mrkeyoor.com_
Tue 03 Nov 07:15 UTC
AI Toolsevaluationupdated 28 Sept 2026

byterover-cli review

ByteRover CLI gives coding agents a shared memory outside any one chat. It stores project knowledge in a version-controlled context tree, lets agents query or curate it, and can sync that tree across machines and teammates.

+2stars / 7d
Verdict

Our ByteRover run passed all 8,910 tests, but its install occupied 1,006 MB and GitHub now marks the repository archived. Use it only if the versioned context tree solves a repeated team problem and you can own the code and its 49 audit findings. For a new rollout that depends on upstream fixes, choose an active alternative.

We ran it

Lab card: what happened when we ran byterover-cliScreenshot of byterover-cli (docs.byterover.dev)
Install✓ · 63s1673 packages · 1006 MB
Build✓ · 47s
Tests✓ · 241s8910 passed · 0 failed of 8910 (mocha)
Known vulns490 critical · 18 high · 13 moderate · 18 low (npm audit)
Repo2038 files~315,399 lines of source · 13.4 MB · 4 CI workflows · tests dir

Answers from our run

Does byterover-cli build from source?

Dependencies installed in 63 seconds (1673 packages), and the build succeeded in 47 seconds. We cloned commit 1052ac1 into a clean Debian container with 3 CPUs and no project-specific setup.

Do byterover-cli's tests pass?

Yes. The project's own test command finished in 241 seconds and reported 8910 passed, 0 failed (mocha).

Does byterover-cli have known vulnerabilities in its dependencies?

npm audit flagged 49 known advisories in the dependency tree at the time of our run.

Who should not use byterover-cli?

Teams that require an actively writable upstream: GitHub marks the repository archived, and the last push was June 25, 2026.

What are the alternatives to byterover-cli?

Basic Memory, Mem0, claude-mem. Our ByteRover run passed all 8,910 tests, but its install occupied 1,006 MB and GitHub now marks the repository archived.

Setup3/5Build passes, but 1,673 packages and provider setup add weight
Docs5/5Commands, providers, sync, MCP, and runtime settings are documented
Community2/54,966 stars and recent issue activity, but the repo is archived
Maturity3/58,910 tests pass; archive status and 49 audit findings limit trust

Who it’s for

Developers who switch among Claude Code, Cursor, Codex, or other supported coding agents and keep repeating project context.
Teams that want proposed memory changes reviewed before those changes become shared knowledge.
Engineers who want local context storage with optional cloud sync and an MCP interface.
Users comfortable choosing and paying for a separate language-model provider.

Who it’s NOT for

Teams that require an actively writable upstream: GitHub marks the repository archived, and the last push was June 25, 2026.
Security policies that reject unresolved dependency findings: our npm audit found 49 known vulnerabilities, including 18 high-severity findings.
Hosted-service vendors planning to expose most of ByteRover as their own service: Elastic License 2.0 prohibits that use.
Workflows that cannot tolerate a wrong memory entry: open issues report example facts entering the context tree and failed curate operations being reported as successful.
Developers seeking a small utility: our install pulled 1,673 packages and occupied 1,006 MB.

Setup reality

Our sandbox install succeeded in 63 seconds, adding 1,673 packages and using 1,006 MB. The build passed in 47 seconds. Mocha then passed all 8,910 tests in 241 seconds, with 0 failures. Npm audit reported 49 known vulnerabilities: 18 high, 13 moderate, and 18 low.

Node.js 20 or newer is required for the npm route. Local use still needs a model provider or ByteRover's hosted model allowance, while team sync needs a ByteRover login and API key. Provider credentials, model choice, and cloud access are separate setup decisions.

The repository had 4 CI workflow files and a tests directory, but no Dockerfile. GitHub now marks it archived, so a clean build does not imply future fixes for dependency findings or open curation bugs.

ByteRover stores coding context in a version-controlled tree

ByteRover gives an AI coding agent somewhere to put knowledge that should survive the current chat. The agent can curate facts about a codebase, query them later, and organize them in a context tree with branches, commits, merges, push, and pull. The CLI also supplies a web interface, an interactive terminal, an MCP server, file operations, and code execution. Its practical promise is simple: stop explaining the same architecture and conventions whenever you change agents or start a fresh session.

That promise comes in a substantial package. The checkout at commit 1052ac1 contained 2,038 files and about 315,399 lines of source before installation. Our sandbox added 1,673 packages and ended at 1,006 MB on disk. This is closer to installing an agent platform than adding a memory helper. The breadth can make sense for a team using its review and sync workflow, but it is expensive if all you need is a searchable notes folder.

