openclaw-memory-atmem 2.2.6 → 2.2.7-beta.1

package/README.md

@@ -5,7 +5,7 @@ This npm package is the host bridge for AtMem. It is not a standalone memory eng
 Use the Python-owned installer:
 
 ```bash
-python -m pip install --upgrade atmem==2.2.6
+python -m pip install --upgrade atmem==2.2.7b1
 atmem openclaw install
 ```
 
@@ -22,7 +22,7 @@ Existing AtMem 2.1 users run `atmem openclaw upgrade` after upgrading the Python
 package. This preserves the current memory mode and migration, verifies the new
 bridge with a self-test flight, and rolls back the bridge on failure.
 
-Bridge `2.2.6` includes exact task-context delivery, the shared
+Bridge `2.2.7-beta.1` includes exact task-context delivery, the shared
 calibrated retrieval decision, and delegated context correlation. When the host
 supplies `taskId` in hook context, the bridge requests only that governed task,
 checks its byte digest, contributes it separately from recalled memory, and
@@ -37,7 +37,7 @@ The bridge also supplies Agent Black Box hooks. It records model/tool lifecycle
 See the repository [OpenClaw setup](../../docs/openclaw-setup.md) and [control-plane guarantees](../../docs/control-plane.md).
 
 
-### Delegated local CLI identity and tool evidence in 2.2.6
+### Delegated local CLI identity and tool evidence in 2.2.7b1
 
 The default delegated user mapping requires `senderIsOwner: true`. Setting
 `requireOwner: false` alone no longer bypasses identity checks. A dedicated local
@@ -54,3 +54,12 @@ actual terminal host tool-event results supply fallback observations when typed
 completion hooks are absent. Only matched requests close, with content-free
 bounded caching and duplicate suppression. Fully observed
 terminal tool errors close evidence as `completed_with_tool_errors`, not success.
+
+Beta 2.2.7b1: automatic recall now requires calibrated direct
+query support by default (`recall.requireDirectSupport: true`). Persona is an
+explicit opt-in (`persona.enabled: true`); setup defaults it off to avoid adding
+unrelated personal facts to every request. When enabled, persona records are
+excluded from recall so each appears once. Existing explicit persona settings
+are respected; set `persona.enabled: false` to adopt selective recall. Explicit
+memory search remains available. The legacy rank-only mode is available with
+`recall.requireDirectSupport: false`; it can admit weak matches.

