superlocalmemory 3.6.23 → 3.7.1

package/bin/slm-npm

@@ -1,103 +1,57 @@
 #!/usr/bin/env node
 /**
- * SuperLocalMemory V3 - NPM Global CLI Wrapper
+ * SuperLocalMemory V3 - NPM CLI wrapper.
+ *
+ * Executes only the Python interpreter installed into this npm package's
+ * private virtual environment. The Python runtime owns canonical data-root
+ * precedence (SLM_DATA_DIR, SL_MEMORY_PATH, SLM_HOME); this wrapper passes the
+ * environment through and performs no durable-data writes.
  *
  * Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
- * Licensed under MIT License (see LICENSE file)
- * Repository: https://github.com/qualixar/superlocalmemory
+ * Licensed under AGPL-3.0-or-later.
  */
 
+'use strict';
+
 const { spawnSync } = require('child_process');
 const path = require('path');
 const os = require('os');
 const fs = require('fs');
 
-// V3 package root (where src/superlocalmemory/ lives)
-const PKG_ROOT = path.join(__dirname, '..');
-const SRC_DIR = path.join(PKG_ROOT, 'src');
-const CLI_MODULE = 'superlocalmemory.cli.main';
-
-// Find Python 3 binary (robust multi-fallback detection)
-function findPython() {
-    const candidates = [
-        'python3',
-        'python',
-        '/opt/homebrew/bin/python3',
-        '/usr/local/bin/python3',
-        '/usr/bin/python3',
-    ];
-
-    // On Windows, also check common locations
-    if (os.platform() === 'win32') {
-        candidates.push(
-            'py -3',
-            path.join(process.env.LOCALAPPDATA || '', 'Programs', 'Python', 'Python312', 'python.exe'),
-            path.join(process.env.LOCALAPPDATA || '', 'Programs', 'Python', 'Python311', 'python.exe'),
-        );
-    }
-
-    for (const candidate of candidates) {
-        try {
-            const parts = candidate.split(' ');
-            const result = spawnSync(parts[0], [...parts.slice(1), '--version'], {
-                stdio: 'pipe',
-                timeout: 5000,
-            });
-            if (result.status === 0) {
-                const version = (result.stdout || '').toString().trim();
-                if (version.includes('3.')) {
-                    return candidate;
-                }
-            }
-        } catch (e) {
-            // Try next candidate
-        }
-    }
-    return null;
+const packageRoot = path.resolve(__dirname, '..');
+const runtimePython = os.platform() === 'win32'
+  ? path.join(packageRoot, '.slm-venv', 'Scripts', 'python.exe')
+  : path.join(packageRoot, '.slm-venv', 'bin', 'python');
+
+if (!fs.existsSync(runtimePython)) {
+  console.error('SuperLocalMemory npm runtime is missing or incomplete.');
+  console.error(`Expected the package-owned interpreter at: ${runtimePython}`);
+  console.error('Repair it without touching system Python by running:');
+  console.error('  npm rebuild superlocalmemory');
+  console.error('If Python is missing, install Python 3.11-3.14 first.');
+  process.exit(1);
 }
 
