superlocalmemory 4.0.9 → 4.1.0

package/src/superlocalmemory/storage/schema.py

@@ -21,9 +21,12 @@ Part of Qualixar | Author: Varun Pratap Bhardwaj
 
 from __future__ import annotations
 
+import logging
 import sqlite3
 from typing import Final
 
+logger = logging.getLogger(__name__)
+
 # ---------------------------------------------------------------------------
 # Constants
 # ---------------------------------------------------------------------------
@@ -57,7 +60,9 @@ _TABLES: Final[tuple[str, ...]] = (
     "config",
     "entity_communities",
     "community_summaries",
+    "consolidated_summaries",
     "persona_summary",
+    "projection_outbox",
 )
 
 _FTS_TABLES: Final[tuple[str, ...]] = (
@@ -153,7 +158,7 @@ CREATE TABLE IF NOT EXISTS atomic_facts (
     content            TEXT NOT NULL,
     fact_type          TEXT NOT NULL DEFAULT 'semantic'
                             CHECK (fact_type IN (
-                                'episodic', 'semantic', 'opinion', 'temporal'
+                                'episodic', 'semantic', 'opinion', 'prospective'
                             )),
 
     -- Entities (JSON arrays)
@@ -190,6 +195,11 @@ CREATE TABLE IF NOT EXISTS atomic_facts (
                             CHECK (lifecycle IN (
                                 'active', 'warm', 'cold', 'archived'
                             )),
+    -- Withheld from retrieval without being destroyed. Set by repair, never
+    -- by a normal write; enforced in exactly one place,
+    -- DatabaseManager.get_facts_by_ids, which every channel's candidates are
+    -- re-authorised through and which the engine hydrates from.
+    quarantined        INTEGER NOT NULL DEFAULT 0,
     langevin_position  TEXT,
 
     -- Emotional
@@ -842,6 +852,51 @@ CREATE INDEX IF NOT EXISTS idx_comm_summ_profile
     ON community_summaries(profile_id);
 """
 
+# Display-only consolidated summaries.
+#
+# A summary of a cluster of facts is a VIEW of memory, not a memory. Between
+# v3.6.4 and 4.0.9 the fact consolidator wrote its summaries straight into
+# atomic_facts with a raw INSERT, which put model-authored prose into the
+# retrieval corpus alongside the user's own words — where it out-ranked them,
+# because those rows carried every entity in their cluster and so had more
+# entity links than any real fact.
+#
+# This table restores the boundary. community_summaries is the precedent to
+# read it by: written by one owner, read only after retrieval has finished, and
+# named by no channel. tests/test_retrieval/test_summaries_stay_out_of_recall.py
+# fails if a retrieval module so much as mentions it.
+#
+# source_earliest / source_latest are the honest dates for a derived row. A
+# summary has no observation_date of its own — it was never observed — but the
+# span of what it summarises is real, and it is what lets the dashboard say
+# which stretch of work a summary covers.
+CONSOLIDATED_SUMMARIES_DDL: Final[str] = """
+CREATE TABLE IF NOT EXISTS consolidated_summaries (
+    summary_id       TEXT PRIMARY KEY,
+    profile_id       TEXT NOT NULL,
+    entity_id        TEXT NOT NULL DEFAULT '',
+    entity_name      TEXT NOT NULL DEFAULT '',
+    content          TEXT NOT NULL,
+    source_fact_ids  TEXT NOT NULL DEFAULT '[]',
+    source_count     INTEGER NOT NULL DEFAULT 0,
+    char_count       INTEGER NOT NULL DEFAULT 0,
+    generated_by     TEXT NOT NULL DEFAULT 'extractive'
+                        CHECK (generated_by IN (
+                            'extractive', 'ollama', 'cloud', 'migrated'
+                        )),
+    scope            TEXT NOT NULL DEFAULT 'personal',
+    shared_with      TEXT,
+    source_earliest  TEXT,
+    source_latest    TEXT,
+    created_at       TEXT NOT NULL DEFAULT (datetime('now')),
+    UNIQUE (profile_id, entity_id, content)
+);
+CREATE INDEX IF NOT EXISTS idx_consolidated_summaries_profile
+    ON consolidated_summaries(profile_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_consolidated_summaries_entity
+    ON consolidated_summaries(profile_id, entity_id);
+"""
+
 # Wave Q3: progressive-abstraction top tier — one persona roll-up per profile
 # consuming the top community summaries (additive; safe on existing DBs).
 # Recall-gated (never auto-injected into hot recall) and size-bounded to avoid
@@ -861,6 +916,10 @@ CREATE TABLE IF NOT EXISTS persona_summary (
 # Ordered DDL list (tables before FTS, respects FK order)
 # ---------------------------------------------------------------------------
 
