@alfe.ai/openclaw-chat 0.0.19 → 0.0.21

package/dist/plugin.d.cts

@@ -225,6 +225,13 @@ interface PluginApi {
   config?: Record<string, unknown>;
   runtime?: PluginRuntime;
   registerChannel(channel: ReturnType<typeof createAlfeChannelPlugin>): void;
+  registerTool?(tool: {
+    name: string;
+    description: string;
+    label: string;
+    parameters: Record<string, unknown>;
+    execute: (toolCallId: string, params: Record<string, unknown>) => Promise<unknown>;
+  }): void;
   registerGatewayMethod?(name: string, handler: (...args: unknown[]) => Promise<unknown>): void;
   on(event: string, handler: (...args: unknown[]) => void | Promise<void>, options?: {
     priority?: number;

package/dist/plugin.d.ts

@@ -225,6 +225,13 @@ interface PluginApi {
   config?: Record<string, unknown>;
   runtime?: PluginRuntime;
   registerChannel(channel: ReturnType<typeof createAlfeChannelPlugin>): void;
+  registerTool?(tool: {
+    name: string;
+    description: string;
+    label: string;
+    parameters: Record<string, unknown>;
+    execute: (toolCallId: string, params: Record<string, unknown>) => Promise<unknown>;
+  }): void;
   registerGatewayMethod?(name: string, handler: (...args: unknown[]) => Promise<unknown>): void;
   on(event: string, handler: (...args: unknown[]) => void | Promise<void>, options?: {
     priority?: number;

package/dist/plugin2.cjs

@@ -151,7 +151,7 @@ function isAlfeSessionKey(key) {
 }
 /**
 * Extract the channel mode from a standardized session key or conversationId.
-* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat') or fallback.
+* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.
 */
 function extractChannelMode(conversationId, fallback = "chat") {
 	return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;
@@ -181,7 +181,6 @@ function sessionPath(sessionId) {
 }
 async function cleanupOldSessions() {
 	if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;
-	lastCleanupAt = Date.now();
 	try {
 		const jsonFiles = (await (0, node_fs_promises.readdir)(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));
 		if (jsonFiles.length <= MAX_SESSIONS) {
@@ -211,6 +210,7 @@ async function cleanupOldSessions() {
 				remaining--;
 			} catch {}
 		}
+		lastCleanupAt = Date.now();
 	} catch {}
 }
 async function getSession(sessionId) {
@@ -242,17 +242,24 @@ async function createSession(sessionId, agentId, channel, tenantId, userId) {
 	cleanupOldSessions();
 	return session;
 }
+const writeLocks = /* @__PURE__ */ new Map();
 async function addMessage(sessionId, role, content, senderId, senderName) {
-	const session = await getSession(sessionId);
-	if (!session) return;
-	session.messages.push({
-		role,
-		content,
-		timestamp: Date.now(),
-		...senderId ? { senderId } : {},
-		...senderName ? { senderName } : {}
+	const next = (writeLocks.get(sessionId) ?? Promise.resolve()).then(async () => {
+		const session = await getSession(sessionId);
+		if (!session) return;
+		session.messages.push({
+			role,
+			content,
+			timestamp: Date.now(),
+			...senderId ? { senderId } : {},
+			...senderName ? { senderName } : {}
+		});
+		await saveSession(session);
+	}).finally(() => {
+		if (writeLocks.get(sessionId) === next) writeLocks.delete(sessionId);
 	});
-	await saveSession(session);
+	writeLocks.set(sessionId, next);
+	await next;
 }
 async function listSessions(filters, limit = 50) {
 	await ensureDir();
@@ -289,6 +296,112 @@ async function listSessions(filters, limit = 50) {
 	return summaries.slice(0, limit);
 }
 //#endregion
+//#region src/a2a-tools.ts
+function ok(result) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(result)
+	}] };
+}
+function errResult(message) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify({ error: message })
+	}] };
+}
+function defineTool(def) {
+	return {
+		name: def.name,
+		description: def.description,
+		label: def.name,
+		parameters: def.parameters,
+		execute: async (_toolCallId, params) => {
+			try {
+				return ok(await def.handler(params));
+			} catch (e) {
+				return errResult(e.message);
+			}
+		}
+	};
+}
+function buildA2ATools(chatClient, log) {
+	return [
+		defineTool({
+			name: "list_agents",
+			description: "List other agents in your organization that you can communicate with.",
+			parameters: {
+				type: "object",
+				properties: {},
+				required: []
+			},
+			handler: async () => {
