loki-mode 7.28.1 → 7.29.0

package/autonomy/loki

@@ -68,6 +68,24 @@ if [ -f "$_LOKI_SCRIPT_DIR/crash.sh" ]; then
     source "$_LOKI_SCRIPT_DIR/crash.sh"
 fi
 
+# Provider install offer (v7.29.0): shared, self-contained helper providing
+# detect_any_provider, offer_provider_install, and provider_offer_gate. Sourced
+# here for the bash route; doctor.ts invokes the same file via child_process so
+# the offer copy never drifts between routes. Self-guarded against double-source.
+if [ -f "$_LOKI_SCRIPT_DIR/provider-offer.sh" ]; then
+    # shellcheck source=provider-offer.sh
+    source "$_LOKI_SCRIPT_DIR/provider-offer.sh"
+fi
+
+# Quickstart guided interview (v7.29.0): provides cmd_quickstart and its
+# deterministic offline template matcher. Functions-only file (no top-level
+# command), sourced here so the dispatch case can call cmd_quickstart. Composes
+# the provider offer (above), show_prd_plan, and cmd_start. Self-guarded.
+if [ -f "$_LOKI_SCRIPT_DIR/quickstart.sh" ]; then
+    # shellcheck source=quickstart.sh
+    source "$_LOKI_SCRIPT_DIR/quickstart.sh"
+fi
+
 # Resolve the script's real path (handles symlinks)
 resolve_script_path() {
     local script="$1"
@@ -510,7 +528,7 @@ show_help() {
     echo "Usage: loki <command> [options]"
     echo ""
     echo "New here? Try one of these first:"
-    echo "  loki doctor               Check your setup is ready (instant)"
+    echo "  loki doctor               Check your setup is ready (a few seconds)"
     echo "  loki quick \"add a health endpoint\"   One small task, start to finish"
     echo "  loki demo                 Build a sample todo app end to end (real run)"
     echo "  loki start ./prd.md       Build from a spec (PRD file, GitHub issue, or no arg)"
@@ -522,6 +540,7 @@ show_help() {
     echo "  quick \"task\"     Quick single-task mode (lightweight, 3 iterations max)"
     echo "  monitor [path]   Monitor Docker Compose services with auto-fix (v6.67.0)"
     echo "  demo             Build a sample todo app end to end (real run)"
+    echo "  quickstart [idea]  Guided first build: setup, idea, template, plan, go"
     echo "  init [name]      Project scaffolding with 21 PRD templates"
     echo "  issue <url|num>  (deprecated) Use 'loki start <issue-ref>' instead"
     echo "  watch [prd]      Auto-rerun on PRD file changes (v6.33.0)"
@@ -675,6 +694,27 @@ show_help() {
     echo "  See: $RUN_SH (header comments) for full list."
 }
 
+# Tight newcomer landing for the bare `loki` invocation (no args).
+# v7.28.x UX: the full 70-command table lives in `loki help`; a no-args run
+# now shows only a calm ~12-line orientation so the "what do I do first"
+# block is never buried under the command wall. `loki help`/`--help` are
+# unchanged (still call show_help).
+show_landing() {
+    local version
+    version=$(get_version)
+    echo -e "${BOLD}Loki Mode v$version${NC} - the spec-driven builder that verifies its own work."
+    echo ""
+    echo -e "First time here? ${CYAN}loki doctor${NC} checks your setup (an AI provider CLI is required)."
+    echo ""
+    echo "Get started:"
+    echo -e "  ${CYAN}loki start ./prd.md${NC}   Build from a spec (PRD file, GitHub issue, or no arg)"
+    echo -e "  ${CYAN}loki demo${NC}             Build a sample todo app end to end (real run)"
+    echo -e "  ${CYAN}loki dashboard start${NC}  Start the live run monitor (then: loki dashboard open)"
+    echo ""
+    echo -e "Need help? ${CYAN}loki help${NC} lists every command."
+    echo "Tip: preview cost and scope before building: loki plan <your-prd.md>"
+}
+
 # Detect argument type for unified `loki start` (v6.84.0)
 # Returns one of: prd | issue | empty | unknown
 # Logic:
@@ -1239,6 +1279,17 @@ cmd_start() {
         esac
     done
 