+#: Imported rather than restated so the table has exactly one definition; the
+#: module that owns the queue owns its shape.
+from superlocalmemory.storage.projection_outbox import DDL as _PROJECTION_OUTBOX_DDL
+
 _DDL_ORDERED: Final[tuple[str, ...]] = (
     _SQL_SCHEMA_VERSION,
     _SQL_PROFILES,
@@ -893,8 +952,15 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
     _SQL_ENTITY_COMMUNITIES,
     # Wave Q2: community summaries (additive; safe on existing DBs)
     _SQL_COMMUNITY_SUMMARIES,
+    CONSOLIDATED_SUMMARIES_DDL,
     # Wave Q3: persona roll-up tier (additive; safe on existing DBs)
     _SQL_PERSONA_SUMMARY,
+    # The queue that makes a graph/vector projection write survive a crash.
+    # Created here, at every engine init, rather than only by its migration:
+    # if this table is missing, facts stop being projected and the only symptom
+    # is a memory that cannot be recalled. That invariant must not be
+    # contingent on a migration pass having succeeded.
+    _PROJECTION_OUTBOX_DDL,
 )
 
 
@@ -902,6 +968,38 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
 # Public API
 # ---------------------------------------------------------------------------
 
+#: (table, column, column definition). Applied with ALTER TABLE ADD COLUMN,
+#: which SQLite offers no IF NOT EXISTS form of, so presence is checked first.
+_ADDITIVE_COLUMNS: Final[tuple[tuple[str, str, str], ...]] = (
+    ("atomic_facts", "quarantined", "INTEGER NOT NULL DEFAULT 0"),
+)
+
+
+def _add_missing_columns(conn: sqlite3.Connection) -> None:
+    """Add columns that upgraded databases predate. Idempotent.
+
+    A missing table is not an error: this runs inside create_all_tables, so the
+    table is created moments earlier in the same call, and a database old enough
+    to lack it entirely has nothing to alter.
+    """
+    for table, column, definition in _ADDITIVE_COLUMNS:
+        try:
+            present = any(
+                row[1] == column
+                for row in conn.execute(f"PRAGMA table_info({table})")
+            )
+            if not present:
+                conn.execute(
+                    f"ALTER TABLE {table} ADD COLUMN {column} {definition}"
+                )
+        except sqlite3.Error as exc:
+            # Never fatal. A store that cannot take the column keeps working;
+            # get_facts_by_ids checks for the column before filtering on it.
+            logger.warning(
+                "additive column %s.%s not applied: %s", table, column, exc,
+            )
+
+
 def create_all_tables(conn: sqlite3.Connection) -> None:
     """Create every table, index, trigger, and FTS virtual table.
 
@@ -921,6 +1019,17 @@ def create_all_tables(conn: sqlite3.Connection) -> None:
     for ddl in V32_DDL:
         conn.executescript(ddl)
 
