loki-mode 7.76.0 → 7.78.0

package/mcp/__init__.py

@@ -57,4 +57,4 @@ try:
 except ImportError:
     __all__ = ['mcp']
 
-__version__ = '7.76.0'
+__version__ = '7.78.0'

package/memory/consolidation.py

@@ -157,10 +157,15 @@ class ConsolidationPipeline:
             if lock_file is not None:
                 fcntl.flock(lock_file.fileno(), fcntl.LOCK_UN)
                 lock_file.close()
-                try:
-                    lock_path.unlink()
-                except OSError:
-                    pass
+                # Do NOT unlink the lock inode here. Unlinking on release is a
+                # flock+unlink inode-replacement race: waiter B blocked on
+                # inode-1 acquires it after holder A unlinks inode-1, then a
+                # third consolidation C opens the path, finds it gone, creates
+                # inode-2 and flocks inode-2 -- entering _consolidate_locked
+                # while B is still inside, breaking the BUG-MEM-003
+                # single-consolidation guarantee. Same class fixed in
+                # storage._file_lock. Persistent lock files are the standard
+                # flock pattern; the file is reused across runs.
 
     def _consolidate_locked(self, since_hours: int) -> ConsolidationResult:
         """Run the consolidation pipeline under an exclusive lock."""

package/memory/engine.py

@@ -7,6 +7,7 @@ from __future__ import annotations
 import json
 import logging
 import os
+import re
 from datetime import datetime, timedelta, timezone
 from pathlib import Path
 from typing import Any, Callable, Dict, List, Optional, Union
@@ -304,6 +305,13 @@ class MemoryEngine:
         else:
             date_str = timestamp.strftime("%Y-%m-%d")
 
+        # Reject a junk date directory derived from a poisoned/round-tripped
+        # timestamp (mirrors storage.save_episode). Traversal is already
+        # contained by _resolve_path; this just stops non-date dirs being
+        # created. Only an exact YYYY-MM-DD string is allowed.
+        if not re.fullmatch(r"\d{4}-\d{2}-\d{2}", date_str):
+            date_str = datetime.now(timezone.utc).strftime("%Y-%m-%d")
+
         episode_id = trace_dict.get("id", f"ep-{date_str}-{self._generate_id()}")
         trace_dict["id"] = episode_id
 

package/memory/retrieval.py

@@ -297,6 +297,14 @@ class MemoryRetrieval:
 
     # Track which legacy entries we've already warned about to avoid log spam.
     _LEGACY_WARN_LIMIT = 5
+
+    # Cap on episode files read per keyword scan. The episodic store grows
+    # unbounded over a long-lived project, so an uncapped scan reads+parses
+    # every episode on every keyword query. Date dirs are walked newest-first,
+    # so the cap retains the most recent episodes (the natural relevance order)
+    # and only stops unbounded IO; it does not change scoring of retained
+    # candidates.
+    _KEYWORD_SCAN_MAX_EPISODES = 2000
     _legacy_warned_count: int = 0
 
     def _belongs_to_namespace(self, result: Dict[str, Any]) -> bool:
@@ -1509,7 +1517,14 @@ class MemoryRetrieval:
         if not date_dirs:
             return results
 
+        # Bound the scan so an unbounded episodic store does not force a
+        # read+parse of every episode on each query (see
+        # _KEYWORD_SCAN_MAX_EPISODES). Newest date dirs first keeps the most
+        # recent episodes.
+        scanned = 0
         for date_dir in sorted(date_dirs, reverse=True):
+            if scanned >= self._KEYWORD_SCAN_MAX_EPISODES:
+                break
             if not date_dir.is_dir():
                 continue
 
@@ -1519,7 +1534,10 @@ class MemoryRetrieval:
             for episode_file in episode_files:
                 if episode_file.name == "index.json":
                     continue
+                if scanned >= self._KEYWORD_SCAN_MAX_EPISODES:
+                    break
 
+                scanned += 1
                 data = self.storage.read_json(
                     f"episodic/{date_dir.name}/{episode_file.name}"
                 )

package/memory/storage.py

@@ -429,6 +429,21 @@ class MemoryStorage:
     # Episode Storage
     # -------------------------------------------------------------------------
 
+    @staticmethod
+    def _sanitize_episode_id(episode_id) -> str:
+        """
+        Sanitize an episode id for use in a filename.
+
+        Separators and "." segments cannot leak into the path (mirrors
+        save_skill). save_episode and load_episode must use the SAME transform
+        or a round-tripped id with ":", "/", or "." chars would write to one
+        file and read from another.
+        """
+        return "".join(
+            c if c.isalnum() or c in "-_" else "_"
+            for c in str(episode_id)
+        )
+
     def save_episode(self, episode: EpisodeTrace) -> str:
         """
         Save an episode trace to storage.
@@ -475,10 +490,7 @@ class MemoryStorage:
         if not re.fullmatch(r"\d{4}-\d{2}-\d{2}", date_str):
             date_str = datetime.now(timezone.utc).strftime("%Y-%m-%d")
 
-        safe_episode_id = "".join(
-            c if c.isalnum() or c in "-_" else "_"
-            for c in str(episode_id)
-        )
+        safe_episode_id = self._sanitize_episode_id(episode_id)
 
         date_dir = self.base_path / "episodic" / date_str
         date_dir.mkdir(parents=True, exist_ok=True)
@@ -507,10 +519,14 @@ class MemoryStorage:
         if not episodic_dir.exists():
             return None
 
+        # Sanitize the same way save_episode does so an id carrying ":", "/",
+        # or "." chars resolves to the file it was actually written to.
+        safe_episode_id = self._sanitize_episode_id(episode_id)
+
         # Search all date directories
         for date_dir in episodic_dir.iterdir():
             if date_dir.is_dir():
-                file_path = date_dir / f"task-{episode_id}.json"
+                file_path = date_dir / f"task-{safe_episode_id}.json"
                 if file_path.exists():
                     data = self._load_json(file_path)
                     if data:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "loki-mode",
   "mcpName": "io.github.asklokesh/loki-mode",
-  "version": "7.76.0",
+  "version": "7.78.0",
   "description": "Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).",
   "keywords": [
     "agent",

package/plugins/loki-mode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "loki-mode",
   "displayName": "Loki Mode",
-  "version": "7.76.0",
+  "version": "7.78.0",
   "description": "Autonomous spec-to-product build system with a built-in trust layer (RARV-C closure loop, 8 quality gates, completion council). Ships Loki's spec-hardening, drift-detection, and deterministic PR verification commands plus the Loki MCP server.",
   "author": {
     "name": "Autonomi",