@openviking/openclaw-plugin 2026.8.6 → 2026.8.11

package/INSTALL-ZH.md

@@ -238,7 +238,7 @@ openclaw openviking setup --base-url <OPENVIKING_URL> --api-key <API_KEY> --peer
   | --- | --- | --- |
   | `env` | `{ "source": "env", "id": "OPENVIKING_API_KEY" }` | 启动时读取同名环境变量。 |
   | `file` | `{ "source": "file", "id": "/etc/secrets/openviking.key" }` | 以 UTF-8 读取并去除首尾空白；`~` 可展开，适配 Kubernetes `secretKeyRef` 卷挂载、0600 权限文件。 |
-  | `exec` | `{ "source": "exec", "provider": "op", "id": "op://vault/openviking/credential" }` | 运行 `<provider> <id>`，去除 stdout 首尾空白（1Password `op`、Vault、gopass 等均符合此形态）。 |
+  | `exec` | 打包版插件不支持（应用市场安装扫描会拦截子进程执行） | 改用命令包一层环境变量：`OPENVIKING_API_KEY=$(op read op://vault/openviking/credential)`，然后配 `env`。 |
 
   仍可使用纯字符串形式（含 `${ENV_VAR}` 插值）作为向后兼容路径；此时请限制文件权限或通过受控 Secret 卷提供，并在修改后重启 Gateway、容器或 Pod。
 

package/INSTALL.md

@@ -182,7 +182,7 @@ If the `openclaw` CLI cannot run inside the container, merge the following field
   | --- | --- | --- |
   | `env` | `{ "source": "env", "id": "OPENVIKING_API_KEY" }` | Reads the named env var at plugin load time. |
   | `file` | `{ "source": "file", "id": "/etc/secrets/openviking.key" }` | Reads UTF-8, trims whitespace. `~` is expanded; ideal for Kubernetes `secretKeyRef` volumes and 0600-managed files. |
-  | `exec` | `{ "source": "exec", "provider": "op", "id": "op://vault/openviking/credential" }` | Runs `<provider> <id>` and trims stdout (1Password `op`, Vault, gopass, etc. all match this shape). |
+  | `exec` | not supported in the packaged plugin (marketplace install scanners block subprocess execution) | Wrap the CLI instead: `OPENVIKING_API_KEY=$(op read op://vault/openviking/credential)` and use `env`. |
 
   A plain `string` (including `${ENV_VAR}` interpolation) is still accepted, but only as a backward-compatibility path; in that case, restrict file permissions or provide the file through a managed Secret volume, then restart the Gateway, container, or Pod.
 

package/README.md

@@ -46,8 +46,6 @@ Once installed, the plugin provides these agent tools:
 | `ov_read` | Read the full original content of one exact OpenViking URI |
 | `ov_multi_read` | Read the full original content of multiple OpenViking URIs |
 | `ov_list` | List OpenViking directories after search to inspect sibling chunks and overview files |
-| `search_experience` | Search reusable execution experiences for the current OpenViking user |
-| `read_experience` | Read one exact Experience returned by `search_experience` |
 | `openviking_tool_result_read` | Restore the full original content of an externalized tool result |
 | `openviking_tool_result_search` | Search inside an externalized tool result by keyword |
 | `openviking_tool_result_list` | List externalized tool results in the current session |
@@ -250,8 +248,6 @@ Beyond automatic behavior, the plugin exposes these tools directly:
 - `ov_read`: read one exact `viking://` URI returned by `ov_search` or `ov_list`
 - `ov_multi_read`: read multiple exact `viking://` URIs, useful for an overview plus sibling chunks
 - `ov_list`: list a hit's parent directory after `ov_search` to recover sibling chunks, `.overview.md`, and related split-document context
-- `search_experience`: search reusable execution experiences for the current OpenViking user
-- `read_experience`: read one exact Experience returned by `search_experience`
 
 They serve different roles:
 
@@ -265,7 +261,6 @@ They serve different roles:
 - `ov_read` turns a ranked hit into original evidence before answering precise documentation, codebase, configuration, or procedural questions
 - `ov_multi_read` reads overview and sibling chunks together when a split document needs more context than a single hit
 - `ov_list` complements `ov_search` when a ranked hit is only one chunk of a larger procedure or document
-- `search_experience` and `read_experience` provide the exact tool-call contract used by the bundled Experience Memory skill and usage reporting
 
 `ov_archive_expand` is especially important because `assemble()` normally returns archive summaries and indexes, not the full raw transcript.
 

