graph-mind-memory 0.3.0__tar.gz → 0.3.2__tar.gz

{graph_mind_memory-0.3.0/graph_mind_memory.egg-info → graph_mind_memory-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graph-mind-memory
-Version: 0.3.0
+Version: 0.3.2
 Summary: Local-first memory for AI coding assistants: verbatim, on your own PC, no LLM calls at write time.
 Author-email: Yohan Ko <goyohan0611@gmail.com>
 License-Expression: AGPL-3.0-only
@@ -48,7 +48,7 @@ Local-first memory for AI coding assistants. Verbatim storage, on your own PC:
 </div>
 
 > [!NOTE]
-> **Alpha (v0.1).** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
+> **Alpha.** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
 > The test suite also passes on Linux and macOS in CI, but nobody has used it day to day there yet.
 
 ---
@@ -66,7 +66,9 @@ calls Graph-MIND over MCP and gets back a few thousand tokens of the conversatio
   stores the turns and embeds them as they arrive.
 - **One memory across your PCs.** One sentence to the AI on the first PC, one command on the
   others (see [below](#one-memory-across-pcs)).
-- **Nothing leaves your machines.** There is no cloud, no account and no telemetry.
+- **No cloud of its own.** No account, no telemetry; the memory stays on your machines. What
+  leaves them is what your AI app already sends: the recalled turns go to your model's
+  provider with your question.
 
 ---
 
@@ -152,6 +154,10 @@ Then restart your AI apps. The server is also listed in the
 > cause. Clone to a short path such as `C:\graph-mind`, or enable long paths. The installer prints
 > the command for that.
 
+To remove it: `graph-mind-uninstall` unregisters it from every app, removes the login item and
+stops the capture service. Your memory stays in `~/.graph-mind` unless you add `--purge`. Then
+`pip uninstall graph-mind-memory` removes the program.
+
 ---
 
 ## What it captures
@@ -164,24 +170,31 @@ Then restart your AI apps. The server is also listed in the
 | Claude desktop: chat | what the model saves with `brain_remember` |
 
 Before anything is stored, these are masked: API keys, tokens from GitHub, AWS, Google and Slack,
-private keys, and passwords inside URLs.
+private keys, passwords inside URLs, values written after `password:` / `api_key=` / `token:`,
+and any long machine-random string even from a service no rule knows (by its randomness: 91% of
+random 20-64 character tokens caught; in 246,750 ordinary chat turns it fired 92 times, nearly
+all on real ids and tokens). Commit ids, hashes and UUIDs are kept, since you recall those on
+purpose.
+
+There is no switch to keep keys: a recalled memory goes to your model's provider with the question,
+so a stored key would leave your PC the first time it is useful. To have Graph-MIND remember a key,
+tell it **where the key is**, not the key: *"my OpenAI key is in 1Password, under Dev"*.
 
 Only what you actually send is captured: the service reads each app's transcript, which is written
 after you press Enter, so a paste you delete before sending never reaches it. A plain password
-like `hunter2` has no recognizable format and is **not** masked. To remove something:
+like `hunter2` has no recognizable format and is **not** masked. To remove something,
+
+just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
+(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
+is not saved. Or, from a terminal:
 
 ```bash
 graph-mind-forget          # asks for the phrase without showing it, then confirms
 ```
 
-Or just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
-(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
-is not saved.
-
-It deletes every captured turn and memory containing the phrase from this PC and its indexes,
-removes their lines from the shared memory, and tells your other PCs to delete their copies on
-their next sync. Only ids are shared for that, never the phrase. Your AI app's own history
-(for Claude Code, `~/.claude/projects`) is separate and is not touched.
+Either way, what you pick is deleted from this PC and its search indexes, from the shared memory,
+and from your other PCs on their next sync; only ids are shared for that, never the text. Your AI
+app's own history (for Claude Code, `~/.claude/projects`) is separate and is not touched.
 
 ---
 
@@ -254,7 +267,7 @@ python -m unittest discover -p "test_*.py"
 - **Multi-session questions are the weakest type at 80%.** These are questions that count or
   combine facts across many conversations.
 - **The repository still holds the research-phase experiments** next to the product (see
-  [Repository layout](#repository-layout)); the installed package carries only the 21 product
+  [Repository layout](#repository-layout)); the installed package carries only the 22 product
   modules.
 
