omnilane 0.13.0 → 0.15.0

package/completions/omnilane.fish

@@ -10,6 +10,7 @@ complete -c omnilane -f -n __fish_use_subcommand -a dispatch      -d 'dispatch o
 complete -c omnilane -f -n __fish_use_subcommand -a jobs          -d 'inspect background jobs'
 complete -c omnilane -f -n __fish_use_subcommand -a mcp           -d 'MCP stdio server'
 complete -c omnilane -f -n __fish_use_subcommand -a doctor        -d 'read-only health report'
+complete -c omnilane -f -n __fish_use_subcommand -a benchmark     -d 'fixed quality/cost comparison'
 complete -c omnilane -f -n __fish_use_subcommand -a release-audit -d 'offline release gate'
 complete -c omnilane -f -n __fish_use_subcommand -a ui            -d 'Live Board server'
 complete -c omnilane -f -n __fish_use_subcommand -a configure     -d 'lane routing (menu or set/get/unset/list/diff)'
@@ -29,19 +30,30 @@ complete -c omnilane -n '__fish_seen_subcommand_from route dispatch' -l dry-run
 
 # jobs subcommands (only before a jobs subcommand is chosen).
 complete -c omnilane -f \
-  -n '__fish_seen_subcommand_from jobs; and not __fish_seen_subcommand_from list status result tail retry stats wait audit prune cancel rm help' \
-  -a 'list status result tail retry stats wait audit prune cancel rm help' -d 'jobs subcommand'
+  -n '__fish_seen_subcommand_from jobs; and not __fish_seen_subcommand_from list status result tail retry stats recommend wait audit prune cancel rm help' \
+  -a 'list status result tail retry stats recommend wait audit prune cancel rm help' -d 'jobs subcommand'
 complete -c omnilane -n '__fish_seen_subcommand_from jobs' -l json -d 'JSON output'
 # jobs list / stats filters.
-complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from list stats' -l lane   -x                                                                                    -d 'filter by lane'
+complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from list stats recommend' -l lane -x -d 'filter by lane'
 complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from list stats' -l vendor -x -a 'codex claude grok gemini kimi qwen opencode openrouter deepseek zai mistral groq cerebras exec' -d 'filter by vendor'
 complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from list'       -l status -x -a 'running done'                                                                    -d 'filter by status'
+complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from stats recommend audit' -l last -x -d 'maximum recent jobs'
+complete -c omnilane -n '__fish_seen_subcommand_from jobs; and __fish_seen_subcommand_from recommend' -l min-samples -x -d 'minimum completed samples'
 
 # configure subcommands (non-interactive).
 complete -c omnilane -f -n '__fish_seen_subcommand_from configure; and not __fish_seen_subcommand_from set get unset list diff' -a 'set get unset list diff' -d 'configure action'
 
 # doctor / release-audit / ui / completion.
 complete -c omnilane -n '__fish_seen_subcommand_from doctor' -l json -d 'JSON output'
+complete -c omnilane -n '__fish_seen_subcommand_from doctor' -l strict -d 'fail when any warning is reported'
+complete -c omnilane -n '__fish_seen_subcommand_from doctor' -l probe -x -a 'codex claude grok gemini kimi qwen opencode openrouter deepseek zai mistral groq cerebras' -d 'run one opt-in live probe'
+complete -c omnilane -n '__fish_seen_subcommand_from doctor' -l probe-timeout -x -d 'probe timeout in seconds'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l json -d 'JSON output'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l run -d 'invoke providers in advise mode'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l vendor -x -a 'codex claude grok gemini kimi qwen opencode openrouter deepseek zai mistral groq cerebras' -d 'vendor to compare; repeatable'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l timeout -x -d 'per-workload timeout'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l workloads -r -d 'TSV workload file'
+complete -c omnilane -n '__fish_seen_subcommand_from benchmark' -l cost-per-call -x -d 'user-supplied VENDOR=USD estimate'
 complete -c omnilane -n '__fish_seen_subcommand_from release-audit' -l target -x       -d 'target version'
 complete -c omnilane -n '__fish_seen_subcommand_from release-audit' -l allow-dirty     -d 'permit a dirty tree'
 complete -c omnilane -n '__fish_seen_subcommand_from release-audit' -l require-tag     -d 'require an annotated tag'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnilane",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "One routing table, every harness — classify subtasks into lanes and dispatch each lane to the best vendor's agentic CLI (Codex, Claude, Gemini, Grok) using your existing subscription logins.",
   "bin": {
     "omnilane": "bin/omnilane"
@@ -11,6 +11,7 @@
     "!scripts/__pycache__",
     "!**/*.pyc",
     "completions/",
+    "benchmarks/",
     "ui/",
     "routing.yaml",
     "routing.local.yaml.example",

