loki-mode 7.41.4 → 7.41.5

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 11 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.41.4
+# Loki Mode v7.41.5
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -398,4 +398,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.41.4 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.41.5 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.41.4
+7.41.5

package/autonomy/completion-council.sh

@@ -2045,7 +2045,23 @@ council_evaluate_member() {
     local role="$1"
     local criteria="${2:-general completion check}"
     local loki_dir="${TARGET_DIR:-.}/.loki"
-    local vote="COMPLETE"
+    # Trust-gate inversion (v7.41.5): the default is CONTINUE, not COMPLETE.
+    # The old default ("absence of a detected failure == COMPLETE") let a
+    # greenfield run with an empty .loki/ (no test logs, no queue, few TODOs)
+    # cause requirements_verifier + devils_advocate to vote COMPLETE while only
+    # test_auditor went CONTINUE -> 2-of-3 cleared the size-3 threshold and the
+    # heuristic council approved a project with ZERO positive evidence. We now
+    # require AFFIRMATIVE positive evidence before any member votes COMPLETE,
+    # mirroring the LLM prompt's "do not approve incomplete work" stance.
+    #
+    # Mechanics:
+    #   - vote starts at CONTINUE.
+    #   - The existing failure detectors set blocked=true (a hard "not done"
+    #     signal) and accumulate reasons.
+    #   - At the end, vote flips to COMPLETE only if blocked==false AND the
+    #     member's positive signal holds. No positive signal => CONTINUE.
+    local vote="CONTINUE"
+    local blocked="false"
     local reasons=""
 
     # Check 1: Do tests pass? Look for test results in .loki/
@@ -2067,7 +2083,7 @@ council_evaluate_member() {
         fi
     done
     if [ "$test_failures" -gt 0 ]; then
-        vote="CONTINUE"
+        blocked="true"
         reasons="${reasons}test failures found ($test_failures); "
     fi
 
@@ -2076,12 +2092,16 @@ council_evaluate_member() {
     local current_diff_hash
     current_diff_hash=$(git diff --stat HEAD 2>/dev/null | (md5sum 2>/dev/null || md5 -r 2>/dev/null) | cut -d' ' -f1 || echo "unknown")
     if [ "$COUNCIL_CONSECUTIVE_NO_CHANGE" -gt 0 ] && [ "$ITERATION_COUNT" -gt "$COUNCIL_MIN_ITERATIONS" ]; then
-        # Code has stopped changing -- stagnation, not necessarily done
-        # (BUG-QG-011: previously inverted -- forced CONTINUE when code was changing,
-        # which penalized active progress. Now: stagnation with no passing checks = CONTINUE)
-        if [ "$vote" = "COMPLETE" ]; then
-            : # Other checks passed despite stagnation -- allow COMPLETE
-        else
+        # Code has stopped changing -- stagnation, not necessarily done.
+        # (BUG-QG-011 history: previously inverted -- forced CONTINUE when code
+        # was changing, which penalized active progress.)
+        # Under the v7.41.5 affirmative-evidence default this is INFORMATIONAL
+        # only: stagnation by itself is neither a failure (do not set blocked)
+        # nor positive evidence (does not flip vote to COMPLETE). Whether the
+        # member completes is decided entirely by blocked + the positive-signal
+        # check below. Surface the stagnation note only when a real failure was
+        # also detected, so the reason string stays honest.
+        if [ "$blocked" = "true" ]; then
             reasons="${reasons}code stagnated with failing checks; "
         fi
     fi
@@ -2100,49 +2120,126 @@ council_evaluate_member() {
         done
     fi
     if [ "$error_count" -gt 0 ]; then
-        vote="CONTINUE"
+        blocked="true"
         reasons="${reasons}uncaught errors in logs ($error_count); "
     fi
 
