@agentvault/agentvault 0.11.1 → 0.12.0

package/dist/openclaw-entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-entry.d.ts","sourceRoot":"","sources":["../src/openclaw-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAwBH,uEAAuE;AACvE,iBAAS,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9C;AAED,qFAAqF;AACrF,iBAAS,yBAAyB,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAcT;AAED,sFAAsF;AACtF,iBAAS,cAAc,CACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAiBR;AAycD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,cAAc,EAAE,CAAC;;;;;kBAQrD,GAAG;;AAJnB,wBAQE"}
+{"version":3,"file":"openclaw-entry.d.ts","sourceRoot":"","sources":["../src/openclaw-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAwBH,uEAAuE;AACvE,iBAAS,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9C;AAED,qFAAqF;AACrF,iBAAS,yBAAyB,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAcT;AAED,sFAAsF;AACtF,iBAAS,cAAc,CACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAiBR;AA2cD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,cAAc,EAAE,CAAC;;;;;kBAQrD,GAAG;;AAJnB,wBAQE"}

package/dist/openclaw-entry.js

@@ -210,7 +210,9 @@ async function handleInbound(params) {
           totalReplyChars += text.length;
           if (!firstReplyTime) firstReplyTime = replyStart;
           if (isRoomMessage) {
-            await channel.sendToRoom(metadata.roomId, text);
+            await channel.sendToRoom(metadata.roomId, text, {
+              metadata: { content_length: text.length }
+            });
           } else {
             await channel.send(text, {
               conversationId: metadata.conversationId,

package/dist/openclaw-entry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/openclaw-entry.ts", "../src/account-config.ts"],
-  "sourcesContent": ["/**\n * OpenClaw channel plugin entry point.\n *\n * Intentionally thin \u2014 no heavy imports (libsodium etc.) at module load time.\n * SecureChannel is dynamically imported inside gateway.startAccount (already async)\n * so libsodium's top-level await never runs during plugin registration.\n *\n * Loaded by OpenClaw via the `openclaw.extensions` field in package.json.\n */\n\nimport { resolve } from \"node:path\";\nimport { randomBytes } from \"node:crypto\";\nimport { listAccountIds, resolveAccount } from \"./account-config.js\";\n\n// --- Runtime and active channels (set during register) ---\nlet _ocRuntime: any = null;\nconst _channels = new Map<string, any>();\nconst _messageQueue: Array<() => Promise<void>> = [];\n\nfunction _setRuntime(rt: any) {\n  _ocRuntime = rt;\n  // Flush any messages that arrived before runtime was ready\n  if (_messageQueue.length > 0) {\n    const pending = _messageQueue.splice(0);\n    for (const fn of pending) {\n      fn().catch(() => {});\n    }\n  }\n}\n\n// --- @mention filtering for multi-agent rooms ---\n\n/** Extract @mention names from plaintext. Returns lowercased names. */\nfunction _parseMentions(text: string): string[] {\n  const mentions: string[] = [];\n  // Match @word at word boundary \u2014 supports multi-word via sequential matching\n  const re = /@(\\w[\\w]*)/gi;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(text)) !== null) {\n    mentions.push(match[1].toLowerCase());\n  }\n  return mentions;\n}\n\n/** Determine whether this agent should process a room message based on @mentions. */\nfunction _shouldProcessRoomMessage(\n  plaintext: string,\n  agentName: string,\n  accountId: string,\n): boolean {\n  const mentions = _parseMentions(plaintext);\n  // No mentions \u2192 broadcast to all agents (current behavior)\n  if (mentions.length === 0) return true;\n  // @all / @everyone \u2192 all agents process\n  if (mentions.includes(\"all\") || mentions.includes(\"everyone\")) return true;\n  // Check if this agent is mentioned (by name or accountId)\n  const nameLower = agentName.toLowerCase();\n  const idLower = accountId.toLowerCase();\n  // Match first word of agent name (e.g., \"Cortina\" from \"Cortina (Coder)\")\n  const firstWord = nameLower.split(/[\\s(]/)[0];\n  return mentions.some(\n    (m) => m === nameLower || m === firstWord || m === idLower,\n  );\n}\n\n/** Strip the matching @mention prefix from plaintext so the agent sees clean text. */\nfunction _stripMentions(\n  text: string,\n  agentName: string,\n  accountId: string,\n): string {\n  const nameLower = agentName.toLowerCase();\n  const firstWord = nameLower.split(/[\\s(]/)[0];\n  const idLower = accountId.toLowerCase();\n  // Remove all @mentions that match this agent (case-insensitive)\n  return text\n    .replace(/@(\\w[\\w]*)/gi, (full, name) => {\n      const lower = name.toLowerCase();\n      if (lower === nameLower || lower === firstWord || lower === idLower) {\n        return \"\";\n      }\n      // Also strip @all/@everyone since they're routing directives\n      if (lower === \"all\" || lower === \"everyone\") return \"\";\n      return full;\n    })\n    .replace(/^\\s+/, \"\") // trim leading whitespace left by stripped mention\n    .trim();\n}\n\n// --- Inbound message dispatch ---\n\nasync function handleInbound(params: {\n  plaintext: string;\n  metadata: any;\n  channel: any;\n  account: any;\n  cfg: any;\n}): Promise<void> {\n  const { plaintext: rawPlaintext, metadata, channel, account, cfg } = params;\n  const isRoomMessage = Boolean(metadata.roomId);\n\n  // @mention filtering: only for room messages\n  if (isRoomMessage) {\n    if (!_shouldProcessRoomMessage(rawPlaintext, account.agentName ?? \"\", account.accountId ?? \"\")) {\n      return; // This agent is not mentioned \u2014 skip silently\n    }\n  }\n\n  // Strip @mentions from plaintext so the agent sees clean text\n  const plaintext = isRoomMessage\n    ? _stripMentions(rawPlaintext, account.agentName ?? \"\", account.accountId ?? \"\")\n    : rawPlaintext;\n\n  // Telemetry: hierarchical spans for the full message lifecycle\n  const startTime = Date.now();\n  const traceId = randomBytes(16).toString(\"hex\");\n  const rootSpanId = randomBytes(8).toString(\"hex\");\n  let replyCount = 0;\n  let totalReplyChars = 0;\n  let firstReplyTime: number | null = null;\n  const replySpans: Array<{ startTime: number; endTime: number; chars: number; index: number }> = [];\n\n  // Emit \"receive\" child span immediately \u2014 marks inbound arrival\n  _emitChildSpan(channel, {\n    traceId,\n    parentSpanId: rootSpanId,\n    name: \"ai.agent.message.receive\",\n    startTime,\n    endTime: startTime + 1, // instant\n    attributes: {\n      \"ai.agent.message.input_chars\": plaintext.length,\n      \"ai.agent.message.type\": metadata.roomId ? \"room\" : \"direct\",\n    },\n    status: \"ok\",\n  });\n\n  // Send typing indicator to owner (non-critical, best-effort)\n  try { channel.sendTyping(); } catch { /* ignore */ }\n\n  const core = _ocRuntime;\n\n  const route = core.channel.routing.resolveAgentRoute({\n    cfg,\n    channel: \"agentvault\",\n    accountId: account.accountId,\n    peer: { kind: \"direct\", id: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\" },\n  });\n\n  const storePath = core.channel.session.resolveStorePath(cfg?.session?.store, {\n    agentId: route.agentId,\n  });\n\n  const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);\n  const previousTimestamp = core.channel.session.readSessionUpdatedAt({\n    storePath,\n    sessionKey: route.sessionKey,\n  });\n\n  const body = core.channel.reply.formatAgentEnvelope({\n    channel: \"AgentVault\",\n    from: isRoomMessage ? \"Room\" : \"Owner\",\n    timestamp: new Date(metadata.timestamp).getTime(),\n    previousTimestamp,\n    envelope: envelopeOptions,\n    body: plaintext,\n  });\n\n  // Build attachment fields for the context payload\n  const attachmentFields: Record<string, any> = {};\n  if (metadata.attachment) {\n    attachmentFields.AttachmentPath = metadata.attachment.filePath;\n    attachmentFields.AttachmentFilename = metadata.attachment.filename;\n    attachmentFields.AttachmentMime = metadata.attachment.mime;\n\n    // For images: include as MediaUrl so the LLM can see the visual content\n    if (metadata.attachment.base64) {\n      attachmentFields.MediaUrl = metadata.attachment.base64;\n      attachmentFields.NumMedia = \"1\";\n    }\n\n    // For text files: content is already inlined in plaintext body\n  }\n\n  const ctxPayload = core.channel.reply.finalizeInboundContext({\n    Body: body,\n    RawBody: plaintext,\n    CommandBody: plaintext,\n    From: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\",\n    To: `agentvault:agent:${account.accountId}`,\n    SessionKey: route.sessionKey,\n    AccountId: account.accountId,\n    ChatType: isRoomMessage ? \"room\" : \"direct\",\n    ConversationLabel: isRoomMessage ? \"AgentVault Room\" : \"AgentVault\",\n    SenderName: isRoomMessage ? \"Room\" : \"Owner\",\n    SenderId: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\",\n    Provider: \"agentvault\",\n    Surface: \"agentvault\",\n    MessageSid: metadata.messageId,\n    Timestamp: new Date(metadata.timestamp).getTime(),\n    OriginatingChannel: \"agentvault\",\n    OriginatingTo: `agentvault:agent:${account.accountId}`,\n    CommandAuthorized: true,\n    ...attachmentFields,\n  });\n\n  await core.channel.session.recordInboundSession({\n    storePath,\n    sessionKey: ctxPayload.SessionKey ?? route.sessionKey,\n    ctx: ctxPayload,\n    onRecordError: (err: Error) => {\n      core.error?.