botschat 0.1.13 → 0.1.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botschat",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "A self-hosted chat interface for OpenClaw AI agents",
   "workspaces": [
     "packages/*"

package/packages/api/src/do/connection-do.ts

@@ -1,6 +1,7 @@
 import type { Env } from "../env.js";
 import { verifyToken, getJwtSecret, signMediaUrl } from "../utils/auth.js";
 import { getFcmAccessToken, sendPushNotification } from "../utils/fcm.js";
+import { sendApnsNotification, type ApnsConfig } from "../utils/apns.js";
 import { generateId as generateIdUtil } from "../utils/id.js";
 import { randomUUID } from "../utils/uuid.js";
 
@@ -217,6 +218,9 @@ export class ConnectionDO implements DurableObject {
         // After auth, request task scan + models list from the plugin
         ws.send(JSON.stringify({ type: "task.scan.request" }));
         ws.send(JSON.stringify({ type: "models.request" }));
+        // Send notification preview preference to plugin
+        const notifyPreview = await this.getNotifyPreviewSetting(userId);
+        ws.send(JSON.stringify({ type: "settings.notifyPreview", enabled: notifyPreview }));
         // Notify all browser clients that OpenClaw is now connected
         this.broadcastToBrowsers(
           JSON.stringify({ type: "connection.status", openclawConnected: true, defaultModel: this.defaultModel, models: this.cachedModels }),
@@ -315,17 +319,19 @@ export class ConnectionDO implements DurableObject {
       await this.handleJobUpdate(msg);
     }
 
-    // Forward all messages to browser clients
+    // Forward all messages to browser clients (strip notifyPreview — plaintext
+    // must not be relayed to browser WebSockets; browsers decrypt locally)
     if (msg.type === "agent.text") {
       console.log(`[DO] Forwarding agent.text to browsers: encrypted=${msg.encrypted}, messageId=${msg.messageId}, textLen=${typeof msg.text === "string" ? msg.text.length : "?"}`);
     }
-    this.broadcastToBrowsers(JSON.stringify(msg));
+    const { notifyPreview: _stripped, ...msgForBrowser } = msg;
+    this.broadcastToBrowsers(JSON.stringify(msgForBrowser));
 
     // Send push notification if no browser session is in foreground
     if (
       (msg.type === "agent.text" || msg.type === "agent.media" || msg.type === "agent.a2ui") &&
       this.foregroundSessions.size === 0 &&
-      this.env.FCM_SERVICE_ACCOUNT_JSON
+      (this.env.FCM_SERVICE_ACCOUNT_JSON || this.env.APNS_AUTH_KEY)
     ) {
       this.sendPushNotifications(msg).catch((err) => {
         console.error("[DO] Push notification failed:", err);
@@ -546,6 +552,24 @@ export class ConnectionDO implements DurableObject {
 
   // ---- Helpers ----
 
+  /** Read the user's notifyPreview preference from D1 settings_json. */
+  private async getNotifyPreviewSetting(userId?: string | null): Promise<boolean> {
+    const uid = userId ?? await this.state.storage.get<string>("userId");
+    if (!uid) return false;
+    try {
+      const row = await this.env.DB.prepare(
+        "SELECT settings_json FROM users WHERE id = ?",
+      ).bind(uid).first<{ settings_json: string }>();
+      if (row?.settings_json) {
+        const settings = JSON.parse(row.settings_json);
+        return settings.notifyPreview === true;
+      }
+    } catch (err) {
+      console.error("[DO] Failed to read notifyPreview setting:", err);
+    }
+    return false;
+  }
+
   /** Restore cachedModels and defaultModel from durable storage if in-memory cache is empty. */
   private async ensureCachedModels(): Promise<void> {
     if (this.cachedModels.length > 0) return;
@@ -599,7 +623,9 @@ export class ConnectionDO implements DurableObject {
   /**
    * Send push notifications to all of the user's registered devices.
    * Called when an agent message arrives and no browser session is in foreground.
-   * Sends data-only FCM messages so clients can decrypt E2E content before showing.
+   *
+   * iOS tokens go directly to APNs (Capacitor returns raw APNs device tokens).
+   * Web/Android tokens go through FCM HTTP v1 API.
    */
   private async sendPushNotifications(msg: Record<string, unknown>): Promise<void> {
     const userId = await this.state.storage.get<string>("userId");
@@ -612,8 +638,8 @@ export class ConnectionDO implements DurableObject {
       .all<{ id: string; token: string; platform: string }>();
 
     if (!results || results.length === 0) return;
+    console.log(`[DO] Push: ${results.length} token(s) for ${userId} (ios: ${results.filter((r) => r.platform === "ios").length})`);
 
-    // Build data payload — includes ciphertext so the client can decrypt
     const data: Record<string, string> = {
       type: msg.type as string,
       sessionKey: (msg.sessionKey as string) ?? "",
@@ -621,30 +647,88 @@ export class ConnectionDO implements DurableObject {
       encrypted: msg.encrypted ? "1" : "0",
     };
 
+    let notifBody = "New message";
     if (msg.type === "agent.text") {
       data.text = (msg.text as string) ?? "";
+      if (msg.encrypted && typeof msg.notifyPreview === "string" && msg.notifyPreview) {
+        const preview = msg.notifyPreview as string;
+        notifBody = preview.length > 100 ? preview.slice(0, 100) + "…" : preview;
+      } else if (!msg.encrypted && data.text) {
+        notifBody = data.text.length > 100 ? data.text.slice(0, 100) + "…" : data.text;
+      } else if (msg.encrypted) {
+        notifBody = "New encrypted message";
+      }
     } else if (msg.type === "agent.media") {
       data.text = (msg.caption as string) || "";
       data.mediaUrl = (msg.mediaUrl as string) ?? "";
+      notifBody = data.text || "Sent a media file";
     } else if (msg.type === "agent.a2ui") {
       data.text = "New interactive message";
+      notifBody = "New interactive message";
     }
 
-    const accessToken = await getFcmAccessToken(this.env.FCM_SERVICE_ACCOUNT_JSON!);
-    const projectId = this.env.FIREBASE_PROJECT_ID ?? "botschat-130ff";
-
+    const iosTokens = results.filter((r) => r.platform === "ios");
+    const androidTokens = results.filter((r) => r.platform === "android");
+    const webTokens = results.filter((r) => r.platform === "web");
     const invalidTokenIds: string[] = [];
-    await Promise.allSettled(
-      results.map(async (row) => {
-        const ok = await sendPushNotification({
-          accessToken,
-          projectId,
-          fcmToken: row.token,
-          data,
-        });
-        if (!ok) invalidTokenIds.push(row.id);
-      }),
-    );
+    const notification = { title: "BotsChat", body: notifBody };
+
+    // iOS: send via APNs directly (Capacitor registers raw APNs device tokens)
+    if (iosTokens.length > 0 && this.env.APNS_AUTH_KEY) {
+      const apnsConfig: ApnsConfig = {
+        authKey: this.env.APNS_AUTH_KEY,
+        keyId: this.env.APNS_KEY_ID ?? "",
+        teamId: this.env.APNS_TEAM_ID ?? "",
+        bundleId: "app.botschat.console",
+      };
+      await Promise.allSettled(
+        iosTokens.map(async (row) => {
+          const ok = await sendApnsNotification({
+            config: apnsConfig,
+            deviceToken: row.token,
+            title: "BotsChat",
+            body: notifBody,
+            data,
+          });
+          if (!ok) invalidTokenIds.push(row.id);
+        }),
+      );
+    }
+
+    // Android: FCM with notification payload (data-only is silent in background)
+    if (androidTokens.length > 0 && this.env.FCM_SERVICE_ACCOUNT_JSON) {
+      const accessToken = await getFcmAccessToken(this.env.FCM_SERVICE_ACCOUNT_JSON);
+      const projectId = this.env.FIREBASE_PROJECT_ID ?? "botschat-130ff";
+      await Promise.allSettled(
+        androidTokens.map(async (row) => {
+          const ok = await sendPushNotification({
+            accessToken,
+            projectId,
+            fcmToken: row.token,
+            data,
+            notification,
+          });
+          if (!ok) invalidTokenIds.push(row.id);
+        }),
+      );
+    }
+
+    // Web: FCM data-only (Service Worker decrypts + shows notification)
+    if (webTokens.length > 0 && this.env.FCM_SERVICE_ACCOUNT_JSON) {
+      const accessToken = await getFcmAccessToken(this.env.FCM_SERVICE_ACCOUNT_JSON);
+      const projectId = this.env.FIREBASE_PROJECT_ID ?? "botschat-130ff";
+      await Promise.allSettled(
+        webTokens.map(async (row) => {
+          const ok = await sendPushNotification({
+            accessToken,
+            projectId,
+            fcmToken: row.token,
+            data,
+          });
+          if (!ok) invalidTokenIds.push(row.id);
+        }),
+      );
+    }
 