+				log.info("list_agents tool called");
+				return await chatClient.sendRequest("a2a.list-agents", {});
+			}
+		}),
+		defineTool({
+			name: "message_agent",
+			description: "Send a message to another agent. Starts a new conversation thread, or continues an existing one. The conversation will bounce back and forth automatically until one agent calls end_conversation() or says [RESOLVED].",
+			parameters: {
+				type: "object",
+				properties: {
+					agent_id: {
+						type: "string",
+						description: "Target agent ID (use list_agents to find available agents)"
+					},
+					message: {
+						type: "string",
+						description: "Message to send to the agent"
+					},
+					thread_id: {
+						type: "string",
+						description: "Continue an existing conversation thread (omit to start a new one)"
+					},
+					max_depth: {
+						type: "number",
+						description: "Maximum number of back-and-forth exchanges (default: 10)"
+					}
+				},
+				required: ["agent_id", "message"]
+			},
+			handler: async (params) => {
+				const agentId = params.agent_id;
+				const message = params.message;
+				const threadId = params.thread_id;
+				const maxDepth = params.max_depth ?? 10;
+				if (!agentId || !message) throw new Error("agent_id and message are required");
+				log.info(`message_agent tool: sending to ${agentId}`);
+				return await chatClient.sendRequest("a2a.send", {
+					targetAgentId: agentId,
+					message,
+					threadId,
+					maxDepth
+				});
+			}
+		}),
+		defineTool({
+			name: "end_conversation",
+			description: "End the current agent-to-agent conversation. Call this when the discussion is resolved and no further exchanges are needed.",
+			parameters: {
+				type: "object",
+				properties: { summary: {
+					type: "string",
+					description: "Brief summary of what was discussed or resolved"
+				} },
+				required: []
+			},
+			handler: (params) => {
+				const summary = params.summary;
+				log.info(`end_conversation tool called${summary ? `: ${summary}` : ""}`);
+				return Promise.resolve({
+					status: "conversation_ended",
+					summary
+				});
+			}
+		})
+	];
+}
+//#endregion
 //#region src/plugin.ts
 /**
 * @alfe.ai/openclaw-chat — OpenClaw chat channel plugin.
@@ -305,17 +418,29 @@ async function listSessions(filters, limit = 50) {
 */
 let dispatchInbound = null;
 /**
-* Resolve OpenClaw SDK functions from the global install.
-* The openclaw package is installed globally (/usr/lib/node_modules/openclaw/)
-* but is NOT in the plugin's node_modules. Built-in extensions can import
-* directly; external plugins must use createRequire.
+* Resolve OpenClaw SDK functions from the running process.
+*
+* The openclaw package is NOT in the plugin's node_modules (it's a peer dep).
+* Since the plugin runs inside OpenClaw's process, we anchor resolution to
+* OpenClaw's own entry module via require.main, then fall back to deriving
+* the global modules path from process.execPath.
 */
 function resolveOpenClawSdk(log) {
-	for (const globalPath of ["/usr/lib/node_modules/openclaw/package.json", "/usr/local/lib/node_modules/openclaw/package.json"]) try {
-		const channelInbound = (0, node_module.createRequire)(globalPath)("openclaw/plugin-sdk/channel-inbound");
+	const anchors = [require.main?.filename, process.argv[1]].filter(Boolean);
+	for (const anchor of anchors) try {
+		const channelInbound = (0, node_module.createRequire)(anchor)("openclaw/plugin-sdk/channel-inbound");
+		if (channelInbound.dispatchInboundDirectDmWithRuntime) {
+			dispatchInbound = channelInbound.dispatchInboundDirectDmWithRuntime;
+			log.info(`Resolved OpenClaw SDK from ${anchor}`);
+			return;
+		}
+	} catch {}
+	try {
+		const derivedPath = (0, node_path.join)((0, node_path.resolve)((0, node_path.dirname)(process.execPath), ".."), "lib", "node_modules", "openclaw", "package.json");
+		const channelInbound = (0, node_module.createRequire)(derivedPath)("openclaw/plugin-sdk/channel-inbound");
 		if (channelInbound.dispatchInboundDirectDmWithRuntime) {
 			dispatchInbound = channelInbound.dispatchInboundDirectDmWithRuntime;
-			log.info(`Resolved OpenClaw SDK from ${globalPath}`);
+			log.info(`Resolved OpenClaw SDK from ${derivedPath}`);
 			return;
 		}
 	} catch {}
@@ -325,20 +450,30 @@ let pluginRuntime = null;
 let chatClient = null;
 let connectingPromise = null;
 let metricsClient = null;
