@agenthippo-ai/agenthippo 0.2.3-dataplane → 1.110.9

package/out/scripts/analytics/setup-analytics.sh

@@ -361,6 +361,53 @@ run_install() {
     fi
 }
 
+# Ensure the proxy has an auth key without ever asking the user for one.
+#
+# The shipped config sets general_settings.master_key from ${LITELLM_MASTER_KEY} and the launcher
+# refuses to start unauthenticated, so a first run with no key leaves LiteLLM dead with the real
+# error buried in a log. Generate one, persist it to the env file the launcher already sources,
+# and hand the same value to clients as AGENTHIPPO_LITELLM_API_KEY.
+ensure_litellm_master_key() {
+    local env_file="${AGENT_HOME_DIR}/.env"
+
+    if [[ -f "$env_file" ]] && grep -q '^[[:space:]]*LITELLM_MASTER_KEY=' "$env_file"; then
+        log_success "LiteLLM master key already configured"
+        return 0
+    fi
+    # Respect a key exported by the caller rather than minting a second one.
+    if [[ -n "${LITELLM_MASTER_KEY:-}" ]]; then
+        log_success "Using LITELLM_MASTER_KEY from the environment"
+        return 0
+    fi
+
+    local key=""
+    if command -v openssl >/dev/null 2>&1; then
+        key="sk-$(openssl rand -hex 24)"
+    elif command -v python3 >/dev/null 2>&1; then
+        key="sk-$(python3 -c 'import secrets; print(secrets.token_hex(24))')"
+    else
+        log_warn "Neither openssl nor python3 found; cannot generate a LiteLLM master key"
+        log_info "Set one manually:  echo 'LITELLM_MASTER_KEY=sk-...' >> ${env_file}"
+        return 1
+    fi
+
+    mkdir -p "${AGENT_HOME_DIR}"
+    touch "$env_file"
+    chmod 600 "$env_file" 2>/dev/null || true
+    # Keep a trailing newline so appends never join onto a previous line.
+    if [[ -s "$env_file" ]] && [[ -n "$(tail -c 1 "$env_file" 2>/dev/null)" ]]; then
+        echo "" >> "$env_file"
+    fi
+    {
+        echo "# Generated by setup-analytics — authenticates the local LiteLLM proxy."
+        echo "# Clients read the same value as AGENTHIPPO_LITELLM_API_KEY."
+        echo "LITELLM_MASTER_KEY=${key}"
+        echo "AGENTHIPPO_LITELLM_API_KEY=${key}"
+    } >> "$env_file"
+    export LITELLM_MASTER_KEY="$key"
+    log_success "Generated a LiteLLM master key (stored in ${env_file}, mode 600)"
+}
+
 # Setup configuration
 setup_config() {
     log_step "Setting up configuration..."
@@ -370,6 +417,9 @@ setup_config() {
     mkdir -p "${ANALYTICS_DIR}/config"
     mkdir -p "${ANALYTICS_DIR}/traces"
 
+    # Before any early return below — the launcher exits non-zero without a key.
+    ensure_litellm_master_key || true
+
     # Copy OTEL Collector config if not present
     if [[ ! -f "${ANALYTICS_DIR}/config/otel-collector.yaml" ]]; then
         if [[ -f "${SCRIPT_DIR}/otel-collector.yaml" ]]; then
@@ -411,14 +461,9 @@ setup_config() {
         log_success "LiteLLM OTEL config already present (user-owned)"
     fi
 
-    # Keep canonical template in sync with user edits when writable.
-    if [[ -f "$source_config" ]] && ! cmp -s "$litellm_config" "$source_config"; then
-        if cp "$litellm_config" "$source_config" 2>/dev/null; then
-            log_success "Synced LiteLLM OTEL config back to source template"
-        else
-            log_info "Using user-owned LiteLLM config (source template is read-only)"
-        fi
-    fi
+    # Deliberately ONE-WAY (template -> user). Copying the user's config back over the shipped
+    # template wrote their edits into the installed extension / a git-tracked file, and model
+    # entries can carry a literal upstream `api_key` — a credential leak into source control.
     # Install LiteLLM hook for tool order sanitizer
     local hooks_target="${AGENT_HOME_DIR}/agentide_litellm_hooks_v1.py"
     local hooks_source=""
@@ -501,9 +546,34 @@ check_litellm() {
     fi
 }
 
