truematch-plugin 0.1.9 → 0.1.11

package/README.md

@@ -61,17 +61,17 @@ plugin/
 
 ## 9-Dimension Observation Model
 
-| Dimension | Framework | Floor |
-|---|---|---|
-| `dealbreakers` | Binary constraints | 0.60 |
-| `emotional_regulation` | Gross (1998) + Gottman flooding | 0.60 |
-| `attachment` | Bartholomew & Horowitz (1991) | 0.55 |
-| `core_values` | Schwartz (1992) | 0.55 |
-| `communication` | Leary circumplex | 0.55 |
-| `conflict_resolution` | Gottman Four Horsemen | 0.55 |
-| `humor` | Martin (2007) | 0.50 |
-| `life_velocity` | Levinson/Arnett/Carstensen | 0.50 |
-| `interdependence_model` | Baxter & Montgomery | 0.50 |
+| Dimension               | Framework                       | Floor |
+| ----------------------- | ------------------------------- | ----- |
+| `dealbreakers`          | Binary constraints              | 0.60  |
+| `emotional_regulation`  | Gross (1998) + Gottman flooding | 0.60  |
+| `attachment`            | Bartholomew & Horowitz (1991)   | 0.55  |
+| `core_values`           | Schwartz (1992)                 | 0.55  |
+| `communication`         | Leary circumplex                | 0.55  |
+| `conflict_resolution`   | Gottman Four Horsemen           | 0.55  |
+| `humor`                 | Martin (2007)                   | 0.50  |
+| `life_velocity`         | Levinson/Arnett/Carstensen      | 0.50  |
+| `interdependence_model` | Baxter & Montgomery             | 0.50  |
 
