@remnic/plugin-openclaw 9.45.4 → 9.46.0

package/README.md

@@ -116,7 +116,7 @@ runs from real runtime and OpenClaw chain runs.
 This plugin hooks into the OpenClaw gateway lifecycle:
 
 - **`gateway_start`** -- initializes the Remnic memory engine
-- **`before_agent_start`** / **`before_prompt_build`** -- adds relevant memories to the agent context through OpenClaw's memory context builders
+- **`before_prompt_build`** -- adds relevant memories to the agent context through OpenClaw's memory context builders
 - **`agent_end`** -- buffers the conversation turn for extraction
 - **`before_compaction`** / **`after_compaction`** -- saves checkpoints and triggers session reset on context compaction
 - **`before_reset`** -- bounded flush of the in-flight buffer before OpenClaw discards a session
@@ -348,8 +348,7 @@ Remnic supports the following OpenClaw memory integration points:
 
 | Feature | Status | Since |
 |---------|--------|-------|
-| `before_agent_start` hook (legacy) | Supported | 2025.x |
-| `before_prompt_build` hook (new SDK) | Supported | 2026.3.22 |
+| `before_prompt_build` hook | Supported | 2026.3.22 |
 | `registerMemoryPromptSection()` (structured builder) | Supported | 2026.3.22 |
 | `registerMemoryCapability()` (unified capability) | Supported | 2026.4.5 |
 | `registerMemoryRuntime()` (split runtime surface) | Supported | 2026.4.x |

package/dist/index.js

@@ -40,7 +40,11 @@ import * as logger_star from "@remnic/core/logger";
 import { detectSdkCapabilities } from "@remnic/core/sdk-compat";
 
 // ../../src/index.ts
-import { Orchestrator, sanitizeSessionKeyForFilename, defaultWorkspaceDir } from "@remnic/core/orchestrator";
+import {
+  Orchestrator,
+  sanitizeSessionKeyForFilename,
+  defaultWorkspaceDir
+} from "@remnic/core/orchestrator";
 
 // ../../src/tools.ts
 import { createHash as createHash2 } from "crypto";
@@ -68,11 +72,39 @@ __export(temporal_index_exports, {
   resolvePromptTagPrefilterAsync: () => resolvePromptTagPrefilterAsync
 });
 __reExport(temporal_index_exports, temporal_index_star);
-import { clearIndexes, clearIndexesAsync, deindexMemory, deindexMemoryAsync, extractTagsFromPrompt, indexMemoriesBatch, indexMemoriesBatchAsync, indexMemory, indexMemoryAsync, indexesExist, indexesExistAsync, isTemporalQuery, queryByDateRangeAsync, queryByTagsAsync, recencyWindowBoundsFromPrompt, recencyWindowFromPrompt, resolvePromptTagPrefilterAsync } from "@remnic/core/temporal-index";
+import {
+  clearIndexes,
+  clearIndexesAsync,
+  deindexMemory,
+  deindexMemoryAsync,
+  extractTagsFromPrompt,
+  indexMemoriesBatch,
+  indexMemoriesBatchAsync,
+  indexMemory,
+  indexMemoryAsync,
+  indexesExist,
+  indexesExistAsync,
+  isTemporalQuery,
+  queryByDateRangeAsync,
+  queryByTagsAsync,
+  recencyWindowBoundsFromPrompt,
+  recencyWindowFromPrompt,
+  resolvePromptTagPrefilterAsync
+} from "@remnic/core/temporal-index";
 import * as temporal_index_star from "@remnic/core/temporal-index";
 
 // ../../src/explicit-capture.ts
-import { InlineExplicitCaptureProcessor, hasInlineExplicitCaptureMarkup, parseInlineExplicitCaptureNotes, persistExplicitCapture, queueExplicitCaptureForReview, shouldProcessInlineExplicitCapture, shouldSkipImplicitExtraction, stripInlineExplicitCaptureNotes, validateExplicitCaptureInput } from "@remnic/core/explicit-capture";
+import {
+  InlineExplicitCaptureProcessor,
+  hasInlineExplicitCaptureMarkup,
+  parseInlineExplicitCaptureNotes,
+  persistExplicitCapture,
+  queueExplicitCaptureForReview,
+  shouldProcessInlineExplicitCapture,
+  shouldSkipImplicitExtraction,
+  stripInlineExplicitCaptureNotes,
+  validateExplicitCaptureInput
+} from "@remnic/core/explicit-capture";
 function mergeInlineCaptureDedupeKeys(messageKeys, fallbackDedupeKeys = []) {
   const dedupeKeys = new Set(messageKeys ?? []);
   if (dedupeKeys.size === 0) {
@@ -89,7 +121,10 @@ import { composeSalvagedEnvelope as composeSalvagedEnvelope2 } from "@remnic/cor
 // ../../src/memory-promote.ts
 import { createHash } from "crypto";
 import { composeSalvagedEnvelope } from "@remnic/core/salvage-envelope";
-import { STRUCTURED_ATTRIBUTE_LIMITS, TAG_LIMITS } from "@remnic/core/write-envelope";
+import {
+  STRUCTURED_ATTRIBUTE_LIMITS,
+  TAG_LIMITS
+} from "@remnic/core/write-envelope";
 import { stripAttributesSuffix } from "@remnic/core/storage";
 import { displayErrorDetail } from "@remnic/core/runtime/better-sqlite";
 import { isSafeRouteNamespace } from "@remnic/core/routing/engine";
@@ -185,7 +220,10 @@ import { exportWorkBoardMarkdown, exportWorkBoardSnapshot, importWorkBoardSnapsh
 import { wrapWorkLayerContext } from "@remnic/core/work/boundary";
 
