@masons/agent-network 0.6.18 → 0.6.19

package/dist/channel.d.ts

@@ -1,8 +1,13 @@
-import type { ChannelPlugin } from "openclaw/plugin-sdk/channel-core";
+import type { ChannelPlugin, PluginRuntime } from "openclaw/plugin-sdk/channel-core";
 import type { AgentNetworkAccount } from "./config-schema.js";
 export declare function getOwnerPassportAddress(): string | null;
 export declare function consumeIdentityLinkingNudge(): boolean;
 export declare function _setNudgePendingForTesting(value: boolean): void;
+export declare function buildServicesRetainedRuntimeSessionKey(buildAgentSessionKey: PluginRuntime["channel"]["routing"]["buildAgentSessionKey"], params: {
+    agentId: string;
+    accountId: string;
+    messageRef: string;
+}): string;
 declare function withAgentNetworkSilentReplyPolicy(cfg: Record<string, unknown>, servicesRetained?: boolean): Record<string, unknown>;
 export declare const _withAgentNetworkSilentReplyPolicyForTesting: typeof withAgentNetworkSilentReplyPolicy;
 export declare const agentNetworkChannel: ChannelPlugin<AgentNetworkAccount>;

package/dist/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EAEd,MAAM,kCAAkC,CAAC;AAa1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAsD9D,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAOD,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAaD,iBAAS,iCAAiC,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,gBAAgB,UAAQ,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuCzB;AAED,eAAO,MAAM,4CAA4C,0CACtB,CAAC;AAyiBpC,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAoRlE,CAAC"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACd,MAAM,kCAAkC,CAAC;AAa1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAuD9D,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAOD,wBAAgB,2BAA2B,IAAI,OAAO,CAIrD;AAGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/D;AAeD,wBAAgB,sCAAsC,CACpD,oBAAoB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,EACjF,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,GACA,MAAM,CAiBR;AAED,iBAAS,iCAAiC,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,gBAAgB,UAAQ,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8CzB;AAED,eAAO,MAAM,4CAA4C,0CACtB,CAAC;AAokBpC,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAuRlE,CAAC"}

