@deeplake/hivemind 0.7.71 → 0.7.72

package/.claude-plugin/marketplace.json

@@ -6,18 +6,18 @@
   },
   "metadata": {
     "description": "Cloud-backed persistent shared memory for AI agents powered by Deeplake",
-    "version": "0.7.71"
+    "version": "0.7.72"
   },
   "plugins": [
     {
       "name": "hivemind",
       "description": "Persistent shared memory powered by Deeplake — captures all session activity and provides cross-session, cross-agent memory search",
-      "version": "0.7.71",
+      "version": "0.7.72",
       "source": {
         "source": "git-subdir",
         "url": "https://github.com/activeloopai/hivemind.git",
         "path": "claude-code",
-        "sha": "709525b85e4594fbbeff7955d566533990c762b6"
+        "sha": "103bb69c8ecb83325c0c3e39029d22691c4f2d4a"
       },
       "homepage": "https://github.com/activeloopai/hivemind"
     }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "hivemind",
   "description": "Cloud-backed persistent memory powered by Deeplake — read, write, and share memory across Claude Code sessions and agents",
-  "version": "0.7.71",
+  "version": "0.7.72",
   "author": {
     "name": "Activeloop",
     "url": "https://deeplake.ai"

package/bundle/cli.js

@@ -11647,7 +11647,7 @@ async function runUpdate(opts = {}) {
   switch (detected.kind) {
     case "npm-global": {
       if (opts.dryRun) {
-        log(`(dry-run) Would run: npm install -g ${PKG_NAME}@latest`);
+        log(`(dry-run) Would run: npm install -g ${PKG_NAME}@${latest}`);
         log(`(dry-run) Would re-run: hivemind install --skip-auth`);
         return 0;
       }
@@ -11658,10 +11658,10 @@ async function runUpdate(opts = {}) {
       try {
         log(`Upgrading via npm\u2026`);
         try {
-          spawn5("npm", ["install", "-g", `${PKG_NAME}@latest`]);
+          spawn5("npm", ["install", "-g", `${PKG_NAME}@${latest}`]);
         } catch (e) {
           warn(`npm install failed: ${e.message}`);
-          warn(`Try running it manually: npm install -g ${PKG_NAME}@latest`);
+          warn(`Try running it manually: npm install -g ${PKG_NAME}@${latest}`);
           return 1;
         }
         log(``);
@@ -11692,7 +11692,7 @@ async function runUpdate(opts = {}) {
       log(``);
       log(`Or install globally so future updates are one command:`);
       log(``);
-      log(`  npm install -g ${PKG_NAME}@latest`);
+      log(`  npm install -g ${PKG_NAME}@${latest}`);
       return 0;
     }
     case "local-dev": {
@@ -11712,7 +11712,7 @@ async function runUpdate(opts = {}) {
         return 0;
       }
       warn(`Could not determine how hivemind was installed (path: ${detected.installDir}).`);
-      warn(`Update manually: npm install -g ${PKG_NAME}@latest`);
+      warn(`Update manually: npm install -g ${PKG_NAME}@${latest}`);
       return 1;
     }
   }

package/codex/bundle/pre-tool-use.js

@@ -52,12 +52,6 @@ var init_index_marker_store = __esm({
   }
 });
 