-    # Role-specific checks
+    # --- Affirmative positive evidence (v7.41.5) ----------------------------
+    # Base positive signal, shared by all members: a structured test-results.json
+    # exists and is NOT red. This is the SAME file + parse the evidence hard gate
+    # uses (council_evidence_gate, see this file ~line 1543-1568), so the member
+    # vote and the gate agree on what "tests are not red" means instead of a
+    # fragile log grep. The completion route guarantees this file is written
+    # before the council votes via ensure_completion_test_evidence()
+    # (autonomy/run.sh): a project with a real runner records its true PASS/FAIL,
+    # and a project with no runner records {"runner":"none","pass":true}. A
+    # greenfield run with an empty .loki/ has NO such file -> no positive base ->
+    # the member stays CONTINUE.
+    #
+    # Parse verdict mirrors council_evidence_gate: runner=="none" => PASS,
+    # pass is False => FAIL, else PASS. Unparseable/missing => not present.
+    local tr_file="$loki_dir/quality/test-results.json"
+    local test_evidence="absent"   # absent | pass | fail
+    local test_runner_seen="none"
+    if [ -f "$tr_file" ]; then
+        local _tr_status
+        _tr_status=$(_TR_FILE="$tr_file" python3 -c "
+import json, os, sys
+try:
+    with open(os.environ['_TR_FILE']) as f:
+        d = json.load(f)
+except (json.JSONDecodeError, IOError, KeyError, ValueError):
+    print('absent:none')
+    sys.exit(0)
+runner = d.get('runner', 'none')
+passed = d.get('pass', True)
+if runner == 'none':
+    print('pass:none')
+elif passed is False:
+    print('fail:%s' % runner)
+else:
+    print('pass:%s' % runner)
+" 2>/dev/null || echo "absent:none")
+        test_evidence="${_tr_status%%:*}"
+        test_runner_seen="${_tr_status#*:}"
+    fi
+    if [ "$test_evidence" = "fail" ]; then
+        # A red structured result is a hard failure for every member, on top of
+        # any log-derived failures already counted above.
+        blocked="true"
+        reasons="${reasons}structured test results red (runner '$test_runner_seen'); "
+    fi
+
+    # Per-member positive signal, evaluated on top of the shared base.
+    local positive="false"
     case "$role" in
         requirements_verifier)
-            # Check if pending tasks remain
+            # Positive: tests not red AND no pending tasks. A present queue file
+            # with pending>0 is a hard "not done"; an ABSENT queue file is not
+            # itself disqualifying (a legit run need not have one), it just means
+            # this member relies on the base test evidence.
+            local pending=0
             if [ -f "$loki_dir/queue/pending.json" ]; then
-                local pending
                 pending=$(_QUEUE_FILE="$loki_dir/queue/pending.json" python3 -c "import json, os; print(len(json.load(open(os.environ['_QUEUE_FILE']))))" 2>/dev/null || echo "0")
                 if [ "$pending" -gt 0 ]; then
-                    vote="CONTINUE"
+                    blocked="true"
                     reasons="${reasons}$pending tasks still pending; "
                 fi
             fi
+            if [ "$test_evidence" = "pass" ] && [ "$pending" -eq 0 ]; then
+                positive="true"
+            fi
             ;;
         test_auditor)
-            # Check if any test log exists at all
-            local has_tests=false
-            for f in "$loki_dir"/logs/test-*.log "$loki_dir"/logs/*test*.log; do
-                [ -f "$f" ] && has_tests=true && break
-            done
-            if [ "$has_tests" = "false" ]; then
-                vote="CONTINUE"
-                reasons="${reasons}no test results found; "
+            # Positive requires a REAL passing test signal, not merely the
+            # absence of a failing one: a structured result with runner != none
+            # AND pass == true. {"runner":"none"} (no suite ran) is NOT positive
+            # test evidence for this member, and a missing file is not either, so
+            # a no-tests / greenfield project leaves test_auditor at CONTINUE.
+            if [ "$test_evidence" = "absent" ]; then
+                reasons="${reasons}no structured test results found; "
+            elif [ "$test_runner_seen" = "none" ]; then
+                reasons="${reasons}no real test suite ran (runner none); "
+            elif [ "$test_evidence" = "pass" ]; then
+                positive="true"
             fi
             ;;
         devils_advocate)
-            # Check for TODO/FIXME markers
+            # Positive: tests not red AND a low TODO/FIXME density. A high marker
+            # count is a hard "not done"; a missing/absent test base means no
+            # positive evidence even when TODOs are low.
             local todo_count
             todo_count=$(grep -rl "TODO\|FIXME\|HACK\|XXX" . --include="*.ts" --include="*.js" --include="*.py" --include="*.sh" 2>/dev/null | wc -l | tr -d ' ')
             if [ "$todo_count" -gt 5 ]; then
-                vote="CONTINUE"
+                blocked="true"
                 reasons="${reasons}$todo_count files with TODO/FIXME markers; "
             fi
+            if [ "$test_evidence" = "pass" ] && [ "$todo_count" -le 5 ]; then
+                positive="true"
+            fi
+            ;;
+        *)
+            # Unknown role: fall back to the shared base signal only.
+            if [ "$test_evidence" = "pass" ]; then
+                positive="true"
+            fi
             ;;
     esac
 
