code-context-control 2.46.1__py3-none-any.whl → 2.49.1__py3-none-any.whl

cli/c3.py

@@ -85,7 +85,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.46.1"
+__version__ = "2.49.1"
 
 
 def _command_deps() -> CommandDeps:
@@ -5632,10 +5632,18 @@ def _bb_cmd_set_default(args, project_path: str) -> None:
 
 
 def cmd_oracle(args):
-    """Oracle Discovery API key + connection management."""
+    """Oracle dashboard server + Discovery API key management."""
     sub = getattr(args, "oracle_cmd", None)
+    if sub in ("serve", "start"):
+        # Lazy import: run_oracle builds all Oracle services (matches
+        # cmd_hub's deferred-import style so bare `c3` stays fast).
+        from oracle.oracle_server import run_oracle
+        run_oracle(port=getattr(args, "port", None),
+                   open_browser=not getattr(args, "no_browser", False))
+        return
     if sub != "api":
-        print("Usage: c3 oracle api {info,key,rotate,clear}")
+        print("Usage: c3 oracle {serve,api} — serve: launch the dashboard; "
+              "api {info,key,rotate,clear}: manage the Discovery key")
         return
 
     from oracle.config import load_config

cli/commands/parser.py

@@ -357,9 +357,18 @@ def build_parser(version: str, parse_cli_ide_arg):
     # ── Oracle Discovery API (v2.32.0) ──────────────────────────────────
     p_oracle = subparsers.add_parser(
         "oracle",
-        help="Oracle Discovery API key + connection management",
+        help="Oracle dashboard server + Discovery API key management",
     )
     or_subs = p_oracle.add_subparsers(dest="oracle_cmd")
+    or_serve = or_subs.add_parser(
+        "serve",
+        aliases=["start"],
+        help="Launch the Oracle dashboard server (REST + MCP discovery endpoints)",
+    )
+    or_serve.add_argument("--port", type=int, default=None,
+                          help="Server port (default: config 'port', 3331)")
+    or_serve.add_argument("--no-browser", action="store_true",
+                          help="Don't open the browser")
     or_api = or_subs.add_parser(
         "api",
         help="Show connection info / manage the Discovery API key",

{code_context_control-2.46.1.dist-info → code_context_control-2.49.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.46.1
+Version: 2.49.1
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Gemini, Copilot). Retrieve less, read less, edit safer — and version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP).
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0

{code_context_control-2.46.1.dist-info → code_context_control-2.49.1.dist-info}/RECORD

