@kartik.doda/openclaw-plugin-test 1.0.0

package/dist/cli/auth.js

@@ -0,0 +1,184 @@
+import { loginAs, TwoFactorRequiredError, isTimeoutError, verifyAdmin, } from "./admin-api.js";
+import { saveAdmin, loadAdmin } from "./credentials.js";
+import { color, promptPassword, promptSelect, promptText, promptTwoFactorCode, prompts as p, withSpinner, } from "./ui.js";
+export async function tryBotLogin(rcUrl, username, password) {
+    return loginForServer(rcUrl, username, password, username);
+}
+export async function loginForServer(rcUrl, user, password, label) {
+    return loginWithTwoFactor(rcUrl, user, password, label);
+}
+/** Log in, prompting for a 2FA code when the server requires it. */
+async function loginWithTwoFactor(rcUrl, user, password, label) {
+    const maxAttempts = 4;
+    let transactionId;
+    let methods = ["totp"];
+    // Initial login attempt — triggers the 2FA challenge from the server.
+    try {
+        return await loginAs(rcUrl, user, password);
+    }
+    catch (e) {
+        if (!(e instanceof TwoFactorRequiredError)) {
+            if (isTimeoutError(e)) {
+                p.log.error("Server timed out during login. Check your connection and try again.");
+            }
+            else {
+                p.log.error(`Login failed: ${e instanceof Error ? e.message : String(e)}`);
+            }
+            return null;
+        }
+        transactionId = e.challenge.transactionId || undefined;
+        methods = e.challenge.methods.length > 0 ? e.challenge.methods : ["totp"];
+    }
+    // Re-prompt and resubmit with the same transaction ID, avoiding a
+    // redundant challenge round-trip on each retry.
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        const method = methods.length > 1
+            ? await promptSelect({
+                message: "Two-factor method",
+                options: methods.map((m) => ({ value: m, label: m })),
+            })
+            : methods[0] ?? "totp";
+        if (method === "email") {
+            p.log.info(`A verification code should have been emailed to ${color.cyan(label)}. If you don't receive it, the account may not have email 2FA enabled — leave empty to abort.`);
+        }
+        const code = await promptTwoFactorCode({
+            message: `Two-factor code for ${label}`,
+            method,
+            allowEmpty: method === "email",
+        });
+        if (!code) {
+            p.log.error("No code entered. Aborting two-factor login.");
+            return null;
+        }
+        try {
+            return await loginAs(rcUrl, user, password, {
+                code,
+                ...(transactionId ? { transactionId } : {}),
+            });
+        }
+        catch (inner) {
+            if (inner instanceof TwoFactorRequiredError) {
+                transactionId = inner.challenge.transactionId || transactionId;
+                methods = inner.challenge.methods.length > 0 ? inner.challenge.methods : methods;
+                const retryMethod = inner.challenge.methods[0] ?? method;
+                const hint = retryMethod === "email"
+                    ? "Invalid or expired email code. Check your inbox and try again (leave empty to abort)."
+                    : "Invalid or expired two-factor code. Please try again.";
+                p.log.error(hint);
+                continue;
+            }
+            const msg = inner instanceof Error ? inner.message : String(inner);
+            if (isTimeoutError(inner)) {
+                p.log.error("Server timed out while verifying the code. Check your connection and try again.");
+                return null;
+            }
+            if (/rate.?limit|too many|too many requests/i.test(msg)) {
+                p.log.error("Too many login attempts. Rocket.Chat has rate-limited this endpoint. Wait a moment and re-run setup.");
+                return null;
+            }
+            p.log.error(`Login failed: ${msg}`);
+            return null;
+        }
+    }
+    p.log.error("Too many two-factor attempts. Re-run setup to try again.");
+    return null;
+}
+export async function resolveAdminAuth(rcUrl, forceFresh = false) {
+    if (!forceFresh) {
+        const savedAdmin = (await loadAdmin(rcUrl)) ?? (await loadAdmin());
+        if (savedAdmin) {
+            const candidateAuth = { userId: savedAdmin.userId, authToken: savedAdmin.authToken };
+            const verdict = await verifyAdmin(rcUrl, candidateAuth);
+            if (verdict.ok) {
+                p.log.success(`Reusing saved admin credentials for ${color.cyan(rcUrl)}`);
+                return candidateAuth;
+            }
+            p.log.warn("Saved admin credentials are invalid for this server. Please log in again.");
