@graphmemory/server 1.3.1 → 1.3.3

package/dist/api/tools/tasks/get-task.js

@@ -8,12 +8,12 @@ function register(server, mgr) {
             'Returns: id, title, description, status, priority, tags, dueDate, estimate, ' +
             'completedAt, createdAt, updatedAt, subtasks[], blockedBy[], blocks[], related[], crossLinks[].',
         inputSchema: {
-            taskId: zod_1.z.string().describe('Task ID to retrieve'),
+            taskId: zod_1.z.string().max(500).describe('Task ID to retrieve'),
         },
     }, async ({ taskId }) => {
         const task = mgr.getTask(taskId);
         if (!task) {
-            return { content: [{ type: 'text', text: `Task "${taskId}" not found.` }], isError: true };
+            return { content: [{ type: 'text', text: 'Task not found' }], isError: true };
         }
         return { content: [{ type: 'text', text: JSON.stringify(task, null, 2) }] };
     });

package/dist/api/tools/tasks/link-task.js

@@ -9,8 +9,8 @@ function register(server, mgr) {
             '"blocks": fromId blocks toId. ' +
             '"related_to": free association between tasks.',
         inputSchema: {
-            fromId: zod_1.z.string().describe('Source task ID'),
-            toId: zod_1.z.string().describe('Target task ID'),
+            fromId: zod_1.z.string().max(500).describe('Source task ID'),
+            toId: zod_1.z.string().max(500).describe('Target task ID'),
             kind: zod_1.z.enum(['subtask_of', 'blocks', 'related_to']).describe('Relation type'),
         },
     }, async ({ fromId, toId, kind }) => {

package/dist/api/tools/tasks/list-tasks.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.register = register;
 const zod_1 = require("zod");
+const defaults_1 = require("../../../lib/defaults");
 function register(server, mgr) {
     server.registerTool('list_tasks', {
         description: 'List tasks with optional filters. ' +
@@ -13,10 +14,10 @@ function register(server, mgr) {
                 .describe('Filter by status'),
             priority: zod_1.z.enum(['critical', 'high', 'medium', 'low']).optional()
                 .describe('Filter by priority'),
-            tag: zod_1.z.string().optional().describe('Filter by tag (exact match, case-insensitive)'),
-            filter: zod_1.z.string().optional().describe('Substring match on title or ID'),
-            assignee: zod_1.z.string().optional().describe('Filter by assignee (team member ID)'),
-            limit: zod_1.z.number().optional().describe('Max results (default 50)'),
+            tag: zod_1.z.string().max(defaults_1.MAX_TAG_LEN).optional().describe('Filter by tag (exact match, case-insensitive)'),
+            filter: zod_1.z.string().max(500).optional().describe('Substring match on title or ID'),
+            assignee: zod_1.z.string().max(defaults_1.MAX_ASSIGNEE_LEN).optional().describe('Filter by assignee (team member ID)'),
+            limit: zod_1.z.number().max(1000).optional().describe('Max results (default 50)'),
         },
     }, async ({ status, priority, tag, filter, assignee, limit }) => {
         const results = mgr.listTasks({ status, priority, tag, filter, assignee, limit });

package/dist/api/tools/tasks/move-task.js

@@ -10,7 +10,7 @@ function register(server, mgr) {
             'Returns the updated task summary. ' +
             'Pass expectedVersion to enable optimistic locking.',
         inputSchema: {
-            taskId: zod_1.z.string().describe('Task ID to move'),
+            taskId: zod_1.z.string().max(500).describe('Task ID to move'),
             status: zod_1.z.enum(['backlog', 'todo', 'in_progress', 'review', 'done', 'cancelled'])
                 .describe('New status'),
             expectedVersion: zod_1.z.number().int().positive().optional().describe('Current version for optimistic locking — request fails with version_conflict if the task has been updated since'),
@@ -19,7 +19,7 @@ function register(server, mgr) {
         try {
             const moved = mgr.moveTask(taskId, status, expectedVersion);
             if (!moved) {
-                return { content: [{ type: 'text', text: `Task "${taskId}" not found.` }], isError: true };
+                return { content: [{ type: 'text', text: 'Task not found' }], isError: true };
             }
             const task = mgr.getTask(taskId);
             return { content: [{ type: 'text', text: JSON.stringify({

package/dist/api/tools/tasks/remove-attachment.js

@@ -6,7 +6,7 @@ function register(server, mgr) {
     server.registerTool('remove_task_attachment', {
         description: 'Remove an attachment from a task. The file is deleted from disk.',
         inputSchema: {
-            taskId: zod_1.z.string().describe('ID of the task'),
+            taskId: zod_1.z.string().max(500).describe('ID of the task'),
             filename: zod_1.z.string().min(1).max(255)
                 .refine(s => !/[/\\]/.test(s), 'Filename must not contain path separators')
                 .refine(s => !s.includes('..'), 'Filename must not contain ..')

