aicq-chat-plugin 2.5.7 → 2.5.9

package/extension.js

@@ -5,96 +5,32 @@
  * It does NOT require native dependencies (better-sqlite3) which need C++ compilation.
  *
  * The actual chat server runs as a **sidecar** process (node index.js) on port 6109.
- * This extension just registers the plugin and proxies tool calls to the sidecar.
+ * This extension registers the plugin and proxies tool calls to the sidecar.
+ *
+ * OpenClaw expects `register()` and `activate()` exports from extension modules.
+ *
+ * NOTE: This file intentionally avoids process.env access to pass OpenClaw's
+ * security scanner (which flags env access + network send as a dangerous pattern).
+ * Configuration comes from OpenClaw's config system via activate(config).
  */
 const http = require('http');
+const path = require('path');
 
-const SIDECAR_PORT = parseInt(process.env.AICQ_PORT || '6109', 10);
+// Default port — can be overridden via activate(config)
+const DEFAULT_SIDECAR_PORT = 6109;
 const SIDECAR_HOST = '127.0.0.1';
 
-// ── Plugin metadata ──────────────────────────────────────────────────
-module.exports = {
-  id: 'aicq-chat',
-  name: 'AICQ Encrypted Chat',
-  version: '2.5.7',
-  description: 'End-to-end encrypted chat plugin for OpenClaw agents',
-
-  // Sidecar configuration — OpenClaw starts this process automatically
-  sidecar: {
-    command: 'node',
-    args: ['index.js'],
-    port: SIDECAR_PORT,
-  },
-
-  // Tool definitions for OpenClaw agent use
-  tools: {
-    'chat-friend': {
-      description: 'Manage AICQ friends — list, add by friend code, remove, view requests, accept/reject requests',
-      parameters: {
-        type: 'object',
-        properties: {
-          action: {
-            type: 'string',
-            enum: ['list', 'add', 'remove', 'requests', 'accept', 'reject'],
-            description: 'The friend management action to perform',
-          },
-          friend_code: {
-            type: 'string',
-            description: 'Friend code or temp number for adding a friend',
-          },
-          friend_id: {
-            type: 'string',
-            description: 'Friend ID for remove/accept/reject actions',
-          },
-        },
-        required: ['action'],
-      },
-    },
-    'chat-send': {
-      description: 'Send an encrypted message to a friend or group via AICQ',
-      parameters: {
-        type: 'object',
-        properties: {
-          targetId: {
-            type: 'string',
-            description: 'The friend ID or group ID to send the message to',
-          },
-          content: {
-            type: 'string',
-            description: 'The message content to send',
-          },
-          isGroup: {
-            type: 'boolean',
-            description: 'Whether the target is a group (default: false)',
-          },
-        },
-        required: ['targetId', 'content'],
-      },
-    },
-    'chat-export-key': {
-      description: 'Export your AICQ identity public key and fingerprint for sharing',
-      parameters: {
-        type: 'object',
-        properties: {
-          format: {
-            type: 'string',
-            enum: ['json', 'qr'],
-            description: 'Output format: json for key data, qr for QR code image (default: json)',
-          },
-        },
-      },
-    },
-  },
-};
+// Active port — set by activate() or falls back to default
+let sidecarPort = DEFAULT_SIDECAR_PORT;
 
 // ── Helper: proxy a gateway call to the sidecar ──────────────────────
 function proxyToSidecar(method, kwargs) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve, _reject) => {
     const postData = JSON.stringify({ method, kwargs });
     const req = http.request(
       {
         hostname: SIDECAR_HOST,
-        port: SIDECAR_PORT,
+        port: sidecarPort,
         path: '/api/gateway',
         method: 'POST',
         headers: {
@@ -116,7 +52,7 @@ function proxyToSidecar(method, kwargs) {
       }
     );
     req.on('error', (e) => {
-      resolve({ error: `Sidecar not reachable: ${e.message}. Is the AICQ sidecar running?` });
+      resolve({ error: `Sidecar not reachable: ${e.message}. Is the AICQ sidecar running on port ${sidecarPort}?` });
     });
     req.on('timeout', () => {
       req.destroy();
@@ -127,11 +63,11 @@ function proxyToSidecar(method, kwargs) {
   });
 }
 
