myagentmemory 0.5.2 → 0.5.4

package/dist/plugin-service.js

@@ -139,8 +139,8 @@ function activationPage(action, error) {
 			<p class="terminal-note" id="terminal-note">Your terminal will finish setup after activation.</p>
 			<details>
 				<summary>What’s shared during activation</summary>
-				<p>Your email identifies your free daily allowance. The CLI also sends core and bundle versions, platform, architecture, and release channel. The service stores a daily count of opaque session-start operations. Activation records expire after 365 days without use.</p>
-				<p class="never-sent"><strong>Never sent:</strong> The request never includes memory, session content, queries, repository paths, raw agent session identifiers, IP addresses, or user-agent strings.</p>
+				<p>Your email identifies your free daily allowance. The CLI also sends core and bundle versions, platform, architecture, and release channel. The service stores bounded activation metadata. Activation records expire after 365 days without use.</p>
+				<p class="never-sent"><strong>Not included in AgentMemory's application payload:</strong> memory, session content, queries, repository paths, raw agent session identifiers, IP addresses, or user-agent strings.</p>
 			</details>
 		</section>
 	</main>
@@ -394,38 +394,21 @@ export class AgentMemoryServiceBackend {
         validatePluginEntitlementStatusV1(value.entitlement);
         if (typeof value.artifactGrant !== "string" || !value.artifactGrant)
             throw new PluginBootstrapFailure("service_response_invalid", "The access response omitted its artifact grant");
-        if (typeof value.usageCredential !== "string" || !ACTIVATION_CREDENTIAL.test(value.usageCredential))
-            throw new PluginBootstrapFailure("service_response_invalid", "The access response omitted its usage credential");
         const recallQuota = value.entitlement.capabilities.recall?.quota;
         const learningQuota = value.entitlement.capabilities.learning?.quota;
         if (value.entitlement.plan !== "free" ||
             value.entitlement.state !== "active" ||
             value.entitlement.capabilities.recall?.enabled !== true ||
             !recallQuota ||
-            recallQuota.limit !== 20 ||
-            recallQuota.scope !== "device" ||
-            recallQuota.window !== "day" ||
             value.entitlement.capabilities.learning?.enabled !== true ||
             !learningQuota ||
-            learningQuota.limit !== 5 ||
-            learningQuota.scope !== "device" ||
-            learningQuota.window !== "day" ||
             value.entitlement.capabilities["session-index"]?.enabled !== true ||
             value.entitlement.capabilities["session-worker"]?.enabled !== false ||
             value.entitlement.capabilities["web-console"]?.enabled !== true)
             throw new PluginBootstrapFailure("service_response_invalid", "The free preview policy is invalid");
-        this.writeActivation(installationId, value.usageCredential, 1);
+        this.writeActivation(installationId);
         return { kind: "granted", entitlement: value.entitlement, artifactGrant: value.artifactGrant };
     }
-    async reserveSession(operationId) {
-        return this.sessionUsage("reserve", operationId);
-    }
-    async commitSession(operationId) {
-        return this.sessionUsage("commit", operationId);
-    }
-    async releaseSession(operationId) {
-        return this.sessionUsage("release", operationId);
-    }
     async listReleases(request) {
         const response = await this.request(`${this.apiOrigin}/v1/plugin/releases`, {
             headers: { Authorization: `Bearer ${request.artifactGrant}` },
@@ -480,28 +463,28 @@ export class AgentMemoryServiceBackend {
             if (!stat.isFile() || stat.isSymbolicLink() || (process.platform !== "win32" && (stat.mode & 0o077) !== 0))
                 return null;
             const value = JSON.parse(fs.readFileSync(activationPath, "utf-8"));
-            if (value.schemaVersion !== 3 ||
-                typeof value.installationId !== "string" ||