@@ -1,6 +1,6 @@
 cli/__init__.py,sha256=ec66drCZGNMRU4V6ov0zVhYZph1us12Vn8OvG_LJyRY,22
 cli/_hook_utils.py,sha256=zlquaQm0dvwdaZewD6YnFyF_LBzhmfFUUhL_8UbBKGA,11749
-cli/c3.py,sha256=Sx8ySlKiRJsdWwmBjhzaca8gEOWE4CLHangvpeRiGek,304129
+cli/c3.py,sha256=gQY5eY2DO1gk7xSa4734VLHLi_6aFwxd32HBUjGBbZQ,304587
 cli/docs.html,sha256=CC_-4PaQxfjNXbcqcVuU5rzdbP1NosYJxFRiXZV4joI,143645
 cli/edits.html,sha256=UjAhoCmBmQ89cklGvJqzC6eyNP2tc8H6T-e01DVkLvE,43418
 cli/hook_artifact.py,sha256=Se1CNBfoBFyvJQlRmYdNtdRXIkQp9zaF0O6ndRMo7ts,2198
@@ -27,7 +27,7 @@ cli/ui_legacy.html,sha256=cI8tC6RKmE2NIJOcsu7CY-zT4VznjcbD6NTjxb_fvUY,378460
 cli/ui_nano.html,sha256=UAwQ6bbTOXAoGq191AZ7slhngR9edJSa3IhqpynveDg,27740
 cli/commands/__init__.py,sha256=0Z8MABNzwSFJGT4Xv9R5AJVR8XxraTsuVTz5b0bShmo,38
 cli/commands/common.py,sha256=fHZWzkd4OLl3vPWTTgaI5vaqMi3Ma3XqAu1Ds_-51_4,11299
-cli/commands/parser.py,sha256=Opci6sxpmp0fND1XI77blOYjf04rwGCpL5lwd6y33U8,24923
+cli/commands/parser.py,sha256=inkJuMro1kkpKj8lpiWRlNYPQ_DC4REF-m6Ut1CAkmA,25355
 cli/guide/bitbucket.html,sha256=5HrLDm6Ue-AJZ81bqWaSp2nSfxaRdEjHFY29P7plLXA,33350
 cli/guide/getting-started.html,sha256=F3AaF2HVfeg6eKO25p_vPogr_i1hvkjIZVggIJFWTl0,18829
 cli/guide/index.html,sha256=XIpgQN0XbLJzL-Atou65NU5Irj_I-w4mbERU9WfZJ0E,21223
@@ -93,34 +93,53 @@ cli/ui/components/sessions.js,sha256=FIKtil76B8tCkAmcFV7hlj6GQ_DCJK2jCzvEmdK7NBE
 cli/ui/components/settings.js,sha256=8LVTV2TQl9tcRXhXbtBEJOCBdiyk-x2QASoVYZUAuEA,71442
 cli/ui/components/sidebar.js,sha256=cAY_jwYB-o1X_wWn__VXlG4IegVObuE3NmVsuFWqxtg,7417
 cli/ui/components/tasks.js,sha256=OxLhspzzEQjxxtSEpOpugO2KptD4xNrimf_xM0wiVv8,12752
-code_context_control-2.46.1.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
+code_context_control-2.49.1.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
 core/__init__.py,sha256=TSDCEcM4V7gcZVM3w2ykJaqEUch4Dkon-rivV17T73s,2501
 core/config.py,sha256=9R8bIcHhjSPdrfcCeMPnS4YgLCyRNWwlt_Z75PZcBDE,14780
 core/ide.py,sha256=9LzsDVK2LL8RVpL40l6oNGiasZ3D8OCU_9i9A0gJKBo,6876
 core/mcp_toml.py,sha256=wfc7c6X7lIW5YpdWFnRK0qQ0M46v2t8j6WzcqfTKhaE,5627
 core/web_security.py,sha256=HwgK5aBATfvRIeO_4gWgzK77gKwGuzVlmiuNGm4gGxI,7884
 oracle/__init__.py,sha256=-OTD7Jh4mUMA4QgPGthPLWXttgZLpkIPhGQ87ZfHBx0,63
-oracle/config.py,sha256=ErjH6Y_F51jGXpYo_4boGhdIk-AIo3rDH3xDwUGs7B8,3193
+oracle/config.py,sha256=4geiSXhwXbKvy2EaKibKxpg8DgUVJWkNeSMcpQFOo_s,3913
 oracle/mcp_oracle.py,sha256=B5B-qSxi37outsuRHn1Ns6Gj8e7W593rmL34LMzuE8M,8980
-oracle/oracle.html,sha256=fWs60EW0ZOBMyC_XwB0SWN_LpjI8S2eACt23pJeUI7g,190791
-oracle/oracle_server.py,sha256=dxoycgeJvVezGPuoharv1uMa0BUIBfHJ5QqQWUDsuk4,37617
+oracle/oracle_server.py,sha256=zDywXKQC8Yxq8HrwpBEIJvanr-OKkO62eQZCVGGKcTI,41589
+oracle/oracle_ui.html,sha256=qML_m7GY-iPEhQOiczDd8T6IEVtqcrjwEoudK9f9C5U,68441
 oracle/services/__init__.py,sha256=Nb4POd1_YIwLVYsGfr-DiK-iKTelkU0fh9m7wjeLQHA,23