+    # v7.29.0: provider pre-flight gate. If no provider CLI is installed, offer
+    # to install one (TTY) or print honest manual instructions and exit 2
+    # (non-TTY/CI), BEFORE any spend or runner entry. This moves what used to be
+    # an opaque deep-runner failure to a friendly, actionable top-of-run gate.
+    # --help already returned inside the arg loop, so we never gate help.
+    if declare -f provider_offer_gate >/dev/null 2>&1; then
+        if ! provider_offer_gate; then
+            exit 2
+        fi
+    fi
+
     # Clear any stale raw-brief marker from a PRIOR run before we decide the
     # mode of THIS run. Only the brief branch (below) re-writes it. Without this,
     # a brief run leaves .loki/state/brief.txt behind and a later non-brief run
@@ -2265,10 +2316,18 @@ PYDASH
     # v7.7.30: --all preserves the legacy machine-wide kill. It runs even when
     # the current folder has no live session (the "clean everything" use case),
     # reaping every folder's orphaned loki-run-* temp script (SIGTERM, SIGKILL).
+    #
+    # The kill pattern is "loki-run-" for real users and is NOT user-overridable
+    # at the CLI -- that is the documented machine-wide behavior. LOKI_STOP_ALL_PATTERN
+    # exists ONLY so the test suite can exercise this exact code path against its
+    # own uniquely-marked fake runners without SIGKILLing an unrelated live
+    # loki-run-* on the same machine (e.g. a long SWE-bench instance). It defaults
+    # to "loki-run-" so user-facing semantics are unchanged when unset.
     if [ "$stop_all" = true ]; then
-        pkill -f "loki-run-" 2>/dev/null || true
+        local _stop_all_pat="${LOKI_STOP_ALL_PATTERN:-loki-run-}"
+        pkill -f "$_stop_all_pat" 2>/dev/null || true
         sleep 0.5
-        pkill -9 -f "loki-run-" 2>/dev/null || true
+        pkill -9 -f "$_stop_all_pat" 2>/dev/null || true
         echo -e "${RED}--all: signalled all loki-run-* processes on this machine.${NC}"
     fi
 }
@@ -3369,7 +3428,7 @@ cmd_provider_set() {
     if [ -z "$new_provider" ]; then
         echo -e "${RED}Error: Provider name required${NC}"
         echo "Usage: loki provider set <claude|codex|cline|aider>"
-        exit 1
+        exit 2
     fi
 
     # Validate provider
@@ -3923,12 +3982,16 @@ cmd_dashboard_start() {
 
     if kill -0 "$new_pid" 2>/dev/null; then
         local url="${url_scheme}://${host}:${port}"
-        echo -e "${GREEN}Dashboard server started${NC}"
+        echo -e "${GREEN}Dashboard (live run monitor) started${NC}"
         echo ""
         echo "  PID:  $new_pid"
         echo "  URL:  $url"
         echo "  Logs: $log_file"
         echo ""
+        # v7.28.x UX #5: distinguish the two browser UIs up front so a newcomer
+        # who wants to submit a spec does not land on the ops monitor by mistake.
+        echo -e "${DIM}Looking for the project web UI to submit a spec? loki web (:${PURPLE_LAB_DEFAULT_PORT:-57375})${NC}"
+        echo ""
         echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
         echo -e "Check status:    ${CYAN}loki dashboard status${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
@@ -4541,12 +4604,15 @@ cmd_web_start() {
     local url="http://${PURPLE_LAB_DEFAULT_HOST}:${port}/lab/"
 
