@byokit/openclaw 0.15.0 → 0.16.1

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## Unreleased
 
+## 0.16.1 (2026-10-17)
+
+- Dependency update: pins @byokit/accounts 0.27.0.
+
+## 0.16.0 (2026-10-17)
+
+- Dependency update: pins @byokit/accounts 0.26.0.
+
+- FEAT: `addKey` on `opencode-go` says why a Go workspace listing could not be read. A `retry` `network` result now carries the optional `code` (`workspaces_unread`) and `message` (the accounts words to show), so the app can tell the user to check the connection instead of guessing. Other results are unchanged.
+
+## 0.15.1 (2026-10-17)
+
+- Dependency update: pins @byokit/relay 0.8.1.
+- Dependency update: pins @byokit/pair 0.10.3.
+- Dependency update: pins @byokit/accounts 0.25.1.
+
 ## 0.15.0 (2026-10-17)
 
 - Dependency update: pins @byokit/secrets 0.5.2.

package/README.md

@@ -162,8 +162,8 @@ An OpenCode Go plan login can act for several workspaces, and the Go gateway ref
 `x-opencode-org-id`. Without `orgId` the add lists the key's workspaces first (the console listing `@byokit/accounts` uses):
 one is used unasked; several resolve `{ status: 'needs_workspace', workspaces: [{ id, name }] }` with nothing saved, so show
 the pick (the names) and add again with `orgId: '<picked id>'`; a key the console refuses (a workspace-bound service key) adds
-with no workspace. A listing that could not be read (offline, a server error) resolves `{ status: 'retry', reason: 'network' }`
-and changes nothing. Workspace ids are row ids, never secrets. Another route refuses an `orgId` with `not_included`/`model`.
+with no workspace. A listing that could not be read (offline, a server error) resolves `{ status: 'retry', reason: 'network', code: 'workspaces_unread', message }`
+and changes nothing. The optional `code` and `message` on `retry` are set only for that typed listing failure; `message` is the words to show the user (never provider text). Workspace ids are row ids, never secrets. Another route refuses an `orgId` with `not_included`/`model`.
 A member that is not your own throws. `retry` means the engine may have taken the key but it was not kept
 sealed (for example a gateway restart ran late); no usable key was kept, so add it again. Failures never contain keys, key fragments, headers or raw engine diagnostics. Label the option **API key (billed per use)**. Select only `routes()` rows with
 `keyEntry: true`; API rows remain `offer: false`. Each route also carries its engine `revision`, `checked` date,

package/dist/keys.d.ts

@@ -3,12 +3,18 @@ import type { RouteView } from './routes.ts';
 import type { Member, ModelInfo } from './types.ts';
 export type KeyFailureReason = 'auth' | 'billing' | 'empty' | 'model' | 'network' | 'engine' | 'inference' | 'busy';
 /** `needs_workspace`: the Go plan login acts for several workspaces (console orgs); show the pick and add again with
- *  its `orgId`. Nothing was saved or sent to the engine. Ids are row ids, never secrets. */
+ *  its `orgId`. Nothing was saved or sent to the engine. Ids are row ids, never secrets. `retry`'s `code` and `message`
+ *  are set only for a typed `@byokit/accounts` listing failure (`workspaces_unread`); `message` is the words to show. */
 export type AddKeyResult = {
     status: 'ok';
 } | {
-    status: 'invalid' | 'not_included' | 'retry';
+    status: 'invalid' | 'not_included';
     reason: KeyFailureReason;
+} | {
+    status: 'retry';
+    reason: KeyFailureReason;
+    code?: string;
+    message?: string;
 } | {
     status: 'needs_workspace';
     workspaces: {

package/dist/keys.js

@@ -1,4 +1,5 @@
 import { join } from 'node:path';
+import { KeyRouteError } from '@byokit/accounts';
 import { openCodeWorkspaces } from '@byokit/accounts/opencode-go';
 import { activate } from './activation.js';
 import { keyAgentId, MEMBER_ID, KEY_PREFIX, untilListed } from './members.js';
@@ -104,8 +105,12 @@ export function createKeys(ctx) {
                     try {
                         workspaces = await openCodeWorkspaces(o.apiKey, (input, init) => fetch(input, { ...init, signal: init?.signal ? AbortSignal.any([init.signal, ac.signal]) : ac.signal }));
                     }
-                    catch { // `workspaces_unread`: offline, timeout, a server error or a body that is no list
-                        return ac.signal.aborted ? failure('retry', 'busy') : failure('retry', 'network');
+                    catch (error) { // `workspaces_unread`: offline, timeout, a server error or a body that is no list
+                        if (ac.signal.aborted)
+                            return failure('retry', 'busy');
+                        if (!(error instanceof KeyRouteError))
+                            return failure('retry', 'network');
+                        return { status: 'retry', reason: 'network', code: error.code, message: error.message };
                     }
                     if (ac.signal.aborted)
                         return failure('retry', 'busy');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/openclaw",
-  "version": "0.15.0",
+  "version": "0.16.1",
   "description": "The OpenClaw runtime kit: the pinned engine's full operator surface with plain-words helpers for members, sign-in, runs and approvals.",
   "license": "Apache-2.0",
   "type": "module",
@@ -60,9 +60,9 @@
     "prepack": "tsc -b && node ../../scripts/fix-words-dts.cjs"
   },
   "dependencies": {
-    "@byokit/accounts": "0.25.0",
-    "@byokit/pair": "0.10.2",
-    "@byokit/relay": "0.8.0",
+    "@byokit/accounts": "0.27.0",
+    "@byokit/pair": "0.10.3",
+    "@byokit/relay": "0.8.1",
     "@byokit/discover": "0.8.4",
     "@byokit/seal": "0.3.1",
     "@byokit/secrets": "0.5.2",