openclaw-memory-atmem 2.2.0 → 2.2.3

package/README.md

@@ -5,11 +5,11 @@ This npm package is the host bridge for AtMem. It is not a standalone memory eng
 Use the Python-owned installer:
 
 ```bash
-python -m pip install --upgrade atmem==2.2.0
+python -m pip install --upgrade atmem==2.2.3
 atmem openclaw install
 ```
 
-The installer pins `openclaw-memory-atmem@2.2.0`, binds the exact `atmem` executable, copies existing OpenClaw memory, configures shadow mode, restarts the gateway and verifies the loaded plugin. Direct npm installation cannot perform or prove those steps.
+The installer pins `openclaw-memory-atmem@2.2.3`, binds the exact `atmem` executable, copies existing OpenClaw memory, configures shadow mode, restarts the gateway and verifies the loaded plugin. Direct npm installation cannot perform or prove those steps.
 
 Existing AtMem 2.1 users run `atmem openclaw upgrade` after upgrading the Python
 package. This preserves the current memory mode and migration, verifies the new

package/dist/index.js

@@ -326,6 +326,7 @@ function register(api) {
     // Per-turn recall state. Semantic admission uses a short-lived SQLite handoff
     // because OpenClaw may run prompt hooks and agent tools in separate runtimes.
     const pendingPrompts = new Map();
+    const observedTurnInputs = new Map();
     const inboundAttachments = new Map();
     const inboundAttachmentGeneration = new Map();
     let nextAttachmentGeneration = 0;
@@ -432,6 +433,41 @@ function register(api) {
             ttl_seconds: 600,
         }, cfg.recall.timeoutMs);
     };
+    const turnInputKey = (ctx) => scopedKey(flightRunId(undefined, ctx), ctx);
+    const observeTurnInput = async (prompt, ctx, sourceHook, imagesCount) => {
+        if (!prompt.trim())
+            return;
+        const key = turnInputKey(ctx);
+        const promptSha256 = digestText(prompt);
+        const existing = observedTurnInputs.get(key);
+        if (existing) {
+            if (existing.promptSha256 !== promptSha256) {
+                api.logger.warn(`${TAG} ${sourceHook} exposed different prompt bytes for an already observed turn; ` +
+                    "the first authenticated turn input remains authoritative");
+            }
+            await existing.pending;
+            return;
+        }
+        const pending = (async () => {
+            await recordBlackbox("turn.input", undefined, ctx, {
+                prompt_sha256: promptSha256,
+                prompt_chars: prompt.length,
+                images_count: imagesCount,
+            });
+            try {
+                await stageInbound(prompt, ctx);
+            }
+            catch (error) {
+                api.logger.warn(`${TAG} semantic source handoff unavailable; memory writes will fail closed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        })();
+        observedTurnInputs.set(key, {
+            promptSha256,
+            observedAt: Date.now(),
+            pending,
+        });
+        await pending;
+    };
     const bindInboundAttachments = async (keys, paths, types) => {
         const generation = ++nextAttachmentGeneration;
         for (const key of keys) {
@@ -509,19 +545,7 @@ function register(api) {
     // OpenClaw documents this as the current prompt before model selection. It
     // is a typed per-turn input surface, not a rendered transcript or history.
     api.on("before_model_resolve", async (event, ctx) => {
-        if (!event.prompt?.trim())
-            return;
-        await recordBlackbox("turn.input", undefined, ctx, {
-            prompt_sha256: digestText(event.prompt),
-            prompt_chars: event.prompt.length,
-            images_count: Array.isArray(event.attachments) ? event.attachments.length : 0,
-        });
-        try {
-            await stageInbound(event.prompt, ctx);
-        }
-        catch (error) {
-            api.logger.warn(`${TAG} semantic source handoff unavailable; memory writes will fail closed: ${error instanceof Error ? error.message : String(error)}`);
-        }
+        await observeTurnInput(event.prompt, ctx, "before_model_resolve", Array.isArray(event.attachments) ? event.attachments.length : 0);
     });
     api.on("llm_input", async (event, ctx) => {
         await recordBlackbox("model.input", event.runId, ctx, {
@@ -620,6 +644,10 @@ function register(api) {
             if (now - value.ts > PROMPT_CACHE_TTL_MS)
                 pendingPrompts.delete(key);
         }
+        for (const [key, value] of observedTurnInputs) {
+            if (now - value.observedAt > PROMPT_CACHE_TTL_MS)
+                observedTurnInputs.delete(key);
+        }
         for (const [key, value] of inboundAttachments) {
             if (now - value.ts > PROMPT_CACHE_TTL_MS)
                 inboundAttachments.delete(key);
@@ -655,6 +683,7 @@ function register(api) {
         const userText = event.prompt;
         if (!userText)
             return;
+        await observeTurnInput(userText, ctx, "before_prompt_build");
         const sessionKey = scopedKey(ctx.sessionKey ?? ctx.sessionId ?? "default-session", ctx);
         const takeoverGuidance = cfg.takeoverActive ? TAKEOVER_GUIDANCE : "";
         pendingPrompts.set(sessionKey, { text: userText, ts: Date.now() });
@@ -878,6 +907,7 @@ function register(api) {
     // ---- auto-capture: user turn through the pipeline, assistant as digest -
     api.on("agent_end", async (event, ctx) => {
         const sessionKey = scopedKey(ctx.sessionKey ?? ctx.sessionId ?? "default-session", ctx);
+        const observedTurnInputKey = turnInputKey(ctx);
         const cached = pendingPrompts.get(sessionKey);
         pendingPrompts.delete(sessionKey);
         const userText = cached?.text?.replace(INJECT_RE, "").trim();
@@ -978,6 +1008,7 @@ function register(api) {
                 contextEventId: cached?.contextEventId,
                 contextReceiptId: cached?.contextReceiptId,
             });
+            observedTurnInputs.delete(observedTurnInputKey);
         }
     });
     // ---- keep injected blocks out of persisted history ---------------------

package/dist/src/rpc-client.js

@@ -128,7 +128,7 @@ export class AtmemClient {
             capabilities: {},
             clientInfo: {
                 name: "openclaw-memory-atmem",
-                version: "2.2.0",
+                version: "2.2.3",
             },
         });
         this.notify("notifications/initialized", {});

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "memory-atmem",
   "name": "Memory (atmem)",
   "description": "OpenClaw bridge installed and managed by the AtMem memory control plane.",
-  "version": "2.2.0",
+  "version": "2.2.3",
   "commandAliases": ["memory-atmem"],
   "activation": {
     "onStartup": true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-memory-atmem",
-  "version": "2.2.0",
+  "version": "2.2.3",
   "description": "OpenClaw Agent Black Box and memory control-plane bridge for AtMem",
   "type": "module",
   "main": "./dist/index.js",