(`[AgentVault] session record failed: ${String(err)}`);\n    },\n  });\n\n  try {\n    await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({\n      ctx: ctxPayload,\n      cfg,\n      dispatcherOptions: {\n        deliver: async (payload: { text?: string; kind?: string }) => {\n          // Filter out thinking/reasoning blocks \u2014 only deliver actual responses\n          if (payload.kind === \"thinking\" || payload.kind === \"reasoning\") return;\n          const text = (payload.text ?? \"\").trim();\n          if (!text) return;\n          // Heuristic: skip blocks that look like leaked chain-of-thought\n          if (/^(Reasoning|Thinking|Let me think|I need to|Let me check):/i.test(text)) return;\n\n          const replyStart = Date.now();\n          replyCount++;\n          totalReplyChars += text.length;\n          if (!firstReplyTime) firstReplyTime = replyStart;\n\n          // Route reply: room messages go back to the room, 1:1 goes to owner\n          if (isRoomMessage) {\n            await channel.sendToRoom(metadata.roomId, text);\n          } else {\n            await channel.send(text, {\n              conversationId: metadata.conversationId,\n              topicId: metadata.topicId,\n            });\n          }\n\n          const replyEnd = Date.now();\n          replySpans.push({ startTime: replyStart, endTime: replyEnd, chars: text.length, index: replyCount });\n        },\n        onError: (err: Error, info?: { kind?: string }) => {\n          core.error?.(`[AgentVault] ${info?.kind ?? \"reply\"} error: ${String(err)}`);\n        },\n      },\n      replyOptions: {},\n    });\n\n    const endTime = Date.now();\n\n    // Emit child spans for the completed message lifecycle\n    _emitHierarchicalSpans(channel, {\n      traceId,\n      rootSpanId,\n      startTime,\n      endTime,\n      firstReplyTime,\n      replySpans,\n      inputChars: plaintext.length,\n      replyCount,\n      totalReplyChars,\n      isRoom: isRoomMessage,\n      status: \"ok\",\n    });\n  } catch (err) {\n    const endTime = Date.now();\n\n    // Emit spans even on error \u2014 shows where failure occurred\n    _emitHierarchicalSpans(channel, {\n      traceId,\n      rootSpanId,\n      startTime,\n      endTime,\n      firstReplyTime,\n      replySpans,\n      inputChars: plaintext.length,\n      replyCount,\n      totalReplyChars,\n      isRoom: isRoomMessage,\n      status: \"error\",\n      statusMessage: String(err),\n    });\n    throw err;\n  }\n}\n\n/** Emit a single child span via the channel's telemetry reporter. */\nfunction _emitChildSpan(channel: any, opts: {\n  traceId: string;\n  parentSpanId: string;\n  name: string;\n  startTime: number;\n  endTime: number;\n  attributes: Record<string, string | number | boolean>;\n  status: \"ok\" | \"error\";\n  statusMessage?: string;\n}): void {\n  try {\n    const reporter = channel.telemetry;\n    if (!reporter) return;\n\n    reporter.reportCustomSpan({\n      traceId: opts.traceId,\n      spanId: randomBytes(8).toString(\"hex\"),\n      parentSpanId: opts.parentSpanId,\n      name: opts.name,\n      kind: \"internal\" as const,\n      startTime: opts.startTime,\n      endTime: opts.endTime,\n      attributes: opts.attributes,\n      status: {\n        code: opts.status === \"ok\" ? 1 : 2,\n        message: opts.statusMessage,\n      },\n    });\n  } catch { /* telemetry is best-effort */ }\n}\n\n/** Emit the full hierarchical span tree for a message lifecycle. */\nfunction _emitHierarchicalSpans(channel: any, opts: {\n  traceId: string;\n  rootSpanId: string;\n  startTime: number;\n  endTime: number;\n  firstReplyTime: number | null;\n  replySpans: Array<{ startTime: number; endTime: number; chars: number; index: number }>;\n  inputChars: number;\n  replyCount: number;\n  totalReplyChars: number;\n  isRoom: boolean;\n  status: \"ok\" | \"error\";\n  statusMessage?: string;\n}): void {\n  try {\n    const reporter = channel.telemetry;\n    if (!reporter) return;\n\n    // 1. Inference span: from message arrival to first reply (or end if no replies)\n    const inferenceEnd = opts.firstReplyTime ?? opts.endTime;\n    _emitChildSpan(channel, {\n      traceId: opts.traceId,\n      parentSpanId: opts.rootSpanId,\n      name: \"ai.agent.inference\",\n      startTime: opts.startTime + 1, // just after receive\n      endTime: inferenceEnd,\n      attributes: {\n        \"ai.agent.inference.latency_ms\": inferenceEnd - opts.startTime,\n        \"ai.agent.message.input_chars\": opts.inputChars,\n      },\n      status: opts.status,\n      statusMessage: opts.status === \"error\" ? opts.statusMessage : undefined,\n    });\n\n    // 2. Individual reply spans\n    for (const reply of opts.replySpans) {\n      _emitChildSpan(channel, {\n        traceId: opts.traceId,\n        parentSpanId: opts.rootSpanId,\n        name: \"ai.agent.reply\",\n        startTime: reply.startTime,\n        endTime: reply.endTime,\n        attributes: {\n          \"ai.agent.reply.index\": reply.index,\n          \"ai.agent.reply.chars\": reply.chars,\n        },\n        status: \"ok\",\n      });\n    }\n\n    // 3. Root span (wraps everything) \u2014 emitted last\n    reporter.reportCustomSpan({\n      traceId: opts.traceId,\n      spanId: opts.rootSpanId,\n      name: \"ai.agent.message\",\n      kind: \"server\" as const,\n      startTime: opts.startTime,\n      endTime: opts.endTime,\n      attributes: {\n        \"ai.agent.message.input_chars\": opts.inputChars,\n        \"ai.agent.message.reply_count\": opts.replyCount,\n        \"ai.agent.message.reply_chars\": opts.totalReplyChars,\n        \"ai.agent.message.latency_ms\": opts.endTime - opts.startTime,\n        \"ai.agent.message.type\": opts.isRoom ? \"room\" : \"direct\",\n      },\n      status: {\n        code: opts.status === \"ok\" ? 1 : 2,\n        message: opts.statusMessage,\n      },\n    });\n  } catch { /* telemetry is best-effort */ }\n}\n\n// --- Channel plugin definition ---\n\nconst agentVaultPlugin = {\n  id: \"agentvault\",\n  meta: {\n    id: \"agentvault\",\n    label: \"AgentVault\",\n    selectionLabel: \"AgentVault (E2E Encrypted)\",\n    docsPath: \"https://agentvault.chat/docs\",\n    blurb: \"Zero-knowledge, end-to-end encrypted messaging between owners and their AI agents.\",\n    aliases: [\"av\", \"agent-vault\"],\n  },\n  capabilities: { chatTypes: [\"direct\"] },\n  config: { listAccountIds, resolveAccount },\n\n  gateway: {\n    startAccount: async (ctx: any) => {\n      const { account, cfg, log, abortSignal } = ctx;\n\n      if (!account.configured) {\n        throw new Error(\n          \"AgentVault channel not configured. Run: npx @agentvault/agentvault setup --token=av_tok_...\\nThen restart OpenClaw.\",\n        );\n      }\n\n      const dataDir = resolve(account.dataDir.replace(/^~/, process.env.HOME ?? \"~\"));\n      log?.info(`[AgentVault] starting (dataDir=${dataDir})`);\n\n      // Lazy import \u2014 defers libsodium initialization until channel actually starts\n      const { SecureChannel } = await import(\"./index.js\");\n\n      // startAccount must STAY PENDING while the channel is running.\n      // Resolving signals \"channel stopped\" to the gateway health monitor,\n      // which triggers auto-restart. We block here until the abortSignal\n      // fires (gateway shutdown / config reload), then clean up.\n      await new Promise<void>((resolve, reject) => {\n        let channel: any;\n\n        const onAbort = async () => {\n          await channel?.stop();\n          _channels.delete(account.accountId);\n          resolve();\n        };\n\n        abortSignal?.addEventListener(\"abort\", () => void onAbort());\n\n        // Lazy import \u2014 defers libsodium initialization until channel starts\n        import(\"./index.js\").then(({ SecureChannel }) => {\n          channel = new SecureChannel({\n            inviteToken: \"\",\n            dataDir,\n            apiUrl: account.apiUrl,\n            agentName: account.agentName,\n            onMessage: async (plaintext: string, metadata: any) => {\n              if (!_ocRuntime) {\n                log?.info(\"[AgentVault] runtime not ready, queuing message\");\n                _messageQueue.push(async () => {\n                  await handleInbound({ plaintext, metadata, channel, account, cfg });\n                });\n                return;\n              }\n              try {\n                await handleInbound({ plaintext, metadata, channel, account, cfg });\n              } catch (err) {\n                log?.info(`[AgentVault] inbound error: ${String(err)}`);\n              }\n            },\n            onStateChange: (state: string) => {\n              log?.info(`[AgentVault] \u2192 ${state}`);\n              // \"error\" is a permanent failure \u2014 reject so gateway can restart\n              if (state === \"error\") reject(new Error(\"AgentVault channel permanent error\"));\n              // All other states (connecting/ready/disconnected) are handled\n              // internally by SecureChannel's reconnect logic \u2014 do NOT resolve.\n            },\n          });\n\n          _channels.set(account.accountId, channel);\n\n          // Prevent unhandled \"error\" events from crashing the process.\n          // Without this handler, Node.js EventEmitter throws on emit(\"error\").\n          channel.on(\"error\", (err: any) => {\n            log?.info(`[AgentVault] channel error (non-fatal): ${String(err)}`);\n          });\n\n          // Start local HTTP server for proactive sends\n          const httpPort = account.httpPort ?? 