@masons/agent-network 0.5.13 → 0.5.15

package/dist/channel.d.ts

@@ -1,13 +1,6 @@
 import type { AgentNetworkAccount } from "./config-schema.js";
-/** Get the stored owner Passport address (first is_owner visit). */
 export declare function getOwnerPassportAddress(): string | null;
-/**
- * Consume the identity linking nudge flag. Destructive read — returns true
- * at most once per detection cycle. Called by before_prompt_build on
- * non-Passport owner turns to deliver the nudge where the action is relevant.
- */
 export declare function consumeIdentityLinkingNudge(): boolean;
-/** Test-only: set the nudge flag without going through the detection path. */
 export declare function _setNudgePendingForTesting(value: boolean): void;
 interface ChannelMeta {
     name: string;

package/dist/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAkC9D,oEAAoE;AACpE,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAED,8EAA8E;AAC9E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAUD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,oBAAoB,CAAC,CAAC;IAC9B,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IACvD,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACpE,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IACjE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/D;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC9C,QAAQ,CAAC,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACzE;AAED,UAAU,qBAAqB,CAAC,CAAC,GAAG,OAAO;IACzC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAuDD,UAAU,qBAAqB,CAAC,CAAC,GAAG,OAAO;IACzC,YAAY,CAAC,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,WAAW,CAAC,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,UAAU,yBAAyB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IAClD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;CACrD;AA4WD,eAAO,MAAM,mBAAmB,EAAE,yBAyNjC,CAAC"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAmC9D,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAOD,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAUD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,oBAAoB,CAAC,CAAC;IAC9B,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IACvD,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACpE,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IACjE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/D;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC9C,QAAQ,CAAC,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACzE;AAED,UAAU,qBAAqB,CAAC,CAAC,GAAG,OAAO;IACzC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAuDD,UAAU,qBAAqB,CAAC,CAAC,GAAG,OAAO;IACzC,YAAY,CAAC,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,WAAW,CAAC,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,UAAU,yBAAyB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IAClD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;CACrD;AA4WD,eAAO,MAAM,mBAAmB,EAAE,yBAyNjC,CAAC"}

package/dist/channel.js

@@ -9,79 +9,25 @@ import { clearOwnerState, isOwnerAddress, markOwnerAddress, setCurrentTurnIsOwne
 import { setCurrentTurnSender } from "./turn-context.js";
 import { checkForUpdate } from "./update-check.js";
 const dbg = createDebug("agent-network:channel");
-// Cross-channel identity notification: once per startAccount lifecycle.
-// Reset on startAccount(). isIdentityLinksConfigured() provides the
-// cross-restart idempotency (checks config file).
 let notificationAttempted = false;
-// Identity linking nudge — set when the owner first visits via Passport and
-// cross-channel linking is available. Delivered on the owner's next
-// non-Passport turn (Telegram/Feishu) where the linking action is relevant.
-// Separate from ownerNotesQueue to avoid the Passport drain deadlock (#1158):
-// the queue drains on ALL owner turns (including Passport), but this nudge
-// only fires on non-Passport owner turns.
 let identityLinkingNudgePending = false;
-// Owner's Passport address: recorded on first is_owner MESSAGE_RECEIVED.
-// Used by masons_link_identity tool to auto-include the Passport entry.
 let storedOwnerPassportAddress = null;
-/** Get the stored owner Passport address (first is_owner visit). */
 export function getOwnerPassportAddress() {
     return storedOwnerPassportAddress;
 }
-/**
- * Consume the identity linking nudge flag. Destructive read — returns true
- * at most once per detection cycle. Called by before_prompt_build on
- * non-Passport owner turns to deliver the nudge where the action is relevant.
- */
 export function consumeIdentityLinkingNudge() {
     if (!identityLinkingNudgePending)
         return false;
     identityLinkingNudgePending = false;
     return true;
 }
-/** Test-only: set the nudge flag without going through the detection path. */
 export function _setNudgePendingForTesting(value) {
     identityLinkingNudgePending = value;
 }
-// --- Sender identity ---
-/**
- * Project a NodeRef view from `MESSAGE_RECEIVED.metadata.sender` when the
- * Connector has projected a NodeRef onto the inbound envelope (Full Node
- * sender path per `docs/concepts/human-node-capability-obligations.md § 2`
- * + `apps/connector/src/routes/root.ts` § Piece 2 projection).
