feat: tag openclaw harness on signup + plugin-setup skill - #20
Conversation
|
codex: This currently fails the PR check at |
|
Source-level fixes in cbadbb6: bumped |
|
Correction: the harness-capable SDK release is |
Add `harness: "openclaw"` to the Inkbox.signup request so self-signups are attributed to this harness, and add a slim agent-facing skill that gates Inkbox plugin setup on explicit human permission. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The setup wizard passes harness: "openclaw" to Inkbox.signup, which requires the AgentSignupRequest harness field added in SDK 0.4.9. Bump the dependency range and update the signup test expectation to include the harness arg. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
0.4.10 is the release that introduces the agent-signup harness param; 0.4.9 was an earlier release that predates it. Lockfile left untouched since 0.4.10 is not yet published to npm. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…lugin setup Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…ermission Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The plugin's setup wizard already configures the plugin during signup, so a separate agent-facing "ask permission, then set it up yourself" instruction is redundant. Drop it; keep the harness= signup tagging. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…0.4.10 The typing refresh interval is now 40s (IMESSAGE_TYPING_REFRESH_MS), but the createIMessageTypingPulse tests still assumed the old 2s cadence (expecting a pulse after 2s and 150 pulses at the cap). Export the refresh/cap constants and derive the expectations from them so the tests track the real interval (1 immediate + one per 40s tick until the 300s cap = 8) and can't desync again. Also sync package-lock to @inkbox/sdk 0.4.10 — package.json was bumped to ^0.4.10 but the lockfile still pinned 0.4.7, which broke `npm ci`. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
5a45061 to
53f810f
Compare
Summary
harness: "openclaw"to theInkbox.signup(...)request insrc/setup-wizard.tsso self-signups driven by this harness are attributed correctly.skills/inkbox-plugin-setup/SKILL.mdthat tells the agent: if it self-signed up to Inkbox but the plugin is not configured, ask the human for explicit permission before enabling the plugin, since doing so wires native messaging channels into its runtime.Dependency
The
harnessfield is an optional, forward-compatible addition. This depends on the Inkbox SDK gaining theharnessfield on the signup request (coordinated PR). It is harmless until then.Related PRs (agent-signup
harness)harnessparam this builds on)