loki-mode 10.7.1 → 10.9.1

package/README.md

@@ -310,7 +310,7 @@ The URL comes from `LOKI_CONTROL_URL`, else `http://127.0.0.1:${LOKI_CONTROL_POR
 
 Answering a BLOCKED run: when a run stops on a spec conflict, its run page shows the question and an answer box. Submitting posts to `POST /v1/runs/<source>/<run>/answer` (JSON `{"answer": "..."}`, up to 4000 characters, loopback only) and writes `~/.loki/control/answers/<source>/<run>.answer.txt` (override the directory with `LOKI_CONTROL_ANSWER_DIR`). The page prints the resume command, `loki answer <run>`, which starts a fresh run carrying the task, the question and that file's text (or pass `--text "..."` yourself; with no run id it picks the newest BLOCKED run). A run that is not BLOCKED exits 2.
 
-Set `LOKI_CONTROL_DEFAULT=1` (off by default) to make `loki dashboard`, `loki dashboard start` and `loki dashboard open` start the Control Plane instead of the old dashboard. The old dashboard is unchanged when the flag is unset.
+The Control Plane is the only UI. `loki dashboard`, `loki dashboard start` and `loki dashboard open` open it (starting `loki control serve` if none is running). The classic dashboard UI and its port 57374 are removed in 10.8; see [docs/control-plane-migration.md](docs/control-plane-migration.md) for the route mapping and what is not yet available.
 
 Container, Helm and ECS deployment: [docs/control-plane-container.md](docs/control-plane-container.md).
 
@@ -588,7 +588,7 @@ Legacy engine, being removed (these run on the previous engine; `loki --help` st
 | `loki stop`, `pause`, `resume` | Control a legacy run |
 | `loki steer "<note>"` | Nudge a legacy run (needs `LOKI_PROMPT_INJECTION=1`) |
 | `loki why`, `loki next` | Explain or continue a legacy run |
-| `loki dashboard` | Operations UI server (`start\|stop\|status\|url\|open`) |
+| `loki dashboard` | Open the Control Plane UI (see [docs/control-plane-migration.md](docs/control-plane-migration.md)) |
 | `loki review`, `loki test`, `loki analyze`, `loki memory`, `loki failover`, `loki enterprise`, `loki import`, `loki ci` | Review, test generation, codebase analysis, memory, failover, enterprise, issue import, CI gate |
 | `loki modernize heal <path>` | Legacy system healing |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v10.7.1
+# Loki Mode v10.9.1
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
 
@@ -473,4 +473,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v10.7.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v10.9.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-10.7.1
+10.9.1

package/autonomy/loki

@@ -1981,6 +1981,9 @@ _loki_control_ui() {
             echo "loki: the Control Plane needs bun (https://bun.sh); using the classic dashboard." >&2
             return 1
         fi
+        # FC-07: LOKI_CONTROL=0 is the test off switch (supervisor, run-all-tests, local-ci);
+        # it must never start a detached `control serve` that writes ~/.loki/control.
+        [ "${LOKI_CONTROL:-}" = "0" ] && return 1
         local cli="$SKILL_DIR/loki-ts/dist/loki.js" cdir="${HOME}/.loki/control" spid
         [ -f "$cli" ] || cli="$SKILL_DIR/loki-ts/src/cli.ts"
         mkdir -p "$cdir" && chmod 700 "$cdir" 2>/dev/null || true
@@ -2029,12 +2032,11 @@ cmd_ui() {
             LOKI_DASHBOARD_CORS="http://localhost:$port,http://127.0.0.1:$port" \
             cmd_dashboard_start --host 127.0.0.1 --port "$port" >&2 || return 1
     fi
-    local url="http://127.0.0.1:${port}/start"
-    if [ "${LOKI_HEADLESS:-0}" = "1" ] || [ "${1:-}" = "--no-open" ]; then
-        echo "$url"
-    else
-        loki_open_url "$url" || echo "$url"
-    fi
+    # The classic server is API-only; the UI is the Control Plane.
+    local url="http://127.0.0.1:${port}"
+    echo "loki: the classic dashboard at $url serves the API only (the browser UI moved to the Control Plane)." >&2
+    echo "loki: start the Control Plane UI with: loki ui (needs bun)" >&2
+    echo "$url"
 }
 