Local storage still requires a model and careful permissions

The npm path requires Node.js 20 or newer. ByteRover can keep its context tree locally, and the README says cloud features are optional. The agent still needs a language model. You can connect one of the documented providers, use an OpenAI-compatible endpoint, or use ByteRover's hosted allowance. Cloud sync, shared spaces, and multi-machine use add a ByteRover login and API key.

The permission boundary matters because the agent has 24 built-in tools according to the README, including file access and code execution. Review commands let you approve or reject proposed curation operations before accepting them. That is the right shape for shared knowledge, where a mistaken fact can mislead every later session. Teams should decide which repositories may be read, which commands may run, and who approves shared memory before connecting a production codebase.

What happened when we ran it

Our sandbox installed ByteRover in 63 seconds, built it in 47 seconds, and completed the test run in 241 seconds. Mocha reported 8,910 passed and 0 failed out of 8,910. Those results are unusually strong for a repository of this size and show that commit 1052ac1 could be installed and compiled in a fresh, unprivileged Debian container with 3 CPUs and 8 GB of RAM.

The dependency report is the counterweight. Npm audit found 49 known vulnerabilities: 18 high, 13 moderate, and 18 low. The checkout included 4 CI workflow files and a tests directory, but no Dockerfile. A passing test suite says the tested behavior worked in our environment. It does not clear those advisories or provide a maintained container boundary, so review the audit paths before placing credentials inside the daemon.

Curation bugs can poison later sessions

Open issue 647 describes brv curate writing facts copied from prompt examples, including a person's name and database choices that were absent from the source material. The report ties the behavior to Gemini Flash-Lite and stops short of assigning one cause. Issue 767 reports a different failure: an invalid category could prevent an operation while the task and CLI still announced overall success. Both strike at the feature ByteRover is supposed to make dependable.

Issue 765 reports that version 3.16.1 could hang during a second thinking step on one Debian setup using a local model. The README now documents request and task budgets, including a 120,000 ms request default and a 600,000 ms task default. Those controls can stop an endless wait, but they do not verify that saved knowledge is true. Treat curation as a reviewed change, keep the context tree under version control, and test retrieval against known project facts.

The archive flag changes the adoption case

GitHub marks the repository archived. The last push was June 25, 2026, while the latest release, v3.16.1, was published May 27. GitHub listed 23 combined issues and pull requests when fetched, with issue activity continuing into September. An archived repository is read-only unless its owner reopens it, so that later discussion should not be mistaken for current maintenance.

The license also deserves a deliberate read. ByteRover uses Elastic License 2.0, which permits use and modification but forbids offering a substantial set of its features as a hosted or managed service. That makes it source-available rather than a permissively licensed building block. Internal use may fit. A vendor planning to repackage the 1,006 MB installation as a service needs a different foundation or direct licensing advice.

Choose it when reviewed shared memory is worth ownership

ByteRover's distinctive feature is the context tree, especially its review and version-control workflow. Basic Memory is a better match for readable local Markdown exposed through MCP. Mem0 fits developers adding memory to their own applications. Claude-mem favors automatic capture and retrieval across coding-agent sessions. None is a drop-in substitute for every ByteRover command, so pick according to who edits memory and how mistakes get reversed.

The clean 8,910-test result makes ByteRover credible software at the measured commit. The archived upstream and 49 audit findings make it a poor default for a new team that expects routine fixes. Adopt it when shared, reviewable context is important enough to justify maintaining a fork. Otherwise, start with an active project whose smaller contract matches the memory job you have.

Alternatives

ProjectWhat it isPick it when
Basic MemoryA local-first knowledge layer that exposes Markdown memories to AI tools through MCP.pick this instead when readable local files and MCP access matter more than ByteRover's context-tree version control.
Mem0 gh↗A memory framework for adding persistent user and agent context to applications.pick this instead when you are building memory into your own product rather than managing a coding-project knowledge tree.
claude-mem gh↗A session recorder that compresses coding-agent activity and retrieves it in later sessions.pick this instead when automatic session capture is more useful than manually curated, versioned knowledge.

Sources

  1. ByteRover CLI README
  2. ByteRover CLI repository
  3. ByteRover CLI 3.16.1 release
  4. Elastic License 2.0 in ByteRover
  5. ByteRover issue 647: prompt example facts in context tree
  6. ByteRover issue 765: curate hang report
  7. ByteRover issue 767: curate operation reported success

More ai tools reviews

kornia · skills · anarlog · pr-agent · agent-sprite-forge · KiroCrew · the whole board →