compartment 3.0__tar.gz → 3.2__tar.gz

{compartment-3.0 → compartment-3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: compartment
-Version: 3.0
+Version: 3.2
 Summary: Compartment - high-security, fully offline, encrypted vector memory for AI agents (MCP)
 Project-URL: Homepage, https://github.com/MaxFreedomPollard/Compartment
 Project-URL: Source, https://github.com/MaxFreedomPollard/Compartment
@@ -33,13 +33,13 @@ Requires-Dist: onnxruntime>=1.17
 Requires-Dist: tokenizers>=0.15
 Requires-Dist: numpy>=1.26
 Requires-Dist: mcp>=1.0
+Requires-Dist: pyobjc-framework-Cocoa>=10.0; sys_platform == "darwin"
+Requires-Dist: pystray>=0.19; sys_platform == "win32"
+Requires-Dist: pillow>=10; sys_platform == "win32"
 Provides-Extra: hnsw
 Requires-Dist: usearch>=2.9; extra == "hnsw"
 Provides-Extra: menubar
-Requires-Dist: pyobjc-framework-Cocoa>=10.0; sys_platform == "darwin" and extra == "menubar"
 Provides-Extra: tray
-Requires-Dist: pystray>=0.19; sys_platform == "win32" and extra == "tray"
-Requires-Dist: pillow>=10; sys_platform == "win32" and extra == "tray"
 Provides-Extra: dev
 Requires-Dist: pytest>=8; extra == "dev"
 Requires-Dist: usearch>=2.9; extra == "dev"
@@ -203,14 +203,15 @@ never break your editor - and it stays quiet when the vault is locked.
        alt="The Compartment panel in the Windows notification area.">
 </p>
 
-**A menu bar and system tray app.** Download **Compartment.pkg** from the
-[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest)
-and open it - the installer asks whether you also want the menu bar utility,
-and everything (Python included) is self-contained, so there is nothing to
-install first. From a checkout, `pip install 'compartment[menubar]'`
-then `compartment menubar` does the same thing; on Windows,
-`pip install 'compartment[tray]'` then `compartment tray`. Either way it puts
-Compartment in the status bar: click the icon and a
+**A menu bar and system tray app, from the same one install.** `pip install
+compartment && compartment init` sets it up on macOS and on Windows: the app
+starts straight away and comes back at every login. There is no separate
+package, no extra to remember and no second command. On the Mac you can
+instead open **Compartment.pkg** from the
+[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest),
+which carries Python and every dependency inside it, so there is nothing to
+install first. `compartment init --no-app` skips the app for headless boxes
+and CI. Either way it puts Compartment in the status bar: click the icon and a
 panel shows whether the vault is open, how much it has learned, the three
 settings worth changing day to day (capture hook, whether starter facts join
 searches, auto-lock), and the last five things it remembered. Unlock, lock and

{compartment-3.0 → compartment-3.2}/README.md

@@ -157,14 +157,15 @@ never break your editor - and it stays quiet when the vault is locked.
        alt="The Compartment panel in the Windows notification area.">
 </p>
 
-**A menu bar and system tray app.** Download **Compartment.pkg** from the
-[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest)
-and open it - the installer asks whether you also want the menu bar utility,
-and everything (Python included) is self-contained, so there is nothing to
-install first. From a checkout, `pip install 'compartment[menubar]'`
-then `compartment menubar` does the same thing; on Windows,
-`pip install 'compartment[tray]'` then `compartment tray`. Either way it puts
-Compartment in the status bar: click the icon and a
+**A menu bar and system tray app, from the same one install.** `pip install
+compartment && compartment init` sets it up on macOS and on Windows: the app
+starts straight away and comes back at every login. There is no separate
+package, no extra to remember and no second command. On the Mac you can
+instead open **Compartment.pkg** from the
+[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest),
+which carries Python and every dependency inside it, so there is nothing to
+install first. `compartment init --no-app` skips the app for headless boxes
+and CI. Either way it puts Compartment in the status bar: click the icon and a
 panel shows whether the vault is open, how much it has learned, the three
 settings worth changing day to day (capture hook, whether starter facts join
 searches, auto-lock), and the last five things it remembered. Unlock, lock and

