oomi-ai 0.3.1 → 0.3.3

package/README.md

@@ -183,6 +183,7 @@ Rules for agents:
 - Respect `healthContext.agentGuidance.canAnswerFromContext`.
 - If context is `missing`, `needs_sync`, `permission_denied`, `disabled_by_user`, or `unavailable`, tell the user what repair action is needed instead of guessing.
 - If context is `stale`, mention freshness when timing matters.
+- To request a fresh phone-side HealthKit sync, run `oomi context health sync --json`. The iPhone app must open or refresh before it can read Apple Health and fulfill the pending request.
 - Do not ask the phone for HealthKit directly; the Oomi mobile app syncs HealthKit to the backend.
 
 ## Voice Contract

package/agent_instructions.md

@@ -213,7 +213,7 @@ Rules:
 - `metadata.spoken.language` should use the backend-supported language value for the active provider; use `English` only when no more specific locale is supplied
 - `metadata.spoken.segments` can carry bounded per-segment prosody for pace, pitch, volume, and pause timing
 - `metadata.spoken.instructions` should be natural-language guidance, not raw bracket tags
-- visible chat text is never rewritten by the package
+- visible chat text should be clean before sending; the package may strip private runtime wrappers and avatar command tags as a safety guardrail
 
 ## Avatar Commands
 
@@ -278,5 +278,6 @@ Rules:
 - Respect `healthContext.agentGuidance.canAnswerFromContext`.
 - If `canAnswerFromContext` is false, tell the user the relevant `healthContext.repair.label` or `healthContext.repair.reason`.
 - If `healthContext.status` is `stale`, mention that the latest HealthKit sync may be out of date when timing matters.
+- If the user asks you to refresh stale HealthKit context, run `oomi context health sync --json`; tell the user the iPhone app must be opened for Oomi to read Apple Health and fulfill the pending sync.
 - Do not infer unavailable health fields.
 - Do not request HealthKit directly from the phone; the Oomi mobile app owns permission prompts and syncs approved data to the backend.

package/bin/oomi-ai.js

@@ -229,6 +229,8 @@ Commands:
 
   context health
     Show the latest account-linked health context available to this paired OpenClaw device.
+  context health sync
+    Request the linked Oomi mobile app to sync fresh HealthKit context.
 
 Common flags:
   --agents-file PATH     Override AGENTS.md path
@@ -575,6 +577,14 @@ async function handleContextHealthCommand(flags = {}) {
   printStructuredResult(payload, isTruthyFlag(flags.json));
 }
 
+async function handleContextHealthSyncCommand(flags = {}) {
+  const client = createCliPersonaApiClient(flags);
+  const payload = await client.requestHealthContextSync({
+    reason: flags.reason || 'agent_requested',
+  });
+  printStructuredResult(payload, isTruthyFlag(flags.json));
+}
+
 async function refreshBridgeForUpdate(flags = {}, options = {}) {
   const logger = options.logger || null;
   if (process.platform === 'darwin') {
@@ -1355,6 +1365,130 @@ function extractTextFromGatewayMessage(message) {
     .join(' ');
 }
 
