@atomic-chat/core 0.20.6 → 0.21.0

package/dist/integrations/configure/legacy-env-block.js

@@ -0,0 +1,47 @@
+/**
+ * OpenHands, Poolside and Muse Code read their endpoint from the environment only. Older releases
+ * persisted it — a marked block in the user's shell rc, `setx` on Windows — which captured every
+ * other use of the agent (a cloud key replaced by our placeholder, a dead localhost once the server
+ * stops). Now the variables are set only on the process we launch (`childEnv`, and inline in the
+ * app's terminal), and Connect removes the block an older release wrote: exactly the region between
+ * its paired marker lines, never a user's own export of the same variable. Mirrors
+ * `remove_legacy_env_agent_config` in the app's `core/system/commands.rs`; the Windows `setx`
+ * variables are removed by the app alone.
+ */
+/** The rc files an older release may have written to: which one depended on `$SHELL` back then. */
+const LEGACY_RC_FILES = ['.zshenv', '.bash_profile', '.bashrc'];
+/** `content` without the region between (and including) the paired `marker` lines. */
+export function removeMarkedEnvBlock(content, marker) {
+    const lines = content.split('\n');
+    if (!lines.some((line) => line.startsWith(marker)))
+        return content;
+    let inBlock = false;
+    return lines
+        .filter((line) => {
+        if (line.startsWith(marker)) {
+            inBlock = !inBlock;
+            return false;
+        }
+        return !inBlock;
+    })
+        .join('\n');
+}
+/** Remove `marker`'s block from every rc file that has one; files without it are not touched. */
+export async function removeLegacyEnvBlocks(fs, marker) {
+    for (const rc of LEGACY_RC_FILES) {
+        const content = await fs.read(rc);
+        if (content === undefined)
+            continue;
+        const cleaned = removeMarkedEnvBlock(content, marker);
+        if (cleaned !== content)
+            await fs.write(rc, cleaned);
+    }
+}
+/** The writer of an agent configured through its launch environment alone. */
+export function legacyEnvAgentWriter(marker) {
+    return async ({ fs, platform }) => {
+        if (platform !== 'win32')
+            await removeLegacyEnvBlocks(fs, marker);
+    };
+}
+//# sourceMappingURL=legacy-env-block.js.map

package/dist/integrations/configure/legacy-env-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-env-block.js","sourceRoot":"","sources":["../../../src/integrations/configure/legacy-env-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,mGAAmG;AACnG,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC,CAAA;AAE/D,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAClE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC,OAAO,CAAA;YAClB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,CAAC,OAAO,CAAA;IACjB,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAY,EAAE,MAAc;IACtE,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,OAAO,KAAK,SAAS;YAAE,SAAQ;QACnC,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACrD,IAAI,OAAO,KAAK,OAAO;YAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAChC,IAAI,QAAQ,KAAK,OAAO;YAAE,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACnE,CAAC,CAAA;AACH,CAAC"}

package/dist/integrations/configure/mimo.d.ts

@@ -1,9 +1,10 @@
 /**
- * MiMo Code — `~/.config/mimocode/mimocode.json`.
+ * MiMo Code — `mimocode.jsonc` when there is one, else `mimocode.json`, in `$MIMOCODE_HOME/config`,
+ * else `~/.config/mimocode`.
  *
  * Port of `configure_mimo` in `src-tauri/src/core/system/commands.rs`. MiMo Code is a fork of
  * OpenCode and its config is OpenCode's field for field; only the directory, the file name and the
- * `$schema` URL differ.
+ * `$schema` URL differ. Earlier releases wrote a `$schema` MiMo does not serve; it is corrected.
  */
 import type { ConfigureInput } from './registry.js';
 export declare function configureMimo(input: ConfigureInput): Promise<void>;

package/dist/integrations/configure/mimo.js

@@ -1,18 +1,17 @@
 /**
- * MiMo Code — `~/.config/mimocode/mimocode.json`.
+ * MiMo Code — `mimocode.jsonc` when there is one, else `mimocode.json`, in `$MIMOCODE_HOME/config`,
+ * else `~/.config/mimocode`.
  *
  * Port of `configure_mimo` in `src-tauri/src/core/system/commands.rs`. MiMo Code is a fork of
  * OpenCode and its config is OpenCode's field for field; only the directory, the file name and the
- * `$schema` URL differ.
+ * `$schema` URL differ. Earlier releases wrote a `$schema` MiMo does not serve; it is corrected.
  */
 import { registerWriter } from './registry.js';
-import { writeOpencodeStyleConfig } from './opencode-style.js';
-export function configureMimo(input) {
-    return writeOpencodeStyleConfig(input, {
-        dir: '.config/mimocode',
-        file: 'mimocode.json',
-        schema: 'https://mimo.xiaomi.com/config.json',
-        lenient: false,
+import { mimoTarget, writeOpencodeStyleConfig } from './opencode-style.js';
+export async function configureMimo(input) {
+    return writeOpencodeStyleConfig(input, await mimoTarget(input.fs, input.env), {
+        schema: 'https://mimo.xiaomi.com/mimocode/config.json',
+        staleSchema: 'https://mimo.xiaomi.com/config.json',
     });
 }
 registerWriter('mimo', configureMimo);

