superlocalmemory 3.8.12 → 3.8.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/CHANGELOG.md +46 -0
  2. package/README.md +3 -3
  3. package/package.json +1 -1
  4. package/plugin/.claude-plugin/plugin.json +1 -1
  5. package/plugin/CLAUDE.md +3 -3
  6. package/plugin/agents/slm-governance-advisor.md +1 -1
  7. package/plugin/agents/slm-loop-runner.md +1 -1
  8. package/plugin/agents/slm-memory-advisor.md +1 -1
  9. package/plugin/agents/slm-optimize-advisor.md +1 -1
  10. package/plugin/requirements.txt +1 -1
  11. package/plugin/skills/slm-cache/SKILL.md +1 -1
  12. package/plugin/skills/slm-compress/SKILL.md +1 -1
  13. package/plugin/skills/slm-governance/SKILL.md +1 -1
  14. package/plugin/skills/slm-graph/SKILL.md +1 -1
  15. package/plugin/skills/slm-loop/SKILL.md +1 -1
  16. package/plugin/skills/slm-mesh/SKILL.md +1 -1
  17. package/plugin/skills/slm-profile/SKILL.md +1 -1
  18. package/plugin/skills/slm-recall/SKILL.md +1 -1
  19. package/plugin/skills/slm-remember/SKILL.md +1 -1
  20. package/plugin/skills/slm-scope/SKILL.md +1 -1
  21. package/plugin/skills/slm-session/SKILL.md +1 -1
  22. package/plugin/skills/slm-status/SKILL.md +1 -1
  23. package/plugin-src/rules/AGENTS.md +1 -1
  24. package/plugin-src/skills/slm-cache/SKILL.md +1 -1
  25. package/plugin-src/skills/slm-compress/SKILL.md +1 -1
  26. package/plugin-src/skills/slm-graph/SKILL.md +1 -1
  27. package/plugin-src/skills/slm-recall/SKILL.md +1 -1
  28. package/plugin-src/skills/slm-remember/SKILL.md +1 -1
  29. package/plugin-src/skills/slm-session/SKILL.md +1 -1
  30. package/plugin-src/skills/slm-status/SKILL.md +1 -1
  31. package/pyproject.toml +1 -1
  32. package/src/superlocalmemory/__init__.py +1 -1
  33. package/src/superlocalmemory/cli/commands.py +47 -0
  34. package/src/superlocalmemory/core/engine_wiring.py +4 -4
  35. package/src/superlocalmemory/encoding/scene_builder.py +115 -13
  36. package/src/superlocalmemory/infra/version_integrity.py +229 -0
  37. package/src/superlocalmemory/server/unified_daemon.py +27 -0
  38. package/src/superlocalmemory/storage/migration_runner.py +7 -0
  39. package/src/superlocalmemory/storage/migrations/M034_scene_fact_members.py +127 -0
  40. package/src/superlocalmemory/storage/migrations/__init__.py +2 -0
  41. package/src/superlocalmemory/storage/schema.py +59 -0
package/CHANGELOG.md CHANGED
@@ -5,6 +5,52 @@ All notable changes to SuperLocalMemory V3 will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [3.8.14] - 2026-08-05 — Bounded scene assignment at mature scale
9
+
10
+ ### Fixed
11
+ - Scene assignment no longer expands and compares every historical scene for
12
+ every materialized fact. v3.8.13 crossed a severe CPU and latency cliff on
13
+ mature databases because both candidate selection and anchor-embedding
14
+ loading scaled with the full scene population.
15
+ - A forward-only M034 migration adds an indexed, trigger-maintained
16
+ `scene_fact_members` projection while retaining `fact_ids_json` for backward
17
+ compatibility. The existing fact-vector index now selects semantically near
18
+ scenes, with a bounded live-recency fallback when vector search is
19
+ unavailable. Profile isolation and deleted-fact handling remain enforced.
20
+ - On the 11,519-scene production-data repro used for this repair, the complete
21
+ scene-assignment path measured 214 ms median and 231 ms maximum across ten
22
+ post-warmup runs. The migrated copy passes SQLite `quick_check`.
23
+
24
+ ## [3.8.13] - 2026-08-03 — Stale-process detection
25
+
26
+ ### Fixed
27
+ - A running process can now tell when it is serving superseded code. Python
28
+ imports a module once, so `__version__` is frozen at process start and
29
+ upgrading the package underneath a long-lived `slm mcp` server changes
30
+ nothing for that server — it keeps serving the code it read at startup,
31
+ indefinitely. Nothing detected this. The stale process did not error; it
32
+ returned confident, plausible, wrong answers and reported a
33
+ `serverInfo.version` matching the code it had loaded, which is
34
+ self-consistent and therefore useless as a staleness signal. During the
35
+ 3.8.12 work one machine had eighteen `slm mcp` processes alive at once
36
+ spanning four days and two releases, and one of them made issue #106 look
37
+ unfixed across two debugging sessions. (#107)
38
+
39
+ The existing process reaper does not cover this: it kills *orphans*, whose
40
+ parent has died. A server whose IDE is still running is never an orphan.
41
+
42
+ Staleness is now reported by `slm doctor` (as a warning, with a restart
43
+ hint), on the loopback `/health` payload as `version_integrity`, and in the
44
+ `slm mcp` startup log. The MCP path logs to stderr only — that transport is
45
+ JSON-RPC over stdio, where a printed warning would corrupt the protocol and
46
+ turn a cosmetic problem into a dead session.
47
+
48
+ Running *ahead* of the installed distribution — normal for an editable
49
+ checkout — is deliberately reported separately and does not warn. A warning
50
+ that fires on every developer machine is one everybody learns to ignore, and
51
+ then it goes unread on the day it matters. Every failure path resolves to
52
+ `unknown` rather than to a false `current`.
53
+
8
54
  ## [3.8.12] - 2026-08-03 — Canonical learning signals, clock-independent daemon identity, remote reranker
9
55
 
10
56
  ### Fixed
package/README.md CHANGED
@@ -5,15 +5,15 @@
5
5
  </picture>
6
6
  </p>
7
7
 
