@itpay/cli 2.0.15 → 2.0.16

package/dist/src/commands/buy.js

@@ -141,6 +141,7 @@ export async function runBuy(backend, config, options) {
             ...(qrPNGURL ? { qrPNGURL } : {}),
             ...(paymentIntent ? { paymentIntent } : {}),
             ...(options.agentType ? { agentType: options.agentType } : {}),
+            ...(options.target ? { target: options.target } : {}),
         });
         writeCommandEnvelope(envelope, { jsonOutput: true, ...(options.output ? { output: options.output } : {}) });
         return {
@@ -198,7 +199,9 @@ function buildBuyEnvelope(input) {
         platform,
         url: input.checkoutURL,
         amount,
+        plan: input.plan,
         ...(input.agentType ? { agentType: input.agentType } : {}),
+        ...(input.target ? { target: input.target } : {}),
         ...(input.qrPNGURL ? { qrImageURL: input.qrPNGURL } : {}),
         ...(input.plan.ideImageAttach?.status === "downloaded" && input.plan.ideImageAttach.localPath
             ? { localPath: input.plan.ideImageAttach.localPath }

package/dist/src/commands/checkout.js

@@ -46,7 +46,7 @@ export async function runCheckoutPresentation(backend, options) {
             ...(options.baseURL ? { baseURL: options.baseURL } : {}),
         });
     }
-    const envelope = pendingCheckoutEnvelope(presentation, checkoutURL, plan, nextCommand, options.agentType);
+    const envelope = pendingCheckoutEnvelope(presentation, checkoutURL, plan, nextCommand, options.agentType, options.target);
     const plainResult = checkoutPlainResult(envelope.result);
     if (!options.jsonOutput && platformKeyForHost(host) === "terminal") {
         plainResult.push("qr:", await renderTerminalQR(checkoutURL, "terminal"));
@@ -57,14 +57,16 @@ export async function runCheckoutPresentation(backend, options) {
         plainResult,
     });
 }
-function pendingCheckoutEnvelope(presentation, checkoutURL, plan, nextCommand, agentType) {
+function pendingCheckoutEnvelope(presentation, checkoutURL, plan, nextCommand, agentType, target) {
     const platform = platformKeyForHost(plan.host);
     const amount = formatMoney(presentation.checkout.amount_minor, presentation.checkout.currency);
     const presentationHandoff = buildCheckoutHandoff({
         platform,
         url: checkoutURL,
         amount,
+        plan,
         ...(agentType ? { agentType } : {}),
+        ...(target ? { target } : {}),
         ...(plan.preferredQRSources[0] ? { qrImageURL: plan.preferredQRSources[0] } : {}),
         ...(plan.ideImageAttach?.status === "downloaded" && plan.ideImageAttach.localPath
             ? { localPath: plan.ideImageAttach.localPath }

package/dist/src/commands/checkout_handoff.js

@@ -1,3 +1,4 @@
+import { buildOpenClawTelegramAction } from "../render/telegram.js";
 export function shouldPrepareLocalCheckoutImage(platform) {
     return platform === "markdown";
 }
@@ -15,6 +16,12 @@ export function buildCheckoutHandoff(input) {
     else if (input.platform === "plain_chat" && input.qrImageURL) {
         handoff.qr_image_url = input.qrImageURL;
     }
+    else if (input.platform === "telegram" && input.qrImageURL) {
+        handoff.qr_image_url = input.qrImageURL;
+    }
+    if (input.agentType?.trim().toLowerCase() === "openclaw" && input.platform === "telegram" && input.plan && input.target) {
+        handoff.agent_action = buildOpenClawTelegramAction(input.plan, input.target);
+    }
     return {
         handoff,
         instruction: checkoutHandoffInstruction(input.agentType, input.platform, input.amount, Boolean(input.qrImageURL)),

package/dist/src/commands/compatibility.js

@@ -14,7 +14,6 @@ export async function requirePlatformCompatibility(backend) {
         maximum_cli_major: platform.maximum_cli_major,
         platform_revision: platform.platform_revision,
         api_contract_revision: platform.api_contract_revision,
-        upgrade_command: `npm install -g @itpay/cli@${platform.minimum_cli_version}`,
     }, "CLI is incompatible with the active ItPay platform release");
 }
 function compareVersions(left, right) {