 The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
@@ -263,11 +276,16 @@ The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
 
 | | files |
 |---|---|
-| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
+| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `forget.py` (deleting), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
 | **Benchmarks** | `product_answer_eval.py`, `official_judge_v073.py`, `rival_mem0.py`, `rival_mempalace.py`, `rival_clean_prereg.py`, and the result files under `runs/` |
 | **Research phase** | the other modules: earlier extraction pipelines and analyses that REPORT.md cites |
 | **Tests** | `test_*.py` |
 
+## Security
+
+Graph-MIND holds your conversations. Report vulnerabilities privately (GitHub **Security → Report
+a vulnerability**); [SECURITY.md](SECURITY.md) lists what is in scope and how the data is handled.
+
 ## Contributing
 
 Issues and pull requests are welcome. Contributions are accepted under the [CLA](CLA.md), which

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/README.md

@@ -22,7 +22,7 @@ Local-first memory for AI coding assistants. Verbatim storage, on your own PC:
 </div>
 
 > [!NOTE]
-> **Alpha (v0.1).** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
+> **Alpha.** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
 > The test suite also passes on Linux and macOS in CI, but nobody has used it day to day there yet.
 
 ---
@@ -40,7 +40,9 @@ calls Graph-MIND over MCP and gets back a few thousand tokens of the conversatio
   stores the turns and embeds them as they arrive.
 - **One memory across your PCs.** One sentence to the AI on the first PC, one command on the
   others (see [below](#one-memory-across-pcs)).
-- **Nothing leaves your machines.** There is no cloud, no account and no telemetry.
+- **No cloud of its own.** No account, no telemetry; the memory stays on your machines. What
+  leaves them is what your AI app already sends: the recalled turns go to your model's
+  provider with your question.
 
 ---
 
@@ -126,6 +128,10 @@ Then restart your AI apps. The server is also listed in the
 > cause. Clone to a short path such as `C:\graph-mind`, or enable long paths. The installer prints
 > the command for that.
 
+To remove it: `graph-mind-uninstall` unregisters it from every app, removes the login item and
+stops the capture service. Your memory stays in `~/.graph-mind` unless you add `--purge`. Then
+`pip uninstall graph-mind-memory` removes the program.
+
 ---
 
 ## What it captures
@@ -138,24 +144,31 @@ Then restart your AI apps. The server is also listed in the
 | Claude desktop: chat | what the model saves with `brain_remember` |
 
 Before anything is stored, these are masked: API keys, tokens from GitHub, AWS, Google and Slack,
-private keys, and passwords inside URLs.
+private keys, passwords inside URLs, values written after `password:` / `api_key=` / `token:`,
+and any long machine-random string even from a service no rule knows (by its randomness: 91% of
+random 20-64 character tokens caught; in 246,750 ordinary chat turns it fired 92 times, nearly
+all on real ids and tokens). Commit ids, hashes and UUIDs are kept, since you recall those on
+purpose.
+
+There is no switch to keep keys: a recalled memory goes to your model's provider with the question,
+so a stored key would leave your PC the first time it is useful. To have Graph-MIND remember a key,
+tell it **where the key is**, not the key: *"my OpenAI key is in 1Password, under Dev"*.
 
 Only what you actually send is captured: the service reads each app's transcript, which is written
 after you press Enter, so a paste you delete before sending never reaches it. A plain password
-like `hunter2` has no recognizable format and is **not** masked. To remove something:
+like `hunter2` has no recognizable format and is **not** masked. To remove something,
+
+just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
+(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
+is not saved. Or, from a terminal:
 
 ```bash
 graph-mind-forget          # asks for the phrase without showing it, then confirms
 ```
 
-Or just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
-(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
-is not saved.
-
-It deletes every captured turn and memory containing the phrase from this PC and its indexes,
-removes their lines from the shared memory, and tells your other PCs to delete their copies on
-their next sync. Only ids are shared for that, never the phrase. Your AI app's own history
-(for Claude Code, `~/.claude/projects`) is separate and is not touched.
+Either way, what you pick is deleted from this PC and its search indexes, from the shared memory,
+and from your other PCs on their next sync; only ids are shared for that, never the text. Your AI
+app's own history (for Claude Code, `~/.claude/projects`) is separate and is not touched.
 
 ---
 
@@ -228,7 +241,7 @@ python -m unittest discover -p "test_*.py"
 - **Multi-session questions are the weakest type at 80%.** These are questions that count or
   combine facts across many conversations.
 - **The repository still holds the research-phase experiments** next to the product (see
-  [Repository layout](#repository-layout)); the installed package carries only the 21 product
+  [Repository layout](#repository-layout)); the installed package carries only the 22 product
   modules.
 