package/dist/index.js

@@ -24,6 +24,8 @@ import { createReadStream } from "node:fs";
 import { lstat, mkdir, readFile, realpath, rename, unlink, writeFile } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
 import { ToolObservations, observationContext } from "./src/tool-observations.js";
+import { progressCardComparison } from "./src/tool-result-comparison.js";
+import { toolErrorReason } from "./src/tool-errors.js";
 import { delegatedIdentity, isolatedCliProcess } from "./src/delegated-identity.js";
 import { AtmemClient } from "./src/rpc-client.js";
 import { runSetup } from "./src/setup.js";
@@ -97,10 +99,11 @@ function parseConfig(raw) {
             maxRecords: Number(cfg.recall?.maxRecords ?? 3),
             maxChars: Number(cfg.recall?.maxChars ?? 1200),
             minScore: Number(cfg.recall?.minScore ?? 0.3),
+            requireDirectSupport: cfg.recall?.requireDirectSupport !== false,
             timeoutMs: Number(cfg.recall?.timeoutMs ?? 4000),
         },
         persona: {
-            enabled: cfg.persona?.enabled !== false,
+            enabled: cfg.persona?.enabled === true,
             maxChars: Number(cfg.persona?.maxChars ?? 600),
             ttlSeconds: Number(cfg.persona?.ttlSeconds ?? 300),
         },
@@ -995,6 +998,8 @@ function register(api) {
                     max_records: cfg.recall.maxRecords,
                     max_chars: cfg.recall.maxChars,
                     min_score: cfg.recall.minScore,
+                    require_direct_support: cfg.recall.requireDirectSupport,
+                    exclude_record_ids: personaRecordIds,
                     reference_mode: cfg.cacheAware.enabled && cfg.cacheAware.compactReferences
                         ? "compact"
                         : "full",
@@ -1072,6 +1077,9 @@ function register(api) {
             context_chars: memoryContext.length,
             candidate_ids: candidateIds,
             context_component_event_ids: componentEventIds,
+            persona_record_count: personaRecordIds.length,
+            recall_record_count: (current?.injectedRecordIds ?? []).length,
+            context_selection_profile: cfg.recall.requireDirectSupport ? "direct-support-v1" : "rank-threshold-v1",
             mode: "direct",
             context_location: contextLocation,
         }, undefined, {
@@ -1134,8 +1142,12 @@ function register(api) {
             tool_name: event.toolName,
             tool_canonical_name: canonicalToolName(event.toolName),
             result_sha256: digestJson(event.result ?? null),
+            ...(!event.error ? progressCardComparison(event.toolName, event.result, digestJson) : {}),
             outcome: event.error ? "error" : "completed",
             error_category: event.error ? "tool_error" : undefined,
+            error_reason: event.error ? toolErrorReason(event.error) : undefined,
+            error_sha256: event.error ? digestText(event.error) : undefined,
+            result_present: event.result !== undefined,
             duration_ms: event.durationMs ?? 0,
         }, event.toolCallId ?? ctx.toolCallId);
     });
@@ -1146,6 +1158,8 @@ function register(api) {
                 tool_name: saved.name, tool_canonical_name: canonicalToolName(saved.name),
                 result_sha256: saved.result.digest, outcome: saved.result.error ? "error" : "completed",
                 error_category: saved.result.error ? "tool_error" : undefined,
+                error_reason: saved.result.reason,
+                error_sha256: saved.result.errorDigest,
                 reason: "observed_terminal_host_tool_event",
             }, saved.callId);
         });

package/dist/src/setup.js

@@ -42,7 +42,7 @@ export function setupWrites(options) {
             minScore: 0.3,
             timeoutMs: 3000,
         },
-        persona: { enabled: true, maxChars: 600, ttlSeconds: 300 },
+        persona: { enabled: false, maxChars: 600, ttlSeconds: 300 },
         capture: { enabled: true, captureAssistant: true },
         cacheAware: { enabled: true, compactReferences: true },
         tools: { enabled: true },

package/dist/src/tool-errors.js

@@ -0,0 +1,31 @@
+/** Retain a bounded diagnostic, never the full tool result or stack trace. */
+export function toolErrorReason(value) {
+    let text = value;
+    if (value && typeof value === "object") {
+        const row = value;
+        text = row.error ?? row.message;
+        if (text && typeof text === "object")
+            text = text.message;
+        if (text === undefined && Array.isArray(row.content)) {
+            text = row.content.find(item => item?.type === "text" && typeof item.text === "string")?.text;
+        }
+    }
+    if (typeof text !== "string" || !text.trim())
+        return undefined;
+    const bounded = text.slice(0, 8192);
+    // OpenClaw wraps thrown web errors as untrusted API content. Extract only
+    // its narrow status prefix, never the page text or instructions beneath it.
+    if (bounded.startsWith("SECURITY NOTICE:")) {
+        const status = bounded.match(/<<<EXTERNAL_UNTRUSTED_CONTENT id="[a-f0-9]+">>>\r?\nSource: API\r?\n---\r?\n(Web fetch failed \([1-5][0-9]{2}\)):/);
+        return status?.[1];
+    }
+    return bounded.split(/[\r\n]/, 1)[0]
+        .replace(/https?:\/\/[^\s<>]+/gi, "[redacted-url]")
+        .replace(/\b(?:Bearer|Basic)\s+\S+/gi, "[redacted-auth]")
+        .replace(/\b(?:api[_-]?key|token|password|passwd|secret|authorization|cookie)\s*[:=]\s*(?:"[^"]*"|'[^']*'|\S+)/gi, "[redacted-credential]")
+        .replace(/\b(?:sk-|ghp_|github_pat_)[A-Za-z0-9_-]+/g, "[redacted-token]")
+        .replace(/\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, "[redacted-email]")
+        .replace(/(?:[A-Za-z]:\\|\/)[^\s<>"']+/g, "[redacted-path]")
+        .replace(/"[^"\r\n]*"|'[^'\r\n]*'/g, "[redacted-value]")
+        .replace(/[\x00-\x1f\x7f]/g, " ").trim().slice(0, 512) || undefined;
+}