{compartment-3.0 → compartment-3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "compartment"
-version = "3.0"
+version = "3.2"
 description = "Compartment - high-security, fully offline, encrypted vector memory for AI agents (MCP)"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -36,6 +36,16 @@ dependencies = [
     "tokenizers>=0.15",
     "numpy>=1.26",
     "mcp>=1.0",
+    # The status bar app ships with every install, on the platforms that have
+    # one. It is not an add-on: unlocking, locking and changing the passphrase
+    # are things people do through the icon, not through a terminal, so an
+    # install that only lays down a CLI is an incomplete install. The markers
+    # keep it honest - nothing macOS-only is fetched on Windows, nothing
+    # Windows-only on macOS, and Linux (which has no status bar app here)
+    # installs neither and compiles nothing.
+    "pyobjc-framework-Cocoa>=10.0; sys_platform == 'darwin'",
+    "pystray>=0.19; sys_platform == 'win32'",
+    "pillow>=10; sys_platform == 'win32'",
 ]
 
 # PyPI is the repo's declared homepage, so it is a real front door - and
@@ -64,16 +74,12 @@ engram = "compartment.cli:main"
 # `pip install` compiles nothing and installs cleanly everywhere; large
 # corpora add it with `pip install compartment[hnsw]`.
 hnsw = ["usearch>=2.9"]
-# The macOS menu bar app. PyObjC is macOS-only and irrelevant to the CLI and
-# MCP server, so it stays out of the default install: `pip install
-# compartment[menubar]`, then `compartment menubar`.
-menubar = ["pyobjc-framework-Cocoa>=10.0; sys_platform == 'darwin'"]
-# The Windows tray app. tkinter draws the panel and comes with Python itself;
-# pystray owns the notification-area icon and is pure Python, so a Windows
-# install still compiles nothing: `pip install compartment[tray]`, then
-# `compartment tray`.
-tray = ["pystray>=0.19; sys_platform == 'win32'",
-        "pillow>=10; sys_platform == 'win32'"]
+# The status bar app is part of the base install now, so these two are kept
+# only so that an existing `pip install compartment[menubar]` or
+# `compartment[tray]` in someone's notes or script keeps resolving instead of
+# failing on an unknown extra. They add nothing.
+menubar = []
+tray = []
 dev = ["pytest>=8", "usearch>=2.9"]
 
 [tool.setuptools.packages.find]

{compartment-3.0 → compartment-3.2}/src/compartment/__init__.py

@@ -1,6 +1,6 @@
 """Compartment - high-security, fully offline, encrypted vector memory for AI agents."""
 
-__version__ = "3.0"
+__version__ = "3.2"
 
 from . import offline_guard as _og
 

{compartment-3.0 → compartment-3.2}/src/compartment/cli.py

@@ -11,7 +11,10 @@ import getpass
 import hashlib
 import json
 import os
+import shutil
+import subprocess
 import sys
+import time
 import zipfile
 from pathlib import Path
 
@@ -151,10 +154,201 @@ def cmd_init(args) -> None:
               "`compartment lock`")
     st = v.status()
     v.save()
+    if args.no_app:
+        print("  command-line only install (--no-app): no status bar app")
+    elif _cli_only_requested():
+        print("  command-line only install: no status bar app, no login item")
+        print("  add it later with `compartment menubar --login on`")
+    else:
+        _start_status_bar_app(path)
     print(f"\nVault ready: {st['records']} records, projected RAM "
           f"~{st['projected_ram_mb']}MB. Run `compartment selftest` to verify.")
 
