superlocalmemory 3.7.8 → 3.8.1

package/plugin-src/skills/slm-recall/SKILL.md

@@ -50,7 +50,7 @@ recall(
   query="authentication strategy decision",
   limit=20,            # default 20; reduce to 5 for quick pre-task checks
   session_id="<sid>",  # pass the session_id returned by session_init
-  fast=False,          # default False; True skips SpreadingActivation channel
+  fast=False,          # default False; True enables faster, reduced-channel retrieval
 )
 ```
 
@@ -101,8 +101,8 @@ correctly, but feedback is not attributed to the session.
 ### 3. Fast mode
 
 Use `fast=True` for pre-tool-call checks where sub-second response matters.
-This skips the SpreadingActivation channel. The remaining channels — semantic,
-lexical, temporal, and structural — still run.
+This enables a faster, reduced-channel mode. Core semantic and keyword channels
+always run; additional graph and contextual channels are skipped.
 
 ```
 recall(query="rate limiting approach", limit=5, session_id="<sid>", fast=True)
@@ -142,12 +142,12 @@ once you have the `fact_id` for full content.
 
 ## How multi-channel retrieval works
 
-`recall` runs five candidate producers in parallel — semantic vector similarity,
-lexical BM25, temporal recency, spreading activation, and Hopfield — then fuses
-them with Reciprocal Rank Fusion (RRF), applies a reranker, and layers an
-optional entity-graph post-fusion score enhancement. The `channel_weights` field in the
-response shows how each channel contributed for that query. Weights adapt over
-time based on engagement signals attributed via `session_id`.
+`recall` runs multiple candidate producers in parallel — semantic vector similarity,
+keyword matching, temporal recency weighting, and contextual graph channels — then
+fuses and reranks the combined results, with an optional entity-graph score
+enhancement. The `channel_weights` field in the response shows how each channel
+contributed for that query. Weights adapt over time based on engagement signals
+attributed via `session_id`.
 
 To inspect per-channel scores for a real query against your own data:
 
@@ -202,4 +202,40 @@ trusts that what you surface came from the store.
 
 ---
 
-*SuperLocalMemory v3.6.18 · Qualixar · AGPL-3.0-or-later*
+## Multi-scope retrieval (v3.6.15+, opt-in)
+
+By default `recall` returns only memories in the active profile (personal scope).
+To also surface memories shared from other profiles, pass the scope flags:
+
+```
+recall(
+  query="...",
+  include_global=True,   # include global-scope memories (visible to all profiles)
+  include_shared=True,   # include shared-scope memories (shared with this profile)
+  session_id="<sid>",
+)
+```
+
+Scope flags are **off by default**. Only enable them when the user explicitly asks
+to see shared or global facts. See `slm-scope` for the full sharing model.
+
+---
+
+## Profile-aware retrieval (v3.8.0+)
+
+`recall` always queries the currently active profile. To query a different
+workspace, use `switch_profile` (requires `code`, `full`, or `power` MCP profile)
+before recalling, then switch back. See `slm-profile` for workspace switching.
+
+---
+
+## Related skills
+
+- `slm-remember` — store the decisions and facts that recall surfaces later
+- `slm-session` — session lifecycle (must call before first recall)
+- `slm-scope` — multi-scope sharing model (personal / shared / global)
+- `slm-profile` — workspace isolation and profile switching
+
+---
+
+*SuperLocalMemory v3.8.1 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-remember/SKILL.md

@@ -191,4 +191,51 @@ slm remember "<content>" --scope shared --shared-with alice,bob
 
 ---
 
-*SuperLocalMemory v3.6.18 · Qualixar · AGPL-3.0-or-later*
+## Multi-scope sharing (v3.6.15+, opt-in)
+
+Every `remember` call defaults to `personal` scope — private to the active profile.
+To share a fact with other profiles on the same machine, set the `scope` parameter:
+
+```
+# Share with every profile on this machine
+remember(
+  content="API rate limit is 100 req/min per tenant",
+  tags="api,limits,shared",
+  project="platform",
+  scope="global",      # visible to all profiles
+  session_id="<sid>",
+)
+
+# Share with specific profiles only
+remember(
+  content="Staging DB migration runs Fridays 22:00 UTC",
+  tags="db,ops",
+  scope="shared",
+  shared_with="work-profile,devops-profile",
+  session_id="<sid>",
+)
+```
+
+**Only set scope when the user explicitly asks to share.** The default
+`personal` scope is identical to single-profile SLM. See `slm-scope` for the
+complete sharing model and when to use each scope.
+
+---
+
+## Profile-aware storage (v3.8.0+)
+
+`remember` always stores in the active profile's namespace. To write to a
+different workspace, use `switch_profile` first. See `slm-profile`.
+
+---
+
+## Related skills
+
+- `slm-recall` — retrieve what was remembered
+- `slm-session` — session lifecycle; session_id is required for attribution
+- `slm-scope` — complete guide to personal / shared / global scopes
+- `slm-profile` — workspace isolation and profile switching
+
+---
+
+*SuperLocalMemory v3.8.1 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-session/SKILL.md