package/config.ts

@@ -16,11 +16,11 @@ import { getEnv } from "./runtime-utils.js";
  *                     leading/trailing whitespace trimmed — convenient for
  *                     Kubernetes `secretKeyRef` mount volumes and
  *                     file-permission-only deployments.
- *   source: "exec" -> delegate to host `openclaw` secret resolver when the
- *                     runtime exposes it; today the plugin performs a
- *                     best-effort `provider + id` CLI exec call so that
- *                     1Password / Vault / gopass users can share OpenViking
- *                     credentials with their other providers.
+ *   source: "exec" -> NOT supported in the packaged plugin. Marketplace
+ *                     install scanners (OpenClaw/ArkClaw) block any plugin
+ *                     whose shipped code can spawn subprocesses, so the exec
+ *                     resolver was removed from this build; configuring it
+ *                     fails with a clear error pointing at env/file instead.
  */
 export type OpenVikingSecretRef =
   | { source: "env"; id: string }
@@ -170,8 +170,6 @@ export const OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES = [
   "ov_read",
   "ov_multi_read",
   "ov_list",
-  "search_experience",
-  "read_experience",
   "memory_recall",
   "ov_recall_trace",
   "memory_store",
@@ -192,7 +190,9 @@ export const OPENVIKING_TOOL_GROUPS: Record<string, readonly OpenVikingToolName[
   default: OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES,
   memory: ["memory_recall", "memory_store", "memory_forget"],
   resource_query: ["ov_search", "ov_read", "ov_multi_read", "ov_list"],
-  experience: ["search_experience", "read_experience"],
+  // Migration alias for configurations that previously selected the removed
+  // search_experience/read_experience tools.
+  experience: ["ov_search", "ov_read"],
   import: ["add_resource", "add_skill"],
   recall_trace: ["ov_recall_trace"],
   archive: ["ov_archive_search", "ov_archive_expand"],
@@ -232,13 +232,10 @@ function resolvePeerPrefix(configured: unknown): string {
  *     Missing / unreadable files propagate the original node error with an
  *     error prefix that names the OpenViking field, so the user knows which
  *     secretRef failed to load.
- *   * `exec`: shells out `<provider> <id>`. Providers commonly expose this
- *     shape (1Password CLI, gopass, HashiCorp Vault), which matches how
- *     OpenClaw's own `@transmitt0r/openclaw-plugin-onepassword` provider
- *     resolves `{source:"exec", provider:"onepassword", id:"..."}`. Exec is
- *     best-effort; failures surface with an error prefix so users can
- *     distinguish `provider not installed` from `provider configured but id
- *     missing`.
+ *   * `exec`: rejected with a "not supported" error. The subprocess-based
+ *     resolver was removed because marketplace install scanners block plugins
+ *     whose shipped code can spawn processes; wrap the secret-manager CLI
+ *     output into an env var or file instead (`OPENVIKING_API_KEY=$(op ...)`).
  */
 function resolveSecret(
   value: string | OpenVikingSecretRef | undefined | null,
@@ -249,7 +246,7 @@ function resolveSecret(
   if (!value || typeof value !== "object") {
     throw new Error(
       `OpenViking ${label} must be a plain string or a SecretRef object ` +
-        `({source:"env"|"file"|"exec", id})`,
+        `({source:"env"|"file", id})`,
     );
   }
   const obj = value as Record<string, unknown>;
@@ -280,39 +277,18 @@ function resolveSecret(
       }
     }
     case "exec": {
-      const provider = typeof (obj as Record<string, unknown>).provider === "string"
-        ? (obj as Record<string, unknown>).provider as string
-        : "";
-      if (!provider) {
-        throw new Error(
-          `OpenViking ${label} SecretRef exec source requires a "provider" field naming the secret-manager CLI on PATH`,
-        );
-      }
-      try {
-        // Avoid top-level `import "node:child_process"` — this branch is rare
-        // and keeping the require lazy makes startup marginally faster for
-        // the 95% of users who pick env/file.
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const { execFileSync } = require("node:child_process") as typeof import("node:child_process");
-        const out = execFileSync(provider, [id], {
-          encoding: "utf8",
-          stdio: ["ignore", "pipe", "pipe"],
-          timeout: 15_000,
-          env: process.env,
-        }) as string;
-        return out.trim();
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        throw new Error(
-          `OpenViking ${label} SecretRef exec source: provider "${provider}" failed for id "${id}" (${msg})`,
-        );
-      }
+      throw new Error(
+        `OpenViking ${label} SecretRef exec source is not supported in the packaged plugin ` +
+          `(marketplace install scanners block subprocess execution). Export the secret to an ` +
+          `environment variable ({source:"env"}) or a file ({source:"file"}) instead, e.g. ` +
+          `OPENVIKING_API_KEY=$(op read ${id}).`,
+      );
     }
     default:
       throw new Error(
         `OpenViking ${label} SecretRef has unknown source "${String(
           (obj as Record<string, unknown>).source,
-        )}". Supported: "env" | "file" | "exec".`,
+        )}". Supported: "env" | "file".`,
       );
   }
 }
@@ -816,7 +792,7 @@ export const memoryOpenVikingConfigSchema = {
       placeholder: "${OPENVIKING_API_KEY}",
       help:
         "Optional API key for OpenViking server. Accepts a plain string, " +
-        "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). " +
+        "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). " +
         "Prefer the SecretRef shapes so the key never sits as plaintext in openclaw.json.",
     },
     headers: {
@@ -975,7 +951,7 @@ export const memoryOpenVikingConfigSchema = {
     enabledTools: {
       label: "Enabled Tools",
       placeholder: "default",
-      help: "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, experience, import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
+      help: "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, experience (legacy alias), import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
       advanced: true,
     },
     disabledTools: {

