aamp-openclaw-plugin 0.1.42 → 0.1.43

package/README.md

@@ -36,8 +36,12 @@ paired sender policy file, then consumes the code. The plugin replies with
 You can generate a fresh pairing QR code later without restarting OpenClaw:
 
 - Ask the agent to use the `aamp_pairing_code` tool.
+- Ask naturally, for example "发对接码", "生成配对码", or "show the connect QR".
 - Or run the `/aamp-pair` command in OpenClaw.
 
+The response includes both the QR target (`https://meshmail.ai/pair?...`) and
+the raw `aamp://connect?...` URL for copy/paste pairing.
+
 ## Build
 
 ```bash

package/bin/aamp-openclaw-plugin.mjs

@@ -197,6 +197,15 @@ async function renderTerminalQr(value) {
   }
 }
 
+function pairingUrlToWebUrl(connectUrl) {
+  const parsed = new URL(connectUrl)
+  const url = new URL('https://meshmail.ai/pair')
+  for (const [key, value] of parsed.searchParams) {
+    url.searchParams.set(key, value)
+  }
+  return url.toString()
+}
+
 export function normalizeBaseUrl(url) {
   if (url.startsWith('http://') || url.startsWith('https://')) return url.replace(/\/$/, '')
   return `https://${url.replace(/\/$/, '')}`
@@ -753,7 +762,8 @@ export async function runInit() {
   const pairing = identityResult.email
     ? createPairingFile({ email: identityResult.email, pairingFile: DEFAULT_PAIRING_FILE })
     : null
-  const qr = pairing ? await renderTerminalQr(pairing.connectUrl) : ''
+  const webPairingUrl = pairing ? pairingUrlToWebUrl(pairing.connectUrl) : ''
+  const qr = webPairingUrl ? await renderTerminalQr(webPairingUrl) : ''
 
   const restartResult = restartGateway()
 
@@ -786,7 +796,8 @@ export async function runInit() {
       restartResult.ok
         ? 'Plugin changes should now be active.'
         : 'Please restart the OpenClaw gateway manually for the plugin changes to take effect.',
-      pairing ? `Pairing URL (expires ${pairing.expiresAt}): ${pairing.connectUrl}` : '',
+      pairing ? `Pairing link (expires ${pairing.expiresAt}): ${webPairingUrl}` : '',
+      pairing ? `Pairing URL: ${pairing.connectUrl}` : '',
       qr ? `\n${qr}` : '',
       '',
     ].join('\n'),

package/dist/file-store.js

@@ -3,6 +3,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import { randomBytes } from "node:crypto";
+var DEFAULT_PAIRING_WEB_URL = "https://meshmail.ai/pair";
 function defaultCredentialsPath() {
   return join(homedir(), ".openclaw", "extensions", "aamp-openclaw-plugin", ".credentials.json");
 }
@@ -76,6 +77,14 @@ function createPairingCode(params) {
   writeFileSync(resolved, JSON.stringify(state, null, 2), "utf-8");
   return state;
 }
+function pairingUrlToWebUrl(connectUrl) {
+  const parsed = new URL(connectUrl);
+  const url = new URL(DEFAULT_PAIRING_WEB_URL);
+  for (const [key, value] of parsed.searchParams) {
+    url.searchParams.set(key, value);
+  }
+  return url.toString();
+}
 function consumePairingCode(params) {
   const resolved = params.file ?? defaultPairingPath();
   if (!existsSync(resolved))
@@ -132,6 +141,7 @@ function writeBinaryFile(path, content) {
   writeFileSync(path, content);
 }
 export {
+  DEFAULT_PAIRING_WEB_URL,
   addPairedSenderPolicy,
   consumePairingCode,
   createPairingCode,
@@ -143,6 +153,7 @@ export {
   loadCachedIdentity,
   loadPairedSenderPolicies,
   loadTaskState,
+  pairingUrlToWebUrl,
   readBinaryFile,
   saveCachedIdentity,
   saveTaskState,

package/dist/file-store.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/file-store.ts"],
-  "sourcesContent": ["import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { homedir } from 'node:os'\nimport { randomBytes } from 'node:crypto'\n\nexport interface Identity {\n  email: string\n  mailboxToken: string\n  smtpPassword: string\n}\n\nexport interface CachedTaskState {\n  terminalTaskIds?: string[]\n}\n\nexport interface DispatchContextRules {\n  [key: string]: string[]\n}\n\nexport interface PairingCodeState {\n  mailbox: string\n  pairCode: string\n  expiresAt: string\n  connectUrl: string\n  consumedAt?: string\n}\n\nexport interface PairedSenderPolicy {\n  sender: string\n  dispatchContextRules: DispatchContextRules\n  pairedAt: string\n}\n\nexport function defaultCredentialsPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.credentials.json')\n}\n\nexport function defaultTaskStatePath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.task-state.json')\n}\n\nexport function defaultPairingPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.pairing.json')\n}\n\nexport function defaultSenderPoliciesPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.sender-policies.json')\n}\n\nexport function loadCachedIdentity(file?: string): Identity | null {\n  const resolved = file ?? defaultCredentialsPath()\n  if (!existsSync(resolved)) return null\n  try {\n    const parsed = JSON.parse(readFileSync(resolved, 'utf-8')) as Partial<Identity>\n    if (!parsed.email || !parsed.mailboxToken || !parsed.smtpPassword) return null\n    return {\n      email: parsed.email,\n      mailboxToken: parsed.mailboxToken,\n      smtpPassword: parsed.smtpPassword,\n    }\n  } catch {\n    return null\n  }\n}\n\nexport function saveCachedIdentity(identity: Identity, file?: string): void {\n  const resolved = file ?? defaultCredentialsPath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify({\n    email: identity.email,\n    mailboxToken: identity.mailboxToken,\n    smtpPassword: identity.smtpPassword,\n  }, null, 2), 'utf-8')\n}\n\nexport function loadTaskState(file?: string): CachedTaskState {\n  const resolved = file ?? defaultTaskStatePath()\n  if (!existsSync(resolved)) return { terminalTaskIds: [] }\n  try {\n    const parsed = JSON.parse(readFileSync(resolved, 'utf-8')) as CachedTaskState\n    return {\n      terminalTaskIds: Array.isArray(parsed.terminalTaskIds) ? parsed.terminalTaskIds.filter(Boolean) : [],\n    }\n  } catch {\n    return { terminalTaskIds: [] }\n  }\n}\n\nexport function saveTaskState(state: CachedTaskState, file?: string): void {\n  const resolved = file ?? defaultTaskStatePath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify({\n    terminalTaskIds: state.terminalTaskIds ?? [],\n  }, null, 2), 'utf-8')\n}\n\nexport function createPairingCode(params: {\n  mailbox: string\n  file?: string\n  ttlSeconds?: number\n}): PairingCodeState {\n  const pairCode = randomBytes(6).toString('base64url')\n  const expiresAt = new Date(Date.now() + (params.ttlSeconds ?? 300) * 1000).toISOString()\n  const connectUrl = `aamp://connect?mailbox=${encodeURIComponent(params.mailbox.toLowerCase())}&pair_code=${encodeURIComponent(pairCode)}`\n  const state: PairingCodeState = {\n    mailbox: params.mailbox.toLowerCase(),\n    pairCode,\n    expiresAt,\n    connectUrl,\n  }\n  const resolved = params.file ?? defaultPairingPath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify(state, null, 2), 'utf-8')\n  return state\n}\n\nexport function consumePairingCode(params: {\n  mailbox: string\n  pairCode: string\n  file?: string\n}): PairingCodeState | null {\n  const resolved = params.file ?? defaultPairingPath()\n  if (!existsSync(resolved)) return null\n  const state = JSON.parse(readFileSync(resolved, 'utf-8')) as PairingCodeState\n  if (state.mailbox.toLowerCase() !== params.mailbox.toLowerCase()) return null\n  if (state.pairCode !== params.pairCode) return null\n  if (state.consumedAt) return null\n  if (new Date(state.expiresAt).getTime() <= Date.now()) return null\n  writeFileSync(resolved, JSON.stringify({ ...state, pairCode: '', consumedAt: new Date().toISOString() }, null, 2), 'utf-8')\n  return state\n}\n\nfunction isPairedSenderPolicy(value: unknown): value is PairedSenderPolicy {\n  if (!value || typeof value !== 'object') return false\n  const policy = value as PairedSenderPolicy\n  return typeof policy.sender === 'string'\n    && typeof policy.dispatchContextRules === 'object'\n    && typeof policy.pairedAt === 'string'\n}\n\nexport function loadPairedSenderPolicies(file?: string): PairedSenderPolicy[] {\n  const resolved = file ?? defaultSenderPoliciesPath()\n  if (!existsSync(resolved)) return []\n  try {\n    const data = JSON.parse(readFileSync(resolved, 'utf-8')) as unknown\n    return Array.isArray(data) ? data.filter(isPairedSenderPolicy) : []\n  } catch {\n    return []\n  }\n}\n\nexport function addPairedSenderPolicy(file: string | undefined, policy: PairedSenderPolicy): PairedSenderPolicy[] {\n  const resolved = file ?? defaultSenderPoliciesPath()\n  const policies = loadPairedSenderPolicies(resolved)\n  const normalizedSender = policy.sender.toLowerCase()\n  const next = [\n    ...policies.filter((item) => item.sender.toLowerCase() !== normalizedSender),\n    { ...policy, sender: normalizedSender },\n  ]\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify(next, null, 2), 'utf-8')\n  return next\n}\n\nexport function ensureDir(dir: string): void {\n  mkdirSync(dir, { recursive: true })\n}\n\nexport function readBinaryFile(path: string): Buffer {\n  return readFileSync(path)\n}\n\nexport function writeBinaryFile(path: string, content: Uint8Array | Buffer): void {\n  mkdirSync(dirname(path), { recursive: true })\n  writeFileSync(path, content)\n}\n"],
-  "mappings": ";AAAA,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,SAAS,YAAY;AAC9B,SAAS,eAAe;AACxB,SAAS,mBAAmB;AA8BrB,SAAS,yBAAiC;AAC/C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,mBAAmB;AAC/F;AAEO,SAAS,uBAA+B;AAC7C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,kBAAkB;AAC9F;AAEO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,eAAe;AAC3F;AAEO,SAAS,4BAAoC;AAClD,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,uBAAuB;AACnG;AAEO,SAAS,mBAAmB,MAAgC;AACjE,QAAM,WAAW,QAAQ,uBAAuB;AAChD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO;AAClC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACzD,QAAI,CAAC,OAAO,SAAS,CAAC,OAAO,gBAAgB,CAAC,OAAO;AAAc,aAAO;AAC1E,WAAO;AAAA,MACL,OAAO,OAAO;AAAA,MACd,cAAc,OAAO;AAAA,MACrB,cAAc,OAAO;AAAA,IACvB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,UAAoB,MAAqB;AAC1E,QAAM,WAAW,QAAQ,uBAAuB;AAChD,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU;AAAA,IACrC,OAAO,SAAS;AAAA,IAChB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,EACzB,GAAG,MAAM,CAAC,GAAG,OAAO;AACtB;AAEO,SAAS,cAAc,MAAgC;AAC5D,QAAM,WAAW,QAAQ,qBAAqB;AAC9C,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO,EAAE,iBAAiB,CAAC,EAAE;AACxD,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACzD,WAAO;AAAA,MACL,iBAAiB,MAAM,QAAQ,OAAO,eAAe,IAAI,OAAO,gBAAgB,OAAO,OAAO,IAAI,CAAC;AAAA,IACrG;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,iBAAiB,CAAC,EAAE;AAAA,EAC/B;AACF;AAEO,SAAS,cAAc,OAAwB,MAAqB;AACzE,QAAM,WAAW,QAAQ,qBAAqB;AAC9C,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU;AAAA,IACrC,iBAAiB,MAAM,mBAAmB,CAAC;AAAA,EAC7C,GAAG,MAAM,CAAC,GAAG,OAAO;AACtB;AAEO,SAAS,kBAAkB,QAIb;AACnB,QAAM,WAAW,YAAY,CAAC,EAAE,SAAS,WAAW;AACpD,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,KAAK,OAAO,cAAc,OAAO,GAAI,EAAE,YAAY;AACvF,QAAM,aAAa,0BAA0B,mBAAmB,OAAO,QAAQ,YAAY,CAAC,CAAC,cAAc,mBAAmB,QAAQ,CAAC;AACvI,QAAM,QAA0B;AAAA,IAC9B,SAAS,OAAO,QAAQ,YAAY;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,OAAO,QAAQ,mBAAmB;AACnD,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,OAAO;AAC/D,SAAO;AACT;AAEO,SAAS,mBAAmB,QAIP;AAC1B,QAAM,WAAW,OAAO,QAAQ,mBAAmB;AACnD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO;AAClC,QAAM,QAAQ,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACxD,MAAI,MAAM,QAAQ,YAAY,MAAM,OAAO,QAAQ,YAAY;AAAG,WAAO;AACzE,MAAI,MAAM,aAAa,OAAO;AAAU,WAAO;AAC/C,MAAI,MAAM;AAAY,WAAO;AAC7B,MAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ,KAAK,KAAK,IAAI;AAAG,WAAO;AAC9D,gBAAc,UAAU,KAAK,UAAU,EAAE,GAAG,OAAO,UAAU,IAAI,aAAY,oBAAI,KAAK,GAAE,YAAY,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO;AAC1H,SAAO;AACT;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,OAAO,UAAU;AAAU,WAAO;AAChD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,WAAW,YAC3B,OAAO,OAAO,yBAAyB,YACvC,OAAO,OAAO,aAAa;AAClC;AAEO,SAAS,yBAAyB,MAAqC;AAC5E,QAAM,WAAW,QAAQ,0BAA0B;AACnD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO,CAAC;AACnC,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACvD,WAAO,MAAM,QAAQ,IAAI,IAAI,KAAK,OAAO,oBAAoB,IAAI,CAAC;AAAA,EACpE,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,sBAAsB,MAA0B,QAAkD;AAChH,QAAM,WAAW,QAAQ,0BAA0B;AACnD,QAAM,WAAW,yBAAyB,QAAQ;AAClD,QAAM,mBAAmB,OAAO,OAAO,YAAY;AACnD,QAAM,OAAO;AAAA,IACX,GAAG,SAAS,OAAO,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,gBAAgB;AAAA,IAC3E,EAAE,GAAG,QAAQ,QAAQ,iBAAiB;AAAA,EACxC;AACA,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,OAAO;AAC9D,SAAO;AACT;AAEO,SAAS,UAAU,KAAmB;AAC3C,YAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACpC;AAEO,SAAS,eAAe,MAAsB;AACnD,SAAO,aAAa,IAAI;AAC1B;AAEO,SAAS,gBAAgB,MAAc,SAAoC;AAChF,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,gBAAc,MAAM,OAAO;AAC7B;",
