loki-mode 10.6.13 → 10.7.0

package/mcp/__init__.py

@@ -75,4 +75,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '10.6.13'
+__version__ = '10.7.0'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "10.6.13",
+  "version": "10.7.0",
   "description": "An autonomous software factory that knows what it is supposed to deliver, and proves it did.",
   "keywords": [
     "agent",

package/packages/control-plane/dist/server.js

@@ -15,8 +15,8 @@ var __export = (target, all) => {
 };
 
 // src/server/app.ts
-import { existsSync as existsSync2, statSync } from "fs";
-import { join as join3, resolve, sep } from "path";
+import { existsSync as existsSync5, statSync as statSync2 } from "fs";
+import { join as join6, resolve as resolve2, sep } from "path";
 
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = Symbol();
@@ -5561,6 +5561,7 @@ function openDb(path) {
 import { createHash } from "crypto";
 
 // ../../loki-ts/src/engine10/events.ts
+import { closeSync, existsSync as existsSync2, fstatSync, mkdirSync, openSync, readFileSync, readSync, writeSync } from "fs";
 var isObj = (x) => typeof x === "object" && x !== null && !Array.isArray(x);
 var ISO_TS = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$/;
 var KEYS = ["v", "seq", "ts", "run", "type", "stage", "data"];
@@ -5591,6 +5592,28 @@ function validateEnvelope(x) {
     return "deps must be a string array";
   return null;
 }
+function parseLine(line) {
+  if (line.trim() === "")
+    return null;
+  try {
+    const x = JSON.parse(line);
+    return validateEnvelope(x) === null ? x : null;
+  } catch {
+    return null;
+  }
+}
+function readEvents(path) {
+  if (!existsSync2(path))
+    return [];
+  const out = [];
+  for (const line of readFileSync(path, "utf8").split(`
+`)) {
+    const e = parseLine(line);
+    if (e)
+      out.push(e);
+  }
+  return out;
+}
 function fold(events2) {
   const f = {
     stages: {},
@@ -5667,7 +5690,7 @@ var RULES = [
 var redactSecrets = (s) => RULES.reduce((a, [re, to]) => a.replace(re, to), s);
 
 // src/server/answer.ts
-import { chmodSync, mkdirSync, writeFileSync } from "fs";
+import { chmodSync, mkdirSync as mkdirSync2, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join as join2 } from "path";
 var MAX_ANSWER = 4000;
@@ -5687,7 +5710,7 @@ function writeAnswer(dir, source, run, answer) {
   if (answer.length > MAX_ANSWER)
     return { status: 413, body: { error: `answer over ${MAX_ANSWER} characters` } };
   const d = join2(dir, source);
-  mkdirSync(d, { recursive: true, mode: 448 });
+  mkdirSync2(d, { recursive: true, mode: 448 });
   const path = join2(d, `${run}.answer.txt`);
   writeFileSync(path, `${answer.trim()}
 `, { mode: 384 });
@@ -5933,9 +5956,196 @@ function tokenGuard(token) {
   };
 }
 