package/dist/integrations/configure/mimo.js.map

@@ -1 +1 @@
-{"version":3,"file":"mimo.js","sourceRoot":"","sources":["../../../src/integrations/configure/mimo.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,OAAO,wBAAwB,CAAC,KAAK,EAAE;QACrC,GAAG,EAAE,kBAAkB;QACvB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,qCAAqC;QAC7C,OAAO,EAAE,KAAK;KACf,CAAC,CAAA;AACJ,CAAC;AAED,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA"}
+{"version":3,"file":"mimo.js","sourceRoot":"","sources":["../../../src/integrations/configure/mimo.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE1E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAqB;IACvD,OAAO,wBAAwB,CAAC,KAAK,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;QAC5E,MAAM,EAAE,8CAA8C;QACtD,WAAW,EAAE,qCAAqC;KACnD,CAAC,CAAA;AACJ,CAAC;AAED,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA"}

package/dist/integrations/configure/muse.d.ts

@@ -1,9 +1,9 @@
 /**
  * Muse Code is the one agent with no writable endpoint configuration at all: the provider is chosen
  * per invocation with `--provider meta --base-url <url> --model <id>` (see the catalog's run args),
- * so `apiUrl` and `model` are accepted for symmetry and never written. Muse only checks that
- * `META_API_KEY` is present — the call goes wherever `--base-url` points — so the local server's own
- * key (or the `atomic` placeholder) satisfies both ends.
+ * and Muse only checks that `META_API_KEY` is present — the call goes wherever `--base-url` points —
+ * so the local server's own key (or the `atomic` placeholder) set on the child satisfies both ends.
+ * Nothing is persisted; Connect only removes what an older release did (`legacy-env-block.ts`).
  */
 import type { ConfigureWriter } from './registry.js';
 export declare const configureMuse: ConfigureWriter;

package/dist/integrations/configure/muse.js

@@ -1,13 +1,12 @@
 /**
  * Muse Code is the one agent with no writable endpoint configuration at all: the provider is chosen
  * per invocation with `--provider meta --base-url <url> --model <id>` (see the catalog's run args),
- * so `apiUrl` and `model` are accepted for symmetry and never written. Muse only checks that
- * `META_API_KEY` is present — the call goes wherever `--base-url` points — so the local server's own
- * key (or the `atomic` placeholder) satisfies both ends.
+ * and Muse only checks that `META_API_KEY` is present — the call goes wherever `--base-url` points —
+ * so the local server's own key (or the `atomic` placeholder) set on the child satisfies both ends.
+ * Nothing is persisted; Connect only removes what an older release did (`legacy-env-block.ts`).
  */
+import { legacyEnvAgentWriter } from './legacy-env-block.js';
 import { registerWriter } from './registry.js';
-import { configureEnvAgent } from './env-agent.js';
-const MARKER = '# Atomic Chat - Muse Code Config';
-export const configureMuse = (input) => configureEnvAgent(input, { agentId: 'muse', marker: MARKER, prefix: 'META_' });
+export const configureMuse = legacyEnvAgentWriter('# Atomic Chat - Muse Code Config');
 registerWriter('muse', configureMuse);
 //# sourceMappingURL=muse.js.map

package/dist/integrations/configure/muse.js.map

@@ -1 +1 @@
-{"version":3,"file":"muse.js","sourceRoot":"","sources":["../../../src/integrations/configure/muse.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,MAAM,MAAM,GAAG,kCAAkC,CAAA;AAEjD,MAAM,CAAC,MAAM,aAAa,GAAoB,CAAC,KAAK,EAAE,EAAE,CACtD,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;AAEhF,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA"}
+{"version":3,"file":"muse.js","sourceRoot":"","sources":["../../../src/integrations/configure/muse.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAoB,oBAAoB,CAAC,kCAAkC,CAAC,CAAA;AAEtG,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA"}