 // ../../src/profiling.ts
-import { formatProfileTraceAscii, ProfilingCollector } from "@remnic/core/profiling";
+import {
+  formatProfileTraceAscii,
+  ProfilingCollector
+} from "@remnic/core/profiling";
 
 // ../../src/tools.ts
 import { runMemoryGovernance } from "@remnic/core/maintenance/memory-governance";
@@ -3036,7 +3074,10 @@ Returns: Performance trace data with timing breakdown`,
 import { registerLcmTools } from "@remnic/core/lcm/index";
 import { estimateTokens as estimateLcmTokens } from "@remnic/core/lcm/archive";
 import { registerCli } from "@remnic/core/cli";
-import { FallbackLlmClient, fallbackLlmRuntimeContextFromConfig } from "@remnic/core/fallback-llm";
+import {
+  FallbackLlmClient,
+  fallbackLlmRuntimeContextFromConfig
+} from "@remnic/core/fallback-llm";
 
 // ../../src/objective-state.ts
 var objective_state_exports = {};
@@ -3084,7 +3125,10 @@ import { readEnvVar, resolveHomeDir as resolveHomeDir2 } from "@remnic/core/runt
 import { displayErrorDetail as displayErrorDetail2 } from "@remnic/core/runtime/better-sqlite";
 
 // ../../src/migrate/from-engram.ts
-import { migrateFromEngram, rollbackFromEngramMigration } from "@remnic/core/migrate/from-engram";
+import {
+  migrateFromEngram,
+  rollbackFromEngramMigration
+} from "@remnic/core/migrate/from-engram";
 
 // ../../src/user-message-cleaning.ts
 var DEFAULT_CHANNEL_ENVELOPE_PREFIXES = ["OpenClaw"];
@@ -3285,7 +3329,9 @@ async function listRemnicPublicArtifacts(params) {
 }
 
 // src/openclaw-tools/memory-get-tool.ts
-import { getMemoryForActiveMemory } from "@remnic/core";
+import {
+  getMemoryForActiveMemory
+} from "@remnic/core";
 
 // src/openclaw-tools/shapes.ts
 import { Type as Type2 } from "@sinclair/typebox";
@@ -3338,7 +3384,9 @@ function buildMemoryGetTool(orchestrator, options = {}) {
 }
 
 // src/openclaw-tools/memory-search-tool.ts
-import { recallForActiveMemory } from "@remnic/core";
+import {
+  recallForActiveMemory
+} from "@remnic/core";
 function buildMemorySearchTool(orchestrator, options = {}) {
   const recall = options.recallForActiveMemory ?? recallForActiveMemory;
   return {
@@ -3368,7 +3416,9 @@ function buildMemorySearchTool(orchestrator, options = {}) {
 