+const MAX_FILE_SIZE = 50 * 1024 * 1024;
+const DOWNLOAD_TIMEOUT_MS = 3e4;
 async function downloadAttachments(attachments, log) {
 	const attachDir = (0, node_path.join)((0, node_os.homedir)(), ".alfe", "attachments");
 	await (0, node_fs_promises.mkdir)(attachDir, { recursive: true });
 	const results = [];
 	for (const att of attachments) {
-		const filename = att.filename ?? att.id;
+		const filename = (att.filename ?? att.id).replace(/[/\\]/g, "_").replace(/\.\./g, "_").replace(/\0/g, "");
 		const localPath = (0, node_path.join)(attachDir, `${att.id}_${filename}`);
+		const controller = new AbortController();
+		const timeout = setTimeout(() => {
+			controller.abort();
+		}, DOWNLOAD_TIMEOUT_MS);
 		try {
-			const res = await fetch(att.url);
+			const res = await fetch(att.url, { signal: controller.signal });
 			if (!res.ok) {
 				log.warn(`Failed to download attachment ${att.id}: ${String(res.status)}`);
 				continue;
 			}
 			const buffer = Buffer.from(await res.arrayBuffer());
+			if (buffer.length > MAX_FILE_SIZE) {
+				log.warn(`Attachment ${att.id} exceeds max size (${String(buffer.length)} bytes) — skipping`);
+				continue;
+			}
 			await (0, node_fs_promises.writeFile)(localPath, buffer);
 			results.push({
 				localPath,
@@ -348,6 +483,8 @@ async function downloadAttachments(attachments, log) {
 			log.info(`Downloaded attachment: ${localPath} (${String(buffer.length)} bytes)`);
 		} catch (err) {
 			log.error(`Failed to download attachment ${att.id}: ${err instanceof Error ? err.message : String(err)}`);
+		} finally {
+			clearTimeout(timeout);
 		}
 	}
 	return results;
@@ -362,7 +499,8 @@ async function handleAgentRequest(request, log) {
 		chatClient?.sendResponse(request.id, false, { message: "OpenClaw SDK not available — cannot dispatch" });
 		return;
 	}
-	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, attachments: rawAttachments } = request.params;
+	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, attachments: rawAttachments, a2a } = request.params;
+	const isA2A = !!a2a;
 	if (!message && !rawAttachments?.length) {
 		chatClient?.sendResponse(request.id, false, { message: "Missing message" });
 		return;
@@ -389,11 +527,13 @@ async function handleAgentRequest(request, log) {
 	try {
 		const downloadedFiles = rawAttachments?.length ? await downloadAttachments(rawAttachments, log) : [];
 		const bodyForAgent = downloadedFiles.length ? `${message || ""}\n\n[Attached files:\n${downloadedFiles.map((f) => `- ${f.filename}: ${f.localPath}`).join("\n")}]` : void 0;
-		const channelMode = extractChannelMode(conversationId ?? "", clientType ?? "chat");
-		const channelLabel = channelMode === "sms" ? "SMS" : channelMode === "whatsapp" ? "WhatsApp" : "Alfe";
+		const channelMode = isA2A ? "a2a" : extractChannelMode(conversationId ?? "", clientType ?? "chat");
+		const channelLabel = channelMode === "sms" ? "SMS" : channelMode === "whatsapp" ? "WhatsApp" : channelMode === "a2a" ? "Agent" : "Alfe";
 		const shortConvId = conversationId?.slice(-8) ?? "";
 		const userLabel = displayName ?? userId ?? senderId;
 		const conversationLabel = conversationType === "group" ? shortConvId ? `[${channelLabel}] Group (${shortConvId})` : `[${channelLabel}] Group` : shortConvId ? `[${channelLabel}] ${userLabel} (${shortConvId})` : `[${channelLabel}] ${userLabel}`;
+		let a2aResponseBuffer = "";
+		let a2aResolved = false;
 		resolvedOpenClawKey = (await dispatchInbound({
 			cfg,
 			runtime: { channel: runtime.channel },
@@ -420,12 +560,29 @@ async function handleAgentRequest(request, log) {
 				...clientType ? { ClientType: clientType } : {},
 				...conversationId ? { ConversationId: conversationId } : {},
 				...displayName ? { SenderName: displayName } : {},
-				ChannelMode: channelMode
+				ChannelMode: channelMode,
+				...isA2A ? {
+					CallerType: "agent",
+					CallerAgentId: a2a.sourceAgentId,
+					CallerAgentName: a2a.sourceAgentName,
+					InteractionDepth: String(a2a.depth),
+					A2ASystemPrompt: [
+						`This is an agent-to-agent conversation with ${a2a.sourceAgentName}.`,
+						"Rules:",
+						"- Only respond if you have new information, a question, or an action to coordinate.",
+						"- If the conversation is complete, call the end_conversation() tool OR end your message with [RESOLVED].",
+						"- Do NOT respond just to acknowledge — that creates infinite loops."