-# Get LiteLLM PIDs
+# Get LiteLLM PIDs.
+#
+# Prefer the PID the launcher recorded: `pgrep -f litellm` matches ANY command line containing
+# the word, so on a shared or CI host it happily returns a colleague's proxy, an editor with the
+# string in its argv, or a log tail — and stop_litellm SIGKILLs whatever it returns. The broad
+# match stays only as a fallback when no PID file exists, and is scoped to a real proxy invocation.
 get_litellm_pids() {
-    pgrep -f "litellm" 2>/dev/null || true
+    local pid_file="${AGENT_HOME_DIR}/litellm.pid"
+    if [[ -f "$pid_file" ]]; then
+        local recorded
+        recorded="$(head -n 1 "$pid_file" | tr -d '\r' | tr -d '[:space:]')"
+        if [[ "$recorded" =~ ^[0-9]+$ ]] && kill -0 "$recorded" 2>/dev/null; then
+            echo "$recorded"
+            return 0
+        fi
+    fi
+    # Fallback for an orphaned proxy with no PID file. Two filters, because "litellm --config"
+    # also appears inside the lifecycle wrapper's own script text: require the config invocation,
+    # then drop shell wrappers (and this script) so we never SIGKILL the thing that started us.
+    local pid cmd
+    for pid in $(pgrep -f "litellm.*--config" 2>/dev/null || true); do
+        [[ "$pid" == "$$" ]] && continue
+        cmd="$(ps -p "$pid" -o command= 2>/dev/null || true)"
+        case "$cmd" in
+            */sh\ -c*|*/bash\ -c*|*/zsh\ -c*|sh\ -c*|bash\ -c*|zsh\ -c*) continue ;;
+        esac
+        echo "$pid"
+    done
 }
 
 # Stop LiteLLM gracefully
@@ -564,9 +634,12 @@ start_litellm_with_otel() {
     # Write PID file with OTEL flag + base URL for fast status checks
     local pid_file="${AGENT_HOME_DIR}/litellm.pid"
     local litellm_host="${LITELLM_HOST:-127.0.0.1}"
-    local tls_enabled=true
-    case "${LITELLM_ENABLE_TLS:-true}" in
-        0|false|no|off) tls_enabled=false ;;
+    # Must match agentide-litellm.sh, which defaults TLS OFF (port 4000). Defaulting to true here
+    # recorded https://…:4443 in the PID file while the proxy actually bound http://…:4000, and
+    # the extension then persisted that unreachable URL as the global litellm baseUrl.
+    local tls_enabled=false
+    case "${LITELLM_ENABLE_TLS:-false}" in
+        1|true|yes|on) tls_enabled=true ;;
     esac
     local litellm_port="${LITELLM_PORT:-}"
     if [[ -z "$litellm_port" ]]; then
@@ -593,6 +666,13 @@ start_litellm_with_otel() {
         return 0
     else
         log_error "Failed to start LiteLLM. Check /tmp/litellm-otel.log"
+        # Surface the actual reason — the IDE shows this output, and "check a
+        # log file" is a dead end for non-technical users.
+        if [[ -f /tmp/litellm-otel.log ]]; then
+            echo ""
+            log_info "Last 10 lines of log:"
+            tail -10 /tmp/litellm-otel.log 2>/dev/null || true
+        fi
         return 1
     fi
 }