+        }
+    }
+    const adminUser = await promptText({
+        message: "Admin username",
+        validate: (value) => ((value ?? "").trim() ? undefined : "Username is required"),
+    });
+    for (let attempt = 1; attempt <= 3; attempt++) {
+        const adminPass = await promptPassword({
+            message: attempt === 1
+                ? "Admin password"
+                : `Wrong password — re-enter for ${adminUser} (${3 - attempt} attempt${3 - attempt === 1 ? "" : "s"} left)`,
+            validate: (value) => (value ? undefined : "Password is required"),
+        });
+        let adminAuth = null;
+        try {
+            adminAuth = await loginForServer(rcUrl, adminUser, adminPass, adminUser);
+        }
+        catch (e) {
+            if (isTimeoutError(e)) {
+                p.log.error("Server timed out during login. Check your connection and try again.");
+                return null;
+            }
+            const message = e instanceof Error ? e.message : String(e);
+            p.log.error(`Login failed: ${message}`);
+            if (attempt === 3) {
+                p.log.error("Too many failed attempts. Re-run setup to try again.");
+                return null;
+            }
+            continue;
+        }
+        if (!adminAuth) {
+            p.log.error("Login failed: Unauthorized. Check the password and try again.");
+            if (attempt === 3) {
+                p.log.error("Too many failed attempts. Re-run setup to try again.");
+                return null;
+            }
+            continue;
+        }
+        const result = await withSpinner("Verifying admin access", async () => {
+            try {
+                const verdict = await verifyAdmin(rcUrl, adminAuth);
+                if (!verdict.ok) {
+                    return { ok: false, reason: verdict.reason };
+                }
+                await saveAdmin({
+                    serverUrl: rcUrl,
+                    userId: adminAuth.userId,
+                    authToken: adminAuth.authToken,
+                });
+                p.log.success(`Logged in as ${color.cyan(adminUser)}`);
+                return { ok: true, auth: adminAuth };
+            }
+            catch (e) {
+                if (isTimeoutError(e)) {
+                    return {
+                        ok: false,
+                        reason: "error",
+                        message: "Server timed out while verifying admin status. Check your connection and try again.",
+                    };
+                }
+                const message = e instanceof Error ? e.message : String(e);
+                return { ok: false, reason: "error", message };
+            }
+        });
+        if (result.ok)
+            return result.auth;
+        if (result.reason === "not-admin") {
+            p.log.error(`"${adminUser}" is not an admin (missing 'admin' role). Bot creation requires an admin account.`);
+            return null;
+        }
+        else if (result.reason === "unauthorized") {
+            p.log.error("Admin login expired or invalid. Please log in again.");
+        }
+        else if (result.reason === "unreachable") {
+            p.log.error("Could not verify admin status — Rocket.Chat server unreachable.");
+            return null;
+        }
+        else if (result.reason === "error") {
+            p.log.error(`Login failed: ${result.message}`);
+        }
+        if (attempt === 3) {
+            p.log.error("Too many failed attempts. Re-run setup to try again.");
+            return null;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,sBAAsB,EACtB,cAAc,EACd,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,KAAK,EACL,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,OAAO,IAAI,CAAC,EACZ,WAAW,GACZ,MAAM,SAAS,CAAC;AASjB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,QAAgB,EAChB,QAAgB;IAEhB,OAAO,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,IAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,kBAAkB,CAC/B,KAAa,EACb,IAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,IAAI,aAAiC,CAAC;IACtC,IAAI,OAAO,GAAa,CAAC,MAAM,CAAC,CAAC;IAEjC,sEAAsE;IACtE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,YAAY,sBAAsB,CAAC,EAAE,CAAC;YAC3C,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,aAAa,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,kEAAkE;IAClE,gDAAgD;IAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,MAAM,YAAY,CAAS;gBACzB,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aACtD,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QAE3B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CACR,mDAAmD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