@xdarkicex/openclaw-memory-libravdb 1.4.61 → 1.4.63

package/dist/context-engine.js

@@ -312,8 +312,9 @@ function isQuestionShapedRecallCandidate(text) {
         /^\s*(?:who|what|when|where|why|how)\b/i.test(normalized));
 }
 function rankExactRecallCandidate(result, token) {
-    if (!result.text.includes(token))
+    if (typeof result.text !== "string" || !result.text.includes(token)) {
         return Number.NEGATIVE_INFINITY;
+    }
     let rank = result.score;
     if (/\bmeans\b/i.test(result.text))
         rank += 100;
@@ -476,7 +477,7 @@ export function buildContextEngineFactory(runtime, cfg, logger = console) {
                     excludeByCollection: {},
                 });
                 const hit = (result.results ?? [])
-                    .filter((candidate) => isExactRecallFact(candidate.text, token))
+                    .filter((candidate) => typeof candidate?.text === "string" && isExactRecallFact(candidate.text, token))
                     .sort((a, b) => rankExactRecallCandidate(b, token) - rankExactRecallCandidate(a, token))[0];
                 if (hit) {
                     injectedFacts.push(buildExactRecallFact(hit, token));

package/dist/dream-promotion.js

@@ -321,22 +321,26 @@ function parseTrailingMetadata(body) {
         uniqueQueries,
     };
 }
+const DECIMAL_NUMBER_PATTERN = /^[+-]?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i;
+const INTEGER_PATTERN = /^[+-]?\d+$/;
 function parseNumber(value) {
-    if (!value) {
+    const trimmed = value?.trim();
+    if (!trimmed || !DECIMAL_NUMBER_PATTERN.test(trimmed)) {
         return null;
     }
-    const parsed = Number.parseFloat(value);
+    const parsed = Number(trimmed);
     if (!Number.isFinite(parsed)) {
         return null;
     }
     return parsed;
 }
 function parseInteger(value) {
-    if (!value) {
+    const trimmed = value?.trim();
+    if (!trimmed || !INTEGER_PATTERN.test(trimmed)) {
         return null;
     }
-    const parsed = Number.parseInt(value, 10);
-    if (!Number.isFinite(parsed)) {
+    const parsed = Number(trimmed);
+    if (!Number.isSafeInteger(parsed)) {
         return null;
     }
     return parsed;