package/out/scripts/analytics/start-analytics.sh

@@ -61,6 +61,25 @@ is_running() {
     return 1
 }
 
+# OTLP receiver ports, read from the collector config the daemon will run with,
+# so the preflight can never drift from what the collector actually binds.
+# Falls back to the OTLP defaults if the config is missing or unparseable.
+get_collector_ports() {
+    local ports=""
+    if [[ -f "${CONFIG_FILE}" ]]; then
+        ports=$(awk '
+            /^receivers:/ { in_receivers = 1; next }
+            /^[^[:space:]#]/ { in_receivers = 0 }
+            in_receivers && /endpoint:/ && match($0, /:[0-9]+[[:space:]]*$/) {
+                port = substr($0, RSTART + 1, RLENGTH - 1)
+                gsub(/[[:space:]]/, "", port)
+                print port
+            }
+        ' "${CONFIG_FILE}" 2>/dev/null | sort -un | tr '\n' ' ')
+    fi
+    echo "${ports:-4317 4318}"
+}
+
 # Check if port is in use (returns 0 if in use)
 port_in_use() {
     local port=$1
@@ -100,12 +119,13 @@ find_orphan_otelcol() {
 # Kill orphan collector if user confirms
 handle_orphan_collector() {
     local orphan_pid=$1
+    local port="${2:-4317}"
     local orphan_cmdline=$(ps -p "$orphan_pid" -o command= 2>/dev/null || echo "unknown")
 
     log_warn "Found orphan OTEL Collector (PID: ${orphan_pid})"
     log_warn "Command: ${orphan_cmdline}"
 
-    if [[ "${FORCE:-}" == "1" ]] || [[ "${1:-}" == "--force" ]]; then
+    if [[ "${FORCE:-}" == "1" ]]; then
         log_info "Killing orphan process..."
         kill "${orphan_pid}" 2>/dev/null || true
         sleep 1
@@ -115,7 +135,7 @@ handle_orphan_collector() {
         return 0
     fi
 
-    log_error "Port 4317 is in use by an orphan collector."
+    log_error "Port ${port} is in use by an orphan collector."
     log_error "This may be a leftover from a previous installation."
     echo ""
     echo "To fix, run one of:"
@@ -125,6 +145,37 @@ handle_orphan_collector() {
     return 1
 }
 
+# Explain, in plain language, who owns a port we need and how to free it.
+# Docker publishes container ports through its own proxy process, so name the
+# container (the thing the user can act on) rather than "com.docker.backend".
+report_port_conflict() {
+    local port=$1
+    local owner="another program"
+    local fix="Free the port (check with: lsof -i :${port}), then run Setup Spotlight again."
+
+    if command -v lsof &>/dev/null; then
+        local line=$(lsof -nP -iTCP:"${port}" -sTCP:LISTEN 2>/dev/null | awk 'NR==2 {print $1, $2}')
+        if [[ -n "$line" ]]; then
+            local cmd="${line% *}"
+            local pid="${line##* }"
+            owner="'${cmd}' (PID ${pid})"
+            fix="Stop that program (or run: kill ${pid}), then run Setup Spotlight again."
+            if [[ "$cmd" == com.docke* || "$cmd" == *docker* ]] && command -v docker &>/dev/null; then
+                local container=$(docker ps --filter "publish=${port}" --format '{{.Names}}' 2>/dev/null | head -1)
+                if [[ -n "$container" ]]; then
+                    owner="Docker container '${container}'"
+                    fix="Stop it with:  docker stop ${container}   then run Setup Spotlight again."
+                fi
+            fi
+        fi
+    fi
+
+    log_error "Cannot start Spotlight: port ${port} is already in use by ${owner}."
+    echo ""
+    echo "  To fix: ${fix}"
+    echo ""
+}
+
 # Start in foreground
 start_foreground() {
     local otelcol=$(find_otelcol)
@@ -149,12 +200,18 @@ start_daemon() {
 
     local otelcol=$(find_otelcol)
 
