VERIFY_EXIT_ERROR ;;
+                _verify_err "unknown option: $1"; verify_help; return $VERIFY_EXIT_USAGE ;;
             *)
                 if [ -z "$base_ref" ]; then base_ref="$1"; else
-                    _verify_err "unexpected argument: $1"; return $VERIFY_EXIT_ERROR
+                    _verify_err "unexpected argument: $1"; return $VERIFY_EXIT_USAGE
                 fi
                 shift ;;
         esac
@@ -3399,7 +3445,20 @@ verify_main() {
     # Under --json stdout carries the evidence document alone, so the human
     # banner is redirected to stderr rather than dropped: an operator watching a
     # terminal still sees the verdict, and `| jq` still parses.
-    printf 'VERDICT: %s\n' "$VERIFY_VERDICT" >&$_v_banner_fd
+    # Scoped label + compact reviewer summary from the verification record just
+    # written to evidence.json. The exit code is unchanged; only the wording is
+    # stricter: a skipped or not-run check never leaves a bare "VERIFIED".
+    local _v_lib _v_label _v_summary
+    _v_lib="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/lib"
+    _v_label="$VERIFY_VERDICT"
+    if [ -f "$_v_lib/proof-verify.py" ]; then
+        _v_summary="$(_verify_py "$_v_lib/proof-verify.py" summary "$out_dir/evidence.json" --embedded 2>/dev/null)" || _v_summary=""
+        if [ -n "$_v_summary" ]; then
+            _v_label="${_v_summary%%$'\n'*}"
+            printf '%s\n' "${_v_summary#*$'\n'}" >&$_v_banner_fd
+        fi
+    fi
+    printf 'VERDICT: %s\n' "$_v_label" >&$_v_banner_fd
     printf 'Evidence: %s/evidence.json\n' "$out_dir" >&$_v_banner_fd
     printf 'Report:   %s/report.md\n' "$out_dir" >&$_v_banner_fd
     # --hosted only: surface the enrichment in human output so the extra signal

package/bin/loki

@@ -245,6 +245,48 @@ if [ "${LOKI_PROVIDER:-}" = "gemini" ]; then
     exit 1
 fi
 