 # Tight newcomer landing for the bare `loki` invocation (no args).
@@ -3912,18 +3914,9 @@ cmd_start() {
                 # + cockpit, honoring the card's "open dashboard" promise. The
                 # cockpit hint is printed by _loki_start_handoff for the Both path.
                 args+=("--bg")
-                # Open the URL the runner PUBLISHES for the port it actually bound
-                # or reused (it walks past refused ports); never guess the default
-                # 57374, which may be a foreign or stale dashboard. stdout must
-                # stay unredirected: loki_open_url checks the TTY.
-                local _dfile="${PWD}/.loki/dashboard/url"
-                rm -f "$_dfile" 2>/dev/null
-                (
-                    for _ in $(seq 1 120); do
-                        if [ -s "$_dfile" ]; then loki_open_url "$(head -1 "$_dfile")" 2>/dev/null; exit 0; fi
-                        sleep 0.5
-                    done
-                ) &
+                # The browser UI is the Control Plane; open it (guarded by
+                # loki_open_url: no-op headless and in tests).
+                ( LOKI_UI_NO_CLASSIC=1 cmd_ui 2>/dev/null || true ) &
                 ;;
             launch-bg-watch)
                 # Watch (cockpit only) detaches without opening the browser.
@@ -7558,7 +7551,7 @@ cmd_dashboard_help() {
     echo "  loki dashboard start --tls-cert cert.pem --tls-key key.pem"
     echo "  loki dashboard status                 # Check if running"
     echo "  loki dashboard url --format json      # Get URL as JSON"
-    echo "  loki dashboard open                   # Open in browser"
+    echo "  loki dashboard open                   # Print the Control Plane hint (no browser)"
     echo "  loki dashboard stop                   # Stop server"
 }
 
@@ -7786,7 +7779,7 @@ cmd_dashboard_start() {
         # a second port.
         echo -e "${DIM}Want to submit a spec in the browser? Open the 'Lab' tab in this dashboard.${NC}"
         echo ""
-        echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
+        echo -e "Control Plane UI: ${CYAN}loki ui${NC}"
         echo -e "Check status:    ${CYAN}loki dashboard status${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
     else
@@ -7904,7 +7897,7 @@ cmd_dashboard_status() {
         fi
 
         echo ""
-        echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
+        echo -e "Control Plane UI: ${CYAN}loki ui${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
     else
         echo -e "${YELLOW}Status: Not running (stale PID file)${NC}"
@@ -8037,14 +8030,10 @@ cmd_dashboard_open() {
 
     local url="${scheme}://${host}:${port}"
 
-    echo -e "${GREEN}Opening dashboard: $url${NC}"
-
-    # Open in browser (cross-platform, guarded: no-op in tests/CI/non-TTY)
-    if ! loki_open_url "$url" 2>/dev/null; then
-        echo ""
-        echo "Browser not opened (headless, test, or no opener)."
-        echo "Please open in browser: $url"
-    fi
+    # The legacy browser UI was removed; this server is API-only. Never open a
+    # browser here: point at the Control Plane instead.
+    echo -e "${YELLOW}The dashboard server at $url serves the API only; the browser UI is now the Control Plane.${NC}"
+    echo -e "Open the Control Plane with: ${CYAN}loki ui${NC}"
 }
 
 # Welcome opener (the "magic opener"). Shows a branded welcome page in the
@@ -18398,8 +18387,7 @@ print(json.dumps({'id': manifest.id, 'dir': str(pipeline.migration_dir)}))
 
                     sleep 2
                     if kill -0 "$migrate_dashboard_pid" 2>/dev/null; then
-                        echo -e "  Dashboard:   ${CYAN}${url_scheme}://127.0.0.1:${dashboard_port}/${NC}"
-                        loki_open_url "${url_scheme}://127.0.0.1:${dashboard_port}/" 2>/dev/null || true
+                        echo -e "  Dashboard API: ${CYAN}${url_scheme}://127.0.0.1:${dashboard_port}/${NC} (UI: loki ui)"
                         echo ""
                     else
                         echo -e "  ${YELLOW}Dashboard failed to start (check logs)${NC}"
@@ -21331,7 +21319,7 @@ tokens_per_tier = {
 pricing = {
     'Fable':  {'input': 10.00, 'output': 50.00},
     'Opus':   {'input': 5.00, 'output': 25.00},
-    'Sonnet': {'input': 3.00, 'output': 15.00},
+    'Sonnet': {'input': 2.00, 'output': 10.00},
     'Haiku':  {'input': 1.00, 'output': 5.00},
 }
 

