@firela/billclaw-openclaw 0.1.4 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 fire-la
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/oauth/gmail.d.ts

@@ -1,31 +1,32 @@
 /**
- * Gmail OAuth handler - implements Gmail OAuth 2.0 flow
+ * Gmail OAuth handler - OpenClaw adapter
  *
- * This module handles Gmail OAuth 2.0 authorization using PKCE (Proof Key for Code Exchange).
+ * This is an adapter layer that calls the framework-agnostic OAuth implementation
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality (config management).
  *
- * Flow:
- * 1. Generate authorization URL (with PKCE) - Returns { url, state }
- * 2. Handle callback - Receives authorization code
- * 3. Exchange code for access token - Returns { accessToken, refreshToken }
+ * @packageDocumentation
  */
 import type { OpenClawPluginApi } from "../types/openclaw-plugin.js";
 /**
  * Handle Gmail OAuth flow
  *
- * This integrates Gmail OAuth 2.0 with PKCE for secure authorization.
+ * This is an OpenClaw adapter that calls the framework-agnostic OAuth handler
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality.
  *
  * Flow:
  * 1. Initialize OAuth (no params) - Returns { url, state }
- * 2. Handle callback (code + state) - Returns { accessToken, refreshToken }
+ * 2. Handle callback (code + state + accountId) - Returns { accessToken, refreshToken }
+ *    - Tokens are automatically saved to account config if accountId is provided
  *
  * @param api - OpenClaw plugin API
- * @param context - OAuth context with optional code and state from callback
+ * @param context - OAuth context with optional code, state, redirectUri, and accountId
  * @returns OAuthResult with URL and/or token
  */
 export declare function gmailOAuthHandler(api: OpenClawPluginApi, context?: {
     code?: string;
     state?: string;
     redirectUri?: string;
+    accountId?: string;
 }): Promise<{
     url: string;
     state?: string;
@@ -33,4 +34,15 @@ export declare function gmailOAuthHandler(api: OpenClawPluginApi, context?: {
     refreshToken?: string;
     expiresIn?: number;
 }>;
+/**
+ * Refresh Gmail access token using refresh token
+ *
+ * @param api - OpenClaw plugin API
+ * @param accountId - Account ID to refresh token for
+ * @returns New access token and expiry info, or null if refresh failed
+ */
+export declare function refreshGmailToken(api: OpenClawPluginApi, accountId: string): Promise<{
+    accessToken: string;
+    expiresIn: number;
+} | null>;
 //# sourceMappingURL=gmail.d.ts.map

package/dist/oauth/gmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gmail.d.ts","sourceRoot":"","sources":["../../src/oauth/gmail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAiMpE;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAC,CAsCD"}
+{"version":3,"file":"gmail.d.ts","sourceRoot":"","sources":["../../src/oauth/gmail.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AA8FpE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GACA,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAC,CA4BD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4C5D"}

package/dist/oauth/gmail.js

@@ -1,13 +1,23 @@
 /**
- * Gmail OAuth handler - implements Gmail OAuth 2.0 flow
+ * Gmail OAuth handler - OpenClaw adapter
  *
- * This module handles Gmail OAuth 2.0 authorization using PKCE (Proof Key for Code Exchange).
+ * This is an adapter layer that calls the framework-agnostic OAuth implementation
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality (config management).
  *
- * Flow:
- * 1. Generate authorization URL (with PKCE) - Returns { url, state }
- * 2. Handle callback - Receives authorization code
- * 3. Exchange code for access token - Returns { accessToken, refreshToken }
+ * @packageDocumentation
+ */
+import { gmailOAuthHandler as coreGmailOAuthHandler, refreshGmailToken as coreRefreshGmailToken, } from "@firela/billclaw-core";
+/**
+ * Get a logger from OpenClaw API, or provide a no-op logger
  */
+function getLogger(api) {
+    return {
+        info: api.logger?.info || (() => { }),
+        error: api.logger?.error || (() => { }),
+        warn: api.logger?.warn || (() => { }),
+        debug: api.logger?.debug || (() => { }),
+    };
+}
 /**
  * Get Gmail configuration from OpenClaw config
  */
@@ -25,166 +35,99 @@ function getGmailConfig(api) {
     };
 }
 /**
- * Generate random code verifier for PKCE
- */
-function generateCodeVerifier() {
-    const array = new Uint8Array(32);
-    crypto.getRandomValues(array);
-    return base64UrlEncode(array);
-}
-/**
- * Generate code challenge from verifier for PKCE
- */
-async function generateCodeChallenge(verifier) {
-    const encoder = new TextEncoder();
-    const data = encoder.encode(verifier);
-    const hash = await crypto.subtle.digest("SHA-256", data);
-    return base64UrlEncode(new Uint8Array(hash));
-}
-/**
- * Base64URL encode a byte array
- */
-function base64UrlEncode(bytes) {
-    const binString = Array.from(bytes, (byte) => String.fromCharCode(byte));
-    const base64 = btoa(binString.join(""));
-    return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-}
-/**
- * State parameter storage (in-memory for security)
- * In production, this should be stored in a secure session
- */
-const oauthStateStore = new Map();
-/**
- * Clean up expired states (older than 10 minutes)
- */
-function cleanupExpiredStates() {
-    const now = Date.now();
-    const maxAge = 10 * 60 * 1000; // 10 minutes
-    for (const [key, value] of oauthStateStore.entries()) {
-        if (now - value.timestamp > maxAge) {
-            oauthStateStore.delete(key);
-        }
-    }
-}
-/**
- * Generate Gmail OAuth authorization URL
- *
- * Uses PKCE for security without requiring client secret.
- */
-async function generateAuthorizationUrl(api, redirectUri = "http://localhost:3000/callback") {
-    cleanupExpiredStates();
-    const gmailConfig = getGmailConfig(api);
-    // Generate PKCE verifier and challenge
-    const codeVerifier = generateCodeVerifier();
-    const codeChallenge = await generateCodeChallenge(codeVerifier);
-    // Generate state parameter for CSRF protection
-    const state = Array.from(crypto.getRandomValues(new Uint8Array(16)))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-    // Store state and verifier
-    oauthStateStore.set(state, {
-        codeVerifier,
-        timestamp: Date.now(),
-    });
-    // Build authorization URL
-    const params = new URLSearchParams();
-    params.set("client_id", gmailConfig.clientId);
-    params.set("redirect_uri", redirectUri);
-    params.set("response_type", "code");
-    params.set("scope", "https://www.googleapis.com/auth/gmail.readonly");
-    params.set("state", state);
-    params.set("code_challenge", codeChallenge);
-    params.set("code_challenge_method", "S256");
-    params.set("access_type", "offline"); // Allow refresh token
-    params.set("prompt", "consent"); // Force consent to get refresh token
-    const url = `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
-    api.logger.info?.("Gmail authorization URL generated");
-    return { url, state };
-}
-/**
- * Exchange authorization code for access token
+ * Save Gmail OAuth tokens to account configuration
  *
- * Completes the OAuth flow by exchanging the authorization code
- * for an access token (and optionally refresh token).
+ * NOTE: This requires the OpenClaw runtime to support config updates.
+ * The actual persistence depends on the OpenClawConfigProvider implementation.
  */
-async function exchangeCodeForToken(api, code, state, redirectUri = "http://localhost:3000/callback") {
-    // Retrieve stored state
-    const storedState = oauthStateStore.get(state);
-    if (!storedState) {
-        throw new Error("Invalid or expired OAuth state. Please try again.");
-    }
-    // Clean up state
-    oauthStateStore.delete(state);
-    const gmailConfig = getGmailConfig(api);
-    // Exchange code for token
-    const tokenUrl = "https://oauth2.googleapis.com/token";
-    const params = new URLSearchParams();
-    params.set("code", code);
-    params.set("client_id", gmailConfig.clientId);
-    if (gmailConfig.clientSecret) {
-        params.set("client_secret", gmailConfig.clientSecret);
+async function saveGmailTokensToAccount(api, accountId, accessToken, refreshToken, expiresIn) {
+    const logger = getLogger(api);
+    // Calculate token expiry timestamp
+    const expiresAt = expiresIn
+        ? new Date(Date.now() + expiresIn * 1000).toISOString()
+        : undefined;
+    // Get config from OpenClaw
+    const config = api.pluginConfig;
+    // Find and update the account
+    const accountIndex = config.accounts?.findIndex((a) => a.id === accountId && a.type === "gmail");
+    if (accountIndex === -1 || accountIndex === undefined) {
+        logger.warn(`Gmail account ${accountId} not found in config. Tokens not saved.`);
+        return;
     }
-    params.set("redirect_uri", redirectUri);
-    params.set("grant_type", "authorization_code");
-    params.set("code_verifier", storedState.codeVerifier);
-    const response = await fetch(tokenUrl, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/x-www-form-urlencoded",
-        },
-        body: params.toString(),
-    });
-    if (!response.ok) {
-        const errorText = await response.text();
-        throw new Error(`Failed to exchange token: ${response.status} ${errorText}`);
-    }
-    const data = (await response.json());
-    api.logger.info?.("Gmail access token obtained successfully");
-    return {
-        accessToken: data.access_token,
-        refreshToken: data.refresh_token,
-        expiresIn: data.expires_in,
+    // Update account with tokens
+    config.accounts[accountIndex] = {
+        ...config.accounts[accountIndex],
+        gmailAccessToken: accessToken,
+        gmailRefreshToken: refreshToken,
+        gmailTokenExpiry: expiresAt,
+        enabled: true, // Auto-enable account after successful OAuth
     };
+    // Note: The actual persistence to disk depends on OpenClaw's config management
+    // The updated config is in memory but OpenClaw needs to handle persistence
+    logger.info(`Gmail tokens updated in memory for account ${accountId}. Persistence depends on OpenClaw config management.`);
 }
 /**
  * Handle Gmail OAuth flow
  *
- * This integrates Gmail OAuth 2.0 with PKCE for secure authorization.
+ * This is an OpenClaw adapter that calls the framework-agnostic OAuth handler
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality.
  *
  * Flow:
  * 1. Initialize OAuth (no params) - Returns { url, state }
- * 2. Handle callback (code + state) - Returns { accessToken, refreshToken }
+ * 2. Handle callback (code + state + accountId) - Returns { accessToken, refreshToken }
+ *    - Tokens are automatically saved to account config if accountId is provided
  *
  * @param api - OpenClaw plugin API
- * @param context - OAuth context with optional code and state from callback
+ * @param context - OAuth context with optional code, state, redirectUri, and accountId
  * @returns OAuthResult with URL and/or token
  */
 export async function gmailOAuthHandler(api, context) {
     try {
-        const { code, state, redirectUri } = context || {};
-        // Phase 1: Generate authorization URL
-        if (!code) {
-            const { url: authUrl, state: newState } = await generateAuthorizationUrl(api, redirectUri);
-            return {
-                url: authUrl,
-                state: newState,
-            };
+        const { code, state, redirectUri, accountId } = context || {};
+        const config = getGmailConfig(api);
+        const logger = getLogger(api);
+        // Call the framework-agnostic OAuth handler from core
+        const result = await coreGmailOAuthHandler(config, { code, state, redirectUri }, logger);
+        // Save tokens to account config if accountId is provided and we have accessToken
+        if (accountId && result.accessToken && code) {
+            await saveGmailTokensToAccount(api, accountId, result.accessToken, result.refreshToken, result.expiresIn);
+            logger.info(`Gmail tokens saved for account ${accountId} (expires in ${result.expiresIn}s)`);
         }
-        // Phase 2: Exchange authorization code for access token
-        if (!state) {
-            throw new Error("State parameter is required for code exchange");
-        }
-        const { accessToken, refreshToken, expiresIn } = await exchangeCodeForToken(api, code, state, redirectUri);
-        return {
-            url: "",
-            accessToken,
-            refreshToken,
-            expiresIn,
-        };
+        return result;
     }
     catch (error) {
-        api.logger.error?.("Gmail OAuth error:", error);
+        getLogger(api).error("Gmail OAuth error:", error);
         throw error;
     }
 }
+/**
+ * Refresh Gmail access token using refresh token
+ *
+ * @param api - OpenClaw plugin API
+ * @param accountId - Account ID to refresh token for
+ * @returns New access token and expiry info, or null if refresh failed
+ */
+export async function refreshGmailToken(api, accountId) {
+    const config = api.pluginConfig;
+    const logger = getLogger(api);
+    // Find the account
+    const account = config.accounts?.find((a) => a.id === accountId && a.type === "gmail");
+    if (!account) {
+        logger.error(`Gmail account ${accountId} not found`);
+        return null;
+    }
+    const gmailConfig = getGmailConfig(api);
+    if (!account.gmailRefreshToken) {
+        logger.error(`No refresh token available for Gmail account ${accountId}. User must re-authenticate.`);
+        return null;
+    }
+    // Call the framework-agnostic refresh handler from core
+    const result = await coreRefreshGmailToken(gmailConfig, account.gmailRefreshToken, logger);
+    if (!result) {
+        return null;
+    }
+    // Save new tokens to account config
+    await saveGmailTokensToAccount(api, accountId, result.accessToken, account.gmailRefreshToken, result.expiresIn);
+    return result;
+}
 //# sourceMappingURL=gmail.js.map