+    # Additive columns on tables that predate them.
+    #
+    # CREATE TABLE IF NOT EXISTS cannot add a column to a table that already
+    # exists, so an upgraded database gets the column here rather than only from
+    # a migration. Doing it at every engine init makes the invariant "if
+    # atomic_facts exists then quarantined exists" hold even when the migration
+    # pass failed or was never reached — which matters because withholding a
+    # poisoned row from retrieval must not be contingent on a migration having
+    # succeeded.
+    _add_missing_columns(conn)
+
     # Seed schema version on first run.
     existing = conn.execute(
         "SELECT COUNT(*) AS n FROM schema_version"

package/src/superlocalmemory/storage/write_coordinator.py

@@ -631,10 +631,27 @@ class WriteCoordinator:
             conn.close()
 
     def _open_connection(self) -> sqlite3.Connection:
-        conn = sqlite3.connect(str(self._db_path), timeout=1.0)
+        """The coordinator's own connection, on the same waiting policy as the rest.
+
+        It waited one second while every other writer waited ten. A caller
+        legitimately holding the write lock for longer than a second -- a large
+        batch, a store during maintenance -- made the coordinator's next write
+        raise "database is locked" and lose the item, while an ordinary write
+        issued at the same moment simply waited and succeeded.
+
+        Reproduced: a 3,010 ms hold blocked the coordinator for 1,004 ms and then
+        dropped its write. There was no reason for the two to disagree, and the
+        shorter one belonged to the path whose failure loses data rather than
+        retries.
+        """
+        from superlocalmemory.storage.database import _BUSY_TIMEOUT_MS
+
+        conn = sqlite3.connect(
+            str(self._db_path), timeout=_BUSY_TIMEOUT_MS / 1000.0,
+        )
         conn.row_factory = sqlite3.Row
         conn.execute("PRAGMA foreign_keys=ON")
-        conn.execute("PRAGMA busy_timeout=1000")
+        conn.execute(f"PRAGMA busy_timeout={_BUSY_TIMEOUT_MS}")
         conn.execute("PRAGMA journal_mode=WAL")
         return conn
 

package/src/superlocalmemory/summaries/base.py

@@ -62,7 +62,7 @@ class SummaryResult:
 
 # ── coverage constants ──────────────────────────────────────────────────────
 #
-# Use these strings; the acceptance gate checks for their presence
+# Use these strings; the tests check for their presence
 # and the values must be human-interpretable without this file.
 
 COVERAGE_FULL = "full"

