zapry-openclaw-plugin 0.1.0 → 0.1.1

package/dist/src/internal.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Strip a single leading Zapry-side target prefix from a chat id.
+ *
+ *   "chat:g_123"              → "g_123"
+ *   "zapry:g_123"             → "g_123"
+ *   "zapry:group:g_123"       → "g_123"
+ *   "zapry:group:group:g_123" → "g_123"  (repeated `group:` segments are chained)
+ *   "zapry:direct:123"        → "direct:123" (any trailing kind is preserved after `zapry:` is stripped)
+ *   "g_123"                   → "g_123"  (no-op)
+ *
+ * Caveat: The regex matches once and is anchored at the start, so a
+ * double-wrapped id like `zapry:group:zapry:group:g_123` will only lose its
+ * outermost wrapper (→ `zapry:group:g_123`). Call again if a legacy producer
+ * is known to emit double wraps.
+ */
+export declare function stripZapryTargetPrefix(value: string): string;
+/**
+ * Extract the agent id from a structured sessionKey of the form
+ *   `agent:{agentId}:...`
+ * Returns undefined if the key does not match the agent-scoped shape
+ * (e.g. legacy `"main"` or an empty string).
+ */
+export declare function parseAgentIdFromSessionKey(sessionKey: string | undefined): string | undefined;
+/**
+ * Structural identity check for two user id strings.
+ *
+ * Zapry user ids are typically numeric; the same underlying id may arrive as
+ * `"123"` or `"0123"`. We accept a numeric match when both sides parse to a
+ * finite number. Non-numeric ids fall back to strict equality.
+ */
+export declare function sameUserIdentity(left: string, right: string): boolean;
+/**
+ * Zapry bot tokens are `{ownerId}:{secret}`. Returns ownerId or empty string
+ * if the token is malformed (missing colon, leading colon, etc).
+ */
+export declare function resolveOwnerIdFromBotToken(botToken: string): string;
+/**
+ * Canonical session key for a (agent, zapry peer) pair.
+ *
+ *   agent:{agentId}:zapry:{kind}:{peerId}
+ */
+export declare function buildPeerSessionKey(agentId: string, peer: {
+    kind: "group" | "direct";
+    id: string;
+}): string;
+export type RouteLike = {
+    agentId: string;
+    accountId: string;
+    sessionKey: string;
+};
+/**
+ * Ensure a route emitted by the OpenClaw router has a peer-scoped sessionKey.
+ *
+ * Legacy routers sometimes return the agent's "main" session key (`"main"` or
+ * `agent:{agentId}:main`) which conflates every peer into a single thread.
+ * When that happens we rebuild the key using {@link buildPeerSessionKey}.
+ * Any other non-empty sessionKey is preserved verbatim.
+ */
+export declare function normalizeRouteSessionKey(route: RouteLike, peer: {
+    kind: "group" | "direct";
+    id: string;
+}): RouteLike;
+/**
+ * Decide whether a tool invocation is coming from the bot's owner.
+ *
+ * Precedence:
+ *   1. Explicit trust from the caller (`senderIsOwner === true`) wins.
+ *   2. Missing sender id → fail closed (return false).
+ *   3. Otherwise compare the runtime sender id with the id embedded in the
+ *      bot token via {@link sameUserIdentity}.
+ */
+export declare function isOwnerInvocation(params: {
+    senderIsOwner?: boolean;
+    senderId: string;
+    botToken: string;
+}): boolean;

