@alfe.ai/openclaw-chat 0.3.0 → 0.3.2

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { a as createAlfeChannelPlugin, c as AlfeResolvedAccount, o as AlfeChannelConfig, r as plugin, s as AlfePluginConfig } from "./plugin.cjs";
+import { a as plugin, c as AlfeChannelConfig, l as AlfePluginConfig, s as createAlfeChannelPlugin, u as AlfeResolvedAccount } from "./plugin.cjs";
 
 //#region src/session-store.d.ts
 

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { a as createAlfeChannelPlugin, c as AlfeResolvedAccount, o as AlfeChannelConfig, r as plugin, s as AlfePluginConfig } from "./plugin.js";
+import { a as plugin, c as AlfeChannelConfig, l as AlfePluginConfig, s as createAlfeChannelPlugin, u as AlfeResolvedAccount } from "./plugin.js";
 
 //#region src/session-store.d.ts
 

package/dist/index.js

@@ -1,2 +1,2 @@
-import { a as createAlfeChannelPlugin, r as plugin } from "./plugin2.js";
+import { i as plugin, o as createAlfeChannelPlugin } from "./plugin2.js";
 export { createAlfeChannelPlugin, plugin as default };

package/dist/plugin.cjs

@@ -3,6 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_plugin = require("./plugin2.cjs");
+exports.admitAgentEvent = require_plugin.admitAgentEvent;
 exports.buildA2ACompletePayload = require_plugin.buildA2ACompletePayload;
 exports.buildToolActivity = require_plugin.buildToolActivity;
 exports.default = require_plugin.plugin;

package/dist/plugin.d.cts

@@ -268,6 +268,40 @@ interface AgentEventPayload {
   data: Record<string, unknown>;
   sessionKey?: string;
 }
+interface RunEventGate {
+  runId: string | null;
+  sessionKey: string | null;
+}
+/**
+ * Decide whether an agent-event belongs to THIS turn's run and should be
+ * forwarded as a delta / activity frame.
+ *
+ * Why gate on `runId`, not `sessionKey`:
+ * On OpenClaw 2026.x the daemon registers this ('alfe') channel's main run
+ * with `isControlUiVisible: false` — only the built-in "webchat" surface is
+ * treated as control-UI-visible (`isInternalMessageChannel`). The shared
+ * agent-event bus then NULLS `sessionKey` on every event of a
+ * non-control-UI run (`agent-events`: `sessionKey = isControlUiVisible ? … :
+ * undefined`). So main-run assistant/thinking/tool events arrive with
+ * `sessionKey: undefined`, and the old `!evt.sessionKey` + key-equality gate
+ * silently dropped ALL activity — replies still landed because they come via
+ * the `deliver()` callback, not the event bus (the reported "replies arrive,
+ * zero activity" symptom). Verified against openclaw@2026.6.10 and
+ * back-compatible with 2026.4.2 (identical emit semantics). `runId` is always
+ * present on every emitted event.
+ *
+ * Isolation is preserved: turns to a daemon are serialised
+ * (`enqueueAgentTurn`) and the listener is torn down before the next turn
+ * dispatches, so the first relevant event locks onto THIS turn's main run.
+ * Concurrent heartbeat/cron runs and subagent / side-question runs carry a
+ * different `runId` and are excluded — exactly the leakage the gate exists to
+ * prevent. When a run IS control-UI-visible and both keys are present, a
+ * mismatched `sessionKey` is still rejected as a secondary defence.
+ *
+ * Exported for unit tests — this gate is the fix's load-bearing logic and is
+ * pinned against real 2026.6.10 event shapes.
+ */
+declare function admitAgentEvent(gate: RunEventGate, evt: Pick<AgentEventPayload, 'runId' | 'stream' | 'sessionKey'>): boolean;
 interface PluginServiceContext {
   config: Record<string, unknown>;
   workspaceDir?: string;
@@ -362,4 +396,4 @@ declare const plugin: {
   deactivate(api: PluginApi): Promise<void>;
 };
 //#endregion
-export { createAlfeChannelPlugin as a, AlfeResolvedAccount as c, stripLeakedToolSummary as i, buildToolActivity as n, AlfeChannelConfig as o, plugin as r, AlfePluginConfig as s, buildA2ACompletePayload as t };
+export { plugin as a, AlfeChannelConfig as c, buildToolActivity as i, AlfePluginConfig as l, admitAgentEvent as n, stripLeakedToolSummary as o, buildA2ACompletePayload as r, createAlfeChannelPlugin as s, RunEventGate as t, AlfeResolvedAccount as u };

