openclaw-seatalk 0.2.1 → 0.3.1

package/README.md

@@ -26,8 +26,9 @@ OpenClaw channel plugin for [SeaTalk](https://seatalk.io/) messaging.
 - **Dual gateway mode** — **webhook** (direct HTTP server) or **relay** (WebSocket client via [seatalk-relay](https://github.com/lf4096/seatalk-relay))
 - **Security** — SHA256 signature verification for all incoming events
 - **Token management** — automatic access token obtain, cache, and refresh
+- **Outbound coalescing** — consecutive reply payloads are merged into a single message with automatic markdown-aware chunking at 4000 chars; configurable via `outboundCoalescing`
 - **Deduplication** — event ID dedup + per-sender debounce buffer (thread-aware)
-- **Access control** — DM policy (`open`/`allowlist`), group policy (`disabled`/`allowlist`/`open`), per-group and per-sender allow-lists
+- **Access control** — DM policy (`open`/`allowlist`/`pairing`), group policy (`disabled`/`allowlist`/`open`), per-group and per-sender allow-lists
 - **Email resolution** — email-to-employee_code lookup for outbound message targets
 - **Multi-account** — multiple SeaTalk bot apps in one OpenClaw instance
 - **Health probing** — connection health check on startup
@@ -149,8 +150,8 @@ Or edit the OpenClaw config file directly (`~/.openclaw/openclaw.json`).
       signingSecret: "your_signing_secret",
       webhookPort: 3210,
       webhookPath: "/callback",
-      dmPolicy: "open",  // or "allowlist"
-      // allowFrom: ["12345678", "alice@company.com"],
+      dmPolicy: "open",  // or "allowlist" | "pairing"
+      // allowFrom: ["e_12345678", "alice@company.com"],
     },
   },
 }
@@ -197,12 +198,14 @@ Or edit the OpenClaw config file directly (`~/.openclaw/openclaw.json`).
 | `webhookPort` | number | `8080` | HTTP port (webhook mode only) |
 | `webhookPath` | string | `"/callback"` | HTTP path (webhook mode only) |
 | `relayUrl` | string | — | WebSocket URL (relay mode only) |
-| `dmPolicy` | `"open"` \| `"allowlist"` | `"allowlist"` | Who can DM the bot |
+| `dmPolicy` | `"open"` \| `"allowlist"` \| `"pairing"` | `"allowlist"` | Who can DM the bot (`pairing`: approve via CLI) |
 | `allowFrom` | string[] | — | Allowed DM senders (employee codes or emails) |
 | `groupPolicy` | `"disabled"` \| `"allowlist"` \| `"open"` | `"disabled"` | Group chat policy |
 | `groupAllowFrom` | string[] | — | Allowed group IDs (when `groupPolicy: "allowlist"`) |
 | `groupSenderAllowFrom` | string[] | — | Allowed senders within groups (employee codes or emails) |
+| `outboundCoalescing` | boolean | `true` | Merge consecutive reply payloads into a single message (4000-char chunking) |
 | `processingIndicator` | `"typing"` \| `"off"` | `"typing"` | Show typing status while processing |
+| `mediaAllowHosts` | string[] | `["openapi.seatalk.io"]` | Allowed hostnames for inbound media downloads (HTTPS only) |
 | `tools.groupInfo` | boolean | `true` | Enable `seatalk` tool `group_info` action |
 | `tools.groupHistory` | boolean | `true` | Enable `seatalk` tool `group_history` action |
 | `tools.groupList` | boolean | `true` | Enable `seatalk` tool `group_list` action |

package/openclaw.plugin.json

@@ -1,6 +1,86 @@
 {
 	"id": "openclaw-seatalk",
 	"channels": ["seatalk"],
+	"channelConfigs": {
+		"seatalk": {
+			"label": "SeaTalk",
+			"description": "SeaTalk internal messaging integration.",
+			"schema": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"enabled": { "type": "boolean" },
+					"appId": { "type": "string" },
+					"appSecret": { "type": "string" },
+					"signingSecret": { "type": "string" },
+					"mode": { "type": "string", "enum": ["webhook", "relay"] },
+					"relayUrl": { "type": "string" },
+					"webhookPort": { "type": "integer", "minimum": 1 },
+					"webhookPath": { "type": "string" },
+					"dmPolicy": { "type": "string", "enum": ["open", "allowlist", "pairing"] },
+					"allowFrom": { "type": "array", "items": { "type": "string" } },
+					"groupPolicy": { "type": "string", "enum": ["disabled", "allowlist", "open"] },
+					"groupAllowFrom": { "type": "array", "items": { "type": "string" } },
+					"groupSenderAllowFrom": { "type": "array", "items": { "type": "string" } },
+					"outboundCoalescing": { "type": "boolean" },
+					"processingIndicator": { "type": "string", "enum": ["typing", "off"] },
+					"mediaAllowHosts": { "type": "array", "items": { "type": "string" } },
+					"tools": {
+						"type": "object",
+						"properties": {
+							"groupInfo": { "type": "boolean" },
+							"groupHistory": { "type": "boolean" },
+							"groupList": { "type": "boolean" },
+							"threadHistory": { "type": "boolean" },
+							"getMessage": { "type": "boolean" }
+						}
+					},
+					"accounts": {
+						"type": "object",
+						"additionalProperties": {
+							"type": "object",
+							"properties": {
+								"enabled": { "type": "boolean" },
+								"appId": { "type": "string" },
+								"appSecret": { "type": "string" },
+								"signingSecret": { "type": "string" },
+								"mode": { "type": "string", "enum": ["webhook", "relay"] },
+								"relayUrl": { "type": "string" },
+								"webhookPort": { "type": "integer", "minimum": 1 },
+								"webhookPath": { "type": "string" },
+								"dmPolicy": {
+									"type": "string",
+									"enum": ["open", "allowlist", "pairing"]
+								},
+								"allowFrom": { "type": "array", "items": { "type": "string" } },
+								"groupPolicy": {
+									"type": "string",
+									"enum": ["disabled", "allowlist", "open"]
+								},
+								"groupAllowFrom": {
+									"type": "array",
+									"items": { "type": "string" }
+								},
+								"groupSenderAllowFrom": {
+									"type": "array",
+									"items": { "type": "string" }
+								},
+								"outboundCoalescing": { "type": "boolean" },
+								"processingIndicator": {
+									"type": "string",
+									"enum": ["typing", "off"]
+								},
+								"mediaAllowHosts": {
+									"type": "array",
+									"items": { "type": "string" }
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	},
 	"configSchema": {
 		"type": "object",
 		"additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "openclaw-seatalk",
-	"version": "0.2.1",
+	"version": "0.3.1",
 	"description": "OpenClaw SeaTalk channel plugin",
 	"type": "module",
 	"license": "Apache-2.0",
@@ -21,7 +21,8 @@
 		"lint": "biome lint .",
 		"lint:fix": "biome lint --fix .",
 		"check": "biome check .",
-		"check:fix": "biome check --fix ."
+		"check:fix": "biome check --fix .",
+		"pack:clawhub": "mkdir -p dist && npm pack --pack-destination dist"
 	},
 	"dependencies": {
 		"@sinclair/typebox": "0.34.48",
@@ -60,6 +61,10 @@
 		},
 		"compat": {
 			"pluginApi": ">=2026.3.22"
+		},
+		"build": {
+			"openclawVersion": "2026.3.22",
+			"pluginSdkVersion": "2026.3.22"
 		}
 	}
 }

package/src/access.ts

@@ -0,0 +1,46 @@
+export function checkGroupAccess(params: {
+	groupPolicy: string;
+	groupAllowFrom?: string[];
+	groupSenderAllowFrom?: string[];
+	groupId: string;
+	senderEmployeeCode: string;
+	senderEmail?: string;
+}): { allowed: boolean; reason?: string } {
+	const {
+		groupPolicy,
+		groupAllowFrom,
+		groupSenderAllowFrom,
+		groupId,
+		senderEmployeeCode,
+		senderEmail,
+	} = params;
+
+	if (groupPolicy === "disabled") {
+		return { allowed: false, reason: "groupPolicy is disabled" };
+	}
+
+	if (groupPolicy === "allowlist") {
+		const list = groupAllowFrom ?? [];
+		if (!list.includes(groupId)) {
+			return { allowed: false, reason: `group ${groupId} not in groupAllowFrom` };
+		}
+	}
+
+	if (groupSenderAllowFrom && groupSenderAllowFrom.length > 0) {
+		const match = groupSenderAllowFrom.some((entry) => {
+			const e = entry.trim();
+			if (e === "*") return true;
+			if (e === senderEmployeeCode) return true;
+			if (senderEmail && e.toLowerCase() === senderEmail.toLowerCase()) return true;
+			return false;
+		});
+		if (!match) {
+			return {
+				allowed: false,
+				reason: `sender ${senderEmployeeCode} not in groupSenderAllowFrom`,
+			};
+		}
+	}
+
+	return { allowed: true };
+}

package/src/accounts.ts

@@ -1,5 +1,8 @@
-import type { OpenClawConfig } from "openclaw/plugin-sdk";
-import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/core";
+import {
+	DEFAULT_ACCOUNT_ID,
+	type OpenClawConfig,
+	normalizeAccountId,
+} from "openclaw/plugin-sdk/core";
 import type { ResolvedSeaTalkAccount, SeaTalkAccountConfig, SeaTalkConfig } from "./types.js";
 
 function listConfiguredAccountIds(cfg: OpenClawConfig): string[] {