@hirey-ai/hirey 1.0.13

package/README.md

@@ -0,0 +1,85 @@
+# hi-openclaw-plugin
+
+Hirey Hi as a **native OpenClaw plugin**. Registers Hi's tools, agent-events claim service, and webhook ingress directly inside the OpenClaw gateway process — zero independent daemons, no `mcp.servers.hi` indirection, and no per-run frozen tool inventory boundary.
+
+This is the OpenClaw 5.4+ first-class path, published to ClawHub as **`clawhub:hirey`** (ClawPack code-plugin) and to npm as **`hirey`**. OpenClaw 4.23 ~ 5.3 hosts cannot load this ClawPack format and must install the prod bundle plugin **`clawhub:hirey-compatible`** instead (zip + skill + scripts wrapping `@hirey-ai/mcp-server` + `@hirey-ai/agent-receiver`).
+
+## Why this exists
+
+The bundle + spawn model needs:
+
+- one stdio child process for the MCP server (`@hirey-ai/mcp-server`)
+- one long-running daemon (`@hirey-ai/agent-receiver`) for cloud-to-host event delivery
+- a host installer mjs that uses `child_process` to run `npm install` + `openclaw config set` (which trips OpenClaw's pre-4.23 install scanner)
+- a two-message install flow because the LLM run that wrote `mcp.servers.hi` cannot call the just-installed tools in the same outer run (per-run frozen tool inventory)
+- `hooks.token` / `hooks.path` / `hooks.allowedSessionKeyPrefixes` / `/hooks/agent` plumbing on the OpenClaw side
+
+This native plugin replaces all of the above with three OpenClaw plugin SDK calls running inside the gateway process:
+
+- `api.registerTool(...)` for every Hi tool — exposed to the LLM directly, no MCP layer
+- `api.registerService(...)` for the agent-events claim loop — gateway owns the lifecycle, no orphan daemon
+- `api.registerHttpRoute(...)` for the webhook ingress — uses gateway's HTTP server, no separate hooks token
+
+## Distribution paths
+
+| Path | Audience |
+|---|---|
+| `clawhub:hirey` (this package, ClawPack code-plugin) | OpenClaw **5.4+**. Best UX, in-process, no boundary friction. |
+| `clawhub:hirey-compatible` (prod bundle plugin from `hi-platform`, zip + skills + scripts) | OpenClaw **4.23 ~ 5.3**. Wraps `@hirey-ai/mcp-server` + `@hirey-ai/agent-receiver` because these hosts cannot load ClawPack. |
+| `@hirey-ai/mcp-server` + `@hirey-ai/agent-receiver` (npm, raw) | Claude Desktop, Cursor, VS Code MCP, any other MCP host. Stable cross-host transport. Independent of OpenClaw. |
+
+Business logic (`@hirey-ai/agent-sdk`, `@hirey-ai/agent-contracts`) is fully shared; only the wiring layer differs.
+
+## Supported OpenClaw versions
+
+| OpenClaw version | `clawhub:hirey` (ClawPack) | `clawhub:hirey-compatible` (bundle) | Notes |
+|---|---|---|---|
+| **2026.5.4+** | ✅ recommended | ✅ works but skips native plugin benefits | ClawPack first-class path |
+| **2026.5.2 ~ 2026.5.3** | ❌ ClawHub server doesn't expose fallback `sha256hash` + `files[]` metadata to old client | ✅ | bundle only |
+| **2026.4.23 ~ 2026.5.1** | ❌ runtime expects date-format `pluginApi`, rejects semantic `1.0` | ✅ | bundle only |
+| **2026.4.14 ~ 2026.4.22** | ❌ same as above | ❌ install scanner flags `child_process` in installer mjs | unsupported; must upgrade OpenClaw |
+| **< 2026.4.14** | ❌ | ❌ | unsupported |
+
+## Install
+
+OpenClaw is a personal agent driven by natural language; the LLM picks which command to run. The recommended user-facing prompt that works across versions:
+
+```
+Install Hirey AI on this OpenClaw host. First check `openclaw --version`:
+- If 2026.5.4 or higher, run `openclaw plugins install clawhub:hirey`.
+- Otherwise, run `openclaw plugins install clawhub:hirey-compatible --dangerously-force-unsafe-install`.
+The `--dangerously-force-unsafe-install` flag is required only for the bundle path: it is OpenClaw's own break-glass override that lets community bundles ship a setup-time `child_process` helper for `npm install` + `openclaw config set`. The ClawPack path is in-process and does not need the flag.
+After install, call hi_agent_install (don't fabricate an agent id). Report the real agent_id and hooks_ready status.
+```
+
+Direct CLI for OpenClaw 5.4+ users:
+
+```bash
+openclaw plugins install clawhub:hirey
+openclaw gateway restart
+```
+
+For OpenClaw 4.23 ~ 5.3 users (bundle path):
+
+```bash
+openclaw plugins install clawhub:hirey-compatible --dangerously-force-unsafe-install
+openclaw gateway restart
+```
+
+The `--dangerously-force-unsafe-install` flag is required because OpenClaw 4.14+ install scanner blocks community bundles that ship a `child_process` import; our `openclaw-host-installer.mjs` legitimately uses `child_process.execFile` to spawn `npm install` and `openclaw config set` during setup. This is the OpenClaw-provided override flag (docs/cli/plugins.md), not a bypass of security controls.
+
+After restart, ask OpenClaw "Hi 健康吗?" or "post a Hi listing for me" — the LLM will see the registered Hi tools and run them directly.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm pack    # emits hirey-<version>.tgz
+```
+
+Use `openclaw plugins install -l <local-dir>` for local link-mode testing (only on OpenClaw 5.4+).
+
+## License
+
+UNLICENSED (private; published under unscoped `hirey` on the public npm registry but the source is not open source).

