loki-mode 10.7.1 → 10.9.1

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v10.7.1
+**Version:** v10.9.1
 
 **Engine note:** `loki "<task>"`, `loki owner/repo#N` and `loki quick` run the Loki 10 engine. `loki start` still routes to the legacy engine, which is being removed (planned work resumes 2026-10-07); prefer `loki owner/repo#N`. See [docs/v10/GUIDE.md](v10/GUIDE.md).
 
@@ -294,7 +294,7 @@ trade-offs.
 ## VS Code Extension (Deprecated)
 
 > **DEPRECATED as of v7.2.0.** The Loki Mode VS Code extension is no longer
-> maintained. Use the dashboard at `loki dashboard start` instead.
+> maintained. Use the Control Plane (`loki dashboard`) instead.
 >
 > The marketplace listing remains for users on v7.2.0 and earlier but will
 > not receive further updates. The `vscode-extension/` source remains in the
@@ -305,8 +305,8 @@ trade-offs.
 ### Recommended replacement: the dashboard
 
 ```bash
-loki dashboard start
-# Then open http://localhost:57374 in your browser.
+loki dashboard
+# Opens the Control Plane (default http://127.0.0.1:47821).
 ```
 
 The dashboard provides session monitoring, task views, the completion
@@ -450,7 +450,7 @@ behave exactly like the local `loki` CLI. Auth is auto-detected:
 (Max/Pro subscribers need no API key), else an honest error with guidance. It
 also forwards `~/.gitconfig` and `~/.config/gh` (read-only) plus
 `GITHUB_TOKEN`/`GH_TOKEN` if set, so commits and PRs work like local, and
-exposes the dashboard on port 57374. Use `--image IMG` to override the image.
+exposes the API on port 57374. Use `--image IMG` to override the image.
 
 `loki docker` is a thin host wrapper around the image; it requires loki and
 Docker installed on the host.
@@ -459,7 +459,7 @@ Multi-repo + unified dashboard: you can run `loki docker start` in several
 different repos at once, exactly like the host CLI. Each repo gets its own
 container (deterministic name `loki-<hash-of-path>`) and its own bind-mounted
 `.loki/` state. Every `loki docker` project registers with the host dashboard,
-so running `loki dashboard` on the host shows ALL your projects in one unified
+so running `loki dashboard` on the host (the Control Plane) shows ALL your projects in one unified
 view, whether they run via local `loki start` or via `loki docker start`. Builds
 run with the dashboard off by default (so concurrent runs do not collide on port
 57374); use the host `loki dashboard`, or `loki docker start --api` for a single
@@ -775,11 +775,12 @@ Loki Mode uses two network ports for different services:
 
 | Port | Service | Description |
 |------|---------|-------------|
-| **57374** | Dashboard + API (FastAPI) | Unified server serving both the web dashboard UI (real-time monitoring, task board, Completion Council, memory browser, log streaming) and the REST API (used by CLI tools, programmatic access, and the deprecated VS Code extension). Served by `dashboard/server.py`. |
+| **47821** | Control Plane UI + API | The only UI, plus the `/v1/*` API. Started by `loki control serve` or `loki dashboard`. See [control-plane-migration.md](control-plane-migration.md). |
+| **57374** | Legacy API (FastAPI) | The classic dashboard UI is removed in 10.8; this port no longer serves a UI. |
 
 ### When to Use Which Port
 
-- **Browser access** (dashboard, monitoring): Use port **57374** -- `http://localhost:57374`
+- **Browser access** (UI, monitoring): Use the Control Plane, port **47821** -- `http://127.0.0.1:47821`
 - **API calls** (REST, programmatic): Use port **57374** -- `http://localhost:57374`
 - **VS Code extension** (deprecated as of v7.2.0): Connects to API on port **57374** automatically (configurable via `loki.apiPort` setting). No new releases will be published; see the deprecation notice above.
 - The server is started automatically when you run `loki start` or `./autonomy/run.sh`. No manual configuration is needed.
@@ -787,8 +788,8 @@ Loki Mode uses two network ports for different services:
 ### Port Configuration
 
 ```bash
-# Dashboard port (default: 57374)
-LOKI_DASHBOARD_PORT=57374 loki dashboard start
+# Control Plane port (default: 47821)
+loki control serve --port 47821
 
 # API port (default: 57374)
 loki api start --port 57374   # was: loki serve
@@ -796,7 +797,7 @@ loki api start --port 57374   # was: loki serve
 
 ### CORS Configuration
 
-For remote or cross-origin access to the dashboard, configure allowed origins via the `LOKI_DASHBOARD_CORS` environment variable:
+The Control Plane has no CORS setting and requires a loopback Host header unless it is bound to a non-loopback address with `LOKI_CONTROL_TOKEN` set (see [control-plane-migration.md](control-plane-migration.md)). The `LOKI_DASHBOARD_CORS` variable below applies only to the legacy API server:
 
 ```bash
 # Allow specific origins

package/docs/MERGE-DEDUP-MAP.md

@@ -362,7 +362,7 @@ class FileEventDebouncer(FileSystemEventHandler):
 ### What Was NOT Audited (and Why)
 
 1. **Frontend code duplication** (TypeScript/React):
-   - Dashboard UI (`dashboard-ui/src/`) and Lab UI (`web-app/dist/` or source) likely have overlapping components (session cards, status displays, log viewers).
+   - Dashboard UI (`legacy-ui/src/`) and Lab UI (`web-app/dist/` or source) likely have overlapping components (session cards, status displays, log viewers).
    - Scope: This audit covers Python backend only. Frontend audit deferred to UI design review in Merge-3 (Vite rebuild).
 
