@masons/agent-network 0.4.25 → 0.5.0

package/dist/plugin.js

@@ -2,7 +2,7 @@
 // Loaded by OpenClaw Gateway via the "openclaw.extensions" field in package.json.
 // NOT imported by index.ts to avoid pulling ws/typebox into Next.js app bundles.
 import pluginManifest from "../openclaw.plugin.json" with { type: "json" };
-import { agentNetworkChannel } from "./channel.js";
+import { agentNetworkChannel, consumeIdentityLinkingNudge } from "./channel.js";
 import { configureInteractive } from "./cli-setup.js";
 import { detectPendingState, getConversationManager, getDmScope, getStateCacheGeneration, initPluginRuntime, } from "./config.js";
 import { getAgentIdentity } from "./environment-context.js";
@@ -30,6 +30,24 @@ function formatTimeAgo(timestamp) {
     const days = Math.floor(hours / 24);
     return `${days}d ago`;
 }
+/**
+ * Drain ownerNotesQueue and format into an "[Agent Network — Updates]" block.
+ * Returns null if the queue was empty.
+ */
+function drainAndFormatNotes(reportInstruction) {
+    const notes = ownerNotesQueue.drain();
+    if (notes.length === 0)
+        return null;
+    const lines = notes.map((n) => {
+        const fromStr = n.from ? `@${n.from}` : "agent";
+        const timeStr = formatTimeAgo(n.timestamp);
+        return `• ${fromStr} (${timeStr}): "${n.content}"`;
+    });
+    return ("[Agent Network — Updates]\n" +
+        "The following happened on the agent network since your last turn:\n" +
+        `${lines.join("\n")}\n` +
+        reportInstruction);
+}
 /** Max active interactions to inject into context to avoid noise. */
 const MAX_INTERACTIONS = 5;
 /**
@@ -106,11 +124,19 @@ const plugin = {
         // Idempotent — Gateway may hot-reload, calling register() again.
         initPluginRuntime(api.runtime);
         // Register tools FIRST — they must be available even when the channel
-        // has no credentials yet (setup flow needs these tools to GET credentials).
+        // has no credentials yet.
         registerTools(api);
         // Channel registration may fail if no credentials are configured yet.
-        // This is expected on first run — the user will use the setup tools above
-        // to obtain credentials, then restart to activate the channel.
+        // This is expected on first run — the user authorizes via the OAuth
+        // device flow run by `configureInteractive` (CLI command:
+        // `openclaw channels login --channel agent-network`). After credentials
+        // are persisted to openclaw.json, OpenClaw hot-reloads and re-runs
+        // register() — the channel then activates.
+        //
+        // `setup: { configureInteractive }` exposes the CLI hook to OpenClaw.
+        // Restored in #1264 after the legacy setup flow was deleted in
+        // fd5568e8 (#1253). The new implementation is RFC 8628 device flow
+        // against Better Auth at the IdP — no MASONS-specific bespoke endpoints.
         try {
             api.registerChannel({
                 plugin: {
@@ -228,9 +254,19 @@ const plugin = {
             // --- Build dynamic context based on setup state ---
             let dynamicContext;
             if (!state.hasCredentials) {
-                // Just installed, no credentials yet — guide to setup
+                // Just installed, no credentials yet — guide to CLI setup.
+                // The previous `masons_setup_init` LLM tool was removed in 0.5.0
+                // (#1253) and replaced by the OAuth device flow in cli-setup.ts.
+                // The LLM cannot run the device flow itself (it requires terminal
+                // I/O via OpenClaw's prompter), so its job here is to surface the
+                // command and wait for the user.
                 dynamicContext =
-                    "[Context: Agent Network] You recently installed the agent network plugin. Your user wants to connect to the agent network. Call the masons_setup_init tool to begin the setup process.";
+                    "[Context: Agent Network] You recently installed the agent network plugin " +
+                        "but it is not yet authorized. Tell your user to run this in their terminal: " +
+                        "`openclaw channels login --channel agent-network`. " +
+                        "The command opens a browser to authorize the device, then prompts in the " +
+                        "terminal to pick or create an agent. After it completes, OpenClaw will " +
+                        "reload and the agent network tools will become available.";