package/autonomy/run.sh

@@ -7581,7 +7581,7 @@ _write_pricing_json() {
     "fable":           {"input": 10.00, "output": 50.00, "label": "Fable 5 (top, 2x Opus)", "provider": "claude"},
     "claude-fable-5":  {"input": 10.00, "output": 50.00, "label": "Fable 5 (top, 2x Opus)", "provider": "claude"},
     "opus":            {"input": 5.00,  "output": 25.00, "label": "Opus (latest)",   "provider": "claude"},
-    "sonnet":          {"input": 3.00,  "output": 15.00, "label": "Sonnet (latest)", "provider": "claude"},
+    "sonnet":          {"input": 2.00,  "output": 10.00, "label": "Sonnet (latest)", "provider": "claude"},
     "haiku":           {"input": 1.00,  "output": 5.00,  "label": "Haiku (latest)",  "provider": "claude"},
     "gpt-5.3-codex":   {"input": 1.75,  "output": 14.00, "label": "GPT-5.3 Codex", "provider": "codex"}
   }
@@ -20250,7 +20250,7 @@ pricing = {
     'fable': {'input': 10.00, 'output': 50.00},
     'claude-fable-5': {'input': 10.00, 'output': 50.00},
     'opus': {'input': 5.00, 'output': 25.00},
-    'sonnet': {'input': 3.00, 'output': 15.00},
+    'sonnet': {'input': 2.00, 'output': 10.00},
     'haiku': {'input': 1.00, 'output': 5.00},
     'gpt-5.3-codex': {'input': 1.75, 'output': 14.00},
     'gpt-5.6-sol': {'input': 2.50, 'output': 20.00},
@@ -24828,10 +24828,14 @@ except Exception:
     if [[ "${ENABLE_DASHBOARD:-true}" == "true" ]] && command -v curl &>/dev/null; then
         local project_cwd
         project_cwd="$(pwd)"
-        curl -sf -X POST "http://127.0.0.1:${DASHBOARD_PORT}/api/focus" \
+        # CPE-24: the Control Plane answers 501 (no focus API). Best-effort; say so
+        # honestly in debug output rather than treating the miss as an error.
+        _focus_code="$(curl -s -o /dev/null -w '%{http_code}' -X POST "http://127.0.0.1:${DASHBOARD_PORT}/api/focus" \
             -H "Content-Type: application/json" \
-            -d "{\"project_dir\": \"${project_cwd}\"}" \
-            >/dev/null 2>&1 || true
+            -d "{\"project_dir\": \"${project_cwd}\"}" 2>/dev/null || true)"
+        case "$_focus_code" in
+            501|410) type log_debug >/dev/null 2>&1 && log_debug "project focus: not available on the Control Plane (HTTP ${_focus_code})" ;;
+        esac
     fi
 
     # Initialize Cross-Provider Failover (v6.19.0)

package/autonomy/tui.sh

@@ -24,7 +24,11 @@ TUI_HAS_COLOR=false
 TUI_COLS=80
 if [ -t 1 ]; then
     TUI_HAS_COLOR=true
-    TUI_COLS=$(tput cols 2>/dev/null || echo 80)
+    # FC-10: tput can print 0 or nothing on a pty with no size; fall back to COLUMNS, then 80
+    TUI_COLS=$(tput cols 2>/dev/null || true)
+    case "$TUI_COLS" in '' | *[!0-9]*) TUI_COLS="${COLUMNS:-80}" ;; esac
+    case "$TUI_COLS" in '' | *[!0-9]*) TUI_COLS=80 ;; esac
+    [ "$TUI_COLS" -ge 40 ] || TUI_COLS=80
 fi
 
 # Unicode box drawing (degrade to ASCII if terminal doesn't support)

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "10.7.1"
+__version__ = "10.9.1"
 
 # Expose the control app for easy import
 try:

package/dashboard/api_phases.py

@@ -1,6 +1,6 @@
 """Read-only phase history for a run, derived from real `phase_change` events.
 
