@alfe.ai/openclaw-chat 0.8.1 → 0.9.0

package/dist/index.d.cts

@@ -1,2 +1,2 @@
-import { _ as AlfeResolvedAccount, b as SessionSummary, g as AlfePluginConfig, h as AlfeChannelConfig, m as createAlfeChannelPlugin, u as plugin, v as ChatMessage, y as SessionData } from "./plugin.cjs";
+import { S as SessionSummary, _ as AlfeChannelConfig, b as ChatMessage, f as plugin, g as createAlfeChannelPlugin, v as AlfePluginConfig, x as SessionData, y as AlfeResolvedAccount } from "./plugin.cjs";
 export { type AlfeChannelConfig, type AlfePluginConfig, type AlfeResolvedAccount, type ChatMessage, type SessionData, type SessionSummary, createAlfeChannelPlugin, plugin as default };

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { _ as AlfeResolvedAccount, b as SessionSummary, g as AlfePluginConfig, h as AlfeChannelConfig, m as createAlfeChannelPlugin, u as plugin, v as ChatMessage, y as SessionData } from "./plugin.js";
+import { S as SessionSummary, _ as AlfeChannelConfig, b as ChatMessage, f as plugin, g as createAlfeChannelPlugin, v as AlfePluginConfig, x as SessionData, y as AlfeResolvedAccount } from "./plugin.js";
 export { type AlfeChannelConfig, type AlfePluginConfig, type AlfeResolvedAccount, type ChatMessage, type SessionData, type SessionSummary, createAlfeChannelPlugin, plugin as default };

package/dist/index.js

@@ -1,2 +1,2 @@
-import { c as plugin, f as createAlfeChannelPlugin } from "./plugin2.js";
+import { m as createAlfeChannelPlugin, u as plugin } from "./plugin2.js";
 export { createAlfeChannelPlugin, plugin as default };

package/dist/plugin.cjs

@@ -3,11 +3,13 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_plugin = require("./plugin2.cjs");
+exports.VOICE_REPLY_SYSTEM_PROMPT = require_plugin.VOICE_REPLY_SYSTEM_PROMPT;
 exports.__agentTurnQueueForTest = require_plugin.__agentTurnQueueForTest;
 exports.__resetAgentTurnQueueForTest = require_plugin.__resetAgentTurnQueueForTest;
 exports.__setActiveRunForTest = require_plugin.__setActiveRunForTest;
 exports.admitAgentEvent = require_plugin.admitAgentEvent;
 exports.buildA2ACompletePayload = require_plugin.buildA2ACompletePayload;
+exports.buildOriginEnvelopeContext = require_plugin.buildOriginEnvelopeContext;
 exports.buildToolActivity = require_plugin.buildToolActivity;
 exports.default = require_plugin.plugin;
 exports.joinAssistantText = require_plugin.joinAssistantText;

