loki-mode 11.4.2 → 11.6.0

package/autonomy/loki

@@ -71,6 +71,15 @@ if [ -f "$_LOKI_SCRIPT_DIR/lib/lock.sh" ]; then
     source "$_LOKI_SCRIPT_DIR/lib/lock.sh"
 fi
 
+# Default per-run spend cap (single source: default_max_cost_usd in loki-ts/data/model-pricing.json,
+# also read by loki-ts/src/e10ext/budget_cap.ts and autonomy/run.sh). Prints a plain number; 100 only if the file is unreadable.
+loki_budget_default_usd() {
+    local v=""
+    [ -f "$_LOKI_SCRIPT_DIR/../loki-ts/data/model-pricing.json" ] && \
+        v="$(sed -n 's/.*"default_max_cost_usd"[[:space:]]*:[[:space:]]*\([0-9][0-9.]*\).*/\1/p' "$_LOKI_SCRIPT_DIR/../loki-ts/data/model-pricing.json" | head -1)"
+    printf '%s\n' "${v:-100}"
+}
+
 # Guarded browser opener (loki_open_url). Every browser open goes through it
 # so tests, CI and non-TTY runs never pop a tab. If missing, nothing opens.
 if [ -f "$_LOKI_SCRIPT_DIR/lib/browser-open.sh" ]; then
@@ -1838,7 +1847,7 @@ show_help_all() {
     echo "  --spec FILE      Run against an edited spec (written by 'loki plan <task> --spec'; see also --spec-first)"
     echo "  --fresh-prd      Regenerate the PRD from the codebase (no-PRD runs; ignores the reusable generated PRD)"
     echo "  --compliance PRESET  Enable compliance mode (default|healthcare|fintech|government)"
-    echo "  --budget USD     Set cost budget limit (display in dashboard/status)"
+    echo "  --budget USD     Per-run cost cap in USD (default $(loki_budget_default_usd); auto-pause when exceeded; see docs/cost-controls.md)"
     echo "  --bmad-project PATH  Use BMAD Method project artifacts as input"
     echo "  --openspec PATH      Use OpenSpec change directory as input"
     echo "  --config PATH    Load settings from a config file (.yaml/.json/.env). Alias: --env-file, --vars"
@@ -2608,7 +2617,7 @@ cmd_start() {
                 echo "                        (ignores the reusable generated PRD; aliases: --regen-prd,"
                 echo "                        --regenerate-prd, --regen, or LOKI_PRD_REGEN=1)"
                 echo "  --compliance PRESET   Enable compliance mode (default|healthcare|fintech|government)"
-                echo "  --budget USD          Cost budget limit (auto-pause when exceeded)"
+                echo "  --budget USD          Per-run cost cap (default $(loki_budget_default_usd); auto-pause when exceeded)"
                 echo "  --bmad-project PATH   Use BMAD Method project artifacts as input"
                 echo "  --openspec PATH       Use OpenSpec change directory as input"
                 echo "  --mirofish [URL]      Enable MiroFish market validation (default: localhost:5001)"
@@ -2651,7 +2660,7 @@ cmd_start() {
                 echo "  LOKI_AUTO_CONFIRM     Set to 'true'/'false' to control prompts (takes precedence over CI)"
                 echo "  CI                    Fallback: auto-confirms when 'true' and LOKI_AUTO_CONFIRM is unset"
                 echo "  LOKI_MAX_ITERATIONS   Max iteration count"
-                echo "  LOKI_BUDGET_LIMIT     Cost budget limit in USD"
+                echo "  LOKI_BUDGET_LIMIT     Cost cap in USD (default $(loki_budget_default_usd); empty means unlimited)"
                 echo ""
                 echo "Examples:"
                 echo "  loki start                              # Interactive, analyze current dir"
@@ -3049,7 +3058,7 @@ cmd_start() {
                         echo -e "${RED}--budget must be greater than 0 (a 0 budget pauses before any work)${NC}" >&2
                         exit 1
                     fi
-                    export LOKI_BUDGET_LIMIT="$2"
+                    export LOKI_BUDGET_LIMIT="$2" LOKI_BUDGET_SOURCE=flag
                     shift 2
                 else
                     echo -e "${RED}--budget requires a USD amount (e.g., --budget 5.00)${NC}"
@@ -3067,7 +3076,7 @@ cmd_start() {
                     echo -e "${RED}--budget must be greater than 0 (a 0 budget pauses before any work)${NC}" >&2
                     exit 1
                 fi
-                export LOKI_BUDGET_LIMIT="$budget_val"
+                export LOKI_BUDGET_LIMIT="$budget_val" LOKI_BUDGET_SOURCE=flag
                 shift
                 ;;
             # v6.84.0: explicit mode flags (override auto-detection)
@@ -3956,15 +3965,8 @@ cmd_start() {
     if ! command -v "$effective_provider" &>/dev/null; then