 The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
@@ -237,11 +250,16 @@ The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
 
 | | files |
 |---|---|
-| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
+| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `forget.py` (deleting), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
 | **Benchmarks** | `product_answer_eval.py`, `official_judge_v073.py`, `rival_mem0.py`, `rival_mempalace.py`, `rival_clean_prereg.py`, and the result files under `runs/` |
 | **Research phase** | the other modules: earlier extraction pipelines and analyses that REPORT.md cites |
 | **Tests** | `test_*.py` |
 
+## Security
+
+Graph-MIND holds your conversations. Report vulnerabilities privately (GitHub **Security → Report
+a vulnerability**); [SECURITY.md](SECURITY.md) lists what is in scope and how the data is handled.
+
 ## Contributing
 
 Issues and pull requests are welcome. Contributions are accepted under the [CLA](CLA.md), which

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/brain_log.py

@@ -86,35 +86,47 @@ def local_postgres() -> str:
     its brain needs a port that stays put and a password for anyone not on this PC. The memory
     lives in database "graphmind" under role "graphmind", which is not a superuser: that is the
     role other PCs log in as."""
-    if "uri" not in _LOCAL_URI:
+    try:
+        from pgserver._commands import initdb, pg_ctl
+    except ImportError:
+        raise RuntimeError(
+            "Hosting the shared brain on this PC needs pgserver, which is built for Python "
+            "3.9-3.12 only. Run Graph-MIND on this PC with Python 3.12, or use a synced "
+            "folder instead. Joining a brain another PC hosts works on any Python.") from None
+    from pgserver.utils import PostmasterInfo
+    data = _pg_data()
+    running = PostmasterInfo.read_from_pgdata(data) if (data / "PG_VERSION").exists() else None
+    # Checked on every call, not once per process: a server that stopped (reboot, a crash, a
+    # console closing on it) is started again by whoever needs it next, instead of every
+    # client failing until someone notices.
+    if running is None or not running.is_running():
         import fasteners
-        try:
-            from pgserver._commands import initdb, pg_ctl
-        except ImportError:
-            raise RuntimeError(
-                "Hosting the shared brain on this PC needs pgserver, which is built for Python "
-                "3.9-3.12 only. Run Graph-MIND on this PC with Python 3.12, or use a synced "
-                "folder instead. Joining a brain another PC hosts works on any Python.") from None
-        from pgserver.utils import PostmasterInfo
-        data = _pg_data()
         data.parent.mkdir(parents=True, exist_ok=True)
         with fasteners.InterProcessLock(str(data.parent / "postgres.lock")):
             fresh = not (data / "PG_VERSION").exists()
             if fresh:
-                initdb(["--auth=trust", "--encoding=utf8", "-U", "postgres"], pgdata=data)
+                initdb(["--auth=trust", "--encoding=utf8", "-U", "postgres"], pgdata=data,
+                       **_DETACHED)
             running = PostmasterInfo.read_from_pgdata(data)
             if running is None or not running.is_running():
                 pg_ctl(["-w", "-o", f"-p {PORT}", "-l", str(data / "log"), "start"],
-                       pgdata=data, timeout=60)
+                       pgdata=data, timeout=60, **_DETACHED)
             if fresh:
                 import psycopg
                 with psycopg.connect(_admin_uri(), autocommit=True) as admin:
                     admin.execute("CREATE ROLE graphmind LOGIN")
                     admin.execute("CREATE DATABASE graphmind OWNER graphmind")
-        _LOCAL_URI["uri"] = f"postgresql://graphmind@127.0.0.1:{PORT}/graphmind"
+    _LOCAL_URI["uri"] = f"postgresql://graphmind@127.0.0.1:{PORT}/graphmind"
     return _LOCAL_URI["uri"]
 
 
+# Started from Claude's or Codex's process, the server shared that program's console, and closing
+# it sent Ctrl+C to Postgres too (0xC000013A in its log): the hub went down with an app window.
+# Its own process group, with no console, it outlives whoever happened to start it.
+_DETACHED = ({"creationflags": 0x00000008 | 0x00000200}     # DETACHED_PROCESS | NEW_PROCESS_GROUP
+             if os.name == "nt" else {"start_new_session": True})
+
+
 def _admin_uri() -> str:
     return f"postgresql://postgres@127.0.0.1:{PORT}/postgres"
 