package/dist/src/commands/install.js

@@ -7,6 +7,8 @@ export const INSTALL_AGENT_TYPES = [
     "claude-code-desktop",
     "claude-code-cli",
     "workbuddy",
+    "kimi-code",
+    "openclaw",
 ];
 const INSTRUCTIONS = {
     "codex-desktop": "在 Codex Desktop 中始终传这个 Agent Type；付款时把返回的二维码和链接实际展示到当前对话。",
@@ -14,13 +16,12 @@ const INSTRUCTIONS = {
     "claude-code-desktop": "在 Claude Code Desktop 中始终传这个 Agent Type；付款时把返回的二维码和链接实际展示到当前对话。",
     "claude-code-cli": "在 Claude Code CLI 中始终传这个 Agent Type；付款交接只应显示在用户可见终端。",
     workbuddy: "在 WorkBuddy 中始终传这个 Agent Type。运行会持久化 ~/.itpay-v3 的 ItPay Bash 命令前，把 Shell 工具参数 dangerouslyDisableSandbox 设为 true；用户拒绝权限时停止，不要切换 Node、删除 identity 或处理 lock。Checkout 返回 qr_image_url 时，按当次 instruction 调用 present_files 在右侧打开二维码，不要检查本地二维码文件。",
+    "kimi-code": "保持 kimi-code Agent Type，使用标准 CLI 命令和终端付款交接；不要切换到其他平台身份。",
+    openclaw: "保持 openclaw Agent Type；每个展示命令都从当前可信会话上下文显式传 --host，IM 入口同时传 --target。Telegram 使用返回的原生 message action，其他入口展示标准二维码和付款链接。",
 };
 export function runInstall(target, options = {}) {
     if (!target || target === "list") {
-        const agentTypes = INSTALL_AGENT_TYPES.map((agentType) => ({
-            agent_type: agentType,
-            default_host: defaultHostForAgentType(agentType),
-        }));
+        const agentTypes = INSTALL_AGENT_TYPES.map(installDefinition);
         writeCommandEnvelope({
             status: "install_targets",
             result: { agent_types: agentTypes },
@@ -29,7 +30,7 @@ export function runInstall(target, options = {}) {
             recovery: [{ command: "itpay docs show install-and-setup", reason: "查看安装与环境说明" }],
         }, {
             ...options,
-            plainResult: agentTypes.map((item) => `${item.agent_type}: ${item.default_host}`),
+            plainResult: agentTypes.map((item) => `${item.agent_type}: ${item.default_host ?? "explicit --host required"}`),
         });
         return;
     }
@@ -40,10 +41,8 @@ export function runInstall(target, options = {}) {
     writeCommandEnvelope({
         status: "instructions_ready",
         result: {
-            agent_type: normalized,
-            default_host: defaultHostForAgentType(normalized),
+            ...installDefinition(normalized),
             default_api: DEFAULT_BASE_URL,
-            install_command: "npm install -g @itpay/cli",
         },
         instruction: INSTRUCTIONS[normalized],
         next: {
@@ -56,3 +55,9 @@ export function runInstall(target, options = {}) {
 function isInstallAgentType(value) {
     return INSTALL_AGENT_TYPES.includes(value);
 }
+function installDefinition(agentType) {
+    if (agentType === "openclaw") {
+        return { agent_type: agentType, default_host: null, host_required: true, native_hosts: ["telegram"] };
+    }
+    return { agent_type: agentType, default_host: defaultHostForAgentType(agentType) ?? null };
+}