package/dist/plugin.d.ts

@@ -268,6 +268,40 @@ interface AgentEventPayload {
   data: Record<string, unknown>;
   sessionKey?: string;
 }
+interface RunEventGate {
+  runId: string | null;
+  sessionKey: string | null;
+}
+/**
+ * Decide whether an agent-event belongs to THIS turn's run and should be
+ * forwarded as a delta / activity frame.
+ *
+ * Why gate on `runId`, not `sessionKey`:
+ * On OpenClaw 2026.x the daemon registers this ('alfe') channel's main run
+ * with `isControlUiVisible: false` — only the built-in "webchat" surface is
+ * treated as control-UI-visible (`isInternalMessageChannel`). The shared
+ * agent-event bus then NULLS `sessionKey` on every event of a
+ * non-control-UI run (`agent-events`: `sessionKey = isControlUiVisible ? … :
+ * undefined`). So main-run assistant/thinking/tool events arrive with
+ * `sessionKey: undefined`, and the old `!evt.sessionKey` + key-equality gate
+ * silently dropped ALL activity — replies still landed because they come via
+ * the `deliver()` callback, not the event bus (the reported "replies arrive,
+ * zero activity" symptom). Verified against openclaw@2026.6.10 and
+ * back-compatible with 2026.4.2 (identical emit semantics). `runId` is always
+ * present on every emitted event.
+ *
+ * Isolation is preserved: turns to a daemon are serialised
+ * (`enqueueAgentTurn`) and the listener is torn down before the next turn
+ * dispatches, so the first relevant event locks onto THIS turn's main run.
+ * Concurrent heartbeat/cron runs and subagent / side-question runs carry a
+ * different `runId` and are excluded — exactly the leakage the gate exists to
+ * prevent. When a run IS control-UI-visible and both keys are present, a
+ * mismatched `sessionKey` is still rejected as a secondary defence.
+ *
+ * Exported for unit tests — this gate is the fix's load-bearing logic and is
+ * pinned against real 2026.6.10 event shapes.
+ */
+declare function admitAgentEvent(gate: RunEventGate, evt: Pick<AgentEventPayload, 'runId' | 'stream' | 'sessionKey'>): boolean;
 interface PluginServiceContext {
   config: Record<string, unknown>;
   workspaceDir?: string;
@@ -362,4 +396,4 @@ declare const plugin: {
   deactivate(api: PluginApi): Promise<void>;
 };
 //#endregion
-export { createAlfeChannelPlugin as a, AlfeResolvedAccount as c, stripLeakedToolSummary as i, buildToolActivity as n, AlfeChannelConfig as o, plugin as r, AlfePluginConfig as s, buildA2ACompletePayload as t };
+export { plugin as a, AlfeChannelConfig as c, buildToolActivity as i, AlfePluginConfig as l, admitAgentEvent as n, stripLeakedToolSummary as o, buildA2ACompletePayload as r, createAlfeChannelPlugin as s, RunEventGate as t, AlfeResolvedAccount as u };

package/dist/plugin.js

@@ -1,2 +1,2 @@
-import { i as stripLeakedToolSummary, n as buildToolActivity, r as plugin, t as buildA2ACompletePayload } from "./plugin2.js";
-export { buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };
+import { a as stripLeakedToolSummary, i as plugin, n as buildA2ACompletePayload, r as buildToolActivity, t as admitAgentEvent } from "./plugin2.js";
+export { admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };

package/dist/plugin2.cjs

@@ -864,6 +864,45 @@ function extractResultText(result) {
 */
 const require$1 = (0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
 const pkg = require$1("../package.json");
+/**
+* Decide whether an agent-event belongs to THIS turn's run and should be
+* forwarded as a delta / activity frame.
+*
+* Why gate on `runId`, not `sessionKey`:
+* On OpenClaw 2026.x the daemon registers this ('alfe') channel's main run
+* with `isControlUiVisible: false` — only the built-in "webchat" surface is
+* treated as control-UI-visible (`isInternalMessageChannel`). The shared
+* agent-event bus then NULLS `sessionKey` on every event of a
+* non-control-UI run (`agent-events`: `sessionKey = isControlUiVisible ? … :
+* undefined`). So main-run assistant/thinking/tool events arrive with
+* `sessionKey: undefined`, and the old `!evt.sessionKey` + key-equality gate
+* silently dropped ALL activity — replies still landed because they come via
+* the `deliver()` callback, not the event bus (the reported "replies arrive,
+* zero activity" symptom). Verified against openclaw@2026.6.10 and
+* back-compatible with 2026.4.2 (identical emit semantics). `runId` is always
+* present on every emitted event.
+*
+* Isolation is preserved: turns to a daemon are serialised
+* (`enqueueAgentTurn`) and the listener is torn down before the next turn
+* dispatches, so the first relevant event locks onto THIS turn's main run.
+* Concurrent heartbeat/cron runs and subagent / side-question runs carry a
+* different `runId` and are excluded — exactly the leakage the gate exists to
+* prevent. When a run IS control-UI-visible and both keys are present, a
+* mismatched `sessionKey` is still rejected as a secondary defence.
+*
+* Exported for unit tests — this gate is the fix's load-bearing logic and is
+* pinned against real 2026.6.10 event shapes.
+*/
+function admitAgentEvent(gate, evt) {
+	if (!(evt.stream === "assistant" || evt.stream === "thinking" || evt.stream === "tool")) return false;
+	if (gate.runId === null) {
+		gate.runId = evt.runId;
+		if (evt.sessionKey) gate.sessionKey ??= evt.sessionKey;
+	}
+	if (evt.runId !== gate.runId) return false;
+	if (gate.sessionKey && evt.sessionKey && evt.sessionKey !== gate.sessionKey) return false;
+	return true;
+}
 function asString(v) {
 	return typeof v === "string" && v.length > 0 ? v : void 0;
 }
@@ -1128,7 +1167,10 @@ async function handleAgentRequest(request, log) {
 	const sessionId = conversationId ?? legacySessionKey;
 	if (!await getSession(sessionId)) await createSession(sessionId, "", "alfe", tenantId, userId);
 	await addMessage(sessionId, "user", message, userId ?? senderId, displayName ?? senderId);
-	let resolvedOpenClawKey = null;
+	const runGate = {
+		runId: null,
+		sessionKey: null
+	};
 	const UPDATE_THROTTLE_MS = 250;
 	const pendingUpdates = /* @__PURE__ */ new Map();
 	const flushToolUpdate = (toolCallId) => {
@@ -1143,9 +1185,7 @@ async function handleAgentRequest(request, log) {
 		pendingUpdates.clear();
 	};
 	const unsubscribe = runtime.events.onAgentEvent((evt) => {
-		if (!evt.sessionKey) return;
-		if (evt.stream === "assistant" || evt.stream === "thinking" || evt.stream === "tool") resolvedOpenClawKey ??= evt.sessionKey;
-		if (evt.sessionKey !== resolvedOpenClawKey) return;
+		if (!admitAgentEvent(runGate, evt)) return;
 		if (evt.stream === "assistant") {
 			chatClient?.sendEvent("chat", {
 				runId: evt.runId,
@@ -1223,7 +1263,7 @@ async function handleAgentRequest(request, log) {
 		const conversationLabel = conversationType === "group" ? shortConvId ? `[${channelLabel}] Group (${shortConvId})` : `[${channelLabel}] Group` : shortConvId ? `[${channelLabel}] ${userLabel} (${shortConvId})` : `[${channelLabel}] ${userLabel}`;
 		let a2aResponseBuffer = "";
 		if (isA2A) resetA2AEndSignal();
-		resolvedOpenClawKey = (await dispatchInbound({
+		runGate.sessionKey = (await dispatchInbound({
 			cfg,
 			runtime: { channel: runtime.channel },
 			channel: "alfe",
@@ -1276,7 +1316,7 @@ async function handleAgentRequest(request, log) {
 				chatClient?.notify("agent-message", {
 					conversationId: conversationId ?? legacySessionKey,
 					text: responseText,
-					sessionKey: resolvedOpenClawKey ?? legacySessionKey,
+					sessionKey: runGate.sessionKey ?? legacySessionKey,
 					messageId: chatMessageId ?? request.id,
 					...mediaUrls.length ? { mediaUrls } : {}
 				});
@@ -1297,8 +1337,8 @@ async function handleAgentRequest(request, log) {
 				resolved: a2aResolved
 			}));
 		}
-		chatClient?.sendResponse(request.id, true, { sessionKey: resolvedOpenClawKey });
-		log.info(`Agent dispatch complete: sessionKey=${resolvedOpenClawKey}`);
+		chatClient?.sendResponse(request.id, true, { sessionKey: runGate.sessionKey });
+		log.info(`Agent dispatch complete: sessionKey=${runGate.sessionKey}`);
 	} catch (err) {
 		const errMsg = err instanceof Error ? err.message : String(err);
 		log.error(`Agent dispatch failed: ${errMsg}`);
@@ -1534,6 +1574,12 @@ const plugin = {
 	}
 };
 //#endregion
+Object.defineProperty(exports, "admitAgentEvent", {
+	enumerable: true,
+	get: function() {
+		return admitAgentEvent;
+	}
+});
 Object.defineProperty(exports, "buildA2ACompletePayload", {
 	enumerable: true,
 	get: function() {

