@memoryrelay/plugin-memoryrelay-ai 0.8.3 → 0.8.5

package/index.ts

@@ -1,6 +1,6 @@
 /**
  * OpenClaw Memory Plugin - MemoryRelay
- * Version: 0.8.3 (Security & Installation Fixes)
+ * Version: 0.8.5 (OpenClaw Security Compliance)
  *
  * Long-term memory with vector search using MemoryRelay API.
  * Provides auto-recall and auto-capture via lifecycle hooks.
@@ -9,11 +9,21 @@
  * API: https://api.memoryrelay.net
  * Docs: https://memoryrelay.ai
  *
+ * ENHANCEMENTS (v0.8.5):
+ * - Removed fs.writeFile from export command (stdout only now)
+ * - No filesystem operations - passes OpenClaw security validation
+ * - Export usage: openclaw memoryrelay export > memories.json
+ *
+ * ENHANCEMENTS (v0.8.4):
+ * - Removed file logging feature to pass OpenClaw security validation
+ * - All debug logs now in-memory only (circular buffer)
+ * - logFile config option deprecated (ignored with warning)
+ * - Clean npm installation without security warnings
+ * - Gateway methods for log access coming in v0.9.0
+ *
  * ENHANCEMENTS (v0.8.3):
- * - Security fix: logFile now restricted to relative paths only
- * - Rejects absolute paths and path traversal attempts
- * - Passes OpenClaw security validation for npm installation
- * - Clean installation without security warnings
+ * - Security fix: logFile restricted to relative paths
+ * - Path validation (reject absolute paths and traversal)
  *
  * ENHANCEMENTS (v0.8.2):
  * - Human-readable gateway logs with memory previews
@@ -853,31 +863,8 @@ export default async function plugin(api: OpenClawPluginApi): Promise<void> {
   const verboseEnabled = cfg?.verbose || false;
   const maxLogEntries = cfg?.maxLogEntries || 100;
   
-  // Security fix (v0.8.3): logFile must be relative to workspace/plugin directory
-  // Absolute paths and path traversal are rejected
-  let logFile: string | undefined;
-  if (cfg?.logFile) {
-    const requestedPath = cfg.logFile;
-    
-    // Reject absolute paths
-    if (requestedPath.startsWith('/') || requestedPath.startsWith('~') || /^[A-Za-z]:/.test(requestedPath)) {
-      api.logger.warn(
-        `memory-memoryrelay: logFile must be relative path (got: ${requestedPath}). Using default location.`
-      );
-      logFile = undefined;
-    }
-    // Reject path traversal
-    else if (requestedPath.includes('..')) {
-      api.logger.warn(
-        `memory-memoryrelay: logFile cannot contain '..' (got: ${requestedPath}). Using default location.`
-      );
-      logFile = undefined;
-    }
-    // Accept relative path (will be resolved by DebugLogger relative to workspace)
-    else {
-      logFile = requestedPath;
-    }
-  }
+  // Note: logFile is deprecated in v0.8.5 (removed for OpenClaw security compliance)
+  // All debug logs are in-memory only. Use gateway methods to access logs.
   
   let debugLogger: DebugLogger | undefined;
   let statusReporter: StatusReporter | undefined;
@@ -887,12 +874,10 @@ export default async function plugin(api: OpenClawPluginApi): Promise<void> {
       enabled: true,
       verbose: verboseEnabled,
       maxEntries: maxLogEntries,
-      logFile: logFile,
     });
     
-    const logLocation = logFile ? ` → ${logFile}` : '';
     api.logger.info(
-      `memory-memoryrelay: debug mode enabled (verbose: ${verboseEnabled}, maxEntries: ${maxLogEntries}${logLocation})`
+      `memory-memoryrelay: debug mode enabled (verbose: ${verboseEnabled}, maxEntries: ${maxLogEntries}, in-memory only)`
     );
   }
   
