memory-os-cliBLOCK

'OpenClaw egress proxy is required when using OpenClaw secrets. Enable secrets.egressProxy.enabled and ensure execution runs in Gateway-hosted exec (HTTPS_PROXY and NODE_USE_ENV_PROXY=1 must be set).'

const SENSITIVE_NAMES = /(^\.env(?:\..*)?$|^\.npmrc$|^\.pypirc$|^\.netrc$|^id_(?:rsa|dsa|ecdsa|ed25519)$|secret|token|credential|private.?key|\.(?:pem|p12|pfx|key)$)/i;

- Prefer `XMEMO_KEY` or a managed secret store. Use `--allow-plaintext` only after accepting that processes running as the same operating-system user may read the local credential file.

console.log(`✅ Authorization successful. Token stored in the explicitly approved user credential file: ${credentialsPath}\nToken value was not printed. Project files were not modified.`);

await fs.writeFile(credFile, JSON.stringify({ token: 'test_token_1234567890', version: 1 }));

const token = 'mem_os_test_token_1234567890';

const token = 'mem_os_test_token_1234567890';

const token = 'mem_os_test_token_1234567890';

const token = 'mem_os_test_token_1234567890';

queries are sent to xmemo.dev, so keep secrets and sensitive identifiers out of query text

xmemo-skill-1.1.35.fixture

{ pattern: /\beval\s*\(/, name: 'eval()', codeOnly: false },

patternName: 'eval()',

content: 'export const fn = new Function("a", "return a");\n',

import { writeLine } from '../../core/io.js';

import { fileExists } from '../../core/runtime.js';

} from '../../clients/registry.js';

import { fileExists } from '../../core/runtime.js';

} from '../../clients/registry.js';

node scripts/xmemo-skill-smoke-test.mjs --execute-writes --base-url http://127.0.0.1:8080

const baseUrl = `http://127.0.0.1:${port}`;

assert.equal(template.snippet.mcpServers['XMemo'].url, 'http://127.0.0.1:8765/mcp');

assert.equal(plan.selectedClient.template.mcpServers['XMemo'].url, 'http://127.0.0.1:8765/mcp');

assert.equal(config.mcpServers['XMemo'].url, 'http://127.0.0.1:8765/mcp');

- **Privacy by Default**: The CLI and xmemo-mcp stdio proxy send no telemetry, and generated configs reference XMEMO_KEY instead of embedding plaintext tokens ([data boundary details](https://docs.xme