Code Pluginsource linked

Celiums Cognitionv0.1.2

Persistent emotional memory for OpenClaw agents — ethics gate, SHA-chained journal, PAD-circadian limbic, hybrid retrieval (Postgres + Qdrant + Valkey + OpenSearch).

@celiumsai/cognition·runtime celiums-cognition·by @celiumsai
Community code plugin. Review compatibility and verification before install.
openclaw plugins install clawhub:@celiumsai/cognition
Latest release: v0.1.2Download zip

Capabilities

configSchema
Yes
Executes code
Yes
HTTP routes
0
Plugin kind
memory
Runtime ID
celiums-cognition

Compatibility

Built With Open Claw Version
2026.5.19
Min Gateway Version
2026.5.18
Plugin Api Range
>=2026.5.18
Plugin Sdk Version
2026.5.19
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The capabilities broadly match the stated purpose: persistent memory, auto-recall, auto-capture, journaling, ethics review, research/write tools, and an operator dashboard.
Instruction Scope
The plugin registers startup services, prompt-build hooks, agent-end hooks, ethics hooks before prompts and tool calls, HTTP routes, CLI, and many tools; most of this is disclosed and configurable, but it gives the plugin broad influence over agent context and execution.
!
Install Mechanism
On startup it may run Docker Compose, create credentials under ~/.celiums-cognition, apply migrations, download seed/corpus data, and attempt a host sysctl change for OpenSearch; this is purpose-aligned but high-impact for an OpenClaw plugin.
Credentials
The README clearly frames this as a VPS or dedicated-host plugin, and the bundled services bind to loopback, but it is not proportionate for casual or low-resource local use.
!
Persistence & Privilege
It persistently stores user prompts, memories, journals, user profiles, activity counters, audit logs, and vectors; the ethics_audit schema says raw content is not stored while the handler saves up to 2000 characters in action_attempted.
Scan Findings in Context
[SDI-4] unexpected: Several documentation/code drift reports are minor contract mismatches, but two are security-relevant: ethics_audit stores raw content despite saying it is not stored, and a hosted profile signature verification path always returns true. The profile loader does not appear to be used by the default ethics layer, so that issue is downgraded but still worth fixing.
[SDI-2] expected: Memory, profile updates, journal storage, audit tables, deletion helpers, embeddings, and research-source fetching are mostly expected for this plugin's declared persistent-memory and research purpose, though they increase the amount of retained local data.
What to consider before installing
Install only on a dedicated host where you are comfortable with automatic Docker provisioning, persistent capture of conversations, local databases/vector indexes, and ethics audit retention. Review the CELIUMS_* environment variables, disable auto-capture/auto-recall/journal features if you do not want default persistence, and avoid exposing the local services or dashboard without strong access controls.
dist/chunk-RWZ5QS2I.js:26
Shell command execution detected (child_process).
dist/chunk-662ROSFZ.js:2959
Dynamic code execution detected.
dist/chunk-5CO6ZX7U.js:6
Environment variable access combined with network send.
dist/chunk-662ROSFZ.js:7718
Environment variable access combined with network send.
dist/chunk-NON7D4CE.js:10
Environment variable access combined with network send.
dist/chunk-XBM2XFML.js:31
Environment variable access combined with network send.
dist/chunk-YJHGX4JE.js:6
Environment variable access combined with network send.
dist/index.js:215
Environment variable access combined with network send.
dist/chunk-662ROSFZ.js:14496
File appears to expose a hardcoded API secret or token.
dist/store-52EKWAAU.js:344
File appears to expose a hardcoded API secret or token.
!
dist/chunk-662ROSFZ.js:13563
HTTPS certificate verification is disabled.
!
dist/store-52EKWAAU.js:346
HTTPS certificate verification is disabled.
!
dist/compose/docker-compose.yml:117
Install source points to URL shortener or raw IP.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
398a8a44673b
Tag
main
Provenance
No
Scan status
suspicious

Tags

latest
0.1.2

Celiums Cognition

npm npm downloads license

Persistent emotional memory for OpenClaw agents. SHA-chained journal, multi-layer ethics gate, PAD + circadian limbic engine, hybrid memory retrieval, and ~60 cognitive tools — all wired into the agent's lifecycle by default.