package/dist/src/tool-observations.js

@@ -1,9 +1,10 @@
 import { createHash } from "node:crypto";
+import { toolErrorReason } from "./tool-errors.js";
 const CACHE_KEY = Symbol.for("atmem.tool-observation-cache.v1");
 const sharedCache = globalThis;
 const cache = sharedCache[CACHE_KEY] ??= new Map();
 /** Some hosts deny run-context writes from tool hooks after registry reload.
- * Keep a bounded content-free process fallback, isolated by installation config.
+ * Keep a bounded content-minimized process fallback, isolated by installation config.
  */
 export function observationContext(host, scope) {
     const keyFor = (runId, namespace) => JSON.stringify([scope, runId, namespace]);
@@ -45,7 +46,7 @@ function canonical(name) {
     const unwrapped = name.replace(/^mcp__openclaw__/, "");
     return { Read: "read", Bash: "exec" }[unwrapped] ?? unwrapped;
 }
-/** Stores only scope, names and digests in bounded ephemeral observation context. */
+/** Stores scope, names, digests and redacted error diagnostics in bounded ephemeral context. */
 export class ToolObservations {
     access;
     digest;
@@ -88,9 +89,12 @@ export class ToolObservations {
             (event.agentId !== undefined && event.agentId !== saved.ctx.agentId) ||
             canonical(d.name) !== canonical(saved.name))
             return;
-        const result = { digest: this.digest(d.result), error: d.isError };
+        const result = { digest: this.digest(d.result), error: d.isError,
+            reason: d.isError ? toolErrorReason(d.error ?? d.result) : undefined,
+            errorDigest: d.isError && d.error !== undefined ? this.digest(d.error) : undefined };
         const conflict = saved.conflict || (saved.result !== undefined &&
-            (saved.result.digest !== result.digest || saved.result.error !== result.error));
+            (saved.result.digest !== result.digest || saved.result.error !== result.error ||
+                saved.result.errorDigest !== result.errorDigest));
         this.access.setRunContext({ ...key, value: { ...saved, result, conflict } });
     }
     async flush(ctx, record) {

