@xdarkicex/openclaw-memory-libravdb 1.10.3 → 1.10.5

package/README.md

@@ -205,6 +205,8 @@ Keywords: "acme corp, acmecorp, acme.com"
 If the agent's reply contains any of those keywords, it's blocked and replaced
 with "I cannot answer that." — regardless of what the model chose to say.
 
+**Config:** `maxRules` sets the cap (default 20, set to 0 to disable rules entirely).
+
 **Storage:** persisted to `~/.openclaw/cache/libravdb/rules.json`. Survives
 gateway restarts and plugin updates.
 
@@ -307,6 +309,8 @@ All keys are optional. For the full reference, see [Configuration](./docs/config
 | `onnxDevice` | string | `cpu` | ONNX execution provider; `cpu` is the default; `auto` lets libravdbd auto-detect |
 | `userId` | string | auto-derived | Stable identity for cross-session durable memory |
 | `tenantId` | string | auto-derived | Multi-tenant identifier. Resolved as `cfg.tenantId` > `LIBRAVDB_AGENT_ID` env > `userId`. Isolates the agent to a dedicated `.libravdb` file. |
+| `tenantIdByAgent` | object | — | Per-agent tenant map. `{"agent1": "t1"}`. Unlisted agents fall through to `tenantId` → `userId`. |
+| `maxRules` | number | 20 | Max hard constraint rules. Set to 0 to disable rules entirely. |
 | `crossSessionRecall` | boolean | `true` | When `false`, only session-scoped memories are retrieved |
 | `compactSessionTokenBudget` | number | `2000` | Auto-compaction token threshold; `0` disables |
 

package/dist/identity.d.ts

@@ -22,3 +22,4 @@ export declare function resolveIdentity(params: {
  *   3. Fall back to resolved userId (existing identity system)
  */
 export declare function resolveTenantKey(cfg: PluginConfig, agentId?: string): string;
+export declare function resolveReadTenants(cfg: PluginConfig, agentId?: string): string[] | null;

package/dist/identity.js

@@ -129,9 +129,11 @@ export function resolveIdentity(params) {
 export function resolveTenantKey(cfg, agentId) {
     // Per-agent override (highest priority).
     if (agentId && cfg.tenantIdByAgent) {
-        const byAgent = cfg.tenantIdByAgent[agentId]?.trim();
-        if (byAgent)
-            return byAgent;
+        const entry = cfg.tenantIdByAgent[agentId];
+        if (typeof entry === "string")
+            return entry.trim();
+        if (entry && typeof entry === "object")
+            return entry.primary.trim();
     }
     const explicit = cfg.tenantId?.trim();
     if (explicit)
@@ -144,3 +146,16 @@ export function resolveTenantKey(cfg, agentId) {
         identityPath: cfg.identityPath,
     }).userId;
 }
+// resolveReadTenants returns all tenant keys an agent can read from
+// (primary + readAccess). Empty if single-tenant. Used for search fan-out.
+export function resolveReadTenants(cfg, agentId) {
+    if (!agentId || !cfg.tenantIdByAgent)
+        return null;
+    const entry = cfg.tenantIdByAgent[agentId];
+    if (!entry || typeof entry === "string")
+        return null; // string = primary only, no fan-out
+    if (entry.readAccess && entry.readAccess.length > 0) {
+        return [entry.primary.trim(), ...entry.readAccess.map((t) => t.trim())];
+    }
+    return null;
+}

package/dist/index.js

@@ -16902,8 +16902,9 @@ function resolveIdentity(params) {
 }
 function resolveTenantKey(cfg, agentId) {
   if (agentId && cfg.tenantIdByAgent) {
-    const byAgent = cfg.tenantIdByAgent[agentId]?.trim();
-    if (byAgent) return byAgent;
+    const entry = cfg.tenantIdByAgent[agentId];
+    if (typeof entry === "string") return entry.trim();
+    if (entry && typeof entry === "object") return entry.primary.trim();
   }
   const explicit = cfg.tenantId?.trim();
   if (explicit) return explicit;
@@ -16914,6 +16915,15 @@ function resolveTenantKey(cfg, agentId) {
     identityPath: cfg.identityPath
   }).userId;
 }
+function resolveReadTenants(cfg, agentId) {
+  if (!agentId || !cfg.tenantIdByAgent) return null;
+  const entry = cfg.tenantIdByAgent[agentId];
+  if (!entry || typeof entry === "string") return null;
+  if (entry.readAccess && entry.readAccess.length > 0) {
+    return [entry.primary.trim(), ...entry.readAccess.map((t) => t.trim())];
+  }
+  return null;
+}
 
