@alfe.ai/openclaw-identity 0.1.26 → 0.1.27

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import plugin from "./plugin.cjs";
+import { t as plugin } from "./plugin.cjs";
 
 //#region src/runtime-contract.d.ts
 

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import plugin from "./plugin.js";
+import { t as plugin } from "./plugin.js";
 
 //#region src/runtime-contract.d.ts
 

package/dist/plugin.d.cts

@@ -1,5 +1,45 @@
 import { TSchema } from "@sinclair/typebox";
 
+//#region ../openclaw-plugin-kit/dist/index.d.ts
+
+//# sourceMappingURL=types.d.ts.map
+//#endregion
+//#region src/tools.d.ts
+/**
+ * Tool-definition helpers — the `defineTool` / `ok` / `errResult` trio that
+ * was copy-pasted across 8 plugins (identity, google, teams, mobile,
+ * whatsapp, voice, chat a2a-tools, base openclaw).
+ *
+ * Error handling is standardized on the openclaw-google variant — the only
+ * copy that survived non-`Error` throws (`e instanceof Error ? e.message :
+ * "Unknown error"`). The other copies did `(e as Error).message`, which
+ * crashes the tool executor when a handler throws a string/object.
+ */
+/** Shape returned to OpenClaw from a tool `execute`. */
+interface ToolResult {
+  content: {
+    type: "text";
+    text: string;
+  }[];
+  details: unknown;
+}
+/**
+ * An OpenClaw tool definition.
+ *
+ * `parameters` is generic because the fleet is split between TypeBox
+ * `TSchema` schemas (identity/google/teams/mobile/whatsapp) and plain
+ * JSON-Schema objects (chat a2a-tools). Instantiate with whichever schema
+ * type the plugin uses — the kit itself has no schema dependency.
+ */
+interface ToolDef<TParameters = unknown> {
+  name: string;
+  description: string;
+  label: string;
+  parameters: TParameters;
+  execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;
+}
+/** Wrap a successful handler result in the OpenClaw tool-result envelope. */
+//#endregion
 //#region src/plugin.d.ts
 
 interface PluginLogger {
@@ -8,23 +48,10 @@ interface PluginLogger {
   error: (...args: unknown[]) => void;
   debug: (...args: unknown[]) => void;
 }
-interface ToolDef {
-  name: string;
-  description: string;
-  label: string;
-  parameters: TSchema;
-  execute: (toolCallId: string, params: Record<string, unknown>) => Promise<{
-    content: {
-      type: "text";
-      text: string;
-    }[];
-    details: unknown;
-  }>;
-}
 interface PluginApi {
   logger: PluginLogger;
   registrationMode?: "full" | "setup-only" | "setup-runtime" | "cli-metadata";
-  registerTool: (tool: ToolDef) => void;
+  registerTool: (tool: ToolDef<TSchema>) => void;
   on: (event: string, handler: (...args: unknown[]) => Promise<unknown>, options?: {
     priority?: number;
   }) => void;
@@ -38,4 +65,4 @@ declare const plugin: {
   deactivate(api: PluginApi): void;
 };
 //#endregion
-export { plugin as default };
+export { plugin as t };

package/dist/plugin.d.ts

@@ -1,5 +1,45 @@
 import { TSchema } from "@sinclair/typebox";
 
+//#region ../openclaw-plugin-kit/dist/index.d.ts
+
+//# sourceMappingURL=types.d.ts.map
+//#endregion
+//#region src/tools.d.ts
+/**
+ * Tool-definition helpers — the `defineTool` / `ok` / `errResult` trio that
+ * was copy-pasted across 8 plugins (identity, google, teams, mobile,
+ * whatsapp, voice, chat a2a-tools, base openclaw).
+ *
+ * Error handling is standardized on the openclaw-google variant — the only
+ * copy that survived non-`Error` throws (`e instanceof Error ? e.message :
+ * "Unknown error"`). The other copies did `(e as Error).message`, which
+ * crashes the tool executor when a handler throws a string/object.
+ */
+/** Shape returned to OpenClaw from a tool `execute`. */
+interface ToolResult {
+  content: {
+    type: "text";
+    text: string;
+  }[];
+  details: unknown;
+}
+/**
+ * An OpenClaw tool definition.
+ *
+ * `parameters` is generic because the fleet is split between TypeBox
+ * `TSchema` schemas (identity/google/teams/mobile/whatsapp) and plain
+ * JSON-Schema objects (chat a2a-tools). Instantiate with whichever schema
+ * type the plugin uses — the kit itself has no schema dependency.
+ */
+interface ToolDef<TParameters = unknown> {
+  name: string;
+  description: string;
+  label: string;
+  parameters: TParameters;
+  execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;
+}
+/** Wrap a successful handler result in the OpenClaw tool-result envelope. */
+//#endregion
 //#region src/plugin.d.ts
 