     if [ "$server_ready" = true ]; then
-        echo -e "${GREEN}Purple Lab running at: $url${NC} (PID: $pid)"
+        echo -e "${GREEN}Purple Lab (project web UI) running at: $url${NC} (PID: $pid)"
     else
-        echo -e "${YELLOW}Purple Lab starting at: $url${NC} (PID: $pid)"
+        echo -e "${YELLOW}Purple Lab (project web UI) starting at: $url${NC} (PID: $pid)"
         echo "Server may still be loading. Refresh the browser if it does not load immediately."
     fi
     echo -e "Logs: $log_file"
+    # v7.28.x UX #5: distinguish the two browser UIs so the ops monitor and the
+    # spec-input web UI are never confused for each other.
+    echo -e "${DIM}Looking for the live run monitor? loki dashboard (:${DASHBOARD_DEFAULT_PORT:-57374})${NC}"
     echo -e "Stop with: ${CYAN}loki web stop${NC}"
 
     # Open browser only after server is confirmed ready
@@ -5133,7 +5199,7 @@ cmd_issue_parse() {
     if [[ -z "$issue_ref" ]]; then
         echo -e "${RED}Error: Issue reference required${NC}"
         echo "Usage: loki issue parse <issue-ref>"
-        exit 1
+        exit 2
     fi
 
     # Find and run issue-parser.sh
@@ -5177,7 +5243,7 @@ cmd_issue_view() {
     if [[ -z "$issue_ref" ]]; then
         echo -e "${RED}Error: Issue reference required${NC}"
         echo "Usage: loki issue view <issue-ref>"
-        exit 1
+        exit 2
     fi
 
     # Find and run issue-parser.sh
@@ -5515,7 +5581,7 @@ cmd_run() {
         echo "  loki run owner/repo#789         # GitHub with specific repo"
         echo ""
         echo "Run 'loki run --help' for full usage."
-        exit 1
+        exit 2
     fi
 
     # Source issue provider abstraction
@@ -5994,7 +6060,7 @@ cmd_issue() {
         echo -e "${RED}Error: No issue number specified${NC}"
         echo "Usage: loki issue <number> or loki issue --number <number>"
         echo "Run 'loki issue --help' for full usage."
-        exit 1
+        exit 2
     fi
 
     # Auto-detect repo if not specified
@@ -6912,7 +6978,7 @@ cmd_config_set() {
     if [[ -z "$key" || -z "$value" ]]; then
         echo -e "${RED}Usage: loki config set [--global] <key> <value>${NC}"
         echo "Run 'loki config' for list of settable keys."
-        return 1
+        return 2
     fi
 
     # Determine config directory: --global writes to ~/.config/loki-mode/
@@ -7059,7 +7125,7 @@ cmd_config_get() {
 
     if [[ -z "$key" ]]; then
         echo -e "${RED}Usage: loki config get <key>${NC}"
-        return 1
+        return 2
     fi
 
     local config_store="$LOKI_DIR/config/settings.json"
@@ -7700,15 +7766,19 @@ cmd_doctor() {
     doctor_check "Cline CLI"           cline    optional || true
     doctor_check "Aider CLI"           aider    optional || true
 
-    # Check if at least one provider is installed
-    local _any_provider=false
-    for _dp in claude codex cline aider; do
-        command -v "$_dp" &>/dev/null && _any_provider=true && break
-    done
-    if ! $_any_provider; then
+    # Check if at least one provider is installed (detect_any_provider is the
+    # shared helper from provider-offer.sh, extracted from this exact loop).
+    if ! detect_any_provider; then
         echo -e "  ${RED}FAIL${NC}  No AI provider CLI installed -- at least one is required"
         echo -e "         ${YELLOW}Install: npm install -g @anthropic-ai/claude-code${NC}"
         fail_count=$((fail_count + 1))
+        # v7.29.0: on a TTY (non-json), append the consent-gated install offer.
+        # In report mode the helper is a no-op on non-TTY/CI, so the doctor
+        # output stays byte-identical for the bun-parity matrix. --json never
+        # reaches here (cmd_doctor dispatches to cmd_doctor_json earlier).
+        if declare -f offer_provider_install >/dev/null 2>&1; then
+            offer_provider_install report || true
+        fi
     fi
     echo ""
 
