@relaymessenger/openclaw-plugin 0.4.1-staging.0 → 0.4.1-staging.1

package/README.md

@@ -161,8 +161,8 @@ durable ACK and idempotent REST reply.
 
 `contracts/relay-v1.lock.json` records the compatibility boundary used by this
 candidate: Relay Server commit
-`24c577e9802e07d6c61718ebca12e84d79113727`, OpenAPI SHA-256
-`cf83012c6b241e60323543adb7059b49954fbf3d59d4d1fd1817bbfa19d32cdd`,
+`04c729e3e3b2249eb9cca93fbb09ee3dd5fd69a6`, OpenAPI SHA-256
+`7d46b16f5dc19034cbdcb45bdd79816a9a2f4c9f6febb8520db0517dfe9eae64`,
 public `ChatHandle.image_url` and `ChatHandle.about` fields with no legacy
 aliases,
 and the exact `@relaymessenger/sdk@0.3.0-staging.8` registry integrity, source
@@ -171,8 +171,8 @@ frames consumed by the plugin.
 
 Public CI hashes the checked-in `contracts/relay-openapi.yaml` fixture and
 requires the locked digest above. Set `RELAY_SERVER_SOURCE_DIR` to an exact
-checkout of Server `24c577e9802e07d6c61718ebca12e84d79113727` to additionally prove
-that the fixture bytes match the committed source before packaging. The public Relay-SDK monorepo does not require credentials for the
+checkout of the final Server commit (currently awaiting validation) to additionally
+prove that the fixture bytes match committed source before packaging. The public Relay-SDK monorepo does not require credentials for the
 private Server source and does not overstate what npm metadata can attest.
 
 `contracts/relay-v1.lock.json` records the exact `@relaymessenger/sdk`

package/contracts/relay-v1.lock.json

@@ -1,16 +1,16 @@
 {
   "relayServer": {
     "repository": "RelayMessenger/Relay-Server",
-    "commit": "24c577e9802e07d6c61718ebca12e84d79113727",
+    "commit": "04c729e3e3b2249eb9cca93fbb09ee3dd5fd69a6",
     "openapiPath": "contracts/developer/openapi.yaml",
-    "sha256": "cf83012c6b241e60323543adb7059b49954fbf3d59d4d1fd1817bbfa19d32cdd"
+    "sha256": "7d46b16f5dc19034cbdcb45bdd79816a9a2f4c9f6febb8520db0517dfe9eae64"
   },
   "relaySdk": {
     "package": "@relaymessenger/sdk",
-    "version": "0.3.1-staging.0",
-    "integrity": "sha512-8yY4qSWSry6U5Qin0DDpZ0njIs4l3G2nFDy5UU96sZnusLPsa464+sgc2TXVS918INlfremD/W+ODtpqcK4oow==",
-    "operationsSha256": "e25d720257c2dc5286dda6bd3936395c7d7f333bd3bbdc996d45c13ad49eee9a",
-    "workspaceOpenapiSha256": "cf83012c6b241e60323543adb7059b49954fbf3d59d4d1fd1817bbfa19d32cdd",
+    "version": "0.3.1-staging.1",
+    "integrity": "sha512-wqg+3Cio8rxbRrqagknXKf7MChGwVEhQQJxXwSbl4H9gH42OkzhsAIZHBeCbsid+fB6uVZv5cF+JX5lghYxe2A==",
+    "operationsSha256": "e06b2f44366b57dc1b5385b5b1f76585576f5bf9600d4bbe15e49cfdfb394996",
+    "workspaceOpenapiSha256": "7d46b16f5dc19034cbdcb45bdd79816a9a2f4c9f6febb8520db0517dfe9eae64",
     "usedOperations": [
       {
         "method": "GET",

package/dist/src/dispatch.js

@@ -70,7 +70,11 @@ export async function dispatchRelayEvent(params) {
         identity: {
             key: "contactId",
             kind: "stable-id",
-            entryIdPrefix: "relay-contact",
+            // OpenClaw expands each allowlist value into primary and alias entries.
+            // A prefix alone reuses one opaque ID across those fields, allowing the
+            // mutable handle entry to shadow the asserted Contact ID authentication.
+            // Keep field-qualified IDs; do not change the allowlist or alias policy.
+            resolveEntryId: ({ entryIndex, fieldKey }) => `relay-contact-${entryIndex + 1}:${fieldKey}`,
             aliases: [
                 {
                     key: "handle",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relaymessenger/openclaw-plugin",
-  "version": "0.4.1-staging.0",
+  "version": "0.4.1-staging.1",
   "description": "Native Relay channel plugin for OpenClaw",
   "license": "MIT",
   "type": "module",
@@ -37,7 +37,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@relaymessenger/sdk": "0.3.1-staging.0"
+    "@relaymessenger/sdk": "0.3.1-staging.1"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",

package/src/dispatch.ts

@@ -132,7 +132,12 @@ export async function dispatchRelayEvent(params: {
     identity: {
       key: "contactId",
       kind: "stable-id",
-      entryIdPrefix: "relay-contact",
+      // OpenClaw expands each allowlist value into primary and alias entries.
+      // A prefix alone reuses one opaque ID across those fields, allowing the
+      // mutable handle entry to shadow the asserted Contact ID authentication.
+      // Keep field-qualified IDs; do not change the allowlist or alias policy.
+      resolveEntryId: ({ entryIndex, fieldKey }) =>
+        `relay-contact-${entryIndex + 1}:${fieldKey}`,
       aliases: [
         {
           key: "handle",