package/dist/src/commands/services.js

@@ -1,4 +1,5 @@
 import { operationID } from "../state/config.js";
+import { validateContext } from "../state/client_context.js";
 import { dispatchRender } from "../render/index.js";
 import { ensureIdeImageAttach } from "../render/ide.js";
 import { buildCheckoutHandoff, shouldPrepareLocalCheckoutImage } from "./checkout_handoff.js";
@@ -373,6 +374,11 @@ function actionInputError(serviceExecutionID, message, code = "service_action_in
         : "使用当前 safe result 中的合法 action 和 candidate rank；需要人确认时先询问用户。", [{ command: `itpay services next ${serviceExecutionID} --json`, reason: "重新读取同一 Execution 的当前可选动作" }]);
 }
 export async function runServicesCheckout(backend, config, serviceExecutionID, capabilityID, options = {}) {
+    const host = options.host ?? "terminal";
+    const contextError = validateContext(host, options.target);
+    if (contextError) {
+        throw new CommandContractError(contextError.code, contextError.message, "从当前可信会话上下文补齐 Host/target；本次未创建 Checkout。", []);
+    }
     const deliveryContact = {
         ...(options.deliveryContact ?? {}),
         ...(options.email ? { email: options.email } : {}),
@@ -409,12 +415,12 @@ export async function runServicesCheckout(backend, config, serviceExecutionID, c
     const displayToken = checkout.display_token;
     const checkoutURL = tokenizedCheckoutURL(checkout.checkout_url, displayToken, checkout.qr_payload);
     const plan = buildCheckoutQRPlan({
-        host: options.host ?? "terminal",
+        host,
         checkoutID,
         checkoutURL,
         displayToken,
         qrPayload: checkout.qr_payload,
-        ...(checkout.qr_png_url ? { qrPNGURL: checkout.qr_png_url } : {}),
+        ...(checkout.qr_png_url ? { qrPNGURL: absolutePublicURL(config.baseURL, checkout.qr_png_url) } : {}),
         nextAction: checkout.checkout.next_action,
         orderItems: response.cart.items.map((item) => ({
             title: item.title,
@@ -433,9 +439,9 @@ export async function runServicesCheckout(backend, config, serviceExecutionID, c
         checkoutURL,
     });
     const platform = platformKeyForHost(plan.host);
-    if (platform === "telegram" || platform === "feishu" || platform === "lark") {
+    if (!options.jsonOutput && (platform === "telegram" || platform === "feishu" || platform === "lark")) {
         await dispatchRender(plan, {
-            host: options.host ?? "terminal",
+            host,
             ...(options.target ? { target: options.target } : {}),
             ...(options.qrFormat ? { qrFormat: options.qrFormat } : {}),
             ...(options.qrFilePath ? { qrFilePath: options.qrFilePath } : {}),
@@ -452,7 +458,7 @@ export async function runServicesCheckout(backend, config, serviceExecutionID, c
             ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
         });
     }
-    const envelope = buildServicesCheckoutEnvelope(response, checkoutURL, plan, config.baseURL, options.agentType);
+    const envelope = buildServicesCheckoutEnvelope(response, checkoutURL, plan, config.baseURL, options.agentType, options.target);
     const plainResult = [
         `service_execution_id: ${response.binding.service_execution_id}`,
         `checkout_id: ${checkoutID}`,
@@ -933,7 +939,7 @@ function parseValue(value) {
         return Number(value);
     return value;
 }
-function buildServicesCheckoutEnvelope(response, checkoutURL, plan, baseURL, agentType) {
+function buildServicesCheckoutEnvelope(response, checkoutURL, plan, baseURL, agentType, target) {
     const checkout = response.checkout;
     const platform = platformKeyForHost(plan.host);
     const amount = formatMoney(checkout.checkout.amount_minor, checkout.checkout.currency);
@@ -941,7 +947,9 @@ function buildServicesCheckoutEnvelope(response, checkoutURL, plan, baseURL, age
         platform,
         url: checkoutURL,
         amount,
+        plan,
         ...(agentType ? { agentType } : {}),
+        ...(target ? { target } : {}),
         ...(checkout.qr_png_url ? { qrImageURL: absolutePublicURL(baseURL, checkout.qr_png_url) } : {}),
         ...(plan.ideImageAttach?.status === "downloaded" && plan.ideImageAttach.localPath
             ? { localPath: plan.ideImageAttach.localPath }