package/dist/clients.d.ts

@@ -0,0 +1,23 @@
+import { type HiAgentGatewayClient, type HiAgentPlatformClient, type HiAgentPlatformWellKnown } from '@hirey-ai/agent-sdk';
+import { type HiPersistedState, type StaleIdentityQuarantine } from './state.js';
+export type HiAuthorizedClients = {
+    state: HiPersistedState;
+    accessToken: string;
+    gateway: HiAgentGatewayClient;
+    platform: HiAgentPlatformClient;
+    wellKnown: HiAgentPlatformWellKnown;
+    quarantined: StaleIdentityQuarantine | null;
+};
+export declare function peekQuarantineNotice(): StaleIdentityQuarantine | null;
+export declare function loadStateWithQuarantine(stateDir: string, profile: string, currentPlatformBaseUrl: string): Promise<HiPersistedState>;
+export declare function buildAuthorizedClients(args: {
+    stateDir: string;
+    profile: string;
+    platformBaseUrl: string;
+}): Promise<HiAuthorizedClients>;
+export declare function buildPublicClients(platformBaseUrl: string): Promise<{
+    gateway: HiAgentGatewayClient;
+    platform: HiAgentPlatformClient;
+    wellKnown: HiAgentPlatformWellKnown;
+}>;
+//# sourceMappingURL=clients.d.ts.map

package/dist/clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.d.ts","sourceRoot":"","sources":["../src/clients.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC7B,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,SAAS,EAAE,wBAAwB,CAAC;IACpC,WAAW,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC7C,CAAC;AAMF,wBAAgB,oBAAoB,IAAI,uBAAuB,GAAG,IAAI,CAErE;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,sBAAsB,EAAE,MAAM,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAO3B;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsB/B;AAGD,wBAAsB,kBAAkB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;IACzE,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,SAAS,EAAE,wBAAwB,CAAC;CACrC,CAAC,CAGD"}

package/dist/clients.js

@@ -0,0 +1,47 @@
+// 包装 @hirey-ai/agent-sdk 的客户端构造，加 stale-identity quarantine。
+// hi platform 用 OAuth client_credentials grant：identity 里的 client_id/secret 拿 access_token，
+// 然后用 access_token 调 gateway/platform。
+import { createHiAgentClients, exchangeHiAgentClientCredentialsToken, } from '@hirey-ai/agent-sdk';
+import { quarantineStaleIdentityIfNeeded, readState, } from './state.js';
+// 模块级 quarantine 通知：load state 时如果发现 stale，挂一个 in-memory flag，
+// 让所有后续 tool response 都能 surface 一次（直到 plugin restart 自然清掉）。
+let _lastQuarantineNotice = null;
+export function peekQuarantineNotice() {
+    return _lastQuarantineNotice;
+}
+export async function loadStateWithQuarantine(stateDir, profile, currentPlatformBaseUrl) {
+    const raw = await readState(stateDir, profile);
+    const { state, quarantined } = await quarantineStaleIdentityIfNeeded(stateDir, profile, raw, currentPlatformBaseUrl);
+    if (quarantined)
+        _lastQuarantineNotice = quarantined;
+    return state;
+}
+export async function buildAuthorizedClients(args) {
+    const state = await loadStateWithQuarantine(args.stateDir, args.profile, args.platformBaseUrl);
+    if (!state.identity) {
+        throw new Error('hi_identity_missing: run hi_agent_install before calling authorized tools');
+    }
+    const token = await exchangeHiAgentClientCredentialsToken({
+        tokenUrl: state.identity.token_url,
+        clientId: state.identity.client_id,
+        clientSecret: state.identity.client_secret,
+    });
+    const clients = await createHiAgentClients({
+        platformBaseUrl: args.platformBaseUrl,
+        token: token.access_token,
+    });
+    return {
+        state,
+        accessToken: token.access_token,
+        gateway: clients.gateway,
+        platform: clients.platform,
+        wellKnown: clients.wellKnown,
+        quarantined: peekQuarantineNotice(),
+    };
+}
+// 不需要 OAuth 的端点（register / well-known / public capabilities listing），直接构造 client。
+export async function buildPublicClients(platformBaseUrl) {
+    const clients = await createHiAgentClients({ platformBaseUrl, token: '' });
+    return clients;
+}
+//# sourceMappingURL=clients.js.map

package/dist/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../src/clients.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,4FAA4F;AAC5F,uCAAuC;AAEvC,OAAO,EACL,oBAAoB,EACpB,qCAAqC,GAItC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,+BAA+B,EAC/B,SAAS,GAGV,MAAM,YAAY,CAAC;AAWpB,+DAA+D;AAC/D,6DAA6D;AAC7D,IAAI,qBAAqB,GAAmC,IAAI,CAAC;AAEjE,MAAM,UAAU,oBAAoB;IAClC,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,OAAe,EACf,sBAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,+BAA+B,CAClE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAC/C,CAAC;IACF,IAAI,WAAW;QAAE,qBAAqB,GAAG,WAAW,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAI5C;IACC,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,qCAAqC,CAAC;QACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QAClC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;KAC3C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,KAAK,CAAC,YAAY;KAC1B,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,oBAAoB,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,eAAuB;IAK9D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+import type { PluginRegisterApi } from './types.js';
+export default function registerHiOpenClawPlugin(api: PluginRegisterApi): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAoBpB,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,CA6E7E"}

package/dist/index.js

@@ -0,0 +1,92 @@
+// hi-openclaw-plugin entry: register Hirey AI 的 control tools + 14 platform capabilities +
+// agent-events claim service + webhook ingress route 进 OpenClaw gateway 进程。
+//
+// 设计原则：
+// 1. Idempotent：plugin loader 可能用不同 api 实例多次调本入口（懒加载、CLI 热加载、gateway
+//    hot-apply）。WeakSet<api> 守 register 不要重复。
+// 2. 缺能力 fail-soft：老 host 可能没 registerService 或 registerHttpRoute；feature-detect 后
+//    skip + warn，不要 throw 让 host 起不来。
+// 3. 真业务全部委托给 @hirey-ai/agent-sdk + 平台 /v1/capabilities/<id>/call，本文件只做 wiring。
+import { buildAllControlTools } from './tools/control.js';
+import { buildAllCapabilityTools } from './tools/capabilities.js';
+import { buildAgentEventsService } from './services/agent-events.js';
+import { buildWebhookRoute } from './routes/webhook.js';
+import { ensurePluginToolsAlsoAllowed } from './utils/openclaw-config.js';
+const _registeredApis = new WeakSet();
+function defaultedConfig(raw) {
+    return {
+        platformBaseUrl: raw?.platformBaseUrl?.trim() || 'https://hi.hirey.ai',
+        profile: raw?.profile?.trim() || 'openclaw-main',
+        stateDir: raw?.stateDir?.trim() || '',
+        webhookPath: raw?.webhookPath?.trim() || '/hi/webhook',
+        claimPollIntervalMs: Math.max(250, Number(raw?.claimPollIntervalMs ?? 1500)),
+        claimLeaseMs: Math.max(1000, Number(raw?.claimLeaseMs ?? 60000)),
+    };
+}
+export default function registerHiOpenClawPlugin(api) {
+    if (_registeredApis.has(api))
+        return;
+    _registeredApis.add(api);
+    const logger = api.logger ?? console;
+    const config = defaultedConfig(api.pluginConfig);
+    // ---- tools ----
+    // OpenClaw SDK 的 registerTool 签名是：
+    //   api.registerTool(factory: (ctx) => Tool | null, options: { names: [singleName] })
+    // 每次调一个 tool。factory 在每个 LLM session 启动时被调一次，返回该 session 可见的 tool 实例
+    // （可以根据 ctx.agentId / ctx.sessionKey 决定是否暴露）。这里我们让每个 hi tool 总是 visible（无 gating）。
+    if (typeof api.registerTool !== 'function') {
+        logger.warn?.('[hi-openclaw-plugin] host does not expose api.registerTool; tools will not be visible. Upgrade OpenClaw to >=2026.4.23.');
+    }
+    else {
+        const controlTools = buildAllControlTools(config);
+        const capabilityTools = buildAllCapabilityTools(config);
+        const allTools = [...controlTools, ...capabilityTools];
+        for (const tool of allTools) {
+            api.registerTool(() => tool, { names: [tool.name] });
+        }
+        logger.info?.('[hi-openclaw-plugin] registered tools', { count: allTools.length, names: allTools.map(t => t.name) });
+    }
+    // ---- service / route ----
+    // 1.0.9 起恢复 daemon claim/SSE 模式，但走 push 推送架构（拉到 event 后 POST hooks/agent
+    // loopback，OpenClaw 自动按 channel/to 把 LLM 输出推到用户 iMessage/Telegram 等已配置的
+    // channel）。