+# OC-MODELS: `loki start|quick ... --model <id>` (also flag-first). One place maps the flag to
+# env before ANY engine/route decision, so engine10, the Bun start command and the legacy
+# loop all see the same thing. Route specs (openrouter|ollama|lmstudio|llamacpp|vllm|custom/<id>)
+# set LOKI_MODEL_ROUTE (claude child only); tier names and Claude aliases become --session-model;
+# any other id sets LOKI_OPENCODE_MODEL for opencode or LOKI_MODEL_OVERRIDE otherwise.
+case "${1:-}" in
+    start|quick|--model|--model=*)
+        _lm_has=0
+        for _lm_a in "$@"; do case "$_lm_a" in --model|--model=*) _lm_has=1 ;; esac; done
+        if [ "$_lm_has" = "1" ]; then
+            _lm_out=(); _lm_model=""; _lm_prov=""; _lm_skip=0; _lm_pnext=0
+            for _lm_a in "$@"; do
+                if [ "$_lm_skip" = "1" ]; then case "$_lm_a" in -*) _lm_model=""; break ;; esac; _lm_model="$_lm_a"; _lm_skip=0; continue; fi
+                if [ "$_lm_pnext" = "1" ]; then _lm_prov="$_lm_a"; _lm_pnext=0; fi
+                case "$_lm_a" in
+                    --model) _lm_skip=1; continue ;;
+                    --model=*) _lm_model="${_lm_a#--model=}"; continue ;;
+                    --provider) _lm_pnext=1 ;;
+                    --provider=*) _lm_prov="${_lm_a#--provider=}" ;;
+                esac
+                _lm_out+=("$_lm_a")
+            done
+            if [ -n "$_lm_model" ]; then
+                [ -n "$_lm_prov" ] || _lm_prov="${LOKI_PROVIDER:-claude}"
+                case "$_lm_model" in
+                    openrouter/*|ollama/*|lmstudio/*|llamacpp/*|vllm/*|custom/*) export LOKI_MODEL_ROUTE="$_lm_model" ;;
+                    small|medium|high|opus|sonnet|haiku) _lm_out+=(--session-model "$_lm_model") ;;
+                    *)
+                        if [ "$_lm_prov" = "opencode" ]; then export LOKI_OPENCODE_MODEL="$_lm_model"
+                        else export LOKI_MODEL_OVERRIDE="$_lm_model"; fi
+                        ;;
+                esac
+            else
+                echo "loki: --model requires a value (for example ollama/qwen3-coder or openrouter/<id>)." >&2
+                exit 2
+            fi
+            set -- ${_lm_out[@]+"${_lm_out[@]}"}
+        fi
+        unset _lm_has _lm_out _lm_model _lm_prov _lm_skip _lm_pnext _lm_a
+        ;;
+esac
+
 # First-run funnel, stage C: the activation ATTEMPT (first `loki start`).
 #
 # WHY HERE. This shim runs for BOTH routes before any exec, so one emit at this
@@ -406,29 +448,16 @@ _loki_start_needs_bash() {
         esac
     done
     unset _loki_iso_next
-
-    # The Bun RARV loop has not ported the opencode invoker yet. Keep the
-    # released, autonomous shell adapter reachable when SDK mode is enabled
-    # instead of accepting the selection and then failing after intake. CLI
-    # selection wins over env, which wins over the project-level saved choice.
-    local effective_provider="$explicit_provider"
-    if [ -z "$effective_provider" ] && [ -n "${LOKI_PROVIDER:-}" ]; then
-        effective_provider="$LOKI_PROVIDER"
-    fi
-    if [ -z "$effective_provider" ] && [ -f "${PWD}/.loki/state/provider" ]; then
-        effective_provider="$(sed -n '1p' "${PWD}/.loki/state/provider" 2>/dev/null || true)"
-    fi
-    [ "$effective_provider" = "opencode" ] && return 0
     return 1
 }
 _loki_attempts_refuse() {
     if _loki_start_needs_bash "$@"; then
-        echo "loki: 'loki start --attempts' runs only the Loki 10 engine; an option or provider in this command (for example --parallel, --github, --sandbox, --issue, --dry-run, --detach, or opencode) was only honored by the removed legacy loop. Remove it, or use a task string, an issue ref or a PRD path." >&2
+        echo "loki: 'loki start --attempts' runs only the Loki 10 engine; an option or provider in this command (for example --parallel, --github, --sandbox, --issue, --dry-run, or --detach) was only honored by the removed legacy loop. Remove it, or use a task string, an issue ref or a PRD path." >&2
         exit 2
     fi
     case "${LOKI_PROVIDER:-claude}" in
-        claude|codex|cline|aider) ;;
-        *) echo "loki: the Loki 10 engine does not support LOKI_PROVIDER=${LOKI_PROVIDER:-}; use claude, codex, cline or aider." >&2; exit 2 ;;
+        claude|codex|cline|aider|opencode) ;;
+        *) echo "loki: the Loki 10 engine does not support LOKI_PROVIDER=${LOKI_PROVIDER:-}; use claude, codex, cline, aider or opencode." >&2; exit 2 ;;
     esac
 }
 
@@ -482,6 +511,28 @@ if [ "${1:-}" = "start" ]; then
     unset _loki_sp_a
 fi
 
+# OC-ROUTE: normalize flags before the engine decision so argument order and input form
+# never change the engine (autonomy/route.sh; `loki route ...` and --explain-route print it).
+_R_APPLIED=0
+if [ -f "$REPO_ROOT/autonomy/route.sh" ] && { [ "$_LOKI_START_ATTEMPTS" != "1" ] || case " $* " in *" --explain-route "*) true ;; *) false ;; esac; }; then
+    # shellcheck source=/dev/null
+    . "$REPO_ROOT/autonomy/route.sh"
+    _r_rc=0
+    loki_route_dispatch "$@" || _r_rc=$?
+    case "$_r_rc" in 7) exit 0 ;; 8) exit 2 ;; esac
+    if [ "$R_DECIDED" = "1" ]; then
+        _R_APPLIED=1
+        if [ -n "$R_SESSION_MODEL" ]; then
+            case "$R_SESSION_MODEL" in small) R_SESSION_MODEL=fast ;; medium) R_SESSION_MODEL=development ;; high) R_SESSION_MODEL=planning ;; esac
+            export LOKI_SESSION_MODEL="$R_SESSION_MODEL"
+        fi
+        if [ "$R_E10" != "1" ]; then
+            set -- "$([ "$R_VERB" = "bare" ] && echo start || echo "$R_VERB")" ${R_CLEAN[@]+"${R_CLEAN[@]}"}
+        fi
+    fi
+    unset _r_rc
+fi
+
 # Loki 10 engine (D29, the only engine from 11.0.0). Routes `loki "<task>"`,
 # `loki owner/repo#N`, `loki quick "<task>"`, `keys` and `verify --pubkey` to engine10.
 # shellcheck disable=SC2194
@@ -566,14 +617,18 @@ case "v10" in
             # issue refs reach v10.
             *) _e10=0 ;;
         esac
+        if [ "$_R_APPLIED" = "1" ]; then
+            _e10="$R_E10"; _e10_hard="$R_HARD"
+            if [ "$R_E10" = "1" ]; then _e10_args=("${R_E10_ARGS[@]}"); fi
+        fi
         # Default (unset) mode never breaks a host: no bun, or a provider engine10 has no
         # invoker for, falls through to the legacy engine. Explicit v10 keeps its hard error.
         if [ "$_e10" = "1" ] && [ "$_e10_hard" = "0" ]; then
             case "${LOKI_PROVIDER:-claude}" in
-                claude|codex|cline|aider) ;;
+                claude|codex|cline|aider|opencode) ;;
                 *)
                     _e10=0
-                    echo "loki: using the legacy engine (the Loki 10 engine does not support LOKI_PROVIDER=${LOKI_PROVIDER:-}; use claude, codex, cline or aider)." >&2
+                    echo "loki: using the legacy engine (the Loki 10 engine does not support LOKI_PROVIDER=${LOKI_PROVIDER:-}; use claude, codex, cline, aider or opencode)." >&2
                     ;;
             esac
             if [ "$_e10" = "1" ]; then

