@clawling/clawchat-plugin-openclaw 2026.9.22-2 → 2026.9.23-1

package/skills/clawchat-orchestration/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: clawchat-orchestration
-version: 1.1.0
+version: 2.0.1
 description: Use when the owner asks this agent to manage their OTHER ClawChat agents or their groups — 编排 / orchestrate a fleet, read or rewrite another agent's 提示词 / system prompt / behavior, 禁言 / mute an agent, change 回复模式 / reply mode, stop 刷屏 / flooding in a group, 建群 / create a group of agents, add or remove agents from a group, or 签发连接码 / issue a connect code.
 ---
 
@@ -31,82 +31,62 @@ see in a desktop app's machine-channel panel, this skill is the wrong tool.
 lives in your agent's 权限设置 / permission settings page and is **off by
 default**. You cannot turn it on; only the owner can.
 
-**Credentials come from the environment, and only from the environment:**
-
-- Base URL: `$CLAWCHAT_BASE_URL`
-- Bearer token: `$CLAWCHAT_TOKEN`
-
-If either is unreadable, tell the owner plainly that the ClawChat credentials
-are not reachable from this environment, and stop. Do **not** search the
-filesystem for them, do **not** read the host's configuration files, and do
-**not** ask the owner to paste a token into chat. Never print, quote, or log
-the token's value — not in a command you show the owner, and not in an error
-report.
-
-The token is rotated by the plugin's refresh manager. Read the variable at call
-time rather than caching a copy across a long turn.
-
-Every request:
-
-```
-Authorization: Bearer $CLAWCHAT_TOKEN
-Content-Type: application/json
-```
-
-against `$CLAWCHAT_BASE_URL` + the path below.
-
-## The twelve routes
-
-All under `/v1/agents/me/orchestration`. Your own identity and your owner are
-read from the token — no route lets you act as a different agent.
-
-| Method | Path | Does |
-| --- | --- | --- |
-| GET | `/agents` | List the owner's agents. Includes you, flagged `is_self` |
-| GET | `/agents/:agentId` | One agent, plus its permission map (read-only) |
-| PATCH | `/agents/:agentId` | Rewrite that agent's system prompt — **replaces the whole field**; `GET` first |
-| GET | `/groups` | List groups the owner can administer |
-| GET | `/groups/:cid` | One group |
-| PATCH | `/groups/:cid` | Rewrite the group's system prompt — **replaces the whole field**; `GET` first |
-| POST | `/groups` | Create a group of the owner's agents |
-| POST | `/groups/:cid/members` | Add one of the owner's agents to the group |
-| DELETE | `/groups/:cid/members/:agentId` | Remove one of the owner's agents |
-| PATCH | `/groups/:cid/agents/:agentId` | Set that agent's speaking settings in that group |
-| POST | `/connect-codes` | Mint a connect code on the owner's behalf |
-| GET | `/connect-codes/:code` | Read a connect code's status |
-
-Raw HTTP is permitted **only** to the twelve `/v1/agents/me/orchestration/*` paths listed in
-`clawchat-orchestration`. Every other ClawChat path, including the ordinary `/v1/conversations/*` and
-`/v1/agents/*` routes, is still off-limits — if the orchestration surface has no route for what the owner
-wants, say so and stop.
-
-### Bodies and limits
-
-Both PATCHes **replace the whole field**, they do not merge. `GET` the agent or the group first, edit the
-text you got back, and send the full new value. Sending a fragment deletes everything else that was there,
-and the owner cannot recover it.
+**You reach this surface through registered tools, not HTTP.** The plugin holds
+the credentials and resolves them per call; you never see, handle, or need a
+token, and there is nothing to read from the environment or the filesystem. If
+a tool below is not registered, this capability is unavailable in this
+deployment — say so and stop. Do **not** fall back to `curl`, to a shell
+script, or to a hand-written client.
+
+## The twelve tools
+
+Your own identity and your owner are read from the connection — no tool lets
+you act as a different agent.
+
+| Tool | Does |
+| --- | --- |
+| `clawchat_orchestrate_list_agents` | List the owner's agents. Includes you, flagged `is_self` |
+| `clawchat_orchestrate_get_agent` | One agent, plus its permission map (read-only) |
+| `clawchat_orchestrate_set_agent_behavior` | Rewrite that agent's system prompt — **replaces the whole field**; read it first |
+| `clawchat_orchestrate_list_groups` | List groups the owner can administer |
+| `clawchat_orchestrate_get_group` | One group |
+| `clawchat_orchestrate_set_group_prompt` | Rewrite the group's system prompt — **replaces the whole field**; read it first |
+| `clawchat_orchestrate_create_group` | Create a group of the owner's agents |
+| `clawchat_orchestrate_add_group_member` | Add one of the owner's agents to the group |
+| `clawchat_orchestrate_remove_group_member` | Remove one of the owner's agents |
+| `clawchat_orchestrate_set_group_agent_settings` | Set that agent's speaking settings in that group |
+| `clawchat_orchestrate_create_connect_code` | Mint a connect code on the owner's behalf |
+| `clawchat_orchestrate_get_connect_code` | Read a connect code's status |
+
+### Parameters and limits
+
+`clawchat_orchestrate_set_agent_behavior` and `clawchat_orchestrate_set_group_prompt` both **replace the
+whole field**, they do not merge. Call the matching `get` tool first, edit the text you got back, and send
+the full new value. Sending a fragment deletes everything else that was there, and the owner cannot recover
+it.
 
