@tloncorp/openclaw 0.6.0 → 0.6.1

package/dist/src/monitor/session-routing.js

@@ -0,0 +1,261 @@
+import { resolvePinnedMainDmOwnerFromAllowlist } from 'openclaw/plugin-sdk/conversation-runtime';
+import { resolveInboundLastRouteSessionKey, } from 'openclaw/plugin-sdk/routing';
+import { canonicalizeNest, normalizeShip } from '../targets.js';
+/**
+ * Build the parameters for persisting a Tlon inbound turn's durable session
+ * route. Pure: no I/O, no SDK store access. The caller passes the result to
+ * `recordInboundSession` (see `recordTlonInboundRoute`).
+ *
+ * Routing rules:
+ * - DM: persist `tlon:<senderShip>`. When the last-route session is the agent
+ *   main session and a single owner is pinned, attach `mainDmOwnerPin` so a
+ *   non-owner DM cannot silently overwrite the owner/main route.
+ * - Group/channel: persist `tlon:<groupChannel>` only when the last-route
+ *   session is NOT the main session (avoid clobbering a broad shared session).
+ *   Skip — but still record origin metadata — when `groupChannel` is missing.
+ */
+export function buildTlonInboundRouteRecord(input) {
+    const { cfg, route, ctxSessionKey, isGroup, groupChannel, senderShip, parentId, deliverParentId, effectiveOwnerShip, effectiveDmAllowlist, } = input;
+    const recordSessionKey = ctxSessionKey ?? route.sessionKey;
+    const lastRouteSessionKey = resolveInboundLastRouteSessionKey({
+        route,
+        sessionKey: recordSessionKey,
+    });
+    const rawThread = deliverParentId ?? parentId;
+    const threadId = rawThread != null && rawThread !== '' ? String(rawThread) : undefined;
+    const base = { recordSessionKey, lastRouteSessionKey };
+    if (isGroup) {
+        const nest = groupChannel?.trim();
+        if (!nest) {
+            return { ...base, target: null, skippedReason: 'group-missing-channel' };
+        }
+        // Validate/canonicalize the nest before storing. Firehose nests are already
+        // canonical, but config/settings-watched values can be malformed; a bad
+        // nest would otherwise persist an unusable `lastTo`.
+        const canonicalNest = canonicalizeNest(nest);
+        if (!canonicalNest) {
+            return { ...base, target: null, skippedReason: 'group-invalid-channel' };
+        }
+        const target = `tlon:${canonicalNest}`;
+        // Don't overwrite a broad shared main session with a per-group route.
+        if (lastRouteSessionKey === route.mainSessionKey) {
+            return {
+                ...base,
+                target,
+                skippedReason: 'group-route-targets-main-session',
+            };
+        }
+        return {
+            ...base,
+            target,
+            updateLastRoute: {
+                sessionKey: lastRouteSessionKey,
+                channel: 'tlon',
+                to: target,
+                ...(route.accountId ? { accountId: route.accountId } : {}),
+                ...(threadId !== undefined ? { threadId } : {}),
+            },
+        };
+    }
+    // DM
+    const target = `tlon:${senderShip}`;
+    const mainDmOwnerPin = resolveMainDmOwnerPin({
+        cfg,
+        route,
+        lastRouteSessionKey,
+        senderShip,
+        effectiveOwnerShip,
+        effectiveDmAllowlist,
+    });
+    return {
+        ...base,
+        target,
+        updateLastRoute: {
+            sessionKey: lastRouteSessionKey,
+            channel: 'tlon',
+            to: target,
+            ...(route.accountId ? { accountId: route.accountId } : {}),
+            ...(threadId !== undefined ? { threadId } : {}),
+            ...(mainDmOwnerPin ? { mainDmOwnerPin } : {}),
+        },
+    };
+}
+function resolveMainDmOwnerPin(params) {
+    const { cfg, route, lastRouteSessionKey, senderShip, effectiveOwnerShip, effectiveDmAllowlist, } = params;
+    // Only the main session can be clobbered by another DM sender; isolated
+    // per-peer sessions need no pin.