- *
- * Wire shape (the Connector's `metadata.sender = senderNodeRef` projection):
- * ```
- * metadata: {
- *   visitor_name?: string;       // legacy back-compat
- *   is_owner?: boolean;          // legacy back-compat
- *   client_type?: string;        // legacy back-compat
- *   sender?: {                   // NEW under (b) Full Node
- *     kind: string;
- *     mstpAddress: string;
- *     handle?: string;
- *     displayName?: string;
- *     avatarUrl?: string;
- *   };
- * }
- * ```
- *
- * Returns the NodeRef view when `metadata.sender` is an object with
- * `kind` and `mstpAddress` both string. Returns null otherwise — the
- * caller falls back to the Client-side metadata shape (`visitor_name`,
- * `is_owner`, `client_type`).
- *
- * Per `human-node-capability-obligations.md § 5`, consumers MUST accept
- * future `kind` values (e.g., `"team"`); this projector treats `kind` as
- * opaque and surfaces the value as-is.
- */
 function tryProjectNodeRef(metadata) {
     if (!metadata)
         return null;
     const sender = metadata.sender;
-    // Defensive: reject non-objects, null, and arrays. `typeof [] === "object"`
-    // and `[] !== null`, so an array would otherwise pass the next guard and
-    // produce undefined when indexed by `kind` / `mstpAddress`. Explicit
-    // rejection makes the contract self-documenting.
     if (typeof sender !== "object" || sender === null || Array.isArray(sender))
         return null;
     const senderObj = sender;
@@ -96,36 +42,13 @@ function tryProjectNodeRef(metadata) {
     const avatarUrl = typeof senderObj.avatarUrl === "string" ? senderObj.avatarUrl : undefined;
     return { kind, mstpAddress, handle, displayName, avatarUrl };
 }
-/**
- * Derive the sender display name for the visitor / Identified-Client /
- * anonymous path (no NodeRef projection on metadata).
- *
- * Resolution order:
- * 1. `metadata.visitor_name` — display name for Passport browser visitors
- * 2. `event.from` — extract handle from routable address
- */
 function deriveSenderName(event) {
-    // Account-level identity: Passport visitor with resolved display name
     const visitorName = event.metadata?.visitor_name;
     if (visitorName && typeof visitorName === "string") {
         return visitorName;
     }
-    // Extract handle from `from` address
     return extractHandleFromAddress(event.from);
 }
-/**
- * Derive the sender display name for the Full Node sender path. Walks the
- * fallback chain `displayName → handle → mstpAddress`-derived handle per
- * `docs/concepts/human-node-capability-obligations.md § 2`.
- *
- * Note: the spec's terminal fallback is `mstpAddress` itself. This
- * implementation uses `extractHandleFromAddress(fromAddress)` instead —
- * the `from` field is already a routable address (the same one
- * `mstpAddress` would parse to a handle from), and a parsed handle is
- * higher-fidelity for display than the full URI. When `nodeRef.handle`
- * is absent and `from` does not parse to a handle, both forms degrade
- * equivalently to "unknown"-style strings.
- */
 function deriveNodeName(nodeRef, fromAddress) {
     if (nodeRef.displayName)
         return nodeRef.displayName;
@@ -133,28 +56,20 @@ function deriveNodeName(nodeRef, fromAddress) {
         return nodeRef.handle;
     return extractHandleFromAddress(fromAddress);
 }
-/**
- * Extract the Connector host from a connectorUrl.
- * `wss://preview.masons.ai/gw` -> `preview.masons.ai`
- */
 function extractConnectorHost(connectorUrl) {
     try {
         const url = new URL(connectorUrl);
         return url.hostname;
     }
     catch {
-        // Fallback: strip protocol and path
         return connectorUrl.replace(/^wss?:\/\//, "").replace(/\/.*$/, "");
     }
 }
-// --- Duplicate message protection for at-least-once delivery ---
-// Short-window dedup: stored messages re-delivered on reconnect are
-// suppressed if the same (from, content, sentAt) was seen within 60 seconds.