package/dist/api/tools/tasks/search-tasks.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.register = register;
 const zod_1 = require("zod");
+const defaults_1 = require("../../../lib/defaults");
 function register(server, mgr) {
     server.registerTool('search_tasks', {
         description: 'Semantic search over the task graph. ' +
@@ -11,7 +12,7 @@ function register(server, mgr) {
             'Returns an array sorted by relevance score (0–1), each with: ' +
             'id, title, description, status, priority, tags, score.',
         inputSchema: {
-            query: zod_1.z.string().describe('Natural language search query'),
+            query: zod_1.z.string().max(defaults_1.MAX_SEARCH_QUERY_LEN).describe('Natural language search query'),
             topK: zod_1.z.number().min(1).max(500).optional().describe('How many top similar tasks to use as seeds (default 5)'),
             bfsDepth: zod_1.z.number().min(0).max(10).optional().describe('How many hops to follow relations from each seed (default 1; 0 = no expansion)'),
             maxResults: zod_1.z.number().min(1).max(500).optional().describe('Maximum number of results to return (default 20)'),

package/dist/api/tools/tasks/update-task.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.register = register;
 const zod_1 = require("zod");
 const manager_types_1 = require("../../../graphs/manager-types");
+const defaults_1 = require("../../../lib/defaults");
 function register(server, mgr) {
     server.registerTool('update_task', {
         description: 'Update an existing task. Only provided fields are changed. ' +
@@ -11,16 +12,16 @@ function register(server, mgr) {
             'Use move_task for a simpler status-only change. ' +
             'Pass expectedVersion to enable optimistic locking.',
         inputSchema: {
-            taskId: zod_1.z.string().describe('Task ID to update'),
-            title: zod_1.z.string().optional().describe('New title'),
-            description: zod_1.z.string().optional().describe('New description'),
+            taskId: zod_1.z.string().max(500).describe('Task ID to update'),
+            title: zod_1.z.string().max(defaults_1.MAX_TITLE_LEN).optional().describe('New title'),
+            description: zod_1.z.string().max(defaults_1.MAX_DESCRIPTION_LEN).optional().describe('New description'),
             status: zod_1.z.enum(['backlog', 'todo', 'in_progress', 'review', 'done', 'cancelled']).optional()
                 .describe('New status'),
             priority: zod_1.z.enum(['critical', 'high', 'medium', 'low']).optional().describe('New priority'),
-            tags: zod_1.z.array(zod_1.z.string()).optional().describe('Replace tags array'),
+            tags: zod_1.z.array(zod_1.z.string().max(defaults_1.MAX_TAG_LEN)).max(defaults_1.MAX_TAGS_COUNT).optional().describe('Replace tags array'),
             dueDate: zod_1.z.number().nullable().optional().describe('New due date (ms timestamp) or null to clear'),
             estimate: zod_1.z.number().nullable().optional().describe('New estimate (hours) or null to clear'),
-            assignee: zod_1.z.string().nullable().optional().describe('Team member ID to assign, or null to unassign'),
+            assignee: zod_1.z.string().max(defaults_1.MAX_ASSIGNEE_LEN).nullable().optional().describe('Team member ID to assign, or null to unassign'),
             expectedVersion: zod_1.z.number().int().positive().optional().describe('Current version for optimistic locking — request fails with version_conflict if the task has been updated since'),
         },
     }, async ({ taskId, title, description, status, priority, tags, dueDate, estimate, assignee, expectedVersion }) => {
@@ -44,7 +45,7 @@ function register(server, mgr) {
         try {
             const updated = await mgr.updateTask(taskId, patch, expectedVersion);
             if (!updated) {
-                return { content: [{ type: 'text', text: `Task "${taskId}" not found.` }], isError: true };
+                return { content: [{ type: 'text', text: 'Task not found' }], isError: true };
             }
             return { content: [{ type: 'text', text: JSON.stringify({ taskId, updated: true }, null, 2) }] };
         }

