loki-mode 5.17.0 → 5.18.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Multi-agent autonomous startup system. Triggers on "Loki Mode". Takes PRD to deployed product with zero human intervention. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v5.17.0
+# Loki Mode v5.18.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -253,4 +253,4 @@ Auto-detected or force with `LOKI_COMPLEXITY`:
 
 ---
 
-**v5.17.0 | Unified Event Bus, MCP Integration, Complete Memory System | ~250 lines core**
+**v5.18.0 | Security Fixes, Memory Integration, Cross-Tool Synergy | ~250 lines core**

package/VERSION

@@ -1 +1 @@
-5.17.0
+5.18.0

package/api/routes/health.ts

@@ -6,7 +6,30 @@
 
 import { cliBridge } from "../services/cli-bridge.ts";
 import { eventBus } from "../services/event-bus.ts";
-import type { HealthResponse } from "../types/api.ts";
+import type { HealthResponse, Phase } from "../types/api.ts";
+
+// Base path for memory storage
+const MEMORY_BASE_PATH = ".loki/memory";
+
+/**
+ * Memory pattern summary for status response
+ */
+interface PatternSummary {
+  id: string;
+  pattern: string;
+  category: string;
+  confidence: number;
+}
+
+/**
+ * Memory context included in detailed status
+ */
+interface MemoryContext {
+  available: boolean;
+  currentPhase: Phase | null;
+  relevantPatterns: PatternSummary[];
+  patternCount: number;
+}
 
 const startTime = Date.now();
 const version = Deno.env.get("LOKI_VERSION") || "dev";
@@ -87,6 +110,13 @@ export async function detailedStatus(_req: Request): Promise<Response> {
   const completedCount = sessions.filter((s) => s.status === "completed").length;
   const failedCount = sessions.filter((s) => s.status === "failed").length;
 
+  // Determine current phase from active session
+  const runningSession = sessions.find((s) => s.status === "running");
+  const currentPhase = runningSession?.currentPhase || null;
+
+  // Get memory context with relevant patterns
+  const memoryContext = await getMemoryContext(currentPhase);
+
   return new Response(
     JSON.stringify({
       version,
@@ -109,6 +139,7 @@ export async function detailedStatus(_req: Request): Promise<Response> {
         denoVersion: Deno.version.deno,
         v8Version: Deno.version.v8,
       },
+      memoryContext,
     }),
     {
       headers: { "Content-Type": "application/json" },
@@ -147,6 +178,107 @@ async function checkProviders(): Promise<{
   return { claude, codex, gemini };
 }
 
+/**
+ * Get memory context with relevant patterns for the current phase
+ */
+async function getMemoryContext(currentPhase: Phase | null): Promise<MemoryContext> {
+  const emptyContext: MemoryContext = {
+    available: false,
+    currentPhase,
+    relevantPatterns: [],
+    patternCount: 0,
+  };
+
+  try {
+    // Build category filter based on current phase
+    const categoryFilter = currentPhase ? `'${currentPhase}'` : "None";
+
+    const script = `
+import sys
+import json
+sys.path.insert(0, '.')
+
+try:
+    from memory.engine import MemoryEngine
+    from memory.storage import MemoryStorage
+
+    storage = MemoryStorage('${MEMORY_BASE_PATH}')
+    engine = MemoryEngine(storage=storage, base_path='${MEMORY_BASE_PATH}')
+
+    # Get patterns, optionally filtered by phase/category
+    category = ${categoryFilter}
+
+    # Get all patterns first to get total count
+    all_patterns = engine.find_patterns(min_confidence=0.5)
+    total_count = len(all_patterns)
+
+    # Get relevant patterns for the current phase
+    if category:
+        # Try to find patterns matching the phase category
+        phase_patterns = engine.find_patterns(category=category, min_confidence=0.5)
+        if not phase_patterns:
+            # Fall back to highest confidence patterns
+            phase_patterns = sorted(all_patterns, key=lambda p: getattr(p, 'confidence', 0.5) if hasattr(p, 'confidence') else p.get('confidence', 0.5), reverse=True)
+    else:
+        # No phase, return highest confidence patterns
+        phase_patterns = sorted(all_patterns, key=lambda p: getattr(p, 'confidence', 0.5) if hasattr(p, 'confidence') else p.get('confidence', 0.5), reverse=True)
+
+    # Limit to top 3
+    top_patterns = phase_patterns[:3]
+
+    results = []
+    for p in top_patterns:
+        p_dict = p.to_dict() if hasattr(p, 'to_dict') else (p.__dict__ if hasattr(p, '__dict__') else p)
+        results.append({
+            'id': p_dict.get('id', ''),
+            'pattern': p_dict.get('pattern', ''),
+            'category': p_dict.get('category', ''),
+            'confidence': p_dict.get('confidence', 0.8)
+        })
+
+    output = {
+        'available': True,
+        'relevantPatterns': results,
+        'patternCount': total_count
+    }
+    print(json.dumps(output))
+
+except ImportError:
+    # Memory module not available
+    print(json.dumps({'available': False, 'relevantPatterns': [], 'patternCount': 0}))
+except Exception as e:
+    # Any other error - memory not initialized or empty
+    print(json.dumps({'available': False, 'relevantPatterns': [], 'patternCount': 0, 'error': str(e)}))
+`;
+
+    const command = new Deno.Command("python3", {
+      args: ["-c", script],
+      cwd: Deno.cwd(),
+      stdout: "piped",
+      stderr: "piped",
+    });
+
+    const { code, stdout } = await command.output();
+
+    if (code !== 0) {
+      return emptyContext;
+    }
+
+    const result = new TextDecoder().decode(stdout);
+    const parsed = JSON.parse(result.trim());
+
+    return {
+      available: parsed.available || false,
+      currentPhase,
+      relevantPatterns: parsed.relevantPatterns || [],
+      patternCount: parsed.patternCount || 0,
+    };
+  } catch {
+    // Memory system not available or error occurred
+    return emptyContext;
+  }
+}
+
 /**
  * Format uptime to human-readable string
  */

