superlocalmemory 3.8.2 → 3.8.3

package/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to SuperLocalMemory V3 will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.8.3] - 2026-07-24 — Recall stays responsive under heavy load
+
+### Fixed
+
+- **Recall no longer hangs when the system is busy.** Search and recall now
+  complete within a generous time budget even during background maintenance or
+  when many agents are querying at once. If a query can't finish in that window,
+  SLM returns keyword-matched results and marks them clearly instead of leaving
+  the request to time out. This applies everywhere recall runs — the dashboard
+  search, the CLI, and connected assistants — so results are consistent across
+  every surface.
+- **Dashboard search waits long enough for a real answer.** The dashboard now
+  allows recall the full server-side budget before giving up, so heavy-load
+  queries return results rather than an aborted-request error.
+
 ## [3.8.2] - 2026-07-24 — Self-healing upgrades & faster, consistent recall
 
 ### Added

package/README.md

@@ -5,10 +5,10 @@
   </picture>
 </p>
 
-<h1 align="center">SuperLocalMemory V3.8.2</h1>
+<h1 align="center">SuperLocalMemory V3.8.3</h1>
 <p align="center"><strong>Enterprise-grade, local-first memory for AI agents and teams.</strong><br/>
 <em>A persistent, auditable long-term brain for your agents that runs on your own infrastructure — with multi-workspace isolation, role-based access, and GDPR + EU AI Act governance controls built in.</em></p>
-<p align="center"><code>v3.8.2</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
+<p align="center"><code>v3.8.3</code> — one control plane: auditable retrieval · multi-scope memory (personal / shared / global) · Cache · Compress · trusted-peer Mesh · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
 Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</code> to your config &nbsp;·&nbsp; Skill: zero-config</p>
 <p align="center"><strong>3 public research preprints</strong> (arXiv + Zenodo archives) · <a href="https://arxiv.org/abs/2603.02240">arXiv:2603.02240</a> · <a href="https://arxiv.org/abs/2603.14588">arXiv:2603.14588</a> · <a href="https://arxiv.org/abs/2604.04514">arXiv:2604.04514</a></p>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superlocalmemory",
-  "version": "3.8.2",
+  "version": "3.8.3",
   "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
   "keywords": [
     "ai-memory",

package/plugin/.claude-plugin/plugin.json

@@ -15,5 +15,5 @@
   "mcpServers": "./.mcp.json",
   "name": "superlocalmemory",
   "repository": "https://github.com/qualixar/superlocalmemory",
-  "version": "3.8.2"
+  "version": "3.8.3"
 }

package/plugin/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- BEGIN SuperLocalMemory v3.8.2 -->
+<!-- BEGIN SuperLocalMemory v3.8.3 -->
 
 ## SuperLocalMemory (SLM) — Agent Rules
 
@@ -39,6 +39,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
 ### Subagents
 slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR)
 
-<!-- END SuperLocalMemory v3.8.2 -->
+<!-- END SuperLocalMemory v3.8.3 -->
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-governance-advisor.md

@@ -77,4 +77,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall
 # What NOT to do
 Never session_init twice; never forget without dry-run preview; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-loop-runner.md

@@ -68,4 +68,4 @@ assessment. The gate is the authority.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-memory-advisor.md

@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/requirements.txt

@@ -1 +1 @@
-superlocalmemory==3.8.2
+superlocalmemory==3.8.3

package/plugin/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-governance/SKILL.md

@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-graph/SKILL.md

@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-loop/SKILL.md

@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-mesh/SKILL.md

@@ -279,4 +279,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-profile/SKILL.md

@@ -145,4 +145,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-recall/SKILL.md

@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-remember/SKILL.md

@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-scope/SKILL.md

@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-session/SKILL.md

@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin-src/rules/AGENTS.md

@@ -128,4 +128,4 @@ When the SLM MCP server is unavailable, use these CLI equivalents:
 - **slm-optimize-advisor** — context compression and KV cache
 - **slm-governance-advisor** — scope/role compliance, retention policies, GDPR
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-graph/SKILL.md

@@ -311,4 +311,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-recall/SKILL.md

@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-remember/SKILL.md

@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-session/SKILL.md

@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v3.8.2 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v3.8.3 · Qualixar · AGPL-3.0-or-later

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "3.8.2"
+version = "3.8.3"
 description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
 license = "AGPL-3.0-or-later"

package/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "3.8.2"
+__version__ = "3.8.3"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/server/routes/memories.py

@@ -19,6 +19,25 @@ from .helpers import (
 logger = logging.getLogger("superlocalmemory.routes.memories")
 router = APIRouter()
 