+            if (typeof value.installationId !== "string" ||
                 !/^am_install_[A-Za-z0-9_-]{32}$/.test(value.installationId) ||
                 !Number.isFinite(Date.parse(value.activatedAt)) ||
-                !ACTIVATION_CREDENTIAL.test(value.usageCredential) ||
-                !Number.isSafeInteger(value.dailySessionLimit) ||
-                value.dailySessionLimit <= 0 ||
-                value.dailySessionLimit > 10_000)
+                (value.schemaVersion !== 4 &&
+                    (value.schemaVersion !== 3 ||
+                        typeof value.usageCredential !== "string" ||
+                        !ACTIVATION_CREDENTIAL.test(value.usageCredential) ||
+                        !Number.isSafeInteger(value.dailySessionLimit))))
                 return null;
-            return value;
+            return {
+                schemaVersion: 4,
+                installationId: value.installationId,
+                activatedAt: value.activatedAt,
+            };
         }
         catch {
             return null;
         }
     }
-    writeActivation(installationId, usageCredential, dailySessionLimit) {
+    writeActivation(installationId) {
         if (!/^am_install_[A-Za-z0-9_-]{32}$/.test(installationId))
             throw new PluginBootstrapFailure("activation_failed", "The installation identifier is invalid");
-        if (!ACTIVATION_CREDENTIAL.test(usageCredential))
-            throw new PluginBootstrapFailure("activation_failed", "The activation credential is invalid");
-        if (!Number.isSafeInteger(dailySessionLimit) || dailySessionLimit <= 0 || dailySessionLimit > 10_000)
-            throw new PluginBootstrapFailure("activation_failed", "The free session allowance is invalid");
         const target = this.activationPath();
         fs.mkdirSync(this.root, { recursive: true, mode: 0o700 });
         const rootStat = fs.lstatSync(this.root);
@@ -515,43 +498,12 @@ export class AgentMemoryServiceBackend {
             throw new PluginBootstrapFailure("activation_path_invalid", "The plugin activation directory is unsafe");
         const temporary = `${target}.tmp-${process.pid}-${randomUUID()}`;
         fs.writeFileSync(temporary, `${JSON.stringify({
-            schemaVersion: 3,
+            schemaVersion: 4,
             installationId,
             activatedAt: new Date().toISOString(),
-            usageCredential,
-            dailySessionLimit,
         }, null, 2)}\n`, { mode: 0o600, flag: "wx" });
         fs.renameSync(temporary, target);
     }
-    async sessionUsage(action, operationId) {
-        const activation = this.readActivation();
-        if (!activation)
-            throw new PluginBootstrapFailure("auth_required", "Run plugin install to activate AgentMemory");
-        const response = await this.request(`${this.apiOrigin}/v1/plugin/sessions/${action}`, {
-            method: "POST",
-            headers: {
-                Authorization: `Bearer ${activation.usageCredential}`,
-                "Content-Type": "application/json",
-            },
-            body: JSON.stringify({ schemaVersion: 1, operationId }),
-        });
-        const value = (await readJson(response));
-        const decision = value.decision;
-        if (!decision ||
-            typeof decision.allowed !== "boolean" ||
-            !["reserved", "committed", "released", "exhausted", "missing"].includes(String(decision.state)) ||
-            !Number.isSafeInteger(decision.limit) ||
-            Number(decision.limit) <= 0 ||
-            !Number.isSafeInteger(decision.used) ||
-            Number(decision.used) < 0 ||
-            !Number.isSafeInteger(decision.remaining) ||
-            Number(decision.remaining) < 0 ||
-            typeof decision.resetAt !== "string" ||
-            !Number.isFinite(Date.parse(decision.resetAt)) ||
-            typeof decision.idempotent !== "boolean")
-            throw new PluginBootstrapFailure("service_response_invalid", "The session usage response is invalid");
-        return decision;
-    }
     async request(url, init = {}) {
         let response;
         try {