 oracle/services/activity_reporter.py,sha256=ZAxNFyUy7QRP28anQLRbKEwm5SGG97KIQYFQDLjYqlM,11729
 oracle/services/api_auth.py,sha256=1PW3pG--1DJb_F6qMhP3gBTYHxxPE2bsHmVmIhC81Y8,3566
-oracle/services/c3_bridge.py,sha256=TgYnX9tJvzpXx6B2eC3EhJkqoKoRUaGJw0nrBidLKVA,10752
-oracle/services/chat_engine.py,sha256=yKJcqtLNuwDy_sMVOBZk1R7uAH6d9QboPjfAbekqhSs,50500
+oracle/services/c3_bridge.py,sha256=RqSw1tOoUDXA21fKDHmZ7s7qrIj3jiDYq8j8OvbxshA,17919
+oracle/services/chat_engine.py,sha256=5vSPjjsaA1Swbs9Ob4bS60SRgTa58YQV8pzzxcXCTbc,66126
 oracle/services/chat_store.py,sha256=mizKwDyFGESKh63V-XgyNd3jQVrN2JCQc-7u8z3_1F4,6252
 oracle/services/cross_memory.py,sha256=F8JeYkEFSwQL3iGS9KV1onaMSFj3opr6f3nCxwvznV0,5484
-oracle/services/federated_graph.py,sha256=F808OkuqAbKXHqugP0PfQRLk-KrROLfjSLGLBVb6p-c,17735
+oracle/services/federated_graph.py,sha256=I9FWedcht6-FU2hoIlMHlXyjpwrspKueIN-jEYek6vg,19947
 oracle/services/health_checker.py,sha256=SlsW4nxP5u8gHJY9FpeaZoC9_K-NhoiHr2Q7JvGMvdY,4359
 oracle/services/insight_engine.py,sha256=YBZX28P-ME-nJ02cebFIVH0WvIGebFnQQCt8paXri4Y,11417
+oracle/services/local_session.py,sha256=f6qzHPZPtn1XIV5wNnlJ85BY3tApAh2NoYdtaIFpMDs,1887
 oracle/services/memory_reader.py,sha256=rSEmoIXQu2JkolHJIQWpn0piPJpyuf1KZvW_9liQwkU,3727
 oracle/services/memory_writer.py,sha256=hpvYsxjhl293jEjGcRKfjG5njUaAOXKqbmJaUu1WdUU,6997
-oracle/services/ollama_bridge.py,sha256=d0458HTaQO9m-Ur4bRIt9izxbJFDj1Dbea9sfo7MRCU,12958
-oracle/services/project_scanner.py,sha256=SGHYKU00fm57L5VyDuet-CAACfrhUZY2xvIlZR27aj4,3142
-oracle/services/review_agent.py,sha256=99PQ1oKxRDo_4COMOy3CJOawqk08MRJ4cS66_w7SWCo,7720
+oracle/services/ollama_bridge.py,sha256=T3Xif3OXsjtsJvsNXhr_iRlB3fr9lbFipuA_1ngK7jQ,16705
+oracle/services/project_scanner.py,sha256=gHpXihRZSu2gXCp4vvOWp5gMAsmfINE9ESiqVF1uV3A,5587
+oracle/services/review_agent.py,sha256=m_fzoHowpiibf0_iz3dF72LWSrwB_FbDd1am-SbeWXg,11273
 oracle/services/tool_executor.py,sha256=xtAkBWkclh_FwOgzprjGkyRIV8-A7Lc3bz0UFPShrv0,1113
-oracle/services/tool_registry.py,sha256=OSTl_ngQTO-JJRgcXvNeM6A5WDxTLfcCslafZjmolpA,19950
+oracle/services/tool_registry.py,sha256=fHXgQ2Y7T8JdjrxYgAnOlYRANtve5SikkEuf4b86i94,25686
+oracle/ui/activity.js,sha256=zbJjqkY-tTQS4YKcdSEr2Z5zAbwbOIPyTNzldQSPU7I,4830
+oracle/ui/agents.js,sha256=RNnsGUVg5DlRYiv-Ovzb3W4yyP4z0qTX3o7Y1_BgZpo,4538
+oracle/ui/app.js,sha256=fyfFL7YNbl_z1WSUOMXScp4qcavuFVg5cnA7D1i3zYU,795
+oracle/ui/busy.js,sha256=ePFGqEheHpn-E971pN_9DbQvvkxD-d2V7Efbw68bpo0,4122
+oracle/ui/core.js,sha256=M6gt_AjxKLoZ8sEYsHT1n4-qR4F7qMSe80Quls1hgL8,3214
+oracle/ui/crossgraph.js,sha256=7yBCciuEzZ0LYspWMO0xTe_GuPQ_NccnIeRrqEq5Qxs,9234
+oracle/ui/header.js,sha256=KA-vZ-KIVEDZ1RejMSXX76t3Zno1r7q85xQWzMQizvw,3598
+oracle/ui/insights.js,sha256=zACyfGz9-4y2eFd6OM1IE-L_HyL1wnqo46nJDyRx7-M,2408
+oracle/ui/projects.js,sha256=ULE6Py1iULVmRGy0mCnEAxKNwHvn-baUYlNDF5xGYM8,13002
