a2acalling 0.2.2 → 0.3.0

package/bin/cli.js

@@ -99,7 +99,7 @@ const commands = {
       name: args.flags.name || args.flags.n || 'unnamed',
       owner: args.flags.owner || args.flags.o || null,
       expires: args.flags.expires || args.flags.e || 'never',
-      permissions: args.flags.permissions || args.flags.p || 'chat-only',
+      permissions: args.flags.permissions || args.flags.p || 'public',
       disclosure: args.flags.disclosure || args.flags.d || 'minimal',
       notify: args.flags.notify || 'all',
       maxCalls,
@@ -256,7 +256,7 @@ https://github.com/onthegonow/a2a_calling`;
       let permBadge = '';
       if (r.linked_token) {
         const tier = r.linked_token.tier || r.linked_token.permissions;
-        permBadge = tier === 'tools-write' ? ' ⚡' : tier === 'tools-read' ? ' 🔧' : ' 🌐';
+        permBadge = tier === 'family' ? ' ⚡' : tier === 'friends' ? ' 🔧' : ' 🌐';
       }
       
       console.log(`${statusIcon} ${r.name}${ownerText}${permBadge}`);
@@ -270,7 +270,7 @@ https://github.com/onthegonow/a2a_calling`;
       console.log();
     }
     
-    console.log('Legend: 🌐 chat-only  🔧 tools-read  ⚡ tools-write');
+    console.log('Legend: 🌐 public  🔧 friends  ⚡ family');
   },
 
   'contacts:add': (args) => {
@@ -343,7 +343,7 @@ https://github.com/onthegonow/a2a_calling`;
       const t = remote.linked_token;
       const tier = t.tier || t.permissions;
       const topics = t.allowed_topics || ['chat'];
-      const tierIcon = tier === 'tools-write' ? '⚡' : tier === 'tools-read' ? '🔧' : '🌐';
+      const tierIcon = tier === 'family' ? '⚡' : tier === 'friends' ? '🔧' : '🌐';
       console.log(`🔐 Your token to them: ${t.id}`);
       console.log(`   Tier: ${tierIcon} ${tier}`);
       console.log(`   Topics: ${topics.join(', ')}`);
@@ -432,8 +432,8 @@ https://github.com/onthegonow/a2a_calling`;
       process.exit(1);
     }
 
-    const permLabel = result.token.permissions === 'tools-write' ? '⚡ tools-write' : 
-                      result.token.permissions === 'tools-read' ? '🔧 tools-read' : '🌐 chat-only';
+    const permLabel = result.token.tier === 'family' ? '⚡ family' :
+                      result.token.tier === 'friends' ? '🔧 friends' : '🌐 public';
     
     console.log(`✅ Linked token to contact`);
     console.log(`   Contact: ${result.remote.name}`);
@@ -770,7 +770,7 @@ https://github.com/onthegonow/a2a_calling`;
         name,
         owner,
         expires: '7d',
-        permissions: 'chat-only',
+        permissions: 'public',
         maxCalls: 100
       });
 
@@ -823,7 +823,7 @@ Commands:
     --name, -n        Token/agent name
     --owner, -o       Owner name (human behind the agent)
     --expires, -e     Expiration (1h, 1d, 7d, 30d, never)
-    --permissions, -p Tier (chat-only, tools-read, tools-write)
+    --permissions, -p Tier (public, friends, family)
     --topics          Custom topics (comma-separated, overrides tier defaults)
     --disclosure, -d  Disclosure level (public, minimal, none)
     --notify          Owner notification (all, summary, none)
@@ -847,7 +847,7 @@ Contacts:
   contacts ping <n>   Ping contact, update status
   contacts rm <n>     Remove contact
 
-Permission badges: 🌐 chat-only  🔧 tools-read  ⚡ tools-write
+Permission badges: 🌐 public  🔧 friends  ⚡ family
 
