@masons/agent-network 0.5.14 → 0.5.15

package/dist/turn-context.js

@@ -1,80 +1,23 @@
-/**
- * Turn Context — per-turn metadata captured during inbound message dispatch.
- *
- * Tracks the sender identity for the current LLM turn. Set in channel.ts
- * message_received handler (using the closure-scoped ConversationManager),
- * consumed by before_prompt_build in plugin.ts to inject interaction context.
- *
- * Follows the same consume-on-read pattern as owner-session-state.ts:
- * - Written BEFORE dispatch (so before_prompt_build can read it synchronously)
- * - Consumed (read + reset) to prevent stale state across turns
- *
- * Race condition caveat: if two inbound messages arrive on different sessions
- * near-simultaneously, the sender may reflect the wrong session. Acceptable
- * for Phase 1 — OpenClaw processes turns sequentially per agent. Same caveat
- * as owner-session-state.ts currentTurnIsOwner.
- *
- * Module-level singleton — shared between channel.ts (write) and plugin.ts (read).
- */
-// ---------------------------------------------------------------------------
-// State
-// ---------------------------------------------------------------------------
-/** Contact handle of the sender for the current turn. null = unknown/unset. */
 let currentTurnSender = null;
-/** Channel ID for the current turn. null = unknown/unset. */
 let currentTurnChannelId = null;
-/** Whether the current turn was triggered by the owner. */
 let currentTurnIsOwner = false;
-// ---------------------------------------------------------------------------
-// Write API (called from channel.ts)
-// ---------------------------------------------------------------------------
-/**
- * Set the sender identity for the current turn.
- * Called in message_received before dispatch, using the closure-scoped
- * ConversationManager to resolve sessionId → contact handle.
- */
 export function setCurrentTurnSender(contact) {
     currentTurnSender = contact;
 }
-/**
- * Set the channel ID for the current turn.
- * Called in before_prompt_build — the hook provides channelId.
- * Persists through tool execution within the same turn.
- */
 export function setCurrentTurnChannelId(channelId) {
     currentTurnChannelId = channelId;
 }
-/**
- * Set the owner flag for the current turn (non-consuming copy).
- * Called in before_prompt_build after consuming from owner-session-state.
- * This copy persists through tool execution within the same turn.
- */
 export function setCurrentTurnIsOwnerForTools(value) {
     currentTurnIsOwner = value;
 }
-// ---------------------------------------------------------------------------
-// Read API (called from plugin.ts)
-// ---------------------------------------------------------------------------
-/**
- * Consume the per-turn sender identity. Returns the value and resets to null.
- * Consuming prevents stale state from leaking into subsequent turns.
- */
 export function consumeCurrentTurnSender() {
     const value = currentTurnSender;
     currentTurnSender = null;
     return value;
 }
-/**
- * Get the channel ID for the current turn (non-consuming).
- * Used by tool access gates to determine which channel triggered the turn.
- */
 export function getCurrentTurnChannelId() {
     return currentTurnChannelId;
 }
-/**
- * Get the owner flag for the current turn (non-consuming).
- * Used by tool access gates to enforce owner-only tools.
- */
 export function getCurrentTurnIsOwnerNonConsuming() {
     return currentTurnIsOwner;
 }