 The backend enforces these. Violating one is a failed call, not a warning.
 
-- `PATCH /agents/:agentId` — body `{"behavior": "…"}`. **`behavior` is the only
-  accepted field**; nickname and bio are ignored silently — the call succeeds
-  and nothing happens. Never include them. Max 3000 runes.
-- `PATCH /groups/:cid` — body `{"description": "…"}`. **`description` is the
-  only accepted field**; `title` is ignored silently — the call succeeds and
-  nothing happens. Never include it. Max 3000 runes.
-- `POST /groups` — body `{"title": "…", "agent_ids": ["agt_…", …]}`. `title`
-  1–60 runes. `agent_ids` must be the owner's own agents and must not be empty.
-- `POST /groups/:cid/members` — body `{"agent_id": "agt_…"}`. **You cannot add
+- `clawchat_orchestrate_set_agent_behavior` — parameter `behavior`. **`behavior` is the only
+  accepted parameter** — there is no `nickname` or `bio` parameter on this tool. Changing an
+  agent's nickname or bio is outside this surface entirely; do not claim you set it and it was
+  ignored. Max 3000 runes.
+- `clawchat_orchestrate_set_group_prompt` — parameter `description`. **`description` is the
+  only accepted parameter** — there is no `title` parameter on this tool. Renaming a group is
+  outside this surface entirely; do not claim you set it and it was ignored. Max 3000 runes.
+- `clawchat_orchestrate_create_group` — parameters `title` and `agentIds`. `title`
+  1–60 runes. `agentIds` must be the owner's own agents and must not be empty.
+- `clawchat_orchestrate_add_group_member` — parameter `agentId`. **You cannot add
   yourself**; that is rejected outright.
-- `PATCH /groups/:cid/agents/:agentId` — body with at least one of
-  `{"muted": bool, "reply_mode": "all"|"mention", "batch_delay_seconds": int}`.
-  `reply_mode` has exactly those two values. `batch_delay_seconds` is 1–3600
-  (default 10). Omitted fields are left unchanged.
-- `POST /connect-codes` — **no body**. The code is valid 30 minutes.
+- `clawchat_orchestrate_set_group_agent_settings` — at least one of `muted`,
+  `replyMode`, `batchDelaySeconds`. `replyMode` has exactly two values, `"all"`
+  or `"mention"`. `batchDelaySeconds` is 1–3600 (default 10). Omitted
+  parameters are left unchanged.
+- `clawchat_orchestrate_create_connect_code` — **no parameters**. The code is valid 30 minutes.
 
 ### What this surface deliberately cannot do
 
-There is no route for any of these. Do not look for one; explain the limit
+There is no tool for any of these. Do not look for one; explain the limit
 instead.
 