,+FAA+F,CACpK,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;YACrC,OAAO,EAAE,uBAAuB,KAAK,EAAE;YACvC,MAAM;YACN,UAAU,EAAE,MAAM,KAAK,OAAO;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1C,IAAI;gBACJ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,IAAI,aAAa,CAAC;gBAC/D,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;gBACjF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;gBACzD,MAAM,IAAI,GACR,WAAW,KAAK,OAAO;oBACrB,CAAC,CAAC,uFAAuF;oBACzF,CAAC,CAAC,uDAAuD,CAAC;gBAC9D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;gBAC/F,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxD,CAAC,CAAC,GAAG,CAAC,KAAK,CACT,sGAAsG,CACvG,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,UAAU,GAAG,KAAK;IAElB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,aAAa,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;YACrF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1E,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC;QACjC,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;KACjF,CAAC,CAAC;IAEH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC;YACrC,OAAO,EACL,OAAO,KAAK,CAAC;gBACX,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,iCAAiC,SAAS,KAAK,CAAC,GAAG,OAAO,WAAW,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;YAC/G,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;SAClE,CAAC,CAAC;QAEH,IAAI,SAAS,GAAyB,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;gBACnF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC7E,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAmB,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACtF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAA0B,EAAE,CAAC;gBACnE,CAAC;gBACD,MAAM,SAAS,CAAC;oBACd,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B,CAAC,CAAC;gBACH,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,OAAO;wBACf,OAAO,EAAE,qFAAqF;qBAC/F,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAElC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,CAAC,CAAC,GAAG,CAAC,KAAK,CACT,IAAI,SAAS,mFAAmF,CACjG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YAC5C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/bot.d.ts

@@ -0,0 +1,3 @@
+import type { RCLoginResult } from "../types.js";
+export declare function resolveBotAuth(rcUrl: string, adminAuth: RCLoginResult, botUsername: string): Promise<RCLoginResult | null>;
+//# sourceMappingURL=bot.d.ts.map

package/dist/cli/bot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../../src/cli/bot.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmBjD,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,aAAa,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B"}

package/dist/cli/bot.js

@@ -0,0 +1,100 @@
+import { createBotUser, getUserInfo, } from "./admin-api.js";
+import { checkBotCreationLimit, recordBotCreation } from "./rate-limiter.js";
+import { saveBotCredentials, loadBotCredentials } from "./credentials.js";
+import { color, promptPassword, promptPasswordConfirm, promptText, prompts as p, withSpinner, } from "./ui.js";
+import { loginForServer, tryBotLogin } from "./auth.js";
+async function promptBotPassword(botUsername) {
+    const savedBot = await loadBotCredentials(botUsername);
+    if (savedBot?.password) {
+        p.log.info(`Reusing saved password for ${color.cyan(`@${botUsername}`)}`);
+        return savedBot.password;
+    }
+    return promptPasswordConfirm({
+        message: "Bot password (min 6 characters)",
+        validate: (value) => {
+            if (!value)
+                return "Password is required";
+            if (value.length < 6)
+                return "Password must be at least 6 characters";
+            return undefined;
+        },
+    });
+}
+export async function resolveBotAuth(rcUrl, adminAuth, botUsername) {
+    const existingUser = await withSpinner(`Checking @${botUsername} on Rocket.Chat`, () => getUserInfo(rcUrl, adminAuth, { username: botUsername }));
+    if (existingUser) {
+        p.log.success(`Bot ${color.cyan(`@${botUsername}`)} already exists — verifying its credentials`);
+        return verifyExistingBot(rcUrl, botUsername);
+    }
+    return createNewBot(rcUrl, adminAuth, botUsername);
+}
+async function verifyExistingBot(rcUrl, botUsername) {
+    const savedBot = await loadBotCredentials(botUsername);
+    if (savedBot?.password) {
+        const cached = await tryBotLogin(rcUrl, botUsername, savedBot.password);
+        if (cached) {
+            await saveBotCredentials(botUsername, { userId: cached.userId, password: savedBot.password });
+            p.log.success(`Verified bot ${color.cyan(`@${botUsername}`)}`);
+            return cached;
+        }
+    }
+    for (let attempt = 1; attempt <= 3; attempt++) {
+        const botPassword = await promptPassword({
+            message: attempt === 1
+                ? `Password for existing bot @${botUsername}`
+                : `Wrong password — re-enter for @${botUsername} (${3 - attempt} attempt${3 - attempt === 1 ? "" : "s"} left)`,
+            validate: (value) => (value ? undefined : "Password is required"),
+        });
+        const auth = await loginForServer(rcUrl, botUsername, botPassword, botUsername);
+        if (auth) {
+            await saveBotCredentials(botUsername, { userId: auth.userId, password: botPassword });
+            p.log.success(`Verified bot ${color.cyan(`@${botUsername}`)}`);
+            return auth;
+        }
+        p.log.error("Login failed: Unauthorized. Check the password and try again.");
+    }
+    p.log.error("Too many failed attempts. Re-run setup with the correct bot password.");
+    return null;
+}
+async function createNewBot(rcUrl, adminAuth, botUsername) {
+    const limitCheck = checkBotCreationLimit("cli", { serverUrl: rcUrl });
+    if (!limitCheck.allowed) {
+        p.log.error(limitCheck.reason ?? "Bot creation limit reached.");
+        return null;
+    }
+    const botName = await promptText({ message: "Bot display name", defaultValue: botUsername });
+    const botEmail = await promptText({
+        message: "Bot email",
+        defaultValue: `${botUsername.toLowerCase()}@openclaw.local`,
+        validate: (value) => ((value ?? "").includes("@") ? undefined : "Enter a valid email"),
+    });
+    const botPassword = await promptBotPassword(botUsername);
+    const botUser = await withSpinner(`Creating bot ${color.cyan(`@${botUsername}`)}`, async () => {
+        try {
+            return await createBotUser(rcUrl, adminAuth, {
+                username: botUsername,
+                name: botName,
+                password: botPassword,
+                email: botEmail,
+            });
+        }
+        catch (e) {
+            p.log.error(`Failed to create bot: ${e instanceof Error ? e.message : String(e)}`);
+            return null;
+        }
+    });
+    if (!botUser)
+        return null;
+    recordBotCreation(botUsername, "cli");
+    p.log.success(`Created bot ${color.cyan(`@${botUser.username}`)} ${color.dim(`(${botUser._id})`)}`);
+    const auth = await loginForServer(rcUrl, botUsername, botPassword, botUsername);
+    if (auth) {
+        await saveBotCredentials(botUsername, { userId: auth.userId, password: botPassword });
+    }
+    if (!auth) {
+        p.log.error("Bot login failed after creation. Check the bot's credentials and re-run setup.");
+        return null;
+    }
+    return auth;
+}
+//# sourceMappingURL=bot.js.map

package/dist/cli/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../../src/cli/bot.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,KAAK,EACL,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,OAAO,IAAI,CAAC,EACZ,WAAW,GACZ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxD,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAED,OAAO,qBAAqB,CAAC;QAC3B,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,sBAAsB,CAAC;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,wCAAwC,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,SAAwB,EACxB,WAAmB;IAEnB,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,aAAa,WAAW,iBAAiB,EAAE,GAAG,EAAE,CACrF,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CACzD,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,GAAG,CAAC,OAAO,CACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,6CAA6C,CAClF,CAAC;QACF,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,kBAAkB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9F,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,OAAO,EACL,OAAO,KAAK,CAAC;gBACX,CAAC,CAAC,8BAA8B,WAAW,EAAE;gBAC7C,CAAC,CAAC,kCAAkC,WAAW,KAAK,CAAC,GAAG,OAAO,WAAW,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;YAClH,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAChF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,kBAAkB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAa,EACb,SAAwB,EACxB,WAAmB;IAEnB,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,6BAA6B,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;QAChC,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,iBAAiB;QAC3D,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;KACvF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5F,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE;gBAC3C,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,WAAW;gBACrB,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,OAAO,CACX,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,EAAE,CACrF,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAChF,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,kBAAkB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/config-updater.d.ts