 2. **Database schema migrations and compatibility:**

package/docs/MERGE-ROUTE-MAP.md

@@ -30,7 +30,7 @@ This document is the source-of-truth route-collision analysis for the Purple Lab
 | Method | Path | Dashboard purpose | Purple Lab purpose | Resolution |
 |---|---|---|---|---|
 | `GET` | `/health` | Dashboard health check | Purple Lab health check | Single `/health` on Dashboard wins. Lab's becomes `/lab/health`. |
-| `GET` | `/{full_path:path}` | Dashboard SPA catch-all (serves `dashboard/static/index.html`) | Purple Lab SPA catch-all (serves `web-app/dist/index.html`) | Dashboard catch-all wins at root. Lab's becomes `/lab/{full_path:path}` -- triggered only inside the mount. |
+| `GET` | `/{full_path:path}` | Dashboard SPA catch-all (serves `legacy-ui-static/index.html`) | Purple Lab SPA catch-all (serves `web-app/dist/index.html`) | Dashboard catch-all wins at root. Lab's becomes `/lab/{full_path:path}` -- triggered only inside the mount. |
 | `WS` | `/ws` | Dashboard WebSocket bus | Purple Lab WebSocket bus | Dashboard `/ws` wins. Lab's becomes `/lab/ws`. Long term: unify into a single bus (Phase Merge-5). |
 
 All three collisions resolve automatically when Lab's FastAPI app is mounted at `/lab` via Starlette `app.mount("/lab", purple_lab_app)`. No code dedup needed in Merge-1 -- the mount provides path isolation.

package/docs/MERGE3-PLAN.md

@@ -68,7 +68,7 @@ Change the `open` URL from `http://127.0.0.1:${PURPLE_LAB_DEFAULT_PORT}/` to `ht
 ## Release Pipeline Wiring
 
 ### 7. Root `package.json` `prepublishOnly` (line ~106)
-Append `&& cd ../web-app && npm ci && npm run build && test -f dist/index.html` after the existing dashboard-ui build.
+Append `&& cd ../web-app && npm ci && npm run build && test -f dist/index.html` after the existing legacy-ui build.
 
 ### 8. `Dockerfile`
 Add `COPY` for web-app build artifacts + server files. Mirror the `dashboard/` COPY pattern. (Merge-4 owns the actual import; Merge-3 ensures files are in the image.)
@@ -109,7 +109,7 @@ run_check "web-app build produces /lab/-prefixed assets" \
 ## NOT Done In This Phase
 
 - Auto-spawn web-app subprocess from `loki dashboard` (Merge-4).
-- Sidebar entry in `dashboard/static/index.html` (Merge-6).
+- Sidebar entry in `legacy-ui-static/index.html` (Merge-6).
 - Deep state dedup (Merge-5).
 - Deprecation of `loki web` (Merge-7).
 - `vite-plugin-html` dev `/` -> `/lab/` redirect (nice-to-have, not blocking).

package/docs/R3-COST-OBSERVABILITY-DESIGN.md

@@ -90,7 +90,7 @@ Read-only. Returns two honest series plus a budget block:
 `/api/cost` and `/api/budget` are left UNCHANGED (existing frontend + tests
 depend on them). The new endpoint is additive.
 
-### 2. Dashboard panel: `dashboard/static/cost.html`
+### 2. Dashboard panel: `legacy-ui-static/cost.html`
 
 Self-contained, zero-build, all CSS+JS inlined (mirrors `proofs.html`). Fetches
 `/api/cost/timeline`. Shows: project total, budget gauge with a colored
@@ -144,7 +144,7 @@ Add a non-pausing warn when crossing 80%, keep the 100% pause:
 ## Files (for the integrator to cherry-pick)
 
 - `dashboard/server.py` (add `/api/cost/timeline`)
-- `dashboard/static/cost.html` (new)
+- `legacy-ui-static/cost.html` (new)
 - `autonomy/loki` (add `cmd_cost` + dispatch + help)
 - `autonomy/run.sh` (warn-at-80% in `check_budget_limit`)
 - `loki-ts/src/runner/budget.ts` (warn flag)

package/docs/R4-TRUST-TRAJECTORY-DESIGN.md

@@ -94,7 +94,7 @@ is always recomputable from `.loki/proofs/`. Deleting it loses nothing.
    `/api/cost/timeline`). Reads `.loki/proofs/*/proof.json`, returns the
    per-run series + per-axis direction + insufficient flag.
 