 interface PluginLogger {
@@ -8,23 +48,10 @@ interface PluginLogger {
   error: (...args: unknown[]) => void;
   debug: (...args: unknown[]) => void;
 }
-interface ToolDef {
-  name: string;
-  description: string;
-  label: string;
-  parameters: TSchema;
-  execute: (toolCallId: string, params: Record<string, unknown>) => Promise<{
-    content: {
-      type: "text";
-      text: string;
-    }[];
-    details: unknown;
-  }>;
-}
 interface PluginApi {
   logger: PluginLogger;
   registrationMode?: "full" | "setup-only" | "setup-runtime" | "cli-metadata";
-  registerTool: (tool: ToolDef) => void;
+  registerTool: (tool: ToolDef<TSchema>) => void;
   on: (event: string, handler: (...args: unknown[]) => Promise<unknown>, options?: {
     priority?: number;
   }) => void;
@@ -38,4 +65,4 @@ declare const plugin: {
   deactivate(api: PluginApi): void;
 };
 //#endregion
-export { plugin as default };
+export { plugin as t };

package/dist/plugin2.cjs

@@ -1,5 +1,6 @@
 let _alfe_ai_config = require("@alfe.ai/config");
 let _alfe_ai_agent_api_client = require("@alfe.ai/agent-api-client");
+let _alfe_ai_openclaw_plugin_kit = require("@alfe.ai/openclaw-plugin-kit");
 let _sinclair_typebox = require("@sinclair/typebox");
 let node_module = require("node:module");
 let _auriclabs_roles = require("@auriclabs/roles");
@@ -217,39 +218,6 @@ function resolveClaimedIdentity(params) {
 	if (!session.ok) return { error: session.error };
 	return { claimedIdentityId: session.identityId };
 }
-function ok(data) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify(data)
-		}],
-		details: data
-	};
-}
-function errResult(message) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify({ error: message })
-		}],
-		details: { error: message }
-	};
-}
-function defineTool(def) {
-	return {
-		name: def.name,
-		description: def.description,
-		label: def.name,
-		parameters: def.parameters,
-		execute: async (_toolCallId, params) => {
-			try {
-				return ok(await def.handler(params));
-			} catch (e) {
-				return errResult(e.message);
-			}
-		}
-	};
-}
 let cachedClient = null;
 function getClient() {
 	if (cachedClient) return cachedClient;
@@ -295,7 +263,7 @@ const plugin = {
 			return typeof v === "function" ? v.bind(c) : v;
 		} });
 		const tools = [
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "who_is_this",
 				description: "Look up an identity by provider + platformId — returns full identity context (profile, contacts, platforms, notes, tags, recent changelog). Returns `{found:false}` for unknown senders. This tool DOES NOT create new identities.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -311,7 +279,7 @@ const plugin = {
 					return client.getIdentityContext(result.identityId);
 				}
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "lookup_identity",
 				description: "Search identities by name. Returns multiple matches.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -323,7 +291,7 @@ const plugin = {
 					status: params.status
 				})
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "merge_identities",
 				description: "Merge two identity records — transfers contacts, platforms, notes, tags, aliases to the survivor. Hard-move, transactional.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -338,7 +306,7 @@ const plugin = {
 					}
 				})
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "unmerge_identities",
 				description: "Reverse a merge — restore previously merged identity.",
 				parameters: _sinclair_typebox.Type.Object({ mergedId: _sinclair_typebox.Type.String({ description: "Identity that was merged (has mergedInto pointer)" }) }),
@@ -347,7 +315,7 @@ const plugin = {
 					id: "plugin"
 				} })
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "add_identity_note",
 				description: "Add an observation or note about an identity. Use category 'context' for unverified affiliation claims (self-reported title/company) — those do NOT belong on the identity row directly.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -364,7 +332,7 @@ const plugin = {
 					}
 				})
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "tag_identity",
 				description: "Add or remove a tag on an identity.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -381,7 +349,7 @@ const plugin = {
 					}
 				})
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "get_identity_changelog",
 				description: "Get the changelog for an identity — versions, diffs, who changed what.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -390,7 +358,7 @@ const plugin = {
 				}),
 				handler: (params) => client.getIdentityChangelog(params.identityId, { limit: params.limit })
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "rollback_identity",
 				description: "Revert an identity to a previous version.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -405,7 +373,7 @@ const plugin = {
 					}
 				})
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "update_identity",
 				description: "Update display-shape fields on a CONTACT/person you know (an identity): name / avatarUrl / timezone / locale. NOT for your own agent profile — to set YOUR OWN profile picture use `set_avatar` or `generate_avatar`, never this tool with identityId:'agent'. Contact mutations go through the verify flow — this tool will NOT accept email or mobile. Title and company live on org membership rows, not here.",
 				parameters: _sinclair_typebox.Type.Object({
@@ -421,7 +389,7 @@ const plugin = {
 					return client.updateIdentity(identityId, rest);
 				}
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "request_identity_verification",
 				description: "Send a verification phrase to the inbound user's email or mobile to prove they own that contact endpoint. Use when the inbound user has just told you their email or mobile number and you want them to confirm it. The verification ALWAYS binds to the inbound sender's identity (the WhatsApp / SMS / Discord / Google Chat / chat-web user who just spoke) — identity is server-authoritative, auto-derived from the current inbound session. There is no way to verify a different identity via this tool. If the contact you supply already lives on another existing identity (e.g. the user's Clerk web account), the merge happens automatically on confirm. To add a new contact to an already-verified canonical identity (e.g. add a new email to a Clerk account), the user must be talking from a session that already resolves to that canonical identity (post-merge, or chat-web logged in as Clerk).",
 				parameters: _sinclair_typebox.Type.Object({
@@ -453,7 +421,7 @@ const plugin = {
 					});
 				}
 			}),
-			defineTool({
+			(0, _alfe_ai_openclaw_plugin_kit.defineTool)({
 				name: "confirm_identity_verification",
 				description: "Confirm a verification by submitting the phrase the inbound user received. Returns `{ verified, identityId, action }` where `action` is 'merged' (the verified contact already lived on another identity, which is now the survivor — the inbound identity merged into it) or 'contact_verified' (the contact was attached to the inbound identity). Identity is server-authoritative, auto-derived from the current inbound session — no override available.",
 				parameters: _sinclair_typebox.Type.Object({

