superlocalmemory 4.2.0__tar.gz → 4.2.1__tar.gz

{superlocalmemory-4.2.0/src/superlocalmemory.egg-info → superlocalmemory-4.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: superlocalmemory
-Version: 4.2.0
+Version: 4.2.1
 Summary: The governed memory brain for AI agents: one local memory for Claude Code, Codex, Cursor, Copilot, ChatGPT and any MCP client
 Author-email: Varun Pratap Bhardwaj <admin@superlocalmemory.com>
 License-Expression: AGPL-3.0-or-later
@@ -140,10 +140,6 @@ Dynamic: license-file
 <img src="https://raw.githubusercontent.com/qualixar/superlocalmemory/main/docs/assets/gifs/recall-tiers.gif" alt="Recall in the dashboard: a real question gets its answer; a gibberish question gets 'That isn't in SuperLocalMemory.'; a real question memory cannot answer exactly gets the closest memories, labelled" width="820">
 
 
-### Watch the four-minute product film
-
-[![Watch the SuperLocalMemory product film: Claude Code and Codex sharing one memory](https://img.youtube.com/vi/pyAu_vaIYZQ/maxresdefault.jpg)](https://www.youtube.com/watch?v=pyAu_vaIYZQ)
-
 </div>
 
 **Agents forget everything between sessions. The usual fix — a vector store with a save button — makes it worse:** it always returns *something*, even when nothing it holds answers the question, and your agent builds on it. This is a memory **brain**, not a bucket: it understands what was saved (who, what, when, which project), keeps it true over time, governs who may see it, and refuses to bluff. Four arXiv papers describe how it works.
@@ -214,6 +210,16 @@ Real output from a fresh Mode A install, trimmed. Scores rank memories; they are
 
 SuperLocalMemory is part of Qualixar's AI Reliability Engineering work: agent memory that is observable, bounded and honest about what it doesn't know.
 
+## Watch it work
+
+<div align="center">
+
+[![Watch the SuperLocalMemory product film: Claude Code and Codex sharing one memory](https://img.youtube.com/vi/pyAu_vaIYZQ/maxresdefault.jpg)](https://www.youtube.com/watch?v=pyAu_vaIYZQ)
+
+*The four-minute product film: Claude Code and Codex sharing one memory.*
+
+</div>
+
 ## Works with your agents
 
 **Every harness, every bot, one memory.** Any harness that speaks MCP (`slm mcp`, or `http://127.0.0.1:8765/mcp/`) or can run a command (`slm remember`, `slm recall`) can use SuperLocalMemory. The packaged plugins are ready-made examples, not a limit.

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/README.md

@@ -24,10 +24,6 @@
 <img src="https://raw.githubusercontent.com/qualixar/superlocalmemory/main/docs/assets/gifs/recall-tiers.gif" alt="Recall in the dashboard: a real question gets its answer; a gibberish question gets 'That isn't in SuperLocalMemory.'; a real question memory cannot answer exactly gets the closest memories, labelled" width="820">
 
 
-### Watch the four-minute product film
-
-[![Watch the SuperLocalMemory product film: Claude Code and Codex sharing one memory](https://img.youtube.com/vi/pyAu_vaIYZQ/maxresdefault.jpg)](https://www.youtube.com/watch?v=pyAu_vaIYZQ)
-
 </div>
 
 **Agents forget everything between sessions. The usual fix — a vector store with a save button — makes it worse:** it always returns *something*, even when nothing it holds answers the question, and your agent builds on it. This is a memory **brain**, not a bucket: it understands what was saved (who, what, when, which project), keeps it true over time, governs who may see it, and refuses to bluff. Four arXiv papers describe how it works.
@@ -98,6 +94,16 @@ Real output from a fresh Mode A install, trimmed. Scores rank memories; they are
 
 SuperLocalMemory is part of Qualixar's AI Reliability Engineering work: agent memory that is observable, bounded and honest about what it doesn't know.
 