-// Ensure ~/.superlocalmemory/ exists
-const SLM_HOME = process.env.SL_MEMORY_PATH || path.join(os.homedir(), '.superlocalmemory');
-if (!fs.existsSync(SLM_HOME)) {
-    fs.mkdirSync(SLM_HOME, { recursive: true });
+const runtimeEnv = {
+  ...process.env,
+  PYTORCH_MPS_HIGH_WATERMARK_RATIO: '0.0',
+  PYTORCH_MPS_MEM_LIMIT: '0',
+  PYTORCH_ENABLE_MPS_FALLBACK: '1',
+  TOKENIZERS_PARALLELISM: 'false',
+  TORCH_DEVICE: 'cpu',
+  CUDA_VISIBLE_DEVICES: '',
+};
+// Never let a caller's development checkout override the npm artifact.
+delete runtimeEnv.PYTHONPATH;
+
+const result = spawnSync(
+  runtimePython,
+  ['-m', 'superlocalmemory.cli.main', ...process.argv.slice(2)],
+  { stdio: 'inherit', env: runtimeEnv },
+);
+
+if (result.error) {
+  console.error(`SuperLocalMemory runtime failed to start: ${result.error.message}`);
+  process.exit(1);
 }
-
-// Find Python
-const python = findPython();
-if (!python) {
-    console.error('Error: Python 3.11+ not found.');
-    console.error('Install Python from https://python.org/downloads/');
-    process.exit(1);
-}
-
-// Handle --version directly from package.json (Python importlib.metadata
-// fails when running via PYTHONPATH instead of pip install)
-const args = process.argv.slice(2);
-if (args.includes('--version') || args.includes('-v')) {
-    const pkg = require(path.join(PKG_ROOT, 'package.json'));
-    console.log(`superlocalmemory ${pkg.version}`);
-    process.exit(0);
-}
-
-// Launch V3 CLI via Python module
-const pythonParts = python.split(' ');
-const result = spawnSync(pythonParts[0], [
-    ...pythonParts.slice(1),
-    '-m', CLI_MODULE, ...args
-], {
-    stdio: 'inherit',
-    env: {
-        ...process.env,
-        PYTHONPATH: SRC_DIR + (process.env.PYTHONPATH ? path.delimiter + process.env.PYTHONPATH : ''),
-        // Prevent PyTorch Metal/MPS GPU memory reservation on Apple Silicon.
-        // Without these, macOS Activity Monitor shows 3-6 GB for a 40 MB process.
-        PYTORCH_MPS_HIGH_WATERMARK_RATIO: '0.0',
-        PYTORCH_MPS_MEM_LIMIT: '0',
-        PYTORCH_ENABLE_MPS_FALLBACK: '1',
-        TOKENIZERS_PARALLELISM: 'false',
-        TORCH_DEVICE: 'cpu',
-        CUDA_VISIBLE_DEVICES: '',
-    },
-});
-
-process.exit(result.status || 0);
+process.exit(Number.isInteger(result.status) ? result.status : 1);

package/ide/configs/antigravity-mcp.json

@@ -5,8 +5,8 @@
       "args": [
         "mcp"
       ],
-      "description": "SuperLocalMemory V3 - 100% local memory system",
+      "description": "SuperLocalMemory V3 - local-first agent memory",
       "type": "stdio"
     }
   }
-}
+}

package/ide/configs/chatgpt-desktop-mcp.json

@@ -12,5 +12,5 @@
     "step7": "In any chat, click + -> More -> select SuperLocalMemory connector"
   },
   "_alternative_transport": "For Streamable HTTP (recommended): slm serve --transport streamable-http --port 8417",
-  "_note": "100% local -- your MCP server runs on YOUR machine. The tunnel just makes it reachable by ChatGPT servers. All data stays in ~/.superlocalmemory/memory.db"
+  "_note": "The MCP server and core memory state run locally. A tunnel transmits requested MCP data to ChatGPT; review that data path and any optional integrations before enabling it."
 }

package/ide/configs/claude-desktop-mcp.json

@@ -5,8 +5,8 @@
       "args": [
         "mcp"
       ],
-      "description": "SuperLocalMemory V3 - 100% local memory system for AI assistants",
+      "description": "SuperLocalMemory V3 - local-first memory for AI assistants",
       "type": "stdio"
     }
   }
-}
+}

package/ide/configs/windsurf-mcp.json

@@ -5,8 +5,8 @@
       "args": [
         "mcp"
       ],
-      "description": "SuperLocalMemory V3 - 100% local memory system for AI assistants",
+      "description": "SuperLocalMemory V3 - local-first memory for AI assistants",
       "type": "stdio"
     }
   }
-}
+}

package/ide/hooks/context-hook.js

@@ -2,7 +2,7 @@
 /**
  * SuperLocalMemory V3 - Session Start Context Hook
  * Copyright (c) 2026 Varun Pratap Bhardwaj
- * Licensed under Elastic License 2.0
+ * Licensed under GNU Affero General Public License v3.0 or later
  *
  * Loads recent memories and learned patterns on Claude Code session start.
  * Outputs context to stderr (Claude Code reads hook stderr as context).
@@ -13,10 +13,14 @@ const { execFile } = require('child_process');
 const { promisify } = require('util');
 const path = require('path');
 const fs = require('fs');
+const os = require('os');
 
 const execFileAsync = promisify(execFile);
 