package/dist/src/main.js

@@ -2,7 +2,7 @@
 // services/backend/internal/httpapi/handlers/*.go. Commands only
 // orchestrate; HTTP and rendering live in src/client and src/render.
 import { Command } from "commander";
-import { BackendOverrideError, CLI_VERSION, loadConfig, cartSessionPath, newBackendClient } from "./state/config.js";
+import { BackendOverrideError, CLI_VERSION, cliDistribution, loadConfig, cartSessionPath, newBackendClient } from "./state/config.js";
 import { DeviceAuthority, DeviceAuthorizationError, DeviceStateError } from "./state/device_authority.js";
 import { CartSession } from "./state/cart_session.js";
 import { defaultHostForAgentType, normalizeHost, validateContext } from "./state/client_context.js";
@@ -29,10 +29,17 @@ program
     .description("V3 ItPay CLI — one entry point for buy workflows and future sell workflows")
     .option("--agent-type <type>", "agent runtime type used for device enrollment and client-specific guidance")
     .version(CLI_VERSION);
-function withHost(value) {
-    const host = normalizeHost(value);
+function withHost(value, agentType, target) {
+    if (!value && agentType?.trim().toLowerCase() === "openclaw") {
+        throw new CommandContractError("host_required", "OpenClaw requires an explicit --host entry", "从当前可信 OpenClaw 会话上下文传入 --host；IM 入口同时传 --target。本次未创建或修改资源。", []);
+    }
+    const host = normalizeHost(value ?? defaultHostForAgentType(agentType));
     if (!host) {
-        throw new Error(`invalid --host "${value ?? ""}". Supported: terminal, codex, claude-code, telegram, discord, whatsapp, feishu, lark, plain-chat`);
+        throw new CommandContractError("invalid_host", `invalid --host "${value ?? ""}". Supported: terminal, codex, claude-code, telegram, discord, whatsapp, feishu, lark, plain-chat`, "传入受支持的展示 Host；本次未创建或修改资源。", []);
+    }
+    const contextError = agentType?.trim().toLowerCase() === "openclaw" ? validateContext(host, target) : undefined;
+    if (contextError) {
+        throw new CommandContractError(contextError.code, contextError.message, "从当前可信会话上下文补齐 --target；本次未创建或修改资源。", []);
     }
     return host;
 }
@@ -149,7 +156,7 @@ function reportCLIError(error, contract) {
             } : {}),
             instruction: incompatible
                 ? requiredCLIVersion
-                    ? "当前 CLI 与 Backend 合约不兼容。停止所有 ItPay 业务命令；只执行 recovery.command，将 @itpay/cli 更新到 Backend 指定的精确版本。安装完成后确认 itpay --version 与 result.required_cli_version 完全一致，再重新运行 readyz。不要安装 latest、猜测版本、切换 Agent Type 或删除 Device 身份。"
+                    ? distributionUpgradeInstruction()
                     : "立即向用户报告 error.message 并结束本次任务。Backend 未提供可验证的兼容 CLI 版本；不要运行其他 ItPay 或 npm 命令，不要猜测版本、切换 Agent Type 或删除 Device 身份。"
                 : backendInternal
                     ? "Backend 内部故障；立即停止并向用户报告。不要重试、检查或删除 Device 身份、创建替代 Execution、切换 Backend，或尝试 quote、checkout、cart、buy、pay 等付费路径。"
@@ -171,7 +178,7 @@ function reportCLIError(error, contract) {
             next: null,
             recovery: incompatible
                 ? requiredCLIVersion
-                    ? [{ command: `npm install -g @itpay/cli@${requiredCLIVersion}`, reason: "安装 Backend 指定的兼容 CLI 版本" }]
+                    ? [distributionUpgradeAction(requiredCLIVersion)]
                     : []
                 : backendInternal || providerConnectionUnavailable || providerTemporary || providerInputRejected || providerContractMismatch || providerRejected || capabilityInputInvalid
                     ? []
@@ -200,10 +207,29 @@ function docsErrorFallback(jsonOutput) {
     return {
         jsonOutput,
         code: "docs_unavailable",
-        instruction: "内置文档缺失或损坏；重新安装同版本 CLI 后重试。",
-        recovery: [{ command: `npm install -g @itpay/cli@${CLI_VERSION}`, reason: "恢复随包发布的文档" }],
+        instruction: "内置文档缺失或损坏；通过当前分发方式恢复同版本 CLI 后重试。",
+        recovery: [distributionUpgradeAction(CLI_VERSION)],
     };
 }
+function distributionUpgradeAction(version) {
+    switch (cliDistribution()) {
+        case "openclaw-skill-bundle":
+            return { command: "openclaw skills update itpay", reason: `更新包含 ItPay CLI ${version} 的 Skill bundle` };
+        case "kimi-plugin-bundle":
+            return {
+                command: "/plugins install https://github.com/itpay-ai/itpay-plugin-kimi-work",
+                reason: `更新包含 ItPay CLI ${version} 的 Kimi plugin`,
+            };
+        default:
+            return { command: `npm install -g @itpay/cli@${version}`, reason: "安装 Backend 指定的兼容 CLI 版本" };
+    }
+}
+function distributionUpgradeInstruction() {
+    if (cliDistribution() === "npm") {
+        return "当前 CLI 与 Backend 合约不兼容。停止所有 ItPay 业务命令；只执行 recovery.command，将 @itpay/cli 更新到 Backend 指定的精确版本。安装完成后确认 itpay --version 与 result.required_cli_version 完全一致，再重新运行 readyz。不要安装 latest、猜测版本、切换 Agent Type 或删除 Device 身份。";