+## Watch it work
+
+<div align="center">
+
+[![Watch the SuperLocalMemory product film: Claude Code and Codex sharing one memory](https://img.youtube.com/vi/pyAu_vaIYZQ/maxresdefault.jpg)](https://www.youtube.com/watch?v=pyAu_vaIYZQ)
+
+*The four-minute product film: Claude Code and Codex sharing one memory.*
+
+</div>
+
 ## Works with your agents
 
 **Every harness, every bot, one memory.** Any harness that speaks MCP (`slm mcp`, or `http://127.0.0.1:8765/mcp/`) or can run a command (`slm remember`, `slm recall`) can use SuperLocalMemory. The packaged plugins are ready-made examples, not a limit.

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/agents/slm-governance-advisor.md

@@ -81,4 +81,4 @@ slm-scope · slm-governance · slm-profile · slm-remember · slm-recall · slm-
 # What NOT to do
 Never session_init twice; never forget without dry-run preview; never run `slm gdpr erase --yes` unasked; never store secrets; never bypass role checks; never claim an erasure succeeded without verifying via recall.
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/agents/slm-loop-runner.md

@@ -79,4 +79,4 @@ assessment. The gate is the authority.
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/agents/slm-memory-advisor.md

@@ -51,4 +51,4 @@ slm-recall · slm-remember · slm-session · slm-scope · slm-profile · slm-gov
 # What NOT to do
 Never session_init twice; never forget dry_run=False without reporting preview; never switch the active profile unasked; never dump a whole file into remember; never invent a memory; never claim "saved" without success:true / clean CLI exit; never bypass scope or governance restrictions.
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/agents/slm-optimize-advisor.md

@@ -41,4 +41,4 @@ slm-compress · slm-cache · slm-status · slm-profile
 # What NOT to do
 Never compress code-for-edit/JSON-to-parse/<500 chars; never store secrets/ccr_ids; never let optimize failure block/alter the task; never claim a specific savings %; never hand a ccr_id to another agent.
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/rules/AGENTS.md

@@ -187,4 +187,4 @@ Using this memory from a web assistant or another computer: see the slm-web-acce
 - **slm-governance-advisor** — scope/role compliance, retention and lifecycle, GDPR
 - **slm-loop-runner** — bounded, gate-verified loops (the `/slm-loop` command delegates to it)
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/rules/CLAUDE.md.fragment

@@ -1,4 +1,4 @@
-<!-- BEGIN SuperLocalMemory v4.2.0 -->
+<!-- BEGIN SuperLocalMemory v4.2.1 -->
 
 ## SuperLocalMemory (SLM) — Agent Rules
 
@@ -51,6 +51,6 @@ slm-recall · slm-remember · slm-session · slm-status · slm-cache · slm-comp
 ### Subagents
 slm-memory-advisor (memory decisions, session hygiene, scope/profile guidance) · slm-optimize-advisor (context compression + KV cache) · slm-governance-advisor (scope/roles/compliance/GDPR) · slm-loop-runner (bounded, gate-verified loops)
 
-<!-- END SuperLocalMemory v4.2.0 -->
+<!-- END SuperLocalMemory v4.2.1 -->
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-bot-memory/SKILL.md

@@ -178,4 +178,4 @@ store every local bot on that computer can reach.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-cache/SKILL.md

@@ -144,4 +144,4 @@ These subcommands control daemon-level cache settings and bulk removal. They do
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-compress/SKILL.md

@@ -147,4 +147,4 @@ Content over 1 MB (1 000 000 bytes UTF-8) is processed but `reversible` is force
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-getting-started-bot/SKILL.md

@@ -194,4 +194,4 @@ quality on a shared box.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-governance/SKILL.md

@@ -274,4 +274,4 @@ Before running any destructive or state-changing operation (`forget`,
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-graph/SKILL.md

@@ -324,4 +324,4 @@ All are host-only: a remote caller cannot use them.
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-loop/SKILL.md

@@ -170,4 +170,4 @@ Guides: `docs/skill-evolution.md`, `docs/bounded-loops-bridge.md`.
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-media/SKILL.md

@@ -245,7 +245,7 @@ Rules for reading them:
   personal data. Folders connected with `slm sources` are never shown to web
   apps. A web app cannot change, delete, pin or replace a memory it is not
   allowed to see: it is answered as if that memory did not exist.
-- Pictures saved before 4.2.0 are re-checked in the background and become
+- Pictures saved before picture search arrived are re-checked in the background and become
   visible to web apps once their text is clean. They stay fully searchable on
   this computer.
 
