
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
Persistent memory SDK for AI agents — Stanford Generative Agents architecture on Supabase + pgvector
Cognitive memory for AI agents. Not just storage — synthesis.
Clude gives any agent persistent, typed memory with hybrid retrieval (vector + keyword + tags + importance), differential decay, a bond-typed memory graph, and autonomous consolidation. TypeScript declarations included.
npx @clude/sdk registerWorks with Claude Code, Claude Desktop, Cursor, and any MCP-compatible runtime.
npx @clude/sdk setup # register + config + MCP install, ~30 seconds
Works headless too: with no TTY it completes in local-only mode (set CLUDE_SETUP_EMAIL to register in CI).
Or use the SDK directly:
import { Cortex } from '@clude/sdk';
const brain = new Cortex({
hosted: { apiKey: process.env.CORTEX_API_KEY! },
});
await brain.init();
await brain.store({
type: 'episodic',
content: 'User asked about pricing and seemed frustrated.',
summary: 'Frustrated user asking about pricing',
tags: ['pricing', 'user-concern'],
importance: 0.7,
source: 'my-agent',
});
const memories = await brain.recall({ query: 'what do users think about pricing', limit: 5 });
const context = brain.formatContext(memories); // markdown, ready for your system prompt
| Mode | Config | Storage |
|---|---|---|
| Hosted | CORTEX_API_KEY | clude.io, isolated per API key |
| Self-hosted | SUPABASE_URL + SUPABASE_SERVICE_KEY | your Supabase (PostgreSQL + pgvector) |
| Local (default) | none | ~/.clude/brain.db — SQLite + local embeddings, fully offline |
| Local (JSON) | CLUDE_LOCAL=true or --local | ~/.clude/memories.json, portable single file |
Self-hosted unlocks the full cognitive layer: dream cycles (consolidation, reflection, contradiction resolution), the entity graph, and memory packs.
{
"mcpServers": {
"clude-memory": {
"command": "npx",
"args": ["@clude/sdk", "mcp-serve"],
"env": { "CORTEX_API_KEY": "clk_..." }
}
}
}
Or npx @clude/sdk setup to install automatically. Your agent gets 8 tools: recall_memories, store_memory, batch_store_memories, list_memories, update_memory, delete_memory, get_memory_stats, find_clinamen (anomaly retrieval). A remote Streamable-HTTP connector is also available at https://clude.io/api/mcp (npx @clude/sdk connect).
npx @clude/sdk setup # Guided setup: register + config + MCP install
npx @clude/sdk status # Mode, storage, MCP detection, memory stats
npx @clude/sdk register # Get a hosted API key
npx @clude/sdk mcp-install # Install MCP config for your IDE
npx @clude/sdk mcp-serve # Run as a stdio MCP server
npx @clude/sdk connect # Connect Claude Desktop / claude.ai via remote MCP
npx @clude/sdk export # Export memories (json/md/chatgpt/gemini/memorypack)
npx @clude/sdk import # Import from ChatGPT export, markdown, JSON
npx @clude/sdk doctor # Diagnostics
Five typed stores with differential decay — accessed memories are reinforced, unaccessed ones fade:
| Type | Decay/day | Use for |
|---|---|---|
episodic | 7% | events, conversations |
semantic | 2% | facts, knowledge, insights |
procedural | 3% | workflows, what works |
self_model | 1% | identity, preferences |
introspective | 2% | reflections, journals |
Retrieval is hybrid-scored (recency + relevance + importance + vector similarity, weighted by decay) with entity-aware expansion and bond-typed graph traversal. Co-retrieved memories strengthen their links (Hebbian reinforcement).
POST https://clude.io/api/cortex/register → then /store, /recall, /stats, ... with Authorization: Bearer <key>Built on research from Stanford Generative Agents, MemGPT/Letta, and CoALA. The same engine powers @Cludebot, an autonomous agent running publicly 24/7 — a live demonstration of the memory system.
MIT
FAQs
Persistent memory SDK for AI agents — Stanford Generative Agents architecture on Supabase + pgvector
The npm package @clude/sdk receives a total of 37 weekly downloads. As such, @clude/sdk popularity was classified as not popular.
We found that @clude/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.