+// src/shipper/backfill.ts
+import { readdirSync } from "fs";
+import { join as join4 } from "path";
+
+// src/shipper/ship.ts
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync3, readFileSync as readFileSync2, realpathSync, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { hostname } from "os";
+import { join as join3 } from "path";
+var BATCH = 200;
+var MAX_BYTES = 800000;
+function sourceId(repoDir) {
+  let real2 = repoDir;
+  try {
+    real2 = realpathSync(repoDir);
+  } catch {}
+  return createHash3("sha256").update(`${hostname()}\x00${real2}`).digest("hex").slice(0, 16);
+}
+var redactDeep = (x) => typeof x === "string" ? redactSecrets(x) : Array.isArray(x) ? x.map(redactDeep) : x && typeof x === "object" ? Object.fromEntries(Object.entries(x).map(([k, v]) => [k, redactDeep(v)])) : x;
+var redactEvent = (e) => ({ ...e, data: redactDeep(e.data) });
+var backoffMs = (failures, rnd = Math.random) => Math.min(60000, 1000 * 2 ** Math.max(0, failures - 1)) * (1 + 0.25 * rnd());
+function readShip(runDir, url) {
+  try {
+    const s = JSON.parse(readFileSync2(join3(runDir, "ship.json"), "utf8"));
+    if (s.url === url && Number.isInteger(s.acked_seq))
+      return { acked_seq: s.acked_seq, url };
+  } catch {}
+  return { acked_seq: -1, url };
+}
+function writeShip(runDir, s) {
+  const tmp = join3(runDir, `ship.json.${process.pid}.tmp`);
+  writeFileSync2(tmp, JSON.stringify(s) + `
+`);
+  renameSync(tmp, join3(runDir, "ship.json"));
+}
+async function shipRun(o) {
+  const st = readShip(o.runDir, o.url);
+  const all = readEvents(join3(o.runDir, "events.jsonl"));
+  let lines = 0;
+  try {
+    lines = readFileSync2(join3(o.runDir, "events.jsonl"), "utf8").split(`
+`).filter((l) => l.trim() !== "").length;
+  } catch {}
+  const skipped = lines - all.length;
+  const todo = all.filter((e) => e.seq > st.acked_seq).sort((a, b) => a.seq - b.seq);
+  if (todo.length === 0)
+    return { ok: true, sent: 0, acked_seq: st.acked_seq, pending: 0 };
+  const run_id = todo[0].run;
+  const f = o.fetchImpl ?? fetch;
+  let sent = 0;
+  const fail = () => ({ ok: false, sent, acked_seq: st.acked_seq, pending: todo.length - sent });
+  for (let i = 0;i < todo.length; ) {
+    const batch = [];
+    for (let bytes = 0;i < todo.length && batch.length < BATCH; i++) {
+      bytes += JSON.stringify(todo[i]).length;
+      if (batch.length > 0 && bytes > MAX_BYTES)
+        break;
+      batch.push(redactEvent(todo[i]));
+    }
+    try {
+      const r = await f(`${o.url.replace(/\/+$/, "")}/v1/ingest`, {
+        method: "POST",
+        headers: { "content-type": "application/json", ...o.token ? { authorization: `Bearer ${o.token}` } : {} },
+        body: JSON.stringify({ source: o.source, run_id, events: batch }),
+        signal: AbortSignal.timeout(o.timeoutMs ?? 1e4)
+      });
+      if (!r.ok && r.status !== 409)
+        return fail();
+    } catch {
+      return fail();
+    }
+    st.acked_seq = batch[batch.length - 1].seq;
+    st.skipped = skipped;
+    sent += batch.length;
+    try {
+      writeShip(o.runDir, st);
+    } catch {
+      return fail();
+    }
+  }
+  return { ok: true, sent, acked_seq: st.acked_seq, pending: 0 };
+}
+var shipEnabled = (env) => env.LOKI_CONTROL_URL || null;
+var hasSpool = (runDir) => existsSync3(join3(runDir, "events.jsonl"));
+
+// src/shipper/backfill.ts
+async function backfill(o) {
+  const env = o.env ?? process.env;
+  const url = shipEnabled(env);
+  if (!url)
+    return { runs: 0, sent: 0, failed: [] };