package/api/server_test.ts

@@ -263,3 +263,29 @@ Deno.test("GET /api/status returns detailed status", async () => {
   assertExists(data.events);
   assertExists(data.system);
 });
+
+Deno.test("GET /api/status includes memory context", async () => {
+  const handler = createHandler({ port: 8420, host: "localhost", cors: true, auth: false });
+  const req = createRequest("GET", "/api/status");
+  const res = await handler(req);
+
+  assertEquals(res.status, 200);
+  const data = await res.json();
+
+  // Verify memoryContext structure exists
+  assertExists(data.memoryContext);
+  assertEquals(typeof data.memoryContext.available, "boolean");
+  assertEquals(Array.isArray(data.memoryContext.relevantPatterns), true);
+  assertEquals(typeof data.memoryContext.patternCount, "number");
+
+  // Patterns array should be limited to max 3
+  assertEquals(data.memoryContext.relevantPatterns.length <= 3, true);
+
+  // Each pattern should have required fields if there are any
+  for (const pattern of data.memoryContext.relevantPatterns) {
+    assertExists(pattern.id);
+    assertExists(pattern.pattern);
+    assertExists(pattern.category);
+    assertExists(pattern.confidence);
+  }
+});

package/autonomy/loki

@@ -105,6 +105,7 @@ fi
 
 RUN_SH="$SKILL_DIR/autonomy/run.sh"
 SANDBOX_SH="$SKILL_DIR/autonomy/sandbox.sh"
+EMIT_SH="$SKILL_DIR/events/emit.sh"
 LOKI_DIR=".loki"
 
 # Get version from VERSION file
@@ -116,6 +117,15 @@ get_version() {
     fi
 }
 
+# Emit event (non-blocking)
+# Usage: emit_event <type> <source> <action> [key=value ...]
+emit_event() {
+    if [ -f "$EMIT_SH" ]; then
+        # Run in background to be non-blocking
+        ("$EMIT_SH" "$@" >/dev/null 2>&1 &)
+    fi
+}
+
 # Show help
 show_help() {
     local version=$(get_version)
@@ -308,6 +318,7 @@ cmd_start() {
         fi
 
         echo -e "${GREEN}Starting Loki Mode in Docker sandbox...${NC}"
+        emit_event session cli start "provider=$effective_provider" "sandbox=true" "prd_path=${prd_file:-}"
         exec "$SANDBOX_SH" start "${args[@]}"
     fi
 
@@ -321,6 +332,9 @@ cmd_start() {
     fi
     echo ""
 
+    # Emit session start event
+    emit_event session cli start "provider=$effective_provider" "prd_path=${prd_file:-}"
+
     exec "$RUN_SH" "${args[@]}"
 }
 
