loki-mode 10.8.0 → 10.9.1

package/README.md

@@ -310,7 +310,7 @@ The URL comes from `LOKI_CONTROL_URL`, else `http://127.0.0.1:${LOKI_CONTROL_POR
 
 Answering a BLOCKED run: when a run stops on a spec conflict, its run page shows the question and an answer box. Submitting posts to `POST /v1/runs/<source>/<run>/answer` (JSON `{"answer": "..."}`, up to 4000 characters, loopback only) and writes `~/.loki/control/answers/<source>/<run>.answer.txt` (override the directory with `LOKI_CONTROL_ANSWER_DIR`). The page prints the resume command, `loki answer <run>`, which starts a fresh run carrying the task, the question and that file's text (or pass `--text "..."` yourself; with no run id it picks the newest BLOCKED run). A run that is not BLOCKED exits 2.
 
-Set `LOKI_CONTROL_DEFAULT=1` (off by default) to make `loki dashboard`, `loki dashboard start` and `loki dashboard open` start the Control Plane instead of the old dashboard. The old dashboard is unchanged when the flag is unset.
+The Control Plane is the only UI. `loki dashboard`, `loki dashboard start` and `loki dashboard open` open it (starting `loki control serve` if none is running). The classic dashboard UI and its port 57374 are removed in 10.8; see [docs/control-plane-migration.md](docs/control-plane-migration.md) for the route mapping and what is not yet available.
 
 Container, Helm and ECS deployment: [docs/control-plane-container.md](docs/control-plane-container.md).
 
@@ -588,7 +588,7 @@ Legacy engine, being removed (these run on the previous engine; `loki --help` st
 | `loki stop`, `pause`, `resume` | Control a legacy run |
 | `loki steer "<note>"` | Nudge a legacy run (needs `LOKI_PROMPT_INJECTION=1`) |
 | `loki why`, `loki next` | Explain or continue a legacy run |
-| `loki dashboard` | Operations UI server (`start\|stop\|status\|url\|open`) |
+| `loki dashboard` | Open the Control Plane UI (see [docs/control-plane-migration.md](docs/control-plane-migration.md)) |
 | `loki review`, `loki test`, `loki analyze`, `loki memory`, `loki failover`, `loki enterprise`, `loki import`, `loki ci` | Review, test generation, codebase analysis, memory, failover, enterprise, issue import, CI gate |
 | `loki modernize heal <path>` | Legacy system healing |
 

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: An autonomous software factory that knows what it is supposed to deliver, and proves it did. Use when the user says Loki Mode or asks to build, fix or verify software autonomously.
 ---
 
-# Loki Mode v10.8.0
+# Loki Mode v10.9.1
 
 **Current entry points (Loki 10 engine):** `loki "<task>"`, `loki owner/repo#N` and `loki quick "<task>"` run the Loki 10 engine and end with a signed receipt (`loki verify`). `loki backlog owner/repo --all` runs many issues in parallel. Guide: `docs/v10/GUIDE.md`. The skill instructions below, and `loki start`, describe the legacy engine, which still ships and is being removed (`loki start owner/repo#N` still routes to it; prefer `loki owner/repo#N`).
 
@@ -473,4 +473,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v10.8.0 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**
+**v10.9.1 | [Autonomi](https://www.autonomi.dev/) flagship product | core skill**

package/VERSION

@@ -1 +1 @@
-10.8.0
+10.9.1

package/autonomy/loki

@@ -2032,12 +2032,11 @@ cmd_ui() {
             LOKI_DASHBOARD_CORS="http://localhost:$port,http://127.0.0.1:$port" \
             cmd_dashboard_start --host 127.0.0.1 --port "$port" >&2 || return 1
     fi
-    local url="http://127.0.0.1:${port}/start"
-    if [ "${LOKI_HEADLESS:-0}" = "1" ] || [ "${1:-}" = "--no-open" ]; then
-        echo "$url"
-    else
-        loki_open_url "$url" || echo "$url"
-    fi
+    # The classic server is API-only; the UI is the Control Plane.
+    local url="http://127.0.0.1:${port}"
+    echo "loki: the classic dashboard at $url serves the API only (the browser UI moved to the Control Plane)." >&2
+    echo "loki: start the Control Plane UI with: loki ui (needs bun)" >&2
+    echo "$url"
 }
 