package/dist/oauth/gmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"gmail.js","sourceRoot":"","sources":["../../src/oauth/gmail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH;;GAEG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,MAAM,WAAW,GAAG,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;IAE7C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IACpE,MAAM,YAAY,GAChB,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;IAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,YAAY,EAAE,YAAY,IAAI,EAAE;KACjC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACxD,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAiB;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAG3B,CAAA;AAEJ;;GAEG;AACH,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,aAAa;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACnC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CACrC,GAAsB,EACtB,cAAsB,gCAAgC;IAEtD,oBAAoB,EAAE,CAAA;IAEtB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAEvC,uCAAuC;IACvC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAE/D,+CAA+C;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;SACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;IAEX,2BAA2B;IAC3B,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;QACzB,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAA;IAEF,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IACvC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAA;IACrE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IAC3C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA,CAAC,sBAAsB;IAC3D,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA,CAAC,qCAAqC;IAErE,MAAM,GAAG,GAAG,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAE/E,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,CAAC,CAAA;IAEtD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAAsB,EACtB,IAAY,EACZ,KAAa,EACb,cAAsB,gCAAgC;IAEtD,wBAAwB;IACxB,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,iBAAiB;IACjB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAE7B,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAEvC,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,qCAAqC,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,YAAY,CAAC,CAAA;IACvD,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IACvC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IAC9C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,YAAY,CAAC,CAAA;IAErD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,0CAA0C,CAAC,CAAA;IAE7D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,OAAiE;IAQjE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAA;QAElD,sCAAsC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,wBAAwB,CACtE,GAAG,EACH,WAAW,CACZ,CAAA;YACD,OAAO;gBACL,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,QAAQ;aAChB,CAAA;QACH,CAAC;QAED,wDAAwD;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,MAAM,oBAAoB,CACzE,GAAG,EACH,IAAI,EACJ,KAAK,EACL,WAAW,CACZ,CAAA;QAED,OAAO;YACL,GAAG,EAAE,EAAE;YACP,WAAW;YACX,YAAY;YACZ,SAAS;SACV,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;QAC/C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"gmail.js","sourceRoot":"","sources":["../../src/oauth/gmail.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,iBAAiB,IAAI,qBAAqB,EAC1C,iBAAiB,IAAI,qBAAqB,GAE3C,MAAM,uBAAuB,CAAA;AAG9B;;GAEG;AACH,SAAS,SAAS,CAAC,GAAsB;IACvC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACtC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;KACvC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,MAAM,WAAW,GAAG,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;IAE7C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IACpE,MAAM,YAAY,GAChB,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;IAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,YAAY,EAAE,YAAY,IAAI,EAAE;KACjC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,GAAsB,EACtB,SAAiB,EACjB,WAAmB,EACnB,YAAgC,EAChC,SAA6B;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAE7B,mCAAmC;IACnC,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACvD,CAAC,CAAC,SAAS,CAAA;IAEb,2BAA2B;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAmB,CAAA;IAEtC,8BAA8B;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAC7C,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CACrD,CAAA;IAED,IAAI,YAAY,KAAK,CAAC,CAAC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CACT,iBAAiB,SAAS,yCAAyC,CACpE,CAAA;QACD,OAAM;IACR,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG;QAC9B,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChC,gBAAgB,EAAE,WAAW;QAC7B,iBAAiB,EAAE,YAAY;QAC/B,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE,IAAI,EAAE,6CAA6C;KAC7D,CAAA;IAED,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CACT,8CAA8C,SAAS,sDAAsD,CAC9G,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,OAKC;IAQD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,IAAI,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAE7B,sDAAsD;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAA;QAExF,iFAAiF;QACjF,IAAI,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAC5C,MAAM,wBAAwB,CAC5B,GAAG,EACH,SAAS,EACT,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,CACjB,CAAA;YACD,MAAM,CAAC,IAAI,CACT,kCAAkC,SAAS,gBAAgB,MAAM,CAAC,SAAS,IAAI,CAChF,CAAA;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,SAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAmB,CAAA;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAE7B,mBAAmB;IACnB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CACrD,CAAA;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iBAAiB,SAAS,YAAY,CAAC,CAAA;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAEvC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CACV,gDAAgD,SAAS,8BAA8B,CACxF,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,wDAAwD;IACxD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,WAAW,EACX,OAAO,CAAC,iBAAiB,EACzB,MAAM,CACP,CAAA;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IAED,oCAAoC;IACpC,MAAM,wBAAwB,CAC5B,GAAG,EACH,SAAS,EACT,MAAM,CAAC,WAAW,EAClB,OAAO,CAAC,iBAAiB,EACzB,MAAM,CAAC,SAAS,CACjB,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/oauth/plaid.d.ts

@@ -1,28 +1,30 @@
 /**
- * Plaid OAuth handler - implements Plaid Link flow
+ * Plaid OAuth handler - OpenClaw adapter
  *
- * This module handles the Plaid Link OAuth flow for connecting bank accounts.
- * It supports two modes:
- * 1. Link token creation (for initializing Plaid Link frontend)
- * 2. Public token exchange (for completing the connection)
+ * This is an adapter layer that calls the framework-agnostic OAuth implementation
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality (config management).
+ *
+ * @packageDocumentation
  */
 import type { OpenClawPluginApi } from "../types/openclaw-plugin.js";
 /**
  * Handle Plaid Link OAuth flow
  *
- * This integrates Plaid Link (https://plaid.com/docs/link/)
- * for secure bank account connection.
+ * This is an OpenClaw adapter that calls the framework-agnostic OAuth handler
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality.
  *
  * Flow:
  * 1. Create Link token (no params) - Returns { url, token: linkToken }
  * 2. Handle Link success callback - Receives publicToken
  * 3. Exchange public_token for access_token - Returns { url: "", token: accessToken, itemId }
+ *    - If accountId is provided, tokens are automatically saved to account config
  *
  * @param api - OpenClaw plugin API
  * @param publicToken - Optional public token from Plaid Link callback
+ * @param accountId - Optional account ID to save tokens to
  * @returns OAuthResult with URL and token
  */
-export declare function plaidOAuthHandler(api: OpenClawPluginApi, publicToken?: string): Promise<{
+export declare function plaidOAuthHandler(api: OpenClawPluginApi, publicToken?: string, accountId?: string): Promise<{
     url: string;
     token?: string;
     itemId?: string;

package/dist/oauth/plaid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plaid.d.ts","sourceRoot":"","sources":["../../src/oauth/plaid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAwFpE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC,CA2BD"}
+{"version":3,"file":"plaid.d.ts","sourceRoot":"","sources":["../../src/oauth/plaid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAyFpE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,WAAW,CAAC,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC,CA6BD"}

package/dist/oauth/plaid.js

@@ -1,12 +1,23 @@
 /**
- * Plaid OAuth handler - implements Plaid Link flow
+ * Plaid OAuth handler - OpenClaw adapter
  *
- * This module handles the Plaid Link OAuth flow for connecting bank accounts.
- * It supports two modes:
- * 1. Link token creation (for initializing Plaid Link frontend)
- * 2. Public token exchange (for completing the connection)
+ * This is an adapter layer that calls the framework-agnostic OAuth implementation
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality (config management).
+ *
+ * @packageDocumentation
  */
-import { createPlaidClient } from "@firela/billclaw-core";
+import { plaidOAuthHandler as corePlaidOAuthHandler, } from "@firela/billclaw-core";
+/**
+ * Get a logger from OpenClaw API, or provide a no-op logger
+ */
+function getLogger(api) {
+    return {
+        info: api.logger?.info || (() => { }),
+        error: api.logger?.error || (() => { }),
+        warn: api.logger?.warn || (() => { }),
+        debug: api.logger?.debug || (() => { }),
+    };
+}
 /**
  * Get Plaid configuration from OpenClaw config
  *
@@ -28,80 +39,64 @@ function getPlaidConfig(api) {
     };
 }
 /**
- * Create Plaid Link token for initializing Link frontend
- */
-async function createLinkToken(api, accountId) {
-    const plaidConfig = getPlaidConfig(api);
-    const plaidClient = createPlaidClient(plaidConfig);
-    const request = {
-        user: {
-            client_user_id: accountId || `user_${Date.now()}`,
-        },
-        client_name: "BillClaw",
-        products: ["transactions"],
-        country_codes: ["US"],
-        language: "en",
-    };
-    const axiosResponse = await plaidClient.linkTokenCreate(request);
-    const response = axiosResponse.data;
-    api.logger.info?.("Plaid Link token created successfully");
-    return { linkToken: response.link_token };
-}
-/**
- * Exchange Plaid public token for access token
+ * Save Plaid OAuth tokens to account configuration
+ *
+ * NOTE: This requires the OpenClaw runtime to support config updates.
+ * The actual persistence depends on the OpenClawConfigProvider implementation.
  */
-async function exchangePublicToken(api, publicToken) {
-    const plaidConfig = getPlaidConfig(api);
-    const plaidClient = createPlaidClient(plaidConfig);
-    const request = {
-        public_token: publicToken,
-    };
-    const axiosResponse = await plaidClient.itemPublicTokenExchange(request);
-    const response = axiosResponse.data;
-    api.logger.info?.("Plaid public token exchanged successfully");
-    return {
-        accessToken: response.access_token,
-        itemId: response.item_id,
+async function savePlaidTokensToAccount(api, accountId, accessToken, itemId) {
+    const logger = getLogger(api);
+    // Get config from OpenClaw
+    const config = api.pluginConfig;
+    // Find and update the account
+    const accountIndex = config.accounts?.findIndex((a) => a.id === accountId && a.type === "plaid");
+    if (accountIndex === -1 || accountIndex === undefined) {
+        logger.warn(`Plaid account ${accountId} not found in config. Tokens not saved.`);
+        return;
+    }
+    // Update account with tokens
+    config.accounts[accountIndex] = {
+        ...config.accounts[accountIndex],
+        plaidAccessToken: accessToken,
+        plaidItemId: itemId,
+        enabled: true, // Auto-enable account after successful OAuth
     };
+    // Note: The actual persistence to disk depends on OpenClaw's config management
+    // The updated config is in memory but OpenClaw needs to handle persistence
+    logger.info(`Plaid tokens updated in memory for account ${accountId}. Persistence depends on OpenClaw config management.`);
 }
 /**
  * Handle Plaid Link OAuth flow
  *
- * This integrates Plaid Link (https://plaid.com/docs/link/)
- * for secure bank account connection.
+ * This is an OpenClaw adapter that calls the framework-agnostic OAuth handler
+ * from @firela/billclaw-core and adds OpenClaw-specific functionality.
  *
  * Flow:
  * 1. Create Link token (no params) - Returns { url, token: linkToken }
  * 2. Handle Link success callback - Receives publicToken
  * 3. Exchange public_token for access_token - Returns { url: "", token: accessToken, itemId }
+ *    - If accountId is provided, tokens are automatically saved to account config
  *
  * @param api - OpenClaw plugin API
  * @param publicToken - Optional public token from Plaid Link callback
+ * @param accountId - Optional account ID to save tokens to
  * @returns OAuthResult with URL and token
  */
-export async function plaidOAuthHandler(api, publicToken) {
+export async function plaidOAuthHandler(api, publicToken, accountId) {
     try {
-        if (!publicToken) {
-            // No public token provided - create Link token for initializing Link
-            const { linkToken } = await createLinkToken(api);
-            // Return Plaid Link URL and the link token
-            return {
-                url: "https://cdn.plaid.com/link/v2/stable/link.html",
-                token: linkToken,
-            };
+        const config = getPlaidConfig(api);
+        const logger = getLogger(api);
+        // Call the framework-agnostic OAuth handler from core
+        const result = await corePlaidOAuthHandler(config, publicToken, accountId, logger);
+        // Save tokens to account config if accountId is provided and we have accessToken
+        if (accountId && result.accessToken && publicToken) {
+            await savePlaidTokensToAccount(api, accountId, result.accessToken, result.itemId || "");
+            logger.info(`Plaid tokens saved for account ${accountId}`);
         }
-        // Public token provided - exchange for access token
-        const { accessToken, itemId } = await exchangePublicToken(api, publicToken);
-        // Return the access token and item ID for storage
-        return {
-            url: "",
-            token: accessToken,
-            itemId,
-            accessToken,
-        };
+        return result;
     }
     catch (error) {
-        api.logger.error?.("Plaid OAuth error:", error);
+        getLogger(api).error("Plaid OAuth error:", error);
         throw error;
     }
 }

package/dist/oauth/plaid.js.map

@@ -1 +1 @@
-{"version":3,"file":"plaid.js","sourceRoot":"","sources":["../../src/oauth/plaid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,iBAAiB,EAAoB,MAAM,uBAAuB,CAAA;AAQ3E;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,MAAM,WAAW,GAAG,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;IAE7C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IACpE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC7D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,SAAS,CAAA;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,uIAAuI,CACxI,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,MAAM;QACN,WAAW,EAAE,WAAuD;KACrE,CAAA;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAsB,EACtB,SAAkB;IAElB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAElD,MAAM,OAAO,GAA2B;QACtC,IAAI,EAAE;YACJ,cAAc,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;SAClD;QACD,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,CAAC,cAAqB,CAAC;QACjC,aAAa,EAAE,CAAC,IAAW,CAAC;QAC5B,QAAQ,EAAE,IAAI;KACf,CAAA;IAED,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAChE,MAAM,QAAQ,GAA4B,aAAa,CAAC,IAAI,CAAA;IAE5D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,uCAAuC,CAAC,CAAA;IAE1D,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAA;AAC3C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAsB,EACtB,WAAmB;IAEnB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAElD,MAAM,OAAO,GAAmC;QAC9C,YAAY,EAAE,WAAW;KAC1B,CAAA;IAED,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAoC,aAAa,CAAC,IAAI,CAAA;IAEpE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,2CAA2C,CAAC,CAAA;IAE9D,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,YAAY;QAClC,MAAM,EAAE,QAAQ,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,WAAoB;IAOpB,IAAI,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,qEAAqE;YACrE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;YAEhD,2CAA2C;YAC3C,OAAO;gBACL,GAAG,EAAE,gDAAgD;gBACrD,KAAK,EAAE,SAAS;aACjB,CAAA;QACH,CAAC;QAED,oDAAoD;QACpD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAE3E,kDAAkD;QAClD,OAAO;YACL,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,WAAW;YAClB,MAAM;YACN,WAAW;SACZ,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;QAC/C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"plaid.js","sourceRoot":"","sources":["../../src/oauth/plaid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,iBAAiB,IAAI,qBAAqB,GAE3C,MAAM,uBAAuB,CAAA;AAG9B;;GAEG;AACH,SAAS,SAAS,CAAC,GAAsB;IACvC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACtC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;KACvC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,MAAM,WAAW,GAAG,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;IAE7C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IACpE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IAC7D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,SAAS,CAAA;IAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,uIAAuI,CACxI,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,MAAM;QACN,WAAW,EAAE,WAAuD;KACrE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,GAAsB,EACtB,SAAiB,EACjB,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAE7B,2BAA2B;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAmB,CAAA;IAEtC,8BAA8B;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAC7C,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CACrD,CAAA;IAED,IAAI,YAAY,KAAK,CAAC,CAAC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CACT,iBAAiB,SAAS,yCAAyC,CACpE,CAAA;QACD,OAAM;IACR,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG;QAC9B,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChC,gBAAgB,EAAE,WAAW;QAC7B,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,IAAI,EAAE,6CAA6C;KAC7D,CAAA;IAED,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CACT,8CAA8C,SAAS,sDAAsD,CAC9G,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,WAAoB,EACpB,SAAkB;IAOlB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAE7B,sDAAsD;QACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,MAAM,EACN,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAA;QAED,iFAAiF;QACjF,IAAI,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;YACnD,MAAM,wBAAwB,CAC5B,GAAG,EACH,SAAS,EACT,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,MAAM,IAAI,EAAE,CACpB,CAAA;YACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAA;QAC5D,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAYnE;;GAEG;;;;;;kBAQa,iBAAiB;;AAPjC,wBA0NC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAYnE;;GAEG;;;;;;kBAQa,iBAAiB;;AAPjC,wBA6NC"}

package/dist/plugin.js

@@ -176,9 +176,12 @@ export default {
         // ========================================================================
         const cfg = api.pluginConfig;
         const plaidSecret = cfg.plaid?.webhookSecret || process.env.PLAID_WEBHOOK_SECRET;
+        // Webhook registration is now async (initializes Core components)
         registerWebhookHandlers({
             api,
             plaidWebhookSecret: plaidSecret,
+        }).catch((error) => {
+            api.logger.error?.("Failed to register webhook handlers:", error);
         });
         // ========================================================================
         // Background Services

package/dist/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;GAEG;AACH,eAAe;IACb,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,oEAAoE;IACtE,IAAI,EAAE,cAAuB;IAE7B,QAAQ,CAAC,GAAsB;QAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAA;QAEhD,2EAA2E;QAC3E,QAAQ;QACR,2EAA2E;QAE3E,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACpD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,UAAU,EAAE,cAAc,CAAC,UAAU;YACrC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACrD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACpD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,sBAAsB,CAAC,IAAI;YACjC,KAAK,EAAE,sBAAsB,CAAC,KAAK;YACnC,WAAW,EAAE,sBAAsB,CAAC,WAAW;YAC/C,UAAU,EAAE,sBAAsB,CAAC,UAAU;YAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,wBAAwB,CAAC,IAAI;YACnC,KAAK,EAAE,wBAAwB,CAAC,KAAK;YACrC,WAAW,EAAE,wBAAwB,CAAC,WAAW;YACjD,UAAU,EAAE,wBAAwB,CAAC,UAAU;YAC/C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC/D,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,sBAAsB,CAAC,IAAI;YACjC,KAAK,EAAE,sBAAsB,CAAC,KAAK;YACnC,WAAW,EAAE,sBAAsB,CAAC,WAAW;YAC/C,UAAU,EAAE,sBAAsB,CAAC,UAAU;YAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,eAAe;QACf,2EAA2E;QAE3E,GAAG,CAAC,WAAW,CAAC;YACd,QAAQ,EAAE;gBACR,OAAO;gBACP,aAAa;gBACb,YAAY;gBACZ,cAAc;gBACd,cAAc;aACf;YACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACvB,MAAM,KAAK,GAAG,OAAO;qBAClB,OAAO,CAAC,OAAO,CAAC;qBAChB,WAAW,CAAC,wDAAwD,CAAC,CAAA;gBAExE,KAAK;qBACF,OAAO,CAAC,OAAO,CAAC;qBAChB,WAAW,CAAC,kDAAkD,CAAC;qBAC/D,QAAQ,CAAC,YAAY,EAAE,8CAA8C,CAAC;qBACtE,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;qBAC3C,MAAM,CAAC,mBAAmB,EAAE,YAAY,CAAC;qBACzC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;qBAChD,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAiC,EAAE,EAAE;oBACxE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,CAAA;oBAC5C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAC3D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBACrB,OAAO;4BACL,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvC,CAAA;oBACH,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;gBACpC,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,MAAM,CAAC;qBACf,WAAW,CAAC,mCAAmC,CAAC;qBAChD,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAC;qBACtD,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,EAAE;oBACtC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CACf,UACE,SAAS,CAAC,CAAC,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC,CAAC,eACxC,KAAK,CACN,CAAA;oBACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;oBAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;oBAC3C,OAAO,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,QAAQ,CAAC;qBACjB,WAAW,CAAC,gDAAgD,CAAC;qBAC7D,MAAM,CAAC,KAAK,IAAI,EAAE;oBACjB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;oBAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBACpC,OAAO,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,QAAQ,CAAC;qBACjB,WAAW,CAAC,6BAA6B,CAAC;qBAC1C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;qBAC3C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;qBAC1C,MAAM,CAAC,KAAK,EAAE,GAAG,GAAG,SAAS,EAAE,KAAK,GAAG,SAAS,EAAE,EAAE;oBACnD,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;wBACjB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mBAAmB,GAAG,MAAM,KAAK,EAAE,CAAC,CAAA;wBACtD,OAAO,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE,CAAA;oBAC7C,CAAC;yBAAM,IAAI,GAAG,EAAE,CAAC;wBACf,MAAM,MAAM,GAAG,GAAG,CAAC,YAAuC,CAAA;wBAC1D,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;oBAC/B,CAAC;yBAAM,CAAC;wBACN,OAAO,GAAG,CAAC,YAAY,CAAA;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAA;YACN,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,kBAAkB;QAClB,2EAA2E;QAE3E,GAAG,CAAC,aAAa,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,uBAAuB,CAAC,CAAA;gBAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;gBAC9D,MAAM,WAAW,GAAG,OAAO,EAAE,WAAiC,CAAA;gBAC9D,OAAO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;YAC5C,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,aAAa,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,uBAAuB,CAAC,CAAA;gBAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;gBAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,IAA0B,CAAA;gBAChD,MAAM,KAAK,GAAG,OAAO,EAAE,KAA2B,CAAA;gBAClD,MAAM,WAAW,GAAG,OAAO,EAAE,WAAiC,CAAA;gBAC9D,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,mBAAmB;QACnB,2EAA2E;QAE3E,MAAM,GAAG,GAAG,GAAG,CAAC,YAAmB,CAAA;QACnC,MAAM,WAAW,GACf,GAAG,CAAC,KAAK,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;QAE9D,uBAAuB,CAAC;YACtB,GAAG;YACH,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAA;QAEF,2EAA2E;QAC3E,sBAAsB;QACtB,2EAA2E;QAE3E,GAAG,CAAC,eAAe,CAAC;YAClB,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gCAAgC,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gCAAgC,CAAC,CAAA;YACrD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,eAAe,CAAC;YAClB,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,CAAC,CAAA;YACxD,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,CAAC,CAAA;YACxD,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,aAAa,EACb,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;GAEG;AACH,eAAe;IACb,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,oEAAoE;IACtE,IAAI,EAAE,cAAuB;IAE7B,QAAQ,CAAC,GAAsB;QAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAA;QAEhD,2EAA2E;QAC3E,QAAQ;QACR,2EAA2E;QAE3E,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACpD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,cAAc,CAAC,IAAI;YACzB,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,UAAU,EAAE,cAAc,CAAC,UAAU;YACrC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACrD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YACpD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,sBAAsB,CAAC,IAAI;YACjC,KAAK,EAAE,sBAAsB,CAAC,KAAK;YACnC,WAAW,EAAE,sBAAsB,CAAC,WAAW;YAC/C,UAAU,EAAE,sBAAsB,CAAC,UAAU;YAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,wBAAwB,CAAC,IAAI;YACnC,KAAK,EAAE,wBAAwB,CAAC,KAAK;YACrC,WAAW,EAAE,wBAAwB,CAAC,WAAW;YACjD,UAAU,EAAE,wBAAwB,CAAC,UAAU;YAC/C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC/D,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,YAAY,CAAC;YACf,IAAI,EAAE,sBAAsB,CAAC,IAAI;YACjC,KAAK,EAAE,sBAAsB,CAAC,KAAK;YACnC,WAAW,EAAE,sBAAsB,CAAC,WAAW;YAC/C,UAAU,EAAE,sBAAsB,CAAC,UAAU;YAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;gBACrC,OAAO,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAe,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,eAAe;QACf,2EAA2E;QAE3E,GAAG,CAAC,WAAW,CAAC;YACd,QAAQ,EAAE;gBACR,OAAO;gBACP,aAAa;gBACb,YAAY;gBACZ,cAAc;gBACd,cAAc;aACf;YACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACvB,MAAM,KAAK,GAAG,OAAO;qBAClB,OAAO,CAAC,OAAO,CAAC;qBAChB,WAAW,CAAC,wDAAwD,CAAC,CAAA;gBAExE,KAAK;qBACF,OAAO,CAAC,OAAO,CAAC;qBAChB,WAAW,CAAC,kDAAkD,CAAC;qBAC/D,QAAQ,CAAC,YAAY,EAAE,8CAA8C,CAAC;qBACtE,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;qBAC3C,MAAM,CAAC,mBAAmB,EAAE,YAAY,CAAC;qBACzC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;qBAChD,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAiC,EAAE,EAAE;oBACxE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,CAAA;oBAC5C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAC3D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBACrB,OAAO;4BACL,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvC,CAAA;oBACH,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;gBACpC,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,MAAM,CAAC;qBACf,WAAW,CAAC,mCAAmC,CAAC;qBAChD,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAC;qBACtD,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,EAAE;oBACtC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CACf,UACE,SAAS,CAAC,CAAC,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC,CAAC,eACxC,KAAK,CACN,CAAA;oBACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;oBAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;oBAC3C,OAAO,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,QAAQ,CAAC;qBACjB,WAAW,CAAC,gDAAgD,CAAC;qBAC7D,MAAM,CAAC,KAAK,IAAI,EAAE;oBACjB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;oBAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBACpC,OAAO,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBAEJ,KAAK;qBACF,OAAO,CAAC,QAAQ,CAAC;qBACjB,WAAW,CAAC,6BAA6B,CAAC;qBAC1C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;qBAC3C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;qBAC1C,MAAM,CAAC,KAAK,EAAE,GAAG,GAAG,SAAS,EAAE,KAAK,GAAG,SAAS,EAAE,EAAE;oBACnD,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;wBACjB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mBAAmB,GAAG,MAAM,KAAK,EAAE,CAAC,CAAA;wBACtD,OAAO,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE,CAAA;oBAC7C,CAAC;yBAAM,IAAI,GAAG,EAAE,CAAC;wBACf,MAAM,MAAM,GAAG,GAAG,CAAC,YAAuC,CAAA;wBAC1D,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;oBAC/B,CAAC;yBAAM,CAAC;wBACN,OAAO,GAAG,CAAC,YAAY,CAAA;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAA;YACN,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,kBAAkB;QAClB,2EAA2E;QAE3E,GAAG,CAAC,aAAa,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,uBAAuB,CAAC,CAAA;gBAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;gBAC9D,MAAM,WAAW,GAAG,OAAO,EAAE,WAAiC,CAAA;gBAC9D,OAAO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;YAC5C,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,aAAa,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,uBAAuB,CAAC,CAAA;gBAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;gBAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,IAA0B,CAAA;gBAChD,MAAM,KAAK,GAAG,OAAO,EAAE,KAA2B,CAAA;gBAClD,MAAM,WAAW,GAAG,OAAO,EAAE,WAAiC,CAAA;gBAC9D,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,mBAAmB;QACnB,2EAA2E;QAE3E,MAAM,GAAG,GAAG,GAAG,CAAC,YAAmB,CAAA;QACnC,MAAM,WAAW,GACf,GAAG,CAAC,KAAK,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;QAE9D,kEAAkE;QAClE,uBAAuB,CAAC;YACtB,GAAG;YACH,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;QAEF,2EAA2E;QAC3E,sBAAsB;QACtB,2EAA2E;QAE3E,GAAG,CAAC,eAAe,CAAC;YAClB,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gCAAgC,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gCAAgC,CAAC,CAAA;YACrD,CAAC;SACF,CAAC,CAAA;QAEF,GAAG,CAAC,eAAe,CAAC;YAClB,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,CAAC,CAAA;YACxD,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,CAAC,CAAA;YACxD,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist/services/webhook-handler.d.ts

@@ -2,8 +2,16 @@
  * Webhook handlers for BillClaw OpenClaw plugin
  *
  * This module provides HTTP route handlers for receiving webhooks from
- * external services (Plaid, GoCardless, etc.) and forwarding them to
- * configured external webhook endpoints.
+ * external services (Plaid, GoCardless, etc.) using the Core webhook layer.
+ *
+ * P0 Security Features:
+ * - Replay attack protection (timestamp + nonce validation)
+ * - Rate limiting (per-IP fixed-window)
+ * - Signature verification
+ *
+ * P1 Error Handling:
+ * - Sync failures emit sync.failed event
+ * - Retry logic with exponential backoff (3 retries)
  */
 import type { OpenClawPluginApi } from "../types/openclaw-plugin.js";
 /**
@@ -15,12 +23,11 @@ interface WebhookHandlerDependencies {
 }
 /**
  * Register webhook handlers with OpenClaw HTTP routes
- *
- * This function registers HTTP routes for:
- * - /webhook/plaid - Plaid webhook handler
- * - /webhook/gocardless - GoCardless webhook handler
- * - /webhook/test - Test webhook endpoint
  */
-export declare function registerWebhookHandlers(dependencies: WebhookHandlerDependencies): void;
+export declare function registerWebhookHandlers(dependencies: WebhookHandlerDependencies): Promise<void>;
+/**
+ * Cleanup rate limit entries (call periodically)
+ */
+export declare function cleanupRateLimits(): void;
 export {};
 //# sourceMappingURL=webhook-handler.d.ts.map

package/dist/services/webhook-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../src/services/webhook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAIpE;;GAEG;AACH,UAAU,0BAA0B;IAClC,GAAG,EAAE,iBAAiB,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAgCD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,0BAA0B,GACvC,IAAI,CA+BN"}
+{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../src/services/webhook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAYpE;;GAEG;AACH,UAAU,0BAA0B;IAClC,GAAG,EAAE,iBAAiB,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAG5B;AAiFD;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,0BAA0B,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Hf;AAkND;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAOxC"}

package/dist/services/webhook-handler.js

@@ -2,19 +2,39 @@
  * Webhook handlers for BillClaw OpenClaw plugin
  *
  * This module provides HTTP route handlers for receiving webhooks from
- * external services (Plaid, GoCardless, etc.) and forwarding them to
- * configured external webhook endpoints.
+ * external services (Plaid, GoCardless, etc.) using the Core webhook layer.
+ *
+ * P0 Security Features:
+ * - Replay attack protection (timestamp + nonce validation)
+ * - Rate limiting (per-IP fixed-window)
+ * - Signature verification
+ *
+ * P1 Error Handling:
+ * - Sync failures emit sync.failed event
+ * - Retry logic with exponential backoff (3 retries)
  */
-import { emitEvent, verifySignature } from "@firela/billclaw-core";
-// Global API reference for webhook handlers
+import { WebhookProcessor, createWebhookSecurity, createWebhookDeduplication, createSyncRateLimiter, PlaidWebhookHandler, GoCardlessWebhookHandler, } from "@firela/billclaw-core";
+import { emitEvent, emitSyncFailed } from "@firela/billclaw-core";
+// Global state
 let api = null;
 let configWebhooks = [];
 let plaidWebhookSecret;
+// gocardlessWebhookSecret reserved for future use
+// let gocardlessWebhookSecret: string | undefined
+// Core components
+let processor = null;
+let rateLimiter = null;
+const rateLimitMap = new Map();
+// Rate limit configuration
+const RATE_LIMITS = {
+    plaid: { requests: 100, window: 60_000 }, // 100/min
+    gocardless: { requests: 50, window: 60_000 }, // 50/min
+    test: { requests: 30, window: 60_000 }, // 30/min
+};
 /**
  * Convert OpenClaw logger to BillClaw Logger interface
  */
 function toLogger(logger) {
-    // Ensure all methods are defined and callable
     const log = logger?.info || (() => { });
     const logError = logger?.error || (() => { });
     const logWarn = logger?.warn || (() => console.warn);
@@ -26,22 +46,112 @@ function toLogger(logger) {
         debug: logDebug,
     };
 }
+/**
+ * Check rate limit for a source and IP
+ */
+function checkRateLimit(source, ip) {
+    const now = Date.now();
+    const key = `${source}:${ip}`;
+    const limit = RATE_LIMITS[source];
+    let entry = rateLimitMap.get(key);
+    // Reset if window expired
+    if (!entry || now > entry.resetTime) {
+        entry = { count: 0, resetTime: now + limit.window };
+        rateLimitMap.set(key, entry);
+    }
+    // Check if exceeded
+    if (entry.count >= limit.requests) {
+        const retryAfter = Math.ceil((entry.resetTime - now) / 1000);
+        return { allowed: false, retryAfter };
+    }
+    // Increment counter
+    entry.count++;
+    return { allowed: true };
+}
 /**
  * Register webhook handlers with OpenClaw HTTP routes
- *
- * This function registers HTTP routes for:
- * - /webhook/plaid - Plaid webhook handler
- * - /webhook/gocardless - GoCardless webhook handler
- * - /webhook/test - Test webhook endpoint
  */
-export function registerWebhookHandlers(dependencies) {
+export async function registerWebhookHandlers(dependencies) {
     api = dependencies.api;
     plaidWebhookSecret = dependencies.plaidWebhookSecret;
+    // gocardlessWebhookSecret reserved for future use
+    // gocardlessWebhookSecret = dependencies.gocardlessWebhookSecret
     // Get webhooks from config
     const pluginConfig = api.pluginConfig;
     configWebhooks = pluginConfig?.webhooks || [];
-    api.logger.info?.("billclaw webhook handler registered");
+    const logger = toLogger(api.logger);
+    // Initialize Core components
+    const storageBase = pluginConfig?.storage?.path || "~/.billclaw";
+    const basePath = storageBase.startsWith("~")
+        ? storageBase.replace("~", process.env.HOME || "")
+        : storageBase;
+    // Create deduplication cache
+    const deduplication = await createWebhookDeduplication({
+        basePath,
+        logger,
+    });
+    // Create security layer
+    const security = createWebhookSecurity(deduplication, logger);
+    // Create rate limiter
+    rateLimiter = createSyncRateLimiter(logger);
+    // Create processor
+    processor = new WebhookProcessor({
+        logger,
+        webhookSecret: plaidWebhookSecret,
+        security,
+    });
+    // Register handlers
+    processor.registerHandler("plaid", new PlaidWebhookHandler({
+        logger,
+        findAccountByItemId: async (itemId) => {
+            const accounts = pluginConfig?.accounts || [];
+            return accounts.find((acc) => acc.type === "plaid" && acc.plaidItemId === itemId && acc.enabled);
+        },
+        triggerSync: async (accountId) => {
+            const { plaidSyncTool } = await import("../tools/index.js");
+            // P1: Retry logic with exponential backoff
+            let lastError = null;
+            for (let attempt = 0; attempt < 3; attempt++) {
+                try {
+                    await plaidSyncTool.execute(api, { accountId });
+                    return;
+                }
+                catch (error) {
+                    lastError = error;
+                    if (attempt < 2) {
+                        // Exponential backoff: 1s, 2s, 4s
+                        const delay = 2 ** attempt * 1000;
+                        await new Promise((resolve) => setTimeout(resolve, delay));
+                    }
+                }
+            }
+            // All retries failed - emit sync.failed event (P1)
+            logger.error?.(`Webhook-triggered sync failed for ${accountId}:`, lastError);
+            await emitSyncFailed(logger, configWebhooks, accountId, `webhook_${Date.now()}`, lastError?.message || "Unknown error").catch((err) => logger.debug?.(`Event emission failed:`, err));
+            throw lastError;
+        },
+        emitEvent: async (eventType, data) => {
+            await emitEvent(logger, configWebhooks, eventType, data);
+        },
+        webhooks: configWebhooks,
+        rateLimiter: {
+            isWebhookSyncAllowed: (accountId) => {
+                if (!rateLimiter)
+                    return true;
+                return rateLimiter.isWebhookSyncAllowed(accountId);
+            },
+            recordWebhookSync: (accountId) => {
+                if (!rateLimiter)
+                    return;
+                rateLimiter.recordWebhookSync(accountId);
+            },
+        },
+    }));
+    processor.registerHandler("gocardless", new GoCardlessWebhookHandler({
+        logger,
+    }));
     // Register HTTP routes
+    api.logger.info?.("billclaw webhook handler registered with Core layer");
     api.http?.register({
         path: "/webhook/plaid",
         method: "POST",
@@ -61,67 +171,75 @@ export function registerWebhookHandlers(dependencies) {
         handler: handleTestWebhook,
     });
 }
+/**
+ * Get client IP from request
+ */
+function getClientIp(request) {
+    // Check for forwarded IP (proxy/load balancer)
+    const forwarded = request.headers["x-forwarded-for"];
+    if (forwarded) {
+        return forwarded.split(",")[0].trim();
+    }
+    // Check for real IP header
+    const realIp = request.headers["x-real-ip"];
+    if (realIp) {
+        return realIp;
+    }
+    // Fallback to query param or default
+    return request.query.ip || "unknown";
+}
 /**
  * Handle Plaid webhook
  *
- * Processes webhooks from Plaid:
- * - TRANSACTIONS/SYNC_UPDATES_AVAILABLE: Trigger sync for the item
- * - ITEM/ERROR: Emit account.error event
- * - ITEM/LOGIN_REQUIRED: Notify user to re-authenticate
+ * Applies rate limiting and delegates to Core processor.
  */
 async function handlePlaidWebhook(request) {
     try {
-        const body = request.body;
-        const webhookType = body.webhook_type;
-        const webhookCode = body.webhook_code;
-        const itemId = body.item_id;
-        api?.logger.info?.(`Received Plaid webhook: ${webhookType}.${webhookCode} for item ${itemId}`);
-        // Verify signature if configured
-        const signature = request.headers["plaid-verification"];
