memleaf 0.1.2__tar.gz → 0.1.4__tar.gz

memleaf-0.1.4/CHANGELOG.md

@@ -0,0 +1,61 @@
+# Changelog
+
+All notable changes to memleaf are documented here.
+
+## 0.1.4 — 2026-08-28
+
+- Reject Hermes display-redacted API credentials such as `***` and head/tail masks instead of treating them as callable keys.
+- Fall through from a redacted direct credential to configured environment variables and Hermes `.env` values.
+- Reject masked credentials in existing memleaf routes and at runtime so an old bad route cannot remain silently usable.
+- Add regression coverage for masked Hermes credentials on Linux and Windows.
+
+## 0.1.3 — 2026-08-28
+
+- Restored the MIT License for the current release.
+- Added native Windows Hermes path discovery using `HERMES_HOME` or the official
+  `%LOCALAPPDATA%\hermes` default.
+- Added discovery for the official Windows Hermes launchers under
+  `bin\hermes.exe`, `bin\hermes.cmd`, and
+  `hermes-agent\venv\Scripts\hermes.exe`.
+- Added a one-line PowerShell installer that uses Hermes' managed Python when
+  available, installs memleaf from PyPI, and completes Hermes integration.
+- Made atomic file writes and Windows command-launcher detection portable.
+- Added Windows GitHub Actions coverage for Python 3.11, 3.12, and 3.13.
+
+## 0.1.2 — 2026-08-28
+
+- This release was published under AGPL-3.0-only before the project returned to
+  MIT in 0.1.3. Its original license remains valid for copies of 0.1.2.
+- Product behavior otherwise remained aligned with 0.1.1.
+
+## 0.1.1 — 2026-08-28 (GitHub tag: v0.1.1)
+
+- Added a first-class `memleaf install` command for complete Hermes setup
+  after installing the package from PyPI.
+- Packaged the Hermes MemoryProvider inside the Python distribution, removing
+  the need for a Git checkout during normal installation.
+- Added safe migration from the source-installed provider symlink to the
+  packaged provider.
+- Added `python -m memleaf` so the complete one-line install works even when
+  the console-script directory is not already on PATH.
+- The installer initializes the Vault, discovers or preserves a model route,
+  activates the Hermes MemoryProvider, configures MCP lifecycle settings, and
+  verifies the 11-tool MCP surface.
+
+## 0.1.0 — 2026-08-28 (GitHub tag: v0.1)
+
+- Added the local-first, dependency-free Markdown vault core with capture,
+  memory creation, deterministic search/context retrieval, statistics, and
+  rebuildable indexes.
+- Added safe vault paths, file locking/atomic writes, frontmatter handling, and
+  secret redaction for captured text.
+- Added model-backed admission, extraction, state updates with history,
+  compaction, retryable processing, and scope-aware maintenance without adding
+  runtime dependencies.
+- Added the `memleaf` initialization CLI and the `memleaf-mcp` stdio entry
+  point.
+- Added Scope Map → directory search → bounded read retrieval with per-turn
+  retrieval state, pagination, and read budgets.
+- Added a Hermes-native MemoryProvider plus MCP setup.
+- Added packaging metadata, examples, offline local installation, and CI for
+  Python 3.11–3.13.

{memleaf-0.1.2 → memleaf-0.1.4}/MANIFEST.in

@@ -1,6 +1,7 @@
 include CHANGELOG.md
 include LICENSE
 include install.sh
+include install.ps1
 include README.md
 include README.en.md
 include RELEASE_CHECKLIST.md

{memleaf-0.1.2 → memleaf-0.1.4}/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.4
 Name: memleaf
-Version: 0.1.2
+Version: 0.1.4
 Summary: A local-first Markdown memory core for AI agents
 Author: memleaf contributors
-License-Expression: AGPL-3.0-only
+License-Expression: MIT
 Keywords: ai-agents,local-first,markdown,memory
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3
@@ -15,7 +15,6 @@ Classifier: Topic :: Software Development :: Libraries
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
-License-File: LICENSES/MIT-0.1.0-0.1.1.txt
 Dynamic: license-file
 
 # 冥想盆 · memleaf
@@ -24,8 +23,8 @@ Dynamic: license-file
 
 [English](README.en.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **当前版本：0.1.2。**
-> 核心库、Vault、stdio MCP Server、初始化 CLI、模型路由、提炼流程、受控检索协议和宿主适配器已经实现。memleaf 0.1.2 已发布到 PyPI。
+> **当前版本：0.1.4。**
+> 核心库、Vault、stdio MCP Server、初始化 CLI、模型路由、提炼流程、受控检索协议和宿主适配器已经实现。memleaf 0.1.4 通过 PyPI 分发。
 > **当前版本仅支持 Hermes。** Codex 与反重力不检测、不安装、不配置，也不扫描其模型配置。
 
