mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 01:29:56 +00:00
a9f675839a
* feat(memory): resolve the memory audience in the host Memory providers had to re-derive whether a caller acts for the agent owner privately or for one conversation, walking spawn lineage through session lookups. When the memory slot owner registers providerRuntime, the host mints a MemoryAudience (owner-private, or one exact conversation) from the admitted turn entry and, for spawned children, the exact parent key, session ID, lifecycle revision (or its recorded absence), and captured owner bit of every hop. Memory Core and other legacy owners resolve no audience: their turns take no session leases, read no lineage, and log nothing new. Native, ACP, and realtime voice consult children record the trusted spawning sender's owner status and parent incarnation so that lineage survives session creation, reset, and rollover. The receipt stores the parent session id as spawnedBySessionId, so navigation's parentSessionId and sessions.list stay unchanged; a child of a parent without a lifecycle revision, such as a channel-created group row, records that absence. Incomplete or stale lineage yields no audience; only a spawned row without the owner receipt predates the lineage receipts, and it logs a respawn instruction. A parent without a stored row spawns as before. Spawn rechecks a stored parent on the session read worker immediately before the child commits. Parent rows are read on the session read worker, and every captured hop holds a session generation lease, so currency checks stay synchronous and read-free. Audiences are bound to their session, released when the owning attempt or run ends, and delegated to same-agent children bound to the child's current incarnation. The host checks currency before and after opening a provider and around every provider call, and the guard it passes to a provider includes audience currency. The memory slot owner's own tools, Active Memory, and project recall also recheck it before their effects; other plugin tools reach memory only through the provider guard and do not fail on a stale audience. Session authority, plugin tool contexts, hook contexts, and Codex dynamic tools carry the audience. Native consumers cut over to it: Active Memory trigger, deep, and summary recall (caches keyed by audience; default deep-recall tools from the slot owner's recallToolNames; trigger recall runs only while tool policy allows every recall tool the provider declares), project recall, Memory Wiki, post-compaction provider refresh, doctor memory status and recall/search checks, and the status scan, which report provider health instead of legacy index counters. Legacy owners keep their trigger-recall gate, doctor and status ordering, and post-compaction sync without loading or calling the slot plugin to decide. * test(memory): consolidate memory audience tests Fold the real session-owner audience test into the shared real-lineage fixture, drop the spawn lineage unit test that the real-SQLite spawn tests already cover, share spawn parameters, and remove cases that only mirrored implementation (log text, mock passthrough, per-kind passthrough). * test(talk): expect lineage receipts on consult children |
||
|---|---|---|
| .. | ||
| oxlint | ||
| tsconfig | ||
| assertion-safety-baseline.txt | ||
| ci-test-timings.json | ||
| control-ui-startup-budget-baseline.json | ||
| env-var-count-budget.txt | ||
| knip.all-exports.config.ts | ||
| knip.config.ts | ||
| knip.scripts-exports.config.ts | ||
| markdownlint-cli2.jsonc | ||
| markdownlint-templates.jsonc | ||
| max-lines-baseline.txt | ||
| shellcheckrc | ||
| stylelint.config.mjs | ||
| swiftformat | ||
| swiftlint.yml | ||
| test-timeout-race-baseline.txt | ||