 # Tight newcomer landing for the bare `loki` invocation (no args).
@@ -3915,18 +3914,9 @@ cmd_start() {
                 # + cockpit, honoring the card's "open dashboard" promise. The
                 # cockpit hint is printed by _loki_start_handoff for the Both path.
                 args+=("--bg")
-                # Open the URL the runner PUBLISHES for the port it actually bound
-                # or reused (it walks past refused ports); never guess the default
-                # 57374, which may be a foreign or stale dashboard. stdout must
-                # stay unredirected: loki_open_url checks the TTY.
-                local _dfile="${PWD}/.loki/dashboard/url"
-                rm -f "$_dfile" 2>/dev/null
-                (
-                    for _ in $(seq 1 120); do
-                        if [ -s "$_dfile" ]; then loki_open_url "$(head -1 "$_dfile")" 2>/dev/null; exit 0; fi
-                        sleep 0.5
-                    done
-                ) &
+                # The browser UI is the Control Plane; open it (guarded by
+                # loki_open_url: no-op headless and in tests).
+                ( LOKI_UI_NO_CLASSIC=1 cmd_ui 2>/dev/null || true ) &
                 ;;
             launch-bg-watch)
                 # Watch (cockpit only) detaches without opening the browser.
@@ -7561,7 +7551,7 @@ cmd_dashboard_help() {
     echo "  loki dashboard start --tls-cert cert.pem --tls-key key.pem"
     echo "  loki dashboard status                 # Check if running"
     echo "  loki dashboard url --format json      # Get URL as JSON"
-    echo "  loki dashboard open                   # Open in browser"
+    echo "  loki dashboard open                   # Print the Control Plane hint (no browser)"
     echo "  loki dashboard stop                   # Stop server"
 }
 
@@ -7789,7 +7779,7 @@ cmd_dashboard_start() {
         # a second port.
         echo -e "${DIM}Want to submit a spec in the browser? Open the 'Lab' tab in this dashboard.${NC}"
         echo ""
-        echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
+        echo -e "Control Plane UI: ${CYAN}loki ui${NC}"
         echo -e "Check status:    ${CYAN}loki dashboard status${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
     else
@@ -7907,7 +7897,7 @@ cmd_dashboard_status() {
         fi
 
         echo ""
-        echo -e "Open in browser: ${CYAN}loki dashboard open${NC}"
+        echo -e "Control Plane UI: ${CYAN}loki ui${NC}"
         echo -e "Stop server:     ${CYAN}loki dashboard stop${NC}"
     else
         echo -e "${YELLOW}Status: Not running (stale PID file)${NC}"
@@ -8040,14 +8030,10 @@ cmd_dashboard_open() {
 
     local url="${scheme}://${host}:${port}"
 
-    echo -e "${GREEN}Opening dashboard: $url${NC}"
-
-    # Open in browser (cross-platform, guarded: no-op in tests/CI/non-TTY)
-    if ! loki_open_url "$url" 2>/dev/null; then
-        echo ""
-        echo "Browser not opened (headless, test, or no opener)."
-        echo "Please open in browser: $url"
-    fi
+    # The legacy browser UI was removed; this server is API-only. Never open a
+    # browser here: point at the Control Plane instead.
+    echo -e "${YELLOW}The dashboard server at $url serves the API only; the browser UI is now the Control Plane.${NC}"
+    echo -e "Open the Control Plane with: ${CYAN}loki ui${NC}"
 }
 
 # Welcome opener (the "magic opener"). Shows a branded welcome page in the
@@ -18401,8 +18387,7 @@ print(json.dumps({'id': manifest.id, 'dir': str(pipeline.migration_dir)}))
 
                     sleep 2
                     if kill -0 "$migrate_dashboard_pid" 2>/dev/null; then
-                        echo -e "  Dashboard:   ${CYAN}${url_scheme}://127.0.0.1:${dashboard_port}/${NC}"
-                        loki_open_url "${url_scheme}://127.0.0.1:${dashboard_port}/" 2>/dev/null || true
+                        echo -e "  Dashboard API: ${CYAN}${url_scheme}://127.0.0.1:${dashboard_port}/${NC} (UI: loki ui)"
                         echo ""
                     else
                         echo -e "  ${YELLOW}Dashboard failed to start (check logs)${NC}"

package/autonomy/tui.sh

@@ -24,7 +24,11 @@ TUI_HAS_COLOR=false
 TUI_COLS=80
 if [ -t 1 ]; then
     TUI_HAS_COLOR=true
-    TUI_COLS=$(tput cols 2>/dev/null || echo 80)
+    # FC-10: tput can print 0 or nothing on a pty with no size; fall back to COLUMNS, then 80
+    TUI_COLS=$(tput cols 2>/dev/null || true)
+    case "$TUI_COLS" in '' | *[!0-9]*) TUI_COLS="${COLUMNS:-80}" ;; esac
+    case "$TUI_COLS" in '' | *[!0-9]*) TUI_COLS=80 ;; esac
+    [ "$TUI_COLS" -ge 40 ] || TUI_COLS=80
 fi
 
 # Unicode box drawing (degrade to ASCII if terminal doesn't support)

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "10.8.0"
+__version__ = "10.9.1"
 
 # Expose the control app for easy import
 try:

package/dashboard/api_phases.py

@@ -1,6 +1,6 @@
 """Read-only phase history for a run, derived from real `phase_change` events.
 