package/dist/config.js

@@ -35,8 +35,6 @@ export const OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES = [
     "ov_read",
     "ov_multi_read",
     "ov_list",
-    "search_experience",
-    "read_experience",
     "memory_recall",
     "ov_recall_trace",
     "memory_store",
@@ -56,7 +54,9 @@ export const OPENVIKING_TOOL_GROUPS = {
     default: OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES,
     memory: ["memory_recall", "memory_store", "memory_forget"],
     resource_query: ["ov_search", "ov_read", "ov_multi_read", "ov_list"],
-    experience: ["search_experience", "read_experience"],
+    // Migration alias for configurations that previously selected the removed
+    // search_experience/read_experience tools.
+    experience: ["ov_search", "ov_read"],
     import: ["add_resource", "add_skill"],
     recall_trace: ["ov_recall_trace"],
     archive: ["ov_archive_search", "ov_archive_expand"],
@@ -94,13 +94,10 @@ function resolvePeerPrefix(configured) {
  *     Missing / unreadable files propagate the original node error with an
  *     error prefix that names the OpenViking field, so the user knows which
  *     secretRef failed to load.
- *   * `exec`: shells out `<provider> <id>`. Providers commonly expose this
- *     shape (1Password CLI, gopass, HashiCorp Vault), which matches how
- *     OpenClaw's own `@transmitt0r/openclaw-plugin-onepassword` provider
- *     resolves `{source:"exec", provider:"onepassword", id:"..."}`. Exec is
- *     best-effort; failures surface with an error prefix so users can
- *     distinguish `provider not installed` from `provider configured but id
- *     missing`.
+ *   * `exec`: rejected with a "not supported" error. The subprocess-based
+ *     resolver was removed because marketplace install scanners block plugins
+ *     whose shipped code can spawn processes; wrap the secret-manager CLI
+ *     output into an env var or file instead (`OPENVIKING_API_KEY=$(op ...)`).
  */
 function resolveSecret(value, label) {
     if (value === undefined || value === null)
@@ -109,7 +106,7 @@ function resolveSecret(value, label) {
         return value;
     if (!value || typeof value !== "object") {
         throw new Error(`OpenViking ${label} must be a plain string or a SecretRef object ` +
-            `({source:"env"|"file"|"exec", id})`);
+            `({source:"env"|"file", id})`);
     }
     const obj = value;
     if (typeof obj.id !== "string" || !obj.id) {
@@ -136,33 +133,13 @@ function resolveSecret(value, label) {
             }
         }
         case "exec": {
-            const provider = typeof obj.provider === "string"
-                ? obj.provider
-                : "";
-            if (!provider) {
-                throw new Error(`OpenViking ${label} SecretRef exec source requires a "provider" field naming the secret-manager CLI on PATH`);
-            }
-            try {
-                // Avoid top-level `import "node:child_process"` — this branch is rare
-                // and keeping the require lazy makes startup marginally faster for
-                // the 95% of users who pick env/file.
-                // eslint-disable-next-line @typescript-eslint/no-var-requires
-                const { execFileSync } = require("node:child_process");
-                const out = execFileSync(provider, [id], {
-                    encoding: "utf8",
-                    stdio: ["ignore", "pipe", "pipe"],
-                    timeout: 15_000,
-                    env: process.env,
-                });
-                return out.trim();
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                throw new Error(`OpenViking ${label} SecretRef exec source: provider "${provider}" failed for id "${id}" (${msg})`);
-            }
+            throw new Error(`OpenViking ${label} SecretRef exec source is not supported in the packaged plugin ` +
+                `(marketplace install scanners block subprocess execution). Export the secret to an ` +
+                `environment variable ({source:"env"}) or a file ({source:"file"}) instead, e.g. ` +
+                `OPENVIKING_API_KEY=$(op read ${id}).`);
         }
         default:
-            throw new Error(`OpenViking ${label} SecretRef has unknown source "${String(obj.source)}". Supported: "env" | "file" | "exec".`);
+            throw new Error(`OpenViking ${label} SecretRef has unknown source "${String(obj.source)}". Supported: "env" | "file".`);
     }
 }
 function resolvePeerRole(configured) {
@@ -519,7 +496,7 @@ export const memoryOpenVikingConfigSchema = {
             sensitive: true,
             placeholder: "${OPENVIKING_API_KEY}",
             help: "Optional API key for OpenViking server. Accepts a plain string, " +
-                "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). " +
+                "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). " +
                 "Prefer the SecretRef shapes so the key never sits as plaintext in openclaw.json.",
         },
         headers: {
@@ -676,7 +653,7 @@ export const memoryOpenVikingConfigSchema = {
         enabledTools: {
             label: "Enabled Tools",
             placeholder: "default",
-            help: "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, experience, import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
+            help: "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, experience (legacy alias), import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
             advanced: true,
         },
         disabledTools: {

