@clawling/clawchat-plugin-openclaw 2026.7.8-4 → 2026.7.8-5

package/dist/src/awareness-note-turn.js

@@ -2,11 +2,10 @@
  * Synthetic envelope builder for the lighter-awareness consolidated note
  * (friend.added / friend.removed / friend.profile_updated / conversation.*).
  *
- * Like the friend-request turn, the note runs in the owner's direct
- * conversation and must be addressed to the conversation id (cnv_…) recorded
- * at activation. A usr_… id is not a valid chat_id — member-backend rejects it
- * with "invalid conversation id" and msghub silently drops the agent's
- * in-turn replies.
+ * The note runs in the owner's direct conversation and must be addressed to
+ * the conversation id (cnv_…) recorded at activation. A usr_… id is not a
+ * valid chat_id — member-backend rejects it with "invalid conversation id"
+ * and msghub silently drops the agent's in-turn replies.
  */
 import { EVENT } from "./protocol-types.js";
 export function buildAwarenessNoteEnvelope(params) {

package/dist/src/permission-result.js

@@ -12,7 +12,7 @@
  * payload.metadata = {
  *   kind: "permission_result",
  *   operation: "friend.add",
- *   outcome: "approved" | "denied" | "expired" | "failed",
+ *   outcome: "approved" | "denied" | "expired" | "failed" | "auto_allowed" | "auto_denied",
  *   reason: "owner_allowed" | …,
  *   request_id: "prq_…",
  * }
@@ -39,10 +39,18 @@ function buildOutcomeNote(metadata) {
             ? "denied"
             : outcome === "expired"
                 ? "expired"
-                : "failed";
+                : outcome === "auto_allowed"
+                    ? "auto-allowed"
+                    : outcome === "auto_denied"
+                        ? "auto-denied"
+                        : "failed";
     const resolution = outcome === "approved"
         ? "The requested action has been completed."
-        : "No further action was taken.";
+        : outcome === "auto_allowed"
+            ? "The action was automatically allowed by the owner's policy and has already been completed; no retry is needed."
+            : outcome === "auto_denied"
+                ? "The action was automatically denied by the owner's policy; do not retry."
+                : "No further action was taken.";
     return [
         `Permission request for operation "${operation}" has been ${outcomeLabel}.`,
         `Reason: ${reason}.`,
@@ -53,7 +61,7 @@ function buildOutcomeNote(metadata) {
  * Builds a synthetic `message.send` envelope that delivers a
  * `permission_result` context note to the agent.
  *
- * Mirrors the `buildFriendRequestEnvelope` pattern: a synthetic inbound
+ * Mirrors the `buildAwarenessNoteEnvelope` pattern: a synthetic inbound
  * `message.send` targeting the owner's direct conversation, routed through
  * `handleInboundEnvelope` so the agent can reason about the outcome.
  */
@@ -95,13 +103,18 @@ export function buildPermissionResultEnvelope(params) {
  * Handles a `permission_result` receipt. Deduplicates by `request_id`
  * (idempotent — WS replay on reconnect may deliver the same receipt again).
  *
+ * An empty/falsy `request_id` is never added to the dedup set — two receipts
+ * can legitimately share an empty id, and both must still be rendered — but
+ * the receipt is otherwise processed normally.
+ *
  * Returns a synthetic context-note {@link Envelope} on a fresh receipt so
  * the caller can feed it to `handleInboundEnvelope`; returns `null` when
  * the `request_id` has already been processed.
  */
 export function handlePermissionResult(metadata, account) {
-    if (_seenRequestIds.has(metadata.request_id))
+    if (metadata.request_id && _seenRequestIds.has(metadata.request_id))
         return null;
-    _seenRequestIds.add(metadata.request_id);
+    if (metadata.request_id)
+        _seenRequestIds.add(metadata.request_id);
     return buildPermissionResultEnvelope({ account, metadata });
 }