package/dist/cli/index.js

@@ -16,10 +16,12 @@ const embedder_1 = require("../lib/embedder");
 const index_1 = require("../api/index");
 const defaults_1 = require("../lib/defaults");
 const program = new commander_1.Command();
+const pkgJsonPath = path_1.default.resolve(__dirname, '../../package.json');
+const pkgVersion = JSON.parse(fs_1.default.readFileSync(pkgJsonPath, 'utf-8')).version;
 program
     .name('graphmemory')
     .description('MCP server for semantic graph memory from markdown docs and source code')
-    .version('1.3.1');
+    .version(pkgVersion);
 const parseIntArg = (v) => parseInt(v, 10);
 // ---------------------------------------------------------------------------
 // Helper: load config from file, or fall back to default (cwd as single project)

package/dist/cli/indexer.js

@@ -208,7 +208,9 @@ function createProjectIndexer(docGraph, codeGraph, config, knowledgeGraph, fileI
     }
     function dispatchAdd(absolutePath) {
         const rel = path_1.default.relative(config.projectDir, absolutePath);
-        if (config.docsInclude && !isExcluded(rel, docsExclude) && micromatch_1.default.isMatch(rel, config.docsInclude)) {
+        if (docGraph && config.docsInclude && !isExcluded(rel, docsExclude) && micromatch_1.default.isMatch(rel, config.docsInclude)) {
+            if (rel.endsWith('.md'))
+                (0, docs_1.clearWikiIndexCache)(config.projectDir);
             enqueueDoc(() => indexDocFile(absolutePath));
         }
         if (codeGraph && config.codeInclude && !isExcluded(rel, codeExclude) && micromatch_1.default.isMatch(rel, config.codeInclude)) {
@@ -221,33 +223,43 @@ function createProjectIndexer(docGraph, codeGraph, config, knowledgeGraph, fileI
     function dispatchRemove(absolutePath) {
         const rel = path_1.default.relative(config.projectDir, absolutePath);
         if (docGraph && config.docsInclude && !isExcluded(rel, docsExclude) && micromatch_1.default.isMatch(rel, config.docsInclude)) {
-            (0, docs_2.removeFile)(docGraph, rel);
-            if (knowledgeGraph)
-                (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'docs', docGraph, config.projectId);
-            if (taskGraph)
-                (0, task_1.cleanupProxies)(taskGraph, 'docs', docGraph, config.projectId);
-            if (skillGraph)
-                (0, skill_1.cleanupProxies)(skillGraph, 'docs', docGraph, config.projectId);
-            process.stderr.write(`[indexer] removed doc  ${rel}\n`);
+            if (rel.endsWith('.md'))
+                (0, docs_1.clearWikiIndexCache)(config.projectDir);
+            // Enqueue removal to avoid racing with in-flight indexDocFile tasks
+            enqueueDoc(async () => {
+                (0, docs_2.removeFile)(docGraph, rel);
+                if (knowledgeGraph)
+                    (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'docs', docGraph, config.projectId);
+                if (taskGraph)
+                    (0, task_1.cleanupProxies)(taskGraph, 'docs', docGraph, config.projectId);
+                if (skillGraph)
+                    (0, skill_1.cleanupProxies)(skillGraph, 'docs', docGraph, config.projectId);
+                process.stderr.write(`[indexer] removed doc  ${rel}\n`);
+            });
         }
         if (codeGraph && config.codeInclude && !isExcluded(rel, codeExclude) && micromatch_1.default.isMatch(rel, config.codeInclude)) {
-            (0, code_2.removeCodeFile)(codeGraph, rel);
-            if (knowledgeGraph)
-                (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'code', codeGraph, config.projectId);
-            if (taskGraph)
-                (0, task_1.cleanupProxies)(taskGraph, 'code', codeGraph, config.projectId);
-            if (skillGraph)
-                (0, skill_1.cleanupProxies)(skillGraph, 'code', codeGraph, config.projectId);
-            process.stderr.write(`[indexer] removed code ${rel}\n`);
+            enqueueCode(async () => {
+                (0, code_2.removeCodeFile)(codeGraph, rel);
+                if (knowledgeGraph)
+                    (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'code', codeGraph, config.projectId);
+                if (taskGraph)
+                    (0, task_1.cleanupProxies)(taskGraph, 'code', codeGraph, config.projectId);
+                if (skillGraph)
+                    (0, skill_1.cleanupProxies)(skillGraph, 'code', codeGraph, config.projectId);
+                process.stderr.write(`[indexer] removed code ${rel}\n`);
+            });
         }
         if (fileIndexGraph && !isExcluded(rel, filesExclude)) {
-            (0, file_index_1.removeFileEntry)(fileIndexGraph, rel);
-            if (knowledgeGraph)
-                (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'files', fileIndexGraph, config.projectId);
-            if (taskGraph)
-                (0, task_1.cleanupProxies)(taskGraph, 'files', fileIndexGraph, config.projectId);
-            if (skillGraph)
-                (0, skill_1.cleanupProxies)(skillGraph, 'files', fileIndexGraph, config.projectId);
+            enqueueFile(async () => {
+                (0, file_index_1.removeFileEntry)(fileIndexGraph, rel);
+                if (knowledgeGraph)
+                    (0, knowledge_1.cleanupProxies)(knowledgeGraph, 'files', fileIndexGraph, config.projectId);
+                if (taskGraph)
+                    (0, task_1.cleanupProxies)(taskGraph, 'files', fileIndexGraph, config.projectId);
+                if (skillGraph)
+                    (0, skill_1.cleanupProxies)(skillGraph, 'files', fileIndexGraph, config.projectId);
+                process.stderr.write(`[indexer] removed file ${rel}\n`);
+            });
         }
     }
     // ---------------------------------------------------------------------------
@@ -258,6 +270,8 @@ function createProjectIndexer(docGraph, codeGraph, config, knowledgeGraph, fileI
             for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
                 if (entry.name.startsWith('.') || watcher_1.ALWAYS_IGNORED.has(entry.name))
                     continue;
+                if (entry.isSymbolicLink())
+                    continue;
                 const full = path_1.default.join(dir, entry.name);
                 if (entry.isDirectory()) {
                     const relDir = path_1.default.relative(config.projectDir, full);

