superlocalmemory 4.1.13 → 4.1.14

package/src/superlocalmemory/cli/gdpr_io.py

@@ -1,109 +0,0 @@
-# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
-# Licensed under AGPL-3.0-or-later - see LICENSE file
-# Part of SuperLocalMemory V4 | https://qualixar.com | https://varunpratap.com
-
-"""Shared I/O helpers and compliance constants for ``slm gdpr`` subcommands.
-
-Separated from gdpr_cmd.py to honour the 800-line file cap (coding-style.md).
-All symbols here are internal (prefixed ``_``) or ALL_CAPS constants.
-"""
-
-from __future__ import annotations
-
-import json as _json
-import sys
-from pathlib import Path
-from typing import Any
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Output helpers
-# ─────────────────────────────────────────────────────────────────────────────
-
-def _die(message: str, code: int = 1) -> None:
-    """Print an actionable error to stderr and exit non-zero."""
-    print(f"error: {message}", file=sys.stderr)
-    sys.exit(code)
-
-
-def _print_json(data: Any) -> None:
-    """Emit pretty-printed JSON to stdout (evidence-pipeline format)."""
-    print(_json.dumps(data, indent=2, default=str))
-
-
-def _json_envelope(
-    command: str, *, data: dict | None = None, error: dict | None = None
-) -> dict:
-    """Build the standard agent-native JSON envelope used across all SLM CLIs."""
-    from superlocalmemory.cli.json_output import _get_version
-
-    env: dict = {
-        "success": error is None,
-        "command": command,
-        "version": _get_version(),
-    }
-    if error is not None:
-        env["error"] = error
-    else:
-        env["data"] = data if data is not None else {}
-    return env
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Path helpers
-# ─────────────────────────────────────────────────────────────────────────────
-
-def _data_root() -> Path:
-    """Resolve the canonical SLM data root (honours SLM_DATA_DIR env var)."""
-    from superlocalmemory.infra.data_root import canonical_data_root
-
-    return canonical_data_root()
-
-
-def _db_path() -> Path:
-    return _data_root() / "memory.db"
-
-
-def _audit_chain_path() -> Path:
-    return _data_root() / "audit_chain.db"
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# GDPR compliance constants (DPO-facing, surfaced in ``status`` output)
-# ─────────────────────────────────────────────────────────────────────────────
-
-# Known gaps in this release — reported honestly so a DPO can plan remediation.
-# Gaps C1 and C2 (cross-device erase verification and audit-log replay) remain open.
-KNOWN_GAPS = [
-    {
-        "ref": "C1",
-        "summary": "backups/ directory is outside erasure scope",
-        "detail": (
-            "Up to 10 rotating snapshots of memory.db, learning.db and "
-            "related DB files survive an Art.17 erasure.  The erasure receipt "
-            "records a 'backup_obligation' so the obligation is tracked, but "
-            "the snapshots are not automatically purged.  Snapshots are "
-            "re-erased on restore."
-        ),
-    },
-    {
-        "ref": "C2",
-        "summary": "code_graph.db is not in erasure scope",
-        "detail": (
-            "Repository paths, file names and symbol names (identifying data "
-            "in a work context) are stored in code_graph.db.  This file is "
-            "covered by compliance/gdpr.py but the per-table discovery "
-            "operates on the main memory.db only."
-        ),
-    },
-]
-
-# Art. coverage flags that compliance/gdpr.py actively implements.
-ART_COVERAGE = {
-    "art15_right_to_access": True,
-    "art17_right_to_erasure": True,
-    "art20_right_to_portability": True,
-    "backup_scope": "outstanding_obligation_recorded_on_receipt",
-    "audit_chain": "HMAC-chained tamper-evident",
-    "erasure_fails_closed": True,
-}

package/src/superlocalmemory/cli/help_cmd.py

@@ -1,197 +0,0 @@
-# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
-# Licensed under AGPL-3.0-or-later - see LICENSE file
-# Part of SuperLocalMemory V3 | https://qualixar.com | https://varunpratap.com
-
-"""Handler for ``slm help-optimize``."""