package/dist/src/runtime.js

@@ -32,7 +32,6 @@ import { createGroupMessageCoalescer } from "./group-message-coalescer.js";
 import { openclawLlmContextDebug } from "./llm-context-debug.js";
 import { GroupSettingsCache } from "./group-settings.js";
 import { PermissionCache } from "./permissions.js";
-import { buildFriendRequestEnvelope } from "./friend-request-turn.js";
 import { buildAwarenessNoteEnvelope } from "./awareness-note-turn.js";
 import { handlePermissionResult } from "./permission-result.js";
 const { setRuntime: setOpenclawClawlingRuntime, getRuntime: getOpenclawClawlingRuntime } = createPluginRuntimeStore("clawchat-plugin-openclaw runtime not initialized");
@@ -1985,7 +1984,6 @@ export async function startOpenclawClawlingGateway(params) {
                 ? env.payload
                 : undefined;
             const type = typeof payload?.type === "string" ? payload.type : "";
-            const entityId = typeof payload?.entity_id === "string" ? payload.entity_id : "";
             if (type === "agent.config.changed") {
                 log?.info?.(`[${accountId}] clawchat-plugin-openclaw agent.config.changed signal received; re-pulling group settings`);
                 pullGroupSettings();
@@ -2003,28 +2001,11 @@ export async function startOpenclawClawlingGateway(params) {
                     log?.error?.(`[${accountId}] clawchat-plugin-openclaw skill-update check failed: ${err instanceof Error ? err.message : String(err)}`);
                 });
             }
-            else if (type === "friend.request") {
-                // Dedup is already applied above by notifySignalObserver.observe (the live
-                // frame and its reliable-inbox replay share the same event_id and collapse
-                // to one observation). Build one synthetic reasoning turn so the agent can
-                // act on the pending request; the prompt text varies by policy state.
-                const state = permissionCache.stateOf("friend.add");
-                // Address the turn to the activation-recorded owner conversation
-                // (cnv_…) — a usr_… chat_id is rejected by member-backend, so the
-                // agent's in-turn replies would be silently dropped by msghub.
-                const ownerConversationId = resolveOwnerDirectConversationId();
-                if (!ownerConversationId) {
-                    log?.info?.(`[${accountId}] clawchat-plugin-openclaw friend.request turn has no activation conversation on record; in-turn replies will not be deliverable`);
-                }
-                log?.info?.(`[${accountId}] clawchat-plugin-openclaw friend.request signal received; dispatching reasoning turn entity_id=${entityId} policy=${state}`);
-                void handleInboundEnvelope(buildFriendRequestEnvelope({ account, state, entityId, ownerConversationId }));
-            }
             else if (type === "friend.added" ||
                 type === "friend.removed" ||
                 type === "friend.profile_updated" ||
                 type.startsWith("conversation.")) {
-                // Lighter-awareness: log + optional single consolidated note. Never
-                // injects a full reasoning turn per event (unlike friend.request).
+                // Lighter-awareness: log + optional single consolidated note.
                 log?.info?.(`[${accountId}] clawchat-plugin-openclaw ${type} signal received; lighter-awareness handling`);
                 if (account.awarenessNote && !pendingAwarenessNote) {
                     pendingAwarenessNote = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawling/clawchat-plugin-openclaw",
-  "version": "2026.7.8-4",
+  "version": "2026.7.8-5",
   "description": "OpenClaw ClawChat channel plugin",
   "license": "MIT",
   "author": "CLAWLING PTE. LTD.",

package/src/awareness-note-turn.ts

@@ -2,11 +2,10 @@
  * Synthetic envelope builder for the lighter-awareness consolidated note
  * (friend.added / friend.removed / friend.profile_updated / conversation.*).
  *
- * Like the friend-request turn, the note runs in the owner's direct
- * conversation and must be addressed to the conversation id (cnv_…) recorded
- * at activation. A usr_… id is not a valid chat_id — member-backend rejects it
- * with "invalid conversation id" and msghub silently drops the agent's
- * in-turn replies.
+ * The note runs in the owner's direct conversation and must be addressed to
+ * the conversation id (cnv_…) recorded at activation. A usr_… id is not a
+ * valid chat_id — member-backend rejects it with "invalid conversation id"
+ * and msghub silently drops the agent's in-turn replies.
  */
 import { EVENT, type Envelope } from "./protocol-types.ts";
 import type { ResolvedOpenclawClawlingAccount } from "./config.ts";

