@awebai/claude-channel 1.3.2 → 1.4.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "aweb-channel",
   "description": "aweb agent coordination channel — receive mail, chat, tasks, and control signals from your agent team in real time.",
-  "version": "1.3.2",
+  "version": "1.4.0",
   "author": {
     "name": "awebai"
   },

package/dist/index.js

@@ -25460,6 +25460,7 @@ function canonicalJSON(env) {
     ["type", env.type]
   ];
   if (env.from_stable_id) fields.push(["from_stable_id", env.from_stable_id]);
+  if (env.conversation_id) fields.push(["conversation_id", env.conversation_id]);
   if (env.message_id) fields.push(["message_id", env.message_id]);
   if (env.to_stable_id) fields.push(["to_stable_id", env.to_stable_id]);
   fields.sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
@@ -25572,6 +25573,20 @@ async function verifySignedPayload(signedPayload, signatureB64, fromDID, signing
   );
   return valid ? "verified" : "failed";
 }
+function signedPayloadConversationStatus(signedPayload, conversationID) {
+  const expected = (conversationID || "").trim();
+  if (!expected) return "verified";
+  try {
+    const payload = JSON.parse(signedPayload);
+    if (payload.conversation_id === expected) return "verified";
+    if (payload.conversation_id === void 0 || payload.conversation_id === "") {
+      return "verified_legacy";
+    }
+    return "failed";
+  } catch {
+    return "failed";
+  }
+}
 
 // src/api/mail.ts
 async function fetchInbox(client, unreadOnly = true, limit = 50, messageID) {
@@ -25595,6 +25610,9 @@ function hydrateAddressesFromSignedPayload(msg) {
     if (typeof payload.from_did === "string" && payload.from_did.trim()) {
       msg.from_did = payload.from_did;
     }
+    if (typeof payload.from === "string" && payload.from.trim()) {
+      msg.signed_from = payload.from;
+    }
     if (typeof payload.to_did === "string" && payload.to_did.trim()) {
       msg.to_did = payload.to_did;
     }
@@ -25604,11 +25622,8 @@ function hydrateAddressesFromSignedPayload(msg) {
     if (!msg.to_stable_id && typeof payload.to_stable_id === "string") {
       msg.to_stable_id = payload.to_stable_id;
     }
-    if (!msg.from_address && typeof payload.from === "string") {
-      msg.from_address = payload.from;
-    }
-    if (!msg.to_address && typeof payload.to === "string") {
-      msg.to_address = payload.to;
+    if (!msg.conversation_id && typeof payload.conversation_id === "string") {
+      msg.conversation_id = payload.conversation_id;
     }
   } catch {
   }
@@ -25618,12 +25633,14 @@ async function ackMessage(client, messageId) {
 }
 async function verifyInboxMessage(msg) {
   if (msg.signed_payload && msg.signature && msg.from_did) {
-    return verifySignedPayload(
+    const status2 = await verifySignedPayload(
       msg.signed_payload,
       msg.signature,
       msg.from_did,
       msg.signing_key_id || ""
     );
+    if (status2 !== "verified") return status2;
+    return signedPayloadConversationStatus(msg.signed_payload, msg.conversation_id);
   }
   const from = msg.from_address || msg.from_alias;
   const to = msg.to_address || msg.to_alias || "";
@@ -25639,10 +25656,16 @@ async function verifyInboxMessage(msg) {
     from_stable_id: msg.from_stable_id,
     to_stable_id: msg.to_stable_id,
     message_id: msg.message_id,
+    conversation_id: msg.conversation_id,
     signature: msg.signature,
     signing_key_id: msg.signing_key_id
   };
-  return verifyMessage(env);
+  const status = await verifyMessage(env);
+  if (status === "failed" && msg.conversation_id) {
+    const legacyStatus = await verifyMessage({ ...env, conversation_id: void 0 });
+    return legacyStatus === "verified" ? "verified_legacy" : legacyStatus;
+  }
+  return status;
 }
 