 
+def _cli_only_requested(seconds: float = 5.0) -> bool:
+    """Offer a way out of the GUI, without making anyone wait for it.
+
+    A window, not a question: the install carries on by itself when the time
+    is up, so someone who is not looking at the terminal loses nothing. Only
+    a real keyboard gets asked - a piped or redirected stdin (installer
+    script, CI, `yes | ...`) skips this instantly rather than blocking for
+    five seconds on input that is never coming.
+    """
+    try:
+        if not sys.stdin.isatty():
+            return False
+    except Exception:                                    # noqa: BLE001
+        return False
+    print('\nThis is a normal install. Press the letter "s" within 5 seconds '
+          'if you want to do a command-line only install.')
+    try:
+        if sys.platform == "win32":
+            import msvcrt
+            deadline = time.monotonic() + seconds
+            while time.monotonic() < deadline:
+                if msvcrt.kbhit():
+                    return msvcrt.getwch().lower() == "s"
+                time.sleep(0.05)
+            return False
+        import select
+        import termios
+        import tty
+        fd = sys.stdin.fileno()
+        saved = termios.tcgetattr(fd)
+        try:
+            tty.setcbreak(fd)            # single keypress, no Enter needed
+            ready, _, _ = select.select([sys.stdin], [], [], seconds)
+            if not ready:
+                return False
+            return sys.stdin.read(1).lower() == "s"
+        finally:
+            termios.tcsetattr(fd, termios.TCSADRAIN, saved)
+    except Exception:                                    # noqa: BLE001
+        return False                     # never let this block an install
+
+
+def _start_status_bar_app(vault: str) -> None:
+    """Put the status bar app up now, and again at every login.
+
+    This runs as part of `init` because the icon is the product for most
+    people: unlocking, locking and changing the passphrase all live there.
+    An install that leaves you with only a terminal command is an install
+    that has not finished. Never fatal - a headless box, an SSH session or a
+    platform with no status bar still gets a perfectly good CLI and MCP
+    server, so a failure here is reported and stepped over.
+    """
+    if sys.platform not in ("darwin", "win32"):
+        return                                   # no status bar app here
+    try:
+        app = _tray_app()
+    except Exception as exc:                     # noqa: BLE001
+        print(f"  status bar app unavailable ({exc}); the CLI is unaffected")
+        return
+    try:
+        state = app.set_login(True)
+        print(f"  start at login: {state}")
+    except Exception as exc:                     # noqa: BLE001
+        print(f"  could not enable start at login ({exc})")
+    try:
+        exe = shutil.which("compartment")
+        argv = ([exe, "--vault", vault, "menubar"] if exe else
+                [sys.executable, "-m", "compartment.cli", "--vault", vault,
+                 "menubar"])
+        kwargs = {"stdout": subprocess.DEVNULL, "stderr": subprocess.DEVNULL}
+        if sys.platform == "win32":
+            # no console window behind an app that has no window
+            kwargs["creationflags"] = 0x00000008          # DETACHED_PROCESS
+        else:
+            kwargs["start_new_session"] = True            # outlive this shell
+        subprocess.Popen(argv, **kwargs)
+        print("  status bar app started - look for the icon in your "
+              + ("menu bar" if sys.platform == "darwin"
+                 else "notification area"))
+    except Exception as exc:                     # noqa: BLE001
+        print(f"  could not start the status bar app ({exc}); run "
+              "`compartment menubar` yourself")
+
+
+def _install_kind() -> tuple[str, list[str]]:
+    """How this copy was installed, and the command that upgrades it."""
+    exe = Path(sys.argv[0]).resolve()
+    if "uv/tools" in str(exe) or shutil.which("uv") and "uv/tools" in str(
+            Path(shutil.which("compartment") or "").resolve()):
+        return "uv", ["uv", "tool", "upgrade", "compartment"]
+    return "pip", [sys.executable, "-m", "pip", "install", "--upgrade",
+                   "compartment"]
+
+
+def cmd_update(args) -> None:
+    """Upgrade Compartment in place, then put the app back up."""
+    kind, cmd = _install_kind()
+    if args.source:
+        target = "git+https://github.com/MaxFreedomPollard/Compartment@main"
+        cmd = (["uv", "tool", "install", "--force", target] if kind == "uv"
+               else [sys.executable, "-m", "pip", "install", "--upgrade",
+                     "--force-reinstall", target])
+    print(f"Compartment {__version__} - updating ({kind} install)")
+    print("  " + " ".join(cmd))
+    try:
+        res = subprocess.run(cmd, timeout=1800)
+    except (OSError, subprocess.SubprocessError) as exc:
+        _die(f"update failed to run: {exc}")
+    if res.returncode != 0:
+        _die(f"update failed (exit {res.returncode})")
+    ver = "?"
+    try:
+        out = subprocess.run([shutil.which("compartment") or "compartment",
+                              "--version"], capture_output=True, text=True,
+                             timeout=120)
+        ver = (out.stdout or "").strip() or "?"
+    except (OSError, subprocess.SubprocessError):
+        pass
+    print(f"  updated: now {ver}")
+    print("  your vault and settings are untouched")
+    if not args.no_app and sys.platform in ("darwin", "win32"):
+        _restart_status_bar_app(args.vault)
+
+
+def _restart_status_bar_app(vault: str) -> None:
+    """Stop the running status bar app and start the new build."""
+    try:
+        app = _tray_app()
+        app.quit_running()
+    except Exception:                                    # noqa: BLE001
+        pass
+    _start_status_bar_app(vault)
+
+
+def cmd_uninstall(args) -> None:
+    """Remove Compartment from this machine. The vault is KEPT unless asked."""
+    print(f"Compartment {__version__} - uninstalling")
+    if sys.platform in ("darwin", "win32"):
+        try:
+            app = _tray_app()
+            try:
+                app.quit_running()
+                print("  status bar app stopped")
+            except Exception:                            # noqa: BLE001
+                pass
+            print(f"  start at login: {app.set_login(False)}")
+        except Exception as exc:                         # noqa: BLE001
+            print(f"  status bar app: nothing to remove ({exc})")
+    try:
+        if claude_hooks.is_installed():
+            claude_hooks.uninstall()
+            print("  Claude Code capture hook removed")
+    except Exception as exc:                             # noqa: BLE001
+        print(f"  capture hook: {exc}")
+    from .home import LEGACY_NAME, NAME
+    for name in (NAME, LEGACY_NAME):
+        try:
+            r = subprocess.run(["claude", "mcp", "remove", name],
+                               capture_output=True, text=True, timeout=120)
+            if r.returncode == 0:
+                print(f"  MCP registration removed: {name}")
+        except (OSError, subprocess.SubprocessError):
+            pass
+    if args.purge:
+        # only on an explicit --purge: this is the only copy of everything
+        # the agent has ever learned, and it is not recoverable.
+        for f in (args.vault, args.vault + ".config.json",
+                  args.vault + ".flock"):
+            try:
+                os.remove(f)
+                print(f"  deleted {f}")
+            except OSError:
+                pass
+        print("  vault deleted (--purge)")
+    else:
+        print(f"  vault KEPT at {args.vault}")
+        print("  delete it yourself, or re-run with --purge, once you are sure")
+    kind, _ = _install_kind()
+    final = ("uv tool uninstall compartment" if kind == "uv"
+             else f"{sys.executable} -m pip uninstall compartment")
+    print("\nOne step left, which cannot remove itself while it is running:")
+    print(f"  {final}")
+
+
 def _ask_yn(q: str) -> bool:
     if not sys.stdin.isatty():
         return False
@@ -1047,6 +1241,9 @@ def main(argv: list[str] | None = None) -> None:
                    help="store a reboot-surviving Keychain credential (macOS)")
     p.add_argument("--no-session", action="store_true",
                    help="do not stay unlocked after init")
+    p.add_argument("--no-app", action="store_true",
+                   help="do not start the status bar app or enable it at "
+                        "login (headless installs, CI)")
     p.set_defaults(fn=cmd_init)
 