+    }
+    return "当前平台 bundle 与 Backend 合约不兼容。停止所有 ItPay 业务命令；只执行 recovery.command，更新平台 Skill/plugin 后启动新会话，确认 itpay --version 与 result.required_cli_version 完全一致，再重新运行 readyz。不要运行 npm、猜测版本、切换 Agent Type 或删除 Device 身份。";
+}
 program
     .command("readyz")
     .description("Probe the V3 backend readiness endpoint")
@@ -298,8 +324,8 @@ skillCmd
         reportCLIError(error, {
             jsonOutput: Boolean(options.json),
             code: "skill_unavailable",
-            instruction: "内置 Skill 缺失或损坏；重新安装同版本 CLI 后重试。",
-            recovery: [{ command: `npm install -g @itpay/cli@${CLI_VERSION}`, reason: "恢复随包发布的 Skill" }],
+            instruction: "内置 Skill 缺失或损坏；通过当前分发方式恢复同版本 CLI 后重试。",
+            recovery: [distributionUpgradeAction(CLI_VERSION)],
         });
     }
 });
@@ -456,7 +482,7 @@ cart
             runCartAdd(session, { ...addOptions, jsonOutput });
         }
         else {
-            const host = withHost(options.host ?? defaultHostForAgentType(config.agentType));
+            const host = withHost(options.host, config.agentType, options.target);
             const contextError = validateContext(host, options.target);
             if (contextError) {
                 throw new CommandContractError(contextError.code, contextError.message, "补齐当前客户端所需的 Host/target；本次未创建或修改 Cart。", [{ command: "itpay cart add --help", reason: "查看客户端参数" }]);
@@ -692,7 +718,7 @@ program
         }
         const quantity = positiveInteger(options.quantity, "--quantity");
         const timeout = positiveInteger(options.timeout, "--timeout");
-        const host = withHost(options.host ?? defaultHostForAgentType(config.agentType));
+        const host = withHost(options.host, config.agentType, options.target);
         const contact = {};
         if (options.contactEmail)
             contact.email = options.contactEmail;
@@ -756,11 +782,11 @@ program
     .option("--json", "output compact JSON")
     .action(async (options) => {
     const config = loadConfig();
-    const host = withHost(options.host ?? defaultHostForAgentType(config.agentType));
     const session = CartSession.loadFromFile(cartSessionPath(), config.checkoutCurrency);
     const snap = session.show();
     const backend = newBackendClient(config);
     try {
+        const host = withHost(options.host, config.agentType, options.target);
         const { checkoutID, displayToken } = resolveCheckoutPresentationArgs({
             ...(options.id ? { requestedCheckoutID: options.id } : {}),
             ...(options.token ? { requestedDisplayToken: options.token } : {}),
@@ -771,6 +797,7 @@ program
             checkoutID,
             displayToken,
             host,
+            ...(options.target ? { target: options.target } : {}),
             ...(config.agentType ? { agentType: config.agentType } : {}),
             baseURL: config.baseURL,
             jsonOutput: Boolean(options.json),
@@ -817,7 +844,7 @@ program
         if (!displayToken) {
             throw new CommandContractError("checkout_token_required", "display token is required for this checkout", "提供同一 Checkout 的 display token；不要拼接其他 Checkout 的 token。", [{ command: "itpay next --json", reason: "恢复本机保存的同一 Checkout" }]);
         }
-        const host = withHost(options.host ?? defaultHostForAgentType(config.agentType));
+        const host = withHost(options.host, config.agentType, options.target);
         const contextError = validateContext(host, options.target);
         if (contextError) {
             throw new CommandContractError(contextError.code, contextError.message, "为当前 Host 提供有效 target；本次未创建 Payment Intent。", [
@@ -1024,7 +1051,7 @@ services
     const backend = newBackendClient(config);
     try {
         await runServicesStart(backend, serviceID, {
-            host: withHost(options.host ?? defaultHostForAgentType(config.agentType)),
+            host: withHost(options.host, config.agentType, options.target),
             ...(options.target ? { target: options.target } : {}),
             jsonOutput: Boolean(options.json),
         });
@@ -1150,7 +1177,7 @@ services
             ...(options.email ? { email: options.email } : {}),
             lockedInput: parseKeyValueList(options.input),
             resume: Boolean(options.resume),
-            host: withHost(options.host ?? defaultHostForAgentType(config.agentType)),
+            host: withHost(options.host, config.agentType, options.target),
             ...(config.agentType ? { agentType: config.agentType } : {}),
             ...(options.target ? { target: options.target } : {}),
             ...(options.qrFormat ? { qrFormat: options.qrFormat } : {}),

