@masons/agent-network 0.6.17 → 0.6.19

package/dist/channel.d.ts

@@ -1,9 +1,14 @@
-import type { ChannelPlugin } from "openclaw/plugin-sdk/channel-core";
+import type { ChannelPlugin, PluginRuntime } from "openclaw/plugin-sdk/channel-core";
 import type { AgentNetworkAccount } from "./config-schema.js";
 export declare function getOwnerPassportAddress(): string | null;
 export declare function consumeIdentityLinkingNudge(): boolean;
 export declare function _setNudgePendingForTesting(value: boolean): void;
-declare function withAgentNetworkSilentReplyPolicy(cfg: Record<string, unknown>): Record<string, unknown>;
+export declare function buildServicesRetainedRuntimeSessionKey(buildAgentSessionKey: PluginRuntime["channel"]["routing"]["buildAgentSessionKey"], params: {
+    agentId: string;
+    accountId: string;
+    messageRef: string;
+}): string;
+declare function withAgentNetworkSilentReplyPolicy(cfg: Record<string, unknown>, servicesRetained?: boolean): Record<string, unknown>;
 export declare const _withAgentNetworkSilentReplyPolicyForTesting: typeof withAgentNetworkSilentReplyPolicy;
 export declare const agentNetworkChannel: ChannelPlugin<AgentNetworkAccount>;
 export {};

package/dist/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EAEd,MAAM,kCAAkC,CAAC;AAa1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAkD9D,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAOD,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAaD,iBAAS,iCAAiC,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6BzB;AAED,eAAO,MAAM,4CAA4C,0CACtB,CAAC;AA+gBpC,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAiRlE,CAAC"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACd,MAAM,kCAAkC,CAAC;AAa1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAuD9D,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAOD,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAeD,wBAAgB,sCAAsC,CACpD,oBAAoB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,EACjF,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,GACA,MAAM,CAiBR;AAED,iBAAS,iCAAiC,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,gBAAgB,UAAQ,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8CzB;AAED,eAAO,MAAM,4CAA4C,0CACtB,CAAC;AAokBpC,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAuRlE,CAAC"}