@@ -0,0 +1,70 @@
+import type { AuthCredentials, JsonObject } from "../types.js";
+export type TokenAuth = Extract<AuthCredentials, {
+    mode: "token";
+}>;
+export declare function readConfig(): JsonObject;
+export type ExistingAccount = {
+    accountId: string;
+    serverUrl: string;
+    mentionNames: string[];
+    auth: TokenAuth;
+    owner?: string;
+};
+export declare function readAllAccounts(): ExistingAccount[];
+export declare function collectBotUserIdsForServer(serverUrl: string): Set<string>;
+export declare function collectBotUsernamesForServer(serverUrl: string): Set<string>;
+export declare function readAccount(accountId?: string): ExistingAccount | null;
+export declare function updateConfig(opts: {
+    pluginPath: string;
+    pluginId: string;
+    accountId: string;
+    serverUrl: string;
+    transport?: {
+        mode: "websocket";
+    };
+    mentionNames?: string[];
+    auth: TokenAuth;
+    owner?: string;
+    replaceConnection?: boolean;
+}): void;
+export declare function readAgentsList(): Array<{
+    id: string;
+    name?: string;
+}>;
+export declare function readBindingsForAccount(accountId: string): Array<{
+    agentId: string;
+    peer?: {
+        kind: string;
+        id: string;
+    };
+}>;
+export declare function addAccount(opts: {
+    accountId: string;
+    serverUrl: string;
+    auth: TokenAuth;
+    mentionNames: string[];
+    transport?: {
+        mode: "websocket";
+    };
+    owner?: string;
+}): void;
+export declare function readOwner(accountId: string): string | undefined;
+export declare function ensureAgentForBot(accountId: string): {
+    agentId: string;
+    created: boolean;
+    fallback: boolean;
+};
+export declare function isAgentBound(agentId: string): boolean;
+export declare function addBinding(opts: {
+    channel: string;
+    accountId: string;
+    agentId: string;
+    peer?: {
+        kind: string;
+        id: string;
+    };
+}): void;
+export declare function removeBindingsForAccount(accountId: string): void;
+export declare function removeAccount(accountId: string): void;
+export declare function removeAgentDir(accountId: string): void;
+//# sourceMappingURL=config-updater.d.ts.map

package/dist/cli/config-updater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-updater.d.ts","sourceRoot":"","sources":["../../src/cli/config-updater.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI/D,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAEpE,wBAAgB,UAAU,IAAI,UAAU,CAGvC;AAQD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,eAAe,IAAI,eAAe,EAAE,CAOnD;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAMzE;AAED,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAM3E;AAED,wBAAgB,WAAW,CAAC,SAAS,SAAS,GAAG,eAAe,GAAG,IAAI,CA2BtE;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,QAsDA;AAED,wBAAgB,cAAc,IAAI,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6BrE;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAejE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,IAAI,CAyBP;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK/D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAkBA;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAUrD;AAMD,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC,GAAG,IAAI,CAgCP;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAUhE;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAOrD;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAGtD"}

package/dist/cli/config-updater.js

@@ -0,0 +1,277 @@
+import { existsSync, readFileSync, writeFileSync, renameSync, readdirSync, rmSync } from "node:fs";
+import { resolve } from "node:path";
+import { homedir } from "node:os";
+import { execFileSync } from "node:child_process";
+import JSON5 from "json5";
+const OC_CONFIG_PATH = resolve(homedir(), ".openclaw", "openclaw.json");
+export function readConfig() {
+    if (!existsSync(OC_CONFIG_PATH))
+        return {};
+    return JSON5.parse(readFileSync(OC_CONFIG_PATH, "utf-8"));
+}
+function writeConfig(cfg) {
+    const tmp = OC_CONFIG_PATH + ".tmp";
+    writeFileSync(tmp, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
+    renameSync(tmp, OC_CONFIG_PATH);
+}
+export function readAllAccounts() {
+    const cfg = readConfig();
+    const accounts = cfg?.channels?.rocketchat?.accounts;
+    if (!accounts || typeof accounts !== "object")
+        return [];
+    return Object.keys(accounts)
+        .map((id) => readAccount(id))
+        .filter((a) => a !== null);
+}
+export function collectBotUserIdsForServer(serverUrl) {