@@ -145,7 +157,8 @@ def share(open_firewall: bool = True) -> dict:
     if rule not in hba.read_text(encoding="utf-8"):
         with hba.open("a", encoding="utf-8") as stream:
             stream.write("\n# Graph-MIND: other PCs, with the password\n" + rule + "\n")
-    pg_ctl(["-w", "-m", "fast", "restart"] if restart else ["reload"], pgdata=data, timeout=60)
+    pg_ctl(["-w", "-m", "fast", "restart"] if restart else ["reload"], pgdata=data, timeout=60,
+           **_DETACHED)
     set_folder("local")
     _save({"share_password": password})
     hosts = _addresses()
@@ -281,7 +294,7 @@ def append_many(shared: Path, items) -> int:
     if not lines:
         return 0
     if is_database(shared):
-        return _pg_append(shared, lines)
+        return _pg_append_or_queue(shared, lines)
     log = Path(shared).expanduser() / "log" / f"{device_name()}.jsonl"
     log.parent.mkdir(parents=True, exist_ok=True)
     with log.open("a", encoding="utf-8") as stream:
@@ -357,6 +370,32 @@ def _pg(url):
     return connection
 
 
+def _outbox() -> Path:
+    from development_paths import graph_mind_home
+    return graph_mind_home() / "outbox.jsonl"
+
+
+def _pg_append_or_queue(url, lines) -> int:
+    """Append to the hub; when it cannot be reached, keep the lines in a local outbox and send
+    them with the next append that gets through. The hub was down for four days once and every
+    turn of those days stayed on the PC that captured it until it was sent by hand."""
+    import fasteners
+    outbox = _outbox()
+    outbox.parent.mkdir(parents=True, exist_ok=True)
+    with fasteners.InterProcessLock(str(outbox.with_suffix(".lock"))):
+        waiting = ([l for l in outbox.read_text(encoding="utf-8").splitlines() if l.strip()]
+                   if outbox.exists() else [])
+        try:
+            _pg_append(url, waiting + lines)
+        except Exception:
+            with outbox.open("a", encoding="utf-8") as stream:
+                stream.write("\n".join(lines) + "\n")
+            return len(lines)                     # queued, not lost
+        if waiting:
+            outbox.unlink()
+    return len(lines)
+
+
 def _pg_append(url, lines) -> int:
     with _pg(url) as connection:
         # one writer at a time: a row can then never commit after a later sequence number has

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/conversation_memory.py

@@ -5,8 +5,10 @@ from development_paths import use_wal
 
 from datetime import datetime
 from pathlib import Path
+import collections
 import hashlib
 import json
+import math
 import os
 import re
 import sqlite3
@@ -30,7 +32,34 @@ SECRET_PATTERNS = (
                 re.DOTALL), "[REDACTED_PRIVATE_KEY]"),
     # a database URL carries its password: postgres://user:PASSWORD@host
     (re.compile(r"(\b[a-z][a-z0-9+.-]*://[^\s:/@]+:)[^\s@/]+(@)"), r"\1[REDACTED]\2"),
+    # a password written after its name: "password: x", "pwd=x", "비밀번호: x", "비번=x"
+    (re.compile(r"(?i)((?<![a-z])(?:password|passwd|pwd)\s*[:=]\s*)\S+"), r"\1[REDACTED]"),
+    (re.compile(r"((?:비밀번호|비번|암호)\s*[:=]\s*)\S+"), r"\1[REDACTED]"),
 )
+# A token no pattern above knows: long, machine-random (mixed case and digits, no word-shaped
+# pieces, high character entropy). Measured: catches 91% of random 20-64 character tokens; in
+# LongMemEval's 246,750 chat turns it fires 92 times, nearly all on real ids and tokens (an
+# OAuth token, Drive file ids, ad click ids); in this repository's code and docs, never.
+# Commit ids, hashes and UUIDs are left alone: those get recalled on purpose.
+RANDOM_CANDIDATE = re.compile(r"(?<![A-Za-z0-9_\-])[A-Za-z0-9_\-]{20,}(?![A-Za-z0-9_\-])")
+UUID = re.compile(r"[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}")
+WORD_PIECE = re.compile(r"[A-Z]?[a-z]+|[A-Z]+(?![a-z])")
+
+
+def _looks_random(token):
+    if UUID.fullmatch(token):
+        return False
+    core = re.sub(r"[_\-]", "", token)
+    if len(core) < 18 or re.fullmatch(r"[0-9a-fA-F]+", core):
+        return False
+    if not (any(c.isupper() for c in core) and any(c.islower() for c in core)
+            and sum(c.isdigit() for c in core) >= 2):
+        return False
+    pieces = WORD_PIECE.findall(core)           # code names are words strung together
+    if pieces and sum(map(len, pieces)) / len(pieces) >= 3.0:
+        return False
+    counts = collections.Counter(core)
+    return -sum(n / len(core) * math.log2(n / len(core)) for n in counts.values()) >= 3.7
 AUTOMATIC_BLOCKS = re.compile(
     r"<(?:environment_context|recommended_plugins|in-app-browser-context)\b[^>]*>.*?"
     r"</(?:environment_context|recommended_plugins|in-app-browser-context)>",
@@ -56,7 +85,15 @@ def _redact(value):
     for pattern, replacement in SECRET_PATTERNS:
         cleaned, replacements = pattern.subn(replacement, cleaned)
         count += replacements
-    return cleaned.strip(), count
+    found = [0]
+
+    def unknown_token(match):
+        if not _looks_random(match.group(0)):
+            return match.group(0)
+        found[0] += 1
+        return "[REDACTED_SECRET]"
+    cleaned = RANDOM_CANDIDATE.sub(unknown_token, cleaned)
+    return cleaned.strip(), count + found[0]
 