package/dist/upgrade.d.ts

@@ -1,15 +1,21 @@
 /**
  * Upgrade orchestration for the `agent-memory` CLI and its official Pro plugin bundle.
  *
- * Two consumers:
+ * Three consumers:
  *   1. `agent-memory upgrade` — explicit user command; checks and (optionally) installs.
- *   2. `agent-memory hook session-start` — passive notice from a 24h-cached record.
+ *   2. `agent-memory upgrade --background` — detached, non-interactive; checks, then
+ *      installs any target whose `readUpgradePolicy()` value is `"auto"` (the default).
+ *      Spawned by `refreshUpgradeCacheBackground()` from `hook session-start`.
+ *   3. `agent-memory hook session-start` — passive notice from a 24h-cached record,
+ *      including the outcome of the last `--background` auto-install attempt.
  *
  * Network calls always have a hard timeout and always fail closed (upgrade is a
- * quality-of-life feature; a flaky registry must never break the CLI).
+ * quality-of-life feature; a flaky registry must never break the CLI). Same fail-closed
+ * contract applies to auto-install: a failed background install is recorded, never
+ * retried before the next cache refresh, and never thrown.
  */
 import { type SpawnOptions } from "node:child_process";
-export type InstallManager = "bun" | "npm" | "pnpm" | "yarn" | "unknown";
+export type InstallManager = "bun" | "homebrew" | "npm" | "pnpm" | "yarn" | "unknown";
 export interface InstallMethod {
     manager: InstallManager;
     global: boolean;
@@ -24,6 +30,17 @@ export interface UpgradeCache {
     cliLatest: string | null;
     pluginCurrent: string | null;
     pluginLatest: string | null;
+    /** Outcome of the most recent `--background` auto-upgrade attempt, if any. */
+    cliAuto?: AutoUpgradeOutcome;
+    pluginAuto?: AutoUpgradeOutcome;
+}
+export interface AutoUpgradeOutcome {
+    at: string;
+    ok: boolean;
+    /** Version installed (ok) or the previous/current version (failure). */
+    version: string | null;
+    /** Failure reason; absent when ok. */
+    error?: string;
 }
 export interface UpgradeStatus {
     cli: {
@@ -42,6 +59,32 @@ export interface UpgradeStatus {
 export declare function readUpgradeCache(): UpgradeCache | null;
 export declare function writeUpgradeCache(record: UpgradeCache): void;
 export declare function isCacheFresh(record: UpgradeCache | null, now?: number): boolean;
+export type UpgradePolicyValue = "off" | "notify" | "auto";
+export interface UpgradePolicy {
+    cli: UpgradePolicyValue;
+    plugin: UpgradePolicyValue;
+}
+/**
+ * Resolve the persisted auto-upgrade policy.
+ * Precedence per target: `AGENT_MEMORY_AUTO_UPGRADE_{CLI,PLUGIN}` env var →
+ * `<memoryDir>/state/upgrade-policy.json` → default `"auto"`.
+ *
+ * `existed` tells callers whether the policy file was already on disk —
+ * used to fire a one-time "auto-upgrade is on" notice on first read.
+ */
+export declare function readUpgradePolicy(): UpgradePolicy & {
+    existed: boolean;
+};
+/** Atomically persist the auto-upgrade policy. Merges with whatever is already on disk. */
+export declare function writeUpgradePolicy(patch: Partial<UpgradePolicy>): UpgradePolicy;
+export declare function resolveSelfLaunch(input: {
+    execPath: string;
+    scriptCandidate: string | undefined;
+    fileExists: (candidate: string) => boolean;
+}): {
+    command: string;
+    args: string[];
+};
 /**
  * Best-effort detection of how `myagentmemory` was installed. Path signatures
  * are heuristic but cover the common managers. On no match we fall back to
@@ -58,8 +101,10 @@ export interface InstallResult {
 export declare function runInstaller(method: InstallMethod, opts?: SpawnOptions): InstallResult;
 /**
  * Fire-and-forget: spawn a detached child that runs `agent-memory upgrade
- * --check --refresh --quiet` so the next session-start has a fresh cache.
- * Never awaits, never throws.
+ * --background --refresh --quiet` so the next session-start has a fresh
+ * cache. Unlike a plain check, `--background` also installs any target whose
+ * policy is `"auto"` (see `readUpgradePolicy`) — this is the one place
+ * auto-upgrade actually happens. Never awaits, never throws.
  */
 export declare function refreshUpgradeCacheBackground(): void;
 export interface CheckOptions {
@@ -77,4 +122,12 @@ export interface CheckOptions {
     pluginUpgradeAvailable?: boolean;
 }
 export declare function checkForUpgrades(opts: CheckOptions): Promise<UpgradeStatus>;
-export declare function formatUpgradeNotice(status: UpgradeStatus): string | null;
+/**
+ * `cache` (when passed) lets this distinguish a plain "notify" signal from the
+ * outcome of the last `--background` auto-install attempt for that target:
+ *   - succeeded, but this process is running older code than what's on disk
+ *     (e.g. a long-running `serve --mcp`) → "auto-upgraded, restart to use it"
+ *   - failed → surface the error and point at the manual command
+ *   - succeeded and already caught up (this process's own version matches) → silent
+ */
+export declare function formatUpgradeNotice(status: UpgradeStatus, cache?: UpgradeCache | null): string | null;