 // src/runtime-surfaces.ts
 import { composeSalvagedEnvelope as composeSalvagedEnvelope3 } from "@remnic/core/salvage-envelope";
-import { gatewayTaskChainOptions } from "@remnic/core/fallback-llm";
+import {
+  gatewayTaskChainOptions
+} from "@remnic/core/fallback-llm";
 function resolveDreamNarrativeRoute(config, directClientAvailable) {
   if (config.modelSource === "gateway") {
     const narrativeModel = typeof config.dreaming.narrativeModel === "string" ? config.dreaming.narrativeModel.trim() : "";
@@ -4147,15 +4197,16 @@ function validateSlotSelection(ctx) {
 // ../../src/openclaw-flush-plan-lifecycle.ts
 import path2 from "path";
 import { createHash as createHash3, randomUUID } from "crypto";
-import * as fsReadModule0 from "fs/promises";
-const lstat2 = fsReadModule0.lstat;
-const mkdir = fsReadModule0.mkdir;
-const fileReader = fsReadModule0["re"+"ad"+"Fi"+"le"];
-const readdir2 = fsReadModule0.readdir;
-const realpath2 = fsReadModule0.realpath;
-const rename = fsReadModule0.rename;
-const unlink = fsReadModule0.unlink;
-const writeFile = fsReadModule0.writeFile;
+import {
+  lstat as lstat2,
+  mkdir,
+  readFile,
+  readdir as readdir2,
+  realpath as realpath2,
+  rename,
+  unlink,
+  writeFile
+} from "fs/promises";
 var DEFAULT_MAX_IMPORT_TURN_CHARS = 4e3;
 var MARKER_WRITE_TEMP_ATTEMPTS = 8;
 var CLEANUP_SNAPSHOT_PREFIX = "flush-plan.cleanup-";
@@ -4277,7 +4328,7 @@ async function readProcessedMarker(markerPath) {
   try {
     const stat2 = await lstat2(markerPath);
     if (stat2.isSymbolicLink() || !stat2.isFile()) return void 0;
-    return parseProcessedMarker(await fileReader(markerPath, "utf8"));
+    return parseProcessedMarker(await readFile(markerPath, "utf8"));
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -4348,7 +4399,7 @@ function reconcileOpenClawFlushPlanReplacementContent(params) {
 async function readSafeFlushPlanReplacementContent(flushPlanPath) {
   if (!await isSafeFlushPlanAppendTarget(flushPlanPath)) return { ok: false };
   try {
-    return { ok: true, content: await fileReader(flushPlanPath, "utf8") };
+    return { ok: true, content: await readFile(flushPlanPath, "utf8") };
   } catch (error) {
     if (error?.code === "ENOENT") {
       return { ok: true, content: "" };
@@ -4490,7 +4541,7 @@ async function recoverInterruptedCleanupSnapshots(params) {
   }
   let currentContent;
   try {
-    currentContent = await fileReader(params.flushPlanPath, "utf8");
+    currentContent = await readFile(params.flushPlanPath, "utf8");
   } catch (error) {
     if (error?.code !== "ENOENT") throw error;
   }
@@ -4508,7 +4559,7 @@ async function recoverInterruptedCleanupSnapshots(params) {
       );
       continue;
     }
-    const cleanupContent = await fileReader(cleanupPath, "utf8");
+    const cleanupContent = await readFile(cleanupPath, "utf8");
     if (marker?.processedContent && cleanupContent.startsWith(marker.processedContent)) {
       const restoredTail = cleanupContent.slice(marker.processedContent.length);
       if (restoredTail.length > 0) {
@@ -4883,7 +4934,7 @@ async function readFlushPlanSnapshot(flushPlanPath) {
       reason: "flush plan path is not a regular file"
     };
   }
-  const content = await fileReader(flushPlanPath, "utf8");
+  const content = await readFile(flushPlanPath, "utf8");
   if (!isMeaningfulFlushPlanContent(content)) {
     return { status: "empty", path: flushPlanPath };
   }
@@ -4982,7 +5033,7 @@ async function removeProcessedFlushPlanContent(params) {
       throw error;
     }
   }
-  const current = await fileReader(cleanupPath, "utf8");
+  const current = await readFile(cleanupPath, "utf8");
   const processedStatus = params.recoveredFromMarker ? "processed_marker_recovered" : "processed";
   const preservedTailStatus = params.recoveredFromMarker ? "processed_marker_recovered_tail" : "processed_preserved_tail";
   const matchIndex = current === params.processedContent || current.startsWith(params.processedContent) ? 0 : params.allowNonPrefixMatch ? current.indexOf(params.processedContent) : -1;
@@ -5282,9 +5333,16 @@ function resolveRemnicOpenClawPluginEntry(raw, preferredId) {
 
 // src/delegate-runtime.ts
 import path4 from "path";
-import { renderMemoryContextPrompt } from "@remnic/core";
+import {
+  renderMemoryContextPrompt
+} from "@remnic/core";
 import { log as log2 } from "@remnic/core/logger";
-import { SESSION_NAMESPACE_BINDING_MAX_ENTRIES, SESSION_NAMESPACE_BINDING_MAX_NAMESPACES, SESSION_NAMESPACE_BINDING_MAX_NAMESPACE_LENGTH, createFileSessionNamespaceBindingStore } from "@remnic/core/session-namespace-bindings";
+import {
+  SESSION_NAMESPACE_BINDING_MAX_ENTRIES,
+  SESSION_NAMESPACE_BINDING_MAX_NAMESPACES,
+  SESSION_NAMESPACE_BINDING_MAX_NAMESPACE_LENGTH,
+  createFileSessionNamespaceBindingStore
+} from "@remnic/core/session-namespace-bindings";
 import { createFileToggleStore } from "@remnic/core/session-toggles";
 
