@remnic/plugin-openclaw 1.0.36 → 1.0.38

package/dist/{capsule-export-YPDWRB3C.js → capsule-export-DX53CPIT.js}

@@ -1,9 +1,9 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "./chunk-3IHGISUN.js";
+} from "./chunk-TXOEHSVP.js";
 import "./chunk-YKV4EFUI.js";
-import "./chunk-E4RM7637.js";
+import "./chunk-QCCP4RU5.js";
 import "./chunk-ZS6VABML.js";
 import "./chunk-4XDQ3KEC.js";
 import "./chunk-MXFJXUHC.js";

package/dist/{capsule-import-SWPOFG6F.js → capsule-import-4OXCPHOT.js}

@@ -1,8 +1,8 @@
 import {
   importCapsule
-} from "./chunk-NNAN63QK.js";
+} from "./chunk-CEL5ZLKP.js";
 import "./chunk-YKV4EFUI.js";
-import "./chunk-E4RM7637.js";
+import "./chunk-QCCP4RU5.js";
 import "./chunk-ZS6VABML.js";
 import "./chunk-4XDQ3KEC.js";
 import "./chunk-MXFJXUHC.js";

package/dist/{capsule-merge-YXAF7ZJW.js → capsule-merge-25AUN33Q.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-YKV4EFUI.js";
 import {
   parseExportBundle
-} from "./chunk-E4RM7637.js";
+} from "./chunk-QCCP4RU5.js";
 import "./chunk-4XDQ3KEC.js";
 import {
   createVersion

package/dist/{chunk-NNAN63QK.js → chunk-CEL5ZLKP.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-YKV4EFUI.js";
 import {
   parseExportBundle
-} from "./chunk-E4RM7637.js";
+} from "./chunk-QCCP4RU5.js";
 import {
   decryptCapsuleFileInMemory,
   isEncryptedCapsuleFile

package/dist/{chunk-E4RM7637.js → chunk-QCCP4RU5.js}

@@ -34,6 +34,11 @@ var SemverLikeSchema = external_exports.string().min(1, "capsule.version must no
   /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,
   "capsule.version must be a semver-like string (e.g. 1.0.0)"
 );
+function isSafePosixRelativePathPrefix(value) {
+  if (value.startsWith("/") || value.includes("\\")) return false;
+  const segments = value.split("/");
+  return segments.every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
 var CapsuleRetrievalPolicySchema = external_exports.object({
   /**
    * Per-tier weight overrides applied during recall when the capsule is the
@@ -66,8 +71,8 @@ var CapsuleParentSchema = external_exports.object({
    * capsule's records were placed. Typically `forks/<parent-capsule-id>`.
    * Must be a non-empty string with no leading slash.
    */
-  forkRoot: external_exports.string().min(1, "capsule.parent.forkRoot must not be empty").refine((v) => !v.startsWith("/"), {
-    message: "capsule.parent.forkRoot must be a relative path (no leading slash)"
+  forkRoot: external_exports.string().min(1, "capsule.parent.forkRoot must not be empty").refine(isSafePosixRelativePathPrefix, {
+    message: "capsule.parent.forkRoot must be a normalized posix-relative path with no traversal segments"
   })
 });
 var CapsuleBlockSchema = external_exports.object({

package/dist/{chunk-3IHGISUN.js → chunk-TXOEHSVP.js}

@@ -9,7 +9,7 @@ import {
   CapsuleBlockSchema,
   ExportBundleV2Schema,
   ExportManifestV2Schema
-} from "./chunk-E4RM7637.js";
+} from "./chunk-QCCP4RU5.js";
 import {
   encryptCapsuleFile
 } from "./chunk-ZS6VABML.js";

