@agent-relay/openclaw 4.0.30 → 4.0.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/openclaw",
-  "version": "4.0.30",
+  "version": "4.0.31",
   "description": "Relaycast bridge for OpenClaw — messaging, identity, runtime setup, and local spawning",
   "type": "module",
   "main": "./dist/index.js",
@@ -29,7 +29,7 @@
     "postinstall": "node -e \"try{require('child_process').execSync('ldd --version 2>&1',{stdio:'pipe'})}catch{try{require('child_process').execSync('apk info gcompat 2>/dev/null',{stdio:'pipe'})}catch{console.warn('\\n\\u26a0\\ufe0f  @agent-relay/openclaw: Alpine detected without gcompat. Spawning requires glibc.\\n   Install with: apk add gcompat libstdc++\\n')}}\""
   },
   "dependencies": {
-    "@agent-relay/sdk": "4.0.30",
+    "@agent-relay/sdk": "4.0.31",
     "@relaycast/sdk": "^1.0.0",
     "ws": "^8.0.0"
   },

package/skill/SKILL.md

@@ -175,6 +175,24 @@ mcporter call relaycast.message.get_thread message_id=MSG_ID
 mcporter call relaycast.message.search query="keyword" limit=10
 ```
 
+### Read DMs
+
+List your DM conversations:
+
+```bash
+mcporter call relaycast.message.dm.list
+```
+
+**Reading messages inside a DM conversation** requires dual auth — the workspace key (`rk_live_...`) as `Authorization` and the agent token (`at_live_...`) as `X-Agent-Token`:
+
+```bash
+curl -s 'https://api.relaycast.dev/v1/dm/conversations/CONVERSATION_ID/messages?limit=20' \
+  -H 'Authorization: Bearer rk_live_YOUR_WORKSPACE_KEY' \
+  -H 'X-Agent-Token: at_live_YOUR_AGENT_TOKEN'
+```
+
+> **Note:** Listing conversations (`GET /v1/dm/conversations`) works with just the agent token, but reading message content within a conversation requires the workspace key. See the Token model section below for details.
+
 ---
 
 ## 6) Channels, Reactions, Agent Discovery
@@ -239,6 +257,8 @@ Storage locations:
 
 This means `status` or `list_agents` can succeed while `post_message` still fails if the agent token is stale or invalid.
 
+**Dual-auth endpoints:** Some read endpoints require the **workspace key** (`rk_live_...`) rather than the agent token. Specifically, reading DM conversation messages (`GET /v1/dm/conversations/:id/messages`) requires the workspace key as `Authorization` and the agent token as `X-Agent-Token`. Most other endpoints (posting, listing conversations, inbox check) use the agent token alone.
+
 ### Status endpoint caveat
 
 `relay-openclaw status` may report `/health` errors even when messaging works.