@chrysb/alphaclaw 0.9.15 → 0.9.17

package/lib/server/routes/onboarding.js

@@ -93,7 +93,7 @@ const registerOnboardingRoutes = ({
   authProfiles,
   ensureGatewayProxyConfig,
   getBaseUrl,
-  startGateway,
+  runOnboardedBootSequence,
 }) => {
   // Keep mutating onboarding routes marker-gated so in-progress imports
   // can promote files before the final completion marker is written.
@@ -114,7 +114,7 @@ const registerOnboardingRoutes = ({
     authProfiles,
     ensureGatewayProxyConfig,
     getBaseUrl,
-    startGateway,
+    runOnboardedBootSequence,
   });
 
   const kEnvVarNamePattern = /^[A-Z_][A-Z0-9_]*$/;

package/lib/server/routes/system.js

@@ -30,7 +30,7 @@ const registerSystemRoutes = ({
   let envRestartPending = false;
   let openclawSecretRuntimePromise = null;
   const kManagedChannelTokenPattern =
-    /^(?:TELEGRAM_BOT_TOKEN|DISCORD_BOT_TOKEN|SLACK_BOT_TOKEN|SLACK_APP_TOKEN)(?:_[A-Z0-9_]+)?$/;
+    /^(?:TELEGRAM_BOT_TOKEN|DISCORD_BOT_TOKEN|SLACK_BOT_TOKEN|SLACK_APP_TOKEN|WHATSAPP_OWNER_NUMBER)(?:_[A-Z0-9_]+)?$/;
   const kEnvVarsReservedForUserInput = new Set([
     "GITHUB_WORKSPACE_REPO",
     "GOG_KEYRING_PASSWORD",
@@ -838,7 +838,7 @@ const registerSystemRoutes = ({
     }
     restartRequiredState.markRestartInProgress();
     try {
-      restartGateway();
+      await restartGateway();
       envRestartPending = false;
       restartRequiredState.clearRequired();
       restartRequiredState.markRestartComplete();

package/lib/server/usage-tracker-config.js

@@ -8,6 +8,8 @@ const kUsageTrackerPluginPath = path.resolve(
   "usage-tracker",
 );
 const kConversationAccessHookPolicyKey = "allowConversationAccess";
+const kChannelPluginIds = ["telegram", "discord", "slack", "whatsapp"];
+const kDefaultDiscordGroupPolicy = "disabled";
 
 const ensurePluginsShell = (cfg = {}) => {
   if (!cfg.plugins || typeof cfg.plugins !== "object") cfg.plugins = {};
@@ -70,13 +72,58 @@ const ensureUsageTrackerPluginEntry = (cfg = {}) => {
   return JSON.stringify(cfg) !== before;
 };
 
+const hasDiscordGuildAllowlist = (discordConfig = {}) => {
+  const guilds = discordConfig.guilds;
+  return !!guilds && typeof guilds === "object" && Object.keys(guilds).length > 0;
+};
+
+const reconcileDiscordGroupPolicy = (cfg = {}) => {
+  const discord = cfg.channels?.discord;
+  if (!discord || typeof discord !== "object" || discord.enabled === false) {
+    return false;
+  }
+  if (hasDiscordGuildAllowlist(discord)) return false;
+  if (discord.groupPolicy !== "allowlist") return false;
+  discord.groupPolicy = kDefaultDiscordGroupPolicy;
+  return true;
+};
+
+const reconcileEnabledChannelPlugins = (cfg = {}) => {
+  ensurePluginsShell(cfg);
+  let changed = false;
+  for (const pluginKey of kChannelPluginIds) {
+    const channelConfig = cfg.channels?.[pluginKey];
+    if (!channelConfig || typeof channelConfig !== "object") continue;
+    if (channelConfig.enabled !== true) continue;
+    const allowBefore = cfg.plugins.allow.length;
+    ensurePluginAllowed({ cfg, pluginKey });
+    if (cfg.plugins.allow.length > allowBefore) changed = true;
+    const existingEntry = cfg.plugins.entries[pluginKey];
+    if (!existingEntry || existingEntry.enabled !== true) {
+      cfg.plugins.entries[pluginKey] = {
+        ...(existingEntry && typeof existingEntry === "object" ? existingEntry : {}),
+        enabled: true,
+      };
+      changed = true;
+    }
+  }
+  return changed;
+};
+
+const reconcileManagedPluginConfig = (cfg = {}) => {
+  let changed = ensureUsageTrackerPluginEntry(cfg);
+  if (reconcileEnabledChannelPlugins(cfg)) changed = true;
+  if (reconcileDiscordGroupPolicy(cfg)) changed = true;
+  return changed;
+};
+
 const ensureUsageTrackerPluginConfig = ({ fsModule, openclawDir }) => {
   const cfg = readOpenclawConfig({
     fsModule,
     openclawDir,
     fallback: {},
   });
-  const changed = ensureUsageTrackerPluginEntry(cfg);
+  const changed = reconcileManagedPluginConfig(cfg);
   if (!changed) return false;
   writeOpenclawConfig({
     fsModule,
@@ -89,8 +136,12 @@ const ensureUsageTrackerPluginConfig = ({ fsModule, openclawDir }) => {
 
 module.exports = {
   kUsageTrackerPluginPath,
+  kDefaultDiscordGroupPolicy,
   ensurePluginsShell,
   ensurePluginAllowed,
   ensureUsageTrackerPluginEntry,
+  reconcileDiscordGroupPolicy,
+  reconcileEnabledChannelPlugins,
+  reconcileManagedPluginConfig,
   ensureUsageTrackerPluginConfig,
 };

package/lib/server.js

@@ -65,6 +65,10 @@ const {
   getDoctorCard,
   updateDoctorCardStatus,
 } = require("./server/db/doctor");
+const {
+  initAuthDb,
+  createLoginThrottleStore,
+} = require("./server/db/auth");
 const { createWebhookMiddleware } = require("./server/webhook-middleware");
 const {
   readEnvFile,
@@ -186,7 +190,10 @@ const agentsService = createAgentsService({
   restartGateway: () => restartGatewayWithReload(reloadEnv),
   clawCmd,
 });
-const loginThrottle = { ...createLoginThrottle(), getClientKey };
+const loginThrottle = {
+  ...createLoginThrottle({ store: createLoginThrottleStore() }),
+  getClientKey,
+};
 const resolveSetupUrl = () =>
   resolveSetupUiUrl(
     process.env.ALPHACLAW_SETUP_URL ||
@@ -219,6 +226,7 @@ const cronService = createCronService({
 app.use(express.static(path.join(__dirname, "public")));
 initializeServerDatabases({
   constants,
+  initAuthDb,
   initWebhooksDb,
   initWatchdogDb,
   initUsageDb,
@@ -286,7 +294,11 @@ const doSyncPromptFiles = () => {
   });
   installGogCliSkill({ fs, openclawDir: constants.OPENCLAW_DIR });
 };
-const { isAuthorizedRequest, gmailWatchService } = registerServerRoutes({
+const {
+  isAuthorizedRequest,
+  gmailWatchService,
+  runOnboardedBootSequence: runOnboardedBoot,
+} = registerServerRoutes({
   app,
   fs,
   constants,
@@ -308,6 +320,17 @@ const { isAuthorizedRequest, gmailWatchService } = registerServerRoutes({
   ensureGatewayProxyConfig,
   getBaseUrl,
   startGateway,
+  ensureManagedExecDefaults: () =>
+    ensureManagedExecDefaults({
+      fsModule: fs,
+      openclawDir: constants.OPENCLAW_DIR,
+    }),
+  ensureUsageTrackerPluginConfig: () =>
+    ensureUsageTrackerPluginConfig({
+      fsModule: fs,
+      openclawDir: constants.OPENCLAW_DIR,
+    }),
+  resolveSetupUrl,
   syncChannelConfig,
   getChannelStatus,
   openclawVersionService,
@@ -393,26 +416,7 @@ startServerLifecycle({
   server,
   PORT,
   isOnboarded,
-  runOnboardedBootSequence,
-  ensureManagedExecDefaults: () =>
-    ensureManagedExecDefaults({
-      fsModule: fs,
-      openclawDir: constants.OPENCLAW_DIR,
-    }),
-  ensureUsageTrackerPluginConfig: () =>
-    ensureUsageTrackerPluginConfig({
-      fsModule: fs,
-      openclawDir: constants.OPENCLAW_DIR,
-    }),
-  doSyncPromptFiles,
-  reloadEnv,
-  syncChannelConfig,
-  readEnvFile,
-  ensureGatewayProxyConfig,
-  resolveSetupUrl,
-  startGateway,
-  watchdog,
-  gmailWatchService,
+  runOnboardedBootSequence: runOnboardedBoot,
 });
 registerServerShutdown({
   gmailWatchService,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrysb/alphaclaw",
-  "version": "0.9.15",
+  "version": "0.9.17",
   "publishConfig": {
     "access": "public"
   },
@@ -33,7 +33,7 @@
   "dependencies": {
     "express": "^4.21.0",
     "http-proxy": "^1.18.1",
-    "openclaw": "2026.5.6",
+    "openclaw": "2026.5.28",
     "ws": "^8.19.0"
   },
   "devDependencies": {