 Conversations:
   conversations       List all conversations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "a2acalling",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Agent-to-agent calling for OpenClaw - A2A agent communication",
   "main": "src/index.js",
   "bin": {

package/src/dashboard/public/app.js

@@ -272,7 +272,7 @@ function renderInvites() {
     tr.innerHTML = `
       <td>${invite.id}</td>
       <td>${invite.name || '-'}</td>
-      <td>${invite.tier_label || invite.tier || '-'}</td>
+      <td>${invite.tier || '-'}</td>
       <td>${invite.calls_made || 0}${invite.max_calls ? `/${invite.max_calls}` : ''}</td>
       <td>${fmtDate(invite.expires_at)}</td>
       <td>${invite.revoked ? 'revoked' : 'active'}</td>

package/src/lib/config.js

@@ -22,7 +22,7 @@ const DEFAULT_CONFIG = {
     public: {
       name: 'Public',
       description: 'Basic networking - safe for anyone',
-      capabilities: [],
+      capabilities: ['context-read'],
       topics: [],
       goals: [],
       disclosure: 'minimal',
@@ -31,7 +31,7 @@ const DEFAULT_CONFIG = {
     friends: {
       name: 'Friends',
       description: 'Most capabilities, no sensitive financial data',
-      capabilities: [],
+      capabilities: ['context-read', 'calendar.read', 'email.read', 'search'],
       topics: [],
       goals: [],
       disclosure: 'public',
@@ -40,7 +40,7 @@ const DEFAULT_CONFIG = {
     private: {
       name: 'Private',
       description: 'Full access - only for you',
-      capabilities: [],
+      capabilities: ['context-read', 'calendar', 'email', 'search', 'tools', 'memory'],
       topics: [],
       goals: [],
       disclosure: 'public',
@@ -49,7 +49,7 @@ const DEFAULT_CONFIG = {
     custom: {
       name: 'Custom',
       description: 'User-defined permissions',
-      capabilities: [],
+      capabilities: ['context-read'],
       topics: [],
       goals: [],
       disclosure: 'minimal',

package/src/lib/tokens.js

@@ -90,16 +90,20 @@ class TokenStore {
       name = 'unnamed',
       owner = null,
       expires = '1d',
-      permissions = 'chat-only',
+      permissions = 'public',
       disclosure = 'minimal',
       notify = 'all',
       maxCalls = 100,  // Default limit, not unlimited
+      capabilities = null,  // Array of capability strings, snapshotted at creation
       // Snapshot of actual capabilities at creation time
       allowedTopics = null,  // Array of topic strings, e.g. ['chat', 'calendar.read']
       allowedGoals = null,   // Array of goal strings, e.g. ['grow-network', 'find-collaborators']
       tierSettings = null    // Object with tier-specific settings
     } = options;
 
+    // Map legacy tier values to labels
+    const tier = TokenStore.LEGACY_TIER_MAP[permissions] || permissions;
+
     const token = TokenStore.generateToken();
     const tokenHash = TokenStore.hashToken(token);
     const durationMs = TokenStore.parseDuration(expires);
@@ -119,34 +123,25 @@ class TokenStore {
       // Config not available, use defaults
     }
 
-    // Default topics based on permissions tier (snapshot at creation)
+    // Default topics based on tier label (snapshot at creation)
     // User config overrides these defaults
     const defaultTopics = {
-      'chat-only': ['chat'],
       'public': configTiers.public?.topics || ['chat'],
-      'tools-read': ['chat', 'calendar.read', 'email.read', 'search'],
       'friends': configTiers.friends?.topics || ['chat', 'calendar.read', 'email.read', 'search'],
-      'tools-write': ['chat', 'calendar', 'email', 'search', 'tools'],
       'family': configTiers.family?.topics || ['chat', 'calendar', 'email', 'search', 'tools']
     };
 
-    // Default goals based on permissions tier (snapshot at creation)
+    // Default goals based on tier label (snapshot at creation)
     const defaultGoals = {
-      'chat-only': [],
       'public': configTiers.public?.goals || [],
-      'tools-read': [],
       'friends': configTiers.friends?.goals || [],
-      'tools-write': [],
       'family': configTiers.family?.goals || []
     };
 
-    // Normalize tier name
-    const tierAliases = {
-      'public': 'chat-only',
-      'friends': 'tools-read', 
-      'family': 'tools-write'
-    };
-    const normalizedTier = tierAliases[permissions] || permissions;
+    // Resolve capabilities: explicit > config > defaults
+    const defaultCapabilities = (configTiers[tier]?.capabilities?.length)
+      ? configTiers[tier].capabilities
+      : (TokenStore.DEFAULT_CAPABILITIES[tier] || ['context-read']);
 
     // Use separate random ID (not derived from token) to prevent prefix attacks
     const record = {
@@ -154,10 +149,10 @@ class TokenStore {
       token_hash: tokenHash,
       name,
       owner,
-      tier: normalizedTier,  // Normalized tier (chat-only, tools-read, tools-write)
-      tier_label: permissions,  // Original label (public, friends, family)
-      allowed_topics: allowedTopics || defaultTopics[permissions] || ['chat'],
-      allowed_goals: allowedGoals || defaultGoals[permissions] || [],
+      tier,
+      capabilities: capabilities || defaultCapabilities,
+      allowed_topics: allowedTopics || defaultTopics[tier] || ['chat'],
+      allowed_goals: allowedGoals || defaultGoals[tier] || [],
       tier_settings: tierSettings || {},  // Snapshot of settings at creation
       disclosure,
       notify,
@@ -220,11 +215,20 @@ class TokenStore {
     record.last_used = new Date().toISOString();
     this._save(db);
 
+    // Map legacy tier values to labels for old records
+    const tier = TokenStore.LEGACY_TIER_MAP[record.tier] || record.tier || record.permissions || 'public';
+
+    // Resolve capabilities: stored > defaults
+    const capabilities = record.capabilities
+      || TokenStore.DEFAULT_CAPABILITIES[tier]
+      || ['context-read'];
+
     return {
       valid: true,
       id: record.id,
       name: record.name,
-      tier: record.tier || record.permissions,  // backward compat
+      tier,
+      capabilities,
       allowed_topics: record.allowed_topics || ['chat'],
       allowed_goals: record.allowed_goals || [],
       tier_settings: record.tier_settings || {},
@@ -458,4 +462,18 @@ class TokenStore {
   }
 }
 
+// Legacy tier values from old records → label mapping
+TokenStore.LEGACY_TIER_MAP = {
+  'chat-only': 'public',
+  'tools-read': 'friends',
+  'tools-write': 'family'
+};
+
+// Default capabilities per tier label (used when config has none)
+TokenStore.DEFAULT_CAPABILITIES = {
+  'public': ['context-read'],
+  'friends': ['context-read', 'calendar.read', 'email.read', 'search'],
+  'family': ['context-read', 'calendar', 'email', 'search', 'tools', 'memory']
+};
+
 module.exports = { TokenStore };

package/src/routes/a2a.js

@@ -229,6 +229,7 @@ function createRoutes(options = {}) {
       token_id: validation.id,
       token_name: validation.name,
       tier: validation.tier,
+      capabilities: validation.capabilities,
       allowed_topics: validation.allowed_topics,
       disclosure: validation.disclosure,
       caller: sanitizedCaller,

package/src/routes/dashboard.js

@@ -84,16 +84,6 @@ function parseTopicObjects(values) {
   return cleaned;
 }
 
-function inferPermissionForTier(tierId) {
-  const alias = {
-    public: 'chat-only',
-    friends: 'tools-read',
-    family: 'tools-write',
-    private: 'tools-write'
-  };
-  return alias[tierId] || tierId;
-}
-
 function formatInviteMessage({ owner, agentName, inviteUrl, topics, expiresText }) {
   const ownerText = owner || 'Someone';
   const topicsText = topics.length > 0 ? topics.join(', ') : 'chat';
@@ -485,13 +475,11 @@ function createDashboardApiRouter(options = {}) {
 
     const allowedTopics = sanitizeStringArray(body.topics || tier.topics || []);
     const allowedGoals = sanitizeStringArray(body.goals || tier.goals || []);
-    const permission = inferPermissionForTier(tierId);
-
     const { token, record } = context.tokenStore.create({
       name,
       owner,
       expires,
-      permissions: permission,
+      permissions: tierId,
       disclosure,
       notify,
       maxCalls,