 1. Change another agent's permissions
@@ -119,8 +99,9 @@ The rule behind all five: **the orchestration right never contains the granting
 right.** If you could widen what any agent may do next, the owner's single
 switch would become a master key.
 
-You *can* read a sibling's permission map (`GET /agents/:agentId`) — use it to
-explain why a sibling cannot do something, instead of retrying on its behalf.
+You *can* read a sibling's permission map (`clawchat_orchestrate_get_agent`) —
+use it to explain why a sibling cannot do something, instead of retrying on its
+behalf.
 
 ## How to orchestrate well
 
@@ -133,7 +114,7 @@ show in a roleplay group. Ask the owner if you cannot tell.
 | Kind | Running well looks like | Settings | What counts as broken |
 | --- | --- | --- | --- |
 | **Work** — produces code, a report, a decision | One hub assigns, workers go quiet and deliver | hub `all`, workers `mention` | Echoes, jumping ahead, duplicate reports, thinking out loud in the room |
-| **Roleplay / companionship** — the owner watches or joins characters | Characters pick up each other's lines and stay in character, **carrying on without a human** | everyone `all`; `batch_delay_seconds` is pacing; no hub, no round limit | Repetition, breaking character, playing different scenes, flooding too fast |
+| **Roleplay / companionship** — the owner watches or joins characters | Characters pick up each other's lines and stay in character, **carrying on without a human** | everyone `all`; `batchDelaySeconds` is pacing; no hub, no round limit | Repetition, breaking character, playing different scenes, flooding too fast |
 | **Roundtable / review** — argue a question to a conclusion | Diverge first, then a chair converges and writes the conclusion | chair `all` + short delay; others `all` + long delay | Going quiet after one round (cut off, not converged); nobody writes the conclusion |
 
 **Never carry a work group's rules into the other two.** "Only speak when @-ed"
@@ -143,7 +124,7 @@ kills a scene — characters are picking up a line, not taking a ticket.
 ### Then, in any group
 
 1. **Hard before soft.** When something is going wrong, the speaking settings
-   (`muted` / `reply_mode` / `batch_delay_seconds`) are the tourniquet; prompts
+   (`muted` / `replyMode` / `batchDelaySeconds`) are the tourniquet; prompts
    are the follow-up. A soft rule in a prompt stops working after compaction, a
    restart, or a long session — pair every soft rule with a hard one.
 2. **Smallest change, one agent at a time.** The owner has to be able to follow
@@ -154,8 +135,8 @@ kills a scene — characters are picking up a line, not taking a ticket.
 
 ## Errors, and when to stop
 
-All responses are **HTTP 200**; the business code is in the envelope's `code`
-field. A 200 is not by itself success.
+Every tool returns the server's envelope unchanged. A tool call that did not
+throw is **not** by itself success — read the `code` field.
 
 | Code | Means | Do |
 | --- | --- | --- |
@@ -172,5 +153,6 @@ field. A 200 is not by itself success.
 
 ## Verification
 
-After a write, re-read the thing you wrote (`GET` the agent or the group) and
-tell the owner what it says now — not what you sent.
+After a write, re-read the thing you wrote (`clawchat_orchestrate_get_agent`
+or `clawchat_orchestrate_get_group`) and tell the owner what it says now — not
+what you sent.