-WHY THIS EXISTS. dashboard-ui/components/loki-session-timeline.js SYNTHESIZED
+WHY THIS EXISTS. The legacy dashboard session timeline (removed in CPE-24) SYNTHESIZED
 its timeline. It took a scalar status (uptime, current phase, iteration count),
 rotated a fixed list `['planning','building','testing','reviewing']`, and gave
 each invented segment a randomized duration:

package/dashboard/api_start.py

@@ -37,7 +37,6 @@ from . import auth
 logger = logging.getLogger(__name__)
 router = APIRouter(tags=["start"])
 
-START_HTML = os.path.join(os.path.dirname(os.path.abspath(__file__)), "static", "start.html")
 _LOKI_BIN = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), "bin", "loki")
 _REPO_RE = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
 _TOKEN_RE = re.compile(r"^[A-Za-z0-9_\-]{10,255}$")

package/dashboard/server.py

@@ -1149,14 +1149,8 @@ app.add_middleware(
     allow_headers=["Content-Type", "Authorization", "X-Requested-With"],
 )
 
-# RESPONSE COMPRESSION. Measured, not assumed: the served dashboard bundle
-# (dashboard/static/index.html) is 779,725 bytes raw and 150,341 gzipped --
-# an 81% reduction. Until now only CORS and the collab WS auth middleware were
-# registered, so every dashboard load shipped the full 780KB.
-#
-# That single fact is the most plausible cause of "the dashboard feels slow":
-# it is not a rendering problem, it is 630KB of avoidable transfer on first
-# paint, and it costs one middleware to fix.
+# RESPONSE COMPRESSION. Large JSON API payloads compress well, and it costs one
+# middleware. (The legacy single-file UI bundle that motivated it was removed.)
 #
 # minimum_size=1024 leaves small JSON responses uncompressed, where the CPU
 # round-trip outweighs the saving. GZipMiddleware is stdlib-backed and does
@@ -1360,16 +1354,12 @@ else:
     app.include_router(api_operator_router)
 
 # D51 Phase A: first-run onboarding + backlog API and its /start page.
-from .api_start import router as api_start_router, START_HTML as _START_HTML
+from .api_start import router as api_start_router
 app.include_router(api_start_router)
 from .api_runs_v1 import router as api_runs_v1_router
 app.include_router(api_runs_v1_router)
 
 
-@app.get("/start", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_start_page():
-    return FileResponse(_START_HTML, media_type="text/html")
-
 
 # Phase Merge-4: Mount Purple Lab FastAPI app under /lab/ so it appears as a
 # sidebar entry in Dashboard. Same `app` is also wrapped by `standalone_app`
@@ -11579,49 +11569,11 @@ def optimize_prompts(sessions: int = 10, dry_run: bool = True):
 
 from fastapi.responses import FileResponse, HTMLResponse
 
-# Find static files in multiple possible locations
 DASHBOARD_DIR = os.path.dirname(os.path.abspath(__file__))
 PROJECT_ROOT = os.path.dirname(DASHBOARD_DIR)
 
