aicq-openclaw-plugin 1.0.7 → 1.1.1

package/dist/index.js

@@ -1,3 +1,4 @@
+import { createRequire } from "module"; const require = createRequire(import.meta.url);
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -4921,9 +4922,9 @@ var require_lib = __commonJS({
   }
 });
 
-// ../node_modules/tweetnacl/nacl-fast.js
+// node_modules/tweetnacl/nacl-fast.js
 var require_nacl_fast = __commonJS({
-  "../node_modules/tweetnacl/nacl-fast.js"(exports, module) {
+  "node_modules/tweetnacl/nacl-fast.js"(exports, module) {
     (function(nacl3) {
       "use strict";
       var gf = function(init) {
@@ -7145,9 +7146,9 @@ var require_nacl_fast = __commonJS({
   }
 });
 
-// ../node_modules/tweetnacl-util/nacl-util.js
+// node_modules/tweetnacl-util/nacl-util.js
 var require_nacl_util = __commonJS({
-  "../node_modules/tweetnacl-util/nacl-util.js"(exports, module) {
+  "node_modules/tweetnacl-util/nacl-util.js"(exports, module) {
     (function(root, f) {
       "use strict";
       if (typeof module !== "undefined" && module.exports) module.exports = f();
@@ -7211,9 +7212,9 @@ var require_nacl_util = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/nacl.js
+// node_modules/@aicq/crypto/nacl.js
 var require_nacl = __commonJS({
-  "../shared/crypto/dist/nacl.js"(exports) {
+  "node_modules/@aicq/crypto/nacl.js"(exports) {
     "use strict";
     var __importDefault = exports && exports.__importDefault || function(mod) {
       return mod && mod.__esModule ? mod : { "default": mod };
@@ -7230,9 +7231,9 @@ var require_nacl = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/keygen.js
+// node_modules/@aicq/crypto/keygen.js
 var require_keygen = __commonJS({
-  "../shared/crypto/dist/keygen.js"(exports) {
+  "node_modules/@aicq/crypto/keygen.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.generateSigningKeyPair = generateSigningKeyPair2;
@@ -7271,9 +7272,9 @@ var require_keygen = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/signer.js
+// node_modules/@aicq/crypto/signer.js
 var require_signer = __commonJS({
-  "../shared/crypto/dist/signer.js"(exports) {
+  "node_modules/@aicq/crypto/signer.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.sign = sign;
@@ -7288,9 +7289,9 @@ var require_signer = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/keyExchange.js
+// node_modules/@aicq/crypto/keyExchange.js
 var require_keyExchange = __commonJS({
-  "../shared/crypto/dist/keyExchange.js"(exports) {
+  "node_modules/@aicq/crypto/keyExchange.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.computeSharedSecret = computeSharedSecret2;
@@ -7341,9 +7342,9 @@ var require_keyExchange = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/cipher.js
+// node_modules/@aicq/crypto/cipher.js
 var require_cipher = __commonJS({
-  "../shared/crypto/dist/cipher.js"(exports) {
+  "node_modules/@aicq/crypto/cipher.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.generateNonce = generateNonce;
@@ -7367,9 +7368,9 @@ var require_cipher = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/message.js
+// node_modules/@aicq/crypto/message.js
 var require_message = __commonJS({
-  "../shared/crypto/dist/message.js"(exports) {
+  "node_modules/@aicq/crypto/message.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.createMessage = createMessage;
@@ -7483,9 +7484,9 @@ var require_message = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/password.js
+// node_modules/@aicq/crypto/password.js
 var require_password = __commonJS({
-  "../shared/crypto/dist/password.js"(exports) {
+  "node_modules/@aicq/crypto/password.js"(exports) {
     "use strict";
     var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -7563,9 +7564,9 @@ var require_password = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/handshake.js
+// node_modules/@aicq/crypto/handshake.js
 var require_handshake = __commonJS({
-  "../shared/crypto/dist/handshake.js"(exports) {
+  "node_modules/@aicq/crypto/handshake.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.createHandshakeRequest = createHandshakeRequest2;
@@ -7674,9 +7675,9 @@ var require_handshake = __commonJS({
   }
 });
 
-// ../shared/crypto/dist/index.js
-var require_dist = __commonJS({
-  "../shared/crypto/dist/index.js"(exports) {
+// node_modules/@aicq/crypto/index.js
+var require_crypto = __commonJS({
+  "node_modules/@aicq/crypto/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.completeHandshake = exports.createHandshakeResponse = exports.createHandshakeRequest = exports.decryptWithPassword = exports.encryptWithPassword = exports.decryptMessage = exports.encryptMessage = exports.parseMessage = exports.createMessage = exports.generateNonce = exports.decrypt = exports.encrypt = exports.deriveSessionKey = exports.computeSharedSecret = exports.verify = exports.sign = exports.getPublicKeyFingerprint = exports.deriveX25519FromEd25519 = exports.generateKeyExchangeKeyPair = exports.generateSigningKeyPair = exports.encodeBase64 = exports.decodeBase64 = exports.encodeUTF8 = exports.decodeUTF8 = exports.nacl = void 0;
@@ -7770,12 +7771,12 @@ var require_dist = __commonJS({
 var dotenv = __toESM(require_main(), 1);
 import * as path6 from "path";
 import * as http from "http";
+import { exec } from "child_process";
 import { definePluginEntry } from "openclaw/plugin-sdk/core";
 
 // dist/config.js
 import * as fs from "fs";
 import * as path from "path";
-import { fileURLToPath } from "url";
 
 // node_modules/uuid/dist/esm-node/rng.js
 import crypto from "crypto";
@@ -7825,13 +7826,12 @@ function v4(options, buf, offset) {
 var v4_default = v4;
 
 // dist/config.js
-var __filename = fileURLToPath(import.meta.url);
-var __dirname2 = path.dirname(__filename);
-var SERVER_URL = process.env.AICQ_SERVER_URL || "https://aicq.online:61018";
+var _dirname = typeof __dirname !== "undefined" ? __dirname : process.cwd();
+var SERVER_URL = process.env.AICQ_SERVER_URL || "https://aicq.online";
 function loadConfig(overrides) {
   let schemaDefaults = {};
   try {
-    const manifestPath = path.resolve(__dirname2, "..", "openclaw.plugin.json");
+    const manifestPath = path.resolve(_dirname, "..", "openclaw.plugin.json");
     const manifestRaw = fs.readFileSync(manifestPath, "utf-8");
     const manifest = JSON.parse(manifestRaw);
     const schema = manifest.configSchema;
@@ -8191,7 +8191,7 @@ var PluginStore = class {
 
 // dist/services/identityService.js
 var import_qrcode = __toESM(require_lib(), 1);
-var import_crypto3 = __toESM(require_dist(), 1);
+var import_crypto3 = __toESM(require_crypto(), 1);
 import * as crypto4 from "crypto";
 var IdentityService = class {
   constructor(store, logger) {
@@ -8676,7 +8676,7 @@ var ServerClient = class {
 };
 
 // dist/handshake/handshakeManager.js
-var import_crypto4 = __toESM(require_dist(), 1);
+var import_crypto4 = __toESM(require_crypto(), 1);
 import * as crypto5 from "crypto";
 var HandshakeManager = class {
   constructor(store, serverClient, config2, logger) {
@@ -9092,7 +9092,7 @@ var P2PConnectionManager = class {
 };
 
 // dist/fileTransfer/transferManager.js
-var import_crypto5 = __toESM(require_dist(), 1);
+var import_crypto5 = __toESM(require_crypto(), 1);
 import * as fs3 from "fs";
 import * as path3 from "path";
 var DEFAULT_CHUNK_SIZE = 64 * 1024;
@@ -9315,7 +9315,7 @@ var FileTransferManager = class {
 };
 
 // dist/channels/encryptedChat.js
-var import_crypto6 = __toESM(require_dist(), 1);
+var import_crypto6 = __toESM(require_crypto(), 1);
 import * as fs4 from "fs";
 import * as path4 from "path";
 function safeFilePath(filePath, allowedDir) {
@@ -9755,7 +9755,7 @@ var BeforeToolCallHook = class {
 };
 
 // dist/hooks/messageSending.js
-var import_crypto7 = __toESM(require_dist(), 1);
+var import_crypto7 = __toESM(require_crypto(), 1);
 var MessageSendingHook = class {
   constructor(store, handshakeManager, logger) {
     this.store = store;
@@ -10072,6 +10072,20 @@ tbody tr:hover { background: var(--bg3); }
 /* Section desc */
 .section-desc { font-size: 13px; color: var(--text2); margin-bottom: 20px; line-height: 1.6; }
 
+/* Toggle switch */
+.toggle-label { display: flex; align-items: center; gap: 10px; cursor: pointer; font-size: 13px; color: var(--text); user-select: none; text-transform: none !important; letter-spacing: normal !important; font-weight: 400 !important; }
+.toggle-label input[type=checkbox] { display: none; }
+.toggle-slider {
+  width: 40px; height: 22px; background: var(--bg4); border-radius: 11px;
+  position: relative; transition: background var(--transition); flex-shrink: 0;
+}
+.toggle-slider::after {
+  content: ''; position: absolute; top: 3px; left: 3px; width: 16px; height: 16px;
+  background: var(--text3); border-radius: 50%; transition: all var(--transition);
+}
+.toggle-label input:checked + .toggle-slider { background: var(--accent); }
+.toggle-label input:checked + .toggle-slider::after { left: 21px; background: #fff; }
+
 /* Responsive */
 @media (max-width: 768px) {
   .sidebar { position: fixed; left: -260px; z-index: 50; height: 100vh; transition: left var(--transition); }
@@ -10114,37 +10128,14 @@ function createToastContainer() {
   return c;
 }
 
-// \u2500\u2500 API with timeout \u2500\u2500
+// \u2500\u2500 API \u2500\u2500
 async function api(path, opts = {}) {
-  const timeout = (opts._timeout || 8000);
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeout);
   try {
-    const res = await fetch(API + path, { headers: { 'Content-Type': 'application/json', ...opts.headers }, ...opts, signal: controller.signal });
-    clearTimeout(timer);
+    const res = await fetch(API + path, { headers: { 'Content-Type': 'application/json', ...opts.headers }, ...opts });
     const data = await res.json();
     if (!res.ok && !data.error) data.error = 'HTTP ' + res.status;
     return data;
-  } catch (e) {
-    clearTimeout(timer);
-    const msg = e.name === 'AbortError' ? 'Request timed out (' + (timeout/1000) + 's)' : e.message;
-    return { error: msg };
-  }
-}
-
-// Safe helper: run promise, never throw, return { data, error }
-async function safeApi(path, opts) {
-  try {
-    const data = await api(path, opts);
-    return { data, error: data.error || null };
-  } catch (e) {
-    return { data: null, error: e.message || 'Unknown error' };
-  }
-}
-
-// Render an inline error block
-function errorBlock(title, msg) {
-  return '<div class="card" style="border-color:var(--danger)"><div style="display:flex;align-items:center;gap:10px"><span style="font-size:20px">\u26A0\uFE0F</span><div><div style="font-weight:600;color:var(--danger)">' + escHtml(title) + '</div><div style="font-size:12px;color:var(--text3);margin-top:2px">' + escHtml(msg) + '</div></div></div></div>';
+  } catch (e) { return { error: e.message }; }
 }
 
 // \u2500\u2500 Utilities \u2500\u2500
@@ -10192,86 +10183,74 @@ function loadPage(page) {
 }
 