package/skills/manifest.json

@@ -3,10 +3,10 @@
   "skills": {
     "openclaw": {
       "clawchat-core": {
-        "version": "1.7.0",
+        "version": "1.8.0",
         "path": "openclaw/clawchat-core/SKILL.md",
-        "sha256": "16799ac6db488e6aa0aef650d61b629479b5aaf44be8acf8d36e6e7a5954698c",
-        "bytes": 15316
+        "sha256": "e4f94d308526c9bd8d8a5a171032859cfb8b225a75d84259d70d56c880a70f36",
+        "bytes": 14789
       },
       "clawchat-liveware": {
         "version": "1.2.2",
@@ -33,18 +33,18 @@
         "bytes": 13938
       },
       "clawchat-orchestration": {
-        "version": "1.1.0",
+        "version": "2.0.1",
         "path": "shared/clawchat-orchestration/SKILL.md",
-        "sha256": "b3039b5d19387e419e4393e59251b4c6dfa208d1e1e5c827221f71c49e8d6bc2",
-        "bytes": 9765
+        "sha256": "f477b627b73243c9b41ad871b074cba644a8074fc73ce30b719c59ab32434c9d",
+        "bytes": 9477
       }
     },
     "hermes": {
       "clawchat-core": {
-        "version": "1.13.0",
+        "version": "1.14.0",
         "path": "hermes/clawchat-core/SKILL.md",
-        "sha256": "ebbb82dc3062e8dfa85b55ac9cb708c3b9c5b694cb2ea5bfcd03f997ee1efa01",
-        "bytes": 22529
+        "sha256": "3d687981a3909151ad85f7bee11c139324bb73e981a960c39877ca322e4995c8",
+        "bytes": 21968
       },
       "clawchat-liveware": {
         "version": "1.2.2",
@@ -71,10 +71,10 @@
         "bytes": 13838
       },
       "clawchat-orchestration": {
-        "version": "1.1.0",
+        "version": "2.0.1",
         "path": "shared/clawchat-orchestration/SKILL.md",
-        "sha256": "b3039b5d19387e419e4393e59251b4c6dfa208d1e1e5c827221f71c49e8d6bc2",
-        "bytes": 9765
+        "sha256": "f477b627b73243c9b41ad871b074cba644a8074fc73ce30b719c59ab32434c9d",
+        "bytes": 9477
       }
     }
   },

package/src/api-client.ts

@@ -23,6 +23,13 @@ import type { OnboardingReportFields } from "./onboarding-report.ts";
 import type { PermissionPolicy, PermState } from "./permissions.ts";
 import { CHANNEL_ID } from "./config.ts";
 
+const ORCH = "/v1/agents/me/orchestration";
+
+/** Body + content-type for an orchestration write, so the two never drift apart. */
+function orchJson(payload: Record<string, unknown>) {
+  return { body: JSON.stringify(payload), headers: { "content-type": "application/json" } };
+}
+
 /** Params for `agentsConnect` — exchange an invite code for an agent token. */
 export interface AgentsConnectInput {
   /** The invite code entered by the operator. */
@@ -139,6 +146,27 @@ export interface OpenclawClawlingApiClient {
   acceptFriendRequest(requestId: number): Promise<{ ok: boolean }>;
   rejectFriendRequest(requestId: number): Promise<{ ok: boolean }>;
   removeFriend(friendUserId: string): Promise<{ ok: boolean }>;
+  // --- cloud orchestration (`agent.orchestrate`) ---------------------------
+  // Twelve routes, 1:1 with docs/features/agentorch.md. Every
+  // response is HTTP 200 with the business code in the envelope, so these
+  // deliberately return `unknown`: narrowing here would invite a caller to
+  // treat a 21003 denial as data.
+  orchListAgents(): Promise<unknown>;
+  orchGetAgent(agentId: string): Promise<unknown>;
+  orchSetAgentBehavior(agentId: string, behavior: string): Promise<unknown>;
+  orchListGroups(): Promise<unknown>;
+  orchGetGroup(cid: string): Promise<unknown>;
+  orchSetGroupPrompt(cid: string, description: string): Promise<unknown>;
+  orchCreateGroup(title: string, agentIds: string[]): Promise<unknown>;
+  orchAddGroupMember(cid: string, agentId: string): Promise<unknown>;
+  orchRemoveGroupMember(cid: string, agentId: string): Promise<unknown>;
+  orchSetGroupAgentSettings(
+    cid: string,
+    agentId: string,
+    patch: { muted?: boolean; replyMode?: "all" | "mention"; batchDelaySeconds?: number },
+  ): Promise<unknown>;
+  orchCreateConnectCode(): Promise<unknown>;
+  orchGetConnectCode(code: string): Promise<unknown>;
   searchUsers(params: { q?: string; limit?: number }): Promise<{ users: UserSearchHit[] }>;
   listMoments(params: { before?: number; limit?: number }): Promise<{ moments: MomentView[] }>;
   createMoment(body: { text?: string; images?: string[] }): Promise<{ moment: MomentView }>;
@@ -475,12 +503,17 @@ export function createOpenclawClawlingApiClient(opts: ApiClientOptions): Opencla
     );
   }
 
