@soyeht/soyeht 0.2.10 → 0.2.11

package/openclaw.plugin.json

@@ -5,7 +5,7 @@
   ],
   "name": "Soyeht",
   "description": "Channel plugin for the Soyeht Flutter mobile app",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soyeht/soyeht",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "OpenClaw channel plugin for the Soyeht Flutter mobile app",
   "type": "module",
   "main": "src/index.ts",

package/src/http.ts

@@ -1,3 +1,4 @@
+import { randomBytes } from "node:crypto";
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { OpenClawPluginApi, PluginRuntimeChannel } from "openclaw/plugin-sdk";
 import { normalizeAccountId, resolveSoyehtAccount } from "./config.js";
@@ -8,14 +9,22 @@ import type { SecurityV2Deps } from "./service.js";
 import { PLUGIN_VERSION } from "./version.js";
 import {
   base64UrlDecode,
+  base64UrlEncode,
   computeFingerprint,
+  ed25519Sign,
   generateX25519KeyPair,
   importEd25519PublicKey,
   importX25519PublicKey,
   ed25519Verify,
   isTimestampValid,
 } from "./crypto.js";
-import { buildPairingProofTranscript } from "./pairing.js";
+import {
+  buildPairingProofTranscript,
+  buildPairingQrTranscript,
+  buildPairingQrTranscriptV2,
+  resolveGatewayUrl,
+} from "./pairing.js";
+import { renderQrTerminal } from "./qr.js";
 import {
   buildHandshakeTranscript,
   signHandshakeTranscript,
@@ -537,6 +546,103 @@ function clearAccountSessionState(v2deps: SecurityV2Deps, accountId: string): vo
   }
 }
 
+// ---------------------------------------------------------------------------
+// GET /soyeht/pairing/start — generate a pairing QR via HTTP (no RPC needed)
+// ---------------------------------------------------------------------------
+
+const DEFAULT_PAIRING_TTL_MS = 90_000;
+
+export function pairingStartHandler(
+  api: OpenClawPluginApi,
+  v2deps: SecurityV2Deps,
+) {
+  return async (req: IncomingMessage, res: ServerResponse) => {
+    if (req.method !== "GET") {
+      sendJson(res, 405, { ok: false, error: "method_not_allowed" });
+      return;
+    }
+
+    if (!v2deps.ready || !v2deps.identity) {
+      sendJson(res, 503, { ok: false, error: "service_unavailable" });
+      return;
+    }
+
+    const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+    const accountId = normalizeAccountId(url.searchParams.get("accountId") ?? "default");
+    const allowOverwrite = url.searchParams.get("allowOverwrite") !== "false";
+    const format = url.searchParams.get("format") ?? "json";
+
+    const { allowed } = v2deps.rateLimiter.check(`pairing:start:http:${accountId}`);
+    if (!allowed) {
+      sendJson(res, 429, { ok: false, error: "rate_limited" });
+      return;
+    }
+
+    if (v2deps.peers.has(accountId) && !allowOverwrite) {
+      sendJson(res, 409, { ok: false, error: "peer_already_paired" });
+      return;
+    }
+
+    // Clear stale pairing sessions for this account
+    for (const [token, session] of v2deps.pairingSessions) {
+      if (session.accountId === accountId) {
+        v2deps.pairingSessions.delete(token);
+      }
+    }
+
+    const pairingToken = base64UrlEncode(randomBytes(32));
+    const expiresAt = Date.now() + DEFAULT_PAIRING_TTL_MS;
+    const fingerprint = computeFingerprint(v2deps.identity);
+
+    const cfg = await api.runtime.config.loadConfig();
+    const account = resolveSoyehtAccount(cfg, accountId);
+    const gatewayUrl = resolveGatewayUrl(api, account.gatewayUrl);
+
+    const basePayload = {
+      accountId,
+      pairingToken,
+      expiresAt,
+      allowOverwrite,
+      pluginIdentityKey: v2deps.identity.signKey.publicKeyB64,
+      pluginDhKey: v2deps.identity.dhKey.publicKeyB64,
+      fingerprint,
+    };
+
+    let qrPayload: Record<string, unknown>;
+    if (gatewayUrl) {
+      const transcript = buildPairingQrTranscriptV2({ gatewayUrl, ...basePayload });
+      const signature = base64UrlEncode(ed25519Sign(v2deps.identity.signKey.privateKey, transcript));
+      qrPayload = { version: 2, type: "soyeht_pairing_qr", gatewayUrl, ...basePayload, signature };
+    } else {
+      const transcript = buildPairingQrTranscript(basePayload);
+      const signature = base64UrlEncode(ed25519Sign(v2deps.identity.signKey.privateKey, transcript));
+      qrPayload = { version: 1, type: "soyeht_pairing_qr", ...basePayload, signature };
+    }
+
+    v2deps.pairingSessions.set(pairingToken, {
+      token: pairingToken,
+      accountId,
+      expiresAt,
+      allowOverwrite,
+    });
+
+    const qrUrl = `soyeht://pair?g=${gatewayUrl}&t=${pairingToken}&fp=${fingerprint}`;
+    api.logger.info("[soyeht] Pairing started via HTTP", { accountId, expiresAt });
+
+    if (format === "terminal") {
+      const rendered = renderQrTerminal(qrUrl);
+      const text = rendered
+        ? `\n${rendered}\n\n${qrUrl}\n\nExpires in ${DEFAULT_PAIRING_TTL_MS / 1000}s\n`
+        : `QR too large for terminal.\n\n${qrUrl}\n\nExpires in ${DEFAULT_PAIRING_TTL_MS / 1000}s\n`;
+      res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" });
+      res.end(text);
+      return;
+    }
+
+    sendJson(res, 200, { ok: true, qrUrl, qrPayload, expiresAt });
+  };
+}
+
 // ---------------------------------------------------------------------------
 // GET /soyeht/pairing/info?t=<pairingToken>
 // ---------------------------------------------------------------------------

package/src/index.ts

@@ -15,6 +15,7 @@ import {
   livekitTokenHandler,
   inboundHandler,
   sseHandler,
+  pairingStartHandler,
   pairingInfoHandler,
   pairingPairHandler,
   pairingFinishHandler,
@@ -131,6 +132,11 @@ const soyehtPlugin: OpenClawPluginDefinition = {
     });
 
     // HTTP pairing routes (app pairs via HTTP, no WebSocket needed)
+    api.registerHttpRoute({
+      path: "/soyeht/pairing/start",
+      auth: "plugin",
+      handler: pairingStartHandler(api, v2deps),
+    });
     api.registerHttpRoute({
       path: "/soyeht/pairing/info",
       auth: "plugin",

package/src/pairing.ts

@@ -119,7 +119,7 @@ function clearAccountSessionState(v2deps: SecurityV2Deps, accountId: string): vo
 // Resolve the gateway URL for QR V2
 // ---------------------------------------------------------------------------
 
-function resolveGatewayUrl(api: OpenClawPluginApi, configGatewayUrl: string): string {
+export function resolveGatewayUrl(api: OpenClawPluginApi, configGatewayUrl: string): string {
   // 1) Explicit config
   if (configGatewayUrl) return configGatewayUrl;
 

package/src/version.ts

@@ -1 +1 @@
-export const PLUGIN_VERSION = "0.2.10";
+export const PLUGIN_VERSION = "0.2.11";