aquaman-plugin 0.9.0 → 0.9.2

package/README.md

@@ -25,6 +25,7 @@ Agent / OpenClaw Gateway              Aquaman Proxy
                                          │  (hash-chained log)
                                          ▼
                                api.anthropic.com
+                               api.mistral.ai
                                api.telegram.org
                                slack.com/api  ...
 ```

package/index.ts

@@ -17,6 +17,16 @@
  */
 
 import type { OpenClawPluginApi } from "openclaw/plugin-sdk";
+
+// OpenClawPluginDefinition exists in the SDK internals but isn't re-exported from "openclaw/plugin-sdk".
+// Mirror the type here until OpenClaw exposes it from the barrel.
+type OpenClawPluginDefinition = {
+  id?: string;
+  name?: string;
+  description?: string;
+  version?: string;
+  register?: (api: OpenClawPluginApi) => void | Promise<void>;
+};
 import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
@@ -52,7 +62,7 @@ let proxyManager: ProxyManager | null = null;
 let httpInterceptor: HttpInterceptor | null = null;
 let socketPath: string | null = null;
 let dynamicHostMap: Map<string, string> | null = null;
-const services = ["anthropic", "openai"];
+let configuredServices: string[] = ["anthropic", "openai"];
 
 /** Default socket path */
 function getDefaultSocketPath(): string {
@@ -67,6 +77,8 @@ const FALLBACK_HOST_MAP = new Map<string, string>([
   ['api.github.com', 'github'],
   ['api.x.ai', 'xai'],
   ['gateway.ai.cloudflare.com', 'cloudflare-ai'],
+  ['api.mistral.ai', 'mistral'],
+  ['api-inference.huggingface.co', 'huggingface'],
   ['slack.com', 'slack'],
   ['*.slack.com', 'slack'],
   ['discord.com', 'discord'],
@@ -167,7 +179,7 @@ function activateHttpInterceptor(log: OpenClawPluginApi["logger"]): void {
 /**
  * Set environment variables for SDK clients using sentinel hostname
  */
-function configureEnvironment(log: OpenClawPluginApi["logger"]): void {
+function configureEnvironment(log: OpenClawPluginApi["logger"], services: string[]): void {
   for (const service of services) {
     const serviceUrl = `http://aquaman.local/${service}`;
 
@@ -195,11 +207,12 @@ function configureEnvironment(log: OpenClawPluginApi["logger"]): void {
 /**
  * Register the aquaman_status tool
  */
-function registerStatusTool(api: OpenClawPluginApi): void {
+function registerStatusTool(api: OpenClawPluginApi, services: string[]): void {
   api.registerTool(
     () => {
       return {
         name: "aquaman_status",
+        label: "Aquaman Status",
         description:
           "Check aquaman credential proxy status and configured services",
         parameters: {
@@ -207,8 +220,8 @@ function registerStatusTool(api: OpenClawPluginApi): void {
           properties: {},
           required: [] as string[],
         },
-        async execute() {
-          return {
+        async execute(_toolCallId: string, _params: unknown) {
+          const status = {
             proxyRunning: proxyManager !== null,
             socketPath: socketPath || getDefaultSocketPath(),
             services,
@@ -225,6 +238,10 @@ function registerStatusTool(api: OpenClawPluginApi): void {
               })
             ),
           };
+          return {
+            content: [{ type: "text" as const, text: JSON.stringify(status, null, 2) }],
+            details: status,
+          };
         },
       };
     },
@@ -237,7 +254,7 @@ function registerStatusTool(api: OpenClawPluginApi): void {
  * OpenClaw checks its auth store before making API calls — without a placeholder
  * key, requests are rejected before they ever reach the proxy.
  */
-function ensureAuthProfiles(log: OpenClawPluginApi["logger"]): void {
+function ensureAuthProfiles(log: OpenClawPluginApi["logger"], services: string[]): void {
   const stateDir =
     process.env.OPENCLAW_STATE_DIR ||
     path.join(os.homedir(), ".openclaw");
@@ -278,127 +295,155 @@ function ensureAuthProfiles(log: OpenClawPluginApi["logger"]): void {
 }
 
 /**
- * OpenClaw plugin register function
+ * Aquaman OpenClaw Plugin Definition
  */
-export default function register(api: OpenClawPluginApi): void {
-  api.logger.info("Aquaman plugin loaded");
-
-  // Auto-generate auth-profiles.json if missing
-  ensureAuthProfiles(api.logger);
-
-  // Local proxy mode — requires aquaman CLI
-  if (!isAquamanInstalled()) {
-    api.logger.warn(
-      "aquaman CLI not found. Install with: npm install -g aquaman-proxy"
-    );
-    api.logger.warn(
-      "Then run: aquaman setup"
-    );
-    configureEnvironment(api.logger);
-    return;
-  }
+const plugin: OpenClawPluginDefinition = {
+  id: 'aquaman-plugin',
+  name: 'Aquaman Vault',
+  version: PLUGIN_VERSION,
+  description: 'Credential isolation for OpenClaw — API keys never enter the agent process',
+
+  register(api) {
+    api.logger.info("Aquaman plugin loaded");
+
+    // Read services from plugin config
+    const pluginCfg = api.pluginConfig as { backend?: string; services?: string[] } | undefined;
+    configuredServices = pluginCfg?.services ?? ["anthropic", "openai"];
+
+    // Auto-generate auth-profiles.json if missing
+    ensureAuthProfiles(api.logger, configuredServices);
+
+    // Local proxy mode — requires aquaman CLI
+    if (!isAquamanInstalled()) {
+      api.logger.warn(
+        "aquaman CLI not found. Install with: npm install -g aquaman-proxy"
+      );
+      api.logger.warn(
+        "Then run: aquaman setup"
+      );
+      configureEnvironment(api.logger, configuredServices);
+      return;
+    }
 
-  api.logger.info("aquaman CLI found, will start proxy on gateway start");
+    api.logger.info("aquaman CLI found, will start proxy on gateway start");
 
-  // Configure environment variables immediately (sentinel hostname)
-  configureEnvironment(api.logger);
+    // Configure environment variables immediately (sentinel hostname)
+    configureEnvironment(api.logger, configuredServices);
 
-  // Register lifecycle hooks if available
-  if (api.registerLifecycle) {
-    api.registerLifecycle({
-      async onGatewayStart() {
-        api.logger.info("Starting aquaman proxy...");
+    // Register service for proxy lifecycle management
+    api.registerService({
+      id: 'aquaman-proxy',
+      async start(ctx) {
+        ctx.logger.info("Starting aquaman proxy...");
 
-        const started = await startProxy(api.logger);
+        const started = await startProxy(ctx.logger);
         if (started && socketPath) {
-          api.logger.info("Aquaman proxy started successfully");
+          ctx.logger.info("Aquaman proxy started successfully");
 
           // Check for version mismatch between plugin and proxy
           const proxyVersion = await getProxyVersion(socketPath);
           if (proxyVersion && proxyVersion !== PLUGIN_VERSION) {
-            api.logger.warn(
+            ctx.logger.warn(
               `Warning: plugin version ${PLUGIN_VERSION} \u2260 proxy version ${proxyVersion}. ` +
               `Update both: npm install -g aquaman-proxy && openclaw plugins install aquaman-plugin`
             );
           }
 
           // Activate HTTP interceptor to redirect channel traffic through proxy
-          activateHttpInterceptor(api.logger);
+          activateHttpInterceptor(ctx.logger);
         } else {
-          api.logger.error("Failed to start aquaman proxy");
+          ctx.logger.error("Failed to start aquaman proxy");
           // Check if another instance is already running
           const defaultSock = getDefaultSocketPath();
           const alreadyRunning = await isProxyRunning(defaultSock);
           if (alreadyRunning) {
             socketPath = defaultSock;
-            api.logger.info(
+            ctx.logger.info(
               "Another aquaman instance is already running — using it"
             );
             // Load host map from existing proxy
             const map = await loadHostMap(defaultSock);
             dynamicHostMap = map.size > 0 ? map : FALLBACK_HOST_MAP;
-            activateHttpInterceptor(api.logger);
+            activateHttpInterceptor(ctx.logger);
           } else {
-            api.logger.error(
+            ctx.logger.error(
               "No running proxy found. Check: aquaman doctor"
             );
           }
         }
       },
-
-      async onGatewayStop() {
-        api.logger.info("Stopping aquaman proxy...");
+      async stop(ctx) {
+        ctx.logger.info("Stopping aquaman proxy...");
         stopProxy();
-      },
+      }
     });
-  }
 
-  // Register CLI commands if available
-  if (api.registerCli) {
-    api.registerCli(
-      ({ program }) => {
-        const aquamanCmd = program
-          .command("aquaman")
-          .description("Aquaman credential management");
-
-        aquamanCmd
-          .command("status")
-          .description("Show aquaman proxy status")
-          .action(() => {
-            console.log("\nAquaman Status:");
-            console.log(`  Proxy running: ${proxyManager !== null}`);
-            console.log(`  Socket path: ${socketPath || getDefaultSocketPath()}`);
-            console.log(`  Services: ${services.join(", ")}`);
-            console.log("\nEnvironment Variables:");
-            for (const service of services) {
-              const envKey =
-                service === "anthropic"
-                  ? "ANTHROPIC_BASE_URL"
-                  : service === "openai"
-                    ? "OPENAI_BASE_URL"
-                    : `${service.toUpperCase()}_BASE_URL`;
-              console.log(`  ${envKey}=${process.env[envKey] ?? "(not set)"}`);
-            }
-          });
-
-        aquamanCmd
-          .command("add <service> [key]")
-          .description("Add a credential (opens secure prompt)")
-          .action((service: string, key: string = "api_key") => {
-            console.log(`\n  Run in your terminal:\n    aquaman credentials add ${service} ${key}\n`);
-          });
-
-        aquamanCmd
-          .command("list")
-          .description("List stored credentials")
-          .action(() => {
-            console.log(`\n  Run in your terminal:\n    aquaman credentials list\n`);
-          });
-      },
-      { commands: ["aquaman"] }
-    );
+    // Register /aquaman-status slash command for humans
+    api.registerCommand({
+      name: 'aquaman-status',
+      description: 'Show aquaman credential proxy status and configured services',
+      acceptsArgs: false,
+      requireAuth: true,
+      async handler() {
+        const status = {
+          proxyRunning: proxyManager !== null,
+          socketPath: socketPath || getDefaultSocketPath(),
+          services: configuredServices,
+          httpInterceptorActive: httpInterceptor?.isActive() ?? false,
+        };
+        return { text: JSON.stringify(status, null, 2) };
+      }
+    });
+
+    // Register CLI commands if available
+    if (api.registerCli) {
+      api.registerCli(
+        ({ program }) => {
+          const aquamanCmd = program
+            .command("aquaman")
+            .description("Aquaman credential management");
+
+          aquamanCmd
+            .command("status")
+            .description("Show aquaman proxy status")
+            .action(() => {
+              console.log("\nAquaman Status:");
+              console.log(`  Proxy running: ${proxyManager !== null}`);
+              console.log(`  Socket path: ${socketPath || getDefaultSocketPath()}`);
+              console.log(`  Services: ${configuredServices.join(", ")}`);
+              console.log("\nEnvironment Variables:");
+              for (const service of configuredServices) {
+                const envKey =
+                  service === "anthropic"
+                    ? "ANTHROPIC_BASE_URL"
+                    : service === "openai"
+                      ? "OPENAI_BASE_URL"
+                      : `${service.toUpperCase()}_BASE_URL`;
+                console.log(`  ${envKey}=${process.env[envKey] ?? "(not set)"}`);
+              }
+            });
+
+          aquamanCmd
+            .command("add <service> [key]")
+            .description("Add a credential (opens secure prompt)")
+            .action((service: string, key: string = "api_key") => {
+              console.log(`\n  Run in your terminal:\n    aquaman credentials add ${service} ${key}\n`);
+            });
+
+          aquamanCmd
+            .command("list")
+            .description("List stored credentials")
+            .action(() => {
+              console.log(`\n  Run in your terminal:\n    aquaman credentials list\n`);
+            });
+        },
+        { commands: ["aquaman"] }
+      );
+    }
+
+    registerStatusTool(api, configuredServices);
+    api.logger.info("Aquaman plugin registered successfully");
   }
+};
 
-  registerStatusTool(api);
-  api.logger.info("Aquaman plugin registered successfully");
-}
+export default plugin;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aquaman-plugin",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Credential isolation plugin for OpenClaw",
   "type": "module",
   "scripts": {
@@ -26,8 +26,8 @@
     "undici": "^7.0.0"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.1.0",
-    "aquaman-proxy": "0.9.0"
+    "openclaw": ">=2026.1.11",
+    "aquaman-proxy": "0.9.2"
   },
   "peerDependenciesMeta": {
     "aquaman-proxy": {