+    return new Set(readAllAccounts()
+        .filter((a) => a.serverUrl === serverUrl)
+        .map((a) => a.auth.userId));
+}
+export function collectBotUsernamesForServer(serverUrl) {
+    return new Set(readAllAccounts()
+        .filter((a) => a.serverUrl === serverUrl)
+        .flatMap((a) => (a.mentionNames.length > 0 ? a.mentionNames : [a.accountId])));
+}
+export function readAccount(accountId = "main") {
+    const cfg = readConfig();
+    const accounts = cfg?.channels?.rocketchat?.accounts;
+    if (!accounts || typeof accounts !== "object")
+        return null;
+    const target = accountId.toLowerCase();
+    const key = Object.keys(accounts).find((k) => k.toLowerCase() === target);
+    const account = key ? accounts[key] : undefined;
+    if (!account || typeof account !== "object")
+        return null;
+    const serverUrl = typeof account.serverUrl === "string" ? account.serverUrl : "";
+    const auth = account.auth;
+    if (!serverUrl || !auth || auth.mode !== "token")
+        return null;
+    if (typeof auth.userId !== "string" || typeof auth.accessToken !== "string")
+        return null;
+    if (!auth.userId || !auth.accessToken)
+        return null;
+    const mentionNames = Array.isArray(account.mentionNames)
+        ? account.mentionNames.filter((n) => typeof n === "string" && n.length > 0)
+        : [];
+    const owner = typeof account.owner === "string" && account.owner.length > 0 ? account.owner : undefined;
+    return {
+        accountId,
+        serverUrl,
+        mentionNames,
+        auth: { mode: "token", userId: auth.userId, accessToken: auth.accessToken },
+        ...(owner ? { owner } : {}),
+    };
+}
+function normalizeMention(name) {
+    return name.trim().replace(/^@+/, "");
+}
+export function updateConfig(opts) {
+    const cfg = readConfig();
+    if (!cfg.plugins)
+        cfg.plugins = {};
+    if (!cfg.plugins.load)
+        cfg.plugins.load = {};
+    if (!cfg.plugins.load.paths)
+        cfg.plugins.load.paths = [];
+    if (!cfg.plugins.load.paths.includes(opts.pluginPath)) {
+        cfg.plugins.load.paths.push(opts.pluginPath);
+    }
+    if (!cfg.plugins.allow)
+        cfg.plugins.allow = [];
+    if (!cfg.plugins.allow.includes(opts.pluginId)) {
+        cfg.plugins.allow.push(opts.pluginId);
+    }
+    if (!cfg.channels)
+        cfg.channels = {};
+    if (!cfg.channels.rocketchat)
+        cfg.channels.rocketchat = {};
+    if (!cfg.channels.rocketchat.accounts)
+        cfg.channels.rocketchat.accounts = {};
+    const accounts = cfg.channels.rocketchat.accounts;
+    const existing = accounts[opts.accountId];
+    const existingMentions = Array.isArray(existing?.mentionNames)
+        ? existing.mentionNames
+            .map((n) => (typeof n === "string" ? normalizeMention(n) : ""))
+            .filter(Boolean)
+        : [];
+    const incomingMentions = (opts.mentionNames ?? []).map(normalizeMention).filter(Boolean);
+    const mergedMentions = [...existingMentions];
+    for (const m of incomingMentions) {
+        if (!mergedMentions.includes(m))
+            mergedMentions.push(m);
+    }
+    const serverUrl = opts.replaceConnection
+        ? opts.serverUrl
+        : (existing?.serverUrl ?? opts.serverUrl);
+    const auth = opts.replaceConnection
+        ? { mode: "token", userId: opts.auth.userId, accessToken: opts.auth.accessToken }
+        : (existing?.auth ?? {
+            mode: "token",
+            userId: opts.auth.userId,
+            accessToken: opts.auth.accessToken,
+        });
+    accounts[opts.accountId] = {
+        ...(existing ?? {}),
+        enabled: true,
+        serverUrl,
+        auth,
+        transport: existing?.transport ?? opts.transport ?? { mode: "websocket" },
+        mentionNames: opts.replaceConnection ? incomingMentions : mergedMentions,
+        ...(opts.owner ? { owner: opts.owner.trim().replace(/^@+/, "") } : {}),
+    };
+    writeConfig(cfg);
+}
+export function readAgentsList() {
+    // OpenClaw 2026+ stores agents as directories under ~/.openclaw/agents/
+    const agentsDir = resolve(homedir(), ".openclaw", "agents");
+    if (existsSync(agentsDir)) {
+        try {
+            const entries = readdirSync(agentsDir, { withFileTypes: true });
+            return entries.filter((e) => e.isDirectory()).map((e) => ({ id: e.name }));
+        }
+        catch {
+            // fall through
+        }
+    }
+    // Fallback: agents.list array in config
+    const cfg = readConfig();
+    const list = cfg?.agents?.list;
+    if (Array.isArray(list)) {
+        return list
+            .filter((a) => a && typeof a === "object")
+            .map((a) => {
+            const id = typeof a.id === "string" ? a.id : "";