 
 def _message_text(payload):

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/graph_mind_mcp_server.py

@@ -24,7 +24,23 @@ if hasattr(sys.stderr, "reconfigure"):
     sys.stderr.reconfigure(encoding="utf-8", errors="backslashreplace")
 
 
-SERVER_VERSION = "0.5.0"
+def _version() -> str:
+    """The package version: pyproject.toml beside this file in a source checkout, else the
+    installed distribution's. A hand-kept constant here had drifted to 0.5.0 at release 0.3.1."""
+    import re
+    project = Path(__file__).with_name("pyproject.toml")
+    if project.exists():
+        found = re.search(r'^version = "([^"]+)"', project.read_text(encoding="utf-8"), re.M)
+        if found:
+            return found.group(1)
+    try:
+        from importlib.metadata import version
+        return version("graph-mind-memory")
+    except Exception:
+        return "0+unknown"
+
+
+SERVER_VERSION = _version()
 # The embedding model is loaded from the local Hugging Face cache, but the library still asks the
 # hub over the network whether a newer revision exists, every time it loads. That made the first
 # save of a session take ~95 s and sent requests off the machine for no reason. Once the model is

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2/graph_mind_memory.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graph-mind-memory
-Version: 0.3.0
+Version: 0.3.2
 Summary: Local-first memory for AI coding assistants: verbatim, on your own PC, no LLM calls at write time.
 Author-email: Yohan Ko <goyohan0611@gmail.com>
 License-Expression: AGPL-3.0-only
@@ -48,7 +48,7 @@ Local-first memory for AI coding assistants. Verbatim storage, on your own PC:
 </div>
 
 > [!NOTE]
-> **Alpha (v0.1).** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
+> **Alpha.** Used daily on Windows 11, and checked in a fresh-install, two-PC end-to-end run.
 > The test suite also passes on Linux and macOS in CI, but nobody has used it day to day there yet.
 
 ---
@@ -66,7 +66,9 @@ calls Graph-MIND over MCP and gets back a few thousand tokens of the conversatio
   stores the turns and embeds them as they arrive.
 - **One memory across your PCs.** One sentence to the AI on the first PC, one command on the
   others (see [below](#one-memory-across-pcs)).
-- **Nothing leaves your machines.** There is no cloud, no account and no telemetry.
+- **No cloud of its own.** No account, no telemetry; the memory stays on your machines. What
+  leaves them is what your AI app already sends: the recalled turns go to your model's
+  provider with your question.
 
 ---
 
@@ -152,6 +154,10 @@ Then restart your AI apps. The server is also listed in the
 > cause. Clone to a short path such as `C:\graph-mind`, or enable long paths. The installer prints
 > the command for that.
 