+    if (lastRouteSessionKey !== route.mainSessionKey) {
+        return undefined;
+    }
+    const sender = senderShip.trim();
+    if (!sender) {
+        return undefined;
+    }
+    // Tlon's configured owner (`ownerShip`) is separate from `dmAllowlist`, and
+    // owner DMs are valid even when the owner isn't allowlisted. Prefer pinning
+    // the configured owner; otherwise fall back to the SDK's allowlist semantics
+    // (which only pin when there is exactly one allowed sender).
+    const pinnedOwner = resolvePinnedMainDmOwnerFromAllowlist({
+        dmScope: cfg.session?.dmScope,
+        allowFrom: effectiveOwnerShip ? [effectiveOwnerShip] : effectiveDmAllowlist,
+        normalizeEntry: normalizeShip,
+    });
+    if (!pinnedOwner) {
+        return undefined;
+    }
+    return {
+        ownerRecipient: pinnedOwner,
+        senderRecipient: normalizeShip(sender),
+    };
+}
+/**
+ * Persist a Tlon inbound turn's session route. Always records origin metadata
+ * (even when `record.updateLastRoute` is omitted) and fails open: a persistence
+ * failure is logged but never blocks the live reply.
+ */
+export async function recordTlonInboundRoute(deps) {
+    const { session, storePath, ctxPayload, record, messageId, accountId } = deps;
+    if (record.skippedReason === 'group-missing-channel' ||
+        record.skippedReason === 'group-invalid-channel') {
+        // Anomalous (a group turn with no/malformed channel nest); surface outside
+        // debug too.
+        deps.logError?.(`[tlon] route persistence skipped (${record.skippedReason}): ` +
+            `messageId=${messageId ?? '?'} lastRouteSessionKey=${record.lastRouteSessionKey}`);
+    }
+    else if (record.skippedReason) {
+        // Normal policy outcome (e.g. a group route that targets the shared main
+        // session); debug-only to avoid high-volume logs for an expected case.
+        deps.logDebug?.(`[tlon] route persistence skipped (${record.skippedReason}): ` +
+            `messageId=${messageId ?? '?'} lastRouteSessionKey=${record.lastRouteSessionKey} ` +
+            `target=${record.target ?? '(none)'}`);
+    }
+    // When a main-session DM is pinned to an owner, the SDK skips the durable
+    // route update for a non-owner sender. Wire an onSkip so that decision is
+    // observable instead of silently looking like a successful write.
+    const pin = record.updateLastRoute?.mainDmOwnerPin;
+    const updateLastRoute = record.updateLastRoute
+        ? {
+            ...record.updateLastRoute,
+            ...(pin
+                ? {
+                    mainDmOwnerPin: {
+                        ...pin,
+                        onSkip: ({ ownerRecipient, senderRecipient }) => deps.logDebug?.(`[tlon] durable route update skipped by owner pin: ` +
+                            `messageId=${messageId ?? '?'} owner=${ownerRecipient} ` +
+                            `sender=${senderRecipient} lastRouteSessionKey=${record.lastRouteSessionKey}`),
+                    },
+                }
+                : {}),
+        }
+        : undefined;
+    try {
+        await session.recordInboundSession({
+            storePath,
+            sessionKey: record.recordSessionKey,
+            ctx: ctxPayload,
+            updateLastRoute,
+            onRecordError: (err) => {
+                deps.logError?.(`[tlon] failed updating session meta: ${String(err)}`);
+            },
+        });
+    }
+    catch (err) {
+        deps.logError?.(`[tlon] failed recording inbound session route: ${String(err)} ` +
+            `(messageId=${messageId ?? '?'} storePath=${storePath} ` +
+            `recordSessionKey=${record.recordSessionKey} ` +
+            `lastRouteSessionKey=${record.lastRouteSessionKey} ` +
+            `target=${record.target ?? '(none)'} accountId=${accountId ?? '(none)'} ` +
+            `hadUpdateLastRoute=${Boolean(record.updateLastRoute)})`);
+    }
+}
+/**
+ * Whether the SDK will skip the durable route update because a main-session DM
+ * is pinned to an owner different from the sender. A built `updateLastRoute`
+ * does not guarantee a write, so diagnostics should report this rather than
+ * imply the route was persisted.