package/dist/plugin.d.cts

@@ -597,6 +597,38 @@ declare function __setActiveRunForTest(ref: ActiveRunRef | null): void;
  * never abort another session's run on a shared daemon.
  */
 declare function resolveAbortTargetKeys(active: ActiveRunRef | null, abortSessionKey: string | undefined): string[];
+/**
+ * Speech-style reply guidance injected into the agent's SYSTEM PROMPT for a
+ * live voice-call turn (`origin:'voice'`). The user is speaking on a call and
+ * the reply is read aloud by TTS, so a huge markdown paragraph reads terribly.
+ * This biases STYLE only — explicitly NOT a hard cap: it must not suppress tool
+ * use or make the agent omit information the user actually needs.
+ */
+declare const VOICE_REPLY_SYSTEM_PROMPT: string;
+/**
+ * Per-turn envelope context derived from the RPC `origin` flag. For a live
+ * voice call it returns a `GroupSystemPrompt` block, which is the PROVEN
+ * runtime-rendered seam for per-turn system-prompt guidance: dispatchInbound
+ * spreads `extraContext` into `finalizeInboundContext` → `sessionCtx.GroupSystemPrompt`
+ * → `extraSystemPrompt` → the model's system prompt (rendered under a
+ * "## Group Chat Context" heading; read unconditionally, NOT gated on group
+ * chats). Returns `{}` for every other origin, so text/A2A turns are unchanged.
+ *
+ * Why `GroupSystemPrompt` and not a bespoke key like `A2ASystemPrompt`: the
+ * OpenClaw runtime does NOT read arbitrary `extraContext` keys — a custom key
+ * only reaches the model if a persona/AGENTS.md template interpolates it, so it
+ * silently rots into a dead wire otherwise (the `thinking` param is the
+ * cautionary precedent). `GroupSystemPrompt` is verified to reach the system
+ * prompt via the runtime itself.
+ *
+ * Transcript stays clean: this only feeds the model's system prompt for THIS
+ * turn. The persisted user message (`addMessage(sessionId, 'user', message)`)
+ * and everything `sessions.get` returns are the raw user text — the guidance is
+ * never stored or broadcast.
+ *
+ * Exported pure for unit testing (mirrors the codebase's pure-helper pattern).
+ */
+declare function buildOriginEnvelopeContext(origin: string | undefined): Record<string, unknown>;
 declare const plugin: {
   id: string;
   name: string;
@@ -606,4 +638,4 @@ declare const plugin: {
   deactivate(api: PluginApi): Promise<void>;
 };
 //#endregion
-export { AlfeResolvedAccount as _, __setActiveRunForTest as a, SessionSummary as b, buildToolActivity as c, resolveAbortTargetKeys as d, rewriteAssistantText as f, AlfePluginConfig as g, AlfeChannelConfig as h, __resetAgentTurnQueueForTest as i, joinAssistantText as l, createAlfeChannelPlugin as m, RunEventGate as n, admitAgentEvent as o, stripLeakedToolSummary as p, __agentTurnQueueForTest as r, buildA2ACompletePayload as s, ActiveRunRef as t, plugin as u, ChatMessage as v, SessionData as y };
+export { SessionSummary as S, AlfeChannelConfig as _, __resetAgentTurnQueueForTest as a, ChatMessage as b, buildA2ACompletePayload as c, joinAssistantText as d, plugin as f, createAlfeChannelPlugin as g, stripLeakedToolSummary as h, __agentTurnQueueForTest as i, buildOriginEnvelopeContext as l, rewriteAssistantText as m, RunEventGate as n, __setActiveRunForTest as o, resolveAbortTargetKeys as p, VOICE_REPLY_SYSTEM_PROMPT as r, admitAgentEvent as s, ActiveRunRef as t, buildToolActivity as u, AlfePluginConfig as v, SessionData as x, AlfeResolvedAccount as y };

