superlocalmemory 3.7.6 → 3.7.7

package/src/superlocalmemory/storage/migration_runner.py

@@ -120,6 +120,17 @@ _MODULES = {
 
 logger = logging.getLogger(__name__)
 
+# Exact historical DDL fingerprints whose resulting schema is intentionally
+# accepted by the current migration. Unknown hashes are never reconciled.
+_KNOWN_EQUIVALENT_DDL_HASHES: dict[str, frozenset[str]] = {
+    _M002.NAME: frozenset({
+        # v3.4.21 hardened copy-forward variant.
+        "347eeb2ec8aac89f7cbf373da49ac9446be9ed150e6105c382c656cd22426d4b",
+        # v3.4.22 model_version-default variant shipped through 3.6.x.
+        "d28666fa1dfa66e6514efd288e6748363513da2255a4cee95d80f233e6728ae7",
+    }),
+}
+
 
 @dataclass(frozen=True, slots=True)
 class Migration:
@@ -307,11 +318,14 @@ def _apply_single(
                 # in place, reconcile the log to the current hash and treat as
                 # already-applied instead of failing the daemon into permanent
                 # not_ready. Absent/failing verify keeps the hard failure.
+                allowed_hashes = _KNOWN_EQUIVALENT_DDL_HASHES.get(
+                    migration.name, frozenset(),
+                )
                 mod = _MODULES.get(migration.name)
                 verify_fn = (
                     getattr(mod, "verify", None) if mod is not None else None
                 )
-                if verify_fn is not None:
+                if logged_hash in allowed_hashes and verify_fn is not None:
                     try:
                         if verify_fn(conn):
                             if not dry_run:
@@ -323,8 +337,8 @@ def _apply_single(
                                     pass
                             return (
                                 "skipped",
-                                "drift reconciled via verify — schema present, "
-                                "log re-hashed to current DDL",
+                                "allowlisted historical DDL reconciled after "
+                                "full schema verification",
                             )
                     except sqlite3.Error:  # pragma: no cover
                         pass

package/src/superlocalmemory/storage/migrations/M002_model_state_history.py

@@ -29,14 +29,43 @@ _REQUIRED_COLS = frozenset({
 
 
 def verify(conn: sqlite3.Connection) -> bool:
-    """Return True if the rebuilt model_state schema is in place."""
+    """Verify columns plus both indexes promised by this migration."""
     try:
-        cols = {r[1] for r in conn.execute(
+        cols = {r[1]: r for r in conn.execute(
             "PRAGMA table_info(learning_model_state)"
         ).fetchall()}
+        index_rows = conn.execute(
+            "PRAGMA index_list(learning_model_state)"
+        ).fetchall()
     except sqlite3.Error:
         return False
-    return _REQUIRED_COLS <= cols
+    if not _REQUIRED_COLS <= set(cols):
+        return False
+
+    indexes = {row[1]: row for row in index_rows}
+    active = indexes.get("idx_model_active")
+    profile_time = indexes.get("idx_model_profile_time")
+    if active is None or profile_time is None:
+        return False
+    # idx_model_active must remain a UNIQUE partial index.
+    if int(active[2]) != 1 or int(active[4]) != 1:
+        return False
+    active_cols = [row[2] for row in conn.execute(
+        "PRAGMA index_info(idx_model_active)"
+    ).fetchall()]
+    time_cols = [row[2] for row in conn.execute(
+        "PRAGMA index_info(idx_model_profile_time)"
+    ).fetchall()]
+    if active_cols != ["profile_id"]:
+        return False
+    if time_cols != ["profile_id", "trained_at"]:
+        return False
+    sql_row = conn.execute(
+        "SELECT sql FROM sqlite_master WHERE type='index' AND name=?",
+        ("idx_model_active",),
+    ).fetchone()
+    normalized = " ".join(str(sql_row[0] if sql_row else "").lower().split())
+    return "where is_active = 1" in normalized
 
 
 # IMPORTANT: this DDL shipped in V3.4.21.  Migration hashes are immutable

package/src/superlocalmemory/ui/index.html

@@ -1058,11 +1058,42 @@
                                 </button>
                                 <span id="settings-emb-test-result" class="ms-2 small"></span>
                             </div>
-                            <div id="settings-emb-info" class="small text-muted mt-1">
+                        <div id="settings-emb-info" class="small text-muted mt-1">
                                 Using local <strong>nomic-embed-text-v1.5</strong> (768d)
                             </div>
                         </div>
 