-WHY THIS EXISTS. dashboard-ui/components/loki-session-timeline.js SYNTHESIZED
+WHY THIS EXISTS. The legacy dashboard session timeline (removed in CPE-24) SYNTHESIZED
 its timeline. It took a scalar status (uptime, current phase, iteration count),
 rotated a fixed list `['planning','building','testing','reviewing']`, and gave
 each invented segment a randomized duration:

package/dashboard/api_start.py

@@ -37,7 +37,6 @@ from . import auth
 logger = logging.getLogger(__name__)
 router = APIRouter(tags=["start"])
 
-START_HTML = os.path.join(os.path.dirname(os.path.abspath(__file__)), "static", "start.html")
 _LOKI_BIN = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), "bin", "loki")
 _REPO_RE = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
 _TOKEN_RE = re.compile(r"^[A-Za-z0-9_\-]{10,255}$")

package/dashboard/server.py

@@ -1149,14 +1149,8 @@ app.add_middleware(
     allow_headers=["Content-Type", "Authorization", "X-Requested-With"],
 )
 
-# RESPONSE COMPRESSION. Measured, not assumed: the served dashboard bundle
-# (dashboard/static/index.html) is 779,725 bytes raw and 150,341 gzipped --
-# an 81% reduction. Until now only CORS and the collab WS auth middleware were
-# registered, so every dashboard load shipped the full 780KB.
-#
-# That single fact is the most plausible cause of "the dashboard feels slow":
-# it is not a rendering problem, it is 630KB of avoidable transfer on first
-# paint, and it costs one middleware to fix.
+# RESPONSE COMPRESSION. Large JSON API payloads compress well, and it costs one
+# middleware. (The legacy single-file UI bundle that motivated it was removed.)
 #
 # minimum_size=1024 leaves small JSON responses uncompressed, where the CPU
 # round-trip outweighs the saving. GZipMiddleware is stdlib-backed and does
@@ -1360,16 +1354,12 @@ else:
     app.include_router(api_operator_router)
 
 # D51 Phase A: first-run onboarding + backlog API and its /start page.
-from .api_start import router as api_start_router, START_HTML as _START_HTML
+from .api_start import router as api_start_router
 app.include_router(api_start_router)
 from .api_runs_v1 import router as api_runs_v1_router
 app.include_router(api_runs_v1_router)
 
 
-@app.get("/start", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_start_page():
-    return FileResponse(_START_HTML, media_type="text/html")
-
 
 # Phase Merge-4: Mount Purple Lab FastAPI app under /lab/ so it appears as a
 # sidebar entry in Dashboard. Same `app` is also wrapped by `standalone_app`
@@ -7752,7 +7742,7 @@ _DEFAULT_PRICING = {
     "fable":  {"input": 10.00, "output": 50.00},
     "claude-fable-5": {"input": 10.00, "output": 50.00},
     "opus":   {"input": 5.00, "output": 25.00},
-    "sonnet": {"input": 3.00, "output": 15.00},
+    "sonnet": {"input": 2.00, "output": 10.00},
     "haiku":  {"input": 1.00, "output": 5.00},
     # OpenAI Codex
     "gpt-5.3-codex": {"input": 1.50, "output": 12.00},
@@ -8587,18 +8577,16 @@ _PROVIDER_LABELS = {
 }
 
 # Display-only pricing notes, keyed by model. These annotate the pricing table in
-# the UI WITHOUT changing any computed cost number. The Sonnet 5 launch carries an
-# intro price ($2/$10 per MTok through Aug 31 2026), but the cost estimator keeps
-# quoting the standard $3/$15 rate: over-estimating the display is the safe
-# direction (a bill can only come in lower than quoted, never higher). This note
-# tells the user why the quote is conservative during the intro window.
+# the UI WITHOUT changing any computed cost number. The Sonnet 5 intro price
+# ($2/$10 per MTok) became the standard price, so the 2026-09-01 increase to
+# $3/$15 will not occur (platform.claude.com pricing page, read 2026-10-03).
 _UNVERIFIED_RATE_NOTE = (
     "Unverified placeholder rate, scaled from gpt-5.3; not from OpenAI's pricing page."
 )
 _MODEL_PRICING_NOTES = {
     "sonnet": (
-        "Intro pricing: $2 / $10 per MTok through Aug 31 2026. "
-        "Estimates use the standard $3 / $15 rate (conservative)."
+        "Standard pricing: $2 / $10 per MTok. "
+        "The intro price became the standard price; no increase to $3 / $15."
     ),
     # See the UNVERIFIED RATES comment on the pricing table: shown, not hidden.
     "gpt-5.6-sol": _UNVERIFIED_RATE_NOTE,
@@ -11581,49 +11569,11 @@ def optimize_prompts(sessions: int = 10, dry_run: bool = True):
 
