@deeplake/hivemind 0.6.48 → 0.7.4

package/openclaw/dist/index.js

@@ -1,164 +1,24 @@
-// openclaw/src/setup-config.ts
-import { existsSync, readFileSync, writeFileSync, renameSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-var HIVEMIND_TOOL_NAMES = ["hivemind_search", "hivemind_read", "hivemind_index"];
-function getOpenclawConfigPath() {
-  return join(homedir(), ".openclaw", "openclaw.json");
-}
-function isAllowlistCoveringHivemind(alsoAllow) {
-  if (!Array.isArray(alsoAllow)) return false;
-  for (const entry of alsoAllow) {
-    if (typeof entry !== "string") continue;
-    const normalized = entry.trim().toLowerCase();
-    if (normalized === "hivemind") return true;
-    if (normalized === "group:plugins") return true;
-    if (HIVEMIND_TOOL_NAMES.includes(normalized)) return true;
-  }
-  return false;
-}
-function ensureHivemindAllowlisted() {
-  const configPath = getOpenclawConfigPath();
-  if (!existsSync(configPath)) {
-    return { status: "error", configPath, error: "openclaw config file not found" };
-  }
-  let parsed;
-  try {
-    const raw = readFileSync(configPath, "utf-8");
-    parsed = JSON.parse(raw);
-  } catch (e) {
-    return { status: "error", configPath, error: `could not read/parse config: ${e instanceof Error ? e.message : String(e)}` };
-  }
-  const tools = parsed.tools ?? {};
-  const alsoAllow = Array.isArray(tools.alsoAllow) ? tools.alsoAllow : [];
-  if (isAllowlistCoveringHivemind(alsoAllow)) {
-    return { status: "already-set", configPath };
-  }
-  const updated = {
-    ...parsed,
-    tools: {
-      ...tools,
-      alsoAllow: [...alsoAllow, "hivemind"]
-    }
-  };
-  const backupPath = `${configPath}.bak-hivemind-${Date.now()}`;
-  const tmpPath = `${configPath}.tmp-hivemind-${process.pid}`;
-  try {
-    writeFileSync(backupPath, readFileSync(configPath, "utf-8"));
-    writeFileSync(tmpPath, JSON.stringify(updated, null, 2) + "\n");
-    renameSync(tmpPath, configPath);
-  } catch (e) {
-    return { status: "error", configPath, error: `could not write config: ${e instanceof Error ? e.message : String(e)}` };
-  }
-  return { status: "added", configPath, backupPath };
-}
-function toggleAutoUpdateConfig(setTo) {
-  const configPath = getOpenclawConfigPath();
-  if (!existsSync(configPath)) {
-    return { status: "error", configPath, error: "openclaw config file not found" };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(configPath, "utf-8"));
-  } catch (e) {
-    return { status: "error", configPath, error: `could not read/parse config: ${e instanceof Error ? e.message : String(e)}` };
-  }
-  const plugins = parsed.plugins ?? {};
-  const entries = plugins.entries ?? {};
-  const hivemindEntry = entries.hivemind ?? {};
-  const pluginConfig = hivemindEntry.config ?? {};
-  const current = pluginConfig.autoUpdate !== false;
-  const newValue = typeof setTo === "boolean" ? setTo : !current;
-  const updated = {
-    ...parsed,
-    plugins: {
-      ...plugins,
-      entries: {
-        ...entries,
-        hivemind: {
-          ...hivemindEntry,
-          config: { ...pluginConfig, autoUpdate: newValue }
-        }
-      }
-    }
-  };
-  const backupPath = `${configPath}.bak-hivemind-${Date.now()}`;
-  const tmpPath = `${configPath}.tmp-hivemind-${process.pid}`;
-  try {
-    writeFileSync(backupPath, readFileSync(configPath, "utf-8"));
-    writeFileSync(tmpPath, JSON.stringify(updated, null, 2) + "\n");
-    renameSync(tmpPath, configPath);
-  } catch (e) {
-    return { status: "error", configPath, error: `could not write config: ${e instanceof Error ? e.message : String(e)}` };
-  }
-  return { status: "updated", configPath, newValue };
-}
-function detectAllowlistMissing() {
-  const configPath = getOpenclawConfigPath();
-  if (!existsSync(configPath)) return false;
-  try {
-    const parsed = JSON.parse(readFileSync(configPath, "utf-8"));
-    const tools = parsed.tools ?? {};
-    return !isAllowlistCoveringHivemind(tools.alsoAllow);
-  } catch {
-    return false;
-  }
-}
+import {
+  loadCredentials,
+  saveCredentials
+} from "./chunks/chunk-SRCBBT4H.js";
 
-// src/config.ts
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
-import { join as join2 } from "node:path";
-import { homedir as homedir2, userInfo } from "node:os";
-function loadConfig() {
-  const home = homedir2();
-  const credPath = join2(home, ".deeplake", "credentials.json");
-  let creds = null;
-  if (existsSync2(credPath)) {
-    try {
-      creds = JSON.parse(readFileSync2(credPath, "utf-8"));
-    } catch {
-      return null;
-    }
-  }
-  const token = creds?.token;
-  const orgId = creds?.orgId;
-  if (!token || !orgId) return null;
-  return {
-    token,
-    orgId,
-    orgName: creds?.orgName ?? orgId,
-    userName: creds?.userName || userInfo().username || "unknown",
-    workspaceId: creds?.workspaceId ?? "default",
-    apiUrl: creds?.apiUrl ?? "https://api.deeplake.ai",
-    tableName: "memory",
-    sessionsTableName: "sessions",
-    memoryPath: join2(home, ".deeplake", "memory")
-  };
+// src/utils/client-header.ts
+var DEEPLAKE_CLIENT_HEADER = "X-Deeplake-Client";
+function deeplakeClientValue() {
+  return "hivemind";
+}
+function deeplakeClientHeader() {
+  return { [DEEPLAKE_CLIENT_HEADER]: deeplakeClientValue() };
 }
 
 // src/commands/auth.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync3, mkdirSync, unlinkSync } from "node:fs";
-import { join as join3 } from "node:path";
-import { homedir as homedir3 } from "node:os";
-var CONFIG_DIR = join3(homedir3(), ".deeplake");
-var CREDS_PATH = join3(CONFIG_DIR, "credentials.json");
 var DEFAULT_API_URL = "https://api.deeplake.ai";
-function loadCredentials() {
-  if (!existsSync3(CREDS_PATH)) return null;
-  try {
-    return JSON.parse(readFileSync3(CREDS_PATH, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function saveCredentials(creds) {
-  if (!existsSync3(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
-  writeFileSync2(CREDS_PATH, JSON.stringify({ ...creds, savedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2), { mode: 384 });
-}
 async function apiGet(path, token, apiUrl, orgId) {
   const headers = {
     Authorization: `Bearer ${token}`,
-    "Content-Type": "application/json"
+    "Content-Type": "application/json",
+    ...deeplakeClientHeader()
   };
   if (orgId) headers["X-Activeloop-Org-Id"] = orgId;
   const resp = await fetch(`${apiUrl}${path}`, { headers });
@@ -168,7 +28,7 @@ async function apiGet(path, token, apiUrl, orgId) {
 async function requestDeviceCode(apiUrl = DEFAULT_API_URL) {
   const resp = await fetch(`${apiUrl}/auth/device/code`, {
     method: "POST",
-    headers: { "Content-Type": "application/json" }
+    headers: { "Content-Type": "application/json", ...deeplakeClientHeader() }
   });
   if (!resp.ok) throw new Error(`Device flow unavailable: HTTP ${resp.status}`);
   return resp.json();
@@ -176,7 +36,7 @@ async function requestDeviceCode(apiUrl = DEFAULT_API_URL) {
 async function pollForToken(deviceCode, apiUrl = DEFAULT_API_URL) {
   const resp = await fetch(`${apiUrl}/auth/device/token`, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: { "Content-Type": "application/json", ...deeplakeClientHeader() },
     body: JSON.stringify({ device_code: deviceCode })
   });
   if (resp.ok) return resp.json();
@@ -210,16 +70,13 @@ async function switchWorkspace(workspaceId) {
 
 // src/deeplake-api.ts
 import { randomUUID } from "node:crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join5 } from "node:path";
-import { tmpdir } from "node:os";
 
 // src/utils/debug.ts
 import { appendFileSync } from "node:fs";
-import { join as join4 } from "node:path";
-import { homedir as homedir4 } from "node:os";
+import { join } from "node:path";
+import { homedir } from "node:os";
 var DEBUG = false;
-var LOG = join4(homedir4(), ".deeplake", "hook-debug.log");
+var LOG = join(homedir(), ".deeplake", "hook-debug.log");
 function log(tag, msg) {
   if (!DEBUG) return;
   appendFileSync(LOG, `${(/* @__PURE__ */ new Date()).toISOString()} [${tag}] ${msg}
@@ -234,7 +91,16 @@ function sqlLike(value) {
   return sqlStr(value).replace(/%/g, "\\%").replace(/_/g, "\\_");
 }
 