+# v3.8.3: GENEROUS latency budget for recall. SLM's value is quality recall
+# under heavy multi-agent load, so semantic recall is given ample time to
+# finish — the keyword fallback is a LAST-RESORT safety net for a genuine hang
+# (e.g. a wedged embedder), NOT an aggressive speed cutoff. Only if recall
+# exceeds this budget do we serve the fast keyword search so the caller ALWAYS
+# gets a result instead of hanging forever. Tune with SLM_SEARCH_RECALL_TIMEOUT_S.
+# The dashboard's fetch timeout is set ABOVE this so the browser waits for the
+# quality result rather than aborting early.
+_DEFAULT_RECALL_BUDGET_S = 25.0
+
+
+def _search_recall_timeout_s() -> float:
+    import os
+    try:
+        v = float(os.environ.get("SLM_SEARCH_RECALL_TIMEOUT_S", ""))
+        return v if v > 0 else _DEFAULT_RECALL_BUDGET_S
+    except (TypeError, ValueError):
+        return _DEFAULT_RECALL_BUDGET_S
+
 
 def _internal_error(detail: str = "Internal server error") -> HTTPException:
     """SEC-H-02: log the full traceback server-side; return a generic message.
@@ -526,35 +545,65 @@ async def search_memories(request: Request, body: SearchRequest):
             _window = getattr(body, "window", None) or ""
             if not _window and getattr(body, "date_from", None) and getattr(body, "date_to", None):
                 _window = f"{body.date_from}..{body.date_to}"
-            response = await loop.run_in_executor(
+            # v3.8.3: bound the synchronous recall. Under a concurrent
+            # maintenance pass or a busy embedder it can run tens of seconds
+            # and the browser aborts the fetch. If it exceeds the budget we
+            # fall through to the fast keyword search below, so the dashboard
+            # ALWAYS returns instead of failing with an abort.
+            _recall_future = loop.run_in_executor(
                 None,
                 lambda: engine.recall(
                     body.query, limit=body.limit, fast=True,
                     window=_window or None,
                 ),
             )
-            elapsed_ms = round((_time.monotonic() - t0) * 1000, 1)
-            from superlocalmemory.server.recall_serializer import (
-                recall_response_metadata,
-                serialize_recall_response,
-            )
-            results, no_confident_match = serialize_recall_response(
-                response,
-                limit=body.limit,
-                per_fact_max=300,
-                total_max=max(300, body.limit * 300),
-            )
-            return {
-                "query": body.query,
-                "results": results,
-                "total": len(results),
-                "query_type": getattr(response, "query_type", "semantic"),
-                "retrieval_time_ms": elapsed_ms,
-                "no_confident_match": no_confident_match,
-                **recall_response_metadata(response),
-            }
-
-        # Fallback: direct DB text search (engine not yet initialised)
+            # A run_in_executor thread cannot be cancelled, and wait_for() on it
+            # blocks until the thread finishes (defeating the timeout). So poll
+            # the future without blocking the event loop and give up at the
+            # deadline — the orphaned recall completes in the background and its
+            # result is discarded. This is what bounds dashboard-search latency.
+            _budget = _search_recall_timeout_s()
+            _deadline = loop.time() + _budget
+            while not _recall_future.done() and loop.time() < _deadline:
+                await asyncio.sleep(0.05)
+            if _recall_future.done():
+                response = _recall_future.result()
+            else:
+                # Ensure the orphaned future's eventual result/exception is
+                # retrieved so asyncio doesn't log "never retrieved".
+                _recall_future.add_done_callback(
+                    lambda f: (f.cancelled() or f.exception())
+                )
+                logger.warning(
+                    "search_memories: semantic recall exceeded %.0fs budget for "
+                    "%r — serving keyword fallback",
+                    _budget, (body.query or "")[:80],
+                )
+                response = None
+            if response is not None:
+                elapsed_ms = round((_time.monotonic() - t0) * 1000, 1)
+                from superlocalmemory.server.recall_serializer import (
+                    recall_response_metadata,
+                    serialize_recall_response,
+                )
+                results, no_confident_match = serialize_recall_response(
+                    response,
+                    limit=body.limit,
+                    per_fact_max=300,
+                    total_max=max(300, body.limit * 300),
+                )
+                return {
+                    "query": body.query,
+                    "results": results,
+                    "total": len(results),
+                    "query_type": getattr(response, "query_type", "semantic"),
+                    "retrieval_time_ms": elapsed_ms,
+                    "no_confident_match": no_confident_match,
+                    **recall_response_metadata(response),
+                }
+            # recall timed out — fall through to the fast keyword search.
+
+        # Fallback: direct DB text search (engine not ready OR recall over budget)
         conn = get_db_connection()
         conn.row_factory = dict_factory
         cursor = conn.cursor()

package/src/superlocalmemory/server/unified_daemon.py

@@ -453,6 +453,61 @@ def _emit_event(
 import asyncio as _asyncio
 _recall_semaphore = _asyncio.Semaphore(3)
 
