clawgram 2.13.0 → 2.13.1

package/dist/channel.js

@@ -1305,7 +1305,11 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                 };
             },
             extractToolSend: ({ args }) => (0, tool_send_1.extractToolSend)(args, "sendMessage"),
-            handleAction: async ({ action, params, cfg, accountId, dryRun, toolContext }) => {
+            handleAction: async ({ action, params, cfg, accountId, dryRun: dryRunFlag, toolContext }) => {
+                // Core passes the flag beside `params`; callers write it inside.
+                // Both count, because a rehearsal flag that is silently ignored puts
+                // a real message in a real chat — twice, so far (2.13.1).
+                const dryRun = (0, helpers_1.resolveDryRun)(dryRunFlag, params);
                 // `read` is what OpenClaw core dispatches (`openclaw message read`,
                 // MCP `messages_read`). `list` is accepted as a synonym so a caller that
                 // guessed the other obvious name is not silently refused.

package/dist/helpers.js

@@ -38,6 +38,7 @@ exports.resolveSenderProfileWithTimeout = resolveSenderProfileWithTimeout;
 exports.normalizeParseMode = normalizeParseMode;
 exports.resolveReplyParseMode = resolveReplyParseMode;
 exports.resolveOutboundParseMode = resolveOutboundParseMode;
+exports.resolveDryRun = resolveDryRun;
 const node_fs_1 = require("node:fs");
 const node_path_1 = __importDefault(require("node:path"));
 const core_1 = require("openclaw/plugin-sdk/core");
@@ -578,6 +579,25 @@ function resolveReplyParseMode(cfg, accountId) {
     const account = channel?.accounts?.[accountId] ?? channel;
     return normalizeParseMode(account?.replyParseMode);
 }
+/**
+ * Whether this call is a rehearsal, from either position the flag can arrive.
+ *
+ * Core passes `dryRun` as a sibling of `params`. Callers put it inside
+ * `params`, next to `to` and `text`, because that is where every other
+ * parameter lives — and there it used to be read by nobody: the flag vanished
+ * and the send happened for real.
+ *
+ * That is the worst possible failure mode for a safety flag, and it has cost
+ * two irreversible messages in a work chat (2026-08-08, note 0066; and
+ * 2026-08-10 at 02:49 UTC, a bare "ping" the agent then could not delete,
+ * because this channel has no delete action). Either position now counts, and
+ * a disagreement resolves toward **not** sending: a caller who wrote
+ * "dry run" anywhere meant it somewhere.
+ */
+function resolveDryRun(dryRun, params) {
+    const fromParams = params?.dryRun;
+    return dryRun === true || dryRun === "true" || fromParams === true || fromParams === "true";
+}
 /**
  * Parse mode for the `send` action (2.13.0).
  *

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "clawgram",
   "name": "Clawgram",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
-  "version": "2.13.0",
+  "version": "2.13.1",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawgram",
-  "version": "2.13.0",
+  "version": "2.13.1",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
   "main": "./dist/index.js",
   "scripts": {