+  const sleep = o.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const attempts = o.attempts ?? 3;
+  const root = join4(o.repoDir, ".loki", "runs");
+  let ids = [];
+  try {
+    ids = readdirSync(root).sort();
+  } catch {
+    return { runs: 0, sent: 0, failed: [] };
+  }
+  const source = sourceId(o.repoDir);
+  let runs2 = 0, sent = 0;
+  const failed = [];
+  for (const id of ids) {
+    const runDir = join4(root, id);
+    if (!hasSpool(runDir))
+      continue;
+    runs2++;
+    let res = { ok: false, sent: 0, acked_seq: -1, pending: 0 };
+    for (let a = 1;a <= attempts; a++) {
+      res = await shipRun({ runDir, url, source, token: env.LOKI_CONTROL_TOKEN, fetchImpl: o.fetchImpl });
+      sent += res.sent;
+      if (res.ok)
+        break;
+      if (a < attempts)
+        await sleep(backoffMs(a));
+    }
+    if (!res.ok)
+      failed.push(id);
+  }
+  return { runs: runs2, sent, failed };
+}
+
+// src/server/actions.ts
+import { spawn } from "child_process";
+import { existsSync as existsSync4, readFileSync as readFileSync3, statSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join5, resolve } from "path";
+var ISSUE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,8}$/;
+var TASK = /^[A-Za-z0-9][A-Za-z0-9 .,_/#@+=-]{0,499}$/;
+var hasDotDot = (t) => t.split(/[\\/ ]/).some((seg) => seg.startsWith(".."));
+function childEnv(env = process.env) {
+  const e = { ...env, LOKI_NO_BROWSER: "1" };
+  for (const k of ["LOKI_CONTROL_TOKEN", "LOKI_CONTROL_DB", "LOKI_CONTROL_HOST", "PORT"])
+    delete e[k];
+  return e;
+}
+function registryRepos(env = process.env) {
+  try {
+    const j = JSON.parse(readFileSync3(join5(env.HOME || homedir2(), ".loki", "dashboard", "projects.json"), "utf8"));
+    return Object.values(j.projects ?? {}).map((p) => typeof p?.path === "string" ? p.path : "").filter((p) => p && existsSync4(p) && statSync(p).isDirectory());
+  } catch {
+    return [];
+  }
+}
+function planStart(body, known, bin = "loki") {
+  const b = body && typeof body === "object" ? body : {};
+  if (typeof b.target !== "string")
+    return { ok: false, error: "target must be a string" };
+  const target = b.target.trim();
+  const issue = ISSUE.test(target);
+  if (!issue && !TASK.test(target))
+    return { ok: false, error: "target must be owner/repo#N or a plain task (letters, digits, spaces, . , _ / # @ + = -)" };
+  if (hasDotDot(target))
+    return { ok: false, error: "target must not contain a .. path segment" };
+  let cwd = process.cwd();
+  if (b.repo !== undefined && b.repo !== "") {
+    if (typeof b.repo !== "string" || b.repo.includes("\x00"))
+      return { ok: false, error: "repo must be a path string" };
+    const want = resolve(b.repo);
+    const hit = known.map((k) => resolve(k)).find((k) => k === want);
+    if (!hit)
+      return { ok: false, error: "repo is not a known project" };
+    cwd = hit;
+  }
+  return { ok: true, argv: issue ? [bin, "start", target] : [bin, "start", "--brief", target], cwd };
+}
+function spawnStart(argv, cwd, onExit = () => {}) {
+  return new Promise((done) => {
+    try {
+      const [cmd, ...args] = argv;
+      const child = spawn(cmd, args, { cwd, detached: true, stdio: "ignore", shell: false, env: childEnv() });
+      child.once("exit", onExit);
+      child.once("error", (e) => {
+        onExit();
+        done({ error: `could not start loki: ${e.message}` });
+      });
+      child.once("spawn", () => {
+        child.unref();
+        done({ pid: child.pid ?? 0 });
+      });
+    } catch (e) {
+      done({ error: `could not start loki: ${e.message}` });
+    }
+  });