package/dist/types.d.ts

@@ -6,12 +6,8 @@ export interface RegisterEvent {
     token: string;
     protocolVersion: number;
     clientVersion?: string;
-    /** Delivery cursor — highest recipientSeq the Plugin has received.
-     *  When present, Connector fills the gap since this seq on REGISTER.
-     *  When absent, no gap fill (backward compat / first connect). (#1133) */
     lastKnownSeq?: number;
 }
-/** Send a message directly to a routable address. */
 export interface AddressedSendEvent {
     event: "SEND_MESSAGE";
     messageId: string;
@@ -20,13 +16,11 @@ export interface AddressedSendEvent {
     contentType: string;
     metadata?: Record<string, unknown>;
 }
-/** Send a typing indicator to a routable address. */
 export interface AddressedTypingEvent {
     event: "TYPING";
     to: string;
     isTyping: boolean;
 }
-/** Acknowledge delivery of stored messages up to a timestamp. */
 export interface AddressedDeliveryAckEvent {
     event: "DELIVERY_ACK";
     upTo: string;
@@ -36,87 +30,30 @@ export interface RegisterAckEvent {
     status: "ok" | "error";
     reason?: string;
     protocolVersion: number;
-    /** Agent identity — present when Connector supports environment context (#969). */
     agent?: {
         handle: string;
         name?: string;
     };
-    /** Owner identity — present when agent has a bound owner with a MASONS account. */
     owner?: {
         handle: string;
         displayName?: string;
     };
-    /** Current delivery sequence for this agent. Plugin stores as initial
-     *  lastKnownSeq. (#1133) */
     deliverySeq?: number;
 }
-/**
- * Delivery confirmation for a sent message.
- *
- * Plugins MUST treat unknown `status` values as successful delivery
- * (forward compatibility).
- */
 export interface SendAckEvent {
     event: "SEND_ACK";
     messageId: string;
     status: "delivered" | "stored";
 }
-/** Message received from a routable address.
- *
- *  The `metadata` bag is intentionally `Record<string, unknown>` — the wire
- *  contract does not constrain it. Two shapes the Connector may project:
- *  - **Full Node sender** (Node ↔ Node): `metadata.sender` carries a
- *    NodeRef-shaped projection per
- *    `docs/concepts/human-node-capability-obligations.md § 2`, alongside
- *    the existing Identified-Client back-compat fields. See {@link NodeRefView}
- *    and `apps/connector/src/routes/root.ts` § Piece 2 projection.
- *  - **Identified / Anonymous Client sender** (Client → Node):
- *    `metadata.sender` is absent; only `visitor_name`, `is_owner`,
- *    `client_type` per
- *    `docs/concepts/client-to-node-capability-obligations.md § 2`.
- *
- *  Discriminator semantics on the wire: when `metadata.sender` is present,
- *  it is the AUTHORITATIVE identity of the sender — consumers updated to
- *  recognise NodeRef MUST treat `metadata.sender` as the source of truth
- *  and the legacy fields as deprecated annotations. See `channel.ts §
- *  tryProjectNodeRef`. */
 export interface AddressedMessageEvent {
     event: "MESSAGE_RECEIVED";
     from: string;
     content: string;
     contentType: string;
     metadata: Record<string, unknown>;
-    /** ISO 8601. Present when message was stored and delivered later. */
     sentAt?: string;
-    /** Recipient delivery sequence number. Plugin updates lastKnownSeq =
-     *  max(lastKnownSeq, seq). Present for messages from `messages` collection
-     *  (online delivery + gap fill). (#1133) */
     seq?: number;
 }
-/**
- * NodeRef view, as carried under `AddressedMessageEvent.metadata.sender`
- * by the Connector when the sender is a Full Node (per
- * `docs/concepts/human-node-capability-obligations.md § 2` +
- * `apps/connector/src/routes/root.ts` § Piece 2 projection).
- *
- * Fields:
- * - `kind` — discriminator. MASONS Cloud emits `"user"` (Human Node) or
- *   `"agent"` (Agent Node). Consumers MUST accept other string values per
- *   the same doc § 5 (forward-compat).
- * - `mstpAddress` — canonical Node identity URI. Always populated when
- *   `kind` is. Equality between two NodeRefs is defined as string-equality
- *   on `mstpAddress`.
- * - `handle` — handle within the host's namespace. Populated for
- *   MASONS-Cloud-hosted Nodes; may be omitted for federated Nodes.
- * - `displayName` — owner-set display name. Optional.
- * - `avatarUrl` — image URL. Optional.
- *
- * Plugin consumption: `channel.ts § tryProjectNodeRef` extracts this view
- * from `event.metadata.sender` when both `kind` and `mstpAddress` are
- * strings. Callers that receive a non-null view route via the standard
- * Node-peer dispatch path; callers that receive null fall through to the
- * Client-side metadata shape (`visitor_name`, `is_owner`, `client_type`).
- */
 export interface NodeRefView {
     kind: string;
     mstpAddress: string;
@@ -124,13 +61,11 @@ export interface NodeRefView {
     displayName?: string;
     avatarUrl?: string;
 }
-/** Notification that stored messages have been delivered. */
 export interface DeliveryPendingEvent {
     event: "DELIVERY_PENDING";
     count: number;
     upTo: string;
 }
-/** Structured error with machine-readable code. */
 export interface StructuredErrorEvent {
     event: "ERROR";
     messageId?: string;
@@ -138,12 +73,10 @@ export interface StructuredErrorEvent {
     code: string;
     message: string;
 }
-/** Delivery status notification for a stored message. */
 export interface DeliveryStatusEvent {
     event: "DELIVERY_STATUS";
     messageId: string;
     status: "delivered";
-    /** ISO 8601 — when the delivery occurred. */
     deliveredAt?: string;
 }
 export type PluginToConnectorEvent = RegisterEvent | AddressedSendEvent | AddressedTypingEvent | AddressedDeliveryAckEvent;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAQ1C,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;8EAE0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,mFAAmF;IACnF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;gCAC4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;0BAkB0B;AAC1B,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,sBAAsB,GAC9B,aAAa,GACb,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,CAAC;AAUzB,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAErE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAM7D;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,GACZ,IAAI,IAAI,qBAAqB,CAO/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAQ1C,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAGD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;CACnB;AAGD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,cAAc,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IAExB,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE1C,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAGjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAQD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAqBD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA0BD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAGD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,sBAAsB,GAC9B,aAAa,GACb,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,CAAC;AAUzB,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAErE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,YAAY,CAM7D;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,GACZ,IAAI,IAAI,qBAAqB,CAO/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAO7E"}