package/dist/src/render/telegram.js

@@ -28,14 +28,49 @@ function buttonsFor(plan) {
             : []),
     ];
 }
+function nativeButton(button) {
+    if (button.kind === "url") {
+        return { label: button.label, action: { type: "url", url: button.url ?? "" } };
+    }
+    const value = button.intent === "check_checkout_status"
+        ? `itp:checkout:${button.ref ?? ""}`
+        : `itp:${button.intent ?? "callback"}:${button.ref ?? ""}`;
+    return { label: button.label, action: { type: "callback", value } };
+}
 function format(plan) {
     return plan.kind === "payment_qr" ? "photo_text_inline_buttons" : "text_inline_buttons";
 }
 export function renderTelegram(plan, options) {
     const out = options.output ?? ((line) => process.stdout.write(line));
-    const buttons = buttonsFor(plan);
+    const agentAction = buildOpenClawTelegramAction(plan, options.target);
+    const presentation = agentAction.arguments.presentation;
+    const media = collectTelegramMedia(plan);
+    const text = agentAction.arguments.message;
+    const openclawMessage = {
+        command: [
+            "openclaw",
+            "message",
+            "send",
+            "--channel",
+            "telegram",
+            "--target",
+            options.target,
+            "--message",
+            text,
+            ...(media.length > 0 ? ["--media", media[0].url] : []),
+            "--presentation",
+            JSON.stringify(presentation),
+        ],
+        // Hint: agents that cannot run openclaw must stop and tell the user
+        // they lack the native Telegram buttons tool — never downgrade.
+        if_unavailable: "Current agent cannot run `openclaw message send`. Stop and tell the user the native Telegram inline-button tool is missing; do not downgrade to a markdown table or plain link.",
+    };
+    out(JSON.stringify({ presentation, agent_action: agentAction, openclaw_message: openclawMessage }, null, 2) + "\n");
+}
+export function buildOpenClawTelegramAction(plan, target) {
+    const buttons = buttonsFor(plan).map(nativeButton);
     const media = collectTelegramMedia(plan);
-    const text = plan.kind === "payment_qr"
+    const message = plan.kind === "payment_qr"
         ? `ItPay payment QR — ${plan.summary}`
         : plan.kind === "auth_qr"
             ? `ItPay auth required — ${plan.summary}`
@@ -43,12 +78,12 @@ export function renderTelegram(plan, options) {
     const presentation = {
         format: format(plan),
         media,
-        text,
+        text: message,
         links: plan.platform.links,
         buttons,
         interactions: plan.platform.interactions ?? [],
         blocks: [
-            { type: "text", text },
+            { type: "text", text: message },
             ...(media.length > 0 ? [{ type: "image", url: media[0].url }] : []),
             { type: "buttons", buttons },
         ],
@@ -64,31 +99,22 @@ export function renderTelegram(plan, options) {
                     must_render_reason: plan.ideImageAttach.mustRenderReason,
                     ...(plan.ideImageAttach.error ? { error: plan.ideImageAttach.error } : {}),
                     action: "agent_must_render_into_ide_chat",
-                    instructions: ideImageAttachBlock(plan.ideImageAttach).filter((l) => l.length > 0),
+                    instructions: ideImageAttachBlock(plan.ideImageAttach).filter((line) => line.length > 0),
                 },
             }
             : {}),
     };
-    const openclawMessage = {
-        command: [
-            "openclaw",
-            "message",
-            "send",
-            "--channel",
-            "telegram",
-            "--target",
-            options.target,
-            "--message",
-            text,
-            ...(media.length > 0 ? ["--media", media[0].url] : []),
-            "--presentation",
-            JSON.stringify(presentation),
-        ],
-        // Hint: agents that cannot run openclaw must stop and tell the user
-        // they lack the native Telegram buttons tool — never downgrade.
-        if_unavailable: "Current agent cannot run `openclaw message send`. Stop and tell the user the native Telegram inline-button tool is missing; do not downgrade to a markdown table or plain link.",
+    return {
+        tool: "message",
+        arguments: {
+            action: "send",
+            channel: "telegram",
+            target,
+            message,
+            ...(media[0]?.url ? { media: media[0].url } : {}),
+            presentation,
+        },
     };
-    out(JSON.stringify({ presentation, openclaw_message: openclawMessage }, null, 2) + "\n");
 }
 export function renderTelegramInteraction(request, options) {
     const out = options.output ?? ((line) => process.stdout.write(line));
@@ -97,7 +123,7 @@ export function renderTelegramInteraction(request, options) {
         mimeType: item.mimeType ?? "image/png",
     }));
     const buttons = request.kind === "selector"
-        ? request.options.map((option) => selectorButton(request.id, option))
+        ? request.options.map((option) => nativeButton(selectorButton(request.id, option)))
         : [];
     const text = `${request.title} — ${request.prompt}`;
     const presentation = {