+}
+
 // src/server/app.ts
 var MAX_BODY = 1e6;
-var defaultUiDir = () => [join3(import.meta.dir, "../../ui/dist"), join3(import.meta.dir, "../ui/dist")].find((d) => existsSync2(join3(d, "index.html")));
+var defaultUiDir = () => [join6(import.meta.dir, "../../ui/dist"), join6(import.meta.dir, "../ui/dist")].find((d) => existsSync5(join6(d, "index.html")));
 function createApp(opts) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
@@ -6006,6 +6216,50 @@ function createApp(opts) {
     const r = writeAnswer(answerDir, source, run, body?.answer);
     return c.json(r.body, r.status);
   });
+  const act = opts.loopbackOnly ? app : new Hono3;
+  const peerIsLoopback = (c) => {
+    const ip = c.env?.requestIP?.(c.req.raw)?.address;
+    return typeof ip === "string" && /^(127\.\d+\.\d+\.\d+|::1|::ffff:127\.\d+\.\d+\.\d+)$/.test(ip);
+  };
+  const local = (c) => peerIsLoopback(c) && isLoopbackHost(c.req.header("host")) && (c.req.header("content-type") ?? "").toLowerCase().startsWith("application/json");
+  const repoDir = opts.repoDir ?? process.cwd();
+  const inflight = new Set;
+  act.post("/v1/import", async (c) => {
+    if (!local(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const r = await backfill({
+      repoDir,
+      env: { LOKI_CONTROL_URL: "http://127.0.0.1", LOKI_CONTROL_TOKEN: opts.token },
+      fetchImpl: (u, init) => app.fetch(new Request(u, { ...init, headers: { ...init.headers, host: "127.0.0.1" } }))
+    });
+    return c.json({ runs: r.runs, sent: r.sent, failed: r.failed });
+  });
+  act.get("/v1/repos", (c) => peerIsLoopback(c) ? c.json({ repos: [...new Set([repoDir, ...registryRepos()])] }) : c.json({ error: "loopback only" }, 403));
+  act.post("/v1/start", async (c) => {
+    if (!local(c))
+      return c.json({ error: "loopback JSON requests only" }, 403);
+    const text2 = await c.req.text();
+    if (text2.length > 20000)
+      return c.json({ error: "body too large" }, 413);
+    let body;
+    try {
+      body = JSON.parse(text2);
+    } catch {
+      return c.json({ error: "invalid JSON" }, 400);
+    }
+    const plan = planStart(body, [repoDir, ...registryRepos()], opts.startBin);
+    if (!plan.ok)
+      return c.json({ error: plan.error }, 400);
+    if (inflight.has(plan.cwd))
+      return c.json({ error: "a run is already starting or running in this repo" }, 409);
+    inflight.add(plan.cwd);
+    const r = await (opts.spawnImpl ?? spawnStart)(plan.argv, plan.cwd, () => inflight.delete(plan.cwd));
+    if ("error" in r) {
+      inflight.delete(plan.cwd);
+      return c.json({ error: r.error }, 500);
+    }
+    return c.json({ ok: true, pid: r.pid, command: plan.argv.slice(1).join(" ") });
+  });
   app.get("/v1/runs/:id", (c) => {
     const id = c.req.param("id");
     const i = id.indexOf(":");
@@ -6020,13 +6274,13 @@ function createApp(opts) {
     }
     if (!uiDir || p.startsWith("/v1/"))
       return c.json({ error: "not found" }, 404);
-    const root = resolve(uiDir);
-    const f = resolve(root, `.${p}`);
-    if (f.startsWith(root + sep) && existsSync2(f) && statSync(f).isFile())
+    const root = resolve2(uiDir);
+    const f = resolve2(root, `.${p}`);
+    if (f.startsWith(root + sep) && existsSync5(f) && statSync2(f).isFile())
       return new Response(Bun.file(f));
     if (/\.[a-z0-9]+$/i.test(p))
       return c.json({ error: "not found" }, 404);
-    return new Response(Bun.file(join3(root, "index.html")));
+    return new Response(Bun.file(join6(root, "index.html")));
   });
   return { app, db, close: () => sqlite.close() };
 }