+// src/embeddings/columns.ts
+var SUMMARY_EMBEDDING_COL = "summary_embedding";
+var MESSAGE_EMBEDDING_COL = "message_embedding";
+
 // src/deeplake-api.ts
+var indexMarkerStorePromise = null;
+function getIndexMarkerStore() {
+  if (!indexMarkerStorePromise) indexMarkerStorePromise = import("./chunks/index-marker-store-PGT5CW6T.js");
+  return indexMarkerStorePromise;
+}
 var log2 = (msg) => log("sdk", msg);
 function summarizeSql(sql, maxLen = 220) {
   const compact = sql.replace(/\s+/g, " ").trim();
@@ -252,7 +118,6 @@ var MAX_RETRIES = 3;
 var BASE_DELAY_MS = 500;
 var MAX_CONCURRENCY = 5;
 var QUERY_TIMEOUT_MS = Number(1e4);
-var INDEX_MARKER_TTL_MS = Number(6 * 60 * 6e4);
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -272,9 +137,6 @@ function isTransientHtml403(text) {
   const body = text.toLowerCase();
   return body.includes("<html") || body.includes("403 forbidden") || body.includes("cloudflare") || body.includes("nginx");
 }
-function getIndexMarkerDir() {
-  return join5(tmpdir(), "hivemind-deeplake-indexes");
-}
 var Semaphore = class {
   constructor(max) {
     this.max = max;
@@ -343,7 +205,8 @@ var DeeplakeApi = class {
           headers: {
             Authorization: `Bearer ${this.token}`,
             "Content-Type": "application/json",
-            "X-Activeloop-Org-Id": this.orgId
+            "X-Activeloop-Org-Id": this.orgId,
+            ...deeplakeClientHeader()
           },
           signal,
           body: JSON.stringify({ query: sql })
@@ -371,7 +234,8 @@ var DeeplakeApi = class {
       }
       const text = await resp.text().catch(() => "");
       const retryable403 = isSessionInsertQuery(sql) && (resp.status === 401 || resp.status === 403 && (text.length === 0 || isTransientHtml403(text)));
-      if (attempt < MAX_RETRIES && (RETRYABLE_CODES.has(resp.status) || retryable403)) {
+      const alreadyExists = resp.status === 500 && isDuplicateIndexError(text);
+      if (!alreadyExists && attempt < MAX_RETRIES && (RETRYABLE_CODES.has(resp.status) || retryable403)) {
         const delay = BASE_DELAY_MS * Math.pow(2, attempt) + Math.random() * 200;
         log2(`query retry ${attempt + 1}/${MAX_RETRIES} (${resp.status}) in ${delay.toFixed(0)}ms`);
         await sleep(delay);
@@ -406,7 +270,7 @@ var DeeplakeApi = class {
       `SELECT path FROM "${this.tableName}" WHERE path = '${sqlStr(row.path)}' LIMIT 1`
     );
     if (exists.length > 0) {
-      let setClauses = `summary = E'${sqlStr(row.contentText)}', mime_type = '${sqlStr(row.mimeType)}', size_bytes = ${row.sizeBytes}, last_update_date = '${lud}'`;
+      let setClauses = `summary = E'${sqlStr(row.contentText)}', ${SUMMARY_EMBEDDING_COL} = NULL, mime_type = '${sqlStr(row.mimeType)}', size_bytes = ${row.sizeBytes}, last_update_date = '${lud}'`;
       if (row.project !== void 0) setClauses += `, project = '${sqlStr(row.project)}'`;
       if (row.description !== void 0) setClauses += `, description = '${sqlStr(row.description)}'`;
       await this.query(
@@ -414,8 +278,8 @@ var DeeplakeApi = class {
       );
     } else {
       const id = randomUUID();
-      let cols = "id, path, filename, summary, mime_type, size_bytes, creation_date, last_update_date";
-      let vals = `'${id}', '${sqlStr(row.path)}', '${sqlStr(row.filename)}', E'${sqlStr(row.contentText)}', '${sqlStr(row.mimeType)}', ${row.sizeBytes}, '${cd}', '${lud}'`;
+      let cols = `id, path, filename, summary, ${SUMMARY_EMBEDDING_COL}, mime_type, size_bytes, creation_date, last_update_date`;
+      let vals = `'${id}', '${sqlStr(row.path)}', '${sqlStr(row.filename)}', E'${sqlStr(row.contentText)}', NULL, '${sqlStr(row.mimeType)}', ${row.sizeBytes}, '${cd}', '${lud}'`;
       if (row.project !== void 0) {
         cols += ", project";
         vals += `, '${sqlStr(row.project)}'`;
@@ -444,49 +308,79 @@ var DeeplakeApi = class {
   buildLookupIndexName(table, suffix) {
     return `idx_${table}_${suffix}`.replace(/[^a-zA-Z0-9_]/g, "_");
   }
-  getLookupIndexMarkerPath(table, suffix) {
-    const markerKey = [
-      this.workspaceId,
-      this.orgId,
-      table,
-      suffix
-    ].join("__").replace(/[^a-zA-Z0-9_.-]/g, "_");
-    return join5(getIndexMarkerDir(), `${markerKey}.json`);
-  }
-  hasFreshLookupIndexMarker(table, suffix) {
-    const markerPath = this.getLookupIndexMarkerPath(table, suffix);
-    if (!existsSync4(markerPath)) return false;
-    try {
-      const raw = JSON.parse(readFileSync4(markerPath, "utf-8"));
-      const updatedAt = raw.updatedAt ? new Date(raw.updatedAt).getTime() : NaN;
-      if (!Number.isFinite(updatedAt) || Date.now() - updatedAt > INDEX_MARKER_TTL_MS) return false;
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  markLookupIndexReady(table, suffix) {
-    mkdirSync2(getIndexMarkerDir(), { recursive: true });
-    writeFileSync3(
-      this.getLookupIndexMarkerPath(table, suffix),
-      JSON.stringify({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }),
-      "utf-8"
-    );
-  }
   async ensureLookupIndex(table, suffix, columnsSql) {
-    if (this.hasFreshLookupIndexMarker(table, suffix)) return;
+    const markers = await getIndexMarkerStore();
+    const markerPath = markers.buildIndexMarkerPath(this.workspaceId, this.orgId, table, suffix);
+    if (markers.hasFreshIndexMarker(markerPath)) return;
     const indexName = this.buildLookupIndexName(table, suffix);
     try {
       await this.query(`CREATE INDEX IF NOT EXISTS "${indexName}" ON "${table}" ${columnsSql}`);
-      this.markLookupIndexReady(table, suffix);
+      markers.writeIndexMarker(markerPath);
     } catch (e) {
       if (isDuplicateIndexError(e)) {
-        this.markLookupIndexReady(table, suffix);
+        markers.writeIndexMarker(markerPath);
         return;
       }
       log2(`index "${indexName}" skipped: ${e.message}`);
     }
   }
+  /**
+   * Ensure a vector column exists on the given table.
+   *
+   * The previous implementation always issued `ALTER TABLE ADD COLUMN IF NOT
+   * EXISTS …` on every SessionStart. On a long-running workspace that's
+   * already migrated, every call returns 500 "Column already exists" — noisy
+   * in the log and a wasted round-trip. Worse, the very first call after the
+   * column is genuinely added triggers Deeplake's post-ALTER `vector::at`
+   * window (~30s) during which subsequent INSERTs fail; minimising the
+   * number of ALTER calls minimises exposure to that window.
+   *
+   * New flow:
+   *   1. Check the local marker file (mirrors ensureLookupIndex). If fresh,
+   *      return — zero network calls.
+   *   2. SELECT 1 FROM information_schema.columns WHERE table_name = T AND
+   *      column_name = C. Read-only, idempotent, can't tickle the post-ALTER
+   *      bug. If the column is present → mark + return.
+   *   3. Only if step 2 says the column is missing, fall back to ALTER ADD
+   *      COLUMN IF NOT EXISTS. Mark on success, also mark if Deeplake reports
+   *      "already exists" (race: another client added it between our SELECT
+   *      and ALTER).
+   *
+   * Marker uses the same dir / TTL as ensureLookupIndex so both schema
+   * caches share an opt-out (HIVEMIND_INDEX_MARKER_DIR) and a TTL knob.
+   */
+  async ensureEmbeddingColumn(table, column) {
+    await this.ensureColumn(table, column, "FLOAT4[]");
+  }
+  /**
+   * Generic marker-gated column migration. Same SELECT-then-ALTER flow as
+   * ensureEmbeddingColumn, parameterized by SQL type so it can patch up any
+   * column that was added to the schema after the table was originally
+   * created. Used today for `summary_embedding`, `message_embedding`, and
+   * the `agent` column (added 2026-04-11) — the latter has no fallback if
+   * a user upgraded over a pre-2026-04-11 table, so every INSERT fails
+   * with `column "agent" does not exist`.
+   */
+  async ensureColumn(table, column, sqlType) {
+    const markers = await getIndexMarkerStore();
+    const markerPath = markers.buildIndexMarkerPath(this.workspaceId, this.orgId, table, `col_${column}`);
+    if (markers.hasFreshIndexMarker(markerPath)) return;
+    const colCheck = `SELECT 1 FROM information_schema.columns WHERE table_name = '${sqlStr(table)}' AND column_name = '${sqlStr(column)}' AND table_schema = '${sqlStr(this.workspaceId)}' LIMIT 1`;
+    const rows = await this.query(colCheck);
+    if (rows.length > 0) {
+      markers.writeIndexMarker(markerPath);
+      return;
+    }
+    try {
+      await this.query(`ALTER TABLE "${table}" ADD COLUMN ${column} ${sqlType}`);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      if (!/already exists/i.test(msg)) throw e;
+      const recheck = await this.query(colCheck);
+      if (recheck.length === 0) throw e;
+    }
+    markers.writeIndexMarker(markerPath);
+  }
   /** List all tables in the workspace (with retry). */
   async listTables(forceRefresh = false) {
     if (!forceRefresh && this._tablesCache) return [...this._tablesCache];
@@ -500,7 +394,8 @@ var DeeplakeApi = class {
         const resp = await fetch(`${this.apiUrl}/workspaces/${this.workspaceId}/tables`, {
           headers: {
             Authorization: `Bearer ${this.token}`,
-            "X-Activeloop-Org-Id": this.orgId
+            "X-Activeloop-Org-Id": this.orgId,
+            ...deeplakeClientHeader()
           }
         });
         if (resp.ok) {
@@ -525,30 +420,64 @@ var DeeplakeApi = class {
     }
     return { tables: [], cacheable: false };
   }
+  /**
+   * Run a `CREATE TABLE` with an extra outer retry budget. The base
+   * `query()` already retries 3 times on fetch errors (~3.5s total), but a
+   * failed CREATE is permanent corruption — every subsequent SELECT against
+   * the missing table fails. Wrapping in an outer loop with longer backoff
+   * (2s, 5s, then 10s) gives us ~17s of reach across transient network
+   * blips before giving up. Failures still propagate; getApi() resets its
+   * cache on init failure (openclaw plugin) so the next call retries the
+   * whole init flow.
+   */
+  async createTableWithRetry(sql, label) {
+    const OUTER_BACKOFFS_MS = [2e3, 5e3, 1e4];
+    let lastErr = null;
+    for (let attempt = 0; attempt <= OUTER_BACKOFFS_MS.length; attempt++) {
+      try {
+        await this.query(sql);
+        return;
+      } catch (err) {
+        lastErr = err;
+        const msg = err instanceof Error ? err.message : String(err);
+        log2(`CREATE TABLE "${label}" attempt ${attempt + 1}/${OUTER_BACKOFFS_MS.length + 1} failed: ${msg}`);
+        if (attempt < OUTER_BACKOFFS_MS.length) {
+          await sleep(OUTER_BACKOFFS_MS[attempt]);
+        }
+      }
+    }
+    throw lastErr;
+  }
   /** Create the memory table if it doesn't already exist. Migrate columns on existing tables. */
   async ensureTable(name) {
     const tbl = name ?? this.tableName;
     const tables = await this.listTables();
     if (!tables.includes(tbl)) {
       log2(`table "${tbl}" not found, creating`);
-      await this.query(
-        `CREATE TABLE IF NOT EXISTS "${tbl}" (id TEXT NOT NULL DEFAULT '', path TEXT NOT NULL DEFAULT '', filename TEXT NOT NULL DEFAULT '', summary TEXT NOT NULL DEFAULT '', author TEXT NOT NULL DEFAULT '', mime_type TEXT NOT NULL DEFAULT 'text/plain', size_bytes BIGINT NOT NULL DEFAULT 0, project TEXT NOT NULL DEFAULT '', description TEXT NOT NULL DEFAULT '', agent TEXT NOT NULL DEFAULT '', creation_date TEXT NOT NULL DEFAULT '', last_update_date TEXT NOT NULL DEFAULT '') USING deeplake`
+      await this.createTableWithRetry(
+        `CREATE TABLE IF NOT EXISTS "${tbl}" (id TEXT NOT NULL DEFAULT '', path TEXT NOT NULL DEFAULT '', filename TEXT NOT NULL DEFAULT '', summary TEXT NOT NULL DEFAULT '', summary_embedding FLOAT4[], author TEXT NOT NULL DEFAULT '', mime_type TEXT NOT NULL DEFAULT 'text/plain', size_bytes BIGINT NOT NULL DEFAULT 0, project TEXT NOT NULL DEFAULT '', description TEXT NOT NULL DEFAULT '', agent TEXT NOT NULL DEFAULT '', creation_date TEXT NOT NULL DEFAULT '', last_update_date TEXT NOT NULL DEFAULT '') USING deeplake`,
+        tbl
       );
       log2(`table "${tbl}" created`);
       if (!tables.includes(tbl)) this._tablesCache = [...tables, tbl];
     }
+    await this.ensureEmbeddingColumn(tbl, SUMMARY_EMBEDDING_COL);
+    await this.ensureColumn(tbl, "agent", "TEXT NOT NULL DEFAULT ''");
   }
   /** Create the sessions table (uses JSONB for message since every row is a JSON event). */
   async ensureSessionsTable(name) {
     const tables = await this.listTables();
     if (!tables.includes(name)) {
       log2(`table "${name}" not found, creating`);
-      await this.query(
-        `CREATE TABLE IF NOT EXISTS "${name}" (id TEXT NOT NULL DEFAULT '', path TEXT NOT NULL DEFAULT '', filename TEXT NOT NULL DEFAULT '', message JSONB, author TEXT NOT NULL DEFAULT '', mime_type TEXT NOT NULL DEFAULT 'application/json', size_bytes BIGINT NOT NULL DEFAULT 0, project TEXT NOT NULL DEFAULT '', description TEXT NOT NULL DEFAULT '', agent TEXT NOT NULL DEFAULT '', creation_date TEXT NOT NULL DEFAULT '', last_update_date TEXT NOT NULL DEFAULT '') USING deeplake`
+      await this.createTableWithRetry(
+        `CREATE TABLE IF NOT EXISTS "${name}" (id TEXT NOT NULL DEFAULT '', path TEXT NOT NULL DEFAULT '', filename TEXT NOT NULL DEFAULT '', message JSONB, message_embedding FLOAT4[], author TEXT NOT NULL DEFAULT '', mime_type TEXT NOT NULL DEFAULT 'application/json', size_bytes BIGINT NOT NULL DEFAULT 0, project TEXT NOT NULL DEFAULT '', description TEXT NOT NULL DEFAULT '', agent TEXT NOT NULL DEFAULT '', creation_date TEXT NOT NULL DEFAULT '', last_update_date TEXT NOT NULL DEFAULT '') USING deeplake`,
+        name
       );
       log2(`table "${name}" created`);
       if (!tables.includes(name)) this._tablesCache = [...tables, name];
     }
+    await this.ensureEmbeddingColumn(name, MESSAGE_EMBEDDING_COL);
+    await this.ensureColumn(name, "agent", "TEXT NOT NULL DEFAULT ''");
     await this.ensureLookupIndex(name, "path_creation_date", `("path", "creation_date")`);
   }
 };
@@ -700,22 +629,25 @@ function normalizeContent(path, raw) {
     return raw;
   }
   if (Array.isArray(obj.turns)) {
-    const header = [];
-    if (obj.date_time) header.push(`date: ${obj.date_time}`);
-    if (obj.speakers) {
-      const s = obj.speakers;
-      const names = [s.speaker_a, s.speaker_b].filter(Boolean).join(", ");
-      if (names) header.push(`speakers: ${names}`);
-    }
+    const dateHeader = obj.date_time ? `(${String(obj.date_time)}) ` : "";
     const lines = obj.turns.map((t) => {
       const sp = String(t?.speaker ?? t?.name ?? "?").trim();
       const tx = String(t?.text ?? t?.content ?? "").replace(/\s+/g, " ").trim();
       const tag = t?.dia_id ? `[${t.dia_id}] ` : "";
-      return `${tag}${sp}: ${tx}`;
+      return `${dateHeader}${tag}${sp}: ${tx}`;
     });
-    const out2 = [...header, ...lines].join("\n");
+    const out2 = lines.join("\n");
     return out2.trim() ? out2 : raw;