18790;\n          channel.on(\"ready\", () => {\n            channel.startHttpServer(httpPort);\n            log?.info(`[AgentVault] HTTP send server listening on http://127.0.0.1:${httpPort}`);\n          });\n\n          channel.start().catch(reject);\n        }).catch(reject);\n      });\n\n      return { stop: async () => {} }; // Channel already stopped via abortSignal by this point\n    },\n  },\n\n  outbound: {\n    deliveryMode: \"direct\" as const,\n\n    // Register valid send targets so OpenClaw's `message` tool can route\n    // proactive (agent-initiated) sends \u2014 not just replies to inbound messages.\n    targets: [\n      {\n        id: \"owner\",\n        label: \"AgentVault Owner\",\n        accountId: \"default\",\n      },\n      {\n        id: \"default\",\n        label: \"AgentVault Owner (default)\",\n        accountId: \"default\",\n      },\n    ],\n\n    sendText: async ({ to, text, accountId }: { to: string; text: string; accountId?: string }) => {\n      const resolvedId = accountId ?? \"default\";\n      const ch = _channels.get(resolvedId);\n      if (!ch) return { ok: false, error: \"AgentVault channel not connected\" };\n      try {\n        const wasReady = ch.state === \"ready\";\n        await ch.send(text);\n        return { ok: true, queued: !wasReady };\n      } catch (err) {\n        return { ok: false, error: String(err) };\n      }\n    },\n\n    sendMedia: async ({ to, text, mediaUrl, accountId }: { to: string; text?: string; mediaUrl: string; accountId?: string }) => {\n      const resolvedId = accountId ?? \"default\";\n      const ch = _channels.get(resolvedId);\n      if (!ch) return { ok: false, error: \"AgentVault channel not connected\" };\n      try {\n        // For now, send media URL as text \u2014 AgentVault handles attachments separately\n        const message = text ? `${text}\\n${mediaUrl}` : mediaUrl;\n        const wasReady = ch.state === \"ready\";\n        await ch.send(message);\n        return { ok: true, queued: !wasReady };\n      } catch (err) {\n        return { ok: false, error: String(err) };\n      }\n    },\n  },\n};\n\n// --- Exported for testing ---\nexport { _parseMentions, _shouldProcessRoomMessage, _stripMentions };\n\n// --- Plugin export ---\n\nexport default {\n  id: \"agentvault\",\n  name: \"AgentVault\",\n  description: \"End-to-end encrypted, zero-knowledge messaging between AI agent owners and their agents.\",\n  register(api: any) {\n    _setRuntime(api.runtime);\n    api.registerChannel({ plugin: agentVaultPlugin });\n  },\n};\n", "/**\n * Shared multi-account config resolution for AgentVault OpenClaw plugin.\n *\n * Supports two config shapes:\n * 1. Legacy single-agent: channels.agentvault.dataDir (returns [\"default\"])\n * 2. Multi-agent: channels.agentvault.accounts.{id}.dataDir (returns account keys)\n *\n * When `accounts` key is present, it takes precedence over top-level dataDir.\n */\n\nconst DEFAULT_API_URL = \"https://api.agentvault.chat\";\nconst DEFAULT_HTTP_PORT = 18790;\n\nexport interface ResolvedAccount {\n  accountId: string;\n  dataDir: string;\n  apiUrl: string;\n  agentName: string;\n  httpPort: number;\n  configured: boolean;\n}\n\nexport function listAccountIds(cfg: any): string[] {\n  const av = cfg?.channels?.agentvault;\n  if (!av) return [];\n  if (av.accounts && typeof av.accounts === \"object\") {\n    return Object.keys(av.accounts);\n  }\n  return av.dataDir ? [\"default\"] : [];\n}\n\nexport function resolveAccount(cfg: any, accountId?: string): ResolvedAccount {\n  const av = cfg?.channels?.agentvault ?? {};\n  const id = accountId ?? \"default\";\n\n  if (av.accounts && typeof av.accounts === \"object\") {\n    const acct = av.accounts[id];\n    if (!acct) {\n      return {\n        accountId: id,\n        dataDir: \"\",\n        apiUrl: av.apiUrl ?? DEFAULT_API_URL,\n        agentName: id,\n        httpPort: DEFAULT_HTTP_PORT,\n        configured: false,\n      };\n    }\n\n    let httpPort = acct.httpPort;\n    if (httpPort == null) {\n      const keys = Object.keys(av.accounts);\n      const index = keys.indexOf(id);\n      httpPort = DEFAULT_HTTP_PORT + (index >= 0 ? index : 0);\n    }\n\n    return {\n      accountId: id,\n      dataDir: acct.dataDir ?? \"\",\n      apiUrl: acct.apiUrl ?? av.apiUrl ?? DEFAULT_API_URL,\n      agentName: acct.agentName ?? id,\n      httpPort,\n      configured: Boolean(acct.dataDir),\n    };\n  }\n\n  return {\n    accountId: id,\n    dataDir: av.dataDir ?? \"~/.openclaw/agentvault\",\n    apiUrl: av.apiUrl ?? DEFAULT_API_URL,\n    agentName: av.agentName ?? \"OpenClaw Agent\",\n    httpPort: av.httpPort ?? DEFAULT_HTTP_PORT,\n    configured: Boolean(av.dataDir),\n  };\n}\n"],
-  "mappings": ";AAUA,SAAS,eAAe;AACxB,SAAS,mBAAmB;;;ACD5B,IAAM,kBAAkB;AACxB,IAAM,oBAAoB;AAWnB,SAAS,eAAe,KAAoB;AACjD,QAAM,KAAK,KAAK,UAAU;AAC1B,MAAI,CAAC,GAAI,QAAO,CAAC;AACjB,MAAI,GAAG,YAAY,OAAO,GAAG,aAAa,UAAU;AAClD,WAAO,OAAO,KAAK,GAAG,QAAQ;AAAA,EAChC;AACA,SAAO,GAAG,UAAU,CAAC,SAAS,IAAI,CAAC;AACrC;AAEO,SAAS,eAAe,KAAU,WAAqC;AAC5E,QAAM,KAAK,KAAK,UAAU,cAAc,CAAC;AACzC,QAAM,KAAK,aAAa;AAExB,MAAI,GAAG,YAAY,OAAO,GAAG,aAAa,UAAU;AAClD,UAAM,OAAO,GAAG,SAAS,EAAE;AAC3B,QAAI,CAAC,MAAM;AACT,aAAO;AAAA,QACL,WAAW;AAAA,QACX,SAAS;AAAA,QACT,QAAQ,GAAG,UAAU;AAAA,QACrB,WAAW;AAAA,QACX,UAAU;AAAA,QACV,YAAY;AAAA,MACd;AAAA,IACF;AAEA,QAAI,WAAW,KAAK;AACpB,QAAI,YAAY,MAAM;AACpB,YAAM,OAAO,OAAO,KAAK,GAAG,QAAQ;AACpC,YAAM,QAAQ,KAAK,QAAQ,EAAE;AAC7B,iBAAW,qBAAqB,SAAS,IAAI,QAAQ;AAAA,IACvD;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,SAAS,KAAK,WAAW;AAAA,MACzB,QAAQ,KAAK,UAAU,GAAG,UAAU;AAAA,MACpC,WAAW,KAAK,aAAa;AAAA,MAC7B;AAAA,MACA,YAAY,QAAQ,KAAK,OAAO;AAAA,IAClC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,SAAS,GAAG,WAAW;AAAA,IACvB,QAAQ,GAAG,UAAU;AAAA,IACrB,WAAW,GAAG,aAAa;AAAA,IAC3B,UAAU,GAAG,YAAY;AAAA,IACzB,YAAY,QAAQ,GAAG,OAAO;AAAA,EAChC;AACF;;;AD1DA,IAAI,aAAkB;AACtB,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,gBAA4C,CAAC;AAEnD,SAAS,YAAY,IAAS;AAC5B,eAAa;AAEb,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,UAAU,cAAc,OAAO,CAAC;AACtC,eAAW,MAAM,SAAS;AACxB,SAAG,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACrB;AAAA,EACF;AACF;AAKA,SAAS,eAAe,MAAwB;AAC9C,QAAM,WAAqB,CAAC;AAE5B,QAAM,KAAK;AACX,MAAI;AACJ,UAAQ,QAAQ,GAAG,KAAK,IAAI,OAAO,MAAM;AACvC,aAAS,KAAK,MAAM,CAAC,EAAE,YAAY,CAAC;AAAA,EACtC;AACA,SAAO;AACT;AAGA,SAAS,0BACP,WACA,WACA,WACS;AACT,QAAM,WAAW,eAAe,SAAS;AAEzC,MAAI,SAAS,WAAW,EAAG,QAAO;AAElC,MAAI,SAAS,SAAS,KAAK,KAAK,SAAS,SAAS,UAAU,EAAG,QAAO;AAEtE,QAAM,YAAY,UAAU,YAAY;AACxC,QAAM,UAAU,UAAU,YAAY;AAEtC,QAAM,YAAY,UAAU,MAAM,OAAO,EAAE,CAAC;AAC5C,SAAO,SAAS;AAAA,IACd,CAAC,MAAM,MAAM,aAAa,MAAM,aAAa,MAAM;AAAA,EACrD;AACF;AAGA,SAAS,eACP,MACA,WACA,WACQ;AACR,QAAM,YAAY,UAAU,YAAY;AACxC,QAAM,YAAY,UAAU,MAAM,OAAO,EAAE,CAAC;AAC5C,QAAM,UAAU,UAAU,YAAY;AAEtC,SAAO,KACJ,QAAQ,gBAAgB,CAAC,MAAM,SAAS;AACvC,UAAM,QAAQ,KAAK,YAAY;AAC/B,QAAI,UAAU,aAAa,UAAU,aAAa,UAAU,SAAS;AACnE,aAAO;AAAA,IACT;AAEA,QAAI,UAAU,SAAS,UAAU,WAAY,QAAO;AACpD,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,QAAQ,EAAE,EAClB,KAAK;AACV;AAIA,eAAe,cAAc,QAMX;AAChB,QAAM,EAAE,WAAW,cAAc,UAAU,SAAS,SAAS,IAAI,IAAI;AACrE,QAAM,gBAAgB,QAAQ,SAAS,MAAM;AAG7C,MAAI,eAAe;AACjB,QAAI,CAAC,0BAA0B,cAAc,QAAQ,aAAa,IAAI,QAAQ,aAAa,EAAE,GAAG;AAC9F;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,gBACd,eAAe,cAAc,QAAQ,aAAa,IAAI,QAAQ,aAAa,EAAE,IAC7E;AAGJ,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,UAAU,YAAY,EAAE,EAAE,SAAS,KAAK;AAC9C,QAAM,aAAa,YAAY,CAAC,EAAE,SAAS,KAAK;AAChD,MAAI,aAAa;AACjB,MAAI,kBAAkB;AACtB,MAAI,iBAAgC;AACpC,QAAM,aAA0F,CAAC;AAGjG,iBAAe,SAAS;AAAA,IACtB;AAAA,IACA,cAAc;AAAA,IACd,MAAM;AAAA,IACN;AAAA,IACA,SAAS,YAAY;AAAA;AAAA,IACrB,YAAY;AAAA,MACV,gCAAgC,UAAU;AAAA,MAC1C,yBAAyB,SAAS,SAAS,SAAS;AAAA,IACtD;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAGD,MAAI;AAAE,YAAQ,WAAW;AAAA,EAAG,QAAQ;AAAA,EAAe;AAEnD,QAAM,OAAO;AAEb,QAAM,QAAQ,KAAK,QAAQ,QAAQ,kBAAkB;AAAA,IACnD;AAAA,IACA,SAAS;AAAA,IACT,WAAW,QAAQ;AAAA,IACnB,MAAM,EAAE,MAAM,UAAU,IAAI,gBAAgB,mBAAmB,SAAS,MAAM,KAAK,mBAAmB;AAAA,EACxG,CAAC;AAED,QAAM,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,KAAK,SAAS,OAAO;AAAA,IAC3E,SAAS,MAAM;AAAA,EACjB,CAAC;AAED,QAAM,kBAAkB,KAAK,QAAQ,MAAM,6BAA6B,GAAG;AAC3E,QAAM,oBAAoB,KAAK,QAAQ,QAAQ,qBAAqB;AAAA,IAClE;AAAA,IACA,YAAY,MAAM;AAAA,EACpB,CAAC;AAED,QAAM,OAAO,KAAK,QAAQ,MAAM,oBAAoB;AAAA,IAClD,SAAS;AAAA,IACT,MAAM,gBAAgB,SAAS;AAAA,IAC/B,WAAW,IAAI,KAAK,SAAS,SAAS,EAAE,QAAQ;AAAA,IAChD;AAAA,IACA,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AAGD,QAAM,mBAAwC,CAAC;AAC/C,MAAI,SAAS,YAAY;AACvB,qBAAiB,iBAAiB,SAAS,WAAW;AACtD,qBAAiB,qBAAqB,SAAS,WAAW;AAC1D,qBAAiB,iBAAiB,SAAS,WAAW;AAGtD,QAAI,SAAS,WAAW,QAAQ;AAC9B,uBAAiB,WAAW,SAAS,WAAW;AAChD,uBAAiB,WAAW;AAAA,IAC9B;AAAA,EAGF;AAEA,QAAM,aAAa,KAAK,QAAQ,MAAM,uBAAuB;AAAA,IAC3D,MAAM;AAAA,IACN,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAAA,IAC7D,IAAI,oBAAoB,QAAQ,SAAS;AAAA,IACzC,YAAY,MAAM;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,UAAU,gBAAgB,SAAS;AAAA,IACnC,mBAAmB,gBAAgB,oBAAoB;AAAA,IACvD,YAAY,gBAAgB,SAAS;AAAA,IACrC,UAAU,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAAA,IACjE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,SAAS;AAAA,IACrB,WAAW,IAAI,KAAK,SAAS,SAAS,EAAE,QAAQ;AAAA,IAChD,oBAAoB;AAAA,IACpB,eAAe,oBAAoB,QAAQ,SAAS;AAAA,IACpD,mBAAmB;AAAA,IACnB,GAAG;AAAA,EACL,CAAC;AAED,QAAM,KAAK,QAAQ,QAAQ,qBAAqB;AAAA,IAC9C;AAAA,IACA,YAAY,WAAW,cAAc,MAAM;AAAA,IAC3C,KAAK;AAAA,IACL,eAAe,CAAC,QAAe;AAC7B,WAAK,QAAQ,uCAAuC,OAAO,GAAG,CAAC,EAAE;AAAA,IACnE;AAAA,EACF,CAAC;AAED,MAAI;AACF,UAAM,KAAK,QAAQ,MAAM,yCAAyC;AAAA,MAChE,