Skip to main content

Agent Memory Bridge — governed project memory across sessions and tools

Agent Memory Bridge

Teach one decision and its reason. The next session can recall that reason when it recalls at the start.

AMB keeps a confirmed project decision in a local store. A later session gets it back by recalling, not by rereading the old chat.

简体中文

PyPI MCP Server CI GitHub Release MIT License Python 3.11+

The loop

One process stores a decision. A second process, on the same AMB home, recalls the claim and the reason. The recording is that local stdio proof. It is not a filmed coding-agent session, and it is not an adoption measurement.

The source is examples/demo/first-win-demo.cast. The block below is an abridged transcript of that cast. Regenerating it runs the two processes, then writes generated playback: the header time and the line delays are fixed, not a measurement of the run. Command: python ./scripts/build_first_win_cast.py. Rendering a GIF needs agg; this repository does not include that GIF.

# Session A: store one explicit decision
namespace: project:checkout-app
claim: Merge pull requests only after CI is green on the target branch.
reason: Broken main blocked two releases this month.
stored: true

# Session B: a second stdio process, same home, recall at start
query: What is required before we merge a pull request?
claim: Merge pull requests only after CI is green on the target branch.
reason: Broken main blocked two releases this month.
same_record: true
fresh_process: true

Recall at the start

Connecting the server is not enough. The next session has to recall on purpose. This page does not claim that connecting MCP, or leaving a skill where it can be found, makes that happen by itself. There is no automatic learning.

Put this rule where the next session will actually follow it:

Before changing code, recall this project's Agent Memory Bridge decisions and their reasons.
Use the namespace from `project resolve`. Call the public `recall` tool.
Store a decision only after it is confirmed. Do not treat chat history as already stored.

Install, then bind the project

AMB requires Python 3.11+ and Git.

Current package/source version: 0.36.1.

python -m venv .amb-venv
<venv-python> -m pip install agent-memory-bridge==0.36.1
<venv-python> -m agent_mem_bridge project init .

Replace <venv-python> with the Python executable inside .amb-venv. project init detects the Git repository, proposes a namespace such as project:my-app, and waits for confirmation. It does not learn decisions from the tree. After that, project resolve . returns the namespace.

Run <venv-python> -m agent_mem_bridge with one persistent AGENT_MEMORY_BRIDGE_HOME. How a client launches that process stays outside Core. The command shape is in Integrations. Connection is real when the client lists store and recall.

Store one confirmed decision with store. In the next session, use the startup rule above and ask for that decision.

Clients, an existing home, and optional review

AMB does not discover, write, or certify Codex, Claude, Cursor, OpenCode, Hermes, Cline, VS Code, or Antigravity. Clients configure AMB as a standard MCP stdio server and point shared projects at the same local home.

If an existing bridge lives at ~/.codex/mem-bridge, v0.36 does not open it automatically. Set AGENT_MEMORY_BRIDGE_HOME to that directory, or copy it to ~/.local/share/agent-memory-bridge. The configuration guide has the cutover.

The companion skills are optional help for discovery and everyday use. They do not replace the startup rule above. Install them from Agent-Memory-Skills:

npx skills add zzhang82/Agent-Memory-Skills --skill amb
npx skills add zzhang82/Agent-Memory-Skills --skill amb-connect

For a source checkout, install with <venv-python> -m pip install -e . instead of the pinned package.

Human-first Explore answers “What does AMB currently know?” Inspect answers “Why did this information surface?” Both are local and read-only. They are not the success check.

<venv-python> -m agent_mem_bridge explore --namespace project:my-app
<venv-python> -m agent_mem_bridge inspect \
  --namespace project:my-app \
  --query "What is required before we merge a pull request?"

Code tells AMB what the repository contains. A confirmed decision tells it why. Derived repository facts come from a clean Git commit. If HEAD moves or the worktree is dirty, refresh on purpose:

<venv-python> -m agent_mem_bridge bootstrap-repo . --namespace project:my-app

Refreshing repository facts leaves stored decisions unchanged. Explore is CLI-only. It is not an extra MCP tool.

doctor and verify check server prerequisites. They do not prove that a client loaded its MCP config. first-run is optional guided help, not the first-win path. Historical Codex observations from the v0.35 line are in First-win acceptance.

Why the memory stays trustworthy

The useful part is not remembering more. It is knowing where a decision came from, whether it is still current, and how it changed.

Memory concern AMB approach
Current repository truth Derived from a clean repository state and refreshed explicitly
Human decisions and constraints Stored explicitly as governed durable memory
Changed knowledge Revised or superseded instead of silently overwritten
Why context surfaced Inspectable through local derived views and evidence paths
Cross-session reuse Shared through the same configured local AMB home
Privacy Local-first; no hosted memory service is required

Code tells the next session what exists. AMB retains the confirmed reasons the code does not explain.

What AMB is — and is not

AMB is a governed local project-memory layer for coding agents. Durable knowledge, derived repository facts, provenance, and corrections stay distinguishable.