package/dist/types.js

@@ -1,13 +1,6 @@
-// Internal Protocol: Plugin <-> Connector (JSON over WebSocket)
-// Must stay wire-compatible with the Connector service.
-// Independently defined — this package does not depend on Connector code.
-// --- Constants ---
 export const CURRENT_PROTOCOL_VERSION = 2;
 export const REGISTER_ACK_TIMEOUT_MS = 15_000;
 export const SEND_ACK_TIMEOUT_MS = 15_000;
-// ==========================================================================
-// Type guards
-// ==========================================================================
 function isObject(data) {
     return typeof data === "object" && data !== null;
 }

package/dist/update-cache.d.ts

@@ -1,20 +1,3 @@
-/**
- * File cache for update check results.
- *
- * WORKAROUND: This module is split from update-check.ts to avoid
- * OpenClaw's plugin security scanner false positive. The scanner uses
- * per-file regex (no AST) and flags co-located fs-read + network-send
- * patterns as "potential-exfiltration". Splitting cache I/O into its
- * own file keeps the two pattern halves in separate files.
- *
- * When the scanner gains dataflow analysis or a suppression mechanism,
- * merge this back into update-check.ts where it logically belongs.
- *
- * NOTE: This comment deliberately avoids spelling out the trigger
- * function names — the scanner matches inside comments too.
- *
- * See: https://github.com/openclaw/openclaw/issues/11222
- */
 export interface UpdateCheckCache {
     checkedAt: number;
     latestVersion: string;

package/dist/update-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-cache.d.ts","sourceRoot":"","sources":["../src/update-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAUD,wBAAsB,SAAS,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAgBlE;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE"}
+{"version":3,"file":"update-cache.d.ts","sourceRoot":"","sources":["../src/update-cache.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAUD,wBAAsB,SAAS,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAgBlE;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE"}

package/dist/update-cache.js

@@ -1,26 +1,6 @@
-/**
- * File cache for update check results.
- *
- * WORKAROUND: This module is split from update-check.ts to avoid
- * OpenClaw's plugin security scanner false positive. The scanner uses
- * per-file regex (no AST) and flags co-located fs-read + network-send
- * patterns as "potential-exfiltration". Splitting cache I/O into its
- * own file keeps the two pattern halves in separate files.
- *
- * When the scanner gains dataflow analysis or a suppression mechanism,
- * merge this back into update-check.ts where it logically belongs.
- *
- * NOTE: This comment deliberately avoids spelling out the trigger
- * function names — the scanner matches inside comments too.
- *
- * See: https://github.com/openclaw/openclaw/issues/11222
- */
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { getOpenClawHome } from "./config.js";
-// ---------------------------------------------------------------------------
-// Cache I/O
-// ---------------------------------------------------------------------------
 function getCachePath() {
     return join(getOpenClawHome(), "state", "agent-network-update.json");
 }
@@ -35,7 +15,7 @@ export async function readCache() {
         return data;
     }
     catch {
-        return null; // file doesn't exist or is corrupt
+        return null;
     }
 }
 export async function writeCache(cache) {