 // src/bridge.ts
@@ -5415,7 +5473,7 @@ function isDaemonRunning() {
     path3.join(resolveHomeDir(), ".engram", "server.pid")
   ]) {
     try {
-      const pid = parseInt(fs["re"+"ad"+"Fi"+"le"+"Sync"](pidFile, "utf8").trim(), 10);
+      const pid = parseInt(fs.readFileSync(pidFile, "utf8").trim(), 10);
       process.kill(pid, 0);
       return true;
     } catch {
@@ -5478,7 +5536,7 @@ function readDaemonHost() {
   for (const p of configPathCandidates()) {
     if (!fs.existsSync(p)) continue;
     try {
-      const raw = JSON.parse(fs["re"+"ad"+"Fi"+"le"+"Sync"](p, "utf8"));
+      const raw = JSON.parse(fs.readFileSync(p, "utf8"));
       const configHost = raw.server?.host;
       if (typeof configHost === "string" && configHost.trim() !== "") {
         return normalizeDaemonHost(configHost);
@@ -5494,7 +5552,7 @@ function readDaemonPort() {
   for (const p of configPathCandidates()) {
     if (!fs.existsSync(p)) continue;
     try {
-      const raw = JSON.parse(fs["re"+"ad"+"Fi"+"le"+"Sync"](p, "utf8"));
+      const raw = JSON.parse(fs.readFileSync(p, "utf8"));
       const configPort = coerceDaemonPort(raw.server?.port);
       if (configPort !== void 0) return configPort;
     } catch {
@@ -5564,8 +5622,8 @@ function isOpenClawTokenEntry(value) {
 function loadDaemonAuth() {
   const environmentTokens = [
     ["OPENCLAW_REMNIC_ACCESS_TOKEN", readEnv("OPENCLAW_REMNIC_ACCESS_TOKEN")],
-    ["OPENCLAW_ENGRAM_ACCESS_TOKEN", readEnv("OPENCLAW_ENGRAM_ACCESS_TOKEN")],
     ["REMNIC_AUTH_TOKEN", readEnv("REMNIC_AUTH_TOKEN")],
+    ["OPENCLAW_ENGRAM_ACCESS_TOKEN", readEnv("OPENCLAW_ENGRAM_ACCESS_TOKEN")],
     ["ENGRAM_AUTH_TOKEN", readEnv("ENGRAM_AUTH_TOKEN")]
   ];
   for (const [source, token] of environmentTokens) {
@@ -5578,7 +5636,7 @@ function loadDaemonAuth() {
   for (const tokenStore of tokenStores) {
     if (!fs.existsSync(tokenStore.path)) continue;
     try {
-      const store = JSON.parse(fs["re"+"ad"+"Fi"+"le"+"Sync"](tokenStore.path, "utf8"));
+      const store = JSON.parse(fs.readFileSync(tokenStore.path, "utf8"));
       const tokens = Array.isArray(store.tokens) ? store.tokens : [];
       const openClawToken = tokens.find(isOpenClawTokenEntry)?.token;
       if (typeof openClawToken === "string" && openClawToken.length > 0) {
@@ -5594,8 +5652,8 @@ function loadDaemonAuth() {
   try {
     for (const configPath of configPathCandidates()) {
       if (!fs.existsSync(configPath)) continue;
-      const raw = JSON.parse(fs["re"+"ad"+"Fi"+"le"+"Sync"](configPath, "utf8"));
-      const token = raw.server?.["auth"+"Token"];
+      const raw = JSON.parse(fs.readFileSync(configPath, "utf8"));
+      const token = raw.server?.authToken;
       if (typeof token === "string" && token.length > 0) {
         return { token, source: "daemon configuration" };
       }
@@ -5880,7 +5938,7 @@ function registerDelegateRuntime(api, options) {
   if (options.allowPromptInjection && options.recallBudgetChars !== 0) {
     const promptLinesBySession = /* @__PURE__ */ new Map();
     const useSectionBuilder = typeof api.registerMemoryPromptSection === "function";
-    const recallHandler = async (hook, event, ctx) => {
+    const recallHandler = async (event, ctx) => {
       const query = recallQueryFrom(event);
       if (query.trim().length < 5) return void 0;
       const sessionKey = sessionKeyFrom(event, ctx);
@@ -5931,7 +5989,7 @@ function registerDelegateRuntime(api, options) {
           promptLinesBySession.set(sessionKey, rendered.lines);
           return void 0;
         }
-        return hook === "before_prompt_build" ? { prependSystemContext: prompt } : { prependSystemContext: prompt, prependContext: prompt };
+        return { prependSystemContext: prompt };
       } catch (err) {
         log2.warn(`delegate recall failed: ${String(err)}`);
         return void 0;
@@ -5939,12 +5997,7 @@ function registerDelegateRuntime(api, options) {
     };
     api.on(
       "before_prompt_build",
-      (event, ctx) => recallHandler("before_prompt_build", event, ctx),
-      { timeoutMs: options.hookTimeoutMs }
-    );
-    api.on(
-      "before_agent_start",
-      (event, ctx) => recallHandler("before_agent_start", event, ctx),
+      (event, ctx) => recallHandler(event, ctx),
       { timeoutMs: options.hookTimeoutMs }
     );
     if (useSectionBuilder && api.registerMemoryPromptSection) {
@@ -6472,8 +6525,16 @@ function buildTurnFingerprint(input) {
 
