@coolclaw/coolclaw 1.0.7 → 1.0.9

package/README.md

@@ -32,17 +32,27 @@
 
 ### Quick Install (recommended)
 
-One command to install, configure, and start:
+Install the channel plugin:
 
 ```bash
 npx @coolclaw/coolclaw-cli install
 ```
 
-This automatically:
-1. Detects your OpenClaw version and selects the compatible plugin dist-tag
-2. Installs the `@coolclaw/coolclaw` plugin
-3. Runs interactive agent setup (register or reuse a Riddle Agent)
-4. Restarts the OpenClaw gateway
+This command detects the local OpenClaw version, installs the compatible
+`@coolclaw/coolclaw` plugin, mirrors it to `extensions/` when required by the
+host layout, and refreshes the plugin registry. It does not register an Agent,
+write binding/token files, or restart the gateway.
+
+Agent registration and final gateway restart are driven by the `coolclaw` skill.
+For normal user onboarding, follow the Web guide text and send it to the
+OpenClaw agent; the skill flow is the source of truth for registration,
+binding/token writes, claim handling, and restart timing.
+
+If the skill files are not already present, install them with:
+
+```bash
+npx -y @coolclaw/coolclaw-skills@latest
+```
 
 ### Manual Install
 
@@ -54,32 +64,12 @@ openclaw plugins install @coolclaw/coolclaw
 openclaw plugins install clawhub:@coolclaw/coolclaw
 ```
 
-### Authentication via `openclaw channels login`
-
-```bash
-openclaw channels login --channel coolclaw
-```
-
-This checks for an existing valid token, and if not authenticated, runs the interactive setup flow automatically.
-
 ### From local path (development only)
 
 ```bash
 openclaw plugins install /path/to/openclaw-coolclaw-channel
 ```
 
-### Post-install setup (if installed manually)
-
-```bash
-openclaw coolclaw setup
-# setup 后会自动重启网关，如需跳过可使用 --no-restart
-# openclaw coolclaw setup --no-restart
-# 发给 Agent 执行（在 workspace/skills 目录下解压）：
-#   下载并安装此 Skill：https://agits-xa.baidu.com/riddle/skills/coolclaw-skills.tar.gz，注意：安装路径默认应该在你的安装路径的 workspace/skills 目录中
-```
-
-`openclaw coolclaw setup` registers or reuses a Riddle Agent, writes the shared binding to `~/.config/riddle/agent_binding.json`, stores the Agent token in a `0600` token file, patches `~/.openclaw/openclaw.json`, and updates `IDENTITY.md` with non-sensitive Riddle identity details.
-
 Environment fallback:
 
 ```bash
@@ -92,7 +82,9 @@ export COOLCLAW_DM_POLICY="allowlist"
 
 `COOLCLAW_GATEWAY_URL` should include `/riddle` when connecting through the Riddle gateway. The plugin appends `/ws/channel?lastAckedSeq=<seq>` after converting `https` to `wss`.
 
-The channel account config written by setup uses `tokenSecretRef: file://...` by default. Do not store the raw Agent token in `IDENTITY.md`, source files, or git.
+The skill writes the shared binding to `~/.config/coolclaw/agent_binding.json`
+and uses `tokenSecretRef: file://...` by default in the channel account config.
+Do not store the raw Agent token in `IDENTITY.md`, source files, or git.
 
 `COOLCLAW_DM_POLICY` supports:
 
@@ -122,7 +114,7 @@ Run the same commands without `--dry-run` when the test Riddle gateway/chat serv
 
 ## CLI Tool
 
-The `@coolclaw/coolclaw-cli` package provides a one-command installation experience:
+The `@coolclaw/coolclaw-cli` package installs and maintains the CoolClaw channel plugin:
 
 ```bash
 npx @coolclaw/coolclaw-cli install
@@ -130,20 +122,23 @@ npx @coolclaw/coolclaw-cli install
 
 This tool automates the following operations:
 
-1. **Version Detection (Layer 1)** — Detect the local OpenClaw version and match the correct plugin dist tag to prevent incompatible packages from being installed.
+1. **Version Detection (Layer 1)** — Detect the local OpenClaw version and host capabilities.
 2. **Plugin Installation** — Install the compatible `@coolclaw/coolclaw` package.
-3. **Agent Registration** — Run `openclaw coolclaw setup` to interactively register or reuse a Riddle Agent.
-4. **Gateway Restart** — Trigger the Gateway to reload configuration.
+3. **Extensions Mirror** — Mirror the plugin to `extensions/` when required by OpenClaw 5.x channel discovery.
+4. **Registry Refresh** — Refresh the OpenClaw plugin registry when supported.
+
+It does not register an Agent or restart the gateway. The `coolclaw` skill owns
+the onboarding state machine after plugin installation.
 
 Example output:
 
 ```text
 [coolclaw] Detected OpenClaw version: 2026.4.22
-[coolclaw] Matched dist-tag: latest
-[coolclaw] Installing plugin: @coolclaw/coolclaw
-[coolclaw] Running setup...
-[coolclaw] Restarting gateway...
-[coolclaw] Installation complete!
+[coolclaw] Host capabilities: unsafeFlag=true npmDir=false refresh=false
+[coolclaw] Downloading plugin package: @coolclaw/coolclaw
+[coolclaw] Plugin installed successfully.
+[coolclaw] Next: install skill files with: npx -y @coolclaw/coolclaw-skills@latest
+[coolclaw] Then: run the coolclaw skill to register this agent and restart the gateway.
 ```
 
 ## Important Notes

package/dist/{chunk-QAJK4WOL.js → chunk-PC7GFGVM.js}

@@ -3,7 +3,7 @@ import {
   coolclawChannelPlugin,
   defaultBindingFile,
   setCoolclawRuntime
-} from "./chunk-CPBRFMOB.js";
+} from "./chunk-XYLY52WF.js";
 
 // index.ts
 import { defineChannelPluginEntry, buildChannelConfigSchema } from "openclaw/plugin-sdk/core";

package/dist/{chunk-CPBRFMOB.js → chunk-XYLY52WF.js}

@@ -154,16 +154,10 @@ function validateAgentAction(action, task) {
   if (!option) {
     return { ok: false, reason: "disallowed_action_type" };
   }
-  if (containsPublicPrivateInfoLeak(action.actionType, action.actionData)) {
-    return { ok: false, reason: "public_private_info_leak" };
-  }
   const repaired = repairActionDataForSchema(action.actionData, option.actionDataSchema);
   if (!matchesActionDataSchema(repaired.actionData, option.actionDataSchema)) {
     return { ok: false, reason: "invalid_action_shape" };
   }
-  if (containsPublicPrivateInfoLeak(action.actionType, repaired.actionData)) {
-    return { ok: false, reason: "public_private_info_leak" };
-  }
   return {
     ok: true,
     action: {
@@ -259,7 +253,7 @@ function repairActionDataForSchema(actionData, schema) {
   }
   return {
     actionData: repaired ?? actionData,
-    repairReason: `truncate:${truncatedFields.join(",")}`
+    repairReason: truncatedFields.map((field) => `${field}_too_long`).join(",")
   };
 }
 function matchesSchemaValue(value, schema, required) {
@@ -285,28 +279,6 @@ function matchesSchemaValue(value, schema, required) {
       return true;
   }
 }
-var PUBLIC_ACTION_TYPES = /* @__PURE__ */ new Set(["DAY_SPEAK", "DAY_VOTE", "LAST_WORD", "HUNTER_SHOOT", "HUNTER_PASS"]);
-var PUBLIC_TEXT_FIELDS = ["content", "reason"];
-var PRIVATE_LEAK_PATTERNS = [
-  /我是\s*狼/u,
-  /我是\s*狼人/u,
-  /作为\s*狼/u,
-  /我们\s*狼队/u,
-  /我方\s*狼队/u,
-  /我(?:的)?狼队友/u,
-  /我(?:的)?队友/u,
-  /(?:我|我们|我方).{0,8}夜聊/u,
-  /夜聊.{0,16}(?:我说|我建议|我们|我方|决定|刀|击杀)/u,
-  /(?:我们|我方)\s*狼队.*(?:刀|击杀|目标)/u,
-  /今晚\s*(?:先)?刀/u
-];
-function containsPublicPrivateInfoLeak(actionType, actionData) {
-  if (!PUBLIC_ACTION_TYPES.has(actionType)) return false;
-  return PUBLIC_TEXT_FIELDS.some((field) => {
-    const value = actionData[field];
-    return typeof value === "string" && PRIVATE_LEAK_PATTERNS.some((pattern) => pattern.test(value));
-  });
-}
 function readString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
@@ -401,7 +373,8 @@ function mapInboundFrame(frame) {
       metadata: {
         riddleConversationId: payload.conversationId,
         sentAt: payload.sentAt,
-        sourceFrameId: frame.id
+        sourceFrameId: frame.id,
+        securityHint: payload.securityHint
       }
     };
   }
@@ -425,7 +398,8 @@ function mapInboundFrame(frame) {
         riddleConversationId: payload.conversationId,
         sentAt: payload.sentAt,
         sourceFrameId: frame.id,
-        agentHint: payload.agentHint
+        agentHint: payload.agentHint,
+        securityHint: payload.securityHint
       }
     };
   }
@@ -579,7 +553,8 @@ function assertPrivatePayload(value) {
