aicq-openclaw-plugin 1.5.2 → 1.5.4

package/dist/index.js

@@ -8648,7 +8648,7 @@ var ServerClient = class {
         this.ws.terminate();
       }
     }, this.config.requestTimeoutMs);
-    this.ws.on("open", () => {
+    this.ws.on("open", async () => {
       clearTimeout(connectTimeout);
       this.wsConnected = true;
       this.reconnectDelay = this.config.initialReconnectDelay;
@@ -8656,13 +8656,22 @@ var ServerClient = class {
       this.connectStartTimestamp = 0;
       this.hourlyCheckMode = false;
       this.cancelHourlyCheck();
-      this.setConnectionState("online");
       this.logger.info("[Server] WebSocket connected");
+      if (!this.authToken) {
+        this.logger.info("[Server] No auth token \u2014 attempting agent authentication...");
+        const authed = await this.authenticateAsAgent();
+        if (!authed) {
+          this.logger.warn("[Server] Agent auth failed on reconnect \u2014 closing socket");
+          this.ws?.close(1008, "Auth required");
+          return;
+        }
+      }
+      this.setConnectionState("online");
       this.wsSend({
         type: "online",
         nodeId: this.store.agentId,
         publicKey: Buffer.from(this.store.identityKeys.publicKey).toString("base64"),
-        ...this.authToken ? { token: this.authToken } : {}
+        token: this.authToken
       });
       this.startHeartbeat();
     });
@@ -8812,6 +8821,47 @@ var ServerClient = class {
   // ----------------------------------------------------------------
   //  REST API methods
   // ----------------------------------------------------------------
+  /**
+   * Authenticate as an AI Agent using challenge-response.
+   *
+   * Flow:
+   *   1. POST /api/v1/auth/challenge  → get challenge + challengeId
+   *   2. Sign challenge with Ed25519 private key
+   *   3. POST /api/v1/auth/login-agent  → get JWT token
+   *
+   * Returns true if authentication succeeded and token was set.
+   */
+  async authenticateAsAgent() {
+    const publicKeyBase64 = Buffer.from(this.store.identityKeys.publicKey).toString("base64");
+    const challengeResp = await this.fetchPost("/api/v1/auth/challenge", {
+      publicKey: publicKeyBase64
+    });
+    if (!challengeResp?.challenge || !challengeResp?.challengeId) {
+      this.logger.warn("[Server] Failed to request agent challenge");
+      return false;
+    }
+    let signature;
+    try {
+      const message = Buffer.from(challengeResp.challenge, "utf8");
+      const nacl3 = await Promise.resolve().then(() => __toESM(require_nacl_fast(), 1));
+      signature = nacl3.sign.detached(message, this.store.identityKeys.secretKey);
+    } catch (err) {
+      this.logger.error("[Server] Failed to sign challenge:", err);
+      return false;
+    }
+    const loginResp = await this.fetchPost("/api/v1/auth/login-agent", {
+      publicKey: publicKeyBase64,
+      signature: Buffer.from(signature).toString("base64"),
+      challengeId: challengeResp.challengeId
+    });
+    if (!loginResp?.session?.token) {
+      this.logger.warn("[Server] Agent login failed \u2014 no token in response");
+      return false;
+    }
+    this.setAuthToken(loginResp.session.token);
+    this.logger.info("[Server] Agent authenticated successfully");
+    return true;
+  }
   /**
    * Register this node on the server.
    * Captures JWT token from response if returned.
@@ -15169,11 +15219,24 @@ var plugin = definePluginEntry({
     }
     const serverUrl = config2.serverUrl;
     const aicqAgentId = identityService.getAgentId();
-    try {
-      serverClient.connectWebSocket();
-    } catch (e) {
-      logger.warn("[Init] WS connect failed: " + (e instanceof Error ? e.message : e));
-    }
+    (async () => {
+      try {
+        logger.info("[Init] Authenticating agent with server...");
+        const authed = await serverClient.authenticateAsAgent();
+        if (authed) {
+          logger.info("[Init] Agent authentication successful");
+        } else {
+          logger.warn("[Init] Agent authentication failed \u2014 will retry on reconnect");
+        }
+      } catch (e) {
+        logger.warn("[Init] Agent auth error: " + (e instanceof Error ? e.message : e));
+      }
+      try {
+        serverClient.connectWebSocket();
+      } catch (e) {
+        logger.warn("[Init] WS connect failed: " + (e instanceof Error ? e.message : e));
+      }
+    })();
     serverClient.onConnectionStateChange((newState, prevState) => {
       logger.info("[Init] Connection state changed: " + prevState + " \u2192 " + newState);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aicq-openclaw-plugin",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "description": "AICQ OpenClaw plugin - end-to-end encrypted P2P chat for AI agents with offline queue support",
   "main": "dist/index.js",
   "type": "module",