package/dist/src/tool-result-comparison.js

@@ -0,0 +1,45 @@
+// Exact OpenClaw progress_card ↔ native relay equivalence. Never discard raw digests.
+export function progressCardComparison(name, result, digest) {
+    if (name !== "progress_card")
+        return {};
+    const record = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    const keys = (v, expected) => Object.keys(v).sort().join(",") === [...expected].sort().join(",");
+    const native = Array.isArray(result);
+    if (!native && (!record(result) || !keys(result, ["content", "details"])))
+        return {};
+    const content = native ? result : result.content;
+    if (!Array.isArray(content) || content.length !== 2 || !content.every(v => record(v) && keys(v, ["type", "text"]) && v.type === (native ? "input_text" : "text") &&
+        typeof v.text === "string" && v.text.length <= 1024))
+        return {};
+    let payload;
+    try {
+        payload = JSON.parse(content[1].text);
+    }
+    catch {
+        return {};
+    }
+    if (!record(payload) || !keys(payload, ["revision", "steps"]))
+        return {};
+    const { revision, steps } = payload;
+    if (revision !== null && (!Number.isSafeInteger(revision) || revision < 1))
+        return {};
+    if (steps !== null && (!record(steps) || !keys(steps, ["completed", "total"]) ||
+        !Number.isSafeInteger(steps.completed) || !Number.isSafeInteger(steps.total) ||
+        steps.completed < 0 || steps.total < 1 || steps.total > 50 ||
+        steps.completed > steps.total))
+        return {};
+    if (revision === null && steps !== null)
+        return {};
+    const expected = revision === null ? "Progress card cleared" : steps === null
+        ? `Progress card updated (rev ${revision})`
+        : `Progress card updated (rev ${revision}, ${steps.completed}/${steps.total} done)`;
+    if (content[0].text !== expected || content[1].text !== JSON.stringify(payload, null, 2))
+        return {};
+    if (!native && digest(result.details) !== digest(payload))
+        return {};
+    return {
+        result_comparison_profile: "openclaw-progress-card-v1",
+        result_comparison_sha256: digest(payload),
+        result_observation_shape: native ? "native_input_text" : "tool_content_details",
+    };
+}

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "memory-atmem",
   "name": "Memory (atmem)",
   "description": "OpenClaw bridge installed and managed by the AtMem memory control plane.",
-  "version": "2.2.6",
+  "version": "2.2.7-beta.1",
   "commandAliases": ["memory-atmem"],
   "activation": {
     "onStartup": true,
@@ -81,15 +81,16 @@
           "enabled": { "type": "boolean", "default": true },
           "maxRecords": { "type": "number", "default": 3, "description": "Max memories injected per turn" },
           "maxChars": { "type": "number", "default": 1200, "description": "Total character budget for the injected block" },
+          "requireDirectSupport": { "type": "boolean", "default": true, "description": "Require direct query relevance for automatic recall; rank score alone is insufficient" },
           "minScore": { "type": "number", "default": 0.3, "description": "Minimum relevance score; 0.3 requires a lexical match (priors alone never inject)" },
           "timeoutMs": { "type": "number", "default": 4000, "description": "Recall timeout; on timeout the turn proceeds without injection" }
         }
       },
       "persona": {
         "type": "object",
-        "description": "L3 persona snapshot injected alongside recall",
+        "description": "Optional always-on persona snapshot; disabled by default to avoid unrelated context",
         "properties": {
-          "enabled": { "type": "boolean", "default": true },
+          "enabled": { "type": "boolean", "default": false },
           "maxChars": { "type": "number", "default": 600, "description": "Character budget for the <user_persona> block" },
           "ttlSeconds": { "type": "number", "default": 300, "description": "Persona cache lifetime; also invalidated whenever new memory is captured" }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-memory-atmem",
-  "version": "2.2.6",
+  "version": "2.2.7-beta.1",
   "description": "OpenClaw Agent Black Box and memory control-plane bridge for AtMem",
   "type": "module",
   "main": "./dist/index.js",
@@ -40,7 +40,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "node test/manifest.mjs && node test/hook-context-compat.mjs && node test/setup.mjs && node test/hooks.mjs && node test/delegated-identity.mjs && node test/tool-observations.mjs && node test/task-tools.mjs && node test/delegated-context-contract.mjs",
+    "test": "node test/manifest.mjs && node test/hook-context-compat.mjs && node test/setup.mjs && node test/hooks.mjs && node test/delegated-identity.mjs && node test/tool-observations.mjs && node test/tool-result-comparison.mjs && node test/blackbox-diagnostics.mjs && node test/task-tools.mjs && node test/delegated-context-contract.mjs",
     "smoke": "node test/smoke.mjs && node test/task-journey.mjs && node test/delegated-journey.mjs",
     "prepack": "npm run build && npm run typecheck && npm test && npm run smoke",
     "hook-context": "node test/hook-context-compat.mjs",