fleet-memory/hindsight-integrations/ai-sdk/package.json
Derek Bouius 3b9d2db091
security: bump vite across integrations (high CVE fix) (#913)
* security: bump vite across integrations to patched versions

Fixes Dependabot alerts for vite transitive dev dependency:
- GHSA-v2wj-q39q-566r (high): server.fs.deny bypass with queries
- GHSA-p9ff-h696-f583 (high): related vite server vulnerability

Adds a `vite` entry to the npm `overrides` in each integration's
package.json to force the patched version (>=8.0.5). To make this
possible in ai-sdk, chat, and openclaw — which pinned vitest ^4.0.18
whose vite peer is `^6.0.0 || ^7.0.0` — the minor-compatible bump
vitest ^4.0.18 -> ^4.1.2 is also included. vitest 4.1.x supports
vite 8.x (peer: ^6 || ^7 || ^8), so all six integrations converge on
vite 8.x consistently.

paperclip had no overrides block; one was added.

Verified locally: `npm ci && npx vitest run` passes in all six
integrations (ai-sdk 23, chat 28, openclaw 66, opencode 89, paperclip 27,
nemoclaw 36 tests).

* chore: regenerate hindsight-docs skill

Picks up FAQ and best-practice sections added in #905 that were not
regenerated at merge time, so that `verify-generated-files` passes
for this branch.
2026-04-08 09:11:21 +02:00

65 lines
1.5 KiB
JSON

{
"name": "@vectorize-io/hindsight-ai-sdk",
"version": "0.4.19",
"description": "Hindsight memory integration for Vercel AI SDK - Give your AI agents persistent, human-like memory",
"main": "dist/index.js",
"types": "dist/index.d.ts",
"type": "module",
"exports": {
".": {
"types": "./dist/index.d.ts",
"import": "./dist/index.js"
}
},
"keywords": [
"ai",
"ai-sdk",
"vercel",
"memory",
"hindsight",
"agents",
"llm",
"long-term-memory"
],
"author": "Vectorize <support@vectorize.io>",
"license": "MIT",
"repository": {
"type": "git",
"url": "https://github.com/vectorize-io/hindsight.git",
"directory": "hindsight-integrations/ai-sdk"
},
"files": [
"dist",
"README.md"
],
"scripts": {
"build": "tsup",
"dev": "tsc --watch",
"clean": "rm -rf dist",
"test": "vitest run",
"test:watch": "vitest",
"test:deno": "deno test --no-check --allow-all --unstable-sloppy-imports src/tools/index.test.ts",
"prepublishOnly": "npm run clean && npm run build"
},
"peerDependencies": {
"ai": "^6.0.0",
"zod": "^3.0.0 || ^4.0.0"
},
"devDependencies": {
"@types/node": "^22.0.0",
"@vitest/ui": "^4.1.2",
"ai": "^6.0.2",
"tsup": "^8.5.1",
"typescript": "^5.7.0",
"vitest": "^4.1.2",
"zod": "^4.2.0"
},
"engines": {
"node": ">=22"
},
"overrides": {
"rollup": "^4.59.0",
"picomatch": ">=2.3.2 <3.0.0 || >=4.0.4",
"vite": ">=8.0.5"
}
}