@totalreclaw/totalreclaw 3.3.4-rc.1 → 3.3.4-rc.2

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: totalreclaw
 description: "Install + set up TotalReclaw encrypted memory for OpenClaw, then use totalreclaw_remember / totalreclaw_recall. Trigger on 'install TotalReclaw', 'set up TotalReclaw', 'restore my recovery phrase', or any remember / recall request."
-version: 3.3.4-rc.1
+version: 3.3.4-rc.2
 author: TotalReclaw Team
 license: MIT
 homepage: https://totalreclaw.xyz

package/dist/index.js

@@ -4686,9 +4686,23 @@ const plugin = {
                             // Background task — writes credentials.json + flips state when
                             // the browser completes the flow. Tool handler returns
                             // immediately so the agent can tell the user the URL + PIN.
+                            //
+                            // 3.3.4-rc.2 (Pedro QA — pair flow stuck-session) — wrap the
+                            // WS-await in a 60s hard timeout. The relay drops sessions on
+                            // `ws_close` (separately patched relay-side); without this
+                            // bound the background task hangs in `waitNextMessage` for the
+                            // full 5-minute session TTL before resolving, and downstream
+                            // tooling that polls the gateway for completion sees stale
+                            // `processing` state at 129s/159s/189s. 60s is the user-side
+                            // deadline we surface in chat: long enough for a slow scan-
+                            // and-paste, short enough that a fresh URL request is the
+                            // obvious next step. Structured `timed_out` error in the log
+                            // lets ops grep for the failure mode independently of generic
+                            // ws-close errors.
+                            const PAIR_TOOL_HARD_TIMEOUT_MS = 60_000;
                             void (async () => {
                                 try {
-                                    await awaitPhraseUpload(remoteSession, {
+                                    const phraseUploadPromise = awaitPhraseUpload(remoteSession, {
                                         phraseValidator: (p) => validateMnemonic(p, wordlist),
                                         completePairing: async ({ mnemonic }) => {
                                             try {
@@ -4728,7 +4742,37 @@ const plugin = {
                                                 return { state: 'error', error: msg };
                                             }
                                         },
+                                        // 3.3.4-rc.2 — also pass through to awaitPhraseUpload so its
+                                        // internal `waitNextMessage` timer matches the outer race.
+                                        timeoutMs: PAIR_TOOL_HARD_TIMEOUT_MS,
+                                    });
+                                    // 3.3.4-rc.2 — outer Promise.race guard. Resolves to a
+                                    // sentinel ({ status: 'timed_out', ... }) so the catch
+                                    // handler can distinguish a hard-timeout from a generic
+                                    // ws-close error and surface it explicitly.
+                                    const TIMEOUT_SENTINEL = {
+                                        status: 'timed_out',
+                                        message: `Pair flow timed out (${PAIR_TOOL_HARD_TIMEOUT_MS / 1000}s) — generate a new URL with totalreclaw_pair.`,
+                                    };
+                                    let hardTimer;
+                                    const hardTimeoutPromise = new Promise((resolve) => {
+                                        hardTimer = setTimeout(() => resolve(TIMEOUT_SENTINEL), PAIR_TOOL_HARD_TIMEOUT_MS);
                                     });
+                                    try {
+                                        const raced = await Promise.race([
+                                            phraseUploadPromise,
+                                            hardTimeoutPromise,
+                                        ]);
+                                        if (raced &&
+                                            typeof raced === 'object' &&
+                                            raced.status === 'timed_out') {
+                                            api.logger.warn(`totalreclaw_pair(relay): hard timeout — ${raced.message} (token=${remoteSession.token.slice(0, 8)}…)`);
+                                        }
+                                    }
+                                    finally {
+                                        if (hardTimer)
+                                            clearTimeout(hardTimer);
+                                    }
                                 }
                                 catch (bgErr) {
                                     // Expected on TTL expiry / user-aborts — log at warn, not error.

package/dist/pair-cli-relay.js

@@ -44,7 +44,7 @@
  * `CONFIG`. See `index.ts` wire-up.
  */
 import { validateMnemonic } from '@scure/bip39';
-import { wordlist } from '@scure/bip39/wordlists/english';
+import { wordlist } from '@scure/bip39/wordlists/english.js';
 import { loadCredentialsJson, writeCredentialsJson, writeOnboardingState, } from './fs-helpers.js';
 import { awaitPhraseUpload, openRemotePairSession, } from './pair-remote-client.js';
 import { setRecoveryPhraseOverride } from './config.js';