@@ -204,4 +204,27 @@ slm doctor [--json]    # preflight check including daemon and embedding worker
 
 ---
 
-*SuperLocalMemory v3.6.18 · Qualixar · AGPL-3.0-or-later*
+## Profile context (v3.8.0+)
+
+`session_init` operates on the currently active profile. If you need to start
+a session on a different workspace, call `switch_profile` (requires `code`,
+`full`, or `power` MCP profile) before `session_init`, then call `session_init`
+for that workspace. See `slm-profile` for workspace switching.
+
+The returned `memories` array reflects facts stored in the active profile only.
+To also surface shared or global facts in the initial context, pass the query
+explicitly and call `recall` with `include_global`/`include_shared` after
+`session_init`. See `slm-scope` for the sharing model.
+
+---
+
+## Related skills
+
+- `slm-recall` — multi-channel retrieval during the session
+- `slm-remember` — store durable facts during the session
+- `slm-profile` — workspace isolation and profile switching
+- `slm-scope` — multi-scope sharing model
+
+---
+
+*SuperLocalMemory v3.8.1 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-status/SKILL.md

@@ -146,4 +146,21 @@ Note: the `slm optimize` subcommands have known pre-existing parse-test failures
 
 ---
 
-SuperLocalMemory v3.6.18 · Qualixar · AGPL-3.0-or-later
+## Profile-aware status (v3.8.0+)
+
+`slm status --json` reports the currently active profile name in the `profile`
+field. Use this to confirm which workspace is active before starting work on a
+multi-profile setup. To switch the active profile, see `slm-profile`.
+
+---
+
+## Related skills
+
+- `slm-session` — session lifecycle (session_init/close_session)
+- `slm-profile` — workspace isolation and profile switching
+- `slm-cache` — KV cache performance metrics
+- `slm-compress` — reversible context compression
+
+---
+
+SuperLocalMemory v3.8.1 · Qualixar · AGPL-3.0-or-later

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "3.7.8"
+version = "3.8.1"
 description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
 license = "AGPL-3.0-or-later"
@@ -171,6 +171,7 @@ superlocalmemory = ["ui/**/*", "optimize/NOTICE"]
 "share/superlocalmemory/codex/skills/slm-remember" = ["plugin-src/skills/slm-remember/SKILL.md"]
 "share/superlocalmemory/codex/skills/slm-session" = ["plugin-src/skills/slm-session/SKILL.md"]
 "share/superlocalmemory/codex/skills/slm-status" = ["plugin-src/skills/slm-status/SKILL.md"]
+"share/superlocalmemory/portable-kit/rules" = ["plugin-src/rules/AGENTS.md"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

package/scripts/postinstall/validation.js

@@ -44,6 +44,8 @@ function validateReplyFileSchema(obj) {
     consolidation_cadence: { type: 'string' },
     inline_entity_detection: { type: 'boolean' },
     telemetry: { type: 'string' },
+    // v3.8.0 — deployment mode (personal|enterprise)
+    deployment: { type: 'string', enum: ['personal', 'enterprise'] },
   };
   for (const key of Object.keys(obj)) {
     if (!Object.prototype.hasOwnProperty.call(schema, key)) {

package/scripts/postinstall-interactive.js

@@ -144,6 +144,8 @@ function parseArgs(argv) {
     home: null,
     replyFile: null,
     homeOutsideHome: false, // H-10: opt-in flag for --home outside $HOME
+    // v3.8.0: deployment mode — "personal" | "enterprise" (default: personal)
+    deployment: null,
   };
   for (const a of argv) {
     if (a === '--dry-run') args.dryRun = true;
@@ -152,6 +154,11 @@ function parseArgs(argv) {
     else if (a.startsWith('--profile=')) args.profile = a.slice('--profile='.length);
     else if (a.startsWith('--home=')) args.home = a.slice('--home='.length);
     else if (a.startsWith('--reply-file=')) args.replyFile = a.slice('--reply-file='.length);
+    else if (a.startsWith('--deployment=')) {
+      const val = a.slice('--deployment='.length).toLowerCase();
+      // Only accept known presets; silently ignore anything else (safe default: personal)
+      args.deployment = (val === 'enterprise') ? 'enterprise' : 'personal';
+    }
   }
   return args;
 }
@@ -165,6 +172,22 @@ const {
   validateHomePath,
 } = require('./postinstall/validation.js');
 