     p = sub.add_parser(
@@ -1279,6 +1476,20 @@ def main(argv: list[str] | None = None) -> None:
                    help="only packs signed by the project are trusted by default. Name an author's 64 hex character public key to trust it deliberately; repeatable")
     p.set_defaults(fn=cmd_pack_export)
 
+    p = sub.add_parser("update", help="upgrade Compartment in place")
+    p.add_argument("--source", action="store_true",
+                   help="update from the GitHub main branch instead of PyPI")
+    p.add_argument("--no-app", action="store_true",
+                   help="do not restart the status bar app afterwards")
+    p.set_defaults(fn=cmd_update)
+
+    p = sub.add_parser("uninstall",
+                       help="remove Compartment from this machine "
+                            "(the vault is kept unless --purge)")
+    p.add_argument("--purge", action="store_true",
+                   help="ALSO delete the vault and its config, permanently")
+    p.set_defaults(fn=cmd_uninstall)
+
     p = sub.add_parser("integrate",
                        help="one-command wiring into claude, hermes, or openclaw")
     p.add_argument("target", choices=["claude", "hermes", "openclaw"])

{compartment-3.0 → compartment-3.2}/src/compartment/menubar.py

@@ -307,7 +307,13 @@ def _app_service():
         from Foundation import NSBundle
     except ImportError:
         return None
-    if not (NSBundle.mainBundle().bundleIdentifier() or "").strip():
+    # It has to be OUR bundle, not merely SOME bundle. A framework Python
+    # reports bundleIdentifier "org.python.python" with a bundle path inside
+    # Python.framework, so a bare "is there an identifier" test passes on an
+    # ordinary pip install. SMAppService would then act on Python.app: status
+    # comes back "not found", and registering would put PYTHON in the user's
+    # login items instead of Compartment.
+    if (NSBundle.mainBundle().bundleIdentifier() or "") != BUNDLE_ID:
         return None
     try:
         objc.loadBundle(
@@ -318,10 +324,66 @@ def _app_service():
         return None
 