@@ -331,4 +331,4 @@ command prints the reason. Offer it; do not run it unasked.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-mesh/SKILL.md

@@ -386,4 +386,4 @@ mesh availability.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-profile/SKILL.md

@@ -161,4 +161,4 @@ anything but `core` or `mesh`.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-recall/SKILL.md

@@ -515,4 +515,4 @@ See `slm-profile`.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-remember/SKILL.md

@@ -372,4 +372,4 @@ sessions on this machine, so use it only when the user asks to move. See
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-scope/SKILL.md

@@ -180,4 +180,4 @@ to review the impact. See `slm-remember` for the full deletion discipline.
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-session/SKILL.md

@@ -288,4 +288,4 @@ answered. To also surface shared or global facts, call `recall` with
 
 ---
 
-*SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later*
+*SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later*

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/plugin-src/skills/slm-status/SKILL.md

@@ -228,4 +228,4 @@ the memory-engine upgrade is pending.
 
 ---
 
-SuperLocalMemory v4.2.0 · Qualixar · AGPL-3.0-or-later
+SuperLocalMemory v4.2.1 · Qualixar · AGPL-3.0-or-later

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "superlocalmemory"
-version = "4.2.0"
+version = "4.2.1"
 description = "The governed memory brain for AI agents: one local memory for Claude Code, Codex, Cursor, Copilot, ChatGPT and any MCP client"
 readme = "README.md"
 license = "AGPL-3.0-or-later"

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/__init__.py

@@ -32,7 +32,7 @@ if "OMP_NUM_THREADS" not in os.environ:
     os.environ["OMP_NUM_THREADS"] = "2"
 # ---------------------------------------------------------------------------
 
-__version__ = "4.2.0"
+__version__ = "4.2.1"
 
 _REQUIRED_VERSIONS = {
     "sentence_transformers": "5.6.1",

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/runtimes/managed_text.py

@@ -33,6 +33,18 @@ _OPEN: "weakref.WeakSet[ManagedTextEmbedder]" = weakref.WeakSet()
 _OPEN_LOCK = threading.Lock()
 
 
+def _fit(texts: list[str]) -> list[str]:
+    """Each text cut to what the worker accepts.
+
+    The model reads about two thousand tokens, roughly the worker's character
+    limit, so the cut drops only what it would never see; nomic truncates the
+    same way. Refusing instead stopped a whole re-index at the first long memory.
+    """
+    from superlocalmemory.runtimes.worker_limits import MAX_TEXT_CHARS
+
+    return [t if len(t) <= MAX_TEXT_CHARS else t[:MAX_TEXT_CHARS] for t in texts]
+
+
 class ManagedTextEmbedder:
     def __init__(self, config: Any, *, data_root: str | Path | None = None, env: Any = None,
                  client_supplier: Callable[[], Any] | None = None) -> None:
@@ -134,7 +146,7 @@ class ManagedTextEmbedder:
                     "Run slm media enable to finish or repair setup, then retry the switch.")
             return [None] * len(texts)
         try:
-            vectors = client.embed_texts(texts, prompt=prompt)
+            vectors = client.embed_texts(_fit(texts), prompt=prompt)
         except MediaWorkerError as exc:
             if strict:
                 raise

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/server/routes/chat.py

@@ -75,9 +75,13 @@ async def chat_stream(request: Request):
 
     mode = (body.get("mode") or "a").lower()
     limit = min(body.get("limit", 10), 20)
+    # READ on the caller's own workspace, and the chat recalls only there:
+    # this POST is not gated by the GET-only RBAC middleware.
+    from superlocalmemory.server.routes.v3_api import _resolve_profile
+    profile = _resolve_profile(request)
 
     return StreamingResponse(
-        _stream_chat(request.app.state, query, mode, limit),
+        _stream_chat(request.app.state, query, mode, limit, profile),
         media_type="text/event-stream",
         headers={
             "Cache-Control": "no-cache",
@@ -90,7 +94,7 @@ async def chat_stream(request: Request):
 # ── Core Chat Logic ──────────────────────────────────────────────
 
 async def _stream_chat(
-    app_state, query: str, mode: str, limit: int,
+    app_state, query: str, mode: str, limit: int, profile: str = "",
 ) -> AsyncGenerator[str, None]:
     """Retrieve memories, then stream LLM response with citations."""
 