package/dist/channel.js

@@ -1,4 +1,4 @@
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import createDebug from "debug";
 import { clearConnectorClient, clearConversationManager, extractNetworkConfig, getDmScope, initConnectorClient, initConversationManager, initToolConfig, isIdentityLinksConfigured, requirePlatformConfig, requirePluginRuntime, } from "./config.js";
 import { ConnectorClient } from "./connector-client.js";
@@ -7,8 +7,10 @@ import { clearEnvironmentContext } from "./environment-context.js";
 import { extractHandleFromAddress } from "./handle-utils.js";
 import { clearOwnerState, isOwnerAddress, markOwnerAddress, setCurrentTurnIsOwner, setCurrentTurnOwnerSignal, } from "./owner-session-state.js";
 import { ServicesRetainedRecipientConsumer, } from "./services-retained-recipient.js";
+import { isServicesRetainedReplyContext, runWithServicesRetainedReplyContext, } from "./services-retained-reply-context.js";
+import { runWithServicesRetainedToolPolicy } from "./services-retained-tool-policy.js";
 import { createReplyTraceMetadata, ensureTraceMetadata, } from "./trace-metadata.js";
-import { setCurrentTurnReplyRoute, setCurrentTurnSender, setCurrentTurnSenderAddress, } from "./turn-context.js";
+import { setCurrentTurnSender, setCurrentTurnSenderAddress, } from "./turn-context.js";
 import { checkForUpdate } from "./update-check.js";
 const dbg = createDebug("agent-network:channel");
 const SERVICES_RETAINED_INBOX_PEER = "agent-network:services-retained-node-inbox";
@@ -30,7 +32,23 @@ export function _setNudgePendingForTesting(value) {
 function isRecord(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function withAgentNetworkSilentReplyPolicy(cfg) {
+const SERVICES_RETAINED_TOOL_ALLOW = ["masons_note_for_owner"];
+export function buildServicesRetainedRuntimeSessionKey(buildAgentSessionKey, params) {
+    const messageRefDigest = createHash("sha256")
+        .update(params.messageRef, "utf8")
+        .digest("hex");
+    return buildAgentSessionKey({
+        agentId: params.agentId,
+        channel: "agent-network",
+        accountId: params.accountId,
+        peer: {
+            kind: "direct",
+            id: `services-retained-${messageRefDigest}`,
+        },
+        dmScope: "per-account-channel-peer",
+    });
+}
+function withAgentNetworkSilentReplyPolicy(cfg, servicesRetained = false) {
     const surfaces = isRecord(cfg.surfaces) ? cfg.surfaces : {};
     const existingSurface = isRecord(surfaces["agent-network"])
         ? surfaces["agent-network"]
@@ -41,6 +59,8 @@ function withAgentNetworkSilentReplyPolicy(cfg) {
     const silentReplyRewrite = isRecord(existingSurface.silentReplyRewrite)
         ? existingSurface.silentReplyRewrite
         : {};
+    const tools = isRecord(cfg.tools) ? cfg.tools : {};
+    const messages = isRecord(cfg.messages) ? cfg.messages : {};
     return {
         ...cfg,
         surfaces: {
@@ -57,6 +77,18 @@ function withAgentNetworkSilentReplyPolicy(cfg) {
                 },
             },
         },
+        ...(servicesRetained && {
+            messages: {
+                ...messages,
+                visibleReplies: "automatic",
+            },
+            tools: {
+                ...tools,
+                allow: [...SERVICES_RETAINED_TOOL_ALLOW],
+                alsoAllow: [],
+                toolSearch: false,
+            },
+        }),
     };
 }
 export const _withAgentNetworkSilentReplyPolicyForTesting = withAgentNetworkSilentReplyPolicy;
@@ -123,7 +155,7 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
             console.warn(`[agent-network:channel] invalid traceparent from=${fromAddress} traceId=${inboundTrace.traceId} spanName=receive`);
         }
     }
-    if (!options.servicesRetained &&
+    if (options.servicesRetained === undefined &&
         isDuplicate(fromAddress, event.content, event.sentAt)) {
         dbg("duplicate message suppressed from=%s sentAt=%s", fromAddress, event.sentAt);
         return true;
@@ -172,7 +204,6 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
         (nodeRef ? deriveNodeName(nodeRef, fromAddress) : deriveSenderName(event));
     const replyAddress = options.routableReplyAddress ??
         (options.servicesRetained ? undefined : fromAddress);
-    setCurrentTurnReplyRoute(replyAddress ? "routable" : "unavailable");
     if (replyAddress && !conversationManager.getContactByAddress(replyAddress)) {
         conversationManager.registerInbound(contact, replyAddress);
     }
@@ -208,13 +239,23 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
             accountId: ctx.accountId,
             peer: { kind: "direct", id: senderId },
         });
+        const runtimeSessionKey = options.servicesRetained
+            ? buildServicesRetainedRuntimeSessionKey(runtime.channel.routing.buildAgentSessionKey, {
+                agentId: route.agentId,
+                accountId: ctx.accountId,
+                messageRef: options.servicesRetained.messageRef,
+            })
+            : route.sessionKey;
         const msgCtx = runtime.channel.reply.finalizeInboundContext({
             Body: event.content,
             RawBody: event.content,
             CommandBody: event.content,
             From: senderId,
             To: senderId,
-            SessionKey: route.sessionKey,
+            SessionKey: runtimeSessionKey,
+            ...(options.servicesRetained && {
+                RuntimePolicySessionKey: runtimeSessionKey,
+            }),
             AccountId: ctx.accountId,
             ChatType: "direct",
             SenderName: senderName,
@@ -244,18 +285,29 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
         });
         if (replyAddress)
             client.sendTyping(replyAddress, true);
-        let replyDelivered = false;
+        let replyRouted = false;
+        const servicesRetainedReplyBlocks = [];
         let suppressedBlocks = 0;
         let dispatchError;
         try {
-            await runtime.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+            const dispatch = () => runtime.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
                 ctx: msgCtx,
-                cfg: withAgentNetworkSilentReplyPolicy(ctx.cfg),
+                cfg: withAgentNetworkSilentReplyPolicy(ctx.cfg, options.servicesRetained !== undefined),
+                toolsAllow: options.servicesRetained
+                    ? SERVICES_RETAINED_TOOL_ALLOW
+                    : undefined,
                 dispatcherOptions: {
                     deliver: async (payload) => {
+                        if (options.servicesRetained && payload.isError) {
+                            throw new Error("services_retained_runtime_policy_unavailable");
+                        }
                         const text = payload.text;
                         if (!text)
                             return;
+                        if (options.servicesRetained) {
+                            servicesRetainedReplyBlocks.push(text);
+                            return;
+                        }
                         if (!replyAddress) {
                             suppressedBlocks++;
                             return;
@@ -270,7 +322,7 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
                         });
                         const deliverResult = await conversationManager.send(replyAddress, text, replyTrace.metadata);
                         if (deliverResult.status === "sent") {
-                            replyDelivered = true;
+                            replyRouted = true;
                         }
                         else {
                             console.warn(`[agent-network:${ctx.accountId}] reply send FAILED to=${senderId} code=${deliverResult.errorCode ?? "(none)"} error=${deliverResult.error ?? "(none)"}`);
@@ -283,14 +335,29 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
                     },
                 },
             });
+            if (options.servicesRetained) {
+                await runWithServicesRetainedToolPolicy(runtimeSessionKey, () => runWithServicesRetainedReplyContext(dispatch));
+            }
+            else {
+                await dispatch();
+            }
             if (dispatchError)
                 throw dispatchError;
+            if (options.servicesRetained && servicesRetainedReplyBlocks.length > 0) {
+                const replyResult = await options.servicesRetained.reply(servicesRetainedReplyBlocks.join("\n\n"));
+                if (replyResult.status === "staged") {
+                    replyRouted = true;
+                }
+                else {
+                    throw new Error(`${replyResult.errorCode}: ${replyResult.error}`);
+                }
+            }
             if (suppressedBlocks > 0) {
                 console.warn(options.servicesRetained
                     ? `[agent-network:${ctx.accountId}] reply not routed for Services-retained message: canonical envelope has no reply address blocks=${suppressedBlocks}`
                     : `[agent-network:${ctx.accountId}] reply suppressed (conversation ended) from=${senderId} blocks=${suppressedBlocks}`);
             }
-            else if (!replyDelivered) {
+            else if (!replyRouted) {
                 console.log(`[agent-network:${ctx.accountId}] dispatch completed without in-turn reply text from=${senderId} (tool-path reply or silence)`);
             }
         }
@@ -372,6 +439,9 @@ export const agentNetworkChannel = {
     outbound: {
         deliveryMode: "direct",
         async sendText(ctx) {
+            if (isServicesRetainedReplyContext()) {
+                throw new Error("services_retained_generic_send_forbidden");
+            }
             const state = ctx.accountId ? accounts.get(ctx.accountId) : undefined;
             if (!state)
                 return { channel: "agent-network", messageId: "" };
@@ -417,7 +487,10 @@ export const agentNetworkChannel = {
                     runtimePeerId: SERVICES_RETAINED_INBOX_PEER,
                     senderName: servicesRetainedSenderName(message),
                     messageSid: `an:${message.envelope.message_ref}`,
-                    servicesRetained: true,
+                    servicesRetained: {
+                        messageRef: message.envelope.message_ref,
+                        reply: message.reply,
+                    },
                 }),
             });
             const state = {