+To remove it: `graph-mind-uninstall` unregisters it from every app, removes the login item and
+stops the capture service. Your memory stays in `~/.graph-mind` unless you add `--purge`. Then
+`pip uninstall graph-mind-memory` removes the program.
+
 ---
 
 ## What it captures
@@ -164,24 +170,31 @@ Then restart your AI apps. The server is also listed in the
 | Claude desktop: chat | what the model saves with `brain_remember` |
 
 Before anything is stored, these are masked: API keys, tokens from GitHub, AWS, Google and Slack,
-private keys, and passwords inside URLs.
+private keys, passwords inside URLs, values written after `password:` / `api_key=` / `token:`,
+and any long machine-random string even from a service no rule knows (by its randomness: 91% of
+random 20-64 character tokens caught; in 246,750 ordinary chat turns it fired 92 times, nearly
+all on real ids and tokens). Commit ids, hashes and UUIDs are kept, since you recall those on
+purpose.
+
+There is no switch to keep keys: a recalled memory goes to your model's provider with the question,
+so a stored key would leave your PC the first time it is useful. To have Graph-MIND remember a key,
+tell it **where the key is**, not the key: *"my OpenAI key is in 1Password, under Dev"*.
 
 Only what you actually send is captured: the service reads each app's transcript, which is written
 after you press Enter, so a paste you delete before sending never reaches it. A plain password
-like `hunter2` has no recognizable format and is **not** masked. To remove something:
+like `hunter2` has no recognizable format and is **not** masked. To remove something,
+
+just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
+(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
+is not saved. Or, from a terminal:
 
 ```bash
 graph-mind-forget          # asks for the phrase without showing it, then confirms
 ```
 
-Or just ask your AI: *"delete the password I typed earlier"*. It lists masked candidates
-(`wifi password is ****`), deletes only the ones you pick, and the conversation about deleting
-is not saved.
-
-It deletes every captured turn and memory containing the phrase from this PC and its indexes,
-removes their lines from the shared memory, and tells your other PCs to delete their copies on
-their next sync. Only ids are shared for that, never the phrase. Your AI app's own history
-(for Claude Code, `~/.claude/projects`) is separate and is not touched.
+Either way, what you pick is deleted from this PC and its search indexes, from the shared memory,
+and from your other PCs on their next sync; only ids are shared for that, never the text. Your AI
+app's own history (for Claude Code, `~/.claude/projects`) is separate and is not touched.
 
 ---
 
@@ -254,7 +267,7 @@ python -m unittest discover -p "test_*.py"
 - **Multi-session questions are the weakest type at 80%.** These are questions that count or
   combine facts across many conversations.
 - **The repository still holds the research-phase experiments** next to the product (see
-  [Repository layout](#repository-layout)); the installed package carries only the 21 product
+  [Repository layout](#repository-layout)); the installed package carries only the 22 product
   modules.
 
 The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
@@ -263,11 +276,16 @@ The full list is in [REPORT.md §9](REPORT.md#9-known-limits).
 
 | | files |
 |---|---|
-| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
+| **Product** (what `pip install graph-mind-memory` installs) | `graph_mind_mcp_server.py` (MCP server), `automatic_capture*.py` (capture service), `install.py`, `brain_log.py` (sharing across PCs), `forget.py` (deleting), `local_brain.py` / `conversation_memory.py` / `coding_memory.py` / `development_memory.py` (stores), `semantic_recall.py` / `local_embedder.py` / `vector_cache.py` / `embedding_warmup.py` (search), and their helpers |
 | **Benchmarks** | `product_answer_eval.py`, `official_judge_v073.py`, `rival_mem0.py`, `rival_mempalace.py`, `rival_clean_prereg.py`, and the result files under `runs/` |
 | **Research phase** | the other modules: earlier extraction pipelines and analyses that REPORT.md cites |
 | **Tests** | `test_*.py` |
 
+## Security
+
+Graph-MIND holds your conversations. Report vulnerabilities privately (GitHub **Security → Report
+a vulnerability**); [SECURITY.md](SECURITY.md) lists what is in scope and how the data is handled.
+
 ## Contributing
 
 Issues and pull requests are welcome. Contributions are accepted under the [CLA](CLA.md), which

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/graph_mind_memory.egg-info/entry_points.txt

@@ -3,3 +3,4 @@ graph-mind = graph_mind_mcp_server:main
 graph-mind-capture = automatic_capture_cli:main
 graph-mind-forget = forget:main
 graph-mind-install = install:main
+graph-mind-uninstall = install:uninstall

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/install.py

@@ -67,34 +67,57 @@ def claude_code(home: Path) -> str:
     return ""
 