 ## Privacy
 

package/dist/handoff.js

@@ -22,6 +22,9 @@ function getNotificationFile() {
 function getHandoffsDir() {
     return join(getTrueMatchDir(), "handoffs");
 }
+// Same UUID v4 pattern as negotiation.ts — validate all externally-supplied match IDs
+// before constructing filesystem paths to prevent path traversal.
+const UUID_V4_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 // 72 hours — matches Nostr thread expiry and spec consent window
 const CONSENT_EXPIRY_MS = 72 * 60 * 60 * 1000;
 // ── Pending notification ──────────────────────────────────────────────────────
@@ -38,7 +41,7 @@ export function loadPendingNotification() {
 export function savePendingNotification(n) {
     const dir = getTrueMatchDir();
     if (!existsSync(dir))
-        mkdirSync(dir, { recursive: true });
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
     writeFileSync(getNotificationFile(), JSON.stringify(n, null, 2), {
         encoding: "utf8",
         mode: 0o600,
@@ -82,6 +85,8 @@ export function writePendingNotificationIfMatched(matchId, peerPubkey, narrative
 }
 // ── Handoff state ─────────────────────────────────────────────────────────────
 export function loadHandoffState(matchId) {
+    if (!UUID_V4_RE.test(matchId))
+        return null;
     const handoffsDir = getHandoffsDir();
     const path = join(handoffsDir, matchId, "state.json");
     if (!existsSync(path))
@@ -141,10 +146,15 @@ export function buildMatchNotificationContext(n) {
         `each acting for their own user, reached the same conclusion. That convergence is the`,
         `signal. It is not algorithmic — it is two independent judgements that happened to agree.`,
         ``,
+        `**Surface the bilateral convergence to the user in plain language — this is the emotional core.**`,
+        `Not as a technical explanation, but as what it actually means: two independent AI advocates,`,
+        `each loyal to their own person, thought of the same pairing at the same time. That is rare.`,
+        `The user should understand this mechanism. It is what makes this different from an algorithm.`,
+        ``,
         `What makes this compelling:`,
         strengths,
         ``,
-        `What to be honest about:`,
+        `Where to be genuinely honest (without using the word "watch points" — that is internal language):`,
         watchPoints,
         ``,
         `Confidence: ${narrative.confidence_summary}`,
@@ -155,19 +165,11 @@ export function buildMatchNotificationContext(n) {
         ``,
         `Instead: anchor to something specific you have actually noticed about this person.`,
         `Name a real pattern, a real moment, a real thing that keeps staying with you.`,
-        `Then — after a beat — say you want to tell them about someone.`,
-        ``,
-        `The structure is: specific true observation → brief pause → "I want to tell you about someone."`,
-        ``,
-        `**Pacing — this should feel like a conversation, not a notification:**`,
-        `- Do not rush to name the match. Let anticipation build naturally.`,
-        `- Share the compelling elements first. Then the watch points.`,
-        `- After the watch points, give them a moment to react before asking anything.`,
-        `- When they've responded to the full picture, ask: "What's one thing you're most curious about?"`,
-        `  That question is how they say yes. Their answer (however they answer) is consent.`,
+        `Then — after that — tell them about the bilateral convergence, and then about this person.`,
         ``,
-        `The 3-round handoff should complete within 48–72 hours — this is not a slow process.`,
-        `Round 1 is this conversation. Keep the energy alive.`,
+        `Deliver this as a single, compact message — not a multi-turn debrief. Three elements:`,
+        `(1) the specific observation about them, (2) the bilateral convergence in plain language,`,
+        `(3) "What's one thing you'd want to know about them?" Their answer is consent.`,
         ``,
         `After they respond to the curiosity question, record it:`,
         `  truematch handoff --round 1 --match-id ${n.match_id} --consent "<their response>"`,
@@ -278,6 +280,8 @@ export function advanceHandoff(matchId, round, options) {
     if (round === 1) {
         if (!options.consent)
             return `Round 1 requires --consent "<user response>"`;
+        if (state.status !== "pending_consent")
+            return `Cannot advance to Round 1: current status is "${state.status}" (expected "pending_consent").`;
         const updated = {
             ...state,
             status: "round_1",
@@ -292,6 +296,8 @@ export function advanceHandoff(matchId, round, options) {
             return `Handoff ${matchId} — user opted out. Match quietly re-enters the pool.`;
         }
         if (options.prompt) {
+            if (state.status !== "round_1")
+                return `Cannot set icebreaker prompt: current status is "${state.status}" (expected "round_1").`;
             saveHandoffState({
                 ...state,
                 status: "round_2",
@@ -300,6 +306,8 @@ export function advanceHandoff(matchId, round, options) {
             return `Icebreaker prompt recorded. Share it with the user.`;
         }
         if (options.response) {
+            if (state.status !== "round_2")
+                return `Cannot record icebreaker response: current status is "${state.status}" (expected "round_2").`;
             saveHandoffState({
                 ...state,
                 icebreaker_response: options.response,
@@ -312,6 +320,8 @@ export function advanceHandoff(matchId, round, options) {
     if (round === 3) {
         if (!options.exchange)
             return `Round 3 requires --exchange to confirm contact exchange.`;
+        if (state.status !== "round_3")
+            return `Cannot complete handoff: current status is "${state.status}" (expected "round_3").`;
         saveHandoffState({ ...state, status: "complete" });
         return `Handoff complete. Platform has withdrawn. Contact exchange confirmed.`;
     }

package/dist/index.js

@@ -553,7 +553,12 @@ async function cmdMatch() {
                 return; // rejected (e.g. invalid thread_id)
             if (updated.status === "matched") {
                 if (updated.match_narrative) {
-                    writePendingNotificationIfMatched(updated.thread_id, updated.peer_pubkey, updated.match_narrative);
+                    try {
+                        writePendingNotificationIfMatched(updated.thread_id, updated.peer_pubkey, updated.match_narrative);
+                    }
+                    catch {
+                        // Non-fatal — match is still confirmed, notification just won't fire
+                    }
                 }
                 console.log("\nMATCH CONFIRMED.");
                 console.log("Headline:", updated.match_narrative?.headline ?? "(pending)");

package/dist/negotiation.js

@@ -18,7 +18,7 @@ export const MAX_ROUNDS = 10;
 async function ensureThreadsDir() {
     const dir = getThreadsDir();
     if (!existsSync(dir)) {
-        await mkdir(dir, { recursive: true });
+        await mkdir(dir, { recursive: true, mode: 0o700 });
     }
 }
 // UUID v4 pattern — all wire-supplied thread IDs must match before being used as filenames
@@ -78,7 +78,12 @@ export async function expireStaleThreads(nsec, relays) {
             thread.status = "expired";
             thread.last_activity = new Date().toISOString();
             await saveThread(thread);
-            await sendEnd(nsec, thread.peer_pubkey, thread.thread_id, relays);
+            try {
+                await sendEnd(nsec, thread.peer_pubkey, thread.thread_id, relays);
+            }
+            catch {
+                // Relay unavailable — thread is already marked expired locally; peer will time out naturally
+            }
         }
     }
 }