package/dist/plugin.d.ts

@@ -1,4 +1,5 @@
-export declare function buildInteractionContext(channelId: string | undefined, turnSender: string | null, turnSenderAddress: string | null, turnReplyRoute?: "routable" | "unavailable" | null): string | undefined;
+import { evaluateServicesRetainedToolPolicy } from "./services-retained-tool-policy.js";
+export declare function buildInteractionContext(channelId: string | undefined, turnSender: string | null, turnSenderAddress: string | null, servicesRetained?: boolean): string | undefined;
 interface OpenClawPluginApi {
     runtime: unknown;
     registerChannel(opts: {
@@ -8,6 +9,11 @@ interface OpenClawPluginApi {
         optional?: boolean;
         name?: string;
     }): void;
+    registerTrustedToolPolicy(policy: {
+        id: string;
+        description: string;
+        evaluate: typeof evaluateServicesRetainedToolPolicy;
+    }): void;
     on(event: string, handler: (...args: unknown[]) => unknown): void;
 }
 declare const plugin: {

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAsFA,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,cAAc,GAAE,UAAU,GAAG,aAAa,GAAG,IAAW,GACvD,MAAM,GAAG,SAAS,CA+EpB;AAKD,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,YAAY,CACV,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,IAAI,CAAC;IACR,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;CACnE;AAED,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAaI,iBAAiB;CA2YhC,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,kCAAkC,EAEnC,MAAM,oCAAoC,CAAC;AAgE5C,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,gBAAgB,UAAQ,GACvB,MAAM,GAAG,SAAS,CA+EpB;AAKD,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,YAAY,CACV,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,IAAI,CAAC;IACR,yBAAyB,CAAC,MAAM,EAAE;QAChC,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,OAAO,kCAAkC,CAAC;KACrD,GAAG,IAAI,CAAC;IACT,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;CACnE;AAED,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAaI,iBAAiB;CAiZhC,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/plugin.js

