clsplusplus 7.0.0__tar.gz → 7.2.4__tar.gz

{clsplusplus-7.0.0 → clsplusplus-7.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: clsplusplus
-Version: 7.0.0
+Version: 7.2.4
 Summary: Brain-inspired, model-agnostic persistent memory for LLMs. Learn, recall, forget — like a brain. Works with OpenAI, Claude, Gemini, Llama.
 Author-email: AlphaForge AI Labs <contact@alphaforge.ai>
 Maintainer-email: Rajamohan Jabbala <contact@alphaforge.ai>
@@ -51,14 +51,17 @@ Requires-Dist: stripe>=7.0.0; extra == "server"
 Requires-Dist: razorpay>=1.4.0; extra == "server"
 Requires-Dist: minio>=7.2.0; extra == "server"
 Requires-Dist: pyarrow>=14.0.0; extra == "server"
+Requires-Dist: posthog>=3.5.0; extra == "server"
 Provides-Extra: dev
 Requires-Dist: pytest>=7.4.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
 Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
 Requires-Dist: pytest-timeout>=2.2.0; extra == "dev"
 Requires-Dist: httpx>=0.26.0; extra == "dev"
+Requires-Dist: locust>=2.20.0; extra == "dev"
 Dynamic: license-file
 
+<!-- mcp-name: io.github.rajamohan1950/cls-memory -->
 <p align="center">
   <img src="https://img.shields.io/badge/CLS%2B%2B-Memory%20for%20LLMs-6366f1?style=for-the-badge&logo=github" alt="CLS++" />
 </p>
@@ -80,7 +83,7 @@ Dynamic: license-file
   <a href="https://pypi.org/project/clsplusplus/"><img src="https://img.shields.io/pypi/v/clsplusplus?style=flat-square&label=PyPI&color=6366f1" alt="PyPI" /></a>
   <a href="https://www.npmjs.com/package/clsplusplus"><img src="https://img.shields.io/npm/v/clsplusplus?style=flat-square&label=npm&color=cb3837" alt="npm" /></a>
   <a href="https://pypi.org/project/clsplusplus/"><img src="https://img.shields.io/pypi/pyversions/clsplusplus?style=flat-square" alt="Python" /></a>
-  <a href="https://www.clsplusplus.com/docs"><img src="https://img.shields.io/badge/API-Live-22c55e?style=flat-square" alt="API" /></a>
+  <a href="https://www.clsplusplus.com/docs"><img src="https://img.shields.io/badge/API-Live%20at%20www.clsplusplus.com-22c55e?style=flat-square" alt="API" /></a>
   <a href="https://github.com/rajamohan1950/CLSplusplus/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-blue?style=flat-square" alt="License" /></a>
   <a href="https://github.com/rajamohan1950/CLSplusplus"><img src="https://img.shields.io/badge/Patent-Oct%202025-blue?style=flat-square" alt="Patent" /></a>
 </p>
@@ -200,28 +203,49 @@ uvicorn clsplusplus.api:create_app --factory --host 0.0.0.0 --port 8080
 
 ## Try It Live
 
-**[Try the demo](https://clsplusplus.onrender.com)** — Tell Claude something, ask OpenAI. Same memory. No sign-up.
+**[Try the demo](https://www.clsplusplus.com)** — Tell Claude something, ask OpenAI. Same memory. No sign-up.
+
+The Chrome extension (Web Store, v6.0.1) captures user messages from
+ChatGPT, Claude, and Gemini chat pages automatically and feeds them through
+the same memory pipeline. Host permissions: `chatgpt.com`,
+`chat.openai.com`, `claude.ai`, `gemini.google.com`. The Link Account popup
+differentiates 401 / 403 / network / unknown errors so you know whether the
+key is wrong, the account is unlinked, or the server is unreachable.
 