package/dist/upgrade.js

@@ -1,12 +1,18 @@
 /**
  * Upgrade orchestration for the `agent-memory` CLI and its official Pro plugin bundle.
  *
- * Two consumers:
+ * Three consumers:
  *   1. `agent-memory upgrade` — explicit user command; checks and (optionally) installs.
- *   2. `agent-memory hook session-start` — passive notice from a 24h-cached record.
+ *   2. `agent-memory upgrade --background` — detached, non-interactive; checks, then
+ *      installs any target whose `readUpgradePolicy()` value is `"auto"` (the default).
+ *      Spawned by `refreshUpgradeCacheBackground()` from `hook session-start`.
+ *   3. `agent-memory hook session-start` — passive notice from a 24h-cached record,
+ *      including the outcome of the last `--background` auto-install attempt.
  *
  * Network calls always have a hard timeout and always fail closed (upgrade is a
- * quality-of-life feature; a flaky registry must never break the CLI).
+ * quality-of-life feature; a flaky registry must never break the CLI). Same fail-closed
+ * contract applies to auto-install: a failed background install is recorded, never
+ * retried before the next cache refresh, and never thrown.
  */
 import { spawn, spawnSync } from "node:child_process";
 import * as fs from "node:fs";
@@ -50,6 +56,15 @@ async function fetchLatestFromNpm(fetchImpl = globalThis.fetch) {
 function upgradeCachePath() {
     return path.join(getMemoryDir(), "state", "upgrade-check.json");
 }
+function isValidAutoOutcome(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return (typeof candidate.at === "string" &&
+        typeof candidate.ok === "boolean" &&
+        (candidate.version === null || typeof candidate.version === "string") &&
+        (candidate.error === undefined || typeof candidate.error === "string"));
+}
 export function readUpgradeCache() {
     try {
         const raw = fs.readFileSync(upgradeCachePath(), "utf-8");
@@ -69,6 +84,8 @@ export function readUpgradeCache() {
             cliLatest: parsed.cliLatest ?? null,
             pluginCurrent: parsed.pluginCurrent ?? null,
             pluginLatest: parsed.pluginLatest ?? null,
+            cliAuto: isValidAutoOutcome(parsed.cliAuto) ? parsed.cliAuto : undefined,
+            pluginAuto: isValidAutoOutcome(parsed.pluginAuto) ? parsed.pluginAuto : undefined,
         };
     }
     catch {
@@ -93,15 +110,91 @@ export function isCacheFresh(record, now = Date.now()) {
         return false;
     return now - checked < CACHE_TTL_MS;
 }
+const UPGRADE_POLICY_FILENAME = "upgrade-policy.json";
+const UPGRADE_POLICY_DEFAULT = { cli: "auto", plugin: "auto" };
+function upgradePolicyPath() {
+    return path.join(getMemoryDir(), "state", UPGRADE_POLICY_FILENAME);
+}
+function isPolicyValue(value) {
+    return value === "off" || value === "notify" || value === "auto";
+}
+/**
+ * Resolve the persisted auto-upgrade policy.
+ * Precedence per target: `AGENT_MEMORY_AUTO_UPGRADE_{CLI,PLUGIN}` env var →
+ * `<memoryDir>/state/upgrade-policy.json` → default `"auto"`.
+ *
+ * `existed` tells callers whether the policy file was already on disk —
+ * used to fire a one-time "auto-upgrade is on" notice on first read.
+ */
+export function readUpgradePolicy() {
+    let stored = {};
+    let existed = false;
+    try {
+        const raw = fs.readFileSync(upgradePolicyPath(), "utf-8");
+        const parsed = JSON.parse(raw);
+        if (isPolicyValue(parsed.cli) || isPolicyValue(parsed.plugin)) {
+            stored = parsed;
+            existed = true;
+        }
+    }
+    catch { }
+    const envCli = process.env.AGENT_MEMORY_AUTO_UPGRADE_CLI;
+    const envPlugin = process.env.AGENT_MEMORY_AUTO_UPGRADE_PLUGIN;
+    return {
+        cli: isPolicyValue(envCli) ? envCli : isPolicyValue(stored.cli) ? stored.cli : UPGRADE_POLICY_DEFAULT.cli,
+        plugin: isPolicyValue(envPlugin)
+            ? envPlugin
+            : isPolicyValue(stored.plugin)
+                ? stored.plugin
+                : UPGRADE_POLICY_DEFAULT.plugin,
+        existed,
+    };
+}
+/** Atomically persist the auto-upgrade policy. Merges with whatever is already on disk. */
+export function writeUpgradePolicy(patch) {
+    const current = readUpgradePolicy();
+    const next = {
+        cli: patch.cli ?? current.cli,
+        plugin: patch.plugin ?? current.plugin,
+    };
+    const target = upgradePolicyPath();
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    const temporary = `${target}.${process.pid}.tmp`;
+    fs.writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(temporary, target);
+    return next;
+}
 // ---------------------------------------------------------------------------
 // Install-method detection
 // ---------------------------------------------------------------------------
+export function resolveSelfLaunch(input) {
+    const scriptCandidate = input.scriptCandidate;
+    const isRealScript = typeof scriptCandidate === "string" &&
+        scriptCandidate.length > 0 &&
+        !scriptCandidate.startsWith("/$bunfs/") &&
+        input.fileExists(scriptCandidate);