@@ -100,7 +104,7 @@ async def _stream_chat(
     try:
         loop = asyncio.get_event_loop()
         memories = await loop.run_in_executor(
-            None, _recall_memories, app_state, query, limit,
+            None, _recall_memories, app_state, query, limit, profile,
         )
     except Exception:
         logger.exception("chat: memory retrieval failed")
@@ -326,7 +330,7 @@ async def _stream_openai_compat(
 
 # ── Retrieval Helper ─────────────────────────────────────────────
 
-def _recall_memories(app_state, query: str, limit: int) -> list:
+def _recall_memories(app_state, query: str, limit: int, profile: str = "") -> list:
     """Run full recall via the daemon's resident, lease-protected engine.
 
     v3.7.8 CRITICAL fix: this used to go through ``WorkerPool.shared()``, a
@@ -340,7 +344,9 @@ def _recall_memories(app_state, query: str, limit: int) -> list:
     reflects the current profile.
     """
     adapter = getattr(app_state, "engine_recall_adapter", None)
-    if adapter is not None:
+    # The adapter recalls the engine's own workspace; a caller's workspace is
+    # served by the resident engine, which takes it explicitly.
+    if adapter is not None and not profile:
         result = adapter.recall(query, limit=limit)
         if result.get("ok"):
             return result.get("results", [])
@@ -349,10 +355,10 @@ def _recall_memories(app_state, query: str, limit: int) -> list:
     # recall directly against the resident engine under the same profile
     # lease the HTTP /recall route uses. Never fall back to WorkerPool —
     # that reintroduces the stale-profile leak this fix closes.
-    return _recall_via_resident_engine(app_state, query, limit)
+    return _recall_via_resident_engine(app_state, query, limit, profile)
 
 
-def _recall_via_resident_engine(app_state, query: str, limit: int) -> list:
+def _recall_via_resident_engine(app_state, query: str, limit: int, profile: str = "") -> list:
     """Lease-protected direct-engine recall, mirroring the /recall route."""
     from superlocalmemory.server.profile_runtime import get_profile_runtime
     from superlocalmemory.server.routes.helpers import get_engine_lazy
@@ -363,14 +369,15 @@ def _recall_via_resident_engine(app_state, query: str, limit: int) -> list:
         if engine is None:
             return []
         from superlocalmemory.core.answer_check_history import call_as_dashboard
-        response = call_as_dashboard(engine.recall, query, limit=limit)  # not agent traffic
+        response = call_as_dashboard(  # not agent traffic
+            engine.recall, query, limit=limit, profile_id=profile or None)
         memory_ids = list({
             r.fact.memory_id for r in response.results[:limit]
             if r.fact.memory_id
         })
         memory_map = (
             engine._db.get_memory_content_batch(
-                memory_ids, engine.profile_id,
+                memory_ids, profile or engine.profile_id,
                 include_global=True, include_shared=True,
             ) if memory_ids else {}
         )