-3. Dashboard panel: standalone `dashboard/static/trust.html` + `/trust` route
+3. Dashboard panel: standalone `legacy-ui-static/trust.html` + `/trust` route
    (mirrors `cost.html` + `/cost`), plus a nav entry and SPA section in
    `build-standalone.js` (mirrors the cost panel wiring exactly).
 

package/docs/R5-AUTO-WIKI-DESIGN.md

@@ -21,7 +21,7 @@ the codebase has not changed (reuses the R1 codebase-signature idea).
 | Org knowledge graph | `memory/knowledge_graph.py` (`OrganizationKnowledgeGraph`) | Token-overlap scoring idea reused (`_tokenize` / `query_patterns`). NOT a codebase index -- it aggregates `.loki/memory/semantic/*.json` patterns across projects, keyed on `~/.loki/knowledge`. See "Honest reuse" below. |
 | Memory retrieval | `memory/retrieval.py` (`MemoryRetrieval`) | Inspected. It retrieves memory entries (episodic/semantic/procedural), NOT source code. Not a code indexer. Not reused for code retrieval. |
 | Dashboard read-API + traversal-safety | `dashboard/server.py:7191` (`_safe_proof_run_dir`) | Pattern reused for the wiki section/path param (`_safe_wiki_section`). |
-| Dashboard web components | `dashboard-ui/components/*.js` (Web Components) | New `loki-wiki-browser.js` follows the same `LokiElement` convention; registered in `index.js`. |
+| Dashboard web components | `legacy-ui/components/*.js` (Web Components) | New `loki-wiki-browser.js` follows the same `LokiElement` convention; registered in `index.js`. |
 
 ### Honest reuse statement
 

package/docs/R6-ROLLBACK-CHECKPOINT-PLAN.md

@@ -33,7 +33,7 @@ dashboard `GET /api/checkpoints` normalizes them).
 
 ### Dashboard
 - `GET /api/checkpoints`, `GET /api/checkpoints/{id}`, `POST /api/checkpoints` exist.
-- The UI component `dashboard-ui/components/loki-checkpoint-viewer.js` (601 lines) ALREADY
+- The UI component `legacy-ui/components/loki-checkpoint-viewer.js` (601 lines) ALREADY
   renders list + create + rollback-with-two-step-confirm and POSTs to
   `POST /api/checkpoints/{id}/rollback` -- but that endpoint **did not exist**. The
   dashboard rollback button was DEAD.

package/docs/RARV-C-100X-PLAN.md

@@ -211,9 +211,9 @@ Every commit proven on BOTH routes (`bin/loki` + `LOKI_LEGACY_BASH=1 bin/loki`).
 - **FIX in v8 - release-notes bug** (`release.yml:179/231`): awk expects bracketed `## [VERSION]` but
   CHANGELOG uses unbracketed `## vVERSION`, so release notes have silently been generic. Fix the awk or
   the header format (one PR, verify the extracted body is non-empty).
-- **Dashboard frontend rebuilt** (`cd dashboard-ui && npm ci && npm run build:all`) - writes both
-  `dashboard-ui/dist/` and `dashboard/static/`.
-- **Pre-publish validation** (CLAUDE.md 3a): `npm pack --dry-run` contains web-app/dist + dashboard/static;
+- **Dashboard frontend rebuilt** (`cd legacy-ui && npm ci && npm run build:all`) - writes both
+  `legacy-ui/dist/` and `legacy-ui-static/`.
+- **Pre-publish validation** (CLAUDE.md 3a): `npm pack --dry-run` contains web-app/dist + legacy-ui-static;
   fresh global install serves web app + API.
 - **Per-job release verification**: `gh run view <id> --json jobs` per channel (npm/Docker/Homebrew/Release),
   not just "workflow green".

package/docs/SONNET5-DEFAULT-PLAN.md

@@ -100,10 +100,10 @@ opt-in advisor path.
   with allowlist haiku|sonnet|opus|fable (already does). Add start-time selection: `start_build`
   (server.py:3234) accepts an optional `model` that writes the override file BEFORE launch (so iteration
   1 picks it up). Validate against the same allowlist + clamp.
-- Frontend (dashboard-ui/src): add an accessible model selector (haiku/sonnet/opus) on the start/new-run
+- Frontend (legacy-ui/src): add an accessible model selector (haiku/sonnet/opus) on the start/new-run
   surface AND a mid-run switcher that calls POST /api/session/model. Real design-system tokens, keyboard
   accessible, no AI-aesthetic. Show current effective model + that switch applies at next iteration.
-  Rebuild dashboard/static per CLAUDE.md release step 2.
+  Rebuild legacy-ui-static per CLAUDE.md release step 2.
 