-        const timestamp = request.headers["plaid-timestamp"];
-        if (plaidWebhookSecret && signature && timestamp) {
-            const payload = JSON.stringify(body);
-            if (!verifySignature(payload, signature, plaidWebhookSecret)) {
-                return {
-                    status: 401,
-                    body: { received: false, error: "Invalid signature" },
-                };
-            }
+        const ip = getClientIp(request);
+        // P0: Rate limiting check
+        const rateLimit = checkRateLimit("plaid", ip);
+        if (!rateLimit.allowed) {
+            api?.logger.warn?.(`Rate limit exceeded for Plaid webhook from ${ip}`);
+            return {
+                status: 429,
+                body: {
+                    received: false,
+                    error: `Rate limit exceeded. Retry after ${rateLimit.retryAfter} seconds`,
+                },
+            };
         }
-        // Handle webhook events
-        switch (webhookType) {
-            case "TRANSACTIONS":
-                if (webhookCode === "SYNC_UPDATES_AVAILABLE") {
-                    // Find the account associated with this item
-                    const pluginConfig = api?.pluginConfig;
-                    const account = pluginConfig?.accounts?.find((acc) => acc.type === "plaid" && acc.plaidItemId === itemId && acc.enabled);
-                    if (account && api) {
-                        // Trigger async sync (don't wait for completion)
-                        const { plaidSyncTool } = await import("../tools/index.js");
-                        plaidSyncTool
-                            .execute(api, { accountId: account.id })
-                            .catch((error) => {
-                            api?.logger.error?.(`Webhook-triggered sync failed:`, error);
-                        });
-                    }
-                }
-                break;
-            case "ITEM":
-                if (webhookCode === "ERROR" || webhookCode === "LOGIN_REQUIRED") {
-                    const error = body.error ?? {
-                        error_code: webhookCode,
-                        error_message: "Item login required",
-                    };
-                    // Emit account error event
-                    await emitEvent(toLogger(api.logger), configWebhooks, "account.error", {
-                        accountId: itemId,
-                        accountType: "plaid",
-                        error: JSON.stringify(error),
-                    }).catch((err) => api?.logger.debug?.(`Event emission failed:`, err));
-                }
-                break;
+        if (!processor) {
+            return {
+                status: 500,
+                body: { received: false, error: "Webhook processor not initialized" },
+            };
         }
-        return { status: 200, body: { received: true } };
+        // Normalize request to Core format
+        const webhookRequest = {
+            body: request.body,
+            headers: request.headers,
+            query: request.query,
+            source: "plaid",
+            timestamp: request.headers["plaid-timestamp"]
+                ? parseInt(request.headers["plaid-timestamp"], 10)
+                : undefined,
+            nonce: request.body.webhook_id
+                ? `${request.body.webhook_id}_${request.body.webhook_code}`
+                : undefined,
+            signature: request.headers["plaid-verification"],
+        };
+        // Process with Core
+        const response = await processor.process(webhookRequest);
+        // Convert Core response to OpenClaw format
+        return {
+            status: response.status,
+            body: {
+                received: response.body.received,
+                error: typeof response.body.error === "string"
+                    ? response.body.error
+                    : response.body.error?.message || response.body.error?.code,
+            },
+        };
     }
     catch (error) {
         api?.logger.error?.(`Error handling Plaid webhook:`, error);
@@ -134,29 +252,80 @@ async function handlePlaidWebhook(request) {
 /**
  * Handle GoCardless webhook
  *
- * Processes webhooks from GoCardless (placeholder implementation)
+ * Applies rate limiting and delegates to Core processor.
  */
-async function handleGoCardlessWebhook(_request) {
+async function handleGoCardlessWebhook(request) {
     try {
-        api?.logger.info?.("Received GoCardless webhook");
-        // TODO: Implement GoCardless webhook handling
-        // - Verify signature
-        // - Process mandate events
-        // - Trigger sync if needed
-        return { status: 200, body: { received: true } };
+        const ip = getClientIp(request);
+        // P0: Rate limiting check
+        const rateLimit = checkRateLimit("gocardless", ip);
+        if (!rateLimit.allowed) {
+            api?.logger.warn?.(`Rate limit exceeded for GoCardless webhook from ${ip}`);
+            return {
+                status: 429,
+                body: {
+                    received: false,
+                    error: `Rate limit exceeded. Retry after ${rateLimit.retryAfter} seconds`,
+                },
+            };
+        }
+        if (!processor) {
+            return {
+                status: 500,
+                body: { received: false, error: "Webhook processor not initialized" },
+            };
+        }
+        // Normalize request to Core format
+        const webhookRequest = {
+            body: request.body,
+            headers: request.headers,
+            query: request.query,
+            source: "gocardless",
+            // GoCardless doesn't provide timestamp/nonce in standard format
+            // Signature is in body.signature
+            signature: request.body?.signature,
+        };
+        // Process with Core
+        const response = await processor.process(webhookRequest);
+        // Convert Core response to OpenClaw format
+        return {
+            status: response.status,
+            body: {
+                received: response.body.received,
+                error: typeof response.body.error === "string"
+                    ? response.body.error
+                    : response.body.error?.message || response.body.error?.code,
+            },
+        };
     }
     catch (error) {
         api?.logger.error?.(`Error handling GoCardless webhook:`, error);
-        return { status: 500, body: { received: false } };
+        return {
+            status: 500,
+            body: { received: false, error: "Internal server error" },
+        };
     }
 }
 /**
  * Handle test webhook
  *
- * Sends a test event to all configured webhooks to verify connectivity
+ * Sends a test event to all configured webhooks.
  */
 async function handleTestWebhook(_request) {
     try {
+        const ip = getClientIp(_request);
+        // P0: Rate limiting check
+        const rateLimit = checkRateLimit("test", ip);
+        if (!rateLimit.allowed) {
+            api?.logger.warn?.(`Rate limit exceeded for test webhook from ${ip}`);
+            return {
+                status: 429,
+                body: {
+                    sent: false,
+                    error: `Rate limit exceeded. Retry after ${rateLimit.retryAfter} seconds`,
+                },
+            };
+        }
         api?.logger.info?.("Received test webhook request");
         // Emit test event to all configured webhooks
         await emitEvent(toLogger(api.logger), configWebhooks, "webhook.test", {
@@ -173,4 +342,15 @@ async function handleTestWebhook(_request) {
         };
     }
 }
+/**
+ * Cleanup rate limit entries (call periodically)
+ */
+export function cleanupRateLimits() {
+    const now = Date.now();
+    for (const [key, entry] of rateLimitMap.entries()) {
+        if (now > entry.resetTime) {
+            rateLimitMap.delete(key);
+        }
+    }
+}
 //# sourceMappingURL=webhook-handler.js.map