@@ -8781,7 +8851,7 @@ cmd_notify_send() {
     if [ -z "$message" ]; then
         echo -e "${RED}Error: Message required${NC}"
         echo "Usage: loki notify $channel <message>"
-        exit 1
+        exit 2
     fi
 
     case "$channel" in
@@ -9002,6 +9072,69 @@ cmd_sandbox() {
     exec "$SANDBOX_SH" "$subcommand" "$@"
 }
 
+# v7.29.0 (feature #4): print the SIMPLE-tier cost/time/iteration estimate for
+# the demo PRD, parsed from the single estimator source (show_prd_plan JSON).
+# Because `loki demo` always runs `loki start --simple` (which exports
+# LOKI_COMPLEXITY=simple), the estimate is computed with LOKI_COMPLEXITY=simple
+# so the quoted figures are the ones the demo will actually incur -- honest by
+# construction (the keystone fix makes show_prd_plan honor LOKI_COMPLEXITY).
+# Returns 0 when a real estimate was printed, 1 when the estimator failed (the
+# caller then falls back to a no-number confirm). Never fabricates a number.
+emit_demo_estimate() {
+    local prd_path="$1"
+    local plan_json=""
+    plan_json=$(LOKI_COMPLEXITY=simple show_prd_plan "$prd_path" "true" "false" 2>/dev/null) || plan_json=""
+
+    if [ -z "$plan_json" ]; then
+        echo -e "${YELLOW}Could not compute a cost estimate (the estimator did not return a result).${NC}"
+        return 1
+    fi
+
+    local parsed
+    parsed=$(printf '%s' "$plan_json" | python3 -c "
+import json, sys
+try:
+    d = json.load(sys.stdin)
+except Exception:
+    sys.exit(1)
+cost = d.get('cost', {}).get('total_usd')
+time_est = d.get('time', {}).get('estimated')
+iters = d.get('iterations', {}).get('estimated')
+rng = d.get('iterations', {}).get('range', [])
+tier = d.get('complexity', {}).get('tier', 'simple')
+if cost is None or time_est is None or iters is None:
+    sys.exit(1)
+rng_str = ''
+if isinstance(rng, list) and len(rng) == 2:
+    rng_str = ' (range {}-{})'.format(rng[0], rng[1])
+print(tier.upper())
+print('{:.2f}'.format(float(cost)))
+print(time_est)
+print('{}{}'.format(iters, rng_str))
+" 2>/dev/null) || parsed=""
+
+    if [ -z "$parsed" ]; then
+        echo -e "${YELLOW}Could not compute a cost estimate (the estimator did not return a result).${NC}"
+        return 1
+    fi
+
+    local tier_u cost_u time_u iter_u
+    tier_u=$(printf '%s' "$parsed" | sed -n '1p')
+    cost_u=$(printf '%s' "$parsed" | sed -n '2p')
+    time_u=$(printf '%s' "$parsed" | sed -n '3p')
+    iter_u=$(printf '%s' "$parsed" | sed -n '4p')
+
+    echo -e "${BOLD}Estimate (${tier_u} tier, the path this demo actually runs):${NC}"
+    printf '  Cost:        ~$%s\n' "$cost_u"
+    echo "  Time:        ~$time_u"
+    echo "  Iterations:  $iter_u"
+    echo ""
+    echo -e "${DIM}This is an estimate. Actual usage depends on PRD complexity,"
+    echo -e "code review cycles, and test failures.${NC}"
+    echo ""
+    return 0
+}
+
 # Demo mode - build a real project from a bundled PRD template
 cmd_demo() {
     # Handle --help
@@ -9034,10 +9167,21 @@ cmd_demo() {
     local provider=""
     local dry_run=false
     local start_args=()
+    # v7.29.0 (feature #4): demo now shows the FORCED-simple cost estimate
+    # before spending and asks for confirmation. --yes / LOKI_ASSUME_YES skip
+    # the prompt but still print the estimate (the spend is never hidden).
+    local assume_yes=false
+    if [ "${LOKI_ASSUME_YES:-}" = "1" ] || [ "${LOKI_ASSUME_YES:-}" = "true" ]; then
+        assume_yes=true
+    fi
 
