Skip to content

Repository navigation

Loopky v1.7.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Oct 21:45
· 13 commits to main since this release
v1.7.0
50bc676
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Loopky connector for Claude (mcp): A hosted, multi-user MCP server, so Loopky decks can be created and edited straight from a Claude chat with no CLI install. Users sign in with Pubky Ring over OAuth 2.1. Each user gets an isolated repository graph, credentials are held in an encrypted vault, writes are rate-limited per user, and the server sits behind an edge flood guard. Every tool has a title and correct destructive hints.
  • plugin: Route agents to the CLI or the connector by environment, putting the connector first in a sandbox
  • plugin: Load the skill when a loopky command fails
  • cli: Exit 17, request_refused, for an indexer 4xx
  • auth: Sign an un-backed-up held key back in when its session is rejected

Fixed

  • mcp: Many hardening fixes before launch: token and code revocation on unlink and on refresh reuse, session binding per principal, bounded sign-in slots, and a health check and watchdog that restart a wedged server
  • cli: Login refuses a session from the other network, and its exit 8 carries its result and names what it replaced
  • cli: Limit request_refused to request-shape statuses
  • cli: Send deck edit's cover-url warning through onNote
  • import: Detect spaced pipe and semicolon pairs, and keep them from outranking the real separator
  • nexus: Page resources by timeline only, falling back only when taggers_count is refused
  • tags: Fold language tags where they are derived
  • srs: Retry a failed chunk read, read a chunk before writing it, and refuse a grade on unread review state
  • home: Show counts as unknown when review state did not load whole; only the affected deck loses its badge
  • auth: Sign in with a held key through grant on Android (#130), and lift the cookie pin now that Ring v2.0 parses grant URLs (#321)
  • ios: Sign up with a cookie session, as Android does
  • ios: Fetch Nexus and remote images off URLSession.shared, keep images on reappear, and finish each background task exactly once
  • pubky: Count a client id's length in UTF-8 bytes, as pubky does

Full changelog: v1.6.0...v1.7.0

Assets 13
Loading