package/dist/integrations/configure/openclaude.d.ts

@@ -1,13 +1,28 @@
 /**
- * OpenClaude — `~/.openclaude.json` plus `~/.openclaude/.openclaude-profile.json`.
+ * OpenClaude — its global config (`~/.openclaude.json`) plus the startup profile
+ * (`~/.openclaude/.openclaude-profile.json`).
  *
- * Port of `configure_openclaude` in `src-tauri/src/core/system/commands.rs`. OpenClaude keeps a
- * list of provider profiles in its global config and a separate startup-profile file that carries
- * the environment its launcher exports; both have to agree, so both are written.
+ * Port of `configure_openclaude` / `connect_openclaude` in the app (`src-tauri/src/core/system/
+ * claude_config.rs`). OpenClaude keeps a list of provider profiles in its global config and a
+ * separate startup-profile file that carries the environment its launcher exports; both have to
+ * agree, so both are written. Paths follow OpenClaude 0.34: the config home is
+ * `$OPENCLAUDE_CONFIG_DIR`, else `~/.openclaude`; a `.config.json` there is the global config, else
+ * `.openclaude.json` in `$OPENCLAUDE_CONFIG_DIR` or the home directory.
  *
- * OpenClaude routes us through its OpenAI-compatible shim and a local Atomic Chat needs no key, so
- * `apiKey` is accepted for call-site symmetry and ignored — which is why the keyed and keyless
- * cases produce byte-identical files.
+ * OpenClaude routes us through its OpenAI-compatible shim and sends the profile's `apiKey` as a
+ * bearer token, so the server's key goes into the profile (`atomic` for a keyless server) — without
+ * it a keyed server answers 401. Our profile is matched by its id only: one the user made from
+ * OpenClaude's own Atomic Chat preset is theirs. With a known window the profile carries
+ * `maxContextLength`, and the global `env` an output cap for the model (a profile has no output
+ * setting). The global `env` also gets empty values for the shell variables that would make
+ * OpenClaude skip its active profile: it applies that `env` before deciding. What every key held
+ * before is kept in the sidecars `json-backup.ts` describes, for the app's Disconnect.
  */
+import type { ConfigFs } from '../config-io.js';
 import type { ConfigureInput } from './registry.js';
+export interface OpenclaudePaths {
+    config: string;
+    profile: string;
+}
+export declare function openclaudePaths(fs: ConfigFs, env: NodeJS.ProcessEnv): Promise<OpenclaudePaths>;
 export declare function configureOpenclaude(input: ConfigureInput): Promise<void>;