package/scripts/benchmark.py

@@ -0,0 +1,446 @@
+#!/usr/bin/env python3
+"""Fixed, body-free routing quality/cost benchmark."""
+
+import argparse
+from decimal import Decimal, InvalidOperation
+import json
+import os
+from pathlib import Path
+import re
+import shlex
+import subprocess
+import sys
+import tempfile
+import time
+
+
+ROOT = Path(__file__).resolve().parents[1]
+DEFAULT_WORKLOADS = ROOT / "benchmarks" / "workloads.tsv"
+NAME_RE = re.compile(r"^[a-z][a-z0-9-]*$")
+ID_RE = re.compile(r"^[a-z][a-z0-9_-]*$")
+
+
+class BenchmarkError(Exception):
+    pass
+
+
+def parse_args(argv=None):
+    parser = argparse.ArgumentParser(
+        prog="omnilane benchmark",
+        description=(
+            "Compare fixed-workload routing quality and user-supplied per-call "
+            "costs. Provider calls require --run."
+        ),
+    )
+    parser.add_argument("--json", action="store_true", help="emit JSON")
+    parser.add_argument(
+        "--run",
+        action="store_true",
+        help="invoke providers in advise mode; default is routing-only dry-run",
+    )
+    parser.add_argument(
+        "--vendor",
+        action="append",
+        default=[],
+        metavar="VENDOR",
+        help="vendor to compare; repeatable (default: configured vendors)",
+    )
+    parser.add_argument(
+        "--timeout",
+        type=int,
+        default=60,
+        metavar="SECONDS",
+        help="per-workload timeout, 1..600 (default: 60)",
+    )
+    parser.add_argument(
+        "--workloads",
+        type=Path,
+        default=DEFAULT_WORKLOADS,
+        metavar="FILE",
+        help="fixed TSV workload file",
+    )
+    parser.add_argument(
+        "--cost-per-call",
+        action="append",
+        default=[],
+        metavar="VENDOR=USD",
+        help="optional user-supplied estimated USD per call; repeatable",
+    )
+    args = parser.parse_args(argv)
+    if not 1 <= args.timeout <= 600:
+        parser.error("--timeout must be between 1 and 600 seconds")
+    return args
+
+
+def unique(values):
+    return list(dict.fromkeys(values))
+
+
+def decode_plan_value(value):
+    try:
+        parsed = shlex.split(value, posix=True)
+    except ValueError:
+        return value
+    return parsed[0] if len(parsed) == 1 else value
+
+
+def parse_plan(text):
+    plan = {}
+    for line in text.splitlines():
+        if "=" not in line:
+            continue
+        key, value = line.split("=", 1)
+        if re.fullmatch(r"[a-z_]+", key):
+            plan[key] = decode_plan_value(value)
+    return plan
+
+
+def load_workloads(path):
+    try:
+        lines = path.read_text(encoding="utf-8").splitlines()
+    except OSError as exc:
+        raise BenchmarkError(f"cannot read workloads: {path}: {exc}") from exc
+
+    workloads = []
+    seen = set()
+    for line_number, line in enumerate(lines, 1):
+        if not line.strip() or line.lstrip().startswith("#"):
+            continue
+        fields = line.split("\t", 4)
+        if len(fields) != 5:
+            raise BenchmarkError(
+                f"{path}:{line_number}: expected 5 tab-separated fields"
+            )
+        workload_id, lane, weight_text, pattern, prompt = fields
+        if not ID_RE.fullmatch(workload_id) or workload_id in seen:
+            raise BenchmarkError(f"{path}:{line_number}: invalid or duplicate id")
+        if not NAME_RE.fullmatch(lane):
+            raise BenchmarkError(f"{path}:{line_number}: invalid lane")
+        try:
+            weight = int(weight_text)
+        except ValueError as exc:
+            raise BenchmarkError(f"{path}:{line_number}: weight must be an integer") from exc
+        if not 1 <= weight <= 100:
+            raise BenchmarkError(f"{path}:{line_number}: weight must be 1..100")
+        try:
+            re.compile(pattern)
+        except re.error as exc:
+            raise BenchmarkError(f"{path}:{line_number}: invalid regex: {exc}") from exc
+        if not prompt.strip():
+            raise BenchmarkError(f"{path}:{line_number}: prompt must not be empty")
+        seen.add(workload_id)
+        workloads.append(
+            {
+                "id": workload_id,
+                "lane": lane,
+                "weight": weight,
+                "pattern": pattern,
+                "prompt": prompt,
+            }
+        )
+    if not workloads:
+        raise BenchmarkError(f"no workloads found: {path}")
+    return workloads
+
+
+def parse_costs(items):
+    costs = {}
+    for item in items:
+        if "=" not in item:
+            raise BenchmarkError("--cost-per-call must use VENDOR=USD")
+        vendor, raw = item.split("=", 1)
+        if not NAME_RE.fullmatch(vendor):
+            raise BenchmarkError(f"invalid cost vendor: {vendor}")
+        try:
+            value = Decimal(raw)
+        except InvalidOperation as exc:
+            raise BenchmarkError(f"invalid cost for {vendor}: {raw}") from exc
+        if not value.is_finite() or value < 0:
+            raise BenchmarkError(f"cost for {vendor} must be non-negative")
+        costs[vendor] = value
+    return costs