KAAK;AAAA,MACL;AAAA,MACA,mBAAmB;AAAA,QACjB,SAAS,OAAO,YAA8C;AAE5D,cAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,YAAa;AACjE,gBAAM,QAAQ,QAAQ,QAAQ,IAAI,KAAK;AACvC,cAAI,CAAC,KAAM;AAEX,cAAI,8DAA8D,KAAK,IAAI,EAAG;AAE9E,gBAAM,aAAa,KAAK,IAAI;AAC5B;AACA,6BAAmB,KAAK;AACxB,cAAI,CAAC,eAAgB,kBAAiB;AAGtC,cAAI,eAAe;AACjB,kBAAM,QAAQ,WAAW,SAAS,QAAQ,IAAI;AAAA,UAChD,OAAO;AACL,kBAAM,QAAQ,KAAK,MAAM;AAAA,cACvB,gBAAgB,SAAS;AAAA,cACzB,SAAS,SAAS;AAAA,YACpB,CAAC;AAAA,UACH;AAEA,gBAAM,WAAW,KAAK,IAAI;AAC1B,qBAAW,KAAK,EAAE,WAAW,YAAY,SAAS,UAAU,OAAO,KAAK,QAAQ,OAAO,WAAW,CAAC;AAAA,QACrG;AAAA,QACA,SAAS,CAAC,KAAY,SAA6B;AACjD,eAAK,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,WAAW,OAAO,GAAG,CAAC,EAAE;AAAA,QAC5E;AAAA,MACF;AAAA,MACA,cAAc,CAAC;AAAA,IACjB,CAAC;AAED,UAAM,UAAU,KAAK,IAAI;AAGzB,2BAAuB,SAAS;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,KAAK,IAAI;AAGzB,2BAAuB,SAAS;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,eAAe,OAAO,GAAG;AAAA,IAC3B,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAGA,SAAS,eAAe,SAAc,MAS7B;AACP,MAAI;AACF,UAAM,WAAW,QAAQ;AACzB,QAAI,CAAC,SAAU;AAEf,aAAS,iBAAiB;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,QAAQ,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,MACrC,cAAc,KAAK;AAAA,MACnB,MAAM,KAAK;AAAA,MACX,MAAM;AAAA,MACN,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,QAAQ;AAAA,QACN,MAAM,KAAK,WAAW,OAAO,IAAI;AAAA,QACjC,SAAS,KAAK;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAAiC;AAC3C;AAGA,SAAS,uBAAuB,SAAc,MAarC;AACP,MAAI;AACF,UAAM,WAAW,QAAQ;AACzB,QAAI,CAAC,SAAU;AAGf,UAAM,eAAe,KAAK,kBAAkB,KAAK;AACjD,mBAAe,SAAS;AAAA,MACtB,SAAS,KAAK;AAAA,MACd,cAAc,KAAK;AAAA,MACnB,MAAM;AAAA,MACN,WAAW,KAAK,YAAY;AAAA;AAAA,MAC5B,SAAS;AAAA,MACT,YAAY;AAAA,QACV,iCAAiC,eAAe,KAAK;AAAA,QACrD,gCAAgC,KAAK;AAAA,MACvC;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,eAAe,KAAK,WAAW,UAAU,KAAK,gBAAgB;AAAA,IAChE,CAAC;AAGD,eAAW,SAAS,KAAK,YAAY;AACnC,qBAAe,SAAS;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,cAAc,KAAK;AAAA,QACnB,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,YAAY;AAAA,UACV,wBAAwB,MAAM;AAAA,UAC9B,wBAAwB,MAAM;AAAA,QAChC;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAGA,aAAS,iBAAiB;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,YAAY;AAAA,QACV,gCAAgC,KAAK;AAAA,QACrC,gCAAgC,KAAK;AAAA,QACrC,gCAAgC,KAAK;AAAA,QACrC,+BAA+B,KAAK,UAAU,KAAK;AAAA,QACnD,yBAAyB,KAAK,SAAS,SAAS;AAAA,MAClD;AAAA,MACA,QAAQ;AAAA,QACN,MAAM,KAAK,WAAW,OAAO,IAAI;AAAA,QACjC,SAAS,KAAK;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAAiC;AAC3C;AAIA,IAAM,mBAAmB;AAAA,EACvB,IAAI;AAAA,EACJ,MAAM;AAAA,IACJ,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS,CAAC,MAAM,aAAa;AAAA,EAC/B;AAAA,EACA,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE;AAAA,EACtC,QAAQ,EAAE,gBAAgB,eAAe;AAAA,EAEzC,SAAS;AAAA,IACP,cAAc,OAAO,QAAa;AAChC,YAAM,EAAE,SAAS,KAAK,KAAK,YAAY,IAAI;AAE3C,UAAI,CAAC,QAAQ,YAAY;AACvB,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,IAAI,QAAQ,GAAG,CAAC;AAC9E,WAAK,KAAK,kCAAkC,OAAO,GAAG;AAGtD,YAAM,EAAE,cAAc,IAAI,MAAM,OAAO,YAAY;AAMnD,YAAM,IAAI,QAAc,CAACA,UAAS,WAAW;AAC3C,YAAI;AAEJ,cAAM,UAAU,YAAY;AAC1B,gBAAM,SAAS,KAAK;AACpB,oBAAU,OAAO,QAAQ,SAAS;AAClC,UAAAA,SAAQ;AAAA,QACV;AAEA,qBAAa,iBAAiB,SAAS,MAAM,KAAK,QAAQ,CAAC;AAG3D,eAAO,YAAY,EAAE,KAAK,CAAC,EAAE,eAAAC,eAAc,MAAM;AAC/C,oBAAU,IAAIA,eAAc;AAAA,YAC1B,aAAa;AAAA,YACb;AAAA,YACA,QAAQ,QAAQ;AAAA,YAChB,WAAW,QAAQ;AAAA,YACnB,WAAW,OAAO,WAAmB,aAAkB;AACrD,kBAAI,CAAC,YAAY;AACf,qBAAK,KAAK,iDAAiD;AAC3D,8BAAc,KAAK,YAAY;AAC7B,wBAAM,cAAc,EAAE,WAAW,UAAU,SAAS,SAAS,IAAI,CAAC;AAAA,gBACpE,CAAC;AACD;AAAA,cACF;AACA,kBAAI;AACF,sBAAM,cAAc,EAAE,WAAW,UAAU,SAAS,SAAS,IAAI,CAAC;AAAA,cACpE,SAAS,KAAK;AACZ,qBAAK,KAAK,+BAA+B,OAAO,GAAG,CAAC,EAAE;AAAA,cACxD;AAAA,YACF;AAAA,YACA,eAAe,CAAC,UAAkB;AAChC,mBAAK,KAAK,uBAAkB,KAAK,EAAE;AAEnC,kBAAI,UAAU,QAAS,QAAO,IAAI,MAAM,oCAAoC,CAAC;AAAA,YAG/E;AAAA,UACF,CAAC;AAED,oBAAU,IAAI,QAAQ,WAAW,OAAO;AAIxC,kBAAQ,GAAG,SAAS,CAAC,QAAa;AAChC,iBAAK,KAAK,2CAA2C,OAAO,GAAG,CAAC,EAAE;AAAA,UACpE,CAAC;AAGD,gBAAM,WAAW,QAAQ,YAAY;AACrC,kBAAQ,GAAG,SAAS,MAAM;AACxB,oBAAQ,gBAAgB,QAAQ;AAChC,iBAAK,KAAK,+DAA+D,QAAQ,EAAE;AAAA,UACrF,CAAC;AAED,kBAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,QAC9B,CAAC,EAAE,MAAM,MAAM;AAAA,MACjB,CAAC;AAED,aAAO,EAAE,MAAM,YAAY;AAAA,MAAC,EAAE;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,UAAU;AAAA,IACR,cAAc;AAAA;AAAA;AAAA,IAId,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IAEA,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,MAAwD;AAC7F,YAAM,aAAa,aAAa;AAChC,YAAM,KAAK,UAAU,IAAI,UAAU;AACnC,UAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACvE,UAAI;AACF,cAAM,WAAW,GAAG,UAAU;AAC9B,cAAM,GAAG,KAAK,IAAI;AAClB,eAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,SAAS;AAAA,MACvC,SAAS,KAAK;AACZ,eAAO,EAAE,IAAI,OAAO,OAAO,OAAO,GAAG,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,IAEA,WAAW,OAAO,EAAE,IAAI,MAAM,UAAU,UAAU,MAA2E;AAC3H,YAAM,aAAa,aAAa;AAChC,YAAM,KAAK,UAAU,IAAI,UAAU;AACnC,UAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACvE,UAAI;AAEF,cAAM,UAAU,OAAO,GAAG,IAAI;AAAA,EAAK,QAAQ,KAAK;AAChD,cAAM,WAAW,GAAG,UAAU;AAC9B,cAAM,GAAG,KAAK,OAAO;AACrB,eAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,SAAS;AAAA,MACvC,SAAS,KAAK;AACZ,eAAO,EAAE,IAAI,OAAO,OAAO,OAAO,GAAG,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACF;AAOA,IAAO,yBAAQ;AAAA,EACb,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,aAAa;AAAA,EACb,SAAS,KAAU;AACjB,gBAAY,IAAI,OAAO;AACvB,QAAI,gBAAgB,EAAE,QAAQ,iBAAiB,CAAC;AAAA,EAClD;AACF;",
+  "sourcesContent": ["/**\n * OpenClaw channel plugin entry point.\n *\n * Intentionally thin \u2014 no heavy imports (libsodium etc.) at module load time.\n * SecureChannel is dynamically imported inside gateway.startAccount (already async)\n * so libsodium's top-level await never runs during plugin registration.\n *\n * Loaded by OpenClaw via the `openclaw.extensions` field in package.json.\n */\n\nimport { resolve } from \"node:path\";\nimport { randomBytes } from \"node:crypto\";\nimport { listAccountIds, resolveAccount } from \"./account-config.js\";\n\n// --- Runtime and active channels (set during register) ---\nlet _ocRuntime: any = null;\nconst _channels = new Map<string, any>();\nconst _messageQueue: Array<() => Promise<void>> = [];\n\nfunction _setRuntime(rt: any) {\n  _ocRuntime = rt;\n  // Flush any messages that arrived before runtime was ready\n  if (_messageQueue.length > 0) {\n    const pending = _messageQueue.splice(0);\n    for (const fn of pending) {\n      fn().catch(() => {});\n    }\n  }\n}\n\n// --- @mention filtering for multi-agent rooms ---\n\n/** Extract @mention names from plaintext. Returns lowercased names. */\nfunction _parseMentions(text: string): string[] {\n  const mentions: string[] = [];\n  // Match @word at word boundary \u2014 supports multi-word via sequential matching\n  const re = /@(\\w[\\w]*)/gi;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(text)) !== null) {\n    mentions.push(match[1].toLowerCase());\n  }\n  return mentions;\n}\n\n/** Determine whether this agent should process a room message based on @mentions. */\nfunction _shouldProcessRoomMessage(\n  plaintext: string,\n  agentName: string,\n  accountId: string,\n): boolean {\n  const mentions = _parseMentions(plaintext);\n  // No mentions \u2192 broadcast to all agents (current behavior)\n  if (mentions.length === 0) return true;\n  // @all / @everyone \u2192 all agents process\n  if (mentions.includes(\"all\") || mentions.includes(\"everyone\")) return true;\n  // Check if this agent is mentioned (by name or accountId)\n  const nameLower = agentName.toLowerCase();\n  const idLower = accountId.toLowerCase();\n  // Match first word of agent name (e.g., \"Cortina\" from \"Cortina (Coder)\")\n  const firstWord = nameLower.split(/[\\s(]/)[0];\n  return mentions.some(\n    (m) => m === nameLower || m === firstWord || m === idLower,\n  );\n}\n\n/** Strip the matching @mention prefix from plaintext so the agent sees clean text. */\nfunction _stripMentions(\n  text: string,\n  agentName: string,\n  accountId: string,\n): string {\n  const nameLower = agentName.toLowerCase();\n  const firstWord = nameLower.split(/[\\s(]/)[0];\n  const idLower = accountId.toLowerCase();\n  // Remove all @mentions that match this agent (case-insensitive)\n  return text\n    .replace(/@(\\w[\\w]*)/gi, (full, name) => {\n      const lower = name.toLowerCase();\n      if (lower === nameLower || lower === firstWord || lower === idLower) {\n        return \"\";\n      }\n      // Also strip @all/@everyone since they're routing directives\n      if (lower === \"all\" || lower === \"everyone\") return \"\";\n      return full;\n    })\n    .replace(/^\\s+/, \"\") // trim leading whitespace left by stripped mention\n    .trim();\n}\n\n// --- Inbound message dispatch ---\n\nasync function handleInbound(params: {\n  plaintext: string;\n  metadata: any;\n  channel: any;\n  account: any;\n  cfg: any;\n}): Promise<void> {\n  const { plaintext: rawPlaintext, metadata, channel, account, cfg } = params;\n  const isRoomMessage = Boolean(metadata.roomId);\n\n  // @mention filtering: only for room messages\n  if (isRoomMessage) {\n    if (!