 ## 项目定位
@@ -102,21 +101,40 @@ memleaf 不把每句话都保存为记忆。处理一轮完整的 user + assista
 
 ## 安装
 
-要求：Python 3.11+；当前版本的完整自动接入仅支持 Hermes。
+要求 Python 3.11+；当前版本的完整自动接入支持 Hermes。
 
-普通用户只需要复制执行这一行：
+### Windows
+
+已经安装 Hermes 的 Windows 10/11 用户，在 **PowerShell** 中只需要执行一行：
+
+```powershell
+irm https://raw.githubusercontent.com/miffyblueboo/memleaf/main/install.ps1 | iex
+```
+
+Windows 安装器会优先使用 Hermes 自带的 Python 环境，因此不要求 Hermes 的 Python 已加入系统 PATH。它会从 PyPI 安装或升级 memleaf，然后自动完成 Hermes 接入。
+
+默认情况下会识别 Hermes 官方 Windows 安装位置：
+
+```text
+%USERPROFILE%\.memleaf\                              # memleaf 数据 Vault
+%LOCALAPPDATA%\hermes\plugins\memleaf\              # Hermes MemoryProvider
+%LOCALAPPDATA%\hermes\memleaf.json                   # Provider 配置
+%LOCALAPPDATA%\hermes\bin\hermes.exe / hermes.cmd   # Hermes 命令入口
+```
+
+如果设置了 `HERMES_HOME`，memleaf 会优先使用该目录。
+
+### macOS / Linux
 
 ```bash
 python -m pip install -U memleaf && python -m memleaf install
 ```
 
-这一行会完成两件事：先从 PyPI 安装或升级 memleaf，然后立即执行完整 Hermes 接入。用户不需要 `git clone`、`cd` 或运行 `install.sh`。
-
-`memleaf install` 会自动：
+两种安装方式最终都会自动：
 
-1. 初始化默认 Vault：`$HOME/.memleaf`；
-2. 从已安装的 PyPI 包中安装/升级 Hermes MemoryProvider 到 `$HERMES_HOME/plugins/memleaf`；
-3. 发现并保存可用的聊天模型路由；已有有效 memleaf 路由会保留；
+1. 初始化默认 Vault；
+2. 安装或升级 Hermes MemoryProvider；
+3. 发现并保存可用的聊天模型路由；Hermes CLI 返回的脱敏凭证不会被当成真实 API key，而会继续尝试环境变量和 Hermes `.env`；已有有效 memleaf 路由会保留；
 4. 激活 `memory.provider=memleaf`；
 5. 通过 Hermes 官方 CLI 配置 memleaf MCP；
 6. 配置 MCP lazy/idle 生命周期；
@@ -125,25 +143,9 @@ python -m pip install -U memleaf && python -m memleaf install
 
 完成后重启 Hermes。
 
-默认用户数据和 Hermes 接入位置：
+如果没有检测到 Hermes、无法取得完整模型路由、Provider 激活失败或 MCP 的 11 工具验证失败，安装会明确返回失败，不会把未完成的接入报告为成功。
 
-```text
-$HOME/.memleaf/                    # memleaf 数据 Vault
-$HERMES_HOME/plugins/memleaf/      # Hermes MemoryProvider
-$HERMES_HOME/memleaf.json          # Provider 的 Vault、MCP 命令和超时配置
-```
-
-Python 包和 `memleaf` / `memleaf-mcp` 命令由当前 Python/pip 环境管理，不再要求固定的 `$HOME/memleaf` 源码目录。
-
-如需自定义 Vault，也仍是一行：
-
-```bash
-python -m pip install -U memleaf && python -m memleaf install --vault /path/to/vault
-```
-
-如果没有检测到 Hermes 可执行文件、无法取得完整模型路由、Provider 激活失败或 MCP 的 11 工具验证失败，安装命令会明确返回失败，不会把未完成的接入报告为成功。
-
-仓库中的 `install.sh` 继续保留给源码开发、离线源码安装和故障排查；**普通 PyPI 用户不需要执行它**。
+仓库中的 `install.sh` 保留给源码开发、离线源码安装和故障排查；普通 PyPI 用户不需要执行它。
 