 ---
 
 ## Architecture
 
 ```
-Client (any LLM) → POST /v1/memory/read (before inference)
-                        ↓
-              ┌─────────────────────────┐
-              │   CLS++ Core Service    │
-              │   L0: Working Buffer    │   ← Prefrontal Cortex
-              │   L1: Indexing Store    │   ← Hippocampus
-              │   L2: Schema Graph      │   ← Neocortex
-              │   L3: Deep Recess       │   ← Thalamus
-              │   Plasticity Engine     │
-              │   Sleep Orchestrator    │
-              └─────────────────────────┘
-                        ↓
-              POST /v1/memory/write (after inference)
+Browser (extension/capture.js)          Any LLM client (SDK / REST)
+        ↓                                       ↓
+        ↓               www.clsplusplus.com (Vercel, Next.js)
+        ↓                         │  rewrites /api/v1/*, /api/admin/*
+        ↓                         ▼
+        └──────────────►  Render-hosted FastAPI (clsplusplus-api)
+                                  │  middleware: auth, rate limit, abuse-guard
+                                  ▼
+              ┌─────────────────────────────────────────┐
+              │   CLS++ Core Service                    │
+              │   L0: Redis working buffer              │ ← Prefrontal cortex
+              │   L1: PostgreSQL+pgvector episodic      │ ← Hippocampus
+              │   L2: Schema graph (crystallized)       │ ← Neocortex
+              │   L3: Deep archive                      │ ← Thalamus
+              │   PhaseMemoryEngine (gas→liquid→        │
+              │     solid→glass, auto tier-compression) │
+              │   SleepOrchestrator (replay + REM)      │
+              │   ReconsolidationGate (belief revision) │
+              │   Weblab (PostHog flags + auto-rollback)│
+              │   Pricing control plane (memory-stored) │
+              └─────────────────────────────────────────┘
 ```
 
+Every user message captured in the extension and every SDK `learn()` call
+lands in L0, is promoted through the phase engine by the same thermodynamic
+rules, and is persisted to L1 in the background. There is no separate
+"explicit store" path — capture is continuous, tier compression is
+automatic.
+
 ---
 
