Conversation
* fix: reorganizer bug * refactor: update conflict redundancy handling to archive nodes instead of deleting * fix: mute redundancy resolution --------- Co-authored-by: dany <973031439@qq.com>
* feat: add volcengine embedding support * test: add volcengine embedding test * feat(embedder): add support for ArkEmbedder * fixed: minor typo fix and remove unnecessary function * test: add image embedding test * fixed: remove images embed support and test * fixed: change chunk_size default value
* fix: GeneralTextMemory._embed_one_sentence Argument Error * fix: fix unittest
* feat: add neo4j share-db example * feat: add Shared Database Multi-Tenant Mode * fix: neo4j auto create bug * fix: tree text memory reorganizer bug * feat: change 'RELATE_TO' to 'RELATE' * fix: database exist bug * feat: delete useless relation edge * feat: finish Shared Database Multi-Tenant Mode * feat: add share database multi tenant tree config * feat: add shared-db mode config * fix: file name bug in example tree text memory] * style: add user_name from config
* feat: add api embedder * test: add unittest for universal api embedder * Update src/memos/embedders/universal_api.py Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update src/memos/configs/embedder.py Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * style: reformat * style: reformat --------- Co-authored-by: chunyu li <78344051+fridayL@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
feat: add embedder consistency check with warning and tests Resolves configuration scope issue where MemCube and MOS embedder configs could differ without user awareness. Co-authored-by: chunyu li <78344051+fridayL@users.noreply.github.com>
* feat: add product API and related functionality (cleaned sensitive data) * feat: add singleton for memos and llm * fix:fix persistent_user_manager * feat:update prompt and rm readme * fix：ci code * feat: update demo and add user manager (#31) * feat: add product API and related functionality (cleaned sensitive data) * feat: add singleton for memos and llm * fix:fix persistent_user_manager * feat:update prompt and rm readme * fix：ci code * Feature & Fix bugs: mem scheduler with rabbitmq and web log submission * fix bug of message consuming * add a range of configs * support rabbitmq * add new docs for the beginner * add more examples * fix:UserRole error * update: update product api * fix: suggestion mem * update:fix add mem * feat: update chat * fix: add uuid and product think * update: search data * fix:update * fix:chat mem * feat:vllm llm support version0 * feat: update zh en and mem * feat: update cube ids * feat:vllm llm support version0.5 * fix: memchat multi turn * feat: add multi-language feature in mem-reader * feat: add multi-language feature in mem-reader * feat: add multi-language feature in tree reorganizer * feat: reinforce language * fix:fix search and add product tmp data * fix bugs & refactor the code: mem scheduler support web log feature * refactor & fix bugs: mem scheduler related codes including modules like dispatcher and retriever, the dependencies and the unittest. * fix:remove dup * feat: add logs * feat:vllm llm support streaming generate and add benchmark script * add: chat time for add * fix:merge error * fix:merge error * feat & fix bugs: factor mem scheduler. test_retriever.py is waiting for test * feat:add vllm chat model * fix bugs: filter logging of retriever module in mem scheduler * fix: test_api * feat:update feat * fix: manager * feat: add vllm cahche * fix bugs: fix scheduler logging bug of working memory replacement * refactor: change default update interval * fix bugs: fix bugs in update activation memory in memory scheduler * add support for azure backend * feat: add deafult config overide for store config * feat: add MOS_ENABLE_REORGANIZE config * fix bugs: fix bugs of filter and updating activation memories * fix bugs: change name * feat: add act mme * fix:poetry lock * delete: del file --------- Co-authored-by: chentang <travistang@foxmail.com> Co-authored-by: Kai <kakack@126.com> Co-authored-by: 席阳阳 <caralhsi@gmail.com> Co-authored-by: zhangyibo.114514 <zhangyibo.114514@bytedance.com>
* fix: examples cannot be used while using pip Fixes #52 * docs: update README * fix: revert deletion * test: add unit tests for MemOS CLI functions * Update Makefile Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* feat: add stale issue and PR management workflow * chore: add comments * fix: update comments by the way * fix: update stale PR messages for consistency * fix: revert pr template changes
* 1. 豆包支持非多模态模型 2. embedder支持Azure backend * fix typo * add example
* feat(eval): add eval dependencies * feat(eval): add configs example * docs(eval): update README.md * feat(eval): remove the dependency (pydantic) * feat(eval): add run locomo eval script * fix(eval): delete about memos redundant search branches * chore: fix format * feat(eval): add openai memory on locomo - eval guide * docs(eval): modify openai memory on locomo - eval guide * feat(eval): add longmemeval evaluation pipeline * chore(eval): formatter * chore: update * feat(eval): add configs example