                 if (state.pendingTarget) {
                     dynamicContext += ` After setup, send a connection request to ${state.pendingTarget} — they invited your user to join.`;
                 }
@@ -268,12 +304,10 @@ const plugin = {
                         // Owner visiting via Passport — no routing warning needed.
                         // The LLM's text reply goes to the owner (the visitor IS the owner).
                         //
-                        // DO NOT drain ownerNotesQueue here (#986). Notes are meant for
-                        // non-Passport channels (Telegram/Feishu) where the owner can act
-                        // on them — e.g., identity linking notifications require the owner
-                        // to provide their Telegram ID, which only makes sense on Telegram.
-                        // Draining here would consume notifications on the same turn that
-                        // generated them, leaving nothing for the target channel.
+                        // Drain ownerNotesQueue (#1158). General notes from network turns
+                        // should reach the owner wherever they are — including Passport.
+                        // The identity linking nudge is handled separately (boolean flag
+                        // in channel.ts) and delivered only on non-Passport owner turns.
                         dynamicContext =
                             "[Agent Network — Owner via Passport] Your owner (Principal) is talking to you " +
                                 "via Passport (your public web chat page where visitors can reach you). " +
@@ -281,6 +315,10 @@ const plugin = {
                                 "Your text reply goes directly to your owner. " +
                                 "You can share information freely — no information boundary applies. " +
                                 "Do NOT use masons_note_for_owner — your owner is right here.";
+                        const notesBlock = drainAndFormatNotes("Report these to your owner now — they are right here.");
+                        if (notesBlock) {
+                            dynamicContext += `\n\n${notesBlock}`;
+                        }
                     }
                     else {
                         // Turn triggered by a remote agent/stranger — routing warning +
@@ -317,18 +355,21 @@ const plugin = {
                 }
                 else {
                     // Owner turn (or other channel) — drain pending notes if any.
-                    const notes = ownerNotesQueue.drain();
-                    if (notes.length > 0) {
-                        const lines = notes.map((n) => {
-                            const fromStr = n.from ? `@${n.from}` : "agent";
-                            const timeStr = formatTimeAgo(n.timestamp);
-                            return `• ${fromStr} (${timeStr}): "${n.content}"`;
-                        });
-                        dynamicContext =
-                            "[Agent Network — Updates]\n" +
-                                "The following happened on the agent network since your last turn:\n" +
-                                `${lines.join("\n")}\n` +
-                                "Report these to your owner.";
+                    const notesBlock = drainAndFormatNotes("Report these to your owner.");
+                    if (notesBlock) {
+                        dynamicContext = notesBlock;
+                    }
+                    // Identity linking nudge — delivered here (non-Passport owner turn)
+                    // where the linking action is relevant (#1158).
+                    if (consumeIdentityLinkingNudge()) {
+                        const nudge = "[Agent Network — Identity Linking Available]\n" +
+                            "Your owner visited via Passport (verified). " +
+                            "Cross-channel identity linking is available but not configured. " +
+                            "The owner can link their identity across channels so conversations share context. " +
+                            "Suggest using masons_link_identity.";
+                        dynamicContext = dynamicContext
+                            ? `${dynamicContext}\n\n${nudge}`
+                            : nudge;
                     }
                     // Append interaction space on owner turns too (#873).
                     // Gives the agent awareness of active network interactions.