-    # Check for port conflicts before starting
-    if port_in_use 4317; then
+    # Check for port conflicts before starting. The collector needs every
+    # receiver port in its config — a conflict on any of them kills it at bind
+    # time with the real error buried in the log, so fail here with a clear message.
+    local port
+    for port in $(get_collector_ports); do
+        if ! port_in_use "$port"; then
+            continue
+        fi
         local orphan_pid=$(find_orphan_otelcol || true)
         if [[ -n "$orphan_pid" ]]; then
             if [[ "${FORCE:-}" == "1" ]]; then
-                log_warn "Port 4317 in use by orphan process (PID: ${orphan_pid}). Killing..."
+                log_warn "Port ${port} in use by orphan process (PID: ${orphan_pid}). Killing..."
                 kill "${orphan_pid}" 2>/dev/null || true
                 sleep 1
                 # Force kill if still running
@@ -162,16 +219,21 @@ start_daemon() {
                     kill -9 "${orphan_pid}" 2>/dev/null || true
                     sleep 1
                 fi
+                # The orphan may not have been the port owner (e.g. a container
+                # holds it) — re-check before declaring the port free.
+                if port_in_use "$port"; then
+                    report_port_conflict "$port"
+                    exit 1
+                fi
             else
-                handle_orphan_collector "$orphan_pid"
+                handle_orphan_collector "$orphan_pid" "$port"
                 exit 1
             fi
         else
-            log_error "Port 4317 is in use by another process."
-            log_error "Check with: lsof -i :4317"
+            report_port_conflict "$port"
             exit 1
         fi
-    fi
+    done
 
     # Ensure directories exist
     mkdir -p "${ANALYTICS_DIR}/traces"
@@ -260,12 +322,22 @@ show_status() {
             echo "    kill ${orphan_pid} && $0 --daemon"
             echo "  Or auto-fix with:"
             echo "    FORCE=1 $0 --daemon"
-        elif port_in_use 4317; then
-            echo -e "OTEL Collector: ${RED}Port Conflict${NC}"
-            echo -e "  ${RED}⚠ Port 4317 in use by another process${NC}"
-            echo "  Check with: lsof -i :4317"
         else
-            echo -e "OTEL Collector: ${RED}Stopped${NC}"
+            local conflict_port=""
+            local port
+            for port in $(get_collector_ports); do
+                if port_in_use "$port"; then
+                    conflict_port=$port
+                    break
+                fi
+            done
+            if [[ -n "$conflict_port" ]]; then
+                echo -e "OTEL Collector: ${RED}Port Conflict${NC}"
+                echo -e "  ${RED}⚠ Port ${conflict_port} in use by another process${NC}"
+                echo "  Check with: lsof -i :${conflict_port}"
+            else
+                echo -e "OTEL Collector: ${RED}Stopped${NC}"
+            fi
         fi
     fi
     echo ""

package/out/scripts/gateway/setup-gateway.sh

@@ -162,6 +162,32 @@ MANAGED_GATEWAY_WRAPPER_DIR="${HOME}/.local/bin"
 AGENT_ANYWHERE_PATH_MARKER_BEGIN="# >>> Agent Anywhere PATH >>>"
 AGENT_ANYWHERE_PATH_MARKER_END="# <<< Agent Anywhere PATH <<<"
 MANAGED_GATEWAY_WRAPPER_MARKER="# Managed by Agent Anywhere"
+HIPPOCLAW_NPM_PACKAGE="@agenthippo-ai/hippoclaw"
+
+# Global npm trees: scoped HippoClaw first, legacy openclaw fallback.
+global_gateway_package_dir_candidates() {
+    local npm_root="${1:-}"
+    local lib_base="${2:-}"
+    if [[ -n "$npm_root" ]]; then
+        printf '%s\n' "$npm_root/@agenthippo-ai/hippoclaw" "$npm_root/openclaw"
+    fi
+    if [[ -n "$lib_base" ]]; then
+        printf '%s\n' "$lib_base/@agenthippo-ai/hippoclaw" "$lib_base/openclaw"
+    fi
+}
+
+remove_global_gateway_package_trees() {
+    local npm_root prefix pkg_dir
+    npm_root="$(npm root -g 2>/dev/null || true)"
+    prefix="$(npm prefix -g 2>/dev/null || true)"
+    while IFS= read -r pkg_dir; do
+        [[ -n "$pkg_dir" && -e "$pkg_dir" ]] || continue
+        rm -rf "$pkg_dir"
+    done < <(
+        global_gateway_package_dir_candidates "$npm_root" "${prefix:+$prefix/lib/node_modules}"
+        global_gateway_package_dir_candidates "" "$NPM_GLOBAL_PREFIX/lib/node_modules"
+    )
+}
 