+  "sourcesContent": ["import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { homedir } from 'node:os'\nimport { randomBytes } from 'node:crypto'\n\nexport interface Identity {\n  email: string\n  mailboxToken: string\n  smtpPassword: string\n}\n\nexport interface CachedTaskState {\n  terminalTaskIds?: string[]\n}\n\nexport interface DispatchContextRules {\n  [key: string]: string[]\n}\n\nexport interface PairingCodeState {\n  mailbox: string\n  pairCode: string\n  expiresAt: string\n  connectUrl: string\n  consumedAt?: string\n}\n\nexport const DEFAULT_PAIRING_WEB_URL = 'https://meshmail.ai/pair'\n\nexport interface PairedSenderPolicy {\n  sender: string\n  dispatchContextRules: DispatchContextRules\n  pairedAt: string\n}\n\nexport function defaultCredentialsPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.credentials.json')\n}\n\nexport function defaultTaskStatePath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.task-state.json')\n}\n\nexport function defaultPairingPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.pairing.json')\n}\n\nexport function defaultSenderPoliciesPath(): string {\n  return join(homedir(), '.openclaw', 'extensions', 'aamp-openclaw-plugin', '.sender-policies.json')\n}\n\nexport function loadCachedIdentity(file?: string): Identity | null {\n  const resolved = file ?? defaultCredentialsPath()\n  if (!existsSync(resolved)) return null\n  try {\n    const parsed = JSON.parse(readFileSync(resolved, 'utf-8')) as Partial<Identity>\n    if (!parsed.email || !parsed.mailboxToken || !parsed.smtpPassword) return null\n    return {\n      email: parsed.email,\n      mailboxToken: parsed.mailboxToken,\n      smtpPassword: parsed.smtpPassword,\n    }\n  } catch {\n    return null\n  }\n}\n\nexport function saveCachedIdentity(identity: Identity, file?: string): void {\n  const resolved = file ?? defaultCredentialsPath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify({\n    email: identity.email,\n    mailboxToken: identity.mailboxToken,\n    smtpPassword: identity.smtpPassword,\n  }, null, 2), 'utf-8')\n}\n\nexport function loadTaskState(file?: string): CachedTaskState {\n  const resolved = file ?? defaultTaskStatePath()\n  if (!existsSync(resolved)) return { terminalTaskIds: [] }\n  try {\n    const parsed = JSON.parse(readFileSync(resolved, 'utf-8')) as CachedTaskState\n    return {\n      terminalTaskIds: Array.isArray(parsed.terminalTaskIds) ? parsed.terminalTaskIds.filter(Boolean) : [],\n    }\n  } catch {\n    return { terminalTaskIds: [] }\n  }\n}\n\nexport function saveTaskState(state: CachedTaskState, file?: string): void {\n  const resolved = file ?? defaultTaskStatePath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify({\n    terminalTaskIds: state.terminalTaskIds ?? [],\n  }, null, 2), 'utf-8')\n}\n\nexport function createPairingCode(params: {\n  mailbox: string\n  file?: string\n  ttlSeconds?: number\n}): PairingCodeState {\n  const pairCode = randomBytes(6).toString('base64url')\n  const expiresAt = new Date(Date.now() + (params.ttlSeconds ?? 300) * 1000).toISOString()\n  const connectUrl = `aamp://connect?mailbox=${encodeURIComponent(params.mailbox.toLowerCase())}&pair_code=${encodeURIComponent(pairCode)}`\n  const state: PairingCodeState = {\n    mailbox: params.mailbox.toLowerCase(),\n    pairCode,\n    expiresAt,\n    connectUrl,\n  }\n  const resolved = params.file ?? defaultPairingPath()\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify(state, null, 2), 'utf-8')\n  return state\n}\n\nexport function pairingUrlToWebUrl(connectUrl: string): string {\n  const parsed = new URL(connectUrl)\n  const url = new URL(DEFAULT_PAIRING_WEB_URL)\n  for (const [key, value] of parsed.searchParams) {\n    url.searchParams.set(key, value)\n  }\n  return url.toString()\n}\n\nexport function consumePairingCode(params: {\n  mailbox: string\n  pairCode: string\n  file?: string\n}): PairingCodeState | null {\n  const resolved = params.file ?? defaultPairingPath()\n  if (!existsSync(resolved)) return null\n  const state = JSON.parse(readFileSync(resolved, 'utf-8')) as PairingCodeState\n  if (state.mailbox.toLowerCase() !