package/dist/index.js

@@ -32164,14 +32164,25 @@ function registerMemoryCliMetadata(api) {
 // src/memory-scopes.ts
 var SESSION_KEY_NAMESPACE_PREFIX = "session-key:";
 var AGENT_ID_NAMESPACE_PREFIX = "agent-id:";
+var COLLECTION_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_.:@#-]{0,127}$/;
+function validateNamespace(name) {
+  if (!COLLECTION_NAME_RE.test(name)) {
+    throw new Error(
+      `Invalid collection namespace: "${name}". Must match ${COLLECTION_NAME_RE.source}`
+    );
+  }
+  return name;
+}
 function resolveDurableNamespace(params) {
   const explicitUserId = firstNonEmpty(params.userId);
-  if (explicitUserId) return explicitUserId;
+  if (explicitUserId) return validateNamespace(explicitUserId);
   const sessionKey = firstNonEmpty(params.sessionKey);
-  if (sessionKey) return `${SESSION_KEY_NAMESPACE_PREFIX}${sessionKey}`;
+  if (sessionKey) return validateNamespace(`${SESSION_KEY_NAMESPACE_PREFIX}${sessionKey}`);
   const agentId = firstNonEmpty(params.agentId);
-  if (agentId) return `${AGENT_ID_NAMESPACE_PREFIX}${agentId}`;
-  return firstNonEmpty(params.fallback) ?? "default";
+  if (agentId) return validateNamespace(`${AGENT_ID_NAMESPACE_PREFIX}${agentId}`);
+  const fallback = firstNonEmpty(params.fallback);
+  if (fallback) return validateNamespace(fallback);
+  return "default";
 }
 function firstNonEmpty(value) {
   if (typeof value !== "string") return void 0;
@@ -32819,22 +32830,26 @@ function parseTrailingMetadata(body) {
     uniqueQueries
   };
 }
+var DECIMAL_NUMBER_PATTERN = /^[+-]?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i;
+var INTEGER_PATTERN = /^[+-]?\d+$/;
 function parseNumber(value) {
-  if (!value) {
+  const trimmed = value?.trim();
+  if (!trimmed || !DECIMAL_NUMBER_PATTERN.test(trimmed)) {
     return null;
   }
-  const parsed = Number.parseFloat(value);
+  const parsed = Number(trimmed);
   if (!Number.isFinite(parsed)) {
     return null;
   }
   return parsed;
 }
 function parseInteger(value) {
-  if (!value) {
+  const trimmed = value?.trim();
+  if (!trimmed || !INTEGER_PATTERN.test(trimmed)) {
     return null;
   }
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isFinite(parsed)) {
+  const parsed = Number(trimmed);
+  if (!Number.isSafeInteger(parsed)) {
     return null;
   }
   return parsed;
@@ -33076,7 +33091,16 @@ function resolveSessionSearchCollection(cfg, sessionId) {
   return `session:${sessionId}`;
 }
 function firstString(...values) {
-  return values.find((value) => typeof value === "string" && value.length > 0);
+  for (const value of values) {
+    if (typeof value !== "string") {
+      continue;
+    }
+    const trimmed = value.trim();
+    if (trimmed.length > 0) {
+      return trimmed;
+    }
+  }
+  return void 0;
 }
 function toMemorySearchResult(item) {
   const collection = typeof item.metadata.collection === "string" ? item.metadata.collection : "memory";
@@ -33929,7 +33953,9 @@ function isQuestionShapedRecallCandidate(text) {
   return normalized.includes("?") || /\bwhat\s+does\b/i.test(normalized) || /^\s*(?:who|what|when|where|why|how)\b/i.test(normalized);
 }
 function rankExactRecallCandidate(result, token) {
-  if (!result.text.includes(token)) return Number.NEGATIVE_INFINITY;
+  if (typeof result.text !== "string" || !result.text.includes(token)) {
+    return Number.NEGATIVE_INFINITY;
+  }
   let rank = result.score;
   if (/\bmeans\b/i.test(result.text)) rank += 100;
   if (/\b(remember|durable|fact)\b/i.test(result.text)) rank += 10;
@@ -34076,7 +34102,7 @@ function buildContextEngineFactory(runtime, cfg, logger = console) {
           k: Math.max(EXACT_RECALL_SEARCH_K, cfg.topK ?? 0),
           excludeByCollection: {}
         });
-        const hit = (result.results ?? []).filter((candidate) => isExactRecallFact(candidate.text, token)).sort((a, b) => rankExactRecallCandidate(b, token) - rankExactRecallCandidate(a, token))[0];
+        const hit = (result.results ?? []).filter((candidate) => typeof candidate?.text === "string" && isExactRecallFact(candidate.text, token)).sort((a, b) => rankExactRecallCandidate(b, token) - rankExactRecallCandidate(a, token))[0];
         if (hit) {
           injectedFacts.push(buildExactRecallFact(hit, token));
         }
@@ -39650,19 +39676,20 @@ function resolveConfiguredEndpoint(cfg) {
   if (!value || value === "auto") {
     return defaultEndpoint();
   }
-  if (!isConfiguredEndpoint(value)) {
+  const endpoint = normalizeConfiguredEndpoint(value);
+  if (!endpoint) {
     throw new Error(
       `LibraVDB sidecarPath must be a daemon endpoint like unix:/path/to/libravdb.sock or tcp:127.0.0.1:37421. Executable paths are no longer supported.`
     );
   }
-  return value;
+  return endpoint;
 }
 function daemonProvisioningHint() {
   return "If you installed the npm package, install and start libravdbd separately; the package does not provision the daemon binary, ONNX Runtime, or model assets.";
 }
 function defaultEndpoint(platform = process.platform, homeDir = os2.homedir(), pathExists = fs3.existsSync) {
-  const envEndpoint = process.env.LIBRAVDB_RPC_ENDPOINT?.trim();
-  if (envEndpoint && isConfiguredEndpoint(envEndpoint)) {
+  const envEndpoint = normalizeConfiguredEndpoint(process.env.LIBRAVDB_RPC_ENDPOINT);
+  if (envEndpoint) {
     return envEndpoint;
   }
   if (platform === "win32") {
@@ -39755,6 +39782,17 @@ function isConfiguredEndpoint(value) {
   const port = Number(address.slice(separator + 1));
   return host.length > 0 && Number.isInteger(port) && port > 0 && port <= 65535;
 }
+function normalizeConfiguredEndpoint(value) {
+  const trimmed = value?.trim();
+  if (!trimmed || trimmed === "auto") {
+    return null;
+  }
+  if (trimmed.startsWith("unix:")) {
+    const socketPath = trimmed.slice("unix:".length).trim();
+    return socketPath ? `unix:${socketPath}` : null;
+  }
+  return isConfiguredEndpoint(trimmed) ? trimmed : null;
+}
 function sleep2(delayMs) {
   return new Promise((resolve) => setTimeout(resolve, delayMs));
 }

package/dist/memory-runtime.js

@@ -161,7 +161,16 @@ function resolveSessionSearchCollection(cfg, sessionId) {
     return `session:${sessionId}`;
 }
 function firstString(...values) {
-    return values.find((value) => typeof value === "string" && value.length > 0);
+    for (const value of values) {
+        if (typeof value !== "string") {
+            continue;
+        }
+        const trimmed = value.trim();
+        if (trimmed.length > 0) {
+            return trimmed;
+        }
+    }
+    return undefined;
 }
 function toMemorySearchResult(item) {
     const collection = typeof item.metadata.collection === "string" ? item.metadata.collection : "memory";