@@ -6,8 +6,10 @@ import { getAgentIdentity } from "./environment-context.js";
 import { ownerNotesQueue } from "./owner-notes.js";
 import { consumeCurrentTurnIsOwner, consumeCurrentTurnOwnerSignal, } from "./owner-session-state.js";
 import { sentMessageBuffer } from "./sent-message-buffer.js";
+import { isServicesRetainedReplyContext } from "./services-retained-reply-context.js";
+import { evaluateServicesRetainedToolPolicy, SERVICES_RETAINED_TOOL_POLICY_ID, } from "./services-retained-tool-policy.js";
 import { registerTools } from "./tools.js";
-import { consumeCurrentTurnReplyRoute, consumeCurrentTurnSender, consumeCurrentTurnSenderAddress, setCurrentTurnChannelId, setCurrentTurnIsOwnerForTools, setCurrentTurnOwnerSignalForTools, } from "./turn-context.js";
+import { consumeCurrentTurnSender, consumeCurrentTurnSenderAddress, setCurrentTurnChannelId, setCurrentTurnIsOwnerForTools, setCurrentTurnOwnerSignalForTools, } from "./turn-context.js";
 import { getUpdateInfo } from "./update-check.js";
 import { PLUGIN_VERSION } from "./version.js";
 function formatTimeAgo(timestamp) {
@@ -38,7 +40,7 @@ function drainAndFormatNotes(reportInstruction) {
         reportInstruction);
 }
 const MAX_INTERACTIONS = 5;
-export function buildInteractionContext(channelId, turnSender, turnSenderAddress, turnReplyRoute = null) {
+export function buildInteractionContext(channelId, turnSender, turnSenderAddress, servicesRetained = false) {
     const cm = getConversationManager();
     if (!cm)
         return undefined;
@@ -71,8 +73,8 @@ export function buildInteractionContext(channelId, turnSender, turnSenderAddress
             : turnSender;
         return (`${header}\n${lines.join("\n")}\n` +
             `[This turn] From ${from}. ${initiated}\n` +
-            (turnReplyRoute === "unavailable"
-                ? "No reply route is available for this message. "
+            (servicesRetained
+                ? "Your text reply uses the Services-retained reply authority for this message. "
                 : "Your text reply goes to this sender. ") +
             "To report to your owner: masons_note_for_owner.");
     }
@@ -94,6 +96,11 @@ const plugin = {
     configSchema: pluginManifest.configSchema,
     register(api) {
         initPluginRuntime(api.runtime);
+        api.registerTrustedToolPolicy({
+            id: SERVICES_RETAINED_TOOL_POLICY_ID,
+            description: "Deny every tool except the owner note during Services-retained recipient turns.",
+            evaluate: evaluateServicesRetainedToolPolicy,
+        });
         registerTools(api);
         try {
             api.registerChannel({
@@ -145,7 +152,7 @@ const plugin = {
             const turnOwnerSignal = consumeCurrentTurnOwnerSignal();
             const turnSender = consumeCurrentTurnSender();
             const turnSenderAddress = consumeCurrentTurnSenderAddress();
-            const turnReplyRoute = consumeCurrentTurnReplyRoute();
+            const servicesRetainedReply = isServicesRetainedReplyContext();
             setCurrentTurnChannelId(channelId ?? null);
             setCurrentTurnIsOwnerForTools(turnIsOwner);
             setCurrentTurnOwnerSignalForTools(turnOwnerSignal);
@@ -211,16 +218,15 @@ const plugin = {
                         }
                     }
                     else {
-                        dynamicContext =
-                            turnReplyRoute === "unavailable"
-                                ? "[Agent Network — Services-retained message] This canonical message carries no reply address. " +
-                                    "A plain text reply will NOT be routed to its sender. Do not infer or fabricate an address or Session. " +
-                                    "Treat the message as inbound information; to report something to your owner, call masons_note_for_owner."
-                                : "[Agent Network — Routing] This turn was triggered by a message " +
-                                    "on the agent network. Your text reply will be sent to that sender — " +
-                                    "your owner (Principal) will NOT see it. To report something to your owner, " +
-                                    "call masons_note_for_owner.";
-                        const interactionCtx = buildInteractionContext(channelId, turnSender, turnSenderAddress, turnReplyRoute);
+                        dynamicContext = servicesRetainedReply
+                            ? "[Agent Network — Services-retained message] Reply normally with plain text. " +
+                                "The Host will use this message's Services-owned opaque reply authority; do not call masons_send_message, infer an address, or fabricate a Session for this reply. " +
+                                "To report something separately to your owner, call masons_note_for_owner."
+                            : "[Agent Network — Routing] This turn was triggered by a message " +
+                                "on the agent network. Your text reply will be sent to that sender — " +
+                                "your owner (Principal) will NOT see it. To report something to your owner, " +
+                                "call masons_note_for_owner.";
+                        const interactionCtx = buildInteractionContext(channelId, turnSender, turnSenderAddress, servicesRetainedReply);
                         if (interactionCtx) {
                             dynamicContext += `\n\n${interactionCtx}`;
                         }

package/dist/services-retained-recipient.d.ts

@@ -2,7 +2,17 @@ import { type RuntimeExactTargetPresentationEnvelopeV1 } from "./_vendor/runtime
 export interface ServicesRetainedRecipientPresentation {
     contentType: string;
     envelope: RuntimeExactTargetPresentationEnvelopeV1;
+    reply: ServicesRetainedRecipientReply;
 }
+export type ServicesRetainedRecipientReplyResult = {
+    status: "staged";
+} | {
+    status: "failed";
+    errorCode: string;
+    error: string;
+    retryable: boolean;
+};
+export type ServicesRetainedRecipientReply = (content: string) => Promise<ServicesRetainedRecipientReplyResult>;
 export interface ServicesRetainedRecipientLogger {
     info(message: string): void;
     warn(message: string): void;
@@ -30,6 +40,7 @@ export declare class ServicesRetainedRecipientConsumer {
     private presentedOffer;
     private acquirePermanentlyBlocked;
     private consumptionPermanentlyBlocked;
+    private replyPermanentlyBlocked;
     private consecutiveHeartbeatNotFound;
     private stopped;
     private activationPromise;
@@ -45,7 +56,11 @@ export declare class ServicesRetainedRecipientConsumer {
     requestDrain(): Promise<void>;
     private activate;
     private drain;
+    private advancePresentedOffer;
     private consumePresentedOffer;
+    private createReplyAction;
+    private submitReplyAttempt;
+    private submitReply;
     private scheduleHeartbeat;
     private heartbeat;
     private recoverEndpoint;

