Sovereign memory
for Claude Code.
Local-first. End-to-end encrypted. Branchable. Two sub-agents distill your sessions into facts — high-confidence ones merge auto, uncertain ones wait for one-click review. You own the keys, the data, and the bill.
Everything hellodb writes lives here. No telemetry, no shadow uploads. Delete the folder and it's gone — keys included.
Your machine. Your Cloudflare.
No middleman.
hellodb never talks to Cloudflare APIs directly — only through your own gateway Worker. Every primitive lives in your account. One token to rotate. The free tier covers solo use forever.
Encrypted. Branchable. Semantic.
Three Rust crates do most of the work. The rest is plumbing.
Encrypted
Ed25519 signatures, ChaCha20-Poly1305 at rest, BLAKE3 content addresses, SQLCipher database. Identity keys live in your OS keychain — never on disk in plaintext.
Branchable
The brain digests episodes into facts on a draft branch. Nothing lands on main until you approve. Memory works like git — branches, merges, history you can audit.
Semantic
Per-namespace encrypted vector index. Cosine similarity with time-decay reinforcement at recall. Embeddings via Workers AI, OpenAI-compatible, or fully offline via fastembed-rs.
Install it. Forget it's there.
You only review what's uncertain.
Two Haiku-backed sub-agents do the work. memory-digest scores every fact; high-confidence merges auto-land on main, low-confidence and superseding edits wait for your review. Default threshold 0.75, tunable in brain.toml. Zero extra infra — everything runs inside Claude Code on your subscription.
- 1write0mshellodb_note returns instantly. The agent never waits.
- 2digestHaiku sub-agentmemory-digest extracts facts from episodes and scores each with a confidence.
- 3score≥ 0.75 autoHigh confidence → merges straight to main. Low or superseding → held for review.
- 4reviewedge cases only/hellodb:review shows only the uncertain ones. Empty most days.
- 5recallsemanticFuture sessions hit merged facts via vector recall + decay reinforcement.
One line in chat. A fact for next session.
The /hellodb:memorize skill is loaded into every Claude Code session by the plugin. You don't think about it; the agent recognizes durable facts and writes them. A Haiku-backed memory sub-agent takes it from there.
{
"namespace": "code/hellodb",
"kind": "convention",
"text": "use pnpm for this project (npm/yarn forbidden); pnpm-lock.yaml is committed",
"evidence": "user-stated, 2026-04-16"
}Write returns instantly. On the next Stop hook, memory-digest scores the fact and (because confidence ≥ 0.75) lands it straight on main. No review queue to clear.
{
"namespace": "code/hellodb",
"query": "package manager + install command",
"top_k": 3
}→ 0.91 use pnpm for this project (npm/yarn forbidden) → 0.78 pnpm-lock.yaml is committed → 0.62 prefer pnpm dlx for one-shot tools
pnpm install per the project convention.Cosine similarity ranks hits; time-decay reinforcement boosts recently-touched facts. No round-trip to a cloud service.
Memory you rent vs. memory you own.
Cloud memory SaaS solves the storage problem and creates a sovereignty problem. hellodb solves both.
| property | cloud memory SaaS | hellodb on your CF |
|---|---|---|
| where data lives | their servers | your R2 bucket |
| who holds the keys | they do | you do |
| cost | $20–200 / mo / seat | ~$0 (CF free tier) |
| audit trail | their dashboard | git-like branch log |
| lock-in | high | none — it's your bucket |
| embedding model | what they ship | Workers AI · OpenAI · local |
| offline | no | yes (fastembed-rs) |
| platforms | browser only | macOS · Linux · Windows |
| vendor outage | you stop | you keep working locally |
Sovereignty isn't a marketing word here. It's a deployment topology: every byte of your memory lives in storage you control, encrypted with a key in your OS keychain.
One command. Then forget it's there.
The local install is encrypted, branchable memory in 30 seconds. Cloudflare gateway is opt-in for cross-device sync and remote embeddings — same memory, more devices, no API token to babysit.
local · always works offline
~30 secondsOne script. Detects your platform, fetches the right release, generates an Ed25519 identity. Installs 5 skills, 2 sub-agents (memory-digest + memory-consolidate, Haiku-backed), a Stop hook, and 17+ MCP tools covering namespaces, schemas, branches, vector upsert/recall, embed, and Claude Code memory interop.
cloudflare · cross-device + semantic
~3 minutes · OAuth, no tokenwrangler stores the OAuth token in your OS keychain — hellodb never sees it. Rotate the gateway bearer anytime with make rotate-gateway-token.
Detects Rust, builds release, bundles the plugin, registers it with Claude Code, runs hellodb init, and offers (y/N) the Cloudflare setup. One prompt, one install.
Walks ~/.claude/projects/*/memory/*.md, writes one signed record per file, dedupes on re-run. Query back via hellodb_find_relevant_memories from any MCP client — hybrid ranking, decay-aware.