 
+# A pip install has no app bundle, and SMAppService can only register one. So
+# the bundle path is used when there is a bundle, and a LaunchAgent otherwise.
+# Without this, `pip install compartment` could never start at login on macOS,
+# which would make the status bar app a second-class citizen of the very
+# install most people use.
+# Must match tools/build_macos_app.py: the identity of the real app bundle.
+BUNDLE_ID = "io.github.maxfreedompollard.compartment"
+LAUNCH_AGENT_LABEL = f"{BUNDLE_ID}.menubar"
+
+
+def _agent_plist() -> Path:
+    return Path.home() / "Library" / "LaunchAgents" / f"{LAUNCH_AGENT_LABEL}.plist"
+
+
+def _launcher_argv() -> list[str]:
+    """How to start the status bar app again later, from wherever we live."""
+    exe = shutil.which("compartment")
+    if exe:
+        return [exe, "menubar"]
+    return [sys.executable, "-m", "compartment.cli", "menubar"]
+
+
+def _set_login_agent(enabled: bool) -> str:
+    plist = _agent_plist()
+    if not enabled:
+        try:
+            subprocess.run(["launchctl", "unload", str(plist)],
+                           capture_output=True, timeout=10)
+        except (OSError, subprocess.SubprocessError):
+            pass
+        plist.unlink(missing_ok=True)
+        return "off"
+    argv = _launcher_argv()
+    args = "".join(f"        <string>{a}</string>\n" for a in argv)
+    plist.parent.mkdir(parents=True, exist_ok=True)
+    plist.write_text(
+        '<?xml version="1.0" encoding="UTF-8"?>\n'
+        '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" '
+        '"http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n'
+        '<plist version="1.0">\n'
+        '  <dict>\n'
+        f'    <key>Label</key><string>{LAUNCH_AGENT_LABEL}</string>\n'
+        '    <key>ProgramArguments</key>\n'
+        f'    <array>\n{args}    </array>\n'
+        '    <key>RunAtLoad</key><true/>\n'
+        '    <key>KeepAlive</key><false/>\n'
+        '  </dict>\n'
+        '</plist>\n', encoding="utf-8")
+    try:
+        subprocess.run(["launchctl", "load", str(plist)],
+                       capture_output=True, timeout=10)
+    except (OSError, subprocess.SubprocessError) as exc:
+        return f"failed: {exc}"
+    return "on"
+
+
 def login_status() -> str:
     svc = _app_service()
     if svc is None:
-        return "unavailable (not running from Compartment.app)"
+        return "on" if _agent_plist().is_file() else "off"
     return LOGIN_STATUS.get(svc.status(), str(svc.status()))
 
 
@@ -330,7 +392,7 @@ def set_login(enabled: bool) -> str:
     name with its icon instead of an anonymous "legacy agent" entry."""
     svc = _app_service()
     if svc is None:
-        return "unavailable (not running from Compartment.app)"
+        return _set_login_agent(enabled)     # pip install: no bundle to register
     try:
         res = (svc.registerAndReturnError_(None) if enabled
                else svc.unregisterAndReturnError_(None))
@@ -351,6 +413,28 @@ def set_login(enabled: bool) -> str:
     return login_status()
 
 
+def quit_running() -> bool:
+    """Stop a running status bar app, so an update or uninstall does not leave
+    the old build sitting in the menu bar with its binary already gone."""
+    import signal
+    killed = False
+    try:
+        out = subprocess.run(["pgrep", "-f", "compartment.*menubar"],
+                             capture_output=True, text=True, timeout=15).stdout
+    except (OSError, subprocess.SubprocessError):
+        return False
+    me = os.getpid()
+    for pid in [int(x) for x in out.split() if x.isdigit()]:
+        if pid == me:
+            continue
+        try:
+            os.kill(pid, signal.SIGTERM)
+            killed = True
+        except OSError:
+            pass
+    return killed
+
+
 # ----------------------------------------------------------------- self test
 
 def self_check(vault: str | None = None) -> int:

{compartment-3.0 → compartment-3.2}/src/compartment/systray.py

@@ -23,9 +23,12 @@ Design notes:
 from __future__ import annotations
 
 import os
+import shutil
 import sys
 from pathlib import Path
 
+from .home import env, home
+
 from .menubar import (AUTO_LOCK_CHOICES, RECENT_COUNT, auto_lock_label,
                       change_passphrase, claim_first_run, default_vault,
                       fetch_state, lock_vault, self_check, set_setting,
@@ -122,6 +125,24 @@ def _winreg():
     return winreg
 
