* test: isolate embedding configuration between unit fixtures Reset model-probe gateway state and pin chunk-sanitization fixtures to the shared legacy embedding dimensions. Preserve the original persistence and hash assertions. * feat: add existing-agent memory and unified hosted access (v0.49.0.0) Add isolated in-agent setup and repair, private PGLite backup and relocated restore, shared hosted grants and live delegation enforcement, secure credential handoff and recovery, and capability discovery and verification. Make local and hosted onboarding prominent in dedicated Grok Bot and Muse guides. Preserve explicit native-harness acceptance gates, update generated references and release metadata, and keep withdrawn facts out of active memory after synchronization. Co-Authored-By: OpenAI Codex <noreply@openai.com> * docs: sync harness documentation for v0.49.0.0 * fix: update security dependencies and confine restored configuration Refresh patched dependency versions, traverse only owned configuration properties during restore, and trust the CI checkout before calculating the Semgrep baseline. Add a regression that preserves inherited path objects. --------- Co-authored-by: OpenAI Codex <noreply@openai.com>
8.2 KiB
GBrain for Muse
Install a small local GBrain CLI in Muse's durable user-files area, then teach Muse to use it for explicit memory and recall. Start keyless. If you already have a hosted brain, use the same CLI workflow as a thin client instead.
This guide covers Meta's Muse personal agent.
Muse Code is a different product
Muse Code and third-party projects with similar names do not establish
capabilities for the personal agent. Use the muse adapter for this guide;
muse-code remains a separate identity in the harness registry.
What the public design establishes
Meta describes a dedicated Linux VM, a Debian runtime cell, CLI-based tools, custom skills, and custom connectors. Built-in connector credentials are kept outside that cell; Sentinel controls connector actions and network egress. These are a good basis for a small CLI integration, but the public document does not specify a durable custom-tool directory, a native MCP registration interface, or an installation API for GBrain skills. Meta's Muse technical design (published September 8, 2026; checked September 9, 2026).
Establish the persistent path in the actual Muse environment before installing.
Do not copy Grok Bot's /workspace convention or place memory in an arbitrary
runtime home. A Linux shell existing today does not prove its files will survive
replacement of the runtime cell.
Choose your path
| Your situation | Use |
|---|---|
| New brain and a confirmed durable user-files directory | Local setup below, adapter muse |
| Existing hosted brain | Hosted harness access, adapter muse, thin CLI |
| No confirmed persistent custom-files location | Resolve that platform capability before creating durable local memory |
| A native MCP option appears in your account | Treat it as a new capability to verify; this guide does not claim Muse supports native MCP |
Paste this into Muse
Set up GBrain as my durable memory. Read:
https://raw.githubusercontent.com/garrytan/gbrain/master/docs/guides/muse.md
and its linked in-agent setup guide.
First identify the documented or platform-confirmed durable user-files area
available to your runtime. Inspect it and choose an absolute gbrain root there.
Tell me the persistence evidence. If you cannot establish persistence, report
that blocker instead of treating a temporary runtime directory as durable.
Use the shipped setup helper with --harness muse and that absolute --root.
Reuse a matching installation and preserve existing state. Use its generated
absolute bin/gbrain launcher for every memory command. Keep your current identity.
Start with keyless facts and recall. Show me init's search-mode matrix and
confirm my choice; keep paid maintenance and bulk capture opt-in. Attach the
generated memory instructions using the native custom-skill mechanism available
in this account, and report its exact location or name.
Save and recall a harmless randomized test fact, then help me verify a fresh
conversation actually invokes GBrain. Use Muse's normal permission and secure
credential flows for any blocked download or later hosted connection. Report
each unverified platform step separately from successful local CLI checks.
Once the durable root is established, follow the
shared setup commands, replacing
the example root and selecting --harness muse. The helper works without root
and does not create a system service or agent identity. Initial fact storage and
recall do not require extracting credentials from a Muse connector.
Attach instructions and test a fresh conversation
Read <ROOT>/instructions/gbrain-skill.md and save it through Muse's available
custom-skill or standing-instruction mechanism. Keep the exact absolute
<ROOT>/bin/gbrain path in that skill. Public documentation does not establish
an automatic AGENTS.md loader or hook API, so merely writing a repository file
is not evidence that Muse will use it.
Follow the randomized round trip. In a fresh conversation, ask for the phrase without repeating it and inspect the command result. Test a correction and deletion too. Record the actual native skill location/name and the date of the test; the installer deliberately leaves native integration marked unverified.
Three useful things to try
- A durable preference: “Remember that I want a short recommendation followed by the evidence.” Ask a new conversation to recall that preference before preparing a recommendation.
- A project handoff: “Recall the current project-example decision and open questions. After we decide, remember the new decision with today's date.”
- Existing connected services: “Use your connected calendar and email to prepare this meeting. Save the selected commitments I ask you to retain, with source links.” Let Muse use its existing connectors and permissions; store the chosen facts in GBrain without duplicating service credentials.
Do not request raw connector tokens or change Sentinel policy to make GBrain work. For a hosted brain, the allowed destination and secure credential delivery are part of the hosted setup; finish them through the actual product's supported flow. A denied request is a reported setup boundary, not a reason to try another route around it.
Local installation maintenance, backup, and recovery
These steps apply when GBrain runs inside Muse. A hosted connection instead
uses <ROOT>/GBRAIN-INSTRUCTIONS.md and the
hosted runtime repair procedure.
After manual memory succeeds, use <ROOT>/instructions/maintenance.md as the
basis of an optional native schedule, if that feature is available in your
account. Maintain one routine for the installation and test it. Do not install
a speculative daemon or assume a shell cron is the product's native scheduler.
Create a full private backup
and choose a protected off-VM copy explicitly. The raw database can contain
sensitive memories and authentication state. Its 0600 mode does not encrypt
it or protect against loss of the whole VM.
After a runtime replacement, use bash <ROOT>/bin/gbrain-setup to repair the
recorded package without resetting memory. If data is lost, restore into an
absent root, rerun the helper with --harness muse, reconnect excluded state,
and test before reattaching the native skill. The
restore procedure preserves the
original brain and starts no automation.
To stop, pause the native routine and disable the skill. Keep the root and a protected backup until you deliberately choose to delete the memory. Revoke hosted grants separately if you connected to an existing brain.
Acceptance checklist and limits
The local installer, CLI, and recovery path have hermetic repository tests. An actual Muse account has not been used to verify this integration. The remaining acceptance checks are concrete:
- Establish and record the durable root and its behavior across runtime replacement.
- Complete allowed package downloads and run the generated launcher.
- Save, recall, correct, and forget the randomized fact through separate commands.
- Make a fresh conversation select the native skill and invoke that launcher.
- Restore a private backup into another root and verify the saved fact.
- If used, test the account's native schedule and its failure reporting.
- For a hosted brain, verify the real egress and secure credential flow; no native MCP or privileged credential-service integration is assumed.
If installation is blocked, preserve the exact platform denial. If memory works only in the current conversation, inspect the native skill attachment. If the runtime vanishes, run repair against the same durable root. If that root was not preserved, restore a backup rather than initializing a replacement brain at the old path. More errors and fixes are in the shared troubleshooting table.