@digitalforgestudios/openclaw-sulcus 3.2.1 → 3.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -4,7 +4,7 @@
4
4
  "hooks": {
5
5
  "before_prompt_build": {
6
6
  "action": "inject_awareness",
7
- "enabled": true
7
+ "enabled": false
8
8
  },
9
9
  "before_agent_start": {
10
10
  "action": "auto_recall",
@@ -14,13 +14,13 @@
14
14
  },
15
15
  "agent_end": {
16
16
  "action": "none",
17
- "enabled": true
17
+ "enabled": false
18
18
  }
19
19
  },
20
20
  "tools": {
21
- "memory_recall": { "enabled": true },
22
- "memory_store": { "enabled": true },
23
- "memory_status": { "enabled": true },
21
+ "memory_recall": { "enabled": false },
22
+ "memory_store": { "enabled": false },
23
+ "memory_status": { "enabled": false },
24
24
  "consolidate": { "enabled": false },
25
25
  "export_markdown": { "enabled": false },
26
26
  "import_markdown": { "enabled": false },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@digitalforgestudios/openclaw-sulcus",
3
- "version": "3.2.1",
3
+ "version": "3.2.2",
4
4
  "description": "Sulcus — reactive, thermodynamic memory plugin for OpenClaw. Opt-in persistent memory with heat-based decay, semantic search, and cross-agent sync. Auto-recall and auto-capture disabled by default.",
5
5
  "keywords": [
6
6
  "openclaw",
@@ -277,8 +277,13 @@ function __wbg_get_imports() {
277
277
  return ret;
278
278
  },
279
279
  __wbg_new_no_args_1c7c842f08d00ebb: function(arg0, arg1) {
280
- const ret = new Function(getStringFromWasm0(arg0, arg1));
281
- return ret;
280
+ // Avoid dynamic code execution (new Function) — use safe globalThis fallback
281
+ const body = getStringFromWasm0(arg0, arg1);
282
+ if (body.includes('return this')) {
283
+ const ret = { call: () => globalThis };
284
+ return ret;
285
+ }
286
+ throw new Error(`sulcus-wasm: refusing dynamic code execution: ${body.substring(0, 60)}`);
282
287
  },
283
288
  __wbg_parse_708461a1feddfb38: function() { return handleError(function (arg0, arg1) {
284
289
  const ret = JSON.parse(getStringFromWasm0(arg0, arg1));