         echo -e "${RED}Error: Provider CLI '$effective_provider' is not installed.${NC}"
         echo ""
-        echo "Install it first:"
-        case "$effective_provider" in
-            claude) echo "  npm install -g @anthropic-ai/claude-code" ;;
-            codex)  echo "  npm install -g @openai/codex" ;;
-            cline)  echo "  npm install -g cline" ;;
-            aider)  echo "  pip install aider-chat" ;;
-            opencode) echo "  npm install -g opencode-ai" ;;
-            *)      echo "  Check the provider documentation for installation." ;;
-        esac
+        echo "Install it first (same fix as loki doctor):"
+        _loki_req_fix_line "$effective_provider"
         echo ""
         echo "Check your environment: loki doctor"
         exit 1
@@ -5170,6 +5172,17 @@ cmd_resume() {
         exit 0
     fi
 
+    # RECOVERY: an interrupted engine10 run is resumed at its phase by loki-ts/src/util/run_outputs.ts
+    # (exit 0 resumed, 4 phase reported, 5 publish failed, anything else: nothing for it, fall through).
+    if ls "$LOKI_DIR"/runs/e10-*/events.jsonl >/dev/null 2>&1; then
+        local _e10_rc=0
+        ( _loki_bun_delegate engine10 resume "$@" ) || _e10_rc=$?
+        case "$_e10_rc" in
+            0 | 4) return 0 ;;
+            5) return 1 ;;
+        esac
+    fi
+
     # Check if there is anything to resume before touching signal files
     local has_pause_signal=false
     local has_stop_signal=false
@@ -7119,8 +7132,14 @@ cmd_provider() {
             cmd_provider_list
             ;;
         info)
+            case " $* " in
+                *" --json "*) _loki_bun_delegate provider info "$@" || { echo "loki provider info --json needs bun: ${_LOKI_DELEGATE_WHY}" >&2; return 1; } ;;
+            esac
             cmd_provider_info "$@"
             ;;
+        matrix)
+            _loki_bun_delegate provider matrix "$@" || { echo "loki provider matrix needs bun: ${_LOKI_DELEGATE_WHY}" >&2; return 1; }
+            ;;
         models)
             cmd_provider_models
             ;;
@@ -7133,7 +7152,8 @@ cmd_provider() {
             echo "  show     Show current provider (default)"
             echo "  set      Set provider for this project"
             echo "  list     List available providers"
-            echo "  info     Show provider details"
+            echo "  info     Show provider details (--json: capability contract)"
+            echo "  matrix   Show the capability matrix per provider and engine"
             echo "  models   Show resolved model configuration for all providers"
             echo ""
             echo "Precedence (highest wins):"
@@ -8273,7 +8293,7 @@ PURPLE_LAB_STATE_DIR="${HOME}/.loki/purple-lab"
 PURPLE_LAB_PID_FILE="${PURPLE_LAB_STATE_DIR}/purple-lab.pid"
 
 # Is this pid positively identified as THIS installation's Purple Lab server
-# (cmd_web_start launches exactly `$DASHBOARD_PYTHON $SKILL_DIR/web-app/server.py`
+# (a server started before the web deprecation launched exactly `$DASHBOARD_PYTHON $SKILL_DIR/web-app/server.py`
 # at :8078), rather than a recycled pid, a decoy that merely mentions the path
 # in an argument, or another installation's server.py at a different SKILL_DIR?
 #
@@ -8486,205 +8506,6 @@ cmd_web_help() {
     echo "  loki web stop             Stop a standalone web server started the old way"
 }
 
-cmd_web_start() {
-    local open_browser=true
-    local port="${PURPLE_LAB_DEFAULT_PORT}"
-    local prd_file=""
-
-    # Parse arguments
-    while [[ $# -gt 0 ]]; do
-        case "$1" in
-            --no-open)
-                open_browser=false
-                shift
-                ;;
-            --port)
-                if [[ -z "${2:-}" ]]; then
-                    echo -e "${RED}--port requires a port number${NC}"
-                    exit 1
-                fi
-                port="$2"
-                shift 2
-                ;;
-            --prd)
-                if [[ -z "${2:-}" ]]; then
-                    echo -e "${RED}--prd requires a file path${NC}"
-                    exit 1
-                fi
-                prd_file="$2"
-                shift 2
-                ;;
-            --help|-h)
-                cmd_web_help
-                exit 0
-                ;;
-            *)
-                echo -e "${RED}Unknown option: $1${NC}"
-                echo "Run 'loki web --help' for usage."