package/dist/update-check.d.ts

@@ -1,53 +1,14 @@
-/**
- * Startup version check — detects available plugin updates.
- *
- * Adapted from OpenClaw core's update-startup.ts pattern:
- * check npm registry on startup, cache result, surface to Agent.
- *
- * Design principles:
- * - Fire-and-forget: never delays startAccount() or blocks WebSocket.
- * - Best-effort: network errors, timeouts, bad JSON → silent skip.
- * - Passive surfacing: tools read module-level state via getUpdateInfo().
- * - Zero new dependencies: uses global fetch + fs.
- *
- * Note: cache I/O lives in update-cache.ts — see that file's header
- * for why it's split (OpenClaw scanner workaround).
- */
 import type { UpdateCheckCache } from "./update-cache.js";
-/** Result of an update check, stored in module-level state. */
 export interface UpdateInfo {
     currentVersion: string;
     latestVersion: string;
     updateAvailable: boolean;
 }
 export type { UpdateCheckCache };
-/** Get the current update check result, or null if not yet checked. */
 export declare function getUpdateInfo(): UpdateInfo | null;
-/** Get the plugin's own version. */
 export declare function getPluginVersion(): string;
-/**
- * Check npm registry for a newer plugin version.
- *
- * Called from startAccount() as fire-and-forget. Uses a 24h file cache
- * to avoid hitting npm on every gateway restart.
- *
- * Never throws — all errors are caught and silently ignored.
- */
 export declare function checkForUpdate(enabled?: boolean): Promise<void>;
-/**
- * Fetch the latest published version from the npm registry.
- *
- * Returns the version string, or null on any error (timeout, network,
- * malformed response). Uses a 5-second timeout to avoid blocking startup.
- */
-export declare function fetchLatestVersion(): Promise<string | null>;
-/**
- * Simple semver comparison: is `a` newer than `b`?
- *
- * Compares major.minor.patch numerically. No pre-release or build
- * metadata support — we use simple x.y.z versions.
- */
+export declare function getLatestPublishedVersion(): Promise<string | null>;
 export declare function isNewer(a: string, b: string): boolean;
-/** @internal Reset module state for test isolation. */
 export declare function _resetForTesting(): void;
 //# sourceMappingURL=update-check.d.ts.map

package/dist/update-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-check.d.ts","sourceRoot":"","sources":["../src/update-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAiB1D,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAGD,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAYjC,uEAAuE;AACvE,wBAAgB,aAAa,IAAI,UAAU,GAAG,IAAI,CAEjD;AAED,oCAAoC;AACpC,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,OAAO,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAiClE;AAMD;;;;;GAKG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBjE;AAMD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAarD;AAMD,uDAAuD;AACvD,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}
+{"version":3,"file":"update-check.d.ts","sourceRoot":"","sources":["../src/update-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAkB1D,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAGD,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAajC,wBAAgB,aAAa,IAAI,UAAU,GAAG,IAAI,CAEjD;AAGD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAUD,wBAAsB,cAAc,CAAC,OAAO,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAiClE;AAUD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxE;AAYD,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAarD;AAOD,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/update-check.js