package/dist/channel.js

@@ -1,4 +1,4 @@
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import createDebug from "debug";
 import { clearConnectorClient, clearConversationManager, extractNetworkConfig, getDmScope, initConnectorClient, initConversationManager, initToolConfig, isIdentityLinksConfigured, requirePlatformConfig, requirePluginRuntime, } from "./config.js";
 import { ConnectorClient } from "./connector-client.js";
@@ -8,6 +8,7 @@ import { extractHandleFromAddress } from "./handle-utils.js";
 import { clearOwnerState, isOwnerAddress, markOwnerAddress, setCurrentTurnIsOwner, setCurrentTurnOwnerSignal, } from "./owner-session-state.js";
 import { ServicesRetainedRecipientConsumer, } from "./services-retained-recipient.js";
 import { isServicesRetainedReplyContext, runWithServicesRetainedReplyContext, } from "./services-retained-reply-context.js";
+import { runWithServicesRetainedToolPolicy } from "./services-retained-tool-policy.js";
 import { createReplyTraceMetadata, ensureTraceMetadata, } from "./trace-metadata.js";
 import { setCurrentTurnSender, setCurrentTurnSenderAddress, } from "./turn-context.js";
 import { checkForUpdate } from "./update-check.js";
@@ -31,6 +32,22 @@ export function _setNudgePendingForTesting(value) {
 function isRecord(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
+const SERVICES_RETAINED_TOOL_ALLOW = ["masons_note_for_owner"];
+export function buildServicesRetainedRuntimeSessionKey(buildAgentSessionKey, params) {
+    const messageRefDigest = createHash("sha256")
+        .update(params.messageRef, "utf8")
+        .digest("hex");
+    return buildAgentSessionKey({
+        agentId: params.agentId,
+        channel: "agent-network",
+        accountId: params.accountId,
+        peer: {
+            kind: "direct",
+            id: `services-retained-${messageRefDigest}`,
+        },
+        dmScope: "per-account-channel-peer",
+    });
+}
 function withAgentNetworkSilentReplyPolicy(cfg, servicesRetained = false) {
     const surfaces = isRecord(cfg.surfaces) ? cfg.surfaces : {};
     const existingSurface = isRecord(surfaces["agent-network"])
@@ -43,9 +60,7 @@ function withAgentNetworkSilentReplyPolicy(cfg, servicesRetained = false) {
         ? existingSurface.silentReplyRewrite
         : {};
     const tools = isRecord(cfg.tools) ? cfg.tools : {};
-    const deny = Array.isArray(tools.deny)
-        ? tools.deny.filter((value) => typeof value === "string")
-        : [];
+    const messages = isRecord(cfg.messages) ? cfg.messages : {};
     return {
         ...cfg,
         surfaces: {
@@ -63,9 +78,15 @@ function withAgentNetworkSilentReplyPolicy(cfg, servicesRetained = false) {
             },
         },
         ...(servicesRetained && {
+            messages: {
+                ...messages,
+                visibleReplies: "automatic",
+            },
             tools: {
                 ...tools,
-                deny: [...new Set([...deny, "message"])],
+                allow: [...SERVICES_RETAINED_TOOL_ALLOW],
+                alsoAllow: [],
+                toolSearch: false,
             },
         }),
     };
@@ -218,13 +239,23 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
             accountId: ctx.accountId,
             peer: { kind: "direct", id: senderId },
         });
+        const runtimeSessionKey = options.servicesRetained
+            ? buildServicesRetainedRuntimeSessionKey(runtime.channel.routing.buildAgentSessionKey, {
+                agentId: route.agentId,
+                accountId: ctx.accountId,
+                messageRef: options.servicesRetained.messageRef,
+            })
+            : route.sessionKey;
         const msgCtx = runtime.channel.reply.finalizeInboundContext({
             Body: event.content,
             RawBody: event.content,
             CommandBody: event.content,
             From: senderId,
             To: senderId,
-            SessionKey: route.sessionKey,
+            SessionKey: runtimeSessionKey,
+            ...(options.servicesRetained && {
+                RuntimePolicySessionKey: runtimeSessionKey,
+            }),
             AccountId: ctx.accountId,
             ChatType: "direct",
             SenderName: senderName,
@@ -262,8 +293,14 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
             const dispatch = () => runtime.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
                 ctx: msgCtx,
                 cfg: withAgentNetworkSilentReplyPolicy(ctx.cfg, options.servicesRetained !== undefined),
+                toolsAllow: options.servicesRetained
+                    ? SERVICES_RETAINED_TOOL_ALLOW
+                    : undefined,
                 dispatcherOptions: {
                     deliver: async (payload) => {
+                        if (options.servicesRetained && payload.isError) {
+                            throw new Error("services_retained_runtime_policy_unavailable");
+                        }
                         const text = payload.text;
                         if (!text)
                             return;
@@ -299,7 +336,7 @@ async function handleAddressedMessage(event, conversationManager, client, ctx, o
                 },
             });
             if (options.servicesRetained) {
-                await runWithServicesRetainedReplyContext(dispatch);
+                await runWithServicesRetainedToolPolicy(runtimeSessionKey, () => runWithServicesRetainedReplyContext(dispatch));
             }
             else {
                 await dispatch();
@@ -450,7 +487,10 @@ export const agentNetworkChannel = {
                     runtimePeerId: SERVICES_RETAINED_INBOX_PEER,
                     senderName: servicesRetainedSenderName(message),
                     messageSid: `an:${message.envelope.message_ref}`,
-                    servicesRetained: { reply: message.reply },
+                    servicesRetained: {
+                        messageRef: message.envelope.message_ref,
+                        reply: message.reply,
+                    },
                 }),
             });
             const state = {

package/dist/plugin.d.ts

@@ -1,3 +1,4 @@
+import { evaluateServicesRetainedToolPolicy } from "./services-retained-tool-policy.js";
 export declare function buildInteractionContext(channelId: string | undefined, turnSender: string | null, turnSenderAddress: string | null, servicesRetained?: boolean): string | undefined;
 interface OpenClawPluginApi {
     runtime: unknown;
@@ -8,6 +9,11 @@ interface OpenClawPluginApi {
         optional?: boolean;
         name?: string;
     }): void;
+    registerTrustedToolPolicy(policy: {
+        id: string;
+        description: string;
+        evaluate: typeof evaluateServicesRetainedToolPolicy;
+    }): void;
     on(event: string, handler: (...args: unknown[]) => unknown): void;
 }
 declare const plugin: {

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAsFA,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,gBAAgB,UAAQ,GACvB,MAAM,GAAG,SAAS,CA+EpB;AAKD,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,YAAY,CACV,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,IAAI,CAAC;IACR,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;CACnE;AAED,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAaI,iBAAiB;CA0YhC,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,kCAAkC,EAEnC,MAAM,oCAAoC,CAAC;AAgE5C,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,gBAAgB,UAAQ,GACvB,MAAM,GAAG,SAAS,CA+EpB;AAKD,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,YAAY,CACV,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,IAAI,CAAC;IACR,yBAAyB,CAAC,MAAM,EAAE;QAChC,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,OAAO,kCAAkC,CAAC;KACrD,GAAG,IAAI,CAAC;IACT,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;CACnE;AAED,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAaI,iBAAiB;CAiZhC,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/plugin.js