package/src/superlocalmemory/summaries/non_answer.py

@@ -0,0 +1,223 @@
+# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
+# Licensed under AGPL-3.0-or-later - see LICENSE file
+
+"""Refuse to store a model's non-answer as if it were a memory.
+
+A summarizer is handed a cluster of facts and asked to merge them. When the
+cluster has nothing in common the model does not fail — it answers the question
+it was asked, in prose, and that prose is indistinguishable from a summary to
+any caller that only checks ``if summary:``. On the author's own store the
+result was rows reading
+
+    "Unfortunately, there is no information available about 'Gateway', 'State',
+     'Bounded', or 'Claude' in the provided text."
+
+sitting at ranks 1, 2 and 3 for "what am I working on".
+
+WHAT THIS IS AND IS NOT
+-----------------------
+This is a **forward guard**: it stops the next such row from being written. It
+is deliberately NOT the repair for rows already stored, because it cannot be.
+Measured across the 307 retrieval-eligible consolidated rows on the author's
+store, this predicate rejects **34** and lets **273** through — because those
+273 are fluent, plausible, entirely generic prose ("The Pro and
+SuperLocalMemory (SLM) projects have made significant progress...") that no
+honest content predicate can separate from a real summary. Repairing by content
+would have cleared a ninth of the problem and declared victory. Existing rows
+are handled by provenance instead.
+
+Measured the other way, on 3,894 genuine facts, it rejects 70 — and all 70 are
+real defects, not false positives: 68 memories carry raw tool-call markup
+scraped in from a transcript, and 2 are a model's refusal that was stored as
+though it were a memory ("I cannot verify when ... ended a session. Can I help
+you with something else?"). Zero legitimate memories are rejected.
+
+So the bar here is: catch text that is *addressed to the prompt* rather than
+*about the facts*, and nothing else. Everything is anchored to the start of the
+text or to a whole leading sentence, because a genuine memory may legitimately
+contain "there is no" in the middle of a sentence.
+
+Companion to ``clean_llm_summary`` in :mod:`superlocalmemory.summaries.base`,
+which strips scaffolding *around* an answer. This one rejects text that is
+scaffolding *all the way through*. Run the stripper first: "Here is a concise
+summary paragraph: <real content>" is salvageable and must not be discarded.
+"""
+
+from __future__ import annotations
+
+import re
+
+__all__ = ["is_non_answer", "NON_ANSWER_PATTERNS", "MIN_USEFUL_CHARS"]
+
+
+#: A *merged summary* this short did not merge anything. The summarizers already
+#: refuse model output under 50 characters; this is the same floor applied to
+#: text that arrived by another route (extractive mode, or a pre-computed summary
+#: handed in by a caller).
+#:
+#: It is NOT a floor for memories in general, and ``is_non_answer`` therefore
+#: does not apply it unless a caller asks. Measured on the author's store, 730
+#: of 3,894 genuine facts are under 50 characters and every sampled one is a
+#: real memory — "2026-05-02 is the date when the session ended",
+#: "This is the case for keeping AMS." Baking this floor into the default would
+#: have made the guard reject a fifth of a user's memory as junk. The floor is
+#: the *caller's* policy about its own output, not a fact about text.
+MIN_USEFUL_CHARS = 50
+
+
+#: Each entry is (regex, why-it-is-not-a-memory). The reason travels with the
+#: pattern so a future reader can tell whether a new false positive means the
+#: pattern is wrong or the input genuinely is a non-answer.
+_PATTERN_SOURCES: tuple[tuple[str, str], ...] = (
+    (
+        r"^\W*(?:unfortunately|regrettably|sadly)\b[^.!?]*\bno\b",
+        "opens by apologising for having nothing to say",
+    ),
+    (
+        r"^\W*there\s+(?:is|are)\s+no\s+"
+        r"(?:information|mention|reference|facts?|details?|data|content)\b",
+        "states the absence of input rather than summarising input",
+    ),
+    (
+        r"\bno\s+(?:information|facts?|details?|data)\s+"
+        r"(?:is|are|was|were)?\s*(?:available|provided|given|present)\b",
+        "reports an empty input set",
+    ),
+    (
+        r"^\W*(?:i\s+(?:cannot|can't|can\s+not|am\s+unable\s+to)|"
+        r"it\s+is\s+not\s+possible\s+to)\b",
+        "declines the task",
+    ),
+    (
+        r"^\W*(?:i\s+don'?t|i\s+do\s+not)\s+(?:have|see|find)\b",
+        "declines the task in the first person",
+    ),
+    (
+        r"\bthe\s+(?:provided|given|above|following)\s+"
+        r"(?:text|facts?|context|input|information)\b",
+        "refers to the prompt, so it is talking to the asker, not about the memory",
+    ),
+    (
+        r"^\W*(?:as\s+an?\s+(?:ai|language\s+model)|i'?m\s+an?\s+ai)\b",
+        "identifies itself as a model",
+    ),
+    (
+        r"^\W*(?:please\s+)?(?:provide|share|give)\s+(?:me\s+)?"
+        r"(?:more|the|some|additional)\b",
