@parall/parall 1.57.2 → 1.58.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/parall",
-  "version": "1.57.2",
+  "version": "1.58.0",
   "description": "OpenClaw channel plugin for Parall IM",
   "license": "MIT",
   "repository": {
@@ -16,8 +16,8 @@
     "openclaw.plugin.json"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.57.2",
-    "@parall/sdk": "1.57.2"
+    "@parall/agent-core": "1.58.0",
+    "@parall/sdk": "1.58.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/skills/parall-platform/SKILL.md

@@ -218,7 +218,9 @@ parall approvals wait prll://apr_xxx --timeout 300
 # List all your pending approvals
 parall approvals list
 
-# List available approvable actions
+# List available approvable actions — the output includes each documented
+# action's payload contract (exact field names, and where a CAS base like
+# expected_version is read from). Check it before hand-writing a --payload.
 parall approvals actions
 
 # Cancel a pending request you made

package/skills/parall-tasks/SKILL.md

@@ -88,8 +88,19 @@ parall tasks update prll://tsk_xxx --planned-start none
 # Move a task to the end of its status column
 parall tasks update prll://tsk_xxx --placement end
 
-# Add a comment
-parall tasks comments add prll://tsk_xxx --body "Progress update..."
+# Add a comment — same shell rules as messages: the body runs through a
+# shell, so pass real content via --body-file (a written file, or a quoted
+# heredoc into stdin with '-'). --body "..." only for short literals with
+# no $, backtick, or quote (single or double). A bare --body - is refused,
+# not stdin.
+parall tasks comments add prll://tsk_xxx --body-file - <<'PARALL_EOF'
+Progress update: fixed the $1,000 rounding bug, it's in review.
+PARALL_EOF
+parall tasks comments add prll://tsk_xxx --body-file /tmp/comment.md
+parall tasks comments add prll://tsk_xxx --body "On it"
+
+# Long or multi-line description → same file / stdin channel
+parall tasks create --title "Write the runbook" --project-id prll://prj_xxx --description-file /tmp/description.md
 ```
 
 Ordering: to append a task to the end of a status column, always use
@@ -166,7 +177,7 @@ When you receive `[Event: task.comment.created]`, someone commented on a task yo
 
 1. Resolve the project and read its current description as described above
 2. Review the comment content and task context
-3. Reply via comment: `tasks comments add prll://tsk_xxx --body "Response..."`
+3. Reply via comment: `tasks comments add prll://tsk_xxx --body-file -` with a quoted heredoc (`--body "..."` only for short literals with no `$`, backtick, or quote — single or double)
 4. If the comment requests status changes, update accordingly
 
 CLI success output is JSON; errors print a JSON line plus, on a `PERMISSION_DENIED`, an optional plain-text `Request approval:` line — read both.

package/src/gateway.ts

@@ -92,11 +92,14 @@ function buildInboundCtx(
   earlierEvents: ParallEvent[] = [],
 ): Record<string, unknown> {
   const inboundHistory = earlierEvents.length > 0 ? buildInboundHistory(earlierEvents) : undefined;
+  // The server frame is the whole text of the event (agent-core renders
+  // nothing); OpenClaw's inbound context gets it as the body.
+  const body = event.frame ?? '';
   return core.channel.reply.finalizeInboundContext({
-    Body: event.body,
+    Body: body,
     BodyForAgent: bodyForAgent,
-    RawBody: event.body,
-    CommandBody: event.body,
+    RawBody: body,
+    CommandBody: body,
     // Attachment metadata is now in event.attachments (structured), not mediaFields
     ...(inboundHistory?.length ? { InboundHistory: inboundHistory } : {}),
     From: `parall:${event.senderId}`,
@@ -104,7 +107,7 @@ function buildInboundCtx(
     SessionKey: sessionKey,
     AccountId: accountId,
     ChatType: event.targetType ?? 'unknown',
-    SenderName: event.senderName,
+    SenderName: event.senderId,
     SenderId: event.senderId,
     Provider: 'parall' as const,
     Surface: 'parall' as const,
@@ -117,22 +120,9 @@ function buildInboundCtx(
 }
 
 function buildInboundHistory(events: ParallEvent[]): Array<{ sender: string; body: string }> {
-  return events.map((event) => {
-    const meta: string[] = [];
-    meta.push(`[Message ID: ${event.messageId}]`);
-    if (event.noReply) meta.push(`[Hint: no_reply]`);
-    if (event.threadRootId) meta.push(`[Thread: ${event.threadRootId}]`);
-    if (event.attachments?.length) {
-      for (const att of event.attachments) {
-        const safeMime = att.mimeType.replace(/[\r\n[\]|]/g, ' ').trim();
-        meta.push(`[Attachment: prll://${att.id} | ${safeMime}]`);
-      }
-    }
-    return {
-      sender: event.senderName,
-      body: meta.length > 0 ? `${meta.join(' ')}\n${event.body}` : event.body,
-    };
-  });
+  // Each earlier event is its own server frame (message ids, thread,
+  // attachments and hints are already inside it).
+  return events.map((event) => ({ sender: event.senderId, body: event.frame ?? '' }));
 }
 
 const OC_AUTH_TEXT = /unauthorized|401|403|invalid api key|authentication/i;