+    //
+    // 修 OOM 的关键不在去循环（业务上 push 必须长跑，pull 模型是错的），而在：
+    //   - 主路径换成 SSE pull_stream 长连接（1 个 conn hold 60+ 秒，重连周期分钟级），不再
+    //     每 1.5s 新建 fetch agent
+    //   - 启动 + 重连前先 claim drain backlog 兜底
+    //   - 不缓存 client（每次重连重建，跟官方 hirey-ai-agent-receiver runStreamLoop 等价）
+    //   - hooks/agent 投递的 fetch 是 fire-and-forget，不长占 socket
+    if (typeof api.registerService === 'function') {
+        api.registerService(buildAgentEventsService(config));
+    }
+    else {
+        logger.warn?.('[hi-openclaw-plugin] host does not expose api.registerService; agent-events daemon will not run, push delivery disabled. Upgrade OpenClaw to >=2026.4.23.');
+    }
+    if (typeof api.registerHttpRoute === 'function') {
+        api.registerHttpRoute(buildWebhookRoute(config, logger));
+    }
+    // ---- profile self-heal ----
+    // OpenClaw 的 tools.profile=coding 默认不让 plugin tools 出现在 LLM 的 toolbox。要让用户
+    // 装完 plugin 立刻可用，第一次 register 时主动检查 + patch tools.alsoAllow 加 group:plugins。
+    // 这件事不能等 LLM 调 hi_agent_install 时才做：那时 LLM 早已没看见 hi_agent_install。
+    // 也不能依赖 LLM 自己读懂 OpenClaw 配置语义后改：之前实测 LLM 把 alsoAllow 写成 allow，
+    // explicit allow override 把 read/exec/sessions_* 等内置工具全 filter 掉，整个 LLM run 没工具用。
+    // 因此 plugin 自己幂等 patch，atomic write，patch 完不立刻 restart gateway —— config hot-reload
+    // watcher 会自然 pick up，下一个 LLM session 起来 tool inventory 就 contains hi_*。
+    void ensurePluginToolsAlsoAllowed()
+        .then((res) => {
+        if (res.changed) {
+            logger.info?.('[hi-openclaw-plugin] auto-patched tools.alsoAllow=group:plugins so plugin tools become visible to LLM in coding profile', {
+                before: res.also_allow_before, after: res.also_allow_after,
+            });
+        }
+    })
+        .catch((err) => {
+        logger.warn?.('[hi-openclaw-plugin] tools.alsoAllow auto-patch failed (LLM may need to do it manually)', {
+            error: String(err?.message || err),
+        });
+    });
+    logger.info?.('[hi-openclaw-plugin] registered v1.0.0', { platform: config.platformBaseUrl, profile: config.profile, webhook: config.webhookPath });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,4EAA4E;AAC5E,EAAE;AACF,QAAQ;AACR,qEAAqE;AACrE,8CAA8C;AAC9C,mFAAmF;AACnF,sCAAsC;AACtC,gFAAgF;AAOhF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,MAAM,eAAe,GAAG,IAAI,OAAO,EAAqB,CAAC;AAEzD,SAAS,eAAe,CAAC,GAAuC;IAC9D,OAAO;QACL,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,qBAAqB;QACtE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe;QAChD,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;QACrC,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,aAAa;QACtD,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,mBAAmB,IAAI,IAAI,CAAC,CAAC;QAC5E,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,KAAK,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,GAAsB;IACrE,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IACrC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEjD,kBAAkB;IAClB,mCAAmC;IACnC,sFAAsF;IACtF,qEAAqE;IACrE,mFAAmF;IACnF,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,EAAE,CACX,yHAAyH,CAC1H,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAA2B,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,YAAY,CACd,GAAG,EAAE,CAAC,IAAI,EACV,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,4BAA4B;IAC5B,yEAAyE;IACzE,wEAAwE;IACxE,YAAY;IACZ,EAAE;IACF,+CAA+C;IAC/C,gEAAgE;IAChE,4BAA4B;IAC5B,uCAAuC;IACvC,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC9C,GAAG,CAAC,eAAe,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,EAAE,CACX,2JAA2J,CAC5J,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QAChD,GAAG,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,8BAA8B;IAC9B,2EAA2E;IAC3E,6EAA6E;IAC7E,mEAAmE;IACnE,gEAAgE;IAChE,kFAAkF;IAClF,oFAAoF;IACpF,yEAAyE;IACzE,KAAK,4BAA4B,EAAE;SAChC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,EAAE,CAAC,yHAAyH,EAAE;gBACvI,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;QAClB,MAAM,CAAC,IAAI,EAAE,CAAC,yFAAyF,EAAE;YACvG,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,CAAC,IAAI,EAAE,CACX,wCAAwC,EACxC,EAAE,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAC3F,CAAC;AACJ,CAAC"}

package/dist/routes/webhook.d.ts

@@ -0,0 +1,6 @@
+import type { PluginHttpRouteDefinition, PluginLogger, HiOpenClawPluginConfig } from '../types.js';
+export declare function getQueueSnapshot(): Array<Record<string, unknown>>;
+export declare function clearQueue(): void;
+export declare function pushEventToQueue(ev: Record<string, unknown>): void;
+export declare function buildWebhookRoute(config: Required<HiOpenClawPluginConfig>, logger: PluginLogger): PluginHttpRouteDefinition;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/routes/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAOnG,wBAAgB,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAEjE;AAED,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAID,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGlE;AAYD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,QAAQ,CAAC,sBAAsB,CAAC,EACxC,MAAM,EAAE,YAAY,GACnB,yBAAyB,CAwC3B"}

package/dist/routes/webhook.js

@@ -0,0 +1,76 @@
+// 接收来自 platform 的 agent events（通过 agent-events service loopback 或 platform 直接 push）。
+// 单进程内执行：read body → parse envelope → 决定怎么把 event 桥接到当前 LLM session。
+//
+// 当前 1.0.0 版本：route 接受 POST + 校验 envelope shape，把 event 写入 plugin 自己的 in-memory
+// queue。下一阶段（plugin SDK 提供 api.dispatch / api.deliverEvent 时）真正 bridge 进 LLM session。
+// 现阶段配 hi_agent_events_wait 之类的 polling tool 让 LLM 主动 fetch（避免阻塞 plugin SDK 决定）。
+// in-memory event queue（process-lifetime；plugin restart 后清空，但 platform 那侧 events 仍可
+// 通过 claim loop 重新拉到，因为 ack 了才算 consumed）。
+const _queue = [];
+const QUEUE_MAX = 500;
+export function getQueueSnapshot() {
+    return [..._queue];
+}
+export function clearQueue() {
+    _queue.length = 0;
+}
+// 给 services/agent-events.ts 用 —— 进程内直推 event，不走 fetch 也不读 env，避开 OpenClaw
+// install scanner 的 "credential harvesting (env + network)" 误报。
+export function pushEventToQueue(ev) {
+    _queue.push(ev);
+    while (_queue.length > QUEUE_MAX)
+        _queue.shift();
+}
+async function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let raw = '';
+        req.setEncoding?.('utf8');
+        req.on('data', (chunk) => { raw += chunk; });
+        req.on('end', () => resolve(raw));
+        req.on('error', reject);
+    });
+}
+export function buildWebhookRoute(config, logger) {
+    return {
+        path: config.webhookPath,
+        auth: 'plugin',
+        match: 'exact',
+        handler: async (req, res) => {
+            if (req.method !== 'POST') {
+                res.statusCode = 405;
+                res.setHeader('content-type', 'application/json');
+                res.end(JSON.stringify({ ok: false, error: 'method_not_allowed' }));
+                return;
+            }
+            try {
+                const raw = await readBody(req);
+                const env = raw ? JSON.parse(raw) : {};
+                if (typeof env !== 'object' || !env) {
+                    res.statusCode = 400;
+                    res.setHeader('content-type', 'application/json');
+                    res.end(JSON.stringify({ ok: false, error: 'invalid_envelope' }));
+                    return;
+                }
+                // queue with bounded size (drop oldest if overflow)
+                _queue.push(env);
+                while (_queue.length > QUEUE_MAX)
+                    _queue.shift();
+                logger.info?.('[hi-openclaw-plugin] webhook event queued', {
+                    topic: env?.topic ?? null,
+                    event_id: env?.event_id ?? null,
+                    queue_size: _queue.length,
+                });
+                res.statusCode = 200;
+                res.setHeader('content-type', 'application/json');
+                res.end(JSON.stringify({ ok: true, queued: true, queue_size: _queue.length }));
+            }
+            catch (err) {
+                logger.warn?.('[hi-openclaw-plugin] webhook handler error', { error: String(err?.message || err) });
+                res.statusCode = 500;
+                res.setHeader('content-type', 'application/json');
+                res.end(JSON.stringify({ ok: false, error: 'webhook_handler_error', detail: String(err?.message || err) }));
+            }
+        },
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/routes/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,sFAAsF;AACtF,iFAAiF;AAIjF,oFAAoF;AACpF,2CAA2C;AAC3C,MAAM,MAAM,GAAmC,EAAE,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,2EAA2E;AAC3E,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,EAA2B;IAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAQ;IAC9B,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAwC,EACxC,MAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;oBACpC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBACD,oDAAoD;gBACpD,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,EAAE,CAAC,2CAA2C,EAAE;oBACzD,KAAK,EAAG,GAAW,EAAE,KAAK,IAAI,IAAI;oBAClC,QAAQ,EAAG,GAAW,EAAE,QAAQ,IAAI,IAAI;oBACxC,UAAU,EAAE,MAAM,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,EAAE,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpG,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/agent-events.d.ts

@@ -0,0 +1,3 @@
+import type { PluginServiceDefinition, HiOpenClawPluginConfig } from '../types.js';
+export declare function buildAgentEventsService(config: Required<HiOpenClawPluginConfig>): PluginServiceDefinition;
+//# sourceMappingURL=agent-events.d.ts.map

package/dist/services/agent-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-events.d.ts","sourceRoot":"","sources":["../../src/services/agent-events.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAEV,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,aAAa,CAAC;AAwDrB,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,CAAC,sBAAsB,CAAC,GACvC,uBAAuB,CAmNzB"}

package/dist/services/agent-events.js

@@ -0,0 +1,267 @@
+// Hi push 推送 daemon —— OpenClaw native plugin 内的 in-process 长跑 service。
+//
+// 等价于老 hirey-ai-agent-receiver 的 runStreamLoop：
+//   1. 启动 → 先 claim drain backlog（把暂存的 owner-actionable events 清掉）
+//   2. 主路径连 SSE pull_stream（一个长连接 hold 60+ 秒，server 主动推 event id）
+//   3. 收到 SSE event id → fetch event detail → 投递给 OpenClaw → ack consumed
+//   4. SSE 断了 → backoff + 回到第 1 步重新 drain + 重连
+//
+// 这种 outbound-initiated 长连接是 NAT 后面 local agent 收云上 push 的业界 best practice
+// （2026 年 webhook 主导期已经被 SSE / claim 取代），跟 hirey-ai-agent-receiver 的官方 daemon 一致。
+//
+// 投递路径：daemon 拉到 event 后通过 buildOpenClawHookPayloadWithRoute 转成跟老 receiver
+// 完全一致的 hook payload，POST 到本机 OpenClaw gateway 的 /<hooks.path>/agent 端点。
+// gateway 收到 → dispatchAgentHook → runCronIsolatedAgentTurn → LLM 跑 turn
+// → OpenClaw 按 hook payload 里的 channel/to 自动通过 iMessage / Telegram 等已注册 channel
+// 把 LLM 输出送到用户。这一段 OpenClaw 自己负责，plugin 不参与。
+//
+// 关键设计：每次 SSE 重连 / drain 都 fresh 重建 OAuth + clients，不缓存，跟 receiver 完全
+// 等价。SSE 断重连周期是分钟级（不是秒级），所以重建 client 的 GC 压力小，不会像 1.0.4 那样
+// 每秒新 fetch agent 把 gateway 进程 4 GB heap 撑爆。
+import { buildAuthorizedClients, } from '../clients.js';
+import { resolveStateDir, readState, updateState } from '../state.js';
+import { buildOpenClawHookPayloadWithRoute } from '../utils/openclaw-hooks-payload.js';
+import { streamAgentEvents } from '@hirey-ai/agent-sdk';
+// SSE 重连之间的最小等待，避免连接抖动时疯狂重连。线性 backoff 上限。
+const RECONNECT_BASE_MS = 2_000;
+const RECONNECT_MAX_MS = 30_000;
+// 没装 identity / hooks 配置时的 idle backoff。daemon 不会强求 install，等 install_tool 跑完。
+const IDLE_BACKOFF_MS = 30_000;
+function resolveHooksUrl(rt) {
+    const path = rt.hooks_path.startsWith('/') ? rt.hooks_path : `/${rt.hooks_path}`;
+    // path 形如 "/hooks"；最终 endpoint 是 "/hooks/agent"
+    const cleanedPath = path.endsWith('/') ? path.slice(0, -1) : path;
+    return `http://127.0.0.1:${rt.gateway_port}${cleanedPath}/agent`;
+}
+async function deliverEventToHooks(args) {
+    // 投递 hook payload：跟老 receiver 完全同形态。
+    const body = buildOpenClawHookPayloadWithRoute({ event: args.event, config: null });
+    const response = await fetch(args.hooksUrl, {
+        method: 'POST',
+        headers: {
+            'content-type': 'application/json',
+            'authorization': `Bearer ${args.hooksToken}`,
+        },
+        body: JSON.stringify(body),
+    });
+    const text = await response.text();
+    if (!response.ok) {
+        args.logger.warn?.('[hi-openclaw-plugin] hook delivery failed', {
+            status: response.status,
+            url: args.hooksUrl,
+            body_preview: text.slice(0, 240),
+        });
+        return { ok: false, status: response.status, body: text };
+    }
+    return { ok: true, status: response.status, body: text };
+}
+export function buildAgentEventsService(config) {
+    const stateDir = config.stateDir || resolveStateDir(config.profile);
+    let stopped = false;
+    let activeAbort = null;
+    return {
+        id: 'hi-agent-events',
+        async start(ctx) {
+            stopped = false;
+            const logger = ctx.logger;
+            logger.info?.('[hi-openclaw-plugin] agent-events service starting (sse pull_stream + claim drain)', {
+                profile: config.profile,
+                platform: config.platformBaseUrl,
+            });
+            const isReady = async () => {
+                const state = await readState(stateDir, config.profile);
+                if (!state.identity)
+                    return { auth: null, rt: null };
+                const inst = state.runtime?.install;
+                if (!inst?.hooks_token || !inst?.hooks_path || !inst?.gateway_port) {
+                    return { auth: null, rt: null };
+                }
+                const auth = await buildAuthorizedClients({
+                    stateDir, profile: config.profile, platformBaseUrl: config.platformBaseUrl,
+                }).catch((err) => {
+                    const msg = String(err?.message || err);
+                    if (!msg.includes('hi_identity_missing')) {
+                        logger.warn?.('[hi-openclaw-plugin] auth client build failed', { error: msg });
+                    }
+                    return null;
+                });
+                if (!auth)
+                    return { auth: null, rt: null };
+                return {
+                    auth,
+                    rt: {
+                        hooks_token: inst.hooks_token,
+                        hooks_path: inst.hooks_path,
+                        gateway_port: inst.gateway_port,
+                    },
+                };
+            };
+            // 把一个 event snapshot 走完整的 deliver-then-ack 流程。
+            const deliverAndAck = async (params) => {
+                const { auth, rt, event, leaseId } = params;
+                const hooksUrl = resolveHooksUrl(rt);
+                let result = null;
+                try {
+                    const r = await deliverEventToHooks({
+                        hooksUrl, hooksToken: rt.hooks_token, event, logger,
+                    });
+                    result = r;
+                }
+                catch (err) {
+                    // 投递异常 → ack failed，平台后续重投。
+                    await auth.gateway.ackEvents({
+                        ...(leaseId ? { lease_id: leaseId } : {}),
+                        acks: [{
+                                event_id: event.event_id,
+                                status: 'failed',
+                                last_error: String(err?.message || err),
+                                retry_after_ms: 60_000,
+                            }],
+                    }).catch(() => { });
+                    return;
+                }
+                if (!result.ok) {
+                    await auth.gateway.ackEvents({
+                        ...(leaseId ? { lease_id: leaseId } : {}),
+                        acks: [{
+                                event_id: event.event_id,
+                                status: 'failed',
+                                last_error: `hook_delivery_${result.status}`,
+                                retry_after_ms: 60_000,
+                            }],
+                    }).catch(() => { });
+                    return;
+                }
+                await auth.gateway.ackEvents({
+                    ...(leaseId ? { lease_id: leaseId } : {}),
+                    acks: [{
+                            event_id: event.event_id,
+                            status: 'consumed',
+                        }],
+                }).catch((err) => {
+                    logger.warn?.('[hi-openclaw-plugin] event ack failed', { error: String(err?.message || err) });
+                });
+                // bump runtime cursor
+                await updateState(stateDir, config.profile, (cur) => ({
+                    ...cur,
+                    runtime: {
+                        ...cur.runtime,
+                        last_consumed_stream_seq: Math.max(cur.runtime.last_consumed_stream_seq, Number(event.stream_seq) || 0),
+                        updated_at: new Date().toISOString(),
+                    },
+                })).catch(() => { });
+            };
+            // 启动 / 重连前 drain backlog —— 用 short claim 把已经累积的 events 清完。
+            const drainBacklog = async (auth, rt) => {
+                while (!stopped) {
+                    const state = await readState(stateDir, config.profile);
+                    const claimed = await auth.gateway.claimEvents({
+                        after_seq: state.runtime.last_consumed_stream_seq || 0,
+                        limit: 20,
+                        ...(state.runtime.last_claim_lease_id ? { claim_lease_id: state.runtime.last_claim_lease_id } : {}),
+                    });
+                    await updateState(stateDir, config.profile, (cur) => ({
+                        ...cur,
+                        runtime: {
+                            ...cur.runtime,
+                            last_claim_lease_id: claimed.claim_lease_id || cur.runtime.last_claim_lease_id,
+                        },
+                    })).catch(() => { });
+                    const items = (claimed?.items || []);
+                    if (items.length === 0)