-# Possible static file locations (in order of preference)
-# Resolves correctly regardless of PYTHONPATH, symlinks, or install method
-def _static_candidates(skill_dir=None, home=None):
-    """Static dirs in preference order: package, LOKI_SKILL_DIR, ~/.claude skill, dev build."""
-    skill_dir = os.environ.get("LOKI_SKILL_DIR", "") if skill_dir is None else skill_dir
-    home_skill = os.path.join(home or os.path.expanduser("~"), ".claude", "skills", "loki-mode")
-    cands = [os.path.join(DASHBOARD_DIR, "static")]
-    if skill_dir:
-        cands.append(os.path.join(skill_dir, "dashboard", "static"))
-    cands.append(os.path.join(home_skill, "dashboard", "static"))
-    cands.append(os.path.join(PROJECT_ROOT, "dashboard-ui", "dist"))
-    if skill_dir:
-        cands.append(os.path.join(skill_dir, "dashboard-ui", "dist"))
-    cands.append(os.path.join(home_skill, "dashboard-ui", "dist"))
-    return cands
-
-
-def _pick_static_dir(candidates):
-    """First candidate that CONTAINS index.html; an empty or partial dir must not win."""
-    for loc in candidates:
-        if os.path.isfile(os.path.join(loc, "index.html")):
-            return loc
-    return None
-
-
-STATIC_LOCATIONS = _static_candidates()
-STATIC_DIR = _pick_static_dir(STATIC_LOCATIONS)
-if STATIC_DIR:
-    logger.info("Dashboard frontend served from: %s", STATIC_DIR)
-else:
-    logger.warning("Dashboard frontend NOT found (looked in %s); serving built-in fallback page", STATIC_LOCATIONS)
-
-if STATIC_DIR:
-    from fastapi.staticfiles import StaticFiles
-
-    # Check if assets directory exists (built frontend)
-    ASSETS_DIR = os.path.join(STATIC_DIR, "assets")
-    if os.path.isdir(ASSETS_DIR):
-        app.mount("/assets", StaticFiles(directory=ASSETS_DIR), name="assets")
+DASHBOARD_DIR = os.path.dirname(os.path.abspath(__file__))
+PROJECT_ROOT = os.path.dirname(DASHBOARD_DIR)
 
 # ---------------------------------------------------------------------------
 # Activity Logger & Session Diff
@@ -11682,75 +11634,29 @@ async def log_activity(entry: dict):
     return result
 
 
-# Serve favicon.svg from static directory
-@app.get("/favicon.svg", include_in_schema=False)
-async def serve_favicon():
-    """Serve the dashboard favicon."""
-    if STATIC_DIR:
-        favicon_path = os.path.join(STATIC_DIR, "favicon.svg")
-        if os.path.isfile(favicon_path):
-            return FileResponse(favicon_path, media_type="image/svg+xml")
-    return Response(status_code=404)
-
-
-# Serve the self-contained cost + observability panel (R3). Zero-build
-# standalone page that fetches /api/cost/timeline. Mirrors the proofs.html
-# pattern: works without the SPA build.
-@app.get("/cost", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_cost_panel():
-    """Serve the standalone cost + observability HTML panel."""
-    if STATIC_DIR:
-        cost_path = os.path.join(STATIC_DIR, "cost.html")
-        if os.path.isfile(cost_path):
-            return FileResponse(cost_path, media_type="text/html")
-    return Response(status_code=404)
-
-
-# R4: standalone trust-trajectory page that fetches /api/trust/trajectory.
-# Mirrors the cost.html / /cost pattern: works without the SPA build.
-@app.get("/trust", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
-async def serve_trust_panel():
-    """Serve the standalone trust-trajectory HTML panel."""
-    if STATIC_DIR:
-        trust_path = os.path.join(STATIC_DIR, "trust.html")
-        if os.path.isfile(trust_path):
-            return FileResponse(trust_path, media_type="text/html")
-    return Response(status_code=404)
-
-
-# Serve index.html or standalone HTML for root
+# The legacy dashboard UI was removed (CPE-24). The Control Plane serves the UI;
+# this server keeps only the /api/* routes that have no Control Plane home yet.
 @app.get("/", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
 async def serve_index():
-    """Serve the frontend SPA or standalone HTML."""
-    # Try multiple index file locations
-    index_candidates = []
-    if STATIC_DIR:
-        index_candidates.append(os.path.join(STATIC_DIR, "index.html"))
-        index_candidates.append(os.path.join(STATIC_DIR, "loki-dashboard-standalone.html"))
+    """Tell a browser where the UI moved; never serve developer JSON to it."""
+    return HTMLResponse(content=_moved_page(), status_code=410)
 
-    # Also check dashboard-ui directly for standalone
-    standalone_path = os.path.join(PROJECT_ROOT, "dashboard-ui", "dist", "loki-dashboard-standalone.html")
-    if standalone_path not in index_candidates:
-        index_candidates.append(standalone_path)
 