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAqDH,UAAU,WAAW;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3B;AAED,UAAU,OAAO;IACf,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACzE;AA0CD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAI5C;AAsFD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA88BhD"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA6CH,UAAU,WAAW;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3B;AAED,UAAU,OAAO;IACf,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACzE;AAwCD,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAwDD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAk0BhD"}

package/dist/tools.js

@@ -20,10 +20,10 @@
 import { tmpdir } from "node:os";
 import { Type } from "@sinclair/typebox";
 import { getOwnerPassportAddress } from "./channel.js";
-import { clearTargetHandle, getDmScope, getOpenClawHome, getPendingTarget, isProfileNeeded, markProfileComplete, markProfileNeeded, removeIdentityLinks, requireApiKey, requireConversationManager, requirePlatformConfig, writeCredentials, writeIdentityLinks, } from "./config.js";
+import { clearTargetHandle, getDmScope, getOpenClawHome, getPendingTarget, isProfileNeeded, markProfileComplete, removeIdentityLinks, requireApiKey, requireConversationManager, requirePlatformConfig, writeIdentityLinks, } from "./config.js";
 import { getOwnerHandle } from "./environment-context.js";
 import { ownerNotesQueue } from "./owner-notes.js";
-import { acceptRequest, declineRequest, getConnectionStatus, initSetup, listConnections, listRequests, onboard, PlatformApiError, pollSetup, reconnect, requestConnection, SetupExpiredError, SetupPendingError, updateProfile, } from "./platform-client.js";
+import { acceptRequest, declineRequest, getConnectionStatus, listConnections, listRequests, PlatformApiError, requestConnection, updateProfile, } from "./platform-client.js";
 import { sentMessageBuffer } from "./sent-message-buffer.js";
 import { getCurrentTurnChannelId, getCurrentTurnIsOwnerNonConsuming, } from "./turn-context.js";
 import { fetchLatestVersion, getPluginVersion, getUpdateInfo, } from "./update-check.js";
@@ -49,7 +49,6 @@ const SEMVER_RE = /^\d+\.\d+\.\d+$/;
 // ---------------------------------------------------------------------------
 // Module-level state (not persisted across process restarts)
 // ---------------------------------------------------------------------------
-let storedSetupToken = null;
 /**
  * Tracks the version we already tried to upgrade to this session.
  * null = no attempt yet. Set to the target version string on the first
@@ -59,7 +58,6 @@ let storedSetupToken = null;
 let upgradeAttemptedVersion = null;
 /** @internal Reset module state for test isolation. */
 export function _resetToolsForTesting() {
-    storedSetupToken = null;
     updateNoticeShown = false;
     upgradeAttemptedVersion = null;
 }
@@ -100,30 +98,6 @@ function maybeAppendUpdateNotice(result) {
 function withUpdateNotice(fn) {
     return async (id, params) => maybeAppendUpdateNotice(await fn(id, params));
 }
-function formatSetupInit(code, uri, expiresIn) {
-    const minutes = Math.floor(expiresIn / 60);
-    return [
-        `Authorization link: ${uri}`,
-        `Backup code (if the link doesn't pre-fill): ${code}`,
-        `Expires in ${minutes} minutes.`,
-    ].join("\n");
-}
-function formatOnboardResult(handle, address, isReconnect) {
-    if (isReconnect) {
-        return [
-            `Reconnected to existing agent: ${handle}`,
-            `Address: ${address}`,
-            "Proceed with post-setup steps.",
-        ].join("\n");
-    }
-    return [
-        `Agent created successfully!`,
-        `Handle: ${handle}`,
-        `Address: ${address}`,
-        "",
-        "IMPORTANT: This agent's profile is empty. Before proceeding with post-setup steps, use masons_update_profile to generate and set up the agent's profile. This helps other agents understand what this agent does and enables better matchmaking.",
-    ].join("\n");
-}
 function formatConnectionResult(requestIds, status) {
     if (requestIds.length === 0) {
         return "Already connected or request already pending — no new request needed.";
@@ -142,137 +116,54 @@ function formatConnectionResult(requestIds, status) {
  * `startAccount()` hasn't run).
  */
 export function registerTools(api) {
-    // --- masons_setup_init -------------------------------------------------
-    api.registerTool({
-        name: "masons_setup_init",
-        description: "Start agent network setup. Returns a setup code and authorization link for the user.",
-        parameters: Type.Object({}),
-        execute: withUpdateNotice(async () => {
-            const cfg = requirePlatformConfig();
-            const result = await initSetup(cfg);
-            storedSetupToken = result.setup_token;
-            return textResult(formatSetupInit(result.setup_code, result.verification_uri, result.expires_in));
-        }),
-    });
-    // --- masons_setup_check --------------------------------------------------
+    // --- masons_setup ---------------------------------------------------------
+    // Lightweight nudge for the no-credentials state (#1264). The legacy
+    // `masons_setup_init / check / complete` trio (removed in 0.5.0) ran the
+    // device flow inside the LLM; that's not viable for an OAuth Device
+    // Authorization Grant flow which requires terminal I/O (the user enters a
+    // user_code in their browser, returns to the terminal to pick or create
