@pinchpass/cli 1.0.4 → 1.0.6

package/dist/index.js

@@ -1,49 +1,51 @@
-import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
-import { CLI_FRESH_WATCHDOG_DEFAULTS, CLI_RESUME_WATCHDOG_DEFAULTS, } from "openclaw/plugin-sdk/cli-backend";
-const FRESH_WATCHDOG = {
-    ...CLI_FRESH_WATCHDOG_DEFAULTS,
-    timeout: 3_600_000,
-    maxMissedHeartbeats: 120,
-};
-const RESUME_WATCHDOG = {
-    ...CLI_RESUME_WATCHDOG_DEFAULTS,
-    timeout: 3_600_000,
-    maxMissedHeartbeats: 120,
-};
-function buildPinchpassBackend() {
+import { tool } from "@opencode-ai/plugin/tool";
+export default async ({ $ }) => {
     return {
-        id: "pinchpass",
-        liveTest: {
-            defaultModelRef: "pinchpass/request",
-            defaultImageProbe: false,
-            defaultMcpProbe: false,
-            docker: {
-                npmPackage: "@pinchpass/cli",
-                binaryName: "pinchpass",
-            },
-        },
-        config: {
-            command: "pinchpass",
-            args: ["request", "-json"],
-            output: "json",
-            input: "arg",
-            modelAliases: {
-                request: "pinchpass/request",
-            },
-            reliability: {
-                watchdog: {
-                    fresh: FRESH_WATCHDOG,
-                    resume: RESUME_WATCHDOG,
+        tool: {
+            request_secret: tool({
+                description: "Generate a one-time E2E-encrypted secret request link. " +
+                    "Use when you need to collect sensitive values (API keys, tokens, passwords) from the user. " +
+                    "The tool starts a local server, prints a link, and blocks until the user submits or the TTL expires. " +
+                    "On success the secret is saved to .env and the tool returns the result.",
+                args: {
+                    names: tool.schema
+                        .array(tool.schema.string())
+                        .min(1)
+                        .describe("Secret name(s) to collect, e.g. ['GEMINI_API_KEY']"),
+                    tunnel: tool.schema
+                        .boolean()
+                        .optional()
+                        .describe("Create a public URL via bore.pub tunnel (default: false)"),
+                    note: tool.schema
+                        .string()
+                        .optional()
+                        .describe("Description shown on the form to help the user"),
+                    ttl: tool.schema
+                        .number()
+                        .optional()
+                        .describe("Minutes until the link expires (default: 30)"),
                 },
-            },
+                async execute(args) {
+                    const pieces = ["pinchpass", "request", ...args.names, "-json"];
+                    if (args.tunnel)
+                        pieces.push("-tunnel");
+                    if (args.note)
+                        pieces.push("-note", args.note);
+                    if (args.ttl)
+                        pieces.push("-ttl", String(args.ttl));
+                    try {
+                        const result = await $.raw(pieces);
+                        return result.stdout || result.text || String(result);
+                    }
+                    catch (err) {
+                        const msg = err instanceof Error ? err.message : String(err);
+                        const stderr = err && typeof err === "object" && "stderr" in err
+                            ? err.stderr
+                            : "";
+                        return `Failed: ${msg}${stderr ? "\n" + stderr : ""}`;
+                    }
+                },
+            }),
         },
     };
-}
-export default definePluginEntry({
-    id: "pinchpass",
-    name: "PinchPass",
-    description: "One-time E2E-encrypted secret request links",
-    register(api) {
-        api.registerCliBackend(buildPinchpassBackend());
-    },
-});
+};

package/openclaw.plugin.json

@@ -1,12 +1,7 @@
 {
   "id": "pinchpass",
   "name": "PinchPass",
-  "description": "One-time E2E-encrypted secret request links",
-  "cliBackends": ["pinchpass"],
-  "setup": {
-    "cliBackends": ["pinchpass"],
-    "requiresRuntime": false
-  },
+  "description": "Generate one-time E2E-encrypted secret request links",
   "activation": {
     "onStartup": false
   },

package/package.json

@@ -1,31 +1,25 @@
 {
   "name": "@pinchpass/cli",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "One-time E2E-encrypted secret request links for OpenClaw agents",
   "type": "module",
   "main": "./dist/index.js",
   "files": [
     "dist",
     "SKILL.md",
-    "openclaw.plugin.json"
+    "openclaw.plugin.json",
+    "scripts"
   ],
   "openclaw": {
-    "extensions": ["./dist/index.js"],
-    "compat": {
-      "pluginApi": ">=2026.3.24-beta.2",
-      "minGatewayVersion": "2026.3.24-beta.2"
-    },
-    "build": {
-      "openclawVersion": "2026.3.24-beta.2",
-      "pluginSdkVersion": "2026.3.24-beta.2"
-    }
+    "extensions": ["./dist/index.js"]
   },
   "scripts": {
     "build": "tsc",
+    "postinstall": "node scripts/install-binary.js",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "openclaw": "^2026.6.1"
+    "@opencode-ai/plugin": "^1.16.2"
   },
   "devDependencies": {
     "typescript": "^5.9.0"

package/scripts/install-binary.js

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+
+import { execSync } from "child_process";
+import { existsSync, mkdirSync, writeFileSync, chmodSync } from "fs";
+import { homedir, platform } from "os";
+
+const VERSION = "latest";
+const REPO = "rubybear-lgtm/PinchPass";
+
+function detectBinary() {
+  const arch = process.arch === "arm64" ? "arm64" : "amd64";
+  const osMap = {
+    darwin: "darwin",
+    linux: "linux",
+    win32: "windows",
+  };
+  const plat = osMap[process.platform];
+  if (!plat) throw new Error(`Unsupported platform: ${process.platform}`);
+  return { name: `pinchpass-${plat}-${arch}`, plat, arch };
+}
+
+async function install() {
+  const { name } = detectBinary();
+  const installDir = `${homedir()}/.openclaw/bin`;
+  const dest = `${installDir}/pinchpass`;
+
+  if (existsSync(dest)) {
+    console.log(`pinchpass already installed at ${dest}`);
+    return;
+  }
+
+  const url =
+    VERSION === "latest"
+      ? `https://github.com/${REPO}/releases/latest/download/${name}`
+      : `https://github.com/${REPO}/releases/download/v${VERSION}/${name}`;
+
+  console.log(`Downloading pinchpass from ${url}...`);
+
+  mkdirSync(installDir, { recursive: true });
+
+  if (process.platform === "win32") {
+    execSync(`curl -sL "${url}" -o "${dest}.exe"`, { stdio: "inherit" });
+  } else {
+    execSync(`curl -sL "${url}" -o "${dest}"`, { stdio: "inherit" });
+    chmodSync(dest, 0o755);
+  }
+
+  console.log(`Installed pinchpass to ${dest}`);
+  console.log(`Add ${installDir} to your PATH if not already present.`);
+}
+
+install().catch((err) => {
+  console.error(`Failed to install pinchpass binary: ${err.message}`);
+  console.log(
+    `To build from source: cd pinchpass-plugin && go build -o pinchpass .`
+  );
+  process.exit(1);
+});