 Codex 和 Antigravity（反重力）当前暂不支持：安装流程不会检测、安装或修改它们的 MCP、Hook 或模型配置。
 
@@ -290,7 +292,7 @@ python -m memleaf.mcp_server --vault /path/to/your/vault \
 - `host`：只使用 Python API 显式传入的宿主回调；
 - `api`：只使用本地配置的 HTTP API。
 
-`memleaf init` 仅从 Hermes 的可读取配置中寻找完整的聊天模型路由，过滤非聊天模型，并确定性选择轻量模型作为提炼模型。未发现可用路由时复用已有的有效 memleaf 配置；要保留自选路由并跳过扫描，使用 `--no-model-discovery`。不能调用的 OAuth-only 或只有模型名的配置不会被误判为可用。
+`memleaf init` 从 Hermes 的可读取模型配置中寻找完整的聊天模型路由，过滤非聊天模型，并确定性选择轻量模型作为提炼模型。Hermes CLI 输出中的 `***`、`sk-p...7890` 等显示脱敏值会被视为缺失凭证，并继续尝试环境变量或 Hermes `.env`；若仍找不到真实凭证则安装明确失败，不会写入一个看似成功但不可调用的模型路由。未发现可用路由时复用已有的有效 memleaf 配置；要保留自选路由并跳过扫描，使用 `--no-model-discovery`。不能调用的 OAuth-only 或只有模型名的配置不会被误判为可用。
 
 API 配置示例：
 
@@ -385,7 +387,7 @@ python3.11 -m compileall -q src tests examples
 git diff --check
 ```
 
-GitHub Actions 已通过 Python 3.11、3.12、3.13 测试、wheel/source distribution 构建和源码包独立测试。构建发行包需要 `build`：
+GitHub Actions 覆盖 Linux 与 Windows 的 Python 3.11、3.12、3.13 测试，并验证 wheel/source distribution 构建、源码包测试和 Windows PowerShell 安装器语法。构建发行包需要 `build`：
 
 ```bash
 python -m pip install build
@@ -397,7 +399,7 @@ python -m build --wheel --sdist
 
 以下内容不应被 README 或安装结果误解为已交付能力：
 
-- PyPI 安装可通过一行命令完成 Hermes 自动接入；源码 `install.sh` 仅保留给开发、离线源码安装和故障排查；
+- Windows、macOS 和 Linux 都提供一行安装入口完成 Hermes 自动接入；源码 `install.sh` 仅保留给开发、离线源码安装和故障排查；
 - 当前仅支持 Hermes；Codex 和 Antigravity（反重力）不检测、不安装、不配置；
 - Hermes 的检索门控是 Soft Gate，不保证阻止所有未检索回答；
 - 没有模型路由时只能捕获和检索，不能完成自动提炼、显式记忆或压缩；
@@ -408,11 +410,7 @@ python -m build --wheel --sdist
 
 ## License
 
-memleaf 0.1.2 及后续版本采用 [AGPL-3.0-only](LICENSE)。
-
-AGPL 允许个人和商业使用，但修改、分发或通过网络提供受 AGPL 覆盖的版本时，需要遵守相应的源代码开放义务。希望在闭源商业产品或专有服务中使用 memleaf、且不希望受 AGPL 条款约束的企业，可以申请单独的商业授权，见 [COMMERCIAL_LICENSE.md](COMMERCIAL_LICENSE.md)。
-
-0.1.0 和 0.1.1 已经按 MIT License 发布，既有 MIT 授权继续有效。历史许可证见 [LICENSES/MIT-0.1.0-0.1.1.txt](LICENSES/MIT-0.1.0-0.1.1.txt)。
+MIT，见 [LICENSE](LICENSE)。
 
 **memleaf**
 *Your memories, in files you own.*

{memleaf-0.1.2 → memleaf-0.1.4}/README.en.md

@@ -4,8 +4,8 @@
 
 [中文](README.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **Version: 0.1.2.**
-> The core library, Vault, stdio MCP server, initialization CLI, model routing, memory extraction, controlled retrieval protocol, and host adapters are implemented. memleaf 0.1.2 is published on PyPI.
+> **Version: 0.1.4.**
+> The core library, Vault, stdio MCP server, initialization CLI, model routing, memory extraction, controlled retrieval protocol, and host adapters are implemented. memleaf 0.1.4 is distributed through PyPI.
 > **The current release supports only Hermes.** Codex and Antigravity are not detected, installed, configured, or scanned for models.
 