+    # Final decision: COMPLETE only when nothing blocks AND positive evidence
+    # is present. Otherwise CONTINUE (the affirmative-evidence default).
+    if [ "$blocked" = "false" ] && [ "$positive" = "true" ]; then
+        vote="COMPLETE"
+    fi
+
     # Clean up trailing separator
     reasons="${reasons%; }"
     if [ -z "$reasons" ]; then
-        reasons="all checks passed for $role ($criteria)"
+        if [ "$vote" = "COMPLETE" ]; then
+            reasons="positive evidence present, no failures for $role ($criteria)"
+        else
+            reasons="no positive completion evidence for $role ($criteria)"
+        fi
     fi
 
     echo "$vote $reasons"

package/autonomy/run.sh

@@ -1003,7 +1003,7 @@ log_warn() { echo -e "${YELLOW}[WARN]${NC} $*"; }
 log_warning() { log_warn "$@"; }  # Alias for backwards compatibility
 log_error() { echo -e "${RED}[ERROR]${NC} $*"; }
 log_step() { echo -e "${CYAN}[STEP]${NC} $*"; }
-log_debug() { [[ "${LOKI_DEBUG:-}" == "true" ]] && echo -e "${CYAN}[DEBUG]${NC} $*" || true; }
+log_debug() { [[ "${LOKI_DEBUG:-}" == "true" ]] && echo -e "${CYAN}[DEBUG]${NC} $*" >&2 || true; }
 
 #===============================================================================
 # Process Registry (PID Supervisor)

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.41.4"
+__version__ = "7.41.5"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.41.4
+**Version:** v7.41.5
 
