mnemosyne-lite 0.4.1__tar.gz

mnemosyne_lite-0.4.1/LICENSE

@@ -0,0 +1,203 @@
+```
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "[]"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright [yyyy] [name of copyright owner]
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+```

mnemosyne_lite-0.4.1/PKG-INFO

@@ -0,0 +1,293 @@
+Metadata-Version: 2.4
+Name: mnemosyne-lite
+Version: 0.4.1
+Summary: Local-first long-term memory for AI agents: a plain Markdown vault plus a thin MCP server. Token-efficient, plug-and-play.
+Author: agentbrain contributors
+License: Apache-2.0
+Project-URL: Homepage, https://github.com/2672243194/agentbrain
+Project-URL: Issues, https://github.com/2672243194/agentbrain/issues
+Project-URL: Changelog, https://github.com/2672243194/agentbrain/releases
+Keywords: agent,memory,mcp,llm,claude-code,codex,opencode,obsidian,long-term-memory,bm25
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: mcp>=1.2.0
+Requires-Dist: PyYAML>=6.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Dynamic: license-file
+
+# agentbrain
+
+> Local-first long-term memory for AI agents — a plain Markdown vault + a thin MCP server.
+> 给 AI Agent 用的本地长期记忆：纯 Markdown 知识库 + 薄 MCP server。
+
+**三步上手 / Quick start (3 steps)**
+
+```bash
+pip install mnemosyne-lite             # Python >= 3.10（PyPI 包名；命令仍是 agentbrain）
+agentbrain init ~/agentbrain  # 建立记忆库（幂等，可重复执行）
+agentbrain doctor             # 自检：一切正常会显示 "Everything looks healthy."
+```
+
+```json
+{
+  "mcpServers": {
+    "agentbrain": {
+      "command": "agentbrain",
+      "args": ["serve"],
+      "env": { "AGENTBRAIN_VAULT": "D:\\agentbrain" }
+    }
+  }
+}
+```
+
+把上面 JSON（vault 路径换成你的）粘进任意 MCP 客户端（Claude Code / Codex / Cursor / DSH / Open WebUI…），重启客户端，完成。Agent 从此有了跨会话、跨工具的长期记忆。
+
+Paste that JSON (with your vault path) into any MCP client and restart it — done. Your agents now share one long-term memory.
+
+[中文详细说明](#中文快速上手) · [English quickstart](#english-quickstart)
+
+## Why agentbrain / 设计理念
+
+- **Plain Markdown, no lock-in** — your memory is a folder of `.md` files. Open it in
+  Obsidian, grep it, version it with Git. Remove agentbrain and the memory stays.
+- **Token-efficient by design** — index-first retrieval: `Index.md` is the cheap first
+  layer, BM25 (CJK-aware) only ranks candidates, and query output is compact by
+  default (`mode='index'`); full text only on demand.
+- **Append-only for agents** — agents may create lessons, never edit or delete them.
+  Consolidation happens through proposals in `_consolidations/` that a human approves,
+  which keeps multi-agent writes conflict-free.
+- **Plug-and-play via MCP** — one server, every client: Claude Code, Codex CLI,
+  OpenCode, Cursor, DSH, Open WebUI, ...
+- **Secrets never enter the vault** — credentials live in env/keyring; lessons reference
+  `${ENV:VAR_NAME}` placeholders only, resolved at runtime via shell. Since 0.4.1 this
+  is enforced, not just a rule: `memory_ingest` scans for credential-shaped content
+  (sk-/ghp_/AKIA/xox-/AIza keys, bearer tokens, private-key blocks, `password=`
+  assignments) and refuses the write, telling the agent to use a placeholder instead.
+  Placeholders and teaching examples (`sk-xxx`, `YOUR_KEY`) ingest fine. `lint` also
+  scans existing lessons and reports `SECRET` findings — read-only, never rewrites
+  files. Hand-written files are never touched.