 from fastapi.responses import FileResponse, HTMLResponse
 
-# Find static files in multiple possible locations
 DASHBOARD_DIR = os.path.dirname(os.path.abspath(__file__))
 PROJECT_ROOT = os.path.dirname(DASHBOARD_DIR)
 
-# Possible static file locations (in order of preference)
-# Resolves correctly regardless of PYTHONPATH, symlinks, or install method
-def _static_candidates(skill_dir=None, home=None):
-    """Static dirs in preference order: package, LOKI_SKILL_DIR, ~/.claude skill, dev build."""
-    skill_dir = os.environ.get("LOKI_SKILL_DIR", "") if skill_dir is None else skill_dir
-    home_skill = os.path.join(home or os.path.expanduser("~"), ".claude", "skills", "loki-mode")
-    cands = [os.path.join(DASHBOARD_DIR, "static")]
-    if skill_dir:
-        cands.append(os.path.join(skill_dir, "dashboard", "static"))
-    cands.append(os.path.join(home_skill, "dashboard", "static"))
-    cands.append(os.path.join(PROJECT_ROOT, "dashboard-ui", "dist"))
-    if skill_dir:
-        cands.append(os.path.join(skill_dir, "dashboard-ui", "dist"))
-    cands.append(os.path.join(home_skill, "dashboard-ui", "dist"))
-    return cands
-
-
-def _pick_static_dir(candidates):
-    """First candidate that CONTAINS index.html; an empty or partial dir must not win."""
-    for loc in candidates:
-        if os.path.isfile(os.path.join(loc, "index.html")):
-            return loc
-    return None
-
-
-STATIC_LOCATIONS = _static_candidates()
-STATIC_DIR = _pick_static_dir(STATIC_LOCATIONS)
-if STATIC_DIR:
-    logger.info("Dashboard frontend served from: %s", STATIC_DIR)
-else:
-    logger.warning("Dashboard frontend NOT found (looked in %s); serving built-in fallback page", STATIC_LOCATIONS)
-
-if STATIC_DIR:
-    from fastapi.staticfiles import StaticFiles
-
-    # Check if assets directory exists (built frontend)
-    ASSETS_DIR = os.path.join(STATIC_DIR, "assets")
-    if os.path.isdir(ASSETS_DIR):
-        app.mount("/assets", StaticFiles(directory=ASSETS_DIR), name="assets")
+DASHBOARD_DIR = os.path.dirname(os.path.abspath(__file__))
+PROJECT_ROOT = os.path.dirname(DASHBOARD_DIR)
 
 # ---------------------------------------------------------------------------
 # Activity Logger & Session Diff
@@ -11684,75 +11634,29 @@ async def log_activity(entry: dict):
     return result
 
