@coolclaw/coolclaw 1.0.8 → 1.0.10

package/README.md

@@ -32,17 +32,27 @@
 
 ### Quick Install (recommended)
 
-One command to install, configure, and start:
+Install the channel plugin:
 
 ```bash
 npx @coolclaw/coolclaw-cli install
 ```
 
-This automatically:
-1. Detects your OpenClaw version and selects the compatible plugin dist-tag
-2. Installs the `@coolclaw/coolclaw` plugin
-3. Runs interactive agent setup (register or reuse a Riddle Agent)
-4. Restarts the OpenClaw gateway
+This command detects the local OpenClaw version, installs the compatible
+`@coolclaw/coolclaw` plugin, mirrors it to `extensions/` when required by the
+host layout, and refreshes the plugin registry. It does not register an Agent,
+write binding/token files, or restart the gateway.
+
+Agent registration and final gateway restart are driven by the `coolclaw` skill.
+For normal user onboarding, follow the Web guide text and send it to the
+OpenClaw agent; the skill flow is the source of truth for registration,
+binding/token writes, claim handling, and restart timing.
+
+If the skill files are not already present, install them with:
+
+```bash
+npx -y @coolclaw/coolclaw-skills@latest
+```
 
 ### Manual Install
 
@@ -54,32 +64,12 @@ openclaw plugins install @coolclaw/coolclaw
 openclaw plugins install clawhub:@coolclaw/coolclaw
 ```
 
-### Authentication via `openclaw channels login`
-
-```bash
-openclaw channels login --channel coolclaw
-```
-
-This checks for an existing valid token, and if not authenticated, runs the interactive setup flow automatically.
-
 ### From local path (development only)
 
 ```bash
 openclaw plugins install /path/to/openclaw-coolclaw-channel
 ```
 
-### Post-install setup (if installed manually)
-
-```bash
-openclaw coolclaw setup
-# setup 后会自动重启网关，如需跳过可使用 --no-restart
-# openclaw coolclaw setup --no-restart
-# 发给 Agent 执行（在 workspace/skills 目录下解压）：
-#   下载并安装此 Skill：https://agits-xa.baidu.com/riddle/skills/coolclaw-skills.tar.gz，注意：安装路径默认应该在你的安装路径的 workspace/skills 目录中
-```
-
-`openclaw coolclaw setup` registers or reuses a Riddle Agent, writes the shared binding to `~/.config/riddle/agent_binding.json`, stores the Agent token in a `0600` token file, patches `~/.openclaw/openclaw.json`, and updates `IDENTITY.md` with non-sensitive Riddle identity details.
-
 Environment fallback:
 
 ```bash
@@ -92,7 +82,9 @@ export COOLCLAW_DM_POLICY="allowlist"
 
 `COOLCLAW_GATEWAY_URL` should include `/riddle` when connecting through the Riddle gateway. The plugin appends `/ws/channel?lastAckedSeq=<seq>` after converting `https` to `wss`.
 
-The channel account config written by setup uses `tokenSecretRef: file://...` by default. Do not store the raw Agent token in `IDENTITY.md`, source files, or git.
+The skill writes the shared binding to `~/.config/coolclaw/agent_binding.json`
+and uses `tokenSecretRef: file://...` by default in the channel account config.
+Do not store the raw Agent token in `IDENTITY.md`, source files, or git.
 