@@ -7,6 +7,7 @@ import { ownerNotesQueue } from "./owner-notes.js";
 import { consumeCurrentTurnIsOwner, consumeCurrentTurnOwnerSignal, } from "./owner-session-state.js";
 import { sentMessageBuffer } from "./sent-message-buffer.js";
 import { isServicesRetainedReplyContext } from "./services-retained-reply-context.js";
+import { evaluateServicesRetainedToolPolicy, SERVICES_RETAINED_TOOL_POLICY_ID, } from "./services-retained-tool-policy.js";
 import { registerTools } from "./tools.js";
 import { consumeCurrentTurnSender, consumeCurrentTurnSenderAddress, setCurrentTurnChannelId, setCurrentTurnIsOwnerForTools, setCurrentTurnOwnerSignalForTools, } from "./turn-context.js";
 import { getUpdateInfo } from "./update-check.js";
@@ -95,6 +96,11 @@ const plugin = {
     configSchema: pluginManifest.configSchema,
     register(api) {
         initPluginRuntime(api.runtime);
+        api.registerTrustedToolPolicy({
+            id: SERVICES_RETAINED_TOOL_POLICY_ID,
+            description: "Deny every tool except the owner note during Services-retained recipient turns.",
+            evaluate: evaluateServicesRetainedToolPolicy,
+        });
         registerTools(api);
         try {
             api.registerChannel({

package/dist/services-retained-tool-policy.d.ts

@@ -0,0 +1,11 @@
+export declare const SERVICES_RETAINED_TOOL_POLICY_ID = "agent-network-services-retained-turn-v1";
+export declare function runWithServicesRetainedToolPolicy<T>(sessionKey: string, callback: () => Promise<T> | T): Promise<T>;
+export declare function evaluateServicesRetainedToolPolicy(event: {
+    toolName: string;
+}, ctx: {
+    sessionKey?: string;
+}): {
+    allow: false;
+    reason: string;
+} | undefined;
+//# sourceMappingURL=services-retained-tool-policy.d.ts.map

package/dist/services-retained-tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services-retained-tool-policy.d.ts","sourceRoot":"","sources":["../src/services-retained-tool-policy.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gCAAgC,4CACF,CAAC;AAE5C,wBAAsB,iCAAiC,CAAC,CAAC,EACvD,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAeZ;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC3B,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAY9C"}

package/dist/services-retained-tool-policy.js

@@ -0,0 +1,30 @@
+const SERVICES_RETAINED_OWNER_NOTE_TOOL = "masons_note_for_owner";
+const activeSessionRefCounts = new Map();
+export const SERVICES_RETAINED_TOOL_POLICY_ID = "agent-network-services-retained-turn-v1";
+export async function runWithServicesRetainedToolPolicy(sessionKey, callback) {
+    activeSessionRefCounts.set(sessionKey, (activeSessionRefCounts.get(sessionKey) ?? 0) + 1);
+    try {
+        return await callback();
+    }
+    finally {
+        const remaining = (activeSessionRefCounts.get(sessionKey) ?? 1) - 1;
+        if (remaining > 0) {
+            activeSessionRefCounts.set(sessionKey, remaining);
+        }
+        else {
+            activeSessionRefCounts.delete(sessionKey);
+        }
+    }
+}
+export function evaluateServicesRetainedToolPolicy(event, ctx) {
+    if (!ctx.sessionKey || !activeSessionRefCounts.has(ctx.sessionKey)) {
+        return undefined;
+    }
+    if (event.toolName === SERVICES_RETAINED_OWNER_NOTE_TOOL) {
+        return undefined;
+    }
+    return {
+        allow: false,
+        reason: "Services-retained recipient turns permit only the owner-note capability.",
+    };
+}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PLUGIN_VERSION = "0.6.18";
+export declare const PLUGIN_VERSION = "0.6.19";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1 +1 @@
-export const PLUGIN_VERSION = "0.6.18";
+export const PLUGIN_VERSION = "0.6.19";

package/openclaw.plugin.json

@@ -3,6 +3,7 @@
   "channels": ["agent-network"],
   "skills": ["skills/agent-network"],
   "contracts": {
+    "trustedToolPolicies": ["agent-network-services-retained-turn-v1"],
     "tools": [
       "masons_setup",
       "masons_update_profile",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masons/agent-network",
-  "version": "0.6.18",
+  "version": "0.6.19",
   "description": "MASONS Agent Network — OpenClaw channel plugin for connecting agent runtimes to the Agent Network over MSTP.",
   "license": "MIT",
   "author": "MASONS.ai <hello@masons.ai> (https://masons.ai)",
@@ -38,7 +38,7 @@
   ],
   "openclaw": {
     "compat": {
-      "pluginApi": ">=2026.3.28"
+      "pluginApi": ">=2026.6.11"
     },
     "extensions": [
       "./dist/plugin.js"