 // src/index.ts
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -18436,7 +18446,10 @@ import { join as join3 } from "node:path";
 // src/rules.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
-var MAX_RULES = 20;
+var maxRules = 20;
+function setMaxRules(n) {
+  maxRules = Math.max(0, n);
+}
 function jsonResult(details) {
   return { content: [{ type: "text", text: JSON.stringify(details, null, 2) }], details };
 }
@@ -18475,7 +18488,7 @@ function getRule(id) {
 }
 function setRule(ruleText, keywords, priority) {
   let replaced = false;
-  if (rules.length >= MAX_RULES) {
+  if (maxRules > 0 && rules.length >= maxRules) {
     let minIdx = 0;
     for (let i = 1; i < rules.length; i++) {
       if (rules[i].priority < rules[minIdx].priority) minIdx = i;
@@ -35010,6 +35023,7 @@ var LibravDBClient = class {
   nonceHex;
   closed = false;
   tenantKey;
+  readTenants = [];
   constructor(options = {}) {
     this.secret = options.secret ?? loadSecretFromEnv();
     const rawEndpoint = resolveClientEndpoint(options.endpoint);
@@ -35100,6 +35114,11 @@ var LibravDBClient = class {
   setTenantKey(key) {
     this.tenantKey = key;
   }
+  /** Set additional tenants to search across. Only used by searchTextCollections.
+   *  Empty by default — zero overhead for single-tenant setups. */
+  setReadTenants(tenants) {
+    this.readTenants = tenants;
+  }
   // ── Session lifecycle ────────────────────────────────────────────
   async health(req = {}) {
     this.guardOpen();
@@ -35149,7 +35168,27 @@ var LibravDBClient = class {
   }
   async searchTextCollections(req) {
     this.guardOpen();
-    return this.client.searchTextCollections(req);
+    if (this.readTenants.length === 0) {
+      return this.client.searchTextCollections(req);
+    }
+    const savedKey = this.tenantKey;
+    const allResults = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const t of this.readTenants) {
+      this.tenantKey = t;
+      try {
+        const resp = await this.client.searchTextCollections(req);
+        for (const r of resp.results ?? []) {
+          if (!seen.has(r.id)) {
+            seen.add(r.id);
+            allResults.push(r);
+          }
+        }
+      } catch {
+      }
+    }
+    this.tenantKey = savedKey;
+    return { results: allResults };
   }
   async listCollection(req) {
     this.guardOpen();
@@ -35516,7 +35555,10 @@ function register(api) {
   const runtimeOrNull = isLightweight ? null : createPluginRuntime(cfg, logger);
   if (runtimeOrNull && !isLightweight) {
     const cacheDir = api.cacheDir ?? process.env.OPENCLAW_CACHE_DIR ?? (process.env.HOME || process.env.USERPROFILE || "") + "/.openclaw/cache";
-    if (cacheDir) initRuleStore(cacheDir + "/libravdb", logger);
+    if (cacheDir) {
+      initRuleStore(cacheDir + "/libravdb", logger);
+      if (cfg.maxRules !== void 0) setMaxRules(cfg.maxRules);
+    }
   }
   registerMemoryCli(api, runtimeOrNull, cfg, logger);
   const ownsMemorySlot = memSlot === MEMORY_ID;
@@ -35667,9 +35709,11 @@ function register(api) {
     if (runtimeOrNull) {
       const agentId = c?.agentId;
       const tenantKey = resolveTenantKey(cfg, agentId);
+      const readTenants = resolveReadTenants(cfg, agentId);
       try {
         const client = await runtimeOrNull.getClient();
         client.setTenantKey(tenantKey);
+        client.setReadTenants(readTenants ?? []);
       } catch {
       }
     }

package/dist/libravdb-client.d.ts

@@ -36,12 +36,16 @@ export declare class LibravDBClient {
     private nonceHex;
     private closed;
     private tenantKey;
+    private readTenants;
     constructor(options?: LibravDBClientOptions);
     bootstrapHandshake(): Promise<void>;
     private guardOpen;
     /** Update the tenant key for subsequent gRPC calls. Thread-safe —
      *  the interceptor reads this.tenantKey on every request. */
     setTenantKey(key: string): void;
+    /** Set additional tenants to search across. Only used by searchTextCollections.
+     *  Empty by default — zero overhead for single-tenant setups. */
+    setReadTenants(tenants: string[]): void;
     health(req?: PartialMessage<HealthRequest>): Promise<HealthResponse>;
     status(req?: PartialMessage<MemoryStatusRequest>): Promise<MemoryStatusResponse>;
     flush(req?: PartialMessage<FlushRequest>): Promise<FlushResponse>;