-    for index_path in index_candidates:
-        if os.path.isfile(index_path):
-            return FileResponse(index_path, media_type="text/html")
-
-    # No frontend anywhere: a browser must never see developer JSON.
-    return HTMLResponse(content=_fallback_page(), status_code=503)
-
-
-def _fallback_page() -> str:
+def _moved_page() -> str:
     import html as _html
+    cp = os.environ.get("LOKI_CONTROL_PLANE_URL", "").strip()
+    where = (
+        f'<p>Control Plane: <a href="{_html.escape(cp, quote=True)}">{_html.escape(cp)}</a></p>'
+        if cp.startswith(("http://", "https://"))
+        else "<p>Run <code>loki ui</code> to open the Control Plane.</p>"
+    )
     return (
         '<!doctype html><html lang="en"><head><meta charset="utf-8">'
-        "<title>Loki Mode Dashboard</title></head>"
+        "<title>Loki Mode API</title></head>"
         '<body style="font-family:system-ui,sans-serif;max-width:40rem;margin:4rem auto;padding:0 1rem">'
-        "<h1>Loki Mode dashboard UI is not installed</h1>"
-        f"<p>The dashboard API is running (version {_html.escape(str(_version))}) "
-        "but this install has no frontend files.</p>"
-        "<p>Reinstall to fix it:</p><pre>npm install -g loki-mode@latest</pre>"
+        "<h1>The dashboard UI moved to the Control Plane</h1>"
+        f"<p>This server (version {_html.escape(str(_version))}) now serves the /api routes only.</p>"
+        f"{where}"
         '<p><a href="/docs">API docs</a> | <a href="/health">Health</a></p>'
         "</body></html>"
     )
@@ -13099,40 +13005,18 @@ async def post_wiki_ask(req: WikiAskRequest):
 
 
 # ---------------------------------------------------------------------------
-# SPA catch-all: serve index.html for any path not matched by API routes
-# or static asset mounts.  This lets the dashboard UI handle client-side routing.
+# Catch-all: unknown paths are real 404s (the SPA was removed, CPE-24).
 # Must be registered LAST so it never shadows an API endpoint.
 # ---------------------------------------------------------------------------
 @app.get("/{full_path:path}", include_in_schema=False, dependencies=[Depends(auth.require_scope("read"))])
 async def serve_spa_catchall(full_path: str):
-    """Serve static files or fall back to index.html for SPA routing.
-
-    v7.6.1 B-10 fix: requests under /api/, /lab/api/, or /ws/ that fall through
-    here are missing routes, not SPA navigation. Returning index.html (text/html)
-    silently masks 404s and breaks JSON clients (the dashboard UI's loki-memory-browser
-    pinged /api/learning/metrics expecting JSON and got an HTML SPA on prior
-    failures). Return a JSON 404 instead so clients fail loud.
-    """
-    # API paths that fell through are real 404s, not SPA routes.
+    """Return a JSON 404 for API-like paths so JSON clients fail loud, else a bare 404."""
     api_like = full_path.startswith("api/") or full_path.startswith("lab/api/") or full_path.startswith("ws/")
     if api_like:
         return JSONResponse(
             status_code=404,
             content={"error": "Not Found", "path": f"/{full_path}"},
         )
-    if STATIC_DIR:
-        static_root = os.path.realpath(STATIC_DIR)
-        # Try to serve the exact file first (e.g. /vite.svg, /manifest.json)
-        # Use realpath to prevent path traversal attacks
-        candidate = os.path.realpath(os.path.join(STATIC_DIR, full_path))
-        if not candidate.startswith(static_root + os.sep) and candidate != static_root:
-            return Response(status_code=404)
-        if os.path.isfile(candidate):
-            return FileResponse(candidate)
-        # Fall back to index.html for client-side routes
-        index_path = os.path.join(STATIC_DIR, "index.html")
-        if os.path.isfile(index_path):
-            return FileResponse(index_path, media_type="text/html")
     return Response(status_code=404)
 
 

package/docs/COCKPIT-SPEC.md

@@ -1,5 +1,7 @@
 # Loki Cockpit (rec #6) - build spec
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 Status: IN BUILD (v7.126.0 target). Design approved via mockup
 (scratchpad/loki-cockpit.html). Grounded in real engine state + Autonomi identity.
 
@@ -59,7 +61,7 @@ No chafa / no headless Chrome hard dependency. Pipeline:
 - S3 (render pipeline): SVG-from-state builder + SVG->PNG + terminal-image
   encoder + capability detection + fallback. Tests (encoder byte-shape, detection).
 - S4 (dashboard identity redesign): apply logo/purple/fonts/multi-repo switcher to
-  dashboard-ui; rebuild dist. Lightweight gate.
+  legacy-ui; rebuild dist. Lightweight gate.
 - S5 (docs + wiki + release): help text, README, wiki, CHANGELOG, 14 version files.
 