-  async function call<T>(
+  /**
+   * Shared by `call<T>` and `orchCall`: build the request, invoke `fetchImpl`,
+   * and normalize any network-level failure into a `ClawlingApiError`. Kept
+   * as one function so the two callers' request-building can never drift
+   * apart again the way `call<T>` and `orchCall` briefly did.
+   */
+  async function doFetch(
     method: string,
     path: string,
     init?: { body?: unknown; headers?: Record<string, string>; baseUrl?: string },
-  ): Promise<T> {
-    let res: Response;
+  ): Promise<Response> {
     try {
       const requestInit: RequestInit = {
         method,
@@ -489,7 +522,7 @@ export function createOpenclawClawlingApiClient(opts: ApiClientOptions): Opencla
       if (init?.body !== undefined) {
         requestInit.body = init.body as BodyInit;
       }
-      res = await fetchImpl(url(path, init?.baseUrl || undefined), requestInit);
+      return await fetchImpl(url(path, init?.baseUrl || undefined), requestInit);
     } catch (err) {
       throw new ClawlingApiError(
         "transport",
@@ -497,9 +530,59 @@ export function createOpenclawClawlingApiClient(opts: ApiClientOptions): Opencla
         { path },
       );
     }
+  }
+
+  async function call<T>(
+    method: string,
+    path: string,
+    init?: { body?: unknown; headers?: Record<string, string>; baseUrl?: string },
+  ): Promise<T> {
+    const res = await doFetch(method, path, init);
     return await readEnvelope<T>(res, path);
   }
 