 ## SaaS Mode (Memory-as-a-Service)
@@ -233,10 +257,29 @@ export CLS_API_KEYS=cls_live_xxxxxxxxxxxxxxxxxxxxxxxx
 export CLS_REQUIRE_API_KEY=true
 export CLS_RATE_LIMIT_REQUESTS=100
 export CLS_RATE_LIMIT_WINDOW_SECONDS=60
+
+# Abuse-guard (env-tunable; defaults shown)
+export CLS_ABUSE_AUTHFAIL_THRESHOLD=60        # auth failures per IP per window
+export CLS_ABUSE_AUTHFAIL_WINDOW_SECONDS=600  # 10 minutes
+export CLS_ABUSE_WHITELIST_IPS=               # comma-separated operator IPs
 ```
 
+Requests carrying a valid API key are exempt from auth-fail flood counting
+(see `src/clsplusplus/abuse_guard.py`).
+
 Product endpoints: `POST /v1/memories/encode`, `POST /v1/memories/retrieve`, `DELETE /v1/memories/forget`, `GET /v1/health/score`. See [SaaS docs](docs/SAAS_MEMORY_AS_SERVICE.md).
 
+### Pricing
+
+CLS++ launched in India and bills in **INR via Razorpay (UPI / QR)** — not
+USD, not Stripe. Tiers: **Pro ₹299**, **Business ₹999**, **Enterprise
+₹4,999**. The pricing control plane lives inside the CLS++ memory layer
+itself (reserved namespace `__cls_pricing__`) and is operator-tunable at
+runtime via `POST /admin/pricing/config`. The default config — currency,
+margin floor/target, infra spend, dynamic-demand toggle — is seeded by
+`src/clsplusplus/pricing_store.py` on first read. `GET /v1/pricing` is a
+public, abuse-exempt endpoint.
+
 ---
 
 ## Deployment
@@ -269,11 +312,42 @@ Product endpoints: `POST /v1/memories/encode`, `POST /v1/memories/retrieve`, `DE
 
 - [x] Four stores (L0–L3) + Plasticity Engine
 - [x] Write/Read API + Python SDK
-- [x] Docker Compose + Render deploy
+- [x] Docker Compose + Render deploy (Dockerfile ships `/app/scripts/` for operator tooling)
 - [x] Sleep cycle orchestrator
 - [x] Reconsolidation gate
 - [x] API key auth + rate limiting
 - [x] SaaS product endpoints
+- [x] Chrome extension (v6.0.1) capturing ChatGPT / Claude / Gemini
+- [x] Abuse-guard with env-tunable thresholds and operator IP whitelist
+- [x] PostHog Weblab — staged rollouts with auto-rollback (5xx > 2% or p95 > 3s)
+- [x] INR pricing (Razorpay / UPI) with memory-resident control plane
+
+## Recent Architectural Decisions
+
+- **Auto-crystallization gated OFF by default.** The Landauer
+  liquid→solid pipeline produced low-quality `[Schema: subject]` token-soup
+  entries that leaked into user-visible memory lists. Re-enable per process
+  with `CLS_ENABLE_AUTO_CRYSTALLIZATION=1`. Melting still runs so existing
+  schemas drain out. See `src/clsplusplus/memory_phase.py`.
+- **Pricing lives in the memory layer.** Operator-tunable config (margin
+  floor/target, infra cost, dynamic-demand toggle) and the bucketed demand
+  history are stored as two fixed-id documents in namespace
+  `__cls_pricing__`, not in env vars.
+- **Frontend ↔ backend topology.** The Next.js frontend on Vercel
+  (`www.clsplusplus.com`) rewrites `/api/v1/*` and `/api/admin/*` to the
+  Render-hosted FastAPI. The bare onrender.com host is the internal
+  upstream target — not the public surface.
+- **Integration ownership.** `POST /v1/integrations` injects
+  `owner_email` from the JWT-authed user; non-admin override returns 403.
+  A backfill script handles legacy NULL rows.
+
+## Operator Runbooks
+
+See [docs/RUNBOOKS.md](docs/RUNBOOKS.md) and
+[docs/LAUNCH_RUNBOOK.md](docs/LAUNCH_RUNBOOK.md) for incident response,
+deploy procedures, and the abuse-guard / weblab dashboards. The
+container ships operator scripts at `/app/scripts/` (see
+`scripts/admin_doctor.py`, `scripts/backfill_integration_owner_email.py`).
 
 ---
 

{clsplusplus-7.0.0 → clsplusplus-7.2.4}/README.md

@@ -1,3 +1,4 @@
+<!-- mcp-name: io.github.rajamohan1950/cls-memory -->
 <p align="center">
   <img src="https://img.shields.io/badge/CLS%2B%2B-Memory%20for%20LLMs-6366f1?style=for-the-badge&logo=github" alt="CLS++" />
 </p>
@@ -19,7 +20,7 @@
   <a href="https://pypi.org/project/clsplusplus/"><img src="https://img.shields.io/pypi/v/clsplusplus?style=flat-square&label=PyPI&color=6366f1" alt="PyPI" /></a>
   <a href="https://www.npmjs.com/package/clsplusplus"><img src="https://img.shields.io/npm/v/clsplusplus?style=flat-square&label=npm&color=cb3837" alt="npm" /></a>
   <a href="https://pypi.org/project/clsplusplus/"><img src="https://img.shields.io/pypi/pyversions/clsplusplus?style=flat-square" alt="Python" /></a>
-  <a href="https://www.clsplusplus.com/docs"><img src="https://img.shields.io/badge/API-Live-22c55e?style=flat-square" alt="API" /></a>
+  <a href="https://www.clsplusplus.com/docs"><img src="https://img.shields.io/badge/API-Live%20at%20www.clsplusplus.com-22c55e?style=flat-square" alt="API" /></a>
   <a href="https://github.com/rajamohan1950/CLSplusplus/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-blue?style=flat-square" alt="License" /></a>
   <a href="https://github.com/rajamohan1950/CLSplusplus"><img src="https://img.shields.io/badge/Patent-Oct%202025-blue?style=flat-square" alt="Patent" /></a>
 </p>
@@ -139,28 +140,49 @@ uvicorn clsplusplus.api:create_app --factory --host 0.0.0.0 --port 8080
 
 ## Try It Live
 
-**[Try the demo](https://clsplusplus.onrender.com)** — Tell Claude something, ask OpenAI. Same memory. No sign-up.
+**[Try the demo](https://www.clsplusplus.com)** — Tell Claude something, ask OpenAI. Same memory. No sign-up.
+
+The Chrome extension (Web Store, v6.0.1) captures user messages from
+ChatGPT, Claude, and Gemini chat pages automatically and feeds them through
+the same memory pipeline. Host permissions: `chatgpt.com`,
+`chat.openai.com`, `claude.ai`, `gemini.google.com`. The Link Account popup
+differentiates 401 / 403 / network / unknown errors so you know whether the
+key is wrong, the account is unlinked, or the server is unreachable.
 
 ---
 
 ## Architecture
 