== params.mailbox.toLowerCase()) return null\n  if (state.pairCode !== params.pairCode) return null\n  if (state.consumedAt) return null\n  if (new Date(state.expiresAt).getTime() <= Date.now()) return null\n  writeFileSync(resolved, JSON.stringify({ ...state, pairCode: '', consumedAt: new Date().toISOString() }, null, 2), 'utf-8')\n  return state\n}\n\nfunction isPairedSenderPolicy(value: unknown): value is PairedSenderPolicy {\n  if (!value || typeof value !== 'object') return false\n  const policy = value as PairedSenderPolicy\n  return typeof policy.sender === 'string'\n    && typeof policy.dispatchContextRules === 'object'\n    && typeof policy.pairedAt === 'string'\n}\n\nexport function loadPairedSenderPolicies(file?: string): PairedSenderPolicy[] {\n  const resolved = file ?? defaultSenderPoliciesPath()\n  if (!existsSync(resolved)) return []\n  try {\n    const data = JSON.parse(readFileSync(resolved, 'utf-8')) as unknown\n    return Array.isArray(data) ? data.filter(isPairedSenderPolicy) : []\n  } catch {\n    return []\n  }\n}\n\nexport function addPairedSenderPolicy(file: string | undefined, policy: PairedSenderPolicy): PairedSenderPolicy[] {\n  const resolved = file ?? defaultSenderPoliciesPath()\n  const policies = loadPairedSenderPolicies(resolved)\n  const normalizedSender = policy.sender.toLowerCase()\n  const next = [\n    ...policies.filter((item) => item.sender.toLowerCase() !== normalizedSender),\n    { ...policy, sender: normalizedSender },\n  ]\n  mkdirSync(dirname(resolved), { recursive: true })\n  writeFileSync(resolved, JSON.stringify(next, null, 2), 'utf-8')\n  return next\n}\n\nexport function ensureDir(dir: string): void {\n  mkdirSync(dir, { recursive: true })\n}\n\nexport function readBinaryFile(path: string): Buffer {\n  return readFileSync(path)\n}\n\nexport function writeBinaryFile(path: string, content: Uint8Array | Buffer): void {\n  mkdirSync(dirname(path), { recursive: true })\n  writeFileSync(path, content)\n}\n"],
+  "mappings": ";AAAA,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,SAAS,YAAY;AAC9B,SAAS,eAAe;AACxB,SAAS,mBAAmB;AAwBrB,IAAM,0BAA0B;AAQhC,SAAS,yBAAiC;AAC/C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,mBAAmB;AAC/F;AAEO,SAAS,uBAA+B;AAC7C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,kBAAkB;AAC9F;AAEO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,eAAe;AAC3F;AAEO,SAAS,4BAAoC;AAClD,SAAO,KAAK,QAAQ,GAAG,aAAa,cAAc,wBAAwB,uBAAuB;AACnG;AAEO,SAAS,mBAAmB,MAAgC;AACjE,QAAM,WAAW,QAAQ,uBAAuB;AAChD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO;AAClC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACzD,QAAI,CAAC,OAAO,SAAS,CAAC,OAAO,gBAAgB,CAAC,OAAO;AAAc,aAAO;AAC1E,WAAO;AAAA,MACL,OAAO,OAAO;AAAA,MACd,cAAc,OAAO;AAAA,MACrB,cAAc,OAAO;AAAA,IACvB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,UAAoB,MAAqB;AAC1E,QAAM,WAAW,QAAQ,uBAAuB;AAChD,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU;AAAA,IACrC,OAAO,SAAS;AAAA,IAChB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,EACzB,GAAG,MAAM,CAAC,GAAG,OAAO;AACtB;AAEO,SAAS,cAAc,MAAgC;AAC5D,QAAM,WAAW,QAAQ,qBAAqB;AAC9C,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO,EAAE,iBAAiB,CAAC,EAAE;AACxD,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACzD,WAAO;AAAA,MACL,iBAAiB,MAAM,QAAQ,OAAO,eAAe,IAAI,OAAO,gBAAgB,OAAO,OAAO,IAAI,CAAC;AAAA,IACrG;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,iBAAiB,CAAC,EAAE;AAAA,EAC/B;AACF;AAEO,SAAS,cAAc,OAAwB,MAAqB;AACzE,QAAM,WAAW,QAAQ,qBAAqB;AAC9C,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU;AAAA,IACrC,iBAAiB,MAAM,mBAAmB,CAAC;AAAA,EAC7C,GAAG,MAAM,CAAC,GAAG,OAAO;AACtB;AAEO,SAAS,kBAAkB,QAIb;AACnB,QAAM,WAAW,YAAY,CAAC,EAAE,SAAS,WAAW;AACpD,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,KAAK,OAAO,cAAc,OAAO,GAAI,EAAE,YAAY;AACvF,QAAM,aAAa,0BAA0B,mBAAmB,OAAO,QAAQ,YAAY,CAAC,CAAC,cAAc