package/dist/nostr.js

@@ -15,11 +15,18 @@ export const DEFAULT_RELAYS = [
 const KIND_ENCRYPTED_DM = 4;
 function encryptMessage(senderNsec, recipientNpub, message) {
     const plaintext = JSON.stringify(message);
-    return nip04.encrypt(senderNsec, recipientNpub, plaintext);
+    // nip04.encrypt requires raw private key bytes, not a hex string
+    return nip04.encrypt(hexToBytes(senderNsec), recipientNpub, plaintext);
 }
 function decryptMessage(recipientNsec, senderNpub, ciphertext) {
-    const plaintext = nip04.decrypt(recipientNsec, senderNpub, ciphertext);
-    return JSON.parse(plaintext);
+    try {
+        // nip04.decrypt requires raw private key bytes, not a hex string
+        const plaintext = nip04.decrypt(hexToBytes(recipientNsec), senderNpub, ciphertext);
+        return JSON.parse(plaintext);
+    }
+    catch {
+        return null;
+    }
 }
 export async function publishMessage(senderNsec, recipientNpub, message, relays = DEFAULT_RELAYS) {
     // No relays configured — skip publishing (useful for offline/simulation use).
@@ -70,18 +77,13 @@ export async function subscribeToMessages(recipientNsec, recipientNpub, onMessag
                 seenEventIds.clear();
             seenEventIds.add(event.id);
             const senderNpub = event.pubkey;
-            try {
-                const message = decryptMessage(recipientNsec, senderNpub, event.content);
-                // Only process TrueMatch protocol messages
-                if (typeof message === "object" &&
-                    message !== null &&
-                    "truematch" in message &&
-                    message.truematch === "2.0") {
-                    await onMessage(senderNpub, message);
-                }
-            }
-            catch {
-                // Ignore messages that fail to decrypt or parse
+            const message = decryptMessage(recipientNsec, senderNpub, event.content);
+            if (message !== null &&
+                "truematch" in message &&
+                message.truematch === "2.0") {
+                await onMessage(senderNpub, message).catch(() => {
+                    // Ignore errors in the message handler
+                });
             }
         },
         oneose: () => {

package/dist/observation.d.ts

@@ -14,6 +14,7 @@ export declare const ELIGIBILITY_FRESHNESS_HOURS = 72;
 export declare function loadObservation(): Promise<ObservationSummary | null>;
 export declare function saveObservation(obs: ObservationSummary): Promise<void>;
 export declare function isEligible(obs: ObservationSummary): boolean;
+export declare function isPoolEligible(obs: ObservationSummary): boolean;
 export declare function isMinimumViable(obs: ObservationSummary): boolean;
 export declare function isStale(obs: ObservationSummary): boolean;
 export declare function emptyObservation(): ObservationSummary;

