Mem0 OpenClaw Plugin (v1.0.9)
Security & Compliance:
- Added top-level
requiredEnvVarsto plugin manifest, declaring env vars per mode (platform, OSS OpenAI, OSS Anthropic, OSS Ollama). Fixes ClaHub scanner "required env vars: none" mismatch - Added
sensitive: trueand descriptions toapiKeyanduserEmailinconfigSchema— previously only declared inuiHints - Added
default: falsewith descriptions toautoCaptureandautoRecallinconfigSchemaso scanner can confirm opt-in defaults - Added
dataLocationsfield to manifest declaring all persistence paths (config, vectorStore, historyDb, dreamState) - Added
privacyfield to manifest documenting data flow for platform vs open-source mode and credential storage guidance - Added
externalEndpointstosetupsection declaring api.mem0.ai and app.mem0.ai with purpose and requirement context
Tests:
- Replaced direct
process.envaccess intests/cli-commands.test.tsandtests/fs-safe.test.tswithvi.stubEnv/vi.unstubAllEnvs. Fixes ClaHub static analysis flag for "environment variable access combined with network send" - 421 tests across 15 test files