-// dist/src/hooks/codex/pre-tool-use.js
-import { execFileSync } from "node:child_process";
-import { existsSync as existsSync5 } from "node:fs";
-import { join as join12, dirname as dirname3 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
-
 // dist/src/utils/stdin.js
 function readStdin() {
   return new Promise((resolve3, reject) => {
@@ -3042,12 +3036,13 @@ var SAFE_BUILTINS = /* @__PURE__ */ new Set([
   "du",
   "tree",
   "file",
+  // sed and awk removed: sed supports `-e '1e <cmd>'` (execute shell command)
+  // and awk supports `system()` / `|` pipelines — both enable arbitrary code
+  // execution through the just-bash fallback.
   "grep",
   "egrep",
   "fgrep",
   "rg",
-  "sed",
-  "awk",
   "cut",
   "tr",
   "sort",
@@ -3068,15 +3063,18 @@ var SAFE_BUILTINS = /* @__PURE__ */ new Set([
   "diff",
   "strings",
   "split",
+  // xargs removed: it executes its input as a child command (`… | xargs curl`).
+  // `find` stays because the VFS serves `find -name`, but isSafe() rejects the
+  // command-dispatching `-exec/-execdir/-ok/-okdir` primaries below.
   "find",
-  "xargs",
   "which",
   "jq",
   "yq",
   "xan",
   "base64",
   "od",
-  "tar",
+  // tar removed: --to-command=<cmd> executes an arbitrary program per entry.
+  // env removed: `env <cmd>` runs an arbitrary program.
   "gzip",
   "gunzip",
   "zcat",
@@ -3090,16 +3088,15 @@ var SAFE_BUILTINS = /* @__PURE__ */ new Set([
   "cd",
   "basename",
   "dirname",
-  "env",
   "printenv",
   "hostname",
   "whoami",
+  // timeout and time removed: both are wrappers that run an arbitrary child
+  // command (`timeout 1 curl …`, `time curl …`).
   "date",
   "seq",
   "expr",
   "sleep",
-  "timeout",
-  "time",
   "true",
   "false",
   "test",
@@ -3107,17 +3104,12 @@ var SAFE_BUILTINS = /* @__PURE__ */ new Set([
   "unalias",
   "history",
   "help",
-  "clear",
-  "for",
-  "while",
-  "do",
-  "done",
-  "if",
-  "then",
-  "else",
-  "fi",
-  "case",
-  "esac"
+  "clear"
+  // Shell control keywords removed: as a stage's first token they let a child
+  // command ride in as a later token (`if true; then curl …; fi` splits into a
+  // `then curl …` stage whose leading `then` would otherwise pass). No VFS
+  // handler emulates control flow, so dropping them only sends such commands to
+  // the guidance/deny path — they never reach a real shell.
 ]);
 function stripHeredocBodies(cmd) {
   if (!cmd.includes("<<"))
@@ -3143,9 +3135,11 @@ function stripHeredocBodies(cmd) {
 }
 function isSafe(cmd) {
   const validated = stripHeredocBodies(cmd);
-  if (/\$\(|`|<\(/.test(validated))
+  if (/\$\(|`|<\(|\$'/.test(validated))
     return false;
   const stripped = validated.replace(/'[^']*'/g, "''").replace(/"[^"]*"/g, '""');
+  if (/(?:^|\s)-(?:exec|execdir|ok|okdir)\b/.test(stripped))
+    return false;
   const stages = stripped.split(/\||;|&&|\|\||\n/);
   for (const stage of stages) {
     const firstToken = stage.trim().split(/\s+/)[0] ?? "";
@@ -3154,32 +3148,23 @@ function isSafe(cmd) {
   }
   return true;
 }
+function escapeRe(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var MEMORY_BOUNDARY = "(?![A-Za-z0-9._-])";
+var MEMORY_PREFIX_RE = new RegExp("(?:" + [MEMORY_PATH, TILDE_PATH, HOME_VAR_PATH].map(escapeRe).join("|") + ")" + MEMORY_BOUNDARY);
 function touchesMemory(p) {
-  return p.includes(MEMORY_PATH) || p.includes(TILDE_PATH) || p.includes(HOME_VAR_PATH);
+  return MEMORY_PREFIX_RE.test(p);
 }
 function rewritePaths(cmd) {
-  return cmd.replace(new RegExp(MEMORY_PATH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "/?", "g"), "/").replace(/~\/.deeplake\/memory\/?/g, "/").replace(/\$HOME\/.deeplake\/memory\/?/g, "/").replace(/"\$HOME\/.deeplake\/memory\/?"/g, '"/"');
+  const tail = "(?:\\/|" + MEMORY_BOUNDARY + ")";
+  return cmd.replace(new RegExp(escapeRe(MEMORY_PATH) + tail, "g"), "/").replace(new RegExp(escapeRe(TILDE_PATH) + tail, "g"), "/").replace(new RegExp('"' + escapeRe(HOME_VAR_PATH) + tail + '"', "g"), '"/"').replace(new RegExp(escapeRe(HOME_VAR_PATH) + tail, "g"), "/");
 }
 