@@ -3229,15 +3214,12 @@ export default async function plugin(api: OpenClawPluginApi): Promise<void> {
 
       mem
         .command("export")
-        .description("Export all memories to JSON file")
-        .option("--output <path>", "Output file path", "memories-export.json")
-        .action(async (opts) => {
+        .description("Export all memories to JSON (outputs to stdout)")
+        .action(async () => {
           try {
-            console.log("Exporting memories...");
             const memories = await client.export();
-            const fs = await import("fs/promises");
-            await fs.writeFile(opts.output, JSON.stringify(memories, null, 2));
-            console.log(`Exported ${memories.length} memories to ${opts.output}`);
+            console.log(JSON.stringify(memories, null, 2));
+            console.error(`\n# Exported ${memories.length} memories. Redirect stdout to save: memoryrelay export > memories.json`);
           } catch (err) {
             console.error(`Export failed: ${String(err)}`);
           }

package/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "kind": "memory",
   "name": "MemoryRelay AI",
   "description": "AI memory service with sessions, decisions, patterns & projects (api.memoryrelay.net)",
-  "version": "0.8.3",
+  "version": "0.8.5",
   "uiHints": {
     "apiKey": {
       "label": "MemoryRelay API Key",
@@ -113,7 +113,7 @@
       },
       "logFile": {
         "type": "string",
-        "description": "Relative file path for persistent debug logs (e.g., 'memoryrelay-debug.log'). Absolute paths and path traversal (..) are rejected for security."
+        "description": "DEPRECATED (v0.8.5): File logging removed for OpenClaw security compliance. This option is ignored. Use gateway methods to access in-memory logs (coming in v0.9.0)."
       },
       "maxLogEntries": {
         "type": "number",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memoryrelay/plugin-memoryrelay-ai",
-  "version": "0.8.3",
+  "version": "0.8.5",
   "description": "OpenClaw memory plugin for MemoryRelay API - sessions, decisions, patterns, projects & semantic search",
   "type": "module",
   "main": "index.ts",

package/src/debug-logger.ts

@@ -3,6 +3,9 @@
  * 
  * Provides comprehensive logging of API calls with request/response capture
  * for troubleshooting and performance analysis.
+ * 
+ * Note: File logging has been removed in v0.8.4 to pass OpenClaw security validation.
+ * All logs are kept in-memory only. Use gateway methods (coming in v0.9.0) to access logs.
  */
 
 export interface LogEntry {
@@ -23,24 +26,22 @@ export interface DebugLoggerConfig {
   enabled: boolean;
   verbose: boolean;
   maxEntries: number;
-  logFile?: string;
+  logFile?: string; // Deprecated: File logging removed for security compliance
 }
 
 export class DebugLogger {
   private logs: LogEntry[] = [];
   private config: DebugLoggerConfig;
-  private fs?: typeof import("fs");
 
   constructor(config: DebugLoggerConfig) {
     this.config = config;
     
-    // Only load fs if logFile is specified
+    // logFile is no longer supported (v0.8.4)
     if (config.logFile) {
-      try {
-        this.fs = require("fs");
-      } catch (err) {
-        console.warn("fs module not available, file logging disabled");
-      }
+      console.warn(
+        "memoryrelay: logFile is deprecated and ignored. " +
+        "Use gateway methods to access debug logs (coming in v0.9.0)"
+      );
     }
   }
 
@@ -57,11 +58,6 @@ export class DebugLogger {
     if (this.logs.length > this.config.maxEntries) {
       this.logs.shift();
     }
-
-    // Write to file if configured
-    if (this.config.logFile && this.fs) {
-      this.writeToFile(entry);
-    }
   }
 
   /**
@@ -123,20 +119,6 @@ export class DebugLogger {
     };
   }
 
-  /**
-   * Write log entry to file
-   */
-  private writeToFile(entry: LogEntry): void {
-    if (!this.fs || !this.config.logFile) return;
-
-    try {
-      const logLine = JSON.stringify(entry) + "\n";
-      this.fs.appendFileSync(this.config.logFile, logLine, "utf8");
-    } catch (err) {
-      console.error(`Failed to write debug log: ${err}`);
-    }
-  }
-
   /**
    * Format log entry for display
    */