@clawling/clawchat-plugin-openclaw 2026.6.16-1 → 2026.6.16-2

package/dist/src/config.js

@@ -185,6 +185,27 @@ function readOptionalString(value) {
 function readEnvString(env, key) {
     return readOptionalString(env[key]);
 }
+/**
+ * Decode a string claim from a JWT access token's payload (no signature
+ * verification — this is for self-identifying claims the backend already signed,
+ * e.g. `oid` owner id). Returns "" on any malformed input.
+ */
+function decodeJwtStringClaim(token, claim) {
+    if (typeof token !== "string")
+        return "";
+    const segments = token.split(".");
+    if (segments.length < 2 || !segments[1])
+        return "";
+    try {
+        const json = Buffer.from(segments[1], "base64url").toString("utf8");
+        const parsed = JSON.parse(json);
+        const value = parsed?.[claim];
+        return typeof value === "string" ? value.trim() : "";
+    }
+    catch {
+        return "";
+    }
+}
 function readGroupMode(value) {
     return value === "mention" ? "mention" : "all";
 }
@@ -291,7 +312,13 @@ export function resolveOpenclawClawlingAccount(cfg, env = process.env) {
     const token = readOptionalString(channel.token) || readEnvString(env, CLAWCHAT_TOKEN_ENV);
     const agentId = readOptionalString(channel.agentId) || readEnvString(env, CLAWCHAT_AGENT_ID_ENV);
     const userId = readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV);
-    const ownerUserId = readOptionalString(channel.ownerUserId) || readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV);
+    const ownerUserId = readOptionalString(channel.ownerUserId) ||
+        readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV) ||
+        // Fall back to the access token's `oid` (owner) claim. A provisioner may
+        // inject token + userId but omit ownerUserId; without it the connect gate
+        // (hasOpenclawClawlingConnectCredentials) never passes and the plugin sits
+        // in the wait-for-activation loop. The owner is always carried in the token.
+        decodeJwtStringClaim(token, "oid");
     const enabled = typeof channel.enabled === "boolean" ? channel.enabled : true;
     const outputVisibility = readOutputVisibility(channel.outputVisibility);
     const chats = readChats(channel.chats);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawling/clawchat-plugin-openclaw",
-  "version": "2026.6.16-1",
+  "version": "2026.6.16-2",
   "description": "OpenClaw ClawChat channel plugin",
   "license": "MIT",
   "files": [

package/src/config.ts

@@ -309,6 +309,25 @@ function readEnvString(env: Record<string, string | undefined>, key: string): st
   return readOptionalString(env[key]);
 }
 
+/**
+ * Decode a string claim from a JWT access token's payload (no signature
+ * verification — this is for self-identifying claims the backend already signed,
+ * e.g. `oid` owner id). Returns "" on any malformed input.
+ */
+function decodeJwtStringClaim(token: string, claim: string): string {
+  if (typeof token !== "string") return "";
+  const segments = token.split(".");
+  if (segments.length < 2 || !segments[1]) return "";
+  try {
+    const json = Buffer.from(segments[1], "base64url").toString("utf8");
+    const parsed = JSON.parse(json) as Record<string, unknown>;
+    const value = parsed?.[claim];
+    return typeof value === "string" ? value.trim() : "";
+  } catch {
+    return "";
+  }
+}
+
 function readGroupMode(value: unknown): GroupMode {
   return value === "mention" ? "mention" : "all";
 }
@@ -444,7 +463,13 @@ export function resolveOpenclawClawlingAccount(
   const agentId = readOptionalString(channel.agentId) || readEnvString(env, CLAWCHAT_AGENT_ID_ENV);
   const userId = readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV);
   const ownerUserId =
-    readOptionalString(channel.ownerUserId) || readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV);
+    readOptionalString(channel.ownerUserId) ||
+    readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV) ||
+    // Fall back to the access token's `oid` (owner) claim. A provisioner may
+    // inject token + userId but omit ownerUserId; without it the connect gate
+    // (hasOpenclawClawlingConnectCredentials) never passes and the plugin sits
+    // in the wait-for-activation loop. The owner is always carried in the token.
+    decodeJwtStringClaim(token, "oid");
   const enabled = typeof channel.enabled === "boolean" ? channel.enabled : true;
   const outputVisibility = readOutputVisibility(channel.outputVisibility);
   const chats = readChats(channel.chats);