8
- <h1 align="center">SuperLocalMemory V3.8.12</h1>
8
+ <h1 align="center">SuperLocalMemory V3.8.14</h1>
9
9
  <p align="center"><strong>Enterprise-grade, local-first memory for AI agents and teams.</strong><br/>
10
10
  <em>A persistent, auditable long-term brain for your agents that runs on your own infrastructure — with multi-workspace isolation, role-based access, and GDPR + EU AI Act governance controls built in.</em></p>
11
- <p align="center"><code>v3.8.12</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
11
+ <p align="center"><code>v3.8.14</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
12
12
  Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</code> to your config &nbsp;·&nbsp; Skill: zero-config</p>
13
13
  <p align="center"><strong>3 public research preprints</strong> (arXiv + Zenodo archives) · <a href="https://arxiv.org/abs/2603.02240">arXiv:2603.02240</a> · <a href="https://arxiv.org/abs/2603.14588">arXiv:2603.14588</a> · <a href="https://arxiv.org/abs/2604.04514">arXiv:2604.04514</a></p>
14
14
 
15
15
  <p align="center">
16
- <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v3.8.12-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v3.8.12 — Current Release"/></a>
16
+ <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v3.8.14-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v3.8.14 — Current Release"/></a>
17
17
  <a href="https://arxiv.org/abs/2603.14588"><img src="https://img.shields.io/badge/arXiv-2603.14588-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="arXiv Paper"/></a>
18
18
  <a href="#three-surfaces-proxy--mcp-tools--skill"><img src="https://img.shields.io/badge/Proxy_|_MCP_|_Skill-22c55e?style=for-the-badge" alt="Three Surfaces: Proxy, MCP Tools, Skill"/></a>
19
19
  <a href="https://pypi.org/project/superlocalmemory/"><img src="https://img.shields.io/pypi/v/superlocalmemory?style=for-the-badge&logo=pypi&logoColor=white" alt="PyPI"/></a>
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "superlocalmemory",
3
- "version": "3.8.12",
3
+ "version": "3.8.14",
4
4
  "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
5
5
  "keywords": [
6
6
  "ai-memory",
@@ -15,5 +15,5 @@
15
15
  "mcpServers": "./.mcp.json",
16
16
  "name": "superlocalmemory",
17
17
  "repository": "https://github.com/qualixar/superlocalmemory",
18
- "version": "3.8.12"
18
+ "version": "3.8.14"
19
19
  }
package/plugin/CLAUDE.md CHANGED
@@ -1,4 +1,4 @@
1
- <!-- BEGIN SuperLocalMemory v3.8.12 -->
1
+ <!-- BEGIN SuperLocalMemory v3.8.14 -->
2
2
 
3
3
  ## SuperLocalMemory (SLM) — Agent Rules
4
4
 
@@ -39,6 +39,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
39
39
  ### Subagents
40
40
  slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR)
41
41
 
42
- <!-- END SuperLocalMemory v3.8.12 -->
42
+ <!-- END SuperLocalMemory v3.8.14 -->
43
43
 
44
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
44
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -77,4 +77,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall
77
77
  # What NOT to do
78
78
  Never session_init twice; never forget without dry-run preview; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
79
79
 
80
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
80
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -68,4 +68,4 @@ assessment. The gate is the authority.
68
68
 
69
69
  ---
70
70
 
71
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
71
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
46
46
  # What NOT to do
47
47
  Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
48
48
 
49
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
49
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
41
41
  # What NOT to do
42
42
  Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
43
43
 
44
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
44
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -1 +1 @@
1
- superlocalmemory==3.8.12
1
+ superlocalmemory==3.8.14
@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
145
145
 
146
146
  ---
147
147
 
148
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
148
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
147
147
 
148
148
  ---
149
149
 
150
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
150
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
245
245
 
246
246
  ---
247
247
 
248
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
248
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
311
311
 
312
312
  ---
313
313
 
314
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
314
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
96
96
 
97
97
  ---
98
98
 
99
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
99
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -279,4 +279,4 @@ mesh availability.
279
279
 
280
280
  ---
281
281
 
282
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
282
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -145,4 +145,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
145
145
 
146
146
  ---
147
147
 
148
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
148
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
236
236
 
237
237
  ---
238
238
 
239
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
239
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
238
238
 
239
239
  ---
240
240
 
241
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
241
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
173
173
 
174
174
  ---
175
175
 
176
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
176
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
227
227
 
228
228
  ---
229
229
 
230
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
230
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
163
163
 
164
164
  ---
165
165
 
166
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
166
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -128,4 +128,4 @@ When the SLM MCP server is unavailable, use these CLI equivalents:
128
128
  - **slm-optimize-advisor** — context compression and KV cache
129
129
  - **slm-governance-advisor** — scope/role compliance, retention policies, GDPR
130
130
 
131
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
131
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
145
145
 
146
146
  ---
147
147
 
148
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
148
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
147
147
 
148
148
  ---
149
149
 
150
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
150
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
311
311
 
312
312
  ---
313
313
 
314
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
314
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
236
236
 
237
237
  ---
238
238
 
239
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
239
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
238
238
 
239
239
  ---
240
240
 
241
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
241
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
227
227
 
228
228
  ---
229
229
 
230
- *SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later*
230
+ *SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later*
@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
163
163
 
164
164
  ---
165
165
 
166
- SuperLocalMemory v3.8.12 · Qualixar · AGPL-3.0-or-later
166
+ SuperLocalMemory v3.8.14 · Qualixar · AGPL-3.0-or-later
package/pyproject.toml CHANGED
@@ -1,6 +1,6 @@
1
1
  [project]
2
2
  name = "superlocalmemory"
3
- version = "3.8.12"
3
+ version = "3.8.14"
4
4
  description = "Local-first agent memory with auditable hybrid retrieval"
5
5
  readme = "README.md"
6
6
  license = "AGPL-3.0-or-later"
@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
32
32
  os.environ["OMP_NUM_THREADS"] = "2"
33
33
  # ---------------------------------------------------------------------------
34
34
 