package/dist/integrations/configure/openclaude.js

@@ -1,56 +1,149 @@
 /**
- * OpenClaude — `~/.openclaude.json` plus `~/.openclaude/.openclaude-profile.json`.
+ * OpenClaude — its global config (`~/.openclaude.json`) plus the startup profile
+ * (`~/.openclaude/.openclaude-profile.json`).
  *
- * Port of `configure_openclaude` in `src-tauri/src/core/system/commands.rs`. OpenClaude keeps a
- * list of provider profiles in its global config and a separate startup-profile file that carries
- * the environment its launcher exports; both have to agree, so both are written.
+ * Port of `configure_openclaude` / `connect_openclaude` in the app (`src-tauri/src/core/system/
+ * claude_config.rs`). OpenClaude keeps a list of provider profiles in its global config and a
+ * separate startup-profile file that carries the environment its launcher exports; both have to
+ * agree, so both are written. Paths follow OpenClaude 0.34: the config home is
+ * `$OPENCLAUDE_CONFIG_DIR`, else `~/.openclaude`; a `.config.json` there is the global config, else
+ * `.openclaude.json` in `$OPENCLAUDE_CONFIG_DIR` or the home directory.
  *
- * OpenClaude routes us through its OpenAI-compatible shim and a local Atomic Chat needs no key, so
- * `apiKey` is accepted for call-site symmetry and ignored — which is why the keyed and keyless
- * cases produce byte-identical files.
+ * OpenClaude routes us through its OpenAI-compatible shim and sends the profile's `apiKey` as a
+ * bearer token, so the server's key goes into the profile (`atomic` for a keyless server) — without
+ * it a keyed server answers 401. Our profile is matched by its id only: one the user made from
+ * OpenClaude's own Atomic Chat preset is theirs. With a known window the profile carries
+ * `maxContextLength`, and the global `env` an output cap for the model (a profile has no output
+ * setting). The global `env` also gets empty values for the shell variables that would make
+ * OpenClaude skip its active profile: it applies that `env` before deciding. What every key held
+ * before is kept in the sidecars `json-backup.ts` describes, for the app's Disconnect.
  */
+import { join } from 'node:path';
 import { AtomicCoreError } from '../../contracts/index.js';
-import { canonicalJson, parseJsonStrict } from '../config-io.js';
+import { canonicalJson, keyOr, parseJsonStrict } from '../config-io.js';
+import { configDirFrom, getAt, isOurServerUrl, jsonEqual, ourServerFromUrl, outputCap, readBackup, redo, wholeFileBackup, writeBackup, writeConfigFile, } from './json-backup.js';
 import { asJsonArray, asJsonObject } from './json-tree.js';
 import { registerWriter } from './registry.js';
-const CONFIG_PATH = '.openclaude.json';
-const CONFIG_HOME = '.openclaude';
-const PROFILE_PATH = `${CONFIG_HOME}/.openclaude-profile.json`;
 const ATOMIC_PROFILE_ID = 'provider_atomic_chat';
-export async function configureOpenclaude(input) {
-    const { fs, apiUrl, model } = input;
-    await fs.mkdirp(CONFIG_HOME);
-    const text = await fs.read(CONFIG_PATH);
-    const parsed = text === undefined ? {} : parseJsonStrict(text, fs.absolute(CONFIG_PATH));
-    const root = asJsonObject(parsed);
-    if (!root)
-        throw new AtomicCoreError('IO_ERROR', `${fs.absolute(CONFIG_PATH)} is not a JSON object`);
-    const entry = {
+const PROVIDER = 'atomic-chat';
+/**
+ * With `CLAUDE_CODE_USE_OPENAI` plus a base URL or model (or a complete `ANTHROPIC_*` trio) in the
+ * environment, OpenClaude treats the shell as the user's choice and skips its active profile
+ * (`hasCompleteProviderSelection`). Empty values in the global config's `env` take a shell's
+ * leftovers out of that decision; once our profile applies, OpenClaude clears and sets them itself.
+ */
+const SHELL_OVERRIDES = [
+    'CLAUDE_CODE_USE_OPENAI',
+    'OPENAI_BASE_URL',
+    'OPENAI_API_BASE',
+    'OPENAI_MODEL',
+    'ANTHROPIC_BASE_URL',
+    'CLAUDE_CODE_USE_GEMINI_VERTEX',
+];
+const PROFILE_PATH = ['providerProfiles', { id: ATOMIC_PROFILE_ID }];
+export async function openclaudePaths(fs, env) {
+    const dir = configDirFrom(env['OPENCLAUDE_CONFIG_DIR'], fs.home);
+    const configHome = dir ?? '.openclaude';
+    const legacy = dir === undefined ? `${configHome}/.config.json` : join(configHome, '.config.json');
+    const config = (await fs.exists(legacy))
+        ? legacy
+        : dir === undefined
+            ? '.openclaude.json'
+            : join(dir, '.openclaude.json');
+    const profile = dir === undefined ? `${configHome}/.openclaude-profile.json` : join(dir, '.openclaude-profile.json');
+    return { config, profile };
+}
+function writesFor(input) {
+    const { apiUrl, model, apiKey, contextLength } = input;
+    const window = contextLength !== undefined && contextLength > 0 ? contextLength : undefined;
+    const profile = {
         id: ATOMIC_PROFILE_ID,
         name: 'Atomic Chat',
-        provider: 'atomic-chat',
+        provider: PROVIDER,
+        apiKey: keyOr(apiKey, 'atomic'),
         baseUrl: apiUrl,
         model,
     };
-    const profiles = asJsonArray(root['providerProfiles']) ?? [];
-    root['providerProfiles'] = profiles;
-    // Match on either identifier so a profile written by an older build — or one the user renamed —
-    // is replaced rather than duplicated. The whole entry goes, extra keys included.
-    const index = profiles.findIndex((candidate) => {
-        const object = asJsonObject(candidate);
-        return object?.['id'] === ATOMIC_PROFILE_ID || object?.['provider'] === 'atomic-chat';
-    });
-    if (index >= 0)
-        profiles[index] = entry;
-    else
-        profiles.push(entry);
-    root['activeProviderProfileId'] = ATOMIC_PROFILE_ID;
-    await fs.write(CONFIG_PATH, canonicalJson(root));
-    await fs.write(PROFILE_PATH, canonicalJson({
-        profile: 'atomic-chat',
-        env: { OPENAI_BASE_URL: apiUrl, OPENAI_MODEL: model },
+    if (window !== undefined)
+        profile['maxContextLength'] = window;
+    const writes = [
+        [PROFILE_PATH, profile],
+        [['activeProviderProfileId'], ATOMIC_PROFILE_ID],
+    ];
+    for (const name of SHELL_OVERRIDES)
+        writes.push([['env', name], '']);
+    if (window !== undefined) {
+        writes.push([
+            ['env', 'CLAUDE_CODE_OPENAI_MAX_OUTPUT_TOKENS'],
+            JSON.stringify({ [model]: outputCap(window) }),
+        ]);
+    }
+    return writes;
+}
+/** What an earlier release wrote without a backup: our profile and the active pointer at it. */
+function forgetLegacy(root) {
+    const profiles = asJsonArray(root['providerProfiles']);
+    if (profiles) {
+        for (let i = profiles.length - 1; i >= 0; i--) {
+            if (asJsonObject(profiles[i])?.['id'] === ATOMIC_PROFILE_ID)
+                profiles.splice(i, 1);
+        }
+    }
+    if (root['activeProviderProfileId'] === ATOMIC_PROFILE_ID)
+        delete root['activeProviderProfileId'];
+}
+function startupProfileIsOurs(doc, server) {
+    const base = getAt(doc, ['env', 'OPENAI_BASE_URL']);
+    return (asJsonObject(doc)?.['profile'] === PROVIDER && typeof base === 'string' && isOurServerUrl(server, base));
+}
+/** A startup profile that cannot be parsed counts as absent: OpenClaude ignores it too. */
+async function readStartupProfile(fs, path) {
+    const text = await fs.read(path);
+    if (text === undefined)
+        return undefined;
+    try {
+        return parseJsonStrict(text, fs.absolute(path));
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function configureOpenclaude(input) {
+    const { fs, apiUrl, model, apiKey } = input;
+    const paths = await openclaudePaths(fs, input.env);
+    const text = await fs.read(paths.config);
+    const parsed = text === undefined ? {} : parseJsonStrict(text, fs.absolute(paths.config));
+    const root = asJsonObject(parsed);
+    if (!root)
+        throw new AtomicCoreError('IO_ERROR', `${fs.absolute(paths.config)} is not a JSON object`);
+    const backup = redo(root, await readBackup(fs, paths.config), text !== undefined, writesFor(input), [], forgetLegacy);
+    // Sidecar first: a crash between the two leaves a backup whose values simply do not match yet.
+    await writeBackup(fs, paths.config, backup);
+    await writeConfigFile(fs, paths.config, canonicalJson(root));
+    const doc = {
+        profile: PROVIDER,
+        env: { OPENAI_BASE_URL: apiUrl, OPENAI_MODEL: model, OPENAI_API_KEY: keyOr(apiKey, 'atomic') },
         createdAt: new Date().toISOString(),
-    }));
+    };
+    const current = await readStartupProfile(fs, paths.profile);
+    const previous = await readBackup(fs, paths.profile);
+    const entry = previous?.entries[0];
+    let existed;
+    let before;
+    if (entry && current !== undefined && jsonEqual(entry.written, current)) {
+        existed = entry.existed;
+        before = entry.previous;
+    }
+    else if (current !== undefined && !startupProfileIsOurs(current, ourServerFromUrl(apiUrl))) {
+        existed = true;
+        before = current;
+    }
+    else {
+        existed = false;
+        before = undefined;
+    }
+    await writeBackup(fs, paths.profile, wholeFileBackup(existed, before, doc));
+    await writeConfigFile(fs, paths.profile, canonicalJson(doc));
 }
 registerWriter('openclaude', configureOpenclaude);
 //# sourceMappingURL=openclaude.js.map