+
+
+def list_routes(dispatch, env):
+    result = subprocess.run(
+        [str(dispatch), "--list"],
+        text=True,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        env=env,
+        timeout=15,
+        check=False,
+    )
+    if result.returncode != 0:
+        detail = result.stderr.strip().splitlines()[-1:] or ["unknown error"]
+        raise BenchmarkError(f"cannot list routing: {detail[0]}")
+    lanes = []
+    vendors = []
+    for line in result.stdout.splitlines():
+        if ":" not in line:
+            continue
+        lane, raw = line.split(":", 1)
+        lane = lane.strip()
+        if not NAME_RE.fullmatch(lane):
+            continue
+        lanes.append(lane)
+        try:
+            fields = shlex.split(raw.strip())
+        except ValueError:
+            fields = raw.split()
+        if fields and NAME_RE.fullmatch(fields[0]) and fields[0] not in {
+            "off",
+            "exec",
+            "vote",
+        }:
+            vendors.append(fields[0])
+    return unique(lanes), unique(vendors)
+
+
+def resolve_route(dispatch, vendor, preferred_lane, lanes, prompt, env):
+    last_error = "vendor is not configured in an available lane"
+    for lane in unique([preferred_lane] + list(lanes)):
+        result = subprocess.run(
+            [
+                str(dispatch),
+                "--dry-run",
+                "--mode",
+                "advise",
+                "--vendor",
+                vendor,
+                lane,
+                prompt,
+            ],
+            text=True,
+            stdout=subprocess.PIPE,
+            stderr=subprocess.PIPE,
+            env=env,
+            timeout=15,
+            check=False,
+        )
+        if result.returncode == 0:
+            plan = parse_plan(result.stdout)
+            if plan.get("provider_invoked") != "no":
+                return None, "dry-run contract did not confirm provider_invoked=no"
+            if plan.get("vendor") != vendor:
+                return None, "dry-run resolved a different vendor"
+            plan.setdefault("lane", lane)
+            return plan, ""
+        detail = result.stderr.strip().splitlines()
+        if detail:
+            last_error = detail[-1]
+    return None, last_error
+
+
+def money(value):
+    return format(value.quantize(Decimal("0.01")), "f")
+
+
+def cost_report(vendor, calls, costs):
+    if vendor not in costs:
+        return None
+    per_call = costs[vendor]
+    return {
+        "basis": "user-supplied-per-call",
+        "currency": "USD",
+        "per_call_usd": money(per_call),
+        "estimated_total_usd": money(per_call * calls),
+    }
+
+
+def run_one(repo, vendor, plan, workload, timeout, env):
+    runner = repo / "scripts" / "runners" / f"run-{vendor}.sh"
+    base = {
+        "id": workload["id"],
+        "requested_lane": workload["lane"],
+        "resolved_lane": plan.get("lane", workload["lane"]),
+        "model": plan.get("model", "-"),
+        "effort": plan.get("effort", "-"),
+        "weight": workload["weight"],
+    }
+    if not runner.is_file() or not os.access(runner, os.X_OK):
+        return dict(base, status="runner_error", duration_seconds=0.0, response_bytes=0), True
+
+    started = time.monotonic()
+    with tempfile.TemporaryDirectory(prefix="omnilane-benchmark-") as temporary:
+        temporary_path = Path(temporary)
+        prompt_file = temporary_path / "prompt.txt"
+        output_file = temporary_path / "response.txt"
+        prompt_file.write_text(str(workload["prompt"]) + "\n", encoding="utf-8")
+        run_env = env.copy()
+        run_env["OMNILANE_TIMEOUT"] = str(timeout)
+        try:
+            result = subprocess.run(
+                [
+                    str(runner),
+                    "advise",
+                    str(repo),
+                    plan.get("model", "-"),
+                    plan.get("effort", "-"),
+                    str(prompt_file),
+                    str(output_file),
+                ],
+                stdout=subprocess.DEVNULL,
+                stderr=subprocess.DEVNULL,
+                env=run_env,
+                timeout=timeout + 5,
+                check=False,
+            )
+        except subprocess.TimeoutExpired:
+            elapsed = round(time.monotonic() - started, 3)
+            return dict(base, status="runner_error", duration_seconds=elapsed, response_bytes=0), True
+        elapsed = round(time.monotonic() - started, 3)
+        try:
+            body = output_file.read_text(encoding="utf-8")
+            response_bytes = output_file.stat().st_size
+        except OSError:
+            body = ""
+            response_bytes = 0
+        if result.returncode != 0:
+            status = "runner_error"
+            runner_error = True
+        else:
+            status = "passed" if re.search(str(workload["pattern"]), body) else "failed"
+            runner_error = False
+        return dict(
+            base,
+            status=status,
+            duration_seconds=elapsed,
+            response_bytes=response_bytes,
