@openclaw/clickclack 2026.7.2-beta.1 → 2026.7.2-beta.3

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as clickClackPlugin } from "./channel-Ds6d_3nx.js";
+import { t as clickClackPlugin } from "./channel-CEYthZ9N.js";
 export { clickClackPlugin };

package/dist/runtime-api.js

@@ -1,3 +1,4 @@
-import { d as resolveClickClackAccount, i as createClickClackClient, o as setClickClackRuntime, r as parseClickClackTarget } from "./channel-Ds6d_3nx.js";
+import { a as createClickClackClient, m as resolveClickClackAccount } from "./setup-surface-CNjp76Xx.js";
+import { a as setClickClackRuntime, r as parseClickClackTarget } from "./channel-CEYthZ9N.js";
 import "./api.js";
 export { createClickClackClient, parseClickClackTarget, resolveClickClackAccount, setClickClackRuntime };

package/dist/secret-contract-BKkzzjBA.js

@@ -0,0 +1,35 @@
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { collectConditionalChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasConfiguredSecretInputValue } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+//#region extensions/clickclack/src/secret-contract.ts
+const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
+	channelKey: "clickclack",
+	account: ["token"],
+	channel: ["token"]
+});
+function collectRuntimeConfigAssignments(params) {
+	const resolved = getChannelSurface(params.config, "clickclack");
+	if (!resolved) return;
+	const { channel: clickclack, surface } = resolved;
+	const baseTokenFile = normalizeOptionalString(clickclack.tokenFile) ?? "";
+	const accountTokenFile = (account) => normalizeOptionalString(account.tokenFile) ?? "";
+	const hasImplicitDefault = Boolean(normalizeOptionalString(clickclack.baseUrl)) && Boolean(normalizeOptionalString(clickclack.workspace));
+	collectConditionalChannelFieldAssignments({
+		channelKey: "clickclack",
+		field: "token",
+		channel: clickclack,
+		surface,
+		defaults: params.defaults,
+		context: params.context,
+		topLevelActiveWithoutAccounts: baseTokenFile.length === 0,
+		topLevelInheritedAccountActive: ({ account, enabled }) => hasImplicitDefault && baseTokenFile.length === 0 || enabled && baseTokenFile.length === 0 && accountTokenFile(account).length === 0 && !hasConfiguredSecretInputValue(account.token, params.defaults),
+		accountActive: ({ account, enabled }) => enabled && accountTokenFile(account).length === 0,
+		topInactiveReason: "no enabled ClickClack account inherits this top-level token (tokenFile is configured).",
+		accountInactiveReason: "ClickClack account is disabled or tokenFile is configured."
+	});
+}
+const channelSecrets = {
+	secretTargetRegistryEntries,
+	collectRuntimeConfigAssignments
+};
+//#endregion
+export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/secret-contract-api.js

@@ -0,0 +1,2 @@
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-BKkzzjBA.js";
+export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/setup-claim-BUWvZjtu.js