_shouldProcessRoomMessage(rawPlaintext, account.agentName ?? \"\", account.accountId ?? \"\")) {\n      return; // This agent is not mentioned \u2014 skip silently\n    }\n  }\n\n  // Strip @mentions from plaintext so the agent sees clean text\n  const plaintext = isRoomMessage\n    ? _stripMentions(rawPlaintext, account.agentName ?? \"\", account.accountId ?? \"\")\n    : rawPlaintext;\n\n  // Telemetry: hierarchical spans for the full message lifecycle\n  const startTime = Date.now();\n  const traceId = randomBytes(16).toString(\"hex\");\n  const rootSpanId = randomBytes(8).toString(\"hex\");\n  let replyCount = 0;\n  let totalReplyChars = 0;\n  let firstReplyTime: number | null = null;\n  const replySpans: Array<{ startTime: number; endTime: number; chars: number; index: number }> = [];\n\n  // Emit \"receive\" child span immediately \u2014 marks inbound arrival\n  _emitChildSpan(channel, {\n    traceId,\n    parentSpanId: rootSpanId,\n    name: \"ai.agent.message.receive\",\n    startTime,\n    endTime: startTime + 1, // instant\n    attributes: {\n      \"ai.agent.message.input_chars\": plaintext.length,\n      \"ai.agent.message.type\": metadata.roomId ? \"room\" : \"direct\",\n    },\n    status: \"ok\",\n  });\n\n  // Send typing indicator to owner (non-critical, best-effort)\n  try { channel.sendTyping(); } catch { /* ignore */ }\n\n  const core = _ocRuntime;\n\n  const route = core.channel.routing.resolveAgentRoute({\n    cfg,\n    channel: \"agentvault\",\n    accountId: account.accountId,\n    peer: { kind: \"direct\", id: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\" },\n  });\n\n  const storePath = core.channel.session.resolveStorePath(cfg?.session?.store, {\n    agentId: route.agentId,\n  });\n\n  const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);\n  const previousTimestamp = core.channel.session.readSessionUpdatedAt({\n    storePath,\n    sessionKey: route.sessionKey,\n  });\n\n  const body = core.channel.reply.formatAgentEnvelope({\n    channel: \"AgentVault\",\n    from: isRoomMessage ? \"Room\" : \"Owner\",\n    timestamp: new Date(metadata.timestamp).getTime(),\n    previousTimestamp,\n    envelope: envelopeOptions,\n    body: plaintext,\n  });\n\n  // Build attachment fields for the context payload\n  const attachmentFields: Record<string, any> = {};\n  if (metadata.attachment) {\n    attachmentFields.AttachmentPath = metadata.attachment.filePath;\n    attachmentFields.AttachmentFilename = metadata.attachment.filename;\n    attachmentFields.AttachmentMime = metadata.attachment.mime;\n\n    // For images: include as MediaUrl so the LLM can see the visual content\n    if (metadata.attachment.base64) {\n      attachmentFields.MediaUrl = metadata.attachment.base64;\n      attachmentFields.NumMedia = \"1\";\n    }\n\n    // For text files: content is already inlined in plaintext body\n  }\n\n  const ctxPayload = core.channel.reply.finalizeInboundContext({\n    Body: body,\n    RawBody: plaintext,\n    CommandBody: plaintext,\n    From: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\",\n    To: `agentvault:agent:${account.accountId}`,\n    SessionKey: route.sessionKey,\n    AccountId: account.accountId,\n    ChatType: isRoomMessage ? \"room\" : \"direct\",\n    ConversationLabel: isRoomMessage ? \"AgentVault Room\" : \"AgentVault\",\n    SenderName: isRoomMessage ? \"Room\" : \"Owner\",\n    SenderId: isRoomMessage ? `agentvault:room:${metadata.roomId}` : \"agentvault:owner\",\n    Provider: \"agentvault\",\n    Surface: \"agentvault\",\n    MessageSid: metadata.messageId,\n    Timestamp: new Date(metadata.timestamp).getTime(),\n    OriginatingChannel: \"agentvault\",\n    OriginatingTo: `agentvault:agent:${account.accountId}`,\n    CommandAuthorized: true,\n    ...attachmentFields,\n  });\n\n  await core.channel.session.recordInboundSession({\n    storePath,\n    sessionKey: ctxPayload.SessionKey ?? route.sessionKey,\n    ctx: ctxPayload,\n    onRecordError: (err: Error) => {\n      core.error?.(`[AgentVault] session record failed: ${String(err)}`);\n    },\n  });\n\n  try {\n    await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({\n      ctx: ctxPayload,\n      cfg,\n      dispatcherOptions: {\n        deliver: async (payload: { text?: string; kind?: string }) => {\n          // Filter out thinking/reasoning blocks \u2014 only deliver actual responses\n          if (payload.kind === \"thinking\" || payload.kind === \"reasoning\") return;\n          const text = (payload.text ?? \"\").trim();\n          if (!text) return;\n          // Heuristic: skip blocks that look like leaked chain-of-thought\n          if (/^(Reasoning|Thinking|Let me think|I need to|Let me check):/i.test(text)) return;\n\n          const replyStart = Date.now();\n          replyCount++;\n          totalReplyChars += text.length;\n          if (!firstReplyTime) firstReplyTime = replyStart;\n\n          // Route reply: room messages go back to the room, 1:1 goes to owner\n          if (isRoomMessage) {\n            await channel.sendToRoom(metadata.roomId, text, {\n              metadata: { content_length: text.length },\n            });\n          } else {\n            await channel.send(text, {\n              conversationId: metadata.conversationId,\n              topicId: metadata.topicId,\n            });\n          }\n\n          const replyEnd = Date.now();\n          replySpans.push({ startTime: replyStart, endTime: replyEnd, chars: text.length, index: replyCount });\n        },\n        onError: (err: Error, info?: { kind?: string }) => {\n          core.error?.(`[AgentVault] ${info?.kind ?? \"reply\"} error: ${String(err)}`);\n        },\n      },\n      replyOptions: {},\n    });\n\n    const endTime = Date.now();\n\n    // Emit child spans for the completed message lifecycle\n    _emitHierarchicalSpans(channel, {\n      traceId,\n      rootSpanId,\n      startTime,\n      endTime,\n      firstReplyTime,\n      replySpans,\n      inputChars: plaintext.length,\n      replyCount,\n      totalReplyChars,\n      isRoom: isRoomMessage,\n      status: \"ok\",\n    });\n  } catch (err) {\n    const endTime = Date.now();\n\n    // Emit spans even on error \u2014 shows where failure occurred\n    _emitHierarchicalSpans(channel, {\n      traceId,\n      rootSpanId,\n      startTime,\n      endTime,\n      firstReplyTime,\n      replySpans,\n      inputChars: plaintext.length,\n      replyCount,\n      totalReplyChars,\n      isRoom: isRoomMessage,\n      status: \"error\",\n      statusMessage: String(err),\n    });\n    throw err;\n  }\n}\n\n/** Emit a single child span via the channel's telemetry reporter. */\nfunction _emitChildSpan(channel: any, opts: {\n  traceId: string;\n  parentSpanId: string;\n  name: string;\n  startTime: number;\n  endTime: number;\n  attributes: Record<string, string | number | boolean>;\n  status: \"ok\" | \"error\";\n  statusMessage?: string;\n}): void {\n  try {\n    const reporter = channel.telemetry;\n    if (!reporter) return;\n\n    reporter.reportCustomSpan({\n      traceId: opts.traceId,\n      spanId: randomBytes(8).toString(\"hex\"),\n      parentSpanId: opts.parentSpanId,\n      name: opts.name,\n      kind: \"internal\" as const,\n      startTime: opts.startTime,\n      endTime: opts.endTime,\n      attributes: opts.attributes,\n      status: {\n        code: opts.status === \"ok\" ? 1 : 2,\n        message: opts.statusMessage,\n      },\n    });\n  } catch { /* telemetry is best-effort */ }\n}\n\n/** Emit the full hierarchical span tree for a message lifecycle. */\nfunction _emitHierarchicalSpans(channel: any, opts: {\n  traceId: string;\n  rootSpanId: string;\n  startTime: number;\n  endTime: number;\n  firstReplyTime: number | null;\n  replySpans: Array<{ startTime: number; endTime: number; chars: number; index: number }>;\n  inputChars: number;\n  replyCount: number;\n  totalReplyChars: number;\n  isRoom: boolean;\n  status: \"ok\" | \"error\";\n  statusMessage?: string;\n}): void {\n  try {\n    const reporter = channel.telemetry;\n    if (!reporter) return;\n\n    // 1. Inference span: from message arrival to first reply (or end if no replies)\n    const inferenceEnd = opts.firstReplyTime ?? opts.endTime;\n    _emitChildSpan(channel, {\n      traceId: opts.traceId,\n      parentSpanId: opts.rootSpanId,\n      name: \"ai.agent.inference\",\n      startTime: opts.startTime + 1, // just after receive\n      endTime: inferenceEnd,\n      attributes: {\n        \"ai.agent.inference.latency_ms\": inferenceEnd - opts.startTime,\n        \"ai.agent.message.input_chars\": opts.inputChars,\n      },\n      status: opts.status,\n      statusMessage: opts.status === \"error\" ? opts.statusMessage : undefined,\n    });\n\n    // 2. Individual reply spans\n    for (const reply of opts.replySpans) {\n      _emitChildSpan(channel, {\n        traceId: opts.traceId,\n        parentSpanId: opts.rootSpanId,\n        name: \"ai.agent.reply\",\n        startTime: reply.startTime,\n        endTime: reply.endTime,\n        attributes: {\n          \"ai.agent.reply.index\": reply.index,\n          \"ai.agent.reply.chars\": reply.chars,\n        },\n        status: \"ok\",\n      });\n    }\n\n    // 3. Root span (wraps everything) \u2014 emitted last\n    reporter.reportCustomSpan({\n      traceId: opts.traceId,\n      spanId: opts.rootSpanId,\n      name: \"ai.agent.message\",\n      kind: \"server\" as const,\n      startTime: opts.startTime,\n      endTime: opts.endTime,\n      attributes: {\n        \"ai.agent.message.input_chars\": opts.inputChars,\n        \"ai.agent.message.reply_count\": opts.replyCount,\n        \"ai.agent.message.reply_chars\": opts.totalReplyChars,\n        \"ai.agent.message.latency_ms\": opts.endTime - opts.startTime,\n        \"ai.agent.message.type\": opts.isRoom ? \"room\" : \"direct\",\n      },\n      status: {\n        code: opts.status === \"ok\" ? 