@clawling/clawchat-plugin-openclaw 2026.7.1 → 2026.7.2

package/dist/src/config.js

@@ -207,6 +207,28 @@ function decodeJwtStringClaim(token, claim) {
         return "";
     }
 }
+/**
+ * Resolve the bot-account userId, validated against the token's `sub` claim.
+ *
+ * The WS session authenticates with the access token, so the backend binds the
+ * session to the token's `sub` — that IS the bot's user id for this session.
+ * Unlike ownerUserId (explicit config wins over the `oid` claim), a configured
+ * userId that disagrees with `sub` is always wrong for the session this token
+ * creates, and it silently breaks self-echo detection: with the OWNER's id
+ * here, every owner message is dropped as the bot's own echo (2026-07-02
+ * clawnest incident — a provisioner wrote the owner id into the config). Token
+ * wins; the mismatch is logged. Also derives userId from `sub` when nothing is
+ * configured, mirroring the `oid` fallback above.
+ */
+function resolveUserId(token, configured) {
+    const tokenSub = decodeJwtStringClaim(token, "sub");
+    if (!tokenSub)
+        return configured;
+    if (configured && configured !== tokenSub) {
+        console.warn(`clawchat userId mismatch: configured ${configured} does not equal the access token's sub claim ${tokenSub}; using the token value. A misconfigured userId (e.g. the owner's id) breaks self-echo detection and mention gating — fix the channel userId / CLAWCHAT_USER_ID.`);
+    }
+    return tokenSub;
+}
 function readGroupMode(value) {
     return value === "mention" ? "mention" : "all";
 }
@@ -312,7 +334,7 @@ export function resolveOpenclawClawlingAccount(cfg, env = process.env) {
     const mediaBaseUrl = readOptionalString(channel.mediaBaseUrl) || readEnvString(env, CLAWCHAT_MEDIA_BASE_URL_ENV);
     const token = readOptionalString(channel.token) || readEnvString(env, CLAWCHAT_TOKEN_ENV);
     const agentId = readOptionalString(channel.agentId) || readEnvString(env, CLAWCHAT_AGENT_ID_ENV);
-    const userId = readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV);
+    const userId = resolveUserId(token, readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV));
     const ownerUserId = readOptionalString(channel.ownerUserId) ||
         readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV) ||
         // Fall back to the access token's `oid` (owner) claim. A provisioner may

package/dist/src/runtime.js

@@ -1771,14 +1771,29 @@ export async function startOpenclawClawlingGateway(params) {
     catch (err) {
         log?.info?.(`[${accountId}] clawchat-plugin-openclaw skill-update: bundled skills dir not resolvable (using managed-only current): ${err instanceof Error ? err.message : String(err)}`);
     }
-    const sendOwnerSkillMessage = async (text) => {
+    // A usr_... id is not a valid chat_id — member-backend rejects it with
+    // "invalid conversation id" and msghub never acks the send. Proactive owner
+    // messages must be addressed to the direct conversation recorded at
+    // activation (parity with the hermes adapter's _owner_direct_chat_id).
+    const resolveOwnerDirectConversationId = () => {
         const ownerUserId = account.ownerUserId?.trim();
         if (!ownerUserId)
+            return null;
+        const conversationId = store
+            ?.getActivationConversation?.({ platform: "openclaw", accountId })
+            ?.conversationId?.trim();
+        return conversationId || null;
+    };
+    const sendOwnerSkillMessage = async (text) => {
+        const conversationId = resolveOwnerDirectConversationId();
+        if (!conversationId) {
+            log?.info?.(`[${accountId}] clawchat-plugin-openclaw skill-update owner message skipped: no activation conversation recorded`);
             return;
+        }
         await sendOpenclawClawlingText({
             client,
             account,
-            to: { chatId: ownerUserId, chatType: "direct" },
+            to: { chatId: conversationId, chatType: "direct" },
             text,
             log,
         });
@@ -2408,16 +2423,16 @@ export async function startOpenclawClawlingGateway(params) {
         },
     });
     const forwardGroupApprovalSlashToOwner = async (turn) => {
-        const ownerUserId = account.ownerUserId?.trim();
-        if (!ownerUserId) {
-            log?.error?.(`[${accountId}] clawchat-plugin-openclaw group approval command suppressed reason=missing_owner_user_id chat_id=${turn.peer.id} msg=${turn.messageId}`);
+        const ownerConversationId = resolveOwnerDirectConversationId();
+        if (!ownerConversationId) {
+            log?.error?.(`[${accountId}] clawchat-plugin-openclaw group approval command suppressed reason=missing_owner_conversation chat_id=${turn.peer.id} msg=${turn.messageId}`);
             return "skipped";
         }
         try {
             await sendOpenclawClawlingText({
                 client,
                 account,
-                to: { chatId: ownerUserId, chatType: "direct" },
+                to: { chatId: ownerConversationId, chatType: "direct" },
                 text: groupOwnerAttentionText(turn.peer.id, turn.rawBody),
                 log,
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawling/clawchat-plugin-openclaw",
-  "version": "2026.7.1",
+  "version": "2026.7.2",
   "description": "OpenClaw ClawChat channel plugin",
   "license": "MIT",
   "author": "CLAWLING PTE. LTD.",

package/src/config.ts

@@ -332,6 +332,30 @@ function decodeJwtStringClaim(token: string, claim: string): string {
   }
 }
 
