Lians Agent Memory

io.github.ebeirnePublished by GitHub account ebeirnev0.5.0Updated Oct 24, 2026

Bitemporal memory for AI agents with point-in-time recall and tamper-evident audit history.

The publisher's own server: Memory.fit

Overview

AI-generated overview

Gives coding agents a local, bitemporal memory store so they can recover task context, reject stale state, and gate completion on measured evidence.

What you can do
Lians Agent Memory stores project facts and task checkpoints in a local SQLite database and exposes them to an assistant over MCP, with tools for remembering, recalling, listing, correcting, and forgetting memories. It supports point-in-time recall and tamper-evident audit history, and can generate a bounded project handoff instead of replaying a transcript. A stricter Guard layer separates measured evidence from agent claims and keeps a completion gate closed while work is missing, unknown, failed, or blocked. An optional hosted or self-hosted server mode is also available.
When to use it
Useful when a coding agent needs to resume interrupted work across sessions or tools, when old checkpoints risk being silently reused after requirements change, or when you want completion claims backed by measured rather than self-reported evidence. The free local recovery path needs no Lians account.
Requirements
Runs locally over stdio, typically via uvx from the lians-sdk PyPI package (Python and uv required). Local mode stores data in a SQLite file, by default under the user's home directory. Environment variables include LIANS_AGENT_ID for the memory namespace, LIANS_NAMESPACE for the local tenant, LIANS_LOCAL_DB for the SQLite path, and LIANS_URL for an optional hosted or self-hosted server. LIANS_API_KEY is needed only for the hosted path. Desktop builds are macOS and Windows release candidates.
Before you install
The hosted path requires LIANS_API_KEY, described as having read and write scopes, so treat it as a secret. Memory tools can write, correct, and permanently delete stored memories, and deletion is described as confirmed and permanent. Stored content may include project facts and repository state, so avoid saving secrets. Guard and evidence-gating features are developer preview or in development, and the README states results are bounded beta findings rather than production guarantees.

Installation

In SourceWeft

  1. Open Lians Agent Memory in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[Lians lotus]

Recover the task. Reject stale state. Block unsupported done.

Quickstart · Why Lians · ContinuityBench · Install · Docs · Issues

[PyPI version] [npm version] [MCP Official Registry] [Apache 2.0 license]

Lians Guard

The current-state and completion guard for AI coding agents.

Lians recovers interrupted agent work, rejects stale task state, and blocks done until the current task is ready for human review.

Your agent can forget the chat. It cannot forget what is finished, what changed, or what still has to pass.

  • Recover. Resume a bounded current task across supported Claude Code and Codex sessions.
  • Reject stale state. Bind checkpoints to current repository and task state so old evidence is not silently reused.
  • Guard completion. Separate measured evidence from an agent's own claims and keep the gate closed while work is missing, unknown, failed, or blocked.
  • Require review. READY FOR HUMAN REVIEW is a handoff to a person, never a claim that the work is correct, approved, or safe to deploy.
  • Stay local. The free recovery path needs no Lians account, AI password, or provider API key.

Lians works with your existing AI account and editor. It does not replace your model, Git, CI, repository instructions, or human review.

Two layers, one agent loop

The open-source Lians Guard layer lives inside Codex through MCP, skills, hooks, and repository state. It remembers corrections and exposes evidence without taking over the model. The optional Lians Mission Control beta is the local control layer: give it one mission, let it choose a bounded Codex route, and require a real verifier before it returns PASS.

On supported Codex versions, one Mission Control mission now uses one Codex app-server thread instead of starting a new process and replaying a summary for every stage. Codex still owns authentication, tools, sandboxes, and execution; Lians owns the durable mission, usage policy, and receipt. App-server is currently experimental, so the one-shot adapter remains available.

Inspect the Mission Control source, read the bridge boundary, or follow the external proof-gate protocol.

One clear result after every agent session

text
RECOVEREDTask: Fix OAuth callback handlingNext: Re-run the callback integration test
STALEReason: The authentication requirement changed after this checkpoint
BLOCKEDMissing: OAuth callback integration testUntrusted: "tests passed" was reported by the agent, not measured
READY FOR HUMAN REVIEWMeasured locally: callback tests passedMeasured by CI: required checks passed

The trust model is deliberately strict. measured_local, measured_ci, and human_confirmed evidence can satisfy a criterion. agent_attested and inferred_activity records remain useful context but cannot open the review gate. An agent cannot promote its own checkpoint into a trusted class. Trusted CI evidence requires an exact GitHub attestation and commit match plus an interactive check-to-criterion mapping; human evidence requires interactive confirmation. Read why Lians exists, the full Lians Guard product contract, and the current market pressure test.

Try it in two minutes

Choose the AI tool you already use:

ToolFastest setup
Codex app, CLI, or IDEOne command
Claude CodeTwo plugin commands
CursorOne-click MCP install
Other MCP clientsMinimal MCP setup

For example, after installing uv, connect Codex with:

bash
codex mcp add lians --env LIANS_MCP_ENABLED_TOOLS=remember,recall,list_memories,correct_memory,forget_memory -- uvx --from "lians-sdk[mcp]" lians-mcp

Restart Codex, then save one safe project fact and recover it in a fresh chat. Local memory is stored in ~/.lians/mcp.db by default. This is the available free recovery path; the full Guard workflow is currently a developer preview.