package/dist/graphs/code.js

@@ -217,6 +217,10 @@ function loadCodeGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[code-graph] Embedding config changed, re-indexing code graph\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[code-graph] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[code-graph] Loaded ${graph.order} nodes, ${graph.size} edges\n`);

package/dist/graphs/docs.js

@@ -164,6 +164,10 @@ function loadGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[graph] Embedding config changed, re-indexing docs graph\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[graph] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[graph] Loaded ${graph.order} nodes, ${graph.size} edges\n`);

package/dist/graphs/file-index.js

@@ -272,6 +272,10 @@ function loadFileIndexGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[file-index] Embedding config changed, re-indexing file index\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[file-index] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[file-index] Loaded ${graph.order} nodes, ${graph.size} edges\n`);

package/dist/graphs/knowledge.js

@@ -360,6 +360,10 @@ function loadKnowledgeGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[knowledge-graph] Embedding config changed, re-indexing knowledge graph\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[knowledge-graph] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[knowledge-graph] Loaded ${graph.order} nodes, ${graph.size} edges\n`);
@@ -433,6 +437,7 @@ class KnowledgeGraphManager {
     mirrorTracker;
     _bm25Index;
     get externalGraphs() { return this.ext; }
+    get projectDir() { return this.ctx.projectDir; }
     constructor(_graph, embedFns, ctx, ext = {}) {
         this._graph = _graph;
         this.embedFns = embedFns;

package/dist/graphs/skill.js

@@ -504,6 +504,10 @@ function loadSkillGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[skill-graph] Embedding config changed, re-indexing skill graph\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[skill-graph] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[skill-graph] Loaded ${graph.order} nodes, ${graph.size} edges\n`);
@@ -610,6 +614,7 @@ class SkillGraphManager {
     taskGraph;
     mirrorTracker;
     _bm25Index;
+    get projectDir() { return this.ctx.projectDir; }
     constructor(_graph, embedFns, ctx, ext = {}) {
         this._graph = _graph;
         this.embedFns = embedFns;