+					].join("\n")
+				} : {}
 			},
 			deliver: async (payload) => {
 				const responseText = payload.text ?? "";
 				const mediaUrls = [...payload.mediaUrl ? [payload.mediaUrl] : [], ...payload.mediaUrls ?? []];
 				await addMessage(sessionId, "assistant", responseText);
+				if (isA2A) {
+					a2aResponseBuffer += responseText;
+					if (responseText.includes("\"status\":\"conversation_ended\"") || responseText.includes("\"status\": \"conversation_ended\"")) a2aResolved = true;
+				}
 				chatClient?.notify("agent-message", {
 					conversationId: conversationId ?? legacySessionKey,
 					text: responseText,
@@ -437,7 +594,7 @@ async function handleAgentRequest(request, log) {
 					channel: "alfe",
 					role: "assistant"
 				}).catch((err) => {
-					log.debug(`Metrics report failed: ${err instanceof Error ? err.message : String(err)}`);
+					log.warn(`Metrics report failed: ${err instanceof Error ? err.message : String(err)}`);
 				});
 			},
 			onRecordError: (err) => {
@@ -447,6 +604,12 @@ async function handleAgentRequest(request, log) {
 				log.error(`Dispatch error (${info.kind}): ${err instanceof Error ? err.message : String(err)}`);
 			}
 		})).route.sessionKey;
+		if (isA2A && a2aResponseBuffer) chatClient?.notify("a2a-complete", {
+			conversationId: conversationId ?? legacySessionKey,
+			fullText: a2aResponseBuffer,
+			a2a,
+			resolved: a2aResolved
+		});
 		chatClient?.sendResponse(request.id, true, { sessionKey: resolvedOpenClawKey });
 		log.info(`Agent dispatch complete: sessionKey=${resolvedOpenClawKey}`);
 	} catch (err) {
@@ -516,10 +679,15 @@ const plugin = {
 	activate(api) {
 		const log = api.logger;
 		const alreadyActivated = globalThis.__alfeChatPluginActivated === true;
-		globalThis.__alfeChatPluginActivated = true;
+		const isGatewayMode = !!api.runtime;
 		const alfeChannel = createAlfeChannelPlugin();
 		api.registerChannel(alfeChannel);
 		log.info(`Registered channel: ${alfeChannel.id}`);
+		if (!isGatewayMode) {
+			log.debug("Management command context — skipping persistent resource init");
+			return;
+		}
+		globalThis.__alfeChatPluginActivated = true;
 		if (!alreadyActivated) {
 			log.info("Chat plugin registering...");
 			resolveOpenClawSdk(log);
@@ -547,10 +715,17 @@ const plugin = {
 						wsUrl: chatWsUrl,
 						apiKey,
 						onRequest: (request) => {
-							if (request.method === "agent") handleAgentRequest(request, log);
-							else if (request.method === "sessions.list") handleSessionsList(request, log);
-							else if (request.method === "sessions.get") handleSessionsGet(request, log);
-							else chatClient?.sendResponse(request.id, false, { message: `Unknown method: ${request.method}` });
+							const handle = async () => {
+								if (request.method === "agent") await handleAgentRequest(request, log);
+								else if (request.method === "sessions.list") await handleSessionsList(request, log);
+								else if (request.method === "sessions.get") await handleSessionsGet(request, log);
+								else chatClient?.sendResponse(request.id, false, { message: `Unknown method: ${request.method}` });
+							};
+							handle().catch((err) => {
+								const errMsg = err instanceof Error ? err.message : String(err);
+								log.error(`Request handler crashed: ${errMsg}`);
+								chatClient?.sendResponse(request.id, false, { message: "Internal error" });
+							});
 						},
 						onConnectionChange: (connected) => {
 							log.info(`Chat service connection: ${connected ? "connected" : "disconnected"}`);
@@ -599,20 +774,30 @@ const plugin = {
 			});
 			log.info("Registered gateway RPC methods: sessions.list, sessions.get");
 		}
+		if (!alreadyActivated && typeof api.registerTool === "function") connectingPromise?.then(() => {
+			if (chatClient && typeof api.registerTool === "function") {
+				const a2aTools = buildA2ATools(chatClient, log);
+				for (const tool of a2aTools) api.registerTool(tool);
+				log.info(`Registered ${String(a2aTools.length)} agent-to-agent tools`);
+			}
+		}).catch(() => {});
 		if (!alreadyActivated) {
 			api.on("session_start", async (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const key = eventArgs[0].sessionKey;
 				if (!key || isAlfeSessionKey(key)) return;
 				log.info(`Chat session starting: ${key}`);
 				await createSession(key, "", "alfe");
 			}, { priority: 50 });
 			api.on("message_received", async (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const event = eventArgs[0];
 				const ctx = eventArgs[1];
 				if (!ctx.conversationId || ctx.channelId === "alfe") return;
 				await addMessage(ctx.conversationId, "user", event.content, event.from);
 			});
 			api.on("session_end", (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const key = eventArgs[0].sessionKey;
 				if (!key || !isAlfeSessionKey(key)) return;
 				log.info(`Chat session ending: ${key}`);

package/dist/plugin2.js

@@ -1,11 +1,14 @@
 import { createRequire } from "node:module";
 import { mkdir, readFile, readdir, stat, unlink, writeFile } from "node:fs/promises";
-import { join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { ChatServiceClient, resolveAlfeChat } from "@alfe.ai/chat";
 import { resolveConfig } from "@alfe.ai/config";
 import { AgentApiClient } from "@alfe.ai/agent-api-client";
 import { existsSync } from "node:fs";
+//#region \0rolldown/runtime.js
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
 //#region src/alfe-channel.ts
 const CHANNEL_ID = "alfe";
 const DEFAULT_ACCOUNT_ID = "default";
@@ -151,7 +154,7 @@ function isAlfeSessionKey(key) {
 }
 /**
 * Extract the channel mode from a standardized session key or conversationId.
-* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat') or fallback.
+* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.
 */
 function extractChannelMode(conversationId, fallback = "chat") {
 	return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;
@@ -181,7 +184,6 @@ function sessionPath(sessionId) {
 }
 async function cleanupOldSessions() {
 	if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;
-	lastCleanupAt = Date.now();
 	try {
 		const jsonFiles = (await readdir(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));
 		if (jsonFiles.length <= MAX_SESSIONS) {
@@ -211,6 +213,7 @@ async function cleanupOldSessions() {
 				remaining--;
 			} catch {}
 		}
+		lastCleanupAt = Date.now();
 	} catch {}
 }
 async function getSession(sessionId) {
@@ -242,17 +245,24 @@ async function createSession(sessionId, agentId, channel, tenantId, userId) {
 	cleanupOldSessions();
 	return session;
 }
+const writeLocks = /* @__PURE__ */ new Map();
 async function addMessage(sessionId, role, content, senderId, senderName) {
-	const session = await getSession(sessionId);
-	if (!session) return;
-	session.messages.push({
-		role,
-		content,
-		timestamp: Date.now(),
-		...senderId ? { senderId } : {},
-		...senderName ? { senderName } : {}
+	const next = (writeLocks.get(sessionId) ?? Promise.resolve()).then(async () => {
+		const session = await getSession(sessionId);
+		if (!session) return;
+		session.messages.push({
+			role,
+			content,
+			timestamp: Date.now(),
+			...senderId ? { senderId } : {},
+			...senderName ? { senderName } : {}
+		});
+		await saveSession(session);
+	}).finally(() => {
+		if (writeLocks.get(sessionId) === next) writeLocks.delete(sessionId);
 	});
-	await saveSession(session);
+	writeLocks.set(sessionId, next);
+	await next;
 }
 async function listSessions(filters, limit = 50) {
 	await ensureDir();
@@ -289,6 +299,112 @@ async function listSessions(filters, limit = 50) {
 	return summaries.slice(0, limit);
 }
 //#endregion
+//#region src/a2a-tools.ts
+function ok(result) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(result)
+	}] };
+}
+function errResult(message) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify({ error: message })
+	}] };
+}
+function defineTool(def) {
+	return {
+		name: def.name,
+		description: def.description,
+		label: def.name,
+		parameters: def.parameters,
+		execute: async (_toolCallId, params) => {
+			try {
+				return ok(await def.handler(params));
+			} catch (e) {
+				return errResult(e.message);
+			}
+		}
+	};
+}
+function buildA2ATools(chatClient, log) {
+	return [
+		defineTool({
+			name: "list_agents",
+			description: "List other agents in your organization that you can communicate with.",
+			parameters: {
+				type: "object",
+				properties: {},
+				required: []
+			},
+			handler: async () => {
+				log.info("list_agents tool called");
+				return await chatClient.sendRequest("a2a.list-agents", {});
+			}
+		}),
+		defineTool({
+			name: "message_agent",
+			description: "Send a message to another agent. Starts a new conversation thread, or continues an existing one. The conversation will bounce back and forth automatically until one agent calls end_conversation() or says [RESOLVED].",
+			parameters: {
+				type: "object",
+				properties: {
+					agent_id: {
+						type: "string",
+						description: "Target agent ID (use list_agents to find available agents)"
+					},
+					message: {
+						type: "string",
+						description: "Message to send to the agent"
+					},
+					thread_id: {
+						type: "string",
+						description: "Continue an existing conversation thread (omit to start a new one)"
+					},
+					max_depth: {
+						type: "number",
+						description: "Maximum number of back-and-forth exchanges (default: 10)"
+					}
+				},
+				required: ["agent_id", "message"]
+			},
+			handler: async (params) => {
+				const agentId = params.agent_id;
+				const message = params.message;
+				const threadId = params.thread_id;
+				const maxDepth = params.max_depth ?? 10;
+				if (!agentId || !message) throw new Error("agent_id and message are required");
+				log.info(`message_agent tool: sending to ${agentId}`);
+				return await chatClient.sendRequest("a2a.send", {
+					targetAgentId: agentId,
+					message,
+					threadId,
+					maxDepth
+				});
+			}
+		}),
+		defineTool({
+			name: "end_conversation",
+			description: "End the current agent-to-agent conversation. Call this when the discussion is resolved and no further exchanges are needed.",
+			parameters: {
+				type: "object",
+				properties: { summary: {
+					type: "string",
+					description: "Brief summary of what was discussed or resolved"
+				} },
+				required: []
+			},
+			handler: (params) => {
+				const summary = params.summary;
+				log.info(`end_conversation tool called${summary ? `: ${summary}` : ""}`);
+				return Promise.resolve({
+					status: "conversation_ended",
+					summary
+				});
+			}
+		})
+	];
+}
+//#endregion
 //#region src/plugin.ts
 /**
 * @alfe.ai/openclaw-chat — OpenClaw chat channel plugin.
