Skip to main content

PyPI Python Downloads License Discord Twitter

virtual-context dashboard

virtual-context cloud: a 3 million token virtual window served at 80K real tokens

virtual-context

Virtual memory for LLM context. Give your agent a context window of tens or hundreds of millions of tokens; the model only ever sees the part that matters.

Your client sets contextWindow: 20000000 (or 200,000,000). Your model's real window is 200K. virtual-context sits between them and makes it work, the same way an operating system lets a process address more memory than physically exists. The client keeps sending its whole conversation; virtual-context stores all of it, organizes it by topic, and forwards the model a compact window of what matters for the current turn, at a size you choose. Nothing is discarded unless someone removes it on purpose, with a forget command, an admin edit or by deleting the conversation, and anything older can be paged back in, down to its full transcript. The dashboard above shows a live 3 million token conversation served at 80K real tokens.

It runs as an HTTP proxy, so integration is a base-URL change; a Python SDK and an MCP server are there for direct use.

Why

  • Memory that lasts. What the user said at turn 12 is still recallable at turn 1,000, across sessions, clients and models.
  • Better answers from less context. A focused window of relevant summaries and facts beats a raw window of everything, where the one fact you need is buried.
  • Lower cost. Smaller payloads, arranged to keep providers' prompt caches warm.
  • Group chats that know who said what. Every message keeps its sender, facts keep the author their source shows, and search can be scoped to one person.
  • One memory everywhere. Build context in Claude Code, continue it from Telegram, query it from Cursor.

How it works

client ──> virtual-context proxy ──> model provider
             │   before the call: retrieve topics and facts for this turn,
             │                    assemble a bounded window
             │   after the call:  store the turn, tag it, compact when needed
             v
           store (SQLite or PostgreSQL)
             canonical turns   every message verbatim, with sender and channel
             segments + facts  per-topic summaries and structured facts
             topic summaries   one digest per topic, the bird's-eye view

Recent messages stay verbatim. Older turns are grouped by topic, summarized and mined for facts. Each turn, the model gets recent turns plus the topics and facts relevant to the question, and a topic index telling it what else it can open with built-in tools (vc_expand_topic, vc_find_quote, vc_recall_all, and others).

The conversation is the record

virtual-context is built like virtual memory. The conversation is the backing store: every turn is kept verbatim, with who said it, where, when and to whom. Everything else is a cache layer above it, there to put the right part of the conversation in front of the model, not to replace it.

Layer What it holds Role
Canonical turns Every message exactly as sent, with sender, channel, time, audience and reply target The record. The ground truth everything else points back to.
Layer 0: recent turns The latest exchanges, verbatim Always in the model's view.
Layer 1: segment summaries and facts Per-topic summaries of older turns, and facts extracted from them Compact, cached views of what was said. Each segment keeps its full text and the ids of the turns it covers; each fact names the topic it came from.
Layer 2: topic summaries One digest per topic The bird's-eye view, and the table of contents for paging.

Paging happens on every turn. Before each model call, virtual-context pages in what the current question needs: the recent turns, the summaries of the relevant topics, the most relevant facts, and an index of the other topics. Facts and summaries are selected for the same question, and every fact carries a pointer to the topic it came from. When the model needs more, it pages deeper itself: vc_expand_topic opens a topic from its summary down to its full transcript, vc_find_quote searches the verbatim record, vc_remember_when scopes recall to a time range, and vc_restore_tool puts back a tool output, or a turn's whole tool-call chain, that the proxy replaced with a stub in the request.

So a fact is not a final answer. It is a cached copy of something that was said, telling the model what it can assume and where the full discussion lives. That is where the questions a memory has to answer are settled:

Question Where the answer comes from
Why does the memory say this? The conversation it came from: the topic's full transcript, in its original order and context, one page-in away from the fact.
Who said it, and how much weight does it carry? The source turns: the speaker, the audience it was said to, the message it replied to, and whether anything said later contradicts it. Belief comes from the record, not from a score attached to the fact.
Who can see it? The audience its source turns were said to. A summary or fact is served only to requests in that audience, so what was said in a DM stays out of a group channel.
When did it happen, and is it still true? The dates on the source turns and everything said after them. A preference stated in March, revised in June and acted on in July is three moments in the record, each with its speaker and context. When a newer fact replaces an older one, the older fact is kept and marked superseded, not deleted, so the cache records what changed.
Can it be acted on now? Its trust state: verified when its source turns prove it, unverified when no complete source proof exists, retracted when an admin changed a source turn, rejected when an admin rejected the fact. Retracted and rejected facts are never served.
Who can correct it? The people in the conversation. The conversation is the record, and every fact is checked against it. Humans keep that record current as they talk: when something changes or was wrong, they say so, it becomes part of the record, and newer facts supersede the ones it corrects. When a cache such as a fact needs correcting, admins can do that: they inspect each fact beside the turns it came from and its trust state, and reject the fact, or correct the record itself by editing or removing a turn, forgetting a topic or deleting a conversation. A rejected fact is not stored again when the same statement is extracted again from the same turns, the facts drawn from a changed turn are retracted at once and rebuilt, a removed turn stays removed even when a client replays old history, and every admin decision is kept in an audit trail, whose entries database triggers keep from being changed, or deleted while the conversation exists, with what it changed, who made it, when and why (see reviewing and editing the record, from the dashboard's Memory Review panel or the command line).
What did extraction keep or reject, and why? The append-only fact_decisions ledger, which records every supersession the store accepts or refuses, and every edit to a stored fact's fields, with its proposal, before and after, and reason; database triggers keep recorded decisions from being changed, or deleted while the conversation exists. It is read before every proposal: a change already refused for the same facts and source turns is not proposed again.

