@alfe.ai/openclaw-identity 0.1.1 → 0.1.2

package/dist/plugin2.cjs

@@ -132,6 +132,7 @@ function evaluateAgentChat(permissions, args) {
 const pkg = (0, node_module.createRequire)(require("url").pathToFileURL(__filename).href)("../package.json");
 const RESOLVE_CACHE_TTL_MS = 6e4;
 const resolveCache = /* @__PURE__ */ new Map();
+let lastInboundConversationId;
 function getCachedResolve(key) {
 	const entry = resolveCache.get(key);
 	if (!entry) return null;
@@ -175,15 +176,19 @@ function isSelfScopedWhoIsThis(toolArgs, cacheKey) {
 	return argProvider === cached.senderProvider && argPlatformId === cached.senderPlatformId;
 }
 /**
-* Resolve the inbound session identity from `conversationId`. Returns
-* `{ error }` on cache miss / missing param — never falls back to LLM-
-* supplied identity (that's the security property — see header).
+* Resolve the inbound session identity. Reads from `lastInboundConversationId`
+* (set by `message_received`) — the LLM-supplied `params.conversationId` is
+* ignored because in practice the LLM copies the visible-metadata
+* `conversationId` field, which is currently the WS request envelope id
+* (`req_…`), not the real session key the cache is keyed on. Falls back to
+* `params.conversationId` only when no inbound message has been observed
+* this process (autonomous / scheduled triggers).
 */
 function resolveSessionIdentity(params) {
-	const conversationId = params.conversationId;
+	const conversationId = lastInboundConversationId ?? params.conversationId;
 	if (!conversationId) return {
 		ok: false,
-		error: "missing_conversation_id: pass conversationId from the inbound message metadata. The verify tools auto-bind to the inbound sender's identity — there is no manual override."
+		error: "no_inbound_session: identity verification can only be initiated from a user-message turn. The verify tools auto-bind to the inbound sender's session and cannot be called from autonomous / scheduled / tool-chain triggers."
 	};
 	const cached = getCachedResolve(conversationId);
 	if (cached?.identityId == null) return {
@@ -416,9 +421,9 @@ const plugin = {
 			}),
 			defineTool({
 				name: "request_identity_verification",
-				description: "Send a verification phrase to the inbound user's email or mobile to prove they own that contact endpoint. Use when the inbound user has just told you their email or mobile number and you want them to confirm it. PASS conversationId from the inbound message metadata — the verification ALWAYS binds to the inbound sender's identity (the WhatsApp / SMS / Discord / Google Chat / chat-web user who just spoke). There is no way to verify a different identity via this tool — identity is server-authoritative, resolved at session-start by the chat service. If the contact you supply already lives on another existing identity (e.g. the user's Clerk web account), the merge happens automatically on confirm. To add a new contact to an already-verified canonical identity (e.g. add a new email to a Clerk account), the user must be talking from a session that already resolves to that canonical identity (post-merge, or chat-web logged in as Clerk).",
+				description: "Send a verification phrase to the inbound user's email or mobile to prove they own that contact endpoint. Use when the inbound user has just told you their email or mobile number and you want them to confirm it. The verification ALWAYS binds to the inbound sender's identity (the WhatsApp / SMS / Discord / Google Chat / chat-web user who just spoke) — identity is server-authoritative, auto-derived from the current inbound session. There is no way to verify a different identity via this tool. If the contact you supply already lives on another existing identity (e.g. the user's Clerk web account), the merge happens automatically on confirm. To add a new contact to an already-verified canonical identity (e.g. add a new email to a Clerk account), the user must be talking from a session that already resolves to that canonical identity (post-merge, or chat-web logged in as Clerk).",
 				parameters: _sinclair_typebox.Type.Object({
-					conversationId: _sinclair_typebox.Type.String({ description: "Conversation ID from the inbound message — the daemon attaches this to every message. REQUIRED — there is no manual override path." }),
+					conversationId: _sinclair_typebox.Type.Optional(_sinclair_typebox.Type.String({ description: "Deprecated and ignored — the tool auto-binds to the current inbound session. Retained as optional for back-compat with older agent prompts." })),
 					contactEmail: _sinclair_typebox.Type.Optional(_sinclair_typebox.Type.String({ description: "Email to verify (mutually exclusive with contactMobile)" })),