@@ -1,50 +1,16 @@
-/**
- * Startup version check — detects available plugin updates.
- *
- * Adapted from OpenClaw core's update-startup.ts pattern:
- * check npm registry on startup, cache result, surface to Agent.
- *
- * Design principles:
- * - Fire-and-forget: never delays startAccount() or blocks WebSocket.
- * - Best-effort: network errors, timeouts, bad JSON → silent skip.
- * - Passive surfacing: tools read module-level state via getUpdateInfo().
- * - Zero new dependencies: uses global fetch + fs.
- *
- * Note: cache I/O lives in update-cache.ts — see that file's header
- * for why it's split (OpenClaw scanner workaround).
- */
 import { readCache, writeCache } from "./update-cache.js";
 import { PLUGIN_VERSION } from "./version.js";
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
 const NPM_PACKAGE_NAME = "@masons/agent-network";
 const NPM_REGISTRY_URL = `https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`;
-const CHECK_INTERVAL_MS = 86_400_000; // 24 hours
+const CHECK_INTERVAL_MS = 86_400_000;
 const FETCH_TIMEOUT_MS = 5_000;
-// ---------------------------------------------------------------------------
-// Module-level state
-// ---------------------------------------------------------------------------
 let updateInfo = null;
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/** Get the current update check result, or null if not yet checked. */
 export function getUpdateInfo() {
     return updateInfo;
 }
-/** Get the plugin's own version. */
 export function getPluginVersion() {
     return PLUGIN_VERSION;
 }
-/**
- * Check npm registry for a newer plugin version.
- *
- * Called from startAccount() as fire-and-forget. Uses a 24h file cache
- * to avoid hitting npm on every gateway restart.
- *
- * Never throws — all errors are caught and silently ignored.
- */
 export async function checkForUpdate(enabled = true) {
     if (!enabled)
         return;
@@ -52,20 +18,18 @@ export async function checkForUpdate(enabled = true) {
         const cache = await readCache();
         let latestVersion;
         if (cache && Date.now() - cache.checkedAt < CHECK_INTERVAL_MS) {
-            // Cache is fresh — use cached result
             latestVersion = cache.latestVersion;
         }
         else {
-            // Cache is stale or missing — fetch from npm
-            const fetched = await fetchLatestVersion();
+            const fetched = await getLatestPublishedVersion();
             if (!fetched)
-                return; // network error — skip silently
+                return;
             latestVersion = fetched;
             await writeCache({
                 checkedAt: Date.now(),
                 latestVersion,
                 installedVersion: PLUGIN_VERSION,
-            }).catch(() => { }); // write failure is non-critical
+            }).catch(() => { });
         }
         updateInfo = {
             currentVersion: PLUGIN_VERSION,
@@ -75,19 +39,9 @@ export async function checkForUpdate(enabled = true) {
         };
     }
     catch {
-        // Never throw — version check is best-effort
     }
 }
-// ---------------------------------------------------------------------------
-// Internal: npm registry
-// ---------------------------------------------------------------------------
-/**
- * Fetch the latest published version from the npm registry.
- *
- * Returns the version string, or null on any error (timeout, network,
- * malformed response). Uses a 5-second timeout to avoid blocking startup.
- */
-export async function fetchLatestVersion() {
+export async function getLatestPublishedVersion() {
     try {
         const res = await fetch(NPM_REGISTRY_URL, {
             signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
@@ -102,18 +56,9 @@ export async function fetchLatestVersion() {
         return version;
     }
     catch {
-        return null; // timeout, network error, JSON parse error
+        return null;
     }
 }
-// ---------------------------------------------------------------------------
-// Internal: version comparison
-// ---------------------------------------------------------------------------
-/**
- * Simple semver comparison: is `a` newer than `b`?
- *
- * Compares major.minor.patch numerically. No pre-release or build
- * metadata support — we use simple x.y.z versions.
- */
 export function isNewer(a, b) {
     const pa = a.split(".").map(Number);
     const pb = b.split(".").map(Number);
@@ -126,12 +71,8 @@ export function isNewer(a, b) {
         if (va < vb)
             return false;
     }
-    return false; // equal
+    return false;
 }
-// ---------------------------------------------------------------------------
-// Test-only reset
-// ---------------------------------------------------------------------------
-/** @internal Reset module state for test isolation. */
 export function _resetForTesting() {
     updateInfo = null;
 }

package/dist/version.d.ts

@@ -1,3 +1,2 @@
-/** Plugin version — must match package.json. Validated by prepublishOnly. */
-export declare const PLUGIN_VERSION = "0.5.14";
+export declare const PLUGIN_VERSION = "0.5.15";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,eAAO,MAAM,cAAc,WAAW,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc,WAAW,CAAC"}