* feat: update config * fix:dim * change dim * fix:change default db * fix：delay * fix:len
feat: Add parameter to chat functions to override the base system prompt with a custom system prompt. Co-authored-by: chunyu li <78344051+fridayL@users.noreply.github.com>
* fix n4j cypher query * feat: add llm extra body * feat: update memory extraction prompt and result parser * fix: evaluation locomo search * ci: fix format and update test * feat: update result json parser * feat: recursively cluster nodes to max_cluster_size * fix: fix template * feat: keep default min-group-size 3 * feat: keep default min-group-size 3
* feat: return ids when add memory * feat: add example for how to use tree.add * tests: add tests for tree memory add * tests: add tests for tree memory add
* feat: add neo and simple memos * fix: remove mock data
* fix: language bug * feat: add qwen api * feat: modify qwen llm * feat: add deepseek llm * feat: add stream output for openai * test: add unit test for llms * Update src/memos/llms/deepseek.py Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix: multi llm test bug --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* fix n4j cypher query * feat: add llm extra body * feat: update memory extraction prompt and result parser * fix: evaluation locomo search * ci: fix format and update test * feat: update result json parser * feat: recursively cluster nodes to max_cluster_size * fix: fix template * feat: keep default min-group-size 3 * feat: keep default min-group-size 3 * feat: update doc mem reader * test: fix test --------- Co-authored-by: CaralHsi <caralhsi@gmail.com>
* build: optimize dependencies management * build: drop deprecated sections * fix: correct typo and commands * refactor: optimize pyproject.toml * ci: add Python release testing workflow * build: optimize version constraints and optional groups * fix: update patch paths for SentenceChunker and QdrantClient in tests * ci: enhance dependency and building test * docs: update installation instructions * fix: move ruff dependency to test group * fix: specify encoding * fix: refine wheel and sdist installation steps for OS-specific handling * fix: update Windows installation commands to use PowerShell syntax * chore: add comments for clarity in Python tests workflow * fix: report slowest tests * ci: support macos-13 as much as possible * fix: macos-13 testing * chore: add comments * chore: update comments in pyproject.toml * docs: support all platforms * fix: poetry update * fix: move scikit-learn and qdrant-client * docs: clarify optional dependencies --------- Co-authored-by: CaralHsi <caralhsi@gmail.com>
fix: revise None type in QueueMessage to op=end Co-authored-by: CaralHsi <caralhsi@gmail.com>
* feat：add mcp serve * feat: add mcp serve and http client api * add: stdio for memos mcp * fix:remove dup content and reconstructed code * fix : reorg core dire and add mcp examples
* feat: init neo4j-community * feat: Inherit existing class for Community Edition database support * feat: add outer vector db * feat: finish neo4j community * feat: add tree community config example * fix: ensure outer db for neo4j-community is server mode * feat: update tree-config-community * fix: bug for qdrant delete * fix: create index for outer_db * feat: add ensure payload index exists in qdrant * feat: create index for qdrant * feat: add simple_openapi_memos_neo4j_community
…eo4j database (#109) * feat: add share-db multi user mode locomo showcase * fix: turn on reorganize * fix: try to fix 'never clsoe' issue, try-1 * fix: try to fix 'never clsoe' issue, try-2 * fix: mos_product.add in example --------- Co-authored-by: jiawei yang <103758578+J1awei-Yang@users.noreply.github.com> Co-authored-by: dany <973031439@qq.com>
Co-authored-by: CaralHsi <caralhsi@gmail.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| if isinstance(mem_cube_name_or_path, GeneralMemCube): | ||
| self.mem_cubes[mem_cube_id] = mem_cube_name_or_path | ||
| logger.info(f"register new cube {mem_cube_id} for user {target_user_id}") | ||
| elif os.path.exists(mem_cube_name_or_path): |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI about 1 year ago
To resolve this issue, ensure that the path provided by the user is validated before being used. A common and effective approach is to normalize the path using os.path.normpath and ensure it stays within a predefined safe root directory. This prevents directory traversal attacks. Additionally, we can add further restrictions by using a library like werkzeug.utils.secure_filename to sanitize filenames if applicable.
In this case, we will normalize the path, verify it resides within a safe root directory, and reject any paths that do not comply. The root directory will be configurable or static (e.g., "/safe/root/directory").
