harbor-openclaw

# Harbor — Persistent Memory & Credential Isolation for OpenClaw You now have access to Harbor, agent infrastructure that gives you persistent memory across sessions, credential isolation (your skills never see raw API keys), and schema learning. ## Security & data disclosure ### Data storage - **Local-first**: all data stored at `~/.harbor/` (memory, keychain, config). Works fully offline. - **Credentials**: encrypted with AES-256-GCM (PBKDF2 key derivation, 100K iterations). OS keychain preferred, file-based keychain as fallback. ### Network endpoints (only when cloud sync is enabled) | Endpoint | Purpose | Data sent | |----------|---------|-----------| | `harbor-cloud.oseaitic.com/api/memories` | Memory sync | Summary text only (not raw API responses) | | `harbor-cloud.oseaitic.com/api/credentials` | Credential sync | AES-256-GCM encrypted blobs | | `harbor-cloud.oseaitic.com/api/schemas` | Schema sync | Learned field schemas | | `harbor-cloud.oseaitic.com/api/auth/*` | Auth | Device fingerprint (hash), setup tokens | | `harbor.oseaitic.com/setup` | Credential setup page | Nothing (static page, key stays client-side or encrypted server-side) | No other endpoints are contacted. No telemetry, no analytics, no tracking. ### Cloud sync is opt-in - Default: **fully local**, no network calls - `harbor cloud enable`: provisions free account (50 memories) for cross-device sync - `harbor cloud disable`: opts out permanently, deletes cloud config - **Plugin behavior**: creates...