@clawchatsai/connector 0.0.16 → 0.0.18

package/dist/auth-handler.js

@@ -145,10 +145,12 @@ export async function handleAuthMessage(dc, connectionId, msg, config) {
         if (msgNonce !== session.nonce) {
             return sendFailure(dc, connectionId, 'nonce_mismatch');
         }
-        // Verify Google ID token (skipped in dev mode)
-        if (config.devMode && idToken === 'dev-mode-no-google') {
-            // Dev mode: skip Google verification
-            console.log('[Auth] Dev mode — skipping Google ID token verification');
+        // Verify Google ID token (skipped when not configured or in dev mode)
+        const skipGoogle = !config.google.clientId || config.google.clientId === 'dev-placeholder'
+            || idToken === 'signaling-verified'
+            || (config.devMode && idToken === 'dev-mode-no-google');
+        if (skipGoogle) {
+            console.log('[Auth] Skipping Google ID token verification (not configured)');
         }
         else {
             try {

package/dist/index.d.ts

@@ -10,7 +10,7 @@
  * Spec: specs/multitenant-p2p.md sections 6.1-6.2
  */
 export declare const PLUGIN_ID = "connector";
-export declare const PLUGIN_VERSION = "0.0.16";
+export declare const PLUGIN_VERSION = "0.0.18";
 interface PluginServiceContext {
     stateDir: string;
     logger: {

package/dist/index.js

@@ -22,7 +22,7 @@ import { generateSessionSecret } from './session-token.js';
 // Inline from shared/api-version.ts to avoid rootDir conflict
 const CURRENT_API_VERSION = 1;
 export const PLUGIN_ID = 'connector';
-export const PLUGIN_VERSION = '0.0.16';
+export const PLUGIN_VERSION = '0.0.18';
 /** Max DataChannel message size (~256KB, leave room for envelope) */
 const MAX_DC_MESSAGE_SIZE = 256 * 1024;
 /** Active DataChannel connections: connectionId → send function */
@@ -278,8 +278,7 @@ function setupDataChannelHandler(dc, connectionId, ctx) {
     const config = loadConfig();
     const isDevMode = process.env.CLAWCHATS_DEV === 'true';
     const hasGoogle = !!config?.google;
-    const authEnabled = config?.schemaVersion === 2 && config?.totp && config?.sessionSecret
-        && (hasGoogle || isDevMode);
+    const authEnabled = config?.schemaVersion === 2 && config?.totp && config?.sessionSecret;
     if (authEnabled) {
         // In dev mode without Google identity, use placeholder
         const google = config.google ?? {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawchatsai/connector",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "type": "module",
   "description": "ClawChats OpenClaw plugin — P2P tunnel + local API bridge",
   "main": "dist/index.js",