+
+def _recall_budget_s() -> float:
+    """Generous latency budget for a recall before the keyword fallback (v3.8.3).
+
+    SLM's value is quality recall under heavy multi-agent load, so semantic
+    recall is given ample time; the keyword fallback is a LAST-RESORT safety
+    net for a genuine hang (e.g. a wedged embedder), not a speed cutoff. Tune
+    with SLM_SEARCH_RECALL_TIMEOUT_S (shared with the dashboard search route).
+    """
+    import os
+    try:
+        v = float(os.environ.get("SLM_SEARCH_RECALL_TIMEOUT_S", ""))
+        return v if v > 0 else 25.0
+    except (TypeError, ValueError):
+        return 25.0
+
+
+def _recall_keyword_fallback(engine, query: str, limit: int) -> dict:
+    """Fast profile-scoped keyword (LIKE) fallback for /recall.
+
+    Used only when semantic recall exceeds its budget, so CLI/MCP callers get
+    a bounded response instead of hanging. Mirrors the dashboard /api/search
+    fallback shape (retrieval_mode=degraded_lexical).
+    """
+    results = []
+    try:
+        rows = engine._db.execute(
+            "SELECT fact_id, content, confidence FROM atomic_facts "
+            "WHERE profile_id = ? AND content LIKE ? "
+            "ORDER BY confidence DESC LIMIT ?",
+            (engine.profile_id, f"%{query}%", limit),
+        )
+        for pos, r in enumerate(rows, start=1):
+            d = dict(r)
+            results.append({
+                "fact_id": d.get("fact_id"),
+                "content": (d.get("content") or "")[:2400],
+                "score": None, "relevance_score": None, "ranking_score": None,
+                "confidence": d.get("confidence"),
+                "rank_position": pos,
+            })
+    except Exception as exc:
+        logger.warning("recall keyword fallback failed (non-fatal): %s", exc)
+    return {
+        "ok": True,
+        "query": query,
+        "query_type": "text_search",
+        "retrieval_mode": "degraded_lexical",
+        "degraded_reason": "recall_budget_exceeded",
+        "result_count": len(results),
+        "results": results,
+        "count": len(results),
+        "no_confident_match": True,
+    }
+
 # v3.4.52: Embedding model warm state. Set to True by the async pre-warm
 # thread once Ollama has loaded the embedding model. /health reports this
 # so MCP clients can wait for warm state before issuing recall calls.
@@ -3013,15 +3068,35 @@ def _register_daemon_routes(application: FastAPI) -> None:
         if not fast:
             await _recall_semaphore.acquire()
         try:
-            response = await asyncio.to_thread(
-                engine.recall,
-                search_query, limit=limit, session_id=effective_sid,
-                agent_id=recall_actor,
-                fast=fast,
-                include_global=include_global,
-                include_shared=include_shared,
-                window=window or None,
+            # v3.8.3: bound the recall so CLI/MCP callers never hang on a
+            # wedged embedder. Poll the executor future (which cannot be
+            # cancelled) without blocking the loop, and give quality recall a
+            # GENEROUS budget; only if it is exceeded do we serve the fast
+            # keyword fallback. The orphaned recall finishes in the background.
+            loop = asyncio.get_running_loop()
+            _rf = loop.run_in_executor(
+                None,
+                lambda: engine.recall(
+                    search_query, limit=limit, session_id=effective_sid,
+                    agent_id=recall_actor,
+                    fast=fast,
+                    include_global=include_global,
+                    include_shared=include_shared,
+                    window=window or None,
+                ),
             )
+            _budget = _recall_budget_s()
+            _deadline = loop.time() + _budget
+            while not _rf.done() and loop.time() < _deadline:
+                await asyncio.sleep(0.05)
+            if not _rf.done():
+                _rf.add_done_callback(lambda f: (f.cancelled() or f.exception()))
+                logger.warning(
+                    "recall: semantic recall exceeded %.0fs budget for %r — "
+                    "serving keyword fallback", _budget, (search_query or "")[:80],
+                )
+                return _recall_keyword_fallback(engine, search_query, limit)
+            response = _rf.result()
             # v3.4.26: return the same field shape as recall_worker so
             # MCP processes proxying through the daemon get recall_trace-
             # compatible data without a second round trip.

package/src/superlocalmemory/ui/js/core.js

@@ -13,7 +13,12 @@
 // surfaces as a normal rejection and the UI can show a clear error.
 // ============================================================================
 
-window.SLM_FETCH_TIMEOUT_MS = 15000;
+// v3.8.3: 30s (> the server's 25s recall budget) so the browser waits for a
+// quality recall under heavy multi-agent load instead of aborting it early
+// ("signal is aborted without reason"). The server self-bounds recall and
+// falls back to keyword within its budget, so this only ever waits longer for
+// a genuinely stuck request. Per-call init.timeoutMs still overrides.
+window.SLM_FETCH_TIMEOUT_MS = 30000;
 window.SLM_INSTALL_TOKEN_KEY = 'slm_install_token';
 
 // B2 (3.7.9): the install token is kept in a private closure, never in