 add_path_entry() {
     local entry="$1"
@@ -514,15 +540,15 @@ resolve_managed_gateway_install() {
     if [[ -n "$current_node" ]]; then
         npm_root="$(npm root -g 2>/dev/null || true)"
         prefix="$(npm prefix -g 2>/dev/null || true)"
-        package_root="${npm_root}/openclaw"
-        if [[ -n "$npm_root" && -n "$prefix" && -d "$package_root" ]]; then
+        while IFS= read -r package_root; do
+            [[ -n "$npm_root" && -n "$prefix" && -d "$package_root" ]] || continue
             resolve_managed_gateway_install_from_root "$current_node" "$package_root" "${prefix}/bin" && return 0
-        fi
+        done < <(global_gateway_package_dir_candidates "$npm_root" "${prefix:+$prefix/lib/node_modules}")
 
-        package_root="${NPM_GLOBAL_PREFIX}/lib/node_modules/openclaw"
-        if [[ -d "$package_root" ]]; then
+        while IFS= read -r package_root; do
+            [[ -d "$package_root" ]] || continue
             resolve_managed_gateway_install_from_root "$current_node" "$package_root" "${NPM_GLOBAL_PREFIX}/bin" && return 0
-        fi
+        done < <(global_gateway_package_dir_candidates "" "$NPM_GLOBAL_PREFIX/lib/node_modules")
     fi
 
     local candidate_node candidate_dir install_dir
@@ -530,10 +556,10 @@ resolve_managed_gateway_install() {
     while IFS= read -r candidate_node; do
         candidate_dir="${candidate_node%/node}"
         install_dir="$(dirname "$candidate_dir")"
-        package_root="${install_dir}/lib/node_modules/openclaw"
-        if [[ -d "$package_root" ]]; then
+        while IFS= read -r package_root; do
+            [[ -d "$package_root" ]] || continue
             resolve_managed_gateway_install_from_root "$candidate_node" "$package_root" "$candidate_dir" && return 0
-        fi
+        done < <(global_gateway_package_dir_candidates "" "$install_dir/lib/node_modules")
     done < <(find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' 2>/dev/null | sort -r)
     return 1
 }
@@ -845,7 +871,7 @@ install_openclaw_from_remote_git_spec() {
     }
 
     local tgz
-    tgz="$(ls -t "$work/src"/openclaw-*.tgz 2>/dev/null | head -1)"
+    tgz="$(ls -t "$work/src"/agenthippo-ai-hippoclaw-*.tgz "$work/src"/openclaw-*.tgz 2>/dev/null | head -1)"
     if [[ -z "$tgz" || ! -f "$tgz" ]]; then
         log_error "npm pack did not produce openclaw-*.tgz under clone"
         rm -rf "$work"
@@ -1047,11 +1073,15 @@ check_installed() {
     groot="$(resolve_managed_gateway_package_root_from_manifest || true)"
     if [[ -z "$groot" || ! -d "$groot" ]]; then
         npm_root="$(npm root -g 2>/dev/null || true)"
-        groot=""
-        [[ -n "$npm_root" ]] && groot="$npm_root/openclaw"
-        if [[ -z "$groot" || ! -d "$groot" ]]; then
-            groot="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
-        fi
+        prefix="$(npm prefix -g 2>/dev/null || true)"
+        while IFS= read -r candidate; do
+            [[ -d "$candidate" ]] || continue
+            groot="$candidate"
+            break
+        done < <(
+            global_gateway_package_dir_candidates "$npm_root" "${prefix:+$prefix/lib/node_modules}"
+            global_gateway_package_dir_candidates "" "$NPM_GLOBAL_PREFIX/lib/node_modules"
+        )
     fi
     if [[ -n "$groot" && -d "$groot" ]]; then
         if [[ -f "$groot/dist/entry.mjs" || -f "$groot/dist/entry.js" ]]; then
@@ -1119,7 +1149,11 @@ check_uninstalled() {
     local groot=""
     groot="$(resolve_managed_gateway_package_root_from_manifest || true)"
     if [[ -z "$groot" || ! -d "$groot" ]]; then
-        groot="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
+        while IFS= read -r candidate; do
+            [[ -d "$candidate" ]] || continue
+            groot="$candidate"
+            break
+        done < <(global_gateway_package_dir_candidates "" "$NPM_GLOBAL_PREFIX/lib/node_modules")
     fi
     if [[ -n "$groot" && -d "$groot" ]]; then
         log_warn "Managed npm openclaw package still present ($groot)"
@@ -1169,9 +1203,9 @@ install_gateway() {
 