-                exit 1
-                ;;
-        esac
-    done
-
-    # Validate port: must be numeric and in valid range
-    if [[ ! "$port" =~ ^[0-9]+$ ]]; then
-        echo -e "${RED}Error: Port must be a number, got '$port'${NC}"
-        exit 1
-    fi
-    if [ "$port" -lt 1 ] || [ "$port" -gt 65535 ]; then
-        echo -e "${RED}Error: Port must be between 1 and 65535, got $port${NC}"
-        exit 1
-    fi
-    # Port validation moved below (after PID file check) so we can offer to kill orphans
-
-    # Validate --prd file if provided
-    if [ -n "$prd_file" ]; then
-        if [ ! -f "$prd_file" ]; then
-            echo -e "${RED}Error: PRD file not found: $prd_file${NC}"
-            exit 1
-        fi
-        export PURPLE_LAB_PRD
-        PURPLE_LAB_PRD=$(cat "$prd_file")
-    fi
-
-    # Check that web-app dist exists
-    local web_dist="${SKILL_DIR}/web-app/dist"
-    if [ ! -d "$web_dist" ] || [ ! -f "$web_dist/index.html" ]; then
-        echo -e "${RED}Error: Web app not built${NC}"
-        echo "Expected files at: $web_dist"
-        echo ""
-        echo "Build the web app first:"
-        echo "  cd web-app && npm install && npm run build"
-        exit 1
-    fi
-
-    # Check that server.py exists
-    local server_py="${SKILL_DIR}/web-app/server.py"
-    if [ ! -f "$server_py" ]; then
-        echo -e "${RED}Error: Purple Lab server not found at $server_py${NC}"
-        exit 1
-    fi
-
-    # Ensure Python venv with FastAPI is available
-    if ! ensure_dashboard_venv; then
-        echo -e "${RED}Error: Failed to set up Python environment${NC}"
-        exit 1
-    fi
-
-    # Check if already running
-    mkdir -p "${LOKI_DIR}/purple-lab"
-    if [ -f "$PURPLE_LAB_PID_FILE" ]; then
-        local existing_pid
-        existing_pid=$(cat "$PURPLE_LAB_PID_FILE" 2>/dev/null)
-        if [ -n "$existing_pid" ] && kill -0 "$existing_pid" 2>/dev/null; then
-            echo -e "${GREEN}Purple Lab already running (PID: $existing_pid)${NC}"
-            local url="http://${PURPLE_LAB_DEFAULT_HOST}:${port}/lab/"
-            echo -e "Open: ${CYAN}$url${NC}"
-            if [ "$open_browser" = true ]; then
-                loki_open_url "$url" 2>/dev/null || true
-            fi
-            return 0
-        fi
-    fi
-
-    # Check if port is already in use -- try to clean up orphaned processes.
-    # Only kill it if it is positively identified as THIS installation's own
-    # Purple Lab server (never a bare "it's listening on our port" guess): an
-    # unrelated process bound to the same port, or another installation's
-    # server, must never be signaled.
-    if lsof -i:"$port" -sTCP:LISTEN &> /dev/null; then
-        local blocking_pid
-        blocking_pid=$(lsof -ti:"$port" -sTCP:LISTEN 2>/dev/null | head -1)
-        if [ -n "$blocking_pid" ]; then
-            if _loki_pid_looks_like_purplelab "$blocking_pid"; then
-                echo -e "${YELLOW}Port $port in use by PID $blocking_pid -- stopping it...${NC}"
-                kill "$blocking_pid" 2>/dev/null
-                sleep 1
-                if kill -0 "$blocking_pid" 2>/dev/null; then
-                    kill -9 "$blocking_pid" 2>/dev/null
-                    sleep 1
-                fi
-                # Verify port is now free
-                if lsof -i:"$port" -sTCP:LISTEN &> /dev/null; then
-                    echo -e "${RED}Error: Could not free port $port${NC}"
-                    echo "Use --port to specify a different port, or manually kill the process."
-                    exit 1
-                fi
-                echo -e "${GREEN}Port $port freed.${NC}"
-            else
-                echo -e "${RED}Error: Port $port is in use by PID $blocking_pid, which is not this installation's Purple Lab server.${NC}"
-                echo "Use --port to specify a different port, or manually stop that process."