package/dist/plugin.d.ts

@@ -597,6 +597,38 @@ declare function __setActiveRunForTest(ref: ActiveRunRef | null): void;
  * never abort another session's run on a shared daemon.
  */
 declare function resolveAbortTargetKeys(active: ActiveRunRef | null, abortSessionKey: string | undefined): string[];
+/**
+ * Speech-style reply guidance injected into the agent's SYSTEM PROMPT for a
+ * live voice-call turn (`origin:'voice'`). The user is speaking on a call and
+ * the reply is read aloud by TTS, so a huge markdown paragraph reads terribly.
+ * This biases STYLE only — explicitly NOT a hard cap: it must not suppress tool
+ * use or make the agent omit information the user actually needs.
+ */
+declare const VOICE_REPLY_SYSTEM_PROMPT: string;
+/**
+ * Per-turn envelope context derived from the RPC `origin` flag. For a live
+ * voice call it returns a `GroupSystemPrompt` block, which is the PROVEN
+ * runtime-rendered seam for per-turn system-prompt guidance: dispatchInbound
+ * spreads `extraContext` into `finalizeInboundContext` → `sessionCtx.GroupSystemPrompt`
+ * → `extraSystemPrompt` → the model's system prompt (rendered under a
+ * "## Group Chat Context" heading; read unconditionally, NOT gated on group
+ * chats). Returns `{}` for every other origin, so text/A2A turns are unchanged.
+ *
+ * Why `GroupSystemPrompt` and not a bespoke key like `A2ASystemPrompt`: the
+ * OpenClaw runtime does NOT read arbitrary `extraContext` keys — a custom key
+ * only reaches the model if a persona/AGENTS.md template interpolates it, so it
+ * silently rots into a dead wire otherwise (the `thinking` param is the
+ * cautionary precedent). `GroupSystemPrompt` is verified to reach the system
+ * prompt via the runtime itself.
+ *
+ * Transcript stays clean: this only feeds the model's system prompt for THIS
+ * turn. The persisted user message (`addMessage(sessionId, 'user', message)`)
+ * and everything `sessions.get` returns are the raw user text — the guidance is
+ * never stored or broadcast.
+ *
+ * Exported pure for unit testing (mirrors the codebase's pure-helper pattern).
+ */
+declare function buildOriginEnvelopeContext(origin: string | undefined): Record<string, unknown>;
 declare const plugin: {
   id: string;
   name: string;
@@ -606,4 +638,4 @@ declare const plugin: {
   deactivate(api: PluginApi): Promise<void>;
 };
 //#endregion
-export { AlfeResolvedAccount as _, __setActiveRunForTest as a, SessionSummary as b, buildToolActivity as c, resolveAbortTargetKeys as d, rewriteAssistantText as f, AlfePluginConfig as g, AlfeChannelConfig as h, __resetAgentTurnQueueForTest as i, joinAssistantText as l, createAlfeChannelPlugin as m, RunEventGate as n, admitAgentEvent as o, stripLeakedToolSummary as p, __agentTurnQueueForTest as r, buildA2ACompletePayload as s, ActiveRunRef as t, plugin as u, ChatMessage as v, SessionData as y };
+export { SessionSummary as S, AlfeChannelConfig as _, __resetAgentTurnQueueForTest as a, ChatMessage as b, buildA2ACompletePayload as c, joinAssistantText as d, plugin as f, createAlfeChannelPlugin as g, stripLeakedToolSummary as h, __agentTurnQueueForTest as i, buildOriginEnvelopeContext as l, rewriteAssistantText as m, RunEventGate as n, __setActiveRunForTest as o, resolveAbortTargetKeys as p, VOICE_REPLY_SYSTEM_PROMPT as r, admitAgentEvent as s, ActiveRunRef as t, buildToolActivity as u, AlfePluginConfig as v, SessionData as x, AlfeResolvedAccount as y };

