@contextableai/openclaw-memory-rebac 0.5.1 → 0.5.2

package/dist/index.js

@@ -99,9 +99,14 @@ const rebacMemoryPlugin = {
         const isHybrid = cfg.isHybrid;
         const spicedb = new SpiceDbClient(cfg.spicedb);
         const backendDefaultGroupId = defaultGroupId(cfg);
-        const liminalDefaultGroupId = isHybrid
+        const liminalBaseGroupId = isHybrid
             ? (cfg.liminalConfig["defaultGroupId"] ?? "main")
             : backendDefaultGroupId;
+        /** Per-agent liminal group — each agent gets its own conversational memory. */
+        function liminalGroupId(agentId) {
+            const id = agentId ?? cfg.subjectId;
+            return `${liminalBaseGroupId}:${id}`;
+        }
         // Suppress transient gRPC rejections from @grpc/grpc-js during connection setup
         const grpcRejectionHandler = (reason) => {
             const msg = String(reason);
@@ -598,7 +603,7 @@ const rebacMemoryPlugin = {
                     // 1. Search the liminal backend
                     const liminalResults = await searchAuthorizedMemories(liminal, {
                         query,
-                        groupIds: [liminalDefaultGroupId],
+                        groupIds: [liminalGroupId(ctx.agentId)],
                         limit: promoteLimit,
                     });
                     if (liminalResults.length === 0) {
@@ -678,7 +683,7 @@ const rebacMemoryPlugin = {
                         const autoRecallLimit = 8;
                         const liminalResults = await searchAuthorizedMemories(liminal, {
                             query: event.prompt,
-                            groupIds: [liminalDefaultGroupId],
+                            groupIds: [liminalGroupId(ctx?.agentId)],
                             limit: autoRecallLimit,
                             sessionId: state.sessionId,
                         });
@@ -798,10 +803,10 @@ const rebacMemoryPlugin = {
                     if (isHybrid) {
                         // Hybrid mode: store to liminal backend only (fire-and-forget, no SpiceDB).
                         // Primary backend (Graphiti) gets data only via explicit memory_store or memory_promote.
-                        const liminalGroupId = liminalDefaultGroupId;
+                        const agentLiminalGroup = liminalGroupId(ctx?.agentId);
                         await liminal.store({
                             content: episodeBody,
-                            groupId: liminalGroupId,
+                            groupId: agentLiminalGroup,
                             sourceDescription: "auto-captured conversation",
                         });
                         // Liminal session enrichment
@@ -832,7 +837,7 @@ const rebacMemoryPlugin = {
                             if (userMsg && assistantMsg) {
                                 liminal.enrichSession({
                                     sessionId: state.sessionId,
-                                    groupId: liminalGroupId,
+                                    groupId: agentLiminalGroup,
                                     userMsg,
                                     assistantMsg,
                                 }).catch(() => { });
@@ -951,19 +956,27 @@ const rebacMemoryPlugin = {
                 const defaultState = getDefaultState();
                 const backendStatus = await backend.getStatus();
                 let spicedbOk = false;
+                const schemaPath = join(dirname(fileURLToPath(import.meta.url)), "schema.zed");
+                const schema = readFileSync(schemaPath, "utf-8");
                 try {
-                    const existing = await spicedb.readSchema();
+                    // Always write — SpiceDB normalizes formatting so text comparison is unreliable
+                    api.logger.info("openclaw-memory-rebac: writing SpiceDB schema");
+                    await spicedb.writeSchema(schema);
                     spicedbOk = true;
-                    const schemaPath = join(dirname(fileURLToPath(import.meta.url)), "schema.zed");
-                    const schema = readFileSync(schemaPath, "utf-8");
-                    if (!existing || existing.trim() !== schema.trim()) {
-                        api.logger.info("openclaw-memory-rebac: writing SpiceDB schema (first run or update)");
+                    api.logger.info("openclaw-memory-rebac: SpiceDB schema written successfully");
+                }
+                catch (err) {
+                    // Retry once after a short delay (SpiceDB may still be starting)
+                    api.logger.warn(`openclaw-memory-rebac: SpiceDB schema write failed, retrying in 2s: ${err instanceof Error ? err.message : String(err)}`);
+                    try {
+                        await new Promise((r) => setTimeout(r, 2000));
                         await spicedb.writeSchema(schema);
-                        api.logger.info("openclaw-memory-rebac: SpiceDB schema written successfully");
+                        spicedbOk = true;
+                        api.logger.info("openclaw-memory-rebac: SpiceDB schema written successfully (retry)");
+                    }
+                    catch (retryErr) {
+                        api.logger.error(`openclaw-memory-rebac: SpiceDB schema write failed after retry: ${retryErr instanceof Error ? retryErr.message : String(retryErr)}`);
                     }
-                }
-                catch {
-                    // Will be retried on first use
                 }
                 if (spicedbOk) {
                     // Ensure the config-level subject is a member of the default group

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contextableai/openclaw-memory-rebac",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "OpenClaw composite memory plugin: SpiceDB ReBAC authorization with Graphiti knowledge graph (primary) and optional EverMemOS liminal memory",
   "type": "module",
   "license": "MIT",