@@ -346,6 +360,8 @@ cmd_stop() {
 
     if is_session_running; then
         touch "$LOKI_DIR/STOP"
+        # Emit session stop event
+        emit_event session cli stop "reason=user_requested"
         echo -e "${RED}STOP signal sent. Execution will halt immediately.${NC}"
     else
         echo -e "${YELLOW}No active session running.${NC}"
@@ -367,6 +383,8 @@ cmd_pause() {
 
     if is_session_running; then
         touch "$LOKI_DIR/PAUSE"
+        # Emit session pause event
+        emit_event session cli pause "reason=user_requested"
         echo -e "${YELLOW}PAUSE signal sent. Execution will pause after current task.${NC}"
         echo -e "${DIM}Resume with: loki resume${NC}"
     else
@@ -397,6 +415,8 @@ cmd_resume() {
     fi
 
     if [ -n "$removed_signal" ]; then
+        # Emit session resume event
+        emit_event session cli resume "cleared_signal=$removed_signal"
         if is_session_running; then
             echo -e "${GREEN}$removed_signal signal cleared. Session will resume automatically.${NC}"
         else

package/docs/SYNERGY-TASKS.md

@@ -0,0 +1,137 @@
+# Loki Mode Synergy Implementation Tasks
+
+This document tracks all implementation tasks to achieve tool synergy and competitive leadership.
+
+---
+
+## Phase 1: Event Bus Foundation (v5.17.0) - COMPLETED
+
+| Task ID | Task | Status | Notes |
+|---------|------|--------|-------|
+| SYN-001 | Create Python event bus module | Done | events/bus.py |
+| SYN-002 | Create TypeScript event bus module | Done | events/bus.ts |
+| SYN-003 | Create Bash event emitter helper | Done | events/emit.sh |
+| SYN-004 | Add event bus tests | Done | 10/10 passing |
+| SYN-005 | Document event bus architecture | Done | SYNERGY-ROADMAP.md |
+
+---
+
+## Phase 2: Memory Integration (v5.18.0) - PENDING
+
+| Task ID | Task | Status | Priority | Notes |
+|---------|------|--------|----------|-------|
+| SYN-006 | Create unified memory access layer | Pending | High | Single interface for all tools |
+| SYN-007 | Add memory context to VS Code sidebar | Pending | High | Show relevant patterns for current file |
+| SYN-008 | Add memory retrieval to CLI start | Pending | Medium | Load relevant context at session start |
+| SYN-009 | Add automatic context loading to MCP | Pending | High | MCP tools auto-load memory |
+| SYN-010 | Add memory-informed suggestions to API | Pending | Medium | /api/suggestions endpoint |
+| SYN-011 | Integrate VS Code file edits with memory | Pending | Medium | Record edits as episodes |
+
+---
+
+## Phase 3: Smart State Sync (v5.19.0) - PENDING
+
+| Task ID | Task | Status | Priority | Notes |
+|---------|------|--------|----------|-------|
+| SYN-012 | Create centralized state manager | Pending | High | Single source of truth |
+| SYN-013 | Replace direct file reads with state manager | Pending | High | All components use manager |
+| SYN-014 | Add optimistic updates with conflict resolution | Pending | Medium | Handle concurrent writes |
+| SYN-015 | Add state versioning for rollback | Pending | Low | Recovery capability |
+| SYN-016 | Add state change notifications | Pending | High | Real-time sync |
+
+---
+
+## Phase 4: Cross-Tool Learning (v5.20.0) - PENDING
+
+| Task ID | Task | Status | Priority | Notes |
+|---------|------|--------|----------|-------|
+| SYN-017 | Define learning signal types | Pending | High | What can be learned |
+| SYN-018 | Implement learning collectors in CLI | Pending | Medium | CLI emits learning signals |
+| SYN-019 | Implement learning collectors in API | Pending | Medium | API emits learning signals |
+| SYN-020 | Implement learning collectors in VS Code | Pending | Medium | VS Code emits learning signals |
+| SYN-021 | Implement learning collectors in MCP | Pending | Medium | MCP emits learning signals |
+| SYN-022 | Create learning aggregator | Pending | High | Consolidate signals |
+| SYN-023 | Add learning-based suggestions | Pending | High | Use learnings to improve |