 ### Lane E - Catalog IDs, pricing note, parity tests [engineer 5]
 - model_catalog.json: opus-4-7 -> claude-opus-4-8 (3 occurrences), sonnet-4-6 -> claude-sonnet-5

package/docs/SYNERGY-TASKS.md

@@ -60,7 +60,7 @@ This document tracks all implementation tasks to achieve tool synergy and compet
 
 | Task ID | Task | Status | Priority | Notes |
 |---------|------|--------|----------|-------|
-| SYN-025 | Extract dashboard as reusable web components | Done | High | dashboard-ui/ - ARIA, keyboard nav, focus mgmt - peer reviewed |
+| SYN-025 | Extract dashboard as reusable web components | Done | High | legacy-ui/ - ARIA, keyboard nav, focus mgmt - peer reviewed |
 | SYN-026 | Create VS Code webview integration | Pending | High | Embed dashboard in VS Code |
 | SYN-027 | Unify styling and behavior | Pending | Medium | Consistent UX |
 | SYN-028 | Add dashboard feature parity check | Pending | Low | Ensure all features available |

package/docs/TOOL-INTEGRATION.md

@@ -75,7 +75,7 @@ loki memory retrieve "authentication"
 loki api start --port 57374
 loki api start
 
-# View dashboard (web UI)
+# View the Control Plane UI
 loki dashboard open
 ```
 

package/docs/TOP-100-BACKLOG.md

@@ -87,7 +87,7 @@ Generated 2026-07-01 by the top100-backlog-enumeration ultracode workflow (7 age
 | 65 | medium | M | founder-gated | adoption | MCP registry submission + Glama claim + awesome-list PRs |
 | 66 | medium | M | autonomous | saas | autonomi-saas UI/UX pass: build-watching pane + finished cues from trust verdict |
 | 67 | medium | XL | autonomous | dashboard | Server.py route modularization (~10K-line monolith, no domain separation) |
-| 68 | medium | L | autonomous | dashboard | Large dashboard-ui components modularization (5 files 1K-1.9K lines) |
+| 68 | medium | L | autonomous | dashboard | Large legacy-ui components modularization (5 files 1K-1.9K lines) |
 | 69 | medium | L | founder-gated | engine | Wave-13 deferred trust fixes + PRD-reuse spurious-update design fix |
 | 70 | medium | M | community | dashboard | Dashboard dark-toggle iframe theme not following SPA (harness/product parity) |
 | 71 | medium | M | community | ci | Sonnet-5 calibration follow-ups: test-verify --hosted + gate missing-tool handling |

package/docs/alternative-installations.md

@@ -121,7 +121,7 @@ mv loki-mode-8.0.0 ~/.claude/skills/loki-mode
 
 > **DEPRECATED as of v7.2.0.** The Loki Mode VS Code extension is no longer
 > maintained and is no longer published to the VS Code Marketplace. Use the
-> dashboard instead (`loki dashboard start`, then open http://localhost:57374).
+> Control Plane instead (`loki dashboard`).
 > The `vscode-extension/` source remains in the repository for contributors who
 > want to build it locally. See
 > [INSTALLATION.md](INSTALLATION.md#vs-code-extension-deprecated) for details.

package/docs/architecture/ADR-001-runtime-migration.md

@@ -168,7 +168,7 @@ Reasons:
 
 ### Phase 3: Build/release tooling
 - Replace npm publish with `bun publish` in CI
-- Replace dashboard-ui esbuild with `bun build` (already 4-5x faster)
+- Replace legacy-ui esbuild with `bun build` (already 4-5x faster)
 - Replace pytest where possible with `bun test` for non-Python tests
 - Measure: full CI wall time, npm install time
 

package/docs/architecture/DASHBOARD_V2_ARCHITECTURE.md

@@ -1,5 +1,7 @@
 # Loki Mode Dashboard V2 Architecture
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](../control-plane-migration.md).
+
 **Status:** Design Phase
 **Version:** 0.1.0 (Draft)
 **Date:** 2026-02-01

package/docs/audit-logging.md

@@ -1,5 +1,7 @@
 # Audit Logging
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 Audit trails for Loki Mode operations.
 
 ## Overview

package/docs/authentication.md

@@ -1,5 +1,7 @@
 # Authentication Guide
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 Authentication and access control for Loki Mode dashboard and API.
 
 ## Overview

package/docs/authorization.md

@@ -1,5 +1,7 @@
 # Authorization Guide
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 Role-based access control (RBAC) for Loki Mode (v5.37.0).
 
 ## Overview

package/docs/certification/02-enterprise-features/lab.md

@@ -1,5 +1,7 @@
 # Module 2 Lab: Configure Enterprise Features
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Objective
 
 Enable and verify enterprise features: audit logging, OTEL observability, token authentication, and dashboard TLS.

package/docs/certification/02-enterprise-features/lesson.md

@@ -1,5 +1,7 @@
 # Module 2: Enterprise Features
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Overview
 
 Loki Mode includes enterprise features for audit logging, observability, authentication, and SIEM integration. These features are controlled via environment variables and can be enabled incrementally.

package/docs/certification/04-production-deployment/lab.md

@@ -1,5 +1,7 @@
 # Module 4 Lab: Deploy with Docker Compose
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Objective
 
 Deploy Loki Mode using Docker Compose, verify the dashboard is accessible, and configure resource limits.

package/docs/certification/04-production-deployment/lesson.md

@@ -1,5 +1,7 @@
 # Module 4: Production Deployment
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Overview
 
 Loki Mode can be deployed using Docker, Docker Compose, or direct installation via npm/Homebrew. This module covers deployment options, security hardening, resource management, and production configuration.

package/docs/control-plane-migration.md

@@ -0,0 +1,97 @@
+# Migrating from the classic dashboard to the Control Plane
+
+Loki Mode 10.8 removes the classic dashboard UI (`dashboard-ui/`, `dashboard/static/`, and the UI served on port 57374). The Control Plane (`packages/control-plane`, UI in `packages/control-plane/ui`) is the only UI. Deploy files (Helm, compose, ECS) and the clients (SDKs, VS Code, `run.sh`) already point at it.
+
+## What changed
+
+| Before | Now |
+| --- | --- |
+| UI and API on port 57374 (FastAPI, `dashboard/server.py`) | Control Plane on port 47821 by default (`loki control serve`) |
+| `loki dashboard start` serves the classic UI | `loki dashboard`, `loki dashboard start` and `loki dashboard open` open the Control Plane |
+| `dashboard-ui` build (`npm run build:all`) | `cd packages/control-plane && bun run build:all` (UI plus bundled server) |