-
-from __future__ import annotations
-
-import sys
-from argparse import Namespace
-
-_HELP_SECTIONS: dict[str, str] = {
-    "header": """\
-SLM v3.6 Optimize — Developer Reference
-========================================
-Every feature is configurable via CLI. UI provides the same controls for
-non-technical users. All CLI commands write config at runtime — daemon
-hot-reloads within 2 seconds. No restart required.
-""",
-    "optimize": """\
-slm optimize — Optimize module control
----------------------------------------
-  slm optimize status              Show all Optimize settings
-  slm optimize on                  Enable cache + compress
-  slm optimize off                 Disable cache + compress (proxy keeps running)
-  slm optimize savings [--since N] Token/cost savings report (default: 7 days)
-    --since N                      Days to look back (integer, default 7)
-    --provider P                   Filter by: anthropic|openai|gemini
-  All: --json                      Machine-readable JSON output
-""",
-    "cache": """\
-slm cache — Cache control
---------------------------
-  slm cache status                 Entry count, DB size, TTLs, hit rate
-  slm cache clear                  Delete all entries for this tenant
-  slm cache invalidate --tag <t>   Delete entries whose tag array contains <t>
-  slm cache ttl --set <s>          Set exact-cache TTL (seconds)
-           --semantic <s>          Set semantic-cache TTL (seconds)
-  slm cache semantic on|off        Enable/disable semantic cache
-  All: --json  --tenant <id>
-
-  TTL examples:
-    slm cache ttl --set 3600        # 1 hour exact cache
-    slm cache ttl --set 86400       # 24 hour exact cache (default)
-    slm cache ttl --semantic 7200   # 2 hour semantic cache
-""",
-    "compress": """\
-slm compress — Compression control
------------------------------------
-  slm compress status              Show compression mode, per-channel state
-  slm compress mode safe|aggressive  Set compression aggressiveness
-  slm compress code on|off         Enable/disable code/JSON compression
-  slm compress prose on|off        Enable/disable prose compression
-  slm compress ccr on|off          Enable/disable Compressed Context Retrieval
-  All: --json
-""",
-    "safety": """\
-COMPRESSION SAFETY WARNING
----------------------------
-  Safe mode (default):
-    - Code/JSON compression: extractive, structure-preserving, lossless.
-    - Prose compression: DISABLED in safe mode. Enable manually.
-    - CCR: DISABLED by default. Originals stored for reversible retrieval.
-    - This mode is production-safe for all use cases.
-
-  Aggressive mode:
-    !!  RISK: May reduce output fidelity. Use with caution.  !!
-    - Prose compression: LLMLingua-2-style extractive summarization.
-    - May omit nuance, hedges, or low-salience context.
-    - DO NOT use for:
-        - Code generation or code review
-        - Legal, compliance, or regulatory text
-        - Math, formulas, or structured data generation
-        - Any task requiring exact reproduction of input
-    - Suitable for:
-        - Open-ended brainstorming
-        - Summarization of long documents
-        - Casual conversation and exploration
-    - To revert: slm compress mode safe
-""",
-    "proxy": """\
-slm proxy — Optimization proxy
---------------------------------
-  slm proxy [--port P] [--provider anthropic|openai|gemini]
-            [--no-compress] [--semantic] [--json]
-
-  Starts the SLM proxy (or reports existing). Proxy intercepts LLM calls,
-  applies cache lookup, and optionally compresses context before forwarding.
-
-  Default port: 8765
-  Anthropic surface:  http://127.0.0.1:8765
-  OpenAI surface:     http://127.0.0.1:8765/v1
-""",
-    "agents": """\
-PER-AGENT SETUP RECIPES
-------------------------
-
---- Claude Code (ANTHROPIC_BASE_URL) ---
-  The simplest redirect. Set this env var before launching Claude Code.