+
+## Vault layout
+
+```
+agentbrain/                    # vault root (git-friendly, Obsidian-friendly)
+├─ AGENTS.md                     # rules every agent reads at session start
+├─ Case-Learnings/
+│  ├─ Index.md                   # auto-generated lesson index (retrieval layer 1)
+│  ├─ log.md                     # append-only audit log
+│  ├─ Learnings/                 # one lesson per file, YAML frontmatter
+│  │  └─ case-001-lesson-01.md   # 文件名 = {case_id}-lesson-{NN}，自动生成
+│  └─ _consolidations/           # merge/promotion proposals (human approval)
+└─ Agent-Profile/
+   ├─ Immutable/                 # owner preferences & environment (agent read-only)
+   ├─ Mutable-Hints/             # soft preferences (agent read-only)
+   └─ _suggestions/              # agent-suggested profile changes
+```
+
+## 中文快速上手
+
+```bash
+pip install mnemosyne-lite             # Python >= 3.10
+agentbrain init ~/agentbrain           # 生成 vault 脚手架（幂等），自动开启 Git 快照
+agentbrain doctor                      # 体检：vault/索引/锁/快照/log 一览
+agentbrain ingest --case demo --lesson "部署前必须先跑迁移脚本" --tags 部署,运维
+agentbrain query "部署 迁移"
+agentbrain profile                     # 查看个人偏好（Immutable + Mutable-Hints）
+agentbrain suggest --title "回复用中文" --change "偏好简洁的中文回复"    # 提交偏好建议
+agentbrain lint                        # 体检：重复/过时/无标签/低置信度 → 生成整合提案
+agentbrain apply lint-20260820-172206.md      # 人工审核后执行提案（自动归档）
+agentbrain distill                     # 分析 log 中重复出现的模式 → 生成提升提案
+agentbrain snapshot -m "手动备份"      # 手动提交快照（如用 Obsidian 手改文件后）
+```
+
+> 说明：PyPI 包名为 `mnemosyne-lite`（`agentbrain` 在 PyPI 上与已有项目过于相似，无法注册）。
+> 安装后的 CLI 命令与 Python 包名仍是 `agentbrain`，GitHub 仓库地址不变。
+
+日常你只需要做三件事（频率都很低）：
+
+| 事 | 命令 | 频率 |
+|---|---|---|
+| 想看库健不健康 | `agentbrain doctor` | 随意 |
+| 记忆整理（清重复/过时） | `agentbrain lint` → 审核 → `agentbrain apply <提案>` | 约一周一次 |
+| 手改文件后备份 | `agentbrain snapshot` | 改完就跑 |
+
+其余全自动：Agent 会话开始读偏好、任务前查经验、学到东西写入（每次写入自动 git 快照，可回滚）。
+
+在 MCP 客户端里接入（以 Claude Code 为例）：
+
+```bash
+claude mcp add agentbrain -- agentbrain serve
+```
+
+通用 MCP JSON 配置（Cursor / Open WebUI 等）：
+
+```json
+{
+  "mcpServers": {
+    "agentbrain": {
+      "command": "agentbrain",
+      "args": ["serve"],
+      "env": { "AGENTBRAIN_VAULT": "D:\\agentbrain" }
+    }
+  }
+}
+```
+
+Vault 路径解析顺序：`--vault` 参数 > `AGENTBRAIN_VAULT` 环境变量 > `~/agentbrain`。
+
+## English quickstart
+
+```bash
+pip install mnemosyne-lite             # Python >= 3.10
+agentbrain init ~/agentbrain           # scaffold the vault (idempotent), enables git snapshots
+agentbrain doctor                      # health check: vault, index, lock, snapshots, log
+agentbrain ingest --case demo --lesson "Always run migrations before deploy" --tags deploy,ops
+agentbrain query "deploy migrations"
+agentbrain profile                     # print the owner profile
+agentbrain suggest --title "Short replies" --change "Keep answers under 3 sentences."
