Fix OpenClaw ingest schema rejecting content_class

## Summary
Fix the OpenClaw plugin's `memory_ingest` tool schema, which silently rejected every verbatim ingest because it never declared the `contentClass` parameter, and add a CI check that verifies every plugin surface can satisfy the content-class contract.

## Changes
- Add a `contentClass` enum (`summary`, `redacted`, `raw`) to OpenClaw's `memory_ingest` schema, forwarded to MCP as a top-level argument rather than nested under `metadata`.
- Add regression tests confirming the schema declares `contentClass` and that it is forwarded correctly on a live call.
- Add `scripts/check-ingest-contract-conformance.mjs`, a CI check that verifies every plugin in the release family (MCP server, OpenClaw, Hermes, Claude Code, Codex, Cursor) declares, stamps, or delegates `content_class` handling, with structural checks that reject commented-out or handler-only mentions.
- Wire the new conformance check and its unit tests into CI.
- Export `families` from `scripts/version-families.mjs` so the conformance check can enumerate plugin family members instead of duplicating the list.
- Fix llmwiki provider tests to use per-test temp directories instead of a shared `/tmp/x` path, removing a source of cross-process test flakiness.
- Bump plugin package and manifest versions to 0.2.1.

## Why
Core defaults to `RAW_CONTENT_POLICY=reject`, so an unstamped verbatim ingest is refused with a 422. Because OpenClaw's tool schema sets `additionalProperties: false`, a call without a declared `contentClass` property was rejected before it ever reached MCP — making verbatim ingest impossible from OpenClaw even though its docs and skill instructions already told the agent to send it. The conformance check closes the gap that let this ship: it enumerates every plugin in the release family and fails if a new or existing surface can't demonstrably satisfy the contract.

## Validation
- Added unit tests for the OpenClaw schema and tool-call forwarding behavior.
- Added unit tests for the new conformance check covering declaring, stamping, and delegating surfaces, missing files, and unmapped family members.
- Wired both test suites into the CI workflow.

Author: ethanj

.claude-plugin/marketplace.json

@@ -12,7 +12,7 @@
       "name": "claude-code",
       "source": "./plugins/claude-code",
       "description": "Persistent semantic memory for Claude Code - user preferences, project context, prior decisions, and codebase facts that survive across sessions.",
-      "version": "0.2.0",
+      "version": "0.2.1",
       "category": "productivity",
       "homepage": "https://docs.atomicstrata.ai/integrations/coding-agents/claude-code",
       "license": "Apache-2.0"

.github/workflows/ci.yml

@@ -78,6 +78,15 @@ jobs:
         run: node scripts/ci/release-policy.mjs
       - name: Run release-policy unit tests
         run: node --test scripts/ci/__tests__/release-policy.test.mjs
+      # Every surface that can write a verbatim memory must be able to stamp
+      # content_class. The 0.2.0 release fixed Hermes for Core's raw-content
+      # policy and missed OpenClaw, whose published plugin could not perform a
+      # verbatim ingest at all. Tests run first: a conformance check whose own
+      # logic is unverified is not evidence of anything.
+      - name: Run ingest contract conformance tests
+        run: node --test scripts/ci/__tests__/ingest-contract-conformance.test.mjs
+      - name: Check ingest contract conformance
+        run: node scripts/check-ingest-contract-conformance.mjs
       - name: Run guard unit tests
         run: node --test scripts/guards/__tests__/*.test.mjs
 

package.json

@@ -42,7 +42,8 @@
     "ci:code-health": "node scripts/ci/code-health.mjs --verify && (turbo run code-health --affected || turbo run code-health)",
     "ci:pack-dry-run": "turbo run build && node scripts/ci/pack-dry-run.mjs",
     "ci:docs-contract": "turbo run docs-contract",
-    "ci:public-smoke": "turbo run public-integration-smoke"
+    "ci:public-smoke": "turbo run public-integration-smoke",
+    "ci:contract-conformance": "node scripts/check-ingest-contract-conformance.mjs"
   },
   "devDependencies": {
     "@typescript-eslint/parser": "^8.59.3",

packages/llmwiki/src/__tests__/live-provider.test.ts

@@ -6,17 +6,26 @@
 import { describe, it } from "node:test";
 import assert from "node:assert/strict";
 import { mkdtemp } from "node:fs/promises";
+import { mkdtempSync } from "node:fs";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { LiveLLMWikiProvider } from "../live/provider.ts";
 