package/dist/index.js

@@ -1,12 +1,12 @@
 import "./chunk-UZJ7EERS.js";
-import "./chunk-NNAN63QK.js";
+import "./chunk-CEL5ZLKP.js";
 import {
   isValidCapsuleSince
-} from "./chunk-3IHGISUN.js";
+} from "./chunk-TXOEHSVP.js";
 import "./chunk-YKV4EFUI.js";
 import {
   CAPSULE_ID_PATTERN
-} from "./chunk-E4RM7637.js";
+} from "./chunk-QCCP4RU5.js";
 import "./chunk-ZS6VABML.js";
 import "./chunk-QQXJODFL.js";
 import "./chunk-BU5KJVWF.js";
@@ -6098,6 +6098,7 @@ function throwIfAborted(signal, message = "operation aborted") {
 var QMD_UPDATE_BACKOFF_MS = 15 * 60 * 1e3;
 var QMD_EMBED_BACKOFF_MS = 60 * 60 * 1e3;
 var QMD_CLI_WARN_THROTTLE_MS = 15 * 60 * 1e3;
+var QMD_AUTO_UPGRADE_CHECK_INTERVAL_MS = 24 * 60 * 6e4;
 var QMD_FALLBACK_PATHS = [
   path8.join(os2.homedir(), ".bun", "bin", "qmd"),
   "/usr/local/bin/qmd",
@@ -6694,6 +6695,7 @@ var recallRequestSchema = external_exports.object({
   topK: external_exports.number().int().min(0).max(200).optional(),
   mode: external_exports.enum(["auto", "no_recall", "minimal", "full", "graph_mode"]).optional(),
   includeDebug: external_exports.boolean().optional(),
+  idempotencyKey: idempotencyKeySchema,
   disclosure: recallDisclosureSchema.optional(),
   codingContext: codingContextSchema.optional(),
   /** Working directory for auto git-context resolution (issue #569). */
@@ -7788,17 +7790,13 @@ async function syncHeartbeatSurfaceEntries(params) {
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function buildDelimitedBoundaryClass(value) {
-  const parts = ["a-z0-9"];
-  if (value.includes("-")) {
-    parts.push("-");
-  }
-  return parts.join("");
+function buildDelimitedBoundaryClass() {
+  return "a-z0-9-";
 }
 function compileDelimitedPhrasePattern(value) {
   const normalized = value.trim().toLowerCase();
   if (normalized.length === 0) return null;
-  const boundaryClass = buildDelimitedBoundaryClass(normalized);
+  const boundaryClass = buildDelimitedBoundaryClass();
   return new RegExp(
     `(^|[^${boundaryClass}])${escapeRegExp(normalized)}([^${boundaryClass}]|$)`
   );
@@ -11324,7 +11322,8 @@ function detectBridgeMode() {
   }
   const daemonHost = readCompatEnv("REMNIC_HOST", "ENGRAM_HOST") ?? DEFAULT_HOST;
   const daemonPort = readDaemonPort();
-  if (isDaemonRunning() || shouldProbeDaemonHealth(daemonHost) && checkDaemonHealthSync(daemonHost, daemonPort)) {
+  const hasDaemonPidHint = isDaemonRunning();
+  if ((hasDaemonPidHint || shouldProbeDaemonHealth(daemonHost)) && checkDaemonHealthSync(daemonHost, daemonPort)) {
     return {
       mode: "delegate",
       daemonHost,

package/dist/{types-7L34HYDW.js → types-MBUINTB2.js}

@@ -11,7 +11,7 @@ import {
   ExportMemoryRecordV1Schema,
   parseExportBundle,
   parseExportManifest
-} from "./chunk-E4RM7637.js";
+} from "./chunk-QCCP4RU5.js";
 import "./chunk-4XDQ3KEC.js";
 import "./chunk-I2KLQ2HA.js";
 export {