     local _npm_root
     _npm_root="$(npm root -g 2>/dev/null || true)"
-    if [[ -n "$_npm_root" && -e "$_npm_root/openclaw" ]]; then
-        log_info "Removing existing global openclaw tree (avoids partial install / tar errors)..."
-        rm -rf "$_npm_root/openclaw"
+    if [[ -n "$_npm_root" ]]; then
+        log_info "Removing existing global gateway package trees (if present)..."
+        remove_global_gateway_package_trees
     fi
 
     # Local directory: npm links to that path (stable). Remote github:/git+: use clone+pack+tgz
@@ -1270,8 +1304,13 @@ remove_managed_openclaw_artifacts() {
     local dir install_dir pkg_root
 
     pkg_root="$NPM_GLOBAL_PREFIX/lib/node_modules/openclaw"
-    if [[ -d "$pkg_root" ]]; then
-        log_info "Removing managed openclaw package from $pkg_root"
+    if [[ -d "$NPM_GLOBAL_PREFIX/lib/node_modules/@agenthippo-ai/hippoclaw" ]]; then
+        pkg_root="$NPM_GLOBAL_PREFIX/lib/node_modules/@agenthippo-ai/hippoclaw"
+    elif [[ ! -d "$pkg_root" ]]; then
+        pkg_root=""
+    fi
+    if [[ -n "$pkg_root" && -d "$pkg_root" ]]; then
+        log_info "Removing managed gateway package from $pkg_root"
         rm -rf "$pkg_root"
     fi
     rm -f "$NPM_GLOBAL_PREFIX/bin/openclaw" "$NPM_GLOBAL_PREFIX/bin/hippoclaw" 2>/dev/null || true
@@ -1279,11 +1318,11 @@ remove_managed_openclaw_artifacts() {
     [[ -d "$NODE_BOOTSTRAP_ROOT" ]] || return 0
     while IFS= read -r dir; do
         install_dir="$(dirname "$dir")"
-        pkg_root="$install_dir/lib/node_modules/openclaw"
-        if [[ -d "$pkg_root" ]]; then
-            log_info "Removing managed openclaw package from $pkg_root"
-            rm -rf "$pkg_root"
-        fi
+        while IFS= read -r candidate; do
+            [[ -d "$candidate" ]] || continue
+            log_info "Removing managed gateway package from $candidate"
+            rm -rf "$candidate"
+        done < <(global_gateway_package_dir_candidates "" "$install_dir/lib/node_modules")
         rm -f "$dir/openclaw" "$dir/hippoclaw" 2>/dev/null || true
     done < <(
         find "$NODE_BOOTSTRAP_ROOT" -maxdepth 4 -type f -path '*/bin/node' -print 2>/dev/null \
@@ -1306,12 +1345,13 @@ remove_resolved_cli_openclaw_install() {
         node_bin_dir="$(cd "$(dirname "$cli_bin")" 2>/dev/null && pwd)" || break
         # npm global layout: <prefix>/bin/<cli> and <prefix>/lib/node_modules/openclaw.
         prefix="$(dirname "$node_bin_dir")"
-        pkg_root="$prefix/lib/node_modules/openclaw"
-        if [[ -d "$pkg_root" ]]; then
-            log_info "Removing openclaw package tree resolved via CLI on PATH: $pkg_root"
+        while IFS= read -r pkg_root; do
+            [[ -d "$pkg_root" ]] || continue
+            log_info "Removing gateway package tree resolved via CLI on PATH: $pkg_root"
             rm -rf "$pkg_root" 2>/dev/null || true
             removed_any=true
-        fi
+            break
+        done < <(global_gateway_package_dir_candidates "" "$prefix/lib/node_modules")
         rm -f "$node_bin_dir/openclaw" "$node_bin_dir/hippoclaw" 2>/dev/null || true
         # Bail if the same path still resolves (could not delete, e.g. permissions) to avoid looping.
         hash -r 2>/dev/null || true
@@ -1393,13 +1433,13 @@ uninstall_gateway() {
         log_error "npm not found"
         exit 1
     fi
-    npm uninstall -g openclaw 2>/dev/null || true
+    npm uninstall -g @agenthippo-ai/hippoclaw openclaw 2>/dev/null || true
     remove_managed_gateway_wrapper_state
     cleanup_shell_path_setup
     # Also remove the install wherever the CLI actually resolves (nvm/other Node global trees),
     # not just the active node + managed prefix that `npm uninstall -g` above covers.
     remove_resolved_cli_openclaw_install
-    log_success "Ran: npm uninstall -g openclaw (global tree removed if present)"
+    log_success "Ran: npm uninstall -g @agenthippo-ai/hippoclaw openclaw (global tree removed if present)"
     log_info "~/.openclaw was not removed (config, sessions, and credentials stay on disk)."
     local oc_after=""
     hash -r 2>/dev/null || true