package/dist/integrations/configure/openclaude.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclaude.js","sourceRoot":"","sources":["../../../src/integrations/configure/openclaude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,MAAM,WAAW,GAAG,kBAAkB,CAAA;AACtC,MAAM,WAAW,GAAG,aAAa,CAAA;AACjC,MAAM,YAAY,GAAG,GAAG,WAAW,2BAA2B,CAAA;AAC9D,MAAM,iBAAiB,GAAG,sBAAsB,CAAA;AAEhD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAqB;IAC7D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IACnC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAE5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IACxF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAA;IAEpG,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,MAAM;QACf,KAAK;KACN,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5D,IAAI,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAA;IACnC,gGAAgG;IAChG,iFAAiF;IACjF,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACtC,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,iBAAiB,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,aAAa,CAAA;IACvF,CAAC,CAAC,CAAA;IACF,IAAI,KAAK,IAAI,CAAC;QAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;;QAClC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAEzB,IAAI,CAAC,yBAAyB,CAAC,GAAG,iBAAiB,CAAA;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAEhD,MAAM,EAAE,CAAC,KAAK,CACZ,YAAY,EACZ,aAAa,CAAC;QACZ,OAAO,EAAE,aAAa;QACtB,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE;QACrD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CACH,CAAA;AACH,CAAC;AAED,cAAc,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA"}
+{"version":3,"file":"openclaude.js","sourceRoot":"","sources":["../../../src/integrations/configure/openclaude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEvE,OAAO,EACL,aAAa,EACb,KAAK,EACL,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,IAAI,EACJ,eAAe,EACf,WAAW,EACX,eAAe,GAChB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAG1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,MAAM,iBAAiB,GAAG,sBAAsB,CAAA;AAChD,MAAM,QAAQ,GAAG,aAAa,CAAA;AAC9B;;;;;GAKG;AACH,MAAM,eAAe,GAAG;IACtB,wBAAwB;IACxB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,+BAA+B;CACvB,CAAA;AAEV,MAAM,YAAY,GAAa,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAO9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAY,EAAE,GAAsB;IACxE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,GAAG,IAAI,aAAa,CAAA;IACvC,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,GAAG,KAAK,SAAS;YACjB,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IACnC,MAAM,OAAO,GACX,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAA;IACtG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IACtD,MAAM,MAAM,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,MAAM,OAAO,GAAe;QAC1B,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC/B,OAAO,EAAE,MAAM;QACf,KAAK;KACN,CAAA;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAA;IAC9D,MAAM,MAAM,GAAgB;QAC1B,CAAC,YAAY,EAAE,OAAO,CAAC;QACvB,CAAC,CAAC,yBAAyB,CAAC,EAAE,iBAAiB,CAAC;KACjD,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACpE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,CAAC,KAAK,EAAE,sCAAsC,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,iBAAiB;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAc,EAAE,MAA6B;IACzE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACnD,OAAO,CACL,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CACxG,CAAA;AACH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,kBAAkB,CAAC,EAAY,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAqB;IAC7D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC3C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;IAElD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IACzF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAErG,MAAM,MAAM,GAAG,IAAI,CACjB,IAAI,EACJ,MAAM,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,IAAI,KAAK,SAAS,EAClB,SAAS,CAAC,KAAK,CAAC,EAChB,EAAE,EACF,YAAY,CACb,CAAA;IACD,+FAA+F;IAC/F,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAE5D,MAAM,GAAG,GAAe;QACtB,OAAO,EAAE,QAAQ;QACjB,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;QAC9F,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,OAAgB,CAAA;IACpB,IAAI,MAA6B,CAAA;IACjC,IAAI,KAAK,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QACvB,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAA;IACzB,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,GAAG,OAAO,CAAA;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,KAAK,CAAA;QACf,MAAM,GAAG,SAAS,CAAA;IACpB,CAAC;IACD,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAC3E,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,cAAc,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA"}