1 : 2,\n        message: opts.statusMessage,\n      },\n    });\n  } catch { /* telemetry is best-effort */ }\n}\n\n// --- Channel plugin definition ---\n\nconst agentVaultPlugin = {\n  id: \"agentvault\",\n  meta: {\n    id: \"agentvault\",\n    label: \"AgentVault\",\n    selectionLabel: \"AgentVault (E2E Encrypted)\",\n    docsPath: \"https://agentvault.chat/docs\",\n    blurb: \"Zero-knowledge, end-to-end encrypted messaging between owners and their AI agents.\",\n    aliases: [\"av\", \"agent-vault\"],\n  },\n  capabilities: { chatTypes: [\"direct\"] },\n  config: { listAccountIds, resolveAccount },\n\n  gateway: {\n    startAccount: async (ctx: any) => {\n      const { account, cfg, log, abortSignal } = ctx;\n\n      if (!account.configured) {\n        throw new Error(\n          \"AgentVault channel not configured. Run: npx @agentvault/agentvault setup --token=av_tok_...\\nThen restart OpenClaw.\",\n        );\n      }\n\n      const dataDir = resolve(account.dataDir.replace(/^~/, process.env.HOME ?? \"~\"));\n      log?.info(`[AgentVault] starting (dataDir=${dataDir})`);\n\n      // Lazy import \u2014 defers libsodium initialization until channel actually starts\n      const { SecureChannel } = await import(\"./index.js\");\n\n      // startAccount must STAY PENDING while the channel is running.\n      // Resolving signals \"channel stopped\" to the gateway health monitor,\n      // which triggers auto-restart. We block here until the abortSignal\n      // fires (gateway shutdown / config reload), then clean up.\n      await new Promise<void>((resolve, reject) => {\n        let channel: any;\n\n        const onAbort = async () => {\n          await channel?.stop();\n          _channels.delete(account.accountId);\n          resolve();\n        };\n\n        abortSignal?.addEventListener(\"abort\", () => void onAbort());\n\n        // Lazy import \u2014 defers libsodium initialization until channel starts\n        import(\"./index.js\").then(({ SecureChannel }) => {\n          channel = new SecureChannel({\n            inviteToken: \"\",\n            dataDir,\n            apiUrl: account.apiUrl,\n            agentName: account.agentName,\n            onMessage: async (plaintext: string, metadata: any) => {\n              if (!_ocRuntime) {\n                log?.info(\"[AgentVault] runtime not ready, queuing message\");\n                _messageQueue.push(async () => {\n                  await handleInbound({ plaintext, metadata, channel, account, cfg });\n                });\n                return;\n              }\n              try {\n                await handleInbound({ plaintext, metadata, channel, account, cfg });\n              } catch (err) {\n                log?.info(`[AgentVault] inbound error: ${String(err)}`);\n              }\n            },\n            onStateChange: (state: string) => {\n              log?.info(`[AgentVault] \u2192 ${state}`);\n              // \"error\" is a permanent failure \u2014 reject so gateway can restart\n              if (state === \"error\") reject(new Error(\"AgentVault channel permanent error\"));\n              // All other states (connecting/ready/disconnected) are handled\n              // internally by SecureChannel's reconnect logic \u2014 do NOT resolve.\n            },\n          });\n\n          _channels.set(account.accountId, channel);\n\n          // Prevent unhandled \"error\" events from crashing the process.\n          // Without this handler, Node.js EventEmitter throws on emit(\"error\").\n          channel.on(\"error\", (err: any) => {\n            log?.info(`[AgentVault] channel error (non-fatal): ${String(err)}`);\n          });\n\n          // Start local HTTP server for proactive sends\n          const httpPort = account.httpPort ?? 18790;\n          channel.on(\"ready\", () => {\n            channel.startHttpServer(httpPort);\n            log?.info(`[AgentVault] HTTP send server listening on http://127.0.0.1:${httpPort}`);\n          });\n\n          channel.start().catch(reject);\n        }).catch(reject);\n      });\n\n      return { stop: async () => {} }; // Channel already stopped via abortSignal by this point\n    },\n  },\n\n  outbound: {\n    deliveryMode: \"direct\" as const,\n\n    // Register valid send targets so OpenClaw's `message` tool can route\n    // proactive (agent-initiated) sends \u2014 not just replies to inbound messages.\n    targets: [\n      {\n        id: \"owner\",\n        label: \"AgentVault Owner\",\n        accountId: \"default\",\n      },\n      {\n        id: \"default\",\n        label: \"AgentVault Owner (default)\",\n        accountId: \"default\",\n      },\n    ],\n\n    sendText: async ({ to, text, accountId }: { to: string; text: string; accountId?: string }) => {\n      const resolvedId = accountId ?? \"default\";\n      const ch = _channels.get(resolvedId);\n      if (!ch) return { ok: false, error: \"AgentVault channel not connected\" };\n      try {\n        const wasReady = ch.state === \"ready\";\n        await ch.send(text);\n        return { ok: true, queued: !wasReady };\n      } catch (err) {\n        return { ok: false, error: String(err) };\n      }\n    },\n\n    sendMedia: async ({ to, text, mediaUrl, accountId }: { to: string; text?: string; mediaUrl: string; accountId?: string }) => {\n      const resolvedId = accountId ?? \"default\";\n      const ch = _channels.get(resolvedId);\n      if (!ch) return { ok: false, error: \"AgentVault channel not connected\" };\n      try {\n        // For now, send media URL as text \u2014 AgentVault handles attachments separately\n        const message = text ? `${text}\\n${mediaUrl}` : mediaUrl;\n        const wasReady = ch.state === \"ready\";\n        await ch.send(message);\n        return { ok: true, queued: !wasReady };\n      } catch (err) {\n        return { ok: false, error: String(err) };\n      }\n    },\n  },\n};\n\n// --- Exported for testing ---\nexport { _parseMentions, _shouldProcessRoomMessage, _stripMentions };\n\n// --- Plugin export ---\n\nexport default {\n  id: \"agentvault\",\n  name: \"AgentVault\",\n  description: \"End-to-end encrypted, zero-knowledge messaging between AI agent owners and their agents.\",\n  register(api: any) {\n    _setRuntime(api.runtime);\n    api.registerChannel({ plugin: agentVaultPlugin });\n  },\n};\n", "/**\n * Shared multi-account config resolution for AgentVault OpenClaw plugin.\n *\n * Supports two config shapes:\n * 1. Legacy single-agent: channels.agentvault.dataDir (returns [\"default\"])\n * 2. Multi-agent: channels.agentvault.accounts.{id}.dataDir (returns account keys)\n *\n * When `accounts` key is present, it takes precedence over top-level dataDir.\n */\n\nconst DEFAULT_API_URL = \"https://api.agentvault.chat\";\nconst DEFAULT_HTTP_PORT = 18790;\n\nexport interface ResolvedAccount {\n  accountId: string;\n  dataDir: string;\n  apiUrl: string;\n  agentName: string;\n  httpPort: number;\n  configured: boolean;\n}\n\nexport function listAccountIds(cfg: any): string[] {\n  const av = cfg?.channels?.agentvault;\n  if (!av) return [];\n  if (av.accounts && typeof av.accounts === \"object\") {\n    return Object.keys(av.accounts);\n  }\n  return av.dataDir ? [\"default\"] : [];\n}\n\nexport function resolveAccount(cfg: any, accountId?: string): ResolvedAccount {\n  const av = cfg?.channels?.agentvault ?? {};\n  const id = accountId ?? \"default\";\n\n  if (av.accounts && typeof av.accounts === \"object\") {\n    const acct = av.accounts[id];\n    if (!acct) {\n      return {\n        accountId: id,\n        dataDir: \"\",\n        apiUrl: av.apiUrl ?? DEFAULT_API_URL,\n        agentName: id,\n        httpPort: DEFAULT_HTTP_PORT,\n        configured: false,\n      };\n    }\n\n    let httpPort = acct.httpPort;\n    if (httpPort == null) {\n      const keys = Object.keys(av.accounts);\n      const index = keys.indexOf(id);\n      httpPort = DEFAULT_HTTP_PORT + (index >= 0 ? index : 0);\n    }\n\n    return {\n      accountId: id,\n      dataDir: acct.dataDir ?? \"\",\n      apiUrl: acct.apiUrl ?? av.apiUrl ?? DEFAULT_API_URL,\n      agentName: acct.agentName ?? id,\n      httpPort,\n      configured: Boolean(acct.dataDir),\n    };\n  }\n\n  return {\n    accountId: id,\n    dataDir: av.dataDir ?? \"~/.openclaw/agentvault\",\n    apiUrl: av.apiUrl ?? DEFAULT_API_URL,\n    agentName: av.agentName ?? \"OpenClaw Agent\",\n    httpPort: av.httpPort ?? DEFAULT_HTTP_PORT,\n    configured: Boolean(av.dataDir),\n  };\n}\n"],