+        ), runner_error
+
+
+def execute(args):
+    repo = Path(os.environ.get("OMNILANE_BENCHMARK_REPO", str(ROOT))).resolve()
+    dispatch = repo / "scripts" / "dispatch.sh"
+    if not dispatch.is_file() or not os.access(dispatch, os.X_OK):
+        raise BenchmarkError(f"dispatch is not executable: {dispatch}")
+    env = os.environ.copy()
+    workloads = load_workloads(args.workloads)
+    costs = parse_costs(args.cost_per_call)
+    lanes, configured_vendors = list_routes(dispatch, env)
+    vendors = unique(args.vendor or configured_vendors)
+    if not vendors:
+        raise BenchmarkError("no configured benchmark vendors found")
+    for vendor in vendors:
+        if not NAME_RE.fullmatch(vendor) or vendor in {"off", "exec", "vote"}:
+            raise BenchmarkError(f"unsupported benchmark vendor: {vendor}")
+
+    report = {
+        "schema_version": 1,
+        "command": "benchmark",
+        "mode": "run" if args.run else "dry-run",
+        "provider_invoked": False,
+        "workload_count": len(workloads),
+        "workloads_file": str(args.workloads.resolve()),
+        "vendors": [],
+    }
+    had_error = False
+    provider_invoked = False
+    for vendor in vendors:
+        vendor_started = time.monotonic()
+        items = []
+        passed = 0
+        score_possible = 0
+        score_earned = 0
+        for workload in workloads:
+            score_possible += int(workload["weight"])
+            plan, error = resolve_route(
+                dispatch,
+                vendor,
+                workload["lane"],
+                lanes,
+                workload["prompt"],
+                env,
+            )
+            if plan is None:
+                items.append(
+                    {
+                        "id": workload["id"],
+                        "requested_lane": workload["lane"],
+                        "weight": workload["weight"],
+                        "status": "unavailable",
+                        "duration_seconds": 0.0,
+                        "response_bytes": 0,
+                        "error": error,
+                    }
+                )
+                had_error = True
+                continue
+            if not args.run:
+                items.append(
+                    {
+                        "id": workload["id"],
+                        "requested_lane": workload["lane"],
+                        "resolved_lane": plan.get("lane", workload["lane"]),
+                        "model": plan.get("model", "-"),
+                        "effort": plan.get("effort", "-"),
+                        "weight": workload["weight"],
+                        "status": "planned",
+                        "duration_seconds": 0.0,
+                        "response_bytes": 0,
+                    }
+                )
+                continue
+            provider_invoked = True
+            item, runner_error = run_one(
+                repo, vendor, plan, workload, args.timeout, env
+            )
+            items.append(item)
+            had_error = had_error or runner_error
+            if item["status"] == "passed":
+                passed += 1
+                score_earned += int(workload["weight"])
+
+        quality = None
+        if args.run and score_possible:
+            quality = round((score_earned / score_possible) * 100, 2)
+            if quality.is_integer():
+                quality = int(quality)
+        report["vendors"].append(
+            {
+                "vendor": vendor,
+                "planned_calls": len(workloads),
+                "passed": passed,
+                "score_earned": score_earned,
+                "score_possible": score_possible,
+                "quality_percent": quality,
+                "duration_seconds": round(time.monotonic() - vendor_started, 3),
+                "cost": cost_report(vendor, len(workloads), costs),
+                "workloads": items,
+            }
+        )
+    report["provider_invoked"] = provider_invoked
+    return report, 1 if had_error else 0
+
+
+def print_human(report):
+    invoked = "yes" if report["provider_invoked"] else "no"
+    print(f"mode={report['mode']} provider_invoked={invoked}")
+    for vendor in report["vendors"]:
+        quality = vendor["quality_percent"]
+        quality_text = "planned" if quality is None else f"{quality}%"
+        cost = vendor["cost"]
+        cost_text = "not supplied" if cost is None else f"USD {cost['estimated_total_usd']}"
+        print(
+            f"{vendor['vendor']}: calls={vendor['planned_calls']} "
+            f"quality={quality_text} estimated_cost={cost_text}"
+        )
+
+
+def main(argv=None):
+    args = parse_args(argv)
+    try:
+        report, return_code = execute(args)
+    except BenchmarkError as exc:
+        print(f"omnilane benchmark: {exc}", file=sys.stderr)
+        return 2
+    if args.json:
+        print(json.dumps(report, ensure_ascii=False, separators=(",", ":")))
+    else:
+        print_human(report)
+    return return_code
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/check.sh