+        "asks the user for input instead of answering",
+    ),
+    # The five below were added after running the first four against all 1,035
+    # summaries stored on the author's machine. They catch 14 rows the original
+    # set let through -- every one a measured string from that store, not a
+    # guess about what a model might say.
+    (
+        r"^\W*i\s+(?:did\s*n[o']?t|didn'?t)\s+receive\b",
+        "says it was given nothing to summarise",
+    ),
+    (
+        r"\bthere\s+(?:is|are|was|were)\s+n(?:o|ot)\s+\d+\s+facts?\b",
+        "argues with the number of facts it was asked to merge",
+    ),
+    (
+        r"\bthe\s+text\s+(?:snippet\s+)?"
+        r"(?:appears|seems|does\s+not|doesn'?t|is\s+not)\b",
+        "describes the prompt instead of summarising it",
+    ),
+    (
+        r"\bin\s+the\s+text\s+(?:provided|given|above|supplied)\b"
+        r"|\bthe\s+text\s+(?:provided|supplied)\b",
+        "refers to the prompt (word order the earlier rule missed)",
+    ),
+    (
+        r"^\W*i\s+must\s+point\s+out\b",
+        "opens with meta-commentary about the request",
+    ),
+    (
+        # "This appears to be a detailed log of progress in writing..." — the
+        # model describing the shape of what it was shown rather than saying
+        # what it says. Six of the first twelve rows the dashboard rendered
+        # opened this way. Deliberately narrower than it could be: "This is a
+        # summary of an audit session" is clumsy but it does summarise, so it
+        # is left alone.
+        r"^\W*this\s+(?:appears|seems)\s+to\s+be\b"
+        r"|^\W*this\s+text\s+(?:is|appears|seems)\b",
+        "describes the shape of the input instead of its content",
+    ),
+)
+
+#: Compiled once. ``re.IGNORECASE`` throughout — the casing of a refusal is not
+#: information. ``re.DOTALL`` is deliberately NOT set: ``[^.!?]*`` and the
+#: leading anchors are meant to stay within the opening sentence.
+NON_ANSWER_PATTERNS: tuple[tuple[re.Pattern[str], str], ...] = tuple(
+    (re.compile(src, re.IGNORECASE), why) for src, why in _PATTERN_SOURCES
+)
+
+#: Tool-call and markup fragments. A memory whose content carries these was
+#: assembled from a transcript that still had its plumbing attached; the user
+#: sees raw XML in their own memory list. Matched anywhere, not anchored,
+#: because the fragment can appear at any offset in a spliced transcript.
+_MARKUP = re.compile(
+    r"</(?:content|antml:parameter|parameter|invoke|function_calls|thinking)>"
+    r"|<(?:antml:)?(?:parameter|invoke|function_calls)\b"
+    r"|<\|(?:im_start|im_end|endoftext)\|>",
+    re.IGNORECASE,
+)
+
+
+def is_non_answer(
+    text: str | None,
+    *,
+    min_chars: int = 0,
+    model_written: bool = True,
+) -> tuple[bool, str]:
+    """Whether ``text`` is a model talking about the prompt, not a memory.
+
+    Returns ``(rejected, reason)``. ``reason`` is empty when the text is
+    acceptable, and otherwise names which rule fired — callers log it, so a
+    silent rejection never happens and a false positive is diagnosable from
+    normal logs rather than needing a repro.
+
+    ``min_chars`` defaults to **no floor**. A caller that knows its own output
+    should be long — a summarizer merging three or more facts — passes
+    :data:`MIN_USEFUL_CHARS`. See that constant for why this is not the default.
+
+    ``model_written=False`` applies only the rules that hold for text no model
+    composed: the length floor and the markup check. Every other rule here
+    describes a MODEL's behaviour — refusing, apologising, discussing the
+    prompt — and an extractive summary is the owner's own sentences reassembled,
+    so a memory that happens to say "the facts provided" would be rejected for
+    having phrased itself like a chatbot. Nothing is lost by exempting it: an
+    extractive summary cannot refuse, because there is nobody there to refuse.
+
+    Cheap and side-effect free: safe to call on every candidate write.
+
+    >>> is_non_answer("Unfortunately, there is no information available.")[0]
+    True
+    >>> is_non_answer("Varun ships SLM 4.0.10 with an auto-repair migration.")
+    (False, '')
+    >>> is_non_answer("The team has no information silo left to dismantle.")[0]
+    False
+    >>> is_non_answer("2026-05-02 is the date the session ended.")
+    (False, '')
+    >>> is_non_answer("Too short.", min_chars=MIN_USEFUL_CHARS)[0]
+    True
+    """
+    if text is None:
+        return True, "empty"
+    stripped = text.strip()
+    if not stripped:
+        return True, "empty"
+    if min_chars and len(stripped) < min_chars:
+        return True, f"shorter than {min_chars} characters"
+
+    if _MARKUP.search(stripped):
+        return True, "contains tool-call or chat-template markup"
+
+    if not model_written:
+        return False, ""
+
+    for pattern, why in NON_ANSWER_PATTERNS:
+        if pattern.search(stripped):
+            return True, why
+
+    return False, ""