 ## Project scope
@@ -82,48 +82,51 @@ Additional rules:
 
 ## Installation
 
-Requirements: Python 3.11+; full automatic host setup currently supports Hermes only.
+Python 3.11+ is required. Full automatic host setup currently supports Hermes.
 
-For normal users, copy and run this single line:
+### Windows
 
-```bash
-python -m pip install -U memleaf && python -m memleaf install
-```
-
-That one line first installs or upgrades memleaf from PyPI and then immediately performs the complete Hermes integration. Users do not need to `git clone`, `cd`, or run `install.sh`.
+If Hermes is already installed on Windows 10/11, run this single line in **PowerShell**:
 
-`memleaf install` automatically:
-
-1. Initializes the default Vault at `$HOME/.memleaf`.
-2. Installs or upgrades the packaged Hermes MemoryProvider at `$HERMES_HOME/plugins/memleaf`.
-3. Discovers and saves a callable chat-model route while preserving an existing valid memleaf route.
-4. Activates `memory.provider=memleaf`.
-5. Configures the memleaf MCP entry through Hermes' official CLI.
-6. Configures MCP lazy/idle lifecycle settings.
-7. Verifies that the MCP server exposes all 11 tools.
-8. Records the local Agent integration status.
+```powershell
+irm https://raw.githubusercontent.com/miffyblueboo/memleaf/main/install.ps1 | iex
+```
 
-Restart Hermes after installation.
+The Windows installer prefers Hermes' managed Python environment, so Hermes' Python does not need to be on the system PATH. It installs or upgrades memleaf from PyPI and then completes the Hermes integration automatically.
 
-Default user-data and Hermes integration locations:
+The official native Windows Hermes locations are detected by default:
 
 ```text
-$HOME/.memleaf/                    # memleaf data Vault
-$HERMES_HOME/plugins/memleaf/      # Hermes MemoryProvider
-$HERMES_HOME/memleaf.json          # Provider Vault, MCP command, and timeout config
+%USERPROFILE%\.memleaf\                              # memleaf data Vault
+%LOCALAPPDATA%\hermes\plugins\memleaf\              # Hermes MemoryProvider
+%LOCALAPPDATA%\hermes\memleaf.json                   # Provider configuration
+%LOCALAPPDATA%\hermes\bin\hermes.exe / hermes.cmd   # Hermes launcher
 ```
 
-The Python package and the `memleaf` / `memleaf-mcp` commands are managed by the active Python/pip environment. A fixed `$HOME/memleaf` source checkout is no longer required.
+If `HERMES_HOME` is set, memleaf uses it instead.
 
-A custom Vault still fits in one line:
+### macOS / Linux
 
 ```bash
-python -m pip install -U memleaf && python -m memleaf install --vault /path/to/vault
+python -m pip install -U memleaf && python -m memleaf install
 ```
 
-If the Hermes executable is unavailable, no complete model route can be configured, Provider activation fails, or the 11-tool MCP verification fails, the installer returns an explicit failure instead of reporting an incomplete integration as successful.
+Both installation paths automatically:
+
+1. Initialize the default Vault.
+2. Install or upgrade the Hermes MemoryProvider.
+3. Discover and save a callable chat-model route. Redacted credentials returned by the Hermes CLI are never treated as real API keys; discovery falls through to environment variables and Hermes `.env`, while preserving an existing valid memleaf route.
+4. Activate `memory.provider=memleaf`.
+5. Configure the memleaf MCP entry through Hermes' official CLI.
+6. Configure MCP lazy/idle lifecycle settings.
+7. Verify that the MCP server exposes all 11 tools.
+8. Record the local Agent integration status.
+
+Restart Hermes after installation.
 
-The repository `install.sh` remains available for source development, offline source installation, and troubleshooting; **normal PyPI users do not need to run it**.
+If Hermes cannot be detected, no complete model route can be configured, Provider activation fails, or the 11-tool MCP verification fails, the installer returns an explicit failure rather than reporting an incomplete integration as successful.
+
+The repository `install.sh` remains for source development, offline source installation, and troubleshooting. Normal PyPI users do not need to run it.
 
 Codex and Antigravity are not currently supported. The install flow does not detect, install, or modify their MCP, hook, or model configuration.
 
@@ -270,7 +273,7 @@ Capture, indexing, directory retrieval, and reading work offline. `process()`, `
 - `host`: use only a host callback explicitly supplied to the Python API;
 - `api`: use only the locally configured HTTP API.
 
