Agent Memory Bridge
Teach one decision and its reason. The next session can recall that reason when it recalls at the start.
AMB keeps a confirmed project decision in a local store. A later session gets it back by recalling, not by rereading the old chat.
The loop
One process stores a decision. A second process, on the same AMB home, recalls the claim and the reason. The recording is that local stdio proof. It is not a filmed coding-agent session, and it is not an adoption measurement.
The source is examples/demo/first-win-demo.cast. The block below is an abridged transcript of that cast. Regenerating it runs the two processes, then writes generated playback: the header time and the line delays are fixed, not a measurement of the run. Command: python ./scripts/build_first_win_cast.py. Rendering a GIF needs agg; this repository does not include that GIF.
# Session A: store one explicit decision
namespace: project:checkout-app
claim: Merge pull requests only after CI is green on the target branch.
reason: Broken main blocked two releases this month.
stored: true
# Session B: a second stdio process, same home, recall at start
query: What is required before we merge a pull request?
claim: Merge pull requests only after CI is green on the target branch.
reason: Broken main blocked two releases this month.
same_record: true
fresh_process: true
Recall at the start
Connecting the server is not enough. The next session has to recall on purpose. This page does not claim that connecting MCP, or leaving a skill where it can be found, makes that happen by itself. There is no automatic learning.
Put this rule where the next session will actually follow it:
Before changing code, recall this project's Agent Memory Bridge decisions and their reasons.
Use the namespace from `project resolve`. Call the public `recall` tool.
Store a decision only after it is confirmed. Do not treat chat history as already stored.
Install, then bind the project
AMB requires Python 3.11+ and Git.
Current package/source version: 0.37.0.
python -m venv .amb-venv
<venv-python> -m pip install agent-memory-bridge==0.37.0
<venv-python> -m agent_mem_bridge project init .
Replace <venv-python> with the Python executable inside .amb-venv. project init detects the Git repository, proposes a namespace such as project:my-app, and waits for confirmation. It does not learn decisions from the tree. After that, project resolve . returns the namespace.
Run <venv-python> -m agent_mem_bridge with one persistent AGENT_MEMORY_BRIDGE_HOME. How a client launches that process stays outside Core. The command shape is in Integrations. Connection is real when the client lists store and recall.
Store one confirmed decision with store. In the next session, use the startup rule above and ask for that decision.
Clients, an existing home, and optional review
AMB does not discover, write, or certify Codex, Claude, Cursor, OpenCode, Hermes, Cline, VS Code, or Antigravity. Clients configure AMB as a standard MCP stdio server and point shared projects at the same local home.
If an existing bridge lives at ~/.codex/mem-bridge, v0.36 does not open it automatically. Set AGENT_MEMORY_BRIDGE_HOME to that directory, or copy it to ~/.local/share/agent-memory-bridge. The configuration guide has the cutover.
The companion skills are optional help for discovery and everyday use. They do not replace the startup rule above. Install them from Agent-Memory-Skills:
npx skills add zzhang82/Agent-Memory-Skills --skill amb
npx skills add zzhang82/Agent-Memory-Skills --skill amb-connect
amb(raw)amb-connect(raw)
For a source checkout, install with <venv-python> -m pip install -e . instead of the pinned package.
Human-first Explore answers “What does AMB currently know?” Inspect answers “Why did this information surface?” Both are local and read-only. They are not the success check.
<venv-python> -m agent_mem_bridge explore --namespace project:my-app
<venv-python> -m agent_mem_bridge inspect \
--namespace project:my-app \
--query "What is required before we merge a pull request?"
Code tells AMB what the repository contains. A confirmed decision tells it why. Derived repository facts come from a clean Git commit. If HEAD moves or the worktree is dirty, refresh on purpose:
<venv-python> -m agent_mem_bridge bootstrap-repo . --namespace project:my-app
Refreshing repository facts leaves stored decisions unchanged. Explore is CLI-only. It is not an extra MCP tool.
doctor and verify check server prerequisites. They do not prove that a client loaded its MCP config. first-run is optional guided help, not the first-win path. Historical Codex observations from the v0.35 line are in First-win acceptance.
Why the memory stays trustworthy
The useful part is not remembering more. It is knowing where a decision came from, whether it is still current, and how it changed.
| Memory concern | AMB approach |
|---|---|
| Current repository truth | Derived from a clean repository state and refreshed explicitly |
| Human decisions and constraints | Stored explicitly as governed durable memory |
| Changed knowledge | Revised or superseded instead of silently overwritten |
| Why context surfaced | Inspectable through local derived views and evidence paths |
| Cross-session reuse | Shared through the same configured local AMB home |
| Privacy | Local-first; no hosted memory service is required |
Code tells the next session what exists. AMB retains the confirmed reasons the code does not explain.