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
-// PAGE: Dashboard \u2014 render skeleton immediately, load data async
+// PAGE: Dashboard
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
 async function loadDashboard() {
   const el = $('#dashboard-content');
-  // Render skeleton immediately \u2014 never show spinner that blocks UI
+  html(el, '<div class="loading-mask"><div class="spinner"></div>Loading dashboard...</div>');
+  const [status, friends, identity, mgmtUrl] = await Promise.all([api('/status'), api('/friends'), api('/identity'), api('/mgmt-url')]);
+  if (status.error) { html(el, '<div class="empty"><div class="icon">\u26A0\uFE0F</div><p>Failed to connect to AICQ plugin</p></div>'); return; }
+  const connCls = status.connected ? 'dot-ok' : 'dot-err';
+  const connText = status.connected ? 'Connected' : 'Disconnected';
+  const friendList = friends.friends || [];
+  const aiFriends = friendList.filter(f => f.friendType === 'ai').length;
+  const humanFriends = friendList.filter(f => f.friendType !== 'ai').length;
+  const mgmtLink = mgmtUrl?.mgmtUrl || window.location.origin;
+
   html(el, \\\`
     <div class="stats-grid">
-      <div class="stat-card"><div class="stat-icon" style="background:var(--accent-bg)">\u{1F4E1}</div><div class="stat-label">Server Status</div><div class="stat-value" style="font-size:16px"><div class="spinner" style="width:16px;height:16px;border-width:2px;margin:0 auto"></div></div><div class="stat-sub" id="dash-server-url">Loading...</div></div>
-      <div class="stat-card"><div class="stat-icon" style="background:var(--ok-bg)">\u{1F465}</div><div class="stat-label">Total Friends</div><div class="stat-value" id="dash-friend-count"><div class="spinner" style="width:16px;height:16px;border-width:2px;margin:0 auto"></div></div><div class="stat-sub" id="dash-friend-sub">loading...</div></div>
-      <div class="stat-card"><div class="stat-icon" style="background:var(--info-bg)">\u{1F517}</div><div class="stat-label">Active Sessions</div><div class="stat-value" id="dash-sessions"><div class="spinner" style="width:16px;height:16px;border-width:2px;margin:0 auto"></div></div><div class="stat-sub">Encrypted sessions</div></div>
-      <div class="stat-card"><div class="stat-icon" style="background:var(--warn-bg)">\u{1F511}</div><div class="stat-label">Agent ID</div><div class="stat-value mono" style="font-size:13px" id="dash-agent-id">\u2014</div><div class="stat-sub" id="dash-fingerprint">\u2014</div></div>
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--accent-bg)">\u{1F4E1}</div>
+        <div class="stat-label">Server Status</div>
+        <div class="stat-value" style="font-size:16px;display:flex;align-items:center;gap:8px">
+          <span class="dot \${connCls}"></span> \${connText}
+        </div>
+        <div class="stat-sub">\${escHtml(status.serverUrl)}</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--ok-bg)">\u{1F465}</div>
+        <div class="stat-label">Total Friends</div>
+        <div class="stat-value">\${friendList.length}</div>
+        <div class="stat-sub">\${aiFriends} AI \xB7 \${humanFriends} Human</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--info-bg)">\u{1F517}</div>
+        <div class="stat-label">Active Sessions</div>
+        <div class="stat-value">\${status.sessionCount || 0}</div>
+        <div class="stat-sub">Encrypted sessions</div>
+      </div>
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--warn-bg)">\u{1F511}</div>
+        <div class="stat-label">Agent ID</div>
+        <div class="stat-value mono" style="font-size:13px">\${escHtml(status.agentId)}</div>
+        <div class="stat-sub">Fingerprint: \${escHtml(status.fingerprint)}</div>
+      </div>
     </div>
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:16px">
-      <div class="card"><div class="card-header"><div class="card-title">\u{1F4CB} Friends</div><button class="btn btn-sm btn-ghost" onclick="navigate('friends')">View All \u2192</button></div><div id="dash-friends-list"><div class="loading-mask" style="padding:20px"><div class="spinner"></div>Loading friends...</div></div></div>
-      <div class="card"><div class="card-header"><div class="card-title">\u{1F916} Identity Info</div></div><div id="dash-identity"><div class="loading-mask" style="padding:20px"><div class="spinner"></div>Loading...</div></div></div>
+      <div class="card">
+        <div class="card-header"><div class="card-title">\u{1F4CB} Recent Friends</div><button class="btn btn-sm btn-ghost" onclick="navigate('friends')">View All \u2192</button></div>
+        \${renderMiniFriendList(friendList.slice(0, 5))}
+      </div>
+      <div class="card">
+        <div class="card-header"><div class="card-title">\u{1F916} Identity Info</div></div>
+        <div class="detail-row"><div class="detail-key">Agent ID</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${identity.agentId}')">\${escHtml(identity.agentId)} \u{1F4CB}</div></div>
+        <div class="detail-row"><div class="detail-key">Fingerprint</div><div class="detail-val mono">\${escHtml(identity.publicKeyFingerprint)}</div></div>
+        <div class="detail-row"><div class="detail-key">Server URL</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${identity.serverUrl}')">\${escHtml(identity.serverUrl)} \u{1F4CB}</div></div>
+        <div class="detail-row"><div class="detail-key">Connection</div><div class="detail-val"><span class="badge badge-\${identity.connected ? 'ok' : 'danger'}">\${identity.connected ? 'Online' : 'Offline'}</span></div></div>
+        <div class="detail-row"><div class="detail-key">Plugin Version</div><div class="detail-val"><span class="badge badge-accent">v1.1.1</span></div></div>
+      </div>
+    </div>
+    <div class="card" style="margin-top:0">
+      <div class="card-header"><div class="card-title">\u{1F5A5}\uFE0F Management UI Access</div></div>
+      <div class="detail-row"><div class="detail-key">Current URL</div><div class="detail-val"><a href="\${escHtml(mgmtLink)}" target="_blank" style="color:var(--info);text-decoration:underline">\${escHtml(mgmtLink)}</a></div></div>
+      <div class="detail-row"><div class="detail-key">Local Access</div><div class="detail-val"><a href="http://127.0.0.1:6109" target="_blank" style="color:var(--info);text-decoration:underline">http://127.0.0.1:6109</a> <button class="btn btn-sm btn-primary" onclick="window.open('http://127.0.0.1:6109','_blank')" style="margin-left:8px">\u{1F517} Open</button></div></div>
+      <div class="detail-row"><div class="detail-key">Gateway Path</div><div class="detail-val mono">/plugins/aicq-chat/</div></div>
     </div>
   \\\`);
 
-  // Load each data source independently \u2014 no await blocking between them
-  const statusRes = await safeApi('/status', { _timeout: 5000 });
-  const status = statusRes.data || {};
-
-  // Update status card immediately
-  const connCls = status.connected ? 'dot-ok' : 'dot-err';
-  const connText = status.connected ? 'Connected' : 'Disconnected';
-  const connEl = $('#dash-server-url');
-  if (connEl) connEl.textContent = status.serverUrl || '\u2014';
-  const statusValEl = el.querySelector('.stat-value');
-  if (statusValEl) statusValEl.innerHTML = '<span class="dot ' + connCls + '" style="display:inline-block;width:8px;height:8px;vertical-align:middle"></span> <span style="font-size:16px">' + connText + '</span>';
-
-  // Update header dot
-  const hDot = $('#header-dot');
-  if (hDot) hDot.className = 'dot ' + connCls;
-  const hTxt = $('#header-status');
-  if (hTxt) hTxt.textContent = connText;
-
-  // Agent ID card
-  const agentEl = $('#dash-agent-id');
-  if (agentEl) agentEl.textContent = status.agentId || '\u2014';
-  const fpEl = $('#dash-fingerprint');
-  if (fpEl) fpEl.textContent = 'Fingerprint: ' + (status.fingerprint || '\u2014');
-  const sessEl = $('#dash-sessions');
-  if (sessEl) sessEl.textContent = status.sessionCount || 0;
-
-  // Identity \u2014 load independently
-  safeApi('/identity', { _timeout: 5000 }).then(identityRes => {
-    const identityEl = $('#dash-identity');
-    if (!identityEl) return;
-    if (identityRes.error) {
-      identityEl.innerHTML = errorBlock('Identity Unavailable', identityRes.error + ' <button class="btn btn-sm btn-default" style="margin-top:8px" onclick="loadDashboard()">\u{1F504} Retry</button>');
-      return;
-    }
-    const identity = identityRes.data || {};
-    identityEl.innerHTML = \\\`
-      <div class="detail-row"><div class="detail-key">Agent ID</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(identity.agentId || '')}')">\${escHtml(identity.agentId || '\u2014')} \u{1F4CB}</div></div>
-      <div class="detail-row"><div class="detail-key">Fingerprint</div><div class="detail-val mono">\${escHtml(identity.publicKeyFingerprint || '\u2014')}</div></div>
-      <div class="detail-row"><div class="detail-key">Server URL</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(identity.serverUrl || '')}')">\${escHtml(identity.serverUrl || '\u2014')} \u{1F4CB}</div></div>
-      <div class="detail-row"><div class="detail-key">Connection</div><div class="detail-val"><span class="badge badge-\${identity.connected ? 'ok' : 'danger'}">\${identity.connected ? 'Online' : 'Offline'}</span></div></div>
-    \\\`;
-  });
-
-  // Friends \u2014 load independently from remote server
-  safeApi('/friends', { _timeout: 10000 }).then(friendsRes => {
-    const fcEl = $('#dash-friend-count');
-    const fsEl = $('#dash-friend-sub');
-    const flEl = $('#dash-friends-list');
-    if (friendsRes.error) {
-      if (fcEl) fcEl.textContent = '\u2014';
-      if (fsEl) fsEl.textContent = 'unavailable';
-      if (flEl) flEl.innerHTML = errorBlock('Friend List Unavailable', friendsRes.error + ' \u2014 Remote server unreachable. <button class="btn btn-sm btn-default" style="margin-top:8px" onclick="loadDashboard()">\u{1F504} Retry</button>');
-      toast('Cannot load friends: ' + friendsRes.error, 'warn');
-      return;
-    }
-    const friendList = friendsRes.data?.friends || [];
-    const aiFriends = friendList.filter(f => f.friendType === 'ai').length;
-    const humanFriends = friendList.filter(f => f.friendType !== 'ai').length;
-    if (fcEl) fcEl.textContent = friendList.length;
-    if (fsEl) fsEl.textContent = aiFriends + ' AI \xB7 ' + humanFriends + ' Human';
-    if (flEl) flEl.innerHTML = renderMiniFriendList(friendList.slice(0, 5));
-  });
+  // Also set the mgmt-url-display in settings
+  const mgmtUrlEl = document.getElementById('mgmt-url-display');
+  if (mgmtUrlEl) mgmtUrlEl.textContent = window.location.href;
 }
 
 function renderMiniFriendList(friends) {
@@ -10292,6 +10271,7 @@ async function loadAgents() {
   const data = await api('/agents');
   if (data.error) { html(el, '<div class="empty"><div class="icon">\u26A0\uFE0F</div><p>' + escHtml(data.error) + '</p></div>'); return; }
 
+  window._lastAgentsData = data;
   const agents = data.agents || [];
   const configSource = data.configSource || 'unknown';
 
@@ -10310,6 +10290,7 @@ async function loadAgents() {
       <td>
         <div class="actions-cell">
           <button class="btn btn-sm btn-ghost" onclick="viewAgent(\${i})" title="View">\u{1F441}\uFE0F</button>
+          <button class="btn btn-sm btn-ok" onclick="showEditAgentModal(\${i})" title="Edit">\u270F\uFE0F</button>
           <button class="btn btn-sm btn-danger" onclick="deleteAgent(\${i})" title="Delete">\u{1F5D1}\uFE0F</button>
         </div>
       </td>
@@ -10327,6 +10308,7 @@ async function loadAgents() {
   html(el, \\\`
     <div class="toolbar">
       <div class="search-box"><input type="text" placeholder="Search agents..." id="agent-search" oninput="filterAgentTable()"></div>
+      <button class="btn btn-sm btn-primary" onclick="showAddAgentModal()">\u2795 Add Agent</button>
       <button class="btn btn-sm btn-default" onclick="loadAgents()">\u{1F504} Refresh</button>
     </div>
     <p class="section-desc">Agent list from <strong style="color:var(--accent2)">\${escHtml(configSource)}</strong>. Total: <strong>\${agents.length}</strong> agents configured.</p>
@@ -10371,6 +10353,83 @@ async function deleteAgent(index) {
   else { toast(r.message || r.error || 'Delete failed', 'err'); }
 }
 
+let _editAgentIndex = null;
+
+function showAddAgentModal() {
+  _editAgentIndex = null;
+  $('#agent-form-title').textContent = '\u2795 Add New Agent';
+  $('#agent-form-name').value = '';
+  $('#agent-form-id').value = '';
+  $('#agent-form-model').value = '';
+  $('#agent-form-provider').value = '';
+  $('#agent-form-prompt').value = '';
+  $('#agent-form-enabled').checked = true;
+  $('#agent-form-temperature').value = '0.7';
+  $('#agent-form-max-tokens').value = '4096';
+  $('#agent-form-top-p').value = '1';
+  $('#agent-form-tools').value = '';
+  showModal('modal-add-agent');
+  setTimeout(() => $('#agent-form-name')?.focus(), 100);
+}
+
+function showEditAgentModal(index) {
+  const agents = window._lastAgentsData?.agents || [];
+  const a = agents[index];
+  if (!a) return;
+  _editAgentIndex = index;
+  $('#agent-form-title').textContent = '\u270F\uFE0F Edit Agent';
+  $('#agent-form-name').value = a.name || '';
+  $('#agent-form-id').value = a.id || '';
+  $('#agent-form-model').value = a.model || '';
+  $('#agent-form-provider').value = a.provider || '';
+  $('#agent-form-prompt').value = a.systemPrompt || '';
+  $('#agent-form-enabled').checked = a.enabled !== false;
+  $('#agent-form-temperature').value = a.temperature ?? 0.7;
+  $('#agent-form-max-tokens').value = a.maxTokens ?? 4096;
+  $('#agent-form-top-p').value = a.topP ?? 1;
+  $('#agent-form-tools').value = Array.isArray(a.tools) ? a.tools.join(', ') : (a.tools || '');
+  showModal('modal-add-agent');
+}
+
+async function saveAgent() {
+  const tempVal = parseFloat($('#agent-form-temperature')?.value);
+  const maxTokensVal = parseInt($('#agent-form-max-tokens')?.value, 10);
+  const topPVal = parseFloat($('#agent-form-top-p')?.value);
+  const toolsRaw = $('#agent-form-tools')?.value?.trim() || '';
+
+  const agent = {
+    name: $('#agent-form-name')?.value?.trim() || '',
+    id: $('#agent-form-id')?.value?.trim() || '',
+    model: $('#agent-form-model')?.value?.trim() || '',
+    provider: $('#agent-form-provider')?.value?.trim() || '',
+    systemPrompt: $('#agent-form-prompt')?.value?.trim() || '',
+    enabled: $('#agent-form-enabled')?.checked ?? true,
+    temperature: isNaN(tempVal) ? 0.7 : Math.min(2, Math.max(0, tempVal)),
+    maxTokens: isNaN(maxTokensVal) ? 4096 : maxTokensVal,
+    topP: isNaN(topPVal) ? 1 : Math.min(1, Math.max(0, topPVal)),
+    tools: toolsRaw ? toolsRaw.split(',').map(t => t.trim()).filter(Boolean) : [],
+  };
+
+  if (!agent.name) { toast('Agent name is required', 'warn'); return; }
+
+  let r;
+  if (_editAgentIndex !== null) {
+    // Edit existing
+    r = await api('/agents/' + _editAgentIndex, { method: 'PUT', body: JSON.stringify({ agent }) });
+  } else {
+    // Add new
+    r = await api('/agents', { method: 'POST', body: JSON.stringify({ agent }) });
+  }
+
+  if (r.success) {
+    toast(_editAgentIndex !== null ? 'Agent updated' : 'Agent added', 'ok');
+    hideModal('modal-add-agent');
+    loadAgents();
+  } else {
+    toast(r.message || r.error || 'Failed', 'err');
+  }
+}
+
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
 // PAGE: Friends Management
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
@@ -10379,17 +10438,12 @@ let friendsFilter = 'all';
 async function loadFriends() {
   const el = $('#friends-content');
   html(el, '<div class="loading-mask"><div class="spinner"></div>Loading friends...</div>');
+  const [friends, requests, sessions] = await Promise.all([api('/friends'), api('/friends/requests'), api('/sessions')]);
 