 
+def _autostart_command(vault: str | None = None) -> str:
+    """What Windows runs at sign-in.
+
+    Two things this has to get right. It launches through the console script
+    or pythonw.exe rather than python.exe, because python.exe opens a console
+    window behind a tray app that has no window, at every single sign-in. And
+    it carries the vault path, because a user running a non-default vault
+    would otherwise silently get the default one back after a reboot.
+    """
+    vault = vault or env("VAULT") or str(home() / "memory.vault")
+    exe = shutil.which("compartment")
+    if exe:
+        return f'"{exe}" --vault "{vault}" tray'
+    pyw = Path(sys.executable).with_name("pythonw.exe")
+    runner = str(pyw) if pyw.is_file() else sys.executable
+    return f'"{runner}" -m compartment.cli --vault "{vault}" tray'
+
+
 def login_status() -> str:
     try:
         winreg = _winreg()
@@ -141,7 +162,7 @@ def set_login(enabled: bool) -> str:
         with winreg.CreateKey(winreg.HKEY_CURRENT_USER, RUN_KEY) as k:
             if enabled:
                 winreg.SetValueEx(k, RUN_VALUE, 0, winreg.REG_SZ,
-                                  f'"{sys.executable}" -m compartment.cli tray')
+                                  _autostart_command())
                 return "on"
             try:
                 winreg.DeleteValue(k, RUN_VALUE)
@@ -465,5 +486,17 @@ def run(vault: str | None = None, show: bool = False,
     return 0
 
 
-__all__ = ["run", "self_check", "login_status", "set_login", "panel_rows",
+def quit_running() -> bool:
+    """Stop a running tray app before an update or uninstall replaces it."""
+    import subprocess
+    try:
+        subprocess.run(["taskkill", "/F", "/IM", "compartment.exe"],
+                       capture_output=True, timeout=30)
+        return True
+    except (OSError, subprocess.SubprocessError):
+        return False
+
+
+__all__ = ["run", "self_check", "login_status", "set_login", "quit_running",
+           "panel_rows",
            "icon_path"]

{compartment-3.0 → compartment-3.2}/src/compartment.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: compartment
-Version: 3.0
+Version: 3.2
 Summary: Compartment - high-security, fully offline, encrypted vector memory for AI agents (MCP)
 Project-URL: Homepage, https://github.com/MaxFreedomPollard/Compartment
 Project-URL: Source, https://github.com/MaxFreedomPollard/Compartment
@@ -33,13 +33,13 @@ Requires-Dist: onnxruntime>=1.17
 Requires-Dist: tokenizers>=0.15
 Requires-Dist: numpy>=1.26
 Requires-Dist: mcp>=1.0
+Requires-Dist: pyobjc-framework-Cocoa>=10.0; sys_platform == "darwin"
+Requires-Dist: pystray>=0.19; sys_platform == "win32"
+Requires-Dist: pillow>=10; sys_platform == "win32"
 Provides-Extra: hnsw
 Requires-Dist: usearch>=2.9; extra == "hnsw"
 Provides-Extra: menubar
-Requires-Dist: pyobjc-framework-Cocoa>=10.0; sys_platform == "darwin" and extra == "menubar"
 Provides-Extra: tray
-Requires-Dist: pystray>=0.19; sys_platform == "win32" and extra == "tray"
-Requires-Dist: pillow>=10; sys_platform == "win32" and extra == "tray"
 Provides-Extra: dev
 Requires-Dist: pytest>=8; extra == "dev"
 Requires-Dist: usearch>=2.9; extra == "dev"
@@ -203,14 +203,15 @@ never break your editor - and it stays quiet when the vault is locked.
        alt="The Compartment panel in the Windows notification area.">
 </p>
 
-**A menu bar and system tray app.** Download **Compartment.pkg** from the
-[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest)
-and open it - the installer asks whether you also want the menu bar utility,
-and everything (Python included) is self-contained, so there is nothing to
-install first. From a checkout, `pip install 'compartment[menubar]'`
-then `compartment menubar` does the same thing; on Windows,
-`pip install 'compartment[tray]'` then `compartment tray`. Either way it puts
-Compartment in the status bar: click the icon and a
+**A menu bar and system tray app, from the same one install.** `pip install
+compartment && compartment init` sets it up on macOS and on Windows: the app
+starts straight away and comes back at every login. There is no separate
+package, no extra to remember and no second command. On the Mac you can
+instead open **Compartment.pkg** from the
+[latest release](https://github.com/MaxFreedomPollard/Compartment/releases/latest),
+which carries Python and every dependency inside it, so there is nothing to
+install first. `compartment init --no-app` skips the app for headless boxes
+and CI. Either way it puts Compartment in the status bar: click the icon and a
 panel shows whether the vault is open, how much it has learned, the three
 settings worth changing day to day (capture hook, whether starter facts join
 searches, auto-lock), and the last five things it remembered. Unlock, lock and

