superlocalmemory 3.8.10 → 3.8.12

package/CHANGELOG.md

@@ -5,6 +5,97 @@ All notable changes to SuperLocalMemory V3 will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.8.12] - 2026-08-03 — Canonical learning signals, clock-independent daemon identity, remote reranker
+
+### Fixed
+- Explicit feedback now reaches the store every consumer actually reads.
+  Three tables carry a "feedback" name: `feedback_records` (memory.db, read by
+  nothing), `learning_feedback` (the pre-v3.4.22 legacy table that
+  `legacy_migration` copies forward), and `learning_signals` +
+  `learning_features` (canonical — read by the dashboard Living Brain panel,
+  the ranker-phase card, and the LightGBM retrainer). The 3.8.11 fix wrote to
+  the legacy table, so it moved a counter nothing consumes. `record_explicit`
+  now writes the legacy row and the canonical signal/feature pair in one
+  transaction, flagged `is_synthetic=1` so the LightGBM trainer's
+  `WHERE is_synthetic=0` filter excludes them from training. (#106)
+- The recall phase gate and the dashboard no longer read different tables.
+  The gate counted `learning_feedback` while every user-visible surface counted
+  `learning_signals`, so the phase a user was shown and the phase that actually
+  ranked their results could disagree without limit. Both now resolve from the
+  canonical store, with thresholds imported from `learning.ranker` rather than
+  duplicated as literals — duplicated literals are how the two surfaces drifted
+  apart in the first place. (#106)
+- `report_feedback` no longer reports success for a write that did not happen.
+  It fell back to the `feedback_records` count when the canonical read failed,
+  and that table increments on every call regardless, so total write failure was
+  indistinguishable from success. The cross-store fallback is removed; a failed
+  durable write returns `success: false` with `durable: false`. (#106)
+- The CLI no longer disowns a healthy daemon after a few minutes on WSL2.
+  psutil derives `create_time` as boot time plus start ticks and re-reads
+  `/proc/stat` `btime` on every call; WSL2 resyncs its VM clock mid-session, so
+  `btime` moves and every process's computed creation time moves with it,
+  retroactively. The recorded value stopped matching the same live PID while
+  `/health` still answered in milliseconds. Ownership now compares a
+  clock-independent process token — `boot_id` plus raw start ticks on
+  Linux/WSL2, psutil's monotonic creation time elsewhere — as exact equality,
+  with no tolerance constant left to silently expire. PID-reuse protection is
+  strengthened: a creation-time mismatch no longer condemns a process outright,
+  it falls through to cryptographic identity proof over loopback. (#104)
+- `DAEMON_UNAVAILABLE` now names one of eight specific reasons with an
+  actionable hint instead of "owned daemon is unavailable; retry later". (#104)
+- `slm setup` no longer wipes the `retrieval` config block on every re-run.
+
+### Added
+- Remote and custom reranker endpoints, mirroring the remote embedding support
+  added in v3.4.24. Setting `cross_encoder_backend` to `openai` (or `remote`)
+  with a `cross_encoder_endpoint` routes reranking to an OpenAI-compatible
+  `/v1/rerank` service instead of the local subprocess worker. The built-in
+  cross-encoder is English-only, silently degrading recall for non-English
+  users; this lets them bring a multilingual model. Failure degrades to fusion
+  order with `applied=False` and an error log — never a silent fall back to the
+  local English model, which would recreate the very problem this solves. The
+  new outbound HTTP surface enforces an http/https allow-list, rejects 3xx and
+  does not follow redirects, refuses credentials embedded in the URL, and
+  bounds response reads at 8 MB. (#105)
+- `cross_encoder_endpoint` is now a real config field. It was previously
+  accepted and silently ignored — the remaining half of #103.
+
+## [3.8.11] - 2026-08-02 — Learning-signal integrity and honest reranker diagnostics
+
+### Fixed
+- Explicit feedback reported through `report_feedback` now writes to the
+  canonical learning store (`learning.db`), which every learning consumer
+  reads: the adaptive-ranking phase gate, `pattern_miner`, and the dashboard
+  Living Brain. Previously it wrote only to a table nothing else read, so
+  feedback returned success and a rising counter while the ranker never
+  advanced past Phase 1 (#102).
+- `learning_feedback` now has the `channel` column `pattern_miner` has always
+  queried but no schema ever defined. Every fresh database raised
+  `no such column: channel` on the first mining pass — caught, logged at
+  debug, and silently disabled both channel-performance mining and the
+  co-retrieval mining that shared its error handler. Migration `M033`
+  backfills existing databases without touching existing rows (#102).
+- The cross-encoder reranker now reports the real reason a model load
+  failed instead of a generic timeout message, and no longer retries a
+  configuration error five times (~7.5 minutes) before giving up. An
+  unrecognized `cross_encoder_backend` value is now rejected by name;
+  SuperLocalMemory has no remote/OpenAI-compatible reranker backend, so a
+  `cross_encoder_endpoint` config key was previously accepted and silently
+  ignored (#103).
+- `slm recall` no longer crashes when a daemon response's
+  `retrieval_time_ms` or a result's `score` is present but `null` — the
+  keyword-fallback recall path now includes `retrieval_time_ms` in every
+  response, matching every other recall path's contract.
+- The MagicMock artifact guard (`.gitignore` and its CI test) now also
+  catches the directory-shaped leak (`MagicMock/mock/<id>/`) produced when
+  a mock-derived path reaches `mkdir()`, not just the file-shaped leak
+  (`<MagicMock id='...'>`) produced by `os.open()`.
+
+### Documentation
+- `docs/auto-memory.md` no longer references `slm patterns` / `slm useful`,
+  which do not exist in V3; documents the `report_feedback` MCP tool as the
+  supported path instead.
+
 ## [3.8.10] - 2026-07-29 — Reliable startup and MCP writes
 