+            const name = typeof a.name === "string" ? a.name : undefined;
+            const result = { id };
+            if (name !== undefined)
+                result.name = name;
+            return result;
+        })
+            .filter((a) => a.id.length > 0);
+    }
+    return [];
+}
+export function readBindingsForAccount(accountId) {
+    const cfg = readConfig();
+    const bindings = cfg?.bindings;
+    if (!Array.isArray(bindings))
+        return [];
+    return bindings
+        .filter((b) => b?.match?.channel === "rocketchat" && b?.match?.accountId === accountId)
+        .map((b) => {
+        const result = {
+            agentId: typeof b.agentId === "string" ? b.agentId : "(unknown)",
+        };
+        if (b.match?.peer) {
+            result.peer = { kind: b.match.peer.kind, id: b.match.peer.id };
+        }
+        return result;
+    });
+}
+export function addAccount(opts) {
+    const cfg = readConfig();
+    if (!cfg.channels)
+        cfg.channels = {};
+    if (!cfg.channels.rocketchat)
+        cfg.channels.rocketchat = {};
+    if (!cfg.channels.rocketchat.accounts)
+        cfg.channels.rocketchat.accounts = {};
+    const accounts = cfg.channels.rocketchat.accounts;
+    const owner = opts.owner?.trim().replace(/^@+/, "");
+    accounts[opts.accountId] = {
+        ...(accounts[opts.accountId] ?? {}),
+        enabled: true,
+        serverUrl: opts.serverUrl,
+        auth: {
+            mode: "token",
+            userId: opts.auth.userId,
+            accessToken: opts.auth.accessToken,
+        },
+        transport: opts.transport ?? { mode: "websocket" },
+        mentionNames: opts.mentionNames.map(normalizeMention).filter(Boolean),
+        ...(owner ? { owner } : {}),
+    };
+    writeConfig(cfg);
+}
+export function readOwner(accountId) {
+    const cfg = readConfig();
+    const account = cfg?.channels?.rocketchat?.accounts?.[accountId];
+    const owner = account?.owner;
+    return typeof owner === "string" && owner.length > 0 ? owner : undefined;
+}
+export function ensureAgentForBot(accountId) {
+    const dedicatedId = `rc-${accountId}`;
+    const existing = readAgentsList();
+    if (existing.some((a) => a.id === dedicatedId)) {
+        return { agentId: dedicatedId, created: false, fallback: false };
+    }
+    try {
+        const workspace = resolve(homedir(), ".openclaw", "agents", dedicatedId);
+        execFileSync("openclaw", ["agents", "add", dedicatedId, "--non-interactive", "--workspace", workspace], { stdio: "ignore" });
+        return { agentId: dedicatedId, created: true, fallback: false };
+    }
+    catch {
+        return { agentId: "main", created: false, fallback: true };
+    }
+}
+export function isAgentBound(agentId) {
+    const cfg = readConfig();
+    const bindings = cfg?.bindings;
+    if (!Array.isArray(bindings))
+        return false;
+    return bindings.some((b) => b?.match?.channel === "rocketchat" &&
+        typeof b.agentId === "string" &&
+        normalizeAgentId(b.agentId) === normalizeAgentId(agentId));
+}
+function normalizeAgentId(id) {
+    return id.trim().toLowerCase();
+}
+export function addBinding(opts) {
+    const cfg = readConfig();
+    if (!cfg.bindings)
+        cfg.bindings = [];
+    const bindings = cfg.bindings;
+    const existingIndex = bindings.findIndex((b) => b.match?.channel === opts.channel &&
+        b.match?.accountId === opts.accountId &&
+        (!opts.peer || JSON.stringify(b.match?.peer) === JSON.stringify(opts.peer)));
+    const binding = {
+        agentId: opts.agentId,
+        match: {
+            channel: opts.channel,
+            accountId: opts.accountId,
+        },
+    };
+    if (opts.peer) {
+        binding.match.peer = opts.peer;
+    }
+    if (existingIndex >= 0) {
+        bindings[existingIndex] = binding;
+    }
+    else {
+        bindings.push(binding);
+    }
+    writeConfig(cfg);
+}
+export function removeBindingsForAccount(accountId) {
+    const cfg = readConfig();
+    const bindings = cfg?.bindings;
+    if (!bindings)
+        return;
+    cfg.bindings = bindings.filter((b) => !(b.match?.channel === "rocketchat" && b.match?.accountId === accountId));
+    writeConfig(cfg);
+}
+export function removeAccount(accountId) {
+    const cfg = readConfig();
+    const accounts = cfg?.channels?.rocketchat?.accounts;
+    if (accounts) {
+        delete accounts[accountId];
+    }
+    writeConfig(cfg);
+}
+export function removeAgentDir(accountId) {
+    const dir = resolve(homedir(), ".openclaw", "agents", `rc-${accountId}`);
+    if (existsSync(dir))
+        rmSync(dir, { recursive: true, force: true });
+}
+//# sourceMappingURL=config-updater.js.map