@memoryrouter/nemoclaw

One-command persistent memory for NemoClaw sandboxed agents using MemoryRouter.

Quick Start

npx @memoryrouter/nemoclaw setup \
  --sandbox my-assistant \
  --api-key mk_YOUR_KEY_HERE

Get a free API key (50M tokens included) at memoryrouter.ai.

What It Does

NemoClaw runs OpenClaw inside a deny-by-default sandbox. Every outbound network request is blocked unless explicitly allowed. This tool automates the full setup in one command:

1. Installs the mr-memory plugin via openclaw plugins install
2. Configures your API key in ~/.openclaw/openclaw.json
3. Applies the MemoryRouter egress rule to your sandbox's network policy
4. Restarts the OpenClaw gateway

After setup, your agent automatically stores and recalls conversations across sessions.

Output

memoryrouter-nemoclaw setup
────────────────────────────────────────

[0] Preflight checks...
  ✓ openshell found
  ✓ openclaw found

[1] Installing mr-memory plugin...
  ✓ Plugin installed

[2] Configuring MemoryRouter in ~/.openclaw/openclaw.json...
  ✓ API key configured

[3] Applying MemoryRouter egress policy to sandbox "my-assistant"...
  ✓ Policy applied to sandbox "my-assistant"

[4] Restarting OpenClaw gateway...
  ✓ Gateway restarted

────────────────────────────────────────
✓ Setup complete!

CLI Options

Required:
  --sandbox <name>       NemoClaw sandbox name
  --api-key <key>        MemoryRouter API key

Optional:
  --skip-policy          Skip the openshell egress policy update
  --skip-plugin-install  Skip openclaw plugins install
  --dry-run              Preview changes without executing
  --help                 Show this help

How It Works

The Problem

NemoClaw's OpenShell sandbox blocks all outbound traffic by default. The mr-memory plugin installs fine (npm registry is allowed), but when it tries to call api.memoryrouter.ai at runtime — blocked. Silent failure.

The Solution

This package reads your sandbox's current network policy, merges in the MemoryRouter egress rule, and re-applies it via openshell policy set. The egress rule allows:

memoryrouter:
  name: memoryrouter
  endpoints:
    - host: api.memoryrouter.ai
      port: 443
      protocol: rest
      tls: terminate
      enforcement: enforce
      rules:
        - allow: { method: GET, path: /** }
        - allow: { method: POST, path: /** }
  binaries:
    - path: /usr/local/bin/openclaw
    - path: /usr/local/bin/node

Manual Setup

If you prefer to apply steps yourself:

1. Install: openclaw plugins install mr-memory
2. Configure: openclaw mr mk_YOUR_KEY_HERE
3. Add the egress YAML above to your sandbox policy
4. Apply: openshell policy set <sandbox> --policy /path/to/policy.yaml --wait
5. Restart: openclaw gateway restart

Verify

After a conversation, check logs:

grep MemoryRouter ~/.openclaw/logs/gateway.log | tail -5

Test memory:

1. Tell your agent something: "My favorite color is blue"
2. Start a new session
3. Ask: "What's my favorite color?"

License

MIT