superlocalmemory 4.1.9 → 4.1.12

package/.claude-plugin/marketplace.json

@@ -21,7 +21,7 @@
       "license": "AGPL-3.0-or-later",
       "name": "superlocalmemory",
       "source": "./plugin",
-      "version": "4.1.9"
+      "version": "4.1.12"
     },
     {
       "author": {
@@ -39,7 +39,7 @@
       "license": "AGPL-3.0-or-later",
       "name": "superlocalmemory-codex",
       "source": "./codex-plugin",
-      "version": "4.1.9"
+      "version": "4.1.12"
     }
   ]
 }

package/CHANGELOG.md

@@ -5,6 +5,49 @@ All notable changes to SuperLocalMemory will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.1.12] — Native Hermes lifecycle and verified execution learning
+
+### Added
+
+- **Native Hermes plugin.** The release ships 12 namespaced SLM skills, four
+  real Hermes child-agent roles, the complete SLM command router and generated
+  aliases, and lifecycle hooks that preserve one exact Hermes session across
+  recall, tool telemetry, optional turn capture, outcome settlement, reset,
+  and finalization. It installs additively from the immutable GitHub release
+  commit; it never replaces Hermes's memory provider, model, configuration, or
+  existing hooks.
+- **Explicit host session identity.** `session_init`, `observe`, and
+  `log_tool_event` now accept additive host session/agent identifiers, and
+  `settle_session_outcomes` settles only one exact session's pending outcomes.
+  Concurrent Hermes conversations cannot share attribution.
+- **`bounded-loops.dev/slm-bridge/v2`.** V2 is negotiated beside unchanged
+  observation-only v1. It stores validated, bounded execution receipts and
+  derives reversible execution-reliability learning only; it never writes
+  semantic user memory or preferences from a gate result.
+
+### Fixed
+
+- Profile erasure and global learning reset now remove bridge-v2 receipts and
+  derived events. V2 evidence validation rejects demonstrations, cancellations,
+  malformed digests, unknown nested fields, and oversized payloads before any
+  data is persisted.
+
+## [4.1.11] — MCP loops use the owned runtime
+
+### Fixed
+- MCP bounded loops now route both recall gates and ledger writes through the
+  daemon, and normalize ledger tags at the HTTP boundary.
+
+## [4.1.10] — MCP loops use the owned writer
+
+### Fixed
+- MCP bounded loops now persist their ledger through the daemon/worker writer
+  instead of calling a write method on the intentionally LIGHT MCP engine, and
+  reject stale cross-profile writes rather than misplacing audit records.
+- The benchmark bundle now runs experiments 12 and 13; the emergency-recall
+  fixture no longer expires as the calendar advances, and trial totals reflect
+  every executed ablation round.
+
 ## [4.1.9] — Silence is not a verdict
 
 ### Fixed

package/README.md

@@ -5,7 +5,7 @@
   </picture>
 </p>
 
-<h1 align="center">SuperLocalMemory V4.1.9</h1>
+<h1 align="center">SuperLocalMemory V4.1.12</h1>
 
 <h2 align="center">Rent the LLM. Own the memory.</h2>
 
@@ -27,12 +27,12 @@ guarantee here is stated as a falsifiable invariant, tested under an adversarial
 negative control, and shipped with the harness that regenerates the evidence:
 <code>python benchmark/run_all.py --trials 200 --output-dir results/</code>. What each experiment
 does <em>not</em> exercise is stated too.</p>
-<p align="center"><code>v4.1.9</code> — one control plane: <strong>SLM-Mesh</strong> peer coordination · multi-scope memory (personal / shared / global) · profiles · Cache · Compress · 7-layer retrieval · code graph · Entity Explorer · skill evolution · Modes A/B/C · GDPR retention &amp; audit chain · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
+<p align="center"><code>v4.1.12</code> — one control plane: <strong>SLM-Mesh</strong> peer coordination · multi-scope memory (personal / shared / global) · profiles · Cache · Compress · 7-layer retrieval · code graph · Entity Explorer · skill evolution · Modes A/B/C · GDPR retention &amp; audit chain · bounded loops — across CLI, MCP, dashboard, the <strong>Claude plugin</strong>, the <strong>Codex add-on</strong>, and documented IDE integrations.<br/>
 Proxy: <code>slm wrap claude</code> &nbsp;·&nbsp; MCP: add <code>slm_compress</code> to your config &nbsp;·&nbsp; Skill: zero-config</p>
 <p align="center"><strong>Four public arXiv preprints</strong> · V4: <a href="https://arxiv.org/abs/2608.08253">arXiv:2608.08253</a> · companion archive: <a href="https://zenodo.org/records/21853302">Zenodo 21853302</a> (<a href="https://doi.org/10.5281/zenodo.21853302">DOI 10.5281/zenodo.21853302</a>) · prior preprints: <a href="https://arxiv.org/abs/2603.02240">2603.02240</a> · <a href="https://arxiv.org/abs/2603.14588">2603.14588</a> · <a href="https://arxiv.org/abs/2604.04514">2604.04514</a>.</p>
 