     # Parse arguments
     while [[ $# -gt 0 ]]; do
         case "$1" in
+            --yes|-y)
+                assume_yes=true
+                shift
+                ;;
             --dir)
                 if [[ -z "${2:-}" ]]; then
                     echo -e "${RED}Error: --dir requires a path${NC}"
@@ -9078,6 +9222,17 @@ cmd_demo() {
         esac
     done
 
+    # v7.29.0: provider pre-flight gate (skipped for --dry-run, which never
+    # spends). On a TTY, offer to install; on non-TTY/CI, print honest manual
+    # instructions and exit 2 before any spend. Detect-first, so the nested
+    # cmd_start gate below no-ops once a provider is present. --help already
+    # returned at the top of cmd_demo.
+    if [ "$dry_run" != true ] && declare -f provider_offer_gate >/dev/null 2>&1; then
+        if ! provider_offer_gate; then
+            exit 2
+        fi
+    fi
+
     # Fall back to examples/ if templates/ doesn't exist
     if [ ! -f "$demo_prd" ]; then
         demo_prd="$SKILL_DIR/examples/simple-todo-app.md"
@@ -9118,6 +9273,9 @@ cmd_demo() {
     fi
 
     if [ "$dry_run" = true ]; then
+        # v7.29.0: dry-run is now a genuine cost preview -- show the estimate,
+        # no prompt, no spend.
+        emit_demo_estimate "$demo_dir/prd.md" || true
         echo -e "${YELLOW}[dry-run] Would run:${NC}"
         echo "  cd $demo_dir"
         echo -n "  loki start prd.md --simple --yes"
@@ -9128,6 +9286,52 @@ cmd_demo() {
         return 0
     fi
 