package/dist/index.js

@@ -15,7 +15,6 @@ import { registerOpenVikingCommands } from "./plugin/command-registration.js";
 import { registerRecallTraceRoutes as registerRecallTraceRouteAdapters } from "./plugin/recall-trace-routes.js";
 import { createOpenVikingService } from "./plugin/openviking-services.js";
 import { registerOpenVikingArchiveTools } from "./plugin/openviking-archive-tools.js";
-import { registerOpenVikingExperienceTools } from "./plugin/openviking-experience-tools.js";
 import { createOpenVikingImportRuntime } from "./plugin/openviking-import-runtime.js";
 import { registerOpenVikingImportTools } from "./plugin/openviking-import-tools.js";
 import { registerOpenVikingLifecycleHooks } from "./plugin/openviking-lifecycle-hooks.js";
@@ -137,14 +136,6 @@ const contextEnginePlugin = {
             isBypassedSession,
             makeBypassedToolResult,
         });
-        registerOpenVikingExperienceTools({
-            registerTool: registerOpenVikingTool,
-            getClient,
-            resolvePluginSessionRouting,
-            isBypassedSession,
-            makeBypassedToolResult,
-            userId: cfg.userId,
-        });
         registerOpenVikingMemoryRecallTools({
             registerTool: registerOpenVikingTool,
             getClient,

package/dist/text-utils.js

@@ -346,7 +346,7 @@ export function extractNewTurnMessages(messages, startIndex) {
                             toolName,
                             toolInput,
                             toolOutput: output,
-                            toolStatus: "completed",
+                            toolStatus: msg.isError === true ? "error" : "completed",
                         }],
                 });
             }

package/index.ts

@@ -19,7 +19,6 @@ import { registerOpenVikingCommands } from "./plugin/command-registration.js";
 import { registerRecallTraceRoutes as registerRecallTraceRouteAdapters } from "./plugin/recall-trace-routes.js";
 import { createOpenVikingService } from "./plugin/openviking-services.js";
 import { registerOpenVikingArchiveTools } from "./plugin/openviking-archive-tools.js";
-import { registerOpenVikingExperienceTools } from "./plugin/openviking-experience-tools.js";
 import { createOpenVikingImportRuntime } from "./plugin/openviking-import-runtime.js";
 import { registerOpenVikingImportTools } from "./plugin/openviking-import-tools.js";
 import { registerOpenVikingLifecycleHooks } from "./plugin/openviking-lifecycle-hooks.js";
@@ -281,15 +280,6 @@ const contextEnginePlugin = {
       makeBypassedToolResult,
     });
 
-    registerOpenVikingExperienceTools({
-      registerTool: registerOpenVikingTool,
-      getClient,
-      resolvePluginSessionRouting,
-      isBypassedSession,
-      makeBypassedToolResult,
-      userId: cfg.userId,
-    });
-
     registerOpenVikingMemoryRecallTools({
       registerTool: registerOpenVikingTool,
       getClient,

package/install-manifest.json

@@ -41,7 +41,6 @@
       ".gitignore",
       "skills/install-openviking-memory/SKILL.md",
       "skills/openviking-context-database/SKILL.md",
-      "skills/ov-experience-memory/SKILL.md",
       "INSTALL-AGENT.md"
     ]
   },

package/openclaw.plugin.json

@@ -19,8 +19,6 @@
       "ov_read",
       "ov_multi_read",
       "ov_list",
-      "search_experience",
-      "read_experience",
       "memory_recall",
       "ov_recall_trace",
       "memory_store",
@@ -100,7 +98,7 @@
       "label": "OpenViking API Key",
       "sensitive": true,
       "placeholder": "${OPENVIKING_API_KEY}",
-      "help": "Optional API key for OpenViking server. Accepts a plain string, ${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). Prefer a SecretRef so the key is never stored as plaintext in openclaw.json."
+      "help": "Optional API key for OpenViking server. Accepts a plain string, ${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). Prefer a SecretRef so the key is never stored as plaintext in openclaw.json."
     },
     "headers": {
       "label": "Headers",
@@ -254,7 +252,7 @@
     "enabledTools": {
       "label": "Enabled Tools",
       "placeholder": "default",
-      "help": "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, experience, import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
+      "help": "Agent-visible tool allowlist. Accepts tool names or groups: default, all, memory, resource_query, import, recall_trace, archive, tool_result. add_resource also requires enableAddResourceTool=true.",
       "advanced": true
     },
     "disabledTools": {
@@ -320,18 +318,6 @@
               "source": { "type": "string", "const": "file" },
               "id": { "type": "string", "description": "Absolute file path or ~/relative path. Example: /etc/secrets/openviking.key." }
             }
-          },
-          {
-            "type": "object",
-            "title": "SecretRef (exec)",
-            "description": "Read the API key by shelling out to a secret-manager CLI. Matches the shape used by OpenClaw's core provider configs so 1Password, HashiCorp Vault, gopass, etc. can manage the OpenViking key alongside LLM/TTS/MCP credentials.",
-            "additionalProperties": false,
-            "required": ["source", "provider", "id"],
-            "properties": {
-              "source": { "type": "string", "const": "exec" },
-              "provider": { "type": "string", "description": "CLI binary name on PATH. Examples: op, vault, gopass." },
-              "id": { "type": "string", "description": "Argument passed to the provider CLI to select the specific secret, e.g. 'vault kv get -field=key secret/openviking' in plain-arg form; this implementation passes id as a single arg." }
-            }
           }
         ]
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openviking/openclaw-plugin",
-  "version": "2026.8.6",
+  "version": "2026.8.11",
   "displayName": "OpenViking",
   "description": "OpenClaw context-engine plugin — OpenViking AI memory, long-term memory, knowledge base, semantic search, RAG, context engine. 长期记忆 · 知识库 · 语义检索 · 上下文引擎",
   "type": "module",