+                        return;
+                    logger.info?.(`[hi-openclaw-plugin] drained ${items.length} backlog event(s)`, {
+                        first_topic: items[0]?.topic,
+                    });
+                    for (const ev of items) {
+                        if (stopped)
+                            return;
+                        await deliverAndAck({ auth, rt, event: ev, leaseId: claimed.claim_lease_id });
+                    }
+                }
+            };
+            // 一次 SSE 长连接 session。流抽干 / 断 / throw 时返回，外层做重连。
+            const runOneSseSession = async (auth, rt) => {
+                const state = await readState(stateDir, config.profile);
+                const lastSeq = state.runtime.last_consumed_stream_seq || 0;
+                const streamUrl = auth.gateway.streamUrl
+                    ? auth.gateway.streamUrl(lastSeq)
+                    : `${config.platformBaseUrl}/v1/agent-events/stream${lastSeq ? `?after_seq=${lastSeq}` : ''}`;
+                logger.info?.('[hi-openclaw-plugin] sse connect', { url: streamUrl, after_seq: lastSeq });
+                for await (const envelope of streamAgentEvents({
+                    url: streamUrl,
+                    token: auth.accessToken,
+                })) {
+                    if (stopped)
+                        return;
+                    if (envelope.event !== 'agent_event')
+                        continue;
+                    const eventId = envelope.data?.event_id;
+                    if (!eventId || typeof eventId !== 'string')
+                        continue;
+                    // SSE envelope 里通常是 envelope（精简）；一些字段（reply_route_snapshot / payload）可能要 fetch
+                    // 完整 snapshot 才有，跟 receiver 一致。
+                    let fullEvent = envelope.data;
+                    if (typeof auth.gateway.fetchEvent === 'function') {
+                        try {
+                            const fetched = await auth.gateway.fetchEvent(eventId);
+                            if (fetched?.ok && fetched?.event)
+                                fullEvent = fetched.event;
+                        }
+                        catch (err) {
+                            logger.warn?.('[hi-openclaw-plugin] fetchEvent failed, using envelope only', {
+                                event_id: eventId,
+                                error: String(err?.message || err),
+                            });
+                        }
+                    }
+                    await deliverAndAck({ auth, rt, event: fullEvent, leaseId: null });
+                }
+            };
+            // 主循环：drain → SSE → drain → SSE …
+            const runMainLoop = async () => {
+                let backoffMs = RECONNECT_BASE_MS;
+                while (!stopped) {
+                    const ready = await isReady();
+                    if (!ready.auth || !ready.rt) {
+                        await sleep(IDLE_BACKOFF_MS);
+                        continue;
+                    }
+                    try {
+                        await drainBacklog(ready.auth, ready.rt);
+                        backoffMs = RECONNECT_BASE_MS;
+                        await runOneSseSession(ready.auth, ready.rt);
+                        // 流自然结束（远端关闭），立刻重新 drain + 重连
+                        backoffMs = RECONNECT_BASE_MS;
+                    }
+                    catch (err) {
+                        const msg = String(err?.message || err);
+                        logger.warn?.('[hi-openclaw-plugin] sse loop error, will reconnect', { error: msg, backoff_ms: backoffMs });
+                        await sleep(backoffMs);
+                        backoffMs = Math.min(backoffMs * 2, RECONNECT_MAX_MS);
+                    }
+                }
+            };
+            // 用 abort signal 让 stop() 能干净中断 SSE / sleep
+            const abort = new AbortController();
+            activeAbort = abort;
+            void runMainLoop();
+            logger.info?.('[hi-openclaw-plugin] agent-events service started');
+        },
+        async stop(ctx) {
+            stopped = true;
+            if (activeAbort) {
+                try {
+                    activeAbort.abort();
+                }
+                catch { }
+                activeAbort = null;
+            }
+            ctx.logger.info?.('[hi-openclaw-plugin] agent-events service stopped');
+        },
+    };
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=agent-events.js.map