 ### Fixed

package/README.md

@@ -5,15 +5,15 @@
   </picture>
 </p>
 
-<h1 align="center">SuperLocalMemory V3.8.10</h1>
+<h1 align="center">SuperLocalMemory V3.8.12</h1>
 <p align="center"><strong>Enterprise-grade, local-first memory for AI agents and teams.</strong><br/>
 <em>A persistent, auditable long-term brain for your agents that runs on your own infrastructure — with multi-workspace isolation, role-based access, and GDPR + EU AI Act governance controls built in.</em></p>
-<p align="center"><code>v3.8.10</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
+<p align="center"><code>v3.8.12</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
 Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</code> to your config &nbsp;·&nbsp; Skill: zero-config</p>
 <p align="center"><strong>3 public research preprints</strong> (arXiv + Zenodo archives) · <a href="https://arxiv.org/abs/2603.02240">arXiv:2603.02240</a> · <a href="https://arxiv.org/abs/2603.14588">arXiv:2603.14588</a> · <a href="https://arxiv.org/abs/2604.04514">arXiv:2604.04514</a></p>
 
 <p align="center">
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v3.8.10-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v3.8.10 — Current Release"/></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v3.8.12-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v3.8.12 — Current Release"/></a>
   <a href="https://arxiv.org/abs/2603.14588"><img src="https://img.shields.io/badge/arXiv-2603.14588-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="arXiv Paper"/></a>
   <a href="#three-surfaces-proxy--mcp-tools--skill"><img src="https://img.shields.io/badge/Proxy_|_MCP_|_Skill-22c55e?style=for-the-badge" alt="Three Surfaces: Proxy, MCP Tools, Skill"/></a>
   <a href="https://pypi.org/project/superlocalmemory/"><img src="https://img.shields.io/pypi/v/superlocalmemory?style=for-the-badge&logo=pypi&logoColor=white" alt="PyPI"/></a>
@@ -294,6 +294,10 @@ quality must be evaluated for the target client and workload; V3.8.0 publishes n
 
 **Multilingual models:** configure an OpenAI-compatible embedding endpoint such as Ollama, vLLM, LiteLLM, `bge-m3`, `multilingual-e5`, or `Qwen3-Embedding`. Language coverage and retrieval quality depend on the selected model and should be evaluated for the deployment corpus.
 
+<a id="remote-embedding-and-rerank-endpoints"></a>
+
+**Remote embedding + rerank endpoints.** The bundled reranker `cross-encoder/ms-marco-MiniLM-L-12-v2` is **English-only**, so a Chinese, Japanese, or Arabic corpus is scored by a model that cannot read it. Set `retrieval.cross_encoder_backend: "openai"` plus `retrieval.cross_encoder_endpoint` to route reranking to any Cohere-shaped `POST /v1/rerank` service — llama-server, text-embeddings-inference, Infinity — running a multilingual model such as `BAAI/bge-reranker-v2-m3` (v3.8.12, [#105](https://github.com/qualixar/superlocalmemory/issues/105); the same escape hatch embeddings got in v3.4.24, [#16](https://github.com/qualixar/superlocalmemory/issues/16)). No subprocess and no local model download. An unreachable, slow, or malformed endpoint logs an error and returns fusion-ranked results — SLM never silently substitutes the local English model. Keys, auth, and failure semantics: **[docs/configuration.md](docs/configuration.md#remote-embedding-and-rerank-endpoints)**.
+
 ### Cache + Compress
 