package/src/permission-result.ts

@@ -12,7 +12,7 @@
  * payload.metadata = {
  *   kind: "permission_result",
  *   operation: "friend.add",
- *   outcome: "approved" | "denied" | "expired" | "failed",
+ *   outcome: "approved" | "denied" | "expired" | "failed" | "auto_allowed" | "auto_denied",
  *   reason: "owner_allowed" | …,
  *   request_id: "prq_…",
  * }
@@ -25,7 +25,7 @@ import type { ResolvedOpenclawClawlingAccount } from "./config.ts";
 export interface PermissionResultMetadata {
   kind: "permission_result";
   operation: string;
-  outcome: "approved" | "denied" | "expired" | "failed";
+  outcome: "approved" | "denied" | "expired" | "failed" | "auto_allowed" | "auto_denied";
   reason: string;
   request_id: string;
 }
@@ -52,11 +52,19 @@ function buildOutcomeNote(metadata: PermissionResultMetadata): string {
         ? "denied"
         : outcome === "expired"
           ? "expired"
-          : "failed";
+          : outcome === "auto_allowed"
+            ? "auto-allowed"
+            : outcome === "auto_denied"
+              ? "auto-denied"
+              : "failed";
   const resolution =
     outcome === "approved"
       ? "The requested action has been completed."
-      : "No further action was taken.";
+      : outcome === "auto_allowed"
+        ? "The action was automatically allowed by the owner's policy and has already been completed; no retry is needed."
+        : outcome === "auto_denied"
+          ? "The action was automatically denied by the owner's policy; do not retry."
+          : "No further action was taken.";
   return [
     `Permission request for operation "${operation}" has been ${outcomeLabel}.`,
     `Reason: ${reason}.`,
@@ -68,7 +76,7 @@ function buildOutcomeNote(metadata: PermissionResultMetadata): string {
  * Builds a synthetic `message.send` envelope that delivers a
  * `permission_result` context note to the agent.
  *
- * Mirrors the `buildFriendRequestEnvelope` pattern: a synthetic inbound
+ * Mirrors the `buildAwarenessNoteEnvelope` pattern: a synthetic inbound
  * `message.send` targeting the owner's direct conversation, routed through
  * `handleInboundEnvelope` so the agent can reason about the outcome.
  */
@@ -114,6 +122,10 @@ export function buildPermissionResultEnvelope(params: {
  * Handles a `permission_result` receipt. Deduplicates by `request_id`
  * (idempotent — WS replay on reconnect may deliver the same receipt again).
  *
+ * An empty/falsy `request_id` is never added to the dedup set — two receipts
+ * can legitimately share an empty id, and both must still be rendered — but
+ * the receipt is otherwise processed normally.
+ *
  * Returns a synthetic context-note {@link Envelope} on a fresh receipt so
  * the caller can feed it to `handleInboundEnvelope`; returns `null` when
  * the `request_id` has already been processed.
@@ -122,7 +134,7 @@ export function handlePermissionResult(
   metadata: PermissionResultMetadata,
   account: Pick<ResolvedOpenclawClawlingAccount, "userId" | "ownerUserId">,
 ): Envelope | null {
-  if (_seenRequestIds.has(metadata.request_id)) return null;
-  _seenRequestIds.add(metadata.request_id);
+  if (metadata.request_id && _seenRequestIds.has(metadata.request_id)) return null;
+  if (metadata.request_id) _seenRequestIds.add(metadata.request_id);
   return buildPermissionResultEnvelope({ account, metadata });
 }

package/src/runtime.ts

@@ -84,7 +84,6 @@ import { createGroupMessageCoalescer } from "./group-message-coalescer.ts";
 import { openclawLlmContextDebug } from "./llm-context-debug.ts";
 import { GroupSettingsCache } from "./group-settings.ts";
 import { PermissionCache } from "./permissions.ts";
-import { buildFriendRequestEnvelope } from "./friend-request-turn.ts";
 import { buildAwarenessNoteEnvelope } from "./awareness-note-turn.ts";
 import { handlePermissionResult } from "./permission-result.ts";
 
@@ -2392,7 +2391,6 @@ export async function startOpenclawClawlingGateway(params: StartGatewayParams):
         ? (env.payload as Record<string, unknown>)
         : undefined;
       const type = typeof payload?.type === "string" ? payload.type : "";
-      const entityId = typeof payload?.entity_id === "string" ? payload.entity_id : "";
       if (type === "agent.config.changed") {
         log?.info?.(
           `[${accountId}] clawchat-plugin-openclaw agent.config.changed signal received; re-pulling group settings`,
@@ -2417,35 +2415,13 @@ export async function startOpenclawClawlingGateway(params: StartGatewayParams):
             }`,
           );
         });
-      } else if (type === "friend.request") {
-        // Dedup is already applied above by notifySignalObserver.observe (the live
-        // frame and its reliable-inbox replay share the same event_id and collapse
-        // to one observation). Build one synthetic reasoning turn so the agent can
-        // act on the pending request; the prompt text varies by policy state.
-        const state = permissionCache.stateOf("friend.add");
-        // Address the turn to the activation-recorded owner conversation
-        // (cnv_…) — a usr_… chat_id is rejected by member-backend, so the
-        // agent's in-turn replies would be silently dropped by msghub.
-        const ownerConversationId = resolveOwnerDirectConversationId();
-        if (!ownerConversationId) {
-          log?.info?.(
-            `[${accountId}] clawchat-plugin-openclaw friend.request turn has no activation conversation on record; in-turn replies will not be deliverable`,
-          );
-        }
-        log?.info?.(
-          `[${accountId}] clawchat-plugin-openclaw friend.request signal received; dispatching reasoning turn entity_id=${entityId} policy=${state}`,
-        );
-        void handleInboundEnvelope(
-          buildFriendRequestEnvelope({ account, state, entityId, ownerConversationId }),
-        );
       } else if (
         type === "friend.added" ||
         type === "friend.removed" ||
         type === "friend.profile_updated" ||
         type.startsWith("conversation.")
       ) {
-        // Lighter-awareness: log + optional single consolidated note. Never
-        // injects a full reasoning turn per event (unlike friend.request).
+        // Lighter-awareness: log + optional single consolidated note.
         log?.info?.(
           `[${accountId}] clawchat-plugin-openclaw ${type} signal received; lighter-awareness handling`,
         );