package/dist/src/internal.js

@@ -0,0 +1,126 @@
+// Pure helpers used across index.ts, src/actions.ts and src/inbound.ts.
+// Extracted here so they are both tree-shakable and unit-testable without
+// pulling in the OpenClaw runtime or the Zapry HTTP client.
+//
+// Rules:
+//   • No I/O, no process.env reads, no dynamic imports.
+//   • Deterministic: same input → same output.
+//   • Safe to import from any layer (channel / actions / inbound / tests).
+/**
+ * Strip a single leading Zapry-side target prefix from a chat id.
+ *
+ *   "chat:g_123"              → "g_123"
+ *   "zapry:g_123"             → "g_123"
+ *   "zapry:group:g_123"       → "g_123"
+ *   "zapry:group:group:g_123" → "g_123"  (repeated `group:` segments are chained)
+ *   "zapry:direct:123"        → "direct:123" (any trailing kind is preserved after `zapry:` is stripped)
+ *   "g_123"                   → "g_123"  (no-op)
+ *
+ * Caveat: The regex matches once and is anchored at the start, so a
+ * double-wrapped id like `zapry:group:zapry:group:g_123` will only lose its
+ * outermost wrapper (→ `zapry:group:g_123`). Call again if a legacy producer
+ * is known to emit double wraps.
+ */
+export function stripZapryTargetPrefix(value) {
+    return value.replace(/^(?:chat:|zapry:(?:group:)*)/i, "");
+}
+/**
+ * Extract the agent id from a structured sessionKey of the form
+ *   `agent:{agentId}:...`
+ * Returns undefined if the key does not match the agent-scoped shape
+ * (e.g. legacy `"main"` or an empty string).
+ */
+export function parseAgentIdFromSessionKey(sessionKey) {
+    const value = `${sessionKey || ""}`.trim();
+    const match = /^agent:([^:]+):/.exec(value);
+    return match?.[1]?.trim() || undefined;
+}
+/**
+ * Structural identity check for two user id strings.
+ *
+ * Zapry user ids are typically numeric; the same underlying id may arrive as
+ * `"123"` or `"0123"`. We accept a numeric match when both sides parse to a
+ * finite number. Non-numeric ids fall back to strict equality.
+ */
+export function sameUserIdentity(left, right) {
+    const normalizedLeft = left.trim();
+    const normalizedRight = right.trim();
+    if (!normalizedLeft || !normalizedRight) {
+        return false;
+    }
+    if (normalizedLeft === normalizedRight) {
+        return true;
+    }
+    const leftNum = Number(normalizedLeft);
+    const rightNum = Number(normalizedRight);
+    return Number.isFinite(leftNum) && Number.isFinite(rightNum) && leftNum === rightNum;
+}
+/**
+ * Zapry bot tokens are `{ownerId}:{secret}`. Returns ownerId or empty string
+ * if the token is malformed (missing colon, leading colon, etc).
+ */
+export function resolveOwnerIdFromBotToken(botToken) {
+    const trimmed = String(botToken ?? "").trim();
+    const separatorIdx = trimmed.indexOf(":");
+    if (separatorIdx <= 0) {
+        return "";
+    }
+    return trimmed.slice(0, separatorIdx).trim();
+}
+/**
+ * Canonical session key for a (agent, zapry peer) pair.
+ *
+ *   agent:{agentId}:zapry:{kind}:{peerId}
+ */
+export function buildPeerSessionKey(agentId, peer) {
+    return `agent:${agentId}:zapry:${peer.kind}:${peer.id}`;
+}
+/**
+ * Ensure a route emitted by the OpenClaw router has a peer-scoped sessionKey.
+ *
+ * Legacy routers sometimes return the agent's "main" session key (`"main"` or
+ * `agent:{agentId}:main`) which conflates every peer into a single thread.
+ * When that happens we rebuild the key using {@link buildPeerSessionKey}.
+ * Any other non-empty sessionKey is preserved verbatim.
+ */
+export function normalizeRouteSessionKey(route, peer) {
+    const agentId = `${route.agentId || ""}`.trim() || "main";
+    const sessionKey = `${route.sessionKey || ""}`.trim();
+    if (!sessionKey) {
+        return {
+            ...route,
+            agentId,
+            sessionKey: buildPeerSessionKey(agentId, peer),
+        };
+    }
+    const defaultMainSessionKey = `agent:${agentId}:main`;
+    if (sessionKey === "main" || sessionKey === defaultMainSessionKey) {
+        return {
+            ...route,
+            agentId,
+            sessionKey: buildPeerSessionKey(agentId, peer),
+        };
+    }
+    return route;
+}
+/**
+ * Decide whether a tool invocation is coming from the bot's owner.
+ *
+ * Precedence:
+ *   1. Explicit trust from the caller (`senderIsOwner === true`) wins.
+ *   2. Missing sender id → fail closed (return false).
+ *   3. Otherwise compare the runtime sender id with the id embedded in the
+ *      bot token via {@link sameUserIdentity}.
+ */
+export function isOwnerInvocation(params) {
+    if (params.senderIsOwner === true) {
+        return true;
+    }
+    const senderId = `${params.senderId || ""}`.trim();
+    if (!senderId) {
+        return false;
+    }
+    const ownerId = resolveOwnerIdFromBotToken(params.botToken);
+    return sameUserIdentity(senderId, ownerId);
+}
+//# sourceMappingURL=internal.js.map