package/dist/services-retained-recipient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services-retained-recipient.d.ts","sourceRoot":"","sources":["../src/services-retained-recipient.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,wCAAwC,EAI9C,MAAM,2CAA2C,CAAC;AAKnD,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,wCAAwC,CAAC;CACpD;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,OAAO,EAAE,qCAAqC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,EAAE,+BAA+B,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAaD,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IAEjD,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,6BAA6B,CAAS;IAC9C,OAAO,CAAC,4BAA4B,CAAK;IACzC,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,iBAAiB,CAA8B;IACvD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,oBAAoB,CAA8C;IAC1E,OAAO,CAAC,eAAe,CAA8C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,gCAAgC;IAc/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCrB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YAerB,QAAQ;YAoDR,KAAK;YA0EL,qBAAqB;IAwDnC,OAAO,CAAC,iBAAiB;YAcX,SAAS;IAgCvB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,yBAAyB;IAKjC,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,mBAAmB;CAI5B"}
+{"version":3,"file":"services-retained-recipient.d.ts","sourceRoot":"","sources":["../src/services-retained-recipient.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,wCAAwC,EAM9C,MAAM,2CAA2C,CAAC;AAKnD,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,wCAAwC,CAAC;IACnD,KAAK,EAAE,8BAA8B,CAAC;CACvC;AAED,MAAM,MAAM,oCAAoC,GAC5C;IACE,MAAM,EAAE,QAAQ,CAAC;CAClB,GACD;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEN,MAAM,MAAM,8BAA8B,GAAG,CAC3C,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAiBnD,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,OAAO,EAAE,qCAAqC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,EAAE,+BAA+B,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAeD,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IAEjD,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,6BAA6B,CAAS;IAC9C,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,4BAA4B,CAAK;IACzC,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,iBAAiB,CAA8B;IACvD,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,oBAAoB,CAA8C;IAC1E,OAAO,CAAC,eAAe,CAA8C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,gCAAgC;IAc/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkCrB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YAerB,QAAQ;YAoDR,KAAK;YAsFL,qBAAqB;YAkCrB,qBAAqB;IAuDnC,OAAO,CAAC,iBAAiB;YAgCX,kBAAkB;YAkClB,WAAW;IAqFzB,OAAO,CAAC,iBAAiB;YAcX,SAAS;IAgCvB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,yBAAyB;IAKjC,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,mBAAmB;CAI5B"}