 // src/api/chat.ts
@@ -25667,6 +25690,9 @@ function hydrateAddressesFromSignedPayload2(msg) {
     if (typeof payload.from_did === "string" && payload.from_did.trim()) {
       msg.from_did = payload.from_did;
     }
+    if (typeof payload.from === "string" && payload.from.trim()) {
+      msg.signed_from = payload.from;
+    }
     if (typeof payload.to_did === "string" && payload.to_did.trim()) {
       msg.to_did = payload.to_did;
     }
@@ -25676,11 +25702,8 @@ function hydrateAddressesFromSignedPayload2(msg) {
     if (!msg.to_stable_id && typeof payload.to_stable_id === "string") {
       msg.to_stable_id = payload.to_stable_id;
     }
-    if (!msg.from_address && typeof payload.from === "string") {
-      msg.from_address = payload.from;
-    }
-    if (!msg.to_address && typeof payload.to === "string") {
-      msg.to_address = payload.to;
+    if (!msg.conversation_id && typeof payload.conversation_id === "string") {
+      msg.conversation_id = payload.conversation_id;
     }
   } catch {
   }
@@ -25693,12 +25716,14 @@ async function markRead(client, sessionId, upToMessageId) {
 }
 async function verifyChatMessage(msg) {
   if (msg.signed_payload && msg.signature && msg.from_did) {
-    return verifySignedPayload(
+    const status2 = await verifySignedPayload(
       msg.signed_payload,
       msg.signature,
       msg.from_did,
       msg.signing_key_id || ""
     );
+    if (status2 !== "verified") return status2;
+    return signedPayloadConversationStatus(msg.signed_payload, msg.conversation_id);
   }
   const from = msg.from_address || msg.from_agent;
   const env = {
@@ -25713,10 +25738,16 @@ async function verifyChatMessage(msg) {
     from_stable_id: msg.from_stable_id,
     to_stable_id: msg.to_stable_id,
     message_id: msg.message_id,
+    conversation_id: msg.conversation_id,
     signature: msg.signature,
     signing_key_id: msg.signing_key_id
   };
-  return verifyMessage(env);
+  const status = await verifyMessage(env);
+  if (status === "failed" && msg.conversation_id) {
+    const legacyStatus = await verifyMessage({ ...env, conversation_id: void 0 });
+    return legacyStatus === "verified" ? "verified_legacy" : legacyStatus;
+  }
+  return status;
 }
 