{compartment-3.0 → compartment-3.2}/src/compartment.egg-info/SOURCES.txt

@@ -63,6 +63,7 @@ tests/test_session_entropy.py
 tests/test_session_lock.py
 tests/test_starter_data_quality.py
 tests/test_starter_packs.py
+tests/test_status_bar_install.py
 tests/test_systray.py
 tests/test_tamper.py
 tests/test_twofa.py

{compartment-3.0 → compartment-3.2}/src/compartment.egg-info/requires.txt

@@ -5,6 +5,13 @@ tokenizers>=0.15
 numpy>=1.26
 mcp>=1.0
 
+[:sys_platform == "darwin"]
+pyobjc-framework-Cocoa>=10.0
+
+[:sys_platform == "win32"]
+pystray>=0.19
+pillow>=10
+
 [dev]
 pytest>=8
 usearch>=2.9
@@ -14,11 +21,4 @@ usearch>=2.9
 
 [menubar]
 
-[menubar:sys_platform == "darwin"]
-pyobjc-framework-Cocoa>=10.0
-
 [tray]
-
-[tray:sys_platform == "win32"]
-pystray>=0.19
-pillow>=10

{compartment-3.0 → compartment-3.2}/tests/test_offline_selftest_bench.py

@@ -78,7 +78,14 @@ def test_index_add_remove():
 def test_bench_budgets(seeded_vault):
     out = bench.run(seeded_vault, synthetic_n=5000, queries=20)
     assert out["budgets"]["vector_search_p95_under_100ms"], out
-    assert out["budgets"]["rss_under_1gb"], out
+    # None means the platform cannot measure RSS at all (no `resource`
+    # module, ie. Windows). It must never read as a pass, and it must not be
+    # asserted as one either.
+    rss = out["budgets"]["rss_under_1gb"]
+    if out["peak_rss_mb"] is None:
+        assert rss is None, out
+    else:
+        assert rss, out
 
 
 # --------------------------------------------------------------- bench fixes

{compartment-3.0 → compartment-3.2}/tests/test_session_entropy.py

@@ -180,6 +180,9 @@ def test_clear_keeps_the_secret_while_another_vault_still_needs_it():
 
 # --- file permissions ------------------------------------------------------
 
+@pytest.mark.skipif(os.name == "nt",
+                    reason="POSIX mode bits: Windows reports 0o666 for any "
+                           "writable file whatever mode os.open was given")
 def test_the_file_is_created_0600_under_any_umask():
     old = os.umask(0o000)                     # the friendliest possible umask
     try:
@@ -189,6 +192,8 @@ def test_the_file_is_created_0600_under_any_umask():
     assert oct(p.stat().st_mode & 0o777) == "0o600"
 
 
+@pytest.mark.skipif(os.name == "nt",
+                    reason="POSIX mode bits: see above")
 def test_an_existing_wider_file_is_narrowed_by_the_write():
     """os.open with a mode does nothing to a file that already exists, so the
     write has to narrow it as well as create it narrow."""

