aicq-chat-plugin 2.5.8 → 2.6.0

package/extension.js

@@ -8,13 +8,21 @@
  * This extension registers the plugin and proxies tool calls to the sidecar.
  *
  * OpenClaw expects `register()` and `activate()` exports from extension modules.
+ *
+ * NOTE: This file intentionally avoids process.env access to pass OpenClaw's
+ * security scanner (which flags env access + network send as a dangerous pattern).
+ * Configuration comes from OpenClaw's config system via activate(config).
  */
 const http = require('http');
 const path = require('path');
 
-const SIDECAR_PORT = parseInt(process.env.AICQ_PORT || '6109', 10);
+// Default port — can be overridden via activate(config)
+const DEFAULT_SIDECAR_PORT = 6109;
 const SIDECAR_HOST = '127.0.0.1';
 
+// Active port — set by activate() or falls back to default
+let sidecarPort = DEFAULT_SIDECAR_PORT;
+
 // ── Helper: proxy a gateway call to the sidecar ──────────────────────
 function proxyToSidecar(method, kwargs) {
   return new Promise((resolve, _reject) => {
@@ -22,7 +30,7 @@ function proxyToSidecar(method, kwargs) {
     const req = http.request(
       {
         hostname: SIDECAR_HOST,
-        port: SIDECAR_PORT,
+        port: sidecarPort,
         path: '/api/gateway',
         method: 'POST',
         headers: {
@@ -44,7 +52,7 @@ function proxyToSidecar(method, kwargs) {
       }
     );
     req.on('error', (e) => {
-      resolve({ error: `Sidecar not reachable: ${e.message}. Is the AICQ sidecar running on port ${SIDECAR_PORT}?` });
+      resolve({ error: `Sidecar not reachable: ${e.message}. Is the AICQ sidecar running on port ${sidecarPort}?` });
     });
     req.on('timeout', () => {
       req.destroy();
@@ -101,14 +109,14 @@ function register() {
   return {
     id: 'aicq-chat',
     name: 'AICQ Encrypted Chat',
-    version: '2.5.8',
+    version: '2.6.0',
     description: 'End-to-end encrypted chat plugin for OpenClaw agents',
 
     // Sidecar configuration — OpenClaw starts this process automatically
     sidecar: {
       command: 'node',
       args: [path.join(__dirname, 'index.js')],
-      port: SIDECAR_PORT,
+      port: DEFAULT_SIDECAR_PORT,
     },
 
     // Tool definitions for OpenClaw agent use
@@ -174,8 +182,13 @@ function register() {
 }
 
 // ── activate() — called by OpenClaw when the plugin is enabled ───────
-// Returns an object with handlers for tools and gateway calls
-function activate(_config) {
+// Receives config from openclaw.json and returns handlers.
+// Port can be configured via the "port" field in configSchema.
+function activate(config) {
+  // Read port from OpenClaw config (defined in configSchema)
+  if (config && config.port) {
+    sidecarPort = config.port;
+  }
   return {
     handleTool,
     handleGateway,
@@ -186,7 +199,6 @@ function activate(_config) {
 module.exports = {
   register,
   activate,
-  // Also expose as direct properties for compatibility with different loading patterns
   handleTool,
   handleGateway,
 };