+ */
+export function routeUpdateWillSkipByPin(update) {
+    const pin = update?.mainDmOwnerPin;
+    if (!pin) {
+        return false;
+    }
+    return pin.ownerRecipient !== pin.senderRecipient;
+}
+/**
+ * Run the durable route-record step before reply dispatch. The bug this fixes
+ * lives at exactly this boundary: route-dependent sends that happen during
+ * dispatch must observe the persisted route, so recording must complete first.
+ * Keeping this ordering in one place gives the monitor a testable guard.
+ */
+export async function recordRouteThenDispatch(steps) {
+    await steps.record();
+    return steps.dispatch();
+}
+/**
+ * The monitor's "build ctx → record route → dispatch" boundary, as a single
+ * testable unit (this is where the original webchat-leak bug lived). Builds the
+ * Tlon route record, persists it, and only then runs `dispatch`. The monitor
+ * delegates its entire record+dispatch to this so the ordering is covered by a
+ * unit test rather than only by the monitor's structure.
+ */
+export async function recordTlonRouteAndDispatch(params) {
+    const record = buildTlonInboundRouteRecord({
+        cfg: params.cfg,
+        route: params.route,
+        ctxSessionKey: params.ctxSessionKey,
+        isGroup: params.isGroup,
+        groupChannel: params.groupChannel,
+        senderShip: params.senderShip,
+        parentId: params.parentId,
+        deliverParentId: params.deliverParentId,
+        effectiveOwnerShip: params.effectiveOwnerShip,
+        effectiveDmAllowlist: params.effectiveDmAllowlist,
+    });
+    params.onRecord?.(record);
+    return recordRouteThenDispatch({
+        // Fail open across the *entire* persistence step — including
+        // resolveStorePath, which can throw on bad session-store config — so a
+        // persistence failure never suppresses the live Tlon reply.
+        record: async () => {
+            let storePath;
+            try {
+                storePath = params.session.resolveStorePath(params.sessionStore, {
+                    agentId: params.route.agentId,
+                });
+            }
+            catch (err) {
+                params.logError?.(`[tlon] failed resolving session store path: ${String(err)} ` +
+                    `(messageId=${params.messageId ?? '?'})`);
+                return;
+            }
+            await recordTlonInboundRoute({
+                session: params.session,
+                storePath,
+                ctxPayload: params.ctxPayload,
+                record,
+                messageId: params.messageId,
+                accountId: params.route.accountId,
+                logError: params.logError,
+                logDebug: params.logDebug,
+            });
+        },
+        dispatch: params.dispatch,
+    });
+}
+/**
+ * Build a Tlon `deliveryContext` for an enqueued system event (reactions,
+ * group-join notices). System-event turns resolve delivery from the event's
+ * `deliveryContext` or the session store; attaching this ensures a later
+ * system/heartbeat turn driven by the event routes to Tlon instead of falling
+ * back to webchat, even on a session that hasn't persisted an inbound route yet.
+ * `to` is the provider-qualified target (`tlon:~ship` for DMs, `tlon:<nest>` for
+ * channels), matching `OriginatingTo` and the durable route.