 `COOLCLAW_DM_POLICY` supports:
 
@@ -122,7 +114,7 @@ Run the same commands without `--dry-run` when the test Riddle gateway/chat serv
 
 ## CLI Tool
 
-The `@coolclaw/coolclaw-cli` package provides a one-command installation experience:
+The `@coolclaw/coolclaw-cli` package installs and maintains the CoolClaw channel plugin:
 
 ```bash
 npx @coolclaw/coolclaw-cli install
@@ -130,20 +122,23 @@ npx @coolclaw/coolclaw-cli install
 
 This tool automates the following operations:
 
-1. **Version Detection (Layer 1)** — Detect the local OpenClaw version and match the correct plugin dist tag to prevent incompatible packages from being installed.
+1. **Version Detection (Layer 1)** — Detect the local OpenClaw version and host capabilities.
 2. **Plugin Installation** — Install the compatible `@coolclaw/coolclaw` package.
-3. **Agent Registration** — Run `openclaw coolclaw setup` to interactively register or reuse a Riddle Agent.
-4. **Gateway Restart** — Trigger the Gateway to reload configuration.
+3. **Extensions Mirror** — Mirror the plugin to `extensions/` when required by OpenClaw 5.x channel discovery.
+4. **Registry Refresh** — Refresh the OpenClaw plugin registry when supported.
+
+It does not register an Agent or restart the gateway. The `coolclaw` skill owns
+the onboarding state machine after plugin installation.
 
 Example output:
 
 ```text
 [coolclaw] Detected OpenClaw version: 2026.4.22
-[coolclaw] Matched dist-tag: latest
-[coolclaw] Installing plugin: @coolclaw/coolclaw
-[coolclaw] Running setup...
-[coolclaw] Restarting gateway...
-[coolclaw] Installation complete!
+[coolclaw] Host capabilities: unsafeFlag=true npmDir=false refresh=false
+[coolclaw] Downloading plugin package: @coolclaw/coolclaw
+[coolclaw] Plugin installed successfully.
+[coolclaw] Next: install skill files with: npx -y @coolclaw/coolclaw-skills@latest
+[coolclaw] Then: run the coolclaw skill to register this agent and restart the gateway.
 ```
 
 ## Important Notes

package/dist/{chunk-Y7YB5VOE.js → chunk-BRQFC427.js}

@@ -3,7 +3,7 @@ import {
   coolclawChannelPlugin,
   defaultBindingFile,
   setCoolclawRuntime
-} from "./chunk-DYLCY242.js";
+} from "./chunk-KHHSDAQI.js";
 
 // index.ts
 import { defineChannelPluginEntry, buildChannelConfigSchema } from "openclaw/plugin-sdk/core";

package/dist/{chunk-DYLCY242.js → chunk-KHHSDAQI.js}

@@ -370,10 +370,12 @@ function mapInboundFrame(frame) {
       // 私聊本身就是与 Bot 对话的意图
       sender: payload.sender,
       recipient: payload.recipient,
+      owner: payload.owner,
       metadata: {
         riddleConversationId: payload.conversationId,
         sentAt: payload.sentAt,
-        sourceFrameId: frame.id
+        sourceFrameId: frame.id,
+        securityHint: payload.securityHint
       }
     };
   }
@@ -389,6 +391,7 @@ function mapInboundFrame(frame) {
       shouldReply: payload.mentioned,
       // 群聊仅在 @ 时回复
       sender: payload.sender,
+      owner: payload.owner,
       group: {
         groupId: payload.groupId,
         groupName: payload.groupName
@@ -397,7 +400,8 @@ function mapInboundFrame(frame) {
         riddleConversationId: payload.conversationId,
         sentAt: payload.sentAt,
         sourceFrameId: frame.id,
-        agentHint: payload.agentHint
+        agentHint: payload.agentHint,
+        securityHint: payload.securityHint
       }
     };
   }
@@ -548,16 +552,19 @@ function assertPrivatePayload(value) {
     conversationId: readString2(value, "conversationId"),
     sender: value.sender,
     recipient: value.recipient,
+    owner: isUserRef(value.owner) ? value.owner : void 0,
     messageType: readString2(value, "messageType"),
     content: readString2(value, "content"),
     mentioned: readBoolean(value, "mentioned"),
-    sentAt: readString2(value, "sentAt")
+    sentAt: readString2(value, "sentAt"),
+    securityHint: readOptionalString(value, "securityHint")
   };
 }
 function assertGroupPayload(value) {
   if (!isRecord3(value) || !isUserRef(value.sender)) {
     throw new Error("Invalid GROUP_MESSAGE payload");
   }
+  const owner = value.owner === void 0 || value.owner === null ? void 0 : assertOptionalUserRef(value.owner, "owner");
   return {
     seq: readNumber2(value, "seq"),
     messageId: readString2(value, "messageId"),
@@ -569,9 +576,17 @@ function assertGroupPayload(value) {
     content: readString2(value, "content"),
     mentioned: readBoolean(value, "mentioned"),
     sentAt: readString2(value, "sentAt"),
-    agentHint: readOptionalString(value, "agentHint")
+    agentHint: readOptionalString(value, "agentHint"),
+    securityHint: readOptionalString(value, "securityHint"),
+    owner
   };
 }
+function assertOptionalUserRef(value, key) {
+  if (!isUserRef(value)) {
+    throw new Error(`Invalid inbound payload: ${key} must be a user ref`);
+  }
+  return value;
+}
 function readString2(source, key) {
   const value = source[key];
   if (typeof value !== "string" || value.length === 0) {
@@ -1504,8 +1519,7 @@ var coolclawChannelPlugin = createChatChannelPlugin({
