@tdesign-react/chat 1.1.0-alpha.16 → 1.1.0-alpha.18

package/es/chat-engine/core/adapters/openclaw/device-key-manager.js

@@ -0,0 +1,375 @@
+/**
+ * tdesign v1.1.0-alpha.17
+ * (c) 2026 tdesign
+ * @license MIT
+ */
+
+import _classCallCheck from '@babel/runtime/helpers/classCallCheck';
+import _createClass from '@babel/runtime/helpers/createClass';
+import _defineProperty from '@babel/runtime/helpers/defineProperty';
+import _asyncToGenerator from '@babel/runtime/helpers/asyncToGenerator';
+import _regeneratorRuntime from '@babel/runtime/regenerator';
+import { LoggerManager } from '../../utils/logger.js';
+
+var logger = LoggerManager.getLogger();
+function bytesToHex(bytes) {
+  return Array.from(bytes).map(function (b) {
+    return b.toString(16).padStart(2, "0");
+  }).join("");
+}
+function hexToBytes(hex) {
+  var bytes = new Uint8Array(hex.length / 2);
+  for (var i = 0; i < hex.length; i += 2) {
+    bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+  }
+  return bytes;
+}
+function deriveDeviceId(publicKeyHex) {
+  return "device_".concat(publicKeyHex.substring(0, 16));
+}
+function getStorageKey(clientId) {
+  return "openclaw_device_key_".concat(clientId);
+}
+function isEd25519Supported() {
+  return _isEd25519Supported.apply(this, arguments);
+}
+function _isEd25519Supported() {
+  _isEd25519Supported = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee4() {
+    var keyPair, _t3;
+    return _regeneratorRuntime.wrap(function (_context4) {
+      while (1) switch (_context4.prev = _context4.next) {
+        case 0:
+          _context4.prev = 0;
+          _context4.next = 1;
+          return crypto.subtle.generateKey("Ed25519", true, ["sign", "verify"]);
+        case 1:
+          keyPair = _context4.sent;
+          return _context4.abrupt("return", !!keyPair);
+        case 2:
+          _context4.prev = 2;
+          _t3 = _context4["catch"](0);
+          return _context4.abrupt("return", false);
+        case 3:
+        case "end":
+          return _context4.stop();
+      }
+    }, _callee4, null, [[0, 2]]);
+  }));
+  return _isEd25519Supported.apply(this, arguments);
+}
+function generateEd25519KeyPair() {
+  return _generateEd25519KeyPair.apply(this, arguments);
+}
+function _generateEd25519KeyPair() {
+  _generateEd25519KeyPair = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee5() {
+    var keyPair, publicKeyRaw, privateKeyPkcs8, publicKeyHex, privateKeyHex;
+    return _regeneratorRuntime.wrap(function (_context5) {
+      while (1) switch (_context5.prev = _context5.next) {
+        case 0:
+          _context5.next = 1;
+          return crypto.subtle.generateKey("Ed25519", true, ["sign", "verify"]);
+        case 1:
+          keyPair = _context5.sent;
+          _context5.next = 2;
+          return crypto.subtle.exportKey("raw", keyPair.publicKey);
+        case 2:
+          publicKeyRaw = _context5.sent;
+          _context5.next = 3;
+          return crypto.subtle.exportKey("pkcs8", keyPair.privateKey);
+        case 3:
+          privateKeyPkcs8 = _context5.sent;
+          publicKeyHex = bytesToHex(new Uint8Array(publicKeyRaw));
+          privateKeyHex = bytesToHex(new Uint8Array(privateKeyPkcs8));
+          return _context5.abrupt("return", {
+            publicKey: publicKeyHex,
+            privateKey: privateKeyHex,
+            deviceId: deriveDeviceId(publicKeyHex)
+          });
+        case 4:
+        case "end":
+          return _context5.stop();
+      }
+    }, _callee5);
+  }));
+  return _generateEd25519KeyPair.apply(this, arguments);
+}
+function signWithEd25519(_x, _x2) {
+  return _signWithEd.apply(this, arguments);
+}
+function _signWithEd() {
+  _signWithEd = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee6(privateKeyHex, nonce) {
+    var privateKeyBytes, privateKey, encoder, data, signature;
+    return _regeneratorRuntime.wrap(function (_context6) {
+      while (1) switch (_context6.prev = _context6.next) {
+        case 0:
+          privateKeyBytes = hexToBytes(privateKeyHex);
+          _context6.next = 1;
+          return crypto.subtle.importKey("pkcs8", privateKeyBytes.buffer, "Ed25519", false, ["sign"]);
+        case 1:
+          privateKey = _context6.sent;
+          encoder = new TextEncoder();
+          data = encoder.encode(nonce);
+          _context6.next = 2;
+          return crypto.subtle.sign("Ed25519", privateKey, data);
+        case 2:
+          signature = _context6.sent;
+          return _context6.abrupt("return", bytesToHex(new Uint8Array(signature)));
+        case 3:
+        case "end":
+          return _context6.stop();
+      }
+    }, _callee6);
+  }));
+  return _signWithEd.apply(this, arguments);
+}
+function generateHmacKeyPair() {
+  return _generateHmacKeyPair.apply(this, arguments);
+}
+function _generateHmacKeyPair() {
+  _generateHmacKeyPair = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee7() {
+    var privateKeyBytes, privateKeyHex, encoder, hashBuffer, publicKeyHex;
+    return _regeneratorRuntime.wrap(function (_context7) {
+      while (1) switch (_context7.prev = _context7.next) {
+        case 0:
+          privateKeyBytes = crypto.getRandomValues(new Uint8Array(32));
+          privateKeyHex = bytesToHex(privateKeyBytes);
+          encoder = new TextEncoder();
+          _context7.next = 1;
+          return crypto.subtle.digest("SHA-256", encoder.encode(privateKeyHex));
+        case 1:
+          hashBuffer = _context7.sent;
+          publicKeyHex = bytesToHex(new Uint8Array(hashBuffer));
+          return _context7.abrupt("return", {
+            publicKey: publicKeyHex,
+            privateKey: privateKeyHex,
+            deviceId: deriveDeviceId(publicKeyHex)
+          });
+        case 2:
+        case "end":