+// A real, private directory. These constructor tests previously hardcoded
+// TMP_ROOT, which is a shared path any process on the host can occupy. When it
+// exists as a FILE, createWiki() fails with "root exists but is not a
+// directory" and the positive cases fail, while the negative cases still pass
+// because scope validation throws before touching the filesystem. That made the
+// suite dependent on ambient host state rather than hermetic.
+const TMP_ROOT = mkdtempSync(path.join(tmpdir(), "llmwiki-provider-"));
+
 const scope = { user: "u1" };
 const mk = (root: string) => new LiveLLMWikiProvider({ root, scope, projectId: "proj-1" });
 
 describe("LiveLLMWikiProvider", () => {
   it("requires projectId", () => {
     assert.throws(
-      () => new (LiveLLMWikiProvider as any)({ root: "/tmp/x", scope }),
+      () => new (LiveLLMWikiProvider as any)({ root: TMP_ROOT, scope }),
       (e: any) => e?.code === "E_LLMWIKI_PROJECT_ID_REQUIRED",
     );
   });
@@ -64,7 +73,7 @@ describe("LiveLLMWikiProvider", () => {
   });
 
   it("capabilities advertises text/messages/verbatim + package", () => {
-    const c = mk("/tmp/whatever").capabilities();
+    const c = mk(TMP_ROOT).capabilities();
     assert.deepEqual(c.ingestModes, ["text", "messages", "verbatim"]);
     assert.equal(c.extensions.package, true);
   });
@@ -260,28 +269,28 @@ describe("LiveLLMWikiProvider scope is copied at the boundary (no reference leak
 describe("LiveLLMWikiProvider construction scope validation (FIX G)", () => {
   it("throws E_LLMWIKI_PROVIDER_SCOPE_MISMATCH when scope is empty {}", () => {
     assert.throws(
-      () => new LiveLLMWikiProvider({ root: "/tmp/x", scope: {}, projectId: "proj-1" }),
+      () => new LiveLLMWikiProvider({ root: TMP_ROOT, scope: {}, projectId: "proj-1" }),
       (e: any) => e?.code === "E_LLMWIKI_PROVIDER_SCOPE_MISMATCH",
     );
   });
 
   it("throws E_LLMWIKI_PROVIDER_SCOPE_MISMATCH when required field 'user' is missing", () => {
     assert.throws(
-      () => new LiveLLMWikiProvider({ root: "/tmp/x", scope: { namespace: "ns" }, projectId: "proj-1" }),
+      () => new LiveLLMWikiProvider({ root: TMP_ROOT, scope: { namespace: "ns" }, projectId: "proj-1" }),
       (e: any) => e?.code === "E_LLMWIKI_PROVIDER_SCOPE_MISMATCH",
     );
   });
 
   it("throws E_LLMWIKI_PROVIDER_SCOPE_MISMATCH when 'user' is empty string", () => {
     assert.throws(
-      () => new LiveLLMWikiProvider({ root: "/tmp/x", scope: { user: "" }, projectId: "proj-1" }),
+      () => new LiveLLMWikiProvider({ root: TMP_ROOT, scope: { user: "" }, projectId: "proj-1" }),
       (e: any) => e?.code === "E_LLMWIKI_PROVIDER_SCOPE_MISMATCH",
     );
   });
 
   it("valid scope { user: 'u1' } constructs without throwing", () => {
     assert.doesNotThrow(
-      () => new LiveLLMWikiProvider({ root: "/tmp/x", scope: { user: "u1" }, projectId: "proj-1" }),
+      () => new LiveLLMWikiProvider({ root: TMP_ROOT, scope: { user: "u1" }, projectId: "proj-1" }),
     );
   });
 });

packages/llmwiki/src/__tests__/live-registration.test.ts

@@ -6,11 +6,17 @@
  */
 import { describe, it } from "node:test";
 import assert from "node:assert/strict";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
 import { liveLlmwikiProviderFactory, LiveLLMWikiProvider } from "../live.ts";
 
+// Private directory rather than the shared TMP_ROOT: see live-provider.test.ts.
+const TMP_ROOT = mkdtempSync(path.join(tmpdir(), "llmwiki-registration-"));
+
 describe("live registration + barrel", () => {
   it("factory returns a LiveLLMWikiProvider", () => {
-    const { provider } = liveLlmwikiProviderFactory({ root: "/tmp/x", scope: { user: "u1" }, projectId: "proj-1" });
+    const { provider } = liveLlmwikiProviderFactory({ root: TMP_ROOT, scope: { user: "u1" }, projectId: "proj-1" });
     assert.ok(provider instanceof LiveLLMWikiProvider);
   });
 });

plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atomicmemory",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Persistent semantic memory for Claude Code — user preferences, project context, prior decisions, and codebase facts that survive across sessions.",
   "author": {
     "name": "AtomicMemory",

plugins/claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atomicmemory/claude-code-plugin",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "AtomicMemory plugin for Claude Code — persistent semantic memory across sessions.",
   "private": false,
   "license": "Apache-2.0",

plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atomicmemory",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "AtomicMemory memory layer for Codex. Pluggable semantic memory — swap backends through the SDK's MemoryProvider model by config, not code change.",
   "author": {
     "name": "AtomicMemory",

plugins/codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atomicmemory/codex-plugin",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "AtomicMemory plugin for OpenAI Codex — plugin manifest, MCP server config, and memory protocol skill.",
   "private": true,
   "license": "Apache-2.0",

plugins/codex/skills/atomicmemory/SKILL.md

@@ -10,7 +10,7 @@ description: >
 license: Apache-2.0
 metadata:
   author: AtomicMemory
-  version: "0.2.0"
+  version: "0.2.1"
   category: ai-memory
   tags: "memory, semantic-search, codex, pluggable"
 ---