-  // Load all three independently \u2014 any can fail without blocking others
-  const [friendsRes, requestsRes, sessionsRes] = await Promise.all([
-    safeApi('/friends', { _timeout: 10000 }),
-    safeApi('/friends/requests', { _timeout: 10000 }),
-    safeApi('/sessions', { _timeout: 5000 }),
-  ]);
-
-  const friendCount = (friendsRes.data?.friends || []).length;
-  const reqCount = (requestsRes.data?.requests || []).length;
-  const sessCount = (sessionsRes.data?.sessions || []).length;
+  // Sub-tabs
+  const friendCount = (friends.friends || []).length;
+  const reqCount = (requests.requests || []).length;
+  const sessCount = (sessions.sessions || []).length;
 
   html('#friends-tabs', \\\`
     <button class="filter-btn \${friendsSubTab==='friends'?'active':''}" onclick="friendsSubTab='friends';loadFriends()">\u{1F465} Friends (<span id="fc">\${friendCount}</span>)</button>
@@ -10397,29 +10451,13 @@ async function loadFriends() {
     <button class="filter-btn \${friendsSubTab==='sessions'?'active':''}" onclick="friendsSubTab='sessions';loadFriends()">\u{1F517} Sessions (<span id="sc">\${sessCount}</span>)</button>
   \\\`);
 
-  window._friendsData = friendsRes.data || {};
-  window._requestsData = requestsRes.data || {};
-  window._sessionsData = sessionsRes.data || {};
+  window._friendsData = friends;
+  window._requestsData = requests;
+  window._sessionsData = sessions;
 
-  if (friendsSubTab === 'friends') {
-    if (friendsRes.error) {
-      html(el, '<div class="toolbar"><button class="btn btn-sm btn-default" onclick="loadFriends()">\u{1F504} Retry</button></div>' + errorBlock('Cannot Load Friends', friendsRes.error + ' \u2014 AICQ remote server is unreachable. Check your network or server status.'));
-    } else {
-      renderFriendsList(friendsRes.data.friends || []);
-    }
-  } else if (friendsSubTab === 'requests') {
-    if (requestsRes.error) {
-      html(el, '<div class="toolbar"><button class="btn btn-sm btn-default" onclick="loadFriends()">\u{1F504} Retry</button></div>' + errorBlock('Cannot Load Requests', requestsRes.error));
-    } else {
-      renderRequestsList(requestsRes.data.requests || []);
-    }
-  } else {
-    if (sessionsRes.error) {
-      html(el, '<div class="toolbar"><button class="btn btn-sm btn-default" onclick="loadFriends()">\u{1F504} Retry</button></div>' + errorBlock('Cannot Load Sessions', sessionsRes.error));
-    } else {
-      renderSessionsList(sessionsRes.data.sessions || []);
-    }
-  }
+  if (friendsSubTab === 'friends') renderFriendsList(friends.friends || []);
+  else if (friendsSubTab === 'requests') renderRequestsList(requests.requests || []);
+  else renderSessionsList(sessions.sessions || []);
 }
 window.friendsSubTab = 'friends';
 
@@ -10616,7 +10654,12 @@ function renderModels(data) {
         <td class="mono">\${escHtml(m.modelId)}</td>
         <td><span class="badge badge-ok">\u25CF Key set</span></td>
         <td class="mono" style="font-size:11px">\${escHtml(m.baseUrl || 'default')}</td>
-        <td><button class="btn btn-sm btn-ghost" onclick="showModelConfigModal('\${escHtml(m.providerId)}')">Edit</button></td>
+        <td>
+          <div class="actions-cell">
+            <button class="btn btn-sm btn-ghost" onclick="showModelConfigModal('\${escHtml(m.providerId)}')">Edit</button>
+            <button class="btn btn-sm btn-danger" onclick="deleteModelProvider('\${escHtml(m.providerId)}')" title="Delete">\u{1F5D1}\uFE0F</button>
+          </div>
+        </td>
       </tr>\\\`;
     });
     activeModelsSection = \\\`
@@ -10671,180 +10714,661 @@ async function saveModelConfig() {
   if (r.success) { toast(r.message || 'Configuration saved!', 'ok'); loadModels(); }
   else { toast(r.message || r.error || 'Failed to save', 'err'); }
 }
+async function deleteModelProvider(providerId) {
+  if (!confirm('Delete configuration for provider "' + providerId + '"? This will remove its API key and model settings.')) return;
+  const r = await api('/models/' + encodeURIComponent(providerId), { method: 'DELETE' });
+  if (r.success) { toast('Provider configuration deleted', 'ok'); loadModels(); }
+  else { toast(r.message || r.error || 'Delete failed', 'err'); }
+}
 
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
-// PAGE: Settings \u2014 with Update button
+// PAGE: Settings (comprehensive with AJAX, tabs, live test)
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
-let _updating = false;
+let _settingsSaving = false;
+let _settingsData = null;
+let _settingsTab = 'connection';
+
+function formatBytes(bytes) {
+  if (!bytes || bytes === 0) return '0 B';
+  const k = 1024, sizes = ['B', 'KB', 'MB', 'GB'];
+  const i = Math.floor(Math.log(bytes) / Math.log(k));
+  return parseFloat((bytes / Math.pow(k, i)).toFixed(1)) + ' ' + sizes[i];
+}
+
+function formatUptime(seconds) {
+  if (!seconds) return '\u2014';
+  const d = Math.floor(seconds / 86400), h = Math.floor((seconds % 86400) / 3600);
+  const m = Math.floor((seconds % 3600) / 60), s = seconds % 60;
+  let parts = [];
+  if (d > 0) parts.push(d + 'd');
+  if (h > 0) parts.push(h + 'h');
+  if (m > 0) parts.push(m + 'm');
+  parts.push(s + 's');
+  return parts.join(' ');
+}
 
 async function loadSettings() {
   const el = $('#settings-content');
-  // Render skeleton immediately
-  html(el, \\\`
-    <p class="section-desc">AICQ plugin runtime configuration and system information.</p>
-    <div class="card" id="settings-update-card"><div class="loading-mask" style="padding:20px"><div class="spinner"></div>Loading...</div></div>
-    <div id="settings-rest"></div>
+  html(el, '<div class="loading-mask"><div class="spinner"></div>Loading settings...</div>');
+
+  const settings = await api('/settings');
+  if (settings.error) {
+    html(el, '<div class="empty"><div class="icon">\u26A0\uFE0F</div><p>' + escHtml(settings.error) + '</p></div>');
+    return;
+  }
+
+  _settingsData = settings;
+
+  // Render settings tabs nav
+  html('#settings-tabs', \\\`
+    <button class="filter-btn \${_settingsTab==='connection'?'active':''}" onclick="_settingsTab='connection';renderSettingsTab()">\u{1F50C} Connection</button>
+    <button class="filter-btn \${_settingsTab==='friends'?'active':''}" onclick="_settingsTab='friends';renderSettingsTab()">\u{1F465} Friends</button>
+    <button class="filter-btn \${_settingsTab==='security'?'active':''}" onclick="_settingsTab='security';renderSettingsTab()">\u{1F512} Security</button>
+    <button class="filter-btn \${_settingsTab==='advanced'?'active':''}" onclick="_settingsTab='advanced';renderSettingsTab()">\u2699\uFE0F Advanced</button>
+    <button class="filter-btn \${_settingsTab==='json'?'active':''}" onclick="_settingsTab='json';renderSettingsTab()">\u{1F4DD} JSON Editor</button>
   \\\`);
 
-  // Load update check, status, identity, config \u2014 all independently
-  const [updateRes, statusRes, identityRes, configRes, pluginRes] = await Promise.all([
-    safeApi('/update/check', { _timeout: 15000 }),
-    safeApi('/status', { _timeout: 5000 }),
-    safeApi('/identity', { _timeout: 5000 }),
-    safeApi('/config', { _timeout: 5000 }),
-    safeApi('/plugin-info', { _timeout: 5000 }),
-  ]);
+  renderSettingsTab();
+}
+
+function renderSettingsTab() {
+  // Update tab buttons
+  html('#settings-tabs', \\\`
+    <button class="filter-btn \${_settingsTab==='connection'?'active':''}" onclick="_settingsTab='connection';renderSettingsTab()">\u{1F50C} Connection</button>
+    <button class="filter-btn \${_settingsTab==='friends'?'active':''}" onclick="_settingsTab='friends';renderSettingsTab()">\u{1F465} Friends</button>
+    <button class="filter-btn \${_settingsTab==='security'?'active':''}" onclick="_settingsTab='security';renderSettingsTab()">\u{1F512} Security</button>
+    <button class="filter-btn \${_settingsTab==='advanced'?'active':''}" onclick="_settingsTab='advanced';renderSettingsTab()">\u2699\uFE0F Advanced</button>
+    <button class="filter-btn \${_settingsTab==='json'?'active':''}" onclick="_settingsTab='json';renderSettingsTab()">\u{1F4DD} JSON Editor</button>
+  \\\`);
 
-  // \u2500\u2500 Update Card \u2500\u2500
-  const updateCard = $('#settings-update-card');
-  if (updateCard) {
-    const upd = updateRes.data || {};
-    const pInfo = pluginRes.data || {};
-    const currentVer = pInfo.version || upd.currentVersion || 'unknown';
-    const latestVer = upd.latestVersion || currentVer;
-    const hasUpdate = upd.updateAvailable;
+  switch (_settingsTab) {
+    case 'connection': renderSettingsConnection(); break;
+    case 'friends': renderSettingsFriends(); break;
+    case 'security': renderSettingsSecurity(); break;
+    case 'advanced': renderSettingsAdvanced(); break;
+    case 'json': renderSettingsJsonEditor(); break;
+  }
+}
+
+function sectionSaveBtn(section, id) {
+  return \\\`<button class="btn btn-primary btn-sm" id="btn-save-\${id}" onclick="saveSettingsSection('\${section}', '\${id}')">\u{1F4BE} Save</button>
+    <span id="status-\${id}" style="font-size:12px;color:var(--text3);margin-left:8px"></span>\\\`;
+}
+
+// \u2500\u2500 CONNECTION TAB \u2500\u2500
+function renderSettingsConnection() {
+  const s = _settingsData;
+  const el = $('#settings-content');
+
+  html(el, \\\`
+    <p class="section-desc">Configure server connection and WebSocket settings. Changes require a plugin restart to take full effect.</p>
 
-    updateCard.innerHTML = \\\`
+    <div class="card">
       <div class="card-header">
-        <div class="card-title">\u{1F504} Plugin Update</div>
-        <div style="display:flex;gap:6px;align-items:center">
-          <span class="badge badge-\${hasUpdate ? 'warn' : 'ok'}">\${hasUpdate ? 'Update Available!' : 'Up to date'}</span>
+        <div class="card-title">\u{1F310} Server Connection</div>
+        <span class="badge badge-\${s.connected ? 'ok' : 'danger'}">\${s.connected ? '\u25CF Connected' : '\u25CB Disconnected'}</span>
+      </div>
+      <div class="form-group">
+        <label>Server URL</label>
+        <div style="display:flex;gap:8px;align-items:start">
+          <div style="flex:1">
+            <div class="input-prefix">
+              <span class="prefix">\u{1F310}</span>
+              <input type="url" id="set-server-url" value="\${escHtml(s.serverUrl || '')}" placeholder="https://aicq.online">
+            </div>
+            <div class="hint">The HTTPS URL of the AICQ relay server. WebSocket path /ws is auto-appended.</div>
+          </div>
+          <button class="btn btn-ok btn-sm" id="btn-test-conn" onclick="testConnection()" style="white-space:nowrap;margin-top:1px">\u{1F50D} Test</button>
+        </div>
+        <div id="conn-test-result" style="margin-top:8px"></div>
+      </div>
+
+      <div class="form-row">
+        <div class="form-group">
+          <label>Connection Timeout (seconds)</label>
+          <input type="number" id="set-connection-timeout" value="\${s.connectionTimeout || 30}" min="5" max="120" placeholder="30">
+          <div class="hint">HTTP request timeout (5\u2013120s). Default: 30s.</div>
+        </div>
+        <div class="form-group">
+          <label>WS Auto-Reconnect</label>
+          <div style="display:flex;align-items:center;gap:10px;margin-top:6px">
+            <label class="toggle-label">
+              <input type="checkbox" id="set-ws-auto-reconnect" \${s.wsAutoReconnect ? 'checked' : ''}>
+              <span class="toggle-slider"></span>
+              <span>Auto-reconnect when disconnected</span>
+            </label>
+          </div>
+          <div class="hint">Automatically reconnect WebSocket on disconnection.</div>
         </div>
       </div>
-      <div class="detail-row"><div class="detail-key">Current Version</div><div class="detail-val mono">\${escHtml(currentVer)}</div></div>
-      <div class="detail-row"><div class="detail-key">Latest Version</div><div class="detail-val mono">\${escHtml(latestVer)}</div></div>
-      <div class="detail-row"><div class="detail-key">Package</div><div class="detail-val mono">aicq-openclaw-plugin</div></div>
-      \${pluginRes.error ? '' : \\\`
-      <div class="detail-row"><div class="detail-key">Node.js</div><div class="detail-val mono">\${escHtml(pInfo.nodeVersion || '\u2014')}</div></div>
-      <div class="detail-row"><div class="detail-key">Uptime</div><div class="detail-val">\${pInfo.uptime ? Math.floor(pInfo.uptime / 3600) + 'h ' + Math.floor((pInfo.uptime % 3600) / 60) + 'm' : '\u2014'}</div></div>
-      \\\`}
-      <div style="margin-top:16px;display:flex;gap:8px;flex-wrap:wrap">
-        <button class="btn btn-primary" id="btn-check-update" onclick="checkForUpdates()">\u{1F50D} Check for Updates</button>
-        <button class="btn btn-ok \${hasUpdate ? '' : 'btn-ghost'}" id="btn-do-update" onclick="doUpdate(false)">\u{1F4E5} \${hasUpdate ? 'Update to v' + escHtml(latestVer) : 'Incremental Update'}</button>
-        <button class="btn btn-warn" id="btn-force-update" onclick="doUpdate(true)">\u{1F503} Force Reinstall</button>
+
+      <div class="form-group">
+        <label>WS Reconnect Interval (seconds)</label>
+        <input type="number" id="set-ws-reconnect-interval" value="\${s.wsReconnectInterval || 60}" min="5" max="600" placeholder="60">
+        <div class="hint">Interval between reconnection attempts (5\u2013600s). Default: 60s.</div>
       </div>
-      <div id="update-output" style="display:none;margin-top:12px;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius);padding:12px;max-height:300px;overflow-y:auto">
-        <pre style="font-size:12px;color:var(--text2);white-space:pre-wrap;margin:0" id="update-log"></pre>
+
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('connection', 'conn')}
       </div>
-    \\\`;
-  }
+    </div>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F4C1} Config File</div></div>
+      <div class="detail-row"><div class="detail-key">Source</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(s.configPath || '')}')">\${escHtml(s.configPath || 'Not found')} \u{1F4CB}</div></div>
+      <div class="detail-row"><div class="detail-key">Plugin Version</div><div class="detail-val">1.1.1</div></div>
+      <div class="detail-row"><div class="detail-key">Management UI</div><div class="detail-val" id="mgmt-url-display" style="cursor:pointer" onclick="copyText(document.getElementById('mgmt-url-display')?.textContent || '')"></div></div>
+      <div class="detail-row"><div class="detail-key">Uptime</div><div class="detail-val">\${formatUptime(s.uptimeSeconds)}</div></div>
+    </div>
+  \\\`);
+}
+
+async function testConnection() {
+  const btn = $('#btn-test-conn');
+  const resultEl = $('#conn-test-result');
+  const url = $('#set-server-url')?.value?.trim() || _settingsData.serverUrl;
+
+  if (!url) { toast('Enter a server URL first', 'warn'); return; }
 