+oracle/ui/settings.js,sha256=4p4CB_5GFic1uHeiDHtN7yB5Ma0dLN5HAVDQ_04QbGo,7889
+oracle/ui/suggestions.js,sha256=ItQTlyd6LS_QxvbJmNMYeHY3cl0lSRgBdR53XKkBpP0,2332
+oracle/ui/theme_tabs.js,sha256=sIFnBLgI_Hp7c-GRZrWN2v4pvRBJUnIhhwGG91qydKI,3347
+oracle/ui/chat/conversations.js,sha256=FOpXNrIeiJUR9VueBYEuLml-VfJfuHo05ZVkT-x7XRI,5907
+oracle/ui/chat/input.js,sha256=9m48OZzmhCygND24pjZikOBzEXhOK6YqwWt4d5bjKbs,9329
+oracle/ui/chat/markdown.js,sha256=14Le4i88756PQvsl2ZuKGMuRw1FDuEPXr_oi2U6kLFM,1508
+oracle/ui/chat/send.js,sha256=k2qGN_asb7FTjcLa204Zjq4X_QWHIKHQnI33IEuxvaQ,11558
+oracle/ui/chat/stream_renderer.js,sha256=RZndI2mu5xbzZF-4NG9jeOqXTcmIqfZqxgkrBvTzWmk,29861
+oracle/ui/chat/toolbar.js,sha256=ZDexIIpGwsQ6XsY4Tyo082rJoofdD_JBTV97-mLQUVM,12027
 services/__init__.py,sha256=3Kn4cZweLm7at8wFdBdZ-Zwo8hHcnVIsmY5f29nzi2Y,116
 services/activity_log.py,sha256=PNGeEYlw1Aux-mRU4pKCQdbsSuzLvOg7MYiq-cb4n8g,4473
 services/agent_base.py,sha256=a-gdSd_jtZtbjXo1WS8CnWCagXgKaGZd5ShcG6s0kT4,4809
@@ -158,7 +177,7 @@ services/ollama_client.py,sha256=UiC5Abca622-ac-4goCkAjwo7iUye9g9JGFMN6Ea08M,798
 services/output_filter.py,sha256=lknQHs38JlRtXU4Ogoru6sveNokSKBQPfZXhf-fE0xM,21736
 services/parser.py,sha256=CPoIN1FmX7kK-55FnC3jvRy3NLjlnf1armTaD6o7GBg,55203
 services/project_manager.py,sha256=LaNWqBeVMx6wcB6iiOQyRWSWhS-JXzfDApJmHFmTCy8,36477
-services/project_runtime.py,sha256=e4qDsYbjsWbm7RyAUOPdKbPXFoO4OBApnlQM69Tw-bE,10982
+services/project_runtime.py,sha256=yyftX48BFjq4B2KcR4KGszDAAa4xR6gn6j0SgTyro1s,11603
 services/protocol.py,sha256=E0xxs43j-YSOBWalKHbX_wwqphQgDjqUjyyvTW0s6II,12247
 services/proxy_state.py,sha256=u5rd0k6CrOsywZA8FpRu_hMLwhR0TAJhZjy5MdWbCGc,6107
 services/retention.py,sha256=I2_RV233kWBBXox5rc_w-1h1aPua93o9huuPf-pJVuE,18629
@@ -200,8 +219,8 @@ tui/screens/search_view.py,sha256=MMHjVdlk3HZSuDBSvq8IGrqv_Mh5Us6YqXQ80bcWSMk,19
 tui/screens/session_view.py,sha256=eZ1eDwHTvPOck1wCCviixtOaCxIkBT_95ytNNNriGNA,5991
 tui/screens/stats.py,sha256=p81PjzdaIv7hllb8f45-rlVe4lJZwSdIMqu7e86_u5s,6223
 tui/screens/ui_view.py,sha256=1QJCgLh2YfgWIpvzRG1KOGXYEaOYX6ojN61Azjf2oX0,2125
-code_context_control-2.46.1.dist-info/METADATA,sha256=Gqn5nbiiyphjNm0oz2ohgTxveh5KQyzUDVd14POqUxw,23785
-code_context_control-2.46.1.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-code_context_control-2.46.1.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
-code_context_control-2.46.1.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
-code_context_control-2.46.1.dist-info/RECORD,,
+code_context_control-2.49.1.dist-info/METADATA,sha256=nYHYs-fLmzcaQ-VP7YRq7MKu6r9i4fnq3rEPCVlx5UU,23785
+code_context_control-2.49.1.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+code_context_control-2.49.1.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
+code_context_control-2.49.1.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
+code_context_control-2.49.1.dist-info/RECORD,,