package/dist/services/webhook-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-handler.js","sourceRoot":"","sources":["../../src/services/webhook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAWlE,4CAA4C;AAC5C,IAAI,GAAG,GAA6B,IAAI,CAAA;AACxC,IAAI,cAAc,GAAU,EAAE,CAAA;AAC9B,IAAI,kBAAsC,CAAA;AAE1C;;GAEG;AACH,SAAS,QAAQ,CACf,MAA+C;IAO/C,8CAA8C;IAC9C,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE5C,OAAO;QACL,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,QAAQ;KAChB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAwC;IAExC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAA;IACtB,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,CAAA;IAEpD,2BAA2B;IAC3B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,cAAc,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAA;IAE7C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,qCAAqC,CAAC,CAAA;IAExD,uBAAuB;IACvB,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,uBAAuB;KACjC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAIjC;IACC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAW,CAAA;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;QAE3B,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAChB,2BAA2B,WAAW,IAAI,WAAW,aAAa,MAAM,EAAE,CAC3E,CAAA;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACpD,IAAI,kBAAkB,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE;iBACtD,CAAA;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc;gBACjB,IAAI,WAAW,KAAK,wBAAwB,EAAE,CAAC;oBAC7C,6CAA6C;oBAC7C,MAAM,YAAY,GAAG,GAAG,EAAE,YAAmB,CAAA;oBAC7C,MAAM,OAAO,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,CAC1C,CAAC,GAAQ,EAAE,EAAE,CACX,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CACpE,CAAA;oBAED,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;wBACnB,iDAAiD;wBACjD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;wBAC3D,aAAa;6BACV,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;6BACvC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;4BACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;wBAC9D,CAAC,CAAC,CAAA;oBACN,CAAC;gBACH,CAAC;gBACD,MAAK;YAEP,KAAK,MAAM;gBACT,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;oBAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;wBAC1B,UAAU,EAAE,WAAW;wBACvB,aAAa,EAAE,qBAAqB;qBACrC,CAAA;oBACD,2BAA2B;oBAC3B,MAAM,SAAS,CACb,QAAQ,CAAC,GAAI,CAAC,MAAM,CAAC,EACrB,cAAc,EACd,eAAmC,EACnC;wBACE,SAAS,EAAE,MAAM;wBACjB,WAAW,EAAE,OAAO;wBACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;qBAC7B,CACF,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,CAAA;gBACtE,CAAC;gBACD,MAAK;QACT,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QAC3D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;SAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CAAC,QAItC;IACC,IAAI,CAAC;QACH,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAA;QAEjD,8CAA8C;QAC9C,qBAAqB;QACrB,2BAA2B;QAC3B,2BAA2B;QAE3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAA;QAChE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAA;IACnD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAIhC;IACC,IAAI,CAAC;QACH,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAA;QAEnD,6CAA6C;QAC7C,MAAM,SAAS,CACb,QAAQ,CAAC,GAAI,CAAC,MAAM,CAAC,EACrB,cAAc,EACd,cAAkC,EAClC;YACE,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,MAAM;SACpB,CACF,CAAA;QAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;SACtD,CAAA;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"webhook-handler.js","sourceRoot":"","sources":["../../src/services/webhook-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,GAEzB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAyB,MAAM,uBAAuB,CAAA;AAYxF,eAAe;AACf,IAAI,GAAG,GAA6B,IAAI,CAAA;AACxC,IAAI,cAAc,GAAU,EAAE,CAAA;AAC9B,IAAI,kBAAsC,CAAA;AAC1C,kDAAkD;AAClD,kDAAkD;AAElD,kBAAkB;AAClB,IAAI,SAAS,GAA4B,IAAI,CAAA;AAC7C,IAAI,WAAW,GAAoD,IAAI,CAAA;AAOvE,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAA;AAEtD,2BAA2B;AAC3B,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU;IACpD,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS;IACvD,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS;CAClD,CAAA;AAED;;GAEG;AACH,SAAS,QAAQ,CACf,MAA+C;IAO/C,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAE5C,OAAO;QACL,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,QAAQ;KAChB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,MAAgC,EAChC,EAAU;IAEV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,EAAE,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAEjC,IAAI,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEjC,0BAA0B;IAC1B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACpC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;QACnD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED,oBAAoB;IACpB,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IACvC,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAwC;IAExC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAA;IACtB,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,CAAA;IACpD,kDAAkD;IAClD,iEAAiE;IAEjE,2BAA2B;IAC3B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAmB,CAAA;IAC5C,cAAc,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAA;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAEnC,6BAA6B;IAC7B,MAAM,WAAW,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,IAAI,aAAa,CAAA;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1C,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClD,CAAC,CAAC,WAAW,CAAA;IAEf,6BAA6B;IAC7B,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC;QACrD,QAAQ;QACR,MAAM;KACP,CAAC,CAAA;IAEF,wBAAwB;IACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAE7D,sBAAsB;IACtB,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAE3C,mBAAmB;IACnB,SAAS,GAAG,IAAI,gBAAgB,CAAC;QAC/B,MAAM;QACN,aAAa,EAAE,kBAAkB;QACjC,QAAQ;KACT,CAAC,CAAA;IAEF,oBAAoB;IACpB,SAAS,CAAC,eAAe,CACvB,OAAO,EACP,IAAI,mBAAmB,CAAC;QACtB,MAAM;QACN,mBAAmB,EAAE,KAAK,EAAE,MAAc,EAAE,EAAE;YAC5C,MAAM,QAAQ,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAA;YAC7C,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,GAAQ,EAAE,EAAE,CACX,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CACpE,CAAA;QACH,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE;YACvC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;YAE3D,2CAA2C;YAC3C,IAAI,SAAS,GAAiB,IAAI,CAAA;YAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,OAAO,CAAC,GAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;oBAChD,OAAM;gBACR,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,GAAG,KAAc,CAAA;oBAC1B,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;wBAChB,kCAAkC;wBAClC,MAAM,KAAK,GAAG,CAAC,IAAI,OAAO,GAAG,IAAI,CAAA;wBACjC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,mDAAmD;YACnD,MAAM,CAAC,KAAK,EAAE,CAAC,qCAAqC,SAAS,GAAG,EAAE,SAAS,CAAC,CAAA;YAC5E,MAAM,cAAc,CAClB,MAAM,EACN,cAAc,EACd,SAAS,EACT,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EACvB,SAAS,EAAE,OAAO,IAAI,eAAe,CACtC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/D,MAAM,SAAS,CAAA;QACjB,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,SAAiB,EAAE,IAAa,EAAE,EAAE;YACpD,MAAM,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,SAA6B,EAAE,IAAI,CAAC,CAAA;QAC9E,CAAC;QACD,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE;YACX,oBAAoB,EAAE,CAAC,SAAiB,EAAE,EAAE;gBAC1C,IAAI,CAAC,WAAW;oBAAE,OAAO,IAAI,CAAA;gBAC7B,OAAO,WAAW,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAA;YACpD,CAAC;YACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,EAAE;gBACvC,IAAI,CAAC,WAAW;oBAAE,OAAM;gBACxB,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC1C,CAAC;SACF;KACF,CAAC,CACH,CAAA;IAED,SAAS,CAAC,eAAe,CACvB,YAAY,EACZ,IAAI,wBAAwB,CAAC;QAC3B,MAAM;KACP,CAAC,CACH,CAAA;IAED,uBAAuB;IACvB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,qDAAqD,CAAC,CAAA;IAExE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,uBAAuB;KACjC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;QACjB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,OAGpB;IACC,+CAA+C;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACpD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,CAAC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,qCAAqC;IACrC,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,SAAS,CAAA;AACtC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAIjC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QAE/B,0BAA0B;QAC1B,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,8CAA8C,EAAE,EAAE,CAAC,CAAA;YACtE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,oCAAoC,SAAS,CAAC,UAAU,UAAU;iBAC1E;aACF,CAAA;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE;aACtE,CAAA;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,cAAc,GAAmB;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBAC3C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;gBAClD,CAAC,CAAC,SAAS;YACb,KAAK,EAAG,OAAO,CAAC,IAAY,CAAC,UAAU;gBACrC,CAAC,CAAC,GAAI,OAAO,CAAC,IAAY,CAAC,UAAU,IAAK,OAAO,CAAC,IAAY,CAAC,YAAY,EAAE;gBAC7E,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;SACjD,CAAA;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QAExD,2CAA2C;QAC3C,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,KAAK,EAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;oBACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;aAC9D;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QAC3D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;SAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CAAC,OAItC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QAE/B,0BAA0B;QAC1B,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAA;YAC3E,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,oCAAoC,SAAS,CAAC,UAAU,UAAU;iBAC1E;aACF,CAAA;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE;aACtE,CAAA;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,cAAc,GAAmB;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,YAAY;YACpB,gEAAgE;YAChE,iCAAiC;YACjC,SAAS,EAAG,OAAO,CAAC,IAAY,EAAE,SAAS;SAC5C,CAAA;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QAExD,2CAA2C;QAC3C,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,KAAK,EAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;oBACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;aAC9D;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAA;QAChE,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;SAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAIhC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEhC,0BAA0B;QAC1B,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAA;YACrE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,oCAAoC,SAAS,CAAC,UAAU,UAAU;iBAC1E;aACF,CAAA;QACH,CAAC;QAED,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAA;QAEnD,6CAA6C;QAC7C,MAAM,SAAS,CACb,QAAQ,CAAC,GAAI,CAAC,MAAM,CAAC,EACrB,cAAc,EACd,cAAkC,EAClC;YACE,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,MAAM;SACpB,CACF,CAAA;QAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;SACtD,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YAC1B,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firela/billclaw-openclaw",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "description": "BillClaw OpenClaw Plugin - Adapter for OpenClaw AI framework",
   "type": "module",
   "main": "./dist/index.js",
@@ -20,16 +20,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "vitest",
-    "test:coverage": "vitest --coverage",
-    "lint": "oxlint",
-    "format": "oxfmt src/",
-    "format:write": "oxfmt -w src/",
-    "clean": "rm -rf dist"
-  },
   "keywords": [
     "openclaw",
     "plugin",
@@ -58,9 +48,9 @@
     "vitest": "^3.0.0"
   },
   "dependencies": {
-    "@firela/billclaw-core": "workspace:*",
     "plaid": "^32.0.0",
-    "zod": "^3.25.0"
+    "zod": "^3.25.0",
+    "@firela/billclaw-core": "0.2.0"
   },
   "peerDependencies": {
     "openclaw": "^0.0.1"
@@ -72,5 +62,15 @@
   },
   "engines": {
     "node": ">=20.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest",
+    "test:coverage": "vitest --coverage",
+    "lint": "oxlint",
+    "format": "oxfmt src/",
+    "format:write": "oxfmt -w src/",
+    "clean": "rm -rf dist"
   }
-}
+}