@@ -305,17 +421,29 @@ async function listSessions(filters, limit = 50) {
 */
 let dispatchInbound = null;
 /**
-* Resolve OpenClaw SDK functions from the global install.
-* The openclaw package is installed globally (/usr/lib/node_modules/openclaw/)
-* but is NOT in the plugin's node_modules. Built-in extensions can import
-* directly; external plugins must use createRequire.
+* Resolve OpenClaw SDK functions from the running process.
+*
+* The openclaw package is NOT in the plugin's node_modules (it's a peer dep).
+* Since the plugin runs inside OpenClaw's process, we anchor resolution to
+* OpenClaw's own entry module via require.main, then fall back to deriving
+* the global modules path from process.execPath.
 */
 function resolveOpenClawSdk(log) {
-	for (const globalPath of ["/usr/lib/node_modules/openclaw/package.json", "/usr/local/lib/node_modules/openclaw/package.json"]) try {
-		const channelInbound = createRequire(globalPath)("openclaw/plugin-sdk/channel-inbound");
+	const anchors = [__require.main?.filename, process.argv[1]].filter(Boolean);
+	for (const anchor of anchors) try {
+		const channelInbound = createRequire(anchor)("openclaw/plugin-sdk/channel-inbound");
+		if (channelInbound.dispatchInboundDirectDmWithRuntime) {
+			dispatchInbound = channelInbound.dispatchInboundDirectDmWithRuntime;
+			log.info(`Resolved OpenClaw SDK from ${anchor}`);
+			return;
+		}
+	} catch {}
+	try {
+		const derivedPath = join(resolve(dirname(process.execPath), ".."), "lib", "node_modules", "openclaw", "package.json");
+		const channelInbound = createRequire(derivedPath)("openclaw/plugin-sdk/channel-inbound");
 		if (channelInbound.dispatchInboundDirectDmWithRuntime) {
 			dispatchInbound = channelInbound.dispatchInboundDirectDmWithRuntime;
-			log.info(`Resolved OpenClaw SDK from ${globalPath}`);
+			log.info(`Resolved OpenClaw SDK from ${derivedPath}`);
 			return;
 		}
 	} catch {}
@@ -325,20 +453,30 @@ let pluginRuntime = null;
 let chatClient = null;
 let connectingPromise = null;
 let metricsClient = null;
+const MAX_FILE_SIZE = 50 * 1024 * 1024;
+const DOWNLOAD_TIMEOUT_MS = 3e4;
 async function downloadAttachments(attachments, log) {
 	const attachDir = join(homedir(), ".alfe", "attachments");
 	await mkdir(attachDir, { recursive: true });
 	const results = [];
 	for (const att of attachments) {
-		const filename = att.filename ?? att.id;
+		const filename = (att.filename ?? att.id).replace(/[/\\]/g, "_").replace(/\.\./g, "_").replace(/\0/g, "");
 		const localPath = join(attachDir, `${att.id}_${filename}`);
+		const controller = new AbortController();
+		const timeout = setTimeout(() => {
+			controller.abort();
+		}, DOWNLOAD_TIMEOUT_MS);
 		try {
-			const res = await fetch(att.url);
+			const res = await fetch(att.url, { signal: controller.signal });
 			if (!res.ok) {
 				log.warn(`Failed to download attachment ${att.id}: ${String(res.status)}`);
 				continue;
 			}
 			const buffer = Buffer.from(await res.arrayBuffer());
+			if (buffer.length > MAX_FILE_SIZE) {
+				log.warn(`Attachment ${att.id} exceeds max size (${String(buffer.length)} bytes) — skipping`);
+				continue;
+			}
 			await writeFile(localPath, buffer);
 			results.push({
