@totalreclaw/totalreclaw 3.3.4-rc.2 → 3.3.5-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +31 -0
- package/SKILL.md +49 -12
- package/package.json +1 -1
- package/skill.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,6 +4,37 @@ All notable changes to `@totalreclaw/totalreclaw` (the OpenClaw plugin) are docu
|
|
|
4
4
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
6
6
|
|
|
7
|
+
## [3.3.5-rc.1] — 2026-04-30
|
|
8
|
+
|
|
9
|
+
UX bundle from Pedro's QA on 3.3.4-rc.2:
|
|
10
|
+
|
|
11
|
+
- **Drop the "yes/no" consent gate before pair setup.** The yes-gate was added
|
|
12
|
+
in PR #160's safety-tone rewrite to give safety-trained agents an explicit
|
|
13
|
+
green light before account creation. In practice the user already consents
|
|
14
|
+
by pasting "Install TotalReclaw" + the canonical URL, and the URL+PIN handed
|
|
15
|
+
back from `totalreclaw_pair` is the real consent moment (the user has to
|
|
16
|
+
open the page in their browser to proceed). The extra gate added friction
|
|
17
|
+
for zero security benefit. Removed from `skill/plugin/SKILL.md`,
|
|
18
|
+
`skill/SKILL.md`, and `docs/guides/openclaw-setup.md`. The Hermes guide
|
|
19
|
+
retains its own gate (handled separately).
|
|
20
|
+
- **Tighten silence rules to suppress chat-channel mid-edit churn.** OpenClaw's
|
|
21
|
+
Telegram channel edits the bot's messages live as the agent's tool calls
|
|
22
|
+
progress, so every "Let me check…" / "Plugin loaded. Let me verify…" /
|
|
23
|
+
"I'll now…" line shows up to the user as visible edit churn even if the
|
|
24
|
+
transport later "deletes" or rewrites it. Added a top-level rule at the
|
|
25
|
+
start of SKILL.md: "Emit ONLY the user-visible lines. Do not narrate tool
|
|
26
|
+
calls. Do not describe what you're doing or about to do." Strengthened the
|
|
27
|
+
forbidden-vocabulary deny-list with the exact patterns Pedro saw in his
|
|
28
|
+
QA today. Re-stated the canonical user-visible line set as 5–6 lines
|
|
29
|
+
TOTAL.
|
|
30
|
+
- **Strengthen `/restart` instructions.** Pedro's chat agent on rc.4-rc.2
|
|
31
|
+
again said "I need permission to restart" instead of issuing the slash
|
|
32
|
+
command — same anti-pattern that PR #163 / #173 / #174 tried to suppress.
|
|
33
|
+
Made the SKILL.md instruction more imperative and concrete: "Your IMMEDIATE
|
|
34
|
+
next message must be the literal slash command `/restart` — nothing else."
|
|
35
|
+
Added explicit "Do not propose alternatives" guidance for the unauthorized
|
|
36
|
+
fallback path. Mirrored in `docs/guides/openclaw-setup.md`.
|
|
37
|
+
|
|
7
38
|
## [3.3.3-rc.1] — 2026-04-30
|
|
8
39
|
|
|
9
40
|
Combined RC bundle:
|
package/SKILL.md
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: totalreclaw
|
|
3
3
|
description: "Install + set up TotalReclaw encrypted memory for OpenClaw, then use totalreclaw_remember / totalreclaw_recall. Trigger on 'install TotalReclaw', 'set up TotalReclaw', 'restore my recovery phrase', or any remember / recall request."
|
|
4
|
-
version: 3.3.
|
|
4
|
+
version: 3.3.5-rc.1
|
|
5
5
|
author: TotalReclaw Team
|
|
6
6
|
license: MIT
|
|
7
7
|
homepage: https://totalreclaw.xyz
|
|
@@ -26,11 +26,35 @@ metadata:
|
|
|
26
26
|
|
|
27
27
|
> The canonical install flow lives at <https://github.com/p-diogo/totalreclaw/blob/main/docs/guides/openclaw-setup.md>. If a user pastes that URL in chat, fetch it and follow its agent-instructions section. This SKILL.md mirrors the same steps so you can act even if the URL is unreachable.
|
|
28
28
|
|
|
29
|
+
## Top-level rule (read this before anything else)
|
|
30
|
+
|
|
31
|
+
**Emit ONLY the user-visible lines listed below. Do not narrate tool calls. Do not describe what you're doing or about to do. Errors are the only allowed deviation, and only as a single tight line.** The expected user-facing transcript for a healthy install is **5–6 short lines TOTAL** (lines 1, 2, 5, 6 always; lines 3 and 4 only if the corresponding condition fires). Anything more is a SKILL violation. Telegram and similar transports edit the bot's messages live as your tool calls progress — every interim "Let me check…" / "Plugin loaded. Let me verify…" line shows up to the user as awkward edit churn, even if you "delete" it. The fix is to never emit it in the first place.