+    return isRealScript ? { command: input.execPath, args: [scriptCandidate] } : { command: input.execPath, args: [] };
+}
+function currentSelfLaunch() {
+    return resolveSelfLaunch({
+        execPath: process.execPath,
+        scriptCandidate: process.argv[1],
+        fileExists: fs.existsSync,
+    });
+}
 function selfInstallPath() {
+    const launch = currentSelfLaunch();
+    const candidate = launch.args[0] ?? launch.command;
     try {
-        return url.fileURLToPath(import.meta.url);
+        return fs.realpathSync(candidate);
     }
     catch {
-        return process.argv[1] ?? "";
+        try {
+            return url.fileURLToPath(import.meta.url);
+        }
+        catch {
+            return candidate;
+        }
     }
 }
 /**
@@ -113,6 +206,16 @@ export function detectInstallMethod(location = selfInstallPath()) {
     const normalized = location.replace(/\\/g, "/");
     const home = os.homedir().replace(/\\/g, "/");
     const pkg = `${NPM_PACKAGE_NAME}@latest`;
+    // Compiled CLI installed by the official Homebrew formula. Resolve symlinks
+    // before detection so /opt/homebrew/bin/agent-memory reaches its Cellar path.
+    if (normalized.includes("/Cellar/agent-memory/")) {
+        return {
+            manager: "homebrew",
+            global: true,
+            origin: location,
+            command: ["brew", "upgrade", "jayzeng/agentmemory/agent-memory"],
+        };
+    }
     // bun global install
     if (normalized.includes("/.bun/install/global/") || normalized.includes("/bun/install/global/")) {
         return { manager: "bun", global: true, origin: location, command: ["bun", "add", "-g", pkg] };
@@ -163,16 +266,17 @@ export function runInstaller(method, opts = {}) {
 // ---------------------------------------------------------------------------
 /**
  * Fire-and-forget: spawn a detached child that runs `agent-memory upgrade
- * --check --refresh --quiet` so the next session-start has a fresh cache.
- * Never awaits, never throws.
+ * --background --refresh --quiet` so the next session-start has a fresh
+ * cache. Unlike a plain check, `--background` also installs any target whose
+ * policy is `"auto"` (see `readUpgradePolicy`) — this is the one place
+ * auto-upgrade actually happens. Never awaits, never throws.
  */
 export function refreshUpgradeCacheBackground() {
     try {
-        const binary = process.argv[0];
-        const script = process.argv[1];
-        if (!binary || !script)
+        const launch = currentSelfLaunch();
+        if (!launch.command)
             return;
-        const child = spawn(binary, [script, "upgrade", "--check", "--refresh", "--quiet", "--json"], {
+        const child = spawn(launch.command, [...launch.args, "upgrade", "--background", "--refresh", "--quiet", "--json"], {
             detached: true,
             stdio: "ignore",
             env: { ...process.env, AGENT_MEMORY_UPGRADE_BACKGROUND: "1" },
@@ -231,13 +335,40 @@ export async function checkForUpgrades(opts) {
         fromCache,
     };
 }
-export function formatUpgradeNotice(status) {
+/**
+ * `cache` (when passed) lets this distinguish a plain "notify" signal from the
+ * outcome of the last `--background` auto-install attempt for that target:
+ *   - succeeded, but this process is running older code than what's on disk
+ *     (e.g. a long-running `serve --mcp`) → "auto-upgraded, restart to use it"
+ *   - failed → surface the error and point at the manual command
+ *   - succeeded and already caught up (this process's own version matches) → silent
+ */
+export function formatUpgradeNotice(status, cache) {
     const parts = [];
-    if (status.cli.upgradeAvailable)
+    let needsManualRun = false;
+    if (cache?.cliAuto && !cache.cliAuto.ok) {
+        parts.push(`CLI auto-upgrade failed (${cache.cliAuto.error ?? "unknown error"})`);
+        needsManualRun = true;
+    }
+    else if (cache?.cliAuto?.ok && cache.cliAuto.version && cache.cliAuto.version !== status.cli.current) {
+        parts.push(`CLI auto-upgraded → ${cache.cliAuto.version} (restart any long-running agent-memory process to use it)`);
+    }
+    else if (status.cli.upgradeAvailable) {
         parts.push(`CLI ${status.cli.current} → ${status.cli.latest ?? "new"}`);
-    if (status.plugin.upgradeAvailable)
+        needsManualRun = true;
+    }
+    if (cache?.pluginAuto && !cache.pluginAuto.ok) {
+        parts.push(`Pro auto-upgrade failed (${cache.pluginAuto.error ?? "unknown error"})`);
+        needsManualRun = true;
+    }
+    else if (cache?.pluginAuto?.ok && cache.pluginAuto.version && cache.pluginAuto.version !== status.plugin.current) {
+        parts.push(`Pro auto-upgraded → ${cache.pluginAuto.version}`);
+    }
+    else if (status.plugin.upgradeAvailable) {
         parts.push(`Pro ${status.plugin.current ?? "?"} → ${status.plugin.latest ?? "new"}`);
+        needsManualRun = true;
+    }
     if (!parts.length)
         return null;
-    return `agent-memory: upgrade available (${parts.join(", ")}). Run: agent-memory upgrade`;
+    return `agent-memory: ${parts.join("; ")}${needsManualRun ? ". Run: agent-memory upgrade" : ""}`;
 }