package/packages/control-plane/src/server/actions.ts

@@ -0,0 +1,60 @@
+// Start-a-run and repo-picker helpers for the UI. A run is started by spawning the same `loki start` path an operator would type (argv array, no shell).
+import { spawn } from "node:child_process";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+
+const ISSUE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}\/[A-Za-z0-9._-]{1,100}#[1-9][0-9]{0,8}$/;
+// A free-text task: letters, digits, spaces and a small punctuation set. No colon, quotes, backticks, $, ;, &, |, <, >, parens, braces, backslash or control chars.
+const TASK = /^[A-Za-z0-9][A-Za-z0-9 .,_/#@+=-]{0,499}$/;
+const hasDotDot = (t: string): boolean => t.split(/[\\/ ]/).some((seg) => seg.startsWith(".."));
+
+/** Child env: the server's own secrets and bind config never reach a spawned run. */
+export function childEnv(env: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
+  const e: NodeJS.ProcessEnv = { ...env, LOKI_NO_BROWSER: "1" };
+  for (const k of ["LOKI_CONTROL_TOKEN", "LOKI_CONTROL_DB", "LOKI_CONTROL_HOST", "PORT"]) delete e[k];
+  return e;
+}
+
+export type StartPlan = { ok: true; argv: string[]; cwd: string } | { ok: false; error: string };
+
+/** Registered project paths from ~/.loki/dashboard/projects.json (the `loki projects` registry), existing directories only. */
+export function registryRepos(env: NodeJS.ProcessEnv = process.env): string[] {
+  try {
+    const j = JSON.parse(readFileSync(join(env.HOME || homedir(), ".loki", "dashboard", "projects.json"), "utf8")) as { projects?: Record<string, { path?: unknown }> };
+    return Object.values(j.projects ?? {}).map((p) => (typeof p?.path === "string" ? p.path : "")).filter((p) => p && existsSync(p) && statSync(p).isDirectory());
+  } catch { return []; }
+}
+
+/** Validate a start request. The repo must be one the server already knows (registry or cwd), never an arbitrary path. */
+export function planStart(body: unknown, known: string[], bin = "loki"): StartPlan {
+  const b = (body && typeof body === "object" ? body : {}) as { target?: unknown; repo?: unknown };
+  if (typeof b.target !== "string") return { ok: false, error: "target must be a string" };
+  const target = b.target.trim();
+  const issue = ISSUE.test(target);
+  if (!issue && !TASK.test(target)) return { ok: false, error: "target must be owner/repo#N or a plain task (letters, digits, spaces, . , _ / # @ + = -)" };
+  if (hasDotDot(target)) return { ok: false, error: "target must not contain a .. path segment" };
+  let cwd = process.cwd();
+  if (b.repo !== undefined && b.repo !== "") {
+    if (typeof b.repo !== "string" || b.repo.includes("\0")) return { ok: false, error: "repo must be a path string" };
+    const want = resolve(b.repo);
+    const hit = known.map((k) => resolve(k)).find((k) => k === want);
+    if (!hit) return { ok: false, error: "repo is not a known project" };
+    cwd = hit;
+  }
+  // Free text goes as an explicit brief, never auto-detected as a PRD path.
+  return { ok: true, argv: issue ? [bin, "start", target] : [bin, "start", "--brief", target], cwd };
+}
+
+/** Spawn detached with no shell; resolves with the pid once the process exists, or an error if it cannot be launched. */
+export function spawnStart(argv: string[], cwd: string, onExit: () => void = () => {}): Promise<{ pid: number } | { error: string }> {
+  return new Promise((done) => {
+    try {
+      const [cmd, ...args] = argv;
+      const child = spawn(cmd!, args, { cwd, detached: true, stdio: "ignore", shell: false, env: childEnv() });
+      child.once("exit", onExit);
+      child.once("error", (e) => { onExit(); done({ error: `could not start loki: ${e.message}` }); });
+      child.once("spawn", () => { child.unref(); done({ pid: child.pid ?? 0 }); });
+    } catch (e) { done({ error: `could not start loki: ${(e as Error).message}` }); }
+  });
+}

package/packages/control-plane/src/server/app.ts

@@ -1,11 +1,13 @@
 import { existsSync, statSync } from "node:fs";
 import { join, resolve, sep } from "node:path";
-import { Hono } from "hono";
+import { Hono, type Context } from "hono";
 import { openDb } from "../db/migrate.ts";
 import { ingest } from "./ingest.ts";
 import { defaultAnswerDir, writeAnswer } from "./answer.ts";
 import { listRuns, runDetail } from "./runs.ts";
-import { hostGuard, tokenGuard } from "./auth.ts";
+import { hostGuard, isLoopbackHost, tokenGuard } from "./auth.ts";
+import { backfill } from "../shipper/backfill.ts";
+import { planStart, registryRepos, spawnStart } from "./actions.ts";
 
 const MAX_BODY = 1_000_000;
 
@@ -13,7 +15,7 @@ const MAX_BODY = 1_000_000;
 const defaultUiDir = () => [join(import.meta.dir, "../../ui/dist"), join(import.meta.dir, "../ui/dist")].find((d) => existsSync(join(d, "index.html")));
 
