superlocalmemory 4.0.10 → 4.1.2

package/src/superlocalmemory/storage/schema.py

@@ -62,6 +62,7 @@ _TABLES: Final[tuple[str, ...]] = (
     "community_summaries",
     "consolidated_summaries",
     "persona_summary",
+    "projection_outbox",
 )
 
 _FTS_TABLES: Final[tuple[str, ...]] = (
@@ -157,7 +158,7 @@ CREATE TABLE IF NOT EXISTS atomic_facts (
     content            TEXT NOT NULL,
     fact_type          TEXT NOT NULL DEFAULT 'semantic'
                             CHECK (fact_type IN (
-                                'episodic', 'semantic', 'opinion', 'temporal'
+                                'episodic', 'semantic', 'opinion', 'prospective'
                             )),
 
     -- Entities (JSON arrays)
@@ -915,6 +916,10 @@ CREATE TABLE IF NOT EXISTS persona_summary (
 # Ordered DDL list (tables before FTS, respects FK order)
 # ---------------------------------------------------------------------------
 
+#: Imported rather than restated so the table has exactly one definition; the
+#: module that owns the queue owns its shape.
+from superlocalmemory.storage.projection_outbox import DDL as _PROJECTION_OUTBOX_DDL
+
 _DDL_ORDERED: Final[tuple[str, ...]] = (
     _SQL_SCHEMA_VERSION,
     _SQL_PROFILES,
@@ -950,6 +955,12 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
     CONSOLIDATED_SUMMARIES_DDL,
     # Wave Q3: persona roll-up tier (additive; safe on existing DBs)
     _SQL_PERSONA_SUMMARY,
+    # The queue that makes a graph/vector projection write survive a crash.
+    # Created here, at every engine init, rather than only by its migration:
+    # if this table is missing, facts stop being projected and the only symptom
+    # is a memory that cannot be recalled. That invariant must not be
+    # contingent on a migration pass having succeeded.
+    _PROJECTION_OUTBOX_DDL,
 )
 
 
@@ -961,6 +972,18 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
 #: which SQLite offers no IF NOT EXISTS form of, so presence is checked first.
 _ADDITIVE_COLUMNS: Final[tuple[tuple[str, str, str], ...]] = (
     ("atomic_facts", "quarantined", "INTEGER NOT NULL DEFAULT 0"),
+    # ``pinned`` arrives with M015, which is a DEFERRED migration -- it runs
+    # after the engine is up. But the DDL below indexes it
+    # (``idx_facts_pinned``), and that DDL runs during engine start. On a store
+    # old enough to predate M015 the index therefore raised "no such column:
+    # pinned" before anything could add it, and every start failed the same way:
+    # the deferred pass could not run because the engine could not start, and
+    # the engine could not start because the deferred pass had not run.
+    # ``slm db migrate`` did not break the loop either -- it reports Failed=0
+    # and skips deferred migrations by definition.
+    # The column has to exist before its own index either way, so it belongs
+    # here, where a store gets it at start regardless of migration state.
+    ("atomic_facts", "pinned", "INTEGER NOT NULL DEFAULT 0"),
 )
 
 
@@ -1000,6 +1023,17 @@ def create_all_tables(conn: sqlite3.Connection) -> None:
     """
     _set_pragmas(conn)
 
+    # Before the DDL, not only after it. The DDL below indexes columns that an
+    # upgraded store may not have yet, and an index on a column that does not
+    # exist is a hard error, not a skipped statement -- so the whole of
+    # create_all_tables would raise and the engine would never start.
+    #
+    # On a fresh database this pass does nothing: the tables do not exist yet,
+    # which the helper treats as "nothing to alter". On an upgraded one the
+    # tables are already there and this is exactly where the columns are owed.
+    # It runs again at the end for tables created during this call.
+    _add_missing_columns(conn)
+
     for ddl in _DDL_ORDERED:
         conn.executescript(ddl)
 

package/src/superlocalmemory/storage/write_coordinator.py

@@ -631,10 +631,27 @@ class WriteCoordinator:
             conn.close()
 