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "openclaw-remnic",
   "name": "Remnic OpenClaw Plugin",
-  "version": "1.0.36",
+  "version": "1.0.38",
   "kind": "memory",
   "description": "Local semantic memory for OpenClaw with bundled Remnic core runtime. Requires plugins.slots.memory set to this plugin id for hooks to fire.",
   "setup": {
@@ -288,6 +288,83 @@
         "default": false,
         "description": "Allow automated cold-tier backfill jobs to repair parity gaps"
       },
+      "qmdSupportedVersion": {
+        "type": "string",
+        "default": "2.5.1",
+        "description": "Highest QMD version this Remnic build will auto-install"
+      },
+      "qmdAutoUpgradeEnabled": {
+        "type": "boolean",
+        "default": false,
+        "description": "Opt-in auto-upgrade for PATH/fallback QMD installs"
+      },
+      "qmdAutoUpgradeCheckIntervalMs": {
+        "type": "number",
+        "minimum": 60000,
+        "default": 86400000,
+        "description": "Minimum interval between QMD auto-upgrade checks"
+      },
+      "qmdChunkStrategy": {
+        "type": "string",
+        "enum": [
+          "auto",
+          "regex"
+        ],
+        "default": "auto",
+        "description": "QMD chunk strategy forwarded when the installed QMD supports it"
+      },
+      "qmdCandidateLimit": {
+        "type": "number",
+        "minimum": 1,
+        "description": "Optional candidate limit forwarded to supported QMD query paths"
+      },
+      "qmdQueryRerankEnabled": {
+        "type": "boolean",
+        "default": true,
+        "description": "When false, ask supported QMD versions to skip the built-in rerank step"
+      },
+      "qmdIndexName": {
+        "type": "string",
+        "description": "Optional QMD named index forwarded as qmd --index <name> when supported. Leave unset during upgrades unless existing QMD data already lives in that named index."
+      },
+      "qmdForceCpu": {
+        "type": "boolean",
+        "default": false,
+        "description": "Set QMD_FORCE_CPU=1 for QMD child processes to bypass GPU probing and run predictably on CPU"
+      },
+      "qmdGpuBackend": {
+        "type": [
+          "string",
+          "boolean"
+        ],
+        "enum": [
+          "auto",
+          "metal",
+          "cuda",
+          "vulkan",
+          "false",
+          false
+        ],
+        "description": "Optional QMD_LLAMA_GPU override for QMD child processes"
+      },
+      "qmdEmbedParallelism": {
+        "type": "number",
+        "minimum": 1,
+        "maximum": 8,
+        "description": "Optional QMD_EMBED_PARALLELISM override, clamped to 1-8"
+      },
+      "qmdEmbedModel": {
+        "type": "string",
+        "description": "Optional QMD_EMBED_MODEL override"
+      },
+      "qmdRerankModel": {
+        "type": "string",
+        "description": "Optional QMD_RERANK_MODEL override"
+      },
+      "qmdGenerateModel": {
+        "type": "string",
+        "description": "Optional QMD_GENERATE_MODEL override"
+      },
       "embeddingFallbackEnabled": {
         "type": "boolean",
         "default": true,
@@ -303,6 +380,10 @@
         "default": "auto",
         "description": "Embedding provider selection for semantic fallback"
       },
