@xdarkicex/openclaw-memory-libravdb 1.10.4 → 1.10.5

package/dist/identity.d.ts

@@ -22,3 +22,4 @@ export declare function resolveIdentity(params: {
  *   3. Fall back to resolved userId (existing identity system)
  */
 export declare function resolveTenantKey(cfg: PluginConfig, agentId?: string): string;
+export declare function resolveReadTenants(cfg: PluginConfig, agentId?: string): string[] | null;

package/dist/identity.js

@@ -129,9 +129,11 @@ export function resolveIdentity(params) {
 export function resolveTenantKey(cfg, agentId) {
     // Per-agent override (highest priority).
     if (agentId && cfg.tenantIdByAgent) {
-        const byAgent = cfg.tenantIdByAgent[agentId]?.trim();
-        if (byAgent)
-            return byAgent;
+        const entry = cfg.tenantIdByAgent[agentId];
+        if (typeof entry === "string")
+            return entry.trim();
+        if (entry && typeof entry === "object")
+            return entry.primary.trim();
     }
     const explicit = cfg.tenantId?.trim();
     if (explicit)
@@ -144,3 +146,16 @@ export function resolveTenantKey(cfg, agentId) {
         identityPath: cfg.identityPath,
     }).userId;
 }
+// resolveReadTenants returns all tenant keys an agent can read from
+// (primary + readAccess). Empty if single-tenant. Used for search fan-out.
+export function resolveReadTenants(cfg, agentId) {
+    if (!agentId || !cfg.tenantIdByAgent)
+        return null;
+    const entry = cfg.tenantIdByAgent[agentId];
+    if (!entry || typeof entry === "string")
+        return null; // string = primary only, no fan-out
+    if (entry.readAccess && entry.readAccess.length > 0) {
+        return [entry.primary.trim(), ...entry.readAccess.map((t) => t.trim())];
+    }
+    return null;
+}

package/dist/index.js

@@ -16902,8 +16902,9 @@ function resolveIdentity(params) {
 }
 function resolveTenantKey(cfg, agentId) {
   if (agentId && cfg.tenantIdByAgent) {
-    const byAgent = cfg.tenantIdByAgent[agentId]?.trim();
-    if (byAgent) return byAgent;
+    const entry = cfg.tenantIdByAgent[agentId];
+    if (typeof entry === "string") return entry.trim();
+    if (entry && typeof entry === "object") return entry.primary.trim();
   }
   const explicit = cfg.tenantId?.trim();
   if (explicit) return explicit;
@@ -16914,6 +16915,15 @@ function resolveTenantKey(cfg, agentId) {
     identityPath: cfg.identityPath
   }).userId;
 }
+function resolveReadTenants(cfg, agentId) {
+  if (!agentId || !cfg.tenantIdByAgent) return null;
+  const entry = cfg.tenantIdByAgent[agentId];
+  if (!entry || typeof entry === "string") return null;
+  if (entry.readAccess && entry.readAccess.length > 0) {
+    return [entry.primary.trim(), ...entry.readAccess.map((t) => t.trim())];
+  }
+  return null;
+}
 
 // src/index.ts
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -35013,6 +35023,7 @@ var LibravDBClient = class {
   nonceHex;
   closed = false;
   tenantKey;
+  readTenants = [];
   constructor(options = {}) {
     this.secret = options.secret ?? loadSecretFromEnv();
     const rawEndpoint = resolveClientEndpoint(options.endpoint);
@@ -35103,6 +35114,11 @@ var LibravDBClient = class {
   setTenantKey(key) {
     this.tenantKey = key;
   }
+  /** Set additional tenants to search across. Only used by searchTextCollections.
+   *  Empty by default — zero overhead for single-tenant setups. */
+  setReadTenants(tenants) {
+    this.readTenants = tenants;
+  }
   // ── Session lifecycle ────────────────────────────────────────────
   async health(req = {}) {
     this.guardOpen();
@@ -35152,7 +35168,27 @@ var LibravDBClient = class {
   }
   async searchTextCollections(req) {
     this.guardOpen();
-    return this.client.searchTextCollections(req);
+    if (this.readTenants.length === 0) {
+      return this.client.searchTextCollections(req);
+    }
+    const savedKey = this.tenantKey;
+    const allResults = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const t of this.readTenants) {
+      this.tenantKey = t;
+      try {
+        const resp = await this.client.searchTextCollections(req);
+        for (const r of resp.results ?? []) {
+          if (!seen.has(r.id)) {
+            seen.add(r.id);
+            allResults.push(r);
+          }
+        }
+      } catch {
+      }
+    }
+    this.tenantKey = savedKey;
+    return { results: allResults };
   }
   async listCollection(req) {
     this.guardOpen();
@@ -35673,9 +35709,11 @@ function register(api) {
     if (runtimeOrNull) {
       const agentId = c?.agentId;
       const tenantKey = resolveTenantKey(cfg, agentId);
+      const readTenants = resolveReadTenants(cfg, agentId);
       try {
         const client = await runtimeOrNull.getClient();
         client.setTenantKey(tenantKey);
+        client.setReadTenants(readTenants ?? []);
       } catch {
       }
     }