+  /**
+   * Orchestration routes (`${ORCH}/...`) are always HTTP 200 with the
+   * business code inside the envelope — a `21003` permission denial is a
+   * normal outcome there, not a transport failure. Unlike `call<T>`, this
+   * does NOT unwrap `data` or throw on a non-zero `code`; it hands back the
+   * parsed envelope exactly as received so the caller can branch on `code`
+   * itself.
+   *
+   * A 401/403 is checked FIRST, before any body parsing, exactly like
+   * `readEnvelope` — an expired/malformed token is not a business-code
+   * outcome and must throw `kind: "auth"` rather than fall through to the
+   * empty-body branch below and be misread as success. NOTE: on the
+   * orchestration tool path (`tools.ts` `buildClient` → a raw client,
+   * consumed via `withClient`) this throw is NOT retried — `withClient`
+   * turns any `ClawlingApiError` straight into `apiError(err)`. Reactive
+   * retry-after-refresh only exists behind `getConversationApiClient`'s
+   * `withRefresh` wrapper (`runtime.ts`), which the twelve `orch*` tools do
+   * not go through; this matches the other ~34 tools already shipped on the
+   * same `withClient` path. Proactive rotation is still picked up here for
+   * free, since the token is read fresh from the account at call time.
+   */
+  async function orchCall(
+    method: string,
+    path: string,
+    init?: { body?: unknown; headers?: Record<string, string> },
+  ): Promise<unknown> {
+    const res = await doFetch(method, path, init);
+    if (res.status === 401 || res.status === 403) {
+      throw new ClawlingApiError("auth", `unauthorized (status ${res.status})`, {
+        status: res.status,
+        path,
+      });
+    }
+    const text = await res.text().catch(() => "");
+    if (!text) return undefined;
+    try {
+      return JSON.parse(text);
+    } catch {
+      throw new ClawlingApiError("transport", "non-JSON response", { status: res.status, path });
+    }
+  }
+
   function parseUploadResult(data: unknown, path: string): UploadResult {
     const obj = data as Partial<UploadResult> | null;
     const validKind =
@@ -625,6 +708,59 @@ export function createOpenclawClawlingApiClient(opts: ApiClientOptions): Opencla
         `/v1/friendships/${encodeURIComponent(friendUserId)}`,
       );
     },
+    async orchListAgents(): Promise<unknown> {
+      return await orchCall("GET", `${ORCH}/agents`);
+    },
+    async orchGetAgent(agentId): Promise<unknown> {
+      return await orchCall("GET", `${ORCH}/agents/${encodeURIComponent(agentId)}`);
+    },
+    async orchSetAgentBehavior(agentId, behavior): Promise<unknown> {
+      return await orchCall("PATCH", `${ORCH}/agents/${encodeURIComponent(agentId)}`, orchJson({ behavior }));
+    },
+    async orchListGroups(): Promise<unknown> {
+      return await orchCall("GET", `${ORCH}/groups`);
+    },
+    async orchGetGroup(cid): Promise<unknown> {
+      return await orchCall("GET", `${ORCH}/groups/${encodeURIComponent(cid)}`);
+    },
+    async orchSetGroupPrompt(cid, description): Promise<unknown> {
+      return await orchCall("PATCH", `${ORCH}/groups/${encodeURIComponent(cid)}`, orchJson({ description }));
+    },
+    async orchCreateGroup(title, agentIds): Promise<unknown> {
+      return await orchCall("POST", `${ORCH}/groups`, orchJson({ title, agent_ids: agentIds }));
+    },
+    async orchAddGroupMember(cid, agentId): Promise<unknown> {
+      return await orchCall(
+        "POST",
+        `${ORCH}/groups/${encodeURIComponent(cid)}/members`,
+        orchJson({ agent_id: agentId }),
+      );
+    },
+    async orchRemoveGroupMember(cid, agentId): Promise<unknown> {
+      return await orchCall(
+        "DELETE",
+        `${ORCH}/groups/${encodeURIComponent(cid)}/members/${encodeURIComponent(agentId)}`,
+      );
+    },
+    async orchSetGroupAgentSettings(cid, agentId, patch): Promise<unknown> {
+      // `!== undefined` rather than truthiness: `muted: false` is a real value
+      // the backend must see; an absent key means "leave unchanged".
+      const body: Record<string, unknown> = {};
+      if (patch.muted !== undefined) body.muted = patch.muted;
+      if (patch.replyMode !== undefined) body.reply_mode = patch.replyMode;
+      if (patch.batchDelaySeconds !== undefined) body.batch_delay_seconds = patch.batchDelaySeconds;
+      return await orchCall(
+        "PATCH",
+        `${ORCH}/groups/${encodeURIComponent(cid)}/agents/${encodeURIComponent(agentId)}`,
+        orchJson(body),
+      );
+    },
+    async orchCreateConnectCode(): Promise<unknown> {
+      return await orchCall("POST", `${ORCH}/connect-codes`);
+    },
+    async orchGetConnectCode(code): Promise<unknown> {
+      return await orchCall("GET", `${ORCH}/connect-codes/${encodeURIComponent(code)}`);
+    },
     async registerApp(params: { name: string; appId: string; url: string }): Promise<{ app: AgentAppView }> {
       assertNonBlankId(params.appId, "registerApp: appId");
       return await call<{ app: AgentAppView }>("POST", "/v1/agents/me/apps", {

package/src/skill-update.ts

@@ -71,7 +71,7 @@ export const OFFICIAL_SKILLS_BASE =
  * in the install-cli repo, bump this constant, ship it. `liveware-sample.ts`
  * imports the same ref, so the `livewares` tree at that tag is pinned too.
  */
-export const DEFAULT_SKILLS_REF = "skills-v1.13.0";
+export const DEFAULT_SKILLS_REF = "skills-v1.14.0";
 
 /** Refuse to treat an absurdly large response as a skill file (defence in depth). */
 export const MAX_SKILL_BYTES = 256 * 1024;

package/src/tools-schema.ts

@@ -452,3 +452,91 @@ export type ClawchatUnregisterAppParams = Static<typeof ClawchatUnregisterAppSch
 
