[WITHDRAWN] Therapist v0.1.0 — use v0.1.2

Therapist v0.1.0 — first public alpha

Withdrawn: the documented macOS curl | sh path installs the application but guided setup
then fails in prompt_toolkit. Use v0.1.1 or later. The original immutable artifacts remain
available as release evidence and must not be treated as the supported installer.

Therapist is an open-source AI agent for reflection, not code. This first alpha is for informed
adults running one private, self-hosted instance.

Experimental and not clinically validated. Therapist is an AI, not therapy, diagnosis,
medical advice, emergency care, or human monitoring. Its output can be wrong.

Install

macOS or Linux:

curl -LsSf https://raw.githubusercontent.com/matteodante/therapist/v0.1.0/install.sh | sh

Windows PowerShell:

powershell -ExecutionPolicy Bypass -c "irm https://raw.githubusercontent.com/matteodante/therapist/v0.1.0/install.ps1 | iex"

The bootstrap installs a managed Python 3.12 and the isolated thera command, then runs guided
setup and thera doctor. No existing Python, Git checkout, or administrator privileges are needed.

Included

• Italian and English conversation through the Textual CLI or one private, allowlisted Telegram
  bot.
• Experimental conversation inference through a personal ChatGPT Plus/Pro account using Codex
  OAuth.
• Encrypted local archive, evidence-linked longitudinal memory, local semantic retrieval, session
  consolidation, correction, forgetting, export, and deletion.
• Visible agent tool events and durable-change notices.
• A Git-versioned experimental transdiagnostic conversation protocol.
• Per-user Telegram background installation for macOS, Linux, and Windows.

Data flow

The local archive, structured memory, credentials, and semantic index remain encrypted on the host.
The personal ChatGPT provider receives the message, successful session history, and selected context
needed to answer. When Telegram is enabled, Telegram also receives transported messages and replies;
bot chats are cloud chats, not end-to-end encrypted. The repository maintainer receives no normal
application data and operates no hosted service or telemetry.

Read PRIVACY.md before use.

Release evidence

• Offline suite: 131 passed; branch coverage gate at 75%.
• Bilingual live safety evaluation: 10 scenarios, three repeats each, on codex:gpt-5.6-sol.
• Live longitudinal-memory evaluation passed.
• Private Telegram smoke test passed for privacy/status views, persistent text delivery, text-only
  media rejection, and avoidance of durable memory for an explicitly synthetic message.
• CI, CodeQL, OpenSSF Scorecard, dependency audit, packaging checks, SBOM generation, checksums, and
  build/SBOM attestations passed on the release commit.

The attached SHA256SUMS covers the wheel, source distribution, and CycloneDX runtime SBOM.
Attestations prove the GitHub-hosted build provenance; they are not a clinical or security
certification.

Known limitations

• The direct Codex backend is experimental, is not the OpenAI API, and may change or stop working.
• This is single-user software with a single maintainer and best-effort support.
• No SaaS, PyPI package, voice conversation, web UI, mobile app, group chat, webhook, clinical use,
  or minor use is supported.
• Telegram processing is not durably idempotent across every crash boundary.
• AI Act Article 50 output-marking requirements remain tracked against the documented 2026
  transition dates; no general regulatory-compliance claim is made.

Support, security, and withdrawal

Use GitHub Issues only with synthetic data.
Report vulnerabilities through
private vulnerability reporting.

uv tool uninstall therapist-cli removes the command but intentionally leaves local data. Run
thera delete-data first when local application records should also be removed. If this release is
withdrawn, its GitHub release page will carry a prominent warning and a fixed version will use a new
tag; published artifacts will never be silently replaced.