package/dist/plugin.js

@@ -1,2 +1,2 @@
-import { a as buildA2ACompletePayload, c as plugin, d as stripLeakedToolSummary, i as admitAgentEvent, l as resolveAbortTargetKeys, n as __resetAgentTurnQueueForTest, o as buildToolActivity, r as __setActiveRunForTest, s as joinAssistantText, t as __agentTurnQueueForTest, u as rewriteAssistantText } from "./plugin2.js";
-export { __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };
+import { a as admitAgentEvent, c as buildToolActivity, d as resolveAbortTargetKeys, f as rewriteAssistantText, i as __setActiveRunForTest, l as joinAssistantText, n as __agentTurnQueueForTest, o as buildA2ACompletePayload, p as stripLeakedToolSummary, r as __resetAgentTurnQueueForTest, s as buildOriginEnvelopeContext, t as VOICE_REPLY_SYSTEM_PROMPT, u as plugin } from "./plugin2.js";
+export { VOICE_REPLY_SYSTEM_PROMPT, __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildOriginEnvelopeContext, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };

package/dist/plugin2.cjs

@@ -106,9 +106,9 @@ function extensionOf(p) {
 function isRemoteUrl(ref) {
 	return /^https?:\/\//i.test(ref);
 }
-/** Non-http(s) URI schemes (data:, blob:, media://inbound claim-checks…) —
-* not local paths, nothing we can upload. Windows drive letters (C:\) are
-* paths, not schemes. */
+/** Non-http(s) URI schemes (data:, blob:, …) — not local paths, nothing we
+* can upload. Windows drive letters (C:\) are paths, not schemes.
+* `media://inbound/<id>` is handled separately (resolveOpenClawMediaPath). */
 function hasNonPathScheme(ref) {
 	if (/^file:\/\//i.test(ref)) return false;
 	if (/^[a-zA-Z]:[\\/]/.test(ref)) return false;
@@ -120,6 +120,34 @@ function resolveLocalMediaPath(ref) {
 	if (p === "~" || p.startsWith("~/")) p = (0, node_path.join)((0, node_os.homedir)(), p.slice(1));
 	return (0, node_path.isAbsolute)(p) ? p : (0, node_path.resolve)(process.cwd(), p);
 }
+const MEDIA_INBOUND_RE = /^media:\/\/inbound\/([^/\\]+)$/i;
+/** Resolve a `media://inbound/<id>` URI to its media-store file, or null if
+* the ref isn't one (or the id is unsafe). Traversal-hardened: the id must
+* be a single path segment. */
+function resolveOpenClawMediaPath(ref) {
+	const match = MEDIA_INBOUND_RE.exec(ref.trim());
+	if (!match) return null;
+	let id = match[1];
+	try {
+		id = decodeURIComponent(id);
+	} catch {}
+	if (!id || id === "." || id === ".." || /[/\\\0]/.test(id)) return null;
+	const stateDirOverride = process.env.OPENCLAW_STATE_DIR?.trim();
+	const home = process.env.OPENCLAW_HOME?.trim();
+	return (0, node_path.join)(stateDirOverride?.length ? stateDirOverride : (0, node_path.join)(home?.length ? home : (0, node_os.homedir)(), ".openclaw"), "media", "inbound", id);
+}
+/**
+* Map an outbound ref to the local file we would upload: media-store path
+* for `media://inbound/…`, filesystem path for path-shaped refs, null for
+* remote URLs and unsupported schemes (data:, blob:, …).
+*/
+function toLocalUploadPath(ref) {
+	if (isRemoteUrl(ref)) return null;
+	const mediaStorePath = resolveOpenClawMediaPath(ref);
+	if (mediaStorePath) return mediaStorePath;
+	if (hasNonPathScheme(ref)) return null;
+	return resolveLocalMediaPath(ref);
+}
 async function uploadLocalFile(localPath, log, deps) {
 	const client = deps.getClient ? deps.getClient() : getUploadClient(log);
 	if (!client) return null;
@@ -197,11 +225,11 @@ function resolveOutboundMediaRef(ref, ctx, log, deps = {}) {
 	const trimmed = ref.trim();
 	if (!trimmed) return Promise.resolve(null);
 	if (isRemoteUrl(trimmed)) return Promise.resolve({ url: trimmed });
-	if (hasNonPathScheme(trimmed)) {
+	const localPath = toLocalUploadPath(trimmed);
+	if (!localPath) {
 		log.warn(`Outbound media ref has unsupported scheme — skipping: ${trimmed.slice(0, 120)}`);
 		return Promise.resolve(null);
 	}
-	const localPath = resolveLocalMediaPath(trimmed);
 	const cached = ctx.uploads.get(localPath);
 	if (cached) return cached;
 	const promise = ctx.uploads.size >= 10 ? (() => {
@@ -230,8 +258,8 @@ async function resolveOutboundMedia(refs, ctx, log, deps = {}) {
 			attachments.push(resolved);
 			continue;
 		}
-		if (isRemoteUrl(trimmed) || hasNonPathScheme(trimmed)) continue;
-		const localPath = resolveLocalMediaPath(trimmed);
+		const localPath = toLocalUploadPath(trimmed);
+		if (!localPath) continue;
 		if (!ctx.annotatedFailures.has(localPath)) {
 			ctx.annotatedFailures.add(localPath);
 			newFailures.push((0, node_path.basename)(localPath));
@@ -327,11 +355,16 @@ async function rewriteLocalMarkdownImages(text, ctx, log, deps = {}) {
 			const start = match.index;
 			out += seg.text.slice(cursor, start);
 			cursor = start + full.length;
-			if (isRemoteUrl(src) || hasNonPathScheme(src)) {
+			if (isRemoteUrl(src)) {
 				out += full;
 				continue;
 			}
-			const ext = extensionOf(src.split("?")[0]);
+			const localPath = toLocalUploadPath(src);
+			if (!localPath) {
+				out += full;
+				continue;
+			}
+			const ext = extensionOf(localPath.split("?")[0]);
 			if (!ext || !IMAGE_EXTENSIONS.has(ext)) {
 				out += full;
 				continue;
@@ -2255,6 +2288,48 @@ function handleChatAbort(request, log) {
 	} else log.warn("chat.abort: OpenClaw abort primitives unavailable — cannot hard-abort the running turn");
 	chatClient?.sendResponse(request.id, true, { aborted });
 }
+/**
+* Speech-style reply guidance injected into the agent's SYSTEM PROMPT for a
+* live voice-call turn (`origin:'voice'`). The user is speaking on a call and
+* the reply is read aloud by TTS, so a huge markdown paragraph reads terribly.
+* This biases STYLE only — explicitly NOT a hard cap: it must not suppress tool
+* use or make the agent omit information the user actually needs.
+*/
+const VOICE_REPLY_SYSTEM_PROMPT = [
+	"This message arrived over a LIVE VOICE CALL — your reply is read aloud by text-to-speech.",
+	"Speak the way a helpful person would on a phone call:",
+	"- Keep it brief and conversational — usually 1-3 short sentences.",
+	"- Plain spoken language only: no markdown, no bullet or numbered lists, no headings, no code blocks, no URLs or link syntax.",
+	"- If the full answer is long or detailed, give the short spoken version and offer to send the details to the chat.",
+	"This is guidance on speaking STYLE only. Do NOT skip tool calls you would otherwise make, and never omit information the user actually needs — just deliver it the way you would say it out loud."
+].join("\n");
+/**
+* Per-turn envelope context derived from the RPC `origin` flag. For a live
+* voice call it returns a `GroupSystemPrompt` block, which is the PROVEN
+* runtime-rendered seam for per-turn system-prompt guidance: dispatchInbound
+* spreads `extraContext` into `finalizeInboundContext` → `sessionCtx.GroupSystemPrompt`
+* → `extraSystemPrompt` → the model's system prompt (rendered under a
+* "## Group Chat Context" heading; read unconditionally, NOT gated on group
+* chats). Returns `{}` for every other origin, so text/A2A turns are unchanged.
+*
+* Why `GroupSystemPrompt` and not a bespoke key like `A2ASystemPrompt`: the
+* OpenClaw runtime does NOT read arbitrary `extraContext` keys — a custom key
+* only reaches the model if a persona/AGENTS.md template interpolates it, so it
+* silently rots into a dead wire otherwise (the `thinking` param is the
+* cautionary precedent). `GroupSystemPrompt` is verified to reach the system
+* prompt via the runtime itself.
+*
+* Transcript stays clean: this only feeds the model's system prompt for THIS
+* turn. The persisted user message (`addMessage(sessionId, 'user', message)`)
+* and everything `sessions.get` returns are the raw user text — the guidance is
+* never stored or broadcast.
+*
+* Exported pure for unit testing (mirrors the codebase's pure-helper pattern).
+*/
+function buildOriginEnvelopeContext(origin) {
+	if (origin === "voice") return { GroupSystemPrompt: VOICE_REPLY_SYSTEM_PROMPT };
+	return {};
+}
 async function handleAgentRequest(request, log) {
 	const runtime = pluginRuntime;
 	if (!runtime) {
@@ -2265,7 +2340,7 @@ async function handleAgentRequest(request, log) {
 		chatClient?.sendResponse(request.id, false, { message: "OpenClaw SDK not available — cannot dispatch" });
 		return;
 	}
-	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, identityId, senderPermissions, attachments: rawAttachments, a2a, chatMessageId } = request.params;
+	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, origin, displayName, identityId, senderPermissions, attachments: rawAttachments, a2a, chatMessageId } = request.params;
 	const isA2A = !!a2a;
 	if (!message && !rawAttachments?.length) {
 		chatClient?.sendResponse(request.id, false, { message: "Missing message" });
@@ -2487,6 +2562,7 @@ async function handleAgentRequest(request, log) {
 				...userId ? { UserId: userId } : {},
 				...senderPermissions?.length ? { SenderPermissions: senderPermissions } : {},
 				ChannelMode: channelMode,
+				...buildOriginEnvelopeContext(origin),
 				...isA2A ? {
 					CallerType: "agent",
 					CallerAgentId: a2a.sourceAgentId,
@@ -2836,6 +2912,12 @@ const plugin = {
 	}
 };
 //#endregion
+Object.defineProperty(exports, "VOICE_REPLY_SYSTEM_PROMPT", {
+	enumerable: true,
+	get: function() {
+		return VOICE_REPLY_SYSTEM_PROMPT;
+	}
+});
 Object.defineProperty(exports, "__agentTurnQueueForTest", {
 	enumerable: true,
 	get: function() {
@@ -2866,6 +2948,12 @@ Object.defineProperty(exports, "buildA2ACompletePayload", {
 		return buildA2ACompletePayload;
 	}
 });
+Object.defineProperty(exports, "buildOriginEnvelopeContext", {
+	enumerable: true,
+	get: function() {
+		return buildOriginEnvelopeContext;
+	}
+});
 Object.defineProperty(exports, "buildToolActivity", {
 	enumerable: true,
 	get: function() {

package/dist/plugin2.d.cts

@@ -1,2 +1,2 @@
-import { a as __setActiveRunForTest, c as buildToolActivity, d as resolveAbortTargetKeys, f as rewriteAssistantText, i as __resetAgentTurnQueueForTest, l as joinAssistantText, n as RunEventGate, o as admitAgentEvent, p as stripLeakedToolSummary, r as __agentTurnQueueForTest, s as buildA2ACompletePayload, t as ActiveRunRef, u as plugin } from "./plugin.cjs";
-export { ActiveRunRef, RunEventGate, __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };
+import { a as __resetAgentTurnQueueForTest, c as buildA2ACompletePayload, d as joinAssistantText, f as plugin, h as stripLeakedToolSummary, i as __agentTurnQueueForTest, l as buildOriginEnvelopeContext, m as rewriteAssistantText, n as RunEventGate, o as __setActiveRunForTest, p as resolveAbortTargetKeys, r as VOICE_REPLY_SYSTEM_PROMPT, s as admitAgentEvent, t as ActiveRunRef, u as buildToolActivity } from "./plugin.cjs";
+export { ActiveRunRef, RunEventGate, VOICE_REPLY_SYSTEM_PROMPT, __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildOriginEnvelopeContext, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };

package/dist/plugin2.d.ts

@@ -1,2 +1,2 @@
-import { a as __setActiveRunForTest, c as buildToolActivity, d as resolveAbortTargetKeys, f as rewriteAssistantText, i as __resetAgentTurnQueueForTest, l as joinAssistantText, n as RunEventGate, o as admitAgentEvent, p as stripLeakedToolSummary, r as __agentTurnQueueForTest, s as buildA2ACompletePayload, t as ActiveRunRef, u as plugin } from "./plugin.js";
-export { ActiveRunRef, RunEventGate, __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };
+import { a as __resetAgentTurnQueueForTest, c as buildA2ACompletePayload, d as joinAssistantText, f as plugin, h as stripLeakedToolSummary, i as __agentTurnQueueForTest, l as buildOriginEnvelopeContext, m as rewriteAssistantText, n as RunEventGate, o as __setActiveRunForTest, p as resolveAbortTargetKeys, r as VOICE_REPLY_SYSTEM_PROMPT, s as admitAgentEvent, t as ActiveRunRef, u as buildToolActivity } from "./plugin.js";
+export { ActiveRunRef, RunEventGate, VOICE_REPLY_SYSTEM_PROMPT, __agentTurnQueueForTest, __resetAgentTurnQueueForTest, __setActiveRunForTest, admitAgentEvent, buildA2ACompletePayload, buildOriginEnvelopeContext, buildToolActivity, plugin as default, joinAssistantText, resolveAbortTargetKeys, rewriteAssistantText, stripLeakedToolSummary };

package/dist/plugin2.js

@@ -106,9 +106,9 @@ function extensionOf(p) {
 function isRemoteUrl(ref) {
 	return /^https?:\/\//i.test(ref);
 }
-/** Non-http(s) URI schemes (data:, blob:, media://inbound claim-checks…) —
-* not local paths, nothing we can upload. Windows drive letters (C:\) are
-* paths, not schemes. */
+/** Non-http(s) URI schemes (data:, blob:, …) — not local paths, nothing we
+* can upload. Windows drive letters (C:\) are paths, not schemes.
+* `media://inbound/<id>` is handled separately (resolveOpenClawMediaPath). */
 function hasNonPathScheme(ref) {
 	if (/^file:\/\//i.test(ref)) return false;
 	if (/^[a-zA-Z]:[\\/]/.test(ref)) return false;
@@ -120,6 +120,34 @@ function resolveLocalMediaPath(ref) {
 	if (p === "~" || p.startsWith("~/")) p = join(homedir(), p.slice(1));
 	return isAbsolute(p) ? p : resolve(process.cwd(), p);
 }
+const MEDIA_INBOUND_RE = /^media:\/\/inbound\/([^/\\]+)$/i;
+/** Resolve a `media://inbound/<id>` URI to its media-store file, or null if
+* the ref isn't one (or the id is unsafe). Traversal-hardened: the id must
+* be a single path segment. */
+function resolveOpenClawMediaPath(ref) {
+	const match = MEDIA_INBOUND_RE.exec(ref.trim());
+	if (!match) return null;
+	let id = match[1];
+	try {
+		id = decodeURIComponent(id);
+	} catch {}
+	if (!id || id === "." || id === ".." || /[/\\\0]/.test(id)) return null;
+	const stateDirOverride = process.env.OPENCLAW_STATE_DIR?.trim();
+	const home = process.env.OPENCLAW_HOME?.trim();
+	return join(stateDirOverride?.length ? stateDirOverride : join(home?.length ? home : homedir(), ".openclaw"), "media", "inbound", id);
+}
+/**
+* Map an outbound ref to the local file we would upload: media-store path
+* for `media://inbound/…`, filesystem path for path-shaped refs, null for
+* remote URLs and unsupported schemes (data:, blob:, …).
+*/
+function toLocalUploadPath(ref) {
+	if (isRemoteUrl(ref)) return null;
+	const mediaStorePath = resolveOpenClawMediaPath(ref);
+	if (mediaStorePath) return mediaStorePath;
+	if (hasNonPathScheme(ref)) return null;
+	return resolveLocalMediaPath(ref);
+}
 async function uploadLocalFile(localPath, log, deps) {
 	const client = deps.getClient ? deps.getClient() : getUploadClient(log);
 	if (!client) return null;
@@ -197,11 +225,11 @@ function resolveOutboundMediaRef(ref, ctx, log, deps = {}) {
 	const trimmed = ref.trim();
 	if (!trimmed) return Promise.resolve(null);
 	if (isRemoteUrl(trimmed)) return Promise.resolve({ url: trimmed });
-	if (hasNonPathScheme(trimmed)) {
+	const localPath = toLocalUploadPath(trimmed);
+	if (!localPath) {
 		log.warn(`Outbound media ref has unsupported scheme — skipping: ${trimmed.slice(0, 120)}`);
 		return Promise.resolve(null);
 	}
-	const localPath = resolveLocalMediaPath(trimmed);
 	const cached = ctx.uploads.get(localPath);
 	if (cached) return cached;
 	const promise = ctx.uploads.size >= 10 ? (() => {
@@ -230,8 +258,8 @@ async function resolveOutboundMedia(refs, ctx, log, deps = {}) {
 			attachments.push(resolved);
 			continue;
 		}
-		if (isRemoteUrl(trimmed) || hasNonPathScheme(trimmed)) continue;
-		const localPath = resolveLocalMediaPath(trimmed);
+		const localPath = toLocalUploadPath(trimmed);
+		if (!localPath) continue;
 		if (!ctx.annotatedFailures.has(localPath)) {
 			ctx.annotatedFailures.add(localPath);
 			newFailures.push(basename(localPath));
@@ -327,11 +355,16 @@ async function rewriteLocalMarkdownImages(text, ctx, log, deps = {}) {
 			const start = match.index;
 			out += seg.text.slice(cursor, start);
 			cursor = start + full.length;
-			if (isRemoteUrl(src) || hasNonPathScheme(src)) {
+			if (isRemoteUrl(src)) {
+				out += full;
+				continue;
+			}
+			const localPath = toLocalUploadPath(src);
+			if (!localPath) {
 				out += full;
 				continue;
 			}
-			const ext = extensionOf(src.split("?")[0]);
+			const ext = extensionOf(localPath.split("?")[0]);
 			if (!ext || !IMAGE_EXTENSIONS.has(ext)) {
 				out += full;
 				continue;
@@ -2255,6 +2288,48 @@ function handleChatAbort(request, log) {
 	} else log.warn("chat.abort: OpenClaw abort primitives unavailable — cannot hard-abort the running turn");
 	chatClient?.sendResponse(request.id, true, { aborted });
 }
+/**
+* Speech-style reply guidance injected into the agent's SYSTEM PROMPT for a
+* live voice-call turn (`origin:'voice'`). The user is speaking on a call and
+* the reply is read aloud by TTS, so a huge markdown paragraph reads terribly.
+* This biases STYLE only — explicitly NOT a hard cap: it must not suppress tool
+* use or make the agent omit information the user actually needs.
+*/
+const VOICE_REPLY_SYSTEM_PROMPT = [
+	"This message arrived over a LIVE VOICE CALL — your reply is read aloud by text-to-speech.",
+	"Speak the way a helpful person would on a phone call:",
+	"- Keep it brief and conversational — usually 1-3 short sentences.",
+	"- Plain spoken language only: no markdown, no bullet or numbered lists, no headings, no code blocks, no URLs or link syntax.",
+	"- If the full answer is long or detailed, give the short spoken version and offer to send the details to the chat.",
+	"This is guidance on speaking STYLE only. Do NOT skip tool calls you would otherwise make, and never omit information the user actually needs — just deliver it the way you would say it out loud."
+].join("\n");
+/**
+* Per-turn envelope context derived from the RPC `origin` flag. For a live
+* voice call it returns a `GroupSystemPrompt` block, which is the PROVEN
+* runtime-rendered seam for per-turn system-prompt guidance: dispatchInbound
+* spreads `extraContext` into `finalizeInboundContext` → `sessionCtx.GroupSystemPrompt`
+* → `extraSystemPrompt` → the model's system prompt (rendered under a
+* "## Group Chat Context" heading; read unconditionally, NOT gated on group
+* chats). Returns `{}` for every other origin, so text/A2A turns are unchanged.
+*
+* Why `GroupSystemPrompt` and not a bespoke key like `A2ASystemPrompt`: the
+* OpenClaw runtime does NOT read arbitrary `extraContext` keys — a custom key
+* only reaches the model if a persona/AGENTS.md template interpolates it, so it
+* silently rots into a dead wire otherwise (the `thinking` param is the
+* cautionary precedent). `GroupSystemPrompt` is verified to reach the system
+* prompt via the runtime itself.
+*
+* Transcript stays clean: this only feeds the model's system prompt for THIS
+* turn. The persisted user message (`addMessage(sessionId, 'user', message)`)
+* and everything `sessions.get` returns are the raw user text — the guidance is
+* never stored or broadcast.
+*
+* Exported pure for unit testing (mirrors the codebase's pure-helper pattern).
+*/
+function buildOriginEnvelopeContext(origin) {
+	if (origin === "voice") return { GroupSystemPrompt: VOICE_REPLY_SYSTEM_PROMPT };
+	return {};
+}
 async function handleAgentRequest(request, log) {
 	const runtime = pluginRuntime;
 	if (!runtime) {
@@ -2265,7 +2340,7 @@ async function handleAgentRequest(request, log) {
 		chatClient?.sendResponse(request.id, false, { message: "OpenClaw SDK not available — cannot dispatch" });
 		return;
 	}
-	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, identityId, senderPermissions, attachments: rawAttachments, a2a, chatMessageId } = request.params;
+	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, origin, displayName, identityId, senderPermissions, attachments: rawAttachments, a2a, chatMessageId } = request.params;
 	const isA2A = !!a2a;
 	if (!message && !rawAttachments?.length) {
 		chatClient?.sendResponse(request.id, false, { message: "Missing message" });
@@ -2487,6 +2562,7 @@ async function handleAgentRequest(request, log) {
 				...userId ? { UserId: userId } : {},
 				...senderPermissions?.length ? { SenderPermissions: senderPermissions } : {},
 				ChannelMode: channelMode,
+				...buildOriginEnvelopeContext(origin),
 				...isA2A ? {
 					CallerType: "agent",
 					CallerAgentId: a2a.sourceAgentId,
@@ -2836,4 +2912,4 @@ const plugin = {
 	}
 };
 //#endregion
-export { buildA2ACompletePayload as a, plugin as c, stripLeakedToolSummary as d, createAlfeChannelPlugin as f, admitAgentEvent as i, resolveAbortTargetKeys as l, __resetAgentTurnQueueForTest as n, buildToolActivity as o, __setActiveRunForTest as r, joinAssistantText as s, __agentTurnQueueForTest as t, rewriteAssistantText as u };
+export { admitAgentEvent as a, buildToolActivity as c, resolveAbortTargetKeys as d, rewriteAssistantText as f, __setActiveRunForTest as i, joinAssistantText as l, createAlfeChannelPlugin as m, __agentTurnQueueForTest as n, buildA2ACompletePayload as o, stripLeakedToolSummary as p, __resetAgentTurnQueueForTest as r, buildOriginEnvelopeContext as s, VOICE_REPLY_SYSTEM_PROMPT as t, plugin as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-chat",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "description": "OpenClaw chat plugin for Alfe — web widget and mobile app channels",
   "type": "module",
   "main": "./dist/plugin.js",