SecondOS is portable, cross-tool, structure-aware AI memory for codebases. You sync a repository once; any AI tool then reads its map and memory over MCP, without re-scanning the code each session.

This repository is the source-available client of SecondOS: the CLI, the MCP server, and the packages they are built from. It is published here so you can read and verify what the software does with your code, not as the way you install or run it.

The canonical, supported way to run SecondOS is the published CLI:

bunx @secondos/cli

The npm package is the install path. This repository exists so an evaluator, a security reviewer, or a curious developer can trace the claims in AGENTS.md to actual files and lines. Treat it as the reference copy, not the distribution.

Use of this source is governed by LICENSE — a review-only, source-available license. It grants no right to use, copy, modify, or redistribute the code. Reading and referencing it to evaluate SecondOS is the entire point; anything beyond that is not permitted.

We would rather you check than trust us. Two documents lead the way:

• AGENTS.md — written for an agent or evaluator reading this repository. Every privacy claim points at a file and line you can open here.
• docs/DATA-HANDLING.md — the full account of what leaves the machine and what does not.

The short version, all checkable in this source tree:

• Code is uploaded as a map (symbols, signatures, routes, imports, call sites, line references), not as text. Function bodies do not leave the machine.
• Prose docs and manifests are uploaded as full text. We say so plainly because being able to verify it is the point.
• Deep-mode body embeddings persist vectors only, never source text.

Start at AGENTS.md, then follow the file references into packages/ and apps/.

Included: the client-side and agent-facing source — apps/cli, apps/mcp, and the packages/* they depend on (ingest, query, graph, pack, summarize, embed, schema, memory, shared, and the cloud client).

The server is not included here. This is the client / agent-facing source only. The hosted service — API, web app, and storage — runs at secondos.app and is not part of this repository.

• Product and hosted service: https://secondos.app
• Install: bunx @secondos/cli