package/dist/graphs/task.js

@@ -525,6 +525,10 @@ function loadTaskGraph(graphMemory, fresh = false, embeddingFingerprint) {
             process.stderr.write(`[task-graph] Embedding config changed, re-indexing task graph\n`);
             return graph;
         }
+        if (!(0, graph_persistence_1.validateGraphStructure)(data.graph)) {
+            process.stderr.write(`[task-graph] Invalid graph structure in ${file}, starting fresh\n`);
+            return graph;
+        }
         (0, embedding_codec_1.decompressEmbeddings)(data.graph);
         graph.import(data.graph);
         process.stderr.write(`[task-graph] Loaded ${graph.order} nodes, ${graph.size} edges\n`);
@@ -591,6 +595,7 @@ class TaskGraphManager {
     knowledgeGraph;
     mirrorTracker;
     _bm25Index;
+    get projectDir() { return this.ctx.projectDir; }
     constructor(_graph, embedFns, ctx, ext = {}) {
         this._graph = _graph;
         this.embedFns = embedFns;

package/dist/lib/defaults.js

@@ -38,7 +38,7 @@ exports.MAX_TITLE_LEN = 500;
 exports.MAX_NOTE_CONTENT_LEN = 1_000_000;
 exports.MAX_TAG_LEN = 100;
 exports.MAX_TAGS_COUNT = 100;
-exports.MAX_SEARCH_QUERY_LEN = 2000;
+exports.MAX_SEARCH_QUERY_LEN = 10_000;
 exports.MAX_SEARCH_TOP_K = 500;
 exports.MAX_DESCRIPTION_LEN = 500_000;
 exports.MAX_ASSIGNEE_LEN = 100;

package/dist/lib/file-import.js

@@ -96,10 +96,16 @@ function extractTitleAndContent(body) {
  */
 function extractId(filePath) {
     const basename = path.basename(filePath, '.md');
+    let id;
     if (basename === 'note' || basename === 'task' || basename === 'skill') {
-        return path.basename(path.dirname(filePath));
+        id = path.basename(path.dirname(filePath));
     }
-    return basename;
+    else {
+        id = basename;
+    }
+    if (id === '..' || id === '.' || id.includes('\0'))
+        return '';
+    return id;
 }
 function parseNoteFile(filePath) {
     try {

