@deeplake/hivemind - npm Package Compare versions

Comparing version 0.7.123 to 0.7.124

.claude-plugin/marketplace.json

@@ -9,3 +9,3 @@ {
     "description": "Cloud-backed persistent shared memory for AI agents powered by Deeplake",
-    "version": "0.7.123"
+    "version": "0.7.124"
   },
@@ -16,3 +16,3 @@ "plugins": [
       "description": "Persistent shared memory powered by Deeplake — captures all session activity and provides cross-session, cross-agent memory search",
-      "version": "0.7.123",
+      "version": "0.7.124",
       "source": {
@@ -22,3 +22,3 @@ "source": "git-subdir",
         "path": "harnesses/claude-code",
-        "sha": "3b6116bb1d46b8ac40c940cea55ff667ee5f7709"
+        "sha": "89b97f5d0d5fbfd9fdb9c2f16fb58dfd992213d3"
       },
@@ -25,0 +25,0 @@ "homepage": "https://github.com/activeloopai/hivemind"

.claude-plugin/plugin.json

 {
   "name": "hivemind",
   "description": "Cloud-backed persistent memory powered by Deeplake — read, write, and share memory across Claude Code sessions and agents",
-  "version": "0.7.123",
+  "version": "0.7.124",
   "author": {
@@ -6,0 +6,0 @@ "name": "Activeloop",

harnesses/codex/bundle/session-start-setup.js

@@ -1257,2 +1257,16 @@ #!/usr/bin/env node
 var log4 = (msg) => log("autoupdate", msg);
+function isCodexManagedInstall(bundleDir, env = process.env) {
+  if (!bundleDir)
+    return false;
+  const norm = bundleDir.replace(/\\/g, "/");
+  if (norm.includes("/.codex/plugins/cache/"))
+    return true;
+  const codexHome = env.CODEX_HOME;
+  if (codexHome && codexHome.trim() !== "") {
+    const h = codexHome.replace(/\\/g, "/").replace(/\/+$/, "");
+    if (norm.includes(`${h}/plugins/cache/`))
+      return true;
+  }
+  return false;
+}
 var defaultSpawn = (cmd, args) => {
@@ -1284,2 +1298,6 @@ const child = spawn(cmd, args, {
   log4(`agent=${opts.agent} entered`);
+  if (isCodexManagedInstall(opts.bundleDir)) {
+    log4(`agent=${opts.agent} skip: Codex-managed install (${opts.bundleDir}); updates come via marketplace snapshots (${Date.now() - t0}ms)`);
+    return;
+  }
   if (!creds?.token) {
@@ -1378,3 +1396,3 @@ log4(`agent=${opts.agent} skip: no creds.token (${Date.now() - t0}ms)`);
   }
-  await autoUpdate(creds, { agent: "codex" });
+  await autoUpdate(creds, { agent: "codex", bundleDir: __bundleDir });
   const captureEnabled = process.env.HIVEMIND_CAPTURE !== "false";
@@ -1381,0 +1399,0 @@ if (input.session_id) {

harnesses/codex/skills/deeplake-memory/SKILL.md

@@ -36,3 +36,3 @@ ---
 
-Each argument is separate — do NOT quote subcommands together. The auth command is at `$CODEX_PLUGIN_ROOT/bundle/commands/auth-login.js` (or check the session context for the resolved path):
+Each argument is separate — do NOT quote subcommands together. The auth command is at `$PLUGIN_ROOT/bundle/commands/auth-login.js` (or check the session context for the resolved path):
 - `node "<path>/auth-login.js" login` — SSO login
@@ -39,0 +39,0 @@ - `node "<path>/auth-login.js" whoami` — show current user/org

harnesses/openclaw/openclaw.plugin.json

@@ -62,3 +62,3 @@ {
   },
-  "version": "0.7.123"
+  "version": "0.7.124"
 }

harnesses/openclaw/package.json

 {
   "name": "hivemind",
-  "version": "0.7.123",
+  "version": "0.7.124",
   "type": "module",
@@ -5,0 +5,0 @@ "description": "Hivemind — cloud-backed persistent shared memory for AI agents, powered by DeepLake",

package.json

 {
   "name": "@deeplake/hivemind",
-  "version": "0.7.123",
+  "version": "0.7.124",
   "description": "Cloud-backed persistent shared memory for AI agents powered by Deeplake",
@@ -5,0 +5,0 @@ "type": "module",

scripts/sync-versions.mjs

@@ -28,2 +28,3 @@ // NOTE: intentionally no `#!/usr/bin/env node` shebang. This module is both run
   "harnesses/codex/package.json",
+  "harnesses/codex/.codex-plugin/plugin.json",
 ];
@@ -30,0 +31,0 @@

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 7 instances

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 7 instances

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

14302381

0.01%

Lines of code

352376

0.02%

Worsened metrics

Number of low supply chain risk alerts

1011

0.3%

No dependency changes