package/completions/_loki

@@ -64,8 +64,52 @@ function _loki {
                 doctor)
                     _arguments \
                         '--json[Output machine-readable JSON]' \
+                        '--fix[Create state dirs and a default config]' \
                         '--help[Show help]'
                     ;;
+                chat)
+                    _arguments \
+                        '--attach[Attach to a running session]' \
+                        '--tui[Use the terminal UI]' \
+                        '--help[Show help]'
+                    ;;
+                agents)
+                    _arguments \
+                        '1:subcommand:(list new show export)' \
+                        '--claude[Export to .claude/agents]' \
+                        '--user[Use the user-level agents directory]' \
+                        '--help[Show help]'
+                    ;;
+                models)
+                    _arguments \
+                        '--local[Show local models]' \
+                        '--json[Output machine-readable JSON]' \
+                        '--help[Show help]'
+                    ;;
+                setup)
+                    _arguments \
+                        '--yes[Non-interactive defaults]' \
+                        '--check[Report only]' \
+                        '--help[Show help]'
+                    ;;
+                route)
+                    _arguments \
+                        '1:verb:(start quick)' \
+                        '--json[Output machine-readable JSON]' \
+                        '--provider[AI provider]:provider name:(claude cline codex aider opencode)' \
+                        '--model[Model or route override]:model:' \
+                        '--no-pr[Skip the pull request]' \
+                        '--max-cost[Spend cap in USD]:amount:' \
+                        '--help[Show help]'
+                    ;;
+                edit)
+                    _arguments \
+                        '--verify[Run verification after the edit]' \
+                        '--commit[Commit the edit]' \
+                        '--dry-run[Describe the change only]' \
+                        '--help[Show help]' \
+                        '*:file:_files'
+                    ;;
                 reset)
                     _loki_reset
                     ;;
@@ -219,6 +263,13 @@ function _loki_commands {
         'queue:Overnight issue queue with a morning digest'
         'issues:Run every open issue in a repo and open PRs'
         'undo:Show what undoing a run would do (read-only plan)'
+        'chat:Interactive chat session (run, attach)'
+        'route:Print the engine, provider and model route without running'
+        'edit:Make a scoped edit to files'
+        'setup:First-run wizard for tools, provider, model route and spend cap'
+        'models:List models and routes (--local for local models)'
+        'agents:List, scaffold, show and export agent definitions'
+        'diff:Show what the last run changed'
         'control:Control plane (preview, LOKI_CONTROL=1)'
         'workspace:Multi-project workspaces (preview, LOKI_WORKSPACES=1)'
         'backlog:Run every matching open issue, N in parallel'
@@ -275,6 +326,10 @@ function _loki_start {
         '--yes[Skip confirmation prompts]' \
         '-y[Skip confirmation prompts]' \
         '--budget[Cost budget limit in USD]:amount:' \
+        '--model[Model or route override]:model:' \
+        '--max-cost[Spend cap in USD]:amount:' \
+        '--no-pr[Build and verify without opening a pull request]' \
+        '--explain-route[Print the route without running]' \
         '--max-iterations[Max iterations]:number:' \
         '--attempts[Independent attempts in worktrees, 1-5]:number:(1 2 3 4 5)' \
         '*:spec file:_loki_spec_files'
@@ -323,7 +378,8 @@ function _loki_provider {
         'show:Display current provider'
         'set:Set default provider'
         'list:List available providers'
-        'info:Get provider information'
+        'info:Get provider information (--json: capability contract)'
+        'matrix:Show the capability matrix'
         'help:Provider help'
     )
     _describe -t cmds 'provider subcommand' cmds
@@ -334,6 +390,7 @@ function _loki_plan {
         '--json[Machine-readable JSON output]' \
         '--verbose[Detailed per-iteration breakdown]' \
         '--spec[Write editable acceptance criteria to .loki/specs/<slug>.md]' \
+        '--requirements[Print the last run requirement-to-check map (read-only)]' \
         '*:prd file:_files'
 }
 