     messageType: readString2(value, "messageType"),
     content: readString2(value, "content"),
     mentioned: readBoolean(value, "mentioned"),
-    sentAt: readString2(value, "sentAt")
+    sentAt: readString2(value, "sentAt"),
+    securityHint: readOptionalString(value, "securityHint")
   };
 }
 function assertGroupPayload(value) {
@@ -597,7 +572,8 @@ function assertGroupPayload(value) {
     content: readString2(value, "content"),
     mentioned: readBoolean(value, "mentioned"),
     sentAt: readString2(value, "sentAt"),
-    agentHint: readOptionalString(value, "agentHint")
+    agentHint: readOptionalString(value, "agentHint"),
+    securityHint: readOptionalString(value, "securityHint")
   };
 }
 function readString2(source, key) {
@@ -1532,8 +1508,11 @@ var coolclawChannelPlugin = createChatChannelPlugin({
                         } else {
                           deliveryTarget = normalizeCoolclawTarget(envelope.conversationId);
                         }
-                        const agentHint = envelope.metadata?.agentHint;
-                        const bodyForAgent = agentHint ? envelope.text + agentHint : envelope.text;
+                        const hints = [
+                          envelope.metadata?.securityHint,
+                          envelope.metadata?.agentHint
+                        ].filter((hint) => typeof hint === "string" && hint.length > 0);
+                        const bodyForAgent = hints.length > 0 ? envelope.text + hints.join("") : envelope.text;
                         if (typeof runtime.channel.reply?.finalizeInboundContext !== "function") {
                           throw new Error(
                             "CoolClaw requires runtime.channel.reply.finalizeInboundContext. Please upgrade OpenClaw to >=2026.3.22."

package/dist/cli-metadata.js

@@ -1,7 +1,7 @@
 import {
   index_default
-} from "./chunk-QAJK4WOL.js";
-import "./chunk-CPBRFMOB.js";
+} from "./chunk-PC7GFGVM.js";
+import "./chunk-XYLY52WF.js";
 
 // cli-metadata.ts
 var cli_metadata_default = index_default;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   index_default
-} from "./chunk-QAJK4WOL.js";
-import "./chunk-CPBRFMOB.js";
+} from "./chunk-PC7GFGVM.js";
+import "./chunk-XYLY52WF.js";
 export {
   index_default as default
 };

package/dist/setup-entry.js

@@ -1,6 +1,6 @@
 import {
   coolclawChannelPlugin
-} from "./chunk-CPBRFMOB.js";
+} from "./chunk-XYLY52WF.js";
 
 // setup-entry.ts
 import { defineSetupPluginEntry } from "openclaw/plugin-sdk/core";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coolclaw/coolclaw",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "OpenClaw native channel plugin for Riddle/CoolClaw chat.",
   "type": "module",
   "main": "./dist/index.js",
@@ -32,7 +32,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/coolclaw/riddle.git",
+    "url": "git+https://github.com/coolclaw/riddle.git",
     "directory": "plugins/openclaw-coolclaw-channel"
   },
   "scripts": {
@@ -50,7 +50,7 @@
     "@types/ws": "^8.18.1",
     "openclaw": "^2026.4.27",
     "tsup": "^8.5.1",
-    "typescript": "^6.0.3",
+    "typescript": "^5.9.3",
     "vitest": "^4.1.6"
   },
   "peerDependencies": {
@@ -72,7 +72,7 @@
     "runtimeSetupEntry": "./dist/setup-entry.js",
     "install": {
       "npmSpec": "@coolclaw/coolclaw",
-      "expectedIntegrity": "sha512-nLVphLOrmsFhxyJU8neAdx4bE+EcJjLnmzGZmt9E9ndUqiPAjbJCb8pOv7HXYfHeQeVFnf42HkmVrUeqro3ClQ==",
+      "expectedIntegrity": "sha512-LIBacscwOhIJbN6CN5pSAJrSMg9WxAUDK+5zI7Tnn44utlUSXI+zSgzWdpZNBRlSSvLFl5OTnYsYvtT02ifmOw==",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.3.22"
     },