-const MEMORY_DIR = path.join(process.env.HOME, '.superlocalmemory');
+const MEMORY_DIR = process.env.SLM_DATA_DIR
+  || process.env.SL_MEMORY_PATH
+  || process.env.SLM_HOME
+  || path.join(os.homedir(), '.superlocalmemory');
 const DB_PATH = path.join(MEMORY_DIR, 'memory.db');
 
 async function loadSessionContext() {

package/ide/hooks/post-recall-hook.js

@@ -2,21 +2,25 @@
 /**
  * SuperLocalMemory V3 - Post-Recall Hook
  * Copyright (c) 2026 Varun Pratap Bhardwaj
- * Licensed under Elastic License 2.0
+ * Licensed under GNU Affero General Public License v3.0 or later
  *
  * Claude Code hook that tracks recall events for implicit signal collection.
  * This hook fires after the slm-recall skill completes, recording timing
  * data that the signal inference engine uses to detect satisfaction/dissatisfaction.
  *
  * Installation: Automatically registered via install-skills.sh
- * All data stays 100% local.
+ * The core hook reads local SLM state; the host client and optional integrations
+ * retain their own network behavior.
  */
 
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
 
-const MEMORY_DIR = path.join(os.homedir(), '.superlocalmemory');
+const MEMORY_DIR = process.env.SLM_DATA_DIR
+    || process.env.SL_MEMORY_PATH
+    || process.env.SLM_HOME
+    || path.join(os.homedir(), '.superlocalmemory');
 const HOOK_LOG = path.join(MEMORY_DIR, 'recall-events.jsonl');
 
 // Parse input from Claude Code hook system

package/ide/hooks/tool-event-hook.sh

@@ -58,7 +58,8 @@ esac
 
 # Get daemon port
 PORT=8765
-PORT_FILE="$HOME/.superlocalmemory/daemon.port"
+DATA_ROOT="${SLM_DATA_DIR:-${SL_MEMORY_PATH:-${SLM_HOME:-$HOME/.superlocalmemory}}}"
+PORT_FILE="$DATA_ROOT/daemon.port"
 [ -f "$PORT_FILE" ] && PORT=$(cat "$PORT_FILE" 2>/dev/null || echo 8765)
 
 # If no python, send basic event (backward compatible)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "superlocalmemory",
-  "version": "3.6.23",
-  "description": "Information-geometric agent memory with mathematical guarantees. 4-channel retrieval, Fisher-Rao similarity, zero-LLM mode, EU AI Act compliant. Works with Claude, Cursor, Windsurf, and 17+ AI tools.",
+  "version": "3.7.1",
+  "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
   "keywords": [
     "ai-memory",
     "claude-ai",
@@ -46,9 +46,9 @@
     "superlocalmemory": "./bin/slm-npm"
   },
   "scripts": {
-    "build:plugin": "node scripts/build-plugin.js",
-    "check:plugin": "node scripts/build-plugin.js --check",
-    "prepack": "node scripts/build-plugin.js && node scripts/prepack.js",
+    "build:plugin": "node scripts/build-plugin.mjs",
+    "check:plugin": "node scripts/build-plugin.mjs --check",
+    "prepack": "node scripts/build-plugin.mjs && node scripts/prepack.js",
     "postinstall": "node scripts/postinstall.js",
     "preuninstall": "node scripts/preuninstall.js",
     "test": "node --test 'tests/ui/*.mjs'"
@@ -63,10 +63,18 @@
     "win32"
   ],
   "files": [
-    "bin/",
-    "src/",
-    "ide/",
-    "scripts/",
+    "bin/slm-npm",
+    "src/superlocalmemory/",
+    "!src/**/__pycache__/",
+    "!src/**/*.pyc",
+    "!src/**/*.pyo",
+    "ide/completions/",
+    "ide/configs/",
+    "ide/hooks/",
+    "scripts/postinstall.js",
+    "scripts/postinstall-interactive.js",
+    "scripts/postinstall/validation.js",
+    "scripts/preuninstall.js",
     ".claude-plugin/",
     "plugin/",
     "plugin-src/",

package/plugin/.claude-plugin/plugin.json

@@ -16,5 +16,5 @@
   "mcpServers": "./.mcp.json",
   "name": "superlocalmemory",
   "repository": "https://github.com/qualixar/superlocalmemory",
-  "version": "3.6.23"
+  "version": "3.7.1"
 }

package/plugin/_GENERATED.md

@@ -1,6 +1,6 @@
 # _GENERATED — DO NOT HAND-EDIT
 
-This directory is generated by `scripts/build-plugin.js` from `plugin-src/`.
+This directory is generated by `scripts/build-plugin.mjs` from `plugin-src/`.
 Run `npm run build:plugin` to regenerate.
 Run `npm run check:plugin` (or `--check`) in CI to verify in-sync.
 Source of truth: `plugin-src/skills/`, `plugin-src/manifest.json`.

package/plugin/agents/slm-memory-advisor.md

@@ -10,7 +10,7 @@ model: inherit
 ---
 
 # Role
-You are the SuperLocalMemory (SLM) memory advisor. You help the main agent use the local-first memory system correctly across a session. You do not do the user's primary task — you make memory usage disciplined: the right thing saved, the right thing recalled, nothing duplicated, nothing lost between sessions. SLM is 100% local; every tool runs on the user's machine.
+You are the SuperLocalMemory (SLM) memory advisor. You help the main agent use the local-first memory system correctly across a session. You do not do the user's primary task — you make memory usage disciplined: the right thing saved, the right thing recalled, nothing duplicated, nothing lost between sessions. Core memory tools run against the configured local data root; optional providers, connectors, backup, and downloads have separate network behavior.
 