When a cached fact and the conversation disagree, the conversation wins, and it is always one page-in away.

Quick start

pip install "virtual-context[proxy,embeddings]"    # Python 3.11+

virtual-context uses a language model of your choice to tag turns and write summaries. Pick where it runs:

# A local model server (Ollama, LM Studio, llama.cpp, vLLM): tagging and summaries stay on your machine
virtual-context init recommended-local

# Or a hosted model through OpenRouter
virtual-context init recommended
export OPENROUTER_API_KEY=...

Either writes virtual-context.yaml; set tag_generator.model and summarization.model to the model you want. Then start the proxy and point your client at http://127.0.0.1:5757 instead of the provider:

virtual-context proxy --upstream https://api.anthropic.com

A dashboard runs at http://127.0.0.1:5757/dashboard.

The two presets are the hosted service's configuration on one machine and differ only in where the model runs: SQLite storage, paging tools on, fact curation on. Answer quality depends on the model you pick. scripts/smoke_recommended.sh checks a preset end to end from a clean install. The optional parts (PostgreSQL vector search, the judgment layer, group attribution) are each a section of docs/configuration.md; virtual-context presets list shows every preset, and docs/install.md covers install options and running it as a service.

The proxy accepts Anthropic Messages, OpenAI Responses, OpenAI Chat Completions and Gemini requests, and injects the paging tools for all four.

Hosted: virtual-context.com runs the same engine as a service with the dashboard and cost reports; you change your base URL and nothing else.

Integrations

Claude Code

export ANTHROPIC_BASE_URL=http://127.0.0.1:5757

Tool output (file reads, searches, command results) is collapsed into restorable stubs, and when Claude Code trims its own history, the missing turns are restored from storage.

Any client with a base URL (Cursor, Continue, your own app)

client = anthropic.Anthropic(base_url="http://127.0.0.1:5757")
client = OpenAI(base_url="http://127.0.0.1:5757/v1")         # proxy started with --upstream https://api.openai.com

OpenClaw: use the OpenClaw plugin. Settings for direct proxy use are in docs/install.md.

Python SDK

from virtual_context import VirtualContextEngine

engine = VirtualContextEngine(config_path="./virtual-context.yaml")
assembled = engine.on_message_inbound(message=user_message, conversation_history=messages)  # before the LLM call
report = engine.on_turn_complete(messages)                                                  # after it

MCP server: eight tools (recall_context, compact_context, expand_topic, recall_all, remember_when, find_quote, search_summaries, domain_status) plus topic resources, for Claude Desktop, Cursor or any MCP client.

Features

Feature What it does Docs
Topic memory Each turn is tagged by topic; older turns become per-topic segment summaries and one digest per topic. Tags converge on an existing vocabulary instead of piling up synonyms. engine
Structured facts Compaction extracts facts (subject, verb, object, status, time, and the segment they came from). Newer facts supersede older ones, each fact records whether its source turns still support it, and facts can be retrieved by topic and by meaning. fact lifecycle
Retrieval Topics are ranked by tag overlap, full-text match and embedding similarity, with full-text and semantic search over stored turns as a fallback. engine
Demand paging The model sees cold topics by name and segment summaries for relevant ones, and opens full text through tools when it needs detail. engine
Time-scoped recall "What changed between June and July?": the model names the date range, and virtual-context selects what falls inside it by the stored dates. engine
Group memory Sender and channel are stored on every message, facts keep their author, members get person cards, and search can be scoped to one speaker. Direct-message content never appears in a server's context. Off by default. attribution
Tool and media compression Finished tool exchanges become stubs restorable with vc_restore_tool; images are recompressed and restorable the same way. proxy
Prompt-cache aware Injected context sits after a cache breakpoint. With defer_payload_mutation on, as in the recommended presets, payload rewrites wait until the provider's cache would have expired anyway, unless the payload would pass the window's hard limit. engine
A ceiling you choose Set context_window to any size; the virtual window the client sees is independent of it. configuration
Truncation recovery When a client trims its own history, the missing turns are restored from storage. proxy
History import ChatGPT, Claude and Grok exports arrive tagged and searchable (virtual-context import). commands
Native vector search On PostgreSQL with pgvector, quote search, segment candidates and fact search rank inside the database instead of in each worker. native vector search
Judgment layer (optional) A typed judgment model can make individual decisions: which topics and segments to retrieve, which facts to keep, which existing tags a turn belongs to, and more. Each decision runs in legacy or jev mode; jev falls back to the built-in behavior on any failure. Needs a TypeSafe API key. configuration

Commands in any conversation

Type these as ordinary messages in a connected client; the proxy handles them without calling the model.