package/dist/version.js

@@ -1,2 +1 @@
-/** Plugin version — must match package.json. Validated by prepublishOnly. */
-export const PLUGIN_VERSION = "0.5.14";
+export const PLUGIN_VERSION = "0.5.15";

package/openclaw.plugin.json

@@ -2,18 +2,40 @@
   "id": "agent-network",
   "channels": ["agent-network"],
   "skills": ["skills/agent-network"],
+  "contracts": {
+    "tools": [
+      "masons_setup",
+      "masons_update_profile",
+      "masons_send_connection_request",
+      "masons_list_requests",
+      "masons_accept_request",
+      "masons_decline_request",
+      "masons_list_connections",
+      "masons_send_message",
+      "masons_end_conversation",
+      "masons_note_for_owner",
+      "masons_upgrade",
+      "masons_link_identity",
+      "masons_unlink_identity"
+    ]
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,
     "properties": {
       "apiHost": {
         "type": "string",
-        "description": "MASONS runtime API host",
-        "default": "preview-connectorapi.masons.ai"
+        "description": "MASONS Services API host",
+        "default": "preview-api.masons.ai"
+      },
+      "connectorUrl": {
+        "type": "string",
+        "description": "MASONS Connector Gateway WebSocket URL",
+        "default": "wss://preview-connectorapi.masons.ai/gateway"
       },
       "idpBaseUrl": {
         "type": "string",
-        "description": "Better Auth IdP base URL (used by `openclaw channels login --channel agent-network` for the OAuth 2.0 Device Authorization Grant flow). Defaults to the preview environment. TODO: flip to https://masons.ai (or api.masons.ai) when W8 consolidation lands.",
+        "description": "Better Auth IdP base URL used by `openclaw channels login --channel agent-network` for the encrypted handoff. Defaults to the preview environment.",
         "default": "https://preview.masons.ai"
       },
       "updateCheck": {
@@ -22,5 +44,37 @@
         "default": true
       }
     }
+  },
+  "channelConfigs": {
+    "agent-network": {
+      "label": "MASONS Agent Network",
+      "description": "Connect an OpenClaw runtime to MASONS Agent Network.",
+      "schema": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "apiHost": {
+            "type": "string",
+            "description": "MASONS Services API host",
+            "default": "preview-api.masons.ai"
+          },
+          "connectorUrl": {
+            "type": "string",
+            "description": "MASONS Connector Gateway WebSocket URL",
+            "default": "wss://preview-connectorapi.masons.ai/gateway"
+          },
+          "idpBaseUrl": {
+            "type": "string",
+            "description": "Better Auth IdP base URL used by `openclaw channels login --channel agent-network` for the encrypted handoff. Defaults to the preview environment.",
+            "default": "https://preview.masons.ai"
+          },
+          "updateCheck": {
+            "type": "boolean",
+            "description": "Check for plugin updates on startup (default: true)",
+            "default": true
+          }
+        }
+      }
+    }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masons/agent-network",
-  "version": "0.5.14",
+  "version": "0.5.15",
   "description": "MASONS plugin for OpenClaw — connect your agent to the agent network",
   "license": "MIT",
   "author": "MASONS.ai <hello@masons.ai> (https://masons.ai)",
@@ -19,6 +19,15 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "tsc -p test/tsconfig.json && node --test --loader ts-node/esm test/**/*.test.ts",
+    "lint": "biome check",
+    "format": "biome format --write",
+    "prepublishOnly": "bash scripts/check-version.sh && npm run build && npm run test",
+    "release": "pnpm publish --access public"
+  },
   "files": [
     "dist/",
     "openclaw.plugin.json",
@@ -69,13 +78,5 @@
     "@types/ws": "^8",
     "ts-node": "^10",
     "typescript": "^5"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "tsc -p test/tsconfig.json && node --test --loader ts-node/esm test/**/*.test.ts",
-    "lint": "biome check",
-    "format": "biome format --write",
-    "release": "pnpm publish --access public"
   }
-}
+}