loki-mode 7.0.1 → 7.0.2

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Multi-agent autonomous startup system. Triggers on "Loki Mode". Takes PRD to deployed product with minimal human intervention. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.0.1
+# Loki Mode v7.0.2
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -271,14 +271,14 @@ Auto-detected or force with `LOKI_COMPLEXITY`:
 
 ---
 
-## Managed Agents Integration (v7.0.1)
+## Managed Agents Integration (v7.0.2)
 
 Opt-in integration with Claude Managed Agents (released Apr 2026). Gives
 Loki cross-project audited memory and real multiagent councils. Features
 are BAKED INTO existing RARV-C and council flows -- no new commands to
 learn.
 
-**All flags default false.** Default behavior is identical to v7.0.1.
+**All flags default false.** Default behavior is identical to v7.0.2.
 
 | Flag | Purpose | Status |
 |------|---------|--------|
@@ -320,4 +320,4 @@ The following features are documented in skill modules but not yet fully automat
 | Quality gates 3-reviewer system | Implemented (v5.35.0) | 5 specialist reviewers in `skills/quality-gates.md`; execution in run.sh |
 | Benchmarks (HumanEval, SWE-bench) | Infrastructure only | Runner scripts and datasets exist in `benchmarks/`; no published results |
 
-**v7.0.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.0.2 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.0.1
+7.0.2

package/autonomy/run.sh

@@ -1040,6 +1040,41 @@ emit_event_json() {
     log_debug "Event: $event_type - $json_data"
 }
 
+# v7.0.2: Bash helper to emit a managed-agents event to the dashboard's
+# managed event log (.loki/managed/events.ndjson). Mirrors the Python
+# emit_managed_event helper so bash callers can land events in the same
+# stream the dashboard reads. Schema: {ts, type, payload}.
+emit_managed_event_bash() {
+    local event_type="$1"
+    shift
+    local target_dir="${TARGET_DIR:-.}"
+    local events_file="$target_dir/.loki/managed/events.ndjson"
+    mkdir -p "$target_dir/.loki/managed"
+
+    local timestamp
+    timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+    # Build payload JSON from key=value args (same convention as emit_event_json)
+    local payload="{"
+    local first=true
+    while [ $# -gt 0 ]; do
+        local key="${1%%=*}"
+        local value="${1#*=}"
+        if [ "$first" = true ]; then first=false; else payload+=","; fi
+        if [[ "$value" =~ ^[0-9]+\.?[0-9]*$ ]] || [[ "$value" =~ ^(true|false|null)$ ]]; then
+            payload+="\"$key\":$value"
+        else
+            value=$(printf '%s' "$value" | sed 's/\\/\\\\/g; s/"/\\"/g; s/	/\\t/g')
+            payload+="\"$key\":\"$value\""
+        fi
+        shift
+    done
+    payload+="}"
+
+    local json_event="{\"ts\":\"$timestamp\",\"type\":\"$event_type\",\"payload\":$payload}"
+    echo "$json_event" >> "$events_file"
+}
+
 # Emit event to .loki/events/pending/ directory (for event bus subscribers)
 # Used by OTEL bridge and other enterprise services that watch the pending dir.
 # Usage: emit_event_pending <type> [key=value ...]
@@ -6146,6 +6181,10 @@ MANAGED_REVIEW
             "op=run_code_review" \
             "reason=subprocess_failed" \
             "review_id=$review_id"
+        emit_managed_event_bash "managed_agents_fallback" \
+            "op=run_code_review" \
+            "reason=subprocess_failed" \
+            "review_id=$review_id"
         return 1
     fi
 
@@ -6160,6 +6199,11 @@ MANAGED_REVIEW
             "reason=managed_unavailable" \
             "detail=${reason//\"/}" \
             "review_id=$review_id"
+        emit_managed_event_bash "managed_agents_fallback" \
+            "op=run_code_review" \
+            "reason=managed_unavailable" \
+            "detail=${reason//\"/}" \
+            "review_id=$review_id"
         return 1
     fi
 
@@ -6171,12 +6215,19 @@ MANAGED_REVIEW
             "op=run_code_review" \
             "reason=verdict_write_failed" \
             "review_id=$review_id"
+        emit_managed_event_bash "managed_agents_fallback" \
+            "op=run_code_review" \
+            "reason=verdict_write_failed" \
+            "review_id=$review_id"
         return 1
     fi
 
     emit_event_json "managed_review_council_ok" \
         "review_id=$review_id" \
         "iteration=${ITERATION_COUNT:-0}"
+    emit_managed_event_bash "managed_review_council_ok" \
+        "review_id=$review_id" \
+        "iteration=${ITERATION_COUNT:-0}"
     return 0
 }
 

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.0.1"
+__version__ = "7.0.2"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.0.1
+**Version:** v7.0.2
 
 ---
 

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.0.1'
+__version__ = '7.0.2'

package/mcp/managed_tools.py

@@ -98,6 +98,17 @@ def redact_memory_versions(
             "scanned": 0,
         }
 
+    # v7.0.2: bound pattern length to mitigate ReDoS. Catastrophic-backtracking
+    # patterns like (a+)+$ can hang the MCP server. 512 chars is generous for
+    # legitimate compliance/PII patterns.
+    if not isinstance(pattern, str) or len(pattern) > 512:
+        return {
+            "error": "pattern must be a string of <=512 characters (ReDoS guard)",
+            "redacted_count": 0,
+            "errors": [],
+            "scanned": 0,
+        }
+
     try:
         compiled = re.compile(pattern)
     except re.error as e:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loki-mode",
-  "version": "7.0.1",
+  "version": "7.0.2",
   "description": "Loki Mode by Autonomi - Multi-agent autonomous startup system for Claude Code, Codex CLI, and Gemini CLI",
   "keywords": [
     "agent",

package/providers/managed.py

@@ -69,7 +69,7 @@ import logging
 import os
 import threading
 import time
-from dataclasses import asdict, dataclass, field
+from dataclasses import dataclass, field
 from pathlib import Path
 from typing import Any, Dict, List, Optional
 

package/skills/memory.md

@@ -1,4 +1,4 @@
-# Memory Integration (v7.0.0+)
+# Memory Integration (v7.0.2+)
 
 Loki Mode ships two memory layers:
 
@@ -109,8 +109,10 @@ With managed memory on, a new project gets access to:
 - `.loki/memory/skills/*.json` (org store, RO)
 - `.loki/memory/anti_patterns/*.json` (org store, RO)
 
-Promotions from user-RW to org-RO go through an explicit
-`loki_memory_promote` MCP tool that requires human approval. Never
+Promotions from user-RW to org-RO are MANUAL only at v7.0.x. Use the
+Managed Agents API directly (`memory_stores.memories.create` against the
+org store) with human review. An MCP `loki_memory_promote` tool is on
+the roadmap but NOT shipped in v7.0.x; do not depend on it. Never
 auto-promote.
 
 ## PII redaction
@@ -182,4 +184,4 @@ Dashboard endpoints (read-only, view-layer merge):
 
 ---
 
-**v7.0.0** | Opt-in, additive, rollback-safe. Default behavior unchanged.
+**v7.0.2** | Opt-in, additive, rollback-safe. Default behavior unchanged.