Command What it does
VCATTACH <id|label> Reattach this client to another stored conversation, by id, or by label on the hosted service
VCLABEL <name> Set the conversation label, no argument shows it (hosted service)
VCSTATUS Conversation id, turns, segments, active topics, record edits in progress
VCRECALL <query> Search stored context and bring matching topics into the next turn
VCCOMPACT Compact now
VCLIST List conversations with labels and turn counts (hosted service)
VCFORGET <topic> Forget a topic: remove it from every turn, remove turns left with no topic, and rebuild what was derived from them
VCMERGE INTO <label|id> Merge this conversation's stored data into another (hosted service)

VCATTACH is a durable redirect: nothing is deleted and old references keep resolving, so two clients (or two agents) can share one memory. Details: docs/commands.md.

Running it in production

  • Storage: SQLite by default; PostgreSQL (pip install "virtual-context[postgres]") for multi-worker deployments. With pgvector installed, virtual-context admin migrate-semantic-vectors prepares in-database vector search.
  • Multi-worker safety: compactions run under leased, fenced operations, lifecycle changes are epoch-guarded, and the stores find and claim conversations whose compaction backlog their traffic never triggered inline, for a sweeper to compact.
  • Operator tooling: virtual-context admin has 28 guarded commands for reviewing and editing the record, backfills, repairs and migrations, with dry-run modes.
  • Security: dashboard endpoints are open until you set VC_DASHBOARD_TOKEN; the default bind is loopback only.
  • Observability: per-stage timing logs, request captures in the dashboard, and per-call cost telemetry.

Architecture, including the canonical-turn model and the prepare/ingest path a host exposes over REST: docs/architecture.md.

Benchmarks

On 100 questions from LongMemEval-500, with the same reader model (Claude Sonnet 4.5):

virtual-context Full raw history
Correct 95/100 33/100
Tokens per question 52,347 117,582
Cost per question $0.16 $0.36

Configuration, results by category, the per-question table and how new runs are recorded: docs/benchmarks.md.

Known limits

A cache can be wrong. What we know and how it is handled:

  • A wrong cached fact can steer an answer. If extraction misreads what was said, the model may act on that fact before paging in its source. Several things limit this: facts are curated per question rather than shown wholesale, every fact names its topic so the source is one page-in away, the topic's summary is selected for the same question, facts keep their author and dates, and supersession retires a fact once a newer one replaces it. A later correction in the conversation always becomes part of the record. Better ways to catch a stale fact before it is used are ongoing work.

Documentation

Page Covers
architecture.md Memory model, request pipeline, multi-worker coordination, identity
engine.md Compaction, tagging, retrieval, code mode, cache awareness
fact-lifecycle.md How facts are superseded and retracted, and their trust state
attribution.md Group conversations: who said what, person cards, speaker search
proxy.md Proxy internals, routing, dashboard, streaming, endpoints
native-vector-search.md PostgreSQL + pgvector ranking and its migration
configuration.md Config keys with their defaults, including the judgment layer
commands.md In-conversation commands, the CLI, import, reviewing and editing the record, admin tooling
install.md Install paths, daemons, multi-instance setups
design.md Why it is built this way, and how it compares with RAG and plain compaction
benchmarks.md Suites, results, how to run them

Development

git clone https://github.com/virtual-context/virtual-context.git
cd virtual-context
python -m venv .venv && source .venv/bin/activate
python -m pip install uv==0.9.30
uv sync --locked --extra all --extra dev
.venv/bin/python scripts/check_contracts.py

License

AGPL-3.0-or-later, Copyright Y. Ahmed Kidwai. For commercial licensing: ahmed@kidw.ai

Metadata

Release files for virtual-context 0.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for virtual-context 0.7
File Size Uploaded Provenance
virtual_context-0.7.tar.gz 5.4 MB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for virtual-context 0.7
File Interpreter ABI Platform
virtual_context-0.7-py3-none-any.whl Python 3 none any Details

Total release size: 8.0 MB

Release files / virtual_context-0.7.tar.gz

Download URL virtual_context-0.7.tar.gz
Size 5.4 MB
Tags Source
SHA-256 checksum
How to use checksums
c4da2da5950d8b5f7e5aeefa31f8b43b776f834f58d03add8dd36d089f5f6985
BLAKE2b-256 checksum
How to use checksums
2c6a7bac11f77ec7d7077b244d1f594d9c11e542ae39f29b30d2624c1a8e89c9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 16, 2026.

Transparency log

Release files / virtual_context-0.7-py3-none-any.whl

Download URL virtual_context-0.7-py3-none-any.whl
Size 2.6 MB
Tags Python 3
SHA-256 checksum
How to use checksums
60b97569be990886e5f50c2fe6aba03a419acbb547ec37c7974218ea48db3ffd
BLAKE2b-256 checksum
How to use checksums
19ea538069378e25477290795d75e55777e8980fe025e928ec66d67308e4d4fc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 16, 2026.

Transparency log

Security for virtual-context 0.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for virtual_context-0.7.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 16, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page