package/dist/services-retained-recipient.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { acquireServicesRetainedNodeRecipientMessage, consumeServicesRetainedNodeRecipientMessage, heartbeatRuntimeEndpoint, RuntimeAdapterApiError, registerRuntimeEndpoint, unregisterRuntimeEndpoint, } from "./_vendor/runtime-adapter-client/index.js";
+import { acquireServicesRetainedNodeRecipientMessage, consumeServicesRetainedNodeRecipientMessage, heartbeatRuntimeEndpoint, RuntimeAdapterApiError, registerRuntimeEndpoint, replyServicesRetainedNodeRecipientMessage, unregisterRuntimeEndpoint, } from "./_vendor/runtime-adapter-client/index.js";
 const RETRY_DELAY_MS = 5_000;
 const MIN_HEARTBEAT_DELAY_MS = 1_000;
 export class ServicesRetainedRecipientConsumer {
@@ -14,6 +14,7 @@ export class ServicesRetainedRecipientConsumer {
     presentedOffer = null;
     acquirePermanentlyBlocked = false;
     consumptionPermanentlyBlocked = false;
+    replyPermanentlyBlocked = false;
     consecutiveHeartbeatNotFound = 0;
     stopped = true;
     activationPromise = null;
@@ -73,6 +74,7 @@ export class ServicesRetainedRecipientConsumer {
             this.presentedOffer = null;
             this.acquirePermanentlyBlocked = false;
             this.consumptionPermanentlyBlocked = false;
+            this.replyPermanentlyBlocked = false;
         });
         return this.stopPromise;
     }
@@ -139,9 +141,11 @@ export class ServicesRetainedRecipientConsumer {
             this.drainRequested = false;
             const endpoint = this.endpoint;
             if (this.presentedOffer) {
-                if (this.consumptionPermanentlyBlocked)
+                if (this.consumptionPermanentlyBlocked ||
+                    this.replyPermanentlyBlocked) {
                     return;
-                if (!(await this.consumePresentedOffer(endpoint)))
+                }
+                if (!(await this.advancePresentedOffer(endpoint)))
                     return;
                 continue;
             }
@@ -174,29 +178,65 @@ export class ServicesRetainedRecipientConsumer {
                 }
                 return;
             }
+            const offer = {
+                messageRef: acquired.message_ref,
+                replyHandle: acquired.reply_handle,
+                consumed: false,
+                replyAttempt: null,
+            };
+            this.presentedOffer = offer;
+            this.consumptionPermanentlyBlocked = false;
+            this.replyPermanentlyBlocked = false;
             let presented = false;
             try {
                 presented = await this.present({
                     contentType: acquired.content_type,
                     envelope: acquired.envelope,
+                    reply: this.createReplyAction(offer),
                 });
             }
             catch (error) {
                 this.logger.error(`OpenClaw inbound presentation failed message_ref=${acquired.message_ref}`, error);
             }
             if (!presented) {
+                if (this.presentedOffer === offer)
+                    this.presentedOffer = null;
                 this.scheduleDrainRetry();
                 return;
             }
-            this.presentedOffer = {
-                messageRef: acquired.message_ref,
-                replyHandle: acquired.reply_handle,
-            };
-            this.consumptionPermanentlyBlocked = false;
-            if (!(await this.consumePresentedOffer(endpoint)))
+            if (!(await this.advancePresentedOffer(endpoint)))
                 return;
         }
     }
+    async advancePresentedOffer(endpoint) {
+        const offer = this.presentedOffer;
+        if (!offer)
+            return true;
+        if (!offer.consumed && !(await this.consumePresentedOffer(endpoint))) {
+            return false;
+        }
+        if (this.presentedOffer !== offer)
+            return true;
+        if (!offer.replyAttempt) {
+            this.presentedOffer = null;
+            this.drainRequested = true;
+            return true;
+        }
+        const result = await this.submitReplyAttempt(endpoint, offer);
+        if (result.status === "sent") {
+            this.presentedOffer = null;
+            this.replyPermanentlyBlocked = false;
+            this.drainRequested = true;
+            return true;
+        }
+        this.logger.error(`Services-retained reply refused message_ref=${offer.messageRef} code=${result.errorCode} retryable=${String(result.retryable)}`);
+        if (result.retryable) {
+            this.scheduleDrainRetry();
+            return false;
+        }
+        this.replyPermanentlyBlocked = true;
+        return false;
+    }
     async consumePresentedOffer(endpoint) {
         const offer = this.presentedOffer;
         if (!offer)
@@ -211,9 +251,8 @@ export class ServicesRetainedRecipientConsumer {
         });
         if (outcome.ok) {
             this.logger.info(`Services-retained message consumed message_ref=${offer.messageRef} status=${outcome.status}`);
-            this.presentedOffer = null;
+            offer.consumed = true;
             this.consumptionPermanentlyBlocked = false;
-            this.drainRequested = true;
             return true;
         }
         const reason = "providerStatus" in outcome ? outcome.reason : undefined;
@@ -236,6 +275,124 @@ export class ServicesRetainedRecipientConsumer {
         this.logger.error(`Services-retained consumption stopped on permanent rejection message_ref=${offer.messageRef}${reason ? ` reason=${reason}` : ""}`);
         return false;
     }
+    createReplyAction(offer) {
+        return async (content) => {
+            if (this.presentedOffer !== offer) {
+                return {
+                    status: "failed",
+                    errorCode: "reply_handle_stale",
+                    error: "Services-retained reply authority is no longer active",
+                    retryable: false,
+                };
+            }
+            if (offer.replyAttempt && offer.replyAttempt.content !== content) {
+                return {
+                    status: "failed",
+                    errorCode: "reply_handle_conflict",
+                    error: "Services-retained reply authority was already used with different content",
+                    retryable: false,
+                };
+            }
+            offer.replyAttempt ??= {
+                content,
+                requestId: randomUUID(),
+                inFlight: null,
+                terminalResult: null,
+            };
+            return { status: "staged" };
+        };
+    }
+    async submitReplyAttempt(endpoint, offer) {
+        const attempt = offer.replyAttempt;
+        if (!attempt) {
+            return {
+                status: "failed",
+                errorCode: "reply_unavailable",
+                error: "Services-retained reply content was not staged",
+                retryable: false,
+            };
+        }
+        if (attempt.terminalResult)
+            return attempt.terminalResult;
+        if (attempt.inFlight)
+            return attempt.inFlight;
+        attempt.inFlight = this.submitReply(endpoint, offer.replyHandle, attempt.requestId, attempt.content).then((result) => {
+            if (result.status === "sent" || !result.retryable) {
+                attempt.terminalResult = result;
+            }
+            return result;
+        });
+        try {
+            return await attempt.inFlight;
+        }
+        finally {
+            attempt.inFlight = null;
+        }
+    }
+    async submitReply(endpoint, replyHandle, replyRequestId, content) {
+        let failure;
+        for (let attempt = 0; attempt < 2; attempt++) {
+            let outcome;
+            try {
+                outcome = await replyServicesRetainedNodeRecipientMessage(this.clientConfig, this.runtimeKey, {
+                    type: "runtime_node_recipient_message_reply",
+                    version: 1,
+                    endpoint_id: endpoint.id,
+                    endpoint_nonce: endpoint.nonce,
+                    reply_handle: replyHandle,
+                    reply_request_id: replyRequestId,
+                    content,
+                    content_type: "text/plain",
+                });
+            }
+            catch (error) {
+                const errorCode = error instanceof RuntimeAdapterApiError
+                    ? error.code
+                    : "services_retained_reply_failed";
+                return {
+                    status: "failed",
+                    errorCode,
+                    error: errorText(error),
+                    retryable: false,
+                };
+            }
+            if (outcome.ok) {
+                this.logger.info(`Services-retained reply ${outcome.status} message_ref=${outcome.messageRef}`);
+                return {
+                    status: "sent",
+                    messageRef: outcome.messageRef,
+                    replayed: outcome.status === "already_emitted",
+                };
+            }
+            failure = outcome;
+            if (outcome.terminal || attempt === 1)
+                break;
+        }
+        if (!failure) {
+            return {
+                status: "failed",
+                errorCode: "services_retained_reply_failed",
+                error: "Services-retained reply did not produce an outcome",
+                retryable: false,
+            };
+        }
+        const reason = "reason" in failure && typeof failure.reason === "string"
+            ? failure.reason
+            : "assignmentFailureCategory" in failure
+                ? failure.assignmentFailureCategory
+                : undefined;
+        const errorCode = reason ?? "services_retained_reply_failed";
+        const detail = "detail" in failure && typeof failure.detail === "string"
+            ? failure.detail
+            : errorCode;
+        this.logger.warn(`Services-retained reply failed code=${errorCode} terminal=${String(failure.terminal)} detail=${detail}`);
+        return {
+            status: "failed",
+            errorCode,
+            error: detail,
+            retryable: !failure.terminal,
+        };
+    }
     scheduleHeartbeat() {
         this.clearHeartbeatTimer();
         if (this.stopped || !this.endpoint)