+agentbrain lint                        # health check → consolidation proposals
+agentbrain apply lint-20260820-172206.md      # execute an approved proposal (archives it)
+agentbrain distill                     # recurring-pattern analysis → promotion proposals
+agentbrain snapshot -m "manual backup" # commit a snapshot (e.g. after hand-edits)
+agentbrain serve                       # start the MCP server on stdio
+```
+
+> Note: the PyPI distribution name is `mnemosyne-lite` (`agentbrain` was rejected
+> as too similar to an existing PyPI project); the installed CLI command and the
+> Python import name remain `agentbrain`.
+
+Codex CLI (`~/.codex/config.toml`):
+
+```toml
+[mcp_servers.agentbrain]
+command = "agentbrain"
+args = ["serve"]
+```
+
+## MCP tools
+
+| Tool | Purpose |
+|------|---------|
+| `memory_query(query, top_k=5, mode="index")` | Search lessons. `mode='index'` returns compact hits (id, summary, tags, path, gist); `mode='full'` adds full text. |
+| `memory_ingest(case_id, lesson, tags, confidence=0.8, source_summary=None)` | Save a new lesson (facts + scenario + fix, ≤ 30 lines). Creates a file, updates Index.md and log.md. |
+| `memory_lint(scope="all")` | Health check: duplicates, stale, expired, untagged, low-confidence. Writes a merge proposal to `_consolidations/`. |
+| `memory_distill(window_days=30, min_repeat=3)` | Finds cases/tags ingested ≥ N times in the window and writes a promotion proposal. |
+| `memory_profile()` | Returns the owner profile (hard rules + soft preferences). Read-only; agents call it once per session to tailor behavior. |
+| `memory_suggest(title, change)` | Proposes a profile change into `Agent-Profile/_suggestions/` for the owner to review — agents never edit the profile itself. |
+
+## MCP resources
+
+| URI | Content |
+|-----|---------|
+| `agentbrain://rules` | `AGENTS.md` — vault rules for every agent |
+| `agentbrain://index` | `Case-Learnings/Index.md` — retrieval layer 1 |
+| `agentbrain://profile` | merged owner profile (read-only) |
+
+Agents are expected to follow `AGENTS.md` in the vault root: read the profile at
+session start, query at task start, ingest on learnings, never edit existing
+lessons, never write secrets into the vault. Consolidation proposals carry
+machine-readable directive blocks (```` ```agentbrain ````); only the owner
+executes them via `agentbrain apply`.
+
+## Design notes
+
+- **Retrieval scoring**: BM25 over summary (×3), tags (×2), case id and body, with a
+  CJK bigram tokenizer so Chinese queries work out of the box; results are boosted by
+  `verified`, `use_count` and recent `last_verified_at`, demoted when stale (> 1 year).
+- **Self-maintenance signals**: every query hit increments `use_count`; `log.md`
+  feeds `memory_distill` pattern analysis; `lint` refreshes nothing silently —
+  every mutation of history goes through human-approved proposals.
+- **Single-user, local-first**: no daemon, no ports; concurrent writes from several
+  agents are serialized by an OS-level byte-range lock (`.vault.lock`, msvcrt/fcntl —
+  released instantly if the holder crashes), and all file writes are atomic
+  (temp + rename) so readers never see torn files.
+- **Point-in-time recovery**: every vault is its own git repo (created by `init`,
+  repo-local identity only). Each content write — ingest, apply, lint/distill
+  proposal, suggestion, index rebuild — is auto-committed, so any bad edit can be
+  rolled back with plain git. Query-driven `use_count` bumps ride along with the
+  next content commit instead of polluting history. Works fully without git; if git
+  is missing, snapshots are silently disabled.
+
+## Changelog
+
+- **0.4.1** — Enforced secret redaction: `memory_ingest` scans content and
+  summaries for credential-shaped patterns (OpenAI/Anthropic/GitHub/AWS/Slack/Google
+  tokens, Bearer headers, private-key blocks, `password=`/`api_key=` assignments) and
+  refuses the write with a placeholder hint — the "secrets never enter the vault" rule
+  is now a mechanism, not just AGENTS.md discipline. `${ENV:VAR}` references and
+  teaching examples (`sk-xxx`) pass through. `lint` reports `SECRET` findings for
+  pre-existing lessons (read-only). 84 tests.