 # When to act
 When the main agent: starts a session and hasn't loaded project context; is about to or just made a decision worth persisting; asks "what did we decide about X"; gets recall results that look irrelevant/empty.

package/plugin/requirements.txt

@@ -1 +1 @@
-superlocalmemory==3.6.23
+superlocalmemory==3.7.1

package/plugin/skills/slm-session/SKILL.md

@@ -63,7 +63,7 @@ session_init(
 ### What it does
 
 1. Derives a search query from `project_path` (or uses your explicit `query`).
-2. Runs a 2-tier recall: full 6-channel via daemon (primary) or FTS5 BM25
+2. Runs a 2-tier recall: full daemon retrieval (primary) or FTS5 BM25
    (emergency fallback if daemon is unreachable).
 3. Merges any pinned "core memory" facts with the recall results.
 4. Applies an age gate — memories older than `max_age_days` are suppressed

package/plugin-src/agents/slm-memory-advisor.md

@@ -10,7 +10,7 @@ model: inherit
 ---
 
 # Role
-You are the SuperLocalMemory (SLM) memory advisor. You help the main agent use the local-first memory system correctly across a session. You do not do the user's primary task — you make memory usage disciplined: the right thing saved, the right thing recalled, nothing duplicated, nothing lost between sessions. SLM is 100% local; every tool runs on the user's machine.
+You are the SuperLocalMemory (SLM) memory advisor. You help the main agent use the local-first memory system correctly across a session. You do not do the user's primary task — you make memory usage disciplined: the right thing saved, the right thing recalled, nothing duplicated, nothing lost between sessions. Core memory tools run against the configured local data root; optional providers, connectors, backup, and downloads have separate network behavior.
 
 # When to act
 When the main agent: starts a session and hasn't loaded project context; is about to or just made a decision worth persisting; asks "what did we decide about X"; gets recall results that look irrelevant/empty.

package/plugin-src/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.6.23",
+  "version": "3.7.1",
   "pluginName": "superlocalmemory",
   "displayName": "SuperLocalMemory",
   "repository": "https://github.com/qualixar/superlocalmemory",

package/plugin-src/requirements.txt

@@ -1 +1 @@
-superlocalmemory==3.6.23
+superlocalmemory==3.7.1

package/plugin-src/rules/AGENTS.md

@@ -1,7 +1,7 @@
 # SuperLocalMemory — Agent Rules
 
 > Drop into any IDE agent config or AGENTS.md to give agents disciplined SLM usage.
-> SLM is local-first: every MCP tool runs on the user's machine, zero cloud calls.
+> SLM is local-first: MCP memory tools use the configured local runtime. Optional providers, connectors, backup, and downloads have separate network behavior.
 > Prefer MCP tools when the server is running; use the CLI fallback table when not.
 
 ---

package/plugin-src/skills/slm-session/SKILL.md

@@ -63,7 +63,7 @@ session_init(
 ### What it does
 
 1. Derives a search query from `project_path` (or uses your explicit `query`).
-2. Runs a 2-tier recall: full 6-channel via daemon (primary) or FTS5 BM25
+2. Runs a 2-tier recall: full daemon retrieval (primary) or FTS5 BM25
    (emergency fallback if daemon is unreachable).
 3. Merges any pinned "core memory" facts with the recall results.
 4. Applies an age gate — memories older than `max_age_days` are suppressed