package/index.ts

@@ -5496,9 +5496,23 @@ const plugin = {
               // Background task — writes credentials.json + flips state when
               // the browser completes the flow. Tool handler returns
               // immediately so the agent can tell the user the URL + PIN.
+              //
+              // 3.3.4-rc.2 (Pedro QA — pair flow stuck-session) — wrap the
+              // WS-await in a 60s hard timeout. The relay drops sessions on
+              // `ws_close` (separately patched relay-side); without this
+              // bound the background task hangs in `waitNextMessage` for the
+              // full 5-minute session TTL before resolving, and downstream
+              // tooling that polls the gateway for completion sees stale
+              // `processing` state at 129s/159s/189s. 60s is the user-side
+              // deadline we surface in chat: long enough for a slow scan-
+              // and-paste, short enough that a fresh URL request is the
+              // obvious next step. Structured `timed_out` error in the log
+              // lets ops grep for the failure mode independently of generic
+              // ws-close errors.
+              const PAIR_TOOL_HARD_TIMEOUT_MS = 60_000;
               void (async () => {
                 try {
-                  await awaitPhraseUpload(remoteSession, {
+                  const phraseUploadPromise = awaitPhraseUpload(remoteSession, {
                     phraseValidator: (p: string) =>
                       validateMnemonic(p, wordlist),
                     completePairing: async ({ mnemonic }) => {
@@ -5546,7 +5560,48 @@ const plugin = {
                         return { state: 'error', error: msg };
                       }
                     },
+                    // 3.3.4-rc.2 — also pass through to awaitPhraseUpload so its
+                    // internal `waitNextMessage` timer matches the outer race.
+                    timeoutMs: PAIR_TOOL_HARD_TIMEOUT_MS,
                   });
+                  // 3.3.4-rc.2 — outer Promise.race guard. Resolves to a
+                  // sentinel ({ status: 'timed_out', ... }) so the catch
+                  // handler can distinguish a hard-timeout from a generic
+                  // ws-close error and surface it explicitly.
+                  const TIMEOUT_SENTINEL: {
+                    status: 'timed_out';
+                    message: string;
+                  } = {
+                    status: 'timed_out',
+                    message:
+                      `Pair flow timed out (${PAIR_TOOL_HARD_TIMEOUT_MS / 1000}s) — generate a new URL with totalreclaw_pair.`,
+                  };
+                  let hardTimer: ReturnType<typeof setTimeout> | undefined;
+                  const hardTimeoutPromise = new Promise<typeof TIMEOUT_SENTINEL>(
+                    (resolve) => {
+                      hardTimer = setTimeout(
+                        () => resolve(TIMEOUT_SENTINEL),
+                        PAIR_TOOL_HARD_TIMEOUT_MS,
+                      );
+                    },
+                  );
+                  try {
+                    const raced = await Promise.race([
+                      phraseUploadPromise,
+                      hardTimeoutPromise,
+                    ]);
+                    if (
+                      raced &&
+                      typeof raced === 'object' &&
+                      (raced as { status?: unknown }).status === 'timed_out'
+                    ) {
+                      api.logger.warn(
+                        `totalreclaw_pair(relay): hard timeout — ${(raced as typeof TIMEOUT_SENTINEL).message} (token=${remoteSession.token.slice(0, 8)}…)`,
+                      );
+                    }
+                  } finally {
+                    if (hardTimer) clearTimeout(hardTimer);
+                  }
                 } catch (bgErr: unknown) {
                   // Expected on TTL expiry / user-aborts — log at warn, not error.
                   const bgMsg = bgErr instanceof Error ? bgErr.message : String(bgErr);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totalreclaw/totalreclaw",
-  "version": "3.3.4-rc.1",
+  "version": "3.3.4-rc.2",
   "description": "End-to-end encrypted, agent-portable memory for OpenClaw and any LLM-agent runtime. XChaCha20-Poly1305 with protobuf v4 + on-chain Memory Taxonomy v1 (claim / preference / directive / commitment / episode / summary).",
   "type": "module",
   "keywords": [
@@ -31,6 +31,7 @@
   "author": "TotalReclaw Team",
   "license": "MIT",
   "dependencies": {
+    "@scure/bip39": "^2.2.0",
     "@totalreclaw/client": "^1.2.0",
     "@totalreclaw/core": "^2.1.1",
     "@types/qrcode": "^1.5.6",

package/pair-cli-relay.ts

@@ -45,7 +45,7 @@
  */
 
 import { validateMnemonic } from '@scure/bip39';
-import { wordlist } from '@scure/bip39/wordlists/english';
+import { wordlist } from '@scure/bip39/wordlists/english.js';
 
 import {
   loadCredentialsJson,

package/skill.json

@@ -1,6 +1,6 @@
 {
   "name": "totalreclaw",
-  "version": "3.3.4-rc.1",
+  "version": "3.3.4-rc.2",
   "description": "End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.",
   "author": "TotalReclaw Team",
   "license": "MIT",