-
-  Option A — environment variable (per-session):
-    export ANTHROPIC_BASE_URL=http://127.0.0.1:8765
-    claude                        # Claude Code picks up the env var
-
-  Option B — slm wrap (one command, recommended):
-    slm wrap claude               # starts proxy + sets env + launches claude
-
-  Option C — permanent (add to ~/.zshrc or ~/.bashrc):
-    echo 'export ANTHROPIC_BASE_URL=http://127.0.0.1:8765' >> ~/.zshrc
-    source ~/.zshrc
-
-  Verify: slm optimize status  ->  look for "proxy: running on :8765"
-
---- Antigravity (config.toml base_url) ---
-  Antigravity reads base_url from its config.toml.
-  Default config location: ~/.config/antigravity/config.toml
-
-  Add or update this line under the [api] section:
-    [api]
-    base_url = "http://127.0.0.1:8765"
-
-  Or use slm wrap (if supported in your version):
-    slm wrap antigravity
-
-  Verify: antigravity --debug  ->  look for "base_url: http://127.0.0.1:8765"
-
---- Generic OpenAI-compatible clients (Cline, Cursor, Aider, OpenCode) ---
-  Any client that accepts an OpenAI base_url can use the /v1 surface:
-    base_url = http://127.0.0.1:8765/v1
-    api_key  = (use your real provider key — proxy forwards it)
-
-  Aider:
-    aider --openai-api-base http://127.0.0.1:8765/v1
-
-  Cline (VS Code settings.json):
-    "cline.openAiBaseUrl": "http://127.0.0.1:8765/v1"
-
-  Cursor (Settings > Models > Base URL):
-    http://127.0.0.1:8765/v1
-
-  OpenCode / other CLI tools:
-    OPENAI_BASE_URL=http://127.0.0.1:8765/v1 opencode
-
-  Or use slm wrap:
-    slm wrap aider [-- <aider args>]
-    slm wrap cursor
-    slm wrap opencode
-
---- SDK adapters (Python) ---
-  from superlocalmemory.optimize.adapters.openai_adapter import withSLM
-  from openai import OpenAI
-  client = withSLM(OpenAI())        # same interface as OpenAI() — zero API change
-
-  from superlocalmemory.optimize.adapters.anthropic_adapter import withSLM
-  from anthropic import Anthropic
-  client = withSLM(Anthropic())
-
-  NOTE: withSLM() is a pass-through when optimize is OFF.
-  No behavioral change until you run: slm optimize on
-""",
-    "footer": """\
-More commands:
-  slm help-optimize cache      Cache subcommand reference
-  slm help-optimize compress   Compress reference + safety warning
-  slm help-optimize agents     Per-agent setup recipes
-  slm help-optimize safety     Compression safety warning only
-
-Documentation: https://superlocalmemory.com
-GitHub:        https://github.com/qualixar/superlocalmemory
-AI Reliability Engineering by @varunPbhardwaj — https://qualixar.com
-""",
-}
-
-
-def cmd_help_optimize(args: Namespace) -> None:
-    """Print the full slm help-optimize page or a topic-specific section."""
-    topic = getattr(args, "topic", None)
-    no_pager = getattr(args, "no_pager", False)
-
-    if topic and topic not in _HELP_SECTIONS:
-        print(f"Unknown topic: {topic}."
-              f" Topics: {' '.join(k for k in _HELP_SECTIONS if k != 'footer')}")
-        sys.exit(1)
-
-    if topic:
-        text = _HELP_SECTIONS[topic]
-    else:
-        text = "\n".join(_HELP_SECTIONS.values())
-
-    if no_pager or not sys.stdout.isatty():
-        print(text)
-    else:
-        try:
-            import pydoc
-            pydoc.pager(text)
-        except Exception:
-            print(text)

package/src/superlocalmemory/cli/host_upgrades.py

@@ -1,189 +0,0 @@
-"""Consented, non-destructive upgrades for existing host integrations.