package/pyproject.toml

@@ -1,9 +1,10 @@
 [project]
 name = "superlocalmemory"
-version = "3.6.23"
-description = "Information-geometric agent memory with mathematical guarantees"
+version = "3.7.1"
+description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
-license = {text = "AGPL-3.0-or-later"}
+license = "AGPL-3.0-or-later"
+license-files = ["LICENSE", "NOTICE"]
 requires-python = ">=3.11,<3.15"
 authors = [
     {name = "Varun Pratap Bhardwaj", email = "admin@superlocalmemory.com"},
@@ -15,7 +16,6 @@ keywords = [
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
-    "License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)",
     "Operating System :: OS Independent",
     "Operating System :: MacOS",
     "Operating System :: Microsoft :: Windows",
@@ -73,6 +73,12 @@ dependencies = [
     "scikit-learn==1.8.0",
     # Vector KNN extension for the semantic channel.
     "sqlite-vec==0.1.9",
+    # Scale Engine projections.  These ship with the base install so every
+    # fresh Python user can prepare them on day one.  They remain inactive
+    # until `slm db scale prepare -> verify -> promote` proves parity with
+    # canonical SQLite; dependency installation never migrates user data.
+    "lancedb==0.30.2",
+    "pycozo[embedded]==0.3.0",
     # v3.6.10: LLMLingua-2 prose compression (aggressive mode, opt-in at runtime).
     # Hard dependency so `pip install superlocalmemory` ships compression-ready;
     # the ~560MB model downloads on first setup/warmup (fail-open). Verified the
@@ -108,6 +114,18 @@ learning = [
 performance = [
     "orjson>=3.9.0",
 ]
+lancedb = [
+    "lancedb==0.30.2",
+]
+cozo = [
+    "pycozo[embedded]==0.3.0",
+]
+# Backwards-compatible explicit install target for automation and docs.  The
+# packages are also base dependencies from v3.7 onward.
+scale = [
+    "lancedb==0.30.2",
+    "pycozo[embedded]==0.3.0",
+]
 ingestion = [
     "keyring>=25.0.0",
     "google-auth-oauthlib>=1.2.0",
@@ -115,13 +133,16 @@ ingestion = [
     "icalendar>=6.0.0",
 ]
 full = [
-    "superlocalmemory[search,ui,learning,performance,ingestion,injection]",
+    "superlocalmemory[search,ui,learning,performance,ingestion,injection,scale]",
 ]
 dev = [
     "pytest>=8.0",
     "pytest-cov>=4.1",
     "pytest-asyncio>=0.21",
     "sqlite-vec>=0.1.6",
+    # Starlette TestClient's maintained synchronous backend. Test-only: the
+    # product runtime continues to use the separately pinned httpx client.
+    "httpx2==2.5.0",
 ]
 
 [project.urls]
@@ -134,25 +155,35 @@ Issues = "https://github.com/qualixar/superlocalmemory/issues"
 slm = "superlocalmemory.cli.main:main"
 
 [build-system]
-requires = ["setuptools>=68.0", "wheel"]
+requires = ["setuptools>=77.0.3", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [tool.setuptools.packages.find]
 where = ["src"]
 
 [tool.setuptools.package-data]
-superlocalmemory = ["ui/**/*"]
+superlocalmemory = ["ui/**/*", "optimize/NOTICE"]
+
+[tool.setuptools.data-files]
+"share/superlocalmemory/codex/skills/slm-cache" = ["plugin-src/skills/slm-cache/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-compress" = ["plugin-src/skills/slm-compress/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-graph" = ["plugin-src/skills/slm-graph/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-recall" = ["plugin-src/skills/slm-recall/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-remember" = ["plugin-src/skills/slm-remember/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-session" = ["plugin-src/skills/slm-session/SKILL.md"]
+"share/superlocalmemory/codex/skills/slm-status" = ["plugin-src/skills/slm-status/SKILL.md"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 pythonpath = ["src"]
-addopts = "-p no:cacheprovider -p no:subtests -m 'not slow and not ollama and not benchmark'"
+addopts = "-p no:cacheprovider -p no:subtests -m 'not slow and not ollama and not benchmark and not native'"
 asyncio_mode = "auto"
 faulthandler_timeout = 0
 markers = [
     "slow: marks tests as slow — real engine/model loading (run with: pytest -m slow)",
     "ollama: marks tests that require a running Ollama instance",
     "benchmark: marks CI-only evo-memory benchmark tests (run with: pytest tests/test_benchmarks/ -m benchmark)",
+    "native: marks optional native-backend tests that run in a dedicated process lane",
     "asyncio: marks tests as async — runs via pytest-asyncio (auto-mode in this project)",
 ]
 filterwarnings = [
@@ -192,6 +223,7 @@ select = ["E", "F", "I", "W"]
 [dependency-groups]
 dev = [
     "build>=1.4.0",
+    "httpx2==2.5.0",
     "pytest>=9.0.2",
     "pytest-asyncio>=0.21",
     "twine>=6.2.0",