superlocalmemory 4.1.13 → 4.1.14

package/pyproject.toml

@@ -1,250 +0,0 @@
-[project]
-name = "superlocalmemory"
-version = "4.1.13"
-description = "Local-first agent memory with auditable hybrid retrieval"
-readme = "README.md"
-license = "AGPL-3.0-or-later"
-license-files = ["LICENSE", "NOTICE"]
-requires-python = ">=3.11,<3.15"
-authors = [
-    {name = "Varun Pratap Bhardwaj", email = "admin@superlocalmemory.com"},
-]
-keywords = [
-    "ai-memory", "mcp-server", "local-first", "agent-memory",
-    "information-geometry", "privacy-first", "eu-ai-act",
-]
-classifiers = [
-    "Development Status :: 4 - Beta",
-    "Intended Audience :: Developers",
-    "Operating System :: MacOS",
-    "Operating System :: Microsoft :: Windows",
-    "Operating System :: POSIX :: Linux",
-    "Programming Language :: Python :: 3.11",
-    "Programming Language :: Python :: 3.12",
-    "Programming Language :: Python :: 3.13",
-    "Programming Language :: Python :: 3.14",
-    "Topic :: Scientific/Engineering :: Artificial Intelligence",
-    "Topic :: Software Development :: Libraries :: Python Modules",
-]
-
-dependencies = [
-    # All versions hard-pinned to the verified-good combination.
-    # Mixing versions outside these pins triggers per-batch memory
-    # blow-up in the embedding worker on Apple Silicon and breaks
-    # recall/remember latency targets. Update only after benchmarking.
-    "httpx==0.28.1",
-    "numpy==2.4.4",
-    "scipy==1.17.1",
-    "networkx==3.6.1",
-    "mcp==2.0.0",
-    "jsonschema==4.26.0",
-    "python-dateutil==2.9.0.post0",
-    "rank-bm25==0.2.2",
-    "vadersentiment==3.3.2",
-    "einops==0.8.2",
-    "fastapi[all]==0.139.2",
-    "uvicorn==0.46.0",
-    "websockets==16.0",
-    "zeroconf>=0.140",
-    "lightgbm==4.6.0",
-    "orjson==3.11.9",
-    # TOML writer for portable-kit IDE config (codex uses .codex/config.toml).
-    # stdlib tomllib is read-only; without this, connect_ide('codex') silently
-    # fails to write the MCP server block.
-    "tomli-w==1.2.0",
-    "tree-sitter==0.25.2",
-    "tree-sitter-language-pack==0.13.0",
-    "rustworkx==0.17.1",
-    "watchdog==5.0.3",
-    "psutil==7.2.2",
-    "structlog==25.5.0",
-    "portalocker==3.2.0",
-    # Capture-file ACLs are applied through the verified Windows file handle.
-    # Keep this direct: portalocker also needs pywin32 today, but capture must
-    # not depend on that transitive implementation detail.
-    "pywin32==311; sys_platform == 'win32'",
-    "cryptography==50.0.0",
-    # Semantic search + cross-encoder reranker. Do NOT use
-    # sentence-transformers[onnx] — its extras pull optimum which
-    # overrides the sentence-transformers pin via transitive deps.
-    # Pin all three explicitly instead.
-    "sentence-transformers==5.3.0",
-    "optimum==2.1.0",
-    "onnxruntime==1.24.4",
-    "transformers==5.5.4",
-    "huggingface_hub==1.5.0",
-    "torch==2.11.0",
-    "scikit-learn==1.8.0",
-    # Vector KNN extension for the semantic channel.
-    "sqlite-vec==0.1.9",
-    # Scale Engine projections.  These ship with the base install so every
-    # fresh Python user can prepare them on day one.  They remain inactive
-    # until `slm db scale prepare -> verify -> promote` proves parity with
-    # canonical SQLite; dependency installation never migrates user data.
-    "lancedb==0.30.2",
-    # Cozo's on-disk format is not forward-compatible across these native
-    # bindings. Existing SLM graph stores were created by 0.3.0; upgrading the
-    # wheel without an export/import migration makes daemon startup panic.
-    "pycozo[embedded]==0.3.0",
-    # v3.6.10: LLMLingua-2 prose compression (aggressive mode, opt-in at runtime).
-    # Hard dependency so `pip install superlocalmemory` ships compression-ready;
-    # the ~560MB model downloads on first setup/warmup (fail-open). Verified the
-    # pin does NOT disturb the transformers/torch/numpy pins above.
-    "llmlingua==0.2.2",
-    # LLMLingua pulls NLTK transitively. Pin above the disclosed traversal
-    # advisories so clean installs cannot resolve to the vulnerable 3.9.x line.
-    "nltk==3.10.0",
-]
-
-[project.optional-dependencies]
-# `search` is now a no-op alias kept for backwards compatibility; the deps
-# moved into core in v3.4.18. ``pip install superlocalmemory[search]`` still
-# works but installs nothing extra.
-search = [
-    # Same hard pin as core deps — no [onnx] extra.
-    "sentence-transformers==5.3.0",
-    "optimum==2.1.0",
-    "einops==0.8.2",