 const DEDUP_WINDOW_MS = 60_000;
-const recentMessages = new Map(); // key → timestamp
+const recentMessages = new Map();
 function isDuplicate(from, content, sentAt) {
     if (!sentAt)
-        return false; // only dedup stored messages (have sentAt)
+        return false;
     const key = `${from}\0${content}\0${sentAt}`;
     const now = Date.now();
     const seen = recentMessages.get(key);
@@ -162,7 +77,6 @@ function isDuplicate(from, content, sentAt) {
         return true;
     }
     recentMessages.set(key, now);
-    // Lazy cleanup: remove expired entries when map grows large
     if (recentMessages.size > 200) {
         for (const [k, ts] of recentMessages) {
             if (now - ts > DEDUP_WINDOW_MS)
@@ -171,58 +85,25 @@ function isDuplicate(from, content, sentAt) {
     }
     return false;
 }
-// --- Message dispatch helpers ---
-/**
- * Handle an address-based MESSAGE_RECEIVED { from, content, metadata }.
- * This is the primary path for the address-based protocol.
- */
 async function handleAddressedMessage(event, conversationManager, client, ctx) {
     const fromAddress = event.from;
     dbg("routing inbound message from=%s contentLength=%d", fromAddress, event.content.length);
-    // Duplicate protection for at-least-once re-delivery (stored messages).
     if (isDuplicate(fromAddress, event.content, event.sentAt)) {
         dbg("duplicate message suppressed from=%s sentAt=%s", fromAddress, event.sentAt);
         return;
     }
-    // Sender shape disambiguation per `docs/openclaw/program-demo-runbook.md § 4.2`:
-    // - Full Node sender (Node ↔ Node): `metadata.sender` is a NodeRef
-    //   (`kind`, `mstpAddress`, optional `handle` / `displayName` /
-    //   `avatarUrl`) per `docs/concepts/human-node-capability-obligations.md
-    //   § 2` + Connector Piece 2 projection at
-    //   `apps/connector/src/routes/root.ts`.
-    //   Right-Fix lock per #1455 issuecomment-4354081096: route via standard
-    //   Node-peer path; do NOT consult `metadata.is_owner`. `is_owner` is an
-    //   ownership signal, not a routing signal — owner-self-chat walks the
-    //   same wire as stranger-chat.
-    // - Visitor / Identified Client / Anonymous (Client → Node):
-    //   `metadata.sender` is absent; only `visitor_name`, `is_owner`,
-    //   `client_type` per
-    //   `docs/concepts/client-to-node-capability-obligations.md § 2`.
-    //   Existing visitor-mode owner-routing applies.
     const nodeRef = tryProjectNodeRef(event.metadata);
     if (nodeRef) {
-        // Full Node sender — standard Node-peer path. Skip is_owner consultation,
-        // owner-address marking, and the identity-linking nudge (those all key off
-        // the visitor-mode owner concept).
         setCurrentTurnIsOwner(false);
         dbg("Full Node sender: kind=%s mstpAddress=%s handle=%s", nodeRef.kind, nodeRef.mstpAddress, nodeRef.handle ?? "(absent)");
     }
     else {
-        // Visitor-mode path — preserved behavior.
-        // Owner detection: first-message-sets, subsequent-inherits.
-        // Connector includes is_owner in metadata for Passport visitors.
         if (event.metadata?.is_owner === true) {
             markOwnerAddress(fromAddress);
-            // Record Passport address for tool auto-include (first visit only)
             if (!storedOwnerPassportAddress) {
                 storedOwnerPassportAddress = fromAddress;
                 dbg("recorded owner Passport address: %s", fromAddress);
             }
-            // --- dmScope-aware identity linking nudge (#986 redesign, #1158 fix) ---
-            // Detect that identity linking is available but not configured.
-            // Sets a flag (NOT enqueued into ownerNotesQueue) for delivery on the
-            // owner's next non-Passport turn, where the linking action is relevant.