@@ -0,0 +1,114 @@
+import { createProviderOperationDeadline, readProviderJsonResponse, readResponseTextLimited, resolveProviderOperationTimeoutMs } from "openclaw/plugin-sdk/provider-http";
+import { fetchWithSsrFGuard, isPrivateOrLoopbackHost, resolvePinnedHostnameWithPolicy, ssrfPolicyFromHttpBaseUrlAllowedHostname } from "openclaw/plugin-sdk/ssrf-runtime";
+import { withTimeout } from "openclaw/plugin-sdk/text-utility-runtime";
+//#region extensions/clickclack/src/setup-claim.ts
+const CLICKCLACK_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
+const CLICKCLACK_SETUP_CODE_CLAIM_JSON_LIMIT_BYTES = 64 * 1024;
+const CLICKCLACK_SETUP_CODE_CLAIM_TIMEOUT_MS = 3e4;
+var ClickClackSetupCodeClaimError = class extends Error {
+	constructor(status, detail) {
+		super(`ClickClack setup code claim failed (${status}): ${detail}`);
+		this.status = status;
+	}
+};
+function requireRecord(value, label) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`ClickClack setup code claim returned invalid ${label}`);
+	return value;
+}
+function requireString(record, key, label) {
+	const value = record[key];
+	if (typeof value !== "string" || !value.trim()) throw new Error(`ClickClack setup code claim returned invalid ${label}.${key}`);
+	return value;
+}
+function parseClickClackSetupCodeClaim(value) {
+	const claim = requireRecord(value, "response");
+	const bot = requireRecord(claim.bot, "bot");
+	const workspace = requireRecord(claim.workspace, "workspace");
+	const defaults = requireRecord(claim.defaults, "defaults");
+	const defaultTo = defaults.defaultTo;
+	const allowFrom = defaults.allowFrom;
+	const agentActivity = defaults.agentActivity;
+	if (defaultTo !== void 0 && typeof defaultTo !== "string") throw new Error("ClickClack setup code claim returned invalid defaults.defaultTo");
+	if (allowFrom !== void 0 && (!Array.isArray(allowFrom) || !allowFrom.every((entry) => typeof entry === "string"))) throw new Error("ClickClack setup code claim returned invalid defaults.allowFrom");
+	if (agentActivity !== void 0 && typeof agentActivity !== "boolean") throw new Error("ClickClack setup code claim returned invalid defaults.agentActivity");
+	return {
+		token: requireString(claim, "token", "response"),
+		bot: {
+			id: requireString(bot, "id", "bot"),
+			handle: requireString(bot, "handle", "bot"),
+			display_name: requireString(bot, "display_name", "bot")
+		},
+		workspace: {
+			id: requireString(workspace, "id", "workspace"),
+			route_id: requireString(workspace, "route_id", "workspace"),
+			slug: requireString(workspace, "slug", "workspace"),
+			name: requireString(workspace, "name", "workspace")
+		},
+		defaults: {
+			...defaultTo !== void 0 ? { defaultTo } : {},
+			...allowFrom !== void 0 ? { allowFrom } : {},
+			...agentActivity !== void 0 ? { agentActivity } : {}
+		}
+	};
+}
+/** Claims a one-time setup code without sending any existing bot credential. */
+async function claimClickClackSetupCode(params) {
+	const baseUrl = params.baseUrl.replace(/\/+$/, "");
+	const parsedBaseUrl = new URL(baseUrl);
+	const deadline = createProviderOperationDeadline({
+		label: "ClickClack setup code claim",
+		timeoutMs: CLICKCLACK_SETUP_CODE_CLAIM_TIMEOUT_MS
+	});
+	let pinnedHttpTarget;
+	if (parsedBaseUrl.protocol === "http:") {
+		const resolveTimeoutMs = resolveProviderOperationTimeoutMs({
+			deadline,
+			defaultTimeoutMs: CLICKCLACK_SETUP_CODE_CLAIM_TIMEOUT_MS
+		});
+		const pinned = await withTimeout(resolvePinnedHostnameWithPolicy(parsedBaseUrl.hostname, {
+			lookupFn: params.lookupFn,
+			policy: { dangerouslyAllowPrivateNetwork: true }
+		}), resolveTimeoutMs, { message: `ClickClack setup code claim timed out after ${CLICKCLACK_SETUP_CODE_CLAIM_TIMEOUT_MS}ms` });
+		if (!pinned.addresses.every((address) => isPrivateOrLoopbackHost(address))) throw new Error("ClickClack setup codes require HTTPS unless the server is on a private or loopback network.");
+		pinnedHttpTarget = {
+			hostname: pinned.hostname,
+			addresses: pinned.addresses
+		};
+	}
+	const { response, release } = await fetchWithSsrFGuard({
+		url: `${baseUrl}/api/bot-setup-codes/claim`,
+		fetchImpl: params.fetch,
+		init: {
+			method: "POST",
+			headers: {
+				Accept: "application/json",
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify({ code: params.code })
+		},
+		maxRedirects: 0,
+		timeoutMs: resolveProviderOperationTimeoutMs({
+			deadline,
+			defaultTimeoutMs: CLICKCLACK_SETUP_CODE_CLAIM_TIMEOUT_MS
+		}),
+		requireHttps: parsedBaseUrl.protocol === "https:",
+		policy: ssrfPolicyFromHttpBaseUrlAllowedHostname(baseUrl),
+		lookupFn: params.lookupFn,
+		...pinnedHttpTarget ? { dispatcherPolicy: {
+			mode: "direct",
+			pinnedHostname: pinnedHttpTarget
+		} } : {},
+		auditContext: "ClickClack setup code claim"
+	});
+	try {
+		if (!response.ok) {
+			const detail = await readResponseTextLimited(response, CLICKCLACK_ERROR_BODY_LIMIT_BYTES);
+			throw new ClickClackSetupCodeClaimError(response.status, detail);
+		}
+		return parseClickClackSetupCodeClaim(await readProviderJsonResponse(response, "ClickClack setup code claim", { maxBytes: CLICKCLACK_SETUP_CODE_CLAIM_JSON_LIMIT_BYTES }));
+	} finally {
+		await release();
+	}
+}
+//#endregion
+export { claimClickClackSetupCode };

package/dist/setup-entry.js

@@ -0,0 +1,15 @@
+import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+//#region extensions/clickclack/setup-entry.ts
+var setup_entry_default = defineBundledChannelSetupEntry({
+	importMetaUrl: import.meta.url,
+	plugin: {
+		specifier: "./setup-plugin-api.js",
+		exportName: "clickClackSetupPlugin"
+	},
+	secrets: {
+		specifier: "./secret-contract-api.js",
+		exportName: "channelSecrets"
+	}
+});
+//#endregion
+export { setup_entry_default as default };

package/dist/setup-plugin-api.js

@@ -0,0 +1,18 @@
+import { l as clickClackConfigAdapter, n as clickClackSetupAdapter, s as clickClackConfigSchema, t as clickClackSetupWizard, u as clickClackMeta } from "./setup-surface-CNjp76Xx.js";
+//#region extensions/clickclack/src/channel.setup.ts
+const clickClackSetupPlugin = {
+	id: "clickclack",
+	meta: clickClackMeta,
+	capabilities: {
+		chatTypes: ["direct", "group"],
+		threads: true,
+		blockStreaming: true
+	},
+	reload: { configPrefixes: ["channels.clickclack"] },
+	configSchema: clickClackConfigSchema,
+	config: clickClackConfigAdapter,
+	setup: clickClackSetupAdapter,
+	setupWizard: clickClackSetupWizard
+};
+//#endregion
+export { clickClackSetupPlugin };