@memoryrelay/plugin-memoryrelay-ai 0.8.2 → 0.8.4

package/index.ts

@@ -1,6 +1,6 @@
 /**
  * OpenClaw Memory Plugin - MemoryRelay
- * Version: 0.8.2 (Enhanced Gateway Logging)
+ * Version: 0.8.4 (OpenClaw Security Compliance)
  *
  * Long-term memory with vector search using MemoryRelay API.
  * Provides auto-recall and auto-capture via lifecycle hooks.
@@ -9,6 +9,17 @@
  * API: https://api.memoryrelay.net
  * Docs: https://memoryrelay.ai
  *
+ * ENHANCEMENTS (v0.8.4):
+ * - Removed file logging feature to pass OpenClaw security validation
+ * - All debug logs now in-memory only (circular buffer)
+ * - logFile config option deprecated (ignored with warning)
+ * - Clean npm installation without security warnings
+ * - Gateway methods for log access coming in v0.9.0
+ *
+ * ENHANCEMENTS (v0.8.3):
+ * - Security fix: logFile restricted to relative paths
+ * - Path validation (reject absolute paths and traversal)
+ *
  * ENHANCEMENTS (v0.8.2):
  * - Human-readable gateway logs with memory previews
  * - Show similarity scores and memory snippets during auto-recall
@@ -154,6 +165,8 @@ async function fetchWithTimeout(
 class MemoryRelayClient {
   private debugLogger?: DebugLogger;
   private statusReporter?: StatusReporter;
+  private config?: MemoryRelayConfig;
+  private api?: OpenClawPluginApi;
 
   constructor(
     private readonly apiKey: string,
@@ -161,9 +174,12 @@ class MemoryRelayClient {
     private readonly apiUrl: string = DEFAULT_API_URL,
     debugLogger?: DebugLogger,
     statusReporter?: StatusReporter,
+    api?: OpenClawPluginApi,
   ) {
     this.debugLogger = debugLogger;
     this.statusReporter = statusReporter;
+    this.api = api;
+    this.config = api?.pluginConfig as MemoryRelayConfig | undefined;
   }
 
   /**
@@ -840,9 +856,11 @@ export default async function plugin(api: OpenClawPluginApi): Promise<void> {
   
   const debugEnabled = cfg?.debug || false;
   const verboseEnabled = cfg?.verbose || false;
-  const logFile = cfg?.logFile;
   const maxLogEntries = cfg?.maxLogEntries || 100;
   
+  // Note: logFile is deprecated in v0.8.4 (removed for OpenClaw security compliance)
+  // All debug logs are in-memory only. Use gateway methods to access logs.
+  
   let debugLogger: DebugLogger | undefined;
   let statusReporter: StatusReporter | undefined;
   
@@ -851,14 +869,16 @@ export default async function plugin(api: OpenClawPluginApi): Promise<void> {
       enabled: true,
       verbose: verboseEnabled,
       maxEntries: maxLogEntries,
-      logFile: logFile,
     });
-    api.logger.info(`memory-memoryrelay: debug mode enabled (verbose: ${verboseEnabled}, maxEntries: ${maxLogEntries})`);
+    
+    api.logger.info(
+      `memory-memoryrelay: debug mode enabled (verbose: ${verboseEnabled}, maxEntries: ${maxLogEntries}, in-memory only)`
+    );
   }
   
   statusReporter = new StatusReporter(debugLogger);
   
-  const client = new MemoryRelayClient(apiKey, agentId, apiUrl, debugLogger, statusReporter);
+  const client = new MemoryRelayClient(apiKey, agentId, apiUrl, debugLogger, statusReporter, api);
 
   // Verify connection on startup (with timeout)
   try {

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "kind": "memory",
   "name": "MemoryRelay AI",
   "description": "AI memory service with sessions, decisions, patterns & projects (api.memoryrelay.net)",
-  "version": "0.7.0",
+  "version": "0.8.4",
   "uiHints": {
     "apiKey": {
       "label": "MemoryRelay API Key",
@@ -113,7 +113,7 @@
       },
       "logFile": {
         "type": "string",
-        "description": "Optional file path for persistent debug logs"
+        "description": "DEPRECATED (v0.8.4): File logging removed for OpenClaw security compliance. This option is ignored. Use gateway methods to access in-memory logs (coming in v0.9.0)."
       },
       "maxLogEntries": {
         "type": "number",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memoryrelay/plugin-memoryrelay-ai",
-  "version": "0.8.2",
+  "version": "0.8.4",
   "description": "OpenClaw memory plugin for MemoryRelay API - sessions, decisions, patterns, projects & semantic search",
   "type": "module",
   "main": "index.ts",

package/src/debug-logger.ts

@@ -3,6 +3,9 @@
  * 
  * Provides comprehensive logging of API calls with request/response capture
  * for troubleshooting and performance analysis.
+ * 
+ * Note: File logging has been removed in v0.8.4 to pass OpenClaw security validation.
+ * All logs are kept in-memory only. Use gateway methods (coming in v0.9.0) to access logs.
  */
 
 export interface LogEntry {
@@ -23,24 +26,22 @@ export interface DebugLoggerConfig {
   enabled: boolean;
   verbose: boolean;
   maxEntries: number;
-  logFile?: string;
+  logFile?: string; // Deprecated: File logging removed for security compliance
 }
 
 export class DebugLogger {
   private logs: LogEntry[] = [];
   private config: DebugLoggerConfig;
-  private fs?: typeof import("fs");
 
   constructor(config: DebugLoggerConfig) {
     this.config = config;
     
-    // Only load fs if logFile is specified
+    // logFile is no longer supported (v0.8.4)
     if (config.logFile) {
-      try {
-        this.fs = require("fs");
-      } catch (err) {
-        console.warn("fs module not available, file logging disabled");
-      }
+      console.warn(
+        "memoryrelay: logFile is deprecated and ignored. " +
+        "Use gateway methods to access debug logs (coming in v0.9.0)"
+      );
     }
   }
 
@@ -57,11 +58,6 @@ export class DebugLogger {
     if (this.logs.length > this.config.maxEntries) {
       this.logs.shift();
     }
-
-    // Write to file if configured
-    if (this.config.logFile && this.fs) {
-      this.writeToFile(entry);
-    }
   }
 
   /**
@@ -123,20 +119,6 @@ export class DebugLogger {
     };
   }
 
-  /**
-   * Write log entry to file
-   */
-  private writeToFile(entry: LogEntry): void {
-    if (!this.fs || !this.config.logFile) return;
-
-    try {
-      const logLine = JSON.stringify(entry) + "\n";
-      this.fs.appendFileSync(this.config.logFile, logLine, "utf8");
-    } catch (err) {
-      console.error(`Failed to write debug log: ${err}`);
-    }
-  }
-
   /**
    * Format log entry for display
    */