feat: add configurable auto-recall timeout with safer default

[AliceLJY]

Summary

• Add autoRecallTimeoutMs config option to control auto-recall startup timeout (default 8000ms)
• Wrap orchestrateDynamicRecall in Promise.race with the configurable timeout
• On timeout, log a warning and skip memory injection gracefully (no agent startup stall)

Problem

After the orchestrateDynamicRecall refactor, the before_agent_start hook had no timeout guard — slow embedding API calls could stall agent startup indefinitely. The previous beta.9 had a hard-coded 3000ms timeout which was too aggressive for remote embedding setups; the current main lost the timeout entirely.

Usage

{
  "autoRecallTimeoutMs": 12000
}

No change needed for existing users — default is 8000ms, up from the old 3000ms.

Changes

1 file changed, 17 insertions(+), 1 deletion(-)

• index.ts: Add autoRecallTimeoutMs to PluginConfig, add DEFAULT_AUTO_RECALL_TIMEOUT_MS constant, wrap recall pipeline in Promise.race timeout, parse config value in config resolver

Related

• feat: recallMode with adaptive intent routing and tiered injection #313 — recallMode config (complementary: controls recall granularity)
• Harden auto-recall with timeout and circuit breaker #254 — auto-recall circuit breaker (complementary: controls failure handling)
• Startup checks: retriever.test() frequently times out after 8000ms (OpenClaw 2026.3.2, WSL2) #60, [Bug] retriever.test() times out on startup even with working embedding API #218 — retriever.test() startup timeout issues (same latency theme)

Closes #314 — thanks @chinaboard for the detailed report.

Test plan

• All 37 existing tests pass
• Verify default 8000ms timeout applies when autoRecallTimeoutMs is not set
• Verify custom timeout (e.g. 12000) is respected
• Verify timeout triggers graceful skip with warning log, not a crash

🤖 Generated with Claude Code

[chinaboard]

index.ts parses autoRecallTimeoutMs, but openclaw.plugin.json still has additionalProperties: false and does not declare this key anywhere in configSchema/uiHints. As a result, normal config validation and settings-driven discovery will reject or hide the new option, so the feature is not actually configurable for users.

[chinaboard]

This Promise.race() only abandons the awaited result; it does not cancel orchestrateDynamicRecall(). That helper mutates per-session repeated-injection state before/after loadCandidates(), so a timed-out recall can still finish later in the background and mark rows as “already injected” even though nothing was added to the prompt for this turn.

[chinaboard]

This branch is still carrying an old package snapshot. Current master is already at 1.1.0-beta.9, so keeping beta.5 here means the PR is effectively built on a stale base and will roll version metadata backwards unless it is rebased/refreshed first.