package/dist/libravdb-client.js

@@ -150,6 +150,7 @@ export class LibravDBClient {
     nonceHex;
     closed = false;
     tenantKey;
+    readTenants = [];
     constructor(options = {}) {
         this.secret = options.secret ?? loadSecretFromEnv();
         const rawEndpoint = resolveClientEndpoint(options.endpoint);
@@ -237,6 +238,11 @@ export class LibravDBClient {
     setTenantKey(key) {
         this.tenantKey = key;
     }
+    /** Set additional tenants to search across. Only used by searchTextCollections.
+     *  Empty by default — zero overhead for single-tenant setups. */
+    setReadTenants(tenants) {
+        this.readTenants = tenants;
+    }
     // ── Session lifecycle ────────────────────────────────────────────
     async health(req = {}) {
         this.guardOpen();
@@ -286,7 +292,29 @@ export class LibravDBClient {
     }
     async searchTextCollections(req) {
         this.guardOpen();
-        return this.client.searchTextCollections(req);
+        if (this.readTenants.length === 0) {
+            return this.client.searchTextCollections(req);
+        }
+        // Multi-tenant fan-out: search across all read tenants, merge results.
+        // Temporarily swap tenantKey per call, restore after.
+        const savedKey = this.tenantKey;
+        const allResults = [];
+        const seen = new Set();
+        for (const t of this.readTenants) {
+            this.tenantKey = t;
+            try {
+                const resp = await this.client.searchTextCollections(req);
+                for (const r of resp.results ?? []) {
+                    if (!seen.has(r.id)) {
+                        seen.add(r.id);
+                        allResults.push(r);
+                    }
+                }
+            }
+            catch { /* skip failed tenant reads */ }
+        }
+        this.tenantKey = savedKey;
+        return { results: allResults };
     }
     async listCollection(req) {
         this.guardOpen();

package/dist/rules.d.ts

@@ -6,6 +6,7 @@ export interface Rule {
     priority: number;
     created_at: number;
 }
+export declare function setMaxRules(n: number): void;
 type ToolContent = {
     type: "text";
     text: string;

package/dist/rules.js

@@ -1,6 +1,9 @@
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
-const MAX_RULES = 20;
+let maxRules = 20;
+export function setMaxRules(n) {
+    maxRules = Math.max(0, n);
+}
 function jsonResult(details) {
     return { content: [{ type: "text", text: JSON.stringify(details, null, 2) }], details };
 }
@@ -41,7 +44,7 @@ export function getRule(id) {
 }
 export function setRule(ruleText, keywords, priority) {
     let replaced = false;
-    if (rules.length >= MAX_RULES) {
+    if (maxRules > 0 && rules.length >= maxRules) {
         let minIdx = 0;
         for (let i = 1; i < rules.length; i++) {
             if (rules[i].priority < rules[minIdx].priority)

package/dist/types.d.ts

@@ -7,9 +7,15 @@ export interface PluginConfig {
      *  the plugin falls back to the auto-derived userId. Set different values per
      *  agent to isolate memory storage. */
     tenantId?: string;
-    /** Per-agent tenant overrides. Maps agentId → tenantId. Agents not in this
-     *  map fall through to tenantId → userId. Opt-in. */
-    tenantIdByAgent?: Record<string, string>;
+    /** Per-agent tenant overrides. Maps agentId → tenantId (string) or
+     *  { primary: string, readAccess?: string[] } (object). Agents not listed
+     *  fall through to tenantId → userId. Opt-in. */
+    tenantIdByAgent?: Record<string, string | {
+        primary: string;
+        readAccess?: string[];
+    }>;
+    /** Maximum number of hard constraint rules. Default 20. */
+    maxRules?: number;
     /** Stable identity for cross-session durable memory. When set, all sessions
      *  share memories under user:{userId}. When unset, the plugin auto-derives
      *  identity from the OS and persists it to the identity file. */

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "libravdb-memory",
   "name": "LibraVDB Memory",
   "description": "Cognitive memory engine — causal graph reasoning, predictive context, identity tracking, and hybrid vector recall with back-door adjustment scoring",
-  "version": "1.10.3",
+  "version": "1.10.5",
   "kind": [
     "memory",
     "context-engine"
@@ -86,6 +86,12 @@
         "additionalProperties": { "type": "string" },
         "description": "Per-agent tenant overrides. Maps agentId to tenantId. Agents not listed fall through to tenantId -> userId. Example: {\"jarvis\": \"jarvis\", \"gideon\": \"gideon\"}."
       },
+      "maxRules": {
+        "type": "number",
+        "default": 20,
+        "minimum": 0,
+        "description": "Maximum hard constraint rules. 0 disables rules. Default 20."
+      },
       "userId": {
         "type": "string",
         "description": "Stable identity for cross-session durable memory. When set, sessions share memories under user:{userId}."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdarkicex/openclaw-memory-libravdb",
-  "version": "1.10.3",
+  "version": "1.10.5",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",