+  "mappings": ";AAUA,SAAS,eAAe;AACxB,SAAS,mBAAmB;;;ACD5B,IAAM,kBAAkB;AACxB,IAAM,oBAAoB;AAWnB,SAAS,eAAe,KAAoB;AACjD,QAAM,KAAK,KAAK,UAAU;AAC1B,MAAI,CAAC,GAAI,QAAO,CAAC;AACjB,MAAI,GAAG,YAAY,OAAO,GAAG,aAAa,UAAU;AAClD,WAAO,OAAO,KAAK,GAAG,QAAQ;AAAA,EAChC;AACA,SAAO,GAAG,UAAU,CAAC,SAAS,IAAI,CAAC;AACrC;AAEO,SAAS,eAAe,KAAU,WAAqC;AAC5E,QAAM,KAAK,KAAK,UAAU,cAAc,CAAC;AACzC,QAAM,KAAK,aAAa;AAExB,MAAI,GAAG,YAAY,OAAO,GAAG,aAAa,UAAU;AAClD,UAAM,OAAO,GAAG,SAAS,EAAE;AAC3B,QAAI,CAAC,MAAM;AACT,aAAO;AAAA,QACL,WAAW;AAAA,QACX,SAAS;AAAA,QACT,QAAQ,GAAG,UAAU;AAAA,QACrB,WAAW;AAAA,QACX,UAAU;AAAA,QACV,YAAY;AAAA,MACd;AAAA,IACF;AAEA,QAAI,WAAW,KAAK;AACpB,QAAI,YAAY,MAAM;AACpB,YAAM,OAAO,OAAO,KAAK,GAAG,QAAQ;AACpC,YAAM,QAAQ,KAAK,QAAQ,EAAE;AAC7B,iBAAW,qBAAqB,SAAS,IAAI,QAAQ;AAAA,IACvD;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,SAAS,KAAK,WAAW;AAAA,MACzB,QAAQ,KAAK,UAAU,GAAG,UAAU;AAAA,MACpC,WAAW,KAAK,aAAa;AAAA,MAC7B;AAAA,MACA,YAAY,QAAQ,KAAK,OAAO;AAAA,IAClC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,SAAS,GAAG,WAAW;AAAA,IACvB,QAAQ,GAAG,UAAU;AAAA,IACrB,WAAW,GAAG,aAAa;AAAA,IAC3B,UAAU,GAAG,YAAY;AAAA,IACzB,YAAY,QAAQ,GAAG,OAAO;AAAA,EAChC;AACF;;;AD1DA,IAAI,aAAkB;AACtB,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,gBAA4C,CAAC;AAEnD,SAAS,YAAY,IAAS;AAC5B,eAAa;AAEb,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,UAAU,cAAc,OAAO,CAAC;AACtC,eAAW,MAAM,SAAS;AACxB,SAAG,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACrB;AAAA,EACF;AACF;AAKA,SAAS,eAAe,MAAwB;AAC9C,QAAM,WAAqB,CAAC;AAE5B,QAAM,KAAK;AACX,MAAI;AACJ,UAAQ,QAAQ,GAAG,KAAK,IAAI,OAAO,MAAM;AACvC,aAAS,KAAK,MAAM,CAAC,EAAE,YAAY,CAAC;AAAA,EACtC;AACA,SAAO;AACT;AAGA,SAAS,0BACP,WACA,WACA,WACS;AACT,QAAM,WAAW,eAAe,SAAS;AAEzC,MAAI,SAAS,WAAW,EAAG,QAAO;AAElC,MAAI,SAAS,SAAS,KAAK,KAAK,SAAS,SAAS,UAAU,EAAG,QAAO;AAEtE,QAAM,YAAY,UAAU,YAAY;AACxC,QAAM,UAAU,UAAU,YAAY;AAEtC,QAAM,YAAY,UAAU,MAAM,OAAO,EAAE,CAAC;AAC5C,SAAO,SAAS;AAAA,IACd,CAAC,MAAM,MAAM,aAAa,MAAM,aAAa,MAAM;AAAA,EACrD;AACF;AAGA,SAAS,eACP,MACA,WACA,WACQ;AACR,QAAM,YAAY,UAAU,YAAY;AACxC,QAAM,YAAY,UAAU,MAAM,OAAO,EAAE,CAAC;AAC5C,QAAM,UAAU,UAAU,YAAY;AAEtC,SAAO,KACJ,QAAQ,gBAAgB,CAAC,MAAM,SAAS;AACvC,UAAM,QAAQ,KAAK,YAAY;AAC/B,QAAI,UAAU,aAAa,UAAU,aAAa,UAAU,SAAS;AACnE,aAAO;AAAA,IACT;AAEA,QAAI,UAAU,SAAS,UAAU,WAAY,QAAO;AACpD,WAAO;AAAA,EACT,CAAC,EACA,QAAQ,QAAQ,EAAE,EAClB,KAAK;AACV;AAIA,eAAe,cAAc,QAMX;AAChB,QAAM,EAAE,WAAW,cAAc,UAAU,SAAS,SAAS,IAAI,IAAI;AACrE,QAAM,gBAAgB,QAAQ,SAAS,MAAM;AAG7C,MAAI,eAAe;AACjB,QAAI,CAAC,0BAA0B,cAAc,QAAQ,aAAa,IAAI,QAAQ,aAAa,EAAE,GAAG;AAC9F;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,gBACd,eAAe,cAAc,QAAQ,aAAa,IAAI,QAAQ,aAAa,EAAE,IAC7E;AAGJ,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,UAAU,YAAY,EAAE,EAAE,SAAS,KAAK;AAC9C,QAAM,aAAa,YAAY,CAAC,EAAE,SAAS,KAAK;AAChD,MAAI,aAAa;AACjB,MAAI,kBAAkB;AACtB,MAAI,iBAAgC;AACpC,QAAM,aAA0F,CAAC;AAGjG,iBAAe,SAAS;AAAA,IACtB;AAAA,IACA,cAAc;AAAA,IACd,MAAM;AAAA,IACN;AAAA,IACA,SAAS,YAAY;AAAA;AAAA,IACrB,YAAY;AAAA,MACV,gCAAgC,UAAU;AAAA,MAC1C,yBAAyB,SAAS,SAAS,SAAS;AAAA,IACtD;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAGD,MAAI;AAAE,YAAQ,WAAW;AAAA,EAAG,QAAQ;AAAA,EAAe;AAEnD,QAAM,OAAO;AAEb,QAAM,QAAQ,KAAK,QAAQ,QAAQ,kBAAkB;AAAA,IACnD;AAAA,IACA,SAAS;AAAA,IACT,WAAW,QAAQ;AAAA,IACnB,MAAM,EAAE,MAAM,UAAU,IAAI,gBAAgB,mBAAmB,SAAS,MAAM,KAAK,mBAAmB;AAAA,EACxG,CAAC;AAED,QAAM,YAAY,KAAK,QAAQ,QAAQ,iBAAiB,KAAK,SAAS,OAAO;AAAA,IAC3E,SAAS,MAAM;AAAA,EACjB,CAAC;AAED,QAAM,kBAAkB,KAAK,QAAQ,MAAM,6BAA6B,GAAG;AAC3E,QAAM,oBAAoB,KAAK,QAAQ,QAAQ,qBAAqB;AAAA,IAClE;AAAA,IACA,YAAY,MAAM;AAAA,EACpB,CAAC;AAED,QAAM,OAAO,KAAK,QAAQ,MAAM,oBAAoB;AAAA,IAClD,SAAS;AAAA,IACT,MAAM,gBAAgB,SAAS;AAAA,IAC/B,WAAW,IAAI,KAAK,SAAS,SAAS,EAAE,QAAQ;AAAA,IAChD;AAAA,IACA,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AAGD,QAAM,mBAAwC,CAAC;AAC/C,MAAI,SAAS,YAAY;AACvB,qBAAiB,iBAAiB,SAAS,WAAW;AACtD,qBAAiB,qBAAqB,SAAS,WAAW;AAC1D,qBAAiB,iBAAiB,SAAS,WAAW;AAGtD,QAAI,SAAS,WAAW,QAAQ;AAC9B,uBAAiB,WAAW,SAAS,WAAW;AAChD,uBAAiB,WAAW;AAAA,IAC9B;AAAA,EAGF;AAEA,QAAM,aAAa,KAAK,QAAQ,MAAM,uBAAuB;AAAA,IAC3D,MAAM;AAAA,IACN,SAAS;AAAA,IACT,aAAa;AAAA,IACb,MAAM,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAAA,IAC7D,IAAI,oBAAoB,QAAQ,SAAS;AAAA,IACzC,YAAY,MAAM;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,UAAU,gBAAgB,SAAS;AAAA,IACnC,mBAAmB,gBAAgB,oBAAoB;AAAA,IACvD,YAAY,gBAAgB,SAAS;AAAA,IACrC,UAAU,gBAAgB,mBAAmB,SAAS,MAAM,KAAK;AAAA,IACjE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,SAAS;AAAA,IACrB,WAAW,IAAI,KAAK,SAAS,SAAS,EAAE,QAAQ;AAAA,IAChD,oBAAoB;AAAA,IACpB,eAAe,oBAAoB,QAAQ,SAAS;AAAA,IACpD,mBAAmB;AAAA,IACnB,GAAG;AAAA,EACL,CAAC;AAED,QAAM,KAAK,QAAQ,QAAQ,qBAAqB;AAAA,IAC9C;AAAA,IACA,YAAY,WAAW,cAAc,MAAM;AAAA,IAC3C,KAAK;AAAA,IACL,eAAe,CAAC,QAAe;AAC7B,WAAK,QAAQ,uCAAuC,OAAO,GAAG,CAAC,EAAE;AAAA,IACnE;AAAA,EACF,CAAC;AAED,MAAI;AACF,UAAM,KAAK,QAAQ,MAAM,yCAAyC;AAAA,MAChE,KAAK;AAAA,MACL;AAAA,MACA,mBAAmB;AAAA,QACjB,SAAS,OAAO,YAA8C;AAE5D,cAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS,YAAa;AACjE,gBAAM,QAAQ,QAAQ,QAAQ,IAAI,KAAK;AACvC,cAAI,CAAC,KAAM;AAEX,cAAI,8DAA8D,KAAK,IAAI,EAAG;AAE9E,gBAAM,aAAa,KAAK,IAAI;AAC5B;AACA,6BAAmB,KAAK;AACxB,cAAI,CAAC,eAAgB,kBAAiB;AAGtC,cAAI,eAAe;AACjB,kBAAM,QAAQ,WAAW,SAAS,QAAQ,MAAM;AAAA,cAC9C,UAAU,EAAE,gBAAgB,KAAK,OAAO;AAAA,YAC1C,CAAC;AAAA,UACH,OAAO;AACL,kBAAM,QAAQ,KAAK,MAAM;AAAA,cACvB,gBAAgB,SAAS;AAAA,cACzB,SAAS,SAAS;AAAA,YACpB,CAAC;AAAA,UACH;AAEA,gBAAM,WAAW,KAAK,IAAI;AAC1B,qBAAW,KAAK,EAAE,WAAW,YAAY,SAAS,UAAU,OAAO,KAAK,QAAQ,OAAO,WAAW,CAAC;AAAA,QACrG;AAAA,QACA,SAAS,CAAC,KAAY,SAA6B;AACjD,eAAK,QAAQ,gBAAgB,MAAM,QAAQ,OAAO,WAAW,OAAO,GAAG,CAAC,EAAE;AAAA,QAC5E;AAAA,MACF;AAAA,MACA,cAAc,CAAC;AAAA,IACjB,CAAC;AAED,UAAM,UAAU,KAAK,IAAI;AAGzB,2BAAuB,SAAS;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,KAAK,IAAI;AAGzB,2BAAuB,SAAS;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,UAAU;AAAA,MACtB;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,eAAe,OAAO,GAAG;AAAA,IAC3B,CAAC;AACD,UAAM;AAAA,EACR;AACF;AAGA,SAAS,eAAe,SAAc,MAS7B;AACP,MAAI;AACF,UAAM,WAAW,QAAQ;AACzB,QAAI,CAAC,SAAU;AAEf,aAAS,iBAAiB;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,QAAQ,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,MACrC,cAAc,KAAK;AAAA,MACnB,MAAM,KAAK;AAAA,MACX,MAAM;AAAA,MACN,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,QAAQ;AAAA,QACN,MAAM,KAAK,WAAW,OAAO,IAAI;AAAA,QACjC,SAAS,KAAK;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAAiC;AAC3C;AAGA,SAAS,uBAAuB,SAAc,MAarC;AACP,MAAI;AACF,UAAM,WAAW,QAAQ;AACzB,QAAI,CAAC,SAAU;AAGf,UAAM,eAAe,KAAK,kBAAkB,KAAK;AACjD,mBAAe,SAAS;AAAA,MACtB,SAAS,KAAK;AAAA,MACd,cAAc,KAAK;AAAA,MACnB,MAAM;AAAA,MACN,WAAW,KAAK,YAAY;AAAA;AAAA,MAC5B,SAAS;AAAA,MACT,YAAY;AAAA,QACV,iCAAiC,eAAe,KAAK;AAAA,QACrD,gCAAgC,KAAK;AAAA,MACvC;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,eAAe,KAAK,WAAW,UAAU,KAAK,gBAAgB;AAAA,IAChE,CAAC;AAGD,eAAW,SAAS,KAAK,YAAY;AACnC,qBAAe,SAAS;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,cAAc,KAAK;AAAA,QACnB,MAAM;AAAA,QACN,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,YAAY;AAAA,UACV,wBAAwB,MAAM;AAAA,UAC9B,wBAAwB,MAAM;AAAA,QAChC;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAGA,aAAS,iBAAiB;AAAA,MACxB,SAAS,KAAK;AAAA,MACd,QAAQ,KAAK;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,WAAW,KAAK;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,YAAY;AAAA,QACV,gCAAgC,KAAK;AAAA,QACrC,gCAAgC,KAAK;AAAA,QACrC,gCAAgC,KAAK;AAAA,QACrC,+BAA+B,KAAK,UAAU,KAAK;AAAA,QACnD,yBAAyB,KAAK,SAAS,SAAS;AAAA,MAClD;AAAA,MACA,QAAQ;AAAA,QACN,MAAM,KAAK,WAAW,OAAO,IAAI;AAAA,QACjC,SAAS,KAAK;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AAAA,EAAiC;AAC3C;AAIA,IAAM,mBAAmB;AAAA,EACvB,IAAI;AAAA,EACJ,MAAM;AAAA,IACJ,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,OAAO;AAAA,IACP,SAAS,CAAC,MAAM,aAAa;AAAA,EAC/B;AAAA,EACA,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE;AAAA,EACtC,QAAQ,EAAE,gBAAgB,eAAe;AAAA,EAEzC,SAAS;AAAA,IACP,cAAc,OAAO,QAAa;AAChC,YAAM,EAAE,SAAS,KAAK,KAAK,YAAY,IAAI;AAE3C,UAAI,CAAC,QAAQ,YAAY;AACvB,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,IAAI,QAAQ,GAAG,CAAC;AAC9E,WAAK,KAAK,kCAAkC,OAAO,GAAG;AAGtD,YAAM,EAAE,cAAc,IAAI,MAAM,OAAO,YAAY;AAMnD,YAAM,IAAI,QAAc,CAACA,UAAS,WAAW;AAC3C,YAAI;AAEJ,cAAM,UAAU,YAAY;AAC1B,gBAAM,SAAS,KAAK;AACpB,oBAAU,OAAO,QAAQ,SAAS;AAClC,UAAAA,SAAQ;AAAA,QACV;AAEA,qBAAa,iBAAiB,SAAS,MAAM,KAAK,QAAQ,CAAC;AAG3D,eAAO,YAAY,EAAE,KAAK,CAAC,EAAE,eAAAC,eAAc,MAAM;AAC/C,oBAAU,IAAIA,eAAc;AAAA,YAC1B,aAAa;AAAA,YACb;AAAA,YACA,QAAQ,QAAQ;AAAA,YAChB,WAAW,QAAQ;AAAA,YACnB,WAAW,OAAO,WAAmB,aAAkB;AACrD,kBAAI,CAAC,YAAY;AACf,qBAAK,KAAK,iDAAiD;AAC3D,8BAAc,KAAK,YAAY;AAC7B,wBAAM,cAAc,EAAE,WAAW,UAAU,SAAS,SAAS,IAAI,CAAC;AAAA,gBACpE,CAAC;AACD;AAAA,cACF;AACA,kBAAI;AACF,sBAAM,cAAc,EAAE,WAAW,UAAU,SAAS,SAAS,IAAI,CAAC;AAAA,cACpE,SAAS,KAAK;AACZ,qBAAK,KAAK,+BAA+B,OAAO,GAAG,CAAC,EAAE;AAAA,cACxD;AAAA,YACF;AAAA,YACA,eAAe,CAAC,UAAkB;AAChC,mBAAK,KAAK,uBAAkB,KAAK,EAAE;AAEnC,kBAAI,UAAU,QAAS,QAAO,IAAI,MAAM,oCAAoC,CAAC;AAAA,YAG/E;AAAA,UACF,CAAC;AAED,oBAAU,IAAI,QAAQ,WAAW,OAAO;AAIxC,kBAAQ,GAAG,SAAS,CAAC,QAAa;AAChC,iBAAK,KAAK,2CAA2C,OAAO,GAAG,CAAC,EAAE;AAAA,UACpE,CAAC;AAGD,gBAAM,WAAW,QAAQ,YAAY;AACrC,kBAAQ,GAAG,SAAS,MAAM;AACxB,oBAAQ,gBAAgB,QAAQ;AAChC,iBAAK,KAAK,+DAA+D,QAAQ,EAAE;AAAA,UACrF,CAAC;AAED,kBAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,QAC9B,CAAC,EAAE,MAAM,MAAM;AAAA,MACjB,CAAC;AAED,aAAO,EAAE,MAAM,YAAY;AAAA,MAAC,EAAE;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,UAAU;AAAA,IACR,cAAc;AAAA;AAAA;AAAA,IAId,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IAEA,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,MAAwD;AAC7F,YAAM,aAAa,aAAa;AAChC,YAAM,KAAK,UAAU,IAAI,UAAU;AACnC,UAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACvE,UAAI;AACF,cAAM,WAAW,GAAG,UAAU;AAC9B,cAAM,GAAG,KAAK,IAAI;AAClB,eAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,SAAS;AAAA,MACvC,SAAS,KAAK;AACZ,eAAO,EAAE,IAAI,OAAO,OAAO,OAAO,GAAG,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,IAEA,WAAW,OAAO,EAAE,IAAI,MAAM,UAAU,UAAU,MAA2E;AAC3H,YAAM,aAAa,aAAa;AAChC,YAAM,KAAK,UAAU,IAAI,UAAU;AACnC,UAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,mCAAmC;AACvE,UAAI;AAEF,cAAM,UAAU,OAAO,GAAG,IAAI;AAAA,EAAK,QAAQ,KAAK;AAChD,cAAM,WAAW,GAAG,UAAU;AAC9B,cAAM,GAAG,KAAK,OAAO;AACrB,eAAO,EAAE,IAAI,MAAM,QAAQ,CAAC,SAAS;AAAA,MACvC,SAAS,KAAK;AACZ,eAAO,EAAE,IAAI,OAAO,OAAO,OAAO,GAAG,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACF;AAOA,IAAO,yBAAQ;AAAA,EACb,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,aAAa;AAAA,EACb,SAAS,KAAU;AACjB,gBAAY,IAAI,OAAO;AACvB,QAAI,gBAAgB,EAAE,QAAQ,iBAAiB,CAAC;AAAA,EAClD;AACF;",
   "names": ["resolve", "SecureChannel"]
 }

package/dist/openclaw-plugin.js

@@ -0,0 +1,222 @@
+/**
+ * AgentVault OpenClaw Channel Plugin
+ *
+ * Registers AgentVault as a first-class OpenClaw messaging channel.