Enterprise-grade infrastructure, not a laptop plugin

Celiums Cognition runs a four-container Docker stack (Postgres + pgvector, Qdrant, Valkey, OpenSearch), downloads ~110 MB of curated corpora on first install, and holds ~1.5 GB of RAM steady-state. The engine is deliberately heavy because every layer (ethics, journal, limbic, hybrid retrieval) needs to run at agent speed — there is no "lite mode" by design.

Designed for:

  • VPS hosts dedicated to running OpenClaw (≥ 4 GB RAM, ≥ 2 vCPU, Linux + Docker)
  • Mac minis and headless workstations driving an agent fleet
  • Enterprise OpenClaw deployments (such as Celiums AI) where the gateway is managed end-to-end by agents and sub-agents — not by a human typing at the terminal

If you're running OpenClaw on a laptop with minimum specs, or for one-off experimentation, use the bundled memory-core (file-based, zero infra) or the official memory-lancedb extension instead. Both ship with OpenClaw and don't need Docker.


openclaw plugins install clawhub:@celiumsai/cognition

That's the entire install. On first start, the plugin auto-bootstraps a four-container stack (Postgres + Qdrant + Valkey + OpenSearch) via Docker, mints a unique database password (chmod 600), applies the engine migrations, downloads the curated 10K-skills seed (SHA-256 verified) into Postgres, and bulk-indexes the ethics corpus (~1857 docs, 1024-dim embeddings, SHA-256 verified) into OpenSearch. By the time the gateway reports ready, every layer of the plugin is populated. No manual setup step, no SaaS, no required keys.


What it does, layer by layer

SurfaceWhat the agent gains
Auto-recallEvery prompt is enriched with relevant memories, the agent's identity preamble, subagent briefings (when applicable), and a structured turn_context. Cache-stable, ~3000-char budget.
Auto-captureThe user's last message at every agent turn end is stored as a memory with importance scoring + PAD analysis.
Auto-journalEvery meaningful turn writes a first-person SHA-256-chained journal entry: decision / reflection / lesson / belief / arc / doubt. Tamper-evident, hash-verified, agent-scoped.
Ethics gateFive-layer pipeline (lexicon → CVaR → multi-framework LLM → corpus-grounded → audit) runs before every prompt and tool call. Block decisions carry category + source + audit trail.
Subagent lineageThe plugin observes subagent_spawning/spawned/ended, builds a parent ↔ child tree, briefs children with relevant parent journal entries, refuses cycles past depth 3.
Session boundariessession_start / session_end write anchor entries with deterministic summaries (reason, duration, message count, journal counts). Resumed sessions carry a resumed-from:<id> tag.
Compaction continuityWhen the context window rotates, the plugin persists high-value facts as memories AND writes an arc journal entry so the next turn can pick up the thread.
Operator dashboardReact SPA at /plugins/celiums-cognition/ shows live PAD + circadian, agent state, journal hash chain, memory search, ethics audit log, subagent lineage tree.
Operator actionsFive inline slash commands (celiums.remember, .recall, .limbic, .forget, .status). The destructive ones (forget) require a typed two-press confirmation with mandatory reason.
Channel mailboxPOST /api/celiums-cognition/inbox/inject enqueues a note that the target session sees at the top of its next turn. External plugins (Telegram, Slack, email) push through here; nothing flows directly into UI state.
GovernanceEvery block decision propagates to the gateway's central security-audit log as a SecurityAuditFinding. Tool registrations carry group + risk metadata (memory / journal / ethics / cognitive / atlas / research / write × low
Heartbeat snapshotProactive ticks see a state snapshot (memory count, open subagents, ethics mode, last journal hash) — never a fabricated result.