     def _open_connection(self) -> sqlite3.Connection:
-        conn = sqlite3.connect(str(self._db_path), timeout=1.0)
+        """The coordinator's own connection, on the same waiting policy as the rest.
+
+        It waited one second while every other writer waited ten. A caller
+        legitimately holding the write lock for longer than a second -- a large
+        batch, a store during maintenance -- made the coordinator's next write
+        raise "database is locked" and lose the item, while an ordinary write
+        issued at the same moment simply waited and succeeded.
+
+        Reproduced: a 3,010 ms hold blocked the coordinator for 1,004 ms and then
+        dropped its write. There was no reason for the two to disagree, and the
+        shorter one belonged to the path whose failure loses data rather than
+        retries.
+        """
+        from superlocalmemory.storage.database import _BUSY_TIMEOUT_MS
+
+        conn = sqlite3.connect(
+            str(self._db_path), timeout=_BUSY_TIMEOUT_MS / 1000.0,
+        )
         conn.row_factory = sqlite3.Row
         conn.execute("PRAGMA foreign_keys=ON")
-        conn.execute("PRAGMA busy_timeout=1000")
+        conn.execute(f"PRAGMA busy_timeout={_BUSY_TIMEOUT_MS}")
         conn.execute("PRAGMA journal_mode=WAL")
         return conn
 

package/src/superlocalmemory/trust/scorer.py

@@ -34,6 +34,31 @@ _DEFAULT_ALPHA = 1.0
 _DEFAULT_BETA = 1.0
 _DEFAULT_TRUST = 0.5
 
+#: Identities that are the absence of an identity. A caller that does not say
+#: who it is lands in one of these, and on a real store the ``unknown`` bucket
+#: had accumulated 1,708 pieces of evidence and a trust of 1.000 — the highest
+#: of any agent in the store, higher than the named agents doing the actual
+#: work. That number is the sum of everybody's behaviour, and it was being
+#: handed to whoever arrived next without a name.
+#:
+#: It matters twice over. The trust gate lets a write through at 0.3 and a
+#: delete at 0.5, so a caller with no identity cleared both by the widest
+#: margin available. And a fact with no trust record of its own inherits the
+#: trust of whoever created it, so 39 facts on that store were being ranked at
+#: the maximum promotion for having no author.
+#:
+#: A catch-all is not an identity. It reads as the neutral prior every time and
+#: accumulates nothing, which leaves the gate exactly where it was for an
+#: anonymous caller (0.5 clears both thresholds) while removing the escalation.
+ANONYMOUS_IDENTITIES: frozenset[str] = frozenset({
+    "", "unknown", "unspecified", "anonymous", "none", "null",
+})
+
+
+def is_anonymous(agent_id: str) -> bool:
+    """Whether this identifier names nobody in particular."""
+    return (agent_id or "").strip().lower() in ANONYMOUS_IDENTITIES
+
 # Signal strengths (how much each event shifts alpha/beta)
 _SIGNAL_WEIGHTS: dict[str, tuple[float, float]] = {
     # (delta_alpha, delta_beta)
@@ -68,7 +93,14 @@ class TrustScorer:
     # ------------------------------------------------------------------
 
     def get_agent_trust(self, agent_id: str, profile_id: str) -> float:
-        """Get trust score for an agent. Returns 0.5 if unknown."""
+        """Get trust score for an agent. Returns the neutral prior if unknown.
+
+        An identifier that names nobody in particular always reads as the
+        prior, whatever has been written against that bucket. See
+        ``ANONYMOUS_IDENTITIES``.
+        """
+        if is_anonymous(agent_id):
+            return _DEFAULT_TRUST
         alpha, beta = self._get_beta_params("agent", agent_id, profile_id)
         return self._compute_trust(alpha, beta)
 
@@ -131,6 +163,16 @@ class TrustScorer:
         Returns:
             Updated trust score for the agent.
         """
+        if is_anonymous(agent_id):
+            # Reputation belongs to somebody. Accumulating it against the
+            # catch-all is how that bucket reached the highest trust in the
+            # store while naming no one.
+            logger.debug(
+                "trust signal ignored: %r names nobody (signal=%s)",
+                agent_id, signal_type,
+            )
+            return _DEFAULT_TRUST
+
         weights = _SIGNAL_WEIGHTS.get(signal_type, (0.0, 0.0))
         delta_alpha, delta_beta = weights
 

