
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
agent-memory-sdk
Advanced tools
Persistent semantic memory for AI agents with replay, restore, verify, and ignore decisions
Persistent semantic memory for AI agents with intelligent decision-making.

π Created by: TheProdSDE
Most AI memory systems retrieve and inject past context into every prompt. This leads to wasted tokens, inconsistent responses, and agents that blindly replay stale or wrong answers.
Agent Memory adds a decision layer:
flowchart TD
A[User Query] --> B[Resolve Memory]
B --> C[Decision Engine]
C -->|High confidence match| D[π Replay β return stored answer]
C -->|Moderate match| E[π Restore β inject as context]
C -->|Needs validation| F[β
Verify β validate before reuse]
C -->|No match| G[β None β answer from scratch]
style D fill:#0d47a1,color:#fff
style E fill:#e65100,color:#fff
style F fill:#1b5e20,color:#fff
style G fill:#b71c1c,color:#fff
Every resolve() returns an explicit action with a scored, explainable rationale β
not just a retrieved chunk.
Adversarial eval: 25/25 (100%) on trap queries β see benchmarks.
| Use case | Without memory | With Agent Memory | Saving |
|---|---|---|---|
| Support bot handling 10k identical FAQ queries/day | Every query costs 1 LLM call | ~75% REPLAY on repeated questions, 0 LLM calls | 75% cost reduction |
| Coding agent that re-derives project conventions each session | Wastes 2β5 LLM calls per session to "remember" conventions | Workflows are REPLAYED instantly on first query | No re-derivation overhead |
| Research agent building knowledge over multiple sessions | Each session starts cold; re-reads the same sources | Facts and summaries are RESTORED as context | Persistent cross-session knowledge |
| Customer onboarding bot answering the same steps repeatedly | Always generates a response | High-confidence workflows are REPLAYED verbatim | Consistent identical answers |
| Tool-output caching for expensive API calls | Calls the external API every time | Results stored with TTL; REPLAY within TTL, re-call after | Reduced external API cost |
| Policy-compliance agent that must verify facts before replaying | Silent hallucination risk on stale data | requires_verification=True ensures VERIFY fires; stale facts are never replayed silently | Auditability + safety |
A GPT-4o call costs ~$0.005. A support agent handling 50,000 queries/day with 70% repeat rate:
A REPLAY costs ~0.05ms of in-process computation. An LLM call takes 300β2,000ms and costs tokens.
Good fit:
Not the right tool:
| Feature | What it does |
|---|---|
| Decision engine | Every resolve() returns REPLAY / RESTORE / VERIFY / NONE β never silent injection |
| Explainability | decision.explain() shows per-component scores: semantic, recency, confidence, usage |
| Hybrid retrieval | BM25 FTS5 + optional vector KNN + RRF fusion β fast and accurate |
| 4 backends | SQLite (default, zero-setup) Β· ChromaDB Β· Redis Β· PostgreSQL |
| Framework adapters | Drop-in BaseMemory for LangChain and LlamaIndex |
| MCP server | Works with Cursor, Claude Code, VS Code via Model Context Protocol |
| REST API | FastAPI server with 9 endpoints + Swagger UI |
| Dashboard | Streamlit UI β stats, memory browser, live resolve sandbox |
| Multi-agent | SHARED / NAMESPACED / ISOLATED memory across multiple agents |
| Confidence learning | Event-driven confidence updates + half-life temporal decay |
| Memory graph | Relationship edges, path-finding, clusters, PageRank importance |
| Async API | aremember, aresolve, alist, β¦ β all operations have async counterparts |
| TTL & states | Automatic expiry, archiving, near-duplicate consolidation |
β Full feature reference: docs/features.md
All numbers are measured β no projections. Charts generated from real benchmark runs.

| Store size | p50 | p95 | p99 | Notes |
|---|---|---|---|---|
| Any size (cache hit) | 0.007ms | 0.010ms | β | LRU cache, 60β80% of production queries |
| 500 β 100K | 9β19ms | 35β84ms | 70β136ms | Diverse unique content, raw SQLite |
| 1M (template-repeated) | 130ms | 310ms | 385ms | Worst case: 32K copies/template β 32K FTS5 matches |
Key insight: latency scales with match count per query, not total store size. A 1M-entry store with diverse unique memories performs near the 10K numbers.