 /** dbPath ":memory:" for tests. Migrations run here, so /ready is true as soon as this returns. uiDir overrides the built-UI location. */
-export function createApp(opts: { dbPath: string; uiDir?: string; answerDir?: string; token?: string; loopbackOnly?: boolean }) {
+export function createApp(opts: { dbPath: string; uiDir?: string; answerDir?: string; token?: string; loopbackOnly?: boolean; repoDir?: string; startBin?: string; spawnImpl?: typeof spawnStart }) {
   const uiDir = opts.uiDir ?? defaultUiDir();
   const { db, sqlite } = openDb(opts.dbPath);
   let ready = true;
@@ -66,6 +68,40 @@ export function createApp(opts: { dbPath: string; uiDir?: string; answerDir?: st
     const r = writeAnswer(answerDir, source, run, body?.answer);
     return c.json(r.body, r.status);
   });
+  // Machine-touching actions exist ONLY on a loopback-bound server (otherwise they are never registered: 404).
+  // Each request must also come from a loopback peer (the real socket address, not the spoofable Host header; unknown peer fails closed) and carry JSON (blocks cross-site form posts).
+  const act = opts.loopbackOnly ? app : new Hono();
+  const peerIsLoopback = (c: Context): boolean => {
+    const ip = (c.env as { requestIP?: (r: Request) => { address?: string } | null } | undefined)?.requestIP?.(c.req.raw)?.address;
+    return typeof ip === "string" && /^(127\.\d+\.\d+\.\d+|::1|::ffff:127\.\d+\.\d+\.\d+)$/.test(ip);
+  };
+  const local = (c: Context) => peerIsLoopback(c) && isLoopbackHost(c.req.header("host")) && (c.req.header("content-type") ?? "").toLowerCase().startsWith("application/json");
+  const repoDir = opts.repoDir ?? process.cwd();
+  const inflight = new Set<string>();
+  act.post("/v1/import", async (c) => {
+    if (!local(c)) return c.json({ error: "loopback JSON requests only" }, 403);
+    const r = await backfill({
+      repoDir,
+      env: { LOKI_CONTROL_URL: "http://127.0.0.1", LOKI_CONTROL_TOKEN: opts.token },
+      fetchImpl: ((u: string, init: RequestInit) => app.fetch(new Request(u, { ...init, headers: { ...(init.headers as Record<string, string>), host: "127.0.0.1" } }))) as unknown as typeof fetch,
+    });
+    return c.json({ runs: r.runs, sent: r.sent, failed: r.failed });
+  });
+  act.get("/v1/repos", (c) => peerIsLoopback(c) ? c.json({ repos: [...new Set<string>([repoDir, ...registryRepos()])] }) : c.json({ error: "loopback only" }, 403));
+  act.post("/v1/start", async (c) => {
+    if (!local(c)) return c.json({ error: "loopback JSON requests only" }, 403);
+    const text = await c.req.text();
+    if (text.length > 20_000) return c.json({ error: "body too large" }, 413);
+    let body: unknown;
+    try { body = JSON.parse(text); } catch { return c.json({ error: "invalid JSON" }, 400); }
+    const plan = planStart(body, [repoDir, ...registryRepos()], opts.startBin);
+    if (!plan.ok) return c.json({ error: plan.error }, 400);
+    if (inflight.has(plan.cwd)) return c.json({ error: "a run is already starting or running in this repo" }, 409);
+    inflight.add(plan.cwd);
+    const r = await (opts.spawnImpl ?? spawnStart)(plan.argv, plan.cwd, () => inflight.delete(plan.cwd));
+    if ("error" in r) { inflight.delete(plan.cwd); return c.json({ error: r.error }, 500); }
+    return c.json({ ok: true, pid: r.pid, command: plan.argv.slice(1).join(" ") });
+  });
   // :id is `source:run` (run ids never contain a colon)
   app.get("/v1/runs/:id", (c) => {
     const id = c.req.param("id");