package/dist/integrations/configure/openclaw.d.ts

@@ -1,24 +1,38 @@
 /**
- * OpenClaw keeps one config for the CLI and both desktop apps in `~/.openclaw/openclaw.json`
+ * OpenClaw keeps one config for the CLI and the macOS app in `~/.openclaw/openclaw.json`
  * (overridable with `OPENCLAW_CONFIG_PATH`); its Gateway watches the file and hot-reloads, so one
  * write covers everything with no restart.
  *
  * The merge has two tiers. Keys that express a decision the user may have made deliberately are
- * SEEDED only when absent — `models.mode`, `gateway.mode`, `gateway.auth.mode`,
- * `agents.defaults.timeoutSeconds`, and the per-model settings entry. Keys that say "run this model
- * now" are always OVERWRITTEN — our provider block and `agents.defaults.model.primary`.
+ * SEEDED only when absent — `models.mode`, `gateway.mode`, `gateway.auth.mode` (and that one only
+ * when the Gateway has no token or password to expect), and the per-model settings entry. Keys that
+ * say "run this model now" are always OVERWRITTEN — our provider block and
+ * `agents.defaults.model.primary`. What the keys held before is recorded in
+ * `openclaw.json.atomic-chat-backup.json` for the app's Disconnect.
  *
  * The one non-obvious rule is `modelPolicy.allow`. When it is non-empty it gates model selection
  * entirely, so a user restricted to a cloud provider would watch Run "succeed" and then be told our
  * model is not allowed — hence the `atomic/*` widening. But an absent key or `[]` already means
  * "allow anything", so writing into it would INTRODUCE a restriction nobody asked for. Those are
  * left exactly as they are.
+ *
+ * Mirrors `configure_openclaw_at` in the app's `core/system/commands.rs`, byte for byte.
  */
 import type { JsonValue } from '../config-io.js';
 import type { JsonObject } from './json-tree.js';
 import type { ConfigureWriter } from './registry.js';
+/** The output cap written next to a known window: a quarter of it, at most 8192 tokens. */
+export declare function outputCapFor(contextLength: number): number;
 /** Whether an allow-list already covers `modelRef`. A trailing `*` makes the entry a prefix match. */
 export declare function modelPolicyAllows(list: JsonValue[], modelRef: string): boolean;
+/**
+ * Bring a parsed `openclaw.json` into the shape the merge works on without changing what it means:
+ * a plain-string `agents.defaults.model` becomes `{ primary: <it> }`, and the
+ * `agents.defaults.timeoutSeconds: 240` older releases seeded goes.
+ */
+export declare function openclawNormalize(parsed: JsonValue): void;
+/** The keys Connect may overwrite besides our own provider entry. */
+export declare function openclawTrackedPaths(modelRef: string): string[][];
 /** The whole merge, with no I/O, so every rule above is testable against a plain object. */
-export declare function openclawPatchConfig(parsed: JsonValue, apiUrl: string, model: string, apiKey: string): JsonObject;
+export declare function openclawPatchConfig(parsed: JsonValue, apiUrl: string, model: string, apiKey: string, contextLength?: number, gatewaySecretInEnv?: boolean): JsonObject;
 export declare const configureOpenclaw: ConfigureWriter;