+/**
+ * Resolve the bot-account userId, validated against the token's `sub` claim.
+ *
+ * The WS session authenticates with the access token, so the backend binds the
+ * session to the token's `sub` — that IS the bot's user id for this session.
+ * Unlike ownerUserId (explicit config wins over the `oid` claim), a configured
+ * userId that disagrees with `sub` is always wrong for the session this token
+ * creates, and it silently breaks self-echo detection: with the OWNER's id
+ * here, every owner message is dropped as the bot's own echo (2026-07-02
+ * clawnest incident — a provisioner wrote the owner id into the config). Token
+ * wins; the mismatch is logged. Also derives userId from `sub` when nothing is
+ * configured, mirroring the `oid` fallback above.
+ */
+function resolveUserId(token: string, configured: string): string {
+  const tokenSub = decodeJwtStringClaim(token, "sub");
+  if (!tokenSub) return configured;
+  if (configured && configured !== tokenSub) {
+    console.warn(
+      `clawchat userId mismatch: configured ${configured} does not equal the access token's sub claim ${tokenSub}; using the token value. A misconfigured userId (e.g. the owner's id) breaks self-echo detection and mention gating — fix the channel userId / CLAWCHAT_USER_ID.`,
+    );
+  }
+  return tokenSub;
+}
+
 function readGroupMode(value: unknown): GroupMode {
   return value === "mention" ? "mention" : "all";
 }
@@ -465,7 +489,10 @@ export function resolveOpenclawClawlingAccount(
     readOptionalString(channel.mediaBaseUrl) || readEnvString(env, CLAWCHAT_MEDIA_BASE_URL_ENV);
   const token = readOptionalString(channel.token) || readEnvString(env, CLAWCHAT_TOKEN_ENV);
   const agentId = readOptionalString(channel.agentId) || readEnvString(env, CLAWCHAT_AGENT_ID_ENV);
-  const userId = readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV);
+  const userId = resolveUserId(
+    token,
+    readOptionalString(channel.userId) || readEnvString(env, CLAWCHAT_USER_ID_ENV),
+  );
   const ownerUserId =
     readOptionalString(channel.ownerUserId) ||
     readEnvString(env, CLAWCHAT_OWNER_USER_ID_ENV) ||

package/src/runtime.ts

@@ -2166,13 +2166,30 @@ export async function startOpenclawClawlingGateway(params: StartGatewayParams):
       }`,
     );
   }
-  const sendOwnerSkillMessage = async (text: string): Promise<void> => {
+  // A usr_... id is not a valid chat_id — member-backend rejects it with
+  // "invalid conversation id" and msghub never acks the send. Proactive owner
+  // messages must be addressed to the direct conversation recorded at
+  // activation (parity with the hermes adapter's _owner_direct_chat_id).
+  const resolveOwnerDirectConversationId = (): string | null => {
     const ownerUserId = account.ownerUserId?.trim();
-    if (!ownerUserId) return;
+    if (!ownerUserId) return null;
+    const conversationId = store
+      ?.getActivationConversation?.({ platform: "openclaw", accountId })
+      ?.conversationId?.trim();
+    return conversationId || null;
+  };
+  const sendOwnerSkillMessage = async (text: string): Promise<void> => {
+    const conversationId = resolveOwnerDirectConversationId();
+    if (!conversationId) {
+      log?.info?.(
+        `[${accountId}] clawchat-plugin-openclaw skill-update owner message skipped: no activation conversation recorded`,
+      );
+      return;
+    }
     await sendOpenclawClawlingText({
       client,
       account,
-      to: { chatId: ownerUserId, chatType: "direct" },
+      to: { chatId: conversationId, chatType: "direct" },
       text,
       log,
     });
@@ -2886,10 +2903,10 @@ export async function startOpenclawClawlingGateway(params: StartGatewayParams):
   });
 
   const forwardGroupApprovalSlashToOwner = async (turn: IngestTurnParams): Promise<IngestTurnResult> => {
-    const ownerUserId = account.ownerUserId?.trim();
-    if (!ownerUserId) {
+    const ownerConversationId = resolveOwnerDirectConversationId();
+    if (!ownerConversationId) {
       log?.error?.(
-        `[${accountId}] clawchat-plugin-openclaw group approval command suppressed reason=missing_owner_user_id chat_id=${turn.peer.id} msg=${turn.messageId}`,
+        `[${accountId}] clawchat-plugin-openclaw group approval command suppressed reason=missing_owner_conversation chat_id=${turn.peer.id} msg=${turn.messageId}`,
       );
       return "skipped";
     }
@@ -2897,7 +2914,7 @@ export async function startOpenclawClawlingGateway(params: StartGatewayParams):
       await sendOpenclawClawlingText({
         client,
         account,
-        to: { chatId: ownerUserId, chatType: "direct" },
+        to: { chatId: ownerConversationId, chatType: "direct" },
         text: groupOwnerAttentionText(turn.peer.id, turn.rawBody),
         log,
       });