-// ── Tool handlers (proxy to sidecar) ─────────────────────────────────
-module.exports.handleTool = async function (toolName, params) {
+// ── Tool handler: dispatch tool calls to sidecar ─────────────────────
+async function handleTool(toolName, params) {
   switch (toolName) {
     case 'chat-friend': {
-      const { action, friend_code, friend_id } = params;
+      const { action, friend_code, friend_id } = params || {};
       switch (action) {
         case 'list':
           return proxyToSidecar('aicq.friends.list', {});
@@ -151,18 +87,118 @@ module.exports.handleTool = async function (toolName, params) {
     }
     case 'chat-send':
       return proxyToSidecar('aicq.chat.send', {
-        targetId: params.targetId,
-        content: params.content,
-        isGroup: params.isGroup || false,
+        targetId: (params || {}).targetId,
+        content: (params || {}).content,
+        isGroup: (params || {}).isGroup || false,
       });
     case 'chat-export-key':
       return proxyToSidecar('aicq.identity.info', {});
     default:
       return { error: `Unknown tool: ${toolName}` };
   }
-};
+}
 
-// ── Gateway handler (proxy to sidecar via IPC or HTTP) ───────────────
-module.exports.handleGateway = async function (method, kwargs) {
+// ── Gateway handler: proxy any gateway method to sidecar ─────────────
+async function handleGateway(method, kwargs) {
   return proxyToSidecar(method, kwargs || {});
+}
+
+// ── register() — called by OpenClaw when the plugin is discovered ────
+// Returns the plugin manifest (tools, sidecar config, etc.)
+function register() {
+  return {
+    id: 'aicq-chat',
+    name: 'AICQ Encrypted Chat',
+    version: '2.5.9',
+    description: 'End-to-end encrypted chat plugin for OpenClaw agents',
+
+    // Sidecar configuration — OpenClaw starts this process automatically
+    sidecar: {
+      command: 'node',
+      args: [path.join(__dirname, 'index.js')],
+      port: DEFAULT_SIDECAR_PORT,
+    },
+
+    // Tool definitions for OpenClaw agent use
+    tools: {
+      'chat-friend': {
+        description: 'Manage AICQ friends — list, add by friend code, remove, view requests, accept/reject requests',
+        parameters: {
+          type: 'object',
+          properties: {
+            action: {
+              type: 'string',
+              enum: ['list', 'add', 'remove', 'requests', 'accept', 'reject'],
+              description: 'The friend management action to perform',
+            },
+            friend_code: {
+              type: 'string',
+              description: 'Friend code or temp number for adding a friend',
+            },
+            friend_id: {
+              type: 'string',
+              description: 'Friend ID for remove/accept/reject actions',
+            },
+          },
+          required: ['action'],
+        },
+      },
+      'chat-send': {
+        description: 'Send an encrypted message to a friend or group via AICQ',
+        parameters: {
+          type: 'object',
+          properties: {
+            targetId: {
+              type: 'string',
+              description: 'The friend ID or group ID to send the message to',
+            },
+            content: {
+              type: 'string',
+              description: 'The message content to send',
+            },
+            isGroup: {
+              type: 'boolean',
+              description: 'Whether the target is a group (default: false)',
+            },
+          },
+          required: ['targetId', 'content'],
+        },
+      },
+      'chat-export-key': {
+        description: 'Export your AICQ identity public key and fingerprint for sharing',
+        parameters: {
+          type: 'object',
+          properties: {
+            format: {
+              type: 'string',
+              enum: ['json', 'qr'],
+              description: 'Output format: json for key data, qr for QR code image (default: json)',
+            },
+          },
+        },
+      },
+    },
+  };
+}
+
+// ── activate() — called by OpenClaw when the plugin is enabled ───────
+// Receives config from openclaw.json and returns handlers.
+// Port can be configured via the "port" field in configSchema.
+function activate(config) {
+  // Read port from OpenClaw config (defined in configSchema)
+  if (config && config.port) {
+    sidecarPort = config.port;
+  }
+  return {
+    handleTool,
+    handleGateway,
+  };
+}
+
+// ── Exports ──────────────────────────────────────────────────────────
+module.exports = {
+  register,
+  activate,
+  handleTool,
+  handleGateway,
 };

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "aicq-chat",
   "name": "AICQ Encrypted Chat",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "End-to-end encrypted chat plugin for OpenClaw agents — Node.js implementation with full UI",
   "entry": "index.js",
   "activation": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aicq-chat-plugin",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "AICQ End-to-end Encrypted Chat Plugin for OpenClaw \u2014 Full UI with friend management, group chat, file transfer, and AI agent communication",
   "main": "index.js",
   "bin": {

package/postinstall.js

@@ -270,7 +270,7 @@ console.log('  ╚════════════════════
 console.log('');
 
 // Read version from package.json
-let version = '2.5.7';
+let version = '2.5.9';
 try {
   const pkg = JSON.parse(fs.readFileSync(path.join(PLUGIN_DIR, 'package.json'), 'utf8'));
   version = pkg.version;