oracle/config.py

@@ -18,12 +18,21 @@ DEFAULTS = {
     "mcp_port": 3332,               # discovery MCP transport port (loopback)
     "ollama_base_url": "https://ollama.com",
     "ollama_api_key": "",
+    "llm_cache_ttl_sec": 86400,     # disk cache TTL for generate() responses
     "model": "gemma4:31b-cloud",
     "hub_url": "http://localhost:3330",
+    "scanner_ttl_seconds": 20,
     "review_interval_seconds": 1800,
     "review_enabled": True,
+    # ── Scheduled activity digest (runs inside the review loop) ──
+    "digest_enabled": False,          # off = current behavior (on-demand only)
+    "digest_interval_seconds": 86400, # daily cadence once enabled
+    "digest_narrate": False,          # LLM prose costs a cloud call; opt-in
+    "digest_notify_file": "",         # "" = disabled; else JSONL sink path
+    "digest_retention_days": 14,      # prune stored digests
     "auto_open_browser": True,
     "theme": "dark",
+    "ui_last_tab": "chat",          # persisted UI preference (hub parity)
     "max_facts_per_analysis": 100,
     "insight_confidence_threshold": 0.5,
     "log_level": "INFO",
@@ -39,6 +48,7 @@ DEFAULTS = {
             "description": "Expert in system architecture, design patterns, and cross-project structure. Best for high-level analysis.",
             "system_prompt": "You are the Architect. Focus on structural integrity, design patterns, and the big picture. Provide high-level recommendations before diving into code.",
             "model": "gemma4:31b-cloud",
+            "backend": "ollama",
             "active": True
         },
         {
@@ -47,6 +57,7 @@ DEFAULTS = {
             "description": "Specializes in deep code analysis, bug hunting, and tracing execution paths.",
             "system_prompt": "You are the Code Explorer. Be incredibly precise, cite specific lines of code, and focus on the technical implementation details. Trace logic thoroughly.",
             "model": "gemma4:31b-cloud",
+            "backend": "ollama",
             "active": True
         },
         {
@@ -55,6 +66,7 @@ DEFAULTS = {
             "description": "Focuses on analyzing project memory, facts, and insights.",
             "system_prompt": "You are the Memory Analyst. Rely heavily on memory tools and facts to spot trends. Connect current issues to past context.",
             "model": "gemma4:31b-cloud",
+            "backend": "ollama",
             "active": True
         }
     ],