 
-# Serve favicon.svg from static directory
-@app.get("/favicon.svg", include_in_schema=False)
-async def serve_favicon():
-    """Serve the dashboard favicon."""
-    if STATIC_DIR:
-        favicon_path = os.path.join(STATIC_DIR, "favicon.svg")
-        if os.path.isfile(favicon_path):
-            return FileResponse(favicon_path, media_type="image/svg+xml")
-    return Response(status_code=404)
-
-
-# Serve the self-contained cost + observability panel (R3). Zero-build
-# standalone page that fetches /api/cost/timeline. Mirrors the proofs.html
-# pattern: works without the SPA build.
-@app.get("/cost", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_cost_panel():
-    """Serve the standalone cost + observability HTML panel."""
-    if STATIC_DIR:
-        cost_path = os.path.join(STATIC_DIR, "cost.html")
-        if os.path.isfile(cost_path):
-            return FileResponse(cost_path, media_type="text/html")
-    return Response(status_code=404)
-
-
-# R4: standalone trust-trajectory page that fetches /api/trust/trajectory.
-# Mirrors the cost.html / /cost pattern: works without the SPA build.
-@app.get("/trust", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_trust_panel():
-    """Serve the standalone trust-trajectory HTML panel."""
-    if STATIC_DIR:
-        trust_path = os.path.join(STATIC_DIR, "trust.html")
-        if os.path.isfile(trust_path):
-            return FileResponse(trust_path, media_type="text/html")
-    return Response(status_code=404)
-
-
-# Serve index.html or standalone HTML for root
+# The legacy dashboard UI was removed (CPE-24). The Control Plane serves the UI;
+# this server keeps only the /api/* routes that have no Control Plane home yet.
 @app.get("/", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
 async def serve_index():
-    """Serve the frontend SPA or standalone HTML."""
-    # Try multiple index file locations
-    index_candidates = []
-    if STATIC_DIR:
-        index_candidates.append(os.path.join(STATIC_DIR, "index.html"))
-        index_candidates.append(os.path.join(STATIC_DIR, "loki-dashboard-standalone.html"))
+    """Tell a browser where the UI moved; never serve developer JSON to it."""
+    return HTMLResponse(content=_moved_page(), status_code=410)
 
-    # Also check dashboard-ui directly for standalone
-    standalone_path = os.path.join(PROJECT_ROOT, "dashboard-ui", "dist", "loki-dashboard-standalone.html")
-    if standalone_path not in index_candidates:
-        index_candidates.append(standalone_path)
 
-    for index_path in index_candidates:
-        if os.path.isfile(index_path):
-            return FileResponse(index_path, media_type="text/html")
-
-    # No frontend anywhere: a browser must never see developer JSON.
-    return HTMLResponse(content=_fallback_page(), status_code=503)
-
-
-def _fallback_page() -> str:
+def _moved_page() -> str:
     import html as _html
+    cp = os.environ.get("LOKI_CONTROL_PLANE_URL", "").strip()
+    where = (
+        f'<p>Control Plane: <a href="{_html.escape(cp, quote=True)}">{_html.escape(cp)}</a></p>'
+        if cp.startswith(("http://", "https://"))
+        else "<p>Run <code>loki ui</code> to open the Control Plane.</p>"
+    )
     return (
         '<!doctype html><html lang="en"><head><meta charset="utf-8">'
-        "<title>Loki Mode Dashboard</title></head>"
+        "<title>Loki Mode API</title></head>"
         '<body style="font-family:system-ui,sans-serif;max-width:40rem;margin:4rem auto;padding:0 1rem">'
-        "<h1>Loki Mode dashboard UI is not installed</h1>"
-        f"<p>The dashboard API is running (version {_html.escape(str(_version))}) "
-        "but this install has no frontend files.</p>"
-        "<p>Reinstall to fix it:</p><pre>npm install -g loki-mode@latest</pre>"
+        "<h1>The dashboard UI moved to the Control Plane</h1>"
+        f"<p>This server (version {_html.escape(str(_version))}) now serves the /api routes only.</p>"
+        f"{where}"
         '<p><a href="/docs">API docs</a> | <a href="/health">Health</a></p>'
         "</body></html>"
     )
@@ -13101,40 +13005,18 @@ async def post_wiki_ask(req: WikiAskRequest):
 