   }
+  if (obj.turn && typeof obj.turn === "object" && !Array.isArray(obj.turn)) {
+    const t = obj.turn;
+    const sp = String(t.speaker ?? t.name ?? "?").trim();
+    const tx = String(t.text ?? t.content ?? "").replace(/\s+/g, " ").trim();
+    const tag = t.dia_id ? `[${String(t.dia_id)}] ` : "";
+    const dateHeader = obj.date_time ? `(${String(obj.date_time)}) ` : "";
+    const line = `${dateHeader}${tag}${sp}: ${tx}`;
+    return line.trim() ? line : raw;
+  }
   const stripRecalled = (t) => {
     const i = t.indexOf("<recalled-memories>");
     if (i === -1) return t;
@@ -753,8 +685,43 @@ function buildPathCondition(targetPath) {
   return `(path = '${sqlStr(clean)}' OR path LIKE '${sqlLike(clean)}/%' ESCAPE '\\')`;
 }
 async function searchDeeplakeTables(api2, memoryTable2, sessionsTable2, opts) {
-  const { pathFilter, contentScanOnly, likeOp, escapedPattern, prefilterPattern, prefilterPatterns, multiWordPatterns } = opts;
+  const { pathFilter, contentScanOnly, likeOp, escapedPattern, prefilterPattern, prefilterPatterns, queryEmbedding, multiWordPatterns } = opts;
   const limit = opts.limit ?? 100;
+  if (queryEmbedding && queryEmbedding.length > 0) {
+    const vecLit = serializeFloat4Array(queryEmbedding);
+    const semanticLimit = Math.min(
+      limit,
+      Number(process.env.HIVEMIND_SEMANTIC_LIMIT ?? "20")
+    );
+    const lexicalLimit = Math.min(
+      limit,
+      Number(process.env.HIVEMIND_HYBRID_LEXICAL_LIMIT ?? "20")
+    );
+    const filterPatternsForLex = contentScanOnly ? prefilterPatterns && prefilterPatterns.length > 0 ? prefilterPatterns : prefilterPattern ? [prefilterPattern] : [] : [escapedPattern];
+    const memLexFilter = buildContentFilter("summary::text", likeOp, filterPatternsForLex);
+    const sessLexFilter = buildContentFilter("message::text", likeOp, filterPatternsForLex);
+    const memLexQuery = memLexFilter ? `SELECT path, summary::text AS content, 0 AS source_order, '' AS creation_date, 1.0 AS score FROM "${memoryTable2}" WHERE 1=1${pathFilter}${memLexFilter} LIMIT ${lexicalLimit}` : null;
+    const sessLexQuery = sessLexFilter ? `SELECT path, message::text AS content, 1 AS source_order, COALESCE(creation_date::text, '') AS creation_date, 1.0 AS score FROM "${sessionsTable2}" WHERE 1=1${pathFilter}${sessLexFilter} LIMIT ${lexicalLimit}` : null;
+    const memSemQuery = `SELECT path, summary::text AS content, 0 AS source_order, '' AS creation_date, (summary_embedding <#> ${vecLit}) AS score FROM "${memoryTable2}" WHERE ARRAY_LENGTH(summary_embedding, 1) > 0${pathFilter} ORDER BY score DESC LIMIT ${semanticLimit}`;
+    const sessSemQuery = `SELECT path, message::text AS content, 1 AS source_order, COALESCE(creation_date::text, '') AS creation_date, (message_embedding <#> ${vecLit}) AS score FROM "${sessionsTable2}" WHERE ARRAY_LENGTH(message_embedding, 1) > 0${pathFilter} ORDER BY score DESC LIMIT ${semanticLimit}`;
+    const parts = [memSemQuery, sessSemQuery];
+    if (memLexQuery) parts.push(memLexQuery);
+    if (sessLexQuery) parts.push(sessLexQuery);
+    const unionSql = parts.map((q) => `(${q})`).join(" UNION ALL ");
+    const outerLimit = semanticLimit + lexicalLimit;
+    const rows2 = await api2.query(
+      `SELECT path, content, source_order, creation_date, score FROM (` + unionSql + `) AS combined ORDER BY score DESC LIMIT ${outerLimit}`
+    );
+    const seen = /* @__PURE__ */ new Set();
+    const unique = [];
+    for (const row of rows2) {
+      const p = String(row["path"]);
+      if (seen.has(p)) continue;
+      seen.add(p);
+      unique.push({ path: p, content: String(row["content"] ?? "") });
+    }
+    return unique;
+  }
   const filterPatterns = contentScanOnly ? prefilterPatterns && prefilterPatterns.length > 0 ? prefilterPatterns : prefilterPattern ? [prefilterPattern] : [] : multiWordPatterns && multiWordPatterns.length > 1 ? multiWordPatterns : [escapedPattern];
   const memFilter = buildContentFilter("summary::text", likeOp, filterPatterns);
   const sessFilter = buildContentFilter("message::text", likeOp, filterPatterns);
@@ -768,6 +735,14 @@ async function searchDeeplakeTables(api2, memoryTable2, sessionsTable2, opts) {
     content: String(row["content"] ?? "")
   }));
 }
+function serializeFloat4Array(vec) {
+  const parts = [];
+  for (const v of vec) {
+    if (!Number.isFinite(v)) return "NULL";
+    parts.push(String(v));
+  }
+  return `ARRAY[${parts.join(",")}]::float4[]`;
+}
 function buildPathFilter(targetPath) {
   const condition = buildPathCondition(targetPath);
   return condition ? ` AND ${condition}` : "";
@@ -842,7 +817,7 @@ function buildGrepSearchOptions(params, targetPath) {
   return {
     pathFilter: buildPathFilter(targetPath),
     contentScanOnly: hasRegexMeta,
-    likeOp: params.ignoreCase ? "ILIKE" : "LIKE",
+    likeOp: process.env.HIVEMIND_GREP_LIKE === "case-sensitive" ? "LIKE" : "ILIKE",
     escapedPattern: sqlLike(params.pattern),
     prefilterPattern: literalPrefilter ? sqlLike(literalPrefilter) : void 0,
     prefilterPatterns: alternationPrefilters?.map((literal) => sqlLike(literal)),
@@ -871,33 +846,64 @@ function compileGrepRegex(params) {
 function normalizeSessionPart(path, content) {
   return normalizeContent(path, content);
 }
-function buildVirtualIndexContent(summaryRows, sessionRows = []) {
-  const total = summaryRows.length + sessionRows.length;
+var INDEX_LIMIT_PER_SECTION = 50;
+function buildVirtualIndexContent(summaryRows, sessionRows = [], opts = {}) {
   const lines = [
-    "# Memory Index",
+    "# Session Index",
     "",
-    `${total} entries (${summaryRows.length} summaries, ${sessionRows.length} sessions):`,
+    "Two sources are available. Consult the section relevant to the question.",
     ""
   ];
-  if (summaryRows.length > 0) {
-    lines.push("## Summaries", "");
+  lines.push("## memory", "");
+  if (summaryRows.length === 0) {
+    lines.push("_(empty \u2014 no summaries ingested yet)_");
+  } else {
+    lines.push("AI-generated summaries per session. Read these first for topic-level overviews.");
+    lines.push("");
+    if (opts.summaryTruncated) {
+      lines.push(`_Showing ${INDEX_LIMIT_PER_SECTION} most-recent of many \u2014 older summaries reachable via \`Grep pattern="..." path="~/.deeplake/memory"\`._`);
+      lines.push("");
+    }
+    lines.push("| Session | Created | Last Updated | Project | Description |");
+    lines.push("|---------|---------|--------------|---------|-------------|");
     for (const row of summaryRows) {
-      const path = row["path"];
+      const p = row["path"] || "";
+      const match = p.match(/\/summaries\/([^/]+)\/([^/]+)\.md$/);
+      if (!match) continue;
+      const summaryUser = match[1];
+      const sessionId = match[2];
+      const relPath = `summaries/${summaryUser}/${sessionId}.md`;
       const project = row["project"] || "";
-      const description = (row["description"] || "").slice(0, 120);
-      const date = (row["creation_date"] || "").slice(0, 10);
-      lines.push(`- [${path}](${path}) ${date} ${project ? `[${project}]` : ""} ${description}`);
+      const description = row["description"] || "";
+      const creationDate = row["creation_date"] || "";
+      const lastUpdateDate = row["last_update_date"] || "";
+      lines.push(`| [${sessionId}](${relPath}) | ${creationDate} | ${lastUpdateDate} | ${project} | ${description} |`);
     }
-    lines.push("");
   }
-  if (sessionRows.length > 0) {
-    lines.push("## Sessions", "");
+  lines.push("");
+  lines.push("## sessions", "");
+  if (sessionRows.length === 0) {
+    lines.push("_(empty \u2014 no session records ingested yet)_");
+  } else {
+    lines.push("Raw session records (dialogue, tool calls). Read for exact detail / quotes.");
+    lines.push("");
+    if (opts.sessionTruncated) {
+      lines.push(`_Showing ${INDEX_LIMIT_PER_SECTION} most-recent of many \u2014 older sessions reachable via \`Grep pattern="..." path="~/.deeplake/memory"\`._`);
+      lines.push("");
+    }
+    lines.push("| Session | Created | Last Updated | Description |");
+    lines.push("|---------|---------|--------------|-------------|");
     for (const row of sessionRows) {
-      const path = row["path"];
-      const description = (row["description"] || "").slice(0, 120);
-      lines.push(`- [${path}](${path}) ${description}`);
+      const p = row["path"] || "";
+      const rel = p.startsWith("/") ? p.slice(1) : p;
+      const filename = p.split("/").pop() ?? p;
+      const description = row["description"] || "";
+      const creationDate = row["creation_date"] || "";
+      const lastUpdateDate = row["last_update_date"] || "";
+      lines.push(`| [${filename}](${rel}) | ${creationDate} | ${lastUpdateDate} | ${description} |`);
     }
   }
+  lines.push("");
   return lines.join("\n");
 }
 function buildUnionQuery(memoryQuery, sessionsQuery) {
@@ -954,15 +960,25 @@ async function readVirtualPathContents(api2, memoryTable2, sessionsTable2, virtu
     }
   }
   if (result.get("/index.md") === null && uniquePaths.includes("/index.md")) {
+    const fetchLimit = INDEX_LIMIT_PER_SECTION + 1;
     const [summaryRows, sessionRows] = await Promise.all([
       api2.query(
-        `SELECT path, project, description, creation_date FROM "${memoryTable2}" WHERE path LIKE '/summaries/%' ORDER BY creation_date DESC`
+        `SELECT path, project, description, creation_date, last_update_date FROM "${memoryTable2}" WHERE path LIKE '/summaries/%' ORDER BY last_update_date DESC LIMIT ${fetchLimit}`
       ).catch(() => []),
       api2.query(
-        `SELECT path, description FROM "${sessionsTable2}" WHERE path LIKE '/sessions/%' ORDER BY path`
+        `SELECT path, MAX(description) AS description, MIN(creation_date) AS creation_date, MAX(last_update_date) AS last_update_date FROM "${sessionsTable2}" WHERE path LIKE '/sessions/%' GROUP BY path ORDER BY MAX(last_update_date) DESC LIMIT ${fetchLimit}`
       ).catch(() => [])
     ]);
-    result.set("/index.md", buildVirtualIndexContent(summaryRows, sessionRows));
+    const summaryTruncated = summaryRows.length > INDEX_LIMIT_PER_SECTION;
+    const sessionTruncated = sessionRows.length > INDEX_LIMIT_PER_SECTION;
+    result.set(
+      "/index.md",
+      buildVirtualIndexContent(
+        summaryRows.slice(0, INDEX_LIMIT_PER_SECTION),
+        sessionRows.slice(0, INDEX_LIMIT_PER_SECTION),
+        { summaryTruncated, sessionTruncated }
+      )
+    );
   }
   return result;
 }
@@ -974,6 +990,32 @@ async function readVirtualPathContent(api2, memoryTable2, sessionsTable2, virtua
 function definePluginEntry(entry) {
   return entry;
 }
+function loadSetupConfig() {
+  return import("./chunks/setup-config-C35UK4LP.js");
+}
+var credsModulePromise = null;
+var configModulePromise = null;
+function loadCredsModule() {
+  if (!credsModulePromise) credsModulePromise = import("./chunks/auth-creds-AEKS6D3P.js");
+  return credsModulePromise;
+}
+function loadConfigModule() {
+  if (!configModulePromise) configModulePromise = import("./chunks/config-G23NI5TV.js");
+  return configModulePromise;
+}
+async function loadCredentials2() {
+  const m = await loadCredsModule();
+  return m.loadCredentials();
+}
+async function saveCredentials2(creds) {
+  if (!creds) return;
+  const m = await loadCredsModule();
+  m.saveCredentials(creds);
+}
+async function loadConfig() {
+  const m = await loadConfigModule();
+  return m.loadConfig();
+}
 var DEFAULT_API_URL2 = "https://api.deeplake.ai";
 var VERSION_URL = "https://clawhub.ai/api/v1/packages/hivemind";
 function extractLatestVersion(body) {
@@ -984,7 +1026,7 @@ function extractLatestVersion(body) {
   return typeof v === "string" && v.length > 0 ? v : null;
 }
 function getInstalledVersion() {
-  return "0.6.48".length > 0 ? "0.6.48" : null;
+  return "0.7.4".length > 0 ? "0.7.4" : null;
 }
 function isNewer(latest, current) {
   const parse = (v) => v.replace(/-.*$/, "").split(".").map(Number);
@@ -1048,7 +1090,8 @@ async function requestAuth() {
                   headers: {
                     Authorization: `Bearer ${token}`,
                     "Content-Type": "application/json",
-                    "X-Activeloop-Org-Id": orgId
+                    "X-Activeloop-Org-Id": orgId,
+                    ...deeplakeClientHeader()
                   },
                   body: JSON.stringify({ name: `hivemind-${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`, duration: 365 * 24 * 60 * 60, organization_id: orgId })
                 });
@@ -1059,7 +1102,7 @@ async function requestAuth() {
               } catch {
               }
             }
-            saveCredentials({ token: savedToken, orgId, orgName, userName, apiUrl: DEFAULT_API_URL2, savedAt: (/* @__PURE__ */ new Date()).toISOString() });
+            await saveCredentials2({ token: savedToken, orgId, orgName, userName, apiUrl: DEFAULT_API_URL2, savedAt: (/* @__PURE__ */ new Date()).toISOString() });
             authPending = false;
             authUrl = null;
             justAuthenticated = true;
@@ -1150,16 +1193,17 @@ function normalizeVirtualPath(p) {
 }
 async function getApi() {
   if (api) return api;
-  const config = loadConfig();
+  const config = await loadConfig();
   if (!config) {
     if (!authPending) await requestAuth();
     return null;
   }
   sessionsTable = config.sessionsTableName;
   memoryTable = config.tableName;
-  api = new DeeplakeApi(config.token, config.apiUrl, config.orgId, config.workspaceId, config.tableName);
-  await api.ensureTable();
-  await api.ensureSessionsTable(sessionsTable);
+  const candidate = new DeeplakeApi(config.token, config.apiUrl, config.orgId, config.workspaceId, config.tableName);
+  await candidate.ensureTable();
+  await candidate.ensureSessionsTable(sessionsTable);
+  api = candidate;
   return api;
 }
 var src_default = definePluginEntry({
@@ -1167,432 +1211,437 @@ var src_default = definePluginEntry({
   name: "Hivemind",
   description: "Cloud-backed shared memory powered by Deeplake",
   register(pluginApi) {
-    try {
-      pluginApi.registerCommand({
-        name: "hivemind_login",
-        description: "Log in to Hivemind (or switch accounts)",
-        handler: async () => {
-          const existing = loadCredentials();
-          const url = await requestAuth();
-          if (existing?.token) {
-            return {
-              text: `\u2139\uFE0F Currently logged in as ${existing.orgName ?? existing.orgId}.
+    void (async () => {
+      try {
+        pluginApi.registerCommand({
+          name: "hivemind_login",
+          description: "Log in to Hivemind (or switch accounts)",
+          handler: async () => {
+            const existing = await loadCredentials2();
+            const url = await requestAuth();
+            if (existing?.token) {
+              return {
+                text: `\u2139\uFE0F Currently logged in as ${existing.orgName ?? existing.orgId}.
 