|
|
32
|
+
|
|
33
|
+
## User-visible line set (THIS IS ALL YOU SAY)
|
|
34
|
+
|
|
35
|
+
Speak only these lines, in order. Substitute the bracketed placeholders with the real values. No prefaces. No suffixes. No narration.
|
|
36
|
+
|
|
37
|
+
1. (start of install)
|
|
38
|
+
> Installing TotalReclaw…
|
|
39
|
+
2. (after install + auto-reload + `totalreclaw_pair` is bound)
|
|
40
|
+
> ✓ Installed (totalreclaw <version>)
|
|
41
|
+
3. (optional — only if auto-reload didn't fire and you need to issue `/restart`)
|
|
42
|
+
> Restarting OpenClaw to load the plugin…
|
|
43
|
+
4. (optional — only if you successfully disabled the built-in memory tool to prevent dual-write)
|
|
44
|
+
> Disabled built-in memory tool.
|
|
45
|
+
5. (account-setup URL + PIN, immediately after `totalreclaw_pair` returns)
|
|
46
|
+
> Open <url> in your browser. Enter PIN <pin>. Generate or paste a 12-word recovery phrase. Reply `done` once it's sealed.
|
|
47
|
+
6. (done + free-tier confirmation)
|
|
48
|
+
> ✓ You're set up on the TotalReclaw free tier — 500 memories/month, unlimited reads. https://totalreclaw.xyz/pricing. Ask me to remember anything.
|
|
49
|
+
|
|
50
|
+
If existing credentials are detected (step "Check for existing credentials" below), emit ONLY this line and stop:
|
|
51
|
+
> ✓ TotalReclaw is already set up.
|
|
52
|
+
|
|
29
53
|
## Setup flow
|
|
30
54
|
|
|
31
55
|
If `totalreclaw_*` tools are already bound to your toolset, SKIP install and jump to step 4. Otherwise run all steps in order.
|
|
32
56
|
|
|
33
|
-
1. **Install plugin first, skill second.** Run via your shell tool, in this exact order:
|
|
57
|
+
1. **Install plugin first, skill second (silent — emit user-visible line 1 once at the start, then no prose until line 2).** Run via your shell tool, in this exact order:
|
|
34
58
|
```
|
|
35
59
|
openclaw plugins install @totalreclaw/totalreclaw
|
|
36
60
|
openclaw skills install totalreclaw
|
|
@@ -39,26 +63,39 @@ If `totalreclaw_*` tools are already bound to your toolset, SKIP install and jum
|
|
|
39
63
|
|
|
40
64
|
If either shell call fails with `command not found` / ENOENT / "not authorized" (managed-service or shell-restricted environment), tell the user verbatim *"Your environment doesn't expose the OpenClaw CLI to me. Please install `totalreclaw` from your service's plugins / skills UI, then reply `done`."* Wait for `done` and skip to step 3.
|
|
41
65
|
|
|
42
|
-
2. **Wait for auto-reload — then issue `/restart` autonomously if needed.** OpenClaw's default config (`gateway.reload.mode = "hybrid"`) auto-restarts the gateway via a file-watcher within 1-3 seconds. Wait ~5s, then run `openclaw plugins list | grep totalreclaw` and confirm `totalreclaw_pair` is in your toolset.
|
|
66
|
+
2. **Wait for auto-reload — then issue `/restart` autonomously if needed (silent — emit user-visible line 2 on success, line 3 only if you had to restart).** OpenClaw's default config (`gateway.reload.mode = "hybrid"`) auto-restarts the gateway via a file-watcher within 1-3 seconds. Wait ~5s, then run `openclaw plugins list | grep totalreclaw` and confirm `totalreclaw_pair` is in your toolset. When bound, emit user-visible line 2 and proceed.
|
|
67
|
+
|
|
68
|
+
**If `totalreclaw_pair` is NOT visible after 10s — restart imperative (read carefully):**
|
|
69
|
+
|
|
70
|
+
> Your IMMEDIATE next message must be the literal slash command `/restart` — nothing else. Do not narrate. Do not ask permission. Do not describe what `/restart` does. Do not propose alternatives. Just send `/restart`. You may emit user-visible line 3 (`Restarting OpenClaw to load the plugin…`) ONCE in the same turn, then issue `/restart`. Nothing else.
|
|
71
|
+
|
|
72
|
+
`/restart` is in-process — it drains active runs cleanly; your shell is NOT shelling out to `docker restart` or `openclaw gateway restart` (those would suicide the host). After `/restart`, wait ~3s and re-run `openclaw plugins list`.
|
|
43
73
|
|
|
44
|
-
**If
|
|
74
|
+
**If `/restart` returns "You are not authorized to use this command":** surface this verbatim and stop. Do NOT loop `/restart` calls. Do NOT propose alternatives.