-    "torch==2.11.0",
-    "scikit-learn==1.8.0",
-    "onnxruntime==1.24.4",
-]
-ui = [
-    "fastapi[all]>=0.135.1",
-    "uvicorn>=0.42.0",
-    "python-multipart>=0.0.6,<1.0.0",
-]
-injection = [
-    "tiktoken>=0.8.0",
-]
-learning = [
-    "lightgbm>=4.0.0",
-]
-performance = [
-    "orjson>=3.9.0",
-]
-lancedb = [
-    "lancedb==0.30.2",
-]
-cozo = [
-    "pycozo[embedded]==0.3.0",
-]
-# Backwards-compatible explicit install target for automation and docs.  The
-# packages are also base dependencies from v3.7 onward.
-scale = [
-    "lancedb==0.30.2",
-    "pycozo[embedded]==0.3.0",
-]
-ingestion = [
-    "keyring>=25.0.0",
-    "google-auth-oauthlib>=1.2.0",
-    "google-api-python-client>=2.100.0",
-    "icalendar>=6.0.0",
-]
-full = [
-    "superlocalmemory[search,ui,learning,performance,ingestion,injection,scale]",
-]
-dev = [
-    "pytest>=8.0",
-    "pytest-cov>=4.1",
-    "pytest-asyncio>=0.21",
-    "sqlite-vec>=0.1.6",
-    # Starlette TestClient's maintained synchronous backend. Test-only: the
-    # product runtime continues to use the separately pinned httpx client.
-    "httpx2==2.5.0",
-]
-
-[project.urls]
-Homepage = "https://superlocalmemory.com"
-Repository = "https://github.com/qualixar/superlocalmemory"
-Documentation = "https://github.com/qualixar/superlocalmemory/wiki"
-Issues = "https://github.com/qualixar/superlocalmemory/issues"
-
-[project.scripts]
-slm = "superlocalmemory.cli.main:main"
-
-[build-system]
-requires = ["setuptools>=77.0.3", "wheel"]
-build-backend = "setuptools.build_meta"
-
-[tool.setuptools.packages.find]
-where = ["src"]
-
-[tool.setuptools.package-data]
-superlocalmemory = ["ui/**/*", "optimize/NOTICE", "contracts/schemas/*.json"]
-
-[tool.setuptools.data-files]
-"share/superlocalmemory/codex/skills/slm-cache" = ["plugin-src/skills/slm-cache/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-compress" = ["plugin-src/skills/slm-compress/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-governance" = ["plugin-src/skills/slm-governance/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-graph" = ["plugin-src/skills/slm-graph/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-loop" = ["plugin-src/skills/slm-loop/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-mesh" = ["plugin-src/skills/slm-mesh/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-profile" = ["plugin-src/skills/slm-profile/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-recall" = ["plugin-src/skills/slm-recall/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-remember" = ["plugin-src/skills/slm-remember/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-scope" = ["plugin-src/skills/slm-scope/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-session" = ["plugin-src/skills/slm-session/SKILL.md"]
-"share/superlocalmemory/codex/skills/slm-status" = ["plugin-src/skills/slm-status/SKILL.md"]
-"share/superlocalmemory/codex/agents" = [
-    "plugin-src/agents/slm-memory-advisor.md",
-    "plugin-src/agents/slm-optimize-advisor.md",
-]
-"share/superlocalmemory/portable-kit/rules" = ["plugin-src/rules/AGENTS.md"]
-
-[tool.pytest.ini_options]
-testpaths = ["tests"]
-pythonpath = ["src"]
-addopts = "-p no:cacheprovider -p no:subtests -m 'not slow and not ollama and not benchmark and not native'"
-asyncio_mode = "auto"
-faulthandler_timeout = 0
-markers = [
-    "slow: marks tests as slow — real engine/model loading (run with: pytest -m slow)",
-    "ollama: marks tests that require a running Ollama instance",
-    "benchmark: marks CI-only evo-memory benchmark tests (run with: pytest tests/test_benchmarks/ -m benchmark)",
-    "native: marks optional native-backend tests that run in a dedicated process lane",
-    "asyncio: marks tests as async — runs via pytest-asyncio (auto-mode in this project)",
-]
-filterwarnings = [
-    "ignore::DeprecationWarning:vaderSentiment",
-]
-
-[tool.coverage.run]
-source = ["superlocalmemory"]
-omit = [
-    "*/tests/*",
-    "*/ui/*",
-    "*/cli/*",
-    "*/__main__.py",
-]
-
-[tool.coverage.report]
-fail_under = 0
-show_missing = true
-exclude_lines = [
-    "pragma: no cover",
-    "if TYPE_CHECKING:",
-    "if __name__ ==",
-    "@overload",
-]
-
-[tool.coverage.html]
-directory = "htmlcov"
-
-[tool.ruff]
-target-version = "py311"
-line-length = 100
-src = ["src"]
-
-[tool.ruff.lint]
-select = ["E", "F", "I", "W"]
-
-[dependency-groups]
-dev = [
-    "build>=1.4.0",
-    "httpx2==2.5.0",
-    "pytest>=9.0.2",
-    "pytest-asyncio>=0.21",
-    "twine>=6.2.0",
-    "wheel==0.46.3",
-]