 To re-authenticate or switch accounts:
 
 ${url}
 
 After signing in, send another message.`
-            };
-          }
-          return { text: `\u{1F510} Sign in to activate Hivemind memory:
+              };
+            }
+            return { text: `\u{1F510} Sign in to activate Hivemind memory:
 
 ${url}
 
 After signing in, send another message.` };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_capture",
-        description: "Toggle conversation capture on/off",
-        handler: async () => {
-          captureEnabled = !captureEnabled;
-          return { text: captureEnabled ? "\u2705 Capture enabled \u2014 conversations will be stored to Hivemind." : "\u23F8\uFE0F Capture paused \u2014 conversations will NOT be stored until you run /hivemind_capture again." };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_whoami",
-        description: "Show current Hivemind org and workspace",
-        handler: async () => {
-          const creds2 = loadCredentials();
-          if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
-          return { text: `Org: ${creds2.orgName ?? creds2.orgId}
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_capture",
+          description: "Toggle conversation capture on/off",
+          handler: async () => {
+            captureEnabled = !captureEnabled;
+            return { text: captureEnabled ? "\u2705 Capture enabled \u2014 conversations will be stored to Hivemind." : "\u23F8\uFE0F Capture paused \u2014 conversations will NOT be stored until you run /hivemind_capture again." };
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_whoami",
+          description: "Show current Hivemind org and workspace",
+          handler: async () => {
+            const creds2 = await loadCredentials2();
+            if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
+            return { text: `Org: ${creds2.orgName ?? creds2.orgId}
 Workspace: ${creds2.workspaceId ?? "default"}` };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_orgs",
-        description: "List available organizations",
-        handler: async () => {
-          const creds2 = loadCredentials();
-          if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
-          const orgs = await listOrgs(creds2.token, creds2.apiUrl);
-          if (!orgs.length) return { text: "No organizations found." };
-          const lines = orgs.map((o) => `${o.id === creds2.orgId ? "\u2192 " : "  "}${o.name}`);
-          return { text: lines.join("\n") };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_switch_org",
-        description: "Switch to a different organization",
-        acceptsArgs: true,
-        handler: async (ctx) => {
-          const creds2 = loadCredentials();
-          if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
-          const target = ctx.args?.trim();
-          if (!target) return { text: "Usage: /hivemind_switch_org <name-or-id>" };
-          const orgs = await listOrgs(creds2.token, creds2.apiUrl);
-          const lc = target.toLowerCase();
-          const match = orgs.find((o) => o.id === target || o.name.toLowerCase() === lc) ?? orgs.find((o) => o.name.toLowerCase().includes(lc) || o.id.toLowerCase().includes(lc));
-          if (!match) {
-            const available = orgs.length ? orgs.map((o) => `  - ${o.name} (id: ${o.id})`).join("\n") : "  (none \u2014 your current token has no organization access)";
-            return { text: `Org not found: ${target}
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_orgs",
+          description: "List available organizations",
+          handler: async () => {
+            const creds2 = await loadCredentials2();
+            if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
+            const orgs = await listOrgs(creds2.token, creds2.apiUrl);
+            if (!orgs.length) return { text: "No organizations found." };
+            const lines = orgs.map((o) => `${o.id === creds2.orgId ? "\u2192 " : "  "}${o.name}`);
+            return { text: lines.join("\n") };
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_switch_org",
+          description: "Switch to a different organization",
+          acceptsArgs: true,
+          handler: async (ctx) => {
+            const creds2 = await loadCredentials2();
+            if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
+            const target = ctx.args?.trim();
+            if (!target) return { text: "Usage: /hivemind_switch_org <name-or-id>" };
+            const orgs = await listOrgs(creds2.token, creds2.apiUrl);
+            const lc = target.toLowerCase();
+            const match = orgs.find((o) => o.id === target || o.name.toLowerCase() === lc) ?? orgs.find((o) => o.name.toLowerCase().includes(lc) || o.id.toLowerCase().includes(lc));
+            if (!match) {
+              const available = orgs.length ? orgs.map((o) => `  - ${o.name} (id: ${o.id})`).join("\n") : "  (none \u2014 your current token has no organization access)";
+              return { text: `Org not found: ${target}
 
 Available:
 ${available}` };
+            }
+            await switchOrg(match.id, match.name);
+            api = null;
+            return { text: `Switched to org: ${match.name}` };
           }
-          await switchOrg(match.id, match.name);
-          api = null;
-          return { text: `Switched to org: ${match.name}` };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_workspaces",
-        description: "List available workspaces",
-        handler: async () => {
-          const creds2 = loadCredentials();
-          if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
-          const ws = await listWorkspaces(creds2.token, creds2.apiUrl, creds2.orgId);
-          if (!ws.length) return { text: "No workspaces found." };
-          const lines = ws.map((w) => `${w.id === (creds2.workspaceId ?? "default") ? "\u2192 " : "  "}${w.name}`);
-          return { text: lines.join("\n") };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_switch_workspace",
-        description: "Switch to a different workspace",
-        acceptsArgs: true,
-        handler: async (ctx) => {
-          const creds2 = loadCredentials();
-          if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
-          const target = ctx.args?.trim();
-          if (!target) return { text: "Usage: /hivemind_switch_workspace <name-or-id>" };
-          const ws = await listWorkspaces(creds2.token, creds2.apiUrl, creds2.orgId);
-          const lc = target.toLowerCase();
-          const match = ws.find((w) => w.id === target || w.name.toLowerCase() === lc) ?? ws.find((w) => w.name.toLowerCase().includes(lc) || w.id.toLowerCase().includes(lc));
-          if (!match) {
-            const available = ws.length ? ws.map((w) => `  - ${w.name} (id: ${w.id})`).join("\n") : "  (none in current org \u2014 try /hivemind_switch_org first)";
-            return { text: `Workspace not found: ${target}
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_workspaces",
+          description: "List available workspaces",
+          handler: async () => {
+            const creds2 = await loadCredentials2();
+            if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
+            const ws = await listWorkspaces(creds2.token, creds2.apiUrl, creds2.orgId);
+            if (!ws.length) return { text: "No workspaces found." };
+            const lines = ws.map((w) => `${w.id === (creds2.workspaceId ?? "default") ? "\u2192 " : "  "}${w.name}`);
+            return { text: lines.join("\n") };
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_switch_workspace",
+          description: "Switch to a different workspace",
+          acceptsArgs: true,
+          handler: async (ctx) => {
+            const creds2 = await loadCredentials2();
+            if (!creds2?.token) return { text: "Not logged in. Run /hivemind_login" };
+            const target = ctx.args?.trim();
+            if (!target) return { text: "Usage: /hivemind_switch_workspace <name-or-id>" };
+            const ws = await listWorkspaces(creds2.token, creds2.apiUrl, creds2.orgId);
+            const lc = target.toLowerCase();
+            const match = ws.find((w) => w.id === target || w.name.toLowerCase() === lc) ?? ws.find((w) => w.name.toLowerCase().includes(lc) || w.id.toLowerCase().includes(lc));
+            if (!match) {
+              const available = ws.length ? ws.map((w) => `  - ${w.name} (id: ${w.id})`).join("\n") : "  (none in current org \u2014 try /hivemind_switch_org first)";
+              return { text: `Workspace not found: ${target}
 
 Available:
 ${available}` };
+            }
+            await switchWorkspace(match.id);
+            api = null;
+            return { text: `Switched to workspace: ${match.name}` };
           }
-          await switchWorkspace(match.id);
-          api = null;
-          return { text: `Switched to workspace: ${match.name}` };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_setup",
-        description: "Add Hivemind tools to your openclaw allowlist (needed once per install)",
-        handler: async () => {
-          const result = ensureHivemindAllowlisted();
-          if (result.status === "already-set") {
-            return { text: `\u2705 Hivemind tools are already enabled in your allowlist.
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_setup",
+          description: "Add Hivemind tools to your openclaw allowlist (needed once per install)",
+          handler: async () => {
+            const { ensureHivemindAllowlisted } = await loadSetupConfig();
+            const result = ensureHivemindAllowlisted();
+            if (result.status === "already-set") {
+              return { text: `\u2705 Hivemind tools are already enabled in your allowlist.
 
 No changes needed \u2014 memory tools are available to the agent.` };
-          }
-          if (result.status === "added") {
-            return { text: `\u2705 Added "hivemind" to your tool allowlist.
+            }
+            if (result.status === "added") {
+              return { text: `\u2705 Added "hivemind" to your tool allowlist.
 
 Openclaw will detect the config change and restart. On the next turn, the agent will have access to hivemind_search, hivemind_read, and hivemind_index.
 
 Backup of previous config: ${result.backupPath}` };
-          }
-          return { text: `\u26A0\uFE0F Could not update allowlist: ${result.error}
+            }
+            return { text: `\u26A0\uFE0F Could not update allowlist: ${result.error}
 
 Manual fix: open ${result.configPath} and add "hivemind" to the "alsoAllow" array under "tools".` };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_version",
-        description: "Show the installed Hivemind version and check for updates",
-        handler: async () => {
-          const current = getInstalledVersion();
-          if (!current) return { text: "Could not determine installed version." };
-          try {
-            const res = await fetch(VERSION_URL, { signal: AbortSignal.timeout(3e3) });
-            if (!res.ok) return { text: `Current version: ${current}. Could not check for updates.` };
-            const latest = extractLatestVersion(await res.json());
-            if (!latest) return { text: `Current version: ${current}. Could not parse latest version.` };
-            if (isNewer(latest, current)) {
-              return { text: `\u2B06\uFE0F Update available: ${current} \u2192 ${latest}
+          }
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_version",
+          description: "Show the installed Hivemind version and check for updates",
+          handler: async () => {
+            const current = getInstalledVersion();
+            if (!current) return { text: "Could not determine installed version." };
+            try {
+              const res = await fetch(VERSION_URL, { signal: AbortSignal.timeout(3e3) });
+              if (!res.ok) return { text: `Current version: ${current}. Could not check for updates.` };
+              const latest = extractLatestVersion(await res.json());
+              if (!latest) return { text: `Current version: ${current}. Could not parse latest version.` };
+              if (isNewer(latest, current)) {
+                return { text: `\u2B06\uFE0F Update available: ${current} \u2192 ${latest}
 
 Run /hivemind_update to install it now.` };
+              }
+              return { text: `\u2705 Hivemind v${current} is up to date.` };
+            } catch {
+              return { text: `Current version: ${current}. Could not check for updates.` };
             }
-            return { text: `\u2705 Hivemind v${current} is up to date.` };
-          } catch {
-            return { text: `Current version: ${current}. Could not check for updates.` };
           }
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_update",
-        description: "Install the latest Hivemind version from ClawHub",
-        handler: async () => {
-          const current = getInstalledVersion() ?? "unknown";
-          return {
-            text: `Hivemind v${current} installed. To install the latest:
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_update",
+          description: "Install the latest Hivemind version from ClawHub",
+          handler: async () => {
+            const current = getInstalledVersion() ?? "unknown";
+            return {
+              text: `Hivemind v${current} installed. To install the latest:
 
 \u2022 Ask me in chat: "update hivemind" \u2014 I'll run \`openclaw plugins update hivemind\` via my exec tool.
 \u2022 Or run in your terminal: \`openclaw plugins update hivemind\`
 