-                exit 1
-            fi
-        fi
-    fi
-
-    # Start the server
-    local log_dir="${LOKI_DIR}/purple-lab/logs"
-    mkdir -p "$log_dir"
-    local log_file="$log_dir/purple-lab.log"
-
-    echo -e "${CYAN}Starting Purple Lab...${NC}"
-
-    PURPLE_LAB_PORT="$port" PURPLE_LAB_HOST="${PURPLE_LAB_DEFAULT_HOST}" \
-    LOKI_DIR="$LOKI_DIR" LOKI_SKILL_DIR="$SKILL_DIR" PYTHONPATH="$SKILL_DIR" \
-    nohup "$DASHBOARD_PYTHON" "$server_py" > "$log_file" 2>&1 &
-    local pid=$!
-
-    mkdir -p "$PURPLE_LAB_STATE_DIR"
-    echo "$pid" > "$PURPLE_LAB_PID_FILE"
-    echo "$port" > "${PURPLE_LAB_STATE_DIR}/port"
-    # Also write to local .loki for backward compat
-    mkdir -p "${LOKI_DIR}/purple-lab"
-    echo "$pid" > "${LOKI_DIR}/purple-lab/purple-lab.pid"
-    echo "$port" > "${LOKI_DIR}/purple-lab/port"
-
-    # Wait for server to be ready
-    local retries=0
-    local server_ready=false
-    while [ $retries -lt 15 ]; do
-        if curl -s "http://${PURPLE_LAB_DEFAULT_HOST}:${port}/lab/api/session/status" > /dev/null 2>&1; then
-            server_ready=true
-            break
-        fi
-        sleep 0.5
-        retries=$((retries + 1))
-    done
-
-    if ! kill -0 "$pid" 2>/dev/null; then
-        echo -e "${RED}Error: Purple Lab failed to start${NC}"
-        echo "Check logs at: $log_file"
-        rm -f "$PURPLE_LAB_PID_FILE"
-        exit 1
-    fi
-
-    local url="http://${PURPLE_LAB_DEFAULT_HOST}:${port}/lab/"
-
-    if [ "$server_ready" = true ]; then
-        echo -e "${GREEN}Purple Lab (project web UI) running at: $url${NC} (PID: $pid)"
-    else
-        echo -e "${YELLOW}Purple Lab (project web UI) starting at: $url${NC} (PID: $pid)"
-        echo "Server may still be loading. Refresh the browser if it does not load immediately."
-    fi
-    echo -e "Logs: $log_file"
-    # v7.28.x UX #5: distinguish the two browser UIs so the ops monitor and the
-    # spec-input web UI are never confused for each other.
-    echo -e "${DIM}Looking for the live run monitor? loki dashboard (:${DASHBOARD_DEFAULT_PORT:-57374})${NC}"
-    echo -e "Stop with: ${CYAN}loki web stop${NC}"
-
-    # Open browser only after server is confirmed ready
-    if [ "$open_browser" = true ]; then
-        if [ "$server_ready" = true ]; then
-            echo ""
-            loki_open_url "$url" 2>/dev/null || echo "Please open in browser: $url"
-        else
-            echo ""
-            echo -e "${YELLOW}Browser not opened because server is not ready yet.${NC}"
-            echo "Open manually when ready: $url"
-        fi
-    fi
-}
-
 cmd_web_stop() {
     local stopped=false
     local port
@@ -10865,7 +10686,7 @@ cmd_run() {
                 echo "  --no-dashboard     Disable web dashboard"
                 echo "  --sandbox          Run in Docker sandbox (default: off; requires Docker)"
                 echo "  --no-plan          Skip auto-shown PRD analysis at startup"
-                echo "  --budget USD       Set cost budget limit"
+                echo "  --budget USD       Per-run cost cap (default $(loki_budget_default_usd))"
                 echo ""
                 echo "Progressive Isolation:"
                 echo "  --worktree, -w     Git worktree isolation (separate branch)"
@@ -12431,6 +12252,7 @@ cmd_export() {
             echo "  markdown   Human-readable session summary"
             echo "  csv        Task queue as CSV"
             echo "  timeline   Iteration timeline as JSON"
+            echo "  vibe-kanban  Sync .loki/queue tasks into the Vibe Kanban SQLite DB"
             echo ""
             echo "Flags:"
             echo "  --sarif [run-id]   Write .loki/runs/<id>/findings.sarif (SARIF 2.1.0; needs bun)"
@@ -12441,6 +12263,7 @@ cmd_export() {
             echo "  loki export markdown                     # Readable summary"
             echo "  loki export csv tasks.csv                # Task queue CSV"
             echo "  loki export timeline                     # Iteration timeline"
+            echo "  loki export vibe-kanban                  # Sync tasks to Vibe Kanban"
             exit 0
             ;;
         json)
@@ -12457,13 +12280,21 @@ cmd_export() {
             require_jq || return 1
             _export_timeline "$output_path"
             ;;
+        vibe-kanban)
+            local vk_script="${SKILL_DIR:-}/scripts/sync-to-vibe-kanban.sh"
+            if [ ! -f "$vk_script" ]; then
+                echo -e "${RED}Error: sync-to-vibe-kanban.sh not found at $vk_script${NC}" >&2
+                return 1
+            fi
+            bash "$vk_script"
+            ;;
         --sarif)
             echo -e "${RED}loki export --sarif needs bun (https://bun.sh).${NC}" >&2
             return 1
             ;;
         *)
             echo -e "${RED}Unknown format: $format${NC}"
-            echo "Supported: json, markdown, csv, timeline"
+            echo "Supported: json, markdown, csv, timeline, vibe-kanban"
             exit 1
             ;;
     esac
@@ -13475,6 +13306,100 @@ cmd_config_path() {
     echo "Create a config file with: loki config init"
 }
 
+# Merge the Loki plugin into a Claude Code settings.json (loki setup-skill --claude-code).
