jasper-recall 0.3.3 → 0.3.5

package/SKILL.md

@@ -293,6 +293,76 @@ Default settings in index-digests:
 - Chunk size: 500 characters
 - Overlap: 100 characters
 
+## Security Considerations
+
+⚠️ **Review these settings before enabling in production:**
+
+### Server Binding
+
+The `serve` command defaults to `127.0.0.1` (localhost only). **Do not use `--host 0.0.0.0`** unless you explicitly intend to expose the API externally and have secured it appropriately.
+
+### Private Memory Access
+
+The server enforces `public_only=true` by default. The env var `RECALL_ALLOW_PRIVATE=true` bypasses this restriction. **Never set this on public/shared hosts** — it exposes your private memories to any client.
+
+### autoRecall Plugin
+
+When `autoRecall: true` in the OpenClaw plugin config, memories are automatically injected before every agent message. Consider:
+
+- Set `publicOnly: true` in plugin config for sandboxed agents
+- Review which collections will be searched
+- Use `minScore` to filter low-relevance injections
+
+**What's automatically skipped (no recall triggered):**
+- Heartbeat polls (`HEARTBEAT`, `Read HEARTBEAT.md`, `HEARTBEAT_OK`)
+- Messages containing `NO_REPLY`
+- Messages < 10 characters
+- Agent-to-agent messages (cron jobs, workers, spawned agents)
+- Automated reports (`📋 PR Review`, `🤖 Codex Watch`, `ANNOUNCE_*`)
+- Messages from senders starting with `agent:` or `worker-`
+
+**Safer config for untrusted contexts:**
+```json
+"jasper-recall": {
+  "enabled": true,
+  "config": {
+    "autoRecall": true,
+    "publicOnly": true,
+    "minScore": 0.5
+  }
+}
+```
+
+### Environment Variables
+
+The following env vars affect behavior — set them explicitly rather than relying on defaults:
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `RECALL_WORKSPACE` | `~/.openclaw/workspace` | Memory files location |
+| `RECALL_CHROMA_DB` | `~/.openclaw/chroma-db` | Vector database path |
+| `RECALL_SESSIONS_DIR` | `~/.openclaw/agents/main/sessions` | Session logs |
+| `RECALL_ALLOW_PRIVATE` | `false` | Server private access |
+| `RECALL_PORT` | `3458` | Server port |
+| `RECALL_HOST` | `127.0.0.1` | Server bind address |
+
+### Dry-Run First
+
+Before sharing or syncing, use dry-run options to preview what will be exposed:
+
+```bash
+privacy-check --file notes.md     # Scan for sensitive data
+sync-shared --dry-run             # Preview public extraction
+digest-sessions --dry-run         # Preview session processing
+```
+
+### Sandboxed Environments
+
+For maximum isolation, run jasper-recall in a container or dedicated account:
+- Limits risk of accidental data exposure
+- Separates private memory from shared contexts
+- Recommended for multi-agent setups with untrusted agents
+
 ## Troubleshooting
 
 **"No index found"**

package/extensions/openclaw-plugin/index.ts

@@ -81,14 +81,37 @@ export default function register(api: PluginApi) {
   // ============================================================================
   
   if (autoRecall) {
-    api.on('before_agent_start', async (event: { prompt?: string }) => {
+    api.on('before_agent_start', async (event: { prompt?: string; senderId?: string; source?: string }) => {
       // Skip if no prompt or too short
       if (!event.prompt || event.prompt.length < 10) {
         return;
       }
 
-      // Skip system/internal prompts
-      if (event.prompt.startsWith('HEARTBEAT') || event.prompt.includes('NO_REPLY')) {
+      const prompt = event.prompt;
+
+      // Skip heartbeats and system prompts
+      if (prompt.startsWith('HEARTBEAT') || 
+          prompt.startsWith('Read HEARTBEAT.md') ||
+          prompt.includes('NO_REPLY') ||
+          prompt.includes('HEARTBEAT_OK')) {
+        return;
+      }
+
+      // Skip agent-to-agent messages (cron jobs, workers, spawned agents)
+      if (event.source?.startsWith('cron:') ||
+          event.source?.startsWith('agent:') ||
+          event.source?.startsWith('spawn:') ||
+          event.source === 'sessions_send' ||
+          event.senderId?.startsWith('agent:') ||
+          event.senderId?.startsWith('worker-')) {
+        return;
+      }
+
+      // Skip common automated patterns
+      if (prompt.startsWith('Agent-to-agent') ||
+          prompt.startsWith('📋 PR Review') ||
+          prompt.startsWith('🤖 Codex Watch') ||
+          prompt.startsWith('ANNOUNCE_')) {
         return;
       }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jasper-recall",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Local RAG system for AI agent memory using ChromaDB and sentence-transformers",
   "main": "src/index.js",
   "bin": {