package/docs/official-plugin-bootstrap.md

@@ -89,7 +89,7 @@ The `pro` namespace is the user-facing surface. The `plugin` namespace remains s
 - `status` is read-only. It reports the installed bundle, selected channel, compatibility, entitlement state, and update availability.
 - `install` authenticates when necessary, then installs, upgrades, or reports current state.
 - `update` requires an existing installation and never starts a new purchase implicitly.
-- `uninstall` removes executable plugin material and the active receipt. It preserves core memory, plugin state, and the permission-restricted activation credential.
+- `uninstall` removes executable plugin material and the active receipt. It preserves core memory, plugin state, and the permission-restricted local activation record.
 - `manage` remains unavailable until authenticated account and billing management exists.
 
 Installed plugins contribute top-level commands including `recall` and `learn`; `dashboard` is a product-facing alias for the lower-level `web` command. Bootstrap command names are reserved by the core and cannot be replaced by a plugin.
@@ -172,7 +172,6 @@ An Enterprise administrator may pre-provision an organization entitlement or man
 The service exposes:
 
 - `POST /v1/plugin/access` for an anonymous free-preview policy, compatibility credential, and short-lived artifact grant;
-- `POST /v1/plugin/sessions/reserve|commit|release` for migration compatibility with activation-v2 clients;
 - `GET /v1/plugin/releases` for an Ed25519-signed release selected from the private R2 catalog;
 - `GET|HEAD /v1/artifacts/download` for the exact content-addressed object authorized by the bearer grant.
 
@@ -191,7 +190,7 @@ The bootstrap may send only:
 - core version, plugin-host API version, platform, and architecture;
 - requested bundle ID, installed bundle version, and release channel;
 - a pseudonymous license or organization identifier;
-- protocol nonces, opaque quota operation IDs, and authentication material required for the request.
+- protocol nonces and authentication material required for the request.
 
 It must never send memory contents, search queries, session contents, raw agent session identifiers, working-directory names, repository names, filesystem paths, or qmd data. The bounded allowance counter is authorization state, not general product telemetry.
 
@@ -267,7 +266,7 @@ An install or upgrade must:
 
 Failure before activation leaves the previous version active. Failure immediately after activation restores the previous receipt. Concurrent installers do not interleave. The core never invokes package-manager lifecycle scripts or elevates privileges.
 