 ```
-Client (any LLM) → POST /v1/memory/read (before inference)
-                        ↓
-              ┌─────────────────────────┐
-              │   CLS++ Core Service    │
-              │   L0: Working Buffer    │   ← Prefrontal Cortex
-              │   L1: Indexing Store    │   ← Hippocampus
-              │   L2: Schema Graph      │   ← Neocortex
-              │   L3: Deep Recess       │   ← Thalamus
-              │   Plasticity Engine     │
-              │   Sleep Orchestrator    │
-              └─────────────────────────┘
-                        ↓
-              POST /v1/memory/write (after inference)
+Browser (extension/capture.js)          Any LLM client (SDK / REST)
+        ↓                                       ↓
+        ↓               www.clsplusplus.com (Vercel, Next.js)
+        ↓                         │  rewrites /api/v1/*, /api/admin/*
+        ↓                         ▼
+        └──────────────►  Render-hosted FastAPI (clsplusplus-api)
+                                  │  middleware: auth, rate limit, abuse-guard
+                                  ▼
+              ┌─────────────────────────────────────────┐
+              │   CLS++ Core Service                    │
+              │   L0: Redis working buffer              │ ← Prefrontal cortex
+              │   L1: PostgreSQL+pgvector episodic      │ ← Hippocampus
+              │   L2: Schema graph (crystallized)       │ ← Neocortex
+              │   L3: Deep archive                      │ ← Thalamus
+              │   PhaseMemoryEngine (gas→liquid→        │
+              │     solid→glass, auto tier-compression) │
+              │   SleepOrchestrator (replay + REM)      │
+              │   ReconsolidationGate (belief revision) │
+              │   Weblab (PostHog flags + auto-rollback)│
+              │   Pricing control plane (memory-stored) │
+              └─────────────────────────────────────────┘
 ```
 
+Every user message captured in the extension and every SDK `learn()` call
+lands in L0, is promoted through the phase engine by the same thermodynamic
+rules, and is persisted to L1 in the background. There is no separate
+"explicit store" path — capture is continuous, tier compression is
+automatic.
+
 ---
 
 ## SaaS Mode (Memory-as-a-Service)
@@ -172,10 +194,29 @@ export CLS_API_KEYS=cls_live_xxxxxxxxxxxxxxxxxxxxxxxx
 export CLS_REQUIRE_API_KEY=true
 export CLS_RATE_LIMIT_REQUESTS=100
 export CLS_RATE_LIMIT_WINDOW_SECONDS=60
+
+# Abuse-guard (env-tunable; defaults shown)
+export CLS_ABUSE_AUTHFAIL_THRESHOLD=60        # auth failures per IP per window
+export CLS_ABUSE_AUTHFAIL_WINDOW_SECONDS=600  # 10 minutes
+export CLS_ABUSE_WHITELIST_IPS=               # comma-separated operator IPs
 ```
 
+Requests carrying a valid API key are exempt from auth-fail flood counting
+(see `src/clsplusplus/abuse_guard.py`).
+
 Product endpoints: `POST /v1/memories/encode`, `POST /v1/memories/retrieve`, `DELETE /v1/memories/forget`, `GET /v1/health/score`. See [SaaS docs](docs/SAAS_MEMORY_AS_SERVICE.md).
 
+### Pricing
+
+CLS++ launched in India and bills in **INR via Razorpay (UPI / QR)** — not
+USD, not Stripe. Tiers: **Pro ₹299**, **Business ₹999**, **Enterprise
+₹4,999**. The pricing control plane lives inside the CLS++ memory layer
+itself (reserved namespace `__cls_pricing__`) and is operator-tunable at
+runtime via `POST /admin/pricing/config`. The default config — currency,
+margin floor/target, infra spend, dynamic-demand toggle — is seeded by
+`src/clsplusplus/pricing_store.py` on first read. `GET /v1/pricing` is a
+public, abuse-exempt endpoint.
+
 ---
 