+                        <!-- Step 4: Scope defaults (shared/global remain opt-in) -->
+                        <div class="mt-3 pt-3 border-top" id="settings-scope-panel">
+                            <h6 class="text-muted"><i class="bi bi-shield-lock"></i> Step 4: Memory Visibility</h6>
+                            <p class="small text-muted mb-2">
+                                Personal-only is the privacy-safe default. Enable broader visibility deliberately.
+                            </p>
+                            <div class="row g-2 align-items-end">
+                                <div class="col-md-4">
+                                    <label class="form-label small" for="settings-default-scope">Default write scope</label>
+                                    <select class="form-select form-select-sm" id="settings-default-scope">
+                                        <option value="personal">Personal (recommended)</option>
+                                        <option value="shared">Shared</option>
+                                        <option value="global">Global</option>
+                                    </select>
+                                </div>
+                                <div class="col-md-4">
+                                    <div class="form-check form-switch">
+                                        <input class="form-check-input" type="checkbox" id="settings-recall-shared">
+                                        <label class="form-check-label small" for="settings-recall-shared">Include shared memories by default</label>
+                                    </div>
+                                </div>
+                                <div class="col-md-4">
+                                    <div class="form-check form-switch">
+                                        <input class="form-check-input" type="checkbox" id="settings-recall-global">
+                                        <label class="form-check-label small" for="settings-recall-global">Include global memories by default</label>
+                                    </div>
+                                </div>
+                            </div>
+                            <div id="settings-scope-status" class="small text-muted mt-2"></div>
+                        </div>
+
                         <!-- Save button -->
                         <div class="mt-3">
                             <button class="btn btn-primary" id="settings-save-all">

package/src/superlocalmemory/ui/js/auto-settings.js

@@ -27,6 +27,50 @@ async function loadAutoSettings() {
     }
 }
 
+async function loadScopeSettings() {
+    try {
+        var response = await fetch('/api/v3/scope/config');
+        if (!response.ok) throw new Error('HTTP ' + response.status);
+        var data = await response.json();
+        var defaultScope = document.getElementById('settings-default-scope');
+        var shared = document.getElementById('settings-recall-shared');
+        var globalScope = document.getElementById('settings-recall-global');
+        if (defaultScope) defaultScope.value = data.default_scope || 'personal';
+        if (shared) shared.checked = data.recall_include_shared === true;
+        if (globalScope) globalScope.checked = data.recall_include_global === true;
+    } catch (error) {
+        var status = document.getElementById('settings-scope-status');
+        if (status) status.textContent = 'Could not load runtime visibility settings.';
+    }
+}
+
+async function saveScopeSettings() {
+    var status = document.getElementById('settings-scope-status');
+    var payload = {
+        default_scope: document.getElementById('settings-default-scope')?.value || 'personal',
+        recall_include_shared: document.getElementById('settings-recall-shared')?.checked === true,
+        recall_include_global: document.getElementById('settings-recall-global')?.checked === true,
+    };
+    if (status) status.textContent = 'Applying to daemon...';
+    try {
+        var response = await fetch('/api/v3/scope/config', {
+            method: 'PUT',
+            headers: {'Content-Type': 'application/json'},
+            body: JSON.stringify(payload),
+        });
+        var data = await response.json();
+        if (!response.ok || data.success !== true) {
+            throw new Error(data.error || 'daemon rejected visibility settings');
+        }
+        if (status) status.textContent = 'Applied to the resident daemon.';
+        return true;
+    } catch (error) {
+        if (status) status.textContent = 'Not applied: ' + error.message;
+        await loadScopeSettings();
+        return false;
+    }
+}
+
 function saveAutoCaptureConfig() {
     var payload = {
         enabled: document.getElementById('auto-capture-toggle')?.checked,
@@ -533,6 +577,9 @@ document.getElementById('settings-save-all')?.addEventListener('click', saveAllS
 document.getElementById('settings-test-btn')?.addEventListener('click', testConnection);
 document.getElementById('settings-emb-provider')?.addEventListener('change', updateEmbeddingUI);
 document.getElementById('settings-emb-test-btn')?.addEventListener('click', testEmbeddingEndpoint);
+['settings-default-scope', 'settings-recall-shared', 'settings-recall-global'].forEach(function(id) {
+    document.getElementById(id)?.addEventListener('change', saveScopeSettings);
+});
 
 // Mode radio buttons
 document.querySelectorAll('input[name="settings-mode-radio"]').forEach(function(radio) {
@@ -542,6 +589,7 @@ document.querySelectorAll('input[name="settings-mode-radio"]').forEach(function(
 // Load settings when the settings tab is shown
 document.getElementById('settings-tab')?.addEventListener('shown.bs.tab', function() {
     loadAutoSettings();
+    loadScopeSettings();
     loadModeSettings();
     loadEmbeddingSettings();
     updateModeUI();

package/src/superlocalmemory/ui/js/profiles.js

@@ -206,7 +206,9 @@ async function switchProfile(profileName) {
             method: 'POST'
         });
         var data = await response.json();
-        if (data.success || data.active_profile) {
+        var acknowledged = response.ok && data.success === true &&
+            data.active_profile === profileName && Number.isInteger(data.generation);
+        if (acknowledged) {
             showToast('Switched to profile: ' + profileName);
             loadProfiles();
             loadStats();
@@ -226,11 +228,18 @@ async function switchProfile(profileName) {
             if (typeof loadCompliance === 'function') loadCompliance();
             var activeTab = document.querySelector('#mainTabs .nav-link.active');
             if (activeTab) activeTab.click();
+            return true;
         } else {
-            showToast('Failed to switch profile');
+            showToast(data.detail || 'Daemon did not acknowledge the requested profile');
+            // Restore the selector from daemon runtime truth after any failure
+            // or mismatched acknowledgement.
+            loadProfiles();
+            return false;
         }
     } catch (error) {
         console.error('Error switching profile:', error);
         showToast('Error switching profile');
+        loadProfiles();
+        return false;
     }
 }