 
-def claude_desktop(home: Path) -> list[str]:
+def _desktop_roots(home: Path) -> list[Path]:
     roots = [Path(os.environ.get("APPDATA", home / "AppData" / "Roaming")) / "Claude",
              home / "Library" / "Application Support" / "Claude"]
     packages_dir = home / "AppData" / "Local" / "Packages"
     if packages_dir.is_dir():               # the Microsoft Store build keeps its own copy
         roots += [p / "LocalCache" / "Roaming" / "Claude" for p in packages_dir.glob("Claude_*")]
+    return roots
+
+
+def claude_desktop(home: Path) -> list[str]:
     done = []
-    for root in roots:
+    for root in _desktop_roots(home):
         if root.is_dir():
             _json_entry(root / "claude_desktop_config.json")
             done.append("Claude Desktop")
     return done[:1]
 
 
+def _without_codex_block(text: str) -> str:
+    """The Codex config without Graph-MIND's server table (and its env table); the rest kept."""
+    header = f"[mcp_servers.{NAME}]"
+    if header not in text:
+        return text
+    kept, skipping = [], False
+    for line in text.splitlines():
+        if line.strip().startswith("["):
+            skipping = line.strip() in (header, f"[mcp_servers.{NAME}.env]")
+        if not skipping:
+            kept.append(line)
+    return "\n".join(kept).rstrip() + "\n"
+
+
+def _login_item() -> Path:
+    """Where the capture service is registered to start at login, on this OS."""
+    system = platform.system()
+    if system == "Windows":
+        return (Path(os.environ["APPDATA"]) / "Microsoft" / "Windows" / "Start Menu" / "Programs"
+                / "Startup" / "Graph-MIND Automatic Capture.lnk")
+    if system == "Darwin":
+        return Path.home() / "Library" / "LaunchAgents" / "com.graph-mind.capture.plist"
+    config = Path(os.environ.get("XDG_CONFIG_HOME") or Path.home() / ".config")
+    return config / "autostart" / "graph-mind-capture.desktop"
+
+
 def codex(home: Path) -> str:
     config = home / ".codex" / "config.toml"
     if not config.parent.is_dir():
         return ""
     text = config.read_text(encoding="utf-8") if config.exists() else ""
     header = f"[mcp_servers.{NAME}]"
-    if header in text:                       # drop the old block (and its env table), keep the rest
-        kept, skipping = [], False
-        for line in text.splitlines():
-            if line.strip().startswith("["):
-                skipping = line.strip() in (header, f"[mcp_servers.{NAME}.env]")
-            if not skipping:
-                kept.append(line)
-        text = "\n".join(kept).rstrip() + "\n"
+    text = _without_codex_block(text)
     environment = "\n".join(f"{key} = '{value}'" for key, value in ENV.items())
     # required: otherwise Codex leaves out a server still starting when the first question comes
     text += (f"\n{header}\nrequired = true\nstartup_timeout_sec = 60\n"
@@ -119,8 +142,7 @@ def capture_service(start: bool) -> str:
     system = platform.system()
     if system == "Windows":
         python = Path(sys.executable).with_name("pythonw.exe")        # no console window
-        startup = (Path(os.environ["APPDATA"]) / "Microsoft" / "Windows" / "Start Menu"
-                   / "Programs" / "Startup" / "Graph-MIND Automatic Capture.lnk")
+        startup = _login_item()
         startup.parent.mkdir(parents=True, exist_ok=True)
         shortcut = (f"$s=(New-Object -ComObject WScript.Shell).CreateShortcut('{startup}');"
                     f"$s.TargetPath='{python}';$s.Arguments='\"{script}\" run';"
@@ -130,15 +152,14 @@ def capture_service(start: bool) -> str:
     elif system == "Darwin":
         import plistlib
         python = Path(sys.executable)
-        agent = Path.home() / "Library" / "LaunchAgents" / "com.graph-mind.capture.plist"
+        agent = _login_item()
         agent.parent.mkdir(parents=True, exist_ok=True)
         agent.write_bytes(plistlib.dumps({
             "Label": "com.graph-mind.capture", "RunAtLoad": True, "WorkingDirectory": str(HERE),
             "ProgramArguments": [str(python), str(script), "run"]}))
     else:                                       # Linux desktops: XDG autostart
         python = Path(sys.executable)
-        config = Path(os.environ.get("XDG_CONFIG_HOME") or Path.home() / ".config")
-        entry = config / "autostart" / "graph-mind-capture.desktop"
+        entry = _login_item()
         entry.parent.mkdir(parents=True, exist_ok=True)
         entry.write_text("[Desktop Entry]\nType=Application\nName=Graph-MIND capture\n"
                          f"Exec=\"{python}\" \"{script}\" run\nPath={HERE}\n"
@@ -224,5 +245,73 @@ def main(argv=None):
     print("\nDone. Restart your AI apps so they load the memory.")
 
