
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
universal-agent-memory
Advanced tools
Autonomous AI agent memory system with CLAUDE.md protocol enforcement
Every lesson learned. Every bug fixed. Every architectural decision.
Not just in one conversation—but forever.
# Install
npm install -g universal-agent-memory
# Run complete setup (installs dependencies, git hooks, etc.)
npm run setup
# Initialize in your project
uam init
That's it. Your AI now has persistent memory and follows proven workflows.
For a full installation with all features:
# Install UAM CLI
npm install -g universal-agent-memory
# Run comprehensive setup
npm run setup
# This will:
# ✓ Check and install dependencies
# ✓ Install npm packages
# ✓ Build TypeScript
# ✓ Configure git hooks (pre-commit, commit-msg, pre-push)
# ✓ Set up GitHub PR templates
Required:
Optional (recommended):
macOS:
brew install node git python docker
Ubuntu/Debian:
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt-get install -y nodejs python3 docker.io
Windows:
winget install OpenJS.NodeJS.LTS
winget install Git.Git
winget install Python.Python.3.12
winget install Docker.DockerDesktop
UAM is optimized for opencode - the local AI coding platform that provides:
# Install opencode
npm install -g opencode
# Configure local LLM (optional, requires llama.cpp server)
# See: https://opencode.ai/docs/configuration
# Initialize UAM in your project
cd your-project
uam init
The opencode.json configuration file automatically loads UAM plugins for:
| Platform | Notes |
|---|---|
| Factory.AI | Works well, use CLAUDE.md for context |
| Claude Code | Desktop app, full UAM support |
| VSCode | Use with Claude Code extension |
| claude.ai | Web version, limited tooling |
Your AI never forgets:
# Store a lesson
uam memory store "Always validate CSRF tokens in auth flows"
# Query later (any agent, any session)
uam memory query "auth security"
Memory persists in SQLite databases that travel with your code:
agents/data/memory/short_term.db - Recent actions + session memoriesuam memory start)Before every task, UAM auto-selects relevant patterns:
=== PATTERN ROUTER ===
Task: Fix authentication bug
Classification: bug-fix
ACTIVE: P3, P12, P17
BLOCKING: [none]
=== END ===
58 battle-tested patterns from Terminal-Bench 2.0 analysis:
Three mandatory checks before "done":
npm test 100%No more accidental commits to main:
uam worktree create my-feature
# → Creates isolated branch in .worktrees/
# → All changes tracked
uam worktree pr <id>
# → Creates PR, triggers reviews
uam worktree cleanup <id>
# → Clean removal after merge
Tasks automatically route to specialists:
| Task Type | Routed To |
|---|---|
| TypeScript/JS | typescript-node-expert |
| Security review | security-auditor |
| Performance | performance-optimizer |
| Documentation | documentation-expert |
npm i -g universal-agent-memory && uam init| Command | Description |
|---|---|
uam init | Initialize/update UAM (never loses data) |
uam generate | Regenerate CLAUDE.md from project analysis |
uam update | Update templates while preserving customizations |
| Command | Description |
|---|---|
uam memory status | Check memory system status |
uam memory query <search> | Search memories |
uam memory store <content> | Store a learning |
uam memory start | Start Qdrant for semantic search |
| Command | Description |
|---|---|
uam task create | Create tracked task |
uam task list | List all tasks |
uam task claim <id> | Claim task (announces to other agents) |
uam task release <id> | Complete task |
| Command | Description |
|---|---|
uam worktree create <name> | Create isolated branch |
uam worktree pr <id> | Create PR from worktree |
uam worktree cleanup <id> | Remove worktree |
| Command | Description |
|---|---|
uam droids list | List available expert droids |
uam droids add <name> | Create new expert droid |
┌─────────────────────────────────────────────────────────────────┐
│ L1: WORKING │ Recent actions │ 50 max │ SQLite │
│ L2: SESSION │ Current session │ Per run │ SQLite │
│ L3: SEMANTIC │ Long-term learnings │ Qdrant │ Vectors │
│ L4: KNOWLEDGE │ Entity relationships │ SQLite │ Graph │
└─────────────────────────────────────────────────────────────────┘
Dynamically retrieves relevant patterns from Qdrant:
agent_patterns collection{
"$schema": "https://opencode.ai/config.json",
"provider": {
"llama.cpp": {
"name": "llama-server (local)",
"options": {
"baseURL": "http://localhost:8080/v1",
"apiKey": "sk-qwen35b"
},
"models": {
"qwen35-a3b-iq4xs": {
"name": "Qwen3.5 35B A3B (IQ4_XS)",
"limit": {
"context": 262144,
"output": 16384
}
}
}
}
},
"model": "llama.cpp/qwen35-a3b-iq4xs"
}
{
"project": {
"name": "my-project",
"defaultBranch": "main"
},
"memory": {
"shortTerm": { "enabled": true, "path": "./agents/data/memory/short_term.db" },
"longTerm": { "enabled": true, "provider": "qdrant" }
},
"worktrees": {
"enabled": true,
"directory": ".worktrees"
}
}
| Dependency | Version | Purpose |
|---|---|---|
| Node.js | >= 18.0.0 | Runtime environment |
| npm | Latest | Package manager |
| git | Latest | Version control (git hooks) |
| npx | Included with npm | Run CLI tools |
| Dependency | Purpose | Installation |
|---|---|---|
| Docker | Local Qdrant for semantic search | get.docker.com |
| Python 3 | Pattern RAG indexing | brew install python or apt install python3 |
| pre-commit | Advanced git hooks | pip install pre-commit |
macOS:
brew install node@18 git python docker
Ubuntu/Debian:
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt-get install -y nodejs python3 docker.io
Windows (PowerShell):
winget install OpenJS.NodeJS.LTS
winget install Git.Git
winget install Python.Python.3.12
winget install Docker.DockerDesktop
# Run tests
npm test
# Run linter
npm run lint
# Build TypeScript
npm run build
| File | Purpose |
|---|---|
CLAUDE_ARCHITECTURE.md | Cluster topology, IaC rules |
CLAUDE_CODING.md | Coding standards, security |
CLAUDE_WORKFLOWS.md | Task workflows, completion gates |
CLAUDE_MEMORY.md | Memory system, Pattern RAG |
CLAUDE_DROIDS.md | Available droids/skills |
| Document | Description |
|---|---|
docs/UAM_COMPLETE_ANALYSIS.md | Full system architecture |
docs/TERMINAL_BENCH_LEARNINGS.md | Universal agent patterns |
docs/BEHAVIORAL_PATTERNS.md | What works vs what doesn't |
benchmark-results/ | Terminal-Bench 2.0 results |
UAM v5.0 includes:
Code Field prompts based on research from NeoVertex1/context-field.
Terminal-Bench patterns from Terminal-Bench 2.0 benchmarking.
Documentation · Issues · npm
Built for developers who want AI that learns.
FAQs
Autonomous AI agent memory system with CLAUDE.md protocol enforcement
We found that universal-agent-memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.