package/src/superlocalmemory/ui/index.html

@@ -113,27 +113,19 @@
             </div>
         </div>
 
-        <!-- Main content tabs — Bootstrap nav-tabs row removed (v3.4.21,
-             Domain 2). Sidebar (built by ng-shell.js) is the sole
-             navigation. Hidden tab buttons below keep the Bootstrap
-             ``shown.bs.tab`` event contract alive — ng-shell's
-             ``activateTab`` dispatches on them, and brain.js / other
-             listeners fire normally. No visual output on initial paint. -->
+        <!-- The visible navigation is the sidebar, built by od-shell.js.
+             These hidden buttons exist only so od-shell's ``activateTab`` can
+             dispatch Bootstrap's ``shown.bs.tab`` on a real element for panes
+             it does not render itself — today that is dashboard-pane alone,
+             whose data reload hangs off that event. Every button here must
+             target a pane that exists: nine did not, and clicking one did
+             nothing at all. -->
         <ul class="nav nav-tabs d-none" id="mainTabs" role="tablist" aria-hidden="true">
             <li class="nav-item"><button class="nav-link active" id="dashboard-tab" data-bs-toggle="tab" data-bs-target="#dashboard-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="graph-tab" data-bs-toggle="tab" data-bs-target="#graph-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="memories-tab" data-bs-toggle="tab" data-bs-target="#memories-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="recall-lab-tab" data-bs-toggle="tab" data-bs-target="#recall-lab-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="clusters-tab" data-bs-toggle="tab" data-bs-target="#clusters-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="timeline-tab" data-bs-toggle="tab" data-bs-target="#timeline-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="brain-tab" data-bs-toggle="tab" data-bs-target="#brain-pane" type="button" role="tab" aria-controls="brain-pane"></button></li>
-            <li class="nav-item"><button class="nav-link" id="events-tab" data-bs-toggle="tab" data-bs-target="#events-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="agents-tab" data-bs-toggle="tab" data-bs-target="#agents-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="trust-tab" data-bs-toggle="tab" data-bs-target="#trust-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="lifecycle-tab" data-bs-toggle="tab" data-bs-target="#lifecycle-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="compliance-tab" data-bs-toggle="tab" data-bs-target="#compliance-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="math-health-tab" data-bs-toggle="tab" data-bs-target="#math-health-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="ide-tab" data-bs-toggle="tab" data-bs-target="#ide-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="settings-tab" data-bs-toggle="tab" data-bs-target="#settings-pane" type="button"></button></li>
         </ul>
 
@@ -956,7 +948,7 @@
                         <h5 class="mb-0"><i class="bi bi-shield-lock text-success"></i> Compliance &amp; audit</h5>
                         <span class="badge bg-secondary" id="compliance-profile-badge">default</span>
                     </div>
-                    <p class="text-muted small mb-3">Set retention policies and access controls. In Mode A, all data stays on your device &mdash; EU AI Act compliant by default.</p>
+                    <p class="text-muted small mb-3">Set retention policies and access controls. In Mode A nothing leaves your device, which is a control your compliance programme can rely on &mdash; it is not a compliance certification, and this product does not issue one.</p>
                     <div class="row g-3 mb-3">
                         <div class="col-md-4"><div class="border rounded p-2 text-center"><div class="fw-bold fs-4" id="cp-audit-count">-</div><small class="text-muted">Audit events</small></div></div>
                         <div class="col-md-4"><div class="border rounded p-2 text-center"><div class="fw-bold fs-4" id="cp-retention-count">-</div><small class="text-muted">Retention policies</small></div></div>
@@ -1084,7 +1076,7 @@
                             <div class="btn-group w-100" role="group">
                                 <input type="radio" class="btn-check" name="settings-mode-radio" id="mode-a-radio" value="a" checked>
                                 <label class="btn btn-outline-success" for="mode-a-radio">
-                                    <strong>Mode A</strong><br><small>Zero Cloud — EU AI Act</small>
+                                    <strong>Mode A</strong><br><small>Zero Cloud</small>
                                 </label>
                                 <input type="radio" class="btn-check" name="settings-mode-radio" id="mode-b-radio" value="b">
                                 <label class="btn btn-outline-info" for="mode-b-radio">
@@ -1585,7 +1577,6 @@
     <!-- Neural Glass shell (v3.4.21 restructured) -->
     <script src="static/js/ng-health.js?v=345"></script>
     <script src="static/js/ng-ingestion.js?v=345"></script>
-    <script src="static/js/ng-entities.js?v=3410"></script>
     <script src="static/js/ng-skills.js?v=3411"></script>
     <script src="static/js/ng-mesh.js?v=345"></script>
     <!-- OD Shell v1.0 — replaces ng-shell.js; CSP-safe single-page tab switching -->