-  // \u2500\u2500 Rest of settings \u2500\u2500
-  const restEl = $('#settings-rest');
-  if (!restEl) return;
-  let out = '';
+  if (btn) { btn.disabled = true; btn.innerHTML = '<span class="spinner" style="width:14px;height:14px;border-width:2px;margin:0"></span> Testing...'; }
+  if (resultEl) html(resultEl, '<div style="font-size:12px;color:var(--text3);display:flex;align-items:center;gap:6px"><span class="spinner" style="width:12px;height:12px;border-width:2px"></span> Testing connection to ' + escHtml(url) + '...</div>');
 
-  // Connection section
-  if (statusRes.error) {
-    out += errorBlock('Connection Status Unavailable', statusRes.error);
+  const r = await api('/settings/test-connection', {
+    method: 'POST',
+    body: JSON.stringify({ serverUrl: url, timeout: 10000 }),
+  });
+
+  if (btn) { btn.disabled = false; btn.innerHTML = '\u{1F50D} Test'; }
+
+  if (r.success) {
+    const latencyBadge = r.latency < 200 ? '<span class="badge badge-ok">' + r.latency + 'ms</span>' : r.latency < 1000 ? '<span class="badge badge-warn">' + r.latency + 'ms</span>' : '<span class="badge badge-danger">' + r.latency + 'ms</span>';
+    if (resultEl) html(resultEl, \\\`
+      <div style="display:flex;align-items:center;gap:10px;font-size:12px;color:var(--ok)">
+        <span class="dot dot-ok"></span> Connected successfully \${latencyBadge}
+        \${r.serverInfo?.version ? '<span class="tag">v' + escHtml(r.serverInfo.version) + '</span>' : ''}
+      </div>
+    \\\`);
+    toast('Connection OK! Latency: ' + r.latency + 'ms', 'ok');
   } else {
-    const s = statusRes.data;
-    out += \\\`
-      <div class="card">
-        <div class="card-header"><div class="card-title">\u{1F50C} Connection Settings</div></div>
-        <div class="detail-row"><div class="detail-key">Server URL</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(s.serverUrl)}')">\${escHtml(s.serverUrl)} \u{1F4CB}</div></div>
-        <div class="detail-row"><div class="detail-key">WebSocket Status</div><div class="detail-val"><span class="badge badge-\${s.connected ? 'ok' : 'danger'}">\${s.connected ? 'Connected' : 'Disconnected'}</span></div></div>
+    const cls = r.status === 'timeout' ? 'warn' : 'danger';
+    const icon = r.status === 'timeout' ? '\u23F1\uFE0F' : '\u274C';
+    if (resultEl) html(resultEl, \\\`
+      <div style="font-size:12px;color:var(--\${cls});display:flex;align-items:center;gap:8px">
+        \${icon} \${escHtml(r.message || 'Connection failed')}
+        <span class="badge badge-ghost">\${r.latency}ms</span>
       </div>
-    \\\`;
+    \\\`);
+    toast(r.message || 'Connection failed', 'err');
   }
+}
 
-  // Identity section
-  if (identityRes.error) {
-    out += errorBlock('Agent Identity Unavailable', identityRes.error);
-  } else {
-    const i = identityRes.data;
-    out += \\\`
-      <div class="card">
-        <div class="card-header"><div class="card-title">\u{1F916} Agent Identity</div></div>
-        <div class="detail-row"><div class="detail-key">Agent ID</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(i.agentId)}')">\${escHtml(i.agentId)} \u{1F4CB}</div></div>
-        <div class="detail-row"><div class="detail-key">Public Key Fingerprint</div><div class="detail-val mono">\${escHtml(i.publicKeyFingerprint)}</div></div>
+// \u2500\u2500 FRIENDS TAB \u2500\u2500
+function renderSettingsFriends() {
+  const s = _settingsData;
+  const el = $('#settings-content');
+
+  html(el, \\\`
+    <p class="section-desc">Configure friend management, permissions, and temporary number settings.</p>
+
+    <div class="stats-grid" style="margin-bottom:20px">
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--ok-bg)">\u{1F465}</div>
+        <div class="stat-label">Friends</div>
+        <div class="stat-value">\${s.friendCount || 0}</div>
+        <div class="stat-sub">of \${s.maxFriends || 200} max</div>
       </div>
-    \\\`;
-  }
+      <div class="stat-card">
+        <div class="stat-icon" style="background:var(--info-bg)">\u{1F517}</div>
+        <div class="stat-label">Sessions</div>
+        <div class="stat-value">\${s.sessionCount || 0}</div>
+        <div class="stat-sub">Encrypted sessions</div>
+      </div>
+    </div>
 
-  // Config file section
-  if (configRes.error) {
-    out += errorBlock('Config File Not Found', configRes.error);
-  } else {
-    const c = configRes.data;
-    out += \\\`
-      <div class="card">
-        <div class="card-header"><div class="card-title">\u{1F4C1} Config File</div></div>
-        <div class="detail-row"><div class="detail-key">Source</div><div class="detail-val" style="cursor:pointer" onclick="copyText('\${escHtml(c.configPath || '')}')">\${escHtml(c.configPath || 'Not found')} \u{1F4CB}</div></div>
-        <div class="detail-row"><div class="detail-key">Config Size</div><div class="detail-val">\${c.configSize || 0} bytes</div></div>
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F465} Friend Limits & Permissions</div></div>
+      <div class="form-row">
+        <div class="form-group">
+          <label>Max Friends</label>
+          <input type="number" id="set-max-friends" value="\${s.maxFriends || 200}" min="1" max="10000" placeholder="200">
+          <div class="hint">Maximum number of encrypted friend connections (1\u201310,000).</div>
+        </div>
+        <div class="form-group">
+          <label>Auto-Accept Friends</label>
+          <div style="display:flex;align-items:center;gap:10px;margin-top:6px">
+            <label class="toggle-label">
+              <input type="checkbox" id="set-auto-accept" \${s.autoAcceptFriends ? 'checked' : ''}>
+              <span class="toggle-slider"></span>
+              <span>Automatically accept requests</span>
+            </label>
+          </div>
+          <div class="hint">When enabled, incoming friend requests are accepted without review.</div>
+        </div>
       </div>
-    \\\`;
-  }
+      <div class="form-group">
+        <label>Default Permissions for New Friends</label>
+        <div style="display:flex;gap:16px;margin-top:6px;flex-wrap:wrap">
+          <label class="toggle-label">
+            <input type="checkbox" id="set-perm-chat" \${(s.defaultPermissions || []).includes('chat') ? 'checked' : ''}>
+            <span class="toggle-slider"></span>
+            <span>\u{1F4AC} Chat</span>
+          </label>
+          <label class="toggle-label">
+            <input type="checkbox" id="set-perm-exec" \${(s.defaultPermissions || []).includes('exec') ? 'checked' : ''}>
+            <span class="toggle-slider"></span>
+            <span>\u{1F527} Exec</span>
+          </label>
+        </div>
+        <div class="hint">Default permissions applied when auto-accepting new friend requests.</div>
+      </div>
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('friends', 'friends')}
+      </div>
+    </div>
 
-  // Statistics section
-  if (!statusRes.error) {
-    const s = statusRes.data;
-    out += \\\`
-      <div class="card">
-        <div class="card-header"><div class="card-title">\u{1F4CA} Statistics</div></div>
-        <div class="detail-row"><div class="detail-key">Friends Count</div><div class="detail-val">\${s.friendCount || 0}</div></div>
-        <div class="detail-row"><div class="detail-key">Active Sessions</div><div class="detail-val">\${s.sessionCount || 0}</div></div>
-        <div class="detail-row"><div class="detail-key">Plugin Version</div><div class="detail-val">\${escHtml(pluginRes.data?.version || 'unknown')}</div></div>
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F522} Temporary Numbers</div></div>
+      <div class="form-group">
+        <label>Temp Number Expiry (seconds)</label>
+        <input type="number" id="set-temp-expiry" value="\${s.tempNumberExpiry || 300}" min="60" max="3600" placeholder="300">
+        <div class="hint">How long a temporary friend number remains valid (60\u20133600s). Default: 5 minutes.</div>
+      </div>
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('temp', 'temp')}
+      </div>
+    </div>
+  \\\`);
+}
+
+// \u2500\u2500 SECURITY TAB \u2500\u2500
+function renderSettingsSecurity() {
+  const s = _settingsData;
+  const el = $('#settings-content');
+
+  html(el, \\\`
+    <p class="section-desc">Configure encryption, P2P, and identity security settings.</p>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F916} Agent Identity</div></div>
+      <div class="detail-row"><div class="detail-key">Agent ID</div><div class="detail-val mono" style="cursor:pointer" onclick="copyText('\${escHtml(s.agentId)}')">\${escHtml(s.agentId)} \u{1F4CB}</div></div>
+      <div class="detail-row"><div class="detail-key">Public Key Fingerprint</div><div class="detail-val mono">\${escHtml(s.publicKeyFingerprint || '\u2014')}</div></div>
+      <div style="padding-top:12px;display:flex;gap:8px">
+        <button class="btn btn-danger btn-sm" onclick="showResetIdentityModal()">\u{1F5D1}\uFE0F Reset Identity</button>
+        <span style="font-size:12px;color:var(--text3);display:flex;align-items:center">\u26A0\uFE0F This deletes all friends, sessions, and keys permanently</span>
+      </div>
+    </div>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F512} P2P & Encryption</div></div>
+      <div class="form-row">
+        <div class="form-group">
+          <label>Enable P2P Connections</label>
+          <div style="display:flex;align-items:center;gap:10px;margin-top:6px">
+            <label class="toggle-label">
+              <input type="checkbox" id="set-enable-p2p" \${s.enableP2P ? 'checked' : ''}>
+              <span class="toggle-slider"></span>
+              <span>Allow direct P2P messaging</span>
+            </label>
+          </div>
+          <div class="hint">Enable peer-to-peer encrypted connections when both parties are online.</div>
+        </div>
+        <div class="form-group">
+          <label>Handshake Timeout (seconds)</label>
+          <input type="number" id="set-handshake-timeout" value="\${s.handshakeTimeout || 60}" min="10" max="300" placeholder="60">
+          <div class="hint">Noise-XK handshake timeout (10\u2013300s). Default: 60s.</div>
+        </div>
+      </div>
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('security', 'sec')}
+      </div>
+    </div>
+  \\\`);
+}
+
+// \u2500\u2500 ADVANCED TAB \u2500\u2500
+function renderSettingsAdvanced() {
+  const s = _settingsData;
+  const el = $('#settings-content');
+
+  html(el, \\\`
+    <p class="section-desc">Advanced settings for file transfer, logging, and configuration management.</p>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F4CE} File Transfer</div></div>
+      <div class="form-row">
+        <div class="form-group">
+          <label>Enable File Transfer</label>
+          <div style="display:flex;align-items:center;gap:10px;margin-top:6px">
+            <label class="toggle-label">
+              <input type="checkbox" id="set-enable-ft" \${s.enableFileTransfer ? 'checked' : ''}>
+              <span class="toggle-slider"></span>
+              <span>Allow file transfers</span>
+            </label>
+          </div>
+          <div class="hint">Enable encrypted file transfer between friends.</div>
+        </div>
+        <div class="form-group">
+          <label>Max File Size</label>
+          <select id="set-max-file-size">
+            <option value="10485760" \${s.maxFileSize <= 10485760 ? 'selected' : ''}>10 MB</option>
+            <option value="52428800" \${s.maxFileSize > 10485760 && s.maxFileSize <= 52428800 ? 'selected' : ''}>50 MB</option>
+            <option value="104857600" \${s.maxFileSize > 52428800 && s.maxFileSize <= 104857600 ? 'selected' : ''}>100 MB</option>
+            <option value="524288000" \${s.maxFileSize > 104857600 && s.maxFileSize <= 524288000 ? 'selected' : ''}>500 MB</option>
+            <option value="1073741824" \${s.maxFileSize > 524288000 ? 'selected' : ''}>1 GB</option>
+          </select>
+          <div class="hint">Maximum file size for encrypted transfers. Current: \${formatBytes(s.maxFileSize)}.</div>
+        </div>
+      </div>
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('filetransfer', 'ft')}
+      </div>
+    </div>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F4CB} Logging</div></div>
+      <div class="form-group">
+        <label>Log Level</label>
+        <select id="set-log-level" style="max-width:300px">
+          <option value="debug" \${s.logLevel === 'debug' ? 'selected' : ''}>\u{1F41B} Debug \u2014 Verbose output for troubleshooting</option>
+          <option value="info" \${s.logLevel === 'info' ? 'selected' : ''}>\u2139\uFE0F Info \u2014 General information (default)</option>
+          <option value="warn" \${s.logLevel === 'warn' ? 'selected' : ''}>\u26A0\uFE0F Warn \u2014 Warnings and important events</option>
+          <option value="error" \${s.logLevel === 'error' ? 'selected' : ''}>\u274C Error \u2014 Errors only</option>
+          <option value="none" \${s.logLevel === 'none' ? 'selected' : ''}>\u{1F507} None \u2014 Disable all logging</option>
+        </select>
+        <div class="hint">Controls the verbosity of plugin log output.</div>
+      </div>
+      <div style="display:flex;justify-content:flex-end;padding-top:8px;border-top:1px solid var(--border);margin-top:8px">
+        \${sectionSaveBtn('logging', 'log')}
+      </div>
+    </div>
+
+    <div class="card">
+      <div class="card-header"><div class="card-title">\u{1F4E6} Import / Export Settings</div></div>
+      <div style="display:flex;gap:10px;flex-wrap:wrap">
+        <button class="btn btn-default btn-sm" onclick="exportSettings()">\u{1F4E5} Export Settings</button>
+        <button class="btn btn-ok btn-sm" onclick="showImportSettingsModal()">\u{1F4E4} Import Settings</button>
       </div>
-    \\\`;
+      <div class="hint" style="margin-top:10px">Export current AICQ plugin settings as JSON. Import to restore settings from a backup.</div>
+    </div>
+  \\\`);
+}
+
+// \u2500\u2500 Section Save (AJAX) \u2500\u2500
+async function saveSettingsSection(section, id) {
+  const btn = $('#btn-save-' + id);
+  const statusEl = $('#status-' + id);
+  if (btn) { btn.disabled = true; btn.textContent = 'Saving...'; }
+  if (statusEl) { statusEl.textContent = ''; statusEl.style.color = 'var(--text3)'; }
+
+  let data = {};
+  switch (section) {
+    case 'connection':
+      data = {
+        serverUrl: $('#set-server-url')?.value?.trim(),
+        connectionTimeout: parseInt($('#set-connection-timeout')?.value, 10),
+        wsAutoReconnect: $('#set-ws-auto-reconnect')?.checked ?? true,
+        wsReconnectInterval: parseInt($('#set-ws-reconnect-interval')?.value, 10),
+      };
+      break;
+    case 'friends':
+      data = {
+        maxFriends: parseInt($('#set-max-friends')?.value, 10),
+        autoAcceptFriends: $('#set-auto-accept')?.checked ?? false,
+        defaultPermissions: [
+          ...(($('#set-perm-chat')?.checked) ? ['chat'] : []),
+          ...(($('#set-perm-exec')?.checked) ? ['exec'] : []),
+        ],
+      };
+      break;
+    case 'temp':
+      data = { tempNumberExpiry: parseInt($('#set-temp-expiry')?.value, 10) };
+      break;
+    case 'security':
+      data = {
+        enableP2P: $('#set-enable-p2p')?.checked ?? true,
+        handshakeTimeout: parseInt($('#set-handshake-timeout')?.value, 10),
+      };
+      break;
+    case 'filetransfer':
+      data = {
+        enableFileTransfer: $('#set-enable-ft')?.checked ?? true,
+        maxFileSize: parseInt($('#set-max-file-size')?.value, 10),
+      };
+      break;
+    case 'logging':
+      data = { logLevel: $('#set-log-level')?.value || 'info' };
+      break;
   }
 
-  restEl.innerHTML = out;
+  const r = await api('/settings/section', {
+    method: 'POST',
+    body: JSON.stringify({ section, data }),
+  });
+
+  if (btn) { btn.disabled = false; btn.textContent = '\u{1F4BE} Save'; }
+
+  if (r.success) {
+    toast('Settings saved: ' + section, 'ok');
+    if (statusEl) { statusEl.textContent = '\u2713 Saved'; statusEl.style.color = 'var(--ok)'; }
+    // Refresh settings data
+    const fresh = await api('/settings');
+    if (fresh && !fresh.error) { _settingsData = fresh; }
+  } else {
+    toast(r.message || r.error || 'Save failed', 'err');
+    if (statusEl) { statusEl.textContent = '\u2717 ' + (r.message || 'Failed'); statusEl.style.color = 'var(--danger)'; }
+  }
 }
 
-async function checkForUpdates() {
-  const btn = $('#btn-check-update');
-  if (btn) { btn.disabled = true; btn.textContent = '\u{1F50D} Checking...'; }
-  toast('Checking for updates...', 'info');
-  const data = await api('/update/check', { _timeout: 15000 });
-  if (data.error) { toast('Check failed: ' + data.error, 'err'); }
-  else if (data.updateAvailable) { toast('New version available: v' + data.latestVersion, 'ok'); }
-  else { toast('Plugin is up to date (v' + data.currentVersion + ')', 'ok'); }
-  if (btn) { btn.disabled = false; btn.textContent = '\u{1F50D} Check for Updates'; }
-  loadSettings();
+// \u2500\u2500 Full Save All (legacy support) \u2500\u2500
+async function saveSettings() {
+  if (_settingsSaving) return;
+  _settingsSaving = true;
+
+  const allData = {
+    serverUrl: $('#set-server-url')?.value?.trim(),
+    maxFriends: parseInt($('#set-max-friends')?.value, 10),
+    autoAcceptFriends: $('#set-auto-accept')?.checked ?? false,
+  };
+
+  const r = await api('/settings', { method: 'PUT', body: JSON.stringify(allData) });
+  _settingsSaving = false;
+
+  if (r.success) { toast('All settings saved!', 'ok'); setTimeout(() => loadSettings(), 800); }
+  else { toast(r.message || r.error || 'Save failed', 'err'); }
+}
+
+// \u2500\u2500 Reset Identity \u2500\u2500
+function showResetIdentityModal() {
+  $('#reset-confirm-input').value = '';
+  $('#reset-confirm-btn').disabled = true;
+  $('#reset-confirm-btn').textContent = '\u{1F5D1}\uFE0F Delete Everything';
+  showModal('modal-reset-identity');
+  setTimeout(() => $('#reset-confirm-input')?.focus(), 100);
 }
 
-async function doUpdate(force) {
-  if (_updating) { toast('Update already in progress...', 'warn'); return; }
-  const label = force ? 'Force reinstall' : 'Incremental update';
-  if (!confirm(label + ' aicq-openclaw-plugin? This will download and install the latest version from npm.')) return;
-
-  _updating = true;
-  const btnDo = $('#btn-do-update');
-  const btnForce = $('#btn-force-update');
-  if (btnDo) btnDo.disabled = true;
-  if (btnForce) btnForce.disabled = true;
-
-  const outputEl = $('#update-output');
-  const logEl = $('#update-log');
-  if (outputEl) outputEl.style.display = 'block';
-  if (logEl) logEl.textContent = 'Starting ' + label.toLowerCase() + '...
-';
-  toast(label + ' starting...', 'info');
-
-  const r = await api('/update', {
+function checkResetConfirm() {
+  const v = $('#reset-confirm-input')?.value?.trim();
+  const btn = $('#reset-confirm-btn');
+  if (btn) { btn.disabled = (v !== 'RESET'); btn.textContent = v === 'RESET' ? '\u{1F5D1}\uFE0F Confirm Delete' : '\u{1F5D1}\uFE0F Delete Everything'; }
+}
+
+async function executeResetIdentity() {
+  const btn = $('#reset-confirm-btn');
+  if (btn) { btn.disabled = true; btn.textContent = 'Resetting...'; }
+
+  const r = await api('/settings/reset-identity', {
     method: 'POST',
-    body: JSON.stringify({ force }),
-    _timeout: 120000,
+    body: JSON.stringify({ confirm: true }),
   });
 
-  if (logEl) logEl.textContent = r.output || r.message || (r.success ? 'Done!' : 'Failed.');
+  if (btn) { btn.disabled = false; btn.textContent = '\u{1F5D1}\uFE0F Delete Everything'; }
+
   if (r.success) {
-    toast('Update successful! Restart the service to apply.', 'ok');
-    if (logEl) logEl.textContent += '
+    toast('Identity reset successfully. Please restart the plugin.', 'ok');
+    hideModal('modal-reset-identity');
+    // Reload settings to reflect cleared state
+    setTimeout(() => loadSettings(), 1000);
+  } else {
+    toast(r.message || r.error || 'Reset failed', 'err');
+  }
+}
+
+// \u2500\u2500 Export / Import \u2500\u2500
+async function exportSettings() {
+  const r = await api('/settings/export');
+  if (r.error) { toast(r.error, 'err'); return; }
+
+  const json = JSON.stringify(r.settings || r, null, 2);
+  const blob = new Blob([json], { type: 'application/json' });
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement('a');
+  a.href = url;
+  a.download = 'aicq-settings-' + new Date().toISOString().slice(0, 10) + '.json';
+  a.click();
+  URL.revokeObjectURL(url);
+  toast('Settings exported successfully', 'ok');
+}
+
+function showImportSettingsModal() {
+  $('#import-json-input').value = '';
+  showModal('modal-import-settings');
+  setTimeout(() => $('#import-json-input')?.focus(), 100);
+}
+
+async function executeImportSettings() {
+  const raw = $('#import-json-input')?.value?.trim();
+  if (!raw) { toast('Paste JSON settings first', 'warn'); return; }
 
-\u2705 ' + (r.message || 'Done! Please restart the service.');
+  let settings;
+  try { settings = JSON.parse(raw); } catch (e) { toast('Invalid JSON: ' + e.message, 'err'); return; }
+
+  const btn = $('#import-confirm-btn');
+  if (btn) { btn.disabled = true; btn.textContent = 'Importing...'; }
+
+  const r = await api('/settings/import', {
+    method: 'POST',
+    body: JSON.stringify({ settings, merge: true }),
+  });
+
+  if (btn) { btn.disabled = false; btn.textContent = '\u{1F4E4} Import'; }
+
+  if (r.success) {
+    toast('Settings imported successfully!', 'ok');
+    hideModal('modal-import-settings');
+    setTimeout(() => loadSettings(), 800);
   } else {
-    toast('Update failed: ' + (r.message || 'Unknown error'), 'err');
-    if (logEl) logEl.textContent += '
+    toast(r.message || r.error || 'Import failed', 'err');
+  }
+}
+
+// \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
+// JSON Config Editor
+// \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
+let _jsonEditorConfigFile = '';
+
+async function renderSettingsJsonEditor() {
+  const el = $('#settings-content');
+  html(el, '<div class="loading-mask"><div class="spinner"></div>Loading config...</div>');
+
+  const queryParams = _jsonEditorConfigFile ? '?file=' + encodeURIComponent(_jsonEditorConfigFile) : '';
+  const data = await api('/config-file/raw' + queryParams);
+  if (data.error) {
+    html(el, '<div class="empty"><div class="icon">\u26A0\uFE0F</div><p>' + escHtml(data.error) + '</p></div>');
+    return;
+  }
+
+  _jsonEditorConfigFile = data.fileName || '';
+  const hasMultipleFiles = data.availableFiles && data.availableFiles.length > 1;
+  let fileSelectorHtml = '';
+  if (hasMultipleFiles) {
+    const options = data.availableFiles.map(f =>
+      '<option value="' + escHtml(f) + '"' + (f === data.fileName ? ' selected' : '') + '>' + escHtml(f) + '</option>'
+    ).join('');
+    fileSelectorHtml = \\\`
+      <div class="form-group" style="margin-bottom:16px">
+        <label>\u{1F4C4} Config File</label>
+        <select id="json-editor-file-select" onchange="_jsonEditorConfigFile=this.value;renderSettingsJsonEditor()" style="max-width:300px">
+          \${options}
+        </select>
+      </div>\\\`;
+  }
+
+  html(el, \\\`    <p class="section-desc">
+      Edit the raw JSON configuration directly. Be careful with syntax \u2014 invalid JSON will be rejected.
+      <span class="badge badge-accent" style="margin-left:8px">\u{1F4C4} \${escHtml(data.fileName)}</span>
+    </p>
+
+    <div class="card">
+      <div class="card-header">
+        <div class="card-title">\u{1F4DD} Config JSON Editor</div>
+        <div style="display:flex;gap:8px;align-items:center">
+          <span class="mono" style="font-size:11px;color:var(--text3)">\${escHtml(data.filePath)}</span>
+          <button class="btn btn-sm btn-default" onclick="renderSettingsJsonEditor()">\u{1F504} Reload</button>
+        </div>
+      </div>
+      \${fileSelectorHtml}
+      <div class="form-group">
+        <label>Raw JSON Configuration</label>
+        <textarea id="json-editor" style="min-height:400px;font-family:'SF Mono','Fira Code','Cascadia Code',monospace;font-size:12px;line-height:1.5;tab-size:2;background:var(--bg)" spellcheck="false">\${escHtml(data.content)}</textarea>
+        <div class="hint">Directly edit the configuration JSON. Use the Format button to prettify.</div>
+      </div>
+      <div id="json-editor-status" style="margin-bottom:12px;font-size:12px"></div>
+      <div class="form-actions" style="justify-content:space-between">
+        <div style="display:flex;gap:8px">
+          <button class="btn btn-sm btn-default" onclick="formatJsonEditor()">\u{1F4D0} Format</button>
+          <button class="btn btn-sm btn-default" onclick="copyText($('#json-editor')?.value || '')">\u{1F4CB} Copy</button>
+        </div>
+        <div style="display:flex;gap:8px">
+          <button class="btn btn-sm btn-default" onclick="renderSettingsJsonEditor()">\u21A9\uFE0F Revert</button>
+          <button class="btn btn-sm btn-primary" id="btn-save-json" onclick="saveJsonConfig()">\u{1F4BE} Save Config</button>
+        </div>
+      </div>
+    </div>
+  \`);
+}
+
+function formatJsonEditor() {
+  const ta = $('#json-editor');
+  if (!ta) return;
+  try {
+    const obj = JSON.parse(ta.value);
+    ta.value = JSON.stringify(obj, null, 2);
+    toast('JSON formatted', 'ok');
+    $('#json-editor-status').innerHTML = '<span style="color:var(--ok)">\u2713 Valid JSON</span>';
+  } catch (e) {
+    toast('Invalid JSON: ' + e.message, 'err');
+    $('#json-editor-status').innerHTML = '<span style="color:var(--danger)">\u2717 ' + escHtml(e.message) + '</span>';
+  }
+}
 
-\u274C ' + (r.message || 'Failed.');
+async function saveJsonConfig() {
+  const btn = $('#btn-save-json');
+  const statusEl = $('#json-editor-status');
+  const raw = $('#json-editor')?.value;
+  if (!raw) { toast('No content to save', 'warn'); return; }
+
+  // Validate first
+  try { JSON.parse(raw); } catch (e) {
+    toast('Invalid JSON: ' + e.message, 'err');
+    if (statusEl) statusEl.innerHTML = '<span style="color:var(--danger)">\u2717 ' + escHtml(e.message) + '</span>';
+    return;
   }
 
-  _updating = false;
-  if (btnDo) btnDo.disabled = false;
-  if (btnForce) btnForce.disabled = false;
-  loadSettings();
+  if (btn) { btn.disabled = true; btn.textContent = 'Saving...'; }
+  if (statusEl) statusEl.innerHTML = '<span style="color:var(--text3)"><span class="spinner" style="width:12px;height:12px;border-width:2px;display:inline-block;vertical-align:middle;margin-right:6px"></span> Saving...</span>';
+
+  const queryParams = _jsonEditorConfigFile ? '?file=' + encodeURIComponent(_jsonEditorConfigFile) : '';
+  const r = await api('/config-file/raw' + queryParams, { method: 'PUT', body: JSON.stringify({ content: raw }) });
+
+  if (btn) { btn.disabled = false; btn.textContent = '\u{1F4BE} Save Config'; }
+
+  if (r.success) {
+    toast('Config saved successfully!', 'ok');
+    if (statusEl) statusEl.innerHTML = '<span style="color:var(--ok)">\u2713 Saved at ' + new Date().toLocaleTimeString() + '</span>';
+  } else {
+    toast(r.message || 'Save failed', 'err');
+    if (statusEl) statusEl.innerHTML = '<span style="color:var(--danger)">\u2717 ' + escHtml(r.message || 'Failed') + '</span>';
+  }
 }
 
 // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
@@ -10925,7 +11449,7 @@ var HTML = `<!DOCTYPE html>
     <div class="main-content">
 
       <!-- Dashboard -->
-      <div class="page active" id="page-dashboard"><div id="dashboard-content"></div></div>
+      <div class="page active" id="page-dashboard"><div id="dashboard-content"><div class="loading-mask"><div class="spinner"></div>Loading...</div></div></div>
 
       <!-- Agents -->
       <div class="page" id="page-agents"><div id="agents-content"></div></div>
@@ -10940,7 +11464,10 @@ var HTML = `<!DOCTYPE html>
       <div class="page" id="page-models"><div id="models-content"></div></div>
 
       <!-- Settings -->
-      <div class="page" id="page-settings"><div id="settings-content"></div></div>
+      <div class="page" id="page-settings">
+        <div id="settings-tabs" style="display:flex;gap:6px;margin-bottom:16px;flex-wrap:wrap"></div>
+        <div id="settings-content"></div>
+      </div>
 
     </div>
   </main>
@@ -11016,9 +11543,118 @@ var HTML = `<!DOCTYPE html>
   </div>
 </div>
 
+<!-- Modal: Reset Identity -->
+<div class="modal-overlay hidden" id="modal-reset-identity" onclick="if(event.target===this)hideModal('modal-reset-identity')">
+  <div class="modal">
+    <div class="modal-header"><h3>\u{1F5D1}\uFE0F Reset Agent Identity</h3><button class="modal-close" onclick="hideModal('modal-reset-identity')">\u2715</button></div>
+    <div style="margin-bottom:16px">
+      <div class="card" style="border-color:var(--danger);background:var(--danger-bg)">
+        <p style="font-size:13px;color:#fca5a5;line-height:1.6">
+          <strong>\u26A0\uFE0F WARNING: This is a destructive operation!</strong><br><br>
+          This will permanently delete:<br>
+          \u2022 Your Ed25519 key pair and agent ID<br>
+          \u2022 All friend connections and sessions<br>
+          \u2022 All pending friend requests<br>
+          \u2022 All temporary numbers<br><br>
+          After reset, you must restart the plugin to generate a new identity.
+        </p>
+      </div>
+    </div>
+    <div class="form-group">
+      <label>Type RESET to confirm</label>
+      <input id="reset-confirm-input" type="text" placeholder="RESET" oninput="checkResetConfirm()" autocomplete="off" style="border-color:var(--danger)">
+    </div>
+    <div class="form-actions">
+      <button class="btn btn-default" onclick="hideModal('modal-reset-identity')">Cancel</button>
+      <button class="btn btn-danger" id="reset-confirm-btn" onclick="executeResetIdentity()" disabled>\u{1F5D1}\uFE0F Delete Everything</button>
+    </div>
+  </div>
+</div>
+
+<!-- Modal: Import Settings -->
+<div class="modal-overlay hidden" id="modal-import-settings" onclick="if(event.target===this)hideModal('modal-import-settings')">
+  <div class="modal" style="max-width:580px">
+    <div class="modal-header"><h3>\u{1F4E4} Import Settings</h3><button class="modal-close" onclick="hideModal('modal-import-settings')">\u2715</button></div>
+    <div class="form-group">
+      <label>Paste JSON Settings</label>
+      <textarea id="import-json-input" rows="10" placeholder='{"serverUrl": "https://...", "maxFriends": 200, ...}' style="font-family:'SF Mono','Fira Code','Cascadia Code',monospace;font-size:12px;line-height:1.5"></textarea>
+      <div class="hint">Paste the JSON settings exported from another AICQ instance. Settings will be merged with existing values.</div>
+    </div>
+    <div class="form-actions">
+      <button class="btn btn-default" onclick="hideModal('modal-import-settings')">Cancel</button>
+      <button class="btn btn-primary" id="import-confirm-btn" onclick="executeImportSettings()">\u{1F4E4} Import</button>
+    </div>
+  </div>
+</div>
+
 <!-- Toast Container -->
 <div id="toast-container" class="toast-container"></div>
 
+<!-- Modal: Add/Edit Agent -->
+<div class="modal-overlay hidden" id="modal-add-agent" onclick="if(event.target===this)hideModal('modal-add-agent')">
+  <div class="modal">
+    <div class="modal-header"><h3 id="agent-form-title">\u2795 Add Agent</h3><button class="modal-close" onclick="hideModal('modal-add-agent')">\u2715</button></div>
+    <div class="form-group">
+      <label>Agent Name *</label>
+      <input type="text" id="agent-form-name" placeholder="e.g. My Assistant">
+    </div>
+    <div class="form-group">
+      <label>Agent ID</label>
+      <input type="text" id="agent-form-id" placeholder="auto-generated if empty">
+      <div class="hint">Unique identifier. Leave empty for auto-generation.</div>
+    </div>
+    <div class="form-row">
+      <div class="form-group">
+        <label>Model</label>
+        <input type="text" id="agent-form-model" placeholder="gpt-4o">
+      </div>
+      <div class="form-group">
+        <label>Provider</label>
+        <input type="text" id="agent-form-provider" placeholder="openai">
+      </div>
+    </div>
+    <div class="form-group">
+      <label>System Prompt</label>
+      <textarea id="agent-form-prompt" rows="4" placeholder="You are a helpful assistant..."></textarea>
+    </div>
+    <div class="form-row">
+      <div class="form-group">
+        <label>Temperature</label>
+        <input type="number" id="agent-form-temperature" min="0" max="2" step="0.1" value="0.7">
+        <div class="hint">0 = deterministic, 2 = creative. Default: 0.7</div>
+      </div>
+      <div class="form-group">
+        <label>Max Tokens</label>
+        <input type="number" id="agent-form-max-tokens" min="1" step="1" value="4096">
+        <div class="hint">Maximum response length. Default: 4096</div>
+      </div>
+    </div>
+    <div class="form-row">
+      <div class="form-group">
+        <label>Top P</label>
+        <input type="number" id="agent-form-top-p" min="0" max="1" step="0.05" value="1">
+        <div class="hint">Nucleus sampling. Default: 1</div>
+      </div>
+      <div class="form-group">
+        <label>Tools</label>
+        <input type="text" id="agent-form-tools" placeholder="web_search, code_exec, ...">
+        <div class="hint">Comma-separated list of tool names</div>
+      </div>
+    </div>
+    <div class="form-group">
+      <label class="toggle-label">
+        <input type="checkbox" id="agent-form-enabled" checked>
+        <span class="toggle-slider"></span>
+        <span>Enabled</span>
+      </label>
+    </div>
+    <div class="form-actions">
+      <button class="btn btn-default" onclick="hideModal('modal-add-agent')">Cancel</button>
+      <button class="btn btn-primary" onclick="saveAgent()">\u{1F4BE} Save Agent</button>
+    </div>
+  </div>
+</div>
+
 <script>${JS}</script>
 </body>
 </html>`;
@@ -11030,7 +11666,6 @@ function getManagementHTML() {
 import * as fs5 from "fs";
 import * as path5 from "path";
 import * as os from "os";
-import { execSync, exec } from "child_process";
 var MODEL_PROVIDERS = [
   { id: "openai", name: "OpenAI", description: "GPT-4o, GPT-4, GPT-3.5, o1, o3", apiKeyHint: "sk-...", modelHint: "gpt-4o", baseUrlHint: "https://api.openai.com/v1", configKey: "openai" },
   { id: "anthropic", name: "Anthropic", description: "Claude 4, Claude 3.5 Sonnet, Haiku, Opus", apiKeyHint: "sk-ant-...", modelHint: "claude-sonnet-4-20250514", baseUrlHint: "https://api.anthropic.com", configKey: "anthropic" },
@@ -11199,7 +11834,7 @@ async function readBody(req) {
   });
 }
 function createManagementHandler(ctx) {
-  const { store, identityService, serverClient, serverUrl, aicqAgentId, logger, html } = ctx;
+  const { store, identityService, serverClient, serverUrl, aicqAgentId, logger, html, chatChannel } = ctx;
   return async (req, res) => {
     const urlPath = parseApiPath(req.url || "/");
     const method = (req.method || "GET").toUpperCase();
@@ -11515,146 +12150,472 @@ function createManagementHandler(ctx) {
         logger.info("[API] Model config saved for provider: " + providerId);
         return json(res, { success: true, message: "Model configuration saved for " + provider.name });
       }
-      if (apiPath === "/update/check" && method === "GET") {
+      if (apiPath === "/settings" && method === "GET") {
+        const result = readConfig();
+        const aicqSection = result?.config?.aicq ?? {};
+        const pluginsSection = result?.config?.plugins;
+        const pluginSection = pluginsSection?.["aicq-chat"];
+        const merged = { ...aicqSection, ...pluginSection };
+        return json(res, {
+          // Connection settings
+          serverUrl: merged.serverUrl || serverUrl,
+          wsReconnectInterval: merged.wsReconnectInterval || 60,
+          wsAutoReconnect: merged.wsAutoReconnect !== false,
+          connectionTimeout: merged.connectionTimeout || 30,
+          // Friend settings
+          maxFriends: merged.maxFriends || 200,
+          autoAcceptFriends: Boolean(merged.autoAcceptFriends),
+          defaultPermissions: merged.defaultPermissions || ["chat"],
+          // Temp number settings
+          tempNumberExpiry: merged.tempNumberExpiry || 300,
+          // File transfer settings
+          maxFileSize: merged.maxFileSize || 104857600,
+          enableFileTransfer: merged.enableFileTransfer !== false,
+          allowedFileTypes: merged.allowedFileTypes || null,
+          // Logging
+          logLevel: merged.logLevel || "info",
+          // Security / encryption
+          enableP2P: merged.enableP2P !== false,
+          handshakeTimeout: merged.handshakeTimeout || 60,
+          // Identity (read-only)
+          agentId: aicqAgentId,
+          publicKeyFingerprint: identityService.getPublicKeyFingerprint(),
+          connected: serverClient.isConnected(),
+          // Config file info
+          configSource: result ? path5.basename(result.configPath) : "none",
+          configPath: result?.configPath || null,
+          // Runtime info
+          friendCount: store.getFriendCount(),
+          sessionCount: store.sessions.size,
+          uptimeSeconds: Math.floor(process.uptime())
+        });
+      }
+      if (apiPath === "/settings" && method === "PUT") {
+        const body = await readBody(req);
+        const newServerUrl = body.serverUrl;
+        const newMaxFriends = body.maxFriends;
+        const newAutoAccept = body.autoAcceptFriends;
+        const newWsReconnectInterval = body.wsReconnectInterval;
+        const newWsAutoReconnect = body.wsAutoReconnect;
+        const newConnectionTimeout = body.connectionTimeout;
+        const newTempNumberExpiry = body.tempNumberExpiry;
+        const newMaxFileSize = body.maxFileSize;
+        const newEnableFileTransfer = body.enableFileTransfer;
+        const newAllowedFileTypes = body.allowedFileTypes;
+        const newLogLevel = body.logLevel;
+        const newEnableP2P = body.enableP2P;
+        const newHandshakeTimeout = body.handshakeTimeout;
+        const newDefaultPermissions = body.defaultPermissions;
+        if (newServerUrl !== void 0 && typeof newServerUrl !== "string") {
+          return json(res, { success: false, message: "serverUrl must be a string" }, 400);
+        }
+        if (newMaxFriends !== void 0 && (typeof newMaxFriends !== "number" || newMaxFriends < 1 || newMaxFriends > 1e4)) {
+          return json(res, { success: false, message: "maxFriends must be a number between 1 and 10000" }, 400);
+        }
+        if (newAutoAccept !== void 0 && typeof newAutoAccept !== "boolean") {
+          return json(res, { success: false, message: "autoAcceptFriends must be a boolean" }, 400);
+        }
+        if (newWsReconnectInterval !== void 0 && (typeof newWsReconnectInterval !== "number" || newWsReconnectInterval < 5 || newWsReconnectInterval > 600)) {
+          return json(res, { success: false, message: "wsReconnectInterval must be between 5 and 600 seconds" }, 400);
+        }
+        if (newConnectionTimeout !== void 0 && (typeof newConnectionTimeout !== "number" || newConnectionTimeout < 5 || newConnectionTimeout > 120)) {
+          return json(res, { success: false, message: "connectionTimeout must be between 5 and 120 seconds" }, 400);
+        }
+        if (newTempNumberExpiry !== void 0 && (typeof newTempNumberExpiry !== "number" || newTempNumberExpiry < 60 || newTempNumberExpiry > 3600)) {
+          return json(res, { success: false, message: "tempNumberExpiry must be between 60 and 3600 seconds" }, 400);
+        }
+        if (newMaxFileSize !== void 0 && (typeof newMaxFileSize !== "number" || newMaxFileSize < 1024 || newMaxFileSize > 1073741824)) {
+          return json(res, { success: false, message: "maxFileSize must be between 1KB and 1GB" }, 400);
+        }
+        if (newLogLevel !== void 0 && !["debug", "info", "warn", "error", "none"].includes(newLogLevel)) {
+          return json(res, { success: false, message: "logLevel must be one of: debug, info, warn, error, none" }, 400);
+        }
+        if (newHandshakeTimeout !== void 0 && (typeof newHandshakeTimeout !== "number" || newHandshakeTimeout < 10 || newHandshakeTimeout > 300)) {
+          return json(res, { success: false, message: "handshakeTimeout must be between 10 and 300 seconds" }, 400);
+        }
+        const result = readConfig();
+        if (!result) {
+          return json(res, { success: false, message: "No config file found. Create openclaw.json first." }, 400);
+        }
+        const config2 = result.config;
+        if (!config2.plugins || typeof config2.plugins !== "object") {
+          config2.plugins = {};
+        }
+        const plugins = config2.plugins;
+        if (!plugins["aicq-chat"] || typeof plugins["aicq-chat"] !== "object") {
+          plugins["aicq-chat"] = {};
+        }
+        const aicqConfig = plugins["aicq-chat"];
+        if (newServerUrl !== void 0)
+          aicqConfig.serverUrl = newServerUrl;
+        if (newMaxFriends !== void 0)
+          aicqConfig.maxFriends = newMaxFriends;
+        if (newAutoAccept !== void 0)
+          aicqConfig.autoAcceptFriends = newAutoAccept;
+        if (newWsReconnectInterval !== void 0)
+          aicqConfig.wsReconnectInterval = newWsReconnectInterval;
+        if (newWsAutoReconnect !== void 0)
+          aicqConfig.wsAutoReconnect = newWsAutoReconnect;
+        if (newConnectionTimeout !== void 0)
+          aicqConfig.connectionTimeout = newConnectionTimeout;
+        if (newTempNumberExpiry !== void 0)
+          aicqConfig.tempNumberExpiry = newTempNumberExpiry;
+        if (newMaxFileSize !== void 0)
+          aicqConfig.maxFileSize = newMaxFileSize;
+        if (newEnableFileTransfer !== void 0)
+          aicqConfig.enableFileTransfer = newEnableFileTransfer;
+        if (newAllowedFileTypes !== void 0)
+          aicqConfig.allowedFileTypes = newAllowedFileTypes;
+        if (newLogLevel !== void 0)
+          aicqConfig.logLevel = newLogLevel;
+        if (newEnableP2P !== void 0)
+          aicqConfig.enableP2P = newEnableP2P;
+        if (newHandshakeTimeout !== void 0)
+          aicqConfig.handshakeTimeout = newHandshakeTimeout;
+        if (newDefaultPermissions !== void 0)
+          aicqConfig.defaultPermissions = newDefaultPermissions;
+        const written = writeConfig(config2);
+        if (!written) {
+          return json(res, { success: false, message: "Failed to write config file" }, 500);
+        }
+        logger.info("[API] Settings saved: " + JSON.stringify(body));
+        return json(res, { success: true, message: "Settings saved successfully" });
+      }
+      if (apiPath === "/settings/test-connection" && method === "POST") {
+        const body = await readBody(req);
+        const testUrl = body.serverUrl || serverUrl;
+        const startTime = Date.now();
         try {
-          const pkgPath = path5.join(__dirname, "..", "package.json");
-          let currentVersion = "unknown";
+          const controller = new AbortController();
+          const timeout = setTimeout(() => controller.abort(), body.timeout || 1e4);
+          const resp = await fetch(testUrl + "/api/v1/health", {
+            method: "GET",
+            signal: controller.signal,
+            headers: { "Content-Type": "application/json" }
+          });
+          clearTimeout(timeout);
+          const latency = Date.now() - startTime;
+          let serverInfo = {};
           try {
-            const pkgRaw = fs5.readFileSync(pkgPath, "utf-8");
-            const pkg = JSON.parse(pkgRaw);
-            currentVersion = pkg.version || "unknown";
+            serverInfo = await resp.json();
           } catch {
           }
-          if (currentVersion === "unknown") {
-            const altPkgPath = path5.join(process.cwd(), "plugin", "package.json");
-            try {
-              const pkg = JSON.parse(fs5.readFileSync(altPkgPath, "utf-8"));
-              currentVersion = pkg.version || "unknown";
-            } catch {
-            }
-          }
-          let latestVersion = currentVersion;
-          let updateAvailable = false;
-          try {
-            const npmView = execSync("npm view aicq-openclaw-plugin version --registry https://registry.npmjs.org 2>/dev/null", {
-              timeout: 15e3,
-              encoding: "utf-8"
-            }).trim();
-            if (npmView) {
-              latestVersion = npmView.replace(/^\^|~|\s+.*$/g, "").trim();
-              updateAvailable = latestVersion !== currentVersion;
-            }
-          } catch (npmErr) {
-            logger.warn("[API] npm view failed: " + (npmErr instanceof Error ? npmErr.message : String(npmErr)));
+          if (resp.ok) {
+            return json(res, {
+              success: true,
+              status: "ok",
+              statusCode: resp.status,
+              latency,
+              serverUrl: testUrl,
+              serverInfo
+            });
+          } else {
+            return json(res, {
+              success: false,
+              status: "error",
+              statusCode: resp.status,
+              latency,
+              serverUrl: testUrl,
+              message: "Server returned HTTP " + resp.status
+            });
           }
-          return json(res, {
-            currentVersion,
-            latestVersion,
-            updateAvailable,
-            packageName: "aicq-openclaw-plugin"
-          });
         } catch (err) {
+          const latency = Date.now() - startTime;
           const msg = err instanceof Error ? err.message : String(err);
-          return json(res, { error: "Failed to check for updates: " + msg }, 500);
+          const isTimeout = msg.includes("abort") || msg.includes("timeout");
+          return json(res, {
+            success: false,
+            status: isTimeout ? "timeout" : "unreachable",
+            latency,
+            serverUrl: testUrl,
+            message: isTimeout ? "Connection timed out after " + latency + "ms" : "Cannot reach server: " + msg
+          });
         }
       }
-      if (apiPath === "/update" && method === "POST") {
+      if (apiPath === "/settings/reset-identity" && method === "POST") {
         const body = await readBody(req);
-        const force = body.force;
+        const confirmReset = body.confirm;
+        if (!confirmReset) {
+          return json(res, { success: false, message: "Confirmation required. Set { confirm: true } to proceed." }, 400);
+        }
         try {
-          logger.info("[API] Starting npm update for aicq-openclaw-plugin...");
-          const pluginDir = __dirname;
-          let npmRoot = pluginDir;
-          for (let i = 0; i < 5; i++) {
-            if (npmRoot.endsWith("node_modules"))
-              break;
-            npmRoot = path5.dirname(npmRoot);
-          }
-          const parentDir = path5.dirname(npmRoot);
-          let installDir = parentDir;
-          const candidates = [
-            parentDir,
-            path5.join(os.homedir(), ".openclaw", "plugins"),
-            path5.join(os.homedir(), ".config", "openclaw", "plugins")
-          ];
-          let updateCmd;
-          if (force) {
-            updateCmd = `npm install aicq-openclaw-plugin@latest --dangerously-force-unsafe-install --registry https://registry.npmjs.org`;
-          } else {
-            updateCmd = `npm update aicq-openclaw-plugin --dangerously-force-unsafe-install --registry https://registry.npmjs.org`;
-          }
-          let installPath = parentDir;
-          try {
-            const pkgJsonPath = path5.join(pluginDir, "package.json");
-            const realPkgDir = fs5.realpathSync(path5.dirname(pkgJsonPath));
-            if (realPkgDir.includes("node_modules")) {
-              const nmIdx = realPkgDir.lastIndexOf("node_modules");
-              installPath = realPkgDir.substring(0, nmIdx + 13);
-            }
-          } catch {
-          }
-          logger.info("[API] Running: " + updateCmd + " in " + installPath);
-          const result = await new Promise((resolve3) => {
-            const child = exec(updateCmd, {
-              cwd: installPath,
-              timeout: 12e4,
-              encoding: "utf-8",
-              env: { ...process.env, NODE_NO_WARNINGS: "1" }
-            }, (error, stdout, stderr) => {
-              if (error) {
-                resolve3("ERROR: " + (error.message || String(error)) + "\n\n" + (stderr || ""));
-              } else {
-                resolve3(stdout || stderr || "Update completed (no output)");
-              }
-            });
-            child.stdout?.on("data", (d) => {
-            });
-            child.stderr?.on("data", (d) => {
-            });
-          });
-          let newVersion = "unknown";
-          try {
-            const pkgRaw = fs5.readFileSync(path5.join(__dirname, "..", "package.json"), "utf-8");
-            newVersion = JSON.parse(pkgRaw).version || "unknown";
-          } catch {
-          }
-          const success = !result.startsWith("ERROR");
-          logger.info("[API] Update " + (success ? "succeeded" : "failed") + ": " + result.substring(0, 200));
+          identityService.cleanup();
+          chatChannel?.cleanup?.();
+          serverClient.disconnectWebSocket();
+          store.friends.clear();
+          store.sessions.clear();
+          store.pendingHandshakes.clear();
+          store.pendingRequests = [];
+          store.tempNumbers = [];
+          store.save();
+          logger.warn("[API] Agent identity reset by user via settings UI");
           return json(res, {
-            success,
-            message: success ? "Plugin updated successfully! Restart the service to apply changes." : "Update failed.",
-            output: result.substring(0, 2e3),
-            newVersion,
-            needsRestart: success
+            success: true,
+            message: "Identity reset successfully. All friends, sessions, and keys have been deleted. Restart the plugin to generate a new identity."
           });
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          logger.error("[API] Update error: " + msg);
-          return json(res, { success: false, message: "Update failed: " + msg }, 500);
+          logger.error("[API] Identity reset failed: " + msg);
+          return json(res, { success: false, message: "Failed to reset identity: " + msg }, 500);
+        }
+      }
+      if (apiPath === "/settings/export" && method === "GET") {
+        const result = readConfig();
+        if (!result)
+          return json(res, { error: "No config file found" }, 400);
+        const pluginsSection = result.config.plugins;
+        const pluginSection = pluginsSection?.["aicq-chat"];
+        return json(res, {
+          exportDate: (/* @__PURE__ */ new Date()).toISOString(),
+          pluginVersion: "1.1.1",
+          settings: pluginSection || {},
+          fullConfig: result.config
+        });
+      }
+      if (apiPath === "/settings/import" && method === "POST") {
+        const body = await readBody(req);
+        const settings = body.settings;
+        const merge = body.merge;
+        if (!settings || typeof settings !== "object" || Array.isArray(settings)) {
+          return json(res, { success: false, message: "Invalid settings object. Provide { settings: {...} }" }, 400);
+        }
+        const result = readConfig();
+        if (!result) {
+          return json(res, { success: false, message: "No config file found" }, 400);
+        }
+        const config2 = result.config;
+        if (!config2.plugins || typeof config2.plugins !== "object") {
+          config2.plugins = {};
+        }
+        const plugins = config2.plugins;
+        if (!plugins["aicq-chat"] || typeof plugins["aicq-chat"] !== "object" || !merge) {
+          plugins["aicq-chat"] = {};
+        }
+        const aicqConfig = plugins["aicq-chat"];
+        Object.assign(aicqConfig, settings);
+        const written = writeConfig(config2);
+        if (!written) {
+          return json(res, { success: false, message: "Failed to write config" }, 500);
+        }
+        logger.info("[API] Settings imported: " + Object.keys(settings).join(", "));
+        return json(res, { success: true, message: "Settings imported successfully" });
+      }
+      if (apiPath === "/settings/section" && method === "POST") {
+        const body = await readBody(req);
+        const section = body.section;
+        const data = body.data;
+        if (!section || !data) {
+          return json(res, { success: false, message: "Missing section or data" }, 400);
+        }
+        const result = readConfig();
+        if (!result) {
+          return json(res, { success: false, message: "No config file found" }, 400);
+        }
+        const config2 = result.config;
+        if (!config2.plugins || typeof config2.plugins !== "object") {
+          config2.plugins = {};
+        }
+        const plugins = config2.plugins;
+        if (!plugins["aicq-chat"] || typeof plugins["aicq-chat"] !== "object") {
+          plugins["aicq-chat"] = {};
+        }
+        const aicqConfig = plugins["aicq-chat"];
+        for (const [key, value] of Object.entries(data)) {
+          aicqConfig[key] = value;
+        }
+        const written = writeConfig(config2);
+        if (!written) {
+          return json(res, { success: false, message: "Failed to write config" }, 500);
         }
+        logger.info("[API] Settings section saved: " + section);
+        return json(res, { success: true, message: 'Section "' + section + '" saved' });
       }
-      if (apiPath === "/plugin-info" && method === "GET") {
-        let pkgVersion = "unknown";
+      if (apiPath === "/config/raw" && method === "GET") {
+        const result = readConfig();
+        if (!result)
+          return json(res, { error: "No config file found" }, 404);
+        const raw = fs5.readFileSync(result.configPath, "utf-8");
+        return json(res, {
+          configPath: result.configPath,
+          configSource: path5.basename(result.configPath),
+          rawJson: raw,
+          config: result.config
+        });
+      }
+      if (apiPath === "/config/raw" && method === "PUT") {
+        const body = await readBody(req);
+        const rawJson = body.rawJson;
+        if (!rawJson)
+          return json(res, { success: false, message: "Missing rawJson" }, 400);
+        let parsed;
         try {
-          const pkgPath = path5.join(__dirname, "..", "package.json");
-          const pkg = JSON.parse(fs5.readFileSync(pkgPath, "utf-8"));
-          pkgVersion = pkg.version || "unknown";
-        } catch {
-          const altPkgPath = path5.join(process.cwd(), "plugin", "package.json");
-          try {
-            pkgVersion = JSON.parse(fs5.readFileSync(altPkgPath, "utf-8")).version || "unknown";
-          } catch {
+          parsed = JSON.parse(rawJson);
+        } catch (e) {
+          return json(res, { success: false, message: "Invalid JSON: " + (e instanceof Error ? e.message : String(e)) }, 400);
+        }
+        const configPath = findConfigPath();
+        if (!configPath)
+          return json(res, { success: false, message: "No config file found" }, 400);
+        try {
+          fs5.writeFileSync(configPath, JSON.stringify(parsed, null, 2), "utf-8");
+          logger.info("[API] Config file updated via raw JSON editor");
+          return json(res, { success: true, message: "Config file saved", configPath });
+        } catch (e) {
+          const msg = e instanceof Error ? e.message : String(e);
+          return json(res, { success: false, message: "Write failed: " + msg }, 500);
+        }
+      }
+      if (apiPath === "/mgmt-url" && method === "GET") {
+        const host = req.headers?.host || "127.0.0.1:6109";
+        const protocol = req.headers?.["x-forwarded-proto"] || "http";
+        const mgmtUrl = protocol + "://" + host;
+        return json(res, {
+          mgmtUrl,
+          standaloneUrl: "http://127.0.0.1:6109",
+          gatewayPath: "/plugins/aicq-chat/"
+        });
+      }
+      if (apiPath === "/agents" && method === "POST") {
+        const body = await readBody(req);
+        const agent = body.agent;
+        if (!agent || typeof agent !== "object") {
+          return json(res, { success: false, message: "Missing agent object" }, 400);
+        }
+        const result = readConfig();
+        if (!result)
+          return json(res, { success: false, message: "No config file found" }, 400);
+        const config2 = result.config;
+        if (!Array.isArray(config2.agents)) {
+          config2.agents = [];
+          const singleAgent = config2.agent;
+          if (typeof singleAgent === "object" && singleAgent !== null && !Array.isArray(singleAgent)) {
+            config2.agents.push(singleAgent);
+            delete config2.agent;
           }
         }
+        config2.agents.push(agent);
+        const written = writeConfig(config2);
+        if (!written)
+          return json(res, { success: false, message: "Failed to write config" }, 500);
+        logger.info("[API] Agent added via UI");
+        return json(res, { success: true, message: "Agent added", index: config2.agents.length - 1 });
+      }
+      if (apiPath.startsWith("/agents/") && method === "PUT") {
+        const idxStr = decodeURIComponent(apiPath.slice("/agents/".length));
+        const idx = parseInt(idxStr, 10);
+        if (isNaN(idx) || idx < 0)
+          return json(res, { success: false, message: "Invalid agent index" }, 400);
+        const body = await readBody(req);
+        const updates = body.agent;
+        if (!updates || typeof updates !== "object") {
+          return json(res, { success: false, message: "Missing agent object" }, 400);
+        }
+        const result = readConfig();
+        if (!result)
+          return json(res, { success: false, message: "No config file found" }, 400);
+        const config2 = result.config;
+        let agentsArr;
+        if (!Array.isArray(config2.agents)) {
+          return json(res, { success: false, message: "No agents array in config" }, 400);
+        }
+        agentsArr = config2.agents;
+        if (idx >= agentsArr.length) {
+          return json(res, { success: false, message: "Agent index out of range" }, 400);
+        }
+        Object.assign(agentsArr[idx], updates);
+        const written = writeConfig(config2);
+        if (!written)
+          return json(res, { success: false, message: "Failed to write config" }, 500);
+        logger.info("[API] Agent updated at index " + idx);
+        return json(res, { success: true, message: "Agent updated" });
+      }
+      if (apiPath === "/config/switch" && method === "POST") {
+        const body = await readBody(req);
+        const target = body.target;
+        if (target !== "openclaw" && target !== "stableclaw") {
+          return json(res, { success: false, message: "target must be 'openclaw' or 'stableclaw'" }, 400);
+        }
+        const targetFile = target + ".json";
+        const currentResult = readConfig();
+        if (!currentResult)
+          return json(res, { success: false, message: "No current config file found" }, 400);
+        const currentBasename = path5.basename(currentResult.configPath);
+        if (currentBasename === targetFile) {
+          return json(res, { success: false, message: "Already using " + targetFile }, 400);
+        }
+        const targetPath = path5.join(path5.dirname(currentResult.configPath), targetFile);
+        try {
+          const raw = fs5.readFileSync(currentResult.configPath, "utf-8");
+          fs5.writeFileSync(targetPath, raw, "utf-8");
+          logger.info("[API] Config copied to " + targetFile);
+          return json(res, { success: true, message: "Config copied to " + targetFile, newPath: targetPath });
+        } catch (e) {
+          const msg = e instanceof Error ? e.message : String(e);
+          return json(res, { success: false, message: "Failed: " + msg }, 500);
+        }
+      }
+      if (apiPath === "/config-file/raw" && method === "GET") {
+        const configPath = findConfigPath();
+        if (!configPath)
+          return json(res, { error: "No config file found" }, 404);
+        const configName = path5.basename(configPath);
+        const raw = fs5.readFileSync(configPath, "utf-8");
+        const config2 = JSON.parse(raw);
+        const stats = fs5.statSync(configPath);
         return json(res, {
-          version: pkgVersion,
-          name: "aicq-openclaw-plugin",
-          uptime: process.uptime(),
-          nodeVersion: process.version,
-          platform: process.platform,
-          pid: process.pid
+          configPath,
+          configName,
+          raw,
+          config: config2,
+          size: stats.size,
+          modified: stats.mtime.toISOString()
         });
       }
+      if (apiPath === "/config-file/raw" && method === "PUT") {
+        const body = await readBody(req);
+        const content = body.content;
+        if (!content)
+          return json(res, { success: false, message: "Missing content field" }, 400);
+        let parsed;
+        try {
+          parsed = JSON.parse(content);
+        } catch (e) {
+          return json(res, { success: false, message: "Invalid JSON: " + (e instanceof Error ? e.message : String(e)) }, 400);
+        }
+        const configPath = findConfigPath();
+        if (!configPath)
+          return json(res, { success: false, message: "No config file found" }, 400);
+        try {
+          fs5.writeFileSync(configPath, JSON.stringify(parsed, null, 2), "utf-8");
+          logger.info("[API] Config file written via /config-file/raw");
+          return json(res, { success: true, message: "Config file saved", configPath });
+        } catch (e) {
+          const msg = e instanceof Error ? e.message : String(e);
+          return json(res, { success: false, message: "Write failed: " + msg }, 500);
+        }
+      }
+      if (apiPath.match(/^\/models\/[^/]+$/) && method === "DELETE") {
+        const providerId = decodeURIComponent(apiPath.slice("/models/".length));
+        const provider = MODEL_PROVIDERS.find((p) => p.id === providerId);
+        if (!provider)
+          return json(res, { success: false, message: "Unknown provider: " + providerId }, 400);
+        const result = readConfig();
+        if (!result)
+          return json(res, { success: false, message: "No config file found" }, 400);
+        const config2 = result.config;
+        const providersSection = config2.providers;
+        if (providersSection && typeof providersSection === "object" && providersSection[provider.configKey]) {
+          providersSection[provider.configKey] = {};
+        }
+        if (config2[provider.configKey]) {
+          config2[provider.configKey] = {};
+        }
+        const written = writeConfig(config2);
+        if (!written)
+          return json(res, { success: false, message: "Failed to write config file" }, 500);
+        logger.info("[API] Model config cleared for provider: " + providerId);
+        return json(res, { success: true, message: "Model configuration cleared for " + provider.name });
+      }
       res.writeHead(404, { "Content-Type": "application/json" });
       res.end(JSON.stringify({ error: "Not found: " + apiPath }));
     } catch (err) {
@@ -11712,7 +12673,7 @@ var plugin = definePluginEntry({
       debug: (msg, ...args) => ocLog.debug?.(msg, ...args) ?? console.log("[aicq-chat DEBUG]", msg, ...args)
     };
     logger.info("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
-    logger.info("  AICQ Encrypted Chat Plugin v1.0.0");
+    logger.info("  AICQ Encrypted Chat Plugin v1.1.1");
     logger.info("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
     const pluginCfg = api.pluginConfig ?? {};
     const config2 = loadConfig({
@@ -12215,44 +13176,84 @@ var plugin = definePluginEntry({
       serverUrl,
       aicqAgentId,
       logger,
-      html: managementHtml
-    });
-    const mgmtPort = parseInt(process.env.AICQ_MGMT_PORT || "16888", 10);
-    const mgmtServer = http.createServer((req, res) => {
-      managementHandler(req, res).catch((err) => {
-        logger.error("[HTTP] Management server error: " + (err instanceof Error ? err.message : err));
-        if (!res.headersSent) {
-          res.writeHead(500, { "Content-Type": "text/plain" });
-        }
-        res.end("Internal Server Error");
-      });
+      html: managementHtml,
+      chatChannel
     });
-    mgmtServer.listen(mgmtPort, "127.0.0.1", () => {
-      logger.info("[Init] Management UI HTTP server running at http://127.0.0.1:" + mgmtPort + "/");
-    });
-    mgmtServer.on("error", (err) => {
-      if (err.code === "EADDRINUSE") {
-        logger.warn("[Init] Management UI port " + mgmtPort + " already in use, trying " + (mgmtPort + 1));
-        mgmtServer.close();
-        mgmtServer.listen(mgmtPort + 1, "127.0.0.1", () => {
-          logger.info("[Init] Management UI HTTP server running at http://127.0.0.1:" + (mgmtPort + 1) + "/");
+    const apiKeys = Object.keys(api).filter((k) => typeof api[k] === "function");
+    logger.info("[Init] Available API methods: " + apiKeys.join(", "));
+    let mgmtPort = 6109;
+    let actualMgmtPort = mgmtPort;
+    let mgmtUiRegistered = false;
+    const autoOpenDelay = setTimeout(() => {
+      try {
+        const url = mgmtUiRegistered ? "http://127.0.0.1:" + actualMgmtPort + "/plugins/aicq-chat/" : "http://127.0.0.1:" + actualMgmtPort + "/";
+        const cmd = process.platform === "win32" ? "start" : process.platform === "darwin" ? "open" : "xdg-open";
+        exec(cmd + ' "' + url + '"', (err) => {
+          if (err)
+            logger.debug("[Init] Auto-open browser skipped: " + (err.message || err));
+          else
+            logger.info("[Init] Management UI opened in browser: " + url);
         });
-      } else {
-        logger.error("[Init] Management UI HTTP server error: " + err.message);
+      } catch (_e) {
+        logger.debug("[Init] Auto-open browser not available");
       }
-    });
+    }, 3e3);
     if (api.registerHttpRoute) {
-      api.registerHttpRoute({
-        path: "/aicq-chat",
-        auth: "gateway",
-        match: "prefix",
-        handler: managementHandler
-      });
-      logger.info("[Init] Management UI also registered via gateway at /plugins/aicq-chat/");
+      try {
+        api.registerHttpRoute({
+          path: "/plugins/aicq-chat",
+          auth: "plugin",
+          match: "prefix",
+          handler: managementHandler
+        });
+        logger.info("[Init] Management UI registered via gateway at /plugins/aicq-chat/");
+        mgmtUiRegistered = true;
+      } catch (routeErr) {
+        logger.warn("[Init] Gateway route registration failed: " + (routeErr instanceof Error ? routeErr.message : String(routeErr)));
+      }
+    }
+    if (!mgmtUiRegistered) {
+      try {
+        mgmtPort = parseInt(process.env.AICQ_MGMT_PORT || "6109", 10);
+        actualMgmtPort = mgmtPort;
+        const mgmtServer = http.createServer((req, res) => {
+          managementHandler(req, res).catch((err) => {
+            logger.error("[HTTP] Management server error: " + (err instanceof Error ? err.message : err));
+            if (!res.headersSent) {
+              res.writeHead(500, { "Content-Type": "text/plain" });
+            }
+            res.end("Internal Server Error");
+          });
+        });
+        mgmtServer.listen(mgmtPort, "127.0.0.1", () => {
+          actualMgmtPort = mgmtPort;
+          logger.info("[Init] Management UI HTTP server running at http://127.0.0.1:" + mgmtPort + "/");
+        });
+        mgmtServer.on("error", (err) => {
+          if (err.code === "EADDRINUSE") {
+            actualMgmtPort = mgmtPort + 1;
+            logger.warn("[Init] Management UI port " + mgmtPort + " already in use, trying " + actualMgmtPort);
+            mgmtServer.close();
+            mgmtServer.listen(actualMgmtPort, "127.0.0.1", () => {
+              logger.info("[Init] Management UI HTTP server running at http://127.0.0.1:" + actualMgmtPort + "/");
+            });
+          } else {
+            logger.error("[Init] Management UI HTTP server error: " + err.message);
+          }
+        });
+        logger.info("[Init] Standalone management UI server starting on port " + mgmtPort);
+      } catch (httpErr) {
+        logger.error("[Init] Failed to start management UI server: " + (httpErr instanceof Error ? httpErr.message : String(httpErr)));
+      }
     }
     logger.info("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
     logger.info("  AICQ Plugin activated successfully!");
-    logger.info("  Management UI: http://127.0.0.1:" + mgmtPort + "/");
+    if (mgmtUiRegistered) {
+      logger.info("  Management UI: via gateway /plugins/aicq-chat/");
+      logger.info("  Management UI (local): http://127.0.0.1:" + actualMgmtPort + "/plugins/aicq-chat/");
+    } else {
+      logger.info("  Management UI: http://127.0.0.1:" + actualMgmtPort + "/");
+    }
     logger.info("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
   }
 });