package/packages/control-plane/src/shipper/watch.ts

@@ -0,0 +1,64 @@
+// CP-INGEST: zero-homework ingest. On Control Plane start, backfill the current repo plus every repo in the project
+// registry (~/.loki/dashboard/projects.json), then poll each repo's .loki/runs and ship appended events.jsonl lines
+// through the same shipRun path as the live hook (idempotent: ship.json holds the acked seq, the server dedupes).
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { backfill } from "./backfill.ts";
+import { shipRun, sourceId } from "./ship.ts";
+
+/** Repo dirs from the dashboard project registry; never throws, a missing or corrupt registry means none. */
+export function registryRepos(env: NodeJS.ProcessEnv): string[] {
+  try {
+    const reg = JSON.parse(readFileSync(join(env.HOME || homedir(), ".loki", "dashboard", "projects.json"), "utf8")) as { projects?: Record<string, { path?: unknown }> };
+    return Object.values(reg.projects ?? {}).map((p) => p.path).filter((p): p is string => typeof p === "string" && p.startsWith("/"));
+  } catch { return []; }
+}
+
+export interface WatchOpts {
+  repoDir: string;
+  url: string;
+  env?: NodeJS.ProcessEnv;
+  intervalMs?: number;
+  fetchImpl?: typeof fetch;
+}
+export interface Watcher { stop: () => void; tick: () => Promise<number> }
+
+const sig = (f: string): string => { try { const s = statSync(f); return `${s.size}:${s.mtimeMs}`; } catch { return ""; } };
+
+/** Backfill every repo, then watch. Resolves once the backfill is done; the watcher keeps polling until stop(). */
+export async function ingestAndWatch(o: WatchOpts): Promise<Watcher> {
+  const env: NodeJS.ProcessEnv = { ...(o.env ?? process.env), LOKI_CONTROL_URL: o.url };
+  const repos = [...new Set([o.repoDir, ...registryRepos(env)])];
+  const seen = new Map<string, string>(); // events.jsonl path -> size:mtime last shipped OK
+  for (const repoDir of repos) {
+    try { await backfill({ repoDir, env, attempts: 1, fetchImpl: o.fetchImpl }); } catch { /* one bad repo must not block the rest */ }
+  }
+  let busy = false;
+  const tick = async (): Promise<number> => {
+    if (busy) return 0;
+    busy = true;
+    let sent = 0;
+    try {
+      for (const repoDir of repos) {
+        const root = join(repoDir, ".loki", "runs");
+        let ids: string[] = [];
+        try { ids = readdirSync(root); } catch { continue; }
+        const source = sourceId(repoDir);
+        for (const id of ids) {
+          const runDir = join(root, id), f = join(runDir, "events.jsonl"), s = sig(f);
+          if (s === "" || seen.get(f) === s) continue;
+          try {
+            const r = await shipRun({ runDir, url: o.url, source, token: env.LOKI_CONTROL_TOKEN, fetchImpl: o.fetchImpl });
+            sent += r.sent;
+            if (r.ok) seen.set(f, s);
+          } catch { /* retry next tick */ }
+        }
+      }
+    } finally { busy = false; }
+    return sent;
+  };
+  const timer = setInterval(() => { void tick(); }, o.intervalMs ?? 1000);
+  (timer as { unref?: () => void }).unref?.();
+  return { stop: () => clearInterval(timer), tick };
+}