 				localPath,
@@ -348,6 +486,8 @@ async function downloadAttachments(attachments, log) {
 			log.info(`Downloaded attachment: ${localPath} (${String(buffer.length)} bytes)`);
 		} catch (err) {
 			log.error(`Failed to download attachment ${att.id}: ${err instanceof Error ? err.message : String(err)}`);
+		} finally {
+			clearTimeout(timeout);
 		}
 	}
 	return results;
@@ -362,7 +502,8 @@ async function handleAgentRequest(request, log) {
 		chatClient?.sendResponse(request.id, false, { message: "OpenClaw SDK not available — cannot dispatch" });
 		return;
 	}
-	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, attachments: rawAttachments } = request.params;
+	const { message, sessionKey: legacySessionKey, userId, conversationId, conversationType, tenantId, clientType, displayName, attachments: rawAttachments, a2a } = request.params;
+	const isA2A = !!a2a;
 	if (!message && !rawAttachments?.length) {
 		chatClient?.sendResponse(request.id, false, { message: "Missing message" });
 		return;
@@ -389,11 +530,13 @@ async function handleAgentRequest(request, log) {
 	try {
 		const downloadedFiles = rawAttachments?.length ? await downloadAttachments(rawAttachments, log) : [];
 		const bodyForAgent = downloadedFiles.length ? `${message || ""}\n\n[Attached files:\n${downloadedFiles.map((f) => `- ${f.filename}: ${f.localPath}`).join("\n")}]` : void 0;
-		const channelMode = extractChannelMode(conversationId ?? "", clientType ?? "chat");
-		const channelLabel = channelMode === "sms" ? "SMS" : channelMode === "whatsapp" ? "WhatsApp" : "Alfe";
+		const channelMode = isA2A ? "a2a" : extractChannelMode(conversationId ?? "", clientType ?? "chat");
+		const channelLabel = channelMode === "sms" ? "SMS" : channelMode === "whatsapp" ? "WhatsApp" : channelMode === "a2a" ? "Agent" : "Alfe";
 		const shortConvId = conversationId?.slice(-8) ?? "";
 		const userLabel = displayName ?? userId ?? senderId;
 		const conversationLabel = conversationType === "group" ? shortConvId ? `[${channelLabel}] Group (${shortConvId})` : `[${channelLabel}] Group` : shortConvId ? `[${channelLabel}] ${userLabel} (${shortConvId})` : `[${channelLabel}] ${userLabel}`;
+		let a2aResponseBuffer = "";
+		let a2aResolved = false;
 		resolvedOpenClawKey = (await dispatchInbound({
 			cfg,
 			runtime: { channel: runtime.channel },
@@ -420,12 +563,29 @@ async function handleAgentRequest(request, log) {
 				...clientType ? { ClientType: clientType } : {},
 				...conversationId ? { ConversationId: conversationId } : {},
 				...displayName ? { SenderName: displayName } : {},
-				ChannelMode: channelMode
+				ChannelMode: channelMode,
+				...isA2A ? {
+					CallerType: "agent",
+					CallerAgentId: a2a.sourceAgentId,
+					CallerAgentName: a2a.sourceAgentName,
+					InteractionDepth: String(a2a.depth),
+					A2ASystemPrompt: [
+						`This is an agent-to-agent conversation with ${a2a.sourceAgentName}.`,
+						"Rules:",
+						"- Only respond if you have new information, a question, or an action to coordinate.",
+						"- If the conversation is complete, call the end_conversation() tool OR end your message with [RESOLVED].",
+						"- Do NOT respond just to acknowledge — that creates infinite loops."