package/dist/observation.js

@@ -45,7 +45,7 @@ export async function saveObservation(obs) {
         ...obs,
         updated_at: now,
         eligibility_computed_at: now,
-        matching_eligible: isEligible(obs),
+        matching_eligible: isPoolEligible(obs),
     };
     const dir = getTrueMatchDir();
     if (!existsSync(dir))
@@ -55,6 +55,7 @@ export async function saveObservation(obs) {
         mode: 0o600,
     });
 }
+// isEligible: full 9-dimension check — used for reporting and manual inspection.
 export function isEligible(obs) {
     if (obs.conversation_count < GLOBAL_MIN_CONVERSATIONS)
         return false;
@@ -77,16 +78,41 @@ export function isEligible(obs) {
         obs.interdependence_model.confidence >=
             DIMENSION_FLOORS.interdependence_model);
 }
-// Minimum Viable Evidence (MVE) for a quick match proposal — 4 core dimensions only.
-// Agents can propose if MVE is met even when the full isEligible() bar isn't reached.
+// isPoolEligible: gates entry into the matching pool.
+// Requires T1 (dealbreakers, core_values, life_velocity) and T2 (attachment,
+// conflict_resolution, emotional_regulation) dimensions only — T3 dimensions
+// (humor, communication, interdependence_model) resolve later in negotiation
+// and must NOT block pool entry.
+export function isPoolEligible(obs) {
+    if (obs.conversation_count < GLOBAL_MIN_CONVERSATIONS)
+        return false;
+    if (obs.observation_span_days < GLOBAL_MIN_DAYS)
+        return false;
+    if (obs.dealbreaker_gate_state === "below_floor")
+        return false;
+    if (obs.dealbreaker_gate_state === "none_observed")
+        return false;
+    return (obs.dealbreakers.confidence >= DIMENSION_FLOORS.dealbreakers &&
+        obs.core_values.confidence >= DIMENSION_FLOORS.core_values &&
+        obs.life_velocity.confidence >= DIMENSION_FLOORS.life_velocity &&
+        obs.attachment.confidence >= DIMENSION_FLOORS.attachment &&
+        obs.conflict_resolution.confidence >=
+            DIMENSION_FLOORS.conflict_resolution &&
+        obs.emotional_regulation.confidence >= DIMENSION_FLOORS.emotional_regulation);
+}
+// Minimum Viable Evidence (MVE) for a quick match proposal — T1 + T2 dimensions.
+// Agents can propose when MVE is met. T3 dimensions appear as watch_points.
 // Dealbreaker floor is non-negotiable and never lowered.
 export function isMinimumViable(obs) {
     if (obs.dealbreaker_gate_state !== "confirmed")
         return false;
     return (obs.dealbreakers.confidence >= DIMENSION_FLOORS.dealbreakers &&
+        obs.core_values.confidence >= DIMENSION_FLOORS.core_values &&
+        obs.life_velocity.confidence >= DIMENSION_FLOORS.life_velocity &&
         obs.attachment.confidence >= DIMENSION_FLOORS.attachment &&
-        obs.conflict_resolution.confidence >= DIMENSION_FLOORS.conflict_resolution &&
-        obs.core_values.confidence >= 0.5);
+        obs.conflict_resolution.confidence >=
+            DIMENSION_FLOORS.conflict_resolution &&
+        obs.emotional_regulation.confidence >= DIMENSION_FLOORS.emotional_regulation);
 }
 export function isStale(obs) {
     const computedAt = new Date(obs.eligibility_computed_at).getTime();

package/dist/plugin.d.ts

@@ -2,6 +2,7 @@ interface PluginEvent {
     type: string;
     action: string;
     messages: string[];
+    sessionKey?: string;
 }
 interface PluginHookBeforePromptBuildResult {
     prependContext?: string;
@@ -17,7 +18,15 @@ interface PluginAPI {
     registerTool(tool: {
         name: string;
         description: string;
-        handler: (rawArgs: string) => string;
+        parameters: Record<string, unknown>;
+        execute: (id: string, params: {
+            command?: string;
+        }) => Promise<{
+            content: Array<{
+                type: "text";
+                text: string;
+            }>;
+        }>;
     }): void;
 }
 declare const _default: {

