This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 1 known CVE
Topics
ai-agents
aider
anthropic
autonomous
ci-cd
claude
+13 more
cline
code-review
devops
gemini
github-action
github-issues
loki-mode
multi-agent
openai-codex
openapi
pull-request-review
sdlc
spec-driven-development
Affected surfaces
auth
rbac
Summary
AI summaryAdded Live App Preview panel, loki preview command, errors endpoint with redaction, and log redaction.
Full changelog
Added
- Live App Preview panel in the dashboard. While a
loki startrun is in
progress the dashboard now embeds the locally-running app (served by the
existing app-runner) in an iframe so users can interact with it immediately,
without leaving the dashboard. The panel includes a status badge (running /
stopped / error), a toolbar with Refresh, Open-in-browser, and Restart
buttons, and a crash error banner with a redacted technical-details disclosure
widget. loki previewcommand (aliasloki open). Prints the running app URL to
stdout and opens it in the default browser. Works whether or not the dashboard
is open.GET /api/app-runner/errorsendpoint. Returns a redacted error summary for
the current session. Raw stack traces and absolute paths are stripped before
the response leaves the server, so only developer-relevant context is
surfaced.- Log redaction for
GET /api/app-runner/logs. The logs endpoint now applies
the same redaction filter as the new errors endpoint, closing a pre-existing
raw-log information-leak.
Notes
- The Live App Preview is entirely local-first: the iframe points at
localhost, not any hosted service. This closes the "spin up UI to try it"
gap that cloud builders such as Replit/Lovable/Bolt have, while preserving
Loki Mode's local-first and no-vendor-lock architecture.
Security Fixes
- Log redaction for `/api/app-runner/logs` closes pre‑existing raw-log information leak
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Loki Mode
Multi-agent autonomous SDLC framework. Spec to deployed app. PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. 5 AI providers, 11 quality gates.
Related context
Related tools
Beta — feedback welcome: [email protected]