持久技能与显式遗忘

完整保存选定的流程文档或程序，存储本身不执行代码。

流程文档与可执行源码复用现有 ToolArtifact / BaseToolLibrary。 SqliteToolLibrary(path, namespace=...) 是由调用者拥有的本地 SQLite 实现， 必须 close 或使用 context manager。数据库路径由调用者显式绑定；namespace 隔离记录，但不能隔离有权读取同一文件的操作系统用户。

add_or_update(..., expected_version=...) 原子发布不可变新版本并拒绝过期写入。 catalog 只返回描述，get / get_version 加载选定版本的完整正文。 选择、验证、信任、代码执行与保留策略仍属于 Agent 作者。技能库不执行程序， 也不绕过权限。来源、检查器摘要、ArtifactRef 声明使用 JSON metadata， 不保存客户端、凭据或 callable。无效数据被拒绝，不会被猜测修复。

Hermes 与 Voyager 用同一个可替换存储承载不同内容。不能靠偷偷截断正文解决 预算不足：请求必须能容纳选定技能，否则明确失败。原有内存实现仍可使用， 没有增加新的根导出。

MemdirMemory.delete(record_id) 删除本地哈希记录及索引项，不存在时返回 false， 拒绝畸形或软链接资源。它不等于安全擦除、删除历史轨迹、多文件事务或并发写协议。 重新打开已有 memory root 不会隐式初始化。

Hermes 课程 · Voyager 课程

下方源码链接绑定不可变实现提交。请安装相应仓库源码构建的 wheel；这不代表单独发布了 PyPI 版本。

​

ToolArtifact

from qitos.kit.tool.library.base import ToolArtifact

Source @ 19f6258

用法与可执行示例

用法片段：接续上方完整教程中的对象，不是独立程序。

artifact = ToolArtifact(name="audit", description="Check evidence", source="Read, calculate, verify.")

Field	Type	Default
name	str	required
description	str	required
source	str	required
summary	Optional[str]	None
tags	List[str]	field(default_factory=list)
version	int	1
created_at	str	field(default_factory=lambda: datetime.now(timezone.utc).isoformat())
updated_at	str	field(default_factory=lambda: datetime.now(timezone.utc).isoformat())
metadata	Dict[str, Any]	field(default_factory=dict)
active	bool	True

​

BaseToolLibrary

from qitos.kit.tool.library.base import BaseToolLibrary

Source @ 19f6258

用法与可执行示例

用法片段：接续上方完整教程中的对象，不是独立程序。

# Implement this existing contract to replace the local SQLite mechanism.

​

BaseToolLibrary.get

get(name: str) -> Optional[ToolArtifact]

Parameter	Type	Default
name	str	required

Source

​

BaseToolLibrary.search

search(query: str, top_k: int=5) -> List[ToolArtifact]

Parameter	Type	Default
query	str	required
top_k	int	5

Source

​

BaseToolLibrary.add_or_update

add_or_update(artifact: ToolArtifact) -> ToolArtifact

Parameter	Type	Default
artifact	ToolArtifact	required

Source

​

SqliteToolLibrary

from qitos.kit.tool.library.sqlite_store import SqliteToolLibrary

Source @ 19f6258

用法与可执行示例

用法片段：接续上方完整教程中的对象，不是独立程序。

with SqliteToolLibrary(private_path, namespace="research") as library:
    stored = library.add_or_update(artifact)
    print(library.catalog("audit"))
    assert library.get_version(stored.name, stored.version).source == artifact.source

Atomic revisions scoped to an explicitly selected namespace.

A catalog exposes descriptions, never executable source. ``get`` loads the
complete selected artifact; no implicit truncation or execution takes place.
The caller owns the connection and must close it (or use a context manager).
SQLite is a trusted local resource, not an authorization boundary against a
user who can directly open the same database file.

SqliteToolLibrary(path: str | Path, *, namespace: str) -> Any (see behavior contract)

Parameter	Type	Default
path	str | Path	required
namespace	str	required

​

SqliteToolLibrary.add_or_update

add_or_update(artifact: ToolArtifact, *, expected_version: Optional[int]=None) -> ToolArtifact

Parameter	Type	Default
artifact	ToolArtifact	required
expected_version	Optional[int]	None

Source

​

SqliteToolLibrary.get

get(name: str) -> Optional[ToolArtifact]

Parameter	Type	Default
name	str	required

Source

​

SqliteToolLibrary.get_version

get_version(name: str, version: int) -> Optional[ToolArtifact]

Parameter	Type	Default
name	str	required
version	int	required

Source

​

SqliteToolLibrary.catalog

catalog(query: str='', *, limit: int=20) -> list[dict[str, Any]]

Parameter	Type	Default
query	str	''
limit	int	20

Return selectable identities/descriptions without source or metadata.

This is a projection, not a privacy sanitizer or bounded-I/O claim.

Source

​

SqliteToolLibrary.search

search(query: str, top_k: int=5) -> list[ToolArtifact]

Parameter	Type	Default
query	str	required
top_k	int	5

Source

​

SqliteToolLibrary.deprecate

deprecate(name: str) -> bool

Parameter	Type	Default
name	str	required

Source

​

SqliteToolLibrary.close

close() -> None

Source

​

ToolLibraryError

from qitos.kit.tool.library.sqlite_store import ToolLibraryError

Source @ 19f6258

用法与可执行示例

用法片段：接续上方完整教程中的对象，不是独立程序。

# Catch ToolLibraryError and inspect error.code; do not infer success from absence of output.

Non-echoing library failure, identified by a stable code.

ToolLibraryError(code: str) -> Any (see behavior contract)

Parameter	Type	Default
code	str	required

​

MemdirMemory

from qitos.kit.memory.memdir_memory import MemdirMemory

Source @ 19f6258

用法与可执行示例

用法片段：接续上方完整教程中的对象，不是独立程序。

memory = MemdirMemory(private_memory_path, create=True)
# Subsequent processes reopen with create=False (the default).
removed = memory.delete(record_id)

Persist text records with stable identity and fresh disk retrieval.

Restore is the default and fails if a bound root is missing. Pass
``create=True`` only to explicitly initialize a namespace. ``reset`` and
``evict`` affect the append-time cache only; ``delete`` removes a local fact.
Arbitrary Python/JSON content and metadata are not a durable round-trip API.

MemdirMemory(memory_dir: str='.qitos/memory', *, global_memory_dir: str | None=None, create: bool=False, max_index_entries: int=200, max_index_chars: int=25000) -> Any (see behavior contract)

Parameter	Type	Default
memory_dir	str	'.qitos/memory'
global_memory_dir	str | None	None
create	bool	False
max_index_entries	int	200
max_index_chars	int	25000

​

MemdirMemory.append

append(record: MemoryRecord) -> None

Parameter	Type	Default
record	MemoryRecord	required

Source

​

MemdirMemory.retrieve

retrieve(query: Optional[Dict[str, Any]]=None, state: Any=None, observation: Any=None) -> List[MemoryRecord]

Parameter	Type	Default
query	Optional[Dict[str, Any]]	None
state	Any	None
observation	Any	None

Source

​

MemdirMemory.delete

delete(record_id: str) -> bool

Parameter	Type	Default
record_id	str	required

Forget one logical record in this namespace, never global memory.

Idempotent for an absent identity. This is local-file deletion, not
secure erasure or a concurrent multi-file transaction. Callers serialize
writes to one Memdir namespace; use a transactional backend otherwise.

Source