+      "embeddingFallbackModel": {
+        "type": "string",
+        "description": "Optional model identifier for embedding fallback requests. Defaults to localLlmModel for legacy installs."
+      },
       "qmdPath": {
         "type": "string",
         "description": "Optional absolute path to qmd binary (bypasses PATH/fallback discovery)"
@@ -4869,6 +4950,66 @@
       "advanced": true,
       "help": "Enable automated cold-tier backfill runs for parity repair"
     },
+    "qmdSupportedVersion": {
+      "label": "QMD Supported Version",
+      "advanced": true,
+      "placeholder": "2.5.1"
+    },
+    "qmdAutoUpgradeEnabled": {
+      "label": "QMD Auto Upgrade",
+      "advanced": true,
+      "help": "Upgrade PATH/fallback QMD installs to the supported version; explicit qmdPath installs are skipped"
+    },
+    "qmdAutoUpgradeCheckIntervalMs": {
+      "label": "QMD Auto Upgrade Interval",
+      "advanced": true,
+      "placeholder": "86400000"
+    },
+    "qmdChunkStrategy": {
+      "label": "QMD Chunk Strategy",
+      "advanced": true,
+      "placeholder": "auto"
+    },
+    "qmdCandidateLimit": {
+      "label": "QMD Candidate Limit",
+      "advanced": true
+    },
+    "qmdQueryRerankEnabled": {
+      "label": "QMD Query Rerank",
+      "advanced": true
+    },
+    "qmdIndexName": {
+      "label": "QMD Index Name",
+      "advanced": true,
+      "help": "Use a named QMD index when QMD 2.5+ supports --index. Changing this selects a different SQLite DB; keep it unset for existing default-index installs."
+    },
+    "qmdForceCpu": {
+      "label": "QMD Force CPU",
+      "advanced": true,
+      "help": "Set QMD_FORCE_CPU=1 for QMD child processes"
+    },
+    "qmdGpuBackend": {
+      "label": "QMD GPU Backend",
+      "advanced": true,
+      "placeholder": "metal"
+    },
+    "qmdEmbedParallelism": {
+      "label": "QMD Embed Parallelism",
+      "advanced": true,
+      "placeholder": "4"
+    },
+    "qmdEmbedModel": {
+      "label": "QMD Embed Model",
+      "advanced": true
+    },
+    "qmdRerankModel": {
+      "label": "QMD Rerank Model",
+      "advanced": true
+    },
+    "qmdGenerateModel": {
+      "label": "QMD Generate Model",
+      "advanced": true
+    },
     "embeddingFallbackEnabled": {
       "label": "Embedding Fallback",
       "help": "Use semantic embeddings when QMD is unavailable or no results are found"
@@ -4878,6 +5019,12 @@
       "advanced": true,
       "placeholder": "auto"
     },
+    "embeddingFallbackModel": {
+      "label": "Embedding Model",
+      "advanced": true,
+      "placeholder": "(defaults to local LLM model)",
+      "help": "Optional embedding model for semantic fallback. Use this when the local chat model and embedding model are different."
+    },
     "qmdPath": {
       "label": "QMD Path",
       "advanced": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/plugin-openclaw",
-  "version": "1.0.36",
+  "version": "1.0.38",
   "description": "OpenClaw adapter for Remnic memory with bundled @remnic/core runtime",
   "type": "module",
   "main": "dist/index.js",
@@ -71,7 +71,7 @@
   },
   "dependencies": {
     "openai": "^6.0.0",
-    "@remnic/core": "^1.1.12"
+    "@remnic/core": "^1.1.14"
   },
   "peerDependencies": {
     "openclaw": ">=2026.5.16-beta.1"