Suggested changeset
1
src/memos/mem_os/core.py
| @@ -27,8 +27,8 @@ | ||
|
|
||
|
|
||
| logger = get_logger(__name__) | ||
| SAFE_ROOT_DIRECTORY = "/safe/root/directory" | ||
|
|
||
|
|
||
| class MOSCore: | ||
| """ | ||
| The MOSCore (Memory Operating System Core) class manages multiple MemCube objects and their operations. | ||
| @@ -449,7 +448,7 @@ | ||
| if isinstance(mem_cube_name_or_path, GeneralMemCube): | ||
| self.mem_cubes[mem_cube_id] = mem_cube_name_or_path | ||
| logger.info(f"register new cube {mem_cube_id} for user {target_user_id}") | ||
| elif os.path.exists(mem_cube_name_or_path): | ||
| elif self._is_safe_path(mem_cube_name_or_path): | ||
| self.mem_cubes[mem_cube_id] = GeneralMemCube.init_from_dir(mem_cube_name_or_path) | ||
| else: | ||
| logger.warning( | ||
| @@ -493,6 +492,20 @@ | ||
| ) | ||
| logger.info(f"register new cube {mem_cube_id} for user {target_user_id}") | ||
|
|
||
| def _is_safe_path(self, path: str) -> bool: | ||
| """ | ||
| Validate if the given path is within the safe root directory. | ||
|
|
||
| Args: | ||
| path (str): Path to validate. | ||
|
|
||
| Returns: | ||
| bool: True if the path is safe, False otherwise. | ||
| """ | ||
| normalized_path = os.path.normpath(path) | ||
| absolute_path = os.path.abspath(normalized_path) | ||
| return absolute_path.startswith(SAFE_ROOT_DIRECTORY) | ||
|
|
||
| def unregister_mem_cube(self, mem_cube_id: str, user_id: str | None = None) -> None: | ||
| """ | ||
| Unregister a MemCube by its identifier. |
Copilot is powered by AI and may make mistakes. Always verify output.
* feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker * feat: one-click deployment with docker
tianxing02
pushed a commit
to tianxing02/MemOS
that referenced
this pull request
Feb 24, 2026
## Description Bug Fixes: Fixed reorganizer bugs and argument errors Resolved None issue in reorganizer queue Updated Python version constraints New Features: Added support for multiple embedders (Ark/Volcengine, Universal API) Introduced Neo4j database integration and sharing capabilities Added evaluation pipeline (longmemeval) Implemented multi-language support and customizable system prompts Added MCP (Model Context Protocol) server support with client demo Improvements: Enhanced memory management with ID returns and clustering optimizations Simplified user onboarding with basic memos Expanded LLM API support and optimized dependency management Added development tools (download examples, issue templates, stale management) Documentation & DevOps: Updated issue/PR templates and workflows Improved multi-user example implementations with significant additions to embedding support, database backends, and user experience improvements.
pull Bot
pushed a commit
to longduoduo112/MemOS
that referenced
this pull request
Aug 18, 2026
…4b4d8b2 e4b4d8b2 Merge pull request MemTensor#157 from MemTensor/docs-sync/openclaw-cloud-auto-draft-release 28eb5f81 ci: automate cloud plugin draft releases bf3f9b32 Merge pull request MemTensor#156 from MemTensor/fix/npm-publish-propagation df4634d3 ci: validate release fixes before merge 0da6e0a9 ci: harden npm release propagation verification a3176616 Merge pull request MemTensor#155 from EF1874/test 2ff7ec75 0.1.20 09714e85 Merge pull request MemTensor#153 from MemTensor/docs-sync/openclaw-cloud-main-source-release d33d77fb ci: publish reviewed main versions without action PRs 066f330d Merge pull request MemTensor#152 from EF1874/test 50ae8cc5 Merge pull request MemTensor#149 from MemTensor/docs-sync/openclaw-cloud-release-quality 1b027080 ci: surface cloud workflow contract failures 31a17497 ci: isolate read-only release dry runs 8ebc5f02 ci: declare reusable publish secret e941685b ci: minimize dry-run workflow privileges 6a8de049 ci: align prerelease and stable release channels 41201c0a ci: normalize cloud release evidence refs 8517603d ci: close cloud release failure recovery gaps 58d9efa3 ci: preserve reusable workflow token permissions 7a8cb8fd ci: pin cloud release recovery to npm source 56170ea5 0.1.20-beta.0 557c7269 Merge branch 'main' into test 4d993bcd ci: add auditable cloud release quality gates 066db592 feat: implement deduplication for agent_end snapshots and enhance API call timeout handling 8aee50e2 ci: require recovery mode for missing release metadata ca0f2357 ci: suppress tag fetch warnings when local tags exist b06dcf7d ci: avoid tag fetch warnings in originless tests 74d25dd5 ci: validate manual cloud release note categories 98549947 ci: cover publish confirmation guard dry runs 7c9830f4 ci: require