+# Existing keys are never overwritten, invalid JSON is refused (rc 3), writes are atomic.
+_setup_skill_claude_code() {
+    local print_only=0 project=0 stop=0 settings=""
+    while [ $# -gt 0 ]; do
+        case "$1" in
+            --print) print_only=1 ;;
+            --project) project=1 ;;
+            --stop-hook) stop=1 ;;
+            --settings) settings="${2:-}"; shift ;;
+            --help|-h)
+                echo "Usage: loki setup-skill --claude-code [--print] [--project] [--stop-hook] [--settings FILE]"
+                echo ""
+                echo "Registers the Loki plugin marketplace and enables the plugin in Claude Code"
+                echo "settings (default ~/.claude/settings.json; --project uses ./.claude/settings.json)."
+                echo "Merges only: existing keys are kept, invalid JSON is refused."
+                echo ""
+                echo "  --print       Print the settings snippet and change nothing"
+                echo "  --stop-hook   Also opt in to the Stop-hook fast verifier (LOKI_STOP_VERIFY=1)"
+                return 0
+                ;;
+            *) echo "Unknown option: $1" >&2; return 2 ;;
+        esac
+        shift
+    done
+    command -v python3 >/dev/null 2>&1 || { echo "python3 is required" >&2; return 1; }
+    if [ -z "$settings" ] && [ "$print_only" -eq 0 ]; then
+        if [ "$project" -eq 1 ]; then
+            settings="${TARGET_DIR:-.}/.claude/settings.json"
+        else
+            settings="$HOME/.claude/settings.json"
+        fi
+    fi
+    local out rc
+    out="$(python3 - "$settings" "$stop" "$print_only" <<'PY'
+import json, os, sys, tempfile
+path, stop, print_only = sys.argv[1], sys.argv[2] == "1", sys.argv[3] == "1"
+want = {
+    "extraKnownMarketplaces": {
+        "loki-mode": {"source": {"source": "github", "repo": "asklokesh/loki-mode"}}
+    },
+    "enabledPlugins": {"loki-mode@loki-mode": True},
+}
+if stop:
+    want["env"] = {"LOKI_STOP_VERIFY": "1"}
+if print_only:
+    print(json.dumps(want, indent=2))
+    sys.exit(0)
+cur = {}
+if os.path.exists(path):
+    try:
+        raw = open(path).read()
+        cur = json.loads(raw) if raw.strip() else {}
+    except Exception as e:
+        print("REFUSED %s is not valid JSON (%s); fix or move it aside" % (path, e))
+        sys.exit(3)
+    if not isinstance(cur, dict):
+        print("REFUSED %s top level is not an object" % path)
+        sys.exit(3)
+added = []
+for top, kv in want.items():
+    node = cur.get(top)
+    if node is None:
+        cur[top] = {}
+        node = cur[top]
+    elif not isinstance(node, dict):
+        print("KEPT %s (existing value is not an object)" % top)
+        continue
+    for k, v in kv.items():
+        if k in node:
+            print("KEPT %s.%s" % (top, k))
+        else:
+            node[k] = v
+            added.append("%s.%s" % (top, k))
+            print("ADDED %s.%s" % (top, k))
+if added:
+    d = os.path.dirname(os.path.abspath(path))
+    os.makedirs(d, exist_ok=True)
+    fd, tmp = tempfile.mkstemp(dir=d, prefix=".settings.", suffix=".tmp")
+    with os.fdopen(fd, "w") as f:
+        json.dump(cur, f, indent=2)
+        f.write("\n")
+    os.replace(tmp, path)
+else:
+    print("UNCHANGED %s" % path)
+PY
+)"
+    rc=$?