-`memleaf init` looks for complete chat-model routes only in readable Hermes configuration, filters out non-chat models, and deterministically selects a lightweight model for extraction. An existing valid memleaf route is reused when discovery finds none; use `--no-model-discovery` to preserve a custom route without scanning. OAuth-only routes and model names without a callable route are not treated as usable.
+`memleaf init` looks for complete chat-model routes in readable Hermes model configuration, filters out non-chat models, and deterministically selects a lightweight model for extraction. Display-redacted values such as `***` or `sk-p...7890` are treated as missing credentials; discovery then tries environment variables and Hermes `.env`, and fails explicitly if no real credential is available instead of writing a false-success route. An existing valid memleaf route is reused when discovery finds none; use `--no-model-discovery` to preserve a custom route without scanning. OAuth-only routes and model names without a callable route are not treated as usable.
 
 API configuration example:
 
@@ -365,7 +368,7 @@ python3.11 -m compileall -q src tests examples
 git diff --check
 ```
 
-GitHub Actions passed Python 3.11, 3.12, and 3.13 tests, wheel/source-distribution builds, and tests from the source archive. Build packages with:
+GitHub Actions covers Python 3.11, 3.12, and 3.13 on Linux and Windows, plus wheel/source-distribution builds, source-archive tests, and PowerShell installer syntax validation. Build packages with:
 
 ```bash
 python -m pip install build
@@ -377,7 +380,7 @@ python -m build --wheel --sdist
 
 The following should not be interpreted as delivered capabilities:
 
-- The PyPI flow can complete Hermes integration from one command line; the source `install.sh` remains only for development, offline source installation, and troubleshooting.
+- Windows, macOS, and Linux each provide a one-line Hermes integration entry point; the source `install.sh` remains only for development, offline source installation, and troubleshooting.
 - The current release supports only Hermes. Codex and Antigravity are not detected, installed, or configured.
 - Hermes retrieval gating is a Soft Gate and does not guarantee that every answer performed retrieval.
 - Without a model route, memleaf can capture and retrieve but cannot perform automatic extraction, explicit model-backed memory, or compaction.
@@ -388,11 +391,7 @@ The following should not be interpreted as delivered capabilities:
 
 ## License
 
-memleaf 0.1.2 and later are licensed under [AGPL-3.0-only](LICENSE).
-
-The AGPL permits both personal and commercial use, subject to its source-code obligations for covered modification, distribution, and network use. Organizations that need to use memleaf in proprietary products or services without the AGPL obligations can obtain a separate commercial license; see [COMMERCIAL_LICENSE.md](COMMERCIAL_LICENSE.md).
-
-Versions 0.1.0 and 0.1.1 were released under the MIT License, and the rights already granted for those releases remain in effect. See [LICENSES/MIT-0.1.0-0.1.1.txt](LICENSES/MIT-0.1.0-0.1.1.txt).
+MIT; see [LICENSE](LICENSE).
 
 **memleaf**
 

{memleaf-0.1.2 → memleaf-0.1.4}/README.md

@@ -4,8 +4,8 @@
 
 [English](README.en.md) · [PyPI](https://pypi.org/project/memleaf/) · [GitHub](https://github.com/miffyblueboo/memleaf)
 
-> **当前版本：0.1.2。**
-> 核心库、Vault、stdio MCP Server、初始化 CLI、模型路由、提炼流程、受控检索协议和宿主适配器已经实现。memleaf 0.1.2 已发布到 PyPI。
+> **当前版本：0.1.4。**
+> 核心库、Vault、stdio MCP Server、初始化 CLI、模型路由、提炼流程、受控检索协议和宿主适配器已经实现。memleaf 0.1.4 通过 PyPI 分发。
 > **当前版本仅支持 Hermes。** Codex 与反重力不检测、不安装、不配置，也不扫描其模型配置。
 