-            // Separated from the queue to avoid the Passport drain deadlock (#1158).
             if (getDmScope() !== "main" &&
                 !isIdentityLinksConfigured() &&
                 !notificationAttempted) {
@@ -233,7 +114,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
         }
         setCurrentTurnIsOwner(isOwnerAddress(fromAddress));
     }
-    // Resolve contact from address. Register inbound conversation if new.
     const contact = nodeRef
         ? deriveNodeName(nodeRef, fromAddress)
         : deriveSenderName(event);
@@ -241,7 +121,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
         conversationManager.registerInbound(contact, fromAddress);
     }
     setCurrentTurnSender(conversationManager.getContactByAddress(fromAddress) ?? null);
-    // Runtime guard
     let runtime;
     try {
         runtime = requirePluginRuntime();
@@ -254,7 +133,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
         dbg("channelRuntime not available, dropping message from=%s", fromAddress);
         return;
     }
-    // senderId for OpenClaw routing: use the routable address
     const senderId = fromAddress;
     const senderName = contact;
     try {
@@ -297,7 +175,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
                 console.error(`[agent-network:${ctx.accountId}] session record error:`, err);
             },
         });
-        // Typing: address-based
         client.sendTyping(fromAddress, true);
         try {
             await runtime.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
@@ -323,9 +200,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
         }
         finally {
             client.sendTyping(fromAddress, false);
-            // Commit deferred deletions from end_conversation calls made during
-            // this dispatch cycle. Must run after text buffer flush so that
-            // hasConversation() returns true for the deliver callback (#999).
             conversationManager.commitEndedConversations();
         }
     }
@@ -334,7 +208,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx) {
     }
 }
 const accounts = new Map();
-// --- Channel Plugin ---
 export const agentNetworkChannel = {
     id: "agent-network",
     meta: {
@@ -349,9 +222,6 @@ export const agentNetworkChannel = {
         attachments: false,
     },
     config: {
-        // Always return ["default"] — matches community convention (Telegram,
-        // Slack, Feishu all do this). Gateway uses isConfigured() to decide
-        // whether to start the account, not the presence of account IDs.
         listAccountIds() {
             return ["default"];
         },
@@ -378,9 +248,6 @@ export const agentNetworkChannel = {
                 token: account.token,
             };
         },
-        // Gateway calls this after resolveAccount(). Return false when
-        // credentials are missing — Gateway marks the channel as "unmanaged"
-        // and skips health checks + startAccount().
         isConfigured(account) {
             return account.connectorUrl !== "" && account.token !== "";
         },
@@ -392,8 +259,6 @@ export const agentNetworkChannel = {
     outbound: {
         deliveryMode: "direct",
         async sendText(ctx) {
-            // ctx.to is the routable address (senderId from inbound dispatch).
-            // ConversationManager.send() handles address resolution transparently.
             const state = accounts.get(ctx.accountId);
             if (!state)
                 return { channel: "agent-network", messageId: "" };
@@ -408,14 +273,9 @@ export const agentNetworkChannel = {
     gateway: {
         async startAccount(ctx) {
             dbg("starting account %s", ctx.accountId);
-            // Reset per-session state
             notificationAttempted = false;
             identityLinkingNudgePending = false;
             storedOwnerPassportAddress = null;
-            // Defensive: clear stale singletons from a previous cycle.
-            // The abort handler intentionally leaves them alive for in-flight tool
-            // calls (#935). Clean up here at cycle start so initConnectorClient()
-            // doesn't throw its double-init guard.
             clearConversationManager();
             clearConnectorClient();
             const { connectorUrl, token } = ctx.account;
@@ -427,64 +287,33 @@ export const agentNetworkChannel = {
                 conversationManager,
             };
             accounts.set(ctx.accountId, state);
-            // --- Inbound message routing (4-step channelRuntime dispatch) ---
-            // Replaces the non-existent routeMessage() API. Uses PluginRuntime
-            // captured in register() via config.ts module-level singleton.
-            // Reference: DingTalk plugin (github.com/soimy/openclaw-channel-dingtalk).
-            //
-            // Concurrency model: this handler is async but EventEmitter fires it
-            // synchronously per event. Multiple MESSAGE_RECEIVED on the same session
-            // produce concurrent dispatches — replies may arrive out of order.