package/scripts/faiss_index.py

@@ -13,10 +13,12 @@ import os
 import subprocess
 import sys
 import time
+import uuid
 from pathlib import Path
 from typing import Any
 
 MODEL_CACHE: dict[str, Any] = {}
+LOCK_OWNERS: dict[str, str] = {}
 HASH_EMBED_DIM = 128
 LOCK_TIMEOUT_SECONDS = 10.0
 LOCK_STALE_SECONDS = 120.0
@@ -372,20 +374,67 @@ def merge_rows(existing: list[dict[str, Any]], updates: list[dict[str, Any]]) ->
     return [by_key[row_key] for row_key in order]
 
 
-def read_lock_owner_pid(lock_path: Path) -> int | None:
+def lock_owner_key(lock_path: Path) -> str:
+    return str(lock_path.resolve())
+
+
+def make_lock_owner_token() -> str:
+    return f"{os.getpid()}:{uuid.uuid4().hex}"
+
+
+def read_lock_contents(lock_path: Path) -> str | None:
     try:
         raw = lock_path.read_text(encoding="utf-8").strip()
     except Exception:
         return None
     if not raw:
         return None
+    return raw
+
+
+def read_lock_owner_pid(lock_path: Path) -> int | None:
+    raw = read_lock_contents(lock_path)
+    if raw is None:
+        return None
+    pid_raw = raw.split(":", 1)[0].strip()
     try:
-        pid = int(raw)
+        pid = int(pid_raw)
     except ValueError:
         return None
     return pid if pid > 0 else None
 
 
+def lock_stat_matches(current_stat: os.stat_result, observed_stat: os.stat_result) -> bool:
+    if current_stat.st_size != observed_stat.st_size:
+        return False
+    if current_stat.st_mtime_ns != observed_stat.st_mtime_ns:
+        return False
+    if getattr(current_stat, "st_ino", 0) and getattr(observed_stat, "st_ino", 0):
+        return current_stat.st_ino == observed_stat.st_ino
+    return True
+
+
+def unlink_lock_if_unchanged(
+    lock_path: Path,
+    observed_owner_token: str | None,
+    observed_stat: os.stat_result,
+) -> bool:
+    try:
+        current_stat = lock_path.stat()
+    except FileNotFoundError:
+        return False
+    current_owner_token = read_lock_contents(lock_path)
+    if current_owner_token != observed_owner_token:
+        return False
+    if not lock_stat_matches(current_stat, observed_stat):
+        return False
+    try:
+        lock_path.unlink()
+    except FileNotFoundError:
+        return False
+    return True
+
+
 def is_process_alive(pid: int) -> bool:
     if pid <= 0:
         return False
@@ -420,6 +469,7 @@ def is_process_alive(pid: int) -> bool:
 
 def acquire_lock(index_dir: Path, lock_name: str) -> Path:
     lock_path = index_dir / lock_name
+    lock_owner_token = make_lock_owner_token()
     lock_label = lock_name.strip(".")
     if lock_label.endswith(".lock"):
         lock_label = lock_label[: -len(".lock")]
@@ -430,19 +480,22 @@ def acquire_lock(index_dir: Path, lock_name: str) -> Path:
         try:
             fd = os.open(str(lock_path), os.O_CREAT | os.O_EXCL | os.O_WRONLY)
             with os.fdopen(fd, "w", encoding="utf-8") as handle:
-                handle.write(str(os.getpid()))
+                handle.write(lock_owner_token)
+            LOCK_OWNERS[lock_owner_key(lock_path)] = lock_owner_token
             return lock_path
         except FileExistsError:
             try:
-                age = time.time() - lock_path.stat().st_mtime
+                observed_stat = lock_path.stat()
             except FileNotFoundError:
                 continue
 
+            age = time.time() - observed_stat.st_mtime
+            observed_owner_token = read_lock_contents(lock_path)
             owner_pid = read_lock_owner_pid(lock_path)
             owner_alive = is_process_alive(owner_pid) if owner_pid is not None else False
 
             if age > LOCK_STALE_SECONDS and not owner_alive:
-                lock_path.unlink(missing_ok=True)
+                unlink_lock_if_unchanged(lock_path, observed_owner_token, observed_stat)
                 continue
 
             if time.monotonic() >= deadline:
@@ -459,7 +512,14 @@ def acquire_writer_lock(index_dir: Path) -> Path:
 
 
 def release_lock(lock_path: Path) -> None:
-    lock_path.unlink(missing_ok=True)
+    lock_owner_token = LOCK_OWNERS.pop(lock_owner_key(lock_path), None)
+    if lock_owner_token is None:
+        return
+    try:
+        observed_stat = lock_path.stat()
+    except FileNotFoundError:
+        return
+    unlink_lock_if_unchanged(lock_path, lock_owner_token, observed_stat)
 
 
 def release_index_lock(lock_path: Path) -> None: