@f2a/openclaw-f2a 0.2.20

package/dist/webhook-pusher.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * F2A Webhook Pusher
+ * 优先使用 webhook 推送任务到 OpenClaw，失败时退化为轮询
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookPusher = void 0;
+class WebhookPusher {
+    config;
+    consecutiveFailures = 0;
+    lastFailureTime = 0;
+    degradedMode = false;
+    logger;
+    // 连续失败后暂停推送一段时间
+    FAILURE_THRESHOLD = 3;
+    BASE_COOLDOWN_MS = 10000; // 基础冷却期 10 秒
+    MAX_COOLDOWN_MS = 300000; // 最大冷却期 5 分钟
+    constructor(config, logger) {
+        this.config = {
+            timeout: 5000,
+            enabled: true,
+            ...config
+        };
+        this.logger = logger || console;
+    }
+    /**
+     * 计算当前冷却期（指数退避）
+     */
+    getCooldownMs() {
+        if (this.consecutiveFailures <= this.FAILURE_THRESHOLD) {
+            return this.BASE_COOLDOWN_MS;
+        }
+        // 指数退避：冷却期随失败次数增加，但有上限
+        const multiplier = Math.pow(2, this.consecutiveFailures - this.FAILURE_THRESHOLD);
+        const cooldown = Math.min(this.BASE_COOLDOWN_MS * multiplier, this.MAX_COOLDOWN_MS);
+        this.logger.debug?.(`[F2A:Pusher] 冷却期计算: 失败次数=${this.consecutiveFailures}, 冷却期=${Math.round(cooldown / 1000)}秒`);
+        return cooldown;
+    }
+    /**
+     * 推送任务到 OpenClaw webhook
+     */
+    async pushTask(task) {
+        if (!this.config.enabled) {
+            return { success: false, error: 'Webhook push disabled' };
+        }
+        // 检查是否在冷却期
+        if (this.isInCooldown()) {
+            const remainingMs = this.getCooldownMs() - (Date.now() - this.lastFailureTime);
+            // 降级机制：冷却期内仍返回特殊结果，让调用方知道可以通过轮询处理
+            // 返回 degraded: true 表示处于降级模式，任务需要通过轮询机制处理
+            return {
+                success: false,
+                error: `In cooldown (${Math.round(remainingMs / 1000)}s remaining)`,
+                degraded: true
+            };
+        }
+        const start = Date.now();
+        try {
+            const response = await fetch(`${this.config.url}/hooks/agent`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Bearer ${this.config.token}`,
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    message: `F2A 远程任务: ${task.taskType || 'unknown'}`,
+                    name: 'F2A',
+                    sessionKey: `f2a:${task.taskId}`,
+                    wakeMode: 'now',
+                    deliver: false,
+                    timeoutSeconds: 120
+                }),
+                signal: AbortSignal.timeout(this.config.timeout)
+            });
+            const latency = Date.now() - start;
+            if (response.ok || response.status === 202) {
+                // 成功，重置失败计数和降级模式
+                this.consecutiveFailures = 0;
+                this.degradedMode = false;
+                return { success: true, latency };
+            }
+            // 失败
+            this.recordFailure();
+            return {
+                success: false,
+                error: `HTTP ${response.status}: ${response.statusText}`,
+                latency
+            };
+        }
+        catch (error) {
+            this.recordFailure();
+            return {
+                success: false,
+                error: error instanceof Error ? error.message : 'Unknown error',
+                latency: Date.now() - start
+            };
+        }
+    }
+    /**
+     * 批量推送任务
+     */
+    async pushTasks(tasks) {
+        const results = new Map();
+        for (const task of tasks) {
+            const result = await this.pushTask(task);
+            results.set(task.taskId, result);
+            // 如果进入冷却期，停止推送但标记剩余任务为可轮询
+            if (result.degraded) {
+                // 剩余任务标记为需要轮询
+                const remainingTasks = tasks.filter(t => !results.has(t.taskId));
+                for (const remaining of remainingTasks) {
+                    results.set(remaining.taskId, {
+                        success: false,
+                        error: 'Skipped due to cooldown',
+                        degraded: true
+                    });
+                }
+                break;
+            }
+        }
+        return results;
+    }
+    /**
+     * 检查是否在冷却期
+     */
+    isInCooldown() {
+        if (this.consecutiveFailures < this.FAILURE_THRESHOLD) {
+            return false;
+        }
+        const elapsed = Date.now() - this.lastFailureTime;
+        const cooldownMs = this.getCooldownMs();
+        return elapsed < cooldownMs;
+    }
+    /**
+     * 记录失败
+     */
+    recordFailure() {
+        this.consecutiveFailures++;
+        this.lastFailureTime = Date.now();
+        this.degradedMode = true;
+        if (this.consecutiveFailures >= this.FAILURE_THRESHOLD) {
+            const cooldownSec = Math.round(this.getCooldownMs() / 1000);
+            this.logger.warn(`[F2A:Pusher] 连续失败 ${this.consecutiveFailures} 次，进入 ${cooldownSec} 秒冷却期（降级模式启用）`);
+        }
+    }
+    /**
+     * 手动重置冷却期（用于外部干预）
+     */
+    resetCooldown() {
+        this.consecutiveFailures = 0;
+        this.lastFailureTime = 0;
+        this.degradedMode = false;
+        this.logger.info('[F2A:Pusher] 冷却期已手动重置');
+    }
+    /**
+     * 获取状态
+     */
+    getStatus() {
+        return {
+            enabled: this.config.enabled ?? true,
+            consecutiveFailures: this.consecutiveFailures,
+            inCooldown: this.isInCooldown(),
+            currentCooldownMs: this.isInCooldown() ? this.getCooldownMs() : 0,
+            degradedMode: this.degradedMode
+        };
+    }
+    /**
+     * 更新配置
+     */
+    updateConfig(config) {
+        this.config = { ...this.config, ...config };
+    }
+}
+exports.WebhookPusher = WebhookPusher;
+//# sourceMappingURL=webhook-pusher.js.map

package/dist/webhook-pusher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-pusher.js","sourceRoot":"","sources":["../src/webhook-pusher.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAqBH,MAAa,aAAa;IAChB,MAAM,CAAoB;IAC1B,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,GAAG,CAAC,CAAC;IACpB,YAAY,GAAG,KAAK,CAAC;IACrB,MAAM,CAAS;IAEvB,gBAAgB;IACC,iBAAiB,GAAG,CAAC,CAAC;IACtB,gBAAgB,GAAG,KAAK,CAAC,CAAC,aAAa;IACvC,eAAe,GAAG,MAAM,CAAC,CAAC,aAAa;IAExD,YAAY,MAAyB,EAAE,MAAe;QACpD,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,GAAG,MAAM;SACV,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAEpF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,4BAA4B,IAAI,CAAC,mBAAmB,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACjH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5D,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;YAE/E,kCAAkC;YAClC,0CAA0C;YAC1C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,gBAAgB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc;gBACnE,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,cAAc,EAAE;gBAC7D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;oBAC9C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,aAAa,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE;oBAClD,IAAI,EAAE,KAAK;oBACX,UAAU,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE;oBAChC,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,GAAG;iBACpB,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAQ,CAAC;aAClD,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAEnC,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3C,iBAAiB;gBACjB,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;gBAC7B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACpC,CAAC;YAED,KAAK;YACL,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;gBACxD,OAAO;aACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;gBAC/D,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAmB;QACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEjC,0BAA0B;YAC1B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,cAAc;gBACd,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjE,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;wBAC5B,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,yBAAyB;wBAChC,QAAQ,EAAE,IAAI;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,OAAO,GAAG,UAAU,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,mBAAmB,SAAS,WAAW,eAAe,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,SAAS;QAOP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI;YACpC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC/B,iBAAiB,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACjE,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;CACF;AAlMD,sCAkMC"}

package/dist/webhook-server.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Webhook Server
+ * 接收 F2A Node 的事件通知
+ */
+import type { DiscoverWebhookPayload, DelegateWebhookPayload, AgentCapability } from './types.js';
+/** Logger 接口 */
+interface Logger {
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+    debug?(message: string, ...args: unknown[]): void;
+}
+export interface WebhookHandler {
+    onDiscover(payload: DiscoverWebhookPayload): Promise<{
+        capabilities: AgentCapability[];
+        reputation?: number;
+    }>;
+    onDelegate(payload: DelegateWebhookPayload): Promise<{
+        accepted: boolean;
+        taskId: string;
+        reason?: string;
+    }>;
+    onStatus(): Promise<{
+        status: 'available' | 'busy' | 'offline';
+        load?: number;
+    }>;
+    onMessage?(payload: {
+        from: string;
+        content: string;
+        metadata?: Record<string, unknown>;
+        messageId: string;
+    }): Promise<{
+        response?: string;
+    }>;
+}
+export declare class WebhookServer {
+    private port;
+    private handler;
+    private server?;
+    private maxBodySize;
+    /** 允许的 CORS 来源列表 */
+    private allowedOrigins;
+    /** 日志记录器 */
+    private logger;
+    constructor(port: number, handler: WebhookHandler, options?: {
+        maxBodySize?: number;
+        allowedOrigins?: string[];
+        logger?: Logger;
+    });
+    /**
+     * 启动 Webhook 服务器
+     */
+    start(): Promise<void>;
+    /**
+     * 停止 Webhook 服务器
+     */
+    stop(): Promise<void>;
+    /**
+     * 处理 HTTP 请求
+     */
+    private handleRequest;
+    /**
+     * 解析请求体
+     * 带大小限制，防止 DoS 攻击
+     */
+    private parseBody;
+    getUrl(): string;
+}
+export {};
+//# sourceMappingURL=webhook-server.d.ts.map

package/dist/webhook-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-server.d.ts","sourceRoot":"","sources":["../src/webhook-server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAEV,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EAEhB,MAAM,YAAY,CAAC;AAEpB,gBAAgB;AAChB,UAAU,MAAM;IACd,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CACnD;AA6BD,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QACnD,YAAY,EAAE,eAAe,EAAE,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,UAAU,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QACnD,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IAEH,QAAQ,IAAI,OAAO,CAAC;QAClB,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,SAAS,CAAC,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACrH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAkC;IACjD,OAAO,CAAC,WAAW,CAAS;IAC5B,oBAAoB;IACpB,OAAO,CAAC,cAAc,CAAW;IACjC,YAAY;IACZ,OAAO,CAAC,MAAM,CAAS;gBAEX,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE;QAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAcD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B;;OAEG;YACW,aAAa;IAwF3B;;;OAGG;IACH,OAAO,CAAC,SAAS;IA8BjB,MAAM,IAAI,MAAM;CAGjB"}

package/dist/webhook-server.js

@@ -0,0 +1,191 @@
+"use strict";
+/**
+ * Webhook Server
+ * 接收 F2A Node 的事件通知
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookServer = void 0;
+const http_1 = require("http");
+/** 默认请求体大小限制 (64KB) - 元数据交换足够，防止 DoS */
+const DEFAULT_MAX_BODY_SIZE = 64 * 1024;
+/** 默认允许的 CORS 来源 */
+const DEFAULT_ALLOWED_ORIGINS = ['http://localhost'];
+/**
+ * P2 修复：生产环境 CORS 配置验证
+ */
+function validateCorsConfig(allowedOrigins, logger) {
+    const isProduction = process.env.NODE_ENV === 'production';
+    if (isProduction) {
+        // 检查是否使用默认配置
+        if (allowedOrigins.length === 1 && allowedOrigins[0] === 'http://localhost') {
+            logger.error('[F2A:Webhook] CORS configuration warning: Using default localhost origin in production!');
+            logger.error('[F2A:Webhook] Set F2A_WEBHOOK_ALLOWED_ORIGINS environment variable or pass allowedOrigins option.');
+        }
+        // 检查是否包含通配符
+        if (allowedOrigins.includes('*')) {
+            logger.error('[F2A:Webhook] CORS configuration error: Wildcard origin (*) is not allowed in production!');
+            throw new Error('Wildcard CORS origin is not allowed in production. Configure specific allowed origins.');
+        }
+    }
+}
+class WebhookServer {
+    port;
+    handler;
+    server;
+    maxBodySize;
+    /** 允许的 CORS 来源列表 */
+    allowedOrigins;
+    /** 日志记录器 */
+    logger;
+    constructor(port, handler, options) {
+        this.port = port;
+        this.handler = handler;
+        this.maxBodySize = options?.maxBodySize || DEFAULT_MAX_BODY_SIZE;
+        // P2 修复：支持从环境变量读取 CORS 配置
+        const envOrigins = process.env.F2A_WEBHOOK_ALLOWED_ORIGINS?.split(',').map(o => o.trim()).filter(Boolean);
+        this.allowedOrigins = options?.allowedOrigins ?? envOrigins ?? DEFAULT_ALLOWED_ORIGINS;
+        // 使用传入的 logger 或默认的 console
+        this.logger = options?.logger || console;
+        // P2 修复：生产环境强制验证 CORS 配置
+        validateCorsConfig(this.allowedOrigins, this.logger);
+    }
+    /**
+     * 启动 Webhook 服务器
+     */
+    async start() {
+        return new Promise((resolve, reject) => {
+            this.server = (0, http_1.createServer)(this.handleRequest.bind(this));
+            this.server.listen(this.port, () => {
+                this.logger.info('[F2A:Webhook] 服务器启动在端口 %d', this.port);
+                // 允许进程在只有这个服务器时退出（用于 CLI 命令如 gateway status）
+                this.server?.unref();
+                resolve();
+            });
+            this.server.on('error', (err) => {
+                reject(err);
+            });
+        });
+    }
+    /**
+     * 停止 Webhook 服务器
+     */
+    async stop() {
+        if (this.server) {
+            return new Promise((resolve) => {
+                this.server?.close(() => {
+                    this.logger.info('[F2A:Webhook] 服务器已停止');
+                    resolve();
+                });
+            });
+        }
+    }
+    /**
+     * 处理 HTTP 请求
+     */
+    async handleRequest(req, res) {
+        // 设置 CORS - 使用配置的允许来源
+        const origin = req.headers.origin;
+        // 当 allowedOrigins 为空数组时，使用默认值 'http://localhost'
+        // 当 origin 不在允许列表中时，使用第一个允许的来源或默认值
+        const defaultOrigin = 'http://localhost';
+        let allowOrigin;
+        if (this.allowedOrigins.length === 0) {
+            // 没有配置允许来源，使用默认值
+            allowOrigin = defaultOrigin;
+        }
+        else if (origin && this.allowedOrigins.includes(origin)) {
+            // origin 在允许列表中
+            allowOrigin = origin;
+        }
+        else {
+            // origin 不在允许列表中，使用第一个允许的来源
+            allowOrigin = this.allowedOrigins[0];
+        }
+        res.setHeader('Access-Control-Allow-Origin', allowOrigin);
+        res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+        if (req.method === 'OPTIONS') {
+            res.writeHead(200);
+            res.end();
+            return;
+        }
+        if (req.method !== 'POST') {
+            res.writeHead(405, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Method not allowed' }));
+            return;
+        }
+        try {
+            const body = await this.parseBody(req);
+            const event = body;
+            this.logger.info('[F2A:Webhook] 收到事件: %s', event.type);
+            let result;
+            switch (event.type) {
+                case 'discover':
+                    result = await this.handler.onDiscover(event.payload);
+                    break;
+                case 'delegate':
+                    result = await this.handler.onDelegate(event.payload);
+                    break;
+                case 'status':
+                    result = await this.handler.onStatus();
+                    break;
+                case 'message':
+                    // 处理 P2P 消息（Agent 对话）
+                    if (this.handler.onMessage) {
+                        result = await this.handler.onMessage(event.payload);
+                    }
+                    else {
+                        result = { response: 'Message handler not configured' };
+                    }
+                    break;
+                default:
+                    res.writeHead(400, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: `Unknown event type: ${event.type}` }));
+                    return;
+            }
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify(result));
+        }
+        catch (error) {
+            this.logger.error('[F2A:Webhook] 处理错误: %s', error);
+            res.writeHead(500, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({
+                error: error instanceof Error ? error.message : 'Internal error'
+            }));
+        }
+    }
+    /**
+     * 解析请求体
+     * 带大小限制，防止 DoS 攻击
+     */
+    parseBody(req) {
+        return new Promise((resolve, reject) => {
+            let body = '';
+            let size = 0;
+            req.on('data', (chunk) => {
+                size += chunk.length;
+                // 检查请求体大小
+                if (size > this.maxBodySize) {
+                    req.destroy();
+                    reject(new Error(`Request body too large: ${size} bytes (max: ${this.maxBodySize})`));
+                    return;
+                }
+                body += chunk.toString();
+            });
+            req.on('end', () => {
+                try {
+                    resolve(JSON.parse(body));
+                }
+                catch (e) {
+                    reject(new Error('Invalid JSON'));
+                }
+            });
+            req.on('error', reject);
+        });
+    }
+    getUrl() {
+        return `http://localhost:${this.port}/webhook`;
+    }
+}
+exports.WebhookServer = WebhookServer;
+//# sourceMappingURL=webhook-server.js.map

package/dist/webhook-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-server.js","sourceRoot":"","sources":["../src/webhook-server.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,+BAAqE;AAiBrE,wCAAwC;AACxC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,oBAAoB;AACpB,MAAM,uBAAuB,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAErD;;GAEG;AACH,SAAS,kBAAkB,CAAC,cAAwB,EAAE,MAAc;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAE3D,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa;QACb,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;YACxG,MAAM,CAAC,KAAK,CAAC,mGAAmG,CAAC,CAAC;QACpH,CAAC;QAED,YAAY;QACZ,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;AACH,CAAC;AAwBD,MAAa,aAAa;IAChB,IAAI,CAAS;IACb,OAAO,CAAiB;IACxB,MAAM,CAAmC;IACzC,WAAW,CAAS;IAC5B,oBAAoB;IACZ,cAAc,CAAW;IACjC,YAAY;IACJ,MAAM,CAAS;IAEvB,YAAY,IAAY,EAAE,OAAuB,EAAE,OAIlD;QACC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,qBAAqB,CAAC;QACjE,0BAA0B;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1G,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,UAAU,IAAI,uBAAuB,CAAC;QACvF,4BAA4B;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC;QAEzC,yBAAyB;QACzB,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,IAAA,mBAAY,EAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAE1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,6CAA6C;gBAC7C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBACrB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE;oBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;oBACzC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,sBAAsB;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,kDAAkD;QAClD,mCAAmC;QACnC,MAAM,aAAa,GAAG,kBAAkB,CAAC;QACzC,IAAI,WAAmB,CAAC;QAExB,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,iBAAiB;YACjB,WAAW,GAAG,aAAa,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,gBAAgB;YAChB,WAAW,GAAG,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,4BAA4B;YAC5B,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;QAC/D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,IAAoB,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvD,IAAI,MAAe,CAAC;YAEpB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,UAAU;oBACb,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAiC,CAAC,CAAC;oBAChF,MAAM;gBAER,KAAK,UAAU;oBACb,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAiC,CAAC,CAAC;oBAChF,MAAM;gBAER,KAAK,QAAQ;oBACX,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACvC,MAAM;gBAER,KAAK,SAAgB;oBACnB,sBAAsB;oBACtB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;wBAC3B,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAK3C,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC;oBAC1D,CAAC;oBACD,MAAM;gBAER;oBACE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;oBACxE,OAAO;YACX,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAElC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;aACjE,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,SAAS,CAAC,GAAoB;QACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,GAAG,CAAC,CAAC;YAEb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACvB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBAErB,UAAU;gBACV,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC5B,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,gBAAgB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;QACJ,OAAO,oBAAoB,IAAI,CAAC,IAAI,UAAU,CAAC;IACjD,CAAC;CACF;AA9LD,sCA8LC"}

package/openclaw.plugin.json

@@ -0,0 +1,107 @@
+{
+  "id": "openclaw-f2a",
+  "extension": "./dist/plugin.js",
+  "name": "F2A P2P Agent Network",
+  "description": "OpenClaw plugin for F2A P2P Agent network",
+  "version": "0.2.20",
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "f2aPath": {
+        "type": "string",
+        "description": "Path to F2A installation",
+        "default": "~/projects/F2A"
+      },
+      "autoStart": {
+        "type": "boolean",
+        "description": "Automatically start F2A node",
+        "default": true
+      },
+      "webhookPort": {
+        "type": "number",
+        "description": "Port for webhook server",
+        "default": 9002
+      },
+      "controlPort": {
+        "type": "number",
+        "description": "Port for F2A control API",
+        "default": 9001
+      },
+      "controlToken": {
+        "type": "string",
+        "description": "Auth token for F2A control API (auto-generated if not provided)",
+        "sensitive": true
+      },
+      "p2pPort": {
+        "type": "number",
+        "description": "Port for P2P network",
+        "default": 9000
+      },
+      "enableMDNS": {
+        "type": "boolean",
+        "description": "Enable mDNS discovery",
+        "default": true
+      },
+      "bootstrapPeers": {
+        "type": "array",
+        "items": { "type": "string" },
+        "description": "Bootstrap peer addresses",
+        "default": []
+      },
+      "agentName": {
+        "type": "string",
+        "description": "Display name for this agent",
+        "default": "OpenClaw Agent"
+      },
+      "capabilities": {
+        "type": "array",
+        "items": { "type": "string" },
+        "description": "Custom capabilities to advertise",
+        "default": []
+      },
+      "dataDir": {
+        "type": "string",
+        "description": "Directory for plugin data",
+        "default": "./f2a-data"
+      },
+      "maxQueuedTasks": {
+        "type": "number",
+        "description": "Maximum number of tasks to queue",
+        "default": 100
+      },
+      "reputation": {
+        "type": "object",
+        "properties": {
+          "enabled": { "type": "boolean", "default": true },
+          "initialScore": { "type": "number", "default": 50 },
+          "minScoreForService": { "type": "number", "default": 20 },
+          "decayRate": { "type": "number", "default": 0.01 }
+        }
+      },
+      "security": {
+        "type": "object",
+        "properties": {
+          "requireConfirmation": { "type": "boolean", "default": false },
+          "whitelist": { "type": "array", "items": { "type": "string" }, "default": [] },
+          "blacklist": { "type": "array", "items": { "type": "string" }, "default": [] },
+          "maxTasksPerMinute": { "type": "number", "default": 10 }
+        }
+      }
+    }
+  },
+  "uiHints": {
+    "f2aPath": { "label": "F2A Path", "placeholder": "~/projects/F2A" },
+    "autoStart": { "label": "Auto Start F2A Node" },
+    "webhookPort": { "label": "Webhook Port" },
+    "controlPort": { "label": "Control Port" },
+    "controlToken": { "label": "Control Token", "sensitive": true },
+    "p2pPort": { "label": "P2P Port" },
+    "enableMDNS": { "label": "Enable mDNS Discovery" },
+    "bootstrapPeers": { "label": "Bootstrap Peers", "placeholder": ["/ip4/..."] },
+    "agentName": { "label": "Agent Display Name" },
+    "capabilities": { "label": "Custom Capabilities" },
+    "dataDir": { "label": "Data Directory" },
+    "maxQueuedTasks": { "label": "Max Queued Tasks" }
+  }
+}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@f2a/openclaw-f2a",
+  "version": "0.2.20",
+  "description": "OpenClaw plugin for F2A P2P Agent network",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "openclaw.plugin.json",
+    "README.md"
+  ],
+  "openclaw": {
+    "extensions": [
+      "./dist/plugin.js"
+    ]
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest",
+    "lint": "eslint src/**/*.ts"
+  },
+  "keywords": [
+    "openclaw",
+    "f2a",
+    "p2p",
+    "agent",
+    "plugin"
+  ],
+  "author": "F2A Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/LuciusCao/F2A.git"
+  },
+  "dependencies": {
+    "@f2a/network": "*",
+    "better-sqlite3": "^11.0.0",
+    "node-fetch": "^3.3.2",
+    "ws": "^8.16.0",
+    "zod": "^3.22.4"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^20.10.0",
+    "@types/ws": "^8.5.10",
+    "typescript": "^5.3.0",
+    "vitest": "^1.6.1"
+  },
+  "peerDependencies": {
+    "openclaw": ">=1.0.0"
+  }
+}