 
+def uninstall(argv=None):
+    """Undo install: unregister from every AI app, remove the login item, stop the capture
+    service. The memory itself stays unless --purge, so reinstalling picks up where it was."""
+    parser = argparse.ArgumentParser(description="Remove Graph-MIND from this PC's AI apps.")
+    parser.add_argument("--purge", action="store_true",
+                        help="also delete this PC's memory (~/.graph-mind); cannot be undone")
+    parser.add_argument("--yes", action="store_true", help="do not ask before --purge")
+    args = parser.parse_args(argv)
+    sys.path.insert(0, str(HERE))
+    home, removed = Path.home(), []
+    claude = shutil.which("claude")
+    if claude:
+        subprocess.run([claude, "mcp", "remove", "-s", "user", NAME], capture_output=True)
+    for config in [home / ".claude.json"] + [r / "claude_desktop_config.json"
+                                              for r in _desktop_roots(home)]:
+        if not config.exists():
+            continue
+        settings = json.loads(config.read_text(encoding="utf-8"))
+        if settings.get("mcpServers", {}).pop(NAME, None) is not None:
+            temporary = config.with_suffix(".graph-mind.tmp")
+            temporary.write_text(json.dumps(settings, ensure_ascii=False, indent=2),
+                                 encoding="utf-8")
+            os.replace(temporary, config)
+            removed.append("Claude Code" if config.name == ".claude.json" else "Claude Desktop")
+    codex_config = home / ".codex" / "config.toml"
+    if codex_config.exists():
+        text = codex_config.read_text(encoding="utf-8")
+        if text != _without_codex_block(text):
+            codex_config.write_text(_without_codex_block(text), encoding="utf-8")
+            removed.append("Codex")
+    step("memory removed from: " + (", ".join(dict.fromkeys(removed)) or "no app had it"))
+    item = _login_item()
+    if item.exists():
+        if platform.system() == "Darwin":
+            subprocess.run(["launchctl", "unload", str(item)], capture_output=True)
+        item.unlink()
+        step("capture service no longer starts at login")
+    from automatic_capture import default_service_state_dir
+    try:
+        import psutil
+        service = psutil.Process(int((default_service_state_dir() / "service.pid")
+                                     .read_text(encoding="ascii")))
+        if "automatic_capture_cli" in " ".join(service.cmdline()):
+            service.terminate()
+            step("capture service stopped")
+    except Exception:                            # no pid file, not running, or already gone
+        pass
+    from development_paths import graph_mind_home
+    data = graph_mind_home()
+    if args.purge and data.exists():
+        if not args.yes and input(f"Delete {data} and everything this PC remembers? "
+                                  "This cannot be undone. [y/N] ").lower() != "y":
+            print("Memory kept.")
+        else:
+            if (data / "postgres" / "postmaster.pid").exists():     # this PC hosts the hub
+                try:
+                    from pgserver._commands import pg_ctl
+                    pg_ctl(["-w", "-m", "fast", "stop"], pgdata=data / "postgres")
+                except Exception:
+                    pass
+            shutil.rmtree(data, ignore_errors=True)
+            step(f"deleted {data}")
+    elif data.exists():
+        step(f"your memory is kept in {data} (graph-mind-uninstall --purge deletes it)")
+    print("\nDone. Restart your AI apps. To remove the program too: "
+          "pip uninstall graph-mind-memory")
+
+
 if __name__ == "__main__":
     main()

{graph_mind_memory-0.3.0 → graph_mind_memory-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "graph-mind-memory"
-version = "0.3.0"
+version = "0.3.2"
 description = "Local-first memory for AI coding assistants: verbatim, on your own PC, no LLM calls at write time."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -38,6 +38,7 @@ Issues = "https://github.com/goyohan0611-png/graph-mind/issues"
 [project.scripts]
 graph-mind = "graph_mind_mcp_server:main"
 graph-mind-install = "install:main"
+graph-mind-uninstall = "install:uninstall"
 graph-mind-capture = "automatic_capture_cli:main"
 graph-mind-forget = "forget:main"