@@ -75,7 +75,7 @@ fi
 
 # 4) python compile of the UI and test modules
 py_files=()
-for rel in scripts/ui.py tests/test_ui.py tests/test_ci_policy.py tests/ui_browser_harness.py; do
+for rel in scripts/ui.py scripts/benchmark.py tests/test_ui.py tests/test_benchmark.py tests/test_ci_policy.py tests/ui_browser_harness.py; do
   [[ -f "$REPO/$rel" ]] && py_files+=("$REPO/$rel")
 done
 if ! command -v python3 >/dev/null 2>&1; then

package/scripts/dispatch.sh

@@ -655,10 +655,58 @@ secure_job_files() {
   find "$JOB_DIR" -type f -exec chmod 600 {} +
 }
 
+completion_tail() {
+  local path="$1" size=0 keep value="" sentinel=$'\001'
+  local note=$'[truncated: leading output omitted]\n'
+  local LC_ALL=C
+
+  if [[ -f "$path" && ! -L "$path" ]]; then
+    size="$(wc -c < "$path" 2>/dev/null | tr -d '[:space:]')" || return 1
+    [[ "$size" =~ ^[0-9]+$ ]] || return 1
+    if [[ "$size" -gt 2000 ]]; then
+      keep=$((2000 - ${#note}))
+      value="$(printf '%s' "$note"; tail -c "$keep" "$path"; printf '%s' "$sentinel")" || return 1
+    else
+      value="$(cat "$path"; printf '%s' "$sentinel")" || return 1
+    fi
+    value="${value%"$sentinel"}"
+  fi
+  printf '%s' "$value"
+}
+
+write_completion_record() {
+  local rc="$1" inbox="$OMNILANE_HOME/inbox"
+  local final="$inbox/$JOB_ID.json" tmp="$inbox/.$JOB_ID.tmp.$$-$RANDOM"
+  local tail_value finished old_umask write_rc=0 sentinel=$'\001'
+
+  prepare_inbox_store || return 1
+  tail_value="$(completion_tail "$JOB_DIR/out.txt"; printf '%s' "$sentinel")" || return 1
+  tail_value="${tail_value%"$sentinel"}"
+  finished="$(date -u +%FT%TZ)" || return 1
+  old_umask="$(umask)"
+  umask 077
+  printf '{"job_id":"%s","lane":"%s","vendor":"%s","model":"%s","mode":"%s","workdir":"%s","exit":%s,"finished":"%s","tail":"%s"}\n' \
+    "$(json_escape "$JOB_ID")" "$(json_escape "$LANE")" "$(json_escape "$VENDOR")" \
+    "$(json_escape "$MODEL")" "$(json_escape "$MODE")" "$(json_escape "$WORKDIR")" \
+    "$rc" "$(json_escape "$finished")" "$(json_escape "$tail_value")" > "$tmp" || write_rc=$?
+  if [[ "$write_rc" -eq 0 ]]; then
+    chmod 600 "$tmp" || write_rc=$?
+  fi
+  if [[ "$write_rc" -eq 0 ]]; then
+    mv "$tmp" "$final" || write_rc=$?
+  fi
+  umask "$old_umask"
+  rm -f "$tmp" 2>/dev/null || true
+  return "$write_rc"
+}
+
 finish_job() {
   local rc="$1"
   secure_job_files
