chore: pin basic-memory installs to v0.19.2

Author: phernandez

SECURITY.md

@@ -7,7 +7,7 @@ On first startup, this plugin checks whether the `bm` (Basic Memory) CLI is avai
 ### What happens
 
 1. The plugin checks if `bm` exists on `PATH`
-2. If missing, it executes `uv tool install "basic-memory @ git+https://github.com/basicmachines-co/basic-memory.git@main" --force`
+2. If missing, it executes `uv tool install "basic-memory @ git+https://github.com/basicmachines-co/basic-memory.git@v0.19.2" --force`
 3. This installs the Basic Memory CLI into uv's managed tool directory (`~/.local/bin/bm` on most systems)
 
 ### What this means

index.ts

@@ -31,6 +31,8 @@ import { registerSchemaValidateTool } from "./tools/schema-validate.ts"
 import { registerSearchTool } from "./tools/search-notes.ts"
 import { registerWriteTool } from "./tools/write-note.ts"
 
+const BASIC_MEMORY_RELEASE_TAG = "v0.19.2"
+
 export default {
   id: "openclaw-basic-memory",
   name: "Basic Memory",
@@ -96,7 +98,7 @@ export default {
               "installing basic-memory via uv (this may take a minute)...",
             )
             const result = execSync(
-              'uv tool install "basic-memory @ git+https://github.com/basicmachines-co/basic-memory.git@main" --force',
+              `uv tool install "basic-memory @ git+https://github.com/basicmachines-co/basic-memory.git@${BASIC_MEMORY_RELEASE_TAG}" --force`,
               { encoding: "utf-8", timeout: 120_000, stdio: "pipe" },
             )
             log.info(

scripts/setup-bm.sh

@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
-# Install basic-memory CLI via uv from the latest main branch.
+# Install basic-memory CLI via uv from a pinned release tag.
 # Idempotent — safe to re-run. Fails gracefully when uv is absent.
 set -euo pipefail
 
 BM_REPO="https://github.com/basicmachines-co/basic-memory.git"
-BM_REF="${BM_REF:-v0.19.0}"
+BM_REF="${BM_REF:-v0.19.2}"
 
 # ── check for uv ──────────────────────────────────────────────────
 if ! command -v uv >/dev/null 2>&1; then