|
|
45
75
|
|
|
46
|
-
|
|
76
|
+
> Your Telegram channel needs `allowFrom` configured. Run on your host: `jq '.channels.<channel>.allowFrom = ["<your-id>"]' ~/.openclaw/openclaw.json | sponge ~/.openclaw/openclaw.json && docker restart <your-container-name>`. Substitute `<channel>` (e.g. `telegram`, `slack`), `<your-id>` (Telegram: `@username` or numeric `chat_id`; Slack: workspace member ID), and `<your-container-name>` (`docker ps` shows it). For non-Docker installs substitute `openclaw gateway restart` for the `docker restart` portion. On a managed service, ask the service's support to enable slash commands. Reply `done` after.
|
|
47
77
|
|
|
48
|
-
|
|
78
|
+
Then wait for `done`. Do NOT retry the install. Do NOT keep restarting. As a last-resort session-level fallback while restart is gated, try `/new` once (fresh session within the same gateway process, may pick up freshly-bound tools without a full restart).
|
|
49
79
|
|
|
50
|
-
|
|
80
|
+
**Forbidden vocabulary** (these are anti-patterns — they show up to the user even if your transport edits them later, and they violate the silence rule):
|
|
81
|
+
- "Let me check that…"
|
|
82
|
+
- "Plugin loaded. Let me verify…"
|
|
83
|
+
- "I'll now…"
|
|
84
|
+
- "Quick fix…"
|
|
85
|
+
- "However, I don't see…"
|
|
86
|
+
- "I need to use…"
|
|
87
|
+
- "Should I /restart" / "Do you have a public URL" / "Want me to restart" / "Let me check if the tool is bound" / "I need permission to restart"
|
|
88
|
+
- "Now installing…" / "Got it" / "In parallel…" / "Step 1a/1b/1c"
|
|
51
89
|
|
|
52
|
-
|
|
90
|
+
Substitute all of these with silence — the next user-visible line in the set, or nothing.
|
|
53
91
|
|
|
54
92
|
3. **Verify `totalreclaw_pair` is bound.** If still missing after `/restart` (or after the user fixed allowFrom and said `done`), tell them the restart didn't take effect and ask them to retry. Do not loop the install.
|
|
55
93
|
|
|
56
|
-
4. **Check for existing credentials.** Run `test -s ~/.totalreclaw/credentials.json`. If it exists and is non-empty,
|
|
94
|
+
4. **Check for existing credentials (silent unless found).** Run `test -s ~/.totalreclaw/credentials.json`. If it exists and is non-empty, emit *"✓ TotalReclaw is already set up."* and stop.
|
|
57
95
|
|
|
58
|
-
5. **Set up the user's TotalReclaw account
|
|
59
|
-
> *Open <url> in your browser. Generate a new 12-word recovery phrase there or paste an existing one — the phrase stays in your browser, the relay only sees ciphertext. Confirm PIN <pin>. Reply `done` once the page says it's sealed.*
|
|
96
|
+
5. **Set up the user's TotalReclaw account (emit user-visible line 5 once, after `totalreclaw_pair` returns).** Call `totalreclaw_pair` silently (the account-setup tool — name kept for backward compatibility). It returns `{url, pin, qr_ascii, qr_png_b64, qr_unicode, expires_at_ms}` (see "Rendering the QR" below). Then emit user-visible line 5 with `<url>` and `<pin>` substituted. Do not pre-narrate ("I'll walk you through…", "Setting up your account now…") — line 5 itself is the only thing the user needs to see. The URL + PIN itself is the real consent moment: surfacing them verbatim is what gives the user the chance to opt out by simply not opening the page.
|
|
60
97
|
|
|
61
|
-
6. **Verify and confirm.** After user says `done`, re-run `test -s ~/.totalreclaw/credentials.json`. If missing, the PIN expired — call `totalreclaw_pair` again and resend. If present,
|
|
98
|
+
6. **Verify and confirm (silent until line 6).** After the user says `done`, re-run `test -s ~/.totalreclaw/credentials.json`. If missing, the PIN expired — call `totalreclaw_pair` again silently and resend line 5 once. If present, emit user-visible line 6 and stop.
|
|
62
99
|
|
|
63
100
|
## Rendering the QR on your transport (rc.5+)
|
|
64
101
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@totalreclaw/totalreclaw",
|
|
3
|
-
"version": "3.3.
|
|
3
|
+
"version": "3.3.5-rc.1",
|
|
4
4
|
"description": "End-to-end encrypted, agent-portable memory for OpenClaw and any LLM-agent runtime. XChaCha20-Poly1305 with protobuf v4 + on-chain Memory Taxonomy v1 (claim / preference / directive / commitment / episode / summary).",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"keywords": [
|
package/skill.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "totalreclaw",
|
|
3
|
-
"version": "3.3.
|
|
3
|
+
"version": "3.3.5-rc.1",
|
|
4
4
|
"description": "End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.",
|
|
5
5
|
"author": "TotalReclaw Team",
|
|
6
6
|
"license": "MIT",
|