package/src/superlocalmemory/trust/scorer.py

@@ -34,6 +34,31 @@ _DEFAULT_ALPHA = 1.0
 _DEFAULT_BETA = 1.0
 _DEFAULT_TRUST = 0.5
 
+#: Identities that are the absence of an identity. A caller that does not say
+#: who it is lands in one of these, and on a real store the ``unknown`` bucket
+#: had accumulated 1,708 pieces of evidence and a trust of 1.000 — the highest
+#: of any agent in the store, higher than the named agents doing the actual
+#: work. That number is the sum of everybody's behaviour, and it was being
+#: handed to whoever arrived next without a name.
+#:
+#: It matters twice over. The trust gate lets a write through at 0.3 and a
+#: delete at 0.5, so a caller with no identity cleared both by the widest
+#: margin available. And a fact with no trust record of its own inherits the
+#: trust of whoever created it, so 39 facts on that store were being ranked at
+#: the maximum promotion for having no author.
+#:
+#: A catch-all is not an identity. It reads as the neutral prior every time and
+#: accumulates nothing, which leaves the gate exactly where it was for an
+#: anonymous caller (0.5 clears both thresholds) while removing the escalation.
+ANONYMOUS_IDENTITIES: frozenset[str] = frozenset({
+    "", "unknown", "unspecified", "anonymous", "none", "null",
+})
+
+
+def is_anonymous(agent_id: str) -> bool:
+    """Whether this identifier names nobody in particular."""
+    return (agent_id or "").strip().lower() in ANONYMOUS_IDENTITIES
+
 # Signal strengths (how much each event shifts alpha/beta)
 _SIGNAL_WEIGHTS: dict[str, tuple[float, float]] = {
     # (delta_alpha, delta_beta)
@@ -68,7 +93,14 @@ class TrustScorer:
     # ------------------------------------------------------------------
 
     def get_agent_trust(self, agent_id: str, profile_id: str) -> float:
-        """Get trust score for an agent. Returns 0.5 if unknown."""
+        """Get trust score for an agent. Returns the neutral prior if unknown.
+
+        An identifier that names nobody in particular always reads as the
+        prior, whatever has been written against that bucket. See
+        ``ANONYMOUS_IDENTITIES``.
+        """
+        if is_anonymous(agent_id):
+            return _DEFAULT_TRUST
         alpha, beta = self._get_beta_params("agent", agent_id, profile_id)
         return self._compute_trust(alpha, beta)
 
@@ -131,6 +163,16 @@ class TrustScorer:
         Returns:
             Updated trust score for the agent.
         """
+        if is_anonymous(agent_id):
+            # Reputation belongs to somebody. Accumulating it against the
+            # catch-all is how that bucket reached the highest trust in the
+            # store while naming no one.
+            logger.debug(
+                "trust signal ignored: %r names nobody (signal=%s)",
+                agent_id, signal_type,
+            )
+            return _DEFAULT_TRUST
+
         weights = _SIGNAL_WEIGHTS.get(signal_type, (0.0, 0.0))
         delta_alpha, delta_beta = weights
 