+| REST under `/api/*` | REST under `/v1/*`, plus `/health` and `/ready` |
+| Token management through the dashboard | One bearer token, `LOKI_CONTROL_TOKEN`, on `/v1/*` |
+
+## Start the Control Plane
+
+```bash
+loki control serve                 # 127.0.0.1:47821, database ~/.loki/control/control.db
+loki control serve --port 0        # any free port; the printed URL is the real one
+loki control status                # reachable? how many runs held?
+loki dashboard                     # reuse a running Control Plane, or start one, and open it
+```
+
+Notes:
+
+- Bun is required (https://bun.sh). Without it `loki dashboard` says so and does not start a server.
+- The default port falls back to any free port when 47821 is taken. An explicit `--port` or `LOKI_CONTROL_PORT` never falls back.
+- While `loki control serve` runs, runs on this machine ship to it automatically through `~/.loki/control/instance.json`. A run never starts the server.
+- Import runs that finished before the server existed: `loki control backfill [DIR]`.
+- Remove runs: `loki control prune --repo OWNER/NAME` or `--before ISO_DATE`, with `--dry-run` to preview.
+- `LOKI_HEADLESS=1`, `LOKI_NO_BROWSER=1` or `--no-open` print the URL instead of opening a browser.
+- `LOKI_CONTROL=0` turns the Control Plane off. `LOKI_CONTROL_DEFAULT=0` makes the bare `loki dashboard` skip it.
+
+Environment variables:
+
+| Variable | Meaning |
+| --- | --- |
+| `LOKI_CONTROL_PORT` | listen port for `loki control serve`, and the port clients assume (default 47821) |
+| `LOKI_CONTROL_URL` | where clients and the shipper send runs (overrides discovery) |
+| `LOKI_CONTROL_DB` | SQLite path (default `~/.loki/control/control.db`) |
+| `LOKI_CONTROL_HOST` | bind address (default 127.0.0.1) |
+| `LOKI_CONTROL_TOKEN` | bearer token for `/v1/*`; required for any non-loopback bind, otherwise the server exits 2 |
+| `LOKI_CONTROL_ALLOW_INSECURE_BIND` | `1` accepts a tokenless non-loopback bind (not recommended) |
+| `LOKI_CONTROL_ANSWER_DIR` | where BLOCKED-run answers are written |
+
+With a token set, send `Authorization: Bearer <token>` on every `/v1/*` call. Actions that touch the machine (start, stop, import, delete, config) exist only on a loopback-bound server and need a JSON content type.
+
+## Route mapping
+
+Legacy routes come from `dashboard/server.py`. Rows marked "no direct legacy route" are Control Plane routes that did not exist in the classic server.
+
+| Legacy | Control Plane |
+| --- | --- |
+| `GET /api/status` | `GET /v1/runs` (list, filters `verdict`, `repo`, `since`, `until`, `group_id`, `limit`, `cursor`), `GET /v1/runs/<source>/<run>` (detail), `GET /v1/stats` |
+| `GET /api/cost` | `GET /v1/stats/cost` |
+| `POST /api/control/start` | `POST /v1/start` (alias `POST /v1/runs`) |
+| `POST /api/control/stop` | `POST /v1/runs/<source>/<run>/stop` |
+| `POST /api/control/resume` | `POST /v1/runs/<source>/<run>/resume` |
+| (none) | `POST /v1/runs/<source>/<run>/retry`, `POST /v1/runs/<source>/<run>/verify`, `POST /v1/runs/<source>/<run>/answer` |
+| log streaming | `GET /v1/runs/<source>/<run>/events`, `GET /v1/runs/<source>/<run>/stream`, `GET /v1/stream`, `GET /v1/runs/<source>/<run>/artifact/<path>` |
+| `GET /api/audit` | `GET /v1/audit` |
+| `GET /api/health` family | `GET /health` (liveness), `GET /ready` (database check) |
+| (no direct legacy route) | `GET /v1/config`, `PUT /v1/config` |
+| (no direct legacy route) | `GET /v1/providers`, `GET /v1/integrations` |
+| (no direct legacy route) | `GET /v1/notifications` |
+| (no direct legacy route) | `GET /v1/merge/queue`, `POST /v1/merge/queue`, `POST /v1/merge/run`, `GET /v1/review/risk` |
+| (no direct legacy route) | `GET /v1/keys` (public key only, loopback only) |
+| (no direct legacy route) | `GET /v1/repos` (names only, loopback only) |
+| (no direct legacy route) | `POST /v1/ingest`, `POST /v1/import`, `DELETE /v1/runs/<source>/<run>` |
+
+## Not yet available in the Control Plane
+
+These legacy features have no Control Plane route today:
+
+- `POST /api/control/pause`, `/api/control/app-restart` and `/api/control/app-stop`.
+- `GET /api/audit/summary` and `GET /api/audit/verify` (the Control Plane has `GET /v1/audit` only).
+- `GET /api/cost/timeline` and `GET /api/health/processes`.
+- API key creation, rotation and revocation (`/api/keys` POST routes, `loki dashboard token`), RBAC and OIDC login. The Control Plane uses the single `LOKI_CONTROL_TOKEN`.
+- The `/lab/` web app and the memory browser.
+- Classic-server options: `loki dashboard --host`, `--tls-cert`, `--tls-key`, `LOKI_DASHBOARD_CORS`, `LOKI_DASHBOARD_PORT` for the UI.
+
+## Deploy
+
+- Container, Helm and ECS overview: [control-plane-container.md](control-plane-container.md).
+- Docker Compose: `deploy/docker-compose/README.md`. The UI is on host port 57374 by default (`LOKI_DASHBOARD_PORT`), mapped to the Control Plane on container port 47821. `LOKI_CONTROL_TOKEN` is required in `.env`; open the UI with `#token=<token>` appended.
+- Helm: `deploy/helm/README.md` (chart at `deploy/helm/autonomi`, Control Plane deployment in `templates/deployment-controlplane.yaml`).
+- ECS: `deploy/ecs/README.md` and `deploy/ecs/control-plane-task.json` (run exactly one task, the database is single-writer).
+
+## Clients
+
+SDKs, the VS Code extension and `run.sh` talk to the Control Plane. Set `LOKI_CONTROL_URL` (and `LOKI_CONTROL_TOKEN` when the server has one) to point them at a remote instance.
+
+## Building from source
+
+```bash
+cd packages/control-plane && bun run build:all   # UI plus dist/server.js
+```

package/docs/dashboard-guide.md

@@ -1,5 +1,7 @@
 # Loki Mode Dashboard v5.40.0
 
+> **Control Plane migration:** the classic dashboard UI and its port 57374 are removed in Loki Mode 10.8. The Control Plane (`loki control serve`, default port 47821) is the only UI. See [control-plane-migration.md](control-plane-migration.md) for startup, the `/api/*` to `/v1/*` route mapping and what is not yet available.
+
 A production-ready realtime dashboard for monitoring and managing Loki Mode autonomous operations. Features a dark Vercel/Linear-inspired theme with purple accents, sidebar navigation, and overview cards.
 
 ## Overview
@@ -15,16 +17,13 @@ The Loki Mode Dashboard provides a visual interface to:
 ## Quick Start
 