 // src/identity/pinstore.ts
@@ -26314,19 +26345,21 @@ function escapeJSON2(s) {
 etc.sha512Sync = (...m) => sha512(etc.concatBytes(...m));
 var ANNOUNCEMENT_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var SenderTrustManager = class {
-  constructor(client, registry2, teamID, selfDid) {
+  constructor(client, registry2, teamID, selfDid, selfStableID = "") {
     this.client = client;
     this.registry = registry2;
     this.teamID = teamID;
     this.selfDid = selfDid;
+    this.selfStableID = selfStableID;
   }
   client;
   registry;
   teamID;
   selfDid;
+  selfStableID;
   metaCache = /* @__PURE__ */ new Map();
-  async normalizeTrust(store, verificationStatus, rawAddress, fromDID, fromStableID, toDID, rotationAnnouncement, replacementAnnouncement, verificationAddress) {
-    let status = this.checkRecipientBinding(verificationStatus, toDID);
+  async normalizeTrust(store, verificationStatus, rawAddress, fromDID, fromStableID, toDID, toStableID, rotationAnnouncement, replacementAnnouncement, verificationAddress) {
+    let status = this.checkRecipientBinding(verificationStatus, toDID, toStableID);
     if (!status || !rawAddress.trim()) {
       return { status, stored: false };
     }
@@ -26352,11 +26385,21 @@ var SenderTrustManager = class {
       registryCheck.confirmedCurrentKey
     );
   }
-  checkRecipientBinding(status, toDID) {
-    if (status !== "verified" || !toDID || !this.selfDid) {
+  checkRecipientBinding(status, toDID, toStableID) {
+    if (status !== "verified") {
       return status;
     }
-    return toDID === this.selfDid ? status : "identity_mismatch";
+    const selfStableID = this.selfStableID.trim();
+    const recipientStableID = (toStableID || "").trim();
+    if (selfStableID && recipientStableID) {
+      return recipientStableID.toLowerCase() === selfStableID.toLowerCase() ? status : "identity_mismatch";
+    }
+    const selfDID = this.selfDid.trim();
+    const recipientDID = (toDID || "").trim();
+    if (!recipientDID || !selfDID) {
+      return status;
+    }
+    return recipientDID === selfDID ? status : "identity_mismatch";
   }
   async checkStableIdentityRegistry(status, trustAddress, fromDID, fromStableID) {
     if (status !== "verified" || !fromDID || !fromStableID?.startsWith("did:aw:")) {
@@ -26671,6 +26714,10 @@ function pruneDispatched(dispatched) {
     removed++;
   }
 }
+function dispatchKey(channel, conversationID, messageID) {
+  const conversation = (conversationID || "").trim();
+  return `${channel}:${conversation}:${messageID}`;
+}
 async function main() {
   const workdir = process.cwd();
   const config2 = await resolveConfig(workdir);
@@ -26683,13 +26730,14 @@ async function main() {
   });
   const pinStore = await loadPinStore();
   const registry2 = new RegistryResolver(fetch, void 0, void 0, {
-    fallbackRegistryURL: resolveRegistryFallbackURL(config2.baseURL, config2.registryURL)
+    fallbackRegistryURL: resolveRegistryFallbackURL(config2.registryURL)
   });
   const trust = new SenderTrustManager(
     client,
     registry2,
     config2.teamID,
-    config2.did
+    config2.did,
+    config2.stableID
   );
   const mcp = new Server(
     { name: "aweb", version: "0.1.0" },
@@ -26726,10 +26774,13 @@ Control events (type="control") are operational signals. On "pause", stop curren
     abort.signal
   );
 }
-function resolveRegistryFallbackURL(baseURL, identityRegistryURL = "") {
+function resolveRegistryFallbackURL(identityRegistryURL = "") {
   const envRegistryURL = (process.env.AWID_REGISTRY_URL || "").trim();
   if (envRegistryURL) {
-    return envRegistryURL.toLowerCase() === "local" ? baseURL : envRegistryURL;
+    if (envRegistryURL.toLowerCase() === "local") {
+      throw new Error("AWID_REGISTRY_URL=local is not supported; set AWID_REGISTRY_URL=https://api.awid.ai");
+    }
+    return envRegistryURL;
   }
   const configuredRegistryURL = identityRegistryURL.trim();
   return configuredRegistryURL || void 0;
@@ -26752,8 +26803,10 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
       let pinsDirty = false;
       for (const msg of messages) {
         if (isSelfSender(msg.from_alias, msg.from_address, msg.from_stable_id, msg.from_did, self)) continue;
-        if (dispatched.has(msg.message_id)) continue;
-        dispatched.add(msg.message_id);
+        const conversationID = msg.conversation_id || event.conversation_id;
+        const key = dispatchKey("mail", conversationID, msg.message_id);
+        if (dispatched.has(key)) continue;
+        dispatched.add(key);
         const from = senderDisplayAddress(msg.from_alias, msg.from_address);
         const tofu = await trust.normalizeTrust(
           pinStore,
@@ -26762,9 +26815,10 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
           msg.from_did,
           msg.from_stable_id,
           msg.to_did,
+          msg.to_stable_id,
           msg.rotation_announcement,
           msg.replacement_announcement,
-          msg.from_address || msg.from_alias || ""
+          msg.signed_from || msg.from_address || msg.from_alias || ""
         );
         msg.verification_status = tofu.status;
         if (tofu.stored) pinsDirty = true;
@@ -26773,6 +26827,7 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
           from,
           message_id: msg.message_id
         };
+        if (conversationID) meta3.conversation_id = conversationID;
         if (msg.subject) meta3.subject = msg.subject;
         if (msg.priority && msg.priority !== "normal") meta3.priority = msg.priority;
         if (msg.verification_status) meta3.verified = String(msg.verification_status === "verified" || msg.verification_status === "verified_custodial");
@@ -26794,8 +26849,10 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
       let lastMessageId;
       for (const msg of messages) {
         if (isSelfSender(msg.from_agent, msg.from_address, msg.from_stable_id, msg.from_did, self)) continue;
-        if (dispatched.has(msg.message_id)) continue;
-        dispatched.add(msg.message_id);
+        const conversationID = msg.conversation_id || event.conversation_id || event.session_id;
+        const key = dispatchKey("chat", conversationID, msg.message_id);
+        if (dispatched.has(key)) continue;
+        dispatched.add(key);
         const from = senderDisplayAddress(msg.from_agent, msg.from_address);
         const tofu = await trust.normalizeTrust(
           pinStore,
@@ -26804,9 +26861,10 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
           msg.from_did,
           msg.from_stable_id,
           msg.to_did,
+          msg.to_stable_id,
           msg.rotation_announcement,
           msg.replacement_announcement,
-          msg.from_address || msg.from_agent || ""
+          msg.signed_from || msg.from_address || msg.from_agent || ""
         );
         msg.verification_status = tofu.status;
         if (tofu.stored) pinsDirty = true;
@@ -26816,6 +26874,7 @@ async function dispatchEvent(mcp, client, pinStore, trust, self, dispatched, eve
           session_id: event.session_id,
           message_id: msg.message_id
         };
+        if (conversationID) meta3.conversation_id = conversationID;
         if (event.sender_waiting) meta3.sender_waiting = "true";
         if (msg.sender_leaving) meta3.sender_leaving = "true";
         if (msg.verification_status) meta3.verified = String(msg.verification_status === "verified" || msg.verification_status === "verified_custodial");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awebai/claude-channel",
-  "version": "1.3.2",
+  "version": "1.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "bin": "./dist/index.js",