package/registries/openviking-tools.ts

@@ -1,7 +1,6 @@
 export type OpenVikingToolGroup =
   | "memory"
   | "resource_query"
-  | "experience"
   | "import"
   | "recall_trace"
   | "archive"
@@ -14,8 +13,6 @@ export type OpenVikingToolName =
   | "ov_read"
   | "ov_multi_read"
   | "ov_list"
-  | "search_experience"
-  | "read_experience"
   | "memory_recall"
   | "ov_recall_trace"
   | "memory_store"
@@ -47,8 +44,6 @@ export const OPENVIKING_TOOL_SPECS = [
   { name: "ov_read", group: "resource_query", defaultEnabled: true },
   { name: "ov_multi_read", group: "resource_query", defaultEnabled: true },
   { name: "ov_list", group: "resource_query", defaultEnabled: true },
-  { name: "search_experience", group: "experience", defaultEnabled: true },
-  { name: "read_experience", group: "experience", defaultEnabled: true },
   { name: "memory_recall", group: "memory", defaultEnabled: true },
   { name: "ov_recall_trace", group: "recall_trace", defaultEnabled: true },
   { name: "memory_store", group: "memory", defaultEnabled: true },
@@ -69,7 +64,6 @@ export const OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES = OPENVIKING_TOOL_SPECS
 const OPENVIKING_TOOL_GROUP_ORDER: readonly OpenVikingToolGroup[] = [
   "memory",
   "resource_query",
-  "experience",
   "import",
   "recall_trace",
   "archive",
@@ -79,6 +73,8 @@ const OPENVIKING_TOOL_GROUP_ORDER: readonly OpenVikingToolGroup[] = [
 export const OPENVIKING_TOOL_GROUPS: Record<string, readonly OpenVikingToolName[]> = {
   all: OPENVIKING_ALL_TOOL_NAMES,
   default: OPENVIKING_DEFAULT_ENABLED_TOOL_NAMES,
+  // Migration alias for the removed dedicated Experience tools.
+  experience: ["ov_search", "ov_read"],
   ...Object.fromEntries(
     OPENVIKING_TOOL_GROUP_ORDER.map((group) => [
       group,

package/text-utils.ts

@@ -411,7 +411,7 @@ export function extractNewTurnMessages(
             toolName,
             toolInput,
             toolOutput: output,
-            toolStatus: "completed",
+            toolStatus: msg.isError === true ? "error" : "completed",
           }],
         });
       }