 ```bash
-# Start the dashboard (default port: 57374)
-loki dashboard start
-
-# Open in browser
-open http://localhost:57374
+# Open the Control Plane (starts `loki control serve` on 127.0.0.1:47821 if none is running)
+loki dashboard
 ```
 
 The dashboard automatically syncs with Loki Mode when it's running, polling `dashboard-state.json` every 2 seconds.
 
-**Ports:** The dashboard and API run on unified port **57374** (FastAPI serves both). See [INSTALLATION.md](INSTALLATION.md#ports) for details.
+**Ports:** the Control Plane serves the UI and `/v1/*` API on port **47821** by default. See [INSTALLATION.md](INSTALLATION.md#ports) for details.
 
 **Bound port:** if 57374 is held by something that is not this install's dashboard (another project, an older version, a foreign process), Loki walks to the next free port and never reuses or opens the foreign one. `loki start` and `loki dashboard` open and print the URL of the port actually bound; `loki start` publishes it to `.loki/dashboard/url`. A running dashboard is reused only when its `/health` reports the same version and install path.
 
@@ -485,4 +484,4 @@ Useful for:
 
 ## Control Plane by default
 
-Bare `loki` and `loki dashboard` (also `start` or `open` with no other flags) open the Control Plane. If `~/.loki/control/instance.json` names a live loopback server whose `/health` reports `service=loki-control`, that URL is reused; otherwise `loki control serve` is started detached and its PID is recorded in `~/.loki/control/serve.pid`. With `LOKI_HEADLESS=1`, `LOKI_NO_BROWSER=1` or `--no-open` the URL is printed and no browser is opened. Without bun, Loki prints one line naming bun and uses the classic dashboard. Set `LOKI_CONTROL_DEFAULT=0` to always use the classic dashboard. Multi-repo `loki workspace` is on by default; `LOKI_WORKSPACES=0` disables it.
+Bare `loki` and `loki dashboard` (also `start` or `open` with no other flags) open the Control Plane. If `~/.loki/control/instance.json` names a live loopback server whose `/health` reports `service=loki-control`, that URL is reused; otherwise `loki control serve` is started detached and its PID is recorded in `~/.loki/control/serve.pid`. With `LOKI_HEADLESS=1`, `LOKI_NO_BROWSER=1` or `--no-open` the URL is printed and no browser is opened. Without bun, Loki prints one line naming bun and does not start a server (the classic dashboard is removed in 10.8). Multi-repo `loki workspace` is on by default; `LOKI_WORKSPACES=0` disables it.

package/docs/dev/release-checklist.md

@@ -82,13 +82,13 @@ context (the v9.22.13 bug: its body says "v9.24.0 is the next version on
 npm") or over-carry on a stale npm read, so auto-detect was removed
 entirely rather than patched again.
 
-### 2. Build Dashboard Frontend
+### 2. Build Web App
 