+ */
+export function tlonDeliveryContext(to, accountId) {
+    return { channel: 'tlon', to, ...(accountId ? { accountId } : {}) };
+}
+/** Route-debug gate: enabled via `TLON_OPENCLAW_ROUTE_DEBUG=1`. */
+export function isRouteDebugEnabled() {
+    return process.env.TLON_OPENCLAW_ROUTE_DEBUG === '1';
+}
+//# sourceMappingURL=session-routing.js.map

package/dist/src/monitor/session-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-routing.js","sourceRoot":"","sources":["../../../src/monitor/session-routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,0CAA0C,CAAC;AAEjG,OAAO,EAEL,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA+DhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA4B;IAE5B,MAAM,EACJ,GAAG,EACH,KAAK,EACL,aAAa,EACb,OAAO,EACP,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,oBAAoB,GACrB,GAAG,KAAK,CAAC;IAEV,MAAM,gBAAgB,GAAG,aAAa,IAAI,KAAK,CAAC,UAAU,CAAC;IAC3D,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;QAC5D,KAAK;QACL,UAAU,EAAE,gBAAgB;KAC7B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,eAAe,IAAI,QAAQ,CAAC;IAC9C,MAAM,QAAQ,GACZ,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExE,MAAM,IAAI,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;IAEvD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC;QAC3E,CAAC;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,qDAAqD;QACrD,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,aAAa,EAAE,CAAC;QACvC,sEAAsE;QACtE,IAAI,mBAAmB,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACjD,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM;gBACN,aAAa,EAAE,kCAAkC;aAClD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,MAAM;YACN,eAAe,EAAE;gBACf,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,MAAM;gBACf,EAAE,EAAE,MAAM;gBACV,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC;IACJ,CAAC;IAED,KAAK;IACL,MAAM,MAAM,GAAG,QAAQ,UAAU,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG;QACH,KAAK;QACL,mBAAmB;QACnB,UAAU;QACV,kBAAkB;QAClB,oBAAoB;KACrB,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,IAAI;QACP,MAAM;QACN,eAAe,EAAE;YACf,UAAU,EAAE,mBAAmB;YAC/B,OAAO,EAAE,MAAM;YACf,EAAE,EAAE,MAAM;YACV,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAO9B;IACC,MAAM,EACJ,GAAG,EACH,KAAK,EACL,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,oBAAoB,GACrB,GAAG,MAAM,CAAC;IAEX,wEAAwE;IACxE,iCAAiC;IACjC,IAAI,mBAAmB,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,WAAW,GAAG,qCAAqC,CAAC;QACxD,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO;QAC7B,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,oBAAoB;QAC3E,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,cAAc,EAAE,WAAW;QAC3B,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC;KACvC,CAAC;AACJ,CAAC;AAgBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAS5C;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE9E,IACE,MAAM,CAAC,aAAa,KAAK,uBAAuB;QAChD,MAAM,CAAC,aAAa,KAAK,uBAAuB,EAChD,CAAC;QACD,2EAA2E;QAC3E,aAAa;QACb,IAAI,CAAC,QAAQ,EAAE,CACb,qCAAqC,MAAM,CAAC,aAAa,KAAK;YAC5D,aAAa,SAAS,IAAI,GAAG,wBAAwB,MAAM,CAAC,mBAAmB,EAAE,CACpF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,QAAQ,EAAE,CACb,qCAAqC,MAAM,CAAC,aAAa,KAAK;YAC5D,aAAa,SAAS,IAAI,GAAG,wBAAwB,MAAM,CAAC,mBAAmB,GAAG;YAClF,UAAU,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CACxC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC;IACnD,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe;QACpB,CAAC,CAAC;YACE,GAAG,MAAM,CAAC,eAAe;YACzB,GAAG,CAAC,GAAG;gBACL,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,GAAG,GAAG;wBACN,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,CAC9C,IAAI,CAAC,QAAQ,EAAE,CACb,oDAAoD;4BAClD,aAAa,SAAS,IAAI,GAAG,UAAU,cAAc,GAAG;4BACxD,UAAU,eAAe,wBAAwB,MAAM,CAAC,mBAAmB,EAAE,CAChF;qBACJ;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,oBAAoB,CAAC;YACjC,SAAS;YACT,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,GAAG,EAAE,UAAU;YACf,eAAe;YACf,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrB,IAAI,CAAC,QAAQ,EAAE,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,EAAE,CACb,kDAAkD,MAAM,CAAC,GAAG,CAAC,GAAG;YAC9D,cAAc,SAAS,IAAI,GAAG,cAAc,SAAS,GAAG;YACxD,oBAAoB,MAAM,CAAC,gBAAgB,GAAG;YAC9C,uBAAuB,MAAM,CAAC,mBAAmB,GAAG;YACpD,UAAU,MAAM,CAAC,MAAM,IAAI,QAAQ,cAAc,SAAS,IAAI,QAAQ,GAAG;YACzE,sBAAsB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,EAAE,cAAc,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,eAAe,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAI,KAGhD;IACC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAI,MAuBnD;IACC,MAAM,MAAM,GAAG,2BAA2B,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;KAClD,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,uBAAuB,CAAC;QAC7B,6DAA6D;QAC7D,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE;oBAC/D,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,QAAQ,EAAE,CACf,+CAA+C,MAAM,CAAC,GAAG,CAAC,GAAG;oBAC3D,cAAc,MAAM,CAAC,SAAS,IAAI,GAAG,GAAG,CAC3C,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,sBAAsB,CAAC;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS;gBACT,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM;gBACN,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAU,EACV,SAAkB;IAElB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC;AACvD,CAAC"}

package/dist/src/session-route.js

@@ -0,0 +1,44 @@
+import { buildChannelOutboundSessionRoute, } from 'openclaw/plugin-sdk/core';
+import { parseTlonTarget } from './targets.js';
+/**
+ * Channel-native outbound session-route builder for Tlon.
+ *
+ * Lets explicit outbound sends to a Tlon target (e.g. the shared `message` tool
+ * with `to: tlon:~ship`) derive a stable Tlon session route, so they resolve
+ * to Tlon even when the current turn's surface is something else. Returns
+ * `null` for non-Tlon / unparseable targets so core can fall through.
+ */
+export function resolveTlonOutboundSessionRoute(params) {
+    const parsed = parseTlonTarget(params.target);
+    if (!parsed) {
+        return null;
+    }
+    const threadId = params.threadId != null && params.threadId !== ''
+        ? params.threadId
+        : undefined;
+    if (parsed.kind === 'dm') {
+        return buildChannelOutboundSessionRoute({
+            cfg: params.cfg,
+            agentId: params.agentId,
+            channel: 'tlon',
+            accountId: params.accountId,
+            peer: { kind: 'direct', id: parsed.ship },
+            chatType: 'direct',
+            from: `tlon:${parsed.ship}`,
+            to: `tlon:${parsed.ship}`,
+            ...(threadId !== undefined ? { threadId } : {}),
+        });
+    }
+    return buildChannelOutboundSessionRoute({
+        cfg: params.cfg,
+        agentId: params.agentId,
+        channel: 'tlon',
+        accountId: params.accountId,
+        peer: { kind: 'group', id: parsed.nest },
+        chatType: 'group',
+        from: `tlon:group:${parsed.nest}`,
+        to: `tlon:${parsed.nest}`,
+        ...(threadId !== undefined ? { threadId } : {}),
+    });
+}
+//# sourceMappingURL=session-route.js.map

package/dist/src/session-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-route.js","sourceRoot":"","sources":["../../src/session-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,gCAAgC,GACjC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAyC;IAEzC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAC/C,CAAC,CAAC,MAAM,CAAC,QAAQ;QACjB,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,gCAAgC,CAAC;YACtC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;YACzC,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;YAC3B,EAAE,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;YACzB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gCAAgC,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,cAAc,MAAM,CAAC,IAAI,EAAE;QACjC,EAAE,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;QACzB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;AACL,CAAC"}