35
- __version__ = "3.8.12"
35
+ __version__ = "3.8.14"
36
36
 
37
37
  _REQUIRED_VERSIONS = {
38
38
  "sentence_transformers": "5.3.0",
@@ -2294,6 +2294,28 @@ def cmd_doctor(args: Namespace) -> None:
2294
2294
  _check("Python", "FAIL", f"{v.major}.{v.minor}.{v.micro} (need >= 3.11)",
2295
2295
  "Install Python 3.11+ from https://python.org/downloads/")
2296
2296
 
2297
+ # 1b. Version integrity (issue #107). Doctor is what a user runs when
2298
+ # something seems wrong, so it is exactly where "the code you are running
2299
+ # is not the code you installed" has to appear. Reported as WARN rather
2300
+ # than FAIL: the installation is sound, it is this *process* that is
2301
+ # behind, and `slm doctor` itself is short-lived so it is rarely the
2302
+ # stale one -- it is reporting on behalf of the long-lived servers.
2303
+ try:
2304
+ from superlocalmemory.infra.version_integrity import check_version_integrity
2305
+
2306
+ _vi = check_version_integrity()
2307
+ if _vi.is_stale:
2308
+ _check("Version integrity", "WARN", _vi.detail, _vi.hint)
2309
+ elif _vi.state == "mismatch":
2310
+ _check("Version integrity", "WARN", _vi.detail, _vi.hint)
2311
+ elif _vi.state == "unknown":
2312
+ _check("Version integrity", "WARN", _vi.detail,
2313
+ "Reinstall so distribution metadata is readable.")
2314
+ else:
2315
+ _check("Version integrity", "PASS", _vi.detail)
2316
+ except Exception as _vi_exc: # noqa: BLE001 - never break doctor
2317
+ _check("Version integrity", "WARN", f"could not verify: {_vi_exc}")
2318
+
2297
2319
  # 2. Core deps
2298
2320
  core_modules = {
2299
2321
  "numpy": "numpy", "scipy": "scipy", "networkx": "networkx",
@@ -2808,6 +2830,31 @@ def cmd_mcp(_args: Namespace) -> None:
2808
2830
  except Exception:
2809
2831
  pass # Never block MCP startup on cleanup failure
2810
2832
 
2833
+ # Version integrity (issue #107). The reaper above only kills *orphans* —
2834
+ # servers whose parent died. A server whose IDE is still alive is never an
2835
+ # orphan, so it survives upgrades indefinitely and keeps serving the code
2836
+ # it imported at startup. That is how eighteen `slm mcp` processes spanning
2837
+ # four days and two releases stayed alive on one machine, and how a stale
2838
+ # one made issue #106 look unfixed across two debugging sessions.
2839
+ #
2840
+ # This runs at startup, so a server launched *after* an upgrade is correct
2841
+ # by construction and stays silent. It fires for a server that started
2842
+ # before its own package was upgraded — which is possible when the client
2843
+ # respawns it from an old cached path.
2844
+ #
2845
+ # CRITICAL: logging only, never stdout — MCP speaks JSON-RPC over stdio and
2846
+ # any print corrupts the protocol. The logger writes to stderr.
2847
+ try:
2848
+ from superlocalmemory.infra.version_integrity import check_version_integrity
2849
+
2850
+ _vi = check_version_integrity()
2851
+ if _vi.is_stale:
2852
+ logger.warning("MCP server version drift: %s. %s", _vi.detail, _vi.hint)
2853
+ elif _vi.differs:
2854
+ logger.info("MCP server version note: %s", _vi.detail)
2855
+ except Exception:
2856
+ pass # A diagnostic must never prevent the server from starting.
2857
+
2811
2858
  # Auto-install hooks on MCP startup (fast path: ~0.1ms if already current)
2812
2859
  # CRITICAL: No stdout — MCP uses stdio transport, any print corrupts protocol
2813
2860
  try:
@@ -264,7 +264,10 @@ def init_encoding(
264
264
  db, embedder, llm, config.encoding,
265
265
  )
266
266
  observation_builder = ObservationBuilder(db)
267
- scene_builder = SceneBuilder(db, embedder)
267
+ # V3.2: VectorStore (Phase 1) -- sqlite-vec KNN. Scene assignment also
268
+ # consumes it, so initialize it before the encoding component is wired.
269
+ vector_store = _init_vector_store(config)
270
+ scene_builder = SceneBuilder(db, embedder, vector_store=vector_store)
268
271
  entropy_gate = EntropyGate(
269
272
  embedder, config.encoding.entropy_threshold,
270
273
  )
@@ -276,9 +279,6 @@ def init_encoding(
276
279
  db, config.math.sheaf_contradiction_threshold,
277
280
  )
278
281
 
279
- # V3.2: VectorStore (Phase 1) -- sqlite-vec KNN
280
- vector_store = _init_vector_store(config)
281
-
282
282
  # V3.2: AccessLog (Phase 1) -- fact access tracking
283
283
  access_log = _init_access_log(db)
284
284
 
@@ -24,6 +24,7 @@ logger = logging.getLogger(__name__)
24
24
 
25
25
  # Similarity threshold for assigning fact to existing scene
26
26
  _ASSIGN_THRESHOLD = 0.6
27
+ _MAX_ASSIGNMENT_CANDIDATES = 256
27
28
 
28
29
 
29
30
  class SceneBuilder:
@@ -35,9 +36,10 @@ class SceneBuilder:
35
36
  3. If below threshold: create new scene
36
37
  """
37
38
 
38
- def __init__(self, db, embedder=None) -> None:
39
+ def __init__(self, db, embedder=None, vector_store=None) -> None:
39
40
  self._db = db
40
41
  self._embedder = embedder
42
+ self._vector_store = vector_store
41
43
  # Key by scene ID, never theme. Themes are deliberately non-unique,
42
44
  # while eligibility and durable anchor membership are scene-specific.
43
45
  self._scene_embeddings_cache: dict[str, list[float]] = {}
@@ -71,11 +73,14 @@ class SceneBuilder:
71
73
  if fact_emb is None:
72
74
  return self._create_scene(new_fact, profile_id)
73
75
 
74
- scenes = self._get_scenes(profile_id)
76
+ scenes = self._get_assignment_scenes(profile_id, fact_emb)
75
77
  if not scenes:
76
78
  return self._create_scene(new_fact, profile_id)
77
79
 