package/src/superlocalmemory/ui/index.html

@@ -113,27 +113,19 @@
             </div>
         </div>
 
-        <!-- Main content tabs — Bootstrap nav-tabs row removed (v3.4.21,
-             Domain 2). Sidebar (built by ng-shell.js) is the sole
-             navigation. Hidden tab buttons below keep the Bootstrap
-             ``shown.bs.tab`` event contract alive — ng-shell's
-             ``activateTab`` dispatches on them, and brain.js / other
-             listeners fire normally. No visual output on initial paint. -->
+        <!-- The visible navigation is the sidebar, built by od-shell.js.
+             These hidden buttons exist only so od-shell's ``activateTab`` can
+             dispatch Bootstrap's ``shown.bs.tab`` on a real element for panes
+             it does not render itself — today that is dashboard-pane alone,
+             whose data reload hangs off that event. Every button here must
+             target a pane that exists: nine did not, and clicking one did
+             nothing at all. -->
         <ul class="nav nav-tabs d-none" id="mainTabs" role="tablist" aria-hidden="true">
             <li class="nav-item"><button class="nav-link active" id="dashboard-tab" data-bs-toggle="tab" data-bs-target="#dashboard-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="graph-tab" data-bs-toggle="tab" data-bs-target="#graph-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="memories-tab" data-bs-toggle="tab" data-bs-target="#memories-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="recall-lab-tab" data-bs-toggle="tab" data-bs-target="#recall-lab-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="clusters-tab" data-bs-toggle="tab" data-bs-target="#clusters-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="timeline-tab" data-bs-toggle="tab" data-bs-target="#timeline-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="brain-tab" data-bs-toggle="tab" data-bs-target="#brain-pane" type="button" role="tab" aria-controls="brain-pane"></button></li>
-            <li class="nav-item"><button class="nav-link" id="events-tab" data-bs-toggle="tab" data-bs-target="#events-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="agents-tab" data-bs-toggle="tab" data-bs-target="#agents-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="trust-tab" data-bs-toggle="tab" data-bs-target="#trust-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="lifecycle-tab" data-bs-toggle="tab" data-bs-target="#lifecycle-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="compliance-tab" data-bs-toggle="tab" data-bs-target="#compliance-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="math-health-tab" data-bs-toggle="tab" data-bs-target="#math-health-pane" type="button"></button></li>
-            <li class="nav-item"><button class="nav-link" id="ide-tab" data-bs-toggle="tab" data-bs-target="#ide-pane" type="button"></button></li>
             <li class="nav-item"><button class="nav-link" id="settings-tab" data-bs-toggle="tab" data-bs-target="#settings-pane" type="button"></button></li>
         </ul>
 
@@ -956,7 +948,7 @@
                         <h5 class="mb-0"><i class="bi bi-shield-lock text-success"></i> Compliance &amp; audit</h5>
                         <span class="badge bg-secondary" id="compliance-profile-badge">default</span>
                     </div>
-                    <p class="text-muted small mb-3">Set retention policies and access controls. In Mode A, all data stays on your device &mdash; EU AI Act compliant by default.</p>
+                    <p class="text-muted small mb-3">Set retention policies and access controls. In Mode A nothing leaves your device, which is a control your compliance programme can rely on &mdash; it is not a compliance certification, and this product does not issue one.</p>
                     <div class="row g-3 mb-3">
                         <div class="col-md-4"><div class="border rounded p-2 text-center"><div class="fw-bold fs-4" id="cp-audit-count">-</div><small class="text-muted">Audit events</small></div></div>
                         <div class="col-md-4"><div class="border rounded p-2 text-center"><div class="fw-bold fs-4" id="cp-retention-count">-</div><small class="text-muted">Retention policies</small></div></div>
@@ -1084,7 +1076,7 @@
                             <div class="btn-group w-100" role="group">
                                 <input type="radio" class="btn-check" name="settings-mode-radio" id="mode-a-radio" value="a" checked>
                                 <label class="btn btn-outline-success" for="mode-a-radio">
-                                    <strong>Mode A</strong><br><small>Zero Cloud — EU AI Act</small>
+                                    <strong>Mode A</strong><br><small>Zero Cloud</small>
                                 </label>
                                 <input type="radio" class="btn-check" name="settings-mode-radio" id="mode-b-radio" value="b">
                                 <label class="btn btn-outline-info" for="mode-b-radio">
@@ -1585,7 +1577,6 @@
     <!-- Neural Glass shell (v3.4.21 restructured) -->
     <script src="static/js/ng-health.js?v=345"></script>
     <script src="static/js/ng-ingestion.js?v=345"></script>
-    <script src="static/js/ng-entities.js?v=3410"></script>
     <script src="static/js/ng-skills.js?v=3411"></script>
     <script src="static/js/ng-mesh.js?v=345"></script>
     <!-- OD Shell v1.0 — replaces ng-shell.js; CSP-safe single-page tab switching -->
@@ -1604,7 +1595,7 @@
     <script src="static/js/od-ops-health.js?v=400"></script>
     <script src="static/js/od-team.js?v=379"></script>
     <script src="static/js/od-graph.js?v=6812bf6c"></script>
-    <script src="static/js/od-memories.js?v=022ff653"></script>
+    <script src="static/js/od-memories.js?v=997f1674"></script>
     <script src="static/js/od-entities.js?v=379"></script>
     <!-- Multi-Agent Memory pane (v3.8.0): visualises memory written by multiple agents -->
     <script src="static/js/od-agents.js?v=c75ff3c2"></script>