 // ../../src/index.ts
 import { planRecallMode } from "@remnic/core/intent";
-import { expandTildePath as expandTildePath2, renderMemoryContextPrompt as renderSharedMemoryContextPrompt, resolveAgentAccessAuthToken as resolveAgentAccessAuthCredential, resolvePrincipal } from "@remnic/core";
-import { normalizeHostEmbeddingVector, registerHostEmbeddingProvider } from "@remnic/core/host-embedding-provider";
+import {
+  expandTildePath as expandTildePath2,
+  renderMemoryContextPrompt as renderSharedMemoryContextPrompt,
+  resolveAgentAccessAuthToken,
+  resolvePrincipal
+} from "@remnic/core";
+import {
+  normalizeHostEmbeddingVector,
+  registerHostEmbeddingProvider
+} from "@remnic/core/host-embedding-provider";
 
 // ../../src/resolve-provider-secret.ts
 var resolve_provider_secret_exports = {};
@@ -6484,7 +6545,7 @@ __reExport(resolve_provider_secret_exports, resolve_provider_secret_star);
 import path5 from "path";
 import * as resolve_provider_secret_star from "@remnic/core/resolve-provider-secret";
 async function findGatewayRuntimeModules(filePrefix) {
-  const { existsSync, ["re"+"ad"+"Fi"+"le"+"Sync"]: fileReaderSync, readdirSync, realpathSync } = await import("fs");
+  const { existsSync, readFileSync, readdirSync, realpathSync } = await import("fs");
   const { createRequire: createRequire2 } = await import("module");
   const candidates = [];
   const isWithinRoot = (root, candidate) => {
@@ -6499,7 +6560,7 @@ async function findGatewayRuntimeModules(filePrefix) {
     while (true) {
       const packageJsonPath = path5.join(currentDir, "package.json");
       if (existsSync(packageJsonPath)) {
-        const packageJson = JSON.parse(fileReaderSync(packageJsonPath, "utf8"));
+        const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf8"));
         if (packageJson.name !== "openclaw") {
           return [];
         }
@@ -6622,7 +6683,7 @@ function fileExistsNow(filePath) {
 }
 async function readTextFileLater(filePath) {
   const fs2 = await import(NODE_FS_PROMISES_MODULE_ID);
-  return fs2["re"+"ad"+"Fi"+"le"](filePath, "utf-8");
+  return fs2.readFile(filePath, "utf-8");
 }
 async function writeTextFileLater(filePath, data) {
   const fs2 = await import(NODE_FS_PROMISES_MODULE_ID);
@@ -6796,7 +6857,7 @@ async function loadOpenClawProviderAuthRuntimeModule() {
   );
   return null;
 }
-async function resolveOpenClawProviderCredential(params) {
+async function resolveOpenClawProviderApiKey(params) {
   const mod = await loadOpenClawProviderAuthRuntimeModule();
   const resolver = mod?.resolveApiKeyForProvider;
   if (typeof resolver !== "function") return null;
@@ -7329,7 +7390,7 @@ var pluginDefinition = {
       fileConfig ?? {},
       runtimeSet
     );
-    cfg.providerApiKeyResolver = resolveOpenClawProviderCredential;
+    cfg.providerApiKeyResolver = resolveOpenClawProviderApiKey;
     cfg.runtimeAuthForModelResolver = getOpenClawRuntimeAuthForModel;
     (0, logger_exports.initLogger)(api.logger, cfg.debug);
     logger_exports.log.info(
@@ -7438,19 +7499,19 @@ var pluginDefinition = {
       resolveSecretRef: (ref, context) => loadOpenClawSecretRefResolver().then((resolver) => resolver ? resolver(ref, context) : void 0)
     });
     globalThis[keys.ACCESS_SERVICE] = accessService;
-    const rawAuthCredential = cfg.agentAccessHttp["auth"+"Token"];
-    const authCredentialIsSecretRef = rawAuthCredential !== void 0 && typeof rawAuthCredential !== "string";
+    const rawAuthToken = cfg.agentAccessHttp.authToken;
+    const authTokenIsSecretRef = rawAuthToken !== void 0 && typeof rawAuthToken !== "string";
     const accessHttpAuthState = globalThis[keys.ACCESS_HTTP_AUTH_STATE] ??= {
       resolvedSecretRefAuthToken: void 0
     };
-    const authCredentialsFromSecretRef = () => accessHttpAuthState.resolvedSecretRefAuthToken ? [accessHttpAuthState.resolvedSecretRefAuthToken] : [];
+    const authTokensFromSecretRef = () => accessHttpAuthState.resolvedSecretRefAuthToken ? [accessHttpAuthState.resolvedSecretRefAuthToken] : [];
     const existingAccessHttpServer = globalThis[keys.ACCESS_HTTP_SERVER];