   (umask 077; printf '%s\n' "$rc" > "$JOB_DIR/exit")
+  if [[ "${OMNILANE_INBOX:-1}" != "0" ]]; then
+    write_completion_record "$rc" >/dev/null 2>&1 || true
+  fi
 }
 
 run_job() {

package/scripts/doctor.sh

@@ -3,14 +3,34 @@ set -u
 # Read-only health report for routing, state, watchdog, and optional UI support.
 
 JSON_MODE=0
-if [[ $# -eq 1 && "$1" == "--json" ]]; then
-  JSON_MODE=1
-elif [[ $# -ne 0 ]]; then
-  echo "usage: omnilane doctor [--json]" >&2
+STRICT_MODE=0
+PROBE_VENDOR=""
+PROBE_TIMEOUT=30
+PROBE_TIMEOUT_GIVEN=0
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --json) JSON_MODE=1 ;;
+    --strict) STRICT_MODE=1 ;;
+    --probe)
+      [[ $# -ge 2 ]] || { echo "omnilane: --probe needs a vendor" >&2; exit 2; }
+      PROBE_VENDOR="$2"; shift ;;
+    --probe-timeout)
+      [[ $# -ge 2 ]] || { echo "omnilane: --probe-timeout needs seconds" >&2; exit 2; }
+      PROBE_TIMEOUT="$2"; PROBE_TIMEOUT_GIVEN=1; shift ;;
+    *)
+      echo "usage: omnilane doctor [--json] [--strict] [--probe V [--probe-timeout SEC]]" >&2
+      exit 2
+      ;;
+  esac
+  shift
+done
+[[ "$PROBE_TIMEOUT_GIVEN" -eq 0 || -n "$PROBE_VENDOR" ]] || {
+  echo "omnilane: --probe-timeout requires --probe V" >&2
   exit 2
-fi
+}
 REPO="${OMNILANE_DOCTOR_REPO:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 OMNILANE_HOME="${OMNILANE_HOME:-$HOME/.omnilane}"
+PROBE_SCRIPT="${OMNILANE_PROVIDER_PROBE_SCRIPT:-$REPO/scripts/provider-probe.sh}"
 PASS_COUNT=0
 WARN_COUNT=0
 FAIL_COUNT=0
@@ -115,7 +135,10 @@ if [[ -L "$OMNILANE_HOME/jobs" ||
       ( -e "$OMNILANE_HOME/jobs" && ! -d "$OMNILANE_HOME/jobs" ) ]]; then
   report FAIL job-privacy "$OMNILANE_HOME/jobs must be a real directory, not a symlink or file"
 elif [[ -d "$OMNILANE_HOME/jobs" ]]; then
-  jobs_mode="$(stat -f '%Lp' "$OMNILANE_HOME/jobs" 2>/dev/null || stat -c '%a' "$OMNILANE_HOME/jobs" 2>/dev/null || true)"
+  jobs_mode="$(stat -f '%Lp' "$OMNILANE_HOME/jobs" 2>/dev/null || true)"
+  if [[ ! "$jobs_mode" =~ ^[0-7]{3,4}$ ]]; then
+    jobs_mode="$(stat -c '%a' "$OMNILANE_HOME/jobs" 2>/dev/null || true)"
+  fi
   if [[ "$jobs_mode" =~ ^[0-7]*00$ ]]; then
     report PASS job-privacy "$OMNILANE_HOME/jobs mode is $jobs_mode"
   elif [[ -n "$jobs_mode" ]]; then
@@ -178,6 +201,24 @@ else
   report WARN vendors "no vendor CLI reachable${vendor_absent:+ (missing: $vendor_absent)}; every lane degrades to off"
 fi
 