package/dist/plugin/openviking-experience-tools.js

@@ -1,105 +0,0 @@
-import { Type } from "@sinclair/typebox";
-const EXPERIENCE_TARGET_URI = "viking://user/memories/experiences/";
-const DEFAULT_LIMIT = 5;
-const MAX_LIMIT = 20;
-const EXPERIENCE_SIDECAR_FILENAMES = new Set([".abstract.md", ".overview.md", ".relations.json"]);
-function clampLimit(value) {
-    const parsed = Number.isFinite(Number(value)) ? Math.trunc(Number(value)) : DEFAULT_LIMIT;
-    return Math.max(1, Math.min(MAX_LIMIT, parsed));
-}
-function experienceRelativePath(uri) {
-    return uri.match(/^viking:\/\/user\/[^/]+\/memories\/experiences\/(.+)$/)?.[1] ?? "";
-}
-export function isCanonicalExperienceUri(uri, expectedUserId) {
-    const value = typeof uri === "string" ? uri.trim() : "";
-    if (!value || value.includes("?") || value.includes("#")) {
-        return false;
-    }
-    const owner = value.match(/^viking:\/\/user\/([^/]+)\//)?.[1] ?? "";
-    if (expectedUserId?.trim() && owner !== expectedUserId.trim()) {
-        return false;
-    }
-    const relative = experienceRelativePath(value);
-    const segments = relative.split("/");
-    const basename = segments.at(-1) ?? "";
-    return Boolean(relative
-        && segments.every((segment) => segment && segment !== "." && segment !== "..")
-        && !EXPERIENCE_SIDECAR_FILENAMES.has(basename));
-}
-function titleFromUri(uri) {
-    const basename = uri.split("/").at(-1) ?? uri;
-    const title = basename.replace(/\.md$/i, "");
-    try {
-        return decodeURIComponent(title);
-    }
-    catch {
-        return title;
-    }
-}
-function jsonToolResult(payload) {
-    return {
-        content: [{ type: "text", text: JSON.stringify(payload) }],
-    };
-}
-export function registerOpenVikingExperienceTools(deps) {
-    deps.registerTool((ctx) => ({
-        name: "search_experience",
-        label: "Search Experience (OpenViking)",
-        description: "Search reusable task-execution experiences for the current OpenViking user. " +
-            "Use before executing operational or multi-step tasks, then call read_experience for selected results.",
-        parameters: Type.Object({
-            query: Type.String({ description: "Current task, situation, or execution problem to search for" }),
-            limit: Type.Optional(Type.Integer({
-                description: `Maximum results to return. Default: ${DEFAULT_LIMIT}; maximum: ${MAX_LIMIT}`,
-                minimum: 1,
-                maximum: MAX_LIMIT,
-            })),
-        }, { additionalProperties: false }),
-        async execute(_toolCallId, params) {
-            if (deps.isBypassedSession(ctx)) {
-                return deps.makeBypassedToolResult("search_experience");
-            }
-            const query = typeof params.query === "string" ? params.query.trim() : "";
-            if (!query) {
-                throw new Error("query is required");
-            }
-            const session = deps.resolvePluginSessionRouting(ctx);
-            const client = await deps.getClient();
-            const result = await client.find(query, {
-                targetUri: EXPERIENCE_TARGET_URI,
-                limit: clampLimit(params.limit),
-            }, session.actorPeerId);
-            const results = (result.memories ?? [])
-                .filter((item) => isCanonicalExperienceUri(item.uri, deps.userId))
-                .map((item) => ({
-                uri: item.uri,
-                title: titleFromUri(item.uri),
-                score: typeof item.score === "number" ? item.score : 0,
-                snippet: item.abstract || item.overview || "",
-            }));
-            return jsonToolResult({ results });
-        },
-    }), { name: "search_experience" });
-    deps.registerTool((ctx) => ({
-        name: "read_experience",
-        label: "Read Experience (OpenViking)",
-        description: "Read the complete Markdown body of one Experience returned by search_experience and use it as execution guidance.",
-        parameters: Type.Object({
-            uri: Type.String({ description: "Exact canonical Experience URI returned by search_experience" }),
-        }, { additionalProperties: false }),
-        async execute(_toolCallId, params) {
-            if (deps.isBypassedSession(ctx)) {
-                return deps.makeBypassedToolResult("read_experience");
-            }
-            const uri = typeof params.uri === "string" ? params.uri.trim() : "";
-            if (!isCanonicalExperienceUri(uri, deps.userId)) {
-                throw new Error("uri must be a canonical OpenViking Experience URI returned by search_experience");
-            }
-            const session = deps.resolvePluginSessionRouting(ctx);
-            const client = await deps.getClient();
-            const content = await client.read(uri, session.actorPeerId);
-            const text = typeof content === "string" ? content : JSON.stringify(content, null, 2);
-            return jsonToolResult({ uri, content: text });
-        },
-    }), { name: "read_experience" });
-}