confirmation for real cloud releases 34e0f7b2 ci: request candidate self-checks for cloud release notes 0dde13cc ci: harden cloud plugin release previews fd4bad4c Merge pull request MemTensor#148 from MemTensor/docs-sync/openclaw-cloud-plugin-semver-previous-tag c20bf70c fix: compare release tags with semver precedence becc6f18 Merge pull request MemTensor#147 from MemTensor/docs-sync/openclaw-cloud-plugin-release ef831b5d ci: validate telemetry credentials before packaging 2f43ff8c ci: resolve annotated release tags to commits 252e9608 ci: read release tag evidence from commits 7f29b992 ci: add cloud plugin release dry-run automation d0f2cea7 ci: add OpenClaw cloud plugin release workflow 18cb8c7f Merge pull request MemTensor#140 from MemTensor/test 3b978092 Merge pull request MemTensor#135 from EF1874/test 0c2cd2a1 0.1.19 c4ab3104 0.1.19-beta.0 d053b0a2 feat: enhance OpenClaw system prompt detection and handling e1e7fb0f 0.1.18 ce0a9e16 Merge pull request MemTensor#132 from Hun-ger/dev_gyh_260617 5152641c feat: add config UI update check 9b9e4ab2 Merge pull request MemTensor#131 from MemTensor/test 2af0cb2a Merge pull request MemTensor#129 from EF1874/test 3b0e068e 0.1.17 f7fd95e2 0.1.17-beta.0 70fb1840 feat: update MEMOS_SOURCE to append platform-specific suffixes and add corresponding tests 31d5f6a0 Merge branch 'test' of https://github.com/MemTensor/MemOS-Cloud-OpenClaw-Plugin into test 8b18998d Merge pull request MemTensor#127 from EF1874/test e43380d8 Merge pull request MemTensor#123 from EF1874/test ec9764d3 0.1.16 0d74ab93 0.1.16-beta.1 ed52b9c1 feat: extend system command detection to include 'clear' command and add internal prompt patterns for session management 00edb855 0.1.16-beta.0 9c773370 feat: enhance memory section handling by adding tool memory support and simplifying filtering logic f7c1edb9 feat: refactor system event detection logic into dedicated functions for clarity and reuse eb2bddc8 feat: add function to strip leading system notes from text input bf25eb78 feat: implement system event detection in recall and agent end hooks to skip processing for heartbeat and command events 869217d7 Merge pull request MemTensor#122 from MemTensor/test 306841f2 feat: update recall hook registration to use before_prompt_build for newer OpenClaw hosts and add tests for version compatibility 7e8304a7 Merge pull request MemTensor#120 from EF1874/test a63116fc 0.1.15 5d2bb28e 0.1.15-beta.0 b4af645e feat: add activation hooks to plugin configurations and improve hook policy handling in index.js 083b6e4b Merge pull request MemTensor#119 from MemTensor/test 3b5ddaa4 Merge pull request MemTensor#118 from EF1874/test e931499a 0.1.14 1a86dc0d 0.1.14-beta.0 d0b88342 feat: add version detection and comparison utilities for host CLI f7d19029 refactor: enhance configuration UI and improve session handling logic d982aa0f chore: remove HOOK.md file and clean up package.json by eliminating unused hooks 03fcc33c Merge pull request MemTensor#115 from MemTensor/test 1e77054b 0.1.13 19e8eb38 0.1.13-beta.1 b32b493a Merge pull request MemTensor#113 from Hun-ger/fix_cloud_plugin_filter 23a48675 fix:fix filter params de07588e 0.1.13-beta.0 4451c8a5 Merge pull request MemTensor#111 from Hun-ger/fix_cloud_plugin_filter 4c84c6c3 fix typos 9f663e50 Merge pull request MemTensor#110 from Hun-ger/fix_cloud_plugin_filter 92e66d30 feat: Add shared support knowledgebase for multi-agent reuse git-subtree-dir: apps/MemOS-Cloud-OpenClaw-Plugin git-subtree-split: e4b4d8b2ad3c50449a1b75f04eee985ebdb324a9
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
12 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Bug Fixes:
Fixed reorganizer bugs and argument errors
Resolved None issue in reorganizer queue
Updated Python version constraints
New Features:
Added support for multiple embedders (Ark/Volcengine, Universal API)
Introduced Neo4j database integration and sharing capabilities
Added evaluation pipeline (longmemeval)
Implemented multi-language support and customizable system prompts
Added MCP (Model Context Protocol) server support with client demo
Improvements:
Enhanced memory management with ID returns and clustering optimizations
Simplified user onboarding with basic memos
Expanded LLM API support and optimized dependency management
Added development tools (download examples, issue templates, stale management)
Documentation & DevOps:
Updated issue/PR templates and workflows
Improved multi-user example implementations
with significant additions to embedding support, database backends, and user experience improvements.