 The gateway restarts automatically once the install completes.`
-          };
-        }
-      });
-      pluginApi.registerCommand({
-        name: "hivemind_autoupdate",
-        description: "Toggle Hivemind auto-update on/off",
-        acceptsArgs: true,
-        handler: async (ctx) => {
-          const arg = ctx.args?.trim().toLowerCase();
-          let setTo;
-          if (arg === "on" || arg === "true" || arg === "enable") setTo = true;
-          else if (arg === "off" || arg === "false" || arg === "disable") setTo = false;
-          const result = toggleAutoUpdateConfig(setTo);
-          if (result.status === "error") {
-            return { text: `\u26A0\uFE0F Could not update auto-update setting: ${result.error}` };
+            };
           }
-          return {
-            text: result.newValue ? "\u2705 Auto-update is ON. Hivemind will install new versions automatically when the gateway starts." : "\u23F8\uFE0F Auto-update is OFF. Run /hivemind_update manually to install new versions."
-          };
-        }
-      });
-      pluginApi.registerTool({
-        name: "hivemind_search",
-        label: "Hivemind Search",
-        description: "Search Hivemind shared memory (summaries + past session turns) for keywords, phrases, or regex. Returns matching path + snippet pairs from BOTH the memory and sessions tables. Use this FIRST when the user asks about past work, decisions, people, or anything that might live in memory.",
-        parameters: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            query: {
-              type: "string",
-              minLength: 1,
-              description: "Search text. Treated as a literal substring by default; set `regex: true` to use regex metacharacters."
-            },
-            path: {
-              type: "string",
-              description: "Optional virtual path prefix to scope the search, e.g. '/summaries/' or '/sessions/alice/'. Defaults to '/' (all of memory)."
-            },
-            regex: {
-              type: "boolean",
-              description: "If true, `query` is interpreted as a regex. Default false (literal substring)."
-            },
-            ignoreCase: {
-              type: "boolean",
-              description: "Case-insensitive match. Default true."
-            },
-            limit: {
-              type: "integer",
-              minimum: 1,
-              maximum: 100,
-              description: "Max rows returned per table. Default 20."
+        });
+        pluginApi.registerCommand({
+          name: "hivemind_autoupdate",
+          description: "Toggle Hivemind auto-update on/off",
+          acceptsArgs: true,
+          handler: async (ctx) => {
+            const arg = ctx.args?.trim().toLowerCase();
+            let setTo;
+            if (arg === "on" || arg === "true" || arg === "enable") setTo = true;
+            else if (arg === "off" || arg === "false" || arg === "disable") setTo = false;
+            const { toggleAutoUpdateConfig } = await loadSetupConfig();
+            const result = toggleAutoUpdateConfig(setTo);
+            if (result.status === "error") {
+              return { text: `\u26A0\uFE0F Could not update auto-update setting: ${result.error}` };
             }
-          },
-          required: ["query"]
-        },
-        execute: async (_toolCallId, rawParams) => {
-          const params = rawParams;
-          const dl = await getApi();
-          if (!dl) {
             return {
-              content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }]
+              text: result.newValue ? "\u2705 Auto-update is ON. Hivemind will install new versions automatically when the gateway starts." : "\u23F8\uFE0F Auto-update is OFF. Run /hivemind_update manually to install new versions."
             };
           }
-          const targetPath = normalizeVirtualPath(params.path);
-          const grepParams = {
-            pattern: params.query,
-            ignoreCase: params.ignoreCase !== false,
-            wordMatch: false,
-            filesOnly: false,
-            countOnly: false,
-            lineNumber: false,
-            invertMatch: false,
-            fixedString: params.regex !== true
-          };
-          const searchOpts = buildGrepSearchOptions(grepParams, targetPath);
-          searchOpts.limit = Math.min(Math.max(params.limit ?? 20, 1), 100);
-          const t0 = Date.now();
-          try {
-            const rawRows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
-            const matchedRows = searchOpts.contentScanOnly ? (() => {
-              const re = compileGrepRegex(grepParams);
-              return rawRows.filter((r) => re.test(normalizeContent(r.path, r.content)));
-            })() : rawRows;
-            pluginApi.logger.info?.(`hivemind_search "${params.query.slice(0, 60)}" \u2192 ${matchedRows.length}/${rawRows.length} hits in ${Date.now() - t0}ms`);
-            if (matchedRows.length === 0) {
-              return { content: [{ type: "text", text: `No memory matches for "${params.query}" under ${targetPath}.` }] };
+        });
+        pluginApi.registerTool({
+          name: "hivemind_search",
+          label: "Hivemind Search",
+          description: "Search Hivemind shared memory (summaries + past session turns) for keywords, phrases, or regex. Returns matching path + snippet pairs from BOTH the memory and sessions tables. Use this FIRST when the user asks about past work, decisions, people, or anything that might live in memory.",
+          parameters: {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              query: {
+                type: "string",
+                minLength: 1,
+                description: "Search text. Treated as a literal substring by default; set `regex: true` to use regex metacharacters."
+              },
+              path: {
+                type: "string",
+                description: "Optional virtual path prefix to scope the search, e.g. '/summaries/' or '/sessions/alice/'. Defaults to '/' (all of memory)."
+              },
+              regex: {
+                type: "boolean",
+                description: "If true, `query` is interpreted as a regex. Default false (literal substring)."
+              },
+              ignoreCase: {
+                type: "boolean",
+                description: "Case-insensitive match. Default true."
+              },
+              limit: {
+                type: "integer",
+                minimum: 1,
+                maximum: 100,
+                description: "Max rows returned per table. Default 20."
+              }
+            },
+            required: ["query"]
+          },
+          execute: async (_toolCallId, rawParams) => {
+            const params = rawParams;
+            const dl = await getApi();
+            if (!dl) {
+              return {
+                content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }]
+              };
             }
-            const text = matchedRows.map((r, i) => {
-              const body = normalizeContent(r.path, r.content);
-              return `${i + 1}. ${r.path}
+            const targetPath = normalizeVirtualPath(params.path);
+            const grepParams = {
+              pattern: params.query,
+              ignoreCase: params.ignoreCase !== false,
+              wordMatch: false,
+              filesOnly: false,
+              countOnly: false,
+              lineNumber: false,
+              invertMatch: false,
+              fixedString: params.regex !== true
+            };
+            const searchOpts = buildGrepSearchOptions(grepParams, targetPath);
+            searchOpts.limit = Math.min(Math.max(params.limit ?? 20, 1), 100);
+            const t0 = Date.now();
+            try {
+              const rawRows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
+              const matchedRows = searchOpts.contentScanOnly ? (() => {
+                const re = compileGrepRegex(grepParams);
+                return rawRows.filter((r) => re.test(normalizeContent(r.path, r.content)));
+              })() : rawRows;
+              pluginApi.logger.info?.(`hivemind_search "${params.query.slice(0, 60)}" \u2192 ${matchedRows.length}/${rawRows.length} hits in ${Date.now() - t0}ms`);
+              if (matchedRows.length === 0) {
+                return { content: [{ type: "text", text: `No memory matches for "${params.query}" under ${targetPath}.` }] };
+              }
+              const text = matchedRows.map((r, i) => {
+                const body = normalizeContent(r.path, r.content);
+                return `${i + 1}. ${r.path}
 ${body.slice(0, 500)}`;
-            }).join("\n\n");
-            return { content: [{ type: "text", text }], details: { hits: matchedRows.length, path: targetPath } };
-          } catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            pluginApi.logger.error(`hivemind_search failed: ${msg}`);
-            return { content: [{ type: "text", text: `Search failed: ${msg}` }] };
-          }
-        }
-      });
-      pluginApi.registerTool({
-        name: "hivemind_read",
-        label: "Hivemind Read",
-        description: "Read the full content of a specific Hivemind memory path (e.g. '/summaries/alice/abc.md' or '/sessions/alice/alice_org_ws_xyz.jsonl' or '/index.md'). Use this after hivemind_search to drill into a hit, or after hivemind_index to fetch a specific session.",
-        parameters: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            path: {
-              type: "string",
-              minLength: 1,
-              description: "Virtual path under /summaries/, /sessions/, or '/index.md' for the memory index."
+              }).join("\n\n");
+              return { content: [{ type: "text", text }], details: { hits: matchedRows.length, path: targetPath } };
+            } catch (err) {
+              const msg = err instanceof Error ? err.message : String(err);
+              pluginApi.logger.error(`hivemind_search failed: ${msg}`);
+              return { content: [{ type: "text", text: `Search failed: ${msg}` }] };
             }
-          },
-          required: ["path"]
-        },
-        execute: async (_toolCallId, rawParams) => {
-          const params = rawParams;
-          const dl = await getApi();
-          if (!dl) {
-            return { content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }] };
           }
-          const virtualPath = normalizeVirtualPath(params.path);
-          try {
-            const content = await readVirtualPathContent(dl, memoryTable, sessionsTable, virtualPath);
-            if (content === null) {
-              return { content: [{ type: "text", text: `No content at ${virtualPath}.` }] };
+        });
+        pluginApi.registerTool({
+          name: "hivemind_read",
+          label: "Hivemind Read",
+          description: "Read the full content of a specific Hivemind memory path (e.g. '/summaries/alice/abc.md' or '/sessions/alice/alice_org_ws_xyz.jsonl' or '/index.md'). Use this after hivemind_search to drill into a hit, or after hivemind_index to fetch a specific session.",
+          parameters: {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              path: {
+                type: "string",
+                minLength: 1,
+                description: "Virtual path under /summaries/, /sessions/, or '/index.md' for the memory index."
+              }
+            },
+            required: ["path"]
+          },
+          execute: async (_toolCallId, rawParams) => {
+            const params = rawParams;
+            const dl = await getApi();
+            if (!dl) {
+              return { content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }] };
+            }
+            const virtualPath = normalizeVirtualPath(params.path);
+            try {
+              const content = await readVirtualPathContent(dl, memoryTable, sessionsTable, virtualPath);
+              if (content === null) {
+                return { content: [{ type: "text", text: `No content at ${virtualPath}.` }] };
+              }
+              return { content: [{ type: "text", text: content }], details: { path: virtualPath } };
+            } catch (err) {
+              const msg = err instanceof Error ? err.message : String(err);
+              pluginApi.logger.error(`hivemind_read failed: ${msg}`);
+              return { content: [{ type: "text", text: `Read failed: ${msg}` }] };
             }
-            return { content: [{ type: "text", text: content }], details: { path: virtualPath } };
-          } catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            pluginApi.logger.error(`hivemind_read failed: ${msg}`);
-            return { content: [{ type: "text", text: `Read failed: ${msg}` }] };
-          }
-        }
-      });
-      pluginApi.registerTool({
-        name: "hivemind_index",
-        label: "Hivemind Index",
-        description: "List every summary and session available in Hivemind (with paths, dates, descriptions). Use this when the user asks 'what's in memory?' or you don't know where to start looking.",
-        parameters: {
-          type: "object",
-          additionalProperties: false,
-          properties: {}
-        },
-        execute: async () => {
-          const dl = await getApi();
-          if (!dl) {
-            return { content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }] };
-          }
-          try {
-            const text = await readVirtualPathContent(dl, memoryTable, sessionsTable, "/index.md");
-            return { content: [{ type: "text", text: text ?? "(memory is empty)" }] };
-          } catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            pluginApi.logger.error(`hivemind_index failed: ${msg}`);
-            return { content: [{ type: "text", text: `Index build failed: ${msg}` }] };
           }
-        }
-      });
-      pluginApi.registerMemoryCorpusSupplement({
-        search: async ({ query, maxResults }) => {
-          const dl = await getApi();
-          if (!dl) return [];
-          const grepParams = {
-            pattern: query,
-            ignoreCase: true,
-            wordMatch: false,
-            filesOnly: false,
-            countOnly: false,
-            lineNumber: false,
-            invertMatch: false,
-            fixedString: true
-          };
-          const searchOpts = buildGrepSearchOptions(grepParams, "/");
-          searchOpts.limit = Math.min(Math.max(maxResults ?? 10, 1), 50);
-          try {
-            const rows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
-            return rows.map((r, i) => ({
-              path: r.path,
-              snippet: normalizeContent(r.path, r.content).slice(0, 400),
-              corpus: "hivemind",
-              kind: r.path.startsWith("/summaries/") ? "summary" : "session",
-              score: r.path.startsWith("/summaries/") ? 0.8 - i * 5e-3 : 0.6 - i * 5e-3
-            }));
-          } catch {
-            return [];
+        });
+        pluginApi.registerTool({
+          name: "hivemind_index",
+          label: "Hivemind Index",
+          description: "List every summary and session available in Hivemind (with paths, dates, descriptions). Use this when the user asks 'what's in memory?' or you don't know where to start looking.",
+          parameters: {
+            type: "object",
+            additionalProperties: false,
+            properties: {}
+          },
+          execute: async () => {
+            const dl = await getApi();
+            if (!dl) {
+              return { content: [{ type: "text", text: "Not logged in. Run /hivemind_login first." }] };
+            }
+            try {
+              const text = await readVirtualPathContent(dl, memoryTable, sessionsTable, "/index.md");
+              return { content: [{ type: "text", text: text ?? "(memory is empty)" }] };
+            } catch (err) {
+              const msg = err instanceof Error ? err.message : String(err);
+              pluginApi.logger.error(`hivemind_index failed: ${msg}`);
+              return { content: [{ type: "text", text: `Index build failed: ${msg}` }] };
+            }
           }
-        },
-        get: async ({ lookup }) => {
-          const dl = await getApi();
-          if (!dl) return null;
-          try {
-            const content = await readVirtualPathContent(dl, memoryTable, sessionsTable, normalizeVirtualPath(lookup));
-            return content === null ? null : { path: lookup, content };
-          } catch {
-            return null;
+        });
+        pluginApi.registerMemoryCorpusSupplement({
+          search: async ({ query, maxResults }) => {
+            const dl = await getApi();
+            if (!dl) return [];
+            const grepParams = {
+              pattern: query,
+              ignoreCase: true,
+              wordMatch: false,
+              filesOnly: false,
+              countOnly: false,
+              lineNumber: false,
+              invertMatch: false,
+              fixedString: true
+            };
+            const searchOpts = buildGrepSearchOptions(grepParams, "/");
+            searchOpts.limit = Math.min(Math.max(maxResults ?? 10, 1), 50);
+            try {
+              const rows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
+              return rows.map((r, i) => ({
+                path: r.path,
+                snippet: normalizeContent(r.path, r.content).slice(0, 400),
+                corpus: "hivemind",
+                kind: r.path.startsWith("/summaries/") ? "summary" : "session",
+                score: r.path.startsWith("/summaries/") ? 0.8 - i * 5e-3 : 0.6 - i * 5e-3
+              }));
+            } catch {
+              return [];
+            }
+          },
+          get: async ({ lookup }) => {
+            const dl = await getApi();
+            if (!dl) return null;
+            try {
+              const content = await readVirtualPathContent(dl, memoryTable, sessionsTable, normalizeVirtualPath(lookup));
+              return content === null ? null : { path: lookup, content };
+            } catch {
+              return null;
+            }
           }
+        });
+        const config = pluginApi.pluginConfig ?? {};
+        const logger = pluginApi.logger;
+        const hook = (event, handler) => {
+          pluginApi.on(event, handler);
+        };
+        if (config.autoUpdate !== false) {
+          (async () => {
+            try {
+              const current = getInstalledVersion();
+              if (!current) return;
+              const res = await fetch(VERSION_URL, { signal: AbortSignal.timeout(3e3) });
+              if (!res.ok) return;
+              const latest = extractLatestVersion(await res.json());
+              if (!latest || !isNewer(latest, current)) return;
+              pendingUpdate = { current, latest };
+              logger.info?.(`Hivemind update available: ${current} \u2192 ${latest}. Agent will be prompted to install when user asks.`);
+            } catch (err) {
+              logger.error(`Auto-update check failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+          })();
         }
-      });
-      const config = pluginApi.pluginConfig ?? {};
-      const logger = pluginApi.logger;
-      const hook = (event, handler) => {
-        pluginApi.on(event, handler);
-      };
-      if (config.autoUpdate !== false) {
-        (async () => {
-          try {
-            const current = getInstalledVersion();
-            if (!current) return;
-            const res = await fetch(VERSION_URL, { signal: AbortSignal.timeout(3e3) });
-            if (!res.ok) return;
-            const latest = extractLatestVersion(await res.json());
-            if (!latest || !isNewer(latest, current)) return;
-            pendingUpdate = { current, latest };
-            logger.info?.(`Hivemind update available: ${current} \u2192 ${latest}. Agent will be prompted to install when user asks.`);
-          } catch (err) {
-            logger.error(`Auto-update check failed: ${err instanceof Error ? err.message : String(err)}`);
-          }
-        })();
-      }
-      if ('---\nname: hivemind\ndescription: Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.\nallowed-tools: hivemind_search, hivemind_read, hivemind_index\n---\n\n# Hivemind Memory\n\nYou have TWO memory sources. ALWAYS check BOTH when the user asks you to recall, remember, or look up ANY information:\n\n1. **Your built-in memory** \u2014 personal per-project notes from the host agent\n2. **Hivemind global memory** \u2014 global memory shared across all sessions, users, and agents in the org, accessed via the tools below\n\n## Memory Structure\n\n```\n/index.md                           \u2190 START HERE \u2014 table of all sessions\n/summaries/\n  <username>/\n    <session-id>.md                 \u2190 AI-generated wiki summary per session\n/sessions/\n  <username>/\n    <user_org_ws_slug>.jsonl        \u2190 raw session data\n```\n\n## How to Search\n\n1. **First**: call `hivemind_index()` \u2014 table of all sessions with dates, projects, descriptions\n2. **If you need details**: call `hivemind_read("/summaries/<username>/<session>.md")`\n3. **If you need raw data**: call `hivemind_read("/sessions/<username>/<file>.jsonl")`\n4. **Keyword search**: call `hivemind_search("keyword")` \u2014 substring search across both summaries and sessions, returns `path:line` hits\n\nDo NOT jump straight to reading raw JSONL files. Always start with `hivemind_index` and summaries.\n\n## Organization Management\n\n- `/hivemind_login` \u2014 sign in via device flow\n- `/hivemind_capture` \u2014 toggle capture on/off (off = no data sent)\n- `/hivemind_whoami` \u2014 show current org and workspace\n- `/hivemind_orgs` \u2014 list organizations\n- `/hivemind_switch_org <name-or-id>` \u2014 switch organization\n- `/hivemind_workspaces` \u2014 list workspaces\n- `/hivemind_switch_workspace <id>` \u2014 switch workspace\n- `/hivemind_version` \u2014 show installed version and check ClawHub for updates\n- `/hivemind_update` \u2014 shows how to install (ask the agent, or run `openclaw plugins update hivemind` in your terminal)\n- `/hivemind_autoupdate [on|off]` \u2014 toggle the agent-facing update nudge (on by default: when a newer version is available, the agent is prompted to install it via `exec` if you ask to update)\n\n## Limits\n\nDo NOT delegate to subagents when reading Hivemind memory. If a tool call returns empty after 2 attempts, skip it and move on. Report what you found rather than exhaustively retrying.\n\n## Getting Started\n\nAfter installing the plugin:\n1. Run `/hivemind_login` to authenticate\n2. Run `/hivemind_setup` to enable the memory tools in your openclaw allowlist (one-time, per install)\n3. Start using memory \u2014 ask questions, the agent automatically captures and searches\n\n## Sharing memory\n\nMultiple agents share memory when users are in the same Activeloop organization.\n'.length > 0) {
-        const allowlistNudge = detectAllowlistMissing() ? "\n\n<hivemind-setup-needed>\nThe user hasn't run /hivemind_setup yet, so hivemind_search, hivemind_read, and hivemind_index are NOT available to you. If they ask about memory and you can't help, tell them to run /hivemind_setup to enable Hivemind memory tools.\n</hivemind-setup-needed>\n" : "";
-        hook("before_prompt_build", async () => {
-          const updateNudge = pendingUpdate ? `
+        if ('---\nname: hivemind\ndescription: Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.\nallowed-tools: hivemind_search, hivemind_read, hivemind_index\n---\n\n# Hivemind Memory\n\nYou have TWO memory sources. ALWAYS check BOTH when the user asks you to recall, remember, or look up ANY information:\n\n1. **Your built-in memory** \u2014 personal per-project notes from the host agent\n2. **Hivemind global memory** \u2014 global memory shared across all sessions, users, and agents in the org, accessed via the tools below\n\n## Memory Structure\n\n```\n/index.md                           \u2190 START HERE \u2014 table of all sessions\n/summaries/\n  <username>/\n    <session-id>.md                 \u2190 AI-generated wiki summary per session\n/sessions/\n  <username>/\n    <user_org_ws_slug>.jsonl        \u2190 raw session data\n```\n\n## How to Search\n\n1. **First**: call `hivemind_index()` \u2014 table of all sessions with dates, projects, descriptions\n2. **If you need details**: call `hivemind_read("/summaries/<username>/<session>.md")`\n3. **If you need raw data**: call `hivemind_read("/sessions/<username>/<file>.jsonl")`\n4. **Keyword search**: call `hivemind_search("keyword")` \u2014 substring search across both summaries and sessions, returns `path:line` hits\n\nDo NOT jump straight to reading raw JSONL files. Always start with `hivemind_index` and summaries.\n\n## Organization Management\n\n- `/hivemind_login` \u2014 sign in via device flow\n- `/hivemind_capture` \u2014 toggle capture on/off (off = no data sent)\n- `/hivemind_whoami` \u2014 show current org and workspace\n- `/hivemind_orgs` \u2014 list organizations\n- `/hivemind_switch_org <name-or-id>` \u2014 switch organization\n- `/hivemind_workspaces` \u2014 list workspaces\n- `/hivemind_switch_workspace <id>` \u2014 switch workspace\n- `/hivemind_version` \u2014 show installed version and check ClawHub for updates\n- `/hivemind_update` \u2014 shows how to install (ask the agent, or run `openclaw plugins update hivemind` in your terminal)\n- `/hivemind_autoupdate [on|off]` \u2014 toggle the agent-facing update nudge (on by default: when a newer version is available, the agent is prompted to install it via `exec` if you ask to update)\n\n## Limits\n\nDo NOT delegate to subagents when reading Hivemind memory. If a tool call returns empty after 2 attempts, skip it and move on. Report what you found rather than exhaustively retrying.\n\n## Getting Started\n\nAfter installing the plugin:\n1. Run `/hivemind_login` to authenticate\n2. Run `/hivemind_setup` to enable the memory tools in your openclaw allowlist (one-time, per install)\n3. Start using memory \u2014 ask questions, the agent automatically captures and searches\n\n## Sharing memory\n\nMultiple agents share memory when users are in the same Activeloop organization.\n'.length > 0) {
+          const setupConfigPromise = loadSetupConfig();
+          hook("before_prompt_build", async () => {
+            const { detectAllowlistMissing } = await setupConfigPromise;
+            const allowlistNudge = detectAllowlistMissing() ? "\n\n<hivemind-setup-needed>\nThe user hasn't run /hivemind_setup yet, so hivemind_search, hivemind_read, and hivemind_index are NOT available to you. If they ask about memory and you can't help, tell them to run /hivemind_setup to enable Hivemind memory tools.\n</hivemind-setup-needed>\n" : "";
+            const updateNudge = pendingUpdate ? `
 
