holetron-lab/fleet-memory
1
0
Fork 0
Code Releases Packages Activity Actions
fleet-memory/hindsight-integrations/nemoclaw
History
Derek Bouius 3b9d2db091
security: bump vite across integrations (high CVE fix) (#913) 
* security: bump vite across integrations to patched versions

Fixes Dependabot alerts for vite transitive dev dependency:
- GHSA-v2wj-q39q-566r (high): server.fs.deny bypass with queries
- GHSA-p9ff-h696-f583 (high): related vite server vulnerability

Adds a `vite` entry to the npm `overrides` in each integration's
package.json to force the patched version (>=8.0.5). To make this
possible in ai-sdk, chat, and openclaw — which pinned vitest ^4.0.18
whose vite peer is `^6.0.0 || ^7.0.0` — the minor-compatible bump
vitest ^4.0.18 -> ^4.1.2 is also included. vitest 4.1.x supports
vite 8.x (peer: ^6 || ^7 || ^8), so all six integrations converge on
vite 8.x consistently.

paperclip had no overrides block; one was added.

Verified locally: `npm ci && npx vitest run` passes in all six
integrations (ai-sdk 23, chat 28, openclaw 66, opencode 89, paperclip 27,
nemoclaw 36 tests).

* chore: regenerate hindsight-docs skill

Picks up FAQ and best-practice sections added in #905 that were not
regenerated at merge time, so that `verify-generated-files` passes
for this branch.
2026-04-08 09:11:21 +02:00
..
src feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630) 2026-03-20 15:16:55 +01:00
NEMOCLAW.md feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630) 2026-03-20 15:16:55 +01:00
package-lock.json security: bump vite across integrations (high CVE fix) (#913) 2026-04-08 09:11:21 +02:00
package.json security: bump vite across integrations (high CVE fix) (#913) 2026-04-08 09:11:21 +02:00
README.md feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630) 2026-03-20 15:16:55 +01:00
tsconfig.json feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630) 2026-03-20 15:16:55 +01:00
vitest.config.ts feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630) 2026-03-20 15:16:55 +01:00

README.md

hindsight-nemoclaw

One-command setup for Hindsight persistent memory on NemoClaw sandboxes.

NemoClaw runs OpenClaw inside an OpenShell sandbox with strict network egress policies. This package automates the full setup: installing the hindsight-openclaw plugin, configuring external API mode, merging the Hindsight egress rule into your sandbox policy, and restarting the gateway.

Quick Start

npx @vectorize-io/hindsight-nemoclaw setup \
  --sandbox my-assistant \
  --api-url https://api.hindsight.vectorize.io \
  --api-token <your-api-key> \
  --bank-prefix my-sandbox

Get an API key at Hindsight Cloud.

Documentation

Full setup guide, pitfalls, and troubleshooting:

NemoClaw Integration Documentation

Or see NEMOCLAW.md in this directory for a step-by-step walkthrough.

CLI Reference

hindsight-nemoclaw setup [options]

Options:
  --sandbox <name>       NemoClaw sandbox name (required)
  --api-url <url>        Hindsight API URL (required)
  --api-token <token>    Hindsight API token (required)
  --bank-prefix <prefix> Memory bank prefix (default: "nemoclaw")
  --skip-policy          Skip sandbox network policy update
  --skip-plugin-install  Skip openclaw plugin installation
  --dry-run              Preview changes without applying
  --help                 Show help

What It Does

  1. Preflight — verifies openshell and openclaw are installed
  2. Install plugin — runs openclaw plugins install @vectorize-io/hindsight-openclaw
  3. Configure plugin — writes external API mode config to ~/.openclaw/openclaw.json
  4. Apply policy — reads current sandbox policy, merges Hindsight egress rule, re-applies via openshell policy set
  5. Restart gateway — runs openclaw gateway restart

Links

License

MIT