 ```bash
-cd dashboard-ui && npm ci && npm run build:all && cd ..
-ls -la dashboard/static/index.html   # verify >100KB
+cd web-app && npm ci && npm run build && cd ..
+ls -la web-app/dist/index.html
 ```
-`npm publish`'s `prepublishOnly` also triggers this build automatically.
+`npm publish`'s `prepublishOnly` also triggers this build automatically. The legacy dashboard UI was removed; the browser UI is the Control Plane (`packages/control-plane`).
 
 ### 3. Run Tests
 
@@ -97,15 +97,13 @@ bash -n autonomy/run.sh
 bash -n autonomy/loki
 python3 -c "import ast, os; [ast.parse(open(f'dashboard/{f}').read()) for f in os.listdir('dashboard') if f.endswith('.py')]"
 python3 -c "import json; json.load(open('package.json')); print('JSON OK')"
-cd dashboard-ui && npx playwright test && cd ..   # requires dashboard on 57374
 ```
 
 ### 3a. Pre-Publish Validation (MANDATORY)
 
 ```bash
-npm pack --dry-run 2>&1 | grep -E "web-app/dist|dashboard/static" || echo "FAIL: expected files missing"
+npm pack --dry-run 2>&1 | grep -E "web-app/dist" || echo "FAIL: expected files missing"
 git ls-files web-app/dist/index.html | grep -q . || echo "FAIL: web-app/dist/ not tracked"
-git ls-files dashboard/static/index.html | grep -q . || echo "FAIL: dashboard/static/ not tracked"
 npm pack && npm install -g ./loki-mode-*.tgz
 loki --version
 loki web --no-open &
@@ -135,7 +133,7 @@ Before pushing the release commit, run `bash scripts/release.sh --check-clean` (
 ```bash
 gh run list --limit 1 && gh run watch <run-id>
 npm view loki-mode version
-npm pack loki-mode --dry-run 2>&1 | grep dashboard/static
+npm pack loki-mode --dry-run 2>&1 | grep web-app/dist
 docker pull asklokesh/loki-mode:X.Y.Z && docker run --rm asklokesh/loki-mode:X.Y.Z loki version
 brew update && brew info loki-mode
 gh release view vX.Y.Z
@@ -148,10 +146,10 @@ Operator action: wait for the Release workflow publish to land and for the D49 a
 
 ### Distribution Channel Checklist
 
-| Channel | Dashboard API | Dashboard Frontend | Memory System | Skills/References |
+| Channel | Dashboard API | Web App | Memory System | Skills/References |
 |---------|--------------------------|------------------------------|---------------|-------------------|
-| npm     | `dashboard/*.py`         | `dashboard/static/index.html`| `memory/`     | `skills/`, `references/` |
-| Docker  | `COPY dashboard/`        | Built in Dockerfile or committed | `memory/` | `skills/`, `references/` |
+| npm     | `dashboard/*.py`         | `web-app/dist/index.html` | `memory/`     | `skills/`, `references/` |
+| Docker  | `COPY dashboard/`        | Built in Dockerfile | `memory/` | `skills/`, `references/` |
 | Homebrew| Full tarball             | Full tarball                 | Full tarball  | Full tarball |
 | VSCode  | DEPRECATED v7.2.0 -- no longer published | -- | -- | -- |
 | Release | Skill-only zip           | N/A                          | N/A           | `references/` |

package/docs/enterprise/integration-cookbook.md

@@ -1,5 +1,7 @@
 # Loki Mode Integration Cookbook
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 Step-by-step guides for connecting Loki Mode to external services. Each integration is opt-in and configured via environment variables.
 