oracle/oracle_server.py

@@ -3,7 +3,6 @@
 import atexit
 import json
 import logging
-import os
 import socket
 import sys
 import threading
@@ -16,11 +15,11 @@ _PROJECT_ROOT = Path(__file__).resolve().parent.parent
 if str(_PROJECT_ROOT) not in sys.path:
     sys.path.insert(0, str(_PROJECT_ROOT))
 
-from flask import Flask, Response, jsonify, request, send_from_directory  # noqa: E402
+from flask import Flask, Response, jsonify, request  # noqa: E402
 
 from oracle.config import ORACLE_DIR, load_config, save_config  # noqa: E402
 from oracle.mcp_oracle import mcp_url, start_mcp_thread  # noqa: E402
-from oracle.services import api_auth  # noqa: E402
+from oracle.services import api_auth, local_session  # noqa: E402
 from oracle.services.activity_reporter import ActivityReporter  # noqa: E402
 from oracle.services.api_auth import extract_bearer  # noqa: E402
 from oracle.services.api_auth import verify as verify_api_key  # noqa: E402
@@ -68,6 +67,7 @@ def _init_services():
         base_url=_cfg.get("ollama_base_url", "https://ollama.com"),
         model=_cfg.get("model", "gemma4:31b-cloud"),
         api_key=_cfg.get("ollama_api_key", ""),
+        cache_ttl_sec=int(_cfg.get("llm_cache_ttl_sec", 86400)),
     )
     # Verify model works on startup (background thread to avoid blocking)
     def _verify():
@@ -80,7 +80,10 @@ def _init_services():
             _model_verified = False
             logging.getLogger("oracle").warning("Ollama unreachable — model not verified")
     threading.Thread(target=_verify, daemon=True, name="oracle-model-verify").start()
-    _scanner = ProjectScanner(hub_url=_cfg.get("hub_url", "http://localhost:3330"))
+    _scanner = ProjectScanner(
+        hub_url=_cfg.get("hub_url", "http://localhost:3330"),
+        ttl=float(_cfg.get("scanner_ttl_seconds", 20)),
+    )
     _reader = MemoryReader()
     _checker = HealthChecker(_reader)
     _writer = MemoryWriter()
@@ -89,6 +92,8 @@ def _init_services():
     _chat_store = ChatStore()
     _c3_bridge = C3Bridge(scanner=_scanner)
     _federated = FederatedGraph(reader=_reader, cross_memory=_cross_memory, ollama_bridge=_bridge)
+    # Reporter before ReviewAgent: the review loop emits the scheduled digest.
+    _activity_reporter = ActivityReporter(scanner=_scanner, ollama_bridge=_bridge)
     _agent = ReviewAgent(
         scanner=_scanner,
         reader=_reader,
@@ -98,8 +103,8 @@ def _init_services():
         writer=_writer,
         interval=int(_cfg.get("review_interval_seconds", 1800)),
         federated_graph=_federated,
+        activity_reporter=_activity_reporter,
     )
-    _activity_reporter = ActivityReporter(scanner=_scanner, ollama_bridge=_bridge)
     _chat_engine = ChatEngine(
         bridge=_bridge,
         reader=_reader,
@@ -122,9 +127,10 @@ def _init_services():
 # ── CORS ──────────────────────────────────────────────────
 # Localhost security guard + scoped CORS (replaces the previous wildcard CORS).
 # Host-header allowlist + Origin/Referer CSRF guard. Bearer auth on
-# /api/discovery/* (see _discovery_auth_guard below) still applies on top; this
-# guard also protects the ungated endpoints (config, chat, /api/apikey) from
-# cross-origin reads — notably the raw Discovery token returned by api_apikey_get.
+# /api/discovery/* (see _discovery_auth_guard below) and the local write gate
+# (_local_write_guard: session cookie or Bearer on every other mutating
+# /api/* call) still apply on top; this guard blocks cross-origin browsers,
+# the write gate blocks unauthenticated local processes.
 from core.web_security import (
     allowed_hostnames as _allowed_hostnames,
 )
@@ -155,10 +161,90 @@ def _discovery_auth_guard():
     return None
 