     const accessHttpServer = existingAccessHttpServer && existingAccessHttpServer ? existingAccessHttpServer : new access_http_exports.EngramAccessHttpServer({
       service: accessService,
       host: cfg.agentAccessHttp.host,
       port: cfg.agentAccessHttp.port,
-      ["auth"+"Token"]: authCredentialIsSecretRef ? void 0 : rawAuthCredential,
-      authTokensGetter: authCredentialIsSecretRef ? authCredentialsFromSecretRef : void 0,
+      authToken: authTokenIsSecretRef ? void 0 : rawAuthToken,
+      authTokensGetter: authTokenIsSecretRef ? authTokensFromSecretRef : void 0,
       principal: cfg.agentAccessHttp.principal,
       maxBodyBytes: cfg.agentAccessHttp.maxBodyBytes,
       writeRateLimitMaxRequests: cfg.agentAccessHttp.writeRateLimitMaxRequests,
@@ -7469,7 +7530,7 @@ var pluginDefinition = {
     const dreamsSurface = createDreamsSurface();
     const heartbeatSurface = createHeartbeatSurface();
     const dreamNarrativeClient = cfg.openaiApiKey ? new OpenAI({
-      ["api"+"Key"]: cfg.openaiApiKey,
+      apiKey: cfg.openaiApiKey,
       ...cfg.openaiBaseUrl ? { baseURL: cfg.openaiBaseUrl } : {}
     }) : null;
     let stopDreamWatcher = null;
@@ -8321,7 +8382,8 @@ Keep the reflection grounded in the evidence below.
         }
         return lines;
       }
-      async function recallHookHandler(hookLabel, event, ctx) {
+      async function recallHookHandler(event, ctx) {
+        const hookLabel = "before_prompt_build";
         let prompt = event.prompt;
         if ((!prompt || prompt.length < 5) && Array.isArray(event.messages)) {
           const msgs = event.messages;
@@ -8346,7 +8408,7 @@ Keep the reflection grounded in the evidence below.
           );
           codexCompactionModeLogged = true;
         }
-        if (hookLabel === "before_prompt_build" && cfg.codexCompat.enabled !== false && sessionIdentity.codexThreadBound && sessionIdentity.providerThreadId && (cfg.codexCompat.compactionFlushMode === "heuristic" || cfg.codexCompat.compactionFlushMode === "auto")) {
+        if (cfg.codexCompat.enabled !== false && sessionIdentity.codexThreadBound && sessionIdentity.providerThreadId && (cfg.codexCompat.compactionFlushMode === "heuristic" || cfg.codexCompat.compactionFlushMode === "auto")) {
           const currentCount = sessionIdentity.messageCount;
           const codexBaselineKey = resolveCodexCompactionBaselineKey2(
             sessionKey,
@@ -8434,14 +8496,7 @@ Keep the reflection grounded in the evidence below.
             summary: null
           });
           const verbosePrompt = verboseLines.join("\n").replace(/\n$/, "");
-          if (hookLabel === "before_prompt_build") {
-            return useMemoryPromptSection ? { memoryLines: verboseLines } : { prependSystemContext: verbosePrompt, memoryLines: verboseLines };
-          }
-          return {
-            prependSystemContext: verbosePrompt,
-            prependContext: verbosePrompt,
-            memoryLines: verboseLines
-          };
+          return useMemoryPromptSection ? { memoryLines: verboseLines } : { prependSystemContext: verbosePrompt, memoryLines: verboseLines };
         }
         try {
           await orchestrator.maybeRunFileHygiene().catch(() => void 0);
@@ -8465,14 +8520,7 @@ Keep the reflection grounded in the evidence below.
             }) : [];
             const mergedLines = [...verboseLines2, ...heartbeatLines];
             const heartbeatPrompt = mergedLines.join("\n").replace(/\n$/, "");
-            if (hookLabel === "before_prompt_build") {
-              return useMemoryPromptSection ? { memoryLines: mergedLines } : { prependSystemContext: heartbeatPrompt, memoryLines: mergedLines };
-            }
-            return {
-              prependSystemContext: heartbeatPrompt,
-              prependContext: heartbeatPrompt,
-              memoryLines: mergedLines
-            };
+            return useMemoryPromptSection ? { memoryLines: mergedLines } : { prependSystemContext: heartbeatPrompt, memoryLines: mergedLines };
           }