 // dist/src/hooks/codex/pre-tool-use.js
 var log6 = (msg) => log("codex-pre", msg);
-var __bundleDir = dirname3(fileURLToPath3(import.meta.url));
-var SHELL_BUNDLE = existsSync5(join12(__bundleDir, "shell", "deeplake-shell.js")) ? join12(__bundleDir, "shell", "deeplake-shell.js") : join12(__bundleDir, "..", "shell", "deeplake-shell.js");
 function buildUnsupportedGuidance() {
-  return "This command is not supported for ~/.deeplake/memory/ operations. Only bash builtins are available: cat, ls, grep, echo, jq, head, tail, sed, awk, wc, sort, find, etc. Do NOT use python, python3, node, curl, or other interpreters. Rewrite your command using only bash tools and retry.";
-}
-function runVirtualShell(cmd, shellBundle = SHELL_BUNDLE, logFn = log6) {
-  try {
-    return execFileSync("node", [shellBundle, "-c", cmd], {
-      encoding: "utf-8",
-      timeout: 1e4,
-      env: { ...process.env },
-      stdio: ["pipe", "pipe", "pipe"]
-    }).trim();
-  } catch (e) {
-    logFn(`virtual shell failed: ${e.message}`);
-    return "";
-  }
+  return "This command is not supported for ~/.deeplake/memory/ operations. Only bash builtins are available: cat, ls, grep, echo, jq, head, tail, wc, sort, find, etc. Do NOT use python, python3, node, curl, or other interpreters. Rewrite your command using only bash tools and retry.";
 }
 function buildIndexContent(rows) {
   const lines = ["# Memory Index", "", `${rows.length} sessions:`, ""];
@@ -3193,18 +3178,17 @@ function buildIndexContent(rows) {
   return lines.join("\n");
 }
 async function processCodexPreToolUse(input, deps = {}) {
-  const { config = loadConfig(), createApi = (table, activeConfig) => new DeeplakeApi(activeConfig.token, activeConfig.apiUrl, activeConfig.orgId, activeConfig.workspaceId, table), executeCompiledBashCommandFn = executeCompiledBashCommand, readVirtualPathContentsFn = readVirtualPathContents, readVirtualPathContentFn = readVirtualPathContent, listVirtualPathRowsFn = listVirtualPathRows, findVirtualPathsFn = findVirtualPaths, handleGrepDirectFn = handleGrepDirect, readCachedIndexContentFn = readCachedIndexContent, writeCachedIndexContentFn = writeCachedIndexContent, runVirtualShellFn = runVirtualShell, shellBundle = SHELL_BUNDLE, logFn = log6 } = deps;
+  const { config = loadConfig(), createApi = (table, activeConfig) => new DeeplakeApi(activeConfig.token, activeConfig.apiUrl, activeConfig.orgId, activeConfig.workspaceId, table), executeCompiledBashCommandFn = executeCompiledBashCommand, readVirtualPathContentsFn = readVirtualPathContents, readVirtualPathContentFn = readVirtualPathContent, listVirtualPathRowsFn = listVirtualPathRows, findVirtualPathsFn = findVirtualPaths, handleGrepDirectFn = handleGrepDirect, readCachedIndexContentFn = readCachedIndexContent, writeCachedIndexContentFn = writeCachedIndexContent, logFn = log6 } = deps;
   const cmd = input.tool_input?.command ?? "";
   logFn(`hook fired: cmd=${cmd}`);
   if (!touchesMemory(cmd))
     return { action: "pass" };
   const rewritten = rewritePaths(cmd);
   if (!isSafe(rewritten)) {
-    const guidance = buildUnsupportedGuidance();
-    logFn(`unsupported command, returning guidance: ${rewritten}`);
+    logFn(`unsupported command, blocking with guidance: ${rewritten}`);
     return {
-      action: "guide",
-      output: guidance,
+      action: "block",
+      output: buildUnsupportedGuidance(),
       rewrittenCommand: rewritten
     };
   }
@@ -3214,22 +3198,22 @@ async function processCodexPreToolUse(input, deps = {}) {
     const api = createApi(table, config);
     const readVirtualPathContentsWithCache = async (cachePaths) => {
       const uniquePaths = [...new Set(cachePaths)];
-      const result2 = new Map(uniquePaths.map((path) => [path, null]));
+      const result = new Map(uniquePaths.map((path) => [path, null]));
       const cachedIndex = uniquePaths.includes("/index.md") ? readCachedIndexContentFn(input.session_id) : null;
       const remainingPaths = cachedIndex === null ? uniquePaths : uniquePaths.filter((path) => path !== "/index.md");