package/dist/src/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/internal.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,SAAS;AACT,wDAAwD;AACxD,+CAA+C;AAC/C,2EAA2E;AAE3E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA8B;IACvE,MAAM,KAAK,GAAG,GAAG,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,QAAQ,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,IAA8C;IAE9C,OAAO,SAAS,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;AAC1D,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAgB,EAChB,IAA8C;IAE9C,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC;IAC1D,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,GAAG,KAAK;YACR,OAAO;YACP,UAAU,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,SAAS,OAAO,OAAO,CAAC;IACtD,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAClE,OAAO;YACL,GAAG,KAAK;YACR,OAAO;YACP,UAAU,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAIjC;IACC,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zapry-openclaw-plugin",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "OpenClaw Zapry channel plugin — messaging, groups, feed, clubs, and bot self-management",
   "type": "module",
   "license": "MIT",
@@ -41,10 +41,14 @@
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",
-    "prepack": "npm run build"
+    "prepack": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.5"
   }
 }

package/skills/zapry/SKILL.md

@@ -13,12 +13,12 @@ allowed-tools: ["message", "zapry_action", "zapry_post", "pdf"]
 tags: ["zapry", "messaging", "groups", "feed", "social", "openapi"]
 triggers_api:
   [
-    "sendMessage", "sendPhoto", "sendVideo", "sendDocument", "sendAudio", "sendVoice", "sendAnimation",
+    "sendMessage", "sendLinkCard", "sendPhoto", "sendVideo", "sendDocument", "sendAudio", "sendVoice", "sendAnimation",
     "generateAudio",
     "deleteMessage", "answerCallbackQuery",
     "getFile",
     "getUpdates", "setWebhook", "getWebhookInfo", "deleteWebhook", "webhooks/:token",
-    "muteChatMember", "kickChatMember", "setChatTitle", "setChatDescription",
+    "createGroupChat", "dismissGroupChat", "inviteChatMember", "muteChatMember", "kickChatMember", "setChatTitle", "setChatDescription",
     "getChatAdministrators", "getChatMember", "getChatMembers", "getChatMemberCount",
     "getMyGroups", "getMyChats", "getMyContacts", "setMyFriendVerify", "getMyFriendRequests",
     "acceptFriendRequest", "rejectFriendRequest", "addFriend", "deleteFriend",
@@ -34,7 +34,7 @@ triggers_api:
 执行 Zapry 动作时按以下路由：
 
 - `message`: 仅用于最简单的纯文本回复/发送，不承载任何 Zapry 平台 action
-- `zapry_action`: **唯一用于 Zapry 平台动作**，包括发文字（`send-message`）、图片、视频、音频、文件、文档，以及所有查询/管理能力。**支持群名自动解析**——直接传群名即可，无需手动查 ID。发送文件用 `action: "send-document"`
+- `zapry_action`: **唯一用于 Zapry 平台动作**，包括发文字（`send-message`）、分享链接卡片（`send-link-card`）、图片、视频、音频、文件、文档，以及所有查询/管理能力。**支持群名自动解析**——直接传群名即可，无需手动查 ID。发送文件用 `action: "send-document"`
 - `zapry_post`: 发广场动态（create-post），传 `content`，可选 `images`
 - `pdf`: 创建 / 分析 PDF 文件。创建后用 `zapry_action send-document` 发送到聊天
 
@@ -42,6 +42,7 @@ triggers_api:
 
 - **发送任何内容（文字/图片/视频/文件/语音）到群聊或私聊**：**一律用 `zapry_action`**
   - 发文字用 `action: "send-message"`（支持群名自动解析）
+  - 主动分享 URL 卡片用 `action: "send-link-card"`，必填 `chat_id`、`url`、`title`
   - 发图片用 `action: "send-photo"`
   - 发视频/文件/音频分别用对应 action
 - **禁止用 `message` 工具向群聊发文字**——`message` 工具不支持群名自动解析，会导致发送失败
@@ -91,7 +92,7 @@ triggers_api:
 **owner-only action 清单（含只读查询）：**
 - 好友/联系人：`get-my-contacts` / `get-my-friend-requests` / `accept-friend-request` / `reject-friend-request` / `add-friend` / `delete-friend`
 - Bot 资料/配置：`get-me` / `get-my-profile` / `get-my-soul` / `set-my-soul` / `get-my-skills` / `set-my-skills` / `set-my-name` / `set-my-description` / `set-my-wallet-address` / `set-my-friend-verify`
-- 群组/会话/历史：`get-my-groups` / `get-my-chats` / `get-chat-history` / `get-chat-member` / `get-chat-members` / `get-chat-member-count` / `get-chat-administrators` / `mute-chat-member` / `kick-chat-member` / `invite-chat-member` / `set-chat-title` / `set-chat-description`
+- 群组/会话/历史：`get-my-groups` / `get-my-chats` / `get-chat-history` / `get-chat-member` / `get-chat-members` / `get-chat-member-count` / `get-chat-administrators` / `create-group-chat` / `dismiss-group-chat` / `invite-chat-member` / `mute-chat-member` / `kick-chat-member` / `set-chat-title` / `set-chat-description`
 - Feed / Club / Webhook：`zapry_post`、`create-post` / `delete-post` / `comment-post` / `like-post` / `share-post` / `get-trending-posts` / `get-latest-posts` / `get-my-posts` / `search-posts` / `get-my-clubs` / `create-club` / `update-club` / `set-webhook` / `get-webhook-info` / `delete-webhook` / `webhooks-token`
 - 其他平台动作：任何通过 `zapry_action` 发起的跨聊天发送、平台查询、平台管理动作，默认都按 owner-only 处理
 
@@ -114,7 +115,7 @@ triggers_api:
 
 - `chat_id`, `user_id`, `message_id`, `callback_query_id`, `file_id`, `dynamic_id`
 - `page`, `page_size`, `language_code`, `wallet_address`, `need_verify`, `pending_only`
-- `text`, `photo`, `video`, `document`, `audio`, `voice`, `animation`, `content`, `images`
+- `text`, `url`, `title`, `content`, `icon_url`, `image_url`, `fallback_text`, `photo`, `video`, `document`, `audio`, `voice`, `animation`, `images`
 - `soulMd`, `skills`, `version`, `source`, `agentKey`
 
 兼容别名（仅兼容，不作为主写法）：`chatId`、`userId`、`messageId`、`dynamicId`、`pageSize`、`languageCode`
@@ -202,6 +203,7 @@ triggers_api:
 ### Messaging
 
 - `send-message`：`chat_id`, `text`；可选 `reply_markup`, `reply_to_message_id`, `message_thread_id`
+- `send-link-card`：`chat_id`, `url`, `title`；可选 `content`, `text`, `icon_url`, `image_url`, `source`, `open_mode`, `fallback_text`, `extra`, `reply_markup`, `reply_to_message_id`, `message_thread_id`
 - `send-photo`：`chat_id`；可选 `photo`（图片源）或 `prompt`（文字描述，自动生成图片）
 - `send-video`：`chat_id`, `video`
 - `send-document`：`chat_id`, `document`
@@ -238,6 +240,9 @@ triggers_api:
 - `get-chat-members`：`chat_id`；可选 `page`, `page_size`, `keyword`
 - `get-chat-member-count`：`chat_id`
 - `get-chat-administrators`：`chat_id`
+- `create-group-chat`：`title`；可选 `description`, `avatar`, `user_ids`, `bot_ids`
+- `dismiss-group-chat`：`chat_id`；可选 `reason`
+- `invite-chat-member`：`chat_id`, `user_id`
 - `mute-chat-member`：`chat_id`, `user_id`, `mute`
 - `kick-chat-member`：`chat_id`, `user_id`
 - `set-chat-title`：`chat_id`, `title`