package/dist/services-retained-reply-context.d.ts

@@ -0,0 +1,3 @@
+export declare function runWithServicesRetainedReplyContext<T>(callback: () => T): T;
+export declare function isServicesRetainedReplyContext(): boolean;
+//# sourceMappingURL=services-retained-reply-context.d.ts.map

package/dist/services-retained-reply-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services-retained-reply-context.d.ts","sourceRoot":"","sources":["../src/services-retained-reply-context.ts"],"names":[],"mappings":"AAIA,wBAAgB,mCAAmC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAE3E;AAED,wBAAgB,8BAA8B,IAAI,OAAO,CAExD"}

package/dist/services-retained-reply-context.js

@@ -0,0 +1,8 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const servicesRetainedReplyContext = new AsyncLocalStorage();
+export function runWithServicesRetainedReplyContext(callback) {
+    return servicesRetainedReplyContext.run(true, callback);
+}
+export function isServicesRetainedReplyContext() {
+    return servicesRetainedReplyContext.getStore() === true;
+}

package/dist/services-retained-tool-policy.d.ts

@@ -0,0 +1,11 @@
+export declare const SERVICES_RETAINED_TOOL_POLICY_ID = "agent-network-services-retained-turn-v1";
+export declare function runWithServicesRetainedToolPolicy<T>(sessionKey: string, callback: () => Promise<T> | T): Promise<T>;
+export declare function evaluateServicesRetainedToolPolicy(event: {
+    toolName: string;
+}, ctx: {
+    sessionKey?: string;
+}): {
+    allow: false;
+    reason: string;
+} | undefined;
+//# sourceMappingURL=services-retained-tool-policy.d.ts.map

package/dist/services-retained-tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services-retained-tool-policy.d.ts","sourceRoot":"","sources":["../src/services-retained-tool-policy.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gCAAgC,4CACF,CAAC;AAE5C,wBAAsB,iCAAiC,CAAC,CAAC,EACvD,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAeZ;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC3B,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAY9C"}

package/dist/services-retained-tool-policy.js

@@ -0,0 +1,30 @@
+const SERVICES_RETAINED_OWNER_NOTE_TOOL = "masons_note_for_owner";
+const activeSessionRefCounts = new Map();
+export const SERVICES_RETAINED_TOOL_POLICY_ID = "agent-network-services-retained-turn-v1";
+export async function runWithServicesRetainedToolPolicy(sessionKey, callback) {
+    activeSessionRefCounts.set(sessionKey, (activeSessionRefCounts.get(sessionKey) ?? 0) + 1);
+    try {
+        return await callback();
+    }
+    finally {
+        const remaining = (activeSessionRefCounts.get(sessionKey) ?? 1) - 1;
+        if (remaining > 0) {
+            activeSessionRefCounts.set(sessionKey, remaining);
+        }
+        else {
+            activeSessionRefCounts.delete(sessionKey);
+        }
+    }
+}
+export function evaluateServicesRetainedToolPolicy(event, ctx) {
+    if (!ctx.sessionKey || !activeSessionRefCounts.has(ctx.sessionKey)) {
+        return undefined;
+    }
+    if (event.toolName === SERVICES_RETAINED_OWNER_NOTE_TOOL) {
+        return undefined;
+    }
+    return {
+        allow: false,
+        reason: "Services-retained recipient turns permit only the owner-note capability.",
+    };
+}

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAuEA,UAAU,WAAW;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3B;AAED,UAAU,WAAW;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,KAAK,WAAW,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;AAE3E,UAAU,OAAO;IACf,YAAY,CACV,IAAI,EAAE,cAAc,GAAG,WAAW,EAWlC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC7D,IAAI,CAAC;CACT;AAoDD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAwSD,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAs2BhD"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAwEA,UAAU,WAAW;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC,WAAW,CAAC,CAAC;CAC3B;AAED,UAAU,WAAW;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,KAAK,WAAW,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;AAE3E,UAAU,OAAO;IACf,YAAY,CACV,IAAI,EAAE,cAAc,GAAG,WAAW,EAWlC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC7D,IAAI,CAAC;CACT;AAoDD,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAwSD,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA22BhD"}

package/dist/tools.js

@@ -7,6 +7,7 @@ import { extractHandleFromAddress } from "./handle-utils.js";
 import { ownerNotesQueue } from "./owner-notes.js";
 import { acceptRequest, declineRequest, listConnections, listRequests, PlatformApiError, PlatformNetworkError, requestConnection, updateProfile, } from "./platform-client.js";
 import { sentMessageBuffer } from "./sent-message-buffer.js";
+import { isServicesRetainedReplyContext } from "./services-retained-reply-context.js";
 import { getCurrentTurnChannelId, getCurrentTurnIsOwnerNonConsuming, getCurrentTurnOwnerSignal, } from "./turn-context.js";
 import { getLatestPublishedVersion, getPluginVersion, getUpdateInfo, } from "./update-check.js";
 const PROFILE_FIELDS = new Set(["name", "scope", "about", "audience"]);
@@ -584,6 +585,9 @@ export function registerTools(api) {
             }),
         }),
         execute: withUpdateNotice(async (_id, params) => {
+            if (isServicesRetainedReplyContext()) {
+                return textResult("This Services-retained message must be answered with an ordinary plain-text reply. The Host will apply its opaque reply authority; masons_send_message cannot be used as a fallback for this turn.");
+            }
             const cm = requireConversationManager();
             const to = params.to;
             const content = params.content;