package/src/superlocalmemory/ui/js/event-delegation.js

@@ -38,7 +38,18 @@
     'load-agents': () => loadAgents(),
     'load-clusters': () => loadClusters(),
     'load-compliance': () => loadCompliance(),
-    'load-entity-explorer': () => loadEntityExplorer(),
+    // Re-renders through the current renderer. The button used to call a
+    // function from a superseded implementation of this pane, which was
+    // removed; naming it directly would have made Refresh throw.
+    'load-entity-explorer': () => {
+      const pane = document.getElementById('entities-pane');
+      if (pane && typeof window.odRenderEntities === 'function') {
+        pane.innerHTML = '';
+        window.odRenderEntities(pane);
+        return;
+      }
+      if (typeof window.loadEntityExplorer === 'function') window.loadEntityExplorer();
+    },
     'load-graph': () => loadGraph(),
     'load-health-monitor': () => loadHealthMonitor(),
     'load-ingestion-status': () => loadIngestionStatus(),

package/src/superlocalmemory/ui/js/od-health.js

@@ -216,12 +216,33 @@
     var strip = document.getElementById('od-h-status');
     if (!strip) return;
 
-    // Card 1: Daemon — from /health
-    var daemonCls = (healthData && healthData.status === 'ok') ? 'ok' : 'warn';
-    var daemonVal = daemonCls === 'ok' ? 'Healthy' : 'Degraded';
+    // Card 1: Daemon — from /health.
+    // `status` is the literal string "ok" on every reply the daemon is alive
+    // enough to send, so reading it said "Healthy" for a daemon that had not
+    // finished starting, or whose search was not answering. `runtime_state` is
+    // the field that actually varies.
+    var runtime = healthData ? String(healthData.runtime_state || '') : '';
+    var RUNTIME_LABELS = {
+      serving_full: 'Healthy',
+      serving_degraded: 'Degraded',
+      warming: 'Starting up',
+      not_ready: 'Not ready'
+    };
+    var daemonCls = !healthData ? 'warn'
+      : (runtime === 'serving_full' ? 'ok'
+        : (runtime === 'warming' ? 'neutral' : 'warn'));
+    var daemonVal = !healthData ? 'Unreachable'
+      : (RUNTIME_LABELS[runtime] || (healthData.status === 'ok' ? 'Healthy' : 'Degraded'));
     var daemonDetail = healthData
       ? 'port 8765 · v' + esc(String(healthData.version || '?'))
       : 'daemon unreachable';
+    if (healthData && healthData.projection && healthData.projection.behind) {
+      // The graph copy being behind is not a daemon fault, and it does change
+      // what a search returns, so it belongs on the card the operator reads.
+      daemonDetail += ' · graph copy ' + esc(String(healthData.projection.depth || 0))
+        + ' behind';
+      if (daemonCls === 'ok') daemonCls = 'neutral';
+    }
 
     // Card 2: Memory DB — from /api/stats
     var dbMb = (statsData && statsData.overview)
@@ -239,10 +260,11 @@
     var mathVal = mathCls === 'ok' ? 'Active' : (mathOverall ? esc(mathOverall) : 'Unknown');
     var mathDetail = esc(String(mathLayerCount)) + ' / 3 layers online';
 
-    // Card 4: Mesh broker — TODO: no /api/mesh/* endpoint confirmed
+    // Card 4: Mesh broker. There is no endpoint for this yet, so the card says
+    // so rather than implying something was measured and came back unknown.
     var meshCls = 'neutral';
-    var meshVal = 'Unknown';
-    var meshDetail = 'no endpoint — configure mesh to enable'; // TODO: wire to /api/mesh/status
+    var meshVal = 'Not set up';
+    var meshDetail = 'coordinating several machines is not configured here';
 
     var CARDS = [
       { label: 'Daemon',       cls: daemonCls, value: daemonVal, detail: daemonDetail },

package/src/superlocalmemory/ui/js/od-memories.js

@@ -458,6 +458,25 @@
         meta.style.cssText = 'margin-top:10px;font-size:12px;color:var(--fg-3);line-height:1.6';
         meta.textContent = _summaryProvenance(d);
         out.appendChild(meta);
+
+        /* Why it came out this way, and what to do about it.
+         *
+         * The provenance line above says a summary was assembled from the
+         * user's own notes rather than written. It never said why. Someone in
+         * Mode A — which has no language model by design — saw a plainer
+         * result than they expected with no way to learn that a written one
+         * needs a model, and would reasonably read the feature as broken.
+         */
+        var cap = d.capability;
+        if (cap && cap.message) {
+          var hint = document.createElement('div');
+          hint.style.cssText = 'margin-top:10px;font-size:12px;line-height:1.6;' +
+            'color:var(--fg-2);background:var(--card-2);border:1px solid var(--border);' +
+            'border-left:3px solid var(--accent, var(--border));' +
+            'border-radius:var(--r-md);padding:10px 12px';
+          hint.textContent = cap.message;
+          out.appendChild(hint);
+        }
       })
       .catch(function (e) {
         out.textContent = 'Could not build summary: ' + (e && e.message ? e.message : 'error');

package/src/superlocalmemory/ui/js/od-settings.js

@@ -222,6 +222,71 @@
   }
 
   /* ── Layout ───────────────────────────────────────────────── */
+  /* Decay preview — three curves, one per source-trust level.
+     Shows what the kappa setting actually does before it is saved: the same
+     memory strength fading at three different rates depending on where the
+     memory came from. At kappa 0 the three curves coincide, which is the
+     honest picture of trust-modulation being off. */
+  var DECAY_TRUSTS = [
+    { trust: 0.0, color: '#e0245e', label: 'low trust' },
+    { trust: 0.5, color: '#f59e0b', label: 'medium' },
+    { trust: 1.0, color: '#10b981', label: 'trusted' }
+  ];
+
+  function buildDecayPreview() {
+    var wrap = el('div', null, { display:'flex', flexDirection:'column', gap:'6px' });
+    var cvs = el('canvas', { id: P + '-forg-decay' });
+    cvs.width = 300; cvs.height = 96;
+    Object.assign(cvs.style, {
+      border:'1px solid var(--border)', borderRadius:'4px', display:'block'
+    });
+    wrap.appendChild(cvs);
+    var key = el('div', null, { display:'flex', gap:'10px' });
+    DECAY_TRUSTS.forEach(function (t) {
+      key.appendChild(el('span', { text: t.label },
+        { fontSize:'10.5px', color: t.color, fontFamily:'var(--font-mono)' }));
+    });
+    wrap.appendChild(key);
+    return wrap;
+  }
+
+  /* The decay rate is per HOUR, and the window is chosen so the three curves
+     are actually distinguishable. At a strong memory's strength (100, the
+     configured maximum) retention over sixty days is indistinguishable from
+     zero for every trust level, so a two-month preview would draw three flat
+     lines along the bottom and say nothing. Three days separates them. */
+  var DECAY_HOURS = 72;
+  var DECAY_STRENGTH = 100.0;
+
+  function retentionAt(hours, kappa, trust) {
+    // Mirrors math/ebbinghaus.trust_modulated_retention exactly:
+    //   lambda_eff = (1 / S) * (1 + kappa * (1 - trust))
+    //   retention  = exp(-lambda_eff * hours)
+    var lambdaEff = (1.0 / DECAY_STRENGTH) * (1.0 + kappa * (1.0 - trust));
+    return Math.exp(-lambdaEff * hours);
+  }
+
+  function drawDecayCurve(kappa) {
+    var cvs = q('forg-decay');
+    if (!cvs || !cvs.getContext) return;
+    var ctx = cvs.getContext('2d');
+    var W = cvs.width, H = cvs.height, STEPS = 72;
+    ctx.clearRect(0, 0, W, H);
+    DECAY_TRUSTS.forEach(function (t) {
+      ctx.beginPath();
+      for (var i = 0; i <= STEPS; i++) {
+        var hours = (i / STEPS) * DECAY_HOURS;
+        var retention = retentionAt(hours, kappa, t.trust);
+        var x = (i / STEPS) * (W - 2) + 1;
+        var y = H - 2 - retention * (H - 4);
+        if (i === 0) ctx.moveTo(x, y); else ctx.lineTo(x, y);
+      }
+      ctx.strokeStyle = t.color;
+      ctx.lineWidth = 1.6;
+      ctx.stroke();
+    });
+  }
+
   function makeRow(lbl, desc, key, ctrl) {
     var d = el('div', { 'data-set':'', 'data-txt':(lbl + ' ' + key).toLowerCase() });
     Object.assign(d.style, { display:'flex', alignItems:'center',
@@ -719,10 +784,16 @@
     intInp.style.minWidth = '80px'; intInp.style.maxWidth = '100px';
     var statsEl = el('span', { id: P + '-forg-stats', text:'Loading…' },
       { fontSize:'12px', color:'var(--fg-2)', fontFamily:'var(--font-mono)' });
+    var kapR = makeRange('forg-kap', '0', '5', '0.1', '2.0');
+    var decayEl = buildDecayPreview();
     var saveBtn = makeBtn('forg-save', 'Save Forgetting', true);
     var st = makeSt('forg');
     var restNote = makeRestartNote('forg');
     saveBtn.addEventListener('click', saveForgetting);
+    kapR.querySelector('input').addEventListener('input', function () {
+      drawDecayCurve(parseFloat(this.value));
+    });
+    kapR.querySelector('input').addEventListener('change', saveForgetting);
     onSw.addEventListener('od-toggle',  saveForgetting);
     immSw.addEventListener('od-toggle', saveForgetting);
     arcR.querySelector('input').addEventListener('change', saveForgetting);
@@ -734,6 +805,11 @@
       makeRow('Archive threshold', 'Memories below this strength move to cold archive', 'forgetting.archive_threshold', arcR),
       makeRow('Forget threshold', 'Memories below this strength are permanently deleted', 'forgetting.forget_threshold', fgtR),
       makeRow('Run every (minutes)', 'How often the forgetting engine runs in the background', 'forgetting.scheduler_interval_minutes', intInp),
+      makeRow('Fade untrusted sources faster (\u03ba)',
+              'Memories from sources you trust less decay quicker. 0 = every memory fades at the same rate.',
+              'forgetting.trust_kappa', kapR),
+      makeRow('Decay preview', 'Retention over 3 days at three source-trust levels',
+              '', decayEl),
       makeRow('Memory zone stats', '', 'forgetting.stats', statsEl),
       makeRow('Actions', '', '', bRow(saveBtn, st, restNote))
     ]);
@@ -751,6 +827,15 @@
         var fgt = q('forg-fgt');
         if (fgt) { fgt.value = d.forget_threshold || 0.05; var dF = q('forg-fgt-disp'); if (dF) dF.textContent = Number(d.forget_threshold || 0.05).toFixed(2); }
         var it = q('forg-int'); if (it) it.value = d.scheduler_interval_minutes || 30;
+        // == null, not ||: kappa 0 is a real setting (trust-modulation off) and
+        // a falsy check would silently redraw it as the 2.0 default.
+        var kap = q('forg-kap');
+        var kv = (d.trust_kappa == null) ? 2.0 : Number(d.trust_kappa);
+        if (kap) {
+          kap.value = kv;
+          var dK = q('forg-kap-disp'); if (dK) dK.textContent = kv.toFixed(2);
+        }
+        drawDecayCurve(kv);
       }).catch(function () {});
     fetch('/api/v3/forgetting/stats').then(function (r) { return r.ok ? r.json() : null; })
       .then(function (d) {
@@ -773,7 +858,8 @@
       core_memory_immune:         q('forg-imm') ? q('forg-imm').classList.contains('on') : true,
       archive_threshold:  parseFloat(q('forg-arc') ? q('forg-arc').value : '0.20'),
       forget_threshold:   parseFloat(q('forg-fgt') ? q('forg-fgt').value : '0.05'),
-      scheduler_interval_minutes: parseInt(q('forg-int') ? q('forg-int').value : '30') || 30
+      scheduler_interval_minutes: parseInt(q('forg-int') ? q('forg-int').value : '30') || 30,
+      trust_kappa: q('forg-kap') ? parseFloat(q('forg-kap').value) : 2.0
     }).then(function (r) { return r.json(); })
       .then(function (d) {
         setSt('forg', 'Saved', true);

package/src/superlocalmemory/ui/js/recall-lab.js

@@ -7,8 +7,63 @@ var recallLabState = {
     perPage: 10,
     query: '',
     synthesis: '',
+    channelStatus: {},
 };
 
+// How each channel status reads to someone looking at a thin result set.
+// 'empty', 'disabled' and 'not_configured' are muted on purpose: the first is a
+// valid finding and the other two are the operator's own configuration. Only a
+// genuine degradation is coloured as a problem.
+var CHANNEL_STATUS_STYLE = {
+    ok:             {cls: 'bg-success',   label: 'ok'},
+    empty:          {cls: 'bg-secondary', label: 'no hits'},
+    disabled:       {cls: 'bg-secondary', label: 'off'},
+    not_configured: {cls: 'bg-secondary', label: 'n/a'},
+    error:          {cls: 'bg-danger',    label: 'failed'},
+    timeout:        {cls: 'bg-warning',   label: 'timed out'},
+    no_embedding:   {cls: 'bg-danger',    label: 'no embedding'},
+};
+
+var CHANNEL_FAULTS = ['error', 'timeout', 'no_embedding'];
+
+// Built with createElement and textContent throughout — the status strings come
+// from the server, and this pane has no reason to be an injection sink.
+function buildChannelHealth(statuses) {
+    var names = Object.keys(statuses || {});
+    if (names.length === 0) return null;
+    names.sort();
+
+    var wrap = document.createElement('div');
+    wrap.className = 'mt-2 d-flex flex-wrap align-items-center gap-1';
+
+    var degraded = names.filter(function(n) {
+        return CHANNEL_FAULTS.indexOf(statuses[n]) !== -1;
+    });
+
+    var lead = document.createElement('span');
+    lead.className = degraded.length ? 'me-1 text-danger fw-semibold' : 'me-1 text-muted';
+    lead.style.fontSize = '0.75rem';
+    // Said plainly, because the reason this strip exists is that a partly-broken
+    // retrieval path and a store with nothing to say produced the same answer.
+    lead.textContent = degraded.length
+        ? 'Retrieval degraded — this answer is missing what ' +
+          degraded.length + ' channel' + (degraded.length === 1 ? '' : 's') + ' would have found:'
+        : 'Channels:';
+    wrap.appendChild(lead);
+
+    names.forEach(function(name) {
+        var status = statuses[name];
+        var style = CHANNEL_STATUS_STYLE[status] || {cls: 'bg-dark', label: String(status)};
+        var badge = document.createElement('span');
+        badge.className = 'badge ' + style.cls;
+        badge.style.fontSize = '0.68rem';
+        badge.textContent = name + ' \u00b7 ' + style.label;
+        wrap.appendChild(badge);
+    });
+
+    return wrap;
+}
+
 // Delegation handles the case where the recall-lab tab pane is injected after parse time.
 document.addEventListener('click', function(e) {
     if (!e.target || e.target.id !== 'recall-lab-search') return;
@@ -54,6 +109,14 @@ document.addEventListener('click', function(e) {
 
         recallLabState.allResults = data.results || [];
         recallLabState.synthesis = data.synthesis || '';
+        recallLabState.channelStatus = data.channel_status || {};
+
+        // Rendered BEFORE the no-results branch below, and that ordering is the
+        // whole point: every channel failing produces exactly zero results, so
+        // the case most in need of an explanation is the one that would
+        // otherwise show a bare 'No results found'.
+        var health = buildChannelHealth(recallLabState.channelStatus);
+        if (health) metaDiv.appendChild(health);
 
         if (recallLabState.allResults.length === 0) {
             resultsDiv.textContent = '';
@@ -118,9 +181,21 @@ function renderRecallPage() {
         numLabel.textContent = '#' + (globalIndex + 1);
         scoreRow.appendChild(numLabel);
         var scoreBadges = document.createElement('div');
-        scoreBadges.innerHTML = '<span class="badge bg-primary me-1">Score: ' + r.score + '</span>' +
-            '<span class="badge bg-secondary me-1">Trust: ' + r.trust_score + '</span>' +
-            '<span class="badge bg-outline-info" style="border:1px solid #0dcaf0;color:#0dcaf0;">Conf: ' + r.confidence + '</span>';
+        // Built element by element rather than as an HTML string. The values are
+        // server-supplied, and this file's sibling panes are held to the same
+        // rule: this pane renders DOM, it does not parse markup.
+        [
+            ['badge bg-primary me-1', 'Score: ' + r.score, ''],
+            ['badge bg-secondary me-1', 'Trust: ' + r.trust_score, ''],
+            ['badge bg-outline-info', 'Conf: ' + r.confidence,
+             'border:1px solid #0dcaf0;color:#0dcaf0;'],
+        ].forEach(function(spec) {
+            var badge = document.createElement('span');
+            badge.className = spec[0];
+            badge.textContent = spec[1];
+            if (spec[2]) badge.style.cssText = spec[2];
+            scoreBadges.appendChild(badge);
+        });
         scoreRow.appendChild(scoreBadges);
         item.appendChild(scoreRow);