Every line above is a wired SDK seam on the OpenClaw 2026.5+ runtime, not a hypothetical capability. See docs/transversal-roadmap.md for the design rationale behind each piece and docs/celiums-cognition-doctrine.md for the 40 principles that shape the implementation.


Quickstart

# 1. Install (in your gateway)
openclaw plugins install clawhub:@celiumsai/cognition

# 2. Verify the stack is up
curl -s http://localhost:18789/api/celiums-cognition/health | jq .stack
# postgres: ok | qdrant: ok | valkey: ok | opensearch: ok (ethics_corpus_docs ~1857) | tei: ok

# 3. Open the dashboard
open http://localhost:18789/plugins/celiums-cognition/
# Sign up (first user becomes the operator), then explore Overview,
# Memories, Journal, Skills, Ethics, Settings.

Concrete walkthroughs for the most-asked flows live under docs/examples/:


Configuration

The plugin honours these env vars at start (all optional):

EnvDefaultPurpose
CELIUMS_DATABASE_URLderived from ~/.celiums-cognition/credentials.envPostgres connection URL
CELIUMS_QDRANT_URLhttp://localhost:6333Qdrant HTTP endpoint
CELIUMS_VALKEY_URLredis://localhost:6379Valkey / Redis cache
OPENSEARCH_URLhttp://127.0.0.1:9200Ethics-corpus index host
ETHICS_INDEXethics_knowledgeOpenSearch index name
TEI_URLhttp://localhost:8080Text-Embeddings-Inference
CELIUMS_EMBEDDING_DIM1024Must match TEI output
CELIUMS_SEED_URLhttps://celiums-seed-public.nyc3.digitaloceanspaces.com/seedSkills seed manifest + tarball base URL
CELIUMS_SEED_VERSIONv1Skills seed version label
CELIUMS_SEED_SKIPunsetSet true to skip the skills seed (forage returns empty until populated)
CELIUMS_ETHICS_CORPUS_URLceliums-memory v2.0.0 GitHub release assetEthics corpus jsonl
CELIUMS_ETHICS_CORPUS_SHA256known sha of the v2.0.0 assetTamper protection
CELIUMS_ETHICS_CORPUS_SKIPunsetSet true to skip the ethics corpus load (Layer D abstains)
CELIUMS_TRUST_PROXY_HEADERSunsetSet true only when the gateway sits behind a reverse proxy you control
TZhost's /etc/timezoneContainer + process timezone

Per-plugin config (openclaw.json) accepts userId, agentId, exposedTools (curated | all), and the toggles for ethics.enabled, ethics.strictMode, autoRecall.enabled, autoCapture.enabled, journal.autoWrite.enabled. The full schema is declared in packages/shared/src/config-schema/index.ts.


Monorepo layout

packages/engine   @celiumsai/cognition-engine  (private — vendored Celiums Memory v2.0)
packages/shared   @celiumsai/cognition-shared  (private — plugin adapter + HTTP routes)
packages/hard     @celiumsai/cognition         (publishable)

The shared adapter is partitioned by domain after the A1 split: plugin-adapter/hooks/* for SDK lifecycle hooks, wiring/* for register-style integrations, routes/* for HTTP endpoints. Every file sits under 300 LOC. The context.ts module owns the shared closure surface (readiness gate, lazy engine init, throttles, refs).


Status

Pre-1.0 — feature-complete against the six transversal phases (A continuity, B subagents, C session lifecycle, D operator UX, E governance, F autonomy + channels), audit-hardened, and running in production on a single-tenant gateway. The publish track (npm + ClawHub) is gated on an explicit go-ahead. See docs/transversal-roadmap.md for the current phase map.


License

Apache-2.0 © Celiums Solutions LLC. See LICENSE and NOTICE. The engine vendors celiums-memory v2.0 (github.com/terrizoaguimor/celiums-memory, Apache-2.0); each vendored file carries the canonical NOTICE header.