78
- live_scene_embeddings = self._load_live_scene_embeddings(profile_id)
80
+ live_scene_embeddings = self._load_live_scene_embeddings(
81
+ profile_id,
82
+ tuple(scene.scene_id for scene in scenes),
83
+ )
79
84
  live_scene_ids = set(live_scene_embeddings)
80
85
  self._scene_embeddings_cache.update({
81
86
  scene_id: embedding
@@ -209,41 +214,138 @@ class SceneBuilder:
209
214
  )
210
215
  return [self._row_to_scene(dict(r)) for r in rows]
211
216
 
217
+ def _get_assignment_scenes(
218
+ self,
219
+ profile_id: str,
220
+ fact_embedding: list[float],
221
+ ) -> list[MemoryScene]:
222
+ """Load bounded semantic candidates with a recency fallback.
223
+
224
+ Mature stores must not compare every new fact with every historical
225
+ scene. The fact vector index finds nearby members in bounded time; the
226
+ normalized membership projection maps them back to scenes. Recent
227
+ scenes remain a fail-soft fallback for fresh or unavailable indexes.
228
+ Semantic candidates are ordered first so an old relevant scene cannot
229
+ be displaced by the recency cap.
230
+ """
231
+ recent_rows = self._db.execute(
232
+ "SELECT ms.* FROM memory_scenes AS ms WHERE ms.profile_id = ? "
233
+ "AND EXISTS (SELECT 1 FROM scene_fact_members AS live_member "
234
+ "WHERE live_member.scene_id = ms.scene_id "
235
+ "AND live_member.profile_id = ms.profile_id) "
236
+ "ORDER BY ms.last_updated DESC LIMIT ?",
237
+ (profile_id, _MAX_ASSIGNMENT_CANDIDATES),
238
+ )
239
+ recent = [self._row_to_scene(dict(row)) for row in recent_rows]
240
+
241
+ nearest_fact_ids: list[str] = []
242
+ if self._vector_store is not None:
243
+ try:
244
+ nearest_fact_ids = [
245
+ fact_id
246
+ for fact_id, _score in self._vector_store.search(
247
+ fact_embedding,
248
+ top_k=_MAX_ASSIGNMENT_CANDIDATES,
249
+ profile_id=profile_id,
250
+ )
251
+ ]
252
+ except Exception:
253
+ nearest_fact_ids = []
254
+
255
+ semantic: list[MemoryScene] = []
256
+ if nearest_fact_ids:
257
+ placeholders = ",".join("?" for _ in nearest_fact_ids)
258
+ try:
259
+ semantic_rows = self._db.execute(
260
+ f"""
261
+ SELECT ms.*, member.fact_id AS matched_fact_id
262
+ FROM scene_fact_members AS member
263
+ JOIN memory_scenes AS ms
264
+ ON ms.scene_id = member.scene_id
265
+ AND ms.profile_id = member.profile_id
266
+ WHERE member.profile_id = ?
267
+ AND member.fact_id IN ({placeholders})
268
+ """,
269
+ (profile_id, *nearest_fact_ids),
270
+ )
271
+ hit_rank = {
272
+ fact_id: rank
273
+ for rank, fact_id in enumerate(nearest_fact_ids)
274
+ }
275
+ ranked_scenes: dict[str, tuple[int, MemoryScene]] = {}
276
+ for row in semantic_rows:
277
+ data = dict(row)
278
+ rank = hit_rank.get(
279
+ str(data.pop("matched_fact_id", "")),
280
+ len(hit_rank),
281
+ )
282
+ scene = self._row_to_scene(data)
283
+ previous = ranked_scenes.get(scene.scene_id)
284
+ if previous is None or rank < previous[0]:
285
+ ranked_scenes[scene.scene_id] = (rank, scene)
286
+ semantic = [
287
+ scene
288
+ for _rank, scene in sorted(
289
+ ranked_scenes.values(), key=lambda item: item[0]
290
+ )
291
+ ]
292
+ except Exception:
293
+ # Migration failure or a disabled vector projection must not
294
+ # make remember fail. The bounded recent set remains valid.
295
+ semantic = []
296
+
297
+ candidates: list[MemoryScene] = []
298
+ seen: set[str] = set()
299
+ for scene in (*semantic, *recent):
300
+ if scene.scene_id in seen:
301
+ continue
302
+ seen.add(scene.scene_id)
303
+ candidates.append(scene)
304
+ if len(candidates) >= _MAX_ASSIGNMENT_CANDIDATES:
305
+ break
306
+ return candidates
307
+
212
308
  def _load_live_scene_embeddings(
213
309
  self,
214
310
  profile_id: str,
311
+ scene_ids: tuple[str, ...],
215
312
  ) -> dict[str, list[float] | None]:
216
313
  """Load one durable anchor embedding for every live scene.
217
314
 