 
 # ---------------------------------------------------------------------------
-# SPA catch-all: serve index.html for any path not matched by API routes
-# or static asset mounts.  This lets the dashboard UI handle client-side routing.
+# Catch-all: unknown paths are real 404s (the SPA was removed, CPE-24).
 # Must be registered LAST so it never shadows an API endpoint.
 # ---------------------------------------------------------------------------
 @app.get("/{full_path:path}", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
 async def serve_spa_catchall(full_path: str):
-    """Serve static files or fall back to index.html for SPA routing.
-
-    v7.6.1 B-10 fix: requests under /api/, /lab/api/, or /ws/ that fall through
-    here are missing routes, not SPA navigation. Returning index.html (text/html)
-    silently masks 404s and breaks JSON clients (the dashboard UI's loki-memory-browser
-    pinged /api/learning/metrics expecting JSON and got an HTML SPA on prior
-    failures). Return a JSON 404 instead so clients fail loud.
-    """
-    # API paths that fell through are real 404s, not SPA routes.
+    """Return a JSON 404 for API-like paths so JSON clients fail loud, else a bare 404."""
     api_like = full_path.startswith("api/") or full_path.startswith("lab/api/") or full_path.startswith("ws/")
     if api_like:
         return JSONResponse(
             status_code=404,
             content={"error": "Not Found", "path": f"/{full_path}"},
         )
-    if STATIC_DIR:
-        static_root = os.path.realpath(STATIC_DIR)
-        # Try to serve the exact file first (e.g. /vite.svg, /manifest.json)
-        # Use realpath to prevent path traversal attacks
-        candidate = os.path.realpath(os.path.join(STATIC_DIR, full_path))
-        if not candidate.startswith(static_root + os.sep) and candidate != static_root:
-            return Response(status_code=404)
-        if os.path.isfile(candidate):
-            return FileResponse(candidate)
-        # Fall back to index.html for client-side routes
-        index_path = os.path.join(STATIC_DIR, "index.html")
-        if os.path.isfile(index_path):
-            return FileResponse(index_path, media_type="text/html")
     return Response(status_code=404)
 
 

package/docs/COCKPIT-SPEC.md

@@ -1,5 +1,7 @@
 # Loki Cockpit (rec #6) - build spec
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 Status: IN BUILD (v7.126.0 target). Design approved via mockup
 (scratchpad/loki-cockpit.html). Grounded in real engine state + Autonomi identity.
 
@@ -59,7 +61,7 @@ No chafa / no headless Chrome hard dependency. Pipeline:
 - S3 (render pipeline): SVG-from-state builder + SVG->PNG + terminal-image
   encoder + capability detection + fallback. Tests (encoder byte-shape, detection).
 - S4 (dashboard identity redesign): apply logo/purple/fonts/multi-repo switcher to
-  dashboard-ui; rebuild dist. Lightweight gate.
+  legacy-ui; rebuild dist. Lightweight gate.
 - S5 (docs + wiki + release): help text, README, wiki, CHANGELOG, 14 version files.
 
 ## Constraints

package/docs/DASHBOARD-9.12-EVIDENCE.md

@@ -28,7 +28,7 @@ carries a `reason`, an unmeasured number reads `None` rather than `0`, and
 | `source` | 10 of 43 | Most rows cannot be audited back to the file they came from |
 
 ```bash
-cd dashboard-ui
+cd legacy-ui
 grep -l "freshness_s" components/*.js core/*.js | wc -l   # 0
 grep -l "measured"    components/*.js core/*.js | wc -l   # 0
 ```

package/docs/DASHBOARD-ARCHITECTURE.md

@@ -1,5 +1,7 @@
 # Dashboard Architecture: Real-Data, Near-Realtime
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 Design only. No implementation in this document.
 
 Status: proposal. Measured against the worktree at
@@ -41,7 +43,7 @@ brief's number and my measurement disagree, both are shown.
 
 One correction against myself: my first pass reported `0` aria attributes in the
 built artifact and I nearly wrote that up as a shipped accessibility regression.
-It was a measurement error. `dashboard/static/index.html` has lines long enough
+It was a measurement error. `legacy-ui-static/index.html` has lines long enough
 (577 chars plus minified runs) that `grep` treated the file as binary and
 suppressed output. With `grep -a` the brief's numbers are confirmed. This is the
 `grep-absence false-green` failure mode: an empty result was an absent
@@ -178,7 +180,7 @@ machine-checkable instead of a naming habit.
   `/api/health/processes`.
 
 Built artifact realtime constructs: 9
-(`grep -oaE "new WebSocket|EventSource|setInterval" dashboard/static/index.html | wc -l`).
+(`grep -oaE "new WebSocket|EventSource|setInterval" legacy-ui-static/index.html | wc -l`).
 The brief's "34 realtime constructs" is not reproducible by any pattern I tried;
 I mark that figure **not independently verified** rather than repeat it.
 
@@ -234,8 +236,8 @@ The bundle is 779,725 bytes raw, 150,341 gzipped
 gzip stays; nothing in this design touches it.
 
