@xdarkicex/openclaw-memory-libravdb 1.4.52 → 1.4.54

package/README.md

@@ -154,7 +154,7 @@ openclaw memory search "prior context"
 openclaw memory export --user-id <userId>
 openclaw memory flush --user-id <userId>
 openclaw memory journal --limit 50
-openclaw memory dream-promote --user-id <userId> --dream-file /path/to/DREAMS.md
+openclaw memory dream-promote --user-id <userId> --dream-file ~/DREAMS.md
 ```
 
 Use [Install](./docs/install.md) for service lifecycle commands and

package/dist/dream-promotion.js

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import fsp from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 import { getHashBackendName, hashBytes } from "./markdown-hash.js";
 import { formatError } from "./format-error.js";
@@ -10,9 +11,16 @@ const DEFAULT_MIN_UNIQUE_QUERIES = 2;
 const DREAM_PROMOTION_VERSION = 1;
 const DREAM_SOURCE_KIND = "dream";
 export function createDreamPromotionHandle(cfg, getRpc, logger = console, fsApi = createRealFsApi()) {
-    const diaryPath = normalizeDiaryPath(cfg.dreamPromotionDiaryPath);
     const userId = cfg.dreamPromotionUserId?.trim() ?? "";
-    if (cfg.dreamPromotionEnabled !== true || !diaryPath || !userId) {
+    if (cfg.dreamPromotionEnabled !== true || !userId) {
+        return {
+            async start() { },
+            async refresh() { },
+            async stop() { },
+        };
+    }
+    const diaryPath = normalizeDiaryPath(cfg.dreamPromotionDiaryPath);
+    if (!diaryPath) {
         return {
             async start() { },
             async refresh() { },
@@ -114,10 +122,9 @@ export function createDreamPromotionHandle(cfg, getRpc, logger = console, fsApi
             sourceMtimeMs: stat.mtimeMs,
             ingestVersion: DREAM_PROMOTION_VERSION,
             hashBackend: getHashBackendName(),
-            entries: candidates.map((candidate, index) => ({
+            entries: candidates.map((candidate) => ({
                 ...candidate,
                 sourceLine: candidate.line,
-                line: index + 1,
             })),
         };
         await rpc.call("promote_dream_entries", params);
@@ -203,10 +210,9 @@ export async function promoteDreamDiaryFile(rpc, opts) {
         sourceMtimeMs: sourceMtimeMs ?? 0,
         ingestVersion: DREAM_PROMOTION_VERSION,
         hashBackend: getHashBackendName(),
-        entries: candidates.map((candidate, index) => ({
+        entries: candidates.map((candidate) => ({
             ...candidate,
             sourceLine: candidate.line,
-            line: index + 1,
         })),
     });
 }
@@ -343,7 +349,26 @@ function normalizeDiaryPath(value) {
     if (!trimmed) {
         return "";
     }
-    return path.resolve(trimmed);
+    // Reject traversal components — even though path.resolve collapses them,
+    // their presence signals an attempt to escape intended boundaries.
+    const segments = trimmed.split(/[/\\]+/);
+    if (segments.some((s) => s === "..")) {
+        throw new Error(`dream diary path must not contain ".." traversal: ${trimmed}`);
+    }
+    const resolved = path.resolve(trimmed);
+    // Restrict to known-safe locations to prevent arbitrary file reads.
+    // Allowed roots: home directory and the configured OpenClaw state dir.