-            // Acceptable for unstructured text conversation (Phase 1). If MSTP adds
-            // structured multi-step interactions, add a per-session dispatch queue.
             client.on("message_received", async (event) => {
                 if (!("from" in event))
-                    return; // address-based only
+                    return;
                 await handleAddressedMessage(event, conversationManager, client, ctx);
             });
-            // --- Delivery ACK ---
-            // ACK immediately on DELIVERY_PENDING — tells Connector it's safe
-            // to delete delivered stored messages.
             client.on("delivery_pending", (event) => {
                 client.ackDelivery(event.upTo);
                 dbg("delivery_pending → ACK sent count=%d upTo=%s", event.count, event.upTo);
             });
-            // --- Disconnect ---
-            // On disconnect, all session state is invalid — clear owner + environment.
             client.on("disconnected", () => {
                 clearOwnerState();
                 clearEnvironmentContext();
             });
-            // --- Error handling ---
-            // Must register before connect() — unhandled "error" events crash the process.
             client.on("error", (err) => {
                 console.error(`[agent-network:${ctx.accountId}]`, err.message);
             });
-            // --- Abort signal ---
-            // Do NOT clear ConversationManager or ConnectorClient here.
-            // In-flight LLM dispatches may still be running — tools that call
-            // requireConversationManager() would throw "Not connected" and trigger
-            // LLM confidence collapse (#935). Instead, let the stale CM survive:
-            // the disconnected WebSocket causes tools to graceful-fail ("Failed to
-            // send message") rather than throw. stopAccount() handles final cleanup.
             ctx.abortSignal.addEventListener("abort", () => {
                 client.disconnect();
             }, { once: true });
-            // --- Inject config for LLM tools ---
             initToolConfig(ctx.cfg);
-            // --- Check for plugin updates (non-blocking) ---
             const networkCfg = extractNetworkConfig(ctx.cfg);
             const updateCheckEnabled = networkCfg?.updateCheck !== false;
             checkForUpdate(updateCheckEnabled).catch(() => { });
-            // --- Connect ---
             await client.connect();
             dbg("connected account=%s", ctx.accountId);
-            // --- Expose client and conversation manager to tools (only after WS is connected) ---
             initConnectorClient(client);
             initConversationManager(conversationManager);
-            // Park the Promise — DO NOT resolve/return.
-            // Resolution signals "account stopped" to OpenClaw's orchestrator,
-            // triggering auto-restart with exponential backoff (crash-loop).
             await new Promise((resolve) => {
                 if (ctx.abortSignal.aborted) {
                     resolve();

package/dist/cli-setup.d.ts

@@ -1,65 +1,3 @@
-/**
- * CLI Login Path — Stripe-style browser-mediated loopback handoff.
- *
- * Implements `login()` hook for OpenClaw's 2026.4.x channel-plugin contract:
- *     api.registerChannel({ plugin: { ..., auth: { login } } })
- *
- * Invoked by `openclaw channels login --channel agent-network`. CLI dispatch
- * at `dist/channels-cli-Cc40S0aS.js:85` reads `plugin.auth?.login` and throws
- * `"Channel ... does not support login"` if absent. See WhatsApp + Feishu
- * bundled extensions for reference implementations of the same contract.
- *
- * Flow (W4 PR 3 — `loopbackHandoffFlow`):
- *
- *   1. Bind a one-shot HTTP listener on `127.0.0.1:0` (OS-assigned ephemeral
- *      port). The listener serves a single `POST /handoff` plus the matching
- *      CORS preflight, then closes.
- *   2. Generate a 24-byte (32-char base64url) URL-safe random nonce. The
- *      nonce travels in the URL fragment (`#nonce=…`), never the query
- *      string — fragments do not reach `apps/web` access logs nor referer
- *      headers (Alt W4-B2 lock).
- *   3. Open the user's browser to the handoff URL (no-handle path uses
- *      `${idpBaseUrl}/console/handoff?port=<port>#nonce=<nonce>`; with
- *      `--handle` the per-handle deep-link variant is the entry).
- *   4. The user authenticates against Better Auth on `apps/web`, picks (or
- *      creates) an agent, and the page POSTs `{token, agent, key, nonce}`
- *      to the listener. The listener verifies the body's `nonce` matches
- *      the value it placed in the fragment, accepts the token, and closes.
- *   5. Persist `{connectorUrl, token}` to `openclaw.json` via
- *      `writeCredentials()`. `connectorUrl` is derived from `apiHost`
- *      (`wss://<apiHost>/gateway`) for cloud / preview deployments; self-
- *      hosted users keep an explicit `connectorUrl` in their `openclaw.json`
- *      and the legacy value is preserved across the handoff (see
- *      `loadExistingConnectorUrl()`).
- *
- * Why move off device flow:
- *
- *   - One step shorter (no `user_code` to type into the browser).