 ## 项目定位
@@ -82,21 +82,40 @@ memleaf 不把每句话都保存为记忆。处理一轮完整的 user + assista
 
 ## 安装
 
-要求：Python 3.11+；当前版本的完整自动接入仅支持 Hermes。
+要求 Python 3.11+；当前版本的完整自动接入支持 Hermes。
 
-普通用户只需要复制执行这一行：
+### Windows
+
+已经安装 Hermes 的 Windows 10/11 用户，在 **PowerShell** 中只需要执行一行：
+
+```powershell
+irm https://raw.githubusercontent.com/miffyblueboo/memleaf/main/install.ps1 | iex
+```
+
+Windows 安装器会优先使用 Hermes 自带的 Python 环境，因此不要求 Hermes 的 Python 已加入系统 PATH。它会从 PyPI 安装或升级 memleaf，然后自动完成 Hermes 接入。
+
+默认情况下会识别 Hermes 官方 Windows 安装位置：
+
+```text
+%USERPROFILE%\.memleaf\                              # memleaf 数据 Vault
+%LOCALAPPDATA%\hermes\plugins\memleaf\              # Hermes MemoryProvider
+%LOCALAPPDATA%\hermes\memleaf.json                   # Provider 配置
+%LOCALAPPDATA%\hermes\bin\hermes.exe / hermes.cmd   # Hermes 命令入口
+```
+
+如果设置了 `HERMES_HOME`，memleaf 会优先使用该目录。
+
+### macOS / Linux
 
 ```bash
 python -m pip install -U memleaf && python -m memleaf install
 ```
 
-这一行会完成两件事：先从 PyPI 安装或升级 memleaf，然后立即执行完整 Hermes 接入。用户不需要 `git clone`、`cd` 或运行 `install.sh`。
-
-`memleaf install` 会自动：
+两种安装方式最终都会自动：
 
-1. 初始化默认 Vault：`$HOME/.memleaf`；
-2. 从已安装的 PyPI 包中安装/升级 Hermes MemoryProvider 到 `$HERMES_HOME/plugins/memleaf`；
-3. 发现并保存可用的聊天模型路由；已有有效 memleaf 路由会保留；
+1. 初始化默认 Vault；
+2. 安装或升级 Hermes MemoryProvider；
+3. 发现并保存可用的聊天模型路由；Hermes CLI 返回的脱敏凭证不会被当成真实 API key，而会继续尝试环境变量和 Hermes `.env`；已有有效 memleaf 路由会保留；
 4. 激活 `memory.provider=memleaf`；
 5. 通过 Hermes 官方 CLI 配置 memleaf MCP；
 6. 配置 MCP lazy/idle 生命周期；
@@ -105,25 +124,9 @@ python -m pip install -U memleaf && python -m memleaf install
 
 完成后重启 Hermes。
 
-默认用户数据和 Hermes 接入位置：
+如果没有检测到 Hermes、无法取得完整模型路由、Provider 激活失败或 MCP 的 11 工具验证失败，安装会明确返回失败，不会把未完成的接入报告为成功。
 
-```text
-$HOME/.memleaf/                    # memleaf 数据 Vault
-$HERMES_HOME/plugins/memleaf/      # Hermes MemoryProvider
-$HERMES_HOME/memleaf.json          # Provider 的 Vault、MCP 命令和超时配置
-```
-
-Python 包和 `memleaf` / `memleaf-mcp` 命令由当前 Python/pip 环境管理，不再要求固定的 `$HOME/memleaf` 源码目录。
-
-如需自定义 Vault，也仍是一行：
-
-```bash
-python -m pip install -U memleaf && python -m memleaf install --vault /path/to/vault
-```
-
-如果没有检测到 Hermes 可执行文件、无法取得完整模型路由、Provider 激活失败或 MCP 的 11 工具验证失败，安装命令会明确返回失败，不会把未完成的接入报告为成功。
-
-仓库中的 `install.sh` 继续保留给源码开发、离线源码安装和故障排查；**普通 PyPI 用户不需要执行它**。
+仓库中的 `install.sh` 保留给源码开发、离线源码安装和故障排查；普通 PyPI 用户不需要执行它。
 
 Codex 和 Antigravity（反重力）当前暂不支持：安装流程不会检测、安装或修改它们的 MCP、Hook 或模型配置。
 
@@ -270,7 +273,7 @@ python -m memleaf.mcp_server --vault /path/to/your/vault \
 - `host`：只使用 Python API 显式传入的宿主回调；
 - `api`：只使用本地配置的 HTTP API。
 
-`memleaf init` 仅从 Hermes 的可读取配置中寻找完整的聊天模型路由，过滤非聊天模型，并确定性选择轻量模型作为提炼模型。未发现可用路由时复用已有的有效 memleaf 配置；要保留自选路由并跳过扫描，使用 `--no-model-discovery`。不能调用的 OAuth-only 或只有模型名的配置不会被误判为可用。
+`memleaf init` 从 Hermes 的可读取模型配置中寻找完整的聊天模型路由，过滤非聊天模型，并确定性选择轻量模型作为提炼模型。Hermes CLI 输出中的 `***`、`sk-p...7890` 等显示脱敏值会被视为缺失凭证，并继续尝试环境变量或 Hermes `.env`；若仍找不到真实凭证则安装明确失败，不会写入一个看似成功但不可调用的模型路由。未发现可用路由时复用已有的有效 memleaf 配置；要保留自选路由并跳过扫描，使用 `--no-model-discovery`。不能调用的 OAuth-only 或只有模型名的配置不会被误判为可用。
 