package/dist/plugin2.d.cts

@@ -1,2 +1,2 @@
-import { i as stripLeakedToolSummary, n as buildToolActivity, r as plugin, t as buildA2ACompletePayload } from "./plugin.cjs";
-export { buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };
+import { a as plugin, i as buildToolActivity, n as admitAgentEvent, o as stripLeakedToolSummary, r as buildA2ACompletePayload, t as RunEventGate } from "./plugin.cjs";
+export { RunEventGate, admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };

package/dist/plugin2.d.ts

@@ -1,2 +1,2 @@
-import { i as stripLeakedToolSummary, n as buildToolActivity, r as plugin, t as buildA2ACompletePayload } from "./plugin.js";
-export { buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };
+import { a as plugin, i as buildToolActivity, n as admitAgentEvent, o as stripLeakedToolSummary, r as buildA2ACompletePayload, t as RunEventGate } from "./plugin.js";
+export { RunEventGate, admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, stripLeakedToolSummary };

package/dist/plugin2.js

@@ -864,6 +864,45 @@ function extractResultText(result) {
 */
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
+/**
+* Decide whether an agent-event belongs to THIS turn's run and should be
+* forwarded as a delta / activity frame.
+*
+* Why gate on `runId`, not `sessionKey`:
+* On OpenClaw 2026.x the daemon registers this ('alfe') channel's main run
+* with `isControlUiVisible: false` — only the built-in "webchat" surface is
+* treated as control-UI-visible (`isInternalMessageChannel`). The shared
+* agent-event bus then NULLS `sessionKey` on every event of a
+* non-control-UI run (`agent-events`: `sessionKey = isControlUiVisible ? … :
+* undefined`). So main-run assistant/thinking/tool events arrive with
+* `sessionKey: undefined`, and the old `!evt.sessionKey` + key-equality gate
+* silently dropped ALL activity — replies still landed because they come via
+* the `deliver()` callback, not the event bus (the reported "replies arrive,
+* zero activity" symptom). Verified against openclaw@2026.6.10 and
+* back-compatible with 2026.4.2 (identical emit semantics). `runId` is always
+* present on every emitted event.
+*
+* Isolation is preserved: turns to a daemon are serialised
+* (`enqueueAgentTurn`) and the listener is torn down before the next turn
+* dispatches, so the first relevant event locks onto THIS turn's main run.
+* Concurrent heartbeat/cron runs and subagent / side-question runs carry a
+* different `runId` and are excluded — exactly the leakage the gate exists to
+* prevent. When a run IS control-UI-visible and both keys are present, a
+* mismatched `sessionKey` is still rejected as a secondary defence.
+*
+* Exported for unit tests — this gate is the fix's load-bearing logic and is
+* pinned against real 2026.6.10 event shapes.
+*/
+function admitAgentEvent(gate, evt) {
+	if (!(evt.stream === "assistant" || evt.stream === "thinking" || evt.stream === "tool")) return false;
+	if (gate.runId === null) {
+		gate.runId = evt.runId;
+		if (evt.sessionKey) gate.sessionKey ??= evt.sessionKey;
+	}
+	if (evt.runId !== gate.runId) return false;
+	if (gate.sessionKey && evt.sessionKey && evt.sessionKey !== gate.sessionKey) return false;
+	return true;
+}
 function asString(v) {
 	return typeof v === "string" && v.length > 0 ? v : void 0;
 }
@@ -1128,7 +1167,10 @@ async function handleAgentRequest(request, log) {