 					contactMobile: _sinclair_typebox.Type.Optional(_sinclair_typebox.Type.String({ description: "E.164 mobile to verify (mutually exclusive with contactEmail)" })),
 					preferredChannel: _sinclair_typebox.Type.Optional(_sinclair_typebox.Type.String({ description: "When neither contactEmail nor contactMobile is provided, pick which existing verified contact to deliver to: 'mobile' or 'email'" }))
@@ -448,9 +453,9 @@ const plugin = {
 			}),
 			defineTool({
 				name: "confirm_identity_verification",
-				description: "Confirm a verification by submitting the phrase the inbound user received. Returns `{ verified, identityId, action }` where `action` is 'merged' (the verified contact already lived on another identity, which is now the survivor — the inbound identity merged into it) or 'contact_verified' (the contact was attached to the inbound identity). PASS the same conversationId you used on request_identity_verification — identity is auto-derived from it, no override.",
+				description: "Confirm a verification by submitting the phrase the inbound user received. Returns `{ verified, identityId, action }` where `action` is 'merged' (the verified contact already lived on another identity, which is now the survivor — the inbound identity merged into it) or 'contact_verified' (the contact was attached to the inbound identity). Identity is server-authoritative, auto-derived from the current inbound session — no override available.",
 				parameters: _sinclair_typebox.Type.Object({
-					conversationId: _sinclair_typebox.Type.String({ description: "Conversation ID from the inbound message — same one passed to request_identity_verification. REQUIRED." }),
+					conversationId: _sinclair_typebox.Type.Optional(_sinclair_typebox.Type.String({ description: "Deprecated and ignored — the tool auto-binds to the current inbound session. Retained as optional for back-compat with older agent prompts." })),
 					verificationId: _sinclair_typebox.Type.String({ description: "Verification ID returned from request_identity_verification" }),
 					phrase: _sinclair_typebox.Type.String({ description: "Three-word phrase the inbound user received via mobile or email" })
 				}),
@@ -463,8 +468,8 @@ const plugin = {
 						phrase: params.phrase
 					});
 					if (result.verified === true) {
-						const conversationId = params.conversationId;
-						invalidateCachedResolve(conversationId);
+						const conversationId = lastInboundConversationId ?? params.conversationId;
+						if (conversationId) invalidateCachedResolve(conversationId);
 					}
 					return result;
 				}
@@ -478,6 +483,7 @@ const plugin = {
 			const provider = ctx.channelId ?? "unknown";
 			const senderId = event.metadata?.UserId ?? event.from;
 			if (!senderId) return;
+			if (ctx.conversationId) lastInboundConversationId = ctx.conversationId;
 			let agentId = ctx.agentId;
 			if (!agentId) {
 				const fallback = await getAgentContext(client);

package/dist/plugin2.js

@@ -132,6 +132,7 @@ function evaluateAgentChat(permissions, args) {
 const pkg = createRequire(import.meta.url)("../package.json");
 const RESOLVE_CACHE_TTL_MS = 6e4;
 const resolveCache = /* @__PURE__ */ new Map();
+let lastInboundConversationId;
 function getCachedResolve(key) {
 	const entry = resolveCache.get(key);
 	if (!entry) return null;
@@ -175,15 +176,19 @@ function isSelfScopedWhoIsThis(toolArgs, cacheKey) {
 	return argProvider === cached.senderProvider && argPlatformId === cached.senderPlatformId;
 }
 /**
-* Resolve the inbound session identity from `conversationId`. Returns
-* `{ error }` on cache miss / missing param — never falls back to LLM-
-* supplied identity (that's the security property — see header).
+* Resolve the inbound session identity. Reads from `lastInboundConversationId`
+* (set by `message_received`) — the LLM-supplied `params.conversationId` is
+* ignored because in practice the LLM copies the visible-metadata
+* `conversationId` field, which is currently the WS request envelope id
+* (`req_…`), not the real session key the cache is keyed on. Falls back to
+* `params.conversationId` only when no inbound message has been observed
+* this process (autonomous / scheduled triggers).
 */
 function resolveSessionIdentity(params) {
-	const conversationId = params.conversationId;
+	const conversationId = lastInboundConversationId ?? params.conversationId;
 	if (!conversationId) return {
 		ok: false,
-		error: "missing_conversation_id: pass conversationId from the inbound message metadata. The verify tools auto-bind to the inbound sender's identity — there is no manual override."
+		error: "no_inbound_session: identity verification can only be initiated from a user-message turn. The verify tools auto-bind to the inbound sender's session and cannot be called from autonomous / scheduled / tool-chain triggers."