package/dist/libravdb-client.d.ts

@@ -36,12 +36,16 @@ export declare class LibravDBClient {
     private nonceHex;
     private closed;
     private tenantKey;
+    private readTenants;
     constructor(options?: LibravDBClientOptions);
     bootstrapHandshake(): Promise<void>;
     private guardOpen;
     /** Update the tenant key for subsequent gRPC calls. Thread-safe —
      *  the interceptor reads this.tenantKey on every request. */
     setTenantKey(key: string): void;
+    /** Set additional tenants to search across. Only used by searchTextCollections.
+     *  Empty by default — zero overhead for single-tenant setups. */
+    setReadTenants(tenants: string[]): void;
     health(req?: PartialMessage<HealthRequest>): Promise<HealthResponse>;
     status(req?: PartialMessage<MemoryStatusRequest>): Promise<MemoryStatusResponse>;
     flush(req?: PartialMessage<FlushRequest>): Promise<FlushResponse>;

package/dist/libravdb-client.js

@@ -150,6 +150,7 @@ export class LibravDBClient {
     nonceHex;
     closed = false;
     tenantKey;
+    readTenants = [];
     constructor(options = {}) {
         this.secret = options.secret ?? loadSecretFromEnv();
         const rawEndpoint = resolveClientEndpoint(options.endpoint);
@@ -237,6 +238,11 @@ export class LibravDBClient {
     setTenantKey(key) {
         this.tenantKey = key;
     }
+    /** Set additional tenants to search across. Only used by searchTextCollections.
+     *  Empty by default — zero overhead for single-tenant setups. */
+    setReadTenants(tenants) {
+        this.readTenants = tenants;
+    }
     // ── Session lifecycle ────────────────────────────────────────────
     async health(req = {}) {
         this.guardOpen();
@@ -286,7 +292,29 @@ export class LibravDBClient {
     }
     async searchTextCollections(req) {
         this.guardOpen();
-        return this.client.searchTextCollections(req);
+        if (this.readTenants.length === 0) {
+            return this.client.searchTextCollections(req);
+        }
+        // Multi-tenant fan-out: search across all read tenants, merge results.
+        // Temporarily swap tenantKey per call, restore after.
+        const savedKey = this.tenantKey;
+        const allResults = [];
+        const seen = new Set();
+        for (const t of this.readTenants) {
+            this.tenantKey = t;
+            try {
+                const resp = await this.client.searchTextCollections(req);
+                for (const r of resp.results ?? []) {
+                    if (!seen.has(r.id)) {
+                        seen.add(r.id);
+                        allResults.push(r);
+                    }
+                }
+            }
+            catch { /* skip failed tenant reads */ }
+        }
+        this.tenantKey = savedKey;
+        return { results: allResults };
     }
     async listCollection(req) {
         this.guardOpen();

package/dist/types.d.ts

@@ -7,9 +7,13 @@ export interface PluginConfig {
      *  the plugin falls back to the auto-derived userId. Set different values per
      *  agent to isolate memory storage. */
     tenantId?: string;
-    /** Per-agent tenant overrides. Maps agentId → tenantId. Agents not in this
-     *  map fall through to tenantId → userId. Opt-in. */
-    tenantIdByAgent?: Record<string, string>;
+    /** Per-agent tenant overrides. Maps agentId → tenantId (string) or
+     *  { primary: string, readAccess?: string[] } (object). Agents not listed
+     *  fall through to tenantId → userId. Opt-in. */
+    tenantIdByAgent?: Record<string, string | {
+        primary: string;
+        readAccess?: string[];
+    }>;
     /** Maximum number of hard constraint rules. Default 20. */
     maxRules?: number;
     /** Stable identity for cross-session durable memory. When set, all sessions

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "libravdb-memory",
   "name": "LibraVDB Memory",
   "description": "Cognitive memory engine — causal graph reasoning, predictive context, identity tracking, and hybrid vector recall with back-door adjustment scoring",
-  "version": "1.10.4",
+  "version": "1.10.5",
   "kind": [
     "memory",
     "context-engine"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdarkicex/openclaw-memory-libravdb",
-  "version": "1.10.4",
+  "version": "1.10.5",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",