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/server/routes/memories.py

@@ -565,6 +565,10 @@ def get_memories(
     cluster_id: Optional[int] = None,
     min_importance: Optional[int] = None,
     tags: Optional[str] = None,
+    fact_id: Optional[str] = Query(
+        None, max_length=64, pattern=r"^[A-Za-z0-9_-]+$",
+        description="Only this memory (a source opened from recall on the dashboard).",
+    ),
     limit: int = Query(BROWSE_PAGE_SIZE, ge=1, le=200),
     offset: int = Query(0, ge=0),
     filter: Optional[str] = Query(
@@ -687,6 +691,11 @@ def get_memories(
                 count_base += " AND project_name = ?"
             params.append(project_name)
             count_params.append(project_name)
+        if fact_id and use_v3:
+            query += " AND fact_id = ?"
+            params.append(fact_id)
+            count_base += " AND fact_id = ?"
+            count_params.append(fact_id)
         if cluster_id is not None and not use_v3:
             query += " AND cluster_id = ?"
             params.append(cluster_id)
@@ -977,6 +986,11 @@ async def search_memories(request: Request, body: SearchRequest):
     (422, INVALID_KIND) before any retrieval if it does not parse.
     """
     from superlocalmemory.core.kind_query import InvalidKind, resolve_kind
+    # READ on the caller's own workspace, and the search below runs there only.
+    # This POST is not gated by the GET-only RBAC middleware; without it a
+    # person signed in to one workspace searched the owner's active one.
+    from superlocalmemory.server.routes.v3_api import _resolve_profile
+    _search_profile = _resolve_profile(request)
     try:
         parsed_kind = resolve_kind(getattr(body, "kind", ""))
     except InvalidKind as exc:
@@ -1034,6 +1048,7 @@ async def search_memories(request: Request, body: SearchRequest):
                 None,
                 lambda: call_as_dashboard(
                     engine.recall, body.query, limit=_search_limit, fast=True,
+                    profile_id=_search_profile,
                     window=_window or None,
                     # 4.1.25: a person searching sees close memories of a real
                     # question (labelled related); the toggle shows every weak one.
@@ -1043,7 +1058,7 @@ async def search_memories(request: Request, body: SearchRequest):
                     # an outcome can be matched to, and a search typed into the
                     # dashboard is one continuous thread of use, not a
                     # conversation turn.
-                    session_id=f"dashboard:{get_active_profile()}",
+                    session_id=f"dashboard:{_search_profile}",
                 ),
             )
             # A run_in_executor thread cannot be cancelled, and wait_for() on it
@@ -1112,7 +1127,7 @@ async def search_memories(request: Request, body: SearchRequest):
         conn = get_db_connection()
         conn.row_factory = dict_factory
         cursor = conn.cursor()
-        active_profile = get_active_profile()
+        active_profile = _search_profile
         # Degraded-lexical fallback: a plain equality filter, not the
         # over-fetch-then-trim windowing core.kind_query's helpers use for
         # list/search's primary paths (this is a raw connection, not a

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/server/routes/v3_api.py

@@ -108,7 +108,16 @@ def _resolve_profile(request: Request, requested: str = "") -> str:
 
     if requested and not isinstance(requested, str):
         raise HTTPException(status_code=422, detail="profile must be a string")
-    profile = requested.strip() if requested else get_active_profile()
+    if requested:
+        profile = requested.strip()
+    else:
+        # A signed-in person's own workspace when they name none, exactly as
+        # /recall routes it (caller_workspace.route_to_bound). The daemon's
+        # active workspace here sent a viewer of another workspace to the
+        # owner's: the Recall Lab then said "That isn't in SuperLocalMemory".
+        from superlocalmemory.server.caller_workspace import bound_workspace
+
+        profile = bound_workspace() or get_active_profile()
     require_permission(request, Permission.READ, profile=profile)
     return profile
 
@@ -1249,7 +1258,10 @@ async def recall_trace(request: Request):
     import time as _time
     # 4.1.20: it returns memory content, so it needs READ on the workspace when
     # team accounts are on. The RBAC middleware gates GET only; this is a POST.
-    _resolve_profile(request)
+    # The recall below runs on exactly the workspace that was checked: without
+    # it the engine searched its own active workspace, so a person signed in to
+    # one workspace read another's memories.
+    _profile = _resolve_profile(request)
     try:
         body = await request.json()
         query = body.get("query", "")
@@ -1316,6 +1328,7 @@ async def recall_trace(request: Request):
             None,
             lambda: call_as_dashboard(  # a dashboard test, never agent traffic
                 engine.recall, query, limit=limit, fast=False,
+                profile_id=_profile,
                 window=window or None, as_of=_as_of,
                 known_as_of=_known_as_of, valid_at=_valid_at,
                 include_unknown=include_unknown,
@@ -1345,7 +1358,7 @@ async def recall_trace(request: Request):
 