+    printf '%s\n' "$out"
+    [ "$rc" -eq 0 ] || return "$rc"
+    [ "$print_only" -eq 1 ] || echo "Next: in Claude Code run /reload-plugins, then try /loki-mode:start, /loki-mode:loki-verify, /loki-mode:handoff."
+    return 0
+}
+
 # Set up skill symlinks for all providers
 cmd_setup_skill() {
     # v7.6.2 B-13 fix: --help must print help, not install skills.
@@ -13488,11 +13413,17 @@ cmd_setup_skill() {
             echo "skills directory: ~/.claude/skills/, ~/.codex/skills/, etc."
             echo ""
             echo "Options:"
+            echo "  --claude-code  Merge the Loki plugin into Claude Code settings (see --claude-code --help)"
             echo "  --help, -h   Show this help and exit"
             echo ""
             echo "Side effects: writes symlinks/files under ~/.<provider>/skills/loki-mode/."
             return 0
             ;;
+        --claude-code)
+            shift
+            _setup_skill_claude_code "$@"
+            return $?
+            ;;
     esac
     echo -e "${BOLD}Loki Mode Skill Setup${NC}"
     echo ""
@@ -14080,6 +14011,18 @@ _loki_bun_delegate() {
     exec "$bun_bin" "$cli" "$cmd" "$@"
 }
 
+# One-line fix for a requirement id (a provider name is an id), read from the shared
+# table autonomy/lib/setup-requirements.json so runtime errors match loki doctor.
+_loki_req_fix_line() {
+    local _id="$1" _fix=""
+    _fix="$(jq -r --arg id "$_id" '.requirements[] | select(.id == $id) | .fix' "${SKILL_DIR}/autonomy/lib/setup-requirements.json" 2>/dev/null | head -n 1)" || _fix=""
+    if [ -n "$_fix" ]; then
+        echo "  $_fix"
+    else
+        echo "  Check the provider documentation for installation."
+    fi
+}
+
 # loki doctor. The one implementation is loki-ts/src/commands/doctor.ts; this is a
 # delegator. Only --airgap stays in bash (_loki_airgap_audit). If the Bun route is
 # unavailable we print a minimal diagnostic (never a second copy of the checks).
@@ -14125,7 +14068,12 @@ cmd_doctor_json() {
     why="${why//\\/\\\\}"; why="${why//\"/\\\"}"
     fix="${fix//\\/\\\\}"; fix="${fix//\"/\\\"}"
     ver="${ver//\\/\\\\}"; ver="${ver//\"/\\\"}"
-    printf '{"loki_mode_version":"%s","checks":[],"provider_availability":null,"disk":null,"ai_provider":null,"skills":[],"sentrux":null,"memory":null,"model_catalog":null,"summary":{"passed":0,"failed":1,"warnings":0,"ok":false},"route":"unavailable","reason":"%s","fix":"%s"}\n' "$ver" "$why" "$fix"
+    local reqs=null
+    if declare -F loki_requirements_json >/dev/null 2>&1; then
+        reqs="$(loki_requirements_json 2>/dev/null | jq -c . 2>/dev/null)" || reqs=null
+        [ -n "$reqs" ] || reqs=null
+    fi
+    printf '{"loki_mode_version":"%s","checks":[],"provider_availability":null,"disk":null,"ai_provider":null,"skills":[],"sentrux":null,"memory":null,"model_catalog":null,"requirements":%s,"summary":{"passed":0,"failed":1,"warnings":0,"ok":false},"route":"unavailable","reason":"%s","fix":"%s"}\n' "$ver" "$reqs" "$why" "$fix"
 }
 
 # Architectural-drift gate (v7.5.14, opt-in).
@@ -15686,15 +15634,6 @@ cmd_quick() {
         exit 64
     fi
 
-    # v7.29.0: provider pre-flight gate. Offer install on a TTY; print honest
-    # manual instructions and exit 2 on non-TTY/CI, before any spend. --help and
-    # the no-args usage path already returned/exited above.