What AMB is — and is not
AMB is a governed local project-memory layer for coding agents. Durable knowledge, derived repository facts, provenance, and corrections stay distinguishable.
It is not a transcript archive, a promise that an agent will remember everything, or a system that silently converts every conversation into durable truth. There is no automatic learning.
Memory hygiene: Structure over prose
Do not treat memory as a prompt trash can for linter errors, directory conventions, or syntax dos and don'ts. If an agent makes the same mechanical mistake twice, harden the repository environment with linter rules, type guards, or pre-commit checks. Reserve AMB durable memory for the reasons that code cannot convey: architectural decisions, domain invariants, and third-party library gotchas. See the Memory Hygiene Guide for the 3-question ingestion filter.
Want the details?
| Read | For |
|---|---|
| First-win demo | The local two-process recording, and the older coordination demo |
| First-win acceptance | Historical Codex observation from the v0.35 line |
| Architecture | System shape and data flow |
| Authority model | Durable authority, derived views, correction, and audit rules |
| Knowledge Explorer | Human-first read-only project view |
| Memory Hygiene | Anti-pollution rules and the structure-over-prose boundary |
| Production Status | Current implementation facts, evidence, and known limits |
| Integrations | Generic stdio MCP installer contract |
| Install for Agents | Full install-to-first-success workflow |
| Configuration | Complete configuration reference |
| Examples | Sanitized demos and artifacts |
Technical model
Internally, AMB keeps derived_repository data separate from governed durable memory so one cannot silently become the other. For maintainers and reviewers, the current authority flow is:
flowchart LR
A[Durable Memory / WHY] --> C[Lifecycle-aware Recall]
B[Repository Knowledge / WHAT] --> D[Context Compiler]
S[Dynamic State Authority] --> D
C --> E[Governed Task Memory]
E --> D
D --> F[Transient Bounded Context]
F --> G[Metadata-only Context Attestation]
G --> H[Episode and Run Authority]
H --> I[Verification Receipt]
I --> J[Current Verified Outcome]
SQLite/WAL rows are durable authority. Repository snapshots, FTS rows, embedding sidecars, compiled context, reports, and Explorer views are derived. Context bodies are rendered in process and are not durably persisted by the compiler.
Trust and privacy
AMB is local-first. It does not require a hosted memory service. It separates durable memory from coordination Signals and mutable Dynamic State, keeps provenance visible, and rejects raw transcripts, hidden reasoning, and inline artifact bodies from the durable episode path.
Read the Trust Boundary, Authority Contract, and Closed-Loop Episode Authority for the exact boundaries.
MCP Tools
AMB exposes 17 public MCP tools:
store,recall,browse, andstatsforget,feedback,promote,annotate,revise, andexportbegin_run,record_run_event,get_run, andcomplete_runclaim_signal,extend_signal_lease, andack_signal
The public tool surface stays small. Setup, Project Init, Explore, Inspect, context assembly, and review reports remain CLI or internal derived workflows rather than becoming more MCP tools.
The local protocol cache contract is 300000/public for discovery and 0/private for the tool list; see MCP Compatibility for details.
Current maturity
Current package/source version is 0.37.0. Schema remains v12 and the public MCP surface remains exactly 17 tools. There is no automatic learning and no MCP tool #18. project init is the preferred first-project path. Default Explore is a Human-first view over existing repository-derived context and governed project knowledge. Current evidence and non-claims live in Production Status; published artifacts live in GitHub Releases.
Contributing
Read CONTRIBUTING.md for development and public-surface expectations, and SECURITY.md for vulnerability reporting.
Licensed under MIT.
Metadata
Release files for agent-memory-bridge 0.37.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| agent_memory_bridge-0.37.0.tar.gz | 846.5 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agent_memory_bridge-0.37.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.2 MB
Release files / agent_memory_bridge-0.37.0.tar.gz
| Download URL | agent_memory_bridge-0.37.0.tar.gz |
|---|---|
| Size | 846.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5cf128263df8eec2c6089db24215ab171379ffe4d99ab5c4d037a1dae746cb74
|
|
BLAKE2b-256 checksum How to use checksums |
5ba7140ae7c3be8bde2ca82c84d4cf3947bab8c97f54e4692608241d2324e423
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logRelease files / agent_memory_bridge-0.37.0-py3-none-any.whl
| Download URL | agent_memory_bridge-0.37.0-py3-none-any.whl |
|---|---|
| Size | 377.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
84a7c7a4bdcb0b2ca61ebfe62dfb05b8e5441217c784b56f0971d3928eae377b
|
|
BLAKE2b-256 checksum How to use checksums |
2446a4b0f51c938b42dd9f23f69f03564c8dbc8f892e4658576ad4971f9a6880
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logSecurity for agent-memory-bridge 0.37.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for agent_memory_bridge-0.37.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.