memleaf 0.2.51__tar.gz → 0.2.52__tar.gz

{memleaf-0.2.51 → memleaf-0.2.52}/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to memleaf are documented here.
 
+## 0.2.52 — 2026-09-13
+
+- Stop an assistant message from originating a durable claim. A three-sentence acceptance run recorded a project requirement the user never asked for: the user wrote only "我写日志习惯用中文，英文的扫两眼就跳过去了", the assistant replied with its own elaboration ("记账工具的日志……都写成中文；异常堆栈上头再包一层人话"), and the planner stored that elaboration as a project fact. The design allows an assistant reply as a source for *organising what the user already said*, so the rule is now explicit about what that excludes: an assistant message may organise, restate or report what the user's own evidence establishes, may never be the only support for a durable claim, and contributes nothing where it states a decision, requirement, rule, plan, recommendation or added detail of its own -- however definite it sounds. Consequences the assistant derived from a user preference are the assistant's, not the user's, and are not recorded as requirements or project state.
+- Fix a regression the scope vocabulary introduced, before it could reach a project-scoped Vault. The scoped fallback runs when a turn matches no existing memory and the session scope is specific, and it declared itself ambiguous when the scope held more than one record -- ``len(records) > 1``. A populated scope therefore always reported ambiguity, which cleared ``lookup_complete`` and deferred every CREATE in that turn. It stayed dormant while sessions were ``global``-only, because ``_has_specific_scope`` is false for ``global`` and the fallback never ran; the first session that carried ``project:记账`` activated it, and turn three of the acceptance run deferred with ``lookup_incomplete`` and wrote nothing with zero rows withheld from the catalog. Ambiguity now means what it should: this turn names more than one specific scope, so the fallback cannot tell which one owns it.
+
+Verification for this release used the real model and a real Vault. 110 tests pass with no model call, covering the assistant-source rule and the allowance it must preserve, and the scope fallback across a populated scope, two named projects, global-only and an empty scope. Against the live route, the assistant-source rule was checked on three cases: the reproduced defect (the user's preference is now recorded alone, the assistant's elaboration is marked ``assistant_restatement`` and nothing is written from it), an assistant reply that organises user-stated progress, and a requirement the user explicitly accepts -- the two controls still work. The ambiguity fix was checked against the deferred production turn, which now reports ``lookup_complete: true`` with all 21 in-scope records projected. The assistant-source rule is published in the prompt and enforced by the planner's judgement, not by a Core-side structural check, so a model that ignores it can still record such a claim; no measurement of that rate was made.
+
 ## 0.2.51 — 2026-09-13
 
 - Publish the scope vocabulary in the B3 single-pass contract. The compact contract described `scopes` only as `nonempty string[]` and never named `project:<name>`, so a planner handed an empty `scope_registry` had exactly one value it could be sure was legal. A first message that plainly establishes a project -- "最近在弄个记账的小玩意儿，就扔家里那台 N100 上跑" -- was filed under `global`, producing the internally inconsistent `type=project` beside `scopes=["global"]`. The legacy summarize contract always carried this paragraph; B3 lost it, the same way it had lost the todo-field and date rules repaired in 0.2.48 and 0.2.50.

{memleaf-0.2.51/src/memleaf.egg-info → memleaf-0.2.52}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: memleaf
-Version: 0.2.51
+Version: 0.2.52
 Summary: A local-first Markdown memory core for AI agents
 Author: memleaf contributors
 License-Expression: MIT
@@ -23,7 +23,7 @@ Dynamic: license-file
 
 [English](README.en.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **版本：0.2.51。**
+> **版本：0.2.52。**
 > 记忆只从用户与 Agent 的可见对话提炼。Agent 已在回复中整理的事实、项目进展和明确待办可作为来源；邮件、附件、网页和终端等工具原文不进入记忆提炼。模型负责保留原话中的不确定性，现有记忆仅用于比较、去重和更新。Markdown 仍是唯一事实源。
 > **当前版本支持 Hermes 和 Codex。** Antigravity（反重力）不检测、不安装、不配置。
 

{memleaf-0.2.51 → memleaf-0.2.52}/README.en.md

@@ -4,7 +4,7 @@
 
 [中文](README.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **Version: 0.2.51.**
+> **Version: 0.2.52.**
 > Automatic extraction now uses only the current turn's visible user input and final assistant reply. Raw tool output, attachments, web/file/terminal payloads and legacy tool-evidence bodies are not new source evidence; existing or retrieved memory remains comparison context rather than source authority. Background processing is persisted as a local job and can be checked through the read-only `process_status` MCP tool; failed work remains retryable and fail closed. The release also tightens source/date grounding, target reconciliation, duplicate/no-op handling and semantic review before writes. Markdown remains the sole source of truth with no SQLite runtime dependency. Acceptance covers deterministic regression suites and synthetic inputs; it does not claim real-mail or customer-business acceptance.
 > **The current release supports Hermes and Codex.** Antigravity is not detected, installed, or configured.
 

