Skip to content

Releases: alex-lamport/kaora-memory

Release list

v0.1.2 — privacy hardening

v0.1.2 — privacy hardening Latest
Latest

Choose a tag to compare

View all tags
@alex-lamport alex-lamport released this 28 May 14:13
v0.1.2
1f61193

Public-repo privacy hardening. No functional changes.

After v0.1.1 went out, an external reviewer flagged three PII / metadata leaks that would have grown over time on a scraped index like PyPI. All three fixed before broader distribution.

What changed

  • Author email on PyPI — personal Gmail replaced with GitHub no-reply (192558850+alex-lamport@users.noreply.github.com).
  • PHILOSOPHY.md — §7 marked as decision-closed (kaora-memory confirmed). §8 (references to private dev assets) removed. New "Block N" glossary added at the top.
  • Bulk repo scrub — /Users/alexissilva/ → ~/ everywhere in AGENTS.md, BACKLOG.md, docs/CURRENT_STATE.md, docs/SESSION_HANDOFF.md, docs/DOGFOODING_REPORT.md. Private asset filenames in /tmp/... replaced with generic placeholders. template/ was not affected (it uses {{project_path}}).
  • AGENTS.md Owner line — personal Gmail removed (shipped in commit 4794ee4 after v0.1.2 was already cut). Replaced with GitHub profile link.
  • DOGFOODING_REPORT.md — two reading notes for external readers: (1) Block N terminology, (2) Italian/English mix in cited commit messages is historical (pre-Block 4.5 i18n refactor), not stylistic drift.

Note on v0.1.1

v0.1.1 was withdrawn from PyPI on 2026-05-28 as part of this privacy hardening cycle. It was functionally identical to v0.1.2 — the only difference was the leaked Gmail in the package metadata. Anyone who installed 0.1.1 in the few hours it was live got the same code and template, just with stale author metadata. pip install kaora-memory resolves to 0.1.2 automatically.

Code & tests

No code touched in this release. Suite 68/68 green. kaora check . 0 ERROR / 0 WARN. twine check PASSED.

Install

pip install kaora-memory

Links

Assets 2
Loading

v0.1.1 — first public release

v0.1.1 — first public release

Choose a tag to compare

View all tags
@alex-lamport alex-lamport released this 28 May 13:24
v0.1.1
446d4bb

Operating memory and behaviour for AI agents. Works on any project, fresh or existing.

This is the first public release of kaora-memory on PyPI.

Install

pip install kaora-memory
cd myproject
kaora init

Open Claude Code (or Codex, Cursor, Gemini CLI) in the project and type go. The agent reads the operating memory before doing anything else.

What's in v0.1.1

  • kaora init — installs the 14-file canonical template (AGENTS.md, CLAUDE.md, AGENT_BRIEF.md, docs/*, .claude/settings.json + 2 hooks, .gitignore) with brownfield-safe policy.
  • kaora check — operating-memory integrity linter, 6 categories (structure, ADR-005, ADR state, placeholders, hooks, settings).
  • Brownfield safety: .kaora-bak rotation, surfaced merge warnings, .gitignore shipped by default.

Brownfield safety hardening (F1+F2+F3)

Before publishing, a parallel code-review + security-audit pass on the package surfaced 3 issues against the "Works on any project, fresh or existing" promise. All three fixed in 0.1.1:

  • F1 — .kaora-bak now rotates to .kaora-bak.1, .kaora-bak.2, ... on subsequent kaora init runs. The original pre-kaora backup is never overwritten.
  • F2 — merge failures on existing .claude/settings.json now surface a warnings (N): block in the install report. Silent skip removed.
  • F3 — template/.gitignore shipped with logs/, .env*, *.pem, *.pypirc, plus standard Python/IDE defaults. Greenfield projects are protected by default from accidentally committing bearer tokens captured by the API-call hook.

Suite: pytest 68/68 green · kaora check . 0 ERROR / 0 WARN · twine check PASSED.

Links

kaora-memory doesn't add intelligence to the agent. It adds preparation.

Loading