superlocalmemory 3.6.22 → 3.7.0

package/scripts/preuninstall.js

@@ -1,57 +1,16 @@
 #!/usr/bin/env node
 /**
- * SuperLocalMemory V3 - NPM Preuninstall Script
+ * SuperLocalMemory NPM pre-uninstall notice.
  *
- * Copyright (c) 2026 Varun Pratap Bhardwaj
- * Solution Architect & Original Creator
+ * npm owns and removes the package directory, including its private Python
+ * runtime. Durable SLM data has separate ownership and is never inspected or
+ * modified by an application-code uninstall.
  *
- * Licensed under Elastic License 2.0 (see LICENSE file)
- * Repository: https://github.com/qualixar/superlocalmemory
- *
- * ATTRIBUTION REQUIRED: This notice must be preserved in all copies.
+ * Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
+ * Licensed under AGPL-3.0-or-later.
  */
 
-const path = require('path');
-const os = require('os');
-const fs = require('fs');
-
-console.log('\n════════════════════════════════════════════════════════════');
-console.log('  SuperLocalMemory V3 - Uninstalling');
-console.log('════════════════════════════════════════════════════════════\n');
-
-const SLM_DIR = path.join(os.homedir(), '.superlocalmemory');
-
-if (fs.existsSync(SLM_DIR)) {
-    console.log('⚠️  Your data is preserved at: ' + SLM_DIR);
-    console.log('');
-    console.log('   This includes:');
-    console.log('   • Your memory database (memory.db)');
-    console.log('   • All learned patterns');
-    console.log('   • Knowledge graph');
-    console.log('   • Profile data');
-    console.log('');
-    console.log('   To completely remove SuperLocalMemory:');
-    if (os.platform() === 'win32') {
-        console.log('   rmdir /s "' + SLM_DIR + '"');
-    } else {
-        console.log('   rm -rf "' + SLM_DIR + '"');
-    }
-    console.log('');
-    console.log('   To backup your data first:');
-    if (os.platform() === 'win32') {
-        console.log('   xcopy "' + SLM_DIR + '" "%USERPROFILE%\\slm-backup\\" /E /I');
-    } else {
-        console.log('   cp -r "' + SLM_DIR + '" ~/slm-backup/');
-    }
-    console.log('');
-} else {
-    console.log('ℹ️  No data directory found at ' + SLM_DIR);
-    console.log('');
-}
-
-console.log('📦 Removing NPM package...');
-console.log('   (slm and superlocalmemory commands will be unavailable)');
-console.log('');
+'use strict';
 
-// No actual deletion here - we preserve user data
-// NPM will remove the package files automatically
+console.log('SuperLocalMemory application code is being removed.');
+console.log('Memory data is preserved. No database, profile, backup, or configuration was inspected or changed.');

package/src/superlocalmemory/__init__.py

@@ -1,7 +1,7 @@
 """SuperLocalMemory — information-geometric agent memory.
 
 v3.6.9: all 7 retrieval layers at full quality (Hopfield@1000, entity_graph@100,
-SA neighbor-cache fix, fast=True deprecated). See CHANGELOG.md.
+SA neighbor-cache fix and a genuine latency-bounded fast path). See CHANGELOG.md.
 """
 
 import os
@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "3.6.22"
+__version__ = "3.7.0"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/attribution/mathematical_dna.py

@@ -22,7 +22,7 @@ If the constraint is violated:
     - Overall retrieval quality drops 15-20%
 
 Part of Qualixar | Author: Varun Pratap Bhardwaj
-License: Elastic-2.0
+License: AGPL-3.0-or-later
 """
 
 from __future__ import annotations

package/src/superlocalmemory/attribution/signer.py

@@ -9,7 +9,7 @@ by the system carries a verifiable proof of origin.  Verification
 detects any modification to the content after signing.
 