{memleaf-0.2.51 → memleaf-0.2.52}/README.md

@@ -4,7 +4,7 @@
 
 [English](README.en.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **版本：0.2.51。**
+> **版本：0.2.52。**
 > 记忆只从用户与 Agent 的可见对话提炼。Agent 已在回复中整理的事实、项目进展和明确待办可作为来源；邮件、附件、网页和终端等工具原文不进入记忆提炼。模型负责保留原话中的不确定性，现有记忆仅用于比较、去重和更新。Markdown 仍是唯一事实源。
 > **当前版本支持 Hermes 和 Codex。** Antigravity（反重力）不检测、不安装、不配置。
 

{memleaf-0.2.51 → memleaf-0.2.52}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "memleaf"
-version = "0.2.51"
+version = "0.2.52"
 description = "A local-first Markdown memory core for AI agents"
 readme = "README.md"
 requires-python = ">=3.11"

{memleaf-0.2.51 → memleaf-0.2.52}/src/memleaf/__init__.py

@@ -1,6 +1,6 @@
 """Local-first Markdown memory core for AI agents."""
 
-__version__ = "0.2.51"
+__version__ = "0.2.52"
 
 from .config import DEFAULT_CONFIG, default_config, load_config, save_config
 from .frontmatter import FrontmatterError, dump_frontmatter, dump_yaml, load_yaml, parse_frontmatter

{memleaf-0.2.51 → memleaf-0.2.52}/src/memleaf/hermes_provider/plugin.yaml

@@ -1,5 +1,5 @@
 name: memleaf
-version: 0.2.51
+version: 0.2.52
 description: "Hermes-native external MemoryProvider for local-first Markdown memory shared with the memleaf MCP server."
 hooks:
   - prefetch

{memleaf-0.2.51 → memleaf-0.2.52}/src/memleaf/planning_context.py

@@ -393,7 +393,21 @@ class PlanningContext:
 
 
     def _scope_records_unlocked(self, scope: Any) -> tuple[list[Any], bool]:
-        """Read and rank active records once for a scoped fallback."""
+        """Read and rank active records once for a scoped fallback.
+
+        ``ambiguous`` answers a question about *scope identity*: does this turn
+        name more than one specific scope, so that the fallback cannot tell
+        which one owns it?  It deliberately does not count how many memories the
+        scope holds.  A scope carrying many memories is ordinary, and a session
+        naming one project owns its turns unambiguously.
+
+        Counting records instead made the fallback declare itself ambiguous
+        whenever a scope was populated, which marked the lookup unprovable and
+        deferred every CREATE in a project-scoped session -- while a
+        ``global``-only session, where the fallback never runs, was unaffected.
+        The catalog ceiling is what bounds how much context is safe to supply;
+        ambiguity is not.
+        """
 
         active_records = self.service._read_memories_unlocked("knowledge")
         scoped = filter_by_scope(
@@ -415,7 +429,13 @@ class PlanningContext:
             ),
             reverse=True,
         )
-        return records, len(records) > 1
+        requested = [scope] if isinstance(scope, str) else list(scope or [])
+        specific = {
+            value
+            for value in requested
+            if isinstance(value, str) and value not in {"", "global", "unscoped"}
+        }
+        return records, len(specific) > 1
 
 
     @classmethod

{memleaf-0.2.51 → memleaf-0.2.52}/src/memleaf/single_pass_plan.py

@@ -121,6 +121,7 @@ SINGLE_PASS_SYSTEM = f"""You are memleaf's single-pass memory planner.
 
 SOURCE
 Only current_evidence may establish new facts or changes. local_memory_catalog and native_memory_catalog are comparison context; native memory is never an UPDATE/NO_CHANGE target. Never invent source facts, ownership, dates, status, obligations, numbers, relationships or IDs.
+An assistant message is evidence of what you reported, never of what the user wants. It may organise, restate or report what the user's own evidence establishes, but it may never be the only support for a durable claim. When it states something the user's message does not establish -- your own decision, requirement, rule, plan, recommendation or added detail -- record nothing from that statement, however definite it sounds. Consequences you derived from a user preference are yours, not the user's: never record them as a requirement or as project state. Only something the user stated or accepted becomes memory.
 
 TASK
 Extract every independently useful long-term memory. Keep independently retrievable/updateable topics separate and preserve entity, condition, polarity, uncertainty, ownership, state and meaning-critical numbers/codes. CREATE only when no supplied local memory represents the durable information; UPDATE only when current evidence proves a change to one supplied local memory; NO_CHANGE only when it adds no semantic change; DEFERRED for a durable candidate that cannot safely reach a terminal decision. Project ownership and platform/system names are separate judgments. Do not turn every negation into no_memory and do not use NO_CHANGE to hide ambiguity.

{memleaf-0.2.51 → memleaf-0.2.52/src/memleaf.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: memleaf
-Version: 0.2.51
+Version: 0.2.52
 Summary: A local-first Markdown memory core for AI agents
 Author: memleaf contributors
 License-Expression: MIT
@@ -23,7 +23,7 @@ Dynamic: license-file
 
 [English](README.en.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **版本：0.2.51。**
+> **版本：0.2.52。**
 > 记忆只从用户与 Agent 的可见对话提炼。Agent 已在回复中整理的事实、项目进展和明确待办可作为来源；邮件、附件、网页和终端等工具原文不进入记忆提炼。模型负责保留原话中的不确定性，现有记忆仅用于比较、去重和更新。Markdown 仍是唯一事实源。
 > **当前版本支持 Hermes 和 Codex。** Antigravity（反重力）不检测、不安装、不配置。