218
- ``json_each`` resolves the first still-existing fact in each scene, so
219
- scenes whose original anchor was consolidated away can still reuse a
220
- surviving member. The result also identifies fully stale scene rows,
221
- which are ignored by assignment instead of being re-embedded.
315
+ The normalized membership projection resolves the first still-existing
316
+ fact in each scene without expanding every scene's JSON array. Scenes
317
+ whose original anchor was consolidated away can still reuse a surviving
318
+ member. Fully stale scene rows are ignored instead of being re-embedded.
222
319
  """
320
+ if not scene_ids:
321
+ return {}
322
+ placeholders = ",".join("?" for _ in scene_ids)
223
323
  try:
224
324
  rows = self._db.execute(
225
- """
325
+ f"""
226
326
  WITH live_scene_facts AS (
227
327
  SELECT
228
328
  ms.scene_id,
229
- ms.theme,
230
329
  af.embedding,
231
330
  ROW_NUMBER() OVER (
232
331
  PARTITION BY ms.scene_id
233
- ORDER BY CAST(member.key AS INTEGER)
332
+ ORDER BY member.position
234
333
  ) AS member_rank
235
334
  FROM memory_scenes AS ms
236
- JOIN json_each(ms.fact_ids_json) AS member
335
+ JOIN scene_fact_members AS member
336
+ ON member.scene_id = ms.scene_id
337
+ AND member.profile_id = ms.profile_id
237
338
  JOIN atomic_facts AS af
238
- ON af.fact_id = member.value
339
+ ON af.fact_id = member.fact_id
239
340
  AND af.profile_id = ms.profile_id
240
341
  WHERE ms.profile_id = ?
342
+ AND ms.scene_id IN ({placeholders})
241
343
  )
242
344
  SELECT scene_id, embedding
243
345
  FROM live_scene_facts
244
346
  WHERE member_rank = 1
245
347
  """,
246
- (profile_id,),
348
+ (profile_id, *scene_ids),
247
349
  )
248
350
  except Exception:
249
351
  return {}
@@ -0,0 +1,229 @@
1
+ # Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
2
+ # Licensed under AGPL-3.0-or-later - see LICENSE file
3
+ # Part of SuperLocalMemory V3 | https://qualixar.com | https://varunpratap.com
4
+
5
+ """Does this process still match what is installed on disk? (issue #107)
6
+
7
+ Why this module exists
8
+ ----------------------
9
+ Python imports a module once. ``superlocalmemory.__version__`` is therefore
10
+ frozen at the instant a process started, and upgrading the package underneath a
11
+ long-lived ``slm mcp`` server changes nothing for that server -- it keeps
12
+ serving the code it read at startup, forever.
13
+
14
+ Nothing detected that. The stale process did not error; it returned confident,
15
+ plausible, *wrong* answers, and reported a ``serverInfo.version`` matching the
16
+ code it had loaded, which is self-consistent and therefore useless as a
17
+ staleness signal. During the v3.8.12 work this machine had eighteen ``slm mcp``
18
+ processes alive at once, spanning four days and two releases. One of them made
19
+ issue #106 look unfixed across two debugging sessions and contributed to v3.8.11
20
+ shipping a wrong fix, because the "evidence" that the fix had failed was really
21
+ a four-day-old process.
22
+
23
+ The asymmetry that makes this dangerous
24
+ ---------------------------------------
25
+ A *loud* failure costs a user one confused minute. A *silent* one costs
26
+ whoever debugs it their entire session, because it actively argues that correct
27
+ code is broken. Everything here is therefore built so that no failure mode can
28
+ produce a false :data:`STATE_CURRENT`. Unreadable metadata, a hostile reader,
29
+ a non-string return -- all resolve to :data:`STATE_UNKNOWN`, which reports
30
+ "I could not tell" rather than "all is well".
31
+
32
+ Why ``importlib.metadata`` is the right source
33
+ ----------------------------------------------
34
+ It reads the ``*.dist-info`` directory from disk on each call rather than
35
+ returning a value captured at import. Verified empirically: rewriting a
36
+ distribution's metadata underneath a live process and re-reading returns the
37
+ *new* version, with no ``importlib.invalidate_caches()`` needed. That is the
38
+ one property this whole module rests on, so it is pinned by a test.
39
+ """
40
+
41
+ from __future__ import annotations
42
+
43
+ from dataclasses import dataclass
44
+ from typing import Callable, Optional
45
+
46
+ from superlocalmemory import __version__
47
+
48
+ __all__ = (
49
+ "STATE_AHEAD",
50
+ "STATE_CURRENT",
51
+ "STATE_MISMATCH",
52
+ "STATE_STALE",
53
+ "STATE_UNKNOWN",
54
+ "VersionIntegrity",
55
+ "check_version_integrity",
56
+ "installed_distribution_version",
57
+ )
58
+
59
+ #: Imported code matches the installed distribution.
60
+ STATE_CURRENT = "current"
61
+ #: Imported code is *older* than what is installed -- the #107 failure.
62
+ STATE_STALE = "stale"
63
+ #: Imported code is *newer* than the installed distribution. Normal for an
64
+ #: editable checkout; deliberately not reported as a problem, because a warning
65
+ #: that fires on every maintainer's machine is a warning everyone learns to
66
+ #: ignore, and then it will not be read on the day it matters.
67
+ STATE_AHEAD = "ahead"
68
+ #: The two differ but cannot be ordered (local labels, unexpected formats).
69
+ #: Still surfaced -- a difference we cannot rank is not a difference we hide.
70
+ STATE_MISMATCH = "mismatch"
71
+ #: The installed version could not be determined at all.
72
+ STATE_UNKNOWN = "unknown"
73
+
74
+ _DISTRIBUTION_NAME = "superlocalmemory"
75
+
76
+ _RESTART_HINT = (
77
+ "Restart this process to load the installed code "
78
+ "(`slm restart` for the daemon; restart your MCP client for `slm mcp`)."
79
+ )
80
+
81
+
82
+ @dataclass(frozen=True)
83
+ class VersionIntegrity:
84
+ """The outcome of comparing imported code against the installed dist."""
85
+
86
+ running: str
87
+ installed: Optional[str]
88
+ state: str
89
+ detail: str
90
+ hint: str = ""
91
+
92
+ @property
93
+ def is_stale(self) -> bool:
94
+ """True only for the #107 failure: running behind what is installed.
95
+
96
+ Deliberately narrow. Callers gate warnings on this, and widening it to
97
+ mean "anything unusual" would make an editable checkout look broken.
98
+ """
99
+ return self.state == STATE_STALE
100
+
101
+ @property
102
+ def differs(self) -> bool:
103
+ """True whenever imported and installed are known to be different."""
104
+ return self.state in (STATE_STALE, STATE_AHEAD, STATE_MISMATCH)
105
+
106
+ def as_dict(self) -> dict:
107
+ """JSON-safe payload for ``/health``, ``slm status --json``, doctor."""
108
+ return {
109
+ "running": self.running,
110
+ "installed": self.installed,
111
+ "state": self.state,
112
+ "detail": self.detail,
113
+ "hint": self.hint,
114
+ "is_stale": self.is_stale,
115
+ }
116
+
117
+
118
+ def installed_distribution_version() -> str:
119
+ """Return the on-disk version of the installed distribution.
120
+
121
+ Raises whatever ``importlib.metadata`` raises; :func:`check_version_integrity`
122
+ is the layer that turns failure into :data:`STATE_UNKNOWN`. Keeping the
123
+ raise here means a caller that genuinely wants the error can have it.
124
+ """
125
+ from importlib.metadata import version as _version
126
+
127
+ return _version(_DISTRIBUTION_NAME)
128
+
129
+
130
+ def _version_tuple(raw: str) -> Optional[tuple[int, ...]]:
131
+ """Parse a plain dotted release into ints, or ``None`` if it is not one.
132
+
133
+ Intentionally strict and dependency-free: anything carrying a local label,
134
+ pre-release marker, or non-numeric field returns ``None`` and is reported as
135
+ :data:`STATE_MISMATCH`. Guessing an order for such versions could mask a
136
+ real drift behind a confident-looking "current".
137
+ """
138
+ parts = raw.strip().split(".")
139
+ if not parts or any(not p.isdigit() for p in parts):
140
+ return None
141
+ return tuple(int(p) for p in parts)
142
+
143
+
144
+ def check_version_integrity(
145
+ *,
146
+ running: Optional[str] = None,
147
+ installed_reader: Optional[Callable[[], str]] = None,
148
+ ) -> VersionIntegrity:
149
+ """Compare imported code against the installed distribution.
150
+
151
+ Never raises. Both sides are injectable so tests can drive every branch
152
+ without touching the real environment.
153
+
154
+ Args:
155
+ running: Version of the *imported* code. Defaults to
156
+ ``superlocalmemory.__version__``, which is frozen at import.
157
+ installed_reader: Callable returning the on-disk version. Defaults to
158
+ reading the installed distribution metadata.
159
+ """
160
+ running_version = running if running is not None else __version__
161
+
162
+ reader = installed_reader or installed_distribution_version
163
+ installed: Optional[str] = None
164
+ try:
165
+ candidate = reader()
166
+ except BaseException: # noqa: BLE001 - staleness reporting must never raise
167
+ # BaseException, not Exception: this runs on daemon and MCP startup
168
+ # paths, and a diagnostic must never be the reason a process dies.
169
+ candidate = None
170
+
171
+ if isinstance(candidate, str) and candidate.strip():
172
+ installed = candidate.strip()
173
+
174
+ if installed is None:
175
+ return VersionIntegrity(
176
+ running=running_version,
177
+ installed=None,
178
+ state=STATE_UNKNOWN,
179
+ detail=(
180
+ f"running {running_version}; could not read the installed "
181
+ f"distribution version, so staleness is undetermined"
182
+ ),
183
+ )
184
+
185
+ if running_version == installed:
186
+ return VersionIntegrity(
187
+ running=running_version,
188
+ installed=installed,
189
+ state=STATE_CURRENT,
190
+ detail=f"running {running_version}, matching the installed distribution",
191
+ )
192
+
193
+ running_parts = _version_tuple(running_version)
194
+ installed_parts = _version_tuple(installed)
195
+
196
+ if running_parts is None or installed_parts is None:
197
+ return VersionIntegrity(
198
+ running=running_version,
199
+ installed=installed,
200
+ state=STATE_MISMATCH,
201
+ detail=(
202
+ f"running {running_version} but {installed} is installed; "
203
+ f"the two cannot be ordered"
204
+ ),
205
+ hint=_RESTART_HINT,
206
+ )
207
+
208
+ if running_parts < installed_parts:
209
+ return VersionIntegrity(
210
+ running=running_version,
211
+ installed=installed,
212
+ state=STATE_STALE,
213
+ detail=(
214
+ f"running {running_version} but {installed} is installed — this "
215
+ f"process loaded its code before the upgrade and will keep "
216
+ f"serving {running_version} until it restarts"
217
+ ),
218
+ hint=_RESTART_HINT,
219
+ )
220
+
221
+ return VersionIntegrity(
222
+ running=running_version,
223
+ installed=installed,
224
+ state=STATE_AHEAD,
225
+ detail=(
226
+ f"running {running_version}, ahead of the installed {installed} "
227
+ f"(normal for an editable or source checkout)"
228
+ ),
229
+ )
@@ -3272,6 +3272,12 @@ def _register_daemon_routes(application: FastAPI) -> None:
3272
3272
  "runtime_state": runtime_state,
3273
3273
  "active_profile": profile_snapshot.profile_id,
3274
3274
  "profile_generation": profile_snapshot.generation,
3275
+ # issue #107: does this daemon's *imported* code still match the
3276
+ # installed distribution? ``version`` above reports what this
3277
+ # process loaded, which is self-consistent and therefore cannot
3278
+ # reveal staleness on its own. Loopback-only, alongside the other
3279
+ # operational metadata.
3280
+ "version_integrity": _version_integrity_payload(),
3275
3281
  }
3276
3282
 