package/dist/src/state/client_context.js

@@ -62,6 +62,8 @@ export function defaultHostForAgentType(agentType) {
         return "claude-code";
     if (normalized === "workbuddy")
         return "plain-chat";
+    if (normalized === "openclaw")
+        return undefined;
     return "terminal";
 }
 export function validateContext(host, target) {

package/dist/src/state/config.js

@@ -12,11 +12,18 @@ import { DeviceAuthority } from "./device_authority.js";
 import { OperationJournal } from "./operation_journal.js";
 export const DEFAULT_BASE_URL = "https://app.itpay.ai";
 export const DEV_BASE_URL = "https://dev.itpay.ai";
-export const CLI_VERSION = "2.0.15";
+export const CLI_VERSION = "2.0.16";
 export const API_CONTRACT_REVISION = "sha256:7f4c40b082292bf823631bcd37d452f4a8537153e30636d5eb3a2b24a77ce602";
 const CART_SESSION_DEFAULT_DIR = ".itpay-v3";
 const CART_SESSION_FILENAME = "cart.json";
 const OPERATION_JOURNAL_FILENAME = "operations.json";
+export function cliDistribution(env = process.env) {
+    if (env.ITPAY_DISTRIBUTION === "openclaw-skill-bundle")
+        return "openclaw-skill-bundle";
+    if (env.ITPAY_DISTRIBUTION === "kimi-plugin-bundle")
+        return "kimi-plugin-bundle";
+    return "npm";
+}
 export class BackendOverrideError extends Error {
     code = "backend_override_forbidden";
     constructor() {

package/docs/agent/buyer/install-and-setup.json

@@ -4,7 +4,7 @@
   "product_scope": "itpay is the single public CLI entry point, and $itpay is its user-facing Skill invocation. Under that one product entry point, the two top-level commerce actions are buy and sell: Buyer workflows are available now; Seller workflows will use the same entry point and are not implemented yet.",
   "topic": "install-and-setup",
   "title": "Install And Identify The ItPay Agent Runtime",
-  "purpose": "Install the CLI, load the complete ItPay Skill, and select one stable Agent Type without confusing identity, Backend, Host, target, or chat window.",
+  "purpose": "Load the complete ItPay Skill and select one stable Agent Type without confusing distribution, identity, Backend, Host, target, or chat window.",
   "when_to_use": [
     "The CLI is being installed or upgraded.",
     "The agent needs to confirm its stable runtime identity and default output Host."
@@ -23,7 +23,7 @@
     {
       "intent": "list supported Agent Types",
       "command": "itpay install --json",
-      "success_signal": "status is install_targets and exactly five agent_type/default_host pairs are returned"
+      "success_signal": "status is install_targets and exactly seven supported Agent Type definitions are returned"
     },
     {
       "intent": "read setup for the real runtime",
@@ -32,14 +32,14 @@
     }
   ],
   "agent_rules": [
-    "Install with npm install -g @itpay/cli.",
+    "Use the CLI distribution already provided by the current npm package, Skill, or plugin; install only through that distribution's own instructions.",
     "Production defaults to https://app.itpay.ai. Testing may set ITPAY_BACKEND_URL to the exact official URL https://dev.itpay.ai; no other Backend is allowed.",
-    "If backend_contract_incompatible includes result.required_cli_version, stop all ItPay business commands and run only the exact npm install recovery returned by the CLI; never replace its version with latest.",
+    "If backend_contract_incompatible includes result.required_cli_version, stop all ItPay business commands and use only the exact distribution-specific update recovery returned by the CLI; never replace its version with latest.",
     "After upgrading, require itpay --version to equal result.required_cli_version before running readyz again; never change Agent Type or Device identity to recover compatibility.",
-    "Use one exact type: codex-desktop, codex-cli, claude-code-desktop, claude-code-cli, or workbuddy.",
+    "Use one exact type: codex-desktop, codex-cli, claude-code-desktop, claude-code-cli, workbuddy, kimi-code, or openclaw.",
     "One local private key is reused, while Device registrations and quota lineage remain separate for app.itpay.ai and dev.itpay.ai.",
     "Within each official Backend registration, each Agent Type has one Agent Instance; all windows and chats of the same type reuse it.",
-    "Agent Type identifies the runtime. Host controls rendering and target only identifies a presentation destination.",
+    "Agent Type identifies the runtime. Host controls rendering and target only identifies a presentation destination. OpenClaw requires an explicit Host and IM target; Kimi Code uses the standard terminal CLI contract.",
     "Keep the exact Agent Type in every next or recovery command; do not fall back to a type previously used by another runtime.",
     "Do not change Agent Type or rotate local identity to reset quota or recover a failed command."
   ],
@@ -66,6 +66,8 @@
     "backend",
     "codex",
     "claude code",
-    "workbuddy"
+    "workbuddy",
+    "kimi code",
+    "openclaw"
   ]
 }