           if (orchestrator.config.compactionResetEnabled) {
             const agentWorkspace = ctx?.workspaceDir;
@@ -8569,14 +8617,7 @@ Keep the reflection grounded in the evidence below.
               });
             }
             if (mergedLines.length === 0) return;
-            if (hookLabel === "before_prompt_build") {
-              return useMemoryPromptSection ? { memoryLines: mergedLines } : { prependSystemContext: auxiliaryPrompt, memoryLines: mergedLines };
-            }
-            return {
-              prependSystemContext: auxiliaryPrompt,
-              prependContext: auxiliaryPrompt,
-              memoryLines: mergedLines
-            };
+            return useMemoryPromptSection ? { memoryLines: mergedLines } : { prependSystemContext: auxiliaryPrompt, memoryLines: mergedLines };
           }
           const memoryContext = renderMemoryContext2(recallComposition);
           if (!memoryContext) return;
@@ -8622,14 +8663,7 @@ Keep the reflection grounded in the evidence below.
           logger_exports.log.debug(
             `${hookLabel}: returning memory context with ${trimmed.length} chars`
           );
-          if (hookLabel === "before_prompt_build") {
-            return promptWithVerbose ? { prependSystemContext: promptWithVerbose, memoryLines } : { memoryLines };
-          }
-          return promptWithVerbose ? {
-            prependSystemContext: promptWithVerbose,
-            prependContext: promptWithVerbose,
-            memoryLines
-          } : { memoryLines };
+          return promptWithVerbose ? { prependSystemContext: promptWithVerbose, memoryLines } : { memoryLines };
         } catch (err) {
           logger_exports.log.error("recall failed", err);
           lastRecallSummaryBySession.set(sessionKey, null);
@@ -8659,7 +8693,7 @@ Keep the reflection grounded in the evidence below.
                     null
                   );
                 }
-                const result = await recallHookHandler("before_prompt_build", event, ctx);
+                const result = await recallHookHandler(event, ctx);
                 if (needsCacheFallback && result?.memoryLines) {
                   cachePromptMemoryLines2(
                     sessionKey,
@@ -8676,18 +8710,6 @@ Keep the reflection grounded in the evidence below.
               { timeoutMs: cfg.initGateTimeoutMs }
             );
           })(api);
-        } else {
-          api.on(
-            "before_agent_start",
-            async (event, ctx) => {
-              const result = await recallHookHandler("before_agent_start", event, ctx);
-              if (result && "memoryLines" in result) {
-                const { memoryLines: _ml, ...gatewayResult } = result;
-                return Object.keys(gatewayResult).length > 0 ? gatewayResult : void 0;
-              }
-              return result;
-            }
-          );
         }
       }
       let memoryPromptBuilder;
@@ -8704,7 +8726,7 @@ Keep the reflection grounded in the evidence below.
             const sessionKey = ctx?.sessionKey ?? "default";
             const sessionIdentity = resolveSessionIdentity2(sessionKey, event, ctx);
             cachePromptMemoryLines2(sessionKey, sessionIdentity.providerThreadId, null);
-            const result = await recallHookHandler("before_prompt_build", event, ctx);
+            const result = await recallHookHandler(event, ctx);
             if (result?.memoryLines) {
               cachePromptMemoryLines2(
                 sessionKey,
@@ -8871,7 +8893,7 @@ Keep the reflection grounded in the evidence below.
                     (result) => typeof opts?.minScore === "number" && Number.isFinite(opts.minScore) ? result.score >= opts.minScore : true
                   );
                 },
-                async ["re"+"ad"+"Fi"+"le"](params) {
+                async readFile(params) {
                   const requestedPath = normalizeWorkspacePath(params.relPath);
                   const absolutePath = await resolveReadablePath(params.relPath);
                   const text = await readTextFileLater(absolutePath);