 	};
 	const cached = getCachedResolve(conversationId);
 	if (cached?.identityId == null) return {
@@ -416,9 +421,9 @@ const plugin = {
 			}),
 			defineTool({
 				name: "request_identity_verification",
-				description: "Send a verification phrase to the inbound user's email or mobile to prove they own that contact endpoint. Use when the inbound user has just told you their email or mobile number and you want them to confirm it. PASS conversationId from the inbound message metadata — the verification ALWAYS binds to the inbound sender's identity (the WhatsApp / SMS / Discord / Google Chat / chat-web user who just spoke). There is no way to verify a different identity via this tool — identity is server-authoritative, resolved at session-start by the chat service. If the contact you supply already lives on another existing identity (e.g. the user's Clerk web account), the merge happens automatically on confirm. To add a new contact to an already-verified canonical identity (e.g. add a new email to a Clerk account), the user must be talking from a session that already resolves to that canonical identity (post-merge, or chat-web logged in as Clerk).",
+				description: "Send a verification phrase to the inbound user's email or mobile to prove they own that contact endpoint. Use when the inbound user has just told you their email or mobile number and you want them to confirm it. The verification ALWAYS binds to the inbound sender's identity (the WhatsApp / SMS / Discord / Google Chat / chat-web user who just spoke) — identity is server-authoritative, auto-derived from the current inbound session. There is no way to verify a different identity via this tool. If the contact you supply already lives on another existing identity (e.g. the user's Clerk web account), the merge happens automatically on confirm. To add a new contact to an already-verified canonical identity (e.g. add a new email to a Clerk account), the user must be talking from a session that already resolves to that canonical identity (post-merge, or chat-web logged in as Clerk).",
 				parameters: Type.Object({
-					conversationId: Type.String({ description: "Conversation ID from the inbound message — the daemon attaches this to every message. REQUIRED — there is no manual override path." }),
+					conversationId: Type.Optional(Type.String({ description: "Deprecated and ignored — the tool auto-binds to the current inbound session. Retained as optional for back-compat with older agent prompts." })),
 					contactEmail: Type.Optional(Type.String({ description: "Email to verify (mutually exclusive with contactMobile)" })),
 					contactMobile: Type.Optional(Type.String({ description: "E.164 mobile to verify (mutually exclusive with contactEmail)" })),
 					preferredChannel: Type.Optional(Type.String({ description: "When neither contactEmail nor contactMobile is provided, pick which existing verified contact to deliver to: 'mobile' or 'email'" }))
@@ -448,9 +453,9 @@ const plugin = {
 			}),
 			defineTool({
 				name: "confirm_identity_verification",
-				description: "Confirm a verification by submitting the phrase the inbound user received. Returns `{ verified, identityId, action }` where `action` is 'merged' (the verified contact already lived on another identity, which is now the survivor — the inbound identity merged into it) or 'contact_verified' (the contact was attached to the inbound identity). PASS the same conversationId you used on request_identity_verification — identity is auto-derived from it, no override.",
+				description: "Confirm a verification by submitting the phrase the inbound user received. Returns `{ verified, identityId, action }` where `action` is 'merged' (the verified contact already lived on another identity, which is now the survivor — the inbound identity merged into it) or 'contact_verified' (the contact was attached to the inbound identity). Identity is server-authoritative, auto-derived from the current inbound session — no override available.",
 				parameters: Type.Object({
-					conversationId: Type.String({ description: "Conversation ID from the inbound message — same one passed to request_identity_verification. REQUIRED." }),
+					conversationId: Type.Optional(Type.String({ description: "Deprecated and ignored — the tool auto-binds to the current inbound session. Retained as optional for back-compat with older agent prompts." })),
 					verificationId: Type.String({ description: "Verification ID returned from request_identity_verification" }),
 					phrase: Type.String({ description: "Three-word phrase the inbound user received via mobile or email" })
 				}),
@@ -463,8 +468,8 @@ const plugin = {
 						phrase: params.phrase
 					});
 					if (result.verified === true) {
-						const conversationId = params.conversationId;
-						invalidateCachedResolve(conversationId);
+						const conversationId = lastInboundConversationId ?? params.conversationId;
+						if (conversationId) invalidateCachedResolve(conversationId);
 					}
 					return result;
 				}
@@ -478,6 +483,7 @@ const plugin = {
 			const provider = ctx.channelId ?? "unknown";
 			const senderId = event.metadata?.UserId ?? event.from;
 			if (!senderId) return;
+			if (ctx.conversationId) lastInboundConversationId = ctx.conversationId;
 			let agentId = ctx.agentId;
 			if (!agentId) {
 				const fallback = await getAgentContext(client);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-identity",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "OpenClaw identity plugin — identity resolution, access gating, permission enforcement",
   "type": "module",
   "main": "./dist/plugin.js",