package/src/superlocalmemory/__init__.py

@@ -1,82 +0,0 @@
-"""SuperLocalMemory — information-geometric agent memory.
-
-v3.6.9: all 7 retrieval layers at full quality (Hopfield@1000, entity_graph@100,
-SA neighbor-cache fix and a genuine latency-bounded fast path). See CHANGELOG.md.
-"""
-
-import os
-
-# --- OpenMP multi-library guard (permanent fix, v3.4.58) -------------------
-# SLM ships with torch, scikit-learn, and lightgbm — each bundles its own
-# libomp.dylib on macOS ARM (Apple Silicon). When all three are loaded in the
-# same process, the Intel OpenMP runtime detects duplicate libraries and either
-# (a) emits OMP: Error #15 and aborts, or (b) crashes with SIGSEGV in
-# __kmp_suspend_initialize_thread (address 0x580 — null thread-struct deref)
-# when LightGBM's parallel fork tries to coordinate with PyTorch's thread pool.
-#
-# KMP_DUPLICATE_LIB_OK=TRUE tells the runtime to elect one master instance
-# and continue rather than abort. This is the upstream-recommended workaround
-# for mixed-dependency environments (PyTorch docs, scikit-learn FAQ, LightGBM
-# issue #3877). Use unconditional assignment — not setdefault — so user env
-# cannot accidentally disable this safety net by setting it to FALSE.
-#
-# OMP_NUM_THREADS=2 caps the maximum thread count before any C library reads
-# it. With ≤2 threads the problematic parallel fork path in LightGBM's
-# DatasetLoader::ConstructFromSampleData is avoided on all observed crash
-# configurations. SLM datasets are small (50–5 000 rows); 2 threads gives
-# ~90% of the performance of max-core training at zero crash risk.
-# Users who need more threads can set SLM_LGBM_THREADS=N to override
-# the per-call cap in ranker_retrain_online.py.
-os.environ["KMP_DUPLICATE_LIB_OK"] = "TRUE"
-if "OMP_NUM_THREADS" not in os.environ:
-    os.environ["OMP_NUM_THREADS"] = "2"
-# ---------------------------------------------------------------------------
-
-__version__ = "4.1.13"
-
-_REQUIRED_VERSIONS = {
-    "sentence_transformers": "5.3.0",
-    "onnxruntime": "1.24.4",
-}
-
-
-# Module name -> distribution name for metadata lookup.
-_DIST_NAMES = {
-    "sentence_transformers": "sentence-transformers",
-    "onnxruntime": "onnxruntime",
-}
-
-
-def _check_critical_deps() -> None:
-    """Warn if embedding-critical packages have wrong versions.
-
-    Reads installed versions from package metadata — does NOT import the
-    packages. Importing sentence_transformers here would eagerly load torch
-    (native) into every process: a memory blow-up on Apple Silicon and, on
-    some interpreters, a source of native-heap instability at teardown.
-    """
-    import warnings
-    from importlib import metadata
-    for mod_name, expected in _REQUIRED_VERSIONS.items():
-        try:
-            actual = metadata.version(_DIST_NAMES[mod_name])
-        except metadata.PackageNotFoundError:
-            continue
-        if actual != expected:
-            warnings.warn(
-                f"SuperLocalMemory requires {mod_name}=={expected} but "
-                f"{actual} is installed. This causes memory blow-up on "
-                f"Apple Silicon. Fix: pip install {mod_name}=={expected}",
-                stacklevel=2,
-            )
-
-
-# Only run the dep check when a full (non-LIGHT) engine is in use.
-# The MCP server runs in LIGHT mode — importing onnxruntime here
-# breaks the LIGHT engine contract (ONNX_LOADED must stay False).
-# Skip when SLM_SKIP_DEP_CHECK=1 or SLM_DISABLE_WARMUP_SIDE_EFFECTS=1.
-if not (
-    os.environ.get("SLM_SKIP_DEP_CHECK") == "1"
-    or os.environ.get("SLM_DISABLE_WARMUP_SIDE_EFFECTS") == "1"
-):
-    _check_critical_deps()

package/src/superlocalmemory/access/__init__.py

@@ -1,3 +0,0 @@
-# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
-# Licensed under AGPL-3.0-or-later - see LICENSE file
-"""SLM access control (RBAC) package."""