+          return _context7.stop();
+      }
+    }, _callee7);
+  }));
+  return _generateHmacKeyPair.apply(this, arguments);
+}
+function signWithHmac(_x3, _x4) {
+  return _signWithHmac.apply(this, arguments);
+}
+function _signWithHmac() {
+  _signWithHmac = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee8(privateKeyHex, nonce) {
+    var encoder, keyData, key, signature;
+    return _regeneratorRuntime.wrap(function (_context8) {
+      while (1) switch (_context8.prev = _context8.next) {
+        case 0:
+          encoder = new TextEncoder();
+          keyData = encoder.encode(privateKeyHex);
+          _context8.next = 1;
+          return crypto.subtle.importKey("raw", keyData, {
+            name: "HMAC",
+            hash: "SHA-256"
+          }, false, ["sign"]);
+        case 1:
+          key = _context8.sent;
+          _context8.next = 2;
+          return crypto.subtle.sign("HMAC", key, encoder.encode(nonce));
+        case 2:
+          signature = _context8.sent;
+          return _context8.abrupt("return", bytesToHex(new Uint8Array(signature)));
+        case 3:
+        case "end":
+          return _context8.stop();
+      }
+    }, _callee8);
+  }));
+  return _signWithHmac.apply(this, arguments);
+}
+var DeviceKeyManager = /*#__PURE__*/function () {
+  function DeviceKeyManager() {
+    var clientId = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "webchat";
+    _classCallCheck(this, DeviceKeyManager);
+    _defineProperty(this, "keyPair", null);
+    _defineProperty(this, "useEd25519", false);
+    _defineProperty(this, "initialized", false);
+    this.clientId = clientId;
+  }
+  return _createClass(DeviceKeyManager, [{
+    key: "initialize",
+    value: function () {
+      var _initialize = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
+        var stored, _t;
+        return _regeneratorRuntime.wrap(function (_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              if (!this.initialized) {
+                _context.next = 1;
+                break;
+              }
+              return _context.abrupt("return");
+            case 1:
+              _context.next = 2;
+              return isEd25519Supported();
+            case 2:
+              this.useEd25519 = _context.sent;
+              logger.debug("Device auth: Ed25519 ".concat(this.useEd25519 ? "supported" : "not supported, using HMAC-SHA256 fallback"));
+              stored = this.loadFromStorage();
+              if (!stored) {
+                _context.next = 3;
+                break;
+              }
+              this.keyPair = stored;
+              logger.debug("Device auth: restored key pair for device ".concat(stored.deviceId));
+              _context.next = 8;
+              break;
+            case 3:
+              if (!this.useEd25519) {
+                _context.next = 5;
+                break;
+              }
+              _context.next = 4;
+              return generateEd25519KeyPair();
+            case 4:
+              _t = _context.sent;
+              _context.next = 7;
+              break;
+            case 5:
+              _context.next = 6;
+              return generateHmacKeyPair();
+            case 6:
+              _t = _context.sent;
+            case 7:
+              this.keyPair = _t;
+              this.saveToStorage(this.keyPair);
+              logger.info("Device auth: generated new key pair, deviceId=".concat(this.keyPair.deviceId));
+            case 8:
+              this.initialized = true;
+            case 9:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this);
+      }));
+      function initialize() {
+        return _initialize.apply(this, arguments);
+      }
+      return initialize;
+    }()
+  }, {
+    key: "signChallenge",
+    value: function () {
+      var _signChallenge = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2(nonce) {
+        var signedAt, signPayload, signature, _t2;
+        return _regeneratorRuntime.wrap(function (_context2) {
+          while (1) switch (_context2.prev = _context2.next) {
+            case 0:
+              if (this.keyPair) {
+                _context2.next = 1;
+                break;
+              }
+              _context2.next = 1;
+              return this.initialize();
+            case 1:
+              signedAt = Math.floor(Date.now() / 1e3);
+              signPayload = "".concat(nonce, ":").concat(signedAt);
+              if (!this.useEd25519) {
+                _context2.next = 3;
+                break;
+              }
+              _context2.next = 2;
+              return signWithEd25519(this.keyPair.privateKey, signPayload);
+            case 2:
+              _t2 = _context2.sent;
+              _context2.next = 5;
+              break;
+            case 3:
+              _context2.next = 4;
+              return signWithHmac(this.keyPair.privateKey, signPayload);
+            case 4:
+              _t2 = _context2.sent;
+            case 5:
+              signature = _t2;
+              return _context2.abrupt("return", {
+                id: this.keyPair.deviceId,
+                publicKey: this.keyPair.publicKey,
+                signature: signature,
+                signedAt: signedAt,
+                nonce: nonce
+              });
+            case 6:
+            case "end":
+              return _context2.stop();
+          }
+        }, _callee2, this);
+      }));
+      function signChallenge(_x5) {
+        return _signChallenge.apply(this, arguments);
+      }
+      return signChallenge;
+    }()
+  }, {
+    key: "getDeviceId",
+    value: function getDeviceId() {
+      var _this$keyPair$deviceI, _this$keyPair;