+    # v7.29.0 (feature #4): cost confirm before any spend. The estimate ALWAYS
+    # prints (even with --yes), so the spend is never hidden. The prompt is
+    # shown only on a TTY without --yes; non-TTY without --yes refuses (exit 2)
+    # rather than hanging on read -- the project's "never hang in CI" idiom.
+    local estimate_ok=true
+    emit_demo_estimate "$demo_dir/prd.md" || estimate_ok=false
+
+    # Interactive only when stdin is a real TTY and CI is not forcing
+    # non-interactive (matches the project's first-run gate semantics).
+    local demo_interactive=true
+    if [ ! -t 0 ] || [ -n "${CI:-}" ]; then
+        demo_interactive=false
+    fi
+
+    if [ "$assume_yes" != true ]; then
+        if [ "$demo_interactive" = true ]; then
+            local demo_answer=""
+            if [ "$estimate_ok" = true ]; then
+                # Default YES: Enter proceeds.
+                echo -n "Build the Todo app now? [Y/n] "
+                read -r demo_answer </dev/tty 2>/dev/null || demo_answer=""
+                if [[ -n "$demo_answer" && ! "$demo_answer" =~ ^[Yy] ]]; then
+                    echo ""
+                    echo -e "Cancelled. Nothing was spent. The demo PRD is at:"
+                    echo -e "  ${CYAN}$demo_dir/prd.md${NC}"
+                    echo -e "Run 'loki plan ${demo_dir}/prd.md' for the full breakdown."
+                    return 0
+                fi
+            else
+                # No honest number available: default NO (the safe direction).
+                echo -n "Proceed with the demo build anyway? [y/N] "
+                read -r demo_answer </dev/tty 2>/dev/null || demo_answer=""
+                if [[ ! "$demo_answer" =~ ^[Yy] ]]; then
+                    echo ""
+                    echo -e "Cancelled. Nothing was spent. The demo PRD is at:"
+                    echo -e "  ${CYAN}$demo_dir/prd.md${NC}"
+                    return 0
+                fi
+            fi
+        else
+            # Non-TTY without --yes: never hang; refuse with an honest message.
+            echo "demo needs confirmation; re-run with --yes to proceed non-interactively" >&2
+            return 2
+        fi
+    fi
+
     echo -e "${DIM}Starting autonomous build...${NC}"
     echo -e "${DIM}(Press Ctrl+C to stop at any time)${NC}"
     echo ""
@@ -9349,7 +9553,16 @@ cmd_quick() {
         echo "  loki quick \"fix the login bug in auth.js\""
         echo "  loki quick \"add input validation to the signup form\""
         echo "  loki quick \"write unit tests for the API endpoints\""
-        exit 1
+        exit 2
+    fi
+
+    # v7.29.0: provider pre-flight gate. Offer install on a TTY; print honest
+    # manual instructions and exit 2 on non-TTY/CI, before any spend. --help and
+    # the no-args usage path already returned/exited above.
+    if declare -f provider_offer_gate >/dev/null 2>&1; then
+        if ! provider_offer_gate; then
+            exit 2
+        fi
     fi
 
     local task_desc="$*"
@@ -10692,7 +10905,7 @@ cmd_migrate_start() {
         echo "Specify the migration target (e.g. --target typescript, --target react, --target microservices)"
         echo ""
         echo "Run 'loki migrate --help' for usage."
-        return 1
+        return 2
     fi
 
     # Validate compliance preset
@@ -11662,7 +11875,7 @@ for f in data.get('frictions', []):
     if [ -z "$codebase_path" ]; then
         echo -e "${RED}Error: Codebase path is required${NC}"
         echo "Usage: loki heal <path-to-codebase> [options]"
-        return 1
+        return 2
     fi
 
     if [[ ! -d "$codebase_path" ]]; then
@@ -12030,7 +12243,7 @@ cmd_migrate() {
         echo "Usage: loki migrate <path-to-codebase> --target <target>"
         echo ""
         echo "Run 'loki migrate --help' for usage."
-        return 1
+        return 2
     fi
 
     cmd_migrate_start "$codebase_path" "$target" "$plan_only" "$phase" "$parallel" "$compliance" "$dry_run" "$do_resume" "$multi_repo" "$export_report" "$no_dashboard" "$no_docs"
@@ -12805,6 +13018,20 @@ show_verbose = sys.argv[3] == 'true'
 session_model_env = (os.environ.get('LOKI_SESSION_MODEL', 'sonnet') or 'sonnet').strip().lower()
 legacy_tier_switching = (os.environ.get('LOKI_LEGACY_TIER_SWITCHING', 'false') or 'false').strip().lower() == 'true'
 