 **Progressive disclosure here cannot mean code-splitting.**
-`dashboard-ui/scripts/build-standalone.js` produces a single self-contained
-file with zero runtime dependencies, written to both `dashboard/static/` and
+`legacy-ui/scripts/build-standalone.js` produces a single self-contained
+file with zero runtime dependencies, written to both `legacy-ui-static/` and
 `dist/`. That property is why the dashboard works offline and inside Docker
 without a CDN. Splitting the bundle would trade a real capability for a
 transfer-size win that gzip has already mostly taken (5.2x). So disclosure is
@@ -265,12 +267,12 @@ Measured on the shipped artifact with `grep -a`:
 
 | Property | Count | Command |
 |---|---|---|
-| Custom elements registered | 39 | `grep -oa "customElements.define" dashboard/static/index.html \| wc -l` |
+| Custom elements registered | 39 | `grep -oa "customElements.define" legacy-ui-static/index.html \| wc -l` |
 | `aria-*` attributes | 100 | `grep -oa "aria-[a-z]*=" ... \| wc -l` |
 | `aria-` occurrences | 113 | `grep -oa "aria-" ... \| wc -l` |
 | `role="` | 38 | `grep -oa 'role="' ... \| wc -l` |
 | `@media` breakpoints | 13 | `grep -oa "@media" ... \| wc -l` |
-| Component source files | 43 | `ls dashboard-ui/components \| grep -v vendor \| wc -l` |
+| Component source files | 43 | `ls legacy-ui/components \| grep -v vendor \| wc -l` |
 | Registrations in source | 44 | `grep -roha "customElements.define" components core \| wc -l` |
 
 The brief's 113 aria and 41 role are consistent with mine within pattern choice
@@ -278,7 +280,7 @@ The brief's 113 aria and 41 role are consistent with mine within pattern choice
 figure is 43 files carrying 44 registrations, not 46.
 
 **One gap worth noting:** source registers 44 custom elements, the shipped
-artifact registers 39. Five components exist in `dashboard-ui/` and do not reach
+artifact registers 39. Five components exist in `legacy-ui/` and do not reach
 the browser. This is out of scope for this document and I did not chase it, but
 it is recorded here because it means the source tree is not a reliable proxy for
 what ships. All acceptance criteria in section 5 therefore measure the **built
@@ -369,10 +371,10 @@ Every row is measurable by a command. No aspirational entries.
 |---|---|---|---|
 | A1 | No route regression | `grep -cE '^@app\.(get\|post\|put\|delete\|patch\|websocket)' dashboard/server.py` | >= 165 |
 | A2 | api_v2 routes intact | `grep -cE '@router\.(get\|post\|put\|delete)' dashboard/api_v2.py` | >= 24 |
-| A3 | Accessibility not regressed | `grep -oa "aria-" dashboard/static/index.html \| wc -l` | >= 113 |
-| A4 | Roles not regressed | `grep -oa 'role="' dashboard/static/index.html \| wc -l` | >= 38 |
-| A5 | Custom elements not regressed | `grep -oa "customElements.define" dashboard/static/index.html \| wc -l` | >= 39 |
-| A6 | Breakpoints not regressed | `grep -oa "@media" dashboard/static/index.html \| wc -l` | >= 13 |
+| A3 | Accessibility not regressed | `grep -oa "aria-" legacy-ui-static/index.html \| wc -l` | >= 113 |
+| A4 | Roles not regressed | `grep -oa 'role="' legacy-ui-static/index.html \| wc -l` | >= 38 |
+| A5 | Custom elements not regressed | `grep -oa "customElements.define" legacy-ui-static/index.html \| wc -l` | >= 39 |
+| A6 | Breakpoints not regressed | `grep -oa "@media" legacy-ui-static/index.html \| wc -l` | >= 13 |
 | A7 | gzip still active | `grep -c "GZipMiddleware" dashboard/server.py` | >= 1 |
 | A8 | Zero runtime dependencies | Built artifact contains no external script/CDN src | 0 external hosts |
 | A9 | Runs store is written by the engine | Drive the lifecycle writer directly (source `run.sh`, call the phase-boundary function), then `GET /api/v2/runs`. No provider call, no spend | Returns >= 1 record with a real run id |

package/docs/DASHBOARD_V2_CHECKLIST.md

@@ -1,5 +1,7 @@
 # Loki Mode Dashboard V2 - Implementation Checklist
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 ## Overview
 Enterprise-grade Kanban dashboard with FastAPI backend, cross-project support, and CLI integration.