 ## Constraints

package/docs/DASHBOARD-9.12-EVIDENCE.md

@@ -28,7 +28,7 @@ carries a `reason`, an unmeasured number reads `None` rather than `0`, and
 | `source` | 10 of 43 | Most rows cannot be audited back to the file they came from |
 
 ```bash
-cd dashboard-ui
+cd legacy-ui
 grep -l "freshness_s" components/*.js core/*.js | wc -l   # 0
 grep -l "measured"    components/*.js core/*.js | wc -l   # 0
 ```

package/docs/DASHBOARD-ARCHITECTURE.md

@@ -1,5 +1,7 @@
 # Dashboard Architecture: Real-Data, Near-Realtime
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 Design only. No implementation in this document.
 
 Status: proposal. Measured against the worktree at
@@ -41,7 +43,7 @@ brief's number and my measurement disagree, both are shown.
 
 One correction against myself: my first pass reported `0` aria attributes in the
 built artifact and I nearly wrote that up as a shipped accessibility regression.
-It was a measurement error. `dashboard/static/index.html` has lines long enough
+It was a measurement error. `legacy-ui-static/index.html` has lines long enough
 (577 chars plus minified runs) that `grep` treated the file as binary and
 suppressed output. With `grep -a` the brief's numbers are confirmed. This is the
 `grep-absence false-green` failure mode: an empty result was an absent
@@ -178,7 +180,7 @@ machine-checkable instead of a naming habit.
   `/api/health/processes`.
 
 Built artifact realtime constructs: 9
-(`grep -oaE "new WebSocket|EventSource|setInterval" dashboard/static/index.html | wc -l`).
+(`grep -oaE "new WebSocket|EventSource|setInterval" legacy-ui-static/index.html | wc -l`).
 The brief's "34 realtime constructs" is not reproducible by any pattern I tried;
 I mark that figure **not independently verified** rather than repeat it.
 
@@ -234,8 +236,8 @@ The bundle is 779,725 bytes raw, 150,341 gzipped
 gzip stays; nothing in this design touches it.
 
 **Progressive disclosure here cannot mean code-splitting.**
-`dashboard-ui/scripts/build-standalone.js` produces a single self-contained
-file with zero runtime dependencies, written to both `dashboard/static/` and
+`legacy-ui/scripts/build-standalone.js` produces a single self-contained
+file with zero runtime dependencies, written to both `legacy-ui-static/` and
 `dist/`. That property is why the dashboard works offline and inside Docker
 without a CDN. Splitting the bundle would trade a real capability for a
 transfer-size win that gzip has already mostly taken (5.2x). So disclosure is
@@ -265,12 +267,12 @@ Measured on the shipped artifact with `grep -a`:
 
 | Property | Count | Command |
 |---|---|---|
-| Custom elements registered | 39 | `grep -oa "customElements.define" dashboard/static/index.html \| wc -l` |
+| Custom elements registered | 39 | `grep -oa "customElements.define" legacy-ui-static/index.html \| wc -l` |
 | `aria-*` attributes | 100 | `grep -oa "aria-[a-z]*=" ... \| wc -l` |
 | `aria-` occurrences | 113 | `grep -oa "aria-" ... \| wc -l` |
 | `role="` | 38 | `grep -oa 'role="' ... \| wc -l` |
 | `@media` breakpoints | 13 | `grep -oa "@media" ... \| wc -l` |
-| Component source files | 43 | `ls dashboard-ui/components \| grep -v vendor \| wc -l` |
+| Component source files | 43 | `ls legacy-ui/components \| grep -v vendor \| wc -l` |
 | Registrations in source | 44 | `grep -roha "customElements.define" components core \| wc -l` |
 
 The brief's 113 aria and 41 role are consistent with mine within pattern choice
@@ -278,7 +280,7 @@ The brief's 113 aria and 41 role are consistent with mine within pattern choice
 figure is 43 files carrying 44 registrations, not 46.
 