 ---
 

package/loki-ts/dist/loki.js

@@ -1,5 +1,5 @@
 // @bun
-var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.41.4";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
+var n6=Object.defineProperty;var a6=($)=>$;function s6($,Q){this[$]=a6.bind(null,Q)}var h=($,Q)=>{for(var Z in Q)n6($,Z,{get:Q[Z],enumerable:!0,configurable:!0,set:s6.bind(Q,Z)})};var L=($,Q)=>()=>($&&(Q=$($=0)),Q);var K$=import.meta.require;var S1={};h(S1,{lokiDir:()=>P,homeLokiDir:()=>o$,findRepoRootForVersion:()=>d$,REPO_ROOT:()=>m});import{resolve as n,dirname as l$}from"path";import{fileURLToPath as t6}from"url";import{existsSync as P$}from"fs";import{homedir as r6}from"os";function i6(){let $=N1;for(let Q=0;Q<6;Q++){if(P$(n($,"VERSION"))&&P$(n($,"autonomy/run.sh")))return $;let Z=l$($);if(Z===$)break;$=Z}return n(N1,"..","..","..")}function d$($){let Q=$;for(let Z=0;Z<6;Z++){if(P$(n(Q,"VERSION"))&&P$(n(Q,"autonomy/run.sh")))return Q;let z=l$(Q);if(z===Q)break;Q=z}return n($,"..","..","..")}function P(){return process.env.LOKI_DIR??n(process.cwd(),".loki")}function o$(){return n(r6(),".loki")}var N1,m;var C=L(()=>{N1=l$(t6(import.meta.url));m=i6()});import{readFileSync as e6}from"fs";import{resolve as $Q,dirname as QQ}from"path";import{fileURLToPath as ZQ}from"url";function F$(){if($$!==null)return $$;let $="7.41.5";if(typeof $==="string"&&$.length>0)return $$=$,$$;try{let Q=QQ(ZQ(import.meta.url)),Z=d$(Q);$$=e6($Q(Z,"VERSION"),"utf-8").trim()}catch{$$="unknown"}return $$}var $$=null;var n$=L(()=>{C()});var C1={};h(C1,{runOrThrow:()=>zQ,run:()=>j,commandVersion:()=>KQ,commandExists:()=>f,ShellError:()=>a$});async function j($,Q={}){let Z=Bun.spawn({cmd:[...$],stdout:"pipe",stderr:"pipe",env:Q.env?{...process.env,...Q.env}:process.env,cwd:Q.cwd}),z,X;if(Q.timeoutMs&&Q.timeoutMs>0)z=setTimeout(()=>{try{Z.kill("SIGTERM")}catch{}X=setTimeout(()=>{try{Z.kill("SIGKILL")}catch{}},2000)},Q.timeoutMs);try{let[W,K,U]=await Promise.all([new Response(Z.stdout).text(),new Response(Z.stderr).text(),Z.exited]);return{stdout:W,stderr:K,exitCode:U}}finally{if(z)clearTimeout(z);if(X)clearTimeout(X)}}async function zQ($,Q={}){let Z=await j($,Q);if(Z.exitCode!==0)throw new a$(`command failed (${Z.exitCode}): ${$.join(" ")}`,Z.exitCode,Z.stdout,Z.stderr);return Z}async function f($){let Q=XQ($),Z=await j(["sh","-c",`command -v ${Q}`],{timeoutMs:5000});if(Z.exitCode===0)return Z.stdout.trim()||null;return null}function XQ($){if(!/^[A-Za-z0-9._/-]+$/.test($))throw Error(`refused to shell-escape suspect token: ${$}`);return $}async function KQ($,Q="--version"){if(!await f($))return null;let z=await j([$,Q],{timeoutMs:5000});if(z.exitCode!==0)return null;return((z.stdout||z.stderr).split(/\r?\n/)[0]?.trim()??"")||null}var a$;var d=L(()=>{a$=class a$ extends Error{message;exitCode;stdout;stderr;constructor($,Q,Z,z){super($);this.message=$;this.exitCode=Q;this.stdout=Z;this.stderr=z;this.name="ShellError"}}});function a($){return WQ?"":$}var WQ,T,S,I,TZ,w,R,y,q;var c=L(()=>{WQ=(process.env.NO_COLOR??"").length>0;T=a("\x1B[0;31m"),S=a("\x1B[0;32m"),I=a("\x1B[1;33m"),TZ=a("\x1B[0;34m"),w=a("\x1B[0;36m"),R=a("\x1B[1m"),y=a("\x1B[2m"),q=a("\x1B[0m")});import{existsSync as TQ}from"fs";async function Q$(){if(B$!==void 0)return B$;let $="/opt/homebrew/bin/python3.12";if(TQ($))return B$=$,$;let Q=await f("python3.12");if(Q)return B$=Q,Q;let Z=await f("python3");return B$=Z,Z}async function Z$($,Q={}){let Z=await Q$();if(!Z)return{stdout:"",stderr:"python3 not found",exitCode:127};return j([Z,"-c",$],Q)}var B$;var W$=L(()=>{d()});var t1={};h(t1,{runStatus:()=>gQ});import{existsSync as v,readFileSync as U$,readdirSync as l1,statSync as d1}from"fs";import{resolve as D,basename as xQ}from"path";import{homedir as NQ}from"os";async function DQ(){if(await f("jq"))return!0;return process.stdout.write(`${T}Error: jq is required but not installed.${q}
 `),process.stdout.write(`Install with:
 `),process.stdout.write(`  brew install jq    (macOS)
 `),process.stdout.write(`  apt install jq     (Debian/Ubuntu)
@@ -789,4 +789,4 @@ Set LOKI_LEGACY_BASH=1 to force the bash CLI for every command.
 `),2}default:return process.stderr.write(`Unknown command: ${Q}
 `),process.stderr.write(o6),2}}p1();process.on("SIGINT",()=>process.exit(130));process.on("SIGTERM",()=>process.exit(143));var ZZ=await QZ(Bun.argv.slice(2));process.exit(ZZ);
 