 <a id="three-surfaces-proxy--mcp-tools--skill"></a>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superlocalmemory",
-  "version": "3.8.10",
+  "version": "3.8.12",
   "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
   "keywords": [
     "ai-memory",

package/plugin/.claude-plugin/plugin.json

@@ -15,5 +15,5 @@
   "mcpServers": "./.mcp.json",
   "name": "superlocalmemory",
   "repository": "https://github.com/qualixar/superlocalmemory",
-  "version": "3.8.10"
+  "version": "3.8.12"
 }

package/plugin/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- BEGIN SuperLocalMemory v3.8.10 -->
+<!-- BEGIN SuperLocalMemory v3.8.12 -->
 
 ## SuperLocalMemory (SLM) — Agent Rules
 
@@ -39,6 +39,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
 ### Subagents
 slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR)
 
-<!-- END SuperLocalMemory v3.8.10 -->
+<!-- END SuperLocalMemory v3.8.12 -->
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-governance-advisor.md

@@ -77,4 +77,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall
 # What NOT to do
 Never session_init twice; never forget without dry-run preview; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-loop-runner.md

@@ -68,4 +68,4 @@ assessment. The gate is the authority.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-memory-advisor.md

@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/requirements.txt

@@ -1 +1 @@
-superlocalmemory==3.8.10
+superlocalmemory==3.8.12

package/plugin/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-governance/SKILL.md

@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-graph/SKILL.md

@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-loop/SKILL.md

@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-mesh/SKILL.md

@@ -279,4 +279,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-profile/SKILL.md

@@ -145,4 +145,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-recall/SKILL.md

@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-remember/SKILL.md

@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-scope/SKILL.md

@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-session/SKILL.md

@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/rules/AGENTS.md

@@ -128,4 +128,4 @@ When the SLM MCP server is unavailable, use these CLI equivalents:
 - **slm-optimize-advisor** — context compression and KV cache
 - **slm-governance-advisor** — scope/role compliance, retention policies, GDPR
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-graph/SKILL.md

@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-recall/SKILL.md

@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-remember/SKILL.md

@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-session/SKILL.md

@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v3.8.10 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "3.8.10"
+version = "3.8.12"
 description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
 license = "AGPL-3.0-or-later"

package/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "3.8.10"
+__version__ = "3.8.12"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/cli/commands.py

@@ -22,10 +22,21 @@ logger = logging.getLogger(__name__)
 
 
 def _daemon_unavailable(command: str, use_json: bool) -> None:
-    """Exit a mutation client without opening a process-local writer."""
+    """Exit a mutation client without opening a process-local writer.
+
+    The bare "owned daemon is unavailable" of earlier releases described a
+    stopped daemon, a recycled PID, an unreachable port and an identity
+    mismatch identically, which gave issue #104's reporter nothing to act on.
+    The diagnosis names the evidence and the next command to run.
+    """
+    from superlocalmemory.cli.daemon import describe_daemon_unavailability
+
+    diagnosis = describe_daemon_unavailability()
     error = {
         "code": "DAEMON_UNAVAILABLE",
-        "message": "Owned daemon is unavailable; retry later.",
+        "reason": diagnosis["reason"],
+        "message": f"Owned daemon is unavailable: {diagnosis['message']}",
+        "hint": diagnosis["hint"],
         "retryable": True,
     }
     if use_json:
@@ -34,7 +45,8 @@ def _daemon_unavailable(command: str, use_json: bool) -> None:
         json_print(command, error=error)
     else:
         print(
-            "DAEMON_UNAVAILABLE: owned daemon is unavailable; retry later.",
+            f"DAEMON_UNAVAILABLE ({diagnosis['reason']}): "
+            f"{diagnosis['message']} {diagnosis['hint']}",
             file=sys.stderr,
         )
     raise SystemExit(1)
@@ -1459,10 +1471,20 @@ def cmd_recall(args: Namespace) -> None:
                           if result.get("no_confident_match")
                           else "No matching memories found.")
                     return
-                # Text output
-                print(f"SpreadingActivation.search completed via daemon ({result.get('retrieval_time_ms', 0):.0f}ms)")
+                # Text output.
+                # PR #101: ``dict.get(k, 0)`` returns the DEFAULT only when the
+                # key is ABSENT — a present-but-null value still reaches the
+                # format spec and raises "unsupported format string passed to
+                # NoneType.__format__". ``or 0`` covers both. Same for score,
+                # which the keyword-fallback path returns as None.
+                elapsed_ms = result.get('retrieval_time_ms') or 0
+                print(
+                    "SpreadingActivation.search completed via daemon "
+                    f"({elapsed_ms:.0f}ms)"
+                )
                 for i, r in enumerate(result["results"], 1):
-                    print(f"  {i}. [{r['score']:.2f}] {r['content']}")
+                    score = r.get('score') or 0
+                    print(f"  {i}. [{score:.2f}] {r['content']}")
                 return
     except Exception as _exc:  # noqa: BLE001
         logger.warning(