- *   - No periodic IdP polling (was 5s default, 5+s on `slow_down`).
- *   - Browser remains fully authenticated across login and key issuance —
- *     same Better Auth session is reused, so the user never re-types their
- *     password mid-flow.
- *   - The runtime API key carrier (`masons_rt_…`) replaces the legacy
- *     connector-minted `sk-…` carrier; W4 PR 1 substrate plus the connector
- *     mirror wiring earlier in this PR make both carriers verifiable through
- *     plugin v0.5.13's life until the W6 cleanup retires the legacy path.
- *
- * The legacy device-flow helpers (`deviceCodeFlow`, `pollUntilAuthorized`,
- * `agentSetup`, `createAgentLoop`) remain in this file as
- * `@deprecated` references for the W6 cleanup window. They have no call
- * site after the migration and should not be invoked by any new code.
- *
- * See #1264 for original design rationale (single-driver Node semantic —
- * re-running this flow rotates the runtime key and evicts any previously-
- * connected Runtime); see the W4 strategic-pass at
- * `#1466 issuecomment-4362892782` for the loopback handoff lock.
- */
-/**
- * Minimal OpenClaw runtime surface passed to `auth.login`. Exposed as
- * `defaultRuntime` in `openclaw/dist/runtime-Dx7oeLYq.js` — plugins get
- * only the output/exit channel, not a prompter (plugins build their own
- * via @clack/prompts, which is what OpenClaw CLI uses internally too).
- */
 interface OpenClawRuntime {
     log(...args: unknown[]): void;
     error(...args: unknown[]): void;
@@ -67,11 +5,6 @@ interface OpenClawRuntime {
     writeJson(value: unknown, space?: number): void;
     exit(code: number): void;
 }
-/**
- * Context passed by OpenClaw CLI to `plugin.auth.login`. Matches the call
- * site at `dist/channels-cli-Cc40S0aS.js:89`:
- *     await login({ cfg, accountId, runtime, verbose, channelInput });
- */
 interface AuthLoginContext {
     cfg: Record<string, unknown>;
     accountId?: string;
@@ -79,32 +12,6 @@ interface AuthLoginContext {
     verbose?: boolean;
     channelInput?: string;
 }
-/**
- * Channel login hook — invoked by `openclaw channels login --channel agent-network`.
- *
- * Unlike the legacy `configureInteractive` contract (which returned a config
- * object for the CLI to persist), the 2026.4.x `auth.login` contract returns
- * void and expects the plugin to persist any config changes itself. We use
- * `writeCredentials()` in config.ts, which writes `openclaw.json` atomically
- * and bumps the state-cache generation so Layer B's dynamic context re-reads
- * on the next turn.
- *
- * Flow (W4 PR 3):
- *   1. Run `loopbackHandoffFlow` against `apps/web` — a Stripe-style
- *      browser-mediated runtime-key issuance that delivers the plaintext
- *      `masons_rt_…` token to a one-shot loopback listener bound at
- *      `127.0.0.1:0` with a fragment-nonce cross-origin discipline.
- *   2. Resolve the connector URL — preserve any user-set
- *      `accounts.default.connectorUrl` from `openclaw.json` (for self-
- *      hosted topologies); fall back to the cloud derivation
- *      `wss://<apiHost>/gateway` matching the connector's
- *      `CONNECTOR_PLUGIN_URL` env default.
- *   3. Persist `{connectorUrl, token}` atomically.
- *
- * Errors during the handoff are surfaced via `ctx.runtime.error` (not
- * thrown) so OpenClaw CLI doesn't display a stack trace — matches the
- * WhatsApp/Feishu pattern.
- */
 export declare function login(ctx: AuthLoginContext): Promise<void>;
 export {};
 //# sourceMappingURL=cli-setup.d.ts.map

package/dist/cli-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-setup.d.ts","sourceRoot":"","sources":["../src/cli-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AA2CH;;;;;GAKG;AACH,UAAU,eAAe;IACvB,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,UAAU,gBAAgB;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAw2BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDhE"}
+{"version":3,"file":"cli-setup.d.ts","sourceRoot":"","sources":["../src/cli-setup.ts"],"names":[],"mappings":"AAqFA,UAAU,eAAe;IACvB,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAOD,UAAU,gBAAgB;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAyWD,wBAAsB,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDhE"}