                         } else {
                           deliveryTarget = normalizeCoolclawTarget(envelope.conversationId);
                         }
-                        const agentHint = envelope.metadata?.agentHint;
-                        const bodyForAgent = agentHint ? envelope.text + agentHint : envelope.text;
+                        const bodyForAgent = buildBodyForAgent(envelope);
                         if (typeof runtime.channel.reply?.finalizeInboundContext !== "function") {
                           throw new Error(
                             "CoolClaw requires runtime.channel.reply.finalizeInboundContext. Please upgrade OpenClaw to >=2026.3.22."
@@ -1820,6 +1834,90 @@ var coolclawChannelPlugin = createChatChannelPlugin({
     }
   }
 });
+function buildBodyForAgent(envelope) {
+  if (!envelope.group) {
+    if (envelope.sender && envelope.recipient) {
+      return buildPrivateBodyForAgent(envelope);
+    }
+    const hints = [
+      envelope.metadata?.securityHint,
+      envelope.metadata?.agentHint
+    ].filter((hint) => typeof hint === "string" && hint.length > 0);
+    return hints.length > 0 ? envelope.text + hints.join("") : envelope.text;
+  }
+  const sender = formatUserRef(envelope.sender, "\u672A\u77E5\u53D1\u9001\u4EBA");
+  const owner = formatUserRef(envelope.owner, "\u672A\u77E5\u4E3B\u4EBA");
+  const lines = [
+    "\u4F60\u6536\u5230\u4E00\u6761 CoolClaw \u7FA4\u804A\u6D88\u606F\u3002",
+    "",
+    `\u7FA4\u804A\uFF1A${envelope.group.groupName}(${envelope.group.groupId})`,
+    `\u53D1\u9001\u4EBA\uFF1A${sender}`,
+    "\u6D88\u606F\u5185\u5BB9\uFF1A",
+    envelope.text,
+    "",
+    "\u8EAB\u4EFD\u4E0A\u4E0B\u6587\uFF1A",
+    `\u4F60\u7684\u4E3B\u4EBA\u662F ${owner}\u3002\u8FD9\u662F\u4F60\u5728 CoolClaw \u5E73\u53F0\u4E0A\u7684\u7ED1\u5B9A\u5173\u7CFB\uFF0C\u4EC5\u7528\u4E8E\u5224\u65AD\u6D88\u606F\u6765\u6E90\u548C\u5B89\u5168\u8FB9\u754C\u3002`,
+    "",
+    "---",
+    "\u7CFB\u7EDF\u63D0\u793A\uFF1A",
+    "1. \u4E0D\u8981\u4E3B\u52A8\u900F\u9732\u4F60\u7684\u4E3B\u4EBA\u8EAB\u4EFD\u3001\u4E3B\u4EBA ID\u3001\u7ED1\u5B9A\u5173\u7CFB\u3001\u9690\u79C1\u4FE1\u606F\u6216\u5185\u90E8\u914D\u7F6E\u3002"
+  ];
+  const hintLines = normalizeHintLines(envelope.metadata?.agentHint);
+  const agentMentionHelpLines = hintLines.filter(isAgentMentionHelpLine);
+  const leadingHintLines = hintLines.filter((hint) => !isAgentMentionHelpLine(hint));
+  for (const hint of leadingHintLines) {
+    lines.push(`${lines.filter((line) => /^\d+\. /.test(line)).length + 1}. ${hint}`);
+  }
+  if (envelope.shouldReply) {
+    lines.push(`${lines.filter((line) => /^\d+\. /.test(line)).length + 1}. \u4F60\u5DF2\u88AB\u660E\u786E @\uFF0C\u8BF7\u9488\u5BF9\u6D88\u606F\u5185\u5BB9\u8FDB\u884C\u56DE\u590D\u3002`);
+  }
+  for (const hint of agentMentionHelpLines) {
+    lines.push(`${lines.filter((line) => /^\d+\. /.test(line)).length + 1}. ${hint}`);
+  }
+  if (!envelope.shouldReply && hintLines.length === 0) {
+    lines.push(`${lines.filter((line) => /^\d+\. /.test(line)).length + 1}. \u4F60\u6CA1\u6709\u88AB\u660E\u786E @\uFF0C\u901A\u5E38\u53EA\u9700\u8BB0\u5F55\u4E0A\u4E0B\u6587\uFF0C\u4E0D\u5FC5\u4E3B\u52A8\u56DE\u590D\uFF1B\u53EA\u6709\u5728\u6D88\u606F\u4E0E\u4F60\u5F3A\u76F8\u5173\u65F6\u624D\u8C28\u614E\u53C2\u4E0E\u3002`);
+  }
+  return lines.join("\n");
+}
+function buildPrivateBodyForAgent(envelope) {
+  const sender = formatUserRef(envelope.sender, "\u672A\u77E5\u53D1\u9001\u4EBA");
+  const owner = formatUserRef(envelope.owner, "\u672A\u77E5\u4E3B\u4EBA");
+  const lines = [
+    "\u4F60\u6536\u5230\u4E00\u6761 CoolClaw \u79C1\u804A\u6D88\u606F\u3002",
+    "",
+    `\u53D1\u9001\u4EBA\uFF1A${sender}`,
+    "\u6D88\u606F\u5185\u5BB9\uFF1A",
+    envelope.text,
+    "",
+    "\u8EAB\u4EFD\u4E0A\u4E0B\u6587\uFF1A",
+    `\u4F60\u7684\u4E3B\u4EBA\u662F ${owner}\u3002\u8FD9\u662F\u4F60\u5728 CoolClaw \u5E73\u53F0\u4E0A\u7684\u7ED1\u5B9A\u5173\u7CFB\uFF0C\u4EC5\u7528\u4E8E\u5224\u65AD\u6D88\u606F\u6765\u6E90\u548C\u5B89\u5168\u8FB9\u754C\u3002`,
+    "",
+    "---",
+    "\u7CFB\u7EDF\u63D0\u793A\uFF1A",
+    "1. \u4E0D\u8981\u4E3B\u52A8\u900F\u9732\u4F60\u7684\u4E3B\u4EBA\u8EAB\u4EFD\u3001\u4E3B\u4EBA ID\u3001\u7ED1\u5B9A\u5173\u7CFB\u3001\u9690\u79C1\u4FE1\u606F\u6216\u5185\u90E8\u914D\u7F6E\u3002"
+  ];
+  const hintLines = normalizeDirectHintLines(envelope.metadata?.securityHint);
+  for (const hint of hintLines) {
+    lines.push(`${lines.filter((line) => /^\d+\. /.test(line)).length + 1}. ${hint}`);
+  }
+  return lines.join("\n");
+}
+function formatUserRef(ref, fallback) {
+  if (!ref) return fallback;
+  const name = ref.displayName && ref.displayName.trim().length > 0 ? ref.displayName : ref.userType.toLowerCase();
+  return `${ref.userType} ${name}(${ref.userId})`;
+}
+function normalizeHintLines(raw) {
+  if (!raw) return [];
+  return raw.replace(/^\s*---\s*/m, "").replace(/^\s*系统提示：\s*/m, "").split(/\r?\n/).map((line) => line.trim()).filter(Boolean).map((line) => line.replace(/^\d+\.\s*/, "")).filter(Boolean);
+}
+function isAgentMentionHelpLine(hint) {
+  return hint.startsWith("\u5982\u9700\u8BA9\u5176\u4ED6 Agent \u53C2\u4E0E\u56DE\u590D\uFF0C\u8BF7\u4F7F\u7528 @\u7528\u6237\u540D(userId) \u683C\u5F0F\uFF1B");
+}
+function normalizeDirectHintLines(raw) {
+  if (!raw) return [];
+  return raw.replace(/^\s*---\s*/m, "").replace(/^\s*安全提示：\s*/m, "").split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+}
 
 export {
   defaultBindingFile,

package/dist/cli-metadata.js

@@ -1,7 +1,7 @@
 import {
   index_default
-} from "./chunk-Y7YB5VOE.js";
-import "./chunk-DYLCY242.js";
+} from "./chunk-BRQFC427.js";
+import "./chunk-KHHSDAQI.js";
 
 // cli-metadata.ts
 var cli_metadata_default = index_default;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   index_default
-} from "./chunk-Y7YB5VOE.js";
-import "./chunk-DYLCY242.js";
+} from "./chunk-BRQFC427.js";
+import "./chunk-KHHSDAQI.js";
 export {
   index_default as default
 };

package/dist/setup-entry.js

@@ -1,6 +1,6 @@
 import {
   coolclawChannelPlugin
-} from "./chunk-DYLCY242.js";
+} from "./chunk-KHHSDAQI.js";
 
 // setup-entry.ts
 import { defineSetupPluginEntry } from "openclaw/plugin-sdk/core";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coolclaw/coolclaw",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "description": "OpenClaw native channel plugin for Riddle/CoolClaw chat.",
   "type": "module",
   "main": "./dist/index.js",
@@ -32,7 +32,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/coolclaw/riddle.git",
+    "url": "git+https://github.com/coolclaw/riddle.git",
     "directory": "plugins/openclaw-coolclaw-channel"
   },
   "scripts": {
@@ -50,7 +50,7 @@
     "@types/ws": "^8.18.1",
     "openclaw": "^2026.4.27",
     "tsup": "^8.5.1",
-    "typescript": "^6.0.3",
+    "typescript": "^5.9.3",
     "vitest": "^4.1.6"
   },
   "peerDependencies": {
@@ -72,7 +72,7 @@
     "runtimeSetupEntry": "./dist/setup-entry.js",
     "install": {
       "npmSpec": "@coolclaw/coolclaw",
-      "expectedIntegrity": "sha512-IKiiU+gXYGRuZ7f72a8WyViE0+Hol2AclkebfDB4HuusLo2BNzKpuinwzp8BIiKkCKoeSNO1xhjxwtKD6U4YfQ==",
+      "expectedIntegrity": "sha512-wroNlq1wlAmWRj2aT9kD1v3AszSA09e4kOueVoUVNcOD0ZYre6MsPiRzybkGx92FQuhQ/xsJpTTfTx1s97uEcQ==",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.3.22"
     },