+    // an agent). This tool's only job is to surface the CLI command and let
+    // the user run it.
+    //
+    // Layer B's `before_prompt_build` hook in plugin.ts already injects this
+    // guidance for the no-credentials state — this tool is here so the LLM
+    // can reach it explicitly when the user asks "how do I set this up?"
+    // (e.g., as a fallback after a failed tool call surfaces "no credentials").
     api.registerTool({
-        name: "masons_setup_check",
-        description: "Check if the user has authorized the setup code in their browser.",
+        name: "masons_setup",
+        description: [
+            "Returns instructions for connecting OpenClaw to the agent network.",
+            "Use when the user asks how to set up Agent Network, when other Agent",
+            "Network tools fail with a 'no credentials' / 'no API key' error, or",
+            "when the user wants to switch which agent OpenClaw is driving.",
+            "",
+            "This tool does NOT perform setup itself — it surfaces the terminal",
+            "command. The user must run it from their shell because the device",
+            "authorization flow requires browser interaction and terminal prompts.",
+        ].join("\n"),
         parameters: Type.Object({}),
-        execute: withUpdateNotice(async () => {
-            const cfg = requirePlatformConfig();
-            if (!storedSetupToken) {
-                throw new Error("No setup in progress. Use masons_setup_init first.");
-            }
-            try {
-                await pollSetup(cfg, storedSetupToken);
-                return textResult("Authorization confirmed. Proceed to complete setup.");
-            }
-            catch (err) {
-                if (err instanceof SetupPendingError) {
-                    return textResult("Not yet authorized. Ask the user if they entered the code correctly.");
-                }
-                if (err instanceof SetupExpiredError) {
-                    storedSetupToken = null;
-                    return textResult("Setup code expired. Use masons_setup_init to get a new code.");
-                }
-                throw err;
-            }
-        }),
-    });
-    // --- masons_setup_complete -----------------------------------------------
-    api.registerTool({
-        name: "masons_setup_complete",
-        description: "Complete agent network setup. Reconnects to the agent selected in browser, or creates a new agent identity if none was selected.",
-        parameters: Type.Object({
-            handle: Type.Optional(Type.String({
-                description: "Handle for a new agent (3-15 chars, lowercase letters, numbers, hyphens, underscores). Only needed when creating a new agent — not needed if the user selected an existing agent in the browser.",
-            })),
-            name: Type.Optional(Type.String({ description: "Display name for the agent" })),
-        }),
-        execute: withUpdateNotice(async (_id, params) => {
-            const cfg = requirePlatformConfig();
-            if (!storedSetupToken) {
-                throw new Error("No setup in progress. Use masons_setup_init first.");
-            }
-            // Poll to get authorization result (includes agent_id from browser selection)
-            let pollResult;
-            try {
-                pollResult = await pollSetup(cfg, storedSetupToken);
-            }
-            catch (err) {
-                if (err instanceof SetupPendingError) {
-                    return textResult("Not yet authorized. Ask the user if they completed authorization in their browser.");
-                }
-                if (err instanceof SetupExpiredError) {
-                    storedSetupToken = null;
-                    return textResult("Setup session expired. Use masons_setup_init to get a new code.");
-                }
-                throw err;
-            }
-            const agentId = pollResult.agent_id;
-            let creds;
-            let isReconnect = false;
-            if (agentId) {
-                // Browser selected an existing agent — reconnect directly
-                try {
-                    creds = await reconnect(cfg, storedSetupToken, agentId);
-                    isReconnect = true;
-                }
-                catch (err) {
-                    if (err instanceof PlatformApiError) {
-                        if (err.status === 404) {
-                            storedSetupToken = null;
-                            return textResult("The selected agent was not found — it may have been deleted. Use masons_setup_init to restart the setup process.");
-                        }
-                        if (err.status === 403) {
-                            storedSetupToken = null;
-                            return textResult("The selected agent doesn't match the authorized session. This may indicate a configuration issue. Use masons_setup_init to restart the setup process.");
-                        }
-                        if (err.status === 401) {
-                            storedSetupToken = null;
-                            return textResult("Setup session expired. Use masons_setup_init to get a new code.");
-                        }
-                    }
-                    throw err;
-                }
-            }
-            else {
-                // No agent selected (user chose "create new" or had 0 agents) — onboard
-                const handle = params.handle;
-                if (!handle) {
-                    return textResult("No existing agent was selected. Please provide a handle to create a new agent. Call masons_setup_complete with a handle parameter.");
-                }
-                try {
-                    creds = await onboard(cfg, storedSetupToken, {
-                        handle,
-                        name: params.name,
-                    });
-                }
-                catch (err) {
-                    if (err instanceof PlatformApiError && err.code === "handle_taken") {
-                        return textResult(`The handle "${handle}" is already taken. Ask the user to choose a different one.`);
-                    }
-                    if (err instanceof PlatformApiError &&
-                        err.code === "invalid_handle") {
-                        return textResult(`The handle "${handle}" is not valid. It must be 3-15 lowercase letters, numbers, hyphens, or underscores.`);
-                    }
-                    if (err instanceof PlatformApiError && err.status === 401) {
-                        storedSetupToken = null;
-                        return textResult("Setup session expired. Use masons_setup_init to get a new code.");
-                    }
-                    throw err;
-                }
-            }
-            // Write credentials to config file — signal to Host
-            await writeCredentials({ connectorUrl: creds.connectorUrl, token: creds.token }, cfg.apiHost);
-            // New agent → mark that profile completion is needed
-            if (!isReconnect) {
-                await markProfileNeeded();
-            }
-            // Clear setup token — flow is complete
-            storedSetupToken = null;
-            return textResult(formatOnboardResult(creds.handle, creds.address, isReconnect));
+        execute: async () => ({
+            content: [
+                {
+                    type: "text",
+                    text: [
+                        "Run this in the terminal where OpenClaw is installed:",
+                        "",
+                        "  openclaw channels login --channel agent-network",
+                        "",
+                        "It will:",
+                        "  1. Display a short setup code and a verification URL.",
+                        "  2. Open the URL in your browser, sign in to MASONS, approve.",
+                        "  3. Return to the terminal — pick an existing agent or create a new one.",
+                        "  4. Persist credentials to openclaw.json. OpenClaw reloads the channel.",
+                        "",
+                        "Note (single-Runtime semantic): if you re-run this with another",
+                        "agent on a different machine, that agent's API key is rotated and",
+                        "any previously-connected OpenClaw is disconnected. Only one",
+                        "Runtime drives an agent at a time.",
+                    ].join("\n"),
+                },
+            ],
         }),
     });
     // --- masons_update_profile ------------------------------------------------
@@ -333,7 +224,7 @@ export function registerTools(api) {
             catch (err) {
                 if (err instanceof PlatformApiError) {
                     if (err.status === 401) {
-                        return textResult("Authentication failed. The API key may be invalid. Try running masons_setup_init to reconnect.");
+                        return textResult("Authentication failed. The API key may be invalid. Ask the user to re-authorize at masons.ai/device.");
                     }
                     if (err.status === 422) {
                         return textResult(`Validation error: ${err.message}`);
@@ -414,7 +305,7 @@ export function registerTools(api) {
                         return textResult(`Agent @${targetHandle} not found. Check the handle and try again.`);
                     }
                     if (err.status === 401) {
-                        return textResult("Authentication failed. The API key may be invalid. Try running masons_setup_init to reconnect.");
+                        return textResult("Authentication failed. The API key may be invalid. Ask the user to re-authorize at masons.ai/device.");
                     }
                     return textResult(`Connection request failed: ${err.message}`);
                 }
@@ -455,7 +346,7 @@ export function registerTools(api) {
             catch (err) {
                 if (err instanceof PlatformApiError) {
                     if (err.status === 401) {
-                        return textResult("Authentication failed. The API key may be invalid. Try running masons_setup_init to reconnect.");
+                        return textResult("Authentication failed. The API key may be invalid. Ask the user to re-authorize at masons.ai/device.");
                     }
                     return textResult(`Failed to list requests: ${err.message}`);
                 }
@@ -576,7 +467,7 @@ export function registerTools(api) {
             catch (err) {
                 if (err instanceof PlatformApiError) {
                     if (err.status === 401) {
-                        return textResult("Authentication failed. The API key may be invalid. Try running masons_setup_init to reconnect.");
+                        return textResult("Authentication failed. The API key may be invalid. Ask the user to re-authorize at masons.ai/device.");
                     }
                     return textResult(`Failed to list connections: ${err.message}`);
                 }

package/dist/types.d.ts

@@ -59,7 +59,7 @@ export interface RegisterAckEvent {
 export interface SendAckEvent {
     event: "SEND_ACK";
     messageId: string;
-    status: "delivered" | "stored" | "queued";
+    status: "delivered" | "stored";
 }
 /** Message received from a routable address. */
 export interface AddressedMessageEvent {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAQ1C,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;8EAE0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;gCAC4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC3C;AAED,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,sBAAsB,GAC9B,aAAa,GACb,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,CAAC;AAUzB,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAErE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAM7D;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,GACZ,IAAI,IAAI,qBAAqB,CAO/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAQ1C,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;8EAE0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;gCAC4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,sBAAsB,GAC9B,aAAa,GACb,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,CAAC;AAUzB,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAErE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAM7D;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,GACZ,IAAI,IAAI,qBAAqB,CAO/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E"}

package/dist/version.d.ts

@@ -1,3 +1,3 @@
 /** Plugin version — must match package.json. Validated by prepublishOnly. */
-export declare const PLUGIN_VERSION = "0.4.25";
+export declare const PLUGIN_VERSION = "0.5.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,eAAO,MAAM,cAAc,WAAW,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,eAAO,MAAM,cAAc,UAAU,CAAC"}

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Plugin version — must match package.json. Validated by prepublishOnly. */
-export const PLUGIN_VERSION = "0.4.25";
+export const PLUGIN_VERSION = "0.5.0";

package/openclaw.plugin.json

@@ -8,8 +8,13 @@
     "properties": {
       "apiHost": {
         "type": "string",
-        "description": "MASONS Platform API host",
-        "default": "preview-platform.masons.ai"
+        "description": "MASONS runtime API host",
+        "default": "preview-connectorapi.masons.ai"
+      },
+      "idpBaseUrl": {
+        "type": "string",
+        "description": "Better Auth IdP base URL (used by `openclaw channels login --channel agent-network` for the OAuth 2.0 Device Authorization Grant flow). Defaults to the preview environment. TODO: flip to https://masons.ai (or api.masons.ai) when W8 consolidation lands.",
+        "default": "https://preview.masons.ai"
       },
       "updateCheck": {
         "type": "boolean",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masons/agent-network",
-  "version": "0.4.25",
+  "version": "0.5.0",
   "description": "MASONS plugin for OpenClaw — connect your agent to the agent network",
   "license": "MIT",
   "author": "MASONS.ai <hello@masons.ai> (https://masons.ai)",
@@ -19,15 +19,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "tsc -p test/tsconfig.json && node --test --loader ts-node/esm test/**/*.test.ts",
-    "lint": "biome check",
-    "format": "biome format --write",
-    "prepublishOnly": "bash scripts/check-version.sh && npm run build && npm run test",
-    "release": "pnpm publish --access public"
-  },
   "files": [
     "dist/",
     "openclaw.plugin.json",
@@ -77,5 +68,13 @@
     "@types/ws": "^8",
     "ts-node": "^10",
     "typescript": "^5"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "tsc -p test/tsconfig.json && node --test --loader ts-node/esm test/**/*.test.ts",
+    "lint": "biome check",
+    "format": "biome format --write",
+    "release": "pnpm publish --access public"
   }
-}
+}