openclaw-memory-atmem 2.2.6-beta.1 → 2.2.6-beta.3

package/README.md

@@ -5,7 +5,7 @@ This npm package is the host bridge for AtMem. It is not a standalone memory eng
 Use the Python-owned installer:
 
 ```bash
-python -m pip install --pre --upgrade atmem==2.2.6b1
+python -m pip install --pre --upgrade atmem==2.2.6b5
 atmem openclaw install
 ```
 
@@ -22,6 +22,13 @@ Existing AtMem 2.1 users run `atmem openclaw upgrade` after upgrading the Python
 package. This preserves the current memory mode and migration, verifies the new
 bridge with a self-test flight, and rolls back the bridge on failure.
 
+Bridge `2.2.6-beta.3` adds Spec 007 exact task-context delivery. When the host
+supplies `taskId` in hook context, the bridge requests only that governed task,
+checks its byte digest, contributes it separately from recalled memory, and
+confirms exposure. With no `taskId`, task delivery stays off and existing
+memory-only behavior is unchanged. Guard detection is available, but this
+bridge does not claim it can block OpenClaw execution.
+
 In shadow mode the bridge observes native-memory changes without injecting AtMem context. In active mode it exposes compatible memory search/get tools, model-semantic capture, bounded recall and native-path protection. `atmem control restore` restores the saved OpenClaw configuration and native memory.
 
 The bridge also supplies Agent Black Box hooks. It records model/tool lifecycle digests and bounded metadata—not raw prompts, responses, parameters or results—so `atmem blackbox verify RUN_ID` can check timeline integrity and observed tool-hook closure. See the [Agent Black Box guide](../../docs/agent-blackbox.md) for the exact boundary.

package/dist/index.js

@@ -747,6 +747,20 @@ function register(api) {
                     user_id: delegatedUserIdFor(ctx),
                     workspace_id: workspaceIdFor(ctx),
                 }, cfg.recall.timeoutMs));
+                const taskPrepared = ctx.taskId
+                    ? (await callFor(ctx, "control_prepare_task_context", {
+                        task_id: ctx.taskId,
+                        session_id: sessionKey,
+                        host_run_id: ctx.runId,
+                        agent_id: agentIdFor(ctx),
+                        workspace_id: workspaceIdFor(ctx),
+                    }, cfg.recall.timeoutMs))
+                    : undefined;
+                if (taskPrepared?.disposition === "injected" &&
+                    (!taskPrepared.context || !taskPrepared.context_sha256 ||
+                        `sha256:${digestText(taskPrepared.context)}` !== taskPrepared.context_sha256)) {
+                    throw new Error("governed task context failed exact handoff digest validation");
+                }
                 pendingPrompts.set(sessionKey, {
                     text: userText,
                     ts: Date.now(),
@@ -758,7 +772,18 @@ function register(api) {
                     delegatedContextSha256: prepared.authority === "delegated" ? prepared.context_sha256 : undefined,
                     delegatedAuthority: prepared.authority,
                     delegatedResultSha256: prepared.result_sha256,
+                    taskDeliveryId: taskPrepared?.delivery_id,
+                    taskContextSha256: taskPrepared?.context_sha256,
                 });
+                if (ctx.taskId) {
+                    await recordBlackbox("task.context.prepared", undefined, ctx, {
+                        task_id: ctx.taskId,
+                        task_disposition: taskPrepared?.disposition ?? "withheld",
+                        task_revision: taskPrepared?.revision,
+                        task_context_sha256: taskPrepared?.context_sha256?.replace(/^sha256:/, ""),
+                        task_reason_codes: taskPrepared?.reason_codes ?? [],
+                    });
+                }
                 if (prepared.authority === "delegated" &&
                     prepared.inject &&
                     (!prepared.context ||
@@ -805,8 +830,21 @@ function register(api) {
                 if (prepared.inject && prepared.context) {
                     api.logger.info(`${TAG} memory control plane ${prepared.mode ?? "active"} context exposed`);
                     return prepared.authority === "delegated"
-                        ? { prependContext: prepared.context }
-                        : { appendContext: prepared.context };
+                        ? {
+                            prependContext: prepared.context,
+                            appendContext: taskPrepared?.disposition === "injected"
+                                ? taskPrepared.context
+                                : undefined,
+                        }
+                        : {
+                            appendContext: [
+                                prepared.context,
+                                taskPrepared?.disposition === "injected" ? taskPrepared.context : "",
+                            ].filter(Boolean).join("\n\n"),
+                        };
+                }
+                if (taskPrepared?.disposition === "injected" && taskPrepared.context) {
+                    return { appendContext: taskPrepared.context };
                 }
                 return;
             }
@@ -1007,6 +1045,14 @@ function register(api) {
                 if (cached?.exposureId) {
                     await callFor(ctx, "control_exposure_shown", { exposure_id: cached.exposureId }, cfg.recall.timeoutMs);
                 }
+                if (cached?.taskDeliveryId) {
+                    await callFor(ctx, "control_task_exposure_shown", { delivery_id: cached.taskDeliveryId }, cfg.recall.timeoutMs);
+                    await recordBlackbox("task.context.exposed", event.runId, ctx, {
+                        task_id: ctx.taskId,
+                        task_disposition: "injected",
+                        task_context_sha256: cached.taskContextSha256?.replace(/^sha256:/, ""),
+                    });
+                }
                 if (event.success !== false) {
                     await callFor(ctx, "control_sync_openclaw_memory", {}, cfg.recall.timeoutMs);
                 }

package/dist/src/rpc-client.js

@@ -128,7 +128,7 @@ export class AtmemClient {
             capabilities: {},
             clientInfo: {
                 name: "openclaw-memory-atmem",
-                version: "2.2.6-beta.1",
+                version: "2.2.6-beta.3",
             },
         });
         this.notify("notifications/initialized", {});

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "memory-atmem",
   "name": "Memory (atmem)",
   "description": "OpenClaw bridge installed and managed by the AtMem memory control plane.",
-  "version": "2.2.6-beta.1",
+  "version": "2.2.6-beta.3",
   "commandAliases": ["memory-atmem"],
   "activation": {
     "onStartup": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-memory-atmem",
-  "version": "2.2.6-beta.1",
+  "version": "2.2.6-beta.3",
   "description": "OpenClaw Agent Black Box and memory control-plane bridge for AtMem",
   "type": "module",
   "main": "./dist/index.js",