+      return (_this$keyPair$deviceI = (_this$keyPair = this.keyPair) === null || _this$keyPair === void 0 ? void 0 : _this$keyPair.deviceId) !== null && _this$keyPair$deviceI !== void 0 ? _this$keyPair$deviceI : null;
+    }
+  }, {
+    key: "reset",
+    value: function () {
+      var _reset = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3() {
+        return _regeneratorRuntime.wrap(function (_context3) {
+          while (1) switch (_context3.prev = _context3.next) {
+            case 0:
+              this.clearStorage();
+              this.keyPair = null;
+              this.initialized = false;
+              _context3.next = 1;
+              return this.initialize();
+            case 1:
+            case "end":
+              return _context3.stop();
+          }
+        }, _callee3, this);
+      }));
+      function reset() {
+        return _reset.apply(this, arguments);
+      }
+      return reset;
+    }()
+  }, {
+    key: "loadFromStorage",
+    value: function loadFromStorage() {
+      if (typeof window === "undefined" || !window.localStorage) return null;
+      try {
+        var stored = window.localStorage.getItem(getStorageKey(this.clientId));
+        if (!stored) return null;
+        var parsed = JSON.parse(stored);
+        if (parsed.publicKey && parsed.privateKey && parsed.deviceId) {
+          return parsed;
+        }
+      } catch (e) {
+        logger.warn("Failed to load device key from storage:", e);
+      }
+      return null;
+    }
+  }, {
+    key: "saveToStorage",
+    value: function saveToStorage(keyPair) {
+      if (typeof window === "undefined" || !window.localStorage) return;
+      try {
+        window.localStorage.setItem(getStorageKey(this.clientId), JSON.stringify(keyPair));
+      } catch (e) {
+        logger.warn("Failed to save device key to storage:", e);
+      }
+    }
+  }, {
+    key: "clearStorage",
+    value: function clearStorage() {
+      if (typeof window === "undefined" || !window.localStorage) return;
+      try {
+        window.localStorage.removeItem(getStorageKey(this.clientId));
+      } catch (_unused) {}
+    }
+  }]);
+}();
+
+export { DeviceKeyManager };
+//# sourceMappingURL=device-key-manager.js.map

package/es/chat-engine/core/adapters/openclaw/device-key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-key-manager.js","sources":["../../../../../../pro-components/chat/chat-engine/core/adapters/openclaw/device-key-manager.ts"],"sourcesContent":["/**\n * OpenClaw 设备密钥管理器\n *\n * 负责生成/持久化 Ed25519 密钥对并签名 nonce，\n * 用于 OpenClaw Gateway 的设备身份认证（Device Pairing）。\n *\n * 认证流程：\n * 1. Gateway 发送 connect.challenge，包含 nonce\n * 2. 客户端用私钥签名 nonce\n * 3. 在 connect 请求的 params.device 中携带 { publicKey, signature, deviceId }\n * 4. Gateway 验签通过后完成认证（首次连接自动配对）\n *\n * 存储策略：\n * - 密钥对以 hex 格式持久化到 localStorage\n * - key: `openclaw_device_key_{clientId}`\n * - 密钥对在浏览器端生命周期内保持一致（设备标识不变）\n */\nimport { LoggerManager } from '../../utils/logger';\n\nconst logger = LoggerManager.getLogger();\n\n/** 设备密钥对（hex 编码） */\nexport interface DeviceKeyPair {\n  publicKey: string;\n  privateKey: string;\n  deviceId: string;\n}\n\n/** connect 请求中的 device 字段 */\nexport interface DeviceIdentity {\n  /** 设备 ID（由公钥派生或随机生成） */\n  id: string;\n  /** 公钥（hex 编码） */\n  publicKey: string;\n  /** nonce 签名（hex 编码） */\n  signature: string;\n  /** 签名时间戳（Unix 秒级时间戳） */\n  signedAt: number;\n  /** 回传的 challenge nonce */\n  nonce: string;\n}\n\n// ==================== 工具函数 ====================\n\n/** 字节数组转 hex 字符串 */\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes)\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n/** hex 字符串转字节数组 */\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < hex.length; i += 2) {\n    bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);\n  }\n  return bytes;\n}\n\n/** 从公钥派生设备 ID（取公钥前 16 字符作为设备 ID） */\nfunction deriveDeviceId(publicKeyHex: string): string {\n  return `device_${publicKeyHex.substring(0, 16)}`;\n}\n\n/** 生成 localStorage key */\nfunction getStorageKey(clientId: string): string {\n  return `openclaw_device_key_${clientId}`;\n}\n\n// ==================== Web Crypto API 实现 ====================\n\n/**\n * 检测浏览器是否支持 Ed25519\n *\n * Ed25519 在 Web Crypto API 中的支持情况：\n * - Chrome 113+ / Edge 113+\n * - Firefox（尚未支持）\n * - Safari 17+\n *\n * 对于不支持的浏览器，退回到 HMAC-SHA256 方案\n */\nasync function isEd25519Supported(): Promise<boolean> {\n  try {\n    const keyPair = await crypto.subtle.generateKey('Ed25519', true, ['sign', 'verify']);\n    return !!keyPair;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * 使用 Web Crypto API 生成 Ed25519 密钥对\n */\nasync function generateEd25519KeyPair(): Promise<DeviceKeyPair> {\n  const keyPair = await crypto.subtle.generateKey('Ed25519', true, ['sign', 'verify']);\n\n  // 导出原始格式的公钥和私钥\n  const publicKeyRaw = await crypto.subtle.exportKey('raw', keyPair.publicKey);\n  const privateKeyPkcs8 = await crypto.subtle.exportKey('pkcs8', keyPair.privateKey);\n\n  const publicKeyHex = bytesToHex(new Uint8Array(publicKeyRaw));\n  const privateKeyHex = bytesToHex(new Uint8Array(privateKeyPkcs8));\n\n  return {\n    publicKey: publicKeyHex,\n    privateKey: privateKeyHex,\n    deviceId: deriveDeviceId(publicKeyHex),\n  };\n}\n\n/**\n * 使用 Ed25519 私钥签名 nonce\n */\nasync function signWithEd25519(privateKeyHex: string, nonce: string): Promise<string> {\n  const privateKeyBytes = hexToBytes(privateKeyHex);\n\n  // 导入 PKCS8 格式的私钥\n  const privateKey = await crypto.subtle.importKey(\n    'pkcs8',\n    privateKeyBytes.buffer,\n    'Ed25519',\n    false,\n    ['sign'],\n  );\n\n  // 签名 nonce（UTF-8 编码）\n  const encoder = new TextEncoder();\n  const data = encoder.encode(nonce);\n  const signature = await crypto.subtle.sign('Ed25519', privateKey, data);\n\n  return bytesToHex(new Uint8Array(signature));\n}\n\n// ==================== HMAC-SHA256 降级方案 ====================\n\n/**\n * 使用 HMAC-SHA256 作为降级签名方案\n *\n * 当浏览器不支持 Ed25519 时，使用随机密钥 + HMAC-SHA256 代替。