It is not a transcript archive, a promise that an agent will remember everything, or a system that silently converts every conversation into durable truth. There is no automatic learning.

Memory hygiene: Structure over prose

Do not treat memory as a prompt trash can for linter errors, directory conventions, or syntax dos and don'ts. If an agent makes the same mechanical mistake twice, harden the repository environment with linter rules, type guards, or pre-commit checks. Reserve AMB durable memory for the reasons that code cannot convey: architectural decisions, domain invariants, and third-party library gotchas. See the Memory Hygiene Guide for the 3-question ingestion filter.

Want the details?

Read For
First-win demo The local two-process recording, and the older coordination demo
First-win acceptance Historical Codex observation from the v0.35 line
Architecture System shape and data flow
Authority model Durable authority, derived views, correction, and audit rules
Knowledge Explorer Human-first read-only project view
Memory Hygiene Anti-pollution rules and the structure-over-prose boundary
Production Status Current implementation facts, evidence, and known limits
Integrations Generic stdio MCP installer contract
Install for Agents Full install-to-first-success workflow
Configuration Complete configuration reference
Examples Sanitized demos and artifacts

Technical model

Internally, AMB keeps derived_repository data separate from governed durable memory so one cannot silently become the other. For maintainers and reviewers, the current authority flow is:

flowchart LR
    A[Durable Memory / WHY] --> C[Lifecycle-aware Recall]
    B[Repository Knowledge / WHAT] --> D[Context Compiler]
    S[Dynamic State Authority] --> D
    C --> E[Governed Task Memory]
    E --> D
    D --> F[Transient Bounded Context]
    F --> G[Metadata-only Context Attestation]
    G --> H[Episode and Run Authority]
    H --> I[Verification Receipt]
    I --> J[Current Verified Outcome]

SQLite/WAL rows are durable authority. Repository snapshots, FTS rows, embedding sidecars, compiled context, reports, and Explorer views are derived. Context bodies are rendered in process and are not durably persisted by the compiler.

Trust and privacy

AMB is local-first. It does not require a hosted memory service. It separates durable memory from coordination Signals and mutable Dynamic State, keeps provenance visible, and rejects raw transcripts, hidden reasoning, and inline artifact bodies from the durable episode path.

Read the Trust Boundary, Authority Contract, and Closed-Loop Episode Authority for the exact boundaries.

MCP Tools

AMB exposes 17 public MCP tools:

  • store, recall, browse, and stats
  • forget, feedback, promote, annotate, revise, and export
  • begin_run, record_run_event, get_run, and complete_run
  • claim_signal, extend_signal_lease, and ack_signal

The public tool surface stays small. Setup, Project Init, Explore, Inspect, context assembly, and review reports remain CLI or internal derived workflows rather than becoming more MCP tools.

The local protocol cache contract is 300000/public for discovery and 0/private for the tool list; see MCP Compatibility for details.

Current maturity

Current package/source version is 0.36.1. Schema remains v12 and the public MCP surface remains exactly 17 tools. There is no automatic learning and no MCP tool #18. project init is the preferred first-project path. Default Explore is a Human-first view over existing repository-derived context and governed project knowledge. Current evidence and non-claims live in Production Status; published artifacts live in GitHub Releases.

Contributing

Read CONTRIBUTING.md for development and public-surface expectations, and SECURITY.md for vulnerability reporting.

Licensed under MIT.

Metadata

Release files for agent-memory-bridge 0.36.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agent-memory-bridge 0.36.1
File Size Uploaded Provenance Actions
agent_memory_bridge-0.36.1.tar.gz 846.5 kB With provenance Details for agent_memory_bridge-0.36.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for agent-memory-bridge 0.36.1
File Interpreter ABI Platform Actions
agent_memory_bridge-0.36.1-py3-none-any.whl Python 3 none any Details for agent_memory_bridge-0.36.1-py3-none-any.whl

Total release size: 1.2 MB

Release files / agent_memory_bridge-0.36.1.tar.gz

Download URL agent_memory_bridge-0.36.1.tar.gz
Size 846.5 kB
Tags Source
SHA-256 checksum
How to use checksums
64642da94601464967ef7495079d770cb0ec75f4b57e40c33509310c4540d7a2
BLAKE2b-256 checksum
How to use checksums
b70c4c942868494e75385c50647d0bce46398f9093935287896f5f45610aa107
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.

Transparency log

Release files / agent_memory_bridge-0.36.1-py3-none-any.whl

Download URL agent_memory_bridge-0.36.1-py3-none-any.whl
Size 377.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
e16ced80f83d8a81d20a573ce164088f1a77a0d6165c80ffe726def54dcf57d5
BLAKE2b-256 checksum
How to use checksums
a07240cf32422f96460474e638ce0e62305d5a2ee29c2ac09380afd2920bce60
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.

Transparency log

Security for agent-memory-bridge 0.36.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for agent_memory_bridge-0.36.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page