 <hivemind-update-available>
 A newer Hivemind version is available: ${pendingUpdate.current} \u2192 ${pendingUpdate.latest}. Install command: \`openclaw plugins update hivemind\`. The gateway reloads the plugin after install.
 </hivemind-update-available>
 ` : "";
-          return {
-            prependSystemContext: allowlistNudge + updateNudge + '\n\n<hivemind-skill>\n---\nname: hivemind\ndescription: Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.\nallowed-tools: hivemind_search, hivemind_read, hivemind_index\n---\n\n# Hivemind Memory\n\nYou have TWO memory sources. ALWAYS check BOTH when the user asks you to recall, remember, or look up ANY information:\n\n1. **Your built-in memory** \u2014 personal per-project notes from the host agent\n2. **Hivemind global memory** \u2014 global memory shared across all sessions, users, and agents in the org, accessed via the tools below\n\n## Memory Structure\n\n```\n/index.md                           \u2190 START HERE \u2014 table of all sessions\n/summaries/\n  <username>/\n    <session-id>.md                 \u2190 AI-generated wiki summary per session\n/sessions/\n  <username>/\n    <user_org_ws_slug>.jsonl        \u2190 raw session data\n```\n\n## How to Search\n\n1. **First**: call `hivemind_index()` \u2014 table of all sessions with dates, projects, descriptions\n2. **If you need details**: call `hivemind_read("/summaries/<username>/<session>.md")`\n3. **If you need raw data**: call `hivemind_read("/sessions/<username>/<file>.jsonl")`\n4. **Keyword search**: call `hivemind_search("keyword")` \u2014 substring search across both summaries and sessions, returns `path:line` hits\n\nDo NOT jump straight to reading raw JSONL files. Always start with `hivemind_index` and summaries.\n\n## Organization Management\n\n- `/hivemind_login` \u2014 sign in via device flow\n- `/hivemind_capture` \u2014 toggle capture on/off (off = no data sent)\n- `/hivemind_whoami` \u2014 show current org and workspace\n- `/hivemind_orgs` \u2014 list organizations\n- `/hivemind_switch_org <name-or-id>` \u2014 switch organization\n- `/hivemind_workspaces` \u2014 list workspaces\n- `/hivemind_switch_workspace <id>` \u2014 switch workspace\n- `/hivemind_version` \u2014 show installed version and check ClawHub for updates\n- `/hivemind_update` \u2014 shows how to install (ask the agent, or run `openclaw plugins update hivemind` in your terminal)\n- `/hivemind_autoupdate [on|off]` \u2014 toggle the agent-facing update nudge (on by default: when a newer version is available, the agent is prompted to install it via `exec` if you ask to update)\n\n## Limits\n\nDo NOT delegate to subagents when reading Hivemind memory. If a tool call returns empty after 2 attempts, skip it and move on. Report what you found rather than exhaustively retrying.\n\n## Getting Started\n\nAfter installing the plugin:\n1. Run `/hivemind_login` to authenticate\n2. Run `/hivemind_setup` to enable the memory tools in your openclaw allowlist (one-time, per install)\n3. Start using memory \u2014 ask questions, the agent automatically captures and searches\n\n## Sharing memory\n\nMultiple agents share memory when users are in the same Activeloop organization.\n\n</hivemind-skill>\n'
-          };
-        });
-      }
-      if (config.autoRecall !== false) {
-        hook("before_agent_start", async (event) => {
-          if (!event.prompt || event.prompt.length < 5) return;
-          try {
-            const dl = await getApi();
-            if (!dl && authUrl) {
-              return {
-                prependContext: `
+            return {
+              prependSystemContext: allowlistNudge + updateNudge + '\n\n<hivemind-skill>\n---\nname: hivemind\ndescription: Global team and org memory powered by Activeloop. ALWAYS check BOTH built-in memory AND Hivemind memory when recalling information.\nallowed-tools: hivemind_search, hivemind_read, hivemind_index\n---\n\n# Hivemind Memory\n\nYou have TWO memory sources. ALWAYS check BOTH when the user asks you to recall, remember, or look up ANY information:\n\n1. **Your built-in memory** \u2014 personal per-project notes from the host agent\n2. **Hivemind global memory** \u2014 global memory shared across all sessions, users, and agents in the org, accessed via the tools below\n\n## Memory Structure\n\n```\n/index.md                           \u2190 START HERE \u2014 table of all sessions\n/summaries/\n  <username>/\n    <session-id>.md                 \u2190 AI-generated wiki summary per session\n/sessions/\n  <username>/\n    <user_org_ws_slug>.jsonl        \u2190 raw session data\n```\n\n## How to Search\n\n1. **First**: call `hivemind_index()` \u2014 table of all sessions with dates, projects, descriptions\n2. **If you need details**: call `hivemind_read("/summaries/<username>/<session>.md")`\n3. **If you need raw data**: call `hivemind_read("/sessions/<username>/<file>.jsonl")`\n4. **Keyword search**: call `hivemind_search("keyword")` \u2014 substring search across both summaries and sessions, returns `path:line` hits\n\nDo NOT jump straight to reading raw JSONL files. Always start with `hivemind_index` and summaries.\n\n## Organization Management\n\n- `/hivemind_login` \u2014 sign in via device flow\n- `/hivemind_capture` \u2014 toggle capture on/off (off = no data sent)\n- `/hivemind_whoami` \u2014 show current org and workspace\n- `/hivemind_orgs` \u2014 list organizations\n- `/hivemind_switch_org <name-or-id>` \u2014 switch organization\n- `/hivemind_workspaces` \u2014 list workspaces\n- `/hivemind_switch_workspace <id>` \u2014 switch workspace\n- `/hivemind_version` \u2014 show installed version and check ClawHub for updates\n- `/hivemind_update` \u2014 shows how to install (ask the agent, or run `openclaw plugins update hivemind` in your terminal)\n- `/hivemind_autoupdate [on|off]` \u2014 toggle the agent-facing update nudge (on by default: when a newer version is available, the agent is prompted to install it via `exec` if you ask to update)\n\n## Limits\n\nDo NOT delegate to subagents when reading Hivemind memory. If a tool call returns empty after 2 attempts, skip it and move on. Report what you found rather than exhaustively retrying.\n\n## Getting Started\n\nAfter installing the plugin:\n1. Run `/hivemind_login` to authenticate\n2. Run `/hivemind_setup` to enable the memory tools in your openclaw allowlist (one-time, per install)\n3. Start using memory \u2014 ask questions, the agent automatically captures and searches\n\n## Sharing memory\n\nMultiple agents share memory when users are in the same Activeloop organization.\n\n</hivemind-skill>\n'
+            };
+          });
+        }
+        if (config.autoRecall !== false) {
+          hook("before_agent_start", async (event) => {
+            if (!event.prompt || event.prompt.length < 5) return;
+            try {
+              const dl = await getApi();
+              if (!dl && authUrl) {
+                return {
+                  prependContext: `
 