package/dist/integrations/configure/openclaw.js

@@ -1,27 +1,43 @@
 /**
- * OpenClaw keeps one config for the CLI and both desktop apps in `~/.openclaw/openclaw.json`
+ * OpenClaw keeps one config for the CLI and the macOS app in `~/.openclaw/openclaw.json`
  * (overridable with `OPENCLAW_CONFIG_PATH`); its Gateway watches the file and hot-reloads, so one
  * write covers everything with no restart.
  *
  * The merge has two tiers. Keys that express a decision the user may have made deliberately are
- * SEEDED only when absent — `models.mode`, `gateway.mode`, `gateway.auth.mode`,
- * `agents.defaults.timeoutSeconds`, and the per-model settings entry. Keys that say "run this model
- * now" are always OVERWRITTEN — our provider block and `agents.defaults.model.primary`.
+ * SEEDED only when absent — `models.mode`, `gateway.mode`, `gateway.auth.mode` (and that one only
+ * when the Gateway has no token or password to expect), and the per-model settings entry. Keys that
+ * say "run this model now" are always OVERWRITTEN — our provider block and
+ * `agents.defaults.model.primary`. What the keys held before is recorded in
+ * `openclaw.json.atomic-chat-backup.json` for the app's Disconnect.
  *
  * The one non-obvious rule is `modelPolicy.allow`. When it is non-empty it gates model selection
  * entirely, so a user restricted to a cloud provider would watch Run "succeed" and then be told our
  * model is not allowed — hence the `atomic/*` widening. But an absent key or `[]` already means
  * "allow anything", so writing into it would INTRODUCE a restriction nobody asked for. Those are
  * left exactly as they are.
+ *
+ * Mirrors `configure_openclaw_at` in the app's `core/system/commands.rs`, byte for byte.
  */
 import { AtomicCoreError } from '../../contracts/index.js';
 import { canonicalJson, keyOr, parseJsonLenient } from '../config-io.js';
+import { readBackup, renderBackup, trackKeys, writeBackupText } from './json-key-backup.js';
 import { asJsonArray, asJsonObject } from './json-tree.js';
 import { registerWriter } from './registry.js';
 const PROVIDER_ID = 'atomic';
 const DEFAULT_PATH = '.openclaw/openclaw.json';
-/** Small local models blow past OpenClaw's short default once wrapped in the agent prompt + tools. */
-const DEFAULT_TIMEOUT_SECONDS = 240;
+/**
+ * Per-request budget on our provider: it covers connecting, the headers and streaming the body, and
+ * raises the ~120 s idle watchdog for this provider only — a long prompt on a slow machine needs
+ * more before the first token. Unlike `agents.defaults.timeoutSeconds`, it leaves every other model
+ * alone.
+ */
+const PROVIDER_TIMEOUT_SECONDS = 600;
+/** `agents.defaults.timeoutSeconds` older releases seeded, capping every model's attempt. */
+const LEGACY_AGENT_TIMEOUT_SECONDS = 240;
+/** The output cap written next to a known window: a quarter of it, at most 8192 tokens. */
+export function outputCapFor(contextLength) {
+    return Math.min(8192, Math.floor(contextLength / 4));
+}
 /** Read `<parent>[key]` as an object, creating it when absent; anything else is a hard error. */
 function childObject(parent, key, label) {
     if (parent[key] === undefined)
@@ -39,8 +55,34 @@ export function modelPolicyAllows(list, modelRef) {
         return entry.endsWith('*') ? modelRef.startsWith(entry.slice(0, -1)) : entry === modelRef;
     });
 }
+/**
+ * Bring a parsed `openclaw.json` into the shape the merge works on without changing what it means:
+ * a plain-string `agents.defaults.model` becomes `{ primary: <it> }`, and the
+ * `agents.defaults.timeoutSeconds: 240` older releases seeded goes.
+ */
+export function openclawNormalize(parsed) {
+    const defaults = asJsonObject(asJsonObject(asJsonObject(parsed)?.['agents'])?.['defaults']);
+    if (!defaults)
+        return;
+    if (defaults['timeoutSeconds'] === LEGACY_AGENT_TIMEOUT_SECONDS)
+        delete defaults['timeoutSeconds'];
+    const model = defaults['model'];
+    if (typeof model === 'string')
+        defaults['model'] = { primary: model };
+}
+/** The keys Connect may overwrite besides our own provider entry. */
+export function openclawTrackedPaths(modelRef) {
+    return [
+        ['models', 'mode'],
+        ['gateway', 'mode'],
+        ['gateway', 'auth', 'mode'],
+        ['agents', 'defaults', 'model', 'primary'],
+        ['agents', 'defaults', 'models', modelRef],
+        ['agents', 'defaults', 'modelPolicy', 'allow'],
+    ];
+}
 /** The whole merge, with no I/O, so every rule above is testable against a plain object. */
-export function openclawPatchConfig(parsed, apiUrl, model, apiKey) {
+export function openclawPatchConfig(parsed, apiUrl, model, apiKey, contextLength, gatewaySecretInEnv = false) {
     const root = asJsonObject(parsed);
     if (!root)
         throw new AtomicCoreError('IO_ERROR', 'openclaw.json is not a JSON object');