package/plugin/openviking-experience-tools.ts

@@ -1,160 +0,0 @@
-import { Type } from "@sinclair/typebox";
-
-import type { FindResult } from "../client.js";
-
-const EXPERIENCE_TARGET_URI = "viking://user/memories/experiences/";
-const DEFAULT_LIMIT = 5;
-const MAX_LIMIT = 20;
-const EXPERIENCE_SIDECAR_FILENAMES = new Set([".abstract.md", ".overview.md", ".relations.json"]);
-
-export type OpenVikingExperienceToolContext = {
-  sessionKey?: string;
-  sessionId?: string;
-  agentId?: string;
-  senderId?: string;
-  requesterSenderId?: string;
-};
-
-export type OpenVikingExperienceSession = {
-  sessionId?: string;
-  sessionKey?: string;
-  ovSessionId?: string;
-  agentId: string;
-  actorPeerId?: string;
-};
-
-type OpenVikingExperienceClient = {
-  find: (
-    query: string,
-    options: { targetUri: string; limit: number; scoreThreshold?: number },
-    actorPeerId?: string,
-  ) => Promise<FindResult>;
-  read: (uri: string, actorPeerId?: string) => Promise<unknown>;
-};
-
-export type OpenVikingExperienceToolsDeps = {
-  registerTool: (toolOrFactory: unknown, opts: { name: string }) => void;
-  getClient: () => Promise<OpenVikingExperienceClient>;
-  resolvePluginSessionRouting: (ctx?: OpenVikingExperienceToolContext) => OpenVikingExperienceSession;
-  isBypassedSession: (ctx?: OpenVikingExperienceToolContext) => boolean;
-  makeBypassedToolResult: (toolName: string) => unknown;
-  userId?: string;
-};
-
-function clampLimit(value: unknown): number {
-  const parsed = Number.isFinite(Number(value)) ? Math.trunc(Number(value)) : DEFAULT_LIMIT;
-  return Math.max(1, Math.min(MAX_LIMIT, parsed));
-}
-
-function experienceRelativePath(uri: string): string {
-  return uri.match(/^viking:\/\/user\/[^/]+\/memories\/experiences\/(.+)$/)?.[1] ?? "";
-}
-
-export function isCanonicalExperienceUri(uri: unknown, expectedUserId?: string): uri is string {
-  const value = typeof uri === "string" ? uri.trim() : "";
-  if (!value || value.includes("?") || value.includes("#")) {
-    return false;
-  }
-  const owner = value.match(/^viking:\/\/user\/([^/]+)\//)?.[1] ?? "";
-  if (expectedUserId?.trim() && owner !== expectedUserId.trim()) {
-    return false;
-  }
-  const relative = experienceRelativePath(value);
-  const segments = relative.split("/");
-  const basename = segments.at(-1) ?? "";
-  return Boolean(
-    relative
-    && segments.every((segment) => segment && segment !== "." && segment !== "..")
-    && !EXPERIENCE_SIDECAR_FILENAMES.has(basename)
-  );
-}
-
-function titleFromUri(uri: string): string {
-  const basename = uri.split("/").at(-1) ?? uri;
-  const title = basename.replace(/\.md$/i, "");
-  try {
-    return decodeURIComponent(title);
-  } catch {
-    return title;
-  }
-}
-
-function jsonToolResult(payload: Record<string, unknown>): {
-  content: Array<{ type: "text"; text: string }>;
-} {
-  return {
-    content: [{ type: "text", text: JSON.stringify(payload) }],
-  };
-}
-
-export function registerOpenVikingExperienceTools(deps: OpenVikingExperienceToolsDeps): void {
-  deps.registerTool(
-    (ctx: OpenVikingExperienceToolContext) => ({
-      name: "search_experience",
-      label: "Search Experience (OpenViking)",
-      description:
-        "Search reusable task-execution experiences for the current OpenViking user. " +
-        "Use before executing operational or multi-step tasks, then call read_experience for selected results.",
-      parameters: Type.Object({
-        query: Type.String({ description: "Current task, situation, or execution problem to search for" }),
-        limit: Type.Optional(Type.Integer({
-          description: `Maximum results to return. Default: ${DEFAULT_LIMIT}; maximum: ${MAX_LIMIT}`,
-          minimum: 1,
-          maximum: MAX_LIMIT,
-        })),
-      }, { additionalProperties: false }),
-      async execute(_toolCallId: string, params: Record<string, unknown>) {
-        if (deps.isBypassedSession(ctx)) {
-          return deps.makeBypassedToolResult("search_experience");
-        }
-        const query = typeof params.query === "string" ? params.query.trim() : "";
-        if (!query) {
-          throw new Error("query is required");
-        }
-        const session = deps.resolvePluginSessionRouting(ctx);
-        const client = await deps.getClient();
-        const result = await client.find(query, {
-          targetUri: EXPERIENCE_TARGET_URI,
-          limit: clampLimit(params.limit),
-        }, session.actorPeerId);
-        const results = (result.memories ?? [])
-          .filter((item) => isCanonicalExperienceUri(item.uri, deps.userId))
-          .map((item) => ({
-            uri: item.uri,
-            title: titleFromUri(item.uri),
-            score: typeof item.score === "number" ? item.score : 0,
-            snippet: item.abstract || item.overview || "",
-          }));
-        return jsonToolResult({ results });
-      },
-    }),
-    { name: "search_experience" },
-  );
-
-  deps.registerTool(
-    (ctx: OpenVikingExperienceToolContext) => ({
-      name: "read_experience",
-      label: "Read Experience (OpenViking)",
-      description:
-        "Read the complete Markdown body of one Experience returned by search_experience and use it as execution guidance.",
-      parameters: Type.Object({
-        uri: Type.String({ description: "Exact canonical Experience URI returned by search_experience" }),
-      }, { additionalProperties: false }),
-      async execute(_toolCallId: string, params: Record<string, unknown>) {
-        if (deps.isBypassedSession(ctx)) {
-          return deps.makeBypassedToolResult("read_experience");
-        }
-        const uri = typeof params.uri === "string" ? params.uri.trim() : "";
-        if (!isCanonicalExperienceUri(uri, deps.userId)) {
-          throw new Error("uri must be a canonical OpenViking Experience URI returned by search_experience");
-        }
-        const session = deps.resolvePluginSessionRouting(ctx);
-        const client = await deps.getClient();
-        const content = await client.read(uri, session.actorPeerId);
-        const text = typeof content === "string" ? content : JSON.stringify(content, null, 2);
-        return jsonToolResult({ uri, content: text });
-      },
-    }),
-    { name: "read_experience" },
-  );
-}