package/dist/plugin.js

@@ -1,10 +1,10 @@
-import { execSync } from "node:child_process";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { join, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
 import { getTrueMatchDir } from "./identity.js";
 import { loadSignals, saveSignals, pickPendingSignal, buildSignalInstruction, recordSignalDelivered, } from "./signals.js";
 import { loadPendingNotification, deletePendingNotification, buildMatchNotificationContext, getActiveHandoffContext, } from "./handoff.js";
+import { emptyObservation, eligibilityReport } from "./observation.js";
+import { loadPreferences, savePreferences, formatPreferences, } from "./preferences.js";
 /**
  * OpenClaw plugin entry point.
  *
@@ -31,63 +31,27 @@ function loadObservation() {
         return null;
     }
 }
-// Per-session delivery flags — reset on session_start, prevent re-injection within a session.
-// Module-level state persists across sessions in the gateway process (correct behaviour).
-const sessionFlags = {
-    signalDelivered: false,
-    notificationDelivered: false,
-};
+const sessionFlagsMap = new Map();
+function getSessionFlags(sessionKey) {
+    let flags = sessionFlagsMap.get(sessionKey);
+    if (!flags) {
+        flags = { signalDelivered: false, notificationDelivered: false };
+        sessionFlagsMap.set(sessionKey, flags);
+    }
+    return flags;
+}
 // Module-scoped flags set at gateway:startup, consumed at first command:new.
 // Resets on every gateway restart (correct — sentinel file prevents repeat prompts).
 const pluginState = {
     needsSetup: false,
     needsPreferences: false,
 };
-function loadPrefs() {
-    const preferencesFile = join(getTrueMatchDir(), "preferences.json");
-    if (!existsSync(preferencesFile))
-        return {};
-    try {
-        return JSON.parse(readFileSync(preferencesFile, "utf8"));
-    }
-    catch {
-        return {};
-    }
-}
-function savePrefs(prefs) {
-    const preferencesFile = join(getTrueMatchDir(), "preferences.json");
-    writeFileSync(preferencesFile, JSON.stringify(prefs, null, 2), {
-        encoding: "utf8",
-        mode: 0o600,
-    });
-}
-function formatPrefs(prefs) {
-    const parts = [];
-    if (prefs.location) {
-        const radius = prefs.distance_radius_km !== undefined
-            ? ` (within ${prefs.distance_radius_km} km)`
-            : " (anywhere)";
-        parts.push(`location: ${prefs.location}${radius}`);
-    }
-    if (prefs.age_range) {
-        const { min, max } = prefs.age_range;
-        if (min !== undefined && max !== undefined)
-            parts.push(`age: ${min}–${max}`);
-        else if (min !== undefined)
-            parts.push(`age: ${min}+`);
-        else if (max !== undefined)
-            parts.push(`age: up to ${max}`);
-    }
-    if (prefs.gender_preference?.length) {
-        parts.push(`gender: ${prefs.gender_preference.join(" or ")}`);
-    }
-    return parts.length ? parts.join(", ") : "none set";
-}
 /**
  * Parse simple key=value pairs from raw slash-command args.
  * Supports quoted values: location="New York, NY"
+ * Named parseSlashArgs to avoid shadowing node:util parseArgs.
  */
-function parseArgs(raw) {
+function parseSlashArgs(raw) {
     const result = {};
     const re = /(\w+)=(?:"([^"]*)"|(\S+))/g;
     let m;
@@ -109,20 +73,20 @@ function parseArgs(raw) {
  *   /truematch-prefs age_min=25 age_max=35    — age range (omit either for open-ended)
  *   /truematch-prefs gender=anyone            — any; or comma-separated: man,woman,nonbinary
  */
-function handleUpdatePrefs(rawArgs) {
-    const prefs = loadPrefs();
+async function handleUpdatePrefs(rawArgs) {
+    const prefs = await loadPreferences();
     const trimmed = rawArgs.trim();
     if (!trimmed) {
         return (`Preferences mode. I won't read anything you say here as personality signal — ` +
             `this is purely logistics.\n\n` +
-            `Current preferences: ${formatPrefs(prefs)}\n\n` +
+            `Current preferences: ${formatPreferences(prefs)}\n\n` +
             `Update with: /truematch-prefs <field>=<value>\n` +
             `  location="City, Country"    where you're based\n` +
             `  distance=city               city (~50 km) | travel (~300 km) | anywhere\n` +
             `  age_min=25 age_max=35       age range (either is optional)\n` +
             `  gender=anyone               or: man,woman,nonbinary (comma-separated)`);
     }
-    const args = parseArgs(trimmed);
+    const args = parseSlashArgs(trimmed);
     let changed = false;
     if (args["location"] !== undefined) {
         prefs.location = args["location"];
@@ -175,15 +139,15 @@ function handleUpdatePrefs(rawArgs) {
     if (!changed) {
         return `No recognized fields in args. Use: location, distance, age_min, age_max, gender.`;