 **One gap worth noting:** source registers 44 custom elements, the shipped
-artifact registers 39. Five components exist in `dashboard-ui/` and do not reach
+artifact registers 39. Five components exist in `legacy-ui/` and do not reach
 the browser. This is out of scope for this document and I did not chase it, but
 it is recorded here because it means the source tree is not a reliable proxy for
 what ships. All acceptance criteria in section 5 therefore measure the **built
@@ -369,10 +371,10 @@ Every row is measurable by a command. No aspirational entries.
 |---|---|---|---|
 | A1 | No route regression | `grep -cE '^@app\.(get\|post\|put\|delete\|patch\|websocket)' dashboard/server.py` | >= 165 |
 | A2 | api_v2 routes intact | `grep -cE '@router\.(get\|post\|put\|delete)' dashboard/api_v2.py` | >= 24 |
-| A3 | Accessibility not regressed | `grep -oa "aria-" dashboard/static/index.html \| wc -l` | >= 113 |
-| A4 | Roles not regressed | `grep -oa 'role="' dashboard/static/index.html \| wc -l` | >= 38 |
-| A5 | Custom elements not regressed | `grep -oa "customElements.define" dashboard/static/index.html \| wc -l` | >= 39 |
-| A6 | Breakpoints not regressed | `grep -oa "@media" dashboard/static/index.html \| wc -l` | >= 13 |
+| A3 | Accessibility not regressed | `grep -oa "aria-" legacy-ui-static/index.html \| wc -l` | >= 113 |
+| A4 | Roles not regressed | `grep -oa 'role="' legacy-ui-static/index.html \| wc -l` | >= 38 |
+| A5 | Custom elements not regressed | `grep -oa "customElements.define" legacy-ui-static/index.html \| wc -l` | >= 39 |
+| A6 | Breakpoints not regressed | `grep -oa "@media" legacy-ui-static/index.html \| wc -l` | >= 13 |
 | A7 | gzip still active | `grep -c "GZipMiddleware" dashboard/server.py` | >= 1 |
 | A8 | Zero runtime dependencies | Built artifact contains no external script/CDN src | 0 external hosts |
 | A9 | Runs store is written by the engine | Drive the lifecycle writer directly (source `run.sh`, call the phase-boundary function), then `GET /api/v2/runs`. No provider call, no spend | Returns >= 1 record with a real run id |

package/docs/DASHBOARD_V2_CHECKLIST.md

@@ -1,5 +1,7 @@
 # Loki Mode Dashboard V2 - Implementation Checklist
 
+> **Historical:** this describes the classic dashboard, removed in Loki Mode 10.8. The Control Plane is the only UI; see [control-plane-migration.md](control-plane-migration.md).
+
 ## Overview
 Enterprise-grade Kanban dashboard with FastAPI backend, cross-project support, and CLI integration.
 

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v10.8.0
+**Version:** v10.9.1
 
 **Engine note:** `loki "<task>"`, `loki owner/repo#N` and `loki quick` run the Loki 10 engine. `loki start` still routes to the legacy engine, which is being removed (planned work resumes 2026-10-07); prefer `loki owner/repo#N`. See [docs/v10/GUIDE.md](v10/GUIDE.md).
 
@@ -294,7 +294,7 @@ trade-offs.
 ## VS Code Extension (Deprecated)
 
 > **DEPRECATED as of v7.2.0.** The Loki Mode VS Code extension is no longer
-> maintained. Use the dashboard at `loki dashboard start` instead.
+> maintained. Use the Control Plane (`loki dashboard`) instead.
 >
 > The marketplace listing remains for users on v7.2.0 and earlier but will
 > not receive further updates. The `vscode-extension/` source remains in the
@@ -305,8 +305,8 @@ trade-offs.
 ### Recommended replacement: the dashboard
 
 ```bash
-loki dashboard start
-# Then open http://localhost:57374 in your browser.
+loki dashboard
+# Opens the Control Plane (default http://127.0.0.1:47821).
 ```
 
 The dashboard provides session monitoring, task views, the completion
@@ -450,7 +450,7 @@ behave exactly like the local `loki` CLI. Auth is auto-detected:
 (Max/Pro subscribers need no API key), else an honest error with guidance. It
 also forwards `~/.gitconfig` and `~/.config/gh` (read-only) plus
 `GITHUB_TOKEN`/`GH_TOKEN` if set, so commits and PRs work like local, and
-exposes the dashboard on port 57374. Use `--image IMG` to override the image.
+exposes the API on port 57374. Use `--image IMG` to override the image.
 
 `loki docker` is a thin host wrapper around the image; it requires loki and
 Docker installed on the host.
@@ -459,7 +459,7 @@ Multi-repo + unified dashboard: you can run `loki docker start` in several
 different repos at once, exactly like the host CLI. Each repo gets its own
 container (deterministic name `loki-<hash-of-path>`) and its own bind-mounted
 `.loki/` state. Every `loki docker` project registers with the host dashboard,
-so running `loki dashboard` on the host shows ALL your projects in one unified
+so running `loki dashboard` on the host (the Control Plane) shows ALL your projects in one unified
 view, whether they run via local `loki start` or via `loki docker start`. Builds
 run with the dashboard off by default (so concurrent runs do not collide on port
 57374); use the host `loki dashboard`, or `loki docker start --api` for a single
@@ -775,11 +775,12 @@ Loki Mode uses two network ports for different services:
 
 | Port | Service | Description |
 |------|---------|-------------|
-| **57374** | Dashboard + API (FastAPI) | Unified server serving both the web dashboard UI (real-time monitoring, task board, Completion Council, memory browser, log streaming) and the REST API (used by CLI tools, programmatic access, and the deprecated VS Code extension). Served by `dashboard/server.py`. |
+| **47821** | Control Plane UI + API | The only UI, plus the `/v1/*` API. Started by `loki control serve` or `loki dashboard`. See [control-plane-migration.md](control-plane-migration.md). |
+| **57374** | Legacy API (FastAPI) | The classic dashboard UI is removed in 10.8; this port no longer serves a UI. |
 