+    const allowedRoots = [
+        os.homedir(),
+        process.env.OPENCLAW_STATE_DIR,
+    ]
+        .filter((r) => typeof r === "string" && r.trim().length > 0)
+        .map((root) => path.resolve(root));
+    const isAllowed = allowedRoots.some((root) => resolved.startsWith(root + path.sep) || resolved === root);
+    if (!isAllowed) {
+        throw new Error(`dream diary path must be within an allowed root: ${allowedRoots.join(", ")}. Got: ${resolved}`);
+    }
+    return resolved;
 }
 function createRealFsApi() {
     return {

package/dist/index.js

@@ -9467,7 +9467,7 @@ var require_service_config = __commonJS({
     exports2.validateRetryThrottling = validateRetryThrottling;
     exports2.validateServiceConfig = validateServiceConfig;
     exports2.extractAndSelectServiceConfig = extractAndSelectServiceConfig;
-    var os2 = __require("os");
+    var os3 = __require("os");
     var constants_1 = require_constants();
     var DURATION_REGEX = /^\d+(\.\d{1,9})?s$/;
     var CLIENT_LANGUAGE_STRING = "node";
@@ -9766,7 +9766,7 @@ var require_service_config = __commonJS({
         if (Array.isArray(validatedConfig.clientHostname)) {
           let hostnameMatched = false;
           for (const hostname2 of validatedConfig.clientHostname) {
-            if (hostname2 === os2.hostname()) {
+            if (hostname2 === os3.hostname()) {
               hostnameMatched = true;
             }
           }
@@ -24066,7 +24066,7 @@ var require_subchannel_call = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Http2SubchannelCall = void 0;
     var http2 = __require("http2");
-    var os2 = __require("os");
+    var os3 = __require("os");
     var constants_1 = require_constants();
     var metadata_1 = require_metadata();
     var stream_decoder_1 = require_stream_decoder();
@@ -24074,7 +24074,7 @@ var require_subchannel_call = __commonJS({
     var constants_2 = require_constants();
     var TRACER_NAME = "subchannel_call";
     function getSystemErrorName(errno) {
-      for (const [name, num] of Object.entries(os2.constants.errno)) {
+      for (const [name, num] of Object.entries(os3.constants.errno)) {
         if (num === errno) {
           return name;
         }
@@ -32292,6 +32292,7 @@ function formatError(error) {
 // src/dream-promotion.ts
 import fs from "node:fs";
 import fsp from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 
 // src/markdown-hash.ts
@@ -32505,9 +32506,19 @@ var DEFAULT_DEBOUNCE_MS = 150;
 var DREAM_PROMOTION_VERSION = 1;
 var DREAM_SOURCE_KIND = "dream";
 function createDreamPromotionHandle(cfg, getRpc, logger = console, fsApi = createRealFsApi()) {
-  const diaryPath = normalizeDiaryPath(cfg.dreamPromotionDiaryPath);
   const userId = cfg.dreamPromotionUserId?.trim() ?? "";
-  if (cfg.dreamPromotionEnabled !== true || !diaryPath || !userId) {
+  if (cfg.dreamPromotionEnabled !== true || !userId) {
+    return {
+      async start() {
+      },
+      async refresh() {
+      },
+      async stop() {
+      }
+    };
+  }
+  const diaryPath = normalizeDiaryPath(cfg.dreamPromotionDiaryPath);
+  if (!diaryPath) {
     return {
       async start() {
       },
@@ -32612,10 +32623,9 @@ function createDreamPromotionHandle(cfg, getRpc, logger = console, fsApi = creat
       sourceMtimeMs: stat.mtimeMs,
       ingestVersion: DREAM_PROMOTION_VERSION,
       hashBackend: getHashBackendName(),
-      entries: candidates.map((candidate, index) => ({
+      entries: candidates.map((candidate) => ({
         ...candidate,
-        sourceLine: candidate.line,
-        line: index + 1
+        sourceLine: candidate.line
       }))
     };
     await rpc.call("promote_dream_entries", params);
@@ -32698,10 +32708,9 @@ async function promoteDreamDiaryFile(rpc, opts) {
     sourceMtimeMs: sourceMtimeMs ?? 0,
     ingestVersion: DREAM_PROMOTION_VERSION,
     hashBackend: getHashBackendName(),
-    entries: candidates.map((candidate, index) => ({
+    entries: candidates.map((candidate) => ({
       ...candidate,
-      sourceLine: candidate.line,
-      line: index + 1
+      sourceLine: candidate.line
     }))
   });
 }
@@ -32838,7 +32847,26 @@ function normalizeDiaryPath(value) {
   if (!trimmed) {
     return "";
   }
