@contextableai/openclaw-memory-rebac 0.1.1 → 0.1.3

package/dist/cli.js

@@ -421,17 +421,26 @@ export function registerCommands(cmd, ctx) {
                 console.log(); // newline after dots
             }
             console.log(`\nDiscovered ${totalFacts} fact(s) across ${totalEpisodes} episode(s).`);
+            // Deduplicate: the same edge can appear in multiple episodes
+            const seen = new Set();
+            const unique = tuples.filter((t) => {
+                const key = `${t.resourceType}:${t.resourceId}#${t.relation}@${t.subjectType}:${t.subjectId}`;
+                if (seen.has(key))
+                    return false;
+                seen.add(key);
+                return true;
+            });
             if (opts.dryRun) {
-                console.log(`[dry-run] Would write ${tuples.length} SpiceDB relationships.`);
+                console.log(`[dry-run] Would write ${unique.length} SpiceDB relationships (${tuples.length - unique.length} duplicates removed).`);
                 return;
             }
-            if (tuples.length === 0) {
+            if (unique.length === 0) {
                 console.log("No relationships to write.");
                 return;
             }
-            console.log(`Writing ${tuples.length} SpiceDB relationships...`);
+            console.log(`Writing ${unique.length} SpiceDB relationships (${tuples.length - unique.length} duplicates removed)...`);
             try {
-                const count = await spicedb.bulkImportRelationships(tuples);
+                const count = await spicedb.bulkImportRelationships(unique);
                 console.log(`Done: ${count} relationships written.`);
             }
             catch (err) {

package/dist/spicedb.js

@@ -114,11 +114,22 @@ export class SpiceDbClient {
     async bulkImportRelationships(tuples, batchSize = 1000) {
         if (tuples.length === 0)
             return 0;
-        // Try streaming bulk import first
+        // Try streaming bulk import first (uses CREATE semantics — rejects duplicates)
         if (typeof this.promises.bulkImportRelationships === "function") {
-            return this.bulkImportViaStream(tuples, batchSize);
+            try {
+                return await this.bulkImportViaStream(tuples, batchSize);
+            }
+            catch (err) {
+                // ALREADY_EXISTS means some relationships exist (e.g. partial previous run).
+                // Fall through to batched writeRelationships which uses TOUCH (idempotent).
+                const msg = err instanceof Error ? err.message : String(err);
+                if (msg.includes("ALREADY_EXISTS")) {
+                    return this.bulkImportViaWrite(tuples, batchSize);
+                }
+                throw err;
+            }
         }
-        // Fallback: batched writeRelationships
+        // Fallback: batched writeRelationships (uses TOUCH — idempotent)
         return this.bulkImportViaWrite(tuples, batchSize);
     }
     bulkImportViaStream(tuples, batchSize) {

package/docker/graphiti/{.env → .env.example}

@@ -1,6 +1,9 @@
 # ============================================================================
 # Graphiti FastAPI REST server configuration
 # ============================================================================
+# Copy this file to .env and fill in your values:
+#   cp .env.example .env
+#
 # Each AI component (LLM, embedder, reranker) can independently point to a
 # different service. If EMBEDDING_BASE_URL is not set, it defaults to
 # LLM_BASE_URL (or the OpenAI API if LLM_BASE_URL is also unset).
@@ -12,19 +15,19 @@
 #   Ollama:   http://host.docker.internal:11434/v1
 #   vLLM:     http://your-vllm-server:8000/v1
 #   OpenAI:   (leave LLM_BASE_URL empty to use default)
-LLM_BASE_URL=http://100.123.48.104:11434/v1
-LLM_MODEL=qwen2.5:14b
-LLM_API_KEY=not-needed
+# LLM_BASE_URL=http://host.docker.internal:11434/v1
+LLM_MODEL=gpt-4o-mini
+LLM_API_KEY=your-api-key-here
 
 # ============================================================================
 # Embedder
 # ============================================================================
 # Default: OpenAI text-embedding-3-small.
 # If EMBEDDING_BASE_URL is empty, uses LLM_BASE_URL (or OpenAI default).
-EMBEDDING_MODEL=nomic-embed-text
+# EMBEDDING_MODEL=text-embedding-3-small
 # EMBEDDING_BASE_URL=
 # EMBEDDING_API_KEY=
-EMBEDDING_DIM=768
+# EMBEDDING_DIM=
 
 # ============================================================================
 # Reranker / cross-encoder

package/docker/graphiti/startup.py

@@ -98,8 +98,11 @@ def patch():
             "WHERE $episode_uuid IN r.episodes "
             "RETURN DISTINCT r.uuid AS uuid"
         )
-        records, _, _ = await singleton_client.driver.execute_query(
-            query, {"episode_uuid": episode_uuid}
+        # Use the raw Neo4j async driver directly to avoid differences
+        # in the Graphiti Neo4jDriver.execute_query() wrapper across versions.
+        raw_driver = singleton_client.driver.client
+        records, _, _ = await raw_driver.execute_query(
+            query, parameters_={"episode_uuid": episode_uuid}
         )
         return [{"uuid": r["uuid"]} for r in records]
 

package/docker/spicedb/{.env → .env.example}

@@ -1,7 +1,9 @@
 # SpiceDB configuration
+# Copy this file to .env and fill in your values:
+#   cp .env.example .env
 
-# Preshared key for gRPC authentication
-SPICEDB_PRESHARED_KEY=dev_token
+# Preshared key for gRPC authentication (CHANGE THIS for production!)
+SPICEDB_PRESHARED_KEY=your-preshared-key-here
 
 # PostgreSQL password for SpiceDB backing store
 # SPICEDB_POSTGRES_PASSWORD=spicedb

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contextableai/openclaw-memory-rebac",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "OpenClaw two-layer memory plugin: SpiceDB ReBAC authorization + Graphiti knowledge graph",
   "type": "module",
   "license": "MIT",
@@ -23,7 +23,10 @@
     "openclaw.plugin.json",
     "plugin.defaults.json",
     "schema.zed",
-    "docker/",
+    "docker/**/*.yml",
+    "docker/**/*.py",
+    "docker/**/*.example",
+    "docker/**/Dockerfile",
     "scripts/",
     "bin/"
   ],