package/src/friend-request-turn.ts

@@ -1,104 +0,0 @@
-/**
- * Synthetic reasoning-turn builder for `friend.request` notify.signal events.
- *
- * When the server fires a `friend.request` signal the runtime dispatches one
- * deduped synthetic `message.send` envelope so the agent can reason about the
- * pending request. The prompt text varies by the current "friend.add" permission
- * policy state: a deny policy yields a decline/inform prompt; ask or allow
- * yields a prompt that instructs the agent to review the request via the
- * `clawchat_list_friend_requests` tool.
- */
-import { EVENT, type Envelope } from "./protocol-types.ts";
-import type { PermState } from "./permissions.ts";
-import type { ResolvedOpenclawClawlingAccount } from "./config.ts";
-
-/**
- * Returns canned prompt text for a friend-request reasoning turn based on the
- * current "friend.add" permission policy state.
- *
- * - `deny`  → inform the agent it should decline; no accept instruction.
- * - `ask` / `allow` → instruct the agent to review the pending request.
- *
- * The requester's user id is embedded so the agent does not go looking up the
- * synthetic sender ("clawchat-friend-request" is not a real user).
- */
-export function friendRequestPromptFor(state: PermState, requesterUserId?: string): string {
-  const arrived = requesterUserId
-    ? `A new friend request has arrived from user ${requesterUserId}.`
-    : "A new friend request has arrived.";
-  if (state === "deny") {
-    return [
-      arrived,
-      "Your current friend-add policy is set to deny.",
-      "Do not add this contact.",
-      "You may inform the requester that you cannot add them at this time.",
-    ].join(" ");
-  }
-  return [
-    arrived,
-    "Please review the pending request by calling `clawchat_list_friend_requests`",
-    "and decide whether to accept it.",
-  ].join(" ");
-}
-
-export interface BuildFriendRequestEnvelopeParams {
-  account: ResolvedOpenclawClawlingAccount;
-  /** Current "friend.add" permission policy state. */
-  state: PermState;
-  /** entity_id from the notify.signal payload (the requesting user). */
-  entityId: string;
-  /**
-   * The owner's direct conversation id (cnv_…) recorded at activation, or null
-   * when none is recorded. A usr_… id is not a valid chat_id — member-backend
-   * rejects it with "invalid conversation id" and the agent's in-turn replies
-   * are silently dropped by msghub — so the envelope must target this id.
-   */
-  ownerConversationId: string | null;
-}
-
-/**
- * Builds a synthetic `message.send` envelope that triggers one agent reasoning
- * turn for a pending friend request. The envelope shape mirrors the
- * activation-bootstrap envelope; it targets the owner's direct conversation so
- * the agent has context about who it is reasoning for.
- */
-export function buildFriendRequestEnvelope(
-  params: BuildFriendRequestEnvelopeParams,
-): Envelope {
-  const { account, state, entityId, ownerConversationId } = params;
-  const text = friendRequestPromptFor(state, entityId);
-  const now = Date.now();
-  // Fall back to ownerUserId only when no activation conversation is recorded:
-  // the turn still runs (the agent can act via tools, e.g. accept the request),
-  // but its in-chat replies will not be deliverable until activation records
-  // the owner conversation.
-  return {
-    version: "2",
-    event: EVENT.MESSAGE_SEND,
-    trace_id: `clawchat-plugin-openclaw-friend-request-${entityId}-${now}`,
-    emitted_at: now,
-    chat_id: ownerConversationId ?? account.ownerUserId,
-    chat_type: "direct",
-    to: { id: account.userId, type: "direct" },
-    sender: {
-      id: "clawchat-friend-request",
-      type: "direct",
-      nick_name: "ClawChat",
-    },
-    payload: {
-      message_id: `clawchat-plugin-openclaw-friend-request-${entityId}-${now}`,
-      message_mode: "normal",
-      message: {
-        body: { fragments: [{ kind: "text", text }] },
-        context: { mentions: [], reply: null },
-        streaming: {
-          status: "static",
-          sequence: 0,
-          mutation_policy: "sealed",
-          started_at: null,
-          completed_at: null,
-        },
-      },
-    },
-  };
-}