+					].join("\n")
+				} : {}
 			},
 			deliver: async (payload) => {
 				const responseText = payload.text ?? "";
 				const mediaUrls = [...payload.mediaUrl ? [payload.mediaUrl] : [], ...payload.mediaUrls ?? []];
 				await addMessage(sessionId, "assistant", responseText);
+				if (isA2A) {
+					a2aResponseBuffer += responseText;
+					if (responseText.includes("\"status\":\"conversation_ended\"") || responseText.includes("\"status\": \"conversation_ended\"")) a2aResolved = true;
+				}
 				chatClient?.notify("agent-message", {
 					conversationId: conversationId ?? legacySessionKey,
 					text: responseText,
@@ -437,7 +597,7 @@ async function handleAgentRequest(request, log) {
 					channel: "alfe",
 					role: "assistant"
 				}).catch((err) => {
-					log.debug(`Metrics report failed: ${err instanceof Error ? err.message : String(err)}`);
+					log.warn(`Metrics report failed: ${err instanceof Error ? err.message : String(err)}`);
 				});
 			},
 			onRecordError: (err) => {
@@ -447,6 +607,12 @@ async function handleAgentRequest(request, log) {
 				log.error(`Dispatch error (${info.kind}): ${err instanceof Error ? err.message : String(err)}`);
 			}
 		})).route.sessionKey;
+		if (isA2A && a2aResponseBuffer) chatClient?.notify("a2a-complete", {
+			conversationId: conversationId ?? legacySessionKey,
+			fullText: a2aResponseBuffer,
+			a2a,
+			resolved: a2aResolved
+		});
 		chatClient?.sendResponse(request.id, true, { sessionKey: resolvedOpenClawKey });
 		log.info(`Agent dispatch complete: sessionKey=${resolvedOpenClawKey}`);
 	} catch (err) {
@@ -516,10 +682,15 @@ const plugin = {
 	activate(api) {
 		const log = api.logger;
 		const alreadyActivated = globalThis.__alfeChatPluginActivated === true;
-		globalThis.__alfeChatPluginActivated = true;
+		const isGatewayMode = !!api.runtime;
 		const alfeChannel = createAlfeChannelPlugin();
 		api.registerChannel(alfeChannel);
 		log.info(`Registered channel: ${alfeChannel.id}`);
+		if (!isGatewayMode) {
+			log.debug("Management command context — skipping persistent resource init");
+			return;
+		}
+		globalThis.__alfeChatPluginActivated = true;
 		if (!alreadyActivated) {
 			log.info("Chat plugin registering...");
 			resolveOpenClawSdk(log);
@@ -547,10 +718,17 @@ const plugin = {
 						wsUrl: chatWsUrl,
 						apiKey,
 						onRequest: (request) => {
-							if (request.method === "agent") handleAgentRequest(request, log);
-							else if (request.method === "sessions.list") handleSessionsList(request, log);
-							else if (request.method === "sessions.get") handleSessionsGet(request, log);
-							else chatClient?.sendResponse(request.id, false, { message: `Unknown method: ${request.method}` });
+							const handle = async () => {
+								if (request.method === "agent") await handleAgentRequest(request, log);
+								else if (request.method === "sessions.list") await handleSessionsList(request, log);
+								else if (request.method === "sessions.get") await handleSessionsGet(request, log);
+								else chatClient?.sendResponse(request.id, false, { message: `Unknown method: ${request.method}` });
+							};
+							handle().catch((err) => {
+								const errMsg = err instanceof Error ? err.message : String(err);
+								log.error(`Request handler crashed: ${errMsg}`);
+								chatClient?.sendResponse(request.id, false, { message: "Internal error" });
+							});
 						},
 						onConnectionChange: (connected) => {
 							log.info(`Chat service connection: ${connected ? "connected" : "disconnected"}`);
@@ -599,20 +777,30 @@ const plugin = {
 			});
 			log.info("Registered gateway RPC methods: sessions.list, sessions.get");
 		}
+		if (!alreadyActivated && typeof api.registerTool === "function") connectingPromise?.then(() => {
+			if (chatClient && typeof api.registerTool === "function") {
+				const a2aTools = buildA2ATools(chatClient, log);
+				for (const tool of a2aTools) api.registerTool(tool);
+				log.info(`Registered ${String(a2aTools.length)} agent-to-agent tools`);
+			}
+		}).catch(() => {});
 		if (!alreadyActivated) {
 			api.on("session_start", async (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const key = eventArgs[0].sessionKey;
 				if (!key || isAlfeSessionKey(key)) return;
 				log.info(`Chat session starting: ${key}`);
 				await createSession(key, "", "alfe");
 			}, { priority: 50 });
 			api.on("message_received", async (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const event = eventArgs[0];
 				const ctx = eventArgs[1];
 				if (!ctx.conversationId || ctx.channelId === "alfe") return;
 				await addMessage(ctx.conversationId, "user", event.content, event.from);
 			});
 			api.on("session_end", (...eventArgs) => {
+				if (!pluginRuntime) return;
 				const key = eventArgs[0].sessionKey;
 				if (!key || !isAlfeSessionKey(key)) return;
 				log.info(`Chat session ending: ${key}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-chat",
-  "version": "0.0.19",
+  "version": "0.0.21",
   "description": "OpenClaw chat plugin for Alfe — web widget and mobile app channels",
   "type": "module",
   "main": "./dist/plugin.js",
@@ -28,7 +28,7 @@
   ],
   "dependencies": {
     "@alfe.ai/agent-api-client": "^0.0.7",
-    "@alfe.ai/chat": "^0.0.6",
+    "@alfe.ai/chat": "^0.0.7",
     "@alfe.ai/config": "^0.0.7"
   },
   "peerDependencies": {