-
-Package installation owns the SLM executable.  This module owns the separate
-operator-approved step that refreshes SLM-owned integration assets.  It never
-discovers a host and edits it implicitly: preview is the default and apply
-requires either explicit hosts or an explicit all-detected acknowledgement.
-"""
-
-from __future__ import annotations
-
-from argparse import Namespace
-from pathlib import Path
-from typing import Any
-
-
-def validate_upgrade_request(*, apply: bool, hosts: list[str], all_detected: bool) -> None:
-    """Reject unbounded mutations before any host filesystem access."""
-    if apply and not hosts and not all_detected:
-        raise ValueError("--apply requires at least one --host or --all-detected")
-    if hosts and all_detected:
-        raise ValueError("choose explicit --host values or --all-detected, not both")
-
-
-def cmd_upgrade_hosts(args: Namespace) -> None:
-    """Preview or explicitly apply host integration refreshes."""
-    hosts = list(getattr(args, "hosts", []) or [])
-    apply = bool(getattr(args, "apply", False))
-    all_detected = bool(getattr(args, "all_detected", False))
-    try:
-        validate_upgrade_request(apply=apply, hosts=hosts, all_detected=all_detected)
-    except ValueError as exc:
-        print(f"Error: {exc}")
-        return
-
-    from superlocalmemory.hooks.portable_kit import supported_ides
-
-    detected = set(_detected_hosts())
-    targets = sorted(detected) if all_detected else (hosts or sorted(detected))
-    managed_hosts = set(supported_ides()) | {"claude-code", "hermes"}
-    unknown = sorted(set(targets) - managed_hosts)
-    if unknown:
-        print(f"Error: unsupported host(s): {', '.join(unknown)}")
-        return
-    if not targets:
-        print("No existing SLM host integrations were detected.")
-        print("Run `slm setup` for first-time setup, or use `--host <name>` to target one host.")
-        return
-
-    operation = "Applying" if apply else "Previewing"
-    print(f"{operation} SLM host upgrades: {', '.join(targets)}")
-    if not apply:
-        print("No host files will be changed. Re-run with --apply and explicit targets to proceed.")
-
-    for host in targets:
-        result = _upgrade_host(host, apply=apply, already_integrated=host in detected)
-        status = result.get("status", "error")
-        detail = result.get("detail", "")
-        print(f"  [{status}] {host}: {detail}")
-
-    if apply:
-        print("Restart affected host applications, then run `slm doctor` to verify SLM itself.")
-
-
-def _detected_hosts(home: Path | None = None) -> list[str]:
-    """Return only hosts already containing an SLM-owned integration block."""
-    from superlocalmemory.hooks.portable_kit import (
-        IDE_MATRIX,
-        _load_config,
-        _ParseError,
-    )
-
-    effective_home = home or Path.home()
-    detected: list[str] = []
-    for host, desc in IDE_MATRIX.items():
-        if not desc.fmt:
-            continue
-        path = effective_home / desc.mcp_path_global
-        try:
-            data = _load_config(path, desc.fmt)
-        except _ParseError:
-            continue
-        if _contains_slm_block(data, desc):
-            detected.append(host)
-
-    # Claude Code's plugin is host-managed. A local SLM hook installation is
-    # the durable evidence that its SLM integration exists; upgrading the
-    # plugin remains an explicit Claude Code marketplace action.
-    try:
-        from superlocalmemory.hooks.claude_code_hooks import check_status
-
-        if check_status().get("installed"):
-            detected.append("claude-code")
-    except Exception:
-        pass
-
-    # Hermes has a native YAML mapping rather than the portable-kit schema.
-    # Detect it for reporting, but never overwrite it with an invented format.