package/skills/ov-experience-memory/SKILL.md

@@ -1,156 +0,0 @@
----
-name: ov-experience-memory
-description: >
-  Use OpenViking experience memories during task execution. Search relevant
-  experiences with search_experience, read selected experiences with
-  read_experience, and leave standard tool parts in the committed session so
-  OpenViking can report recall and injection usage.
-version: 2026.7.9
-tags:
-  - openviking
-  - experience-memory
-  - agent-memory
-  - usage-reporting
----
-
-# OpenViking Experience Memory
-
-Use this skill when the current user request starts or continues an executable
-task, especially tasks involving tools, files, code changes, data operations,
-workflow decisions, or multi-step actions.
-
-Do not use this skill for casual chat, pure explanation, or one-off factual Q&A
-that does not require operational guidance.
-
-## Runtime Contract
-
-The agent runtime must expose two tools with these exact names:
-
-- `search_experience`
-- `read_experience`
-
-OpenViking usage reporting recognizes only completed tool parts with these exact
-tool names. Calls to generic `find`, `search`, `read`, `ov_search`, or `ov_read`
-do not count as experience recall or injection events.
-
-## Tool: search_experience
-
-Purpose: search reusable execution experiences from the OpenViking experience
-library before assembling task context.
-
-Input schema:
-
-```json
-{
-  "query": "string",
-  "limit": 5
-}
-```
-
-Output schema:
-
-```json
-{
-  "results": [
-    {
-      "uri": "viking://user/<current_user_id>/memories/experiences/example.md",
-      "title": "example",
-      "score": 0.82,
-      "snippet": "Short summary or matched situation"
-    }
-  ]
-}
-```
-
-Implementation:
-
-The runtime tool calls OpenViking `POST /api/v1/search/find` with `target_uri`
-fixed to the current-user shorthand `viking://user/memories/experiences/`.
-Callers provide only `query` and optional `limit`; they cannot override or pass
-`target_uri`. OpenViking resolves the fixed shorthand against the authenticated
-request user. Return only canonical experience memory URIs for that user; never
-hardcode `default` or another user ID.
-
-Usage reporting:
-
-A completed `search_experience` tool part is counted as an experience recall
-event for every `results[].uri` value.
-
-## Tool: read_experience
-
-Purpose: read the full Markdown body of a selected experience and inject it into
-the agent prompt as task execution guidance.
-
-Input schema:
-
-```json
-{
-  "uri": "viking://user/<current_user_id>/memories/experiences/example.md"
-}
-```
-
-Output schema:
-
-```json
-{
-  "uri": "viking://user/<current_user_id>/memories/experiences/example.md",
-  "content": "Experience Markdown body"
-}
-```
-
-Implementation:
-
-Call OpenViking `GET /api/v1/content/read?uri=<encoded_uri>` for the selected
-experience URI. Always pass the canonical URI returned by `search_experience`;
-do not construct a URI with a hardcoded user ID. The returned content should be
-inserted into the prompt as operational guidance, not as user profile facts.
-
-Usage reporting:
-
-A completed `read_experience` tool part is counted as an experience injection
-event for `tool_input.uri` or `tool_output.uri`. In this design, reading an
-experience through `read_experience` means the experience was injected into the
-prompt.
-
-## Recommended Flow
-
-1. When a task begins, build a short query from the latest user instruction,
-   current plan, active skill name, and important tool/environment context.
-2. Call `search_experience` before final prompt assembly.
-3. Review returned titles/snippets and select only experiences likely to affect
-   execution.
-4. Call `read_experience` for selected experience URIs.
-5. Inject the returned Markdown into the prompt under an explicit experience
-   section.
-6. Continue task execution.
-7. Commit the session normally. The committed session must include the
-   `search_experience` and `read_experience` tool parts so OpenViking can report
-   usage.
-
-## Prompt Injection Format
-
-Use a compact and explicit block:
-
-```text
-<openviking-experience-memory>
-The following guidance was retrieved from prior task execution experience.
-Use it as operational guidance. Do not treat it as user identity or preference.
-
-<experience uri="viking://user/<current_user_id>/memories/experiences/example.md">
-...experience markdown...
-</experience>
-</openviking-experience-memory>
-```
-
-## Commit Requirements
-
-The session committed to OpenViking must preserve tool parts with:
-
-- `tool_name`
-- `tool_status`
-- `tool_input`
-- `tool_output`
-- `tool_id`
-
-Only `tool_status == "completed"` is counted. Failed, cancelled, or skipped tool
-parts are ignored by usage reporting.