3277
3283
  @application.get("/recall")
@@ -4016,6 +4022,27 @@ class _PendingProfileMismatchError(RuntimeError):
4016
4022
  """A legacy pending row no longer matches the admitted profile lease."""
4017
4023
 
4018
4024
 
4025
+ def _version_integrity_payload() -> dict:
4026
+ """Report whether this daemon's imported code matches what is installed.
4027
+
4028
+ Issue #107. ``/health``'s ``version`` field reports the version this
4029
+ process loaded at import, so a stale daemon reports its *own* stale version
4030
+ perfectly happily -- self-consistent and useless as a staleness signal.
4031
+ This compares that against the distribution metadata on disk.
4032
+
4033
+ Fail-open by construction: any error degrades to a ``state`` of
4034
+ ``"unknown"`` rather than raising, because ``/health`` is what clients poll
4035
+ to decide whether the daemon is usable and must not start returning 500s
4036
+ over a diagnostic.
4037
+ """
4038
+ try:
4039
+ from superlocalmemory.infra.version_integrity import check_version_integrity
4040
+
4041
+ return check_version_integrity().as_dict()
4042
+ except Exception as exc: # noqa: BLE001 - health must never fail on this
4043
+ return {"state": "unknown", "detail": f"version check failed: {exc}"}
4044
+
4045
+
4019
4046
  def _materializer_actor_id() -> str:
4020
4047
  """Return the process-owned actor identity used by background writes."""
4021
4048
  descriptor = _ACTIVE_DAEMON_DESCRIPTOR
@@ -131,6 +131,9 @@ from superlocalmemory.storage.migrations import (
131
131
  from superlocalmemory.storage.migrations import (
132
132
  M033_learning_feedback_channel as _M033,
133
133
  )
134
+ from superlocalmemory.storage.migrations import (
135
+ M034_scene_fact_members as _M034,
136
+ )
134
137
 