-    if declare -f provider_offer_gate >/dev/null 2>&1; then
-        if ! provider_offer_gate; then
-            exit 2
-        fi
-    fi
-
     # #691: drop the unified config-file aliases from the task description. The
     # main() pre-pass already applied the file; without this, a trailing
     # `--config f.env` would be swept into task_desc (cmd_quick has no arg loop).
@@ -15711,6 +15650,12 @@ cmd_quick() {
             --verbose|-v) if [ "$_quick_task_seen" = "false" ]; then export LOKI_VERBOSE=1; continue; fi ;;
             --config|--vars|--env-file)        _skip_next=true; continue ;;
             --config=*|--vars=*|--env-file=*)   continue ;;
+            # LM-006: a leading unknown --flag is a usage error, never task text (a typo must not start a paid run).
+            --?*) if [ "$_quick_task_seen" = "false" ] &&[[ "$_qa" != *" "* ]]; then
+                    echo -e "${RED}Error: unknown option: $_qa${NC}" >&2
+                    echo "Usage: loki quick [--verbose] \"description of what to do\"" >&2
+                    exit 64
+                 fi ;;
         esac
         _quick_task_seen=true
         _quick_args+=("$_qa")
@@ -15722,6 +15667,16 @@ cmd_quick() {
         exit 64
     fi
 
+    # v7.29.0: provider pre-flight gate. Offer install on a TTY; print honest
+    # manual instructions and exit 2 on non-TTY/CI, before any spend. --help and
+    # every usage error (no task, unknown option, exit 64) is decided above,
+    # so a host with no provider still reports a typo as 64, not 2.
+    if declare -f provider_offer_gate >/dev/null 2>&1; then
+        if ! provider_offer_gate; then
+            exit 2
+        fi
+    fi
+
     local task_desc="$*"
     local version=$(get_version)
     local max_iter="${LOKI_MAX_ITERATIONS:-3}"
@@ -15786,14 +15741,8 @@ QPRDEOF
     if ! command -v "$_quick_provider" &>/dev/null; then
         echo -e "${RED}Error: Provider CLI '$_quick_provider' is not installed.${NC}"
         echo ""
-        echo "Install your AI provider CLI first:"
-        case "$_quick_provider" in
-            claude) echo "  npm install -g @anthropic-ai/claude-code" ;;
-            codex)  echo "  npm install -g @openai/codex" ;;
-            cline)  echo "  npm install -g cline" ;;
-            aider)  echo "  pip install aider-chat" ;;
-            *)      echo "  Check the provider documentation for installation." ;;
-        esac
+        echo "Install your AI provider CLI first (same fix as loki doctor):"
+        _loki_req_fix_line "$_quick_provider"
         echo ""
         echo "Then verify: loki doctor"
         exit 1
@@ -20708,8 +20657,33 @@ print()
 # Dry-run PRD analysis and cost estimation (v6.18.0; refactored v6.81.1)
 # Thin wrapper around show_prd_plan() so the same analysis is reusable from
 # `loki start`, `loki run`, and other commands without duplicated code.
+# Read-only view of .loki/state/requirements-map.json (REQTRACE; contract: docs/spec-first-intent.md).
+_plan_show_requirements() {
+    local as_json="${1:-false}" map="${LOKI_DIR:-.loki}/state/requirements-map.json"
+    if [ ! -s "$map" ]; then
+        if [ "$as_json" = true ]; then printf '{"error":"no requirements map","path":"%s"}\n' "$map"; return 1; fi
+        echo "No requirements map at $map (written after a run that had a PRD checklist, a spec, or a multi-requirement PRD)."
+        return 1
+    fi
+    if [ "$as_json" = true ]; then cat "$map"; return 0; fi
+    LOKI_RM="$map" python3 -I -c "
+import json, os, sys
+try:
+    m = json.load(open(os.environ['LOKI_RM']))
+    reqs = m['requirements']
+except Exception:
+    print('requirements map is unreadable: ' + os.environ['LOKI_RM']); sys.exit(1)
+cov = sum(1 for r in reqs if r.get('status') == 'covered')
+print('Requirements: %d/%d covered (revision %s)' % (cov, len(reqs), str(m.get('revision', ''))[:12]))
+for r in reqs:
+    chk = ('  <- ' + ', '.join(r.get('checks', []))) if r.get('checks') else ''
+    print('  %s %-9s %-9s %s%s' % (r.get('id'), r.get('status'), r.get('method'), str(r.get('text', ''))[:80], chk))
+"
+}
+
 cmd_plan() {
     local prd_file=""
+    local show_requirements=false
     local show_json=false
     local show_verbose=false
 
@@ -20726,6 +20700,7 @@ cmd_plan() {
                 echo "Options:"
                 echo "  --json        Machine-readable JSON output"
                 echo "  --spec        With a task: write the acceptance criteria to .loki/specs/<slug>.md for you to edit"
+                echo "  --requirements  Print the last run's requirement-to-check map (.loki/state/requirements-map.json), read-only"
                 echo "  --verbose     Show detailed per-iteration breakdown"
                 echo "  --help, -h    Show this help"
                 echo ""
@@ -20743,6 +20718,7 @@ cmd_plan() {
                 ;;
             --json) show_json=true; shift ;;
             --verbose) show_verbose=true; shift ;;
+            --requirements) show_requirements=true; shift ;;
             *)
                 if [ -z "$prd_file" ]; then
                     prd_file="$1"
@@ -20752,6 +20728,11 @@ cmd_plan() {
         esac
     done
 
+    if [ "$show_requirements" = true ]; then
+        _plan_show_requirements "$show_json"
+        return $?