 
+# ── Local write gate ──────────────────────────────────────
+@app.before_request
+def _local_write_guard():
+    """Auth gate for mutating local API calls (everything except Discovery).
+
+    Requires either the per-boot dashboard session cookie (issued on ``GET /``
+    to loopback browsers) or the Discovery Bearer token. Default-deny: any
+    future mutating ``/api/*`` endpoint is covered automatically. Closes the
+    rotate-then-read kill chain — previously any local process could POST
+    /api/apikey/rotate unauthenticated and read the fresh token, defeating
+    the Bearer gates on /api/config and /api/discovery/*.
+    """
+    path = request.path or ""
+    if not path.startswith("/api/") or path.startswith("/api/discovery"):
+        return None
+    if request.method in ("GET", "HEAD", "OPTIONS"):
+        return None
+    if verify_api_key(extract_bearer(request.headers.get("Authorization"))):
+        return None
+    if local_session.verify(request.cookies.get(local_session.COOKIE_NAME)):
+        return None
+    return jsonify({"error": "unauthorized"}), 401
+
+
 # ── Static ────────────────────────────────────────────────
+
+# JS load order for the concatenated Oracle UI build (mirrors cli/hub_server.py).
+# One shared script scope: function declarations hoist across files, and
+# app.js (the init IIFE) must stay LAST.
+_ORACLE_JS_FILES = [
+    "ui/core.js",
+    "ui/busy.js",
+    "ui/theme_tabs.js",
+    "ui/crossgraph.js",
+    "ui/header.js",
+    "ui/projects.js",
+    "ui/insights.js",
+    "ui/activity.js",
+    "ui/suggestions.js",
+    "ui/settings.js",
+    "ui/agents.js",
+    "ui/chat/markdown.js",
+    "ui/chat/conversations.js",
+    "ui/chat/stream_renderer.js",
+    "ui/chat/toolbar.js",
+    "ui/chat/input.js",
+    "ui/chat/send.js",
+    "ui/app.js",
+]
+
+
+def _build_oracle_html() -> str:
+    """Concatenate oracle_ui.html shell + all JS module files into one response."""
+    oracle_dir = Path(__file__).parent
+    shell_path = oracle_dir / "oracle_ui.html"
+    if not shell_path.exists():
+        return "<h1>Oracle UI not found.</h1>"
+
+    shell = shell_path.read_text(encoding="utf-8")
+
+    js_parts = []
+    for rel in _ORACLE_JS_FILES:
+        js_path = oracle_dir / rel
+        if js_path.exists():
+            js_parts.append(f"// ═══ {rel} ═══\n" + js_path.read_text(encoding="utf-8"))
+
+    return shell.replace("/* __C3_ORACLE_SCRIPTS__ */", "\n\n".join(js_parts))
+
+
+# Cache the built HTML (built on first request; cleared on server restart).
+_oracle_html_cache: str | None = None
+
+
 @app.route("/")
 def index():
-    return send_from_directory(os.path.dirname(__file__), "oracle.html")
+    global _oracle_html_cache
+    if _oracle_html_cache is None:
+        _oracle_html_cache = _build_oracle_html()
+    resp = Response(_oracle_html_cache, mimetype="text/html")
+    # Issue the dashboard session cookie only to loopback browsers; remote
+    # viewers (LAN bind) can read GET dashboards but cannot mutate.
+    if local_session.is_loopback(request.remote_addr):
+        local_session.attach_cookie(resp)
+    return resp
 