 IMPORTANT: The user needs to authenticate with Hivemind. Include this link in your reply: ${authUrl}
 Tell them to click it and sign in, then send another message.
 `
-              };
-            }
-            if (!dl) return;
-            if (justAuthenticated) {
-              justAuthenticated = false;
-              const creds2 = loadCredentials();
-              const orgName = creds2?.orgName ?? creds2?.orgId ?? "unknown";
-              return { prependContext: `
+                };
+              }
+              if (!dl) return;
+              if (justAuthenticated) {
+                justAuthenticated = false;
+                const creds2 = await loadCredentials2();
+                const orgName = creds2?.orgName ?? creds2?.orgId ?? "unknown";
+                return { prependContext: `
 
 \u{1F41D} Welcome to Hivemind!
 
@@ -1607,106 +1656,107 @@ Get started:
 
 One brain for every agent on your team.
 ` };
-            }
-            const keywords = extractKeywords(event.prompt);
-            if (!keywords.length) return;
-            const grepParams = {
-              pattern: keywords.join(" "),
-              ignoreCase: true,
-              wordMatch: false,
-              filesOnly: false,
-              countOnly: false,
-              lineNumber: false,
-              invertMatch: false,
-              fixedString: true
-            };
-            const searchOpts = buildGrepSearchOptions(grepParams, "/");
-            searchOpts.limit = 10;
-            const rows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
-            if (!rows.length) return;
-            const recalled = rows.map((r) => {
-              const body = normalizeContent(r.path, r.content);
-              return `[${r.path}] ${body.slice(0, 400)}`;
-            }).join("\n\n");
-            logger.info?.(`Auto-recalled ${rows.length} memories`);
-            const instruction = "These are raw Hivemind search hits from prior sessions. Each hit is prefixed with its path (e.g. `/summaries/<username>/...`). Different usernames are different people \u2014 do NOT merge, alias, or conflate them. If you need more detail, call `hivemind_search` with a more specific query or `hivemind_read` on a specific path. If these hits don't answer the question, say so rather than guessing.";
-            return {
-              prependContext: "\n\n<recalled-memories>\n" + instruction + "\n\n" + recalled + "\n</recalled-memories>\n"
-            };
-          } catch (err) {
-            logger.error(`Auto-recall failed: ${err instanceof Error ? err.message : String(err)}`);
-          }
-        });
-      }
-      if (config.autoCapture !== false) {
-        hook("agent_end", async (event) => {
-          const ev = event;
-          if (!captureEnabled || !ev.success || !ev.messages?.length) return;
-          try {
-            const dl = await getApi();
-            if (!dl) return;
-            const cfg = loadConfig();
-            if (!cfg) return;
-            const sid = ev.session_id || fallbackSessionId;
-            const lastCount = capturedCounts.get(sid) ?? 0;
-            const newMessages = ev.messages.slice(lastCount);
-            capturedCounts.set(sid, ev.messages.length);
-            if (!newMessages.length) return;
-            const sessionPath = buildSessionPath(cfg, sid);
-            const filename = sessionPath.split("/").pop() ?? "";
-            const projectName = ev.channel || "openclaw";
-            for (const msg of newMessages) {
-              if (msg.role !== "user" && msg.role !== "assistant") continue;
-              let text = "";
-              if (typeof msg.content === "string") {
-                text = msg.content;
-              } else if (Array.isArray(msg.content)) {
-                text = msg.content.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
               }
-              if (!text.trim()) continue;
-              const ts = (/* @__PURE__ */ new Date()).toISOString();
-              const entry = {
-                id: crypto.randomUUID(),
-                type: msg.role === "user" ? "user_message" : "assistant_message",
-                session_id: sid,
-                content: text,
-                timestamp: ts
+              const keywords = extractKeywords(event.prompt);
+              if (!keywords.length) return;
+              const grepParams = {
+                pattern: keywords.join(" "),
+                ignoreCase: true,
+                wordMatch: false,
+                filesOnly: false,
+                countOnly: false,
+                lineNumber: false,
+                invertMatch: false,
+                fixedString: true
               };
-              const line = JSON.stringify(entry);
-              const jsonForSql = line.replace(/'/g, "''");
-              const insertSql = `INSERT INTO "${sessionsTable}" (id, path, filename, message, author, size_bytes, project, description, agent, creation_date, last_update_date) VALUES ('${crypto.randomUUID()}', '${sqlStr(sessionPath)}', '${sqlStr(filename)}', '${jsonForSql}'::jsonb, '${sqlStr(cfg.userName)}', ${Buffer.byteLength(line, "utf-8")}, '${sqlStr(projectName)}', '${sqlStr(msg.role)}', 'openclaw', '${ts}', '${ts}')`;
-              try {
-                await dl.query(insertSql);
-              } catch (e) {
-                if (e.message?.includes("permission denied") || e.message?.includes("does not exist")) {
-                  await dl.ensureSessionsTable(sessionsTable);
+              const searchOpts = buildGrepSearchOptions(grepParams, "/");
+              searchOpts.limit = 10;
+              const rows = await searchDeeplakeTables(dl, memoryTable, sessionsTable, searchOpts);
+              if (!rows.length) return;
+              const recalled = rows.map((r) => {
+                const body = normalizeContent(r.path, r.content);
+                return `[${r.path}] ${body.slice(0, 400)}`;
+              }).join("\n\n");
+              logger.info?.(`Auto-recalled ${rows.length} memories`);
+              const instruction = "These are raw Hivemind search hits from prior sessions. Each hit is prefixed with its path (e.g. `/summaries/<username>/...`). Different usernames are different people \u2014 do NOT merge, alias, or conflate them. If you need more detail, call `hivemind_search` with a more specific query or `hivemind_read` on a specific path. If these hits don't answer the question, say so rather than guessing.";
+              return {
+                prependContext: "\n\n<recalled-memories>\n" + instruction + "\n\n" + recalled + "\n</recalled-memories>\n"
+              };
+            } catch (err) {
+              logger.error(`Auto-recall failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+          });
+        }
+        if (config.autoCapture !== false) {
+          hook("agent_end", async (event) => {
+            const ev = event;
+            if (!captureEnabled || !ev.success || !ev.messages?.length) return;
+            try {
+              const dl = await getApi();
+              if (!dl) return;
+              const cfg = await loadConfig();
+              if (!cfg) return;
+              const sid = ev.session_id || fallbackSessionId;
+              const lastCount = capturedCounts.get(sid) ?? 0;
+              const newMessages = ev.messages.slice(lastCount);
+              capturedCounts.set(sid, ev.messages.length);
+              if (!newMessages.length) return;
+              const sessionPath = buildSessionPath(cfg, sid);
+              const filename = sessionPath.split("/").pop() ?? "";
+              const projectName = ev.channel || "openclaw";
+              for (const msg of newMessages) {
+                if (msg.role !== "user" && msg.role !== "assistant") continue;
+                let text = "";
+                if (typeof msg.content === "string") {
+                  text = msg.content;
+                } else if (Array.isArray(msg.content)) {
+                  text = msg.content.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("\n");
+                }
+                if (!text.trim()) continue;
+                const ts = (/* @__PURE__ */ new Date()).toISOString();
+                const entry = {
+                  id: crypto.randomUUID(),
+                  type: msg.role === "user" ? "user_message" : "assistant_message",
+                  session_id: sid,
+                  content: text,
+                  timestamp: ts
+                };
+                const line = JSON.stringify(entry);
+                const jsonForSql = line.replace(/'/g, "''");
+                const insertSql = `INSERT INTO "${sessionsTable}" (id, path, filename, message, author, size_bytes, project, description, agent, creation_date, last_update_date) VALUES ('${crypto.randomUUID()}', '${sqlStr(sessionPath)}', '${sqlStr(filename)}', '${jsonForSql}'::jsonb, '${sqlStr(cfg.userName)}', ${Buffer.byteLength(line, "utf-8")}, '${sqlStr(projectName)}', '${sqlStr(msg.role)}', 'openclaw', '${ts}', '${ts}')`;
+                try {
                   await dl.query(insertSql);
-                } else {
-                  throw e;
+                } catch (e) {
+                  if (e.message?.includes("permission denied") || e.message?.includes("does not exist")) {
+                    await dl.ensureSessionsTable(sessionsTable);
+                    await dl.query(insertSql);
+                  } else {
+                    throw e;
+                  }
                 }
               }
+              logger.info?.(`Auto-captured ${newMessages.length} messages`);
+            } catch (err) {
+              logger.error(`Auto-capture failed: ${err instanceof Error ? err.message : String(err)}`);
             }
-            logger.info?.(`Auto-captured ${newMessages.length} messages`);
-          } catch (err) {
-            logger.error(`Auto-capture failed: ${err instanceof Error ? err.message : String(err)}`);
-          }
-        });
-      }
-      const creds = loadCredentials();
-      if (!creds?.token) {
-        logger.info?.("Hivemind installed. Run /hivemind_login to authenticate and activate shared memory.");
-        if (!authPending) {
-          requestAuth().catch((err) => {
-            logger.error(`Pre-auth failed: ${err instanceof Error ? err.message : String(err)}`);
           });
         }
+        const creds = await loadCredentials2();
+        if (!creds?.token) {
+          logger.info?.("Hivemind installed. Run /hivemind_login to authenticate and activate shared memory.");
+          if (!authPending) {
+            requestAuth().catch((err) => {
+              logger.error(`Pre-auth failed: ${err instanceof Error ? err.message : String(err)}`);
+            });
+          }
+        }
+        checkForUpdate(logger).catch(() => {
+        });
+        logger.info?.("Hivemind plugin registered");
+      } catch (err) {
+        pluginApi.logger?.error?.(`Hivemind register failed: ${err instanceof Error ? err.message : String(err)}`);
       }
-      checkForUpdate(logger).catch(() => {
-      });
-      logger.info?.("Hivemind plugin registered");
-    } catch (err) {
-      pluginApi.logger?.error?.(`Hivemind register failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
+    })();
   }
 });
 export {