 <p align="center">
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v4.1.9-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v4.1.9 — Current Release"/></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/v4.1.12-Current_Release-2ea44f?style=for-the-badge&logo=checkmarx&logoColor=white" alt="v4.1.12 — Current Release"/></a>
   <a href="https://arxiv.org/abs/2608.08253"><img src="https://img.shields.io/badge/arXiv-2608.08253-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="SuperLocalMemory 4.0 paper on arXiv:2608.08253"/></a>
   <a href="https://zenodo.org/records/21853302"><img src="https://img.shields.io/badge/Zenodo-10.5281%2Fzenodo.21853302-1682D4?style=for-the-badge&logo=zenodo&logoColor=white" alt="V4 paper on Zenodo: 10.5281/zenodo.21853302"/></a>
   <a href="https://arxiv.org/abs/2603.14588"><img src="https://img.shields.io/badge/arXiv-2603.14588-b31b1b?style=for-the-badge&logo=arxiv&logoColor=white" alt="arXiv Paper"/></a>
@@ -463,7 +463,7 @@ The plugin is how most people should install SLM. It brings the MCP server, the
 skills, the sub-agents, the slash commands and the hooks in one step, and keeps
 them at the same version as the package.
 
-**Four surfaces, one source.** Everything below is generated from `plugin-src/`,
+**Five surfaces, one source.** Everything below is generated from `plugin-src/`,
 so no surface can quietly fall behind another:
 
 | Editor | Install | Skills | Agents | Commands | Hooks |
@@ -472,6 +472,7 @@ so no surface can quietly fall behind another:
 | **Codex** | copy `codex-plugin/` into your Codex plugins directory | 12 | 4 | 1 | yes |
 | **VS Code / Copilot** | copy `copilot-plugin/.github/` into your repository | 12 | 4 | as prompts | yes |
 | **Antigravity** | copy `antigravity-plugin/` into your plugins directory | 12 | 4 | 1 | yes |
+| **Hermes** | install the native plugin from the immutable release commit | 12 | 4 | all SLM commands | yes |
 
 ### What you get
 
@@ -484,6 +485,16 @@ so no surface can quietly fall behind another:
 - **Hooks** — session start and end, so context loads and commits without being
   asked.
 
+### Hermes
+
+Hermes users get the same SLM skills and advisor roles through a native
+`plugin.yaml` package, plus `/slm <command>` and generated `/slm-<command>`
+aliases for the public CLI surface. The plugin is intentionally separate from
+the PyPI/npm runtime: install the owning SLM runtime first, then install the
+reviewed pinned pack from the `v4.1.12` GitHub release. It is additive and does
+not replace Hermes's selected memory provider or existing configuration. See
+[the Hermes integration guide](docs/hermes.md).
+
 ### Keeping it current
 
 `pipx upgrade superlocalmemory` upgrades the **package**. It does not

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superlocalmemory",
-  "version": "4.1.9",
+  "version": "4.1.12",
   "description": "Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.",
   "keywords": [
     "ai-memory",

package/plugin/.claude-plugin/plugin.json

@@ -15,5 +15,5 @@
   "mcpServers": "./.mcp.json",
   "name": "superlocalmemory",
   "repository": "https://github.com/qualixar/superlocalmemory",
-  "version": "4.1.9"
+  "version": "4.1.12"
 }

package/plugin/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- BEGIN SuperLocalMemory v4.1.9 -->
+<!-- BEGIN SuperLocalMemory v4.1.12 -->
 
 ## SuperLocalMemory (SLM) — Agent Rules
 
@@ -39,6 +39,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
 ### Subagents
 slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR)
 
-<!-- END SuperLocalMemory v4.1.9 -->
+<!-- END SuperLocalMemory v4.1.12 -->
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-governance-advisor.md

