@vib795/agent-memory 0.5.0 → 0.5.1

package/HOWTO.md

@@ -304,7 +304,7 @@ Everything is in one folder:
   memory/notes/     your notes, as plain markdown files
 ```
 
-Three things worth knowing:
+Five things worth knowing:
 
 **Nothing leaves your machine.** No server, no account, no telemetry, no background
 process, nothing to get approved by IT. It is a small program that writes text files.
@@ -322,6 +322,13 @@ nothing to be locked into.
 **Nothing is ever deleted.** Notes that get replaced or go stale move to an `archive`
 folder rather than disappearing.
 
+**Sharing is a separate decision.** If you export your notes to hand to a colleague,
+personal details — phone numbers, card numbers, national IDs, email addresses — are
+stripped on the way out, and the file tells you what was removed. A note that is
+mostly contact details is left out of the file entirely rather than shipped with holes
+in it. Names and addresses written in ordinary prose are not something a pattern can
+find, so ask your assistant to read the file over before you send it.
+
 ---
 
 ## 11. When something is wrong

package/README.md

@@ -472,7 +472,7 @@ is generated state, and the committed value is only a placeholder.
 
 Needs Node 22.5 or newer; `doctor` says so plainly if the version is too old.
 
-Run `npm test` for the suite (87 tests, no dependencies). CI runs it on Linux,
+Run `npm test` for the suite (88 tests, no dependencies). CI runs it on Linux,
 macOS and Windows across Node 22 and 24, and separately installs the packed tarball
 and exercises it end to end on all three.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vib795/agent-memory",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Durable cross-repo knowledge graph for GitHub Copilot and Claude Code. Markdown source of truth, disposable SQLite index, zero runtime dependencies.",
   "keywords": [
     "github-copilot",

package/src/pii.js

@@ -228,10 +228,15 @@ export function buildReceipt(results, { scanned }) {
   const counts = new Map();
   const withheld = [];
   for (const r of results) {
-    for (const f of r.findings) counts.set(f.kind, (counts.get(f.kind) || 0) + f.count);
     if (r.withheld) {
+      // Counted under `withheld`, not under `redacted`. Nothing in a withheld note
+      // was redacted, because the note is not in the file; folding its findings into
+      // the redaction totals would overstate what the reader is holding, and a
+      // governance artifact that overstates is worth less than none.
       withheld.push({ id: r.id, reason: r.reason, kinds: r.findings.map((f) => f.kind) });
+      continue;
     }
+    for (const f of r.findings) counts.set(f.kind, (counts.get(f.kind) || 0) + f.count);
   }
   const redactions = [...counts.entries()]
     .map(([kind, count]) => ({ kind, count }))