+    fi
+
     if [ -z "$prd_file" ]; then
         # Under --json, a machine consumer expects JSON on every path, including
         # errors -- never ANSI-colored prose. Emit a structured error to stdout.
@@ -36094,7 +36075,7 @@ PYEOF
 }
 
 # loki bench - head-to-head benchmark harness (R2).
-# Subcommands: run <task> | vs <task> | list | verify <result.json>.
+# Subcommands: run <task> | vs <task> | list | verify <result.json> | attribution.
 # Thin pass-through to benchmarks/bench/run.sh (shared python core runner.py).
 # CREDIBILITY: Loki NEVER grades its own success. Success is decided by a
 # held-out acceptance command run by the grader OUTSIDE the agent (exit code).
@@ -36128,6 +36109,7 @@ cmd_bench() {
             echo "  verify <file>   Recompute task_hash + check tool versions for a result.json"
             echo "  oracles         Are the graders trustworthy? Hash-bound, no spend, no provider"
             echo "  report <files>  Build results.json + RESULTS.md from per-tool result-rows"
+            echo "  attribution     Same-model harness attribution: raw Claude Code vs Loki (--dry-run, --execute)"
             echo ""
             echo "Options:"
             echo "  --trials N      Number of trials per tool (default 3)"
@@ -36324,7 +36306,9 @@ cmd_proof() {
             echo "                       reads UNKNOWN when it cannot be computed"
             echo "  phases [--json]      Measured phase history from real phase_change"
             echo "                       events; unrecorded boundaries read UNKNOWN"
-            echo "  show <id>            Pretty-print .loki/proofs/<id>/proof.json"
+            echo "  show <id> [--json]   Compact reviewer summary (label, revision, checks,"
+            echo "                       requirements, modified tests); --json prints the"
+            echo "                       full .loki/proofs/<id>/proof.json"
             echo "  verify <id>          Re-check a receipt against the repo (tamper + drift)."
             echo "                       Exit 0 clean, 1 tamper/drift, 2 could not check,"
             echo "                       64 usage (no id, more than one id, unknown option,"
@@ -36496,6 +36480,14 @@ PYEOF
             exit 0
             ;;
         show)
+            local _ps_json=0 _ps_a _ps_args=()
+            for _ps_a in "$@"; do
+                case "$_ps_a" in
+                    --json) _ps_json=1 ;;
+                    *) _ps_args+=("$_ps_a") ;;
+                esac
+            done
+            set -- "${_ps_args[@]+"${_ps_args[@]}"}"
             local id="${1:-}"
             if [ -z "$id" ]; then
                 echo -e "${RED}Missing proof id.${NC} Use 'loki proof list'."
@@ -36507,6 +36499,21 @@ PYEOF
                 echo "Use 'loki proof list' to see available proofs."
                 exit 1
             fi
+            if [ "$_ps_json" -eq 0 ]; then
+                # Compact reviewer summary (docs/PROOF-PASSPORT.md).
+                local _ps_py _ps_vr="${_LOKI_SCRIPT_DIR}/lib/proof-verify.py"
+                _ps_py="$(loki_verify_tool_path python3)" || {
+                    echo -e "${RED}python3 is unavailable${NC}" >&2
+                    exit 2
+                }
+                local _ps_root
+                _ps_root="$(loki_verify_root 2>/dev/null)" || {
+                    echo -e "${YELLOW}Summary unavailable (project tree not resolved; not checking the ambient cwd).${NC} Use 'loki proof show ${id} --json' for the full record." >&2
+                    exit 2
+                }
+                "$_ps_py" -E "$_ps_vr" summary "$pj" --repo "$_ps_root" --loki-dir "$loki_dir" || exit $?
+                exit 0
+            fi
             if command -v jq &>/dev/null; then
                 jq . "$pj"
             else