@clawling/clawchat-plugin-openclaw 2026.10.9-2 → 2026.10.9-4

package/src/turn-boundary.ts

@@ -0,0 +1,79 @@
+// Who started this turn? The owner's turns are exactly the ones in the owner's
+// activation direct chat (whoever the sender is — plugin-started turns there
+// count). Every group turn and every other direct chat is someone else's.
+// Anything we cannot place is treated as someone else's (fail closed).
+import { CHANNEL_ID, normalizeOpenclawClawlingAccountId } from "./config.ts";
+
+export type TurnClass = "owner" | "non-owner";
+export type ParsedClawChatSession = { kind: "direct" | "group"; chatId: string } | null;
+
+/** Tools a turn the owner did not start may still see and call. */
+export const NON_OWNER_TOOL_ALLOWLIST: readonly string[] = Object.freeze([
+  "clawchat_memory_search", "clawchat_memory_read", "clawchat_memory_write", "clawchat_memory_edit",
+  "clawchat_mention_message", "clawchat_react_message", "clawchat_get_user_profile", "clawchat_metadata_sync",
+  "web_search",
+]);
+
+const norm = (v: string | undefined | null) => (typeof v === "string" ? v.trim().toLowerCase() : "");
+
+// `<channel>:` then `direct:`/`group:`, each optional and stripped at most once.
+const TOOL_CHAT_ID_TARGET_PREFIX = new RegExp(`^(?:${CHANNEL_ID}:)?(?:(?:direct|group):)?`, "i");
+
+/**
+ * The bare ClawChat chat id a tool argument names. The host shows the model
+ * this chat's `chat_id` as the channel-prefixed origin target
+ * (`clawchat-plugin-openclaw:cnv_…` / `clawchat-plugin-openclaw:group:cnv_…`)
+ * and a group's label as `group:cnv_…`; models copy either form into tool
+ * arguments. Only that form is stripped; case is kept, and whatever remains is
+ * still validated by the send path (`isValidChatId`) or the server. Every tool
+ * that takes a ClawChat chat id, and the non-owner current-chat check, use
+ * this one helper so they agree on which chat an argument names.
+ */
+export function normalizeToolChatId(value: unknown): string {
+  if (typeof value !== "string") return "";
+  return value.trim().replace(TOOL_CHAT_ID_TARGET_PREFIX, "").trim();
+}
+
+/**
+ * Host session keys (dmScope per-account-channel-peer):
+ *   agent:<agent>:<channel>:<account>:direct:<chat>
+ *   agent:<agent>:<channel>:group:<chat>
+ */
+export function parseClawChatSessionKey(sessionKey: string | undefined | null): ParsedClawChatSession {
+  const parts = norm(sessionKey).split(":");
+  if (parts.length < 5 || parts[0] !== "agent" || parts[2] !== CHANNEL_ID) return null;
+  if (parts[3] === "group" && parts.length === 5 && parts[4]) return { kind: "group", chatId: parts[4] };
+  if (parts[4] === "direct" && parts.length === 6 && parts[5]) return { kind: "direct", chatId: parts[5] };
+  return null;
+}
+
+/**
+ * Account id carried by a ClawChat direct session key, normalized exactly once
+ * with the plugin's account-id normalizer. Group keys carry no account
+ * segment, and a blank segment is missing (never silently "default").
+ */
+export function clawChatSessionAccountId(sessionKey: string | undefined | null): string | undefined {
+  if (parseClawChatSessionKey(sessionKey)?.kind !== "direct") return undefined;
+  const segment = (sessionKey ?? "").trim().split(":")[3]?.trim();
+  return segment ? normalizeOpenclawClawlingAccountId(segment) : undefined;
+}
+
+export function classifyChat(input: {
+  kind: "direct" | "group" | string;
+  chatId?: string | undefined | null;
+  ownerDirectConversationId?: string | undefined | null;
+}): TurnClass {
+  const owner = norm(input.ownerDirectConversationId);
+  const chat = norm(input.chatId);
+  if (input.kind !== "direct" || !owner || !chat) return "non-owner";
+  return chat === owner ? "owner" : "non-owner";
+}
+
+export function classifyTurn(input: {
+  sessionKey?: string | null;
+  ownerDirectConversationId?: string | null;
+}): TurnClass {
+  const parsed = parseClawChatSessionKey(input.sessionKey);
+  if (!parsed) return "non-owner";
+  return classifyChat({ ...parsed, ownerDirectConversationId: input.ownerDirectConversationId });
+}