package/docs/agent/buyer/payment-flow.json

@@ -32,6 +32,7 @@
     "Before creating a single-Service Checkout, send the exact price confirmation requested by the current instruction, stop, and wait for explicit human agreement.",
     "After presenting a Checkout, stop. Run the returned next.command only after the human completes the payment action or asks to query the same Checkout.",
     "For workbuddy with plain-chat, present the returned HTTPS QR with present_files exactly as instructed; presentation failure falls back only to handoff.url and never creates another payment resource.",
+    "For openclaw with telegram, execute the returned native message action using the current trusted target. For any other explicit OpenClaw Host, show the returned HTTPS QR image and Checkout URL.",
     "Payment is verified only by Backend Checkout or Order state, never by QR rendering, redirect, or user claim.",
     "A terminal payment state must never display another payment handoff."
   ],

package/docs/agent/buyer/quickstart.json

@@ -59,6 +59,7 @@
     "Keep the same explicit Agent Type through next and recovery commands; same-type windows reuse one Backend Agent Instance.",
     "When testing dev, execute every returned command unchanged so its ITPAY_BACKEND_URL=https://dev.itpay.ai prefix is preserved.",
     "Use --target only for a Host presentation destination. Put capability business values in --input key=value exactly as required by the schema.",
+    "OpenClaw must pass the current entry as --host and an IM destination as --target. Kimi Code follows the standard terminal CLI flow.",
     "Start a separate Service Execution for each independent service intent; quota remains shared according to Backend identity policy.",
     "Ask the user for required email or contact values and explain their purpose; never invent them.",
     "Agent-visible delivery is returned by services next. Protected delivery is read only by services read-result while a human grant is active.",

package/docs/agent/buyer/render-hosts.json

@@ -34,6 +34,18 @@
       "agent_type": "workbuddy",
       "default_host": "plain-chat",
       "responsibility": "when handoff.qr_image_url exists, use its exact HTTPS value as the only files element in present_files; otherwise send the Checkout URL without calling present_files; show the amount and stop"
+    },
+    {
+      "agent_type": "kimi-code",
+      "default_host": "terminal",
+      "responsibility": "use the standard CLI terminal QR and Checkout URL"
+    },
+    {
+      "agent_type": "openclaw",
+      "default_host": null,
+      "host_required": true,
+      "native_hosts": ["telegram"],
+      "responsibility": "pass the current entry explicitly; for Telegram execute handoff.agent_action with the current target, otherwise show the returned HTTPS QR image and Checkout URL"
     }
   ],
   "commands": [
@@ -53,7 +65,8 @@
     "A local QR path is not visible until a desktop Agent attaches or renders that file on the human-facing surface; WorkBuddy never receives a local QR path.",
     "For workbuddy with plain-chat, call present_files exactly as the returned instruction says. If it fails, send only handoff.url, report that the preview did not open, and stop.",
     "Do not claim the handoff was shown until both a usable payment image or QR and the Checkout URL are visible.",
-    "IM Hosts that require a target must receive --target; the initial five Agent Types currently default to desktop, terminal, or plain-chat Hosts."
+    "IM Hosts that require a target must receive --target before Checkout creation. OpenClaw has no default Host; Kimi Code uses terminal.",
+    "OpenClaw Telegram typed callback actions carry only the Checkout ID, never a display token, and never prove payment."
   ],
   "forbidden": [
     "Do not expose display tokens separately from the tokenized Checkout handoff.",
@@ -74,6 +87,9 @@
     "markdown",
     "terminal",
     "desktop",
-    "workbuddy"
+    "workbuddy",
+    "kimi code",
+    "openclaw",
+    "telegram"
   ]
 }