 
 # ── Health ────────────────────────────────────────────────
@@ -176,6 +262,7 @@ def api_health():
     return jsonify({
         "status": "ok",
         "service": "c3-oracle",
+        "version": _c3_version(),
         "model": _cfg.get("model", "gemma4:31b-cloud"),
         "ollama_available": ollama_ok,
         "model_verified": _model_verified,
@@ -206,11 +293,9 @@ _CONFIG_SETTABLE_KEYS = frozenset(_CONFIG_DEFAULTS.keys())
 @app.route("/api/config", methods=["POST"])
 def api_config_set():
     global _cfg
-    # Require the Bearer token: this endpoint can disable Discovery auth or
-    # repoint ollama_base_url, so it must never be reachable unauthenticated.
-    token = extract_bearer(request.headers.get("Authorization"))
-    if not verify_api_key(token):
-        return jsonify({"error": "unauthorized"}), 401
+    # Auth is enforced by _local_write_guard (session cookie or Bearer): this
+    # endpoint can disable Discovery auth or repoint ollama_base_url, so it
+    # must never be reachable unauthenticated.
     body = request.get_json(silent=True) or {}
     if not isinstance(body, dict):
         return jsonify({"error": "body must be a JSON object"}), 400
@@ -258,7 +343,8 @@ def api_projects():
 
 @app.route("/api/projects/scan", methods=["POST"])
 def api_projects_scan():
-    projects = _scanner.discover() if _scanner else []
+    # Explicit Scan action bypasses the scanner's TTL cache.
+    projects = _scanner.discover(force=True) if _scanner else []
     return jsonify({"scanned": len(projects), "projects": projects})
 
 
@@ -635,6 +721,23 @@ def api_chat_conversation_state(conv_id):
 
 
 # ── Activity digest (Oracle UI) ───────────────────────────
+@app.route("/api/activity/digest/latest", methods=["GET"])
+def api_activity_digest_latest():
+    """Most recent SCHEDULED digest (written by the review loop), or null.
+
+    On-demand digests via /api/activity/digest are not persisted here; this
+    serves ~/.c3/oracle/activity_digests/latest.json.
+    """
+    latest = ORACLE_DIR / "activity_digests" / "latest.json"
+    try:
+        if latest.is_file():
+            return Response(latest.read_text(encoding="utf-8"),
+                            mimetype="application/json")
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+    return jsonify({"digest": None, "generated_at": None})
+
+
 @app.route("/api/activity/digest", methods=["GET"])
 def api_activity_digest():
     """Cross-project activity digest for the Oracle UI.
@@ -740,7 +843,7 @@ def api_discovery_mcp_info():
     })
 
 
-# ── Discovery API key management (local dashboard — unauthenticated, loopback) ──
+# ── Discovery API key management (mutations gated by _local_write_guard) ──
 def _apikey_status(reveal: bool = False) -> dict:
     """Status payload for the Discovery API token + connection info.
 
@@ -786,12 +889,14 @@ def _apikey_status(reveal: bool = False) -> dict:
 def api_apikey_get():
     """Return Discovery API token status + connection info.
 
-    The unmasked token is only included when the caller presents a valid Bearer
-    token; otherwise only the masked form is returned (never the raw key over
-    HTTP unauthenticated).
+    The unmasked token is only included when the caller presents a valid
+    Bearer token or the dashboard session cookie; otherwise only the masked
+    form is returned (never the raw key over HTTP unauthenticated).
     """
     try:
-        reveal = verify_api_key(extract_bearer(request.headers.get("Authorization")))
+        reveal = verify_api_key(
+            extract_bearer(request.headers.get("Authorization"))
+        ) or local_session.verify(request.cookies.get(local_session.COOKIE_NAME))
         return jsonify(_apikey_status(reveal=reveal))
     except Exception as e:
         return jsonify({"error": str(e)}), 500