 Part of Qualixar | Author: Varun Pratap Bhardwaj
-License: Elastic-2.0
+License: AGPL-3.0-or-later
 """
 
 from __future__ import annotations
@@ -17,33 +17,46 @@ from __future__ import annotations
 import hashlib
 import hmac
 import os
-import sys
 from datetime import datetime, timezone
 from typing import Dict
 
+from superlocalmemory.infra.data_root import state_path
+
+
 def _get_or_create_key() -> str:
     """Load key from env or generate a persistent random one."""
     env_key = os.environ.get("SLM_SIGNER_KEY")
     if env_key:
         return env_key
-    key_path = os.path.expanduser("~/.superlocalmemory/.signer_key")
+
+    key_path = state_path(".signer_key")
     try:
-        with open(key_path) as f:
-            return f.read().strip()
+        key = key_path.read_text(encoding="utf-8").strip()
     except FileNotFoundError:
-        import secrets
-        key = secrets.token_hex(32)
-        os.makedirs(os.path.dirname(key_path), exist_ok=True)
-        with open(key_path, "w") as f:
-            f.write(key)
-        # On POSIX, restrict the key file to owner-only read/write.
-        # On Windows, os.chmod only supports setting the read-only flag
-        # and cannot enforce Unix-style permissions, so we skip it.
-        if sys.platform != "win32":
-            os.chmod(key_path, 0o600)
+        key = ""
+    if key:
         return key
 
-_DEFAULT_KEY: str = _get_or_create_key()
+    import secrets
+
+    key = secrets.token_hex(32)
+    key_path.parent.mkdir(parents=True, exist_ok=True)
+    flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL
+    if hasattr(os, "O_NOFOLLOW"):
+        flags |= os.O_NOFOLLOW
+    try:
+        fd = os.open(str(key_path), flags, 0o600)
+        try:
+            os.write(fd, key.encode("utf-8"))
+        finally:
+            os.close(fd)
+    except FileExistsError:
+        key = key_path.read_text(encoding="utf-8").strip()
+        if not key:
+            raise RuntimeError(f"signer key is empty: {key_path}")
+    if os.name != "nt":
+        os.chmod(key_path, 0o600)
+    return key
 
 
 class QualixarSigner:
@@ -63,9 +76,11 @@ class QualixarSigner:
     _PLATFORM: str = "Qualixar"
     _AUTHOR: str = "Varun Pratap Bhardwaj"
     _AUTHOR_URL: str = "https://varunpratap.com"
-    _LICENSE: str = "MIT"
+    _LICENSE: str = "AGPL-3.0-or-later"
 
-    def __init__(self, secret_key: str = _DEFAULT_KEY) -> None:
+    def __init__(self, secret_key: str | None = None) -> None:
+        if secret_key is None:
+            secret_key = _get_or_create_key()
         if not secret_key:
             raise ValueError("secret_key must be a non-empty string")
         self._secret_key: bytes = secret_key.encode("utf-8")
@@ -85,7 +100,7 @@ class QualixarSigner:
 
             - ``platform``     – always ``"Qualixar"``
             - ``author``       – always ``"Varun Pratap Bhardwaj"``
-            - ``license``      – always ``"MIT"``
+            - ``license``      – always ``"AGPL-3.0-or-later"``
             - ``content_hash`` – SHA-256 hex digest of *content*
             - ``signature``    – HMAC-SHA256 hex digest (key-dependent)
             - ``timestamp``    – ISO 8601 UTC timestamp

package/src/superlocalmemory/attribution/watermark.py

@@ -25,7 +25,7 @@ Encoding scheme
    visible character of the host text.
 
 Part of Qualixar | Author: Varun Pratap Bhardwaj
-License: Elastic-2.0
+License: AGPL-3.0-or-later
 """
 
 from __future__ import annotations

package/src/superlocalmemory/cli/_lazy_init.py

@@ -42,11 +42,9 @@ def slm_home() -> Path:
 
     Pure: no mkdir, no side effects.
     """
-    for var in ("SLM_DATA_DIR", "SL_MEMORY_PATH", "SLM_HOME"):
-        val = os.environ.get(var, "").strip()
-        if val:
-            return Path(val)
-    return Path.home() / ".superlocalmemory"
+    from superlocalmemory.infra.data_root import canonical_data_root
+
+    return canonical_data_root()
 
 
 # ---------------------------------------------------------------------------