+function normalizeWhitespace(value) {
+  return String(value || '')
+    .replace(/[ \t]+\n/g, '\n')
+    .replace(/\n{3,}/g, '\n\n')
+    .replace(/[ \t]{2,}/g, ' ')
+    .trim();
+}
+
+function sanitizeUserVisibleText(value) {
+  let text = String(value || '');
+  if (!text.trim()) return '';
+
+  text = text.replace(/<think>[\s\S]*?<\/think>/gi, ' ');
+  if (/<think>/i.test(text)) {
+    text = text.replace(/<think>[\s\S]*$/i, ' ');
+  }
+  text = text.replace(/<\/think>/gi, ' ');
+  text = text.replace(/<\/?final>/gi, ' ');
+  text = text.replace(/\[(?:anim|face|gesture|look):[^\]\n]{1,80}\]/gi, ' ');
+
+  text = text.replace(/(?:^|\n)System \(untrusted\):[\s\S]*?(?=\n\n|$)/gi, '\n');
+  text = text.replace(
+    /(?:^|\n)An async command you ran earlier has completed\.[\s\S]*?(?:\nCurrent time:[^\n]*(?:\n|$)|$)/gi,
+    '\n'
+  );
+
+  return normalizeWhitespace(text);
+}
+
+function shouldSuppressOomiVisibleText(value) {
+  const text = String(value || '').trim();
+  if (!text) return true;
+
+  if (/System \(untrusted\):/i.test(text)) return true;
+  if (/An async command you ran earlier has completed\./i.test(text)) return true;
+  if (/Handle the result internally\. Do not relay it to the user/i.test(text)) return true;
+  if (/Exec (failed|completed) \([^)]+\) ::/i.test(text)) return true;
+  if (/^\s*<think>[\s\S]*$/i.test(text) && !/<\/think>/i.test(text)) return true;
+  if (/^NO_REPLY$/i.test(text)) return true;
+
+  return !sanitizeUserVisibleText(text);
+}
+
+function sanitizeGatewayMessageForOomi(message) {
+  if (!message || typeof message !== 'object') return null;
+
+  const role = typeof message.role === 'string' ? message.role.trim().toLowerCase() : '';
+  if (role && !['assistant', 'user'].includes(role)) {
+    return null;
+  }
+
+  const rawText = extractTextFromGatewayMessage(message);
+  if (shouldSuppressOomiVisibleText(rawText)) {
+    return null;
+  }
+
+  const content = sanitizeUserVisibleText(rawText);
+  if (!content) return null;
+
+  return {
+    ...message,
+    role: role || 'assistant',
+    content,
+  };
+}
+
+function sanitizeGatewayFrameForOomiClient(frameText) {
+  const frame = parseJsonPayload(frameText);
+  if (!frame || typeof frame !== 'object') {
+    return { frameText, changed: false, suppressed: false };
+  }
+
+  if (frame.type === 'res' && frame.payload && typeof frame.payload === 'object' && Array.isArray(frame.payload.messages)) {
+    const nextMessages = frame.payload.messages
+      .map((message) => sanitizeGatewayMessageForOomi(message))
+      .filter(Boolean);
+    const nextFrame = {
+      ...frame,
+      payload: {
+        ...frame.payload,
+        messages: nextMessages,
+      },
+    };
+    const nextFrameText = JSON.stringify(nextFrame);
+    return {
+      frameText: nextFrameText,
+      changed: nextFrameText !== frameText,
+      suppressed: nextMessages.length < frame.payload.messages.length,
+    };
+  }
+
+  if (frame.type === 'event' && frame.event === 'chat') {
+    const payload = frame.payload && typeof frame.payload === 'object' ? frame.payload : null;
+    const message = payload?.message && typeof payload.message === 'object' ? payload.message : null;
+    if (!payload || !message) {
+      return { frameText, changed: false, suppressed: false };
+    }
+
+    const sanitizedMessage = sanitizeGatewayMessageForOomi(message);
+    const nextFrame = {
+      ...frame,
+      payload: {
+        ...payload,
+        message: sanitizedMessage || {
+          ...message,
+          content: '',
+          metadata: {
+            ...(message.metadata && typeof message.metadata === 'object' && !Array.isArray(message.metadata) ? message.metadata : {}),
+            oomiSuppressed: true,
+          },
+        },
+      },
+    };
+    const nextFrameText = JSON.stringify(nextFrame);
+    return {
+      frameText: nextFrameText,
+      changed: nextFrameText !== frameText,
+      suppressed: !sanitizedMessage,
+    };
+  }
+
+  return { frameText, changed: false, suppressed: false };
+}
+
 function summarizeVoiceFrameContract(frameText) {
   const frame = parseJsonPayload(frameText);
   if (!frame || typeof frame !== 'object') {
@@ -2997,6 +3131,13 @@ async function startOpenclawBridge(flags) {
 
       gatewaySocket.on('message', runBridgeCallbackSafely((gatewayRaw) => {
         let frame = typeof gatewayRaw === 'string' ? gatewayRaw : gatewayRaw.toString();
+        const visibleSanitized = sanitizeGatewayFrameForOomiClient(frame);
+        if (visibleSanitized.changed) {
+          frame = visibleSanitized.frameText;
+          bridgeDebugLog(
+            `[bridge] oomi.visible_sanitized ${sessionId} suppressed=${visibleSanitized.suppressed ? 'yes' : 'no'}`
+          );
+        }
         const spokenNormalized = normalizeAssistantGatewayFrame(sessionId, frame);
         if (spokenNormalized.changed) {
           frame = spokenNormalized.frameText;
@@ -4191,6 +4332,10 @@ async function main() {
   }
 
   if (command === 'context' && subcommand === 'health') {
+    if (args.positionals[0] === 'sync') {
+      await handleContextHealthSyncCommand(args.flags);
+      return;
+    }
     await handleContextHealthCommand(args.flags);
     return;
   }
@@ -4213,6 +4358,9 @@ if (__isDirectExecution) {
 
 export {
   prepareGatewayFrameForLocalGateway,
+  sanitizeGatewayFrameForOomiClient,
+  sanitizeUserVisibleText,
+  shouldSuppressOomiVisibleText,
   ensureAssistantSpokenMetadata,
   normalizeAssistantGatewayFrame,
   runAssistantFinalDebugCheck,

package/lib/personaApiClient.js

@@ -148,5 +148,19 @@ export function createPersonaApiClient({
         path: '/v1/context/health',
       });
     },
+
+    requestHealthContextSync({
+      reason = 'agent_requested',
+    } = {}) {
+      return postJson({
+        fetchImpl,
+        backendUrl: resolvedBackendUrl,
+        deviceToken: resolvedDeviceToken,
+        path: '/v1/context/health/sync',
+        body: {
+          reason: trimString(reason) || 'agent_requested',
+        },
+      });
+    },
   };
 }