-  return path.resolve(trimmed);
+  const segments = trimmed.split(/[/\\]+/);
+  if (segments.some((s) => s === "..")) {
+    throw new Error(
+      `dream diary path must not contain ".." traversal: ${trimmed}`
+    );
+  }
+  const resolved = path.resolve(trimmed);
+  const allowedRoots = [
+    os.homedir(),
+    process.env.OPENCLAW_STATE_DIR
+  ].filter((r) => typeof r === "string" && r.trim().length > 0).map((root) => path.resolve(root));
+  const isAllowed = allowedRoots.some(
+    (root) => resolved.startsWith(root + path.sep) || resolved === root
+  );
+  if (!isAllowed) {
+    throw new Error(
+      `dream diary path must be within an allowed root: ${allowedRoots.join(", ")}. Got: ${resolved}`
+    );
+  }
+  return resolved;
 }
 function createRealFsApi() {
   return {
@@ -39326,7 +39354,7 @@ var GrpcKernelClient = class {
 // src/sidecar.ts
 import fs3 from "node:fs";
 import net from "node:net";
-import os from "node:os";
+import os2 from "node:os";
 import path4 from "node:path";
 var STARTUP_CONNECT_MAX_RETRIES = 5;
 var STARTUP_CONNECT_BASE_DELAY_MS = 100;
@@ -39568,7 +39596,7 @@ function resolveConfiguredEndpoint(cfg) {
 function daemonProvisioningHint() {
   return "If you installed the npm package, install and start libravdbd separately; the package does not provision the daemon binary, ONNX Runtime, or model assets.";
 }
-function defaultEndpoint(platform = process.platform, homeDir = os.homedir(), pathExists = fs3.existsSync) {
+function defaultEndpoint(platform = process.platform, homeDir = os2.homedir(), pathExists = fs3.existsSync) {
   const envEndpoint = process.env.LIBRAVDB_RPC_ENDPOINT?.trim();
   if (envEndpoint && isConfiguredEndpoint(envEndpoint)) {
     return envEndpoint;

package/docs/configuration.md

@@ -103,7 +103,7 @@ The plugin exposes `ingestionGateThreshold` for host-side gating decisions:
 | Key | Type | Default | Notes |
 |---|---|---|---|
 | `dreamPromotionEnabled` | boolean | `false` | Enable dream diary promotion |
-| `dreamPromotionDiaryPath` | string | — | Path to dream diary markdown file |
+| `dreamPromotionDiaryPath` | string | — | Path to dream diary markdown file under the operator home directory or `OPENCLAW_STATE_DIR` |
 | `dreamPromotionUserId` | string | — | User ID for dream collection scoping |
 | `dreamPromotionDebounceMs` | number | `150` | Debounce window for dream diary changes |
 

package/docs/features.md

@@ -105,11 +105,12 @@ Automatic diary watching:
 Manual run:
 
 ```bash
-openclaw memory dream-promote --user-id <userId> --dream-file /path/to/DREAMS.md
+openclaw memory dream-promote --user-id <userId> --dream-file ~/DREAMS.md
 ```
 
-The manual command and watcher both use the same sidecar promotion RPC, so
-admission gates and provenance metadata are identical.
+Dream diary files must live under the operator's home directory or the configured
+`OPENCLAW_STATE_DIR`. The manual command and watcher both use the same sidecar
+promotion RPC, so admission gates and provenance metadata are identical.
 
 ## Memory CLI
 
@@ -126,7 +127,7 @@ CLI API.
 | `openclaw memory flush --user-id <userId>` | Delete one durable user namespace after confirmation. |
 | `openclaw memory flush --session-key <sessionKey>` | Delete a namespace derived from a session key after confirmation. |
 | `openclaw memory journal --limit 50` | Inspect bounded lifecycle hints recorded by the sidecar. |
-| `openclaw memory dream-promote --user-id <userId> --dream-file <path>` | Promote vetted dream diary bullets. |
+| `openclaw memory dream-promote --user-id <userId> --dream-file <path>` | Promote vetted dream diary bullets from a file under the operator home directory or `OPENCLAW_STATE_DIR`. |
 
 Use `--yes` with `flush` only when you intentionally want to skip the
 confirmation prompt.

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "libravdb-memory",
   "name": "LibraVDB Memory",
   "description": "Persistent vector memory with three-tier hybrid scoring",
-  "version": "1.4.52",
+  "version": "1.4.54",
   "kind": [
     "memory",
     "context-engine"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdarkicex/openclaw-memory-libravdb",
-  "version": "1.4.52",
+  "version": "1.4.54",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",