135
138
  # Map migration name → module (used for the optional ``verify(conn)`` hook
136
139
  # that lets the runner detect "already applied" state when an idempotent
@@ -168,6 +171,7 @@ _MODULES = {
168
171
  _M031.NAME: _M031,
169
172
  _M032.NAME: _M032,
170
173
  _M033.NAME: _M033,
174
+ _M034.NAME: _M034,
171
175
  }
172
176
 
173
177
  logger = logging.getLogger(__name__)
@@ -305,6 +309,9 @@ DEFERRED_MIGRATIONS: list[Migration] = [
305
309
  Migration(name=_M029.NAME, db_target="memory", ddl=_M029.DDL),
306
310
  # M030 bounds Entity Explorer pagination and profile-summary ranking.
307
311
  Migration(name=_M030.NAME, db_target="memory", ddl=_M030.DDL),
312
+ # M034 normalizes memory_scenes.fact_ids_json after engine initialization
313
+ # has created memory_scenes and atomic_facts.
314
+ Migration(name=_M034.NAME, db_target="memory", ddl=_M034.DDL),
308
315
  ]
309
316
 
310
317
 
@@ -0,0 +1,127 @@
1
+ # Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
2
+ # Licensed under AGPL-3.0-or-later
3
+
4
+ """M034 — normalized scene/fact membership for bounded assignment.
5
+
6
+ ``memory_scenes.fact_ids_json`` remains the public compatibility format. This
7
+ additive projection provides the indexed reverse lookup needed to map nearest
8
+ fact-vector hits back to candidate scenes without scanning every scene for
9
+ every ingested fact. Triggers keep all existing scene write paths synchronized.
10
+ """
11
+
12
+ from __future__ import annotations
13
+
14
+ import sqlite3
15
+
16
+ NAME = "M034_scene_fact_members"
17
+ DB_TARGET = "memory"
18
+
19
+ DDL = """
20
+ BEGIN IMMEDIATE;
21
+
22
+ -- Keep the deferred migration independently safe for partial/legacy installs.
23
+ -- On normal daemon startup MemoryEngine has already created this table.
24
+ CREATE TABLE IF NOT EXISTS memory_scenes (
25
+ scene_id TEXT PRIMARY KEY,
26
+ profile_id TEXT NOT NULL DEFAULT 'default',
27
+ theme TEXT NOT NULL DEFAULT '',
28
+ fact_ids_json TEXT NOT NULL DEFAULT '[]',
29
+ entity_ids_json TEXT NOT NULL DEFAULT '[]',
30
+ created_at TEXT NOT NULL DEFAULT (datetime('now')),
31
+ last_updated TEXT NOT NULL DEFAULT (datetime('now')),
32
+ FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
33
+ );
34
+ CREATE INDEX IF NOT EXISTS idx_scenes_profile ON memory_scenes(profile_id);
35
+
36
+ CREATE TABLE IF NOT EXISTS scene_fact_members (
37
+ profile_id TEXT NOT NULL,
38
+ scene_id TEXT NOT NULL,
39
+ fact_id TEXT NOT NULL,
40
+ position INTEGER NOT NULL DEFAULT 0,
41
+ PRIMARY KEY (scene_id, fact_id),
42
+ FOREIGN KEY (scene_id) REFERENCES memory_scenes(scene_id) ON DELETE CASCADE,
43
+ FOREIGN KEY (fact_id) REFERENCES atomic_facts(fact_id) ON DELETE CASCADE,
44
+ FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
45
+ );
46
+
47
+ CREATE INDEX IF NOT EXISTS idx_scene_fact_members_lookup
48
+ ON scene_fact_members (profile_id, fact_id, scene_id);
49
+ CREATE INDEX IF NOT EXISTS idx_scene_fact_members_order
50
+ ON scene_fact_members (scene_id, position);
51
+
52
+ CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_insert
53
+ AFTER INSERT ON memory_scenes
54
+ BEGIN
55
+ DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
56
+ INSERT OR IGNORE INTO scene_fact_members
57
+ (profile_id, scene_id, fact_id, position)
58
+ SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
59
+ FROM json_each(
60
+ CASE WHEN json_valid(NEW.fact_ids_json)
61
+ THEN NEW.fact_ids_json ELSE '[]' END
62
+ ) AS member
63
+ JOIN atomic_facts AS af
64
+ ON af.fact_id = member.value
65
+ AND af.profile_id = NEW.profile_id;
66
+ END;
67
+
68
+ CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_update
69
+ AFTER UPDATE OF profile_id, fact_ids_json ON memory_scenes
70
+ BEGIN
71
+ DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
72
+ INSERT OR IGNORE INTO scene_fact_members
73
+ (profile_id, scene_id, fact_id, position)
74
+ SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
75
+ FROM json_each(
76
+ CASE WHEN json_valid(NEW.fact_ids_json)
77
+ THEN NEW.fact_ids_json ELSE '[]' END
78
+ ) AS member
79
+ JOIN atomic_facts AS af
80
+ ON af.fact_id = member.value
81
+ AND af.profile_id = NEW.profile_id;
82
+ END;
83
+
84
+ INSERT OR IGNORE INTO scene_fact_members
85
+ (profile_id, scene_id, fact_id, position)
86
+ SELECT ms.profile_id, ms.scene_id, af.fact_id, CAST(member.key AS INTEGER)
87
+ FROM memory_scenes AS ms
88
+ JOIN json_each(
89
+ CASE WHEN json_valid(ms.fact_ids_json) THEN ms.fact_ids_json ELSE '[]' END
90
+ ) AS member
91
+ JOIN atomic_facts AS af
92
+ ON af.fact_id = member.value
93
+ AND af.profile_id = ms.profile_id;
94
+
95
+ COMMIT;
96
+ """
97
+
98
+
99
+ def verify(conn: sqlite3.Connection) -> bool:
100
+ """Verify the table, covering indexes, and synchronization triggers."""
101
+ objects = {
102
+ (str(row[0]), str(row[1]))
103
+ for row in conn.execute(
104
+ "SELECT name, type FROM sqlite_master "
105
+ "WHERE name IN (?, ?, ?, ?, ?)"
106
+ ,
107
+ (
108
+ "scene_fact_members",
109
+ "idx_scene_fact_members_lookup",
110
+ "idx_scene_fact_members_order",
111
+ "trg_scene_fact_members_insert",
112
+ "trg_scene_fact_members_update",
113
+ ),
114
+ ).fetchall()
115
+ }
116
+ return objects == {
117
+ ("scene_fact_members", "table"),
118
+ ("idx_scene_fact_members_lookup", "index"),
119
+ ("idx_scene_fact_members_order", "index"),
120
+ ("trg_scene_fact_members_insert", "trigger"),
121
+ ("trg_scene_fact_members_update", "trigger"),
122
+ }
123
+
124
+
125
+ def repair(conn: sqlite3.Connection) -> None:
126
+ """Restore an accidentally dropped projection and re-backfill it."""
127
+ conn.executescript(DDL)
@@ -29,6 +29,7 @@ from . import (
29
29
  M029_behavioral_history_indexes,
30
30
  M030_entity_explorer_indexes,
31
31
  M033_learning_feedback_channel,
32
+ M034_scene_fact_members,
32
33
  )
33
34
 