package/openclaw.extension.js

@@ -107,6 +107,49 @@ function extractText(payload) {
   return '';
 }
 
+function normalizeWhitespace(value) {
+  return String(value || '')
+    .replace(/[ \t]+\n/g, '\n')
+    .replace(/\n{3,}/g, '\n\n')
+    .replace(/[ \t]{2,}/g, ' ')
+    .trim();
+}
+
+function sanitizeUserVisibleText(value) {
+  let text = String(value || '');
+  if (!text.trim()) return '';
+
+  text = text.replace(/<think>[\s\S]*?<\/think>/gi, ' ');
+  if (/<think>/i.test(text)) {
+    text = text.replace(/<think>[\s\S]*$/i, ' ');
+  }
+  text = text.replace(/<\/think>/gi, ' ');
+  text = text.replace(/<\/?final>/gi, ' ');
+  text = text.replace(/\[(?:anim|face|gesture|look):[^\]\n]{1,80}\]/gi, ' ');
+
+  text = text.replace(/(?:^|\n)System \(untrusted\):[\s\S]*?(?=\n\n|$)/gi, '\n');
+  text = text.replace(
+    /(?:^|\n)An async command you ran earlier has completed\.[\s\S]*?(?:\nCurrent time:[^\n]*(?:\n|$)|$)/gi,
+    '\n'
+  );
+
+  return normalizeWhitespace(text);
+}
+
+function shouldSuppressOomiVisibleText(value) {
+  const text = String(value || '').trim();
+  if (!text) return true;
+
+  if (/System \(untrusted\):/i.test(text)) return true;
+  if (/An async command you ran earlier has completed\./i.test(text)) return true;
+  if (/Handle the result internally\. Do not relay it to the user/i.test(text)) return true;
+  if (/Exec (failed|completed) \([^)]+\) ::/i.test(text)) return true;
+  if (/^\s*<think>[\s\S]*$/i.test(text) && !/<\/think>/i.test(text)) return true;
+  if (/^NO_REPLY$/i.test(text)) return true;
+
+  return !sanitizeUserVisibleText(text);
+}
+
 function extractConversationKey(payload) {
   const candidates = [
     payload?.conversationKey,
@@ -290,7 +333,16 @@ const oomiChannelPlugin = {
         };
       }
 
-      const content = extractText(payload);
+      const rawContent = extractText(payload);
+      if (shouldSuppressOomiVisibleText(rawContent)) {
+        return {
+          ok: true,
+          suppressed: true,
+          reason: 'internal_content',
+        };
+      }
+
+      const content = sanitizeUserVisibleText(rawContent);
       if (!content) {
         return {
           ok: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oomi-ai",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Managed Oomi channel, bridge, voice, and persona app API tooling for OpenClaw",
   "bin": {
     "oomi": "bin/oomi-ai.js"

package/persona-app/README.md

@@ -30,4 +30,12 @@ When answering data-backed health or fitness questions, agents should read appro
 oomi context health --json
 ```
 
+If the user asks you to refresh stale HealthKit context, run:
+
+```bash
+oomi context health sync --json
+```
+
+The iPhone app must open or refresh before it can read Apple Health and fulfill the pending request.
+
 If a persona app is missing, ask the user to add it from the Oomi client first so platform-specific permissions and hydration can run.

package/skills/oomi/SKILL.md

@@ -127,6 +127,7 @@ Rules:
 - answer only from `healthContext.summary` and `healthContext.derived`
 - respect `healthContext.agentGuidance.canAnswerFromContext`
 - if context is missing, stale, denied, disabled, or unavailable, follow `healthContext.repair`
+- if the user asks you to refresh stale HealthKit context, run `oomi context health sync --json`; tell the user the iPhone app must be opened for Oomi to read Apple Health and fulfill the pending sync
 - do not ask HealthKit directly; the Oomi mobile app syncs approved HealthKit data to the backend
 
 ## Hidden Speech Payload

package/skills/oomi/agent_instructions.md

@@ -78,7 +78,7 @@ Rules:
 - `metadata.spoken.style` is optional metadata for debugging or future mapping
 - if no hidden speech sidecar exists, Oomi falls back to speaking the visible assistant text
 - if you omit `metadata.spoken`, the plugin now synthesizes a bounded hidden fallback from visible assistant text
-- visible chat text is never rewritten by the plugin
+- visible chat text should be clean before sending; the plugin may strip private runtime wrappers and avatar command tags as a safety guardrail
 
 ## Persona App API Tools
 
@@ -113,5 +113,6 @@ Rules:
 - respect `healthContext.agentGuidance.canAnswerFromContext`
 - if `canAnswerFromContext` is false, tell the user the relevant `healthContext.repair.label` or `healthContext.repair.reason`
 - if `healthContext.status` is `stale`, mention that the latest HealthKit sync may be out of date when timing matters
+- if the user asks you to refresh stale HealthKit context, run `oomi context health sync --json`; tell the user the iPhone app must be opened for Oomi to read Apple Health and fulfill the pending sync
 - do not infer unavailable health fields
 - do not request HealthKit directly from the phone; the Oomi mobile app owns permission prompts and syncs approved data to the backend