         # Record learning signals (non-blocking, non-critical)
         try:
-            _record_learning_signals(query, results)
+            _record_learning_signals(query, results, profile_id=_profile)
         except Exception as _sig_exc:
             import logging as _log
             _log.getLogger(__name__).warning("Learning signal error: %s", _sig_exc)
@@ -1365,14 +1378,17 @@ async def recall_trace(request: Request):
         return _internal_error()
 
 
-def _record_learning_signals(query: str, results: list) -> None:
-    """Record feedback + co-retrieval + confidence boost for any recall."""
+def _record_learning_signals(query: str, results: list, profile_id: str = "") -> None:
+    """Record feedback + co-retrieval + confidence boost for any recall.
+
+    ``profile_id`` is the workspace the recall ran on; signals are filed there.
+    """
     from superlocalmemory.core.config import SLMConfig
 
     from superlocalmemory.infra.data_root import canonical_data_root
     slm_dir = canonical_data_root()
     config = SLMConfig.load()
-    pid = config.active_profile
+    pid = profile_id or config.active_profile
     fact_ids = [r.get("fact_id", "") for r in results[:10] if r.get("fact_id")]
     if not fact_ids:
         return

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/ui/index.html

@@ -1578,7 +1578,7 @@
 
     <script src="static/js/memories.js"></script>
     <script src="static/js/search.js"></script>
-    <script src="static/js/modal.js"></script>
+    <script src="static/js/modal.js?v=9fa5d274"></script>
     <script src="static/js/clusters.js?v=97cb9604"></script>
     <script src="static/js/timeline.js"></script>
     <script src="static/js/profiles.js"></script>
@@ -1600,7 +1600,7 @@
     <script src="static/js/compliance.js?v=f63afc16"></script>
     <script src="static/js/init.js?v=a4c439a7"></script>
     <script src="static/js/dashboard.js?v=de4b9207"></script>
-    <script src="static/js/recall-lab.js?v=67b16bf4"></script>
+    <script src="static/js/recall-lab.js?v=92cc71a8"></script>
     <script src="static/js/trust-dashboard.js?v=3d4e9da6"></script>
     <script src="static/js/math-health.js"></script>
     <script src="static/js/auto-settings.js"></script>
@@ -1631,16 +1631,16 @@
     <script src="static/js/od-compliance-ext.js?v=620f313a"></script>
     <script src="static/js/od-ops-health.js?v=5190513b"></script>
     <script src="static/js/od-store-check.js?v=165f9bf0"></script>
-    <script src="static/js/od-team.js?v=827a1367"></script>
+    <script src="static/js/od-team.js?v=6a0a3236"></script>
     <script src="static/js/od-graph.js?v=c8d9ae42"></script>
-    <script src="static/js/od-source-button.js?v=3c3833ab"></script>
+    <script src="static/js/od-source-button.js?v=d8ceae3c"></script>
     <script src="static/js/od-summaries.js?v=e127f1d2"></script>
     <script src="static/js/od-views.js?v=7b7b2e67"></script>
     <script src="static/js/od-daily.js?v=a46ef439"></script>
     <script src="static/js/od-memory-knowledge.js?v=f9ea0505"></script>
     <script src="static/js/od-memory-drawer.js?v=b6181efb"></script>
     <script src="static/js/od-memory-events.js?v=acb0b1ce"></script>
-    <script src="static/js/od-memories.js?v=b3e46cf7"></script>
+    <script src="static/js/od-memories.js?v=3368eb25"></script>
     <script src="static/js/od-entities.js?v=a3c36da4"></script>
     <!-- Multi-Agent Memory pane (v3.8.0): visualises memory written by multiple agents -->
     <script src="static/js/od-agents.js?v=2a30b11b"></script>
@@ -1654,9 +1654,9 @@
     <script src="static/js/od-engine-upgrade.js?v=c2231c0e"></script>
     <script src="static/js/od-settings-models.js?v=813bc0ef"></script>
     <script src="static/js/od-settings-groups.js?v=b5c9a2a4"></script>
-    <script src="static/js/od-settings.js?v=53dcfbc4"></script>
+    <script src="static/js/od-settings.js?v=0f363553"></script>
     <script src="static/js/answer-check.js?v=a53b5b38"></script>
-    <script src="static/js/od-answercheck-tryit.js?v=340489fa"></script>
+    <script src="static/js/od-answercheck-tryit.js?v=26f9f5f0"></script>
     <script src="static/js/od-answercheck.js?v=39d5d841"></script>
     <script src="static/js/od-backup-encryption.js?v=2747019c"></script>
     <script src="static/js/od-backup-recovery.js?v=76f0187b"></script>
@@ -1672,13 +1672,14 @@
     <!-- 4.1.25: images and documents card, shared by the Documents & Images pane -->
     <script src="static/js/od-features.js?v=afbe0191"></script>
     <script src="static/js/od-botmessages.js?v=4b4828a5"></script>
-    <script src="static/js/od-sources.js?v=c23b4a24"></script>
+    <script src="static/js/od-sources.js?v=b96dd2f9"></script>
     <script src="static/js/od-media-find.js?v=10cc0e63"></script>
     <script src="static/js/od-media.js?v=4171a7af"></script>
     <script src="static/js/od-dash-home.js?v=82cd4e3d"></script>
     <script src="static/js/od-help.js?v=e06df0d4"></script>
     <script src="static/js/od-polish.js?v=0ca34b74"></script>
     <script src="static/js/od-startup.js?v=e8035f95"></script>
+    <script src="static/js/od-signin-gate.js?v=ee88d980"></script>
 