@@ -77,4 +77,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall
 # What NOT to do
 Never session_init twice; never forget without dry-run preview; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-loop-runner.md

@@ -68,4 +68,4 @@ assessment. The gate is the authority.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-memory-advisor.md

@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/requirements.txt

@@ -1 +1 @@
-superlocalmemory==4.1.9
+superlocalmemory==4.1.12

package/plugin/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-governance/SKILL.md

@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-graph/SKILL.md

@@ -312,4 +312,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-loop/SKILL.md

@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin/skills/slm-mesh/SKILL.md

@@ -279,4 +279,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-profile/SKILL.md

@@ -146,4 +146,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-recall/SKILL.md

@@ -323,4 +323,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-remember/SKILL.md

@@ -270,4 +270,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-scope/SKILL.md

@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-session/SKILL.md

@@ -253,4 +253,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/agents/slm-memory-advisor.md

@@ -46,4 +46,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never carry ccr_ids across profile switches.
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/rules/AGENTS.md

@@ -137,4 +137,4 @@ When the SLM MCP server is unavailable, use these CLI equivalents:
 - **slm-optimize-advisor** — context compression and KV cache
 - **slm-governance-advisor** — scope/role compliance, retention policies, GDPR
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-cache/SKILL.md

@@ -145,4 +145,4 @@ These subcommands control daemon-level cache settings. They do not read or write
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-governance/SKILL.md

@@ -245,4 +245,4 @@ Before running any destructive operation (`forget`, `compact_memories`):
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-graph/SKILL.md

@@ -312,4 +312,4 @@ profile. See `slm-profile` for the full profile switching workflow.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-loop/SKILL.md

@@ -96,4 +96,4 @@ paused, name the approval needed; when errored, quote the short detail.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/plugin-src/skills/slm-mesh/SKILL.md

@@ -279,4 +279,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-profile/SKILL.md

@@ -146,4 +146,4 @@ Name them differently in your MCP config (e.g. `superlocalmemory-personal` and
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-recall/SKILL.md

@@ -323,4 +323,4 @@ before recalling, then switch back. See `slm-profile` for workspace switching.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-remember/SKILL.md

@@ -270,4 +270,4 @@ different workspace, use `switch_profile` first. See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-scope/SKILL.md

@@ -173,4 +173,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-session/SKILL.md

@@ -253,4 +253,4 @@ explicitly and call `recall` with `include_global`/`include_shared` after
 
 ---
 
-*SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later*

package/plugin-src/skills/slm-status/SKILL.md

@@ -163,4 +163,4 @@ multi-profile setup. To switch the active profile, see `slm-profile`.
 
 ---
 
-SuperLocalMemory v4.1.9 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.1.12 · Qualixar · AGPL-3.0-or-later

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "4.1.9"
+version = "4.1.12"
 description = "Local-first agent memory with auditable hybrid retrieval"
 readme = "README.md"
 license = "AGPL-3.0-or-later"

package/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "4.1.9"
+__version__ = "4.1.12"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.3.0",

package/src/superlocalmemory/cli/daemon.py

@@ -364,6 +364,14 @@ class DaemonRefused(RuntimeError):
         )
 
 
+class DaemonConflict(RuntimeError):
+    """A deterministic daemon conflict that the caller must resolve."""
+
+    def __init__(self, detail: str) -> None:
+        self.detail = detail or "daemon request conflicted with current state"
+        super().__init__(self.detail)
+
+
 def daemon_request(
     method: str,
     path: str,
@@ -373,6 +381,7 @@ def daemon_request(
     expected_descriptor=_EXPECTED_DESCRIPTOR_UNSET,
     expected_legacy: dict | None = None,
     verify_health: bool = True,
+    preserve_conflict: bool = False,
 ) -> dict | None:
     """Send a request only after validating the owned daemon identity.
 
@@ -463,6 +472,15 @@ def daemon_request(
         # locally as the machine owner.
         if exc.code in (401, 403):
             raise DaemonRefused(exc.code, path) from exc
+        if exc.code == 409 and preserve_conflict:
+            detail = "daemon request conflicted with current state"
+            try:
+                payload = json.loads(exc.read().decode())
+                if isinstance(payload, dict) and payload.get("detail"):
+                    detail = str(payload["detail"])
+            except Exception:
+                pass
+            raise DaemonConflict(detail) from exc
         return None
     except Exception:
         return None