,mBAAmB,QAAQ,CAAC;AACvI,QAAM,QAA0B;AAAA,IAC9B,SAAS,OAAO,QAAQ,YAAY;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,OAAO,QAAQ,mBAAmB;AACnD,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,OAAO;AAC/D,SAAO;AACT;AAEO,SAAS,mBAAmB,YAA4B;AAC7D,QAAM,SAAS,IAAI,IAAI,UAAU;AACjC,QAAM,MAAM,IAAI,IAAI,uBAAuB;AAC3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,cAAc;AAC9C,QAAI,aAAa,IAAI,KAAK,KAAK;AAAA,EACjC;AACA,SAAO,IAAI,SAAS;AACtB;AAEO,SAAS,mBAAmB,QAIP;AAC1B,QAAM,WAAW,OAAO,QAAQ,mBAAmB;AACnD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO;AAClC,QAAM,QAAQ,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACxD,MAAI,MAAM,QAAQ,YAAY,MAAM,OAAO,QAAQ,YAAY;AAAG,WAAO;AACzE,MAAI,MAAM,aAAa,OAAO;AAAU,WAAO;AAC/C,MAAI,MAAM;AAAY,WAAO;AAC7B,MAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ,KAAK,KAAK,IAAI;AAAG,WAAO;AAC9D,gBAAc,UAAU,KAAK,UAAU,EAAE,GAAG,OAAO,UAAU,IAAI,aAAY,oBAAI,KAAK,GAAE,YAAY,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO;AAC1H,SAAO;AACT;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,OAAO,UAAU;AAAU,WAAO;AAChD,QAAM,SAAS;AACf,SAAO,OAAO,OAAO,WAAW,YAC3B,OAAO,OAAO,yBAAyB,YACvC,OAAO,OAAO,aAAa;AAClC;AAEO,SAAS,yBAAyB,MAAqC;AAC5E,QAAM,WAAW,QAAQ,0BAA0B;AACnD,MAAI,CAAC,WAAW,QAAQ;AAAG,WAAO,CAAC;AACnC,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;AACvD,WAAO,MAAM,QAAQ,IAAI,IAAI,KAAK,OAAO,oBAAoB,IAAI,CAAC;AAAA,EACpE,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,sBAAsB,MAA0B,QAAkD;AAChH,QAAM,WAAW,QAAQ,0BAA0B;AACnD,QAAM,WAAW,yBAAyB,QAAQ;AAClD,QAAM,mBAAmB,OAAO,OAAO,YAAY;AACnD,QAAM,OAAO;AAAA,IACX,GAAG,SAAS,OAAO,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,gBAAgB;AAAA,IAC3E,EAAE,GAAG,QAAQ,QAAQ,iBAAiB;AAAA,EACxC;AACA,YAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,gBAAc,UAAU,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,OAAO;AAC9D,SAAO;AACT;AAEO,SAAS,UAAU,KAAmB;AAC3C,YAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACpC;AAEO,SAAS,eAAe,MAAsB;AACnD,SAAO,aAAa,IAAI;AAC1B;AAEO,SAAS,gBAAgB,MAAc,SAAoC;AAChF,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,gBAAc,MAAM,OAAO;AAC7B;",
   "names": []
 }

package/dist/index.js

@@ -1196,6 +1196,7 @@ var JmapPushClient = class extends TinyEmitter {
 
 // ../sdk/dist/pairing.js
 import { randomBytes } from "node:crypto";
+var DEFAULT_PAIRING_WEB_URL = "https://meshmail.ai/pair";
 function normalizeMailbox(value) {
   const mailbox = value.trim().toLowerCase();
   if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(mailbox)) {
@@ -1243,6 +1244,23 @@ function buildPairingUrl(payload) {
   }
   return url.toString();
 }
+function buildPairingWebUrl(payload, baseUrl2 = DEFAULT_PAIRING_WEB_URL) {
+  const mailbox = normalizeMailbox(payload.mailbox);
+  const pairCode = payload.pairCode.trim();
+  if (!pairCode)
+    throw new Error("pairCode cannot be empty");
+  const url = new URL(baseUrl2);
+  url.searchParams.set("mailbox", mailbox);
+  url.searchParams.set("pair_code", pairCode);
+  const rules = normalizeDispatchContextRules(payload.dispatchContextRules);
+  if (rules) {
+    url.searchParams.set("dispatch_context_rules", encodeBase64UrlJson2(rules));
+  }
+  return url.toString();
+}
+function pairingUrlToWebUrl(input, baseUrl2 = DEFAULT_PAIRING_WEB_URL) {
+  return buildPairingWebUrl(parsePairingUrl(input), baseUrl2);
+}
 function createPairingCode(options) {
   const pairCode = options.pairCode?.trim() || randomBytes(6).toString("base64url");
   const dispatchContextRules = normalizeDispatchContextRules(options.dispatchContextRules);
@@ -1265,8 +1283,10 @@ function parsePairingUrl(input) {
   } catch {
     throw new Error("Invalid pairing URL");
   }
-  if (url.protocol !== "aamp:" || url.hostname !== "connect") {
-    throw new Error("Pairing URL must start with aamp://connect");
+  const isDeepLink = url.protocol === "aamp:" && url.hostname === "connect";
+  const isWebLink = (url.protocol === "https:" || url.protocol === "http:") && url.hostname === "meshmail.ai" && url.pathname === "/pair";
+  if (!isDeepLink && !isWebLink) {
+    throw new Error("Pairing URL must start with aamp://connect or https://meshmail.ai/pair");
   }
   const mailbox = url.searchParams.get("mailbox") ?? "";
   const pairCode = url.searchParams.get("pair_code") ?? "";
@@ -2365,6 +2385,7 @@ var AampClient = class _AampClient extends TinyEmitter {
   taskDispatchConcurrency;
   pendingTaskDispatches = [];
   activeTaskDispatchCount = 0;
+  discoveryPromise;
   streamAppendQueues = /* @__PURE__ */ new Map();
   constructor(config) {
     super();
@@ -2476,6 +2497,8 @@ var AampClient = class _AampClient extends TinyEmitter {
   }
   static createPairingCode = createPairingCode;
   static buildPairingUrl = buildPairingUrl;
+  static buildPairingWebUrl = buildPairingWebUrl;
+  static pairingUrlToWebUrl = pairingUrlToWebUrl;
   static parsePairingUrl = parsePairingUrl;
   static isPairingUrl = isPairingUrl;
   static consumePairingCode = consumePairingCode;
@@ -2513,6 +2536,38 @@ var AampClient = class _AampClient extends TinyEmitter {
       ...opts.body ? { body: JSON.stringify(opts.body) } : {}
     });
   }
+  discoverCachedAampService() {
+    if (!this.discoveryPromise) {
+      const discoveryPromise = _AampClient.discoverAampService(this.config.baseUrl, this.config.fetch);
+      this.discoveryPromise = discoveryPromise;
+      void discoveryPromise.catch(() => {
+        if (this.discoveryPromise === discoveryPromise) {
+          this.discoveryPromise = void 0;
+        }
+      });
+    }
+    return this.discoveryPromise;
+  }
+  async callAampApi(opts) {
+    const fetchImpl = this.config.fetch ?? fetch;
+    const discovery = await this.discoverCachedAampService();
+    const base = this.config.baseUrl.replace(/\/$/, "");
+    const apiUrl = new URL(discovery.api.url, `${base}/`);
+    apiUrl.searchParams.set("action", opts.action);
+    for (const [key, value] of Object.entries(opts.query ?? {})) {
+      if (value == null)
+        continue;
+      apiUrl.searchParams.set(key, String(value));
+    }
+    return fetchImpl(apiUrl, {
+      method: opts.method ?? "GET",
+      headers: {
+        ...opts.authToken ? { Authorization: `Basic ${opts.authToken}` } : {},
+        ...opts.body ? { "Content-Type": "application/json" } : {}
+      },
+      body: opts.body ? JSON.stringify(opts.body) : void 0
+    });
+  }
   static async registerMailbox(opts) {
     const base = opts.aampHost.replace(/\/$/, "");
     const registerRes = await _AampClient.callDiscoveredApi(base, {
@@ -2738,7 +2793,7 @@ var AampClient = class _AampClient extends TinyEmitter {
     };
   }
   async resolveStreamCapability() {
-    const discovery = await _AampClient.discoverAampService(this.config.baseUrl, this.config.fetch);
+    const discovery = await this.discoverCachedAampService();
     const stream = discovery.capabilities?.stream;
     if (!stream?.transport) {
       throw new Error("AAMP stream capability is not available on this service");
@@ -2747,11 +2802,10 @@ var AampClient = class _AampClient extends TinyEmitter {
   }
   async createStream(opts) {
     const stream = await this.resolveStreamCapability();
-    const res = await _AampClient.callDiscoveredApi(this.config.baseUrl, {
+    const res = await this.callAampApi({
       action: stream.createAction ?? "aamp.stream.create",
       method: "POST",
       authToken: this.config.mailboxToken,
-      fetch: this.config.fetch,
       body: opts
     });
     if (!res.ok) {
@@ -2794,11 +2848,10 @@ var AampClient = class _AampClient extends TinyEmitter {
   }
   async dispatchStreamAppend(opts) {
     const stream = await this.resolveStreamCapability();
-    const res = await _AampClient.callDiscoveredApi(this.config.baseUrl, {
+    const res = await this.callAampApi({
       action: stream.appendAction ?? "aamp.stream.append",
       method: "POST",
       authToken: this.config.mailboxToken,
-      fetch: this.config.fetch,
       body: opts
     });
     if (!res.ok) {
@@ -2900,11 +2953,10 @@ var AampClient = class _AampClient extends TinyEmitter {
   async closeStream(opts) {
     await this.flushStreamAppendQueue(opts.streamId);
     const stream = await this.resolveStreamCapability();
-    const res = await _AampClient.callDiscoveredApi(this.config.baseUrl, {
+    const res = await this.callAampApi({
       action: stream.closeAction ?? "aamp.stream.close",
       method: "POST",
       authToken: this.config.mailboxToken,
-      fetch: this.config.fetch,
       body: opts
     });
     if (!res.ok) {
@@ -2915,10 +2967,9 @@ var AampClient = class _AampClient extends TinyEmitter {
   }
   async getTaskStream(opts) {
     const stream = await this.resolveStreamCapability();
-    const res = await _AampClient.callDiscoveredApi(this.config.baseUrl, {
+    const res = await this.callAampApi({
       action: stream.getAction ?? "aamp.stream.get",
       authToken: this.config.mailboxToken,
-      fetch: this.config.fetch,
       query: {
         ...opts.taskId ? { taskId: opts.taskId } : {},
         ...opts.streamId ? { streamId: opts.streamId } : {}
@@ -3058,6 +3109,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import { randomBytes as randomBytes2 } from "node:crypto";
+var DEFAULT_PAIRING_WEB_URL2 = "https://meshmail.ai/pair";
 function defaultCredentialsPath() {
   return join(homedir(), ".openclaw", "extensions", "aamp-openclaw-plugin", ".credentials.json");
 }
@@ -3131,6 +3183,14 @@ function createPairingCode2(params) {
   writeFileSync(resolved, JSON.stringify(state, null, 2), "utf-8");
   return state;
 }
+function pairingUrlToWebUrl2(connectUrl) {
+  const parsed = new URL(connectUrl);
+  const url = new URL(DEFAULT_PAIRING_WEB_URL2);
+  for (const [key, value] of parsed.searchParams) {
+    url.searchParams.set(key, value);
+  }
+  return url.toString();
+}
 function consumePairingCode2(params) {
   const resolved = params.file ?? defaultPairingPath();
   if (!existsSync(resolved))
@@ -3750,8 +3810,10 @@ var src_default = {
         mailbox: email,
         file: cfg.pairingFile ?? defaultPairingPath()
       });
-      const qr = await renderTerminalQr(pairing.connectUrl);
+      const webUrl = pairingUrlToWebUrl2(pairing.connectUrl);
+      const qr = await renderTerminalQr(webUrl);
       api.logger.info(`[AAMP] Pair with AAMP App before ${pairing.expiresAt}: ${pairing.connectUrl}`);
+      api.logger.info(`[AAMP] Web pairing link: ${webUrl}`);
       if (qr)
         api.logger.info(`
 ${qr}`);
@@ -3762,7 +3824,8 @@ ${qr}`);
 Scan this QR code:
 ${qr}` : "\nCould not render a terminal QR code.",
         `
-Pairing URL: ${pairing.connectUrl}`
+Pairing link: ${webUrl}`,
+        `Pairing URL: ${pairing.connectUrl}`
       ].join("\n");
     }
     function wakeAgentForPendingTask(task) {
@@ -3854,7 +3917,7 @@ Pairing URL: ${pairing.connectUrl}`
         file: cfg.pairingFile ?? defaultPairingPath()
       });
       api.logger.info(`[AAMP] Pair with AAMP App before ${pairing.expiresAt}: ${pairing.connectUrl}`);
-      const qr = await renderTerminalQr(pairing.connectUrl);
+      const qr = await renderTerminalQr(pairingUrlToWebUrl2(pairing.connectUrl));
       if (qr)
         api.logger.info(`
 ${qr}`);
@@ -4751,7 +4814,7 @@ ${lines.join("\n")}`
     }, { name: "aamp_pending_tasks" });
     api.registerTool({
       name: "aamp_pairing_code",
-      description: "Generate a fresh five-minute AAMP pairing code for this OpenClaw agent and show a QR code. Use this when the user asks to pair AAMP App or another AAMP runtime with this agent.",
+      description: 'Generate a fresh five-minute AAMP pairing code for this OpenClaw agent and show a QR code. Use this immediately when the user asks for a pairing code, connect code, QR code, pairing link, invite link, or Chinese requests such as "\u53D1\u5BF9\u63A5\u7801", "\u751F\u6210\u914D\u5BF9\u7801", "\u5F39\u51FA\u4E8C\u7EF4\u7801", or "\u7ED9\u6211\u8FDE\u63A5\u4E8C\u7EF4\u7801".',
       parameters: { type: "object", properties: {} },
       execute: async () => ({
         content: [{ type: "text", text: await renderPairingCodeForCurrentAgent() }]
@@ -5020,7 +5083,7 @@ Question: ${h.question}`,
     });
     api.registerCommand({
       name: "aamp-pair",
-      description: "Show a fresh AAMP pairing QR code for this OpenClaw agent",
+      description: "Show a fresh AAMP pairing QR code, web pairing link, and aamp://connect URL for this OpenClaw agent",
       acceptsArgs: false,
       requireAuth: false,
       handler: async () => ({