34
35
  # ---------------------------------------------------------------------------
@@ -83,6 +84,7 @@ __all__ = (
83
84
  "M029_behavioral_history_indexes",
84
85
  "M030_entity_explorer_indexes",
85
86
  "M033_learning_feedback_channel",
87
+ "M034_scene_fact_members",
86
88
  # Legacy re-exports (backward compat):
87
89
  "CURRENT_SCHEMA_VERSION",
88
90
  "get_schema_version",
@@ -43,6 +43,7 @@ _TABLES: Final[tuple[str, ...]] = (
43
43
  "entity_aliases",
44
44
  "entity_profiles",
45
45
  "memory_scenes",
46
+ "scene_fact_members",
46
47
  "temporal_events",
47
48
  "graph_edges",
48
49
  "consolidation_log",
@@ -455,6 +456,61 @@ CREATE INDEX IF NOT EXISTS idx_scenes_profile
455
456
  """
456
457
 
457
458
 
459
+ # ---------------------------------------------------------------------------
460
+ # Normalized scene/fact membership projection (bounded scene assignment)
461
+ # ---------------------------------------------------------------------------
462
+
463
+ _SQL_SCENE_FACT_MEMBERS: Final[str] = """
464
+ CREATE TABLE IF NOT EXISTS scene_fact_members (
465
+ profile_id TEXT NOT NULL,
466
+ scene_id TEXT NOT NULL,
467
+ fact_id TEXT NOT NULL,
468
+ position INTEGER NOT NULL DEFAULT 0,
469
+ PRIMARY KEY (scene_id, fact_id),
470
+ FOREIGN KEY (scene_id) REFERENCES memory_scenes(scene_id) ON DELETE CASCADE,
471
+ FOREIGN KEY (fact_id) REFERENCES atomic_facts(fact_id) ON DELETE CASCADE,
472
+ FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
473
+ );
474
+
475
+ CREATE INDEX IF NOT EXISTS idx_scene_fact_members_lookup
476
+ ON scene_fact_members (profile_id, fact_id, scene_id);
477
+ CREATE INDEX IF NOT EXISTS idx_scene_fact_members_order
478
+ ON scene_fact_members (scene_id, position);
479
+
480
+ CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_insert
481
+ AFTER INSERT ON memory_scenes
482
+ BEGIN
483
+ DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
484
+ INSERT OR IGNORE INTO scene_fact_members
485
+ (profile_id, scene_id, fact_id, position)
486
+ SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
487
+ FROM json_each(
488
+ CASE WHEN json_valid(NEW.fact_ids_json)
489
+ THEN NEW.fact_ids_json ELSE '[]' END
490
+ ) AS member
491
+ JOIN atomic_facts AS af
492
+ ON af.fact_id = member.value
493
+ AND af.profile_id = NEW.profile_id;
494
+ END;
495
+
496
+ CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_update
497
+ AFTER UPDATE OF profile_id, fact_ids_json ON memory_scenes
498
+ BEGIN
499
+ DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
500
+ INSERT OR IGNORE INTO scene_fact_members
501
+ (profile_id, scene_id, fact_id, position)
502
+ SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
503
+ FROM json_each(
504
+ CASE WHEN json_valid(NEW.fact_ids_json)
505
+ THEN NEW.fact_ids_json ELSE '[]' END
506
+ ) AS member
507
+ JOIN atomic_facts AS af
508
+ ON af.fact_id = member.value
509
+ AND af.profile_id = NEW.profile_id;
510
+ END;
511
+ """
512
+
513
+
458
514
  # ---------------------------------------------------------------------------
459
515
  # Temporal events (per-entity timeline entries)
460
516
  # ---------------------------------------------------------------------------
@@ -803,6 +859,7 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
803
859
  _SQL_ENTITY_ALIASES,
804
860
  _SQL_ENTITY_PROFILES,
805
861
  _SQL_MEMORY_SCENES,
862
+ _SQL_SCENE_FACT_MEMBERS,
806
863
  _SQL_TEMPORAL_EVENTS,
807
864
  _SQL_GRAPH_EDGES,
808
865
  _SQL_CONSOLIDATION_LOG,
@@ -887,6 +944,8 @@ def drop_all_tables(conn: sqlite3.Connection) -> None:
887
944
  "atomic_facts_fts_insert",
888
945
  "atomic_facts_fts_delete",
889
946
  "atomic_facts_fts_update",
947
+ "trg_scene_fact_members_insert",
948
+ "trg_scene_fact_members_update",
890
949
  ):
891
950
  conn.execute(f"DROP TRIGGER IF EXISTS {trigger}")
892
951