     // Clean up invalid/expired tokens
     for (const id of invalidTokenIds) {

package/packages/api/src/env.ts

@@ -14,4 +14,10 @@ export type Env = {
   DEV_AUTH_SECRET?: string;
   /** FCM Service Account JSON for push notifications (stored as secret via `wrangler secret put`). */
   FCM_SERVICE_ACCOUNT_JSON?: string;
+  /** APNs Auth Key (.p8 content) for direct iOS push via APNs HTTP/2 API. */
+  APNS_AUTH_KEY?: string;
+  /** APNs Key ID (from Apple Developer portal, e.g. "3Q4V693LW4"). */
+  APNS_KEY_ID?: string;
+  /** Apple Developer Team ID (e.g. "C5N5PPC329"). */
+  APNS_TEAM_ID?: string;
 };

package/packages/api/src/index.ts

@@ -124,7 +124,7 @@ protectedApp.get("/me", async (c) => {
 
 protectedApp.patch("/me", async (c) => {
   const userId = c.get("userId");
-  const body = await c.req.json<{ defaultModel?: string }>();
+  const body = await c.req.json<{ defaultModel?: string; notifyPreview?: boolean }>();
 
   // defaultModel is not stored in D1 — get/set only via plugin (connection.status / push).
   const existing = await c.env.DB.prepare(
@@ -135,7 +135,11 @@ protectedApp.patch("/me", async (c) => {
 
   const settings = JSON.parse(existing?.settings_json || "{}");
   delete settings.defaultModel;
-  // Persist other settings (if any) to D1; defaultModel is never written.
+
+  if (body.notifyPreview !== undefined) {
+    settings.notifyPreview = body.notifyPreview;
+  }
+
   await c.env.DB.prepare(
     "UPDATE users SET settings_json = ? WHERE id = ?",
   )
@@ -161,6 +165,25 @@ protectedApp.patch("/me", async (c) => {
     }
   }
 
+  if (body.notifyPreview !== undefined) {
+    try {
+      const doId = c.env.CONNECTION_DO.idFromName(userId);
+      const stub = c.env.CONNECTION_DO.get(doId);
+      await stub.fetch(
+        new Request("https://internal/send", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({
+            type: "settings.notifyPreview",
+            enabled: body.notifyPreview,
+          }),
+        }),
+      );
+    } catch (err) {
+      console.error("Failed to push notifyPreview to OpenClaw:", err);
+    }
+  }
+
   const outSettings = { ...settings };
   delete outSettings.defaultModel;
   return c.json({ ok: true, settings: outSettings });

package/packages/api/src/utils/apns.ts

@@ -0,0 +1,151 @@
+/**
+ * APNs HTTP/2 API — send push notifications directly to iOS devices.
+ *
+ * Uses a .p8 Auth Key for token-based authentication (ES256 JWT).
+ * iOS devices register raw APNs device tokens (hex strings) via Capacitor,
+ * which cannot be sent through FCM. This module talks to APNs directly.
+ */
+
+let cachedJwt: string | null = null;
+let cachedJwtExpiry = 0;
+
+export type ApnsConfig = {
+  authKey: string;
+  keyId: string;
+  teamId: string;
+  bundleId: string;
+};
+
+async function getApnsJwt(config: ApnsConfig): Promise<string> {
+  const now = Math.floor(Date.now() / 1000);
+  if (cachedJwt && cachedJwtExpiry > now + 300) {
+    return cachedJwt;
+  }
+
+  const header = { alg: "ES256", kid: config.keyId };
+  const claims = { iss: config.teamId, iat: now };
+
+  const key = await importP8Key(config.authKey);
+  cachedJwt = await signEs256Jwt(header, claims, key);
+  cachedJwtExpiry = now + 3600;
+  return cachedJwt;
+}
+
+export type ApnsPushOpts = {
+  config: ApnsConfig;
+  deviceToken: string;
+  title: string;
+  body: string;
+  /** Custom data included alongside the aps payload. */
+  data?: Record<string, string>;
+};
+
+/**
+ * Send a visible push notification via APNs.
+ * Returns true on success.
+ * Returns false if the token is permanently invalid (410 Unregistered)
+ * so the caller can clean it up.
+ */
+export async function sendApnsNotification(opts: ApnsPushOpts): Promise<boolean> {
+  const jwt = await getApnsJwt(opts.config);
+
+  const payload: Record<string, unknown> = {
+    aps: {
+      alert: { title: opts.title, body: opts.body },
+      sound: "default",
+      "mutable-content": 1,
+    },
+  };
+  if (opts.data) {
+    payload.custom = opts.data;
+  }
+
+  const headers = {
+    Authorization: `Bearer ${jwt}`,
+    "apns-topic": opts.config.bundleId,
+    "apns-push-type": "alert",
+    "apns-priority": "10",
+    "apns-expiration": "0",
+  };
+  const body = JSON.stringify(payload);
+
+  // Try production first, fall back to sandbox for debug/TestFlight builds
+  for (const host of ["api.push.apple.com", "api.sandbox.push.apple.com"]) {
+    const res = await fetch(`https://${host}/3/device/${opts.deviceToken}`, {
+      method: "POST",
+      headers,
+      body,
+    });
+
+    if (res.ok) {
+      console.log(`[APNs] Sent via ${host} for ...${opts.deviceToken.slice(-8)}`);
+      return true;
+    }
+
+    const err = await res.text();
+    const isBadToken = err.includes("BadDeviceToken");
+
+    // BadDeviceToken on production → likely a sandbox token, try sandbox next
+    if (host === "api.push.apple.com" && res.status === 400 && isBadToken) {
+      console.log(`[APNs] Production rejected token, trying sandbox...`);
+      continue;
+    }
+
+    console.error(`[APNs] ${host} failed for ...${opts.deviceToken.slice(-8)}: ${res.status} ${err}`);
+
+    // 410 = device unregistered — safe to remove
+    if (res.status === 410) return false;
+    return !isBadToken;
+  }
+
+  return true;
+}
+
+// ---- ES256 JWT helpers ----
+
+async function importP8Key(pem: string): Promise<CryptoKey> {
+  // Handle literal "\n" escape sequences from env vars (.dev.vars / wrangler secret)
+  const normalized = pem.replace(/\\n/g, "\n");
+  const pemBody = normalized
+    .replace(/-----BEGIN PRIVATE KEY-----/, "")
+    .replace(/-----END PRIVATE KEY-----/, "")
+    .replace(/\s/g, "");
+  const binary = atob(pemBody);
+  const der = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    der[i] = binary.charCodeAt(i);
+  }
+  return crypto.subtle.importKey(
+    "pkcs8",
+    der.buffer as ArrayBuffer,
+    { name: "ECDSA", namedCurve: "P-256" },
+    false,
+    ["sign"],
+  );
+}
+
+function base64url(data: Uint8Array | string): string {
+  const str =
+    typeof data === "string"
+      ? btoa(data)
+      : btoa(String.fromCharCode(...data));
+  return str.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+
+async function signEs256Jwt(
+  header: Record<string, string>,
+  payload: Record<string, unknown>,
+  key: CryptoKey,
+): Promise<string> {
+  const headerB64 = base64url(JSON.stringify(header));
+  const payloadB64 = base64url(JSON.stringify(payload));
+  const input = `${headerB64}.${payloadB64}`;
+
+  const sig = await crypto.subtle.sign(
+    { name: "ECDSA", hash: "SHA-256" },
+    key,
+    new TextEncoder().encode(input),
+  );
+
+  return `${input}.${base64url(new Uint8Array(sig))}`;
+}

package/packages/api/src/utils/fcm.ts

@@ -65,6 +65,8 @@ export type PushPayload = {
   fcmToken: string;
   /** Data payload — sent as FCM data-only message so client can decrypt + show notification. */
   data: Record<string, string>;
+  /** If set, include a visible notification (used for Android where data-only is silent in background). */
+  notification?: { title: string; body: string };
 };
 
 /**
@@ -75,35 +77,22 @@ export type PushPayload = {
 export async function sendPushNotification(opts: PushPayload): Promise<boolean> {
   const url = `https://fcm.googleapis.com/v1/projects/${opts.projectId}/messages:send`;
 
-  const message = {
-    message: {
-      token: opts.fcmToken,
-      // Data-only message — no "notification" field.
-      // Client receives the data and shows a local notification after decryption.
-      data: opts.data,
-      // Platform-specific overrides for data-only delivery
-      android: {
-        priority: "high" as const,
-      },
-      apns: {
-        headers: {
-          "apns-priority": "10",
-          "apns-push-type": "background",
-        },
-        payload: {
-          aps: {
-            "content-available": 1,
-            sound: "default",
-          },
-        },
-      },
-      webpush: {
-        headers: {
-          Urgency: "high",
-        },
+  const msg: Record<string, unknown> = {
+    token: opts.fcmToken,
+    data: opts.data,
+    android: {
+      priority: "high" as const,
+    },
+    webpush: {
+      headers: {
+        Urgency: "high",
       },
     },
   };
+  if (opts.notification) {
+    msg.notification = opts.notification;
+  }
+  const message = { message: msg };
 
   const res = await fetch(url, {
     method: "POST",
@@ -114,13 +103,15 @@ export async function sendPushNotification(opts: PushPayload): Promise<boolean>
     body: JSON.stringify(message),
   });
 
-  if (!res.ok) {
-    const err = await res.text();
-    console.error(`[FCM] Send failed for token ...${opts.fcmToken.slice(-8)}: ${res.status} ${err}`);
-    // Token invalid/expired — caller should remove it
-    if (res.status === 404 || res.status === 410) return false;
+  if (res.ok) {
+    console.log(`[FCM] Sent to ...${opts.fcmToken.slice(-8)} (notification: ${!!opts.notification})`);
+    return true;
   }
-  return res.ok;
+
+  const err = await res.text();
+  console.error(`[FCM] Send failed for token ...${opts.fcmToken.slice(-8)}: ${res.status} ${err}`);
+  if (res.status === 404 || res.status === 410) return false;
+  return false;
 }
 
 // ---- Crypto helpers for RS256 JWT signing ----

package/packages/plugin/dist/src/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/channel.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAuC,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAqDrD,eAAO,MAAM,cAAc;;;;;;;;;;;;;4BAeqB,MAAM,EAAE;;;;;;;;;;;;wCAc/B,MAAM,eAAe,MAAM;;;;;;;uCAY1B,OAAO;uCACP,OAAO,cAAc,MAAM,GAAG,IAAI;yCAEhC,OAAO;kEACkB;YAAE,GAAG,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE;qDAElE;YAAE,GAAG,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE;yCAE/C,uBAAuB;sCAC1B,uBAAuB;4CACjB,uBAAuB;;;;;;;;;;iCAY5B;YACpB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;YAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC3B;;;;;;;kCAqCsB;YACrB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC3B;;;;;;;;;qCA2CyB;YACxB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,OAAO,EAAE,uBAAuB,CAAC;YACjC,OAAO,EAAE,OAAO,CAAC;YACjB,WAAW,EAAE,WAAW,CAAC;YACzB,GAAG,CAAC,EAAE;gBAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;gBAAC,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;gBAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;aAAE,CAAC;YAC3F,SAAS,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;SACjD;oCAoDwB;YACvB,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;SACjD;;;;gEAiB8C;YAC7C,OAAO,EAAE;gBAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;gBAAC,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YAChF,aAAa,CAAC,EAAE;gBAAE,KAAK,EAAE,OAAO,CAAA;aAAE,CAAC;SACpC;;;;;uBAD0B,OAAO;;;;;;8CAWL,MAAM;;;yCAIX;YAAE,OAAO,EAAE,uBAAuB,CAAA;SAAE;;uBAEzC,MAAM,EAAE;;;;;;;sDAQU;YACnC,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC;SAC1E;;;;;;;;;;;;4CAiB0B;YACzB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC;SAC3D;;;;;;;;;;;8DAiB4C;YAC3C,OAAO,EAAE,uBAAuB,CAAC;YACjC,GAAG,EAAE,OAAO,CAAC;YACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACnC;;;;;;;;;;;;;;iDAc+B,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,UAAU,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;qBAE/F,MAAM;uBAAa,MAAM;kBAAQ,MAAM;qBAAW,MAAM;;;CAerF,CAAC"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/channel.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAuC,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAqDrD,eAAO,MAAM,cAAc;;;;;;;;;;;;;4BAeqB,MAAM,EAAE;;;;;;;;;;;;wCAc/B,MAAM,eAAe,MAAM;;;;;;;uCAY1B,OAAO;uCACP,OAAO,cAAc,MAAM,GAAG,IAAI;yCAEhC,OAAO;kEACkB;YAAE,GAAG,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE;qDAElE;YAAE,GAAG,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE;yCAE/C,uBAAuB;sCAC1B,uBAAuB;4CACjB,uBAAuB;;;;;;;;;;iCAY5B;YACpB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;YAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC3B;;;;;;;kCAyCsB;YACrB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC3B;;;;;;;;;qCAgDyB;YACxB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,OAAO,EAAE,uBAAuB,CAAC;YACjC,OAAO,EAAE,OAAO,CAAC;YACjB,WAAW,EAAE,WAAW,CAAC;YACzB,GAAG,CAAC,EAAE;gBAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;gBAAC,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;gBAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;aAAE,CAAC;YAC3F,SAAS,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;SACjD;oCAoDwB;YACvB,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;SACjD;;;;gEAiB8C;YAC7C,OAAO,EAAE;gBAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;gBAAC,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YAChF,aAAa,CAAC,EAAE;gBAAE,KAAK,EAAE,OAAO,CAAA;aAAE,CAAC;SACpC;;;;;uBAD0B,OAAO;;;;;;8CAWL,MAAM;;;yCAIX;YAAE,OAAO,EAAE,uBAAuB,CAAA;SAAE;;uBAEzC,MAAM,EAAE;;;;;;;sDAQU;YACnC,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC;SAC1E;;;;;;;;;;;;4CAiB0B;YACzB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC;SAC3D;;;;;;;;;;;8DAiB4C;YAC3C,OAAO,EAAE,uBAAuB,CAAC;YACjC,GAAG,EAAE,OAAO,CAAC;YACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACnC;;;;;;;;;;;;;;iDAc+B,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,OAAO,CAAC;YAAC,UAAU,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;qBAE/F,MAAM;uBAAa,MAAM;kBAAQ,MAAM;qBAAW,MAAM;;;CAerF,CAAC"}

package/packages/plugin/dist/src/channel.js

@@ -124,6 +124,9 @@ export const botschatPlugin = {
                     return { ok: false, error: new Error(`Encryption failed: ${err}`) };
                 }
             }
+            const notifyPreview = (encrypted && client.notifyPreview && ctx.text)
+                ? (ctx.text.length > 100 ? ctx.text.slice(0, 100) + "…" : ctx.text)
+                : undefined;
             client.send({
                 type: "agent.text",
                 sessionKey: ctx.to,
@@ -132,8 +135,9 @@ export const botschatPlugin = {
                 threadId: ctx.threadId?.toString(),
                 messageId,
                 encrypted,
+                ...(notifyPreview ? { notifyPreview } : {}),
             });
-            console.log(`[botschat][sendText] sent agent.text, encrypted=${encrypted}`);
+            console.log(`[botschat][sendText] sent agent.text, encrypted=${encrypted}, notifyPreview=${!!notifyPreview}`);
             return { ok: true };
         },
         sendMedia: async (ctx) => {
@@ -155,6 +159,9 @@ export const botschatPlugin = {
                     return { ok: false, error: new Error(`Encryption failed: ${err}`) };
                 }
             }
+            const notifyPreview = (encrypted && client.notifyPreview && ctx.text)
+                ? (ctx.text.length > 100 ? ctx.text.slice(0, 100) + "…" : ctx.text)
+                : undefined;
             if (ctx.mediaUrl) {
                 client.send({
                     type: "agent.media",
@@ -163,6 +170,7 @@ export const botschatPlugin = {
                     caption: text || undefined,
                     messageId,
                     encrypted,
+                    ...(notifyPreview ? { notifyPreview } : {}),
                 });
             }
             else {
@@ -172,6 +180,7 @@ export const botschatPlugin = {
                     text: text,
                     messageId,
                     encrypted,
+                    ...(notifyPreview ? { notifyPreview } : {}),
                 });
             }
             return { ok: true };
@@ -495,7 +504,10 @@ async function handleCloudMessage(msg, ctx) {
                     else {
                         console.log(`[botschat][deliver] no encryption: hasKey=${!!client.e2eKey}, textLen=${text.length}`);
                     }
-                    console.log(`[botschat][deliver] sending: type=${payload.mediaUrl ? "agent.media" : "agent.text"}, encrypted=${encrypted}, messageId=${messageId}`);
+                    const notifyPreviewText = (encrypted && client.notifyPreview && payload.text)
+                        ? (payload.text.length > 100 ? payload.text.slice(0, 100) + "…" : payload.text)
+                        : undefined;
+                    console.log(`[botschat][deliver] sending: type=${payload.mediaUrl ? "agent.media" : "agent.text"}, encrypted=${encrypted}, messageId=${messageId}, notifyPreview=${!!notifyPreviewText}`);
                     if (payload.mediaUrl) {
                         client.send({
                             type: "agent.media",
@@ -505,6 +517,7 @@ async function handleCloudMessage(msg, ctx) {
                             threadId,
                             messageId,
                             encrypted,
+                            ...(notifyPreviewText ? { notifyPreview: notifyPreviewText } : {}),
                         });
                     }
                     else if (payload.text) {
@@ -515,6 +528,7 @@ async function handleCloudMessage(msg, ctx) {
                             threadId,
                             messageId,
                             encrypted,
+                            ...(notifyPreviewText ? { notifyPreview: notifyPreviewText } : {}),
                         });
                         // Detect model-change confirmations and emit model.changed
                         // Handles both formats:
@@ -670,6 +684,15 @@ async function handleCloudMessage(msg, ctx) {
             }
             break;
         }
+        case "settings.notifyPreview": {
+            const enabled = msg.enabled === true;
+            const client = getCloudClient(ctx.accountId);
+            if (client) {
+                client.notifyPreview = enabled;
+                ctx.log?.info(`[${ctx.accountId}] Notification preview ${enabled ? "enabled" : "disabled"}`);
+            }
+            break;
+        }
         default:
             break;
     }