 ---

package/docs/enterprise/migration.md

@@ -226,7 +226,7 @@ npm install loki-mode-sdk
 #### 5. Test Enterprise Features
 
 ```bash
-# Start dashboard
+# Open the Control Plane (the classic /api/* routes are replaced by /v1/*, see docs/control-plane-migration.md)
 loki dashboard
 
 # Test API

package/docs/enterprise/performance.md

@@ -1,5 +1,7 @@
 # Loki Mode Enterprise Performance Tuning
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Overview
 
 Enterprise features are designed for minimal overhead. When disabled (no env vars set), every enterprise subsystem returns no-op responses with zero I/O. This guide covers tuning for production environments where enterprise features are actively used.
@@ -238,7 +240,7 @@ Rate limits are built into the API layer (10 requests/min on control endpoints,
 
 ### Static Asset Caching
 
-The dashboard frontend (`dashboard/static/index.html`) is a single-page application built as an IIFE bundle. Configure your reverse proxy to cache static assets:
+The dashboard frontend (`legacy-ui-static/index.html`) is a single-page application built as an IIFE bundle. Configure your reverse proxy to cache static assets:
 
 ```nginx
 location /static/ {

package/docs/enterprise/sdk-guide.md

@@ -1,5 +1,7 @@
 # Loki Mode SDK Guide
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 Official Python and TypeScript SDKs for the Autonomi Control Plane API. Both SDKs have zero external dependencies -- they use only standard library features.
 
 ---

package/docs/enterprise/security.md

@@ -1,5 +1,7 @@
 # Loki Mode Enterprise Security
 
+> **Control Plane migration:** the classic dashboard UI and port 57374 are removed in Loki Mode 10.8; the UI is the Control Plane (`loki dashboard`, default port 47821). Examples below that use port 57374 or `/api/*` describe the legacy API server. See [control-plane-migration.md](../control-plane-migration.md) for the `/v1/*` mapping and what is not yet available.
+
 ## Overview
 
 Loki Mode's security model follows a defense-in-depth approach. All security features are opt-in via environment variables, with sensible defaults that prioritize safety. When enterprise auth is not configured, the system operates in local-only mode with no network exposure.

package/docs/plans/FORGE-AUTONOMOUS-QUEUE.md

@@ -43,7 +43,7 @@ Last updated: 2026-05-18
 - [x] F-2.25 Semantic layer: buckets, functions, gateway routes surfaced
 - [x] F-2.26 Council review hook (migrate_apply emits review records to .loki/quality/forge-migrations/; council read-side consumes from that path)
 - [x] F-2.27 Dashboard router /api/forge/* (state, db, storage, functions, gateway)
-- [~] F-2.28 Dashboard UI: deferred to dedicated dashboard-ui work (router is in place; UI panes are CSS/TSX work that will land in a separate PR)
+- [~] F-2.28 Dashboard UI: deferred to dedicated legacy-ui work (router is in place; UI panes are CSS/TSX work that will land in a separate PR)
 - [x] F-2.29 CHANGELOG entry for F-2
 - [x] F-2.30 Commit + push F-2
 
@@ -196,7 +196,7 @@ Last updated: 2026-05-18
 ## Status
 
 Phase F-1..F-5 + X-11..X-26 + X-28..X-34 complete on
-claude/compare-litellm-loki-Y8Ke1. Remaining: X-27 (dashboard-ui).
+claude/compare-litellm-loki-Y8Ke1. Remaining: X-27 (legacy-ui).
 
 ## More tasks discovered (next wave)
 

package/docs/research-2026-07/OBSERVABILITY-TOOL-SPEC.md

@@ -56,7 +56,7 @@ Dockerizable and offline-safe. A daily/refresh fetch keeps the numbers current.
 
 ## Design language (Autonomi)
 Match the shipped Autonomi look. Reference files: `artifacts/whitepaper/Autonomi-Whitepaper.html`
-and `dashboard/static/trust.html`. Palette: dark bg (#0F0B1A / #0d1117), Autonomi purple accent
+and `legacy-ui-static/trust.html`. Palette: dark bg (#0F0B1A / #0d1117), Autonomi purple accent
 (#553DE9 / #7B6BF0), verified teal (#2ED8B6 / #1AAF95), dim ink (#B8B0C8 / #8A857C), warning amber
 (#C4922E), reject red (#C04848). Semantic status colors: verified=teal, reported/pending=amber,
 mistake/reverted=red, roadmap=purple. Clean, calm, founder-readable; big numbers, short labels,