package/dist/lib/file-mirror.js

@@ -47,6 +47,7 @@ exports.mirrorTaskRelation = mirrorTaskRelation;
 exports.mirrorSkillRelation = mirrorSkillRelation;
 exports.mirrorAttachmentEvent = mirrorAttachmentEvent;
 exports.deleteMirrorDir = deleteMirrorDir;
+exports.sanitizeEntityId = sanitizeEntityId;
 exports.sanitizeFilename = sanitizeFilename;
 exports.writeAttachment = writeAttachment;
 exports.deleteAttachment = deleteAttachment;
@@ -56,6 +57,10 @@ const path = __importStar(require("path"));
 const crypto_1 = __importDefault(require("crypto"));
 const frontmatter_1 = require("./frontmatter");
 const events_log_1 = require("./events-log");
+/** Sanitize a string for safe inclusion in log output. */
+function sanitizeForLog(s) {
+    return s.replace(/[\r\n\t]/g, ' ').slice(0, 200);
+}
 /** Write to a temp file then rename — atomic on same filesystem. */
 function atomicWriteFileSync(filePath, data, encoding) {
     const tmp = `${filePath}.${crypto_1.default.randomBytes(4).toString('hex')}.tmp`;
@@ -80,7 +85,12 @@ function buildOutgoingRelations(entityId, relations) {
 /** Append a 'created' event + write content.md + regenerate note.md snapshot. */
 function mirrorNoteCreate(notesDir, noteId, attrs, relations) {
     try {
-        const entityDir = path.join(notesDir, noteId);
+        const safeId = sanitizeEntityId(noteId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(notesDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         if (!fs.existsSync(eventsPath)) {
@@ -101,13 +111,18 @@ function mirrorNoteCreate(notesDir, noteId, attrs, relations) {
         (0, events_log_1.ensureGitattributes)(notesDir);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror note create ${noteId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror note create ${sanitizeForLog(noteId)}: ${err}\n`);
     }
 }
 /** Append an 'update' event + (if content changed) write content.md + regenerate note.md. */
 function mirrorNoteUpdate(notesDir, noteId, patch, attrs, relations) {
     try {
-        const entityDir = path.join(notesDir, noteId);
+        const safeId = sanitizeEntityId(noteId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(notesDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         const delta = { op: 'update' };
@@ -127,7 +142,7 @@ function mirrorNoteUpdate(notesDir, noteId, patch, attrs, relations) {
         _regenerateNoteSnapshot(notesDir, noteId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror note update ${noteId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror note update ${sanitizeForLog(noteId)}: ${err}\n`);
     }
 }
 function _regenerateNoteSnapshot(notesDir, noteId, attrs, relations) {
@@ -153,7 +168,12 @@ function _regenerateNoteSnapshot(notesDir, noteId, attrs, relations) {
 /** Append a 'created' event + write description.md + regenerate task.md snapshot. */
 function mirrorTaskCreate(tasksDir, taskId, attrs, relations) {
     try {
-        const entityDir = path.join(tasksDir, taskId);
+        const safeId = sanitizeEntityId(taskId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(tasksDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         if (!fs.existsSync(eventsPath)) {
@@ -179,13 +199,18 @@ function mirrorTaskCreate(tasksDir, taskId, attrs, relations) {
         (0, events_log_1.ensureGitattributes)(tasksDir);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror task create ${taskId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror task create ${sanitizeForLog(taskId)}: ${err}\n`);
     }
 }
 /** Append an 'update' event + (if description changed) write description.md + regenerate task.md. */
 function mirrorTaskUpdate(tasksDir, taskId, patch, attrs, relations) {
     try {
-        const entityDir = path.join(tasksDir, taskId);
+        const safeId = sanitizeEntityId(taskId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(tasksDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         const delta = { op: 'update' };
@@ -215,7 +240,7 @@ function mirrorTaskUpdate(tasksDir, taskId, patch, attrs, relations) {
         _regenerateTaskSnapshot(tasksDir, taskId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror task update ${taskId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror task update ${sanitizeForLog(taskId)}: ${err}\n`);
     }
 }
 function _regenerateTaskSnapshot(tasksDir, taskId, attrs, relations) {
@@ -247,7 +272,12 @@ function _regenerateTaskSnapshot(tasksDir, taskId, attrs, relations) {
 /** Append a 'created' event + write description.md + regenerate skill.md snapshot. */
 function mirrorSkillCreate(skillsDir, skillId, attrs, relations) {
     try {
-        const entityDir = path.join(skillsDir, skillId);
+        const safeId = sanitizeEntityId(skillId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(skillsDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         if (!fs.existsSync(eventsPath)) {
@@ -276,13 +306,18 @@ function mirrorSkillCreate(skillsDir, skillId, attrs, relations) {
         (0, events_log_1.ensureGitattributes)(skillsDir);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror skill create ${skillId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror skill create ${sanitizeForLog(skillId)}: ${err}\n`);
     }
 }
 /** Append an 'update' event + (if description changed) write description.md + regenerate skill.md. */
 function mirrorSkillUpdate(skillsDir, skillId, patch, attrs, relations) {
     try {
-        const entityDir = path.join(skillsDir, skillId);
+        const safeId = sanitizeEntityId(skillId);
+        if (!safeId) {
+            process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+            return;
+        }