+// v3.8.0 — deployment mode helpers (personal vs enterprise)
+const {
+  DEPLOYMENT_PRESETS,
+  DEFAULT_DEPLOYMENT_MODE,
+  promptDeploymentMode,
+  renderDeploymentBlock,
+} = require('./postinstall/deployment.js');
+
+// v3.8.0 — IDE multi-select + non-destructive connect
+const {
+  IDE_IDS,
+  IDE_DISPLAY,
+  promptIdeMultiselect,
+  executeIdeConnections,
+} = require('./postinstall/ide-multiselect.js');
+
 // ------------------------------------------------------------------------
 // TTY detection
 // ------------------------------------------------------------------------
@@ -198,8 +221,22 @@ function probeColdStartMs() {
   // synchronous spawn with timeout to keep total benchmark ≤15s.
   try {
     const { spawnSync } = require('child_process');
+    // Windows has no `python3`; use the py launcher (`py -3`) or fall back to
+    // `python`. Probing the wrong name returns a pessimistic estimate and
+    // downgrades the recommended profile on every Windows install.
+    let pythonBin = 'python3';
+    let pythonArgs = ['-c', 'pass'];
+    if (process.platform === 'win32') {
+      if (spawnSync('py', ['-3', '-c', 'pass'], { timeout: 1000 }).status === 0) {
+        pythonBin = 'py';
+        pythonArgs = ['-3', '-c', 'pass'];
+      } else {
+        pythonBin = 'python';
+        pythonArgs = ['-c', 'pass'];
+      }
+    }
     const start = Date.now();
-    const r = spawnSync('python3', ['-c', 'pass'], { timeout: 5000 });
+    const r = spawnSync(pythonBin, pythonArgs, { timeout: 5000 });
     const elapsed = Date.now() - start;
     if (r.error || r.status !== 0) return 2000; // pessimistic
     return elapsed;
@@ -337,6 +374,11 @@ function renderConfigToml(config) {
   lines.push('[telemetry]');
   lines.push(`mode = ${tomlEscape(config.telemetry)}`);
   lines.push('');
+  // v3.8.0: [deployment] block — only serialised for non-personal modes to
+  // avoid churning existing config.toml files (no-churn contract).
+  // renderDeploymentBlock() returns [] for personal (the default).
+  const depLines = renderDeploymentBlock(config.deployment || null);
+  for (const dl of depLines) lines.push(dl);
   return lines.join('\n');
 }
 
@@ -626,12 +668,16 @@ async function main() {
     console.log(downgrade.line);
   }
 
+  // v3.8.0: resolve deployment preset (personal default; --deployment flag or TTY prompt).
+  let deploymentPreset = DEPLOYMENT_PRESETS[args.deployment] || DEPLOYMENT_PRESETS.personal;
+
   if (args.profile === 'custom' || (replyFileContents && replyFileContents.profile === 'custom')) {
     config = buildCustomConfig(replyFileContents || {});
   } else if (args.profile && PROFILES[args.profile]) {
     config = { profile: args.profile, ...PROFILES[args.profile] };
   } else if (nonInteractive) {
     // Non-TTY: silently apply recommended (benchmark-driven) profile.
+    // Deployment defaults to personal (no change to existing non-TTY behaviour).
     config = { profile: recommended, ...PROFILES[recommended] };
   } else {
     // Interactive TTY flow.
@@ -641,11 +687,24 @@ async function main() {
     });
     try {
       config = await runInteractiveFlow(rl, recommended);
+      // v3.8.0: deployment question (only in TTY if no --deployment flag given)
+      if (!args.deployment) {
+        deploymentPreset = await promptDeploymentMode(rl);
+      }
+      // v3.8.0: IDE multi-select (TTY only)
+      const selectedIdes = await promptIdeMultiselect(rl);
+      if (selectedIdes.length > 0) {
+        // Deferred — don't close rl yet so output lands before close message.
+        config._pendingIdes = selectedIdes;
+      }
     } finally {
       rl.close();
     }
   }
 
+  // Attach deployment to config object so renderConfigToml can serialise it.
+  config.deployment = deploymentPreset;
+
   // Dry-run: report only, no write.
   if (args.dryRun) {
     console.log('SLM dry-run: would write profile=' + config.profile +
@@ -692,12 +751,17 @@ async function main() {
       fs.closeSync(fd);
     }
     fs.renameSync(tmpPath, cfgPath);
-    console.log('SLM: wrote config.toml for profile=' + config.profile);
+    console.log('SLM: wrote config.toml for profile=' + config.profile +
+      (config.deployment && config.deployment.mode !== 'personal'
+        ? ' deployment=' + config.deployment.mode
+        : ''));
   } catch (e) {
     console.error('SLM: failed to write config.toml: ' + e.message);
     return 4;
   }
 
+  // v3.8.0: Execute IDE connections after config write so state is consistent.
+  if (config._pendingIdes) executeIdeConnections(config._pendingIdes, slmDir);
 
   // UX-G2: show the one-screen delta banner so upgraders see what shipped.
   printLivingBrainDelta();
@@ -736,4 +800,12 @@ module.exports = {
   PROFILES,
   CUSTOM_KNOB_ENUMS, // UX-M3
   printLivingBrainDelta, // UX-G2 (exposed for the test harness only)
+  // v3.8.0 — deployment
+  DEPLOYMENT_PRESETS,
+  DEFAULT_DEPLOYMENT_MODE,
+  renderDeploymentBlock,
+  // v3.8.0 — IDE multi-select
+  IDE_IDS,
+  IDE_DISPLAY,
+  executeIdeConnections,
 };

package/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "3.7.8"
+__version__ = "3.8.1"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/access/__init__.py

@@ -0,0 +1,3 @@
+# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
+# Licensed under AGPL-3.0-or-later - see LICENSE file
+"""SLM access control (RBAC) package."""