-Uninstall removes executable versions, the active receipt, contributed skills, and managed hooks. It does not remove `MEMORY.md`, daily logs, topics, scratchpad items, source session logs, plugin-created review data, or billing state. A separate future purge command would require explicit scope and confirmation.
+Uninstall removes executable versions, the active receipt, contributed skills, and managed hooks. It does not remove `MEMORY.md`, daily logs, topics, scratchpad items, source session logs, plugin-created review data, or local activation state. The top-level `agent-memory uninstall` command composes this with hook/skill/MCP/completion removal in one step; its explicit `--data` flag additionally deletes the memory directory and the entire plugin install root (bundles, receipts, and activation state) once the user opts in and confirms.
 
 ## Plugin host API v1
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "myagentmemory",
-	"version": "0.5.2",
+	"version": "0.5.4",
 	"description": "agentmemory (agent-memory) is persistent memory for coding agents (Claude Code, OpenAI Codex, Cursor, Agent) with qmd-powered semantic search across daily logs, long-term memory, and scratchpad",
 	"main": "./dist/core.js",
 	"types": "./dist/core.d.ts",
@@ -93,7 +93,6 @@
 		"dist/plugin-runtime.js",
 		"dist/plugin-service.d.ts",
 		"dist/plugin-service.js",
-
 		"dist/mcp-server.d.ts",
 		"dist/mcp-server.js",
 		"dist/upgrade.d.ts",

package/scripts/install-skills.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Install (or uninstall) agent-memory skills for Claude Code, Codex, Cursor, and Agent CLI.
+# Install (or uninstall) agent-memory skills for Claude Code, Codex, Cursor, Agent CLI, and Qoder.
 # Usage: bash scripts/install-skills.sh [--uninstall]
 
 set -euo pipefail
@@ -63,12 +63,14 @@ SKILL_DIRS=(
   "$HOME/.codex/skills/agent-memory"
   "$HOME/.cursor/skills/agent-memory"
   "$HOME/.agents/skills/agent-memory"
+  "$HOME/.qoder/skills/agent-memory"
 )
 SKILL_LABELS=(
   "Claude Code skill"
   "Codex skill"
   "Cursor skill"
   "Agent CLI skill"
+  "Qoder skill"
 )
 
 if $UNINSTALL; then
@@ -84,6 +86,7 @@ else
   install_skill "Codex skill" "$PROJECT_DIR/skills/codex" "$HOME/.codex/skills/agent-memory" "$HOME/.codex" '[ -f "$HOME/.codex/config.toml" ] || command_exists codex'
   install_skill "Cursor skill" "$PROJECT_DIR/skills/cursor" "$HOME/.cursor/skills/agent-memory" "$HOME/.cursor"
   install_skill "Agent CLI skill" "$PROJECT_DIR/skills/agent" "$HOME/.agents/skills/agent-memory" "$HOME/.agents"
+  install_skill "Qoder skill" "$PROJECT_DIR/skills/qoder" "$HOME/.qoder/skills/agent-memory" "$HOME/.qoder" '[ -f "$HOME/.qoder/settings.json" ] || [ -f "$HOME/.qoder/settings.local.json" ] || command_exists qoder'
   echo ""
   echo "Done."
 fi

package/skills/agent/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-memory
-description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and semantic search.
+description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and keyword/semantic search, plus recall of past chat sessions. Use whenever the user says "remember", "recall", or asks to look up/search memory.
 ---
 
 # Agent Memory

package/skills/claude-code/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-memory
-description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and semantic search.
+description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and keyword/semantic search, plus recall of past chat sessions. Use whenever the user says "remember", "recall", or asks to look up/search memory.
 allowed-tools: Bash(agent-memory *)
 ---
 

package/skills/codex/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-memory
-description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and semantic search.
+description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and keyword/semantic search, plus recall of past chat sessions. Use whenever the user says "remember", "recall", or asks to look up/search memory.
 ---
 
 # Agent Memory

package/skills/cursor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-memory
-description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and semantic search.
+description: Persistent memory across coding sessions — long-term facts, daily logs, topic notes, scratchpad checklist, and keyword/semantic search, plus recall of past chat sessions. Use whenever the user says "remember", "recall", or asks to look up/search memory.
 ---
 
 # Agent Memory