-    hermes_path = effective_home / ".hermes" / "config.yaml"
-    try:
-        hermes = _load_config(hermes_path, "yaml")
-        servers = hermes.get("mcp_servers", {})
-        if isinstance(servers, dict) and "superlocalmemory" in servers:
-            detected.append("hermes")
-    except _ParseError:
-        pass
-    return sorted(set(detected))
-
-
-def _contains_slm_block(data: dict[str, Any], desc: Any) -> bool:
-    if desc.fmt == "yaml":
-        providers = data.get(desc.server_key, [])
-        return isinstance(providers, list) and any(
-            isinstance(item, dict)
-            and item.get("params", {}).get("serverName") == "superlocalmemory"
-            for item in providers
-        )
-    servers = data.get(desc.server_key, {})
-    return isinstance(servers, dict) and "superlocalmemory" in servers
-
-
-def _upgrade_host(host: str, *, apply: bool, already_integrated: bool) -> dict[str, str]:
-    """Refresh assets without degrading a working, host-specific MCP block."""
-    if host == "claude-code":
-        return {
-            "status": "plugin-managed",
-            "detail": "run `claude plugin update superlocalmemory@qualixar` in Claude Code",
-        }
-
-    if host == "hermes":
-        if already_integrated:
-            return {
-                "status": "verified",
-                "detail": "existing native Hermes SLM mapping preserved",
-            }
-        return {
-            "status": "blocked",
-            "detail": "Hermes is not connected; follow docs/ide-setup.md before retrying",
-        }
-
-    if host == "codex" and already_integrated:
-        from superlocalmemory.hooks.codex_assets import install_assets
-        from superlocalmemory.hooks.codex_hooks import install_hooks
-
-        assets, hooks = install_assets(dry_run=not apply), install_hooks(dry_run=not apply)
-        if not assets.get("success") or not hooks.get("success"):
-            return {"status": "blocked", "detail": "could not refresh SLM-owned Codex assets"}
-        action = "would refresh" if not apply else "refreshed"
-        # Name what is actually written.  Saying "refreshed skills" while the
-        # copies under ~/.agents/skills are not what this Codex reads turns a
-        # no-op into a success report.
-        written = assets.get("skills_written") or []
-        agents_written = assets.get("agents_written") or []
-        preserved = assets.get("agents_preserved") or []
-        elsewhere = assets.get("skills_read_elsewhere") or []
-
-        detail = f"{action} {len(written)} skill file(s) and {len(agents_written)} subagent file(s)"
-        if written:
-            detail += f" under {Path(written[0]).parent.parent}"
-        detail += "; hooks refreshed; MCP block preserved"
-        if preserved:
-            names = ", ".join(Path(x).name for x in preserved)
-            detail += f"; preserved {len(preserved)} subagent file(s) not written by SLM ({names})"
-        if elsewhere:
-            detail += (
-                f"; {len(elsewhere)} skill path(s) under ~/.codex/skills resolve outside "
-                f"the written location and were NOT refreshed ({Path(elsewhere[0]).parent})"
-            )
-        return {"status": "updated" if apply else "preview", "detail": detail}
-
-    if already_integrated:
-        return {
-            "status": "verified",
-            "detail": "existing SLM MCP block preserved; no portable host assets require refresh",
-        }
-
-    # An explicitly named, not-yet-connected host is a first-time connection.
-    # This branch is never reached by --all-detected.
-    from superlocalmemory.hooks.portable_kit import connect_ide
-
-    result = connect_ide(host, dry_run=not apply)
-    if result.get("error"):
-        return {"status": "blocked", "detail": str(result["error"])}
-    action = result.get("mcp_config", "unknown")
-    if not apply:
-        return {"status": "preview", "detail": f"would refresh SLM MCP block ({action})"}
-    return {"status": "updated", "detail": f"SLM MCP block {action}"}
-
-
-__all__ = ("cmd_upgrade_hosts", "validate_upgrade_request")