package/dist/memory-scopes.d.ts

@@ -1,3 +1,6 @@
+/** Validate and return a collection-safe namespace.
+ *  Throws on invalid characters or length. */
+export declare function validateNamespace(name: string): string;
 export type RetrievalScopes = {
     /** Always queried — fresh context bound to this session. */
     session: string;

package/dist/memory-scopes.js

@@ -1,16 +1,30 @@
 const SESSION_KEY_NAMESPACE_PREFIX = "session-key:";
 const AGENT_ID_NAMESPACE_PREFIX = "agent-id:";
+/** Valid collection names: alphanumeric, underscores, hyphens, dots, colons, at-signs, hashes.
+ *  Must start with a letter. Max 128 characters. */
+const COLLECTION_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_.:@#-]{0,127}$/;
+/** Validate and return a collection-safe namespace.
+ *  Throws on invalid characters or length. */
+export function validateNamespace(name) {
+    if (!COLLECTION_NAME_RE.test(name)) {
+        throw new Error(`Invalid collection namespace: "${name}". Must match ${COLLECTION_NAME_RE.source}`);
+    }
+    return name;
+}
 export function resolveDurableNamespace(params) {
     const explicitUserId = firstNonEmpty(params.userId);
     if (explicitUserId)
-        return explicitUserId;
+        return validateNamespace(explicitUserId);
     const sessionKey = firstNonEmpty(params.sessionKey);
     if (sessionKey)
-        return `${SESSION_KEY_NAMESPACE_PREFIX}${sessionKey}`;
+        return validateNamespace(`${SESSION_KEY_NAMESPACE_PREFIX}${sessionKey}`);
     const agentId = firstNonEmpty(params.agentId);
     if (agentId)
-        return `${AGENT_ID_NAMESPACE_PREFIX}${agentId}`;
-    return firstNonEmpty(params.fallback) ?? "default";
+        return validateNamespace(`${AGENT_ID_NAMESPACE_PREFIX}${agentId}`);
+    const fallback = firstNonEmpty(params.fallback);
+    if (fallback)
+        return validateNamespace(fallback);
+    return "default";
 }
 export function resolveScopes(params) {
     return {

package/dist/sidecar.js

@@ -351,18 +351,19 @@ export function resolveConfiguredEndpoint(cfg) {
     if (!value || value === "auto") {
         return defaultEndpoint();
     }
-    if (!isConfiguredEndpoint(value)) {
+    const endpoint = normalizeConfiguredEndpoint(value);
+    if (!endpoint) {
         throw new Error(`LibraVDB sidecarPath must be a daemon endpoint like unix:/path/to/libravdb.sock or tcp:127.0.0.1:37421. Executable paths are no longer supported.`);
     }
-    return value;
+    return endpoint;
 }
 export function daemonProvisioningHint() {
     return "If you installed the npm package, install and start libravdbd separately; the package does not provision the daemon binary, ONNX Runtime, or model assets.";
 }
 export function defaultEndpoint(platform = process.platform, homeDir = os.homedir(), pathExists = fs.existsSync) {
     // Honour the daemon's own env var first (set by Homebrew LaunchAgent / systemd unit).
-    const envEndpoint = process.env.LIBRAVDB_RPC_ENDPOINT?.trim();
-    if (envEndpoint && isConfiguredEndpoint(envEndpoint)) {
+    const envEndpoint = normalizeConfiguredEndpoint(process.env.LIBRAVDB_RPC_ENDPOINT);
+    if (envEndpoint) {
         return envEndpoint;
     }
     if (platform === "win32") {
@@ -525,6 +526,17 @@ function isConfiguredEndpoint(value) {
     const port = Number(address.slice(separator + 1));
     return host.length > 0 && Number.isInteger(port) && port > 0 && port <= 65535;
 }
+function normalizeConfiguredEndpoint(value) {
+    const trimmed = value?.trim();
+    if (!trimmed || trimmed === "auto") {
+        return null;
+    }
+    if (trimmed.startsWith("unix:")) {
+        const socketPath = trimmed.slice("unix:".length).trim();
+        return socketPath ? `unix:${socketPath}` : null;
+    }
+    return isConfiguredEndpoint(trimmed) ? trimmed : null;
+}
 export { PlaceholderSocket };
 function sleep(delayMs) {
     return new Promise((resolve) => setTimeout(resolve, delayMs));

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "libravdb-memory",
   "name": "LibraVDB Memory",
   "description": "Persistent vector memory with three-tier hybrid scoring",
-  "version": "1.4.61",
+  "version": "1.4.63",
   "kind": [
     "memory",
     "context-engine"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdarkicex/openclaw-memory-libravdb",
-  "version": "1.4.61",
+  "version": "1.4.63",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",