compartment-3.2/tests/test_status_bar_install.py

@@ -0,0 +1,160 @@
+"""The status bar app is part of a normal install, on macOS and on Windows.
+
+Unlocking, locking and changing the passphrase are things people do through
+the icon. An install that lays down only a CLI has not finished, and until
+this it did not: the GUI dependencies were optional extras, `init` never
+started the app, and on macOS start-at-login was impossible without the .app
+bundle.
+"""
+import sys
+import tomllib
+from pathlib import Path
+
+import pytest
+
+from compartment import menubar
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+# --- one install, not two --------------------------------------------------
+
+def _pyproject():
+    return tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
+
+
+def test_the_gui_deps_ship_with_a_plain_install():
+    """`pip install compartment` has to be enough. No extra, no second step."""
+    deps = " ".join(_pyproject()["project"]["dependencies"])
+    assert "pyobjc-framework-Cocoa" in deps, "macOS status bar missing"
+    assert "pystray" in deps and "pillow" in deps, "Windows tray missing"
+
+
+def test_the_gui_deps_are_platform_gated():
+    """Nothing macOS-only on Windows, nothing Windows-only on macOS."""
+    for dep in _pyproject()["project"]["dependencies"]:
+        if "pyobjc" in dep:
+            assert "sys_platform == 'darwin'" in dep
+        if "pystray" in dep or "pillow" in dep:
+            assert "sys_platform == 'win32'" in dep
+
+
+def test_the_old_extras_still_resolve():
+    """Someone's script or notes may still say compartment[menubar]. That must
+    keep working rather than failing on an unknown extra."""
+    extras = _pyproject()["project"]["optional-dependencies"]
+    assert extras["menubar"] == [] and extras["tray"] == []
+
+
+def test_one_command_covers_both_platforms():
+    from compartment import cli
+    assert 'aliases=["tray"]' in (ROOT / "src/compartment/cli.py").read_text(
+        encoding="utf-8"), "menubar/tray must stay one command"
+    assert hasattr(cli, "_start_status_bar_app")
+
+
+# --- macOS start at login, without an app bundle ---------------------------
+
+@pytest.fixture()
+def fake_home(tmp_path, monkeypatch):
+    monkeypatch.setenv("HOME", str(tmp_path))
+    return tmp_path
+
+
+@pytest.mark.skipif(sys.platform != "darwin", reason="macOS login item")
+def test_a_pip_install_is_not_mistaken_for_the_app_bundle():
+    """The regression that would put PYTHON in the user's login items.
+
+    A framework Python reports bundleIdentifier "org.python.python" with a
+    bundle path inside Python.framework, so a bare "is there a bundle?" test
+    passes on an ordinary pip install and SMAppService then acts on Python.app.
+    """
+    assert menubar._app_service() is None
+
+
+@pytest.mark.skipif(sys.platform != "darwin", reason="macOS login item")
+def test_start_at_login_round_trips_without_a_bundle(fake_home):
+    plist = menubar._agent_plist()
+    assert menubar.login_status() == "off"
+    assert menubar.set_login(True) == "on"
+    assert plist.is_file()
+    assert menubar.login_status() == "on"
+    assert menubar.set_login(False) == "off"
+    assert not plist.exists()
+    assert menubar.login_status() == "off"
+
+
+@pytest.mark.skipif(sys.platform != "darwin", reason="macOS login item")
+def test_the_login_agent_names_a_real_launcher(fake_home):
+    menubar.set_login(True)
+    body = menubar._agent_plist().read_text(encoding="utf-8")
+    assert menubar.LAUNCH_AGENT_LABEL in body
+    assert "<key>RunAtLoad</key><true/>" in body
+    assert "menubar" in body
+    menubar.set_login(False)
+
+
+# --- Windows autostart -----------------------------------------------------
+
+def test_windows_autostart_avoids_a_console_window_and_keeps_the_vault():
+    """python.exe opens a console window behind an app that has no window, at
+    every sign-in, and an autostart that drops --vault silently sends a user
+    with a non-default vault back to the default one."""
+    from compartment import systray
+    cmd = systray._autostart_command("/tmp/some.vault")
+    assert "/tmp/some.vault" in cmd, "the vault path must survive a reboot"
+    assert "python.exe" not in cmd.lower() or "pythonw.exe" in cmd.lower()
+
+
+# --- opting out of the GUI at install time ---------------------------------
+
+def test_a_scripted_install_never_waits_for_a_keypress(monkeypatch, capsys):
+    """The window must cost a non-interactive install nothing. A piped stdin
+    (installer script, CI, `yes | ...`) has no keyboard behind it, so waiting
+    five seconds for input that cannot arrive would be five seconds wasted on
+    every automated install."""
+    import time as _time
+    from compartment import cli
+
+    class NotATerminal:
+        def isatty(self):
+            return False
+
+    monkeypatch.setattr(cli.sys, "stdin", NotATerminal())
+    start = _time.monotonic()
+    assert cli._cli_only_requested(5.0) is False
+    assert _time.monotonic() - start < 0.5, "a scripted install must not stall"
+    assert "5 seconds" not in capsys.readouterr().out, "and must not be asked"
+
+
+def test_the_offer_survives_a_terminal_that_refuses_raw_mode(monkeypatch):
+    """Some terminals refuse cbreak. The install continues normally rather
+    than dying at the very last step, after the vault already exists."""
+    from compartment import cli
+
+    class Terminal:
+        def isatty(self):
+            return True
+
+        def fileno(self):
+            raise OSError("no fileno here")
+
+    monkeypatch.setattr(cli.sys, "stdin", Terminal())
+    assert cli._cli_only_requested(0.2) is False
+
+
+def test_the_prompt_says_what_max_asked_it_to_say(monkeypatch, capsys):
+    from compartment import cli
+
+    class Terminal:
+        def isatty(self):
+            return True
+
+        def fileno(self):
+            raise OSError("stop here, we only want the text")
+
+    monkeypatch.setattr(cli.sys, "stdin", Terminal())
+    cli._cli_only_requested(0.1)
+    out = capsys.readouterr().out
+    assert 'This is a normal install. Press the letter "s" within 5 seconds' in out
+    assert "command-line only install" in out