 API 配置示例：
 
@@ -365,7 +368,7 @@ python3.11 -m compileall -q src tests examples
 git diff --check
 ```
 
-GitHub Actions 已通过 Python 3.11、3.12、3.13 测试、wheel/source distribution 构建和源码包独立测试。构建发行包需要 `build`：
+GitHub Actions 覆盖 Linux 与 Windows 的 Python 3.11、3.12、3.13 测试，并验证 wheel/source distribution 构建、源码包测试和 Windows PowerShell 安装器语法。构建发行包需要 `build`：
 
 ```bash
 python -m pip install build
@@ -377,7 +380,7 @@ python -m build --wheel --sdist
 
 以下内容不应被 README 或安装结果误解为已交付能力：
 
-- PyPI 安装可通过一行命令完成 Hermes 自动接入；源码 `install.sh` 仅保留给开发、离线源码安装和故障排查；
+- Windows、macOS 和 Linux 都提供一行安装入口完成 Hermes 自动接入；源码 `install.sh` 仅保留给开发、离线源码安装和故障排查；
 - 当前仅支持 Hermes；Codex 和 Antigravity（反重力）不检测、不安装、不配置；
 - Hermes 的检索门控是 Soft Gate，不保证阻止所有未检索回答；
 - 没有模型路由时只能捕获和检索，不能完成自动提炼、显式记忆或压缩；
@@ -388,11 +391,7 @@ python -m build --wheel --sdist
 
 ## License
 
-memleaf 0.1.2 及后续版本采用 [AGPL-3.0-only](LICENSE)。
-
-AGPL 允许个人和商业使用，但修改、分发或通过网络提供受 AGPL 覆盖的版本时，需要遵守相应的源代码开放义务。希望在闭源商业产品或专有服务中使用 memleaf、且不希望受 AGPL 条款约束的企业，可以申请单独的商业授权，见 [COMMERCIAL_LICENSE.md](COMMERCIAL_LICENSE.md)。
-
-0.1.0 和 0.1.1 已经按 MIT License 发布，既有 MIT 授权继续有效。历史许可证见 [LICENSES/MIT-0.1.0-0.1.1.txt](LICENSES/MIT-0.1.0-0.1.1.txt)。
+MIT，见 [LICENSE](LICENSE)。
 
 **memleaf**
 *Your memories, in files you own.*

memleaf-0.1.4/install.ps1

@@ -0,0 +1,88 @@
+$ErrorActionPreference = "Stop"
+
+function Invoke-MemleafPython {
+    param([Parameter(Mandatory = $true)][string[]]$PythonArgs)
+
+    & $script:MemleafPython @script:MemleafPythonPrefix @PythonArgs
+    if ($LASTEXITCODE -ne 0) {
+        throw "Python command failed with exit code $LASTEXITCODE"
+    }
+}
+
+$hermesHome = $env:HERMES_HOME
+if ([string]::IsNullOrWhiteSpace($hermesHome)) {
+    if ([string]::IsNullOrWhiteSpace($env:LOCALAPPDATA)) {
+        throw "LOCALAPPDATA is unavailable and HERMES_HOME is not set."
+    }
+    $hermesHome = Join-Path $env:LOCALAPPDATA "hermes"
+}
+$hermesHome = [System.IO.Path]::GetFullPath($hermesHome)
+
+$managedPython = Join-Path $hermesHome "hermes-agent\venv\Scripts\python.exe"
+$script:MemleafPythonPrefix = @()
+
+if (Test-Path -LiteralPath $managedPython -PathType Leaf) {
+    $script:MemleafPython = $managedPython
+} else {
+    $pythonCommand = Get-Command python -ErrorAction SilentlyContinue
+    if ($pythonCommand) {
+        $script:MemleafPython = $pythonCommand.Source
+    } else {
+        $pyCommand = Get-Command py -ErrorAction SilentlyContinue
+        if ($pyCommand) {
+            $script:MemleafPython = $pyCommand.Source
+            $script:MemleafPythonPrefix = @("-3.11")
+        } else {
+            throw "Python 3.11+ was not found. Reinstall Hermes with its official Windows installer or install Python 3.11+."
+        }
+    }
+}
+
+Invoke-MemleafPython -PythonArgs @(
+    "-c",
+    "import sys; raise SystemExit(0 if sys.version_info >= (3, 11) else 1)"
+)
+
+$oldHermesHome = $env:HERMES_HOME
+try {
+    $env:HERMES_HOME = $hermesHome
+
+    Write-Host "Installing memleaf from PyPI..."
+
+    $managedUv = Join-Path $hermesHome "bin\uv.exe"
+    $uvCommand = $null
+    if (Test-Path -LiteralPath $managedUv -PathType Leaf) {
+        $uvCommand = $managedUv
+    } else {
+        $foundUv = Get-Command uv -ErrorAction SilentlyContinue
+        if ($foundUv) {
+            $uvCommand = $foundUv.Source
+        }
+    }
+
+    if ($uvCommand -and $script:MemleafPythonPrefix.Count -eq 0) {
+        & $uvCommand pip install --python $script:MemleafPython --upgrade memleaf
+        if ($LASTEXITCODE -ne 0) {
+            throw "uv could not install memleaf (exit code $LASTEXITCODE)"
+        }
+    } else {
+        & $script:MemleafPython @script:MemleafPythonPrefix -m pip --version *> $null
+        if ($LASTEXITCODE -ne 0) {
+            Invoke-MemleafPython -PythonArgs @("-m", "ensurepip", "--upgrade")
+        }
+        Invoke-MemleafPython -PythonArgs @("-m", "pip", "install", "--upgrade", "memleaf")
+    }
+
+    Write-Host "Configuring Hermes to use memleaf..."
+    Invoke-MemleafPython -PythonArgs @("-m", "memleaf", "install")
+
+    Write-Host ""
+    Write-Host "memleaf is installed and configured for Hermes."
+    Write-Host "Restart Hermes to use memleaf."
+} finally {
+    if ($null -eq $oldHermesHome) {
+        Remove-Item Env:HERMES_HOME -ErrorAction SilentlyContinue
+    } else {
+        $env:HERMES_HOME = $oldHermesHome
+    }
+}

