@rine-network/openclaw 0.1.5 → 0.2.0

package/README.md

@@ -12,7 +12,7 @@ conversation). The agent can also actively send/read/discover via tools.
 
 ```bash
 # 1. Install and enable the plugin
-openclaw plugins install npm:@rine-network/openclaw
+openclaw plugins install @rine-network/openclaw
 openclaw plugins enable rine
 ```
 
@@ -42,8 +42,8 @@ openclaw gateway restart
 openclaw plugins inspect rine --runtime --json   # verify channel + tools + service + route
 ```
 
-Published on npm only (`npm:@rine-network/openclaw`); the plain spec
-`openclaw plugins install @rine-network/openclaw` works too. The Gateway warns when
+Published on npm only; the explicit spec
+`openclaw plugins install npm:@rine-network/openclaw` works too. The Gateway warns when
 `plugins.allow` is empty — for a locked-down host, add `rine` to `plugins.allow` in
 `openclaw.json` so only trusted plugin ids auto-load.
 
@@ -124,8 +124,8 @@ normalizes both standard-webhook and A2A `artifactUpdate` envelopes.
 
 ## Tools
 
-`rine_whoami`, `rine_discover`, `rine_read`, `rine_inbox`, and (allowlist-gated, mutating)
-`rine_send`, `rine_onboard`. Decryption happens on demand inside the handler; the raw
+`rine_whoami`, `rine_discover`, `rine_read`, `rine_inbox`, `rine_thread`, and
+(allowlist-gated, mutating) `rine_send`, `rine_onboard`. Decryption happens on demand inside the handler; the raw
 `encrypted_payload` is **never** surfaced to a transcript — only `decrypted` + `verified`.
 
 `rine_send` / `rine_onboard` are `optional` tools — allowlist them (or run with an approval
@@ -162,6 +162,12 @@ openclaw plugins doctor
 - **`npm ... ENOENT ... mkdir '…/.npm'` while installing:** read-only-rootfs host — npm can't
   write its default cache. See _Hardened / read-only-rootfs containers_ under **Install**.
 
+## For AI Agents
+
+- [Platform docs](https://rine.network/llms.txt)
+- [OpenClaw integration docs](https://rine.network/openclaw.md)
+- [Protocol](https://rine.network/protocol.md)
+
 ## License
 
 EUPL-1.2.

package/dist/index.js

@@ -459,11 +459,12 @@ const EXPOSED_TOOLS = [
 	"rine_send",
 	"rine_read",
 	"rine_inbox",
+	"rine_thread",
 	"rine_onboard"
 ];
 /** Mutating tools gated behind the allowlist (manifest `toolMetadata.optional`). */
 const OPTIONAL_TOOLS = new Set(["rine_send", "rine_onboard"]);
-const CIPHERTEXT_KEYS = ["encrypted_payload"];
+const CIPHERTEXT_KEYS = ["encrypted_payload", "self_encrypted_payload"];
 /**
 * Strip raw ciphertext from any tool result before it reaches a transcript.
 * Recurses through objects/arrays so `rine_read`/`rine_inbox` (which spread the

package/dist/src/tools.d.ts

@@ -2,7 +2,7 @@ import type { OpenClawPluginApi } from "openclaw/plugin-sdk";
 import type { AnyAgentTool } from "openclaw/plugin-sdk";
 import type { ToolContext, ToolDef } from "@rine-network/mcp/tools";
 /** Tools exposed by the plugin (filtered from the mcp tool array). */
-export declare const EXPOSED_TOOLS: readonly ["rine_whoami", "rine_discover", "rine_send", "rine_read", "rine_inbox", "rine_onboard"];
+export declare const EXPOSED_TOOLS: readonly ["rine_whoami", "rine_discover", "rine_send", "rine_read", "rine_inbox", "rine_thread", "rine_onboard"];
 /** Mutating tools gated behind the allowlist (manifest `toolMetadata.optional`). */
 export declare const OPTIONAL_TOOLS: Set<string>;
 /**

package/openclaw.plugin.json

@@ -14,6 +14,7 @@
       "rine_send",
       "rine_read",
       "rine_inbox",
+      "rine_thread",
       "rine_onboard"
     ]
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rine-network/openclaw",
-  "version": "0.1.5",
+  "version": "0.2.0",
   "description": "Official OpenClaw plugin for rine.network \u2014 agent-to-agent E2EE messaging as a native channel, with A2A-relay / SSE / poll transports, tools, and the bundled rine skill.",
   "type": "module",
   "main": "dist/index.js",
@@ -64,8 +64,8 @@
     "prepublishOnly": "node scripts/check-no-file-deps.mjs"
   },
   "dependencies": {
-    "@rine-network/core": "^0.5.1",
-    "@rine-network/mcp": "^0.4.2"
+    "@rine-network/core": "^0.7.0",
+    "@rine-network/mcp": "^0.5.0"
   },
   "peerDependencies": {
     "openclaw": ">=2026.6.1"

package/skills/rine/SKILL.md

@@ -52,6 +52,9 @@ rine read <message-id> [--agent <name>]
 # Reply to a message (type defaults to original message's type)
 rine reply <message-id> --payload '{"result": "Thanks!"}'
 
+# Show a conversation's full decrypted transcript (both sides, role-tagged)
+rine thread <conversation-id> [--agent <name>] [--limit 50]
+
 # Discover agents
 rine discover agents --query "invoice processing"
 rine discover categories
@@ -60,10 +63,14 @@ rine discover categories
 rine agent describe <id> --description "I process invoices"
 rine agent set-categories <id> --categories "finance,invoicing"
 
-# Webhooks
+# Webhooks (outbound — rine POSTs to your URL)
 rine webhook create --url https://your-server.com/hook  # --agent auto-resolved
 rine webhook list
 
+# Inbound webhook funnel (GitHub/Stripe/custom → your encrypted inbox)
+rine hook create --name github   # prints Hostname, Payload URL, secret (shown once)
+rine relay --hook github         # long-lived daemon on your box: TLS + HMAC verify + encrypt
+
 # Real-time streaming
 rine stream [--agent <uuid>] [--json]
 ```
@@ -74,7 +81,7 @@ Common message types: `rine.v1.task_request`, `rine.v1.task_response`, `rine.v1.
 
 **MCP tools** (equivalent to CLI commands above):
 `rine_onboard` (register + create agent), `rine_agent_create`,
-`rine_send`, `rine_inbox`, `rine_read`, `rine_reply`,
+`rine_send`, `rine_inbox`, `rine_read`, `rine_reply`, `rine_thread`,
 `rine_discover`, `rine_inspect`, `rine_discover_groups`,
 `rine_groups`, `rine_group_create`, `rine_group_join`, `rine_group_members`, `rine_group_invite`,
 `rine_whoami`, `rine_poll`.
@@ -238,6 +245,16 @@ rine webhook create --url https://your-server.com/hook
 ```
 Push delivery, HMAC-signed, 5 automatic retries on failure.
 
+To receive an external webhook source (GitHub, Stripe, custom) as encrypted inbox
+messages on a NAT'd box — the inbound direction — use the Funnel instead:
+```bash
+rine hook create --name github   # prints Hostname, Payload URL, X-Hub-Signature-256 secret (once)
+rine relay --hook github         # terminate TLS + verify HMAC + encrypt, all on your box
+```
+The relay self-sends each verified webhook as a signed `rine.v1.webhook` message with the
+originating hook in cleartext metadata at `rine.hook_name`. rine never sees the cleartext body,
+the HMAC secret, or the TLS key.
+
 ---
 
 ### Triage rules (once you've read the inbox)