       if (cachedIndex !== null) {
-        result2.set("/index.md", cachedIndex);
+        result.set("/index.md", cachedIndex);
       }
       if (remainingPaths.length > 0) {
         const fetched = await readVirtualPathContentsFn(api, table, sessionsTable, remainingPaths);
         for (const [path, content] of fetched)
-          result2.set(path, content);
+          result.set(path, content);
       }
-      const fetchedIndex = result2.get("/index.md");
+      const fetchedIndex = result.get("/index.md");
       if (typeof fetchedIndex === "string") {
         writeCachedIndexContentFn(input.session_id, fetchedIndex);
       }
-      return result2;
+      return result;
     };
     try {
       const compiled = await executeCompiledBashCommandFn(api, table, sessionsTable, rewritten, {
@@ -3307,6 +3291,8 @@ async function processCodexPreToolUse(input, deps = {}) {
           }
           return { action: "block", output: content, rewrittenCommand: rewritten };
         }
+        logFn(`virtual path not found: ${virtualPath}`);
+        return { action: "block", output: `${virtualPath}: No such file or directory`, rewrittenCommand: rewritten };
       }
       const lsMatch = rewritten.match(/^ls\s+(?:-[a-zA-Z]+\s+)*(\S+)?\s*$/);
       if (lsMatch) {
@@ -3352,38 +3338,38 @@ async function processCodexPreToolUse(input, deps = {}) {
           rewrittenCommand: rewritten
         };
       }
-      const findMatch = rewritten.match(/^find\s+(\S+)\s+(?:-type\s+\S+\s+)?-name\s+'([^']+)'/);
+      const findMatch = rewritten.match(/^find\s+(\S+)\s+-name\s+(?:'([^']+)'|"([^"]+)"|([^\s|]+))\s*(?:\|\s*wc\s+-l)?\s*$/);
       if (findMatch) {
         const dir = findMatch[1].replace(/\/+$/, "") || "/";
-        const namePattern = sqlLike(findMatch[2]).replace(/\*/g, "%").replace(/\?/g, "_");
-        logFn(`direct find: ${dir} -name '${findMatch[2]}'`);
+        const rawPattern = findMatch[2] ?? findMatch[3] ?? findMatch[4] ?? "";
+        const namePattern = sqlLike(rawPattern).replace(/\*/g, "%").replace(/\?/g, "_");
+        logFn(`direct find: ${dir} -name '${rawPattern}'`);
         const paths = await findVirtualPathsFn(api, table, sessionsTable, dir, namePattern);
-        let result2 = paths.join("\n") || "";
+        let result = paths.join("\n") || "";
         if (/\|\s*wc\s+-l\s*$/.test(rewritten))
-          result2 = String(paths.length);
+          result = String(paths.length);
         return {
           action: "block",
-          output: result2 || "(no matches)",
+          output: result || "(no matches)",
           rewrittenCommand: rewritten
         };
       }
       const grepParams = parseBashGrep(rewritten);
       if (grepParams) {
         logFn(`direct grep: pattern=${grepParams.pattern} path=${grepParams.targetPath}`);
-        const result2 = await handleGrepDirectFn(api, table, sessionsTable, grepParams);
-        if (result2 !== null) {
-          return { action: "block", output: result2, rewrittenCommand: rewritten };
+        const result = await handleGrepDirectFn(api, table, sessionsTable, grepParams);
+        if (result !== null) {
+          return { action: "block", output: result, rewrittenCommand: rewritten };
         }
       }
     } catch (e) {
-      logFn(`direct query failed, falling back to shell: ${e.message}`);
+      logFn(`direct query failed: ${e.message}`);
     }
   }
-  logFn(`intercepted \u2192 running via virtual shell: ${rewritten}`);
-  const result = runVirtualShellFn(rewritten, shellBundle, logFn);
+  logFn(`unroutable memory command, blocking with guidance: ${rewritten}`);
   return {
     action: "block",
-    output: result || "[Deeplake Memory] Command returned empty or the file does not exist in cloud storage.",
+    output: buildUnsupportedGuidance(),
     rewrittenCommand: rewritten
   };
 }
@@ -3412,6 +3398,5 @@ export {
   isSafe,
   processCodexPreToolUse,
   rewritePaths,
-  runVirtualShell,
   touchesMemory
 };