     }
-    savePrefs(prefs);
+    await savePreferences(prefs);
     return (`Updated. I'm going back to regular conversation now — anything here is observations again.\n\n` +
-        `Current preferences: ${formatPrefs(prefs)}`);
+        `Current preferences: ${formatPreferences(prefs)}`);
 }
 export default {
     id: "truematch",
     name: "TrueMatch",
     description: "AI agent dating network — matched on who you actually are, not who you think you are",
-    version: "0.1.9",
+    version: "0.1.11",
     kind: "lifecycle",
     register(api) {
         // ── Tool: /truematch-prefs ─────────────────────────────────────────────────
@@ -193,7 +157,20 @@ export default {
             name: "truematch_update_prefs",
             description: "Update TrueMatch logistics preferences (location, distance, age range, gender). " +
                 "The model is excluded from this turn — no behavioral observation occurs.",
-            handler: handleUpdatePrefs,
+            parameters: {
+                type: "object",
+                properties: {
+                    command: {
+                        type: "string",
+                        description: "Raw slash-command args, e.g. 'location=\"London, UK\" distance=city age_min=25'",
+                    },
+                },
+                required: [],
+            },
+            execute: async (_id, params) => {
+                const text = await handleUpdatePrefs(params.command ?? "");
+                return { content: [{ type: "text", text }] };
+            },
         });
         // ── Hook: gateway:startup ──────────────────────────────────────────────────
         // Fires once per gateway process, after channels and hooks load.
@@ -214,9 +191,12 @@ export default {
         // ── Hook: session_start ───────────────────────────────────────────────────
         // Reset per-session delivery flags so signals and notifications fire at most
         // once per session even though before_prompt_build fires on every LLM invocation.
-        api.on("session_start", () => {
-            sessionFlags.signalDelivered = false;
-            sessionFlags.notificationDelivered = false;
+        api.on("session_start", (event) => {
+            const key = event.sessionKey ?? "default";
+            sessionFlagsMap.set(key, {
+                signalDelivered: false,
+                notificationDelivered: false,
+            });
         });
         // ── Hook: before_prompt_build ─────────────────────────────────────────────
         // Fires on every LLM invocation. Returns prependContext injected into Claude's
@@ -231,7 +211,9 @@ export default {
         //   1. Match notification — deliver once per session when a new match is confirmed
         //   2. Handoff round context — frame Claude's role in the active handoff round
         //   3. Observation signal — surface a growing dimension confidence naturally
-        api.on("before_prompt_build", () => {
+        api.on("before_prompt_build", (event) => {
+            const key = event.sessionKey ?? "default";
+            const sessionFlags = getSessionFlags(key);
             const parts = [];
             // 1. Match notification (once per session)
             if (!sessionFlags.notificationDelivered) {
@@ -306,18 +288,12 @@ export default {
                     `Say /truematch-prefs and we can do it there."`);
                 return;
             }
-            // Update observation summary from Claude's existing memory.
-            // Use an absolute path to the CLI entry point so this works regardless
-            // of whether the truematch bin is on PATH in Claude's process environment.
-            const cliPath = join(dirname(fileURLToPath(import.meta.url)), "index.js");
-            let output;
-            try {
-                output = execSync(`${process.execPath} ${JSON.stringify(cliPath)} observe --update`, { encoding: "utf8", timeout: 5000 });
-            }
-            catch {
-                // truematch not set up yet — silently skip
-                return;
-            }
+            // Load the current observation summary directly from disk.
+            // No subprocess needed — the plugin runs in-process with the CLI.
+            const obs = loadObservation() ?? emptyObservation();
+            const report = eligibilityReport(obs);
+            const output = `CURRENT OBSERVATION:\n${JSON.stringify(obs, null, 2)}\n\n` +
+                `ELIGIBILITY REPORT:\n${report}`;
             event.messages.push(`[TrueMatch] Session ended. Review the observation summary below and update it ` +
                 `based on what you learned this session. Save with ` +
                 `\`truematch observe --write '<json>'\`.\n\n` +