package/dist/plugin2.d.cts

@@ -0,0 +1,2 @@
+import { t as plugin } from "./plugin.cjs";
+export { plugin as default };

package/dist/plugin2.d.ts

@@ -0,0 +1,2 @@
+import { t as plugin } from "./plugin.js";
+export { plugin as default };

package/dist/plugin2.js

@@ -1,6 +1,7 @@
 import { createRequire } from "node:module";
 import { resolveConfig } from "@alfe.ai/config";
 import { AgentApiClient, installToolErrorCapture } from "@alfe.ai/agent-api-client";
+import { defineTool } from "@alfe.ai/openclaw-plugin-kit";
 import { Type } from "@sinclair/typebox";
 import { createAbility } from "@auriclabs/roles";
 //#region src/agent-exec-gate.ts
@@ -217,39 +218,6 @@ function resolveClaimedIdentity(params) {
 	if (!session.ok) return { error: session.error };
 	return { claimedIdentityId: session.identityId };
 }
-function ok(data) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify(data)
-		}],
-		details: data
-	};
-}
-function errResult(message) {
-	return {
-		content: [{
-			type: "text",
-			text: JSON.stringify({ error: message })
-		}],
-		details: { error: message }
-	};
-}
-function defineTool(def) {
-	return {
-		name: def.name,
-		description: def.description,
-		label: def.name,
-		parameters: def.parameters,
-		execute: async (_toolCallId, params) => {
-			try {
-				return ok(await def.handler(params));
-			} catch (e) {
-				return errResult(e.message);
-			}
-		}
-	};
-}
 let cachedClient = null;
 function getClient() {
 	if (cachedClient) return cachedClient;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-identity",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "OpenClaw identity plugin — identity resolution, access gating, permission enforcement",
   "type": "module",
   "main": "./dist/plugin.js",
@@ -29,8 +29,9 @@
   "dependencies": {
     "@auriclabs/roles": "0.1.1",
     "@sinclair/typebox": "^0.34.48",
-    "@alfe.ai/agent-api-client": "0.13.0",
-    "@alfe.ai/config": "0.3.0"
+    "@alfe.ai/agent-api-client": "0.14.0",
+    "@alfe.ai/config": "0.4.0",
+    "@alfe.ai/openclaw-plugin-kit": "0.1.0"
   },
   "license": "UNLICENSED",
   "homepage": "https://alfe.ai",