package/src/superlocalmemory/ui/js/event-delegation.js

@@ -38,7 +38,18 @@
     'load-agents': () => loadAgents(),
     'load-clusters': () => loadClusters(),
     'load-compliance': () => loadCompliance(),
-    'load-entity-explorer': () => loadEntityExplorer(),
+    // Re-renders through the current renderer. The button used to call a
+    // function from a superseded implementation of this pane, which was
+    // removed; naming it directly would have made Refresh throw.
+    'load-entity-explorer': () => {
+      const pane = document.getElementById('entities-pane');
+      if (pane && typeof window.odRenderEntities === 'function') {
+        pane.innerHTML = '';
+        window.odRenderEntities(pane);
+        return;
+      }
+      if (typeof window.loadEntityExplorer === 'function') window.loadEntityExplorer();
+    },
     'load-graph': () => loadGraph(),
     'load-health-monitor': () => loadHealthMonitor(),
     'load-ingestion-status': () => loadIngestionStatus(),

package/src/superlocalmemory/ui/js/od-health.js

@@ -216,12 +216,33 @@
     var strip = document.getElementById('od-h-status');
     if (!strip) return;
 
-    // Card 1: Daemon — from /health
-    var daemonCls = (healthData && healthData.status === 'ok') ? 'ok' : 'warn';
-    var daemonVal = daemonCls === 'ok' ? 'Healthy' : 'Degraded';
+    // Card 1: Daemon — from /health.
+    // `status` is the literal string "ok" on every reply the daemon is alive
+    // enough to send, so reading it said "Healthy" for a daemon that had not
+    // finished starting, or whose search was not answering. `runtime_state` is
+    // the field that actually varies.
+    var runtime = healthData ? String(healthData.runtime_state || '') : '';
+    var RUNTIME_LABELS = {
+      serving_full: 'Healthy',
+      serving_degraded: 'Degraded',
+      warming: 'Starting up',
+      not_ready: 'Not ready'
+    };
+    var daemonCls = !healthData ? 'warn'
+      : (runtime === 'serving_full' ? 'ok'
+        : (runtime === 'warming' ? 'neutral' : 'warn'));
+    var daemonVal = !healthData ? 'Unreachable'
+      : (RUNTIME_LABELS[runtime] || (healthData.status === 'ok' ? 'Healthy' : 'Degraded'));
     var daemonDetail = healthData
       ? 'port 8765 · v' + esc(String(healthData.version || '?'))
       : 'daemon unreachable';
+    if (healthData && healthData.projection && healthData.projection.behind) {
+      // The graph copy being behind is not a daemon fault, and it does change
+      // what a search returns, so it belongs on the card the operator reads.
+      daemonDetail += ' · graph copy ' + esc(String(healthData.projection.depth || 0))
+        + ' behind';
+      if (daemonCls === 'ok') daemonCls = 'neutral';
+    }
 
     // Card 2: Memory DB — from /api/stats
     var dbMb = (statsData && statsData.overview)
@@ -239,10 +260,11 @@
     var mathVal = mathCls === 'ok' ? 'Active' : (mathOverall ? esc(mathOverall) : 'Unknown');
     var mathDetail = esc(String(mathLayerCount)) + ' / 3 layers online';
 
-    // Card 4: Mesh broker — TODO: no /api/mesh/* endpoint confirmed
+    // Card 4: Mesh broker. There is no endpoint for this yet, so the card says
+    // so rather than implying something was measured and came back unknown.
     var meshCls = 'neutral';
-    var meshVal = 'Unknown';
-    var meshDetail = 'no endpoint — configure mesh to enable'; // TODO: wire to /api/mesh/status
+    var meshVal = 'Not set up';
+    var meshDetail = 'coordinating several machines is not configured here';
 
     var CARDS = [
       { label: 'Daemon',       cls: daemonCls, value: daemonVal, detail: daemonDetail },