Follow the complete quickstart for setup, recovery, correction, deletion, and the Guard preview boundary.

What a fresh coding agent receives

Lians can generate a bounded project handoff instead of replaying a transcript:

text
Reported complete; verify:- migrated the orders API to /v2/orders
Still open:- verify the migration against current Git state- update documentation
Decisions:- keep pytest
Changed:- /v1/orders is stale; use /v2/orders
Next:- update documentation before touching unrelated UI

The handoff is derived from current Lians state, not a manually maintained summary. Agent-reported work remains visible without being mislabeled as verified completion.

Why this is not another generic memory layer

Native memories are convenient when work stays inside one product. General memory is no longer a scarce category. Lians uses local memory for recovery, then focuses on the expensive gap: current task state and evidence-backed readiness.

The current competitive landscape pressure tests this position against native Claude Code, Codex, Cursor, GitHub Copilot, Entire, Factory, and AI review workflows.

ApproachBest fitBoundary
Native tool memoryOne AI tool, minimal setupUsually stays inside that vendor
AGENTS.md or CLAUDE.mdStable repository instructionsMust be maintained manually
Transcript replayReconstructing one conversationLarge, noisy, and may revive stale decisions
Free Lians recoveryResume current project context across supported toolsRequires a local connection to each tool
Lians GuardDetect stale state and gate readiness with typed evidenceTeam workflow is still in developer preview

Lians is not claiming that every project needs a separate memory layer. See the honest comparison and decision guide.

Project status

Lians is under active development. Available recovery features and preview Guard features are separated here so the repository does not imply a production guarantee that does not exist yet.

CapabilityStatus
Local memory through MCP and PythonAvailable
Codex, Claude Code, and Cursor local recovery setupAvailable
Inspect, correct, and confirmed permanent deletionAvailable
Bounded context and signed selection receiptsAvailable
Automatic Claude-to-Codex project handoffBeta
Typed evidence and evidence-backed task gateDeveloper preview
Local Git workspace fingerprint on checkpointsDeveloper preview
Automatic stale evidence invalidationIn development
Attested GitHub Actions evidence intakeDeveloper preview
Local Guard reportingDeveloper preview
Shared team queuePlanned
Cross-platform clean-install CIRequired by the new Guard workflow; first hosted run pending
Guided desktop installer and local control centerRelease candidate
Mission Control Protect-versus-Maximum betaCandidate; proof gate preregistered
Persistent one-mission/one-Codex-thread bridgeBeta; app-server is experimental

The macOS and Windows desktop builds remain release candidates pending platform signing and notarization. See the desktop preview boundary.

Current evidence

The included Claude-to-Codex continuity fixture recovered 10/10 expected facts, exposed 0 stale facts as current, and produced a 231-token handoff. These are bounded beta results, not a promise that every live coding session extracts perfectly. Run the experiment.

The developing ContinuityBench v0.1 publishes the proposed cross-agent, freshness, correction, erasure, provenance, and boundedness test contract. Its current Lians fixture is evidence for that fixture only; it is not presented as a completed competitor leaderboard.

A separate live test saved a synthetic project fact through Cursor, recalled it in a new Cursor chat and a fresh Claude Code session, and confirmed it was gone after deletion. Read the test method.

The Guard correctness benchmark exercises missing evidence, unknown criteria, failed constraints, blockers, stale updates, and drift signals. It is a local, deterministic test of the configured policy, not proof of semantic correctness or a production outcome. Run packages/lians-easy/benchmarks/task_contract_correctness.py to inspect the cases.

Build with Lians

Use the local Python SDK inside an application:

bash
pip install "lians-sdk[local]"
python
from datetime import datetime, timezonefrom lians import LocalLiansClient
memory = LocalLiansClient(db_path=".lians/memory.db")memory.add(    agent_id="my-agent",    content="The project uses Python 3.12 and pytest.",    event_time=datetime.now(timezone.utc),)
result = memory.recall(    agent_id="my-agent",    query="Which Python version and test runner should I use?",)

See the install guide for TypeScript, Go, Java, C, framework integrations, and self-hosting.

Running a class, club, hackathon, or campus developer group? Use the student and community kit. Contributors and package integrators can start with Supported paths and repository status.

Advanced capabilities

Lians also includes tools for project-scoped agent handoffs, signed selection and review receipts, local research and browser briefs, temporal reconstruction, lineage, information barriers, confirmed erasure, and bounded formal checks. These capabilities are useful for advanced or governed deployments but are not required for the starter memory workflow.

Development

bash
git clone https://github.com/Lians-ai/Lians.gitcd Lianspython -m pip install -e ".[dev]"python scripts/test_all.py

Read CONTRIBUTING.md before opening a pull request. Feature ideas, integration requests, and reproducible bugs are welcome in GitHub Issues.

If Lians helps your workflow, star the repository so other AI-tool users can find it.

License

Apache 2.0. See LICENSE.

Source: README.md at commit 4eb78dc

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.5.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Memory integrations