-//# debugId=203776A170E08A4F64756E2164756E21
+//# debugId=BBB074C842B2B95764756E2164756E21

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.41.4'
+__version__ = '7.41.5'

package/memory/engine.py

@@ -242,6 +242,8 @@ class MemoryEngine:
         patterns_data = self.storage.read_json("semantic/patterns.json") or {}
         referenced_ids: set = set()
         for pattern in patterns_data.get("patterns", []):
+            if not isinstance(pattern, dict):
+                continue
             referenced_ids.update(pattern.get("source_episodes", []))
 
         # Scan episodic directories
@@ -366,11 +368,15 @@ class MemoryEngine:
                 })
                 index["total_memories"] = index.get("total_memories", 0) + 1
             else:
+                # Only count a given episode once. On resume/checkpoint the same
+                # trace id can be re-saved; without this guard episode_count,
+                # total_cost_usd, and total_tokens would inflate on every re-save
+                # even though episode_ids is already de-duplicated.
                 if episode_id and episode_id not in found.get("episode_ids", []):
                     found.setdefault("episode_ids", []).append(episode_id)
-                found["episode_count"] = found.get("episode_count", 0) + 1
-                found["total_cost_usd"] = float(found.get("total_cost_usd", 0) or 0) + cost
-                found["total_tokens"] = int(found.get("total_tokens", 0) or 0) + tokens
+                    found["episode_count"] = found.get("episode_count", 0) + 1
+                    found["total_cost_usd"] = float(found.get("total_cost_usd", 0) or 0) + cost
+                    found["total_tokens"] = int(found.get("total_tokens", 0) or 0) + tokens
                 merged = set(found.get("files_touched", []) or []) | set(files[:20])
                 found["files_touched"] = sorted(merged)[:50]
                 found["last_accessed"] = now
@@ -489,6 +495,8 @@ class MemoryEngine:
         """
         patterns_data = self.storage.read_json("semantic/patterns.json") or {}
         for pattern in patterns_data.get("patterns", []):
+            if not isinstance(pattern, dict):
+                continue
             if pattern.get("id") == pattern_id:
                 return self._dict_to_pattern(pattern)
         return None
@@ -512,6 +520,8 @@ class MemoryEngine:
         results: List[SemanticPattern] = []
 
         for pattern in patterns_data.get("patterns", []):
+            if not isinstance(pattern, dict):
+                continue
             # Filter by confidence
             if pattern.get("confidence", 0) < min_confidence:
                 continue
@@ -837,6 +847,8 @@ class MemoryEngine:
         # Index semantic patterns
         patterns_data = self.storage.read_json("semantic/patterns.json") or {}
         for pattern in patterns_data.get("patterns", []):
+            if not isinstance(pattern, dict):
+                continue
             total_memories += 1
             category = pattern.get("category", "general")
 

package/memory/storage.py

@@ -617,6 +617,12 @@ class MemoryStorage:
                     "patterns": []
                 }
 
+            # Defensive: a pre-existing patterns.json that is valid JSON but
+            # lacks the "patterns" key (partial/external write, alternate
+            # schema, or a {"version": ...}-only file) would otherwise raise
+            # KeyError below and silently lose the save. Ensure the list exists.
+            patterns_file.setdefault("patterns", [])
+
             # Upsert: update existing pattern or append new
             existing_idx = None
             for i, p in enumerate(patterns_file["patterns"]):

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.41.4",
+  "version": "7.41.5",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 11 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.41.4",
+  "version": "7.41.5",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 11 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",