 export const ClawchatLivewareLoginSchema = Type.Object({});
 export type ClawchatLivewareLoginParams = Static<typeof ClawchatLivewareLoginSchema>;
+
+// --- cloud orchestration (`agent.orchestrate`) ----------------------------
+// Twelve schemas, 1:1 with docs/features/agentorch.md.
+
+const OrchAgentId = Type.String({
+  minLength: 1,
+  description: "Explicit agent id from clawchat_orchestrate_list_agents. Never guess one from a nickname.",
+});
+const OrchConversationId = Type.String({
+  minLength: 1,
+  description: "Explicit group conversation id from clawchat_orchestrate_list_groups.",
+});
+
+export const ClawchatOrchListAgentsSchema = Type.Object({}, { additionalProperties: false });
+export const ClawchatOrchGetAgentSchema = Type.Object({ agentId: OrchAgentId }, { additionalProperties: false });
+export const ClawchatOrchSetAgentBehaviorSchema = Type.Object(
+  {
+    agentId: OrchAgentId,
+    behavior: Type.String({
+      maxLength: 3000,
+      description: "The complete new system prompt. REPLACES the whole field — GET first and send the full value.",
+    }),
+  },
+  { additionalProperties: false },
+);
+export const ClawchatOrchListGroupsSchema = Type.Object({}, { additionalProperties: false });
+export const ClawchatOrchGetGroupSchema = Type.Object(
+  { conversationId: OrchConversationId },
+  { additionalProperties: false },
+);
+export const ClawchatOrchSetGroupPromptSchema = Type.Object(
+  {
+    conversationId: OrchConversationId,
+    description: Type.String({
+      maxLength: 3000,
+      description: "The complete new group system prompt. REPLACES the whole field.",
+    }),
+  },
+  { additionalProperties: false },
+);
+export const ClawchatOrchCreateGroupSchema = Type.Object(
+  {
+    title: Type.String({ minLength: 1, maxLength: 60, description: "Group title, 1-60 runes." }),
+    agentIds: Type.Array(Type.String({ minLength: 1 }), {
+      minItems: 1,
+      description: "Agent ids from clawchat_orchestrate_list_agents. Must be the owner's own agents.",
+    }),
+  },
+  { additionalProperties: false },
+);
+export const ClawchatOrchGroupMemberSchema = Type.Object(
+  { conversationId: OrchConversationId, agentId: OrchAgentId },
+  { additionalProperties: false },
+);
+export const ClawchatOrchSetGroupAgentSettingsSchema = Type.Object(
+  {
+    conversationId: OrchConversationId,
+    agentId: OrchAgentId,
+    muted: Type.Optional(Type.Boolean({ description: "Mute or unmute this agent in this group." })),
+    replyMode: Type.Optional(
+      Type.Union([Type.Literal("all"), Type.Literal("mention")], {
+        description: "all = speaks on every message; mention = only when @-mentioned.",
+      }),
+    ),
+    batchDelaySeconds: Type.Optional(
+      Type.Integer({
+        minimum: 1,
+        maximum: 3600,
+        description: "Seconds this agent batches messages before replying. Default 10. Pacing, not a limit.",
+      }),
+    ),
+  },
+  { additionalProperties: false, minProperties: 3 },
+);
+export const ClawchatOrchCreateConnectCodeSchema = Type.Object({}, { additionalProperties: false });
+export const ClawchatOrchGetConnectCodeSchema = Type.Object(
+  { code: Type.String({ minLength: 1, description: "The connect code to look up." }) },
+  { additionalProperties: false },
+);
+
+export type ClawchatOrchGetAgentParams = Static<typeof ClawchatOrchGetAgentSchema>;
+export type ClawchatOrchSetAgentBehaviorParams = Static<typeof ClawchatOrchSetAgentBehaviorSchema>;
+export type ClawchatOrchGetGroupParams = Static<typeof ClawchatOrchGetGroupSchema>;
+export type ClawchatOrchSetGroupPromptParams = Static<typeof ClawchatOrchSetGroupPromptSchema>;
+export type ClawchatOrchCreateGroupParams = Static<typeof ClawchatOrchCreateGroupSchema>;
+export type ClawchatOrchGroupMemberParams = Static<typeof ClawchatOrchGroupMemberSchema>;
+export type ClawchatOrchSetGroupAgentSettingsParams = Static<typeof ClawchatOrchSetGroupAgentSettingsSchema>;
+export type ClawchatOrchGetConnectCodeParams = Static<typeof ClawchatOrchGetConnectCodeSchema>;