History

Nicolò Boschi b6a4f17cbe fix: resolve all Dependabot security alerts (#702 ) - requests: bump minimum to >=2.33.0 (CVE temp file reuse) - streamlit: bump minimum to >=1.54.0 (SSRF/NTLM exposure) - picomatch: add npm override for >=2.3.2/<3 \|\| >=4.0.4 (ReDoS + method injection) - flatted: tighten override to >=3.4.2 (prototype pollution) - yaml: add npm override for >=1.10.3 (stack overflow) - rustls-webpki: cargo update to 0.103.10 (CRL distribution point) - Also fix pre-existing ty lint error in metrics.py (type: ignore for Windows resource import) - Pygments: no patch available (<=2.19.2 vulnerable, no fix released)		2026-03-26 13:15:36 +01:00
..
src	feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630 )	2026-03-20 15:16:55 +01:00
NEMOCLAW.md	feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630 )	2026-03-20 15:16:55 +01:00
package-lock.json	fix: resolve all Dependabot security alerts (#702 )	2026-03-26 13:15:36 +01:00
package.json	fix: resolve all Dependabot security alerts (#702 )	2026-03-26 13:15:36 +01:00
README.md	feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630 )	2026-03-20 15:16:55 +01:00
tsconfig.json	feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630 )	2026-03-20 15:16:55 +01:00
vitest.config.ts	feat(nemoclaw): add hindsight-nemoclaw setup CLI package (#630 )	2026-03-20 15:16:55 +01:00

README.md

hindsight-nemoclaw

One-command setup for Hindsight persistent memory on NemoClaw sandboxes.

NemoClaw runs OpenClaw inside an OpenShell sandbox with strict network egress policies. This package automates the full setup: installing the hindsight-openclaw plugin, configuring external API mode, merging the Hindsight egress rule into your sandbox policy, and restarting the gateway.

Quick Start

npx @vectorize-io/hindsight-nemoclaw setup \
  --sandbox my-assistant \
  --api-url https://api.hindsight.vectorize.io \
  --api-token <your-api-key> \
  --bank-prefix my-sandbox

Get an API key at Hindsight Cloud.

Documentation

Full setup guide, pitfalls, and troubleshooting:

NemoClaw Integration Documentation

Or see NEMOCLAW.md in this directory for a step-by-step walkthrough.

CLI Reference

hindsight-nemoclaw setup [options]

Options:
  --sandbox <name>       NemoClaw sandbox name (required)
  --api-url <url>        Hindsight API URL (required)
  --api-token <token>    Hindsight API token (required)
  --bank-prefix <prefix> Memory bank prefix (default: "nemoclaw")
  --skip-policy          Skip sandbox network policy update
  --skip-plugin-install  Skip openclaw plugin installation
  --dry-run              Preview changes without applying
  --help                 Show help

What It Does

Preflight — verifies openshell and openclaw are installed
Install plugin — runs openclaw plugins install @vectorize-io/hindsight-openclaw
Configure plugin — writes external API mode config to ~/.openclaw/openclaw.json
Apply policy — reads current sandbox policy, merges Hindsight egress rule, re-applies via openshell policy set
Restart gateway — runs openclaw gateway restart

License

MIT