3b9d2db091
* security: bump vite across integrations to patched versions Fixes Dependabot alerts for vite transitive dev dependency: - GHSA-v2wj-q39q-566r (high): server.fs.deny bypass with queries - GHSA-p9ff-h696-f583 (high): related vite server vulnerability Adds a `vite` entry to the npm `overrides` in each integration's package.json to force the patched version (>=8.0.5). To make this possible in ai-sdk, chat, and openclaw — which pinned vitest ^4.0.18 whose vite peer is `^6.0.0 || ^7.0.0` — the minor-compatible bump vitest ^4.0.18 -> ^4.1.2 is also included. vitest 4.1.x supports vite 8.x (peer: ^6 || ^7 || ^8), so all six integrations converge on vite 8.x consistently. paperclip had no overrides block; one was added. Verified locally: `npm ci && npx vitest run` passes in all six integrations (ai-sdk 23, chat 28, openclaw 66, opencode 89, paperclip 27, nemoclaw 36 tests). * chore: regenerate hindsight-docs skill Picks up FAQ and best-practice sections added in #905 that were not regenerated at merge time, so that `verify-generated-files` passes for this branch.
55 lines
1.4 KiB
JSON
55 lines
1.4 KiB
JSON
{
|
|
"name": "@vectorize-io/hindsight-nemoclaw",
|
|
"version": "0.1.1",
|
|
"description": "Setup CLI for hindsight-openclaw on NemoClaw sandboxes — installs the plugin, configures external API mode, and applies the OpenShell network policy",
|
|
"type": "module",
|
|
"main": "dist/cli.js",
|
|
"bin": {
|
|
"hindsight-nemoclaw": "dist/cli.js"
|
|
},
|
|
"keywords": [
|
|
"nemoclaw",
|
|
"openclaw",
|
|
"memory",
|
|
"ai",
|
|
"agent",
|
|
"hindsight",
|
|
"openshell",
|
|
"nvidia"
|
|
],
|
|
"author": "Vectorize <support@vectorize.io>",
|
|
"license": "MIT",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/vectorize-io/hindsight.git",
|
|
"directory": "hindsight-integrations/nemoclaw"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"build": "tsc && node -e \"const f='dist/cli.js',s=require('fs');s.writeFileSync(f,'#!/usr/bin/env node\\n'+s.readFileSync(f,'utf8'));s.chmodSync(f,0o755)\"",
|
|
"dev": "tsc --watch",
|
|
"clean": "rm -rf dist",
|
|
"test": "vitest run src",
|
|
"test:watch": "vitest src",
|
|
"prepublishOnly": "npm run clean && npm run build"
|
|
},
|
|
"dependencies": {
|
|
"js-yaml": "^4.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/js-yaml": "^4.0.9",
|
|
"@types/node": "^20.0.0",
|
|
"typescript": "^5.3.0",
|
|
"vitest": "^4.0.18"
|
|
},
|
|
"engines": {
|
|
"node": ">=22"
|
|
},
|
|
"overrides": {
|
|
"picomatch": ">=2.3.2 <3.0.0 || >=4.0.4",
|
|
"vite": ">=8.0.5"
|
|
}
|
|
}
|