| Applied by default | Impact |
|---|---|
| LRU cache (5s TTL, 256 entries) | 10ms β 0.007ms for repeated queries |
| Bloom filter (NONE fast-path) | 0.46ms β 0.010ms at keyword_search level |
| Stop-word FTS5 filter | 12.4ms β 4.3ms β stops "how/do/i/my" from matching 80% of corpus |
touch() no commit | -9ms per REPLAY β WAL durable without fsync |
| PRAGMA cache_size=32MB + mmap | -4ms vs default 2MB cache |
_RRFBucket at module level | -0.35ms/call β was recreated inside fuse() each call |
| Dynamic IDF stop words (β₯5K docs) | Filters corpus-saturated terms automatically |
Points on the Pareto frontier above cannot improve latency without increasing implementation effort. LRU cache and Bloom filter are on the frontier β they ship by default.
| Mode | 10K | 100K | 1M |
|---|---|---|---|
| Standard (per-row commit) | ~92s | ~909s | ~2.5h |
Fast-seed (--fast-seed) | 3s | 17s | 25s |
β Full methodology, charts, and tuning guide: docs/stress-testing.md
Use Agent Memory when:
Don't use it for:
pip install agent-memory-sdk
from agent_memory import Memory, MemoryAction
memory = Memory(persist_dir=".agent_memory")
# Store once after a good answer
memory.remember(
"How do I reset my password?",
"Go to Settings β Security β Reset Password.",
type="conversation", tags=["auth"],
)
# Decide before every LLM call
decision = memory.resolve("How do I reset my password?")
if decision.action == MemoryAction.REPLAY:
return decision.response # exact match β no LLM call needed
if decision.action == MemoryAction.RESTORE:
context = memory.format_restore_context(decision)
return call_llm(query, system_extra=context)
# VERIFY or NONE β validate or answer fresh
β Full integration pattern and API reference: docs/usage.md
pip install agent-memory-sdk
# Store something
agent-memory remember "How do I reset my password?" \
"Go to Settings β Security β Reset Password." \
--type conversation --tags auth,faq
# Ask it back
agent-memory resolve "I forgot my password"
# β
REPLAY confidence: 0.87
# matched: "How do I reset my password?" stored: 2026-01-01 reused 1Γ
# response: Go to Settings β Security β Reset Password.
# See what's stored
agent-memory stats
# Spin up the services
docker compose -f docker-compose.dev.yml up -d
# Install the backend extra
pip install "agent-memory-sdk[redis]" # or [postgres]
# Use it
agent-memory --backend redis remember "API limit" "1000 req/min" --type fact
agent-memory --backend redis resolve "What is the rate limit?"
pip install "agent-memory-sdk[dashboard]"
# Seed demo data (optional)
python scripts/seed_demo.py --data-dir .agent_memory
# Open the dashboard
AGENT_MEMORY_DIR=.agent_memory agent-memory-dashboard
# β http://localhost:8501
git clone https://github.com/TheProdSDE/agent-memory-sdk.git
cd agent-memory-sdk
python -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
make test # run all tests
make check # lint + type check
An interactive Streamlit dashboard for exploring memories, testing the resolve sandbox, and monitoring stats.

| Stats β KPIs + charts | Memories β searchable table |
|---|---|
![]() | ![]() |
| Resolve β REPLAY | Resolve β VERIFY |
|---|---|
![]() | ![]() |
pip install "agent-memory-sdk[dashboard]"
AGENT_MEMORY_DIR=.agent_memory agent-memory-dashboard # β http://localhost:8501
# Seed demo data (optional β run only when you want it)
python scripts/seed_demo.py --data-dir .agent_memory
agent-memory-sdk is the core β every integration delegates to Memory.
| Integration | Install extra | Example |
|---|---|---|
| Core SDK (SQLite) | (none) | basic_usage.py |
LangChain BaseMemory | [langchain] | langchain_integration.py |
LlamaIndex BaseMemory | [llamaindex] | llamaindex_integration.py |
| Redis backend | [redis] | redis_backend.py |
| PostgreSQL backend | [postgres] | postgres_backend.py |
| Multi-agent isolation | (none) | multi_agent.py |
| FastAPI REST server | [api] | rest_api.py |
| Confidence + Graph | (none) | confidence_and_graph.py |
| Benchmark harness | (none) | benchmark_harness.py |
β Setup instructions and code snippets for each: examples/README.md
| Component | Technology |
|---|---|
| Language | Python 3.10+ |
| Storage | SQLite Β· ChromaDB Β· Redis Β· PostgreSQL |
| Retrieval | BM25 FTS5 + Vector KNN + RRF fusion |
| Interfaces | MCP Β· FastAPI Β· Streamlit Β· CLI |
| Adapters | LangChain BaseMemory Β· LlamaIndex BaseMemory |
| Search DSA | Bloom filter (NONE fast-path) Β· Dynamic IDF stop words Β· RRF fusion |
| Testing | pytest (270 tests) Β· ruff Β· mypy |
| CI/CD | GitHub Actions β test matrix 3.10β3.13 β release gate β PyPI |
No API keys required β everything runs locally.
| Doc | Contents |
|---|---|
| docs/usage.md | Integration pattern, API reference, MemoryEntry / MemoryDecision fields |
| docs/features.md | Decision actions, hybrid retrieval, types, scopes, TTL, graph, multi-agent |
| docs/mcp.md | MCP server setup for Cursor, Claude Code, VS Code; Docker config |
| docs/cli.md | CLI commands, REST API server, dashboard launch, eval dataset format |
| docs/roadmap.md | All shipped features, what's next, GitHub Project board |
| docs/release.md | CI-automated release process, versioning, rollback |
| docs/architecture.md | Retrieval pipeline, scoring policy, system design |
| docs/comparison.md | Feature matrix vs Redis, mem0, Zep, LangMem, LlamaIndex, MemGPT |
| docs/stress-testing.md | 10K / 100K / 1M latency benchmarks with methodology |
| docs/benchmarks.md | Eval results and reproduce commands |
| docs/why-decision-layer.md | The failure mode this project exists to fix |
| examples/README.md | Index of all runnable examples |
| CONTRIBUTING.md | Dev setup, test commands, PR checklist |
All planned features through v0.5.0 are shipped. Track what's next on the GitHub Project β
β docs/roadmap.md
Tag-triggered, fully CI-gated: git tag v0.x.y && git push origin v0.x.y
β docs/release.md
See CONTRIBUTING.md for dev setup, test commands, and the PR checklist.
MIT β see LICENSE.
Agent Memory helps agents decide: Replay β Restore β Verify β Ignore
Built with β€οΈ by TheProdSDE
mcp-name: io.github.theprodsde/agent-memory
FAQs
Persistent semantic memory for AI agents with replay, restore, verify, and ignore decisions
We found that agent-memory-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.