 ## Deployment
@@ -208,11 +249,42 @@ Product endpoints: `POST /v1/memories/encode`, `POST /v1/memories/retrieve`, `DE
 
 - [x] Four stores (L0–L3) + Plasticity Engine
 - [x] Write/Read API + Python SDK
-- [x] Docker Compose + Render deploy
+- [x] Docker Compose + Render deploy (Dockerfile ships `/app/scripts/` for operator tooling)
 - [x] Sleep cycle orchestrator
 - [x] Reconsolidation gate
 - [x] API key auth + rate limiting
 - [x] SaaS product endpoints
+- [x] Chrome extension (v6.0.1) capturing ChatGPT / Claude / Gemini
+- [x] Abuse-guard with env-tunable thresholds and operator IP whitelist
+- [x] PostHog Weblab — staged rollouts with auto-rollback (5xx > 2% or p95 > 3s)
+- [x] INR pricing (Razorpay / UPI) with memory-resident control plane
+
+## Recent Architectural Decisions
+
+- **Auto-crystallization gated OFF by default.** The Landauer
+  liquid→solid pipeline produced low-quality `[Schema: subject]` token-soup
+  entries that leaked into user-visible memory lists. Re-enable per process
+  with `CLS_ENABLE_AUTO_CRYSTALLIZATION=1`. Melting still runs so existing
+  schemas drain out. See `src/clsplusplus/memory_phase.py`.
+- **Pricing lives in the memory layer.** Operator-tunable config (margin
+  floor/target, infra cost, dynamic-demand toggle) and the bucketed demand
+  history are stored as two fixed-id documents in namespace
+  `__cls_pricing__`, not in env vars.
+- **Frontend ↔ backend topology.** The Next.js frontend on Vercel
+  (`www.clsplusplus.com`) rewrites `/api/v1/*` and `/api/admin/*` to the
+  Render-hosted FastAPI. The bare onrender.com host is the internal
+  upstream target — not the public surface.
+- **Integration ownership.** `POST /v1/integrations` injects
+  `owner_email` from the JWT-authed user; non-admin override returns 403.
+  A backfill script handles legacy NULL rows.
+
+## Operator Runbooks
+
+See [docs/RUNBOOKS.md](docs/RUNBOOKS.md) and
+[docs/LAUNCH_RUNBOOK.md](docs/LAUNCH_RUNBOOK.md) for incident response,
+deploy procedures, and the abuse-guard / weblab dashboards. The
+container ships operator scripts at `/app/scripts/` (see
+`scripts/admin_doctor.py`, `scripts/backfill_integration_owner_email.py`).
 
 ---
 

{clsplusplus-7.0.0 → clsplusplus-7.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "clsplusplus"
-version = "7.0.0"
+version = "7.2.4"
 description = "Brain-inspired, model-agnostic persistent memory for LLMs. Learn, recall, forget — like a brain. Works with OpenAI, Claude, Gemini, Llama."
 readme = "README.md"
 requires-python = ">=3.9"
@@ -61,6 +61,7 @@ server = [
     "razorpay>=1.4.0",
     "minio>=7.2.0",
     "pyarrow>=14.0.0",
+    "posthog>=3.5.0",
 ]
 dev = [
     "pytest>=7.4.0",
@@ -68,10 +69,12 @@ dev = [
     "pytest-cov>=4.1.0",
     "pytest-timeout>=2.2.0",
     "httpx>=0.26.0",
+    "locust>=2.20.0",
 ]
 
 [project.scripts]
 cls = "clsplusplus.cli:main"
+cls-mcp = "clsplusplus.mcp_server:main"
 
 [project.urls]
 Homepage = "https://github.com/rajamohan1950/CLSplusplus"
@@ -90,8 +93,22 @@ where = ["src"]
 asyncio_mode = "auto"
 testpaths = ["tests"]
 pythonpath = ["src"]
+# Test category markers — every new test should carry at least one.
+# The old suite (tests/test_*.py) is implicitly "unit" unless otherwise marked.
 markers = [
-    "slow: marks tests as slow (deselect with '-m \"not slow\"')",
+    "slow: long-running tests — excluded from default run",
+    "unit: pure function/module tests, no network, no database",
+    "regression: guards against specific previously-fixed bugs",
+    "functional: end-to-end against a running API + Postgres + Redis",
+    "smoke: minimal liveness checks — server up, basic routes respond",
+    "sanity: shallow correctness checks on critical contracts",
+    "performance: measures latency/throughput with assertions on bounds",
+    "load: sustained high concurrency over time",
+    "stress: pushes beyond expected capacity to find breaking point",
+    "dip: sustained-load ramp-down test; looks for leak / degradation",
+    "whitebox: uses internal module imports and private state",
+    "blackbox: exercises only the public HTTP surface",
+    "beta: curated user-journey scenarios that mimic real customer use",
 ]
 filterwarnings = [
     "ignore::DeprecationWarning",