package/completions/loki.bash

@@ -5,7 +5,7 @@ _loki_completion() {
     _init_completion || return
 
     # Main subcommands (must match autonomy/loki main case statement)
-    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue intent config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt outcomes explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash control workspace open otel preview quickstart rc rollback merge self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help keys answer queue issues undo acp verify-pr"
+    local main_commands="start backlog quick monitor demo tour welcome init stop pause resume steer status next ship dashboard web serve api sandbox notify import github issue intent config provider reset memory compound checkpoint council dogfood projects enterprise secrets cockpit secure own handoff doctor watchdog audit metrics syslog onboard share proof receipt outcomes explain plan report cost estimate kpis stats test ci watch telemetry agent context ctx code run export review optimize heal modernize migrate cluster worktree wt trigger failover remote deploy docker mcp magic assets analyze compliance crash control workspace open otel preview quickstart rc rollback merge self-update sentrux setup-skill spec state template trust trust-metrics ultracode update verify voice why wiki bench cleanup logs grill docs cp version completions help keys answer queue issues undo acp verify-pr chat route edit setup models agents diff"
 
     # 1. If we are on the first argument (subcommand)
     if [[ $cword -eq 1 ]]; then
@@ -27,7 +27,7 @@ _loki_completion() {
 
             # If the word starts with a dash, show flags
             if [[ "$cur" == -* ]]; then
-                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --spec --spec-first --yes --budget --attempts --help"
+                local flags="--provider --max-iterations --parallel --background --bg --simple --complex --github --no-dashboard --sandbox --skip-memory --spec --spec-first --yes --budget --attempts --model --isolation --max-cost --no-pr --explain-route --help"
                 COMPREPLY=( $(compgen -W "${flags}" -- "$cur") )
                 return 0
             fi
@@ -67,7 +67,7 @@ _loki_completion() {
             ;;
 
         provider)
-            local provider_cmds="show set list info help"
+            local provider_cmds="show set list info matrix help"
             COMPREPLY=( $(compgen -W "${provider_cmds}" -- "$cur") )
             ;;
 
@@ -123,9 +123,61 @@ _loki_completion() {
             fi
             ;;
 
+        setup-skill)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--claude-code --print --project --stop-hook --settings --help" -- "$cur") )
+                return 0
+            fi
+            ;;
         doctor)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--json --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--json --fix --repo --requirements --help" -- "$cur") )
+                return 0
+            fi
+            ;;
+
+        chat)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--attach --tui --help" -- "$cur") )
+                return 0
+            fi
+            ;;
+
+        agents)
+            if [[ $cword -eq 2 ]]; then
+                COMPREPLY=( $(compgen -W "list new show export" -- "$cur") )
+            elif [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--claude --user --help" -- "$cur") )
+            fi
+            return 0
+            ;;
+
+        models)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--local --json --help" -- "$cur") )
+                return 0
+            fi
+            ;;
+
+        setup)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--yes --check --help" -- "$cur") )
+                return 0
+            fi
+            ;;
+
+        route)
+            if [[ $cword -eq 2 ]]; then
+                COMPREPLY=( $(compgen -W "start quick" -- "$cur") )
+            elif [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--json --provider --model --no-pr --max-cost --help" -- "$cur") )
+            fi
+            return 0
+            ;;
+
+        edit)
+            if [[ "$cur" == -* ]]; then
+                COMPREPLY=( $(compgen -W "--verify --commit --dry-run --help" -- "$cur") )
                 return 0
             fi
             ;;
@@ -151,7 +203,7 @@ _loki_completion() {
 
         plan)
             if [[ "$cur" == -* ]]; then
-                COMPREPLY=( $(compgen -W "--json --verbose --spec --help" -- "$cur") )
+                COMPREPLY=( $(compgen -W "--json --verbose --spec --requirements --help" -- "$cur") )
                 return 0
             fi
             ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "11.3.9"
+__version__ = "11.5.1"
 
 # Expose the control app for easy import
 try: