superlocalmemory 4.0.4 → 4.0.6

package/CHANGELOG.md

@@ -5,6 +5,96 @@ All notable changes to SuperLocalMemory will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.0.6] — The Connected Brain
+
+### Added
+- **The Living Brain, rewritten for people who do not read telemetry.** The Brain
+  section now leads with the number of questions your memory has answered rather
+  than a raw event count, names its ranking phase in words, and stops presenting
+  a starting value as a measured result. Source quality no longer lists internal
+  identifiers; when nothing has been measured yet it says so and explains what
+  would change that.
+- **Session, daily and project summaries.** A readable layer over your memories:
+  what a session covered, what a day's main topics were, and what was worked on
+  per project. Each one links back to the memories it came from, and each states
+  how much of the underlying data it could actually cover. Requested in #113.
+- **Entity-level memory consolidation now runs.** Repeated facts about the same
+  entity are merged during maintenance, and the originals are archived rather
+  than deleted.
+- **Codex and Bounded Loops appear in Connected clients.** Codex is listed with
+  the configuration that proves it, and Bounded Loops is detected when installed,
+  with its version and the bridge it speaks.
+
+### Fixed
+- **The knowledge graph no longer opens blank.** Previously the graph could
+  render nothing on first open — and again when you returned to it — until you
+  moved the node slider. Two separate causes: the view framed itself against a
+  canvas that had no size yet, and re-entering the pane cleared the canvas
+  without redrawing it. Default node count is now 50.
+- **The graph's details and chat panel is reachable on smaller screens.** Below
+  1100px it stacks under the graph, a full screen-height out of view; there is
+  now a control to reach it and a way back.
+- **Presence tells you when it has stopped being recorded.** A gap in recording
+  previously looked identical to "no agents are active".
+- **Recall no longer fails when the reranker returns no scores.** It falls back
+  to its existing ranking instead of raising.
+- Storage: per-call connections now disable checkpoint-on-close
+  (`SQLITE_DBCONFIG_NO_CKPT_ON_CLOSE`), removing a version-dependent blocking
+  close path. On SQLite builds whose close-path checkpoint can block, closing a
+  WAL-mode connection may wait on reader marks pinned by another connection
+  while holding SQLite's process-global VFS mutex, convoying every later
+  connection in the process; `PRAGMA busy_timeout` does not apply to that path.
+  Reported, diagnosed and fixed by **@kenyonxu** (#118), from a production
+  postmortem plus an in-suite reproduction.
+  Scope note: on SQLite 3.49.1 the close-path checkpoint is passive — measured
+  at 0.075 ms with a full WAL and a pinned reader mark — so the convoy is not
+  reproducible there. This change is therefore hardening: it makes the
+  non-blocking close explicit rather than depending on the behaviour of a
+  particular SQLite build.
+- Storage: per-call connections now also set `PRAGMA wal_autocheckpoint=400`.
+  This pragma is per-connection and is not persisted in the database file, so
+  it previously applied only to the short-lived initialisation connection and
+  every working connection silently fell back to SQLite's default of 1000
+  frames. With checkpoint-on-close disabled, autocheckpoint is the only
+  remaining checkpoint path, so the intended value must be set where the
+  writes actually happen.
+- Storage: when checkpoint-on-close cannot be disabled (Python 3.11, which
+  predates `Connection.setconfig`), this is now logged once instead of failing
+  silently, so operators know the deadlock hardening is inactive.
+
+## [4.0.5] - 2026-08-16 — Reviewed time-aware corrections
+
+### Added
+- M042 adds a profile-scoped, append-only correction ledger in `memory.db`.
+  CLI, MCP, and authenticated HTTP expose a propose/list/review lifecycle with
+  compare-and-swap versions; no correction stores raw fact text in its ledger.
+- `BrainTruth v1` is now shared by `slm brain`, MCP, HTTP, and the Living Brain
+  dashboard. It reports memory activity, feedback, receipt claims, external
+  evidence, and correction quality independently and marks unavailable sources
+  instead of fabricating zeroes.
+- A generated isolated performance/liveness gate records 50 warm recalls, 50
+  canonical remember acknowledgements, current-truth admission overhead, and
+  a 60-second 10-reader/2-writer run without opening user memory data.
+
+### Changed
+- Direct memory edits create immutable review-required successors. `apply`
+  makes the successor current and transaction-expires the predecessor;
+  `reject` preserves current truth; `rollback` restores the predecessor's
+  temporal state.
+- Current truth admission covers channel results, profile shortcuts, bridge and
+  scene expansion, pins, and cache hits. Admission failures abstain rather
+  than returning potentially stale facts. The hot path uses one bounded
+  lifecycle read per recall and rechecks only newly expanded candidates.
+- Default ranking remains `off` unless an operator explicitly configures a
+  ranking mode. M040/M041 observations and correction cases do not become
+  ranking or model-routing inputs.
+
+### Safety
+- Correction history prevents an ordinary forget from producing an opaque
+  writer failure; it returns an explicit conflict for any correction-linked
+  fact. A dedicated erasure workflow remains responsible for privacy deletion
+  across both fact and ledger.
+
 ## [4.0.4] - 2026-08-15 — Optional Bounded Loops evidence bridge
 
 ### Added

package/README.md

@@ -5,7 +5,7 @@
   </picture>
 </p>
 
-<h1 align="center">SuperLocalMemory V4.0.4</h1>
+<h1 align="center">SuperLocalMemory V4.0.6</h1>
 
 <h2 align="center">Rent the LLM. Own the memory.</h2>
 
@@ -27,12 +27,12 @@ guarantee here is stated as a falsifiable invariant, tested under an adversarial
 negative control, and shipped with the harness that regenerates the evidence:
 <code>python benchmark/run_all.py --trials 200 --output-dir results/</code>. What each experiment
 does <em>not</em> exercise is stated too.</p>
-<p align="center"><code>v4.0.4</code> — one control plane: <strong>SLM-Mesh</strong> peer coordination · multi-scope memory (personal / shared / global) · profiles · Cache · Compress · 7-layer retrieval · code graph · Entity Explorer · skill evolution · Modes A/B/C · GDPR retention &amp; audit chain · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
+<p align="center"><code>v4.0.6</code> — one control plane: <strong>SLM-Mesh</strong> peer coordination · multi-scope memory (personal / shared / global) · profiles · Cache · Compress · 7-layer retrieval · code graph · Entity Explorer · skill evolution · Modes A/B/C · GDPR retention &amp; audit chain · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
 Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</code> to your config &nbsp;·&nbsp; Skill: zero-config</p>
 <p align="center"><strong>Four public arXiv preprints</strong> · V4: <a href="https://arxiv.org/abs/2608.08253">arXiv:2608.08253</a> · companion archive: <a href="https://zenodo.org/records/21853302">Zenodo 21853302</a> (<a href="https://doi.org/10.5281/zenodo.21853302">DOI 10.5281/zenodo.21853302</a>) · prior preprints: <a href="https://arxiv.org/abs/2603.02240">2603.02240</a> · <a href="https://arxiv.org/abs/2603.14588">2603.14588</a> · <a href="https://arxiv.org/abs/2604.04514">2604.04514</a>.</p>
 
 <p align="center">
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v4.0.4-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v4.0.4 — Current Release"/></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v4.0.6-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v4.0.6 — Current Release"/></a>
   <a href="https://arxiv.org/abs/2608.08253"><img src="https://img.shields.io/badge/arXiv-2608.08253-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="SuperLocalMemory 4.0 paper on arXiv:2608.08253"/></a>
   <a href="https://zenodo.org/records/21853302"><img src="https://img.shields.io/badge/Zenodo-10.5281%2Fzenodo.21853302-1682D4?style=for-the-badge&logo=zenodo&logoColor=white" alt="V4 paper on Zenodo: 10.5281/zenodo.21853302"/></a>
   <a href="https://arxiv.org/abs/2603.14588"><img src="https://img.shields.io/badge/arXiv-2603.14588-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="arXiv Paper"/></a>
@@ -41,7 +41,7 @@ Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</
   <a href="https://www.npmjs.com/package/superlocalmemory"><img src="https://img.shields.io/npm/v/superlocalmemory?style=for-the-badge&logo=npm&logoColor=white" alt="npm"/></a>
   <a href="https://www.gnu.org/licenses/agpl-3.0"><img src="https://img.shields.io/badge/License-AGPL_v3-blue.svg?style=for-the-badge" alt="AGPL v3"/></a>
   <a href="#privacy-controls-and-operating-modes"><img src="https://img.shields.io/badge/Privacy-Deployment_Assessed-brightgreen?style=for-the-badge" alt="Privacy controls require deployment assessment"/></a>
-  <a href="#teams-and-enterprise-memory-v4"><img src="https://img.shields.io/badge/Enterprise-GDPR_%7C_EU_AI_Act-0b5394?style=for-the-badge" alt="Enterprise governance: GDPR and EU AI Act controls"/></a>
+  <a href="#teams-and-enterprise-memory-v4"><img src="https://img.shields.io/badge/Enterprise-GDPR_%7C_EU_AI_Act_controls-0b5394?style=for-the-badge" alt="Enterprise governance: GDPR and EU AI Act controls"/></a>
   <a href="https://superlocalmemory.com"><img src="https://img.shields.io/badge/Web-superlocalmemory.com-ff6b35?style=for-the-badge" alt="Website"/></a>
   <a href="#dual-interface-mcp--cli"><img src="https://img.shields.io/badge/MCP-Native-blue?style=for-the-badge" alt="MCP Native"/></a>
   <a href="#dual-interface-mcp--cli"><img src="https://img.shields.io/badge/CLI-Agent--Native-green?style=for-the-badge" alt="CLI Agent-Native"/></a>
@@ -62,7 +62,16 @@ SuperLocalMemory V4 combines conventional dense and lexical retrieval with graph
 
 **Memory with a sense of time.** SLM does not only store *what* an agent learned — it records *when*. Every fact carries ingestion timing and provenance; recall runs a dedicated temporal candidate channel alongside semantic, lexical, and associative retrieval; scenes and entity timelines reconstruct sequence; and the lifecycle lets neglected memory decay and self-archive instead of growing without bound. Time is a first-class ranking and lifecycle signal rather than a timestamp column an agent never reads — which is what lets a long-lived agent reason about how its context changed, not only what it currently holds.
 
-**What V4.0.4 ships.** Existing users can now preview and explicitly refresh SLM-owned host integrations with `slm upgrade-hosts`, while package installation and MCP startup no longer silently modify host hook configuration. V4.0.4 also adds an optional, capability-negotiated Bounded Loops observation bridge: compatible terminal graph receipts enter a separate, profile-scoped `learning.db` table and appear in Living Brain, without affecting recall, ranking, routing, or automatic learning. V4 remains a *governed* local-first control plane — every canonical write is admitted, policy-authorized, tracked as durable per-store obligations (lexical, temporal, vector), and sealed by a completion manifest, so it is either fully applied or explicitly marked degraded, never silently half-done. Flagship surfaces in this release:
+**What V4.0.6 ships.** The Living Brain is written for the person who owns the memory, not for the person who built the ranker. It leads with how many questions your memory has actually answered instead of a raw event count, names its ranking phase in words, and refuses to present an untrained starting value as a measured result — where nothing has been measured yet, it says so and says what would change that. Alongside it, a readable consolidation layer: session, daily, and project summaries, each linked back to the memories it was derived from and each explicit about how much of the underlying data it could cover. Entity-level consolidation now actually runs during maintenance, merging repeated facts about the same entity and archiving the originals rather than deleting them. Codex and Bounded Loops are detected and shown among connected clients, labelled by the evidence that supports them — configuration proves setup, not traffic, and the dashboard says which one it has. Presence now distinguishes "no agents are active" from "presence has stopped being recorded", because those looked identical before and only one of them is fine. See [reviewed corrections](docs/reviewed-corrections.md) for the correction lifecycle and [MCP tools](docs/mcp-tools.md) for host-facing commands.
+
+**Fixed in V4.0.6.** The knowledge graph no longer opens blank. It framed itself against a canvas that had no size yet, spent its whole frame budget drawing off-screen, and stopped — so the graph appeared only after you moved the node slider. Returning to the pane cleared the canvas without redrawing it, which failed the same way for a different reason. Both are fixed, the default node count is 50, and on narrower screens the details and chat panel is reachable instead of stranded a screen-height below the fold. Recall no longer raises when the reranker reports success but returns no scores; it falls back to its existing ranking. Corrections attempted without the daemon now refuse with the reason and the remedy, rather than reporting a transient error that could never clear.
+
+**Carried forward from V4.0.5.** A correction is a review-gated lifecycle, not an in-place edit: SLM creates an immutable successor, keeps it out of current recall until an authenticated reviewer applies it, and preserves the predecessor for time-aware history. Every candidate path, including cached context, pins, bridge expansion, and scene expansion, uses hard current-truth admission and abstains if that truth cannot be read. `slm brain`, MCP, HTTP, and the Living Brain share one observation-only BrainTruth snapshot; feedback, external Bounded Loops evidence, and receipt claims are shown honestly but do not silently alter recall, ranking, or model routing. The optional Bounded Loops bridge remains capability-negotiated and independent.
+
+**Adaptive-ranking migration.** V4.0.6 leaves the optional adaptive ranker off
+unless an operator sets `SLM_RANKING` (`v1`, `v2`, or `v2-ensemble`). This does
+not disable the normal retrieval channels; it prevents feedback and
+observation data from changing ranking without an explicit operator decision.
 
 - **[SLM-Mesh](#slm-mesh-cross-session--cross-machine-coordination)** — authenticated cross-session and cross-machine peer coordination (messages, locks, shared state, inbox/outbox, optional discovery). Coordination only — not automatic replicated memory.
 - **Multi-scope memory & profiles** — workspaces (profiles) plus `personal` / `shared` / `global` scopes; cross-profile recall is default-deny.
@@ -71,7 +80,7 @@ SuperLocalMemory V4 combines conventional dense and lexical retrieval with graph
 - **Modes A / B / C** — local-only (A), on-device LLM enrichment (B), provider-assisted (C). An operating mode records technical locality facts; it does **not** determine EU AI Act legal compliance (that is deployment-context assessment — see [Privacy controls](#privacy-controls-and-operating-modes)).
 - **GDPR posture, retention & audit chain** — export, fail-closed cross-store erasure, retention policies, and a hash-chained audit trail. Engineering controls for compliance programs, not a legal certification.
 - **7-layer retrieval/recall stack & code graph** — multi-channel candidates (semantic, BM25, temporal, Hopfield, spreading activation) plus optional code-graph tools for blast radius and review context.
-- **MCP profiles** — `code` exposes **29** tools for installed coding agents; `full` **47**; `power` **59**; `whole` **92** (all registered). Also `core` (14), `mesh` (8), and the unrestricted default surface (47 with mesh enabled).
+- **MCP profiles** — `code` exposes **31** tools for installed coding agents; `full` **49**; `power` **61**; `whole` **94** (all registered). Also `core` (16), `mesh` (8), and the unrestricted default surface (49 with mesh enabled).
 - **Governed write path & verifiable transactions** — admission + policy control, a per-owner obligation ledger, and a hash-sealed completion manifest with a reconciler that redrives unmet obligations.
 - **Self-healing lifecycle & admin remediation** — stale locks cleared on restart; list/resolve stuck operations from CLI, MCP, or the dashboard.
 
@@ -382,7 +391,7 @@ Full docs: [docs/multi-machine.md](docs/multi-machine.md) · [docs/distributed-d
 | **Python CLI + SDK** (primary) | Activate a Python virtual environment, then `python -m pip install superlocalmemory` | Python 3.11+; the `slm` CLI and importable SDK stay inside that environment |
 | **Repository clone — macOS/Linux** | `./scripts/install.sh install` | Research/contributor path; delegates to an existing uv or pipx installation |
 | **Repository clone — Windows** | `.\scripts\install.ps1 -Action Install` | Research/contributor path; delegates to an existing uv or pipx installation |
-| **Claude Code Plugin** (WP-06) | `/plugin marketplace add qualixar/superlocalmemory` then `/plugin install superlocalmemory@qualixar` | Self-bootstraps venv, isolated SLM_DATA_DIR, additive — 14-tool core. Ships the skills/agents/hooks/commands |
+| **Claude Code Plugin** (WP-06) | `/plugin marketplace add qualixar/superlocalmemory` then `/plugin install superlocalmemory@qualixar` | Self-bootstraps venv, isolated SLM_DATA_DIR, additive — 16-tool core. Ships the skills/agents/hooks/commands |
 | **Portable / IDE connect** (WP-08) | `slm connect <ide> [--here]` | Wire any IDE without reinstalling; `slm connect claude-code` → plugin pointer |
 
 After any install path: `slm setup` → `slm doctor` → `slm warmup` (optional, pre-downloads ~500MB embedding model).
@@ -435,12 +444,12 @@ Control tool surface via `SLM_MCP_PROFILE`:
 
 | Profile | Tools | Use case |
 |:--------|:-----:|:---------|
-| `core` | 14 | Memory, session, and optimize core |
-| `code` | 29 | Core + portable Brain evidence + code-graph tools + profile switching + bounded loops |
+| `core` | 16 | Memory, session, optimize, and correction review |
+| `code` | 31 | Core + portable Brain evidence + code-graph tools + profile switching + bounded loops |
 | `mesh` | 8 | SLM-Mesh only — multi-session / multi-machine coordination |
-| `full` | 47 | Memory + portable Brain evidence + optimize + evolution + mesh + bounded loops |
-| `power` | 59 | Full + administration, lifecycle, and diagnostics |
-| `whole` | 92 | Every registered MCP tool |
+| `full` | 49 | Memory + portable Brain evidence + optimize + evolution + mesh + bounded loops |
+| `power` | 61 | Full + administration, lifecycle, and diagnostics |
+| `whole` | 94 | Every registered MCP tool |
 
 **Precedence:** `ALL` > `TOOLS` > `PROFILE` > `default`
 
@@ -451,7 +460,7 @@ slm mcp
 
 For a predictable small surface, set `core` explicitly. Leaving the variable
 unset retains the compatibility default, whose mesh tools follow the local
-mesh setting. Count-suffixed aliases remain for backward compatibility and emit a migration warning: `core14`, `code20`, `code21`, `code24`, `code28`, `code29`, `mesh8`, `full38`, `full39`, `full42`, `full46`, `full47`, `power50`, `power51`, `power54`, `power58`, `power59`, `whole81`, `whole84`, `whole91`, `whole92`. Unknown names stop startup instead of silently selecting another tool set.
+mesh setting. Count-suffixed aliases remain for backward compatibility and emit a migration warning: `core14`, `core16`, `code20`, `code21`, `code24`, `code28`, `code29`, `code31`, `mesh8`, `full38`, `full39`, `full42`, `full46`, `full47`, `full49`, `power50`, `power51`, `power54`, `power58`, `power59`, `power61`, `whole81`, `whole84`, `whole91`, `whole92`, `whole94`. Unknown names stop startup instead of silently selecting another tool set.
 
 Per-IDE configs available for Claude Code, Cursor, Windsurf, VS Code Copilot, Continue, Gemini CLI, JetBrains, Zed, and more (15 configs in `ide/configs/`). See [docs/ide-setup.md](docs/ide-setup.md).
 
@@ -473,7 +482,7 @@ then install:
 ```
 
 - Self-bootstraps a Python venv, installs all deps in an isolated `SLM_DATA_DIR`
-- Registers the 14-tool core MCP surface (`core14` profile by default)
+- Registers the 16-tool core MCP surface (`core16` profile by default; `core14` remains a compatibility alias)
 - Ships the SLM skills / agents / hooks / commands / rules
 - Additive — does not replace an existing SLM install
 - `slm connect claude-code` detects an existing plugin install and links them

package/ide/configs/codex-mcp.toml

@@ -1,4 +1,4 @@
-# SuperLocalMemory V3 - Codex CLI MCP Configuration
+# SuperLocalMemory V4.0.5 - Codex CLI MCP Configuration
 # Copyright (c) 2026 Varun Pratap Bhardwaj
 # Licensed under AGPL-3.0-or-later
 #
@@ -8,4 +8,4 @@
 [mcp_servers.superlocalmemory]
 command = "slm"
 args = ["mcp"]
-
+env = { SLM_MCP_PROFILE = "code", SLM_AGENT_ID = "codex" }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superlocalmemory",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
   "keywords": [
     "ai-memory",
@@ -70,6 +70,8 @@
     "!src/**/__pycache__/",
     "!src/**/*.pyc",
     "!src/**/*.pyo",
+    "!src/superlocalmemory/graphify-out/",
+    "!src/**/graphify-out/**",
     "ide/completions/",
     "ide/configs/",
     "ide/hooks/",

package/plugin/.claude-plugin/plugin.json

@@ -15,5 +15,5 @@
   "mcpServers": "./.mcp.json",
   "name": "superlocalmemory",
   "repository": "https://github.com/qualixar/superlocalmemory",
-  "version": "4.0.4"
+  "version": "4.0.5"
 }

package/plugin/.mcp.json

@@ -5,6 +5,7 @@
       "args": [],
       "env": {
         "SLM_MCP_PROFILE": "code",
+        "SLM_AGENT_ID": "claude_code",
         "SLM_DATA_DIR": "${CLAUDE_PLUGIN_DATA}"
       }
     }

package/plugin/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- BEGIN SuperLocalMemory v4.0.4 -->
+<!-- BEGIN SuperLocalMemory v4.0.5 -->
 
 ## SuperLocalMemory (SLM) — Agent Rules
 
@@ -39,6 +39,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
 ### Subagents
 slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR)
 
-<!-- END SuperLocalMemory v4.0.4 -->
+<!-- END SuperLocalMemory v4.0.5 -->
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-governance-advisor.md

@@ -77,4 +77,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall
 # What NOT to do
 Never session_init twice; never forget without dry-run preview; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-loop-runner.md

@@ -68,4 +68,4 @@ assessment. The gate is the authority.
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-memory-advisor.md

@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/requirements.txt

@@ -1 +1 @@
-superlocalmemory==4.0.4
+superlocalmemory==4.0.5

package/plugin/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-governance/SKILL.md

@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-graph/SKILL.md

@@ -290,7 +290,8 @@ This skill uses graph tools that are only active under the `code` MCP profile
 
 ```json
 "env": {
-  "SLM_MCP_PROFILE": "code"
+  "SLM_MCP_PROFILE": "code",
+  "SLM_AGENT_ID": "claude_code"
 }
 ```
 
@@ -311,4 +312,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-loop/SKILL.md

@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-mesh/SKILL.md

@@ -279,4 +279,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-profile/SKILL.md

@@ -104,6 +104,7 @@ In your `.mcp.json` (Claude Code) or `.codex/config.toml` (Codex):
 ```json
 "env": {
   "SLM_MCP_PROFILE": "code",
+  "SLM_AGENT_ID": "claude_code",
   "SLM_DATA_DIR": "~/.superlocalmemory"
 }
 ```
@@ -145,4 +146,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-recall/SKILL.md

@@ -236,4 +236,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-remember/SKILL.md

@@ -238,4 +238,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-scope/SKILL.md

@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-session/SKILL.md

@@ -227,4 +227,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v4.0.4 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.0.5 · Qualixar · AGPL-3.0-or-later

package/plugin-src/rules/AGENTS.md

@@ -80,12 +80,13 @@ When the SLM MCP server is unavailable, use these CLI equivalents:
 
 ---
 
-## Tool reference (core profile — 14 tools)
+## Tool reference (core profile — 16 tools)
 
-> The MCP config ships `SLM_MCP_PROFILE=code` (29 tools): the 14 core memory tools below
-> **plus** 6 code-graph tools (`build_code_graph`, `get_blast_radius`, `query_graph`,
-> `semantic_search_code`, `get_review_context`, `detect_changes`) and `switch_profile`.
-> Use `full` (47 tools) to add mesh coordination. Use `power` (59 tools) for governance
+> The MCP config ships `SLM_MCP_PROFILE=code` and `SLM_AGENT_ID=claude_code` (31 tools):
+> the 16 core memory and correction-review tools below **plus** 6 code-graph tools
+> (`build_code_graph`, `get_blast_radius`, `query_graph`, `semantic_search_code`,
+> `get_review_context`, `detect_changes`) and `switch_profile`.
+> Use `full` (49 tools) to add mesh coordination. Use `power` (61 tools) for governance
 > and audit tools. See slm-profile for profile switching.
 
 | Tool               | Signature (key params)                                                                       | Notes                                  |

package/plugin-src/skills/slm-graph/SKILL.md

@@ -290,7 +290,8 @@ This skill uses graph tools that are only active under the `code` MCP profile
 
 ```json
 "env": {
-  "SLM_MCP_PROFILE": "code"
+  "SLM_MCP_PROFILE": "code",
+  "SLM_AGENT_ID": "claude_code"
 }
 ```
 

package/plugin-src/skills/slm-profile/SKILL.md

@@ -104,6 +104,7 @@ In your `.mcp.json` (Claude Code) or `.codex/config.toml` (Codex):
 ```json
 "env": {
   "SLM_MCP_PROFILE": "code",
+  "SLM_AGENT_ID": "claude_code",
   "SLM_DATA_DIR": "~/.superlocalmemory"
 }
 ```

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "4.0.4"
+version = "4.0.6"
 description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
 license = "AGPL-3.0-or-later"

package/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "4.0.4"
+__version__ = "4.0.6"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/access/rbac.py

@@ -453,6 +453,112 @@ class RbacEngine:
     def set_require_login(self, enabled: bool) -> None:
         self.set_policy("require_login", "1" if enabled else "0")
 
+    # -- correction review policy -----------------------------------------
+
+    # Key prefix used in rbac_settings.  One entry per profile_id.
+    _CORRECTION_POLICY_PREFIX = "correction_review_policy:"
+
+    def set_correction_review_policy(
+        self,
+        profile_id: str,
+        policy: dict,
+        *,
+        authorizer_user_id: str,
+    ) -> dict:
+        """Attach a correction-case review policy for ``profile_id``.
+
+        Authorization rules
+        -------------------
+        * PERSONAL install (no users yet / user_count == 0): the machine
+          owner is the implicit admin and may attach a policy without a
+          role check.  This matches the additive / self-hosting-correct
+          principle in the RBAC design.
+        * TEAM / ENTERPRISE install (user_count > 0): the authorizer MUST
+          hold Role.ADMIN for the target profile.  Any other role raises
+          RbacError.  This prevents a MEMBER or VIEWER from escalating their
+          own correction authority.
+
+        Governance invariants (CRIT-hardened)
+        --------------------------------------
+        C1  Non-admins cannot attach a policy (role check above).
+        C2  ``automatic_application`` is never silently promoted to True.
+            The field defaults to False; an authorizer must set it
+            explicitly, and it is recorded with the authorizer's user_id and
+            a timestamp so the action is auditable.
+        C3  Personal installs do NOT auto-create a policy.  The machine
+            owner must call this method explicitly.  Until they do,
+            ``get_correction_review_policy`` returns None and BrainTruth
+            reports the policy as not_configured.
+
+        Returns the stored policy dict.
+        """
+        import json as _json
+
+        if not profile_id:
+            raise RbacError("profile_id must be non-empty.")
+        if not authorizer_user_id:
+            raise RbacError("authorizer_user_id must be non-empty.")
+
+        # CRIT-C1: enforce admin role in multi-user (team/enterprise) mode.
+        # In personal mode (zero registered users) the machine owner is the
+        # implicit admin — deny-by-default still applies to defined users.
+        user_count = self.user_count()
+        if user_count > 0:
+            role = self.get_role(authorizer_user_id, profile_id)
+            if role != Role.ADMIN:
+                raise RbacError(
+                    f"Attaching a correction review policy requires Role.ADMIN. "
+                    f"User '{authorizer_user_id}' has role={role!r} on "
+                    f"profile '{profile_id}'."
+                )
+
+        # CRIT-C2: automatic_application is never silently set to True.
+        # The authorizer must explicitly include it in the policy dict;
+        # it is still coerced to bool so a truthy non-bool value doesn't slip through.
+        auto_apply = bool(policy.get("automatic_application", False))
+
+        safe_policy = {
+            "policy_id": str(policy.get("policy_id") or _uid()),
+            "authorized_by": authorizer_user_id,
+            "authorized_at": _now(),
+            "automatic_application": auto_apply,
+            "enabled": bool(policy.get("enabled", True)),
+            "applies_to_profile": str(policy.get("applies_to_profile", profile_id)),
+        }
+        key = f"{self._CORRECTION_POLICY_PREFIX}{profile_id}"
+        self.set_policy(key, _json.dumps(safe_policy))
+        logger.info(
+            "RBAC: correction review policy attached for profile '%s' by '%s' "
+            "(automatic_application=%s)",
+            profile_id, authorizer_user_id, auto_apply,
+        )
+        return safe_policy
+
+    def get_correction_review_policy(self, profile_id: str) -> dict | None:
+        """Return the attached correction review policy for ``profile_id``.
+
+        Returns None when no policy has been attached.  The caller (host
+        integration) should pass this to
+        ``BrainTruthService(review_policy=...)``.
+
+        This method is safe to call in personal mode (no users configured).
+        """
+        import json as _json
+
+        key = f"{self._CORRECTION_POLICY_PREFIX}{profile_id}"
+        raw = self.get_policy(key)
+        if not raw:
+            return None
+        try:
+            return _json.loads(raw)
+        except (ValueError, TypeError):
+            logger.warning(
+                "RBAC: malformed correction review policy for profile '%s' — "
+                "returning None (treat as not_configured)",
+                profile_id,
+            )
+            return None
+
     # -- authorization ----------------------------------------------------
 
     def has_permission(self, user_id: str, profile_id: str,

package/src/superlocalmemory/brain/__init__.py

@@ -0,0 +1,5 @@
+"""Read-only, transport-neutral views of SuperLocalMemory's brain state."""
+
+from superlocalmemory.brain.truth import BRAIN_TRUTH_V1, BrainTruthService
+
+__all__ = ("BRAIN_TRUTH_V1", "BrainTruthService")