     <!-- Aggressive compression warning modal (v3.6.0 M-03) -->
     <div class="modal fade" id="optimizeAggressiveModal" tabindex="-1" aria-labelledby="optimizeAggressiveModalLabel" aria-hidden="true">

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/ui/js/modal.js

@@ -78,6 +78,8 @@ function openMemoryDetail(mem, source) {
             .then(function(r) { return r.ok ? r.json() : null; })
             .then(function(data) {
                 if (!data || !data.memory) return;
+                // Recall shows a shortened memory; the modal shows all of it.
+                if (data.memory.content) contentDiv.textContent = data.memory.content;
                 var hydration = document.getElementById('memory-detail-hydration');
                 if (hydration) hydration.remove();
                 var block = document.createElement('div');

{superlocalmemory-4.2.0 → superlocalmemory-4.2.1}/src/superlocalmemory/ui/js/od-answercheck-tryit.js

@@ -141,12 +141,23 @@
       var score = typeof rel === 'number' ? Math.round(rel * 100) + '% relevant' : '';
       var text = String(r.content || '');
       if (text.length > SNIPPET) text = text.slice(0, SNIPPET) + '…';
-      list.appendChild(el('li', { style: 'margin-bottom:6px' }, [
+      var item = el('li', { style: 'margin-bottom:6px' }, [
         el('span', { class: 'badge neutral', style: 'margin-right:6px', text: score || 'match' }),
         (r.memory_kind_label || r.memory_kind) ? el('span', { class: 'badge cyan', style: 'margin-right:6px',
           text: kindBadgeText(r) }) : null,
         el('span', { class: 'ac-snippet', text: text }),
-      ]));
+      ]);
+      // A found memory opens in full in the Memories tab.
+      if (r.fact_id && typeof window.odOpenMemory === 'function') {
+        item.style.cursor = 'pointer';
+        item.title = 'Open this memory in Memories';
+        item.setAttribute('role', 'link');
+        item.tabIndex = 0;
+        var open = function () { window.odOpenMemory(String(r.fact_id)); };
+        item.addEventListener('click', open);
+        item.addEventListener('keydown', function (e) { if (e.key === 'Enter') open(); });
+      }
+      list.appendChild(item);
     });
     col.appendChild(list);
     if (results.length > 3) {