🛡️ Sentinel: [MEDIUM] Fix SQL syntax error / DoS vector on empty memory recall

.github/workflows/pre-commit.yml

@@ -132,6 +132,10 @@ jobs:
     name: File Changes Analysis
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request'
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

.github/workflows/security.yml

@@ -496,6 +496,10 @@ jobs:
     runs-on: ubuntu-latest
     needs: [dependency-scan, bandit-scan, license-scan]
     if: always()
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     steps:
       - name: Download all security artifacts
         uses: actions/download-artifact@v4

pyproject.toml

@@ -84,6 +84,7 @@ dependencies = [
     "email-validator>=2.3.0",
     "mlx-lm>=0.31.1",
     "wasmtime>=42.0.0",
+    "matplotlib>=3.10.8",
 ]
 
 [project.optional-dependencies]

src/codomyrmex/agentic_memory/cognilayer_bridge.py

@@ -160,11 +160,17 @@ def recall_memory(
         except sqlite3.OperationalError:
             # Fallback to LIKE search
             search_terms = [f"%{word}%" for word in query.split()]
-            where_clauses = " OR ".join(["content LIKE ?"] * len(search_terms))
-            rows = conn.execute(
-                f"SELECT * FROM memories WHERE {where_clauses} LIMIT ?",
-                [*search_terms, top_k],
-            ).fetchall()
+            if not search_terms:
+                rows = conn.execute(
+                    "SELECT * FROM memories LIMIT ?",
+                    (top_k,),
+                ).fetchall()
+            else:
+                where_clauses = " OR ".join(["content LIKE ?"] * len(search_terms))
+                rows = conn.execute(
+                    f"SELECT * FROM memories WHERE {where_clauses} LIMIT ?",
+                    [*search_terms, top_k],
+                ).fetchall()
 
         results = []
         for row in rows: