fix(capture): filter system-injected boot/heartbeat/sentinel replies from memory (#1298) (#1302)

## Summary

Filter out system-injected prompts and sentinel replies that were
leaking into long-term memory:

- **Sentinel replies** (`NO_REPLY`, `HEARTBEAT_OK`, `HEARTBEAT_CHECK`)
are now skipped in `captureMessages()` for all roles
- **Boot-check prompts** (e.g. "You are running a boot check", "##
Memory system — ACTION REQUIRED") are filtered before storage
- **`stripMemoryInjection()`** expanded with additional patterns for
boot-check text and standalone sentinel values in user messages

## 修复说明

过滤掉泄露到长期记忆中的系统注入提示和哨兵回复：

- 哨兵回复（`NO_REPLY`、`HEARTBEAT_OK`、`HEARTBEAT_CHECK`）在 `captureMessages()`
中对所有角色跳过
- 启动检查提示（如"You are running a boot check"、"## Memory system — ACTION
REQUIRED"）在存储前被过滤
- `stripMemoryInjection()` 增加了启动检查文本和用户消息中独立哨兵值的额外匹配模式

Closes #1298

Author: syzsunshine219

apps/memos-local-openclaw/src/capture/index.ts

@@ -4,6 +4,17 @@ const SKIP_ROLES: Set<Role> = new Set(["system"]);
 
 const SYSTEM_BOILERPLATE_RE = /^A new session was started via \/new or \/reset\b/;
 
+// Boot-check / memory-system injection patterns that should never be stored.
+const BOOT_CHECK_RE = /^(?:You are running a boot check|Read HEARTBEAT\.md if it exists|## Memory system — ACTION REQUIRED)/;
+
+/**
+ * Returns true for sentinel reply values that carry no user-facing content.
+ */
+function isSentinelReply(text: string): boolean {
+  const t = text.trim();
+  return t === "NO_REPLY" || t === "HEARTBEAT_OK" || t === "HEARTBEAT_CHECK";
+}
+
 const SELF_TOOLS = new Set([
   "memory_search",
   "memory_timeline",
@@ -61,6 +72,16 @@ export function captureMessages(
     if (SKIP_ROLES.has(role)) continue;
     if (!msg.content || msg.content.trim().length === 0) continue;
 
+    // Skip sentinel replies and boot-check prompts for ALL roles.
+    if (isSentinelReply(msg.content)) {
+      log.debug(`Skipping sentinel reply`);
+      continue;
+    }
+    if (BOOT_CHECK_RE.test(msg.content.trim())) {
+      log.debug(`Skipping boot-check injection: ${msg.content.slice(0, 60)}...`);
+      continue;
+    }
+
     if (role === "tool" && msg.toolName && SELF_TOOLS.has(msg.toolName)) {
       log.debug(`Skipping self-tool result: ${msg.toolName}`);
       continue;
@@ -232,6 +253,21 @@ function stripMemoryInjection(text: string): string {
     "",
   ).trim();
 
+  // ## Memory system — ACTION REQUIRED\n...
+  cleaned = cleaned.replace(
+    /## Memory system — ACTION REQUIRED[\s\S]*?(?=\n\[(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)\s+\d{4}-\d{2}-\d{2}|\n\[Subagent)/,
+    "",
+  ).trim();
+
+  // You are running a boot check. Follow BOOT.md instructions exactly.\n...
+  cleaned = cleaned.replace(
+    /^You are running a boot check[\s\S]*?(?=\n\[(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)\s+\d{4}-\d{2}-\d{2}|\n\[Subagent)/m,
+    "",
+  ).trim();
+
+  // Standalone NO_REPLY / HEARTBEAT_OK that leaked into user messages
+  cleaned = cleaned.replace(/^\s*(?:NO_REPLY|HEARTBEAT_OK|HEARTBEAT_CHECK)\s*$/gm, "").trim();
+
   // Old format: ## Retrieved memories from past conversations\n\nCRITICAL INSTRUCTION:...
   const recallIdx = cleaned.indexOf("## Retrieved memories from past conversations");
   if (recallIdx !== -1) {