@@ -9647,51 +9669,6 @@ Keep the reflection grounded in the evidence below.
             );
           }
         );
-      } else if (!passiveMode) {
-        const runtimeApi = api;
-        runtimeApi.registerHook?.(
-          ["agent_heartbeat", "agent:heartbeat"],
-          (event) => {
-            if (orchestrator.config.sessionObserverEnabled !== true) return;
-            const sessionKey = event?.context?.sessionKey ?? "default";
-            const rememberedThreadId = resolveStoredCodexThreadId2(sessionKey);
-            const bufferKey = resolveExtractionBufferKey2(
-              sessionKey,
-              rememberedThreadId && cfg.codexCompat.threadIdBufferKeying !== false ? codexLogicalSessionKey(rememberedThreadId) : sessionKey
-            );
-            void orchestrator.observeSessionHeartbeat(sessionKey, { bufferKey }).catch((err) => {
-              logger_exports.log.debug(`agent_heartbeat observer failed: ${err}`);
-            });
-          },
-          {
-            name: "engram_agent_heartbeat_legacy",
-            description: "Observe legacy heartbeat events for session observation."
-          }
-        );
-        const runtimeVersion = runtimeApi.runtime?.version || readEnvVar("OPENCLAW_SERVICE_VERSION") || "unknown";
-        void import("./legacy-hook-compat-QHHKF4GK.js").then(({ shouldRegisterTypedAgentHeartbeat }) => {
-          if (shouldRegisterTypedAgentHeartbeat(runtimeVersion)) {
-            api.on(
-              "agent_heartbeat",
-              (_event, ctx) => {
-                if (orchestrator.config.sessionObserverEnabled !== true) return;
-                const sessionKey = ctx?.sessionKey ?? "default";
-                const rememberedThreadId = resolveStoredCodexThreadId2(sessionKey);
-                const bufferKey = resolveExtractionBufferKey2(
-                  sessionKey,
-                  rememberedThreadId && cfg.codexCompat.threadIdBufferKeying !== false ? codexLogicalSessionKey(rememberedThreadId) : sessionKey
-                );
-                void orchestrator.observeSessionHeartbeat(sessionKey, { bufferKey }).catch((err) => {
-                  logger_exports.log.debug(`agent_heartbeat typed observer failed: ${err}`);
-                });
-              }
-            );
-            logger_exports.log.info(
-              `registered typed agent_heartbeat hook for OpenClaw ${runtimeVersion}`
-            );
-          }
-        }).catch(() => {
-        });
       }
     }
     async function ensureHourlySummaryCron(api2) {
@@ -10017,8 +9994,8 @@ Keep the reflection grounded in the evidence below.
             }
             if (cfg.agentAccessHttp.enabled) {
               if (!didCountStart) return;
-              if (authCredentialIsSecretRef) {
-                const resolved = await resolveAgentAccessAuthCredential(rawAuthCredential, {
+              if (authTokenIsSecretRef) {
+                const resolved = await resolveAgentAccessAuthToken(rawAuthToken, {
                   resolveSecretRef: await loadOpenClawSecretRefResolver()
                 });
                 if (!resolved) {
@@ -10298,4 +10275,17 @@ async function resolveFlushPlanProcessingChainKey(workspaceRoot) {
   }
 }
 var export_loadDaySummaryPrompt = day_summary_exports.loadDaySummaryPrompt;
-export { buildHourlySummaryCronJob, checkDaemonHealth, src_default as default, detectBridgeMode, embedWithOpenClawProvider, listRemnicPublicArtifacts, export_loadDaySummaryPrompt as loadDaySummaryPrompt, loadHourlySummaryCronJobsData, loadOpenClawMemoryEmbeddingSdk, parseHourlySummaryCronJobsData, reconcileHourlySummaryCronRouting, selectOpenClawMemoryEmbeddingSdk };
+export {
+  buildHourlySummaryCronJob,
+  checkDaemonHealth,
+  src_default as default,
+  detectBridgeMode,
+  embedWithOpenClawProvider,
+  listRemnicPublicArtifacts,
+  export_loadDaySummaryPrompt as loadDaySummaryPrompt,
+  loadHourlySummaryCronJobsData,
+  loadOpenClawMemoryEmbeddingSdk,
+  parseHourlySummaryCronJobsData,
+  reconcileHourlySummaryCronRouting,
+  selectOpenClawMemoryEmbeddingSdk
+};