@invago/mixin 1.0.9 → 1.0.10

package/src/status.ts

@@ -2,6 +2,7 @@ import { buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary } from "o
 import type { OpenClawConfig } from "openclaw/plugin-sdk";
 import { getAccountConfig, resolveDefaultAccountId } from "./config.js";
 import { getOutboxPathsSnapshot, type OutboxStatus } from "./send-service.js";
+import type { getMixpayStatusSnapshot } from "./mixpay-worker.js";
 
 type RuntimeLifecycleSnapshot = {
   running?: boolean | null;
@@ -23,6 +24,9 @@ type MixinChannelStatusSnapshot = {
   outboxFile?: string | null;
   outboxPending?: number | null;
   mediaMaxMb?: number | null;
+  mixpayPendingOrders?: number | null;
+  mixpayStoreDir?: string | null;
+  mixpayStoreFile?: string | null;
 };
 
 type MixinStatusAccount = {
@@ -44,12 +48,16 @@ export function resolveMixinStatusSnapshot(
   cfg: OpenClawConfig,
   accountId?: string,
   outboxStatus?: OutboxStatus | null,
+  mixpayStatus?: Awaited<ReturnType<typeof getMixpayStatusSnapshot>> | null,
 ): {
   defaultAccountId: string;
   outboxDir: string;
   outboxFile: string;
   outboxPending: number;
   mediaMaxMb: number | null;
+  mixpayPendingOrders: number;
+  mixpayStoreDir: string | null;
+  mixpayStoreFile: string | null;
 } {
   const defaultAccountId = resolveDefaultAccountId(cfg);
   const resolvedAccountId = accountId ?? defaultAccountId;
@@ -61,6 +69,9 @@ export function resolveMixinStatusSnapshot(
     outboxFile,
     outboxPending: outboxStatus?.totalPending ?? 0,
     mediaMaxMb: accountConfig.mediaMaxMb ?? null,
+    mixpayPendingOrders: mixpayStatus?.pendingOrders ?? 0,
+    mixpayStoreDir: mixpayStatus?.storeDir ?? null,
+    mixpayStoreFile: mixpayStatus?.storeFile ?? null,
   };
 }
 
@@ -75,6 +86,9 @@ export function buildMixinChannelSummary(params: {
     outboxFile: snapshot.outboxFile ?? null,
     outboxPending: snapshot.outboxPending ?? 0,
     mediaMaxMb: snapshot.mediaMaxMb ?? null,
+    mixpayPendingOrders: snapshot.mixpayPendingOrders ?? 0,
+    mixpayStoreDir: snapshot.mixpayStoreDir ?? null,
+    mixpayStoreFile: snapshot.mixpayStoreFile ?? null,
   };
 }
 