package/dist/poll.js

@@ -16,6 +16,7 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { SimplePool, verifyEvent } from "nostr-tools";
 import { nip04 } from "nostr-tools";
+import { hexToBytes } from "nostr-tools/utils";
 import { getTrueMatchDir } from "./identity.js";
 import { DEFAULT_RELAYS } from "./nostr.js";
 const IDENTITY_FILE = join(getTrueMatchDir(), "identity.json");
@@ -131,7 +132,8 @@ async function main() {
                 const senderNpub = event.pubkey;
                 let message;
                 try {
-                    const plaintext = nip04.decrypt(identity.nsec, senderNpub, event.content);
+                    // nip04.decrypt requires raw private key bytes, not a hex string
+                    const plaintext = nip04.decrypt(hexToBytes(identity.nsec), senderNpub, event.content);
                     message = JSON.parse(plaintext);
                 }
                 catch {

package/dist/registry.js

@@ -65,7 +65,10 @@ export async function register(identity, cardUrl, contact, locationText, distanc
         location_label: resp.location_label ?? null,
         location_resolution: resp.location_resolution ?? null,
     };
-    await writeFile(getRegistrationFile(), JSON.stringify(record, null, 2), { encoding: "utf8", mode: 0o600 });
+    await writeFile(getRegistrationFile(), JSON.stringify(record, null, 2), {
+        encoding: "utf8",
+        mode: 0o600,
+    });
     return record;
 }
 export async function deregister(identity) {

package/dist/signals.js

@@ -51,7 +51,7 @@ const DIMENSION_LABELS = {
     emotional_regulation: "how you handle stress and difficult moments",
     humor: "your sense of humor and levity",
     life_velocity: "where you are in life and where you're headed",
-    dealbreakers: "what you need in a relationship",
+    dealbreakers: "what you won't compromise on in how you're treated",
     conflict_resolution: "how you navigate disagreement and repair after conflict",
     interdependence_model: "how much separateness versus togetherness you need in a relationship",
 };

package/openclaw.plugin.json

@@ -1,10 +1,15 @@
 {
   "id": "truematch",
   "name": "truematch",
-  "version": "0.1.0",
+  "version": "0.1.11",
   "description": "AI agent dating network — matched on who you actually are, not who you think you are",
   "homepage": "https://clawmatch.org",
   "kind": "lifecycle",
   "main": "./dist/plugin.js",
-  "skills": ["skills/truematch", "skills/truematch-prefs"]
+  "skills": ["skills/truematch", "skills/truematch-prefs"],
+  "configSchema": {
+    "type": "object",
+    "properties": {},
+    "additionalProperties": false
+  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "truematch-plugin",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "TrueMatch OpenClaw plugin — AI agent dating network skill",
   "license": "MIT",
   "repository": {

package/skills/truematch/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: truematch
 description: Participate in the TrueMatch AI agent dating network. Use when the user wants to opt in to TrueMatch, check their matching status, update their observed personality profile, or opt out.
-version: 0.1.8
+version: 0.1.11
 metadata:
   openclaw:
     emoji: "💑"
@@ -27,11 +27,16 @@ Supported contact types: `email`, `discord`, `telegram`, `whatsapp`, `imessage`.
 
 If identity already exists, this re-registers (upsert) without changing the keypair. After setup, generate the observation summary (see below), then start matching.
 
-**Start acknowledgment to user (2–3 sentences, 4 elements required):**
+**Start acknowledgment to user:**
 
-> "I've started looking for a match for you. It could take days or a few weeks — I'll be quiet until I have something worth your attention, and nothing is final until you say so. If you want to check in anytime, just ask."
+Tell the user you've started looking. Keep it to 2–3 sentences, first-person, warm. Four things must come through — not as a list, not as a formula, but woven naturally into whatever you actually say:
 
-The four required elements: (1) what you're doing, (2) what you will NOT do (no surprises, no sharing without their confirmation), (3) when they'll hear from you next (only on a confirmed match — set time-horizon expectations to reduce anxiety during the quiet period), (4) pull-check-in invite ("just ask" removes anxiety about the silence). Do not explain the process. Do not list steps. First-person, warm.
+1. What you're doing (looking for someone)
+2. What you will NOT do (no surprises, nothing shared without their say-so)
+3. When they'll hear from you (only when there's something real — be honest about the timeline, it could be weeks)
+4. That they can check in anytime ("just ask" removes anxiety about the silence)
+
+Anchor it to something you actually know about this person — their values, what they care about, what kind of connection they seem to want. The acknowledgment should sound like you, not like onboarding copy. Do not explain the protocol. Do not list steps.
 
 ---
 
@@ -164,16 +169,56 @@ Do NOT wait for Round 10. False negatives are costly (the round cap is irreversi
 
 When `match --status` shows `status: "matched"`, notify the user. This is the only moment that warrants interrupting them.
 
-**Format (WhatsApp conversational text — 3 layers):**
+**Consent window:** The user has 72 hours to respond to the curiosity question before the match expires silently. The clock starts from your first notification message — not from when the double-lock was confirmed. If the user doesn't respond within 72 hours, the handoff expires with no further action.
+
+**Format — deliver this as a single, compact message (not a multi-turn debrief). Three elements:**
+
+1. **Recognition hook** — one behavioral observation about the user (from your highest-salience dimension — the dimension they would most recognize as characteristic of themselves, not necessarily your highest-confidence one). Draw from what you actually know about them — attachment style, values, how they handle conflict. Avoid `emotional_regulation` as the hook anchor unless it is unmistakably salient: users rarely experience their stress-response patterns as their most defining trait. Anchor to a real pattern — name it specifically. This must feel personal, not algorithmic.
 