+# v7.29.0: Honor LOKI_COMPLEXITY -- the SAME env var the runner honors at
+# run.sh:920 -- so a forced-tier run (e.g. 'loki demo' / 'loki start --simple'
+# which export LOKI_COMPLEXITY=simple) quotes the tier it will actually run,
+# not the content-derived tier. Without this the estimate diverges from
+# execution (audit finding #9). Runner vocabulary is auto|simple|standard|complex;
+# the estimator's internal tiers are simple|moderate|complex|enterprise, so
+# 'standard' aliases to 'moderate' (the 6-12 iteration analog). 'auto', empty,
+# and any unrecognized value are ignored (content tier is used) -- honest by
+# construction. The override is applied AFTER the content score-to-tier map.
+_forced_complexity_raw = (os.environ.get('LOKI_COMPLEXITY', '') or '').strip().lower()
+forced_complexity = {'standard': 'moderate'}.get(_forced_complexity_raw, _forced_complexity_raw)
+if forced_complexity not in ('simple', 'moderate', 'complex', 'enterprise'):
+    forced_complexity = ''
+
 # Map session model name to tier key used in tokens_per_tier below.
 # Unknown models fall through to 'development' (Sonnet) as a safe default.
 _session_tier_map = {
@@ -12957,6 +13184,14 @@ elif complexity_score <= 5:
 else:
     complexity = 'enterprise'
 
+# v7.29.0: apply the forced-tier override AFTER the content score-to-tier map,
+# so it is not clobbered by the assignment above. Everything downstream
+# (iterations, tokens, cost, time) derives from the complexity variable, so the
+# whole estimate becomes consistent with what the run will actually do.
+if forced_complexity:
+    complexity = forced_complexity
+    complexity_reasons.insert(0, 'Complexity forced via LOKI_COMPLEXITY=' + _forced_complexity_raw)
+
 # --- Estimate iterations ---
 iteration_map = {
     'simple': (3, 5),
@@ -13187,7 +13422,10 @@ if ui_count > 0:
 color = {'simple': GREEN, 'moderate': YELLOW, 'complex': RED, 'enterprise': RED}
 cx_color = color.get(complexity, NC)
 print(f'\n{CYAN}Complexity{NC}')
-print(f'  Tier: {cx_color}{BOLD}{complexity.upper()}{NC} (score: {complexity_score})')
+if forced_complexity:
+    print(f'  Tier: {cx_color}{BOLD}{complexity.upper()}{NC} (forced via LOKI_COMPLEXITY={_forced_complexity_raw})')
+else:
+    print(f'  Tier: {cx_color}{BOLD}{complexity.upper()}{NC} (score: {complexity_score})')
 for reason in complexity_reasons:
     print(f'  {DIM}- {reason}{NC}')
 
@@ -13333,7 +13571,7 @@ cmd_plan() {
     if [ -z "$prd_file" ]; then
         echo -e "${RED}Usage: loki plan <PRD file>${NC}"
         echo "Run 'loki plan --help' for usage."
-        return 1
+        return 2
     fi
 
     if [ ! -f "$prd_file" ]; then
@@ -13388,7 +13626,9 @@ main() {
     fi
 
     if [ $# -eq 0 ]; then
-        show_help
+        # v7.28.x UX: bare `loki` shows a tight newcomer landing, not the full
+        # command wall. `loki help`/`--help` still print show_help unchanged.
+        show_landing
         exit 0
     fi
 
@@ -13416,6 +13656,9 @@ main() {
         demo)
             cmd_demo "$@"
             ;;
+        quickstart)
+            cmd_quickstart "$@"
+            ;;
         welcome)
             cmd_welcome "$@"
             ;;
@@ -17722,7 +17965,7 @@ cmd_enterprise() {
                     if [ -z "$name" ]; then
                         echo -e "${RED}Error: Token name required${NC}"
                         echo "Usage: loki enterprise token generate <name> [--scopes '*'] [--expires 30]"
-                        exit 1
+                        exit 2
                     fi
 
                     # Validate name is not a flag
@@ -17890,7 +18133,7 @@ else:
 
                     if [ -z "$identifier" ]; then
                         echo -e "${RED}Error: Token ID or name required${NC}"
-                        exit 1
+                        exit 2
                     fi
 
                     python3 -c "
@@ -17929,7 +18172,7 @@ else:
 
                     if [ -z "$identifier" ]; then
                         echo -e "${RED}Error: Token ID or name required${NC}"
-                        exit 1
+                        exit 2
                     fi
 
                     python3 -c "