package/src/decrypt.ts

@@ -1,126 +0,0 @@
-import crypto from 'crypto';
-
-/**
- * 将 Mixin 的 Ed25519 seed 转换为 Curve25519 私钥，并与对端公钥协商出共享密钥
- * @param seedHex 64 字符的 Hex 字符串，对应 session_private_key
- * @param peerPublicKey 32 字节的对端 Curve25519 公钥
- */
-export function x25519KeyAgreement(seedHex: string, peerPublicKey: Buffer): Buffer {
-  // 1. 将 64 字符的 Hex 转换为 32 字节的 seed
-  const seedBytes = Buffer.from(seedHex, 'hex');
-  if (seedBytes.length !== 32) {
-    throw new Error('Invalid Ed25519 seed length, expected 32 bytes.');
-  }
-
-  // 2. SHA-512 散列
-  const hash = crypto.createHash('sha512').update(seedBytes).digest();
-  
-  // 3. 提取前 32 字节并进行 Curve25519 位截断 (Clamping)
-  const privateKeyX25519 = Buffer.from(hash.slice(0, 32));
-  privateKeyX25519[0] &= 248;
-  privateKeyX25519[31] &= 127;
-  privateKeyX25519[31] |= 64;
-
-  const ecdh = crypto.createECDH('x25519');
-  ecdh.setPrivateKey(privateKeyX25519);
-  
-  return ecdh.computeSecret(peerPublicKey);
-}
-
-/**
- * 解密 Mixin ENCRYPTED_TEXT 消息 (对应 Go SDK DecryptMessageData)
- * @param data Base64 编码的加密数据
- * @param sessionId 机器人的 session_id
- * @param privateKey 机器人的 ed25519 私钥（hex 格式，实为 seed）
- * @returns 解密后的明文，失败返回 null
- */
-export function decryptMessageData(
-  data: string,
-  sessionId: string,
-  privateKey: string
-): string | null {
-  try {
-    // 1. Base64 解码，处理可能的 URL-safe Base64
-    let base64 = data.replace(/-/g, '+').replace(/_/g, '/');
-    while (base64.length % 4) {
-      base64 += '=';
-    }
-    const encryptedBytes = Buffer.from(base64, 'base64');
-
-    // 验证最小长度: version(1) + sessionCount(2) + senderPubKey(32) + nonce(12)
-    if (encryptedBytes.length < 1 + 2 + 32 + 12) {
-      console.error('[mixin decrypt] data too short:', encryptedBytes.length);
-      return null;
-    }
-
-    // 解析消息结构
-    const version = encryptedBytes[0];
-    if (version !== 1) {
-      console.error('[mixin decrypt] unsupported version:', version);
-      return null;
-    }
-
-    const sessionCount = encryptedBytes.readUInt16LE(1);
-    let offset = 3;
-
-    // 2. 提取发送者公钥 (已经是 Curve25519)
-    const senderPublicKey = encryptedBytes.slice(offset, offset + 32);
-    offset += 32;
-
-    // 查找匹配的 session
-    const sessionIdBuffer = Buffer.from(sessionId.replace(/-/g, ''), 'hex');
-
-    let sessionData: Buffer | null = null;
-    for (let i = 0; i < sessionCount; i++) {
-      const sessionIdInMsg = encryptedBytes.slice(offset, offset + 16);
-
-      if (sessionIdInMsg.equals(sessionIdBuffer)) {
-        sessionData = encryptedBytes.slice(offset + 16, offset + 64);
-        break; // 暂不中断读取，只取我们自己的 session 块
-      }
-      offset += 64;
-    }
-
-    if (!sessionData) {
-      console.error('[mixin decrypt] session not found');
-      return null;
-    }
-
-    // 3. 计算 Shared Secret
-    const sharedSecret = x25519KeyAgreement(privateKey, senderPublicKey);
-    
-    // 4. 解密 Message Key (AES-256-CBC)
-    // sessionData 的前 16 字节为 IV，后 32 字节为加密后的 key
-    const sessionIv = sessionData.slice(0, 16);
-    const encryptedKey = sessionData.slice(16, 48);
-    
-    const decipherKey = crypto.createDecipheriv('aes-256-cbc', sharedSecret, sessionIv);
-    // Mixin SDK 这里加了 padding 处理。如果后续失败，尝试 decipherKey.setAutoPadding(false);
-    const rawMessageKey = Buffer.concat([decipherKey.update(encryptedKey), decipherKey.final()]);
-    
-    // 取前 16 字节！
-    const messageKey = rawMessageKey.slice(0, 16);
-
-    // 5. 获取 Nonce 和 密文
-    const prefixSize = 3 + 32 + sessionCount * 64;
-    const nonce = encryptedBytes.slice(prefixSize, prefixSize + 12); // 注意这里是 12 字节!!!
-    const encryptedText = encryptedBytes.slice(prefixSize + 12);
-
-    // 6. 解密消息体 (AES-128-GCM)
-    // 对于 GCM，还需要分离出 authentication tag (后 16 字节)
-    const tag = encryptedText.slice(-16);
-    const ciphertext = encryptedText.slice(0, -16);
-
-    const decipherGcm = crypto.createDecipheriv('aes-128-gcm', messageKey, nonce);
-    decipherGcm.setAuthTag(tag);
-    
-    let decryptedText = decipherGcm.update(ciphertext);
-    decryptedText = Buffer.concat([decryptedText, decipherGcm.final()]);
-
-    return decryptedText.toString('utf8');
-
-  } catch (error) {
-    console.error('[mixin decrypt] error:', error);
-    return null;
-  }
-}

package/tools/mixin-plugin-onboard/README.md

@@ -1,98 +0,0 @@
-# Mixin Plugin Onboarding CLI
-
-This CLI is bundled inside [`@invago/mixin`](https://www.npmjs.com/package/@invago/mixin). It helps inspect local OpenClaw installation state, verify key paths, and automate plugin install or update commands.
-
-## Commands
-
-### `info`
-
-Prints the current local OpenClaw and Mixin plugin context:
-
-- OpenClaw home, state, and extensions directories
-- detected `openclaw.json` path
-- detected Mixin plugin directories
-- whether the plugin looks enabled in config
-- current outbox path
-- whether `ffprobe` is available
-
-Run:
-
-```bash
-npx -y @invago/mixin info
-```
-
-### `doctor`
-
-Runs a basic local diagnosis and returns a non-zero exit code when required checks fail.
-
-Current checks:
-
-- config file found
-- `channels.mixin` present
-- plugin enabled in config
-- plugin installed in extensions
-- outbox directory writable
-- `ffprobe` available
-
-It also reports leftover `.openclaw-install-stage-*` directories if any are detected.
-
-Run:
-
-```bash
-npx -y @invago/mixin doctor
-```
-
-### `install`
-
-Runs:
-
-```bash
-openclaw plugins install @invago/mixin
-```
-
-You can also pass a custom npm spec:
-
-```bash
-npx -y @invago/mixin install @invago/mixin@latest
-```
-
-### `update`
-
-Runs:
-
-```bash
-openclaw plugins install @invago/mixin@latest
-```
-
-Run:
-
-```bash
-npx -y @invago/mixin update
-```
-
-## Local Development
-
-From this repository:
-
-```bash
-node --import jiti/register.js tools/mixin-plugin-onboard/src/index.ts info
-node --import jiti/register.js tools/mixin-plugin-onboard/src/index.ts doctor
-```
-
-Or from the tool directory:
-
-```bash
-cd tools/mixin-plugin-onboard
-npm run info
-npm run doctor
-```
-
-## Publish
-
-This CLI is published together with the main `@invago/mixin` package from the repository root.
-
-## Notes
-
-- This CLI is intentionally read-mostly right now.
-- `install` and `update` delegate to the local `openclaw` command.
-- `doctor` currently treats missing `ffprobe` as a failed check because native outbound audio-as-voice depends on it.

package/tools/mixin-plugin-onboard/bin/mixin-plugin-onboard.mjs

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import "jiti/register.js";
-await import("../src/index.ts");

package/tools/mixin-plugin-onboard/src/commands/doctor.ts

@@ -1,28 +0,0 @@
-import { buildContext, checkWritableDir, findMixinPluginDirs, isPluginEnabled, readMixinConfig, runFfprobeCheck } from "../utils.ts";
-
-export async function runDoctor(): Promise<number> {
-  const ctx = await buildContext();
-  const pluginDirs = await findMixinPluginDirs(ctx.extensionsDir);
-  const mixinConfig = readMixinConfig(ctx.config);
-  const checks = [
-    { label: "config_found", ok: Boolean(ctx.configPath) },
-    { label: "mixin_config_present", ok: Boolean(mixinConfig) },
-    { label: "plugin_enabled", ok: isPluginEnabled(ctx.config) },
-    { label: "plugin_installed", ok: pluginDirs.length > 0 },
-    { label: "outbox_writable", ok: await checkWritableDir(ctx.outboxDir) },
-    { label: "ffprobe_available", ok: runFfprobeCheck() },
-  ];
-
-  const stageDirs = pluginDirs.filter((dir) => dir.includes(".openclaw-install-stage-"));
-  console.log(JSON.stringify({
-    ok: checks.every((item) => item.ok),
-    checks,
-    stageDirs,
-    pluginDirs,
-    configPath: ctx.configPath,
-    outboxDir: ctx.outboxDir,
-    outboxFile: ctx.outboxFile,
-  }, null, 2));
-
-  return checks.every((item) => item.ok) ? 0 : 1;
-}

package/tools/mixin-plugin-onboard/src/commands/info.ts

@@ -1,23 +0,0 @@
-import { buildContext, findMixinPluginDirs, isPluginEnabled, readMixinConfig, runFfprobeCheck } from "../utils.ts";
-
-export async function runInfo(): Promise<number> {
-  const ctx = await buildContext();
-  const pluginDirs = await findMixinPluginDirs(ctx.extensionsDir);
-  const mixinConfig = readMixinConfig(ctx.config);
-
-  console.log(JSON.stringify({
-    homeDir: ctx.homeDir,
-    stateDir: ctx.stateDir,
-    extensionsDir: ctx.extensionsDir,
-    configPath: ctx.configPath,
-    pluginDirs,
-    pluginEnabled: isPluginEnabled(ctx.config),
-    mixinConfigured: Boolean(mixinConfig),
-    defaultAccount: typeof mixinConfig?.defaultAccount === "string" ? mixinConfig.defaultAccount : "default",
-    outboxDir: ctx.outboxDir,
-    outboxFile: ctx.outboxFile,
-    ffprobeAvailable: runFfprobeCheck(),
-  }, null, 2));
-
-  return 0;
-}

package/tools/mixin-plugin-onboard/src/commands/install.ts

@@ -1,5 +0,0 @@
-import { runOpenClawInstall } from "../utils.ts";
-
-export async function runInstall(spec?: string): Promise<number> {
-  return runOpenClawInstall(spec?.trim() || "@invago/mixin");
-}

package/tools/mixin-plugin-onboard/src/commands/update.ts

@@ -1,5 +0,0 @@
-import { runOpenClawInstall } from "../utils.ts";
-
-export async function runUpdate(spec?: string): Promise<number> {
-  return runOpenClawInstall(spec?.trim() || "@invago/mixin@latest");
-}

package/tools/mixin-plugin-onboard/src/index.ts

@@ -1,49 +0,0 @@
-import { runDoctor } from "./commands/doctor.ts";
-import { runInfo } from "./commands/info.ts";
-import { runInstall } from "./commands/install.ts";
-import { runUpdate } from "./commands/update.ts";
-
-function printUsage(): void {
-  console.log(`mixin-plugin-onboard <command>
-
-Commands:
-  info
-  doctor
-  install [npm-spec]
-  update [npm-spec]
-`);
-}
-
-async function main(): Promise<void> {
-  const [, , command, arg] = process.argv;
-  if (!command || command === "help" || command === "--help" || command === "-h") {
-    printUsage();
-    process.exitCode = 0;
-    return;
-  }
-
-  if (command === "info") {
-    process.exitCode = await runInfo();
-    return;
-  }
-
-  if (command === "doctor") {
-    process.exitCode = await runDoctor();
-    return;
-  }
-
-  if (command === "install") {
-    process.exitCode = await runInstall(arg);
-    return;
-  }
-
-  if (command === "update") {
-    process.exitCode = await runUpdate(arg);
-    return;
-  }
-
-  printUsage();
-  process.exitCode = 1;
-}
-
-await main();

package/tools/mixin-plugin-onboard/src/utils.ts

@@ -1,189 +0,0 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-
-export type OpenClawContext = {
-  homeDir: string;
-  stateDir: string;
-  extensionsDir: string;
-  configPath: string | null;
-  config: Record<string, unknown> | null;
-  outboxDir: string;
-  outboxFile: string;
-};
-
-export function resolveHomeDir(env: NodeJS.ProcessEnv = process.env): string {
-  const configured = env.OPENCLAW_HOME?.trim();
-  if (configured) {
-    return configured;
-  }
-  return path.join(os.homedir(), ".openclaw");
-}
-
-export function resolveStateDir(env: NodeJS.ProcessEnv = process.env): string {
-  const configured = env.OPENCLAW_STATE_DIR?.trim() || env.CLAWDBOT_STATE_DIR?.trim();
-  if (configured) {
-    return configured;
-  }
-  return path.join(resolveHomeDir(env), "state");
-}
-
-export function resolveExtensionsDir(env: NodeJS.ProcessEnv = process.env): string {
-  return path.join(resolveHomeDir(env), "extensions");
-}
-
-export function resolveOutboxPaths(env: NodeJS.ProcessEnv = process.env): {
-  outboxDir: string;
-  outboxFile: string;
-} {
-  const outboxDir = path.join(resolveStateDir(env), "mixin");
-  return {
-    outboxDir,
-    outboxFile: path.join(outboxDir, "mixin-outbox.json"),
-  };
-}
-
-export async function readConfig(env: NodeJS.ProcessEnv = process.env): Promise<{
-  path: string | null;
-  config: Record<string, unknown> | null;
-}> {
-  const explicit = env.OPENCLAW_CONFIG?.trim();
-  const candidates = [
-    explicit,
-    path.join(resolveHomeDir(env), "openclaw.json"),
-    path.join(process.cwd(), "openclaw.json"),
-  ].filter((value): value is string => Boolean(value));
-
-  for (const candidate of candidates) {
-    try {
-      const raw = await fs.readFile(candidate, "utf8");
-      return {
-        path: candidate,
-        config: parseLooseConfig(raw),
-      };
-    } catch {
-      continue;
-    }
-  }
-
-  return {
-    path: null,
-    config: null,
-  };
-}
-
-function parseLooseConfig(raw: string): Record<string, unknown> {
-  try {
-    return JSON.parse(raw) as Record<string, unknown>;
-  } catch {
-    const relaxed = raw
-      .replace(/^\uFEFF/, "")
-      .replace(/\/\*[\s\S]*?\*\//g, "")
-      .replace(/^\s*\/\/.*$/gm, "")
-      .replace(/,\s*([}\]])/g, "$1");
-    return JSON.parse(relaxed) as Record<string, unknown>;
-  }
-}
-
-export async function buildContext(env: NodeJS.ProcessEnv = process.env): Promise<OpenClawContext> {
-  const config = await readConfig(env);
-  const outbox = resolveOutboxPaths(env);
-  return {
-    homeDir: resolveHomeDir(env),
-    stateDir: resolveStateDir(env),
-    extensionsDir: resolveExtensionsDir(env),
-    configPath: config.path,
-    config: config.config,
-    outboxDir: outbox.outboxDir,
-    outboxFile: outbox.outboxFile,
-  };
-}
-
-export async function findMixinPluginDirs(extensionsDir: string): Promise<string[]> {
-  try {
-    const entries = await fs.readdir(extensionsDir, { withFileTypes: true });
-    const matched: string[] = [];
-    for (const entry of entries) {
-      if (!entry.isDirectory()) {
-        continue;
-      }
-      const dirPath = path.join(extensionsDir, entry.name);
-      const openclawPluginPath = path.join(dirPath, "openclaw.plugin.json");
-      const packageJsonPath = path.join(dirPath, "package.json");
-      try {
-        const pluginRaw = await fs.readFile(openclawPluginPath, "utf8");
-        if (pluginRaw.includes("\"mixin\"")) {
-          matched.push(dirPath);
-          continue;
-        }
-      } catch {
-      }
-      try {
-        const packageRaw = await fs.readFile(packageJsonPath, "utf8");
-        if (packageRaw.includes("\"@invago/mixin\"") || packageRaw.includes("\"id\":\"mixin\"")) {
-          matched.push(dirPath);
-        }
-      } catch {
-      }
-    }
-    return matched;
-  } catch {
-    return [];
-  }
-}
-
-export async function checkWritableDir(dirPath: string): Promise<boolean> {
-  try {
-    await fs.mkdir(dirPath, { recursive: true });
-    const testPath = path.join(dirPath, `.write-test-${Date.now()}`);
-    await fs.writeFile(testPath, "ok", "utf8");
-    await fs.rm(testPath, { force: true });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export function runOpenClawInstall(spec: string): number {
-  const result = spawnSync("openclaw", ["plugins", "install", spec], {
-    stdio: "inherit",
-    shell: process.platform === "win32",
-  });
-  return result.status ?? 1;
-}
-
-export function runFfprobeCheck(): boolean {
-  const result = spawnSync(process.platform === "win32" ? "ffprobe.exe" : "ffprobe", ["-version"], {
-    stdio: "ignore",
-    shell: false,
-  });
-  return result.status === 0;
-}
-
-export function readMixinConfig(config: Record<string, unknown> | null): Record<string, unknown> | null {
-  const channels = config?.channels;
-  if (!channels || typeof channels !== "object") {
-    return null;
-  }
-  const mixin = (channels as Record<string, unknown>).mixin;
-  return mixin && typeof mixin === "object" ? (mixin as Record<string, unknown>) : null;
-}
-
-export function isPluginEnabled(config: Record<string, unknown> | null): boolean {
-  const plugins = config?.plugins;
-  if (!plugins || typeof plugins !== "object") {
-    return false;
-  }
-  const allow = Array.isArray((plugins as Record<string, unknown>).allow)
-    ? ((plugins as Record<string, unknown>).allow as unknown[]).map(String)
-    : [];
-  const entries = (plugins as Record<string, unknown>).entries;
-  const mixinEntry = entries && typeof entries === "object"
-    ? (entries as Record<string, unknown>).mixin
-    : null;
-  const enabled = mixinEntry && typeof mixinEntry === "object"
-    ? (mixinEntry as Record<string, unknown>).enabled !== false
-    : false;
-  return allow.includes("mixin") && enabled;
-}