+| SYN-024 | Add learning metrics dashboard | Pending | Low | Visualize learning |
+
+---
+
+## Phase 5: Unified Dashboard (v5.21.0) - PENDING
+
+| Task ID | Task | Status | Priority | Notes |
+|---------|------|--------|----------|-------|
+| SYN-025 | Extract dashboard as reusable web components | Pending | High | Standalone components |
+| SYN-026 | Create VS Code webview integration | Pending | High | Embed dashboard in VS Code |
+| SYN-027 | Unify styling and behavior | Pending | Medium | Consistent UX |
+| SYN-028 | Add dashboard feature parity check | Pending | Low | Ensure all features available |
+
+---
+
+## Competitive Gap Tasks (vs claude-flow, claude-mem, etc.)
+
+| Task ID | Task | Status | Priority | Competitor Gap |
+|---------|------|--------|----------|----------------|
+| COMP-001 | Implement swarm intelligence patterns | Pending | Medium | claude-flow has 60+ agents |
+| COMP-002 | Add Byzantine fault tolerance | Pending | Low | claude-flow resilience |
+| COMP-003 | Improve embedding quality | Pending | Medium | claude-mem uses OpenAI |
+| COMP-004 | Add importance scoring for memories | Pending | High | claude-mem has decay |
+| COMP-005 | Implement memory namespaces | Pending | Medium | claude-mem project isolation |
+| COMP-006 | Add real-time collaboration | Pending | Low | Multi-user support |
+| COMP-007 | Improve context window optimization | Pending | High | Better token efficiency |
+
+---
+
+## Security Tasks (from Peer Review)
+
+| Task ID | Task | Status | Priority | Notes |
+|---------|------|--------|----------|-------|
+| SEC-001 | Fix command injection in session-init.sh | Done | Critical | Fixed via env vars |
+| SEC-002 | Fix command injection in store-episode.sh | Done | Critical | Fixed via env vars |
+| SEC-003 | Fix path traversal in mcp/server.py | Done | High | Added validate_path() |
+| SEC-004 | Improve fork bomb pattern detection | Done | Medium | Regex updated in v5.16.0 |
+| SEC-005 | Add input sanitization to all hooks | Done | High | Via path validation |
+
+---
+
+## Quick Wins (Can Do Now)
+
+| Task ID | Task | Status | Priority | Effort |
+|---------|------|--------|----------|--------|
+| QW-001 | CLI emits events on command execution | Done | High | Low |
+| QW-002 | API returns relevant patterns with status | Done | Medium | Low |
+| QW-003 | MCP emits tool call events | Done | Medium | Low |
+| QW-004 | Add suggestions endpoint to API | Pending | Medium | Medium |
+| QW-005 | VS Code shows memory stats in status bar | Done | Low | Low |
+
+---
+
+## Task Dependencies
+
+```
+SYN-006 (unified memory) -> SYN-007, SYN-008, SYN-009, SYN-010, SYN-011
+SYN-012 (state manager) -> SYN-013, SYN-014, SYN-015, SYN-016
+SYN-017 (learning signals) -> SYN-018, SYN-019, SYN-020, SYN-021 -> SYN-022 -> SYN-023
+SYN-025 (web components) -> SYN-026, SYN-027
+
+SEC-001, SEC-002 -> Should be done ASAP (Critical)
+```
+
+---
+
+## Progress Tracking
+
+| Phase | Total Tasks | Completed | In Progress | Pending |
+|-------|-------------|-----------|-------------|---------|
+| Phase 1 (Event Bus) | 5 | 5 | 0 | 0 |
+| Phase 2 (Memory) | 6 | 0 | 0 | 6 |
+| Phase 3 (State) | 5 | 0 | 0 | 5 |
+| Phase 4 (Learning) | 8 | 0 | 0 | 8 |
+| Phase 5 (Dashboard) | 4 | 0 | 0 | 4 |
+| Competitive | 7 | 0 | 0 | 7 |
+| Security | 5 | 0 | 0 | 5 |
+| Quick Wins | 5 | 0 | 0 | 5 |
+| **Total** | **45** | **5** | **0** | **40** |
+
+---
+
+*Last Updated: 2026-02-03*

package/memory/__init__.py

@@ -45,6 +45,11 @@ from .consolidation import (
     compress_episodes_to_pattern_desc,
 )
 
+from .unified_access import (
+    UnifiedMemoryAccess,
+    MemoryContext,
+)
+
 __all__ = [
     # Schemas
     "ActionEntry",
@@ -79,4 +84,7 @@ __all__ = [
     "Cluster",
     "compress_episode_to_summary",
     "compress_episodes_to_pattern_desc",
+    # Unified Access
+    "UnifiedMemoryAccess",
+    "MemoryContext",
 ]