\n * 密钥不用于非对称验签，但保证设备标识的一致性和签名的不可伪造性。\n */\nasync function generateHmacKeyPair(): Promise<DeviceKeyPair> {\n  // 生成 32 字节随机密钥作为 \"私钥\"\n  const privateKeyBytes = crypto.getRandomValues(new Uint8Array(32));\n  const privateKeyHex = bytesToHex(privateKeyBytes);\n\n  // 用私钥的 SHA-256 哈希作为 \"公钥\"（设备标识）\n  const encoder = new TextEncoder();\n  const hashBuffer = await crypto.subtle.digest('SHA-256', encoder.encode(privateKeyHex));\n  const publicKeyHex = bytesToHex(new Uint8Array(hashBuffer));\n\n  return {\n    publicKey: publicKeyHex,\n    privateKey: privateKeyHex,\n    deviceId: deriveDeviceId(publicKeyHex),\n  };\n}\n\n/**\n * 使用 HMAC-SHA256 签名 nonce\n */\nasync function signWithHmac(privateKeyHex: string, nonce: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const keyData = encoder.encode(privateKeyHex);\n\n  const key = await crypto.subtle.importKey(\n    'raw',\n    keyData,\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign'],\n  );\n\n  const signature = await crypto.subtle.sign('HMAC', key, encoder.encode(nonce));\n  return bytesToHex(new Uint8Array(signature));\n}\n\n// ==================== DeviceKeyManager ====================\n\n/**\n * 设备密钥管理器\n *\n * 使用方式：\n * ```ts\n * const manager = new DeviceKeyManager('webchat');\n * await manager.initialize();\n *\n * // 收到 connect.challenge 时\n * const device = await manager.signChallenge(nonce);\n * // 将 device 放入 connect params\n * ```\n */\nexport class DeviceKeyManager {\n  private keyPair: DeviceKeyPair | null = null;\n  private clientId: string;\n  private useEd25519 = false;\n  private initialized = false;\n\n  constructor(clientId: string = 'webchat') {\n    this.clientId = clientId;\n  }\n\n  /**\n   * 初始化密钥管理器\n   *\n   * - 尝试从 localStorage 恢复已有密钥对\n   * - 如果没有，则生成新的密钥对并持久化\n   * - 自动检测并选择 Ed25519 或 HMAC-SHA256\n   */\n  async initialize(): Promise<void> {\n    if (this.initialized) return;\n\n    // 检测 Ed25519 支持\n    this.useEd25519 = await isEd25519Supported();\n    logger.debug(`Device auth: Ed25519 ${this.useEd25519 ? 'supported' : 'not supported, using HMAC-SHA256 fallback'}`);\n\n    // 尝试从 localStorage 恢复\n    const stored = this.loadFromStorage();\n    if (stored) {\n      this.keyPair = stored;\n      logger.debug(`Device auth: restored key pair for device ${stored.deviceId}`);\n    } else {\n      // 生成新密钥对\n      this.keyPair = this.useEd25519\n        ? await generateEd25519KeyPair()\n        : await generateHmacKeyPair();\n\n      this.saveToStorage(this.keyPair);\n      logger.info(`Device auth: generated new key pair, deviceId=${this.keyPair.deviceId}`);\n    }\n\n    this.initialized = true;\n  }\n\n  /**\n   * 签名 challenge nonce，返回 device 字段\n   *\n   * 在收到 connect.challenge 事件后调用，\n   * 返回值直接放入 connect 请求的 params.device 中。\n   */\n  async signChallenge(nonce: string): Promise<DeviceIdentity> {\n    if (!this.keyPair) {\n      await this.initialize();\n    }\n\n    const signedAt = Math.floor(Date.now() / 1000);\n    // 签名内容包含 nonce + signedAt，确保签名的时效性\n    const signPayload = `${nonce}:${signedAt}`;\n\n    const signature = this.useEd25519\n      ? await signWithEd25519(this.keyPair!.privateKey, signPayload)\n      : await signWithHmac(this.keyPair!.privateKey, signPayload);\n\n    return {\n      id: this.keyPair!.deviceId,\n      publicKey: this.keyPair!.publicKey,\n      signature,\n      signedAt,\n      nonce,\n    };\n  }\n\n  /**\n   * 获取设备 ID\n   */\n  getDeviceId(): string | null {\n    return this.keyPair?.deviceId ?? null;\n  }\n\n  /**\n   * 重置密钥（强制重新生成密钥对）\n   */\n  async reset(): Promise<void> {\n    this.clearStorage();\n    this.keyPair = null;\n    this.initialized = false;\n    await this.initialize();\n  }\n\n  // ==================== 存储相关 ====================\n\n  private loadFromStorage(): DeviceKeyPair | null {\n    if (typeof window === 'undefined' || !window.localStorage) return null;\n\n    try {\n      const stored = window.localStorage.getItem(getStorageKey(this.clientId));\n      if (!stored) return null;\n\n      const parsed = JSON.parse(stored) as DeviceKeyPair;\n      if (parsed.publicKey && parsed.privateKey && parsed.deviceId) {\n        return parsed;\n      }\n    } catch (e) {\n      logger.warn('Failed to load device key from storage:', e);\n    }\n    return null;\n  }\n\n  private saveToStorage(keyPair: DeviceKeyPair): void {\n    if (typeof window === 'undefined' || !window.localStorage) return;\n\n    try {\n      window.localStorage.setItem(getStorageKey(this.clientId), JSON.stringify(keyPair));\n    } catch (e) {\n      logger.warn('Failed to save device key to storage:', e);\n    }\n  }\n\n  private clearStorage(): void {\n    if (typeof window === 'undefined' || !window.localStorage) return;\n\n    try {\n      window.localStorage.removeItem(getStorageKey(this.clientId));\n    } catch {\n      // ignore\n    }\n  }\n}\n"],"names":["logger","LoggerManager","getLogger","bytesToHex","bytes","Array","from","map","b","toString","padStart","join","hexToBytes","hex","Uint8Array","length","i","parseInt","substring","deriveDeviceId","publicKeyHex","concat","getStorageKey","clientId","isEd25519Supported","_isEd25519Supported","apply","arguments","_asyncToGenerator","_regeneratorRuntime","mark","_callee4","keyPair","_t3","wrap","_context4","prev","next","crypto","subtle","generateKey","sent","abrupt","stop","generateEd25519KeyPair","_generateEd25519KeyPair","_callee5","publicKeyRaw","privateKeyPkcs8","privateKeyHex","_context5","exportKey","publicKey","privateKey","deviceId","signWithEd25519","_x","_x2","_signWithEd","_callee6","nonce","privateKeyBytes","encoder","data","signature","_context6","importKey","buffer","TextEncoder","encode","sign","generateHmacKeyPair","_generateHmacKeyPair","_callee7","hashBuffer","_context7","getRandomValues","digest","signWithHmac","_x3","_x4","_signWithHmac","_callee8","keyData","key","_context8","name","hash","DeviceKeyManager","_classCallCheck","_defineProperty","_createClass","value","_initialize","_callee","stored","_t","_context","initialized","useEd25519","debug","loadFromStorage","saveToStorage","info","initialize","_signChallenge","_callee2","signedAt","signPayload","_t2","_context2","Math","floor","Date","now","id","signChallenge","getDeviceId","_this$keyPair$deviceI","_this$keyPair","_reset","_callee3","_context3","clearStorage","reset","window","localStorage","getItem","parsed","JSON","parse","e","warn","setItem","stringify","removeItem","_unused"],"mappings":";;;;;;;;;;;;;AAmBA,IAAMA,MAAA,GAASC,cAAcC,SAAU,EAAA,CAAA;AA0BvC,SAASC,WAAWC,KAA2B,EAAA;EAC7C,OAAOC,MAAMC,IAAK,CAAAF,KAAK,CACpB,CAAAG,GAAA,CAAI,UAACC,CAAM,EAAA;AAAA,IAAA,OAAAA,CAAA,CAAEC,QAAS,CAAA,EAAE,EAAEC,QAAS,CAAA,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,GAAA,CAAA,CAC1CC,KAAK,EAAE,CAAA,CAAA;AACZ,CAAA;AAGA,SAASC,WAAWC,GAAyB,EAAA;EAC3C,IAAMT,KAAQ,GAAA,IAAIU,UAAW,CAAAD,GAAA,CAAIE,SAAS,CAAC,CAAA,CAAA;AAC3C,EAAA,KAAA,IAASC,IAAI,CAAG,EAAAA,CAAA,GAAIH,GAAI,CAAAE,MAAA,EAAQC,KAAK,CAAG,EAAA;IAChCZ,KAAA,CAAAY,CAAA,GAAI,KAAKC,QAAS,CAAAJ,GAAA,CAAIK,UAAUF,CAAG,EAAAA,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA,CAAA;AACrD,GAAA;AACO,EAAA,OAAAZ,KAAA,CAAA;AACT,CAAA;AAGA,SAASe,eAAeC,YAA8B,EAAA;EACpD,OAAAC,SAAAA,CAAAA,MAAA,CAAiBD,YAAA,CAAaF,SAAU,CAAA,CAAA,EAAG,EAAE,CAAA,CAAA,CAAA;AAC/C,CAAA;AAGA,SAASI,cAAcC,QAA0B,EAAA;EAC/C,OAAAF,sBAAAA,CAAAA,MAAA,CAA8BE,QAAA,CAAA,CAAA;AAChC,CAAA;AAAA,SAceC,kBAAuCA,GAAA;AAAA,EAAA,OAAAC,mBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAAAF,mBAAA,GAAA;EAAAA,mBAAA,GAAAG,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAAtD,SAAAC,QAAA,GAAA;IAAA,IAAAC,OAAA,EAAAC,GAAA,CAAA;AAAA,IAAA,OAAAJ,mBAAA,CAAAK,IAAA,CAAA,UAAAC,SAAA,EAAA;AAAA,MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAAC,IAAA,GAAAD,SAAA,CAAAE,IAAA;AAAA,QAAA,KAAA,CAAA;AAAAF,UAAAA,SAAA,CAAAC,IAAA,GAAA,CAAA,CAAA;AAAAD,UAAAA,SAAA,CAAAE,IAAA,GAAA,CAAA,CAAA;AAAA,UAAA,OAE0BC,MAAA,CAAOC,MAAO,CAAAC,WAAA,CAAY,WAAW,IAAM,EAAA,CAAC,MAAQ,EAAA,QAAQ,CAAC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAA7ER,OAAA,GAAAG,SAAA,CAAAM,IAAA,CAAA;AAAA,UAAA,OAAAN,SAAA,CAAAO,MAAA,CACC,QAAA,EAAA,CAAC,CAACV,OAAA,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;AAAAG,UAAAA,SAAA,CAAAC,IAAA,GAAA,CAAA,CAAA;AAAAH,UAAAA,GAAA,GAAAE,SAAA,CAAA,OAAA,CAAA,CAAA,CAAA,CAAA,CAAA;AAAA,UAAA,OAAAA,SAAA,CAAAO,MAAA,CAAA,QAAA,EAEF,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,KAAA;UAAA,OAAAP,SAAA,CAAAQ,IAAA,EAAA,CAAA;AAAA,OAAA;AAAA,KAAA,EAAAZ,QAAA,EAAA,IAAA,EAAA,CAAA,CAAA,CAAA,EAAA,CAAA,CAAA,CAAA,CAAA,CAAA;GAEX,CAAA,CAAA,CAAA;AAAA,EAAA,OAAAN,mBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAKeiB,sBAAiDA,GAAA;AAAA,EAAA,OAAAC,uBAAA,CAAAnB,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAAAkB,uBAAA,GAAA;EAAAA,uBAAA,GAAAjB,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAAhE,SAAAgB,QAAA,GAAA;IAAA,IAAAd,OAAA,EAAAe,YAAA,EAAAC,eAAA,EAAA5B,YAAA,EAAA6B,aAAA,CAAA;AAAA,IAAA,OAAApB,mBAAA,CAAAK,IAAA,CAAA,UAAAgB,SAAA,EAAA;AAAA,MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAAd,IAAA,GAAAc,SAAA,CAAAb,IAAA;AAAA,QAAA,KAAA,CAAA;AAAAa,UAAAA,SAAA,CAAAb,IAAA,GAAA,CAAA,CAAA;AAAA,UAAA,OACwBC,MAAA,CAAOC,MAAO,CAAAC,WAAA,CAAY,WAAW,IAAM,EAAA,CAAC,MAAQ,EAAA,QAAQ,CAAC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAA7ER,OAAA,GAAAkB,SAAA,CAAAT,IAAA,CAAA;AAAAS,UAAAA,SAAA,CAAAb,IAAA,GAAA,CAAA,CAAA;UAAA,OAGqBC,MAAA,CAAOC,OAAOY,SAAU,CAAA,KAAA,EAAOnB,QAAQoB,SAAS,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAArEL;;iBACwBT,MAAA,CAAOC,OAAOY,SAAU,CAAA,OAAA,EAASnB,QAAQqB,UAAU,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAA3EL;UAEA5B,YAAe,GAAAjB,UAAA,CAAW,IAAIW,UAAA,CAAWiC,YAAY,CAAC,CAAA,CAAA;UACtDE,aAAgB,GAAA9C,UAAA,CAAW,IAAIW,UAAA,CAAWkC,eAAe,CAAC,CAAA,CAAA;UAAA,OAAAE,SAAA,CAAAR,MAAA,CAEzD,QAAA,EAAA;AACLU,YAAAA,SAAW,EAAAhC,YAAA;AACXiC,YAAAA,UAAY,EAAAJ,aAAA;YACZK,QAAA,EAAUnC,eAAeC,YAAY,CAAA;WACvC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,KAAA;UAAA,OAAA8B,SAAA,CAAAP,IAAA,EAAA,CAAA;AAAA,OAAA;AAAA,KAAA,EAAAG,QAAA,CAAA,CAAA;GACF,CAAA,CAAA,CAAA;AAAA,EAAA,OAAAD,uBAAA,CAAAnB,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAKe4B,eAAAA,CAAAC,EAAA,EAAAC,GAAA,EAAA;AAAA,EAAA,OAAAC,WAAA,CAAAhC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAAA+B,WAAA,GAAA;EAAAA,WAAA,GAAA9B,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAAf,SAAA6B,QAAAA,CAA+BV,eAAuBW,KAAgC,EAAA;IAAA,IAAAC,eAAA,EAAAR,UAAA,EAAAS,OAAA,EAAAC,IAAA,EAAAC,SAAA,CAAA;AAAA,IAAA,OAAAnC,mBAAA,CAAAK,IAAA,CAAA,UAAA+B,SAAA,EAAA;AAAA,MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAA7B,IAAA,GAAA6B,SAAA,CAAA5B,IAAA;AAAA,QAAA,KAAA,CAAA;AAC9EwB,UAAAA,eAAA,GAAkBjD,WAAWqC,aAAa,CAAA,CAAA;AAAAgB,UAAAA,SAAA,CAAA5B,IAAA,GAAA,CAAA,CAAA;AAAA,UAAA,OAGvBC,MAAA,CAAOC,MAAO,CAAA2B,SAAA,CACrC,OAAA,EACAL,eAAgB,CAAAM,MAAA,EAChB,SAAA,EACA,KAAA,EACA,CAAC,MAAM,CACT,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UANMd,UAAA,GAAAY,SAAA,CAAAxB,IAAA,CAAA;AASAqB,UAAAA,OAAA,GAAU,IAAIM,WAAY,EAAA,CAAA;AAC1BL,UAAAA,IAAA,GAAOD,OAAQ,CAAAO,MAAA,CAAOT,KAAK,CAAA,CAAA;AAAAK,UAAAA,SAAA,CAAA5B,IAAA,GAAA,CAAA,CAAA;UAAA,OACTC,MAAA,CAAOC,OAAO+B,IAAK,CAAA,SAAA,EAAWjB,YAAYU,IAAI,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAAhEC;kCAEC7D,QAAAA,EAAAA,UAAW,CAAA,IAAIW,UAAW,CAAAkD,SAAS,CAAC,CAAA,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,KAAA;UAAA,OAAAC,SAAA,CAAAtB,IAAA,EAAA,CAAA;AAAA,OAAA;AAAA,KAAA,EAAAgB,QAAA,CAAA,CAAA;GAC7C,CAAA,CAAA,CAAA;AAAA,EAAA,OAAAD,WAAA,CAAAhC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAUe4C,mBAA8CA,GAAA;AAAA,EAAA,OAAAC,oBAAA,CAAA9C,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAAA6C,oBAAA,GAAA;EAAAA,oBAAA,GAAA5C,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAA7D,SAAA2C,QAAA,GAAA;IAAA,IAAAZ,eAAA,EAAAZ,aAAA,EAAAa,OAAA,EAAAY,UAAA,EAAAtD,YAAA,CAAA;AAAA,IAAA,OAAAS,mBAAA,CAAAK,IAAA,CAAA,UAAAyC,SAAA,EAAA;AAAA,MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAAvC,IAAA,GAAAuC,SAAA,CAAAtC,IAAA;AAAA,QAAA,KAAA,CAAA;UAEQwB,kBAAkBvB,MAAO,CAAAsC,eAAA,CAAgB,IAAI9D,UAAA,CAAW,EAAE,CAAC,CAAA,CAAA;AAC3DmC,UAAAA,aAAA,GAAgB9C,WAAW0D,eAAe,CAAA,CAAA;AAG1CC,UAAAA,OAAA,GAAU,IAAIM,WAAY,EAAA,CAAA;AAAAO,UAAAA,SAAA,CAAAtC,IAAA,GAAA,CAAA,CAAA;AAAA,UAAA,OACPC,MAAO,CAAAC,MAAA,CAAOsC,OAAO,SAAW,EAAAf,OAAA,CAAQO,MAAO,CAAApB,aAAa,CAAC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAAhFyB,UAAA,GAAAC,SAAA,CAAAlC,IAAA,CAAA;UACArB,YAAe,GAAAjB,UAAA,CAAW,IAAIW,UAAA,CAAW4D,UAAU,CAAC,CAAA,CAAA;UAAA,OAAAC,SAAA,CAAAjC,MAAA,CAEnD,QAAA,EAAA;AACLU,YAAAA,SAAW,EAAAhC,YAAA;AACXiC,YAAAA,UAAY,EAAAJ,aAAA;YACZK,QAAA,EAAUnC,eAAeC,YAAY,CAAA;WACvC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,KAAA;UAAA,OAAAuD,SAAA,CAAAhC,IAAA,EAAA,CAAA;AAAA,OAAA;AAAA,KAAA,EAAA8B,QAAA,CAAA,CAAA;GACF,CAAA,CAAA,CAAA;AAAA,EAAA,OAAAD,oBAAA,CAAA9C,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAKemD,YAAAA,CAAAC,GAAA,EAAAC,GAAA,EAAA;AAAA,EAAA,OAAAC,aAAA,CAAAvD,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAAA,SAAAsD,aAAA,GAAA;EAAAA,aAAA,GAAArD,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAAf,SAAAoD,QAAAA,CAA4BjC,eAAuBW,KAAgC,EAAA;AAAA,IAAA,IAAAE,OAAA,EAAAqB,OAAA,EAAAC,GAAA,EAAApB,SAAA,CAAA;AAAA,IAAA,OAAAnC,mBAAA,CAAAK,IAAA,CAAA,UAAAmD,SAAA,EAAA;AAAA,MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAAjD,IAAA,GAAAiD,SAAA,CAAAhD,IAAA;AAAA,QAAA,KAAA,CAAA;AAC3EyB,UAAAA,OAAA,GAAU,IAAIM,WAAY,EAAA,CAAA;AAC1Be,UAAAA,OAAA,GAAUrB,OAAQ,CAAAO,MAAA,CAAOpB,aAAa,CAAA,CAAA;AAAAoC,UAAAA,SAAA,CAAAhD,IAAA,GAAA,CAAA,CAAA;UAAA,OAE1BC,MAAA,CAAOC,MAAO,CAAA2B,SAAA,CAC9B,KAAA,EACAiB,OAAA,EACA;AAAEG,YAAAA,IAAA,EAAM,MAAQ;AAAAC,YAAAA,IAAA,EAAM,SAAA;AAAU,WAAA,EAChC,KAAA,EACA,CAAC,MAAM,CACT,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UANMH,GAAA,GAAAC,SAAA,CAAA5C,IAAA,CAAA;AAAA4C,UAAAA,SAAA,CAAAhD,IAAA,GAAA,CAAA,CAAA;AAAA,UAAA,OAQkBC,MAAA,CAAOC,MAAO,CAAA+B,IAAA,CAAK,QAAQc,GAAK,EAAAtB,OAAA,CAAQO,MAAO,CAAAT,KAAK,CAAC,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA;UAAvEI,SAAA,GAAAqB,SAAA,CAAA5C,IAAA,CAAA;UAAA,OAAA4C,SAAA,CAAA3C,MAAA,CACCvC,QAAAA,EAAAA,UAAW,CAAA,IAAIW,UAAW,CAAAkD,SAAS,CAAC,CAAA,CAAA,CAAA;AAAA,QAAA,KAAA,CAAA,CAAA;AAAA,QAAA,KAAA,KAAA;UAAA,OAAAqB,SAAA,CAAA1C,IAAA,EAAA,CAAA;AAAA,OAAA;AAAA,KAAA,EAAAuC,QAAA,CAAA,CAAA;GAC7C,CAAA,CAAA,CAAA;AAAA,EAAA,OAAAD,aAAA,CAAAvD,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,CAAA;AAiBO,IAAM6D,gBAAiB,gBAAA,YAAA;AAM5B,EAAA,SAAAA,mBAA0C;AAAA,IAAA,IAA9BjE,+EAAmB,SAAW,CAAA;AAAAkE,IAAAA,eAAA,OAAAD,gBAAA,CAAA,CAAA;AAAAE,IAAAA,eAAA,kBALF,IAAA,CAAA,CAAA;AAAAA,IAAAA,eAAA,qBAEnB,KAAA,CAAA,CAAA;AAAAA,IAAAA,eAAA,sBACC,KAAA,CAAA,CAAA;IAGpB,IAAA,CAAKnE,QAAW,GAAAA,QAAA,CAAA;AAClB,GAAA;EAAA,OAAAoE,YAAA,CAAAH,gBAAA,EAAA,CAAA;IAAAJ,GAAA,EAAA,YAAA;IAAAQ,KAAA,EAAA,YAAA;MAAA,IAAAC,WAAA,GAAAjE,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CASA,SAAAgE,OAAA,GAAA;QAAA,IAAAC,MAAA,EAAAC,EAAA,CAAA;AAAA,QAAA,OAAAnE,mBAAA,CAAAK,IAAA,CAAA,UAAA+D,QAAA,EAAA;AAAA,UAAA,OAAA,CAAA,EAAA,QAAAA,QAAA,CAAA7D,IAAA,GAAA6D,QAAA,CAAA5D,IAAA;AAAA,YAAA,KAAA,CAAA;cAAA,IACM,CAAA,IAAK,CAAA6D,WAAA,EAAA;AAAAD,gBAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;AAAA,gBAAA,MAAA;AAAA,eAAA;cAAA,OAAA4D,QAAA,CAAAvD,MAAA,CAAA,QAAA,CAAA,CAAA;AAAA,YAAA,KAAA,CAAA;AAAAuD,cAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;cAAA,OAGeb,kBAAmB,EAAA,CAAA;AAAA,YAAA,KAAA,CAAA;AAAtC,cAAA,IAAA,CAAA2E,UAAA,GAAAF,QAAA,CAAAxD,IAAA,CAAA;AACLzC,cAAAA,MAAA,CAAOoG,KAAM,CAAA/E,uBAAAA,CAAAA,MAAA,CAAwB,IAAK,CAAA8E,UAAA,GAAa,cAAc,2CAA6C,CAAA,CAAA,CAAA;AAG5GJ,cAAAA,MAAA,GAAS,KAAKM,eAAgB,EAAA,CAAA;AAAA,cAAA,IAAA,CAChCN,MAAQ,EAAA;AAAAE,gBAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;AAAA,gBAAA,MAAA;AAAA,eAAA;cACV,IAAA,CAAKL,OAAU,GAAA+D,MAAA,CAAA;cACR/F,MAAA,CAAAoG,KAAA,CAAA/E,4CAAAA,CAAAA,MAAA,CAAmD0E,MAAA,CAAOzC,QAAU,CAAA,CAAA,CAAA;AAAA2C,cAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;AAAA,cAAA,MAAA;AAAA,YAAA,KAAA,CAAA;cAAA,IAG5D,CAAA,IAAK,CAAA8D,UAAA,EAAA;AAAAF,gBAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;AAAA,gBAAA,MAAA;AAAA,eAAA;AAAA4D,cAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;cAAA,OACVO,sBAAuB,EAAA,CAAA;AAAA,YAAA,KAAA,CAAA;cAAAoD,EAAA,GAAAC,QAAA,CAAAxD,IAAA,CAAA;AAAAwD,cAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;AAAA,cAAA,MAAA;AAAA,YAAA,KAAA,CAAA;AAAA4D,cAAAA,QAAA,CAAA5D,IAAA,GAAA,CAAA,CAAA;cAAA,OACvBkC,mBAAoB,EAAA,CAAA;AAAA,YAAA,KAAA,CAAA;cAAAyB,EAAA,GAAAC,QAAA,CAAAxD,IAAA,CAAA;AAAA,YAAA,KAAA,CAAA;cAF9B,IAAA,CAAKT;AAIA,cAAA,IAAA,CAAAsE,aAAA,CAAc,KAAKtE,OAAO,CAAA,CAAA;cAC/BhC,MAAA,CAAOuG,IAAK,CAAA,gDAAA,CAAAlF,MAAA,CAAiD,IAAK,CAAAW,OAAA,CAAQsB,QAAU,CAAA,CAAA,CAAA;AAAA,YAAA,KAAA,CAAA;cAGtF,IAAA,CAAK4C,WAAc,GAAA,IAAA,CAAA;AAAA,YAAA,KAAA,CAAA,CAAA;AAAA,YAAA,KAAA,KAAA;cAAA,OAAAD,QAAA,CAAAtD,IAAA,EAAA,CAAA;AAAA,WAAA;AAAA,SAAA,EAAAmD,OAAA,EAAA,IAAA,CAAA,CAAA;OACrB,CAAA,CAAA,CAAA;AAAA,MAAA,SAvBMU,UAA4BA,GAAA;AAAA,QAAA,OAAAX,WAAA,CAAAnE,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,OAAA;AAAA,MAAA,OAA5B6E,UAA4B,CAAA;AAAA,KAAA,EAAA;AAAA,GAAA,EAAA;IAAApB,GAAA,EAAA,eAAA;IAAAQ,KAAA,EAAA,YAAA;MAAA,IAAAa,cAAA,GAAA7E,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CA+BlC,SAAA4E,QAAAA,CAAoB9C,KAAwC,EAAA;AAAA,QAAA,IAAA+C,QAAA,EAAAC,WAAA,EAAA5C,SAAA,EAAA6C,GAAA,CAAA;AAAA,QAAA,OAAAhF,mBAAA,CAAAK,IAAA,CAAA,UAAA4E,SAAA,EAAA;AAAA,UAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAA1E,IAAA,GAAA0E,SAAA,CAAAzE,IAAA;AAAA,YAAA,KAAA,CAAA;cAAA,IACrD,KAAKL,OAAS,EAAA;AAAA8E,gBAAAA,SAAA,CAAAzE,IAAA,GAAA,CAAA,CAAA;AAAA,gBAAA,MAAA;AAAA,eAAA;AAAAyE,cAAAA,SAAA,CAAAzE,IAAA,GAAA,CAAA,CAAA;AAAA,cAAA,OACX,KAAKmE,UAAW,EAAA,CAAA;AAAA,YAAA,KAAA,CAAA;AAGlBG,cAAAA,WAAWI,IAAK,CAAAC,KAAA,CAAMC,IAAK,CAAAC,GAAA,KAAQ,GAAI,CAAA,CAAA;AAEvCN,cAAAA,WAAA,MAAAvF,MAAA,CAAiBuC,KAAS,EAAAvC,GAAAA,CAAAA,CAAAA,MAAA,CAAAsF,QAAA,CAAA,CAAA;cAAA,IAEd,CAAA,IAAA,CAAKR,UACnB,EAAA;AAAAW,gBAAAA,SAAA,CAAAzE,IAAA,GAAA,CAAA,CAAA;AAAA,gBAAA,MAAA;AAAA,eAAA;AAAAyE,cAAAA,SAAA,CAAAzE,IAAA,GAAA,CAAA,CAAA;cAAA,OAAMkB,gBAAgB,IAAK,CAAAvB,OAAA,CAASqB,UAAY,EAAAuD,WAAW;;;;;;;qBACrD9B,YAAA,CAAa,IAAK,CAAA9C,OAAA,CAASqB,YAAYuD,WAAW,CAAA,CAAA;AAAA,YAAA,KAAA,CAAA;cAAAC,GAAA,GAAAC,SAAA,CAAArE,IAAA,CAAA;AAAA,YAAA,KAAA,CAAA;AAFtDuB,cAAAA,SAAY,GAAA6C,GAAA,CAAA;cAAA,OAAAC,SAAA,CAAApE,MAAA,CAIX,QAAA,EAAA;AACLyE,gBAAAA,EAAA,EAAI,KAAKnF,OAAS,CAAAsB,QAAA;AAClBF,gBAAAA,SAAA,EAAW,KAAKpB,OAAS,CAAAoB,SAAA;AACzBY,gBAAAA,SAAA,EAAAA,SAAA;AACA2C,gBAAAA,QAAA,EAAAA,QAAA;AACA/C,gBAAAA,KAAA,EAAAA,KAAAA;eACF,CAAA,CAAA;AAAA,YAAA,KAAA,CAAA,CAAA;AAAA,YAAA,KAAA,KAAA;cAAA,OAAAkD,SAAA,CAAAnE,IAAA,EAAA,CAAA;AAAA,WAAA;AAAA,SAAA,EAAA+D,QAAA,EAAA,IAAA,CAAA,CAAA;OACF,CAAA,CAAA,CAAA;MAAA,SApBMU;;;aAAAA;;;;WAyBN,SAAAC,WAA6BA,GAAA;MAAA,IAAAC,qBAAA,EAAAC,aAAA,CAAA;AACpB,MAAA,OAAA,CAAAD,qBAAA,GAAAC,CAAAA,aAAA,GAAA,IAAA,CAAKvF,uCAALuF,KAAAA,CAAAA,GAAAA,KAAAA,CAAAA,GAAAA,aAAA,CAAcjE,QAAY,MAAA,IAAA,IAAAgE,qBAAA,KAAAA,KAAAA,CAAAA,GAAAA,qBAAA,GAAA,IAAA,CAAA;AACnC,KAAA;AAAA,GAAA,EAAA;IAAAlC,GAAA,EAAA,OAAA;IAAAQ,KAAA,EAAA,YAAA;MAAA,IAAA4B,MAAA,GAAA5F,iBAAA,cAAAC,mBAAA,CAAAC,IAAA,CAKA,SAAA2F,QAAA,GAAA;AAAA,QAAA,OAAA5F,mBAAA,CAAAK,IAAA,CAAA,UAAAwF,SAAA,EAAA;AAAA,UAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAAtF,IAAA,GAAAsF,SAAA,CAAArF,IAAA;AAAA,YAAA,KAAA,CAAA;cACE,IAAA,CAAKsF,YAAa,EAAA,CAAA;cAClB,IAAA,CAAK3F,OAAU,GAAA,IAAA,CAAA;cACf,IAAA,CAAKkE,WAAc,GAAA,KAAA,CAAA;AAAAwB,cAAAA,SAAA,CAAArF,IAAA,GAAA,CAAA,CAAA;AAAA,cAAA,OACb,KAAKmE,UAAW,EAAA,CAAA;AAAA,YAAA,KAAA,CAAA,CAAA;AAAA,YAAA,KAAA,KAAA;cAAA,OAAAkB,SAAA,CAAA/E,IAAA,EAAA,CAAA;AAAA,WAAA;AAAA,SAAA,EAAA8E,QAAA,EAAA,IAAA,CAAA,CAAA;OACxB,CAAA,CAAA,CAAA;AAAA,MAAA,SALMG,KAAuBA,GAAA;AAAA,QAAA,OAAAJ,MAAA,CAAA9F,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA,CAAA;AAAA,OAAA;AAAA,MAAA,OAAvBiG,KAAuB,CAAA;AAAA,KAAA,EAAA;AAAA,GAAA,EAAA;IAAAxC,GAAA,EAAA,iBAAA;AAAAQ,IAAAA,KAAA,EASrB,SAAAS,eAAwCA,GAAA;MAC9C,IAAI,OAAOwB,MAAA,KAAW,WAAe,IAAA,CAACA,MAAO,CAAAC,YAAA,EAAqB,OAAA,IAAA,CAAA;MAE9D,IAAA;AACF,QAAA,IAAM/B,SAAS8B,MAAO,CAAAC,YAAA,CAAaC,QAAQzG,aAAc,CAAA,IAAA,CAAKC,QAAQ,CAAC,CAAA,CAAA;AACvE,QAAA,IAAI,CAACwE,MAAA,EAAe,OAAA,IAAA,CAAA;AAEd,QAAA,IAAAiC,MAAA,GAASC,IAAK,CAAAC,KAAA,CAAMnC,MAAM,CAAA,CAAA;QAChC,IAAIiC,MAAO,CAAA5E,SAAA,IAAa4E,MAAO,CAAA3E,UAAA,IAAc2E,OAAO1E,QAAU,EAAA;AACrD,UAAA,OAAA0E,MAAA,CAAA;AACT,SAAA;eACOG,CAAP,EAAA;AACOnI,QAAAA,MAAA,CAAAoI,IAAA,CAAK,2CAA2CD,CAAC,CAAA,CAAA;AAC1D,OAAA;AACO,MAAA,OAAA,IAAA,CAAA;AACT,KAAA;AAAA,GAAA,EAAA;IAAA/C,GAAA,EAAA,eAAA;AAAAQ,IAAAA,KAAA,EAEQ,SAAAU,cAActE,OAA8B,EAAA;MAClD,IAAI,OAAO6F,MAAA,KAAW,WAAe,IAAA,CAACA,MAAO,CAAAC,YAAA,EAAc,OAAA;MAEvD,IAAA;AACKD,QAAAA,MAAA,CAAAC,YAAA,CAAaO,QAAQ/G,aAAc,CAAA,IAAA,CAAKC,QAAQ,CAAG,EAAA0G,IAAA,CAAKK,SAAU,CAAAtG,OAAO,CAAC,CAAA,CAAA;eAC1EmG,CAAP,EAAA;AACOnI,QAAAA,MAAA,CAAAoI,IAAA,CAAK,yCAAyCD,CAAC,CAAA,CAAA;AACxD,OAAA;AACF,KAAA;AAAA,GAAA,EAAA;IAAA/C,GAAA,EAAA,cAAA;AAAAQ,IAAAA,KAAA,EAEQ,SAAA+B,YAAqBA,GAAA;MAC3B,IAAI,OAAOE,MAAA,KAAW,WAAe,IAAA,CAACA,MAAO,CAAAC,YAAA,EAAc,OAAA;MAEvD,IAAA;QACFD,MAAA,CAAOC,YAAa,CAAAS,UAAA,CAAWjH,aAAc,CAAA,IAAA,CAAKC,QAAQ,CAAC,CAAA,CAAA;AAC7D,OAAE,CAAA,OAAAiH,OAAA,EAAA,EAEF;AACF,KAAA;AAAA,GAAA,CAAA,CAAA,CAAA;AAAA,CAAA;;;;"}

package/es/chat-engine/core/adapters/openclaw/event-mapper.d.ts

@@ -117,37 +117,59 @@ export declare class OpenClawEventMapper {
     /**
      * 处理 tool stream
      *
-     * OpenClaw tool stream data 约定：
+     * OpenClaw 实际返回的 tool stream data 结构（经过对真实 Gateway 数据抓取确认）：
+     *
+     * phase: 'start' (开始，包含完整 args):
+     * {
+     *   phase: 'start',
+     *   name: 'read',                    // 工具名称（字段名是 name，不是 toolCallName）
+     *   toolCallId: 'read:0',            // 工具调用 ID
+     *   args: { file_path: '...' },      // 完整参数对象（非 JSON 字符串，start 阶段就包含全部 args）
+     * }
+     *
+     * phase: 'result' (结果):
      * {
-     *   toolCallId: string,       // 工具调用 ID
-     *   toolCallName: string,     // 工具名称
-     *   state: 'start' | 'args' | 'result' | 'end',
-     *   delta?: string,           // args 增量
-     *   content?: string,         // result 内容
-     *   args?: string,            // 全量 args（snapshot 模式）
-     *   result?: string,          // 全量 result（snapshot 模式）
-     *   parentMessageId?: string, // 父消息 ID
+     *   phase: 'result',
+     *   name: 'read',
+     *   toolCallId: 'read:0',
+     *   meta: 'from ~/.openclaw/workspace/memory/2026-03-11.md',  // 结果元信息
+     *   isError: true,                   // 是否出错
      * }
+     *
+     * 注意：
+     * 1. 只有 start 和 result 两个 phase（没有 args 和 end 阶段）
+     * 2. 字段名是 name 不是 toolCallName
+     * 3. args 在 start 阶段就是完整对象，不需要增量拼接
+     * 4. result 的具体内容通过 toolResult 角色的消息传递（在 chat final 中），
+     *    tool stream 的 result phase 只包含 meta 和 isError
      */
     private handleToolStream;
     /**
-     * 处理工具调用开始
+     * 处理工具调用开始（phase: 'start'）
+     *
+     * OpenClaw 实际行为：start 阶段就包含完整的 args 对象（不是 JSON 字符串）
+     * 因此直接序列化 args 并创建 toolcall 内容
      */
     private handleToolCallStart;
     /**
-     * 处理工具调用参数增量
+     * 处理工具调用参数增量（兼容 args 增量阶段）
      */
     private handleToolCallArgs;
     /**
-     * 处理工具调用结果
+     * 处理工具调用结果（phase: 'result'）
+     *
+     * OpenClaw 实际行为：
+     * - result phase 的 data 包含 meta（描述性信息）和 isError（是否出错）
+     * - 工具调用的具体结果文本通过 chat final 中的 toolResult 角色消息传递
+     * - 因此此处不一定有 content/result 文本，但应标记 toolcall 为 complete
      */
     private handleToolCallResult;
     /**
-     * 处理工具调用结束
+     * 处理工具调用结束（兼容 end 阶段）
      */
     private handleToolCallEnd;
     /**
-     * 兜底处理工具调用数据（无 state 字段时）
+     * 兜底处理工具调用数据（无 phase/state 字段时）
      */
     private handleToolCallGeneric;
     /**

package/es/chat-engine/core/adapters/openclaw/event-mapper.js

@@ -1,5 +1,5 @@
 /**
- * tdesign v1.1.0-alpha.16
+ * tdesign v1.1.0-alpha.17
  * (c) 2026 tdesign
  * @license MIT
  */
@@ -150,6 +150,7 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
         data = payload.data,
         runId = payload.runId;
       this.currentRunId = runId || this.currentRunId;
+      console.log("[OpenClaw EventMapper] agent stream=\"".concat(stream, "\", data="), JSON.stringify(data).slice(0, 300));
       switch (stream) {
         case AgentStreamType.TOOL:
           return this.handleToolStream(data);
@@ -328,16 +329,16 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
           hasError: false
         };
       }
-      var toolCallId = data.toolCallId,
-        toolCallName = data.toolCallName,
-        state = data.state;
-      switch (state) {
+      var phase = data.phase || data.state;
+      var toolCallId = data.toolCallId;
+      var toolCallName = data.name || data.toolCallName || "unknown";
+      switch (phase) {
         case "start":
           return this.handleToolCallStart(toolCallId, toolCallName, data);
-        case "args":
-          return this.handleToolCallArgs(toolCallId, data);
         case "result":
           return this.handleToolCallResult(toolCallId, data);
+        case "args":
+          return this.handleToolCallArgs(toolCallId, data);
         case "end":
           return this.handleToolCallEnd(toolCallId);
         default:
@@ -347,15 +348,20 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
   }, {
     key: "handleToolCallStart",
     value: function handleToolCallStart(toolCallId, toolCallName, data) {
+      var rawArgs = data === null || data === void 0 ? void 0 : data.args;
+      var argsStr = "";
+      if (rawArgs !== void 0 && rawArgs !== null) {
+        argsStr = typeof rawArgs === "string" ? rawArgs : JSON.stringify(rawArgs);
+      }
       this.toolCallMap[toolCallId] = {
         eventType: "TOOL_CALL_START",
         toolCallId: toolCallId,
         toolCallName: toolCallName || "unknown",
         parentMessageId: (data === null || data === void 0 ? void 0 : data.parentMessageId) || "",
-        args: (data === null || data === void 0 ? void 0 : data.args) || (data === null || data === void 0 ? void 0 : data.delta) || ""
+        args: argsStr
       };
       return {
-        content: createToolCallContent(this.toolCallMap[toolCallId], "pending", "append"),
+        content: createToolCallContent(this.toolCallMap[toolCallId], "streaming", "append"),
         isFinal: false,
         hasError: false,
         runId: this.currentRunId || void 0
@@ -388,18 +394,28 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
     key: "handleToolCallResult",
     value: function handleToolCallResult(toolCallId, data) {
       if (!this.toolCallMap[toolCallId]) {
-        return {
-          content: null,
-          isFinal: false,
-          hasError: false
+        var toolCallName = (data === null || data === void 0 ? void 0 : data.name) || (data === null || data === void 0 ? void 0 : data.toolCallName) || "unknown";
+        this.toolCallMap[toolCallId] = {
+          eventType: "TOOL_CALL_START",
+          toolCallId: toolCallId,
+          toolCallName: toolCallName,
+          parentMessageId: "",
+          args: ""
         };
       }
-      var currentResult = this.toolCallMap[toolCallId].result || "";
-      var newResult = mergeStringContent(currentResult, (data === null || data === void 0 ? void 0 : data.content) || (data === null || data === void 0 ? void 0 : data.result) || "");
-      this.toolCallMap[toolCallId] = updateToolCall(this.toolCallMap[toolCallId], {
+      var resultContent = (data === null || data === void 0 ? void 0 : data.content) || (data === null || data === void 0 ? void 0 : data.result) || "";
+      var meta = (data === null || data === void 0 ? void 0 : data.meta) || "";
+      var isError = data === null || data === void 0 ? void 0 : data.isError;
+      var resultStr = resultContent || meta || "";
+      this.toolCallMap[toolCallId] = updateToolCall(this.toolCallMap[toolCallId], _objectSpread({
         eventType: "TOOL_CALL_RESULT",
-        result: newResult
-      });
+        result: resultStr
+      }, isError !== void 0 ? {
+        ext: {
+          isError: isError
+        }
+      } : {}));
+      this.toolCallEnded.add(toolCallId);
       var suggestionContent = handleSuggestionToolCall(this.toolCallMap[toolCallId]);
       if (suggestionContent) {
         return {
@@ -443,14 +459,14 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
         };
       }
       var toolCallId = data.toolCallId;
-      var toolCallName = data.toolCallName;
+      var toolCallName = data.name || data.toolCallName || "unknown";
       if (!this.toolCallMap[toolCallId]) {
         return this.handleToolCallStart(toolCallId, toolCallName, data);
       }
       if (data.delta || data.args) {
         return this.handleToolCallArgs(toolCallId, data);
       }
-      if (data.content || data.result) {
+      if (data.content || data.result || data.meta || data.isError !== void 0) {
         return this.handleToolCallResult(toolCallId, data);
       }
       return {
@@ -469,7 +485,7 @@ var OpenClawEventMapper = /*#__PURE__*/function () {
           hasError: false
         };
       }
-      return this.handleToolCallStart(data.toolCallId, data.toolCallName || "unknown", data);
+      return this.handleToolCallStart(data.toolCallId, data.name || data.toolCallName || "unknown", data);
     }
   }, {
     key: "handleToolResult",