+# A real inference call is explicit and single-vendor only. Default doctor
+# remains local/offline. Never relay provider output or runner stderr.
+if [[ -n "$PROBE_VENDOR" ]]; then
+  if [[ ! -x "$PROBE_SCRIPT" ]]; then
+    report FAIL provider-probe "probe runner is unavailable"
+  else
+    probe_output="$(OMNILANE_PROBE_REPO="$REPO" "$PROBE_SCRIPT" \
+      --vendor "$PROBE_VENDOR" --timeout "$PROBE_TIMEOUT" 2>/dev/null)"
+    probe_rc=$?
+    if [[ "$probe_rc" -eq 0 ]]; then
+      report PASS provider-probe "$PROBE_VENDOR bounded live inference succeeded"
+    else
+      report FAIL provider-probe "$PROBE_VENDOR bounded live inference failed (exit $probe_rc)"
+    fi
+    : "$probe_output"
+  fi
+fi
+
 if command -v python3 >/dev/null 2>&1; then
   if python3 -c 'import sys; raise SystemExit(0 if sys.version_info >= (3, 9) else 1)' \
       >/dev/null 2>&1; then
@@ -192,13 +233,15 @@ fi
 
 if [[ "$JSON_MODE" -eq 1 ]]; then
   ok=true
-  [[ "$FAIL_COUNT" -eq 0 ]] || ok=false
-  printf '{"ok":%s,"checks":[%s],"summary":{"passed":%s,"warnings":%s,"failed":%s}}\n' \
-    "$ok" "$JSON_REPORTS" "$PASS_COUNT" "$WARN_COUNT" "$FAIL_COUNT"
+  [[ "$FAIL_COUNT" -eq 0 && ( "$STRICT_MODE" -eq 0 || "$WARN_COUNT" -eq 0 ) ]] || ok=false
+  strict=false
+  [[ "$STRICT_MODE" -eq 0 ]] || strict=true
+  printf '{"ok":%s,"checks":[%s],"summary":{"passed":%s,"warnings":%s,"failed":%s},"strict":%s}\n' \
+    "$ok" "$JSON_REPORTS" "$PASS_COUNT" "$WARN_COUNT" "$FAIL_COUNT" "$strict"
 else
   warning_suffix=s
   [[ "$WARN_COUNT" -eq 1 ]] && warning_suffix=""
   printf '\nSummary: %s passed, %s warning%s, %s failed\n' \
     "$PASS_COUNT" "$WARN_COUNT" "$warning_suffix" "$FAIL_COUNT"
 fi
-[[ "$FAIL_COUNT" -eq 0 ]]
+[[ "$FAIL_COUNT" -eq 0 && ( "$STRICT_MODE" -eq 0 || "$WARN_COUNT" -eq 0 ) ]]