package/out/shared/models.js

@@ -30,72 +30,15 @@ exports.BUILTIN_MODELS = [
         contextWindow: 200000,
         maxOutputTokens: 8192,
         capabilities: ['chat', 'vision', 'function-calling', 'code'],
-        description: 'AgentHippo automatically picks the best model for your request',
+        // The picker must say where the prompt goes: this route leaves the machine through
+        // AgentHippo's servers on the account JWT, NOT through any API key the user configured.
+        description: 'Managed gateway — routed through AgentHippo using your account, not your own API keys',
         recommended: true,
     },
-    // ===========================================
-    // OpenAI Models
-    // ===========================================
-    {
-        id: 'gpt-4.1-nano',
-        name: 'GPT-4.1 Nano',
-        provider: 'openai',
-        contextWindow: 128000,
-        maxOutputTokens: 2048,
-        capabilities: ['chat', 'vision', 'function-calling', 'code'],
-        description: 'Lightweight GPT-4.1 option for quick completions',
-    },
-    {
-        id: 'gpt-5.3-codex',
-        name: 'GPT-5.3 Codex (ChatGPT)',
-        provider: 'openai-codex',
-        contextWindow: 256000,
-        maxOutputTokens: 8192,
-        capabilities: ['chat', 'code', 'function-calling'],
-        description: 'Codex model authenticated via ChatGPT OAuth subscription',
-        recommended: true,
-    },
-    // ===========================================
-    // LiteLLM Proxy Models
-    // These route through your LiteLLM deployment
-    // ===========================================
-    {
-        id: 'litellm/gpt-4.1-nano',
-        name: 'LiteLLM GPT-4.1 Nano',
-        provider: 'litellm',
-        contextWindow: 128000,
-        maxOutputTokens: 2048,
-        capabilities: ['chat', 'vision', 'function-calling', 'code'],
-        description: 'GPT-4.1 Nano via LiteLLM proxy',
-    },
-    {
-        id: 'litellm/gpt-5-nano',
-        name: 'LiteLLM GPT-5 Nano',
-        provider: 'litellm',
-        contextWindow: 256000,
-        maxOutputTokens: 8192,
-        capabilities: ['chat', 'vision', 'function-calling', 'code'],
-        description: 'GPT-5 Nano via LiteLLM proxy',
-    },
-    // Claude Models: Claude Code will auto translate models into dated aliases
-    {
-        id: 'claude-sonnet-4-5-20250929',
-        name: 'Claude Sonnet 4.5 (SDK alias)',
-        provider: 'litellm',
-        contextWindow: 200000,
-        maxOutputTokens: 8192,
-        capabilities: ['chat', 'vision', 'artifacts', 'code'],
-        description: 'Compatibility alias used by Claude Agent SDK (maps to Claude 3.5 Sonnet)',
-    },
-    {
-        id: 'claude-haiku-4-5-20251001',
-        name: 'Claude Haiku 4.5 20251001',
-        provider: 'litellm',
-        contextWindow: 200000,
-        maxOutputTokens: 8192,
-        capabilities: ['chat', 'vision', 'artifacts', 'code'],
-        description: 'Compatibility alias used by Claude Agent SDK (maps to Claude 3 Haiku)',
-    },
+    // LiteLLM models are NOT hardcoded here.
+    // They come from two dynamic sources:
+    // 1. Auto-discovery via LiteLLM's /model/info endpoint (require explicit enablement)
+    // 2. User-defined custom models in agentide.models.custom
 ];
 // -----------------------------------------------------------------------------
 // Registry Key Functions
@@ -178,58 +121,16 @@ function getActiveModels() {
 // Model Resolution (for CLI)
 // -----------------------------------------------------------------------------
 /**
- * Common model aliases that users might type.
- * Maps short names to full SDK-compatible model IDs.
- */
-const MODEL_ALIASES = {
-    // Claude aliases
-    'claude-sonnet-4': 'claude-sonnet-4-5-20250929',
-    'claude-sonnet': 'claude-sonnet-4-5-20250929',
-    'sonnet': 'claude-sonnet-4-5-20250929',
-    'claude-haiku-4': 'claude-haiku-4-5-20251001',
-    'claude-haiku': 'claude-haiku-4-5-20251001',
-    'haiku': 'claude-haiku-4-5-20251001',
-    'claude-opus-4': 'claude-opus-4-20250514',
-    'claude-opus': 'claude-opus-4-20250514',
-    'opus': 'claude-opus-4-20250514',
-    // OpenAI aliases (these work as-is with SDK, but include for consistency)
-    'gpt-4o': 'gpt-4o',
-    'gpt-4': 'gpt-4o',
-    'o3': 'o3',
-    'o1': 'o1',
-};
-/**
- * Resolve a model alias to a full model ID.
+ * Normalize a model id for CLI/headless use.
  *
- * Resolution order:
- * 1. Check if it's an exact match in BUILTIN_MODELS
- * 2. Check if it's a known alias
- * 3. Check if any model ID starts with the input (prefix match)
- * 4. Return as-is (let SDK handle it)
- *
- * @param input - User-provided model name (e.g., 'claude-sonnet-4', 'sonnet')
- * @returns Resolved model ID suitable for SDK
+ * Only canonicalizes ids that match a built-in catalog entry (currently `ah-auto`).
+ * All other ids are passed through unchanged for LiteLLM, pack specs, or provider SDKs.
  */
 function resolveModelAlias(input) {
     if (!input) {
         return input;
     }
     const normalized = input.toLowerCase().trim();
-    // 1. Exact match in BUILTIN_MODELS
     const exactMatch = exports.BUILTIN_MODELS.find(m => m.id.toLowerCase() === normalized);
-    if (exactMatch) {
-        return exactMatch.id;
-    }
-    // 2. Known alias
-    const aliasMatch = MODEL_ALIASES[normalized];
-    if (aliasMatch) {
-        return aliasMatch;
-    }
-    // 3. Prefix match (e.g., 'claude-sonnet-4' matches 'claude-sonnet-4-5-20250929')
-    const prefixMatch = exports.BUILTIN_MODELS.find(m => m.id.toLowerCase().startsWith(normalized));
-    if (prefixMatch) {
-        return prefixMatch.id;
-    }
-    // 4. Return as-is
-    return input;
+    return exactMatch?.id ?? input;
 }

package/out/spotlight/install.js

@@ -194,7 +194,13 @@ async function installSpotlightViewFromFiles(files, options) {
         if (!INSTALLABLE_ROOT_FILES.has(relPath) && !INSTALLABLE_PREFIXES.some(prefix => relPath.startsWith(prefix))) {
             continue;
         }
-        const destination = path.join(installDir, relPath);
+        // The prefix check above is on the raw string — "scripts/../../x" passes it. Resolve and
+        // require containment so a store bundle can never write outside its own install dir.
+        const resolvedInstallDir = path.resolve(installDir);
+        const destination = path.resolve(resolvedInstallDir, relPath);
+        if (!destination.startsWith(resolvedInstallDir + path.sep)) {
+            throw new Error(`Store bundle entry "${relPath}" escapes the install directory`);
+        }
         await fs_1.promises.mkdir(path.dirname(destination), { recursive: true });
         await fs_1.promises.writeFile(destination, content);
     }