+        const entityDir = path.join(skillsDir, safeId);
         fs.mkdirSync(entityDir, { recursive: true });
         const eventsPath = path.join(entityDir, 'events.jsonl');
         const delta = { op: 'update' };
@@ -318,7 +353,7 @@ function mirrorSkillUpdate(skillsDir, skillId, patch, attrs, relations) {
         _regenerateSkillSnapshot(skillsDir, skillId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror skill update ${skillId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror skill update ${sanitizeForLog(skillId)}: ${err}\n`);
     }
 }
 function _regenerateSkillSnapshot(skillsDir, skillId, attrs, relations) {
@@ -364,7 +399,7 @@ function mirrorNoteRelation(notesDir, noteId, action, kind, to, attrs, relations
         _regenerateNoteSnapshot(notesDir, noteId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror note relation ${noteId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror note relation ${sanitizeForLog(noteId)}: ${err}\n`);
     }
 }
 function mirrorTaskRelation(tasksDir, taskId, action, kind, to, attrs, relations, graph) {
@@ -378,7 +413,7 @@ function mirrorTaskRelation(tasksDir, taskId, action, kind, to, attrs, relations
         _regenerateTaskSnapshot(tasksDir, taskId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror task relation ${taskId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror task relation ${sanitizeForLog(taskId)}: ${err}\n`);
     }
 }
 function mirrorSkillRelation(skillsDir, skillId, action, kind, to, attrs, relations, graph) {
@@ -392,7 +427,7 @@ function mirrorSkillRelation(skillsDir, skillId, action, kind, to, attrs, relati
         _regenerateSkillSnapshot(skillsDir, skillId, attrs, relations);
     }
     catch (err) {
-        process.stderr.write(`[file-mirror] failed to mirror skill relation ${skillId}: ${err}\n`);
+        process.stderr.write(`[file-mirror] failed to mirror skill relation ${sanitizeForLog(skillId)}: ${err}\n`);
     }
 }
 /** Append an attachment add/remove event. */
@@ -410,18 +445,30 @@ function mirrorAttachmentEvent(entityDir, action, file) {
 // ---------------------------------------------------------------------------
 /** Delete the entire mirror directory for a note, task or skill (including attachments). */
 function deleteMirrorDir(dir, id) {
+    const safeId = sanitizeEntityId(id);
+    if (!safeId) {
+        process.stderr.write(`[file-mirror] rejected invalid entity ID\n`);
+        return;
+    }
     try {
-        fs.rmSync(path.join(dir, id), { recursive: true, force: true });
+        fs.rmSync(path.join(dir, safeId), { recursive: true, force: true });
     }
     catch (err) {
         if (err.code !== 'ENOENT') {
-            process.stderr.write(`[file-mirror] failed to delete ${id}/: ${err}\n`);
+            process.stderr.write(`[file-mirror] failed to delete ${sanitizeForLog(id)}/: ${err}\n`);
         }
     }
 }
 // ---------------------------------------------------------------------------
 // Attachment file helpers (paths now go through attachments/ subdir)
 // ---------------------------------------------------------------------------
+/** Sanitize an entity ID: extract basename, strip null bytes and path traversal. */
+function sanitizeEntityId(id) {
+    const base = path.basename(id.replace(/\0/g, '').replace(/\\/g, '/')).trim();
+    if (base === '.' || base === '..')
+        return '';
+    return base;
+}
 /** Sanitize a filename: extract basename, strip null bytes and path traversal. */
 function sanitizeFilename(name) {
     // Normalize backslashes to forward slashes (path.basename on Unix doesn't treat \ as separator)
@@ -433,29 +480,38 @@ function sanitizeFilename(name) {
 }
 /** Write an attachment file to the entity's attachments/ subdirectory. */
 function writeAttachment(baseDir, entityId, filename, data) {
+    const safeEntityId = sanitizeEntityId(entityId);
+    if (!safeEntityId)
+        throw new Error('Entity ID is empty after sanitization');
     const safe = sanitizeFilename(filename);
     if (!safe)
         throw new Error('Attachment filename is empty after sanitization');
-    const attachmentsDir = path.join(baseDir, entityId, 'attachments');
+    const attachmentsDir = path.join(baseDir, safeEntityId, 'attachments');
     fs.mkdirSync(attachmentsDir, { recursive: true });
     fs.writeFileSync(path.join(attachmentsDir, safe), data);
 }
 /** Delete an attachment file from attachments/ subdir. Returns true if it existed. */
 function deleteAttachment(baseDir, entityId, filename) {
-    const filePath = path.join(baseDir, entityId, 'attachments', sanitizeFilename(filename));
+    const safeEntityId = sanitizeEntityId(entityId);
+    if (!safeEntityId)
+        return false;
+    const filePath = path.join(baseDir, safeEntityId, 'attachments', sanitizeFilename(filename));
     try {
         fs.unlinkSync(filePath);
         return true;
     }
     catch (err) {
         if (err.code !== 'ENOENT') {
-            process.stderr.write(`[file-mirror] failed to delete attachment ${filename}: ${err}\n`);
+            process.stderr.write(`[file-mirror] failed to delete attachment ${sanitizeForLog(filename)}: ${err}\n`);
         }
         return false;
     }
 }
 /** Get the absolute path of an attachment in attachments/ subdir, or null if not found. */
 function getAttachmentPath(baseDir, entityId, filename) {
-    const filePath = path.join(baseDir, entityId, 'attachments', sanitizeFilename(filename));
+    const safeEntityId = sanitizeEntityId(entityId);
+    if (!safeEntityId)
+        return null;
+    const filePath = path.join(baseDir, safeEntityId, 'attachments', sanitizeFilename(filename));
     return fs.existsSync(filePath) ? filePath : null;
 }