{memleaf-0.1.2 → memleaf-0.1.4}/integrations/hermes/memleaf/plugin.yaml

@@ -1,5 +1,5 @@
 name: memleaf
-version: 0.1.2
+version: 0.1.4
 description: "Hermes-native external MemoryProvider for local-first Markdown memory shared with the memleaf MCP server."
 hooks:
   - prefetch

{memleaf-0.1.2 → memleaf-0.1.4}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "memleaf"
-version = "0.1.2"
+version = "0.1.4"
 description = "A local-first Markdown memory core for AI agents"
 readme = "README.md"
 requires-python = ">=3.11"
-license = "AGPL-3.0-only"
-license-files = ["LICENSE", "LICENSES/MIT-0.1.0-0.1.1.txt"]
+license = "MIT"
+license-files = ["LICENSE"]
 authors = [{name = "memleaf contributors"}]
 keywords = ["ai-agents", "local-first", "markdown", "memory"]
 classifiers = [

{memleaf-0.1.2 → memleaf-0.1.4}/src/memleaf/__init__.py

@@ -1,6 +1,6 @@
 """Local-first Markdown memory core for AI agents."""
 
-__version__ = "0.1.2"
+__version__ = "0.1.4"
 
 from .config import DEFAULT_CONFIG, default_config, load_config, save_config
 from .frontmatter import FrontmatterError, dump_frontmatter, dump_yaml, load_yaml, parse_frontmatter

{memleaf-0.1.2 → memleaf-0.1.4}/src/memleaf/adapters/base.py

@@ -151,7 +151,15 @@ def resolve_executable(
     candidates.extend(Path(candidate).expanduser() for candidate in known_paths)
     for candidate in candidates:
         try:
-            if candidate.is_file() and os.access(candidate, os.X_OK):
+            if not candidate.is_file():
+                continue
+            windows_launcher = os.name == "nt" and candidate.suffix.casefold() in {
+                ".exe",
+                ".cmd",
+                ".bat",
+                ".com",
+            }
+            if windows_launcher or os.access(candidate, os.X_OK):
                 return str(candidate.resolve())
         except OSError:
             continue
@@ -511,7 +519,10 @@ def atomic_replace_bytes(path: Path | str, data: bytes, *, mode: int = 0o600) ->
             prefix=f".{target.name}.", suffix=".tmp", dir=str(target.parent)
         )
         temporary = Path(temporary_name)
-        os.fchmod(descriptor, mode)
+        try:
+            os.fchmod(descriptor, mode)
+        except (AttributeError, OSError):
+            pass
         with os.fdopen(descriptor, "wb") as stream:
             descriptor = None
             stream.write(data)