+- **0.4.0** — Maturity pass: git snapshots (every vault is a self-contained git repo;
+  every content write is an auto-commit you can roll back — repo-local identity,
+  graceful without git), `agentbrain doctor` one-shot health check (vault, index
+  freshness, lock round-trip, snapshot status, log; prints a copy-paste MCP config
+  with your vault path), `agentbrain snapshot` manual commit, fool-proof 3-step
+  quickstart, PyPI-ready packaging. 74 tests.
+- **0.3.2** — Locking rewrite + edge cases: the vault lock now uses OS-level
+  byte-range locks (msvcrt on Windows, fcntl on POSIX) instead of
+  create-file-and-reclaim — a crashed holder releases instantly (previously all
+  writes failed for up to 60 s) and the stale-reclaim race (two waiters both
+  unlinking and both acquiring) is gone. `agentbrain lint --scope tag:x` no longer
+  reports false DANGLING for supersede targets outside the scope; `case_id`s
+  containing glob metacharacters (`[`, `?`, `*`) no longer collide lesson ids;
+  suggestion files use real YAML frontmatter (titles with colons/newlines used to
+  corrupt it) and atomic writes. 65 tests.
+- **0.3.1** — Data-integrity fixes: concurrent same-case ingests no longer overwrite
+  each other (lesson-id allocation moved inside the vault lock); `confidence: 0.0`
+  round-trips correctly (was silently coerced to 0.8); lint/distill proposals are
+  written atomically under the lock with collision-free names; merge proposals now
+  keep the more-used lesson as the keeper; duplicate detection pre-tokenizes (O(n²)
+  without re-tokenizing per pair). Session wrap-up rule added to AGENTS.md. 59 tests.
+- **0.3.0** — Concurrency & robustness: cross-process/thread vault write lock
+  (`.vault.lock`, re-entrant, stale-reclaim), atomic writes (temp + rename),
+  `apply` is now a single transaction; query no longer rebuilds the index once per
+  hit (one rebuild per query); stray non-lesson `.md` files in `Learnings/` are
+  ignored; `confidence` clamped to [0,1]; unknown `mode` falls back to `index`;
+  same-second suggestions no longer overwrite each other. 54 tests.
+- **0.2.0** — Owner profile layer (`memory_profile` / `memory_suggest` + MCP
+  resources), lint/distill proposals with machine-readable directive blocks,
+  `agentbrain apply` with cycle/self-supersede/dangling checks.
+- **0.1.0** — Initial MVP: vault + frontmatter + CJK-aware BM25 retrieval,
+  MCP server (query/ingest/lint/distill) + CLI, scaffold templates.
+
+## Roadmap — maintenance mode
+
+The core promise — *a local, token-efficient, agent-shared long-term memory that
+you own as plain Markdown* — is complete and battle-tested in daily use.
+The project is now in maintenance mode: bug fixes, compatibility with new MCP
+client versions, and small quality-of-life improvements. Big new subsystems are
+deliberately out of scope; if a vault ever grows past a few hundred lessons,
+these are the parked ideas:
+
+- Hybrid fallback search (SQLite FTS5 + local embedding, RRF fusion)
+- Keyring-backed `${ENV:...}` resolution helper
+
+Done along the way:
+
+- [x] Enforced secret redaction on ingest + SECRET findings in lint
+- [x] Git snapshot on every write
+- [x] `agentbrain apply <proposal>` to execute approved consolidations
+- [x] Owner profile layer: `memory_profile` / `memory_suggest` + MCP resources
+- [x] OS-level cross-process vault lock + atomic writes
+
+## Development
+
+```bash
+pip install -e ".[dev]"
+pytest
+```
+
+## License
+
+Apache-2.0 — see [LICENSE](LICENSE).