package/packages/control-plane/ui/dist/assets/index-CUQ65vJY.css

@@ -0,0 +1 @@
+*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-4{margin-bottom:1rem}.mb-6{margin-bottom:1.5rem}.ml-1{margin-left:.25rem}.ml-2{margin-left:.5rem}.ml-auto{margin-left:auto}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-4{margin-top:1rem}.mt-6{margin-top:1.5rem}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.min-h-11{min-height:2.75rem}.min-h-screen{min-height:100vh}.w-full{width:100%}.min-w-0{min-width:0px}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.list-disc{list-style-type:disc}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\[auto_1fr\]{grid-template-columns:auto 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-x-4{-moz-column-gap:1rem;column-gap:1rem}.gap-y-1{row-gap:.25rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.overflow-x-auto{overflow-x:auto}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-slate-200{--tw-border-opacity: 1;border-color:rgb(226 232 240 / var(--tw-border-opacity, 1))}.border-slate-300{--tw-border-opacity: 1;border-color:rgb(203 213 225 / var(--tw-border-opacity, 1))}.bg-amber-500\/15{background-color:#f59e0b26}.bg-emerald-500\/15{background-color:#10b98126}.bg-red-500\/15{background-color:#ef444426}.bg-sky-600{--tw-bg-opacity: 1;background-color:rgb(2 132 199 / var(--tw-bg-opacity, 1))}.bg-slate-100{--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1))}.bg-slate-200{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.bg-slate-500\/15{background-color:#64748b26}.bg-violet-500\/15{background-color:#8b5cf626}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-8{padding:2rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.pl-5{padding-left:1.25rem}.text-left{text-align:left}.text-center{text-align:center}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.text-amber-600{--tw-text-opacity: 1;color:rgb(217 119 6 / var(--tw-text-opacity, 1))}.text-amber-700{--tw-text-opacity: 1;color:rgb(180 83 9 / var(--tw-text-opacity, 1))}.text-emerald-600{--tw-text-opacity: 1;color:rgb(5 150 105 / var(--tw-text-opacity, 1))}.text-emerald-700{--tw-text-opacity: 1;color:rgb(4 120 87 / var(--tw-text-opacity, 1))}.text-red-600{--tw-text-opacity: 1;color:rgb(220 38 38 / var(--tw-text-opacity, 1))}.text-red-700{--tw-text-opacity: 1;color:rgb(185 28 28 / var(--tw-text-opacity, 1))}.text-sky-600{--tw-text-opacity: 1;color:rgb(2 132 199 / var(--tw-text-opacity, 1))}.text-slate-400{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-slate-600{--tw-text-opacity: 1;color:rgb(71 85 105 / var(--tw-text-opacity, 1))}.text-slate-900{--tw-text-opacity: 1;color:rgb(15 23 42 / var(--tw-text-opacity, 1))}.text-violet-700{--tw-text-opacity: 1;color:rgb(109 40 217 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.ring-1{--tw-ring-offset-shadow: var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow: var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000)}.ring-amber-500\/30{--tw-ring-color: rgb(245 158 11 / .3)}.ring-emerald-500\/30{--tw-ring-color: rgb(16 185 129 / .3)}.ring-red-500\/30{--tw-ring-color: rgb(239 68 68 / .3)}.ring-slate-500\/30{--tw-ring-color: rgb(100 116 139 / .3)}.ring-violet-500\/30{--tw-ring-color: rgb(139 92 246 / .3)}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.hover\:underline:hover{text-decoration-line:underline}.disabled\:opacity-50:disabled{opacity:.5}.dark\:border-slate-700:is(.dark *){--tw-border-opacity: 1;border-color:rgb(51 65 85 / var(--tw-border-opacity, 1))}.dark\:border-slate-800:is(.dark *){--tw-border-opacity: 1;border-color:rgb(30 41 59 / var(--tw-border-opacity, 1))}.dark\:bg-slate-800:is(.dark *){--tw-bg-opacity: 1;background-color:rgb(30 41 59 / var(--tw-bg-opacity, 1))}.dark\:bg-slate-900:is(.dark *){--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.dark\:bg-slate-950:is(.dark *){--tw-bg-opacity: 1;background-color:rgb(2 6 23 / var(--tw-bg-opacity, 1))}.dark\:text-amber-300:is(.dark *){--tw-text-opacity: 1;color:rgb(252 211 77 / var(--tw-text-opacity, 1))}.dark\:text-emerald-300:is(.dark *){--tw-text-opacity: 1;color:rgb(110 231 183 / var(--tw-text-opacity, 1))}.dark\:text-emerald-400:is(.dark *){--tw-text-opacity: 1;color:rgb(52 211 153 / var(--tw-text-opacity, 1))}.dark\:text-red-300:is(.dark *){--tw-text-opacity: 1;color:rgb(252 165 165 / var(--tw-text-opacity, 1))}.dark\:text-sky-400:is(.dark *){--tw-text-opacity: 1;color:rgb(56 189 248 / var(--tw-text-opacity, 1))}.dark\:text-slate-100:is(.dark *){--tw-text-opacity: 1;color:rgb(241 245 249 / var(--tw-text-opacity, 1))}.dark\:text-slate-300:is(.dark *){--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.dark\:text-slate-400:is(.dark *){--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.dark\:text-violet-300:is(.dark *){--tw-text-opacity: 1;color:rgb(196 181 253 / var(--tw-text-opacity, 1))}@media(min-width:640px){.sm\:flex{display:flex}.sm\:flex-row{flex-direction:row}.sm\:flex-wrap{flex-wrap:wrap}.sm\:items-end{align-items:flex-end}}@media(min-width:768px){.md\:mb-6{margin-bottom:1.5rem}.md\:ml-0{margin-left:0}.md\:mt-6{margin-top:1.5rem}.md\:block{display:block}.md\:table-cell{display:table-cell}.md\:min-h-0{min-height:0px}.md\:w-48{width:12rem}.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.md\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.md\:flex-row{flex-direction:row}.md\:border-b-0{border-bottom-width:0px}.md\:border-r{border-right-width:1px}.md\:p-4{padding:1rem}.md\:p-6{padding:1.5rem}.md\:px-2{padding-left:.5rem;padding-right:.5rem}.md\:px-3{padding-left:.75rem;padding-right:.75rem}.md\:py-0{padding-top:0;padding-bottom:0}.md\:py-1{padding-top:.25rem;padding-bottom:.25rem}}