@@ -50,31 +92,39 @@ export function openclawPatchConfig(parsed, apiUrl, model, apiKey) {
         models['mode'] = 'merge';
     const providers = childObject(models, 'providers', 'models.providers');
     // The catalog entry's `id` is the bare model id our /v1 server reports; OpenClaw builds the ref as
-    // `<providerId>/<id>`, so prefixing here would double it to `atomic/atomic/…` and break lookup.
+    // `<providerId>/<id>`, so prefixing here would double it to `atomic/atomic/…` and break lookup. A
+    // known window lets OpenClaw compact before the server refuses; an unknown one is not invented.
+    const modelEntry = { id: model, name: model };
+    if (contextLength !== undefined) {
+        modelEntry['contextWindow'] = contextLength;
+        modelEntry['maxTokens'] = outputCapFor(contextLength);
+    }
     providers[PROVIDER_ID] = {
         baseUrl: apiUrl,
         apiKey: keyOr(apiKey, 'atomic'),
         api: 'openai-completions',
-        models: [{ id: model, name: model }],
+        timeoutSeconds: PROVIDER_TIMEOUT_SECONDS,
+        models: [modelEntry],
     };
-    // The local gateway refuses to open its websocket without connection auth; for a loopback-only
-    // setup "none" (private-ingress open auth) is what makes the agent reachable with no token.
     const gateway = childObject(root, 'gateway', 'gateway');
     if (gateway['mode'] === undefined)
         gateway['mode'] = 'local';
-    const auth = childObject(gateway, 'auth', 'gateway.auth');
-    if (auth['mode'] === undefined)
-        auth['mode'] = 'none';
+    // The local Gateway refuses its websocket without connection auth and, with no mode set, expects a
+    // token. With no token or password to expect, "none" (private-ingress open auth) makes it
+    // reachable; with one, "none" would switch token auth off.
+    const auth = asJsonObject(gateway['auth']);
+    const authIsSet = ['mode', 'token', 'password'].some((key) => {
+        const value = auth?.[key];
+        return value !== undefined && value !== null && value !== '';
+    });
+    if (!authIsSet && !gatewaySecretInEnv)
+        childObject(gateway, 'auth', 'gateway.auth')['mode'] = 'none';
     const agents = childObject(root, 'agents', 'agents');
     const defaults = childObject(agents, 'defaults', 'agents.defaults');
-    if (defaults['timeoutSeconds'] === undefined)
-        defaults['timeoutSeconds'] = DEFAULT_TIMEOUT_SECONDS;
-    // Both a plain string and an object are accepted here, but only the object form has room for the
-    // fallbacks OpenClaw writes itself, so a string is normalised rather than extended.
     if (asJsonObject(defaults['model']) === undefined)
         defaults['model'] = {};
-    const modelEntry = asJsonObject(defaults['model']);
-    modelEntry['primary'] = modelRef;
+    const primary = asJsonObject(defaults['model']);
+    primary['primary'] = modelRef;
     // `agents.defaults.models` holds aliases and per-model settings. Pre-migration builds also read it
     // as an allowlist, so the entry is still seeded; on current builds it restricts nothing.
     const settings = childObject(defaults, 'models', 'agents.defaults.models');
@@ -86,14 +136,20 @@ export function openclawPatchConfig(parsed, apiUrl, model, apiKey) {
     }
     return root;
 }
-export const configureOpenclaw = async ({ apiUrl, model, apiKey, fs, env, }) => {
+export const configureOpenclaw = async ({ apiUrl, model, apiKey, fs, env, contextLength, }) => {
     const override = env['OPENCLAW_CONFIG_PATH'];
     const path = override && override.length > 0 ? override : DEFAULT_PATH;
+    const gatewaySecretInEnv = ['OPENCLAW_GATEWAY_TOKEN', 'OPENCLAW_GATEWAY_PASSWORD'].some((name) => (env[name] ?? '').trim() !== '');
     // OpenClaw reads this file as JSON5, so we must parse with the same leniency or we reject configs
     // it happily accepts. Comments are dropped on write; every setting is preserved.
     const text = await fs.read(path);
-    const parsed = text === undefined ? {} : parseJsonLenient(text, fs.absolute(path));
-    await fs.write(path, canonicalJson(openclawPatchConfig(parsed, apiUrl, model, apiKey)));
+    const base = text === undefined ? {} : parseJsonLenient(text, fs.absolute(path));
+    openclawNormalize(base);
+    const patched = openclawPatchConfig(JSON.parse(JSON.stringify(base)), apiUrl, model, apiKey, contextLength, gatewaySecretInEnv);
+    const previous = await readBackup(fs, path);
+    const keys = trackKeys(base, patched, openclawTrackedPaths(`${PROVIDER_ID}/${model}`), previous?.keys ?? []);
+    await fs.write(path, canonicalJson(patched));
+    await writeBackupText(fs, path, renderBackup({ keys, seeded: [] }));
 };
 registerWriter('openclaw', configureOpenclaw);
 //# sourceMappingURL=openclaw.js.map