@memclaw/memclaw 0.9.10 → 0.9.13

package/SECURITY.md

@@ -0,0 +1,88 @@
+# Security Information
+
+This document describes security considerations for the MemClaw plugin.
+
+## Data Flow
+
+```
+User Input → OpenClaw → MemClaw Plugin → cortex-mem-service (localhost:8085)
+                                              │
+                                              ▼
+                                         Qdrant (localhost:6334)
+                                              │
+                                              ▼
+                                         Local Storage
+```
+
+**Key Points:**
+- All data processing happens **locally** on your machine
+- No data is sent to external servers except your configured LLM/Embedding providers
+- API keys are only transmitted to your configured API endpoints
+
+## Credentials
+
+### Required Credentials
+
+| Credential | Purpose | Storage Location |
+|------------|---------|------------------|
+| `llmApiKey` | Memory extraction and summarization | OpenClaw plugin config (marked `sensitive: true`) |
+| `embeddingApiKey` | Vector embedding generation | OpenClaw plugin config (marked `sensitive: true`) |
+
+### Credential Security
+
+- API keys are stored in `openclaw.json` with the `sensitive` flag
+- Keys are **never** logged or transmitted except to your configured API provider
+- Keys are **never** sent to the MemClaw developers or any third party
+
+## Binary Packages
+
+### What's Included
+
+MemClaw uses platform-specific binary packages distributed via npm:
+
+| Package | Platform | Contents |
+|---------|----------|----------|
+| `@memclaw/bin-darwin-arm64` | macOS Apple Silicon | Qdrant, cortex-mem-service, cortex-mem-cli |
+| `@memclaw/bin-win-x64` | Windows x64 | Qdrant, cortex-mem-service, cortex-mem-cli |
+
+### Verification
+
+To verify binary packages:
+
+```bash
+# Check package integrity via npm
+npm view @memclaw/bin-darwin-arm64
+npm view @memclaw/bin-win-x64
+
+# Inspect package contents
+npm pack @memclaw/bin-darwin-arm64
+tar -tzf memclaw-bin-darwin-arm64-*.tgz
+```
+
+### Source Code
+
+The source code for building these binaries is available in the main repository:
+- Repository: https://github.com/sopaco/cortex-mem
+- Build scripts: `cortex-mem-core/`, `cortex-mem-service/`
+
+## Network Security
+
+### Ports Used
+
+| Service | Port | Protocol | Purpose |
+|---------|------|----------|---------|
+| Qdrant HTTP | 6333 | TCP | REST API, health checks |
+| Qdrant gRPC | 6334 | TCP | Vector operations |
+| cortex-mem-service | 8085 | TCP | Memory service API |
+
+### Firewall Configuration
+
+If you use a firewall, ensure:
+- Ports 6333, 6334, 8085 are allowed for **localhost only**
+- External connections to these ports are blocked
+
+### Localhost Only
+
+All services bind to `localhost` (127.0.0.1) by default:
+- No external network access is required
+- Services are not accessible from other machines

package/dist/index.js

@@ -38,7 +38,7 @@ function memclawPlugin(api) {
 exports.plugin = {
     id: 'memclaw',
     name: 'MemClaw',
-    version: '0.9.10',
+    version: '0.9.13',
     configSchema: {
         type: 'object',
         properties: {

package/dist/plugin-impl.d.ts

@@ -12,38 +12,6 @@ interface PluginLogger {
     warn: (msg: string, ...args: unknown[]) => void;
     error: (msg: string, ...args: unknown[]) => void;
 }
-interface CronAPI {
-    call(params: {
-        method: "add" | "remove" | "list";
-        params?: {
-            name?: string;
-            schedule?: {
-                kind: string;
-                expr: string;
-            };
-            sessionTarget?: string;
-            payload?: {
-                kind: string;
-                message: string;
-            };
-            delivery?: {
-                mode: string;
-            };
-        };
-    }): Promise<unknown>;
-}
-interface RuntimeAPI {
-    tools: {
-        get(name: "cron"): CronAPI;
-    };
-}
-interface ToolDefinition {
-    name: string;
-    description: string;
-    parameters: object;
-    execute: (_id: string, params: Record<string, unknown>) => Promise<unknown>;
-    optional?: boolean;
-}
 interface PluginAPI {
     pluginConfig?: Record<string, unknown>;
     registerTool(tool: ToolDefinition, opts?: {
@@ -55,7 +23,13 @@ interface PluginAPI {
         stop: () => Promise<void>;
     }): void;
     logger: PluginLogger;
-    runtime?: RuntimeAPI;
+}
+interface ToolDefinition {
+    name: string;
+    description: string;
+    parameters: object;
+    execute: (_id: string, params: Record<string, unknown>) => Promise<unknown>;
+    optional?: boolean;
 }
 export declare function createPlugin(api: PluginAPI): {
     id: string;

package/dist/plugin-impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-impl.d.ts","sourceRoot":"","sources":["../plugin-impl.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0CH,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAClD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAChD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CAClD;AAED,UAAU,OAAO;IACf,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAClC,MAAM,CAAC,EAAE;YACP,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,QAAQ,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,OAAO,CAAC,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,CAAC;aACjB,CAAC;YACF,QAAQ,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;SAC7B,CAAC;KACH,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,UAAU,UAAU;IAClB,KAAK,EAAE;QACL,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,SAAS;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACxE,eAAe,CAAC,OAAO,EAAE;QACvB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3B,GAAG,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAqPD,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS;;;;EAwc1C"}
+{"version":3,"file":"plugin-impl.d.ts","sourceRoot":"","sources":["../plugin-impl.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0CH,UAAU,YAAY;IACrB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAClD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAChD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAChD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACjD;AAED,UAAU,SAAS;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACxE,eAAe,CAAC,OAAO,EAAE;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1B,GAAG,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;CACrB;AAED,UAAU,cAAc;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AA+MD,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS;;;;EA4d1C"}