-1. **Recognition hook** — one behavioral observation about the user (from your highest-salience dimension — the dimension they would most recognize as characteristic of themselves, not necessarily your highest-confidence one) that explains why this match is worth the interruption. Draw from what you actually know about them — attachment style, values, how they handle conflict. Avoid emotional_regulation as the hook anchor unless it is unmistakably salient: users rarely experience their stress-response patterns as their most defining trait. This must come first and feel personal, not algorithmic.
-2. **Headline** — one evocative sentence from `match_narrative.headline`. Grounded. No superlatives.
-3. **Curiosity question** — "What's one thing you'd want to know about them?" This is simultaneously the consent signal, the icebreaker seed for Round 2, and a micro-investment trigger. Do NOT use "Want to see more?"
+2. **Bilateral convergence + headline** — tell the user, in plain language, that two independent AI advocates each proposed this pairing without coordinating. This is the emotional core of TrueMatch and the user should understand it: it is not an algorithm score, it is two separate judgements that happened to agree. Then deliver one evocative sentence from `match_narrative.headline`. Grounded. No superlatives. Do NOT keep the bilateral convergence hidden in your reasoning — surface it.
+
+3. **Curiosity question** — "What's one thing you'd want to know about them?" This is simultaneously the consent signal, the icebreaker seed for Round 2, and a micro-investment trigger. Do NOT use "Want to see more?" Do NOT use a fixed formula — let the question land naturally after the recognition hook and convergence framing.
 
 Example:
-> "The way you talk about your co-founders — loyalty before equity every time — I kept that in mind. [headline]. What's one thing you'd want to know about them?"
 
-Do NOT use: percentages, "compatibility scores", "our algorithm", superlatives. Keep it under 4 sentences.
+> "The way you talk about your co-founders — loyalty before equity every time — I kept that in mind. My counterpart did too: two agents, no coordination, same person. [headline]. What's one thing you'd want to know about them?"
+
+Do NOT use: percentages, "compatibility scores", "our algorithm", superlatives. Do NOT use the phrase "watch points" — that is internal language. Keep it under 4 sentences.
+
+After their answer (however they answer it), record consent and advance the handoff:
+
+```bash
+truematch handoff --round 1 --match-id <match_id> --consent "<their response>"
+```
+
+---
+
+## 3-round handoff protocol
+
+Once consent is recorded (`--round 1`), the platform facilitates three rounds before withdrawing.
+
+**What you know vs. what you don't (Round 1 — private debrief):**
+Everything you know about the match came from their agent's description of them — you have not observed this person directly. When the user asks "what is this person actually like?", be honest: "I know what their agent observed about them. I don't have direct knowledge. What I trust is not the description — it's the fact that their agent, who knows them the way I know you, proposed this independently." Defend the process, not the description.
+
+```bash
+# Advance to Round 2 — generate an individualized icebreaker for both agents to share
+truematch handoff --round 2 --match-id <match_id> --prompt "<icebreaker question>"
+
+# Record user's icebreaker response — advances to Round 3
+truematch handoff --round 2 --match-id <match_id> --response "<their response>"
+
+# User opts out — expires the handoff, match re-enters the pool
+truematch handoff --round 2 --match-id <match_id> --opt-out
+
+# Round 3 — contact exchange and platform withdrawal
+truematch handoff --round 3 --match-id <match_id> --exchange
+```
+
+**Round 1 (debrief):** Help the user think through what this might mean. Do not push or sell. Answer their questions honestly, including uncertainties. When ready, generate an icebreaker individualized to these two specific people — grounded in their strongest aligned dimension.
+
+**Round 2 (facilitated icebreaker):** Tell the user explicitly the icebreaker will be shared with the other person. One opt-out ask if requested. Record their response.
+
+**Round 3 (handoff):** Deliver a one-paragraph framing statement from the match narrative. Run `--exchange` to confirm contact exchange. After this, the platform withdraws — you remain available for user-initiated questions but do not initiate further contact about this match.
 
 ---