 ### When to Use Which Port
 
-- **Browser access** (dashboard, monitoring): Use port **57374** -- `http://localhost:57374`
+- **Browser access** (UI, monitoring): Use the Control Plane, port **47821** -- `http://127.0.0.1:47821`
 - **API calls** (REST, programmatic): Use port **57374** -- `http://localhost:57374`
 - **VS Code extension** (deprecated as of v7.2.0): Connects to API on port **57374** automatically (configurable via `loki.apiPort` setting). No new releases will be published; see the deprecation notice above.
 - The server is started automatically when you run `loki start` or `./autonomy/run.sh`. No manual configuration is needed.
@@ -787,8 +788,8 @@ Loki Mode uses two network ports for different services:
 ### Port Configuration
 
 ```bash
-# Dashboard port (default: 57374)
-LOKI_DASHBOARD_PORT=57374 loki dashboard start
+# Control Plane port (default: 47821)
+loki control serve --port 47821
 
 # API port (default: 57374)
 loki api start --port 57374   # was: loki serve
@@ -796,7 +797,7 @@ loki api start --port 57374   # was: loki serve
 
 ### CORS Configuration
 
-For remote or cross-origin access to the dashboard, configure allowed origins via the `LOKI_DASHBOARD_CORS` environment variable:
+The Control Plane has no CORS setting and requires a loopback Host header unless it is bound to a non-loopback address with `LOKI_CONTROL_TOKEN` set (see [control-plane-migration.md](control-plane-migration.md)). The `LOKI_DASHBOARD_CORS` variable below applies only to the legacy API server:
 
 ```bash
 # Allow specific origins

package/docs/MERGE-DEDUP-MAP.md

@@ -362,7 +362,7 @@ class FileEventDebouncer(FileSystemEventHandler):
 ### What Was NOT Audited (and Why)
 
 1. **Frontend code duplication** (TypeScript/React):
-   - Dashboard UI (`dashboard-ui/src/`) and Lab UI (`web-app/dist/` or source) likely have overlapping components (session cards, status displays, log viewers).
+   - Dashboard UI (`legacy-ui/src/`) and Lab UI (`web-app/dist/` or source) likely have overlapping components (session cards, status displays, log viewers).
    - Scope: This audit covers Python backend only. Frontend audit deferred to UI design review in Merge-3 (Vite rebuild).
 
 2. **Database schema migrations and compatibility:**

package/docs/MERGE-ROUTE-MAP.md

@@ -30,7 +30,7 @@ This document is the source-of-truth route-collision analysis for the Purple Lab
 | Method | Path | Dashboard purpose | Purple Lab purpose | Resolution |
 |---|---|---|---|---|
 | `GET` | `/health` | Dashboard health check | Purple Lab health check | Single `/health` on Dashboard wins. Lab's becomes `/lab/health`. |
-| `GET` | `/{full_path:path}` | Dashboard SPA catch-all (serves `dashboard/static/index.html`) | Purple Lab SPA catch-all (serves `web-app/dist/index.html`) | Dashboard catch-all wins at root. Lab's becomes `/lab/{full_path:path}` -- triggered only inside the mount. |
+| `GET` | `/{full_path:path}` | Dashboard SPA catch-all (serves `legacy-ui-static/index.html`) | Purple Lab SPA catch-all (serves `web-app/dist/index.html`) | Dashboard catch-all wins at root. Lab's becomes `/lab/{full_path:path}` -- triggered only inside the mount. |
 | `WS` | `/ws` | Dashboard WebSocket bus | Purple Lab WebSocket bus | Dashboard `/ws` wins. Lab's becomes `/lab/ws`. Long term: unify into a single bus (Phase Merge-5). |
 
 All three collisions resolve automatically when Lab's FastAPI app is mounted at `/lab` via Starlette `app.mount("/lab", purple_lab_app)`. No code dedup needed in Merge-1 -- the mount provides path isolation.