package/dist/turn-context.d.ts

@@ -1,13 +1,11 @@
 import type { OwnerSignal } from "./owner-session-state.js";
 export declare function setCurrentTurnSender(contact: string | null): void;
 export declare function setCurrentTurnSenderAddress(address: string | null): void;
-export declare function setCurrentTurnReplyRoute(route: "routable" | "unavailable"): void;
 export declare function setCurrentTurnChannelId(channelId: string | null): void;
 export declare function setCurrentTurnIsOwnerForTools(value: boolean): void;
 export declare function setCurrentTurnOwnerSignalForTools(signal: OwnerSignal): void;
 export declare function consumeCurrentTurnSender(): string | null;
 export declare function consumeCurrentTurnSenderAddress(): string | null;
-export declare function consumeCurrentTurnReplyRoute(): "routable" | "unavailable" | null;
 export declare function getCurrentTurnChannelId(): string | null;
 export declare function getCurrentTurnIsOwnerNonConsuming(): boolean;
 export declare function getCurrentTurnOwnerSignal(): OwnerSignal;

package/dist/turn-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn-context.d.ts","sourceRoot":"","sources":["../src/turn-context.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AA0C5D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEjE;AAUD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAExE;AAGD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,UAAU,GAAG,aAAa,GAChC,IAAI,CAEN;AAOD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEtE;AAOD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAElE;AAUD,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAE3E;AAUD,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAIxD;AAGD,wBAAgB,+BAA+B,IAAI,MAAM,GAAG,IAAI,CAI/D;AAGD,wBAAgB,4BAA4B,IACxC,UAAU,GACV,aAAa,GACb,IAAI,CAIP;AAMD,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAMD,wBAAgB,iCAAiC,IAAI,OAAO,CAE3D;AAOD,wBAAgB,yBAAyB,IAAI,WAAW,CAEvD"}
+{"version":3,"file":"turn-context.d.ts","sourceRoot":"","sources":["../src/turn-context.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAyC5D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEjE;AAUD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAExE;AAOD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEtE;AAOD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAElE;AAUD,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAE3E;AAUD,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAIxD;AAGD,wBAAgB,+BAA+B,IAAI,MAAM,GAAG,IAAI,CAI/D;AAMD,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAMD,wBAAgB,iCAAiC,IAAI,OAAO,CAE3D;AAOD,wBAAgB,yBAAyB,IAAI,WAAW,CAEvD"}

package/dist/turn-context.js

@@ -1,6 +1,5 @@
 let currentTurnSender = null;
 let currentTurnSenderAddress = null;
-let currentTurnReplyRoute = null;
 let currentTurnChannelId = null;
 let currentTurnIsOwner = false;
 let currentTurnOwnerSignalForTools = null;
@@ -10,9 +9,6 @@ export function setCurrentTurnSender(contact) {
 export function setCurrentTurnSenderAddress(address) {
     currentTurnSenderAddress = address;
 }
-export function setCurrentTurnReplyRoute(route) {
-    currentTurnReplyRoute = route;
-}
 export function setCurrentTurnChannelId(channelId) {
     currentTurnChannelId = channelId;
 }
@@ -32,11 +28,6 @@ export function consumeCurrentTurnSenderAddress() {
     currentTurnSenderAddress = null;
     return value;
 }
-export function consumeCurrentTurnReplyRoute() {
-    const value = currentTurnReplyRoute;
-    currentTurnReplyRoute = null;
-    return value;
-}
 export function getCurrentTurnChannelId() {
     return currentTurnChannelId;
 }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PLUGIN_VERSION = "0.6.17";
+export declare const PLUGIN_VERSION = "0.6.19";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1 +1 @@
-export const PLUGIN_VERSION = "0.6.17";
+export const PLUGIN_VERSION = "0.6.19";

package/openclaw.plugin.json

@@ -3,6 +3,7 @@
   "channels": ["agent-network"],
   "skills": ["skills/agent-network"],
   "contracts": {
+    "trustedToolPolicies": ["agent-network-services-retained-turn-v1"],
     "tools": [
       "masons_setup",
       "masons_update_profile",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masons/agent-network",
-  "version": "0.6.17",
+  "version": "0.6.19",
   "description": "MASONS Agent Network — OpenClaw channel plugin for connecting agent runtimes to the Agent Network over MSTP.",
   "license": "MIT",
   "author": "MASONS.ai <hello@masons.ai> (https://masons.ai)",
@@ -38,7 +38,7 @@
   ],
   "openclaw": {
     "compat": {
-      "pluginApi": ">=2026.3.28"
+      "pluginApi": ">=2026.6.11"
     },
     "extensions": [
       "./dist/plugin.js"