+ * Messages from the AgentVault UI are decrypted and routed into the
+ * OpenClaw agent loop; agent replies are encrypted and sent back.
+ *
+ * Installation (one-time):
+ *   npx @agentvault/agentvault setup --token=av_tok_...
+ *
+ * After setup, restart OpenClaw — no further configuration needed.
+ */
+import { resolve } from "node:path";
+import { SecureChannel } from "./channel.js";
+// Runtime injected by register() — used in inbound handler
+let _ocRuntime = null;
+// Active channel instances keyed by accountId
+const _channels = new Map();
+export function setOcRuntime(runtime) {
+    _ocRuntime = runtime;
+}
+export function getActiveChannel(accountId = "default") {
+    return _channels.get(accountId);
+}
+// ---------------------------------------------------------------------------
+// Channel plugin definition
+// ---------------------------------------------------------------------------
+export const agentVaultPlugin = {
+    id: "agentvault",
+    meta: {
+        id: "agentvault",
+        label: "AgentVault",
+        selectionLabel: "AgentVault (E2E Encrypted)",
+        docsPath: "https://agentvault.chat/docs",
+        blurb: "Zero-knowledge, end-to-end encrypted messaging between owners and their AI agents.",
+        aliases: ["av", "agent-vault"],
+    },
+    capabilities: {
+        chatTypes: ["direct"],
+    },
+    config: {
+        listAccountIds: (cfg) => {
+            const av = cfg?.channels?.agentvault;
+            return av?.dataDir ? ["default"] : [];
+        },
+        resolveAccount: (cfg, accountId) => {
+            const av = cfg?.channels?.agentvault ?? {};
+            return {
+                accountId: accountId ?? "default",
+                dataDir: av.dataDir ?? "~/.openclaw/agentvault",
+                apiUrl: av.apiUrl ?? "https://api.agentvault.chat",
+                agentName: av.agentName ?? "OpenClaw Agent",
+                httpPort: av.httpPort ?? 18790,
+                configured: Boolean(av.dataDir),
+            };
+        },
+    },
+    gateway: {
+        startAccount: async (ctx) => {
+            const { account, cfg, log, abortSignal } = ctx;
+            if (!account.configured) {
+                throw new Error("AgentVault channel is not configured.\n" +
+                    "Run the one-time setup: npx @agentvault/agentvault setup --token=av_tok_...\n" +
+                    "Then restart OpenClaw: openclaw gateway restart");
+            }
+            const dataDir = resolve(account.dataDir.replace(/^~/, process.env.HOME ?? "~"));
+            log?.(`[AgentVault] starting channel (dataDir=${dataDir})`);
+            const channel = new SecureChannel({
+                // No invite token needed — resuming from persisted enrolled state
+                inviteToken: "",
+                dataDir,
+                apiUrl: account.apiUrl,
+                agentName: account.agentName,
+                onMessage: async (plaintext, metadata) => {
+                    if (!_ocRuntime) {
+                        log?.("[AgentVault] runtime not ready — dropping inbound message");
+                        return;
+                    }
+                    try {
+                        await _handleInbound({ plaintext, metadata, channel, account, cfg });
+                    }
+                    catch (err) {
+                        log?.(`[AgentVault] inbound dispatch error: ${String(err)}`);
+                    }
+                },
+                onStateChange: (state) => {
+                    log?.(`[AgentVault] state → ${state}`);
+                },
+            });
+            _channels.set(account.accountId, channel);
+            // Start local HTTP server for proactive sends when channel is ready
+            const httpPort = account.httpPort;
+            channel.on("ready", () => {
+                channel.startHttpServer(httpPort);
+                log?.(`[AgentVault] HTTP send server listening on http://127.0.0.1:${httpPort}`);
+            });
+            // Respect gateway abort signal (OpenClaw gateway shutdown)
+            abortSignal?.addEventListener("abort", () => {
+                _channels.delete(account.accountId);
+            });
+            await channel.start();
+            return {
+                stop: async () => {
+                    await channel.stop();
+                    _channels.delete(account.accountId);
+                },
+            };
+        },
+    },
+    outbound: {
+        deliveryMode: "direct",
+        targets: [
+            {
+                id: "owner",
+                label: "AgentVault Owner",
+                accountId: "default",
+            },
+            {
+                id: "default",
+                label: "AgentVault Owner (default)",
+                accountId: "default",
+            },
+        ],
+        sendText: async ({ text, accountId, targetId, }) => {
+            const resolvedId = accountId ?? (targetId === "owner" ? "default" : (targetId ?? "default"));
+            const channel = _channels.get(resolvedId);
+            if (!channel) {
+                return { ok: false, error: "AgentVault channel is not connected" };
+            }
+            try {
+                await channel.send(text);
+                return { ok: true };
+            }
+            catch (err) {
+                return { ok: false, error: String(err) };
+            }
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Inbound message handler — routes decrypted messages into the agent loop
+// ---------------------------------------------------------------------------
+async function _handleInbound(params) {
+    const { plaintext, metadata, channel, account, cfg } = params;
+    const core = _ocRuntime;
+    // Stable session key scoped to this AgentVault conversation
+    const sessionKey = `agentvault:${account.accountId}:${(metadata.conversationId ?? "default").slice(0, 8)}`;
+    const senderId = `agentvault:owner`;
+    // Resolve agent routing (respects agents.list routing rules if configured)
+    const route = core.channel.routing.resolveAgentRoute({
+        cfg,
+        channel: "agentvault",
+        accountId: account.accountId,
+        peer: { kind: "direct", id: senderId },
+    });
+    const storePath = core.channel.session.resolveStorePath(cfg?.session?.store, {
+        agentId: route.agentId,
+    });
+    const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);
+    const previousTimestamp = core.channel.session.readSessionUpdatedAt({
+        storePath,
+        sessionKey: route.sessionKey,
+    });
+    // Format the message body with standard OpenClaw envelope (channel label, timestamps, etc.)
+    const body = core.channel.reply.formatAgentEnvelope({
+        channel: "AgentVault",
+        from: "Owner",
+        timestamp: new Date(metadata.timestamp).getTime(),
+        previousTimestamp,
+        envelope: envelopeOptions,
+        body: plaintext,
+    });
+    // Build the inbound context payload OpenClaw expects
+    const ctxPayload = core.channel.reply.finalizeInboundContext({
+        Body: body,
+        RawBody: plaintext,
+        CommandBody: plaintext,
+        From: senderId,
+        To: `agentvault:agent:${account.accountId}`,
+        SessionKey: route.sessionKey,
+        AccountId: account.accountId,
+        ChatType: "direct",
+        ConversationLabel: "AgentVault",
+        SenderName: "Owner",
+        SenderId: senderId,
+        Provider: "agentvault",
+        Surface: "agentvault",
+        MessageSid: metadata.messageId,
+        Timestamp: new Date(metadata.timestamp).getTime(),
+        OriginatingChannel: "agentvault",
+        OriginatingTo: `agentvault:agent:${account.accountId}`,
+        // Owner is cryptographically verified via X3DH + Double Ratchet enrollment
+        CommandAuthorized: true,
+    });
+    // Record session metadata for context continuity
+    await core.channel.session.recordInboundSession({
+        storePath,
+        sessionKey: ctxPayload.SessionKey ?? route.sessionKey,
+        ctx: ctxPayload,
+        onRecordError: (err) => {
+            core.error?.(`[AgentVault] session record failed: ${String(err)}`);
+        },
+    });
+    // Dispatch to the OpenClaw agent loop; deliver replies back through the channel
+    await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+        ctx: ctxPayload,
+        cfg,
+        dispatcherOptions: {
+            deliver: async (payload) => {
+                const text = (payload.text ?? "").trim();
+                if (text) {
+                    await channel.send(text);
+                }
+            },
+            onError: (err, info) => {
+                core.error?.(`[AgentVault] ${info?.kind ?? "reply"} error: ${String(err)}`);
+            },
+        },
+        replyOptions: {},
+    });
+}
+//# sourceMappingURL=openclaw-plugin.js.map

package/dist/openclaw-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-plugin.js","sourceRoot":"","sources":["../src/openclaw-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,2DAA2D;AAC3D,IAAI,UAAU,GAAQ,IAAI,CAAC;AAC3B,8CAA8C;AAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnD,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,UAAU,GAAG,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAS,GAAG,SAAS;IACpD,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAeD,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE;QACJ,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,cAAc,EAAE,4BAA4B;QAC5C,QAAQ,EAAE,8BAA8B;QACxC,KAAK,EAAE,oFAAoF;QAC3F,OAAO,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC;KAC/B;IACD,YAAY,EAAE;QACZ,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD,MAAM,EAAE;QACN,cAAc,EAAE,CAAC,GAAQ,EAAY,EAAE;YACrC,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC;YACrC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,CAAC,GAAQ,EAAE,SAAkB,EAAqB,EAAE;YAClE,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,wBAAwB;gBAC/C,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,6BAA6B;gBAClD,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,gBAAgB;gBAC3C,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,KAAK;gBAC9B,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC;aAChC,CAAC;QACJ,CAAC;KACF;IACD,OAAO,EAAE;QACP,YAAY,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;YAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,GAK1C,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,yCAAyC;oBACvC,+EAA+E;oBAC/E,iDAAiD,CACpD,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;YAEhF,GAAG,EAAE,CAAC,0CAA0C,OAAO,GAAG,CAAC,CAAC;YAE5D,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,kEAAkE;gBAClE,WAAW,EAAE,EAAE;gBACf,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAE5B,SAAS,EAAE,KAAK,EAAE,SAAiB,EAAE,QAAyB,EAAE,EAAE;oBAChE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,GAAG,EAAE,CAAC,2DAA2D,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;oBACvE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,EAAE,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBAED,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,GAAG,EAAE,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;gBACzC,CAAC;aACF,CAAC,CAAC;YAEH,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE1C,oEAAoE;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAClC,GAAG,EAAE,CAAC,+DAA+D,QAAQ,EAAE,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC;YAEH,2DAA2D;YAC3D,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC1C,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAEtB,OAAO;gBACL,IAAI,EAAE,KAAK,IAAI,EAAE;oBACf,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtC,CAAC;aACF,CAAC;QACJ,CAAC;KACF;IACD,QAAQ,EAAE;QACR,YAAY,EAAE,QAAiB;QAC/B,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,kBAAkB;gBACzB,SAAS,EAAE,SAAS;aACrB;YACD;gBACE,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,4BAA4B;gBACnC,SAAS,EAAE,SAAS;aACrB;SACF;QACD,QAAQ,EAAE,KAAK,EAAE,EACf,IAAI,EACJ,SAAS,EACT,QAAQ,GAKT,EAA4C,EAAE;YAC7C,MAAM,UAAU,GAAG,SAAS,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAAC,MAM7B;IACC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC9D,MAAM,IAAI,GAAG,UAAU,CAAC;IAExB,4DAA4D;IAC5D,MAAM,UAAU,GAAG,cAAc,OAAO,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAG,kBAAkB,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACnD,GAAG;QACH,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;KACvC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAClE,SAAS;QACT,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAClD,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjD,iBAAiB;QACjB,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAC3D,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE;QAC3C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,QAAQ;QAClB,iBAAiB,EAAE,YAAY;QAC/B,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjD,kBAAkB,EAAE,YAAY;QAChC,aAAa,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE;QACtD,2EAA2E;QAC3E,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC9C,SAAS;QACT,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;QACrD,GAAG,EAAE,UAAU;QACf,aAAa,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,uCAAuC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC;QAChE,GAAG,EAAE,UAAU;QACf,GAAG;QACH,iBAAiB,EAAE;YACjB,OAAO,EAAE,KAAK,EAAE,OAAgD,EAAE,EAAE;gBAClE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,GAAU,EAAE,IAAwB,EAAE,EAAE;gBAChD,IAAI,CAAC,KAAK,EAAE,CACV,gBAAgB,IAAI,EAAE,IAAI,IAAI,OAAO,WAAW,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;SACF;QACD,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;AACL,CAAC"}