 	const sessionId = conversationId ?? legacySessionKey;
 	if (!await getSession(sessionId)) await createSession(sessionId, "", "alfe", tenantId, userId);
 	await addMessage(sessionId, "user", message, userId ?? senderId, displayName ?? senderId);
-	let resolvedOpenClawKey = null;
+	const runGate = {
+		runId: null,
+		sessionKey: null
+	};
 	const UPDATE_THROTTLE_MS = 250;
 	const pendingUpdates = /* @__PURE__ */ new Map();
 	const flushToolUpdate = (toolCallId) => {
@@ -1143,9 +1185,7 @@ async function handleAgentRequest(request, log) {
 		pendingUpdates.clear();
 	};
 	const unsubscribe = runtime.events.onAgentEvent((evt) => {
-		if (!evt.sessionKey) return;
-		if (evt.stream === "assistant" || evt.stream === "thinking" || evt.stream === "tool") resolvedOpenClawKey ??= evt.sessionKey;
-		if (evt.sessionKey !== resolvedOpenClawKey) return;
+		if (!admitAgentEvent(runGate, evt)) return;
 		if (evt.stream === "assistant") {
 			chatClient?.sendEvent("chat", {
 				runId: evt.runId,
@@ -1223,7 +1263,7 @@ async function handleAgentRequest(request, log) {
 		const conversationLabel = conversationType === "group" ? shortConvId ? `[${channelLabel}] Group (${shortConvId})` : `[${channelLabel}] Group` : shortConvId ? `[${channelLabel}] ${userLabel} (${shortConvId})` : `[${channelLabel}] ${userLabel}`;
 		let a2aResponseBuffer = "";
 		if (isA2A) resetA2AEndSignal();
-		resolvedOpenClawKey = (await dispatchInbound({
+		runGate.sessionKey = (await dispatchInbound({
 			cfg,
 			runtime: { channel: runtime.channel },
 			channel: "alfe",
@@ -1276,7 +1316,7 @@ async function handleAgentRequest(request, log) {
 				chatClient?.notify("agent-message", {
 					conversationId: conversationId ?? legacySessionKey,
 					text: responseText,
-					sessionKey: resolvedOpenClawKey ?? legacySessionKey,
+					sessionKey: runGate.sessionKey ?? legacySessionKey,
 					messageId: chatMessageId ?? request.id,
 					...mediaUrls.length ? { mediaUrls } : {}
 				});
@@ -1297,8 +1337,8 @@ async function handleAgentRequest(request, log) {
 				resolved: a2aResolved
 			}));
 		}
-		chatClient?.sendResponse(request.id, true, { sessionKey: resolvedOpenClawKey });
-		log.info(`Agent dispatch complete: sessionKey=${resolvedOpenClawKey}`);
+		chatClient?.sendResponse(request.id, true, { sessionKey: runGate.sessionKey });
+		log.info(`Agent dispatch complete: sessionKey=${runGate.sessionKey}`);
 	} catch (err) {
 		const errMsg = err instanceof Error ? err.message : String(err);
 		log.error(`Agent dispatch failed: ${errMsg}`);
@@ -1534,4 +1574,4 @@ const plugin = {
 	}
 };
 //#endregion
-export { createAlfeChannelPlugin as a, stripLeakedToolSummary as i, buildToolActivity as n, plugin as r, buildA2ACompletePayload as t };
+export { stripLeakedToolSummary as a, plugin as i, buildA2ACompletePayload as n, createAlfeChannelPlugin as o, buildToolActivity as r, admitAgentEvent as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-chat",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "OpenClaw chat plugin for Alfe — web widget and mobile app channels",
   "type": "module",
   "main": "./dist/plugin.js",
@@ -28,8 +28,8 @@
   ],
   "dependencies": {
     "@alfe.ai/agent-api-client": "^0.4.0",
-    "@alfe.ai/chat": "^0.0.13",
-    "@alfe.ai/config": "^0.2.0"
+    "@alfe.ai/chat": "^0.0.14",
+    "@alfe.ai/config": "^0.3.0"
   },
   "peerDependencies": {
     "openclaw": ">=2026.3.0"