package/cursor/bundle/pre-tool-use.js

@@ -2322,11 +2322,17 @@ import { join as join10 } from "node:path";
 var MEMORY_PATH = join10(homedir8(), ".deeplake", "memory");
 var TILDE_PATH = "~/.deeplake/memory";
 var HOME_VAR_PATH = "$HOME/.deeplake/memory";
+function escapeRe(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var MEMORY_BOUNDARY = "(?![A-Za-z0-9._-])";
+var MEMORY_PREFIX_RE = new RegExp("(?:" + [MEMORY_PATH, TILDE_PATH, HOME_VAR_PATH].map(escapeRe).join("|") + ")" + MEMORY_BOUNDARY);
 function touchesMemory(p) {
-  return p.includes(MEMORY_PATH) || p.includes(TILDE_PATH) || p.includes(HOME_VAR_PATH);
+  return MEMORY_PREFIX_RE.test(p);
 }
 function rewritePaths(cmd) {
-  return cmd.replace(new RegExp(MEMORY_PATH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "/?", "g"), "/").replace(/~\/.deeplake\/memory\/?/g, "/").replace(/\$HOME\/.deeplake\/memory\/?/g, "/").replace(/"\$HOME\/.deeplake\/memory\/?"/g, '"/"');
+  const tail = "(?:\\/|" + MEMORY_BOUNDARY + ")";
+  return cmd.replace(new RegExp(escapeRe(MEMORY_PATH) + tail, "g"), "/").replace(new RegExp(escapeRe(TILDE_PATH) + tail, "g"), "/").replace(new RegExp('"' + escapeRe(HOME_VAR_PATH) + tail + '"', "g"), '"/"').replace(new RegExp(escapeRe(HOME_VAR_PATH) + tail, "g"), "/");
 }
 
 // dist/src/hooks/cursor/pre-tool-use.js

package/hermes/bundle/pre-tool-use.js

@@ -2322,11 +2322,17 @@ import { join as join10 } from "node:path";
 var MEMORY_PATH = join10(homedir8(), ".deeplake", "memory");
 var TILDE_PATH = "~/.deeplake/memory";
 var HOME_VAR_PATH = "$HOME/.deeplake/memory";
+function escapeRe(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var MEMORY_BOUNDARY = "(?![A-Za-z0-9._-])";
+var MEMORY_PREFIX_RE = new RegExp("(?:" + [MEMORY_PATH, TILDE_PATH, HOME_VAR_PATH].map(escapeRe).join("|") + ")" + MEMORY_BOUNDARY);
 function touchesMemory(p) {
-  return p.includes(MEMORY_PATH) || p.includes(TILDE_PATH) || p.includes(HOME_VAR_PATH);
+  return MEMORY_PREFIX_RE.test(p);
 }
 function rewritePaths(cmd) {
-  return cmd.replace(new RegExp(MEMORY_PATH.replace(/[.*+?^${}()|[\]\\]/g, "\\$&") + "/?", "g"), "/").replace(/~\/.deeplake\/memory\/?/g, "/").replace(/\$HOME\/.deeplake\/memory\/?/g, "/").replace(/"\$HOME\/.deeplake\/memory\/?"/g, '"/"');
+  const tail = "(?:\\/|" + MEMORY_BOUNDARY + ")";
+  return cmd.replace(new RegExp(escapeRe(MEMORY_PATH) + tail, "g"), "/").replace(new RegExp(escapeRe(TILDE_PATH) + tail, "g"), "/").replace(new RegExp('"' + escapeRe(HOME_VAR_PATH) + tail + '"', "g"), '"/"').replace(new RegExp(escapeRe(HOME_VAR_PATH) + tail, "g"), "/");
 }
 
 // dist/src/hooks/hermes/pre-tool-use.js

package/openclaw/dist/index.js

@@ -1801,7 +1801,7 @@ function extractLatestVersion(body) {
   return typeof v === "string" && v.length > 0 ? v : null;
 }
 function getInstalledVersion() {
-  return "0.7.71".length > 0 ? "0.7.71" : null;
+  return "0.7.72".length > 0 ? "0.7.72" : null;
 }
 function isNewer(latest, current) {
   const parse = (v) => v.replace(/-.*$/, "").split(".").map(Number);

package/openclaw/openclaw.plugin.json

@@ -54,5 +54,5 @@
       }
     }
   },
-  "version": "0.7.71"
+  "version": "0.7.72"
 }

package/openclaw/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hivemind",
-  "version": "0.7.71",
+  "version": "0.7.72",
   "type": "module",
   "description": "Hivemind — cloud-backed persistent shared memory for AI agents, powered by DeepLake",
   "license": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeplake/hivemind",
-  "version": "0.7.71",
+  "version": "0.7.72",
   "description": "Cloud-backed persistent shared memory for AI agents powered by Deeplake",
   "type": "module",
   "repository": {