@linkclaw/clawpool 0.2.1 → 0.2.3

package/README.md

@@ -98,6 +98,34 @@ Stored at `~/.clawpool/config.json`:
 }
 ```
 
+## Host Config Inheritance
+
+When creating or restarting an instance, clawpool automatically merges settings from the host machine's OpenClaw installation (if present) into each container:
+
+- **`~/.openclaw/openclaw.json`** — model providers, default model, env vars, and other settings are inherited. Gateway-specific settings (`gateway`, `meta`) are excluded and managed by clawpool per-instance.
+- **`~/.openclaw/agents/main/agent/auth-profiles.json`** — OAuth auth profiles (e.g. `openai-codex`) are copied into each container, enabling provider access without per-instance login.
+
+If OpenClaw is not installed on the host, instances start with a minimal config (gateway auth only). You can then configure providers via environment variables:
+
+```bash
+clawpool create alpha -e "ANTHROPIC_API_KEY=sk-ant-..." -e "OPENAI_API_KEY=sk-..."
+```
+
+### Reusing auth profiles from another machine
+
+If you want to copy auth profiles from a remote OpenClaw installation:
+
+```bash
+# On the machine where OpenClaw is logged in:
+cat ~/.openclaw/agents/main/agent/auth-profiles.json
+
+# Copy the output to the clawpool host:
+mkdir -p ~/.openclaw/agents/main/agent
+# paste into ~/.openclaw/agents/main/agent/auth-profiles.json
+```
+
+clawpool will pick up the file on the next `create` or `restart`.
+
 ## Environment
 
 | Variable | Purpose |

package/clawpool.ts

@@ -63,8 +63,8 @@ function getLanIP(): string {
   return "localhost";
 }
 
-function dashboardURL(host: string, port: number, token: string): string {
-  return `http://${host}:${port}?token=${token}`;
+function dashboardURL(host: string, port: number): string {
+  return `http://${host}:${port}`;
 }
 
 function humanTime(iso: string): string {
@@ -154,7 +154,9 @@ async function syncStatus(
   }
 }
 
-const HOST_OC_CONFIG = join(homedir(), ".openclaw", "openclaw.json");
+const HOST_OC_DIR = join(homedir(), ".openclaw");
+const HOST_OC_CONFIG = join(HOST_OC_DIR, "openclaw.json");
+const HOST_AUTH_PROFILES = join(HOST_OC_DIR, "agents", "main", "agent", "auth-profiles.json");
 
 function loadHostOpenClawConfig(): Record<string, unknown> {
   if (!existsSync(HOST_OC_CONFIG)) return {};
@@ -188,13 +190,26 @@ function deepMerge(target: Record<string, unknown>, source: Record<string, unkno
   return result;
 }
 
+function loadHostAuthProfiles(): string | null {
+  if (!existsSync(HOST_AUTH_PROFILES)) return null;
+  try {
+    return require("fs").readFileSync(HOST_AUTH_PROFILES, "utf-8").trim();
+  } catch {
+    return null;
+  }
+}
+
 function buildOpenClawConfig(token: string): string {
   const hostConfig = loadHostOpenClawConfig();
   // Gateway config is always overridden per-instance
   const instanceOverrides: Record<string, unknown> = {
     gateway: {
       auth: { mode: "token", token },
-      controlUi: { dangerouslyAllowHostHeaderOriginFallback: true },
+      controlUi: {
+        dangerouslyAllowHostHeaderOriginFallback: true,
+        allowInsecureAuth: true,
+        dangerouslyDisableDeviceAuth: true,
+      },
     },
   };
   // Strip host gateway settings (we manage those), keep everything else
@@ -205,18 +220,28 @@ function buildOpenClawConfig(token: string): string {
 
 function buildRunArgs(config: Config, inst: Instance): string[] {
   const ocConfig = buildOpenClawConfig(inst.gateway_token);
-  // Always write config on start — merges host ~/.openclaw/openclaw.json with per-instance gateway auth
-  const entrypoint = [
-    "sh",
-    "-c",
-    [
-      "mkdir -p /home/node/data/.openclaw",
-      "chown -R node:node /home/node/data",
-      `echo '${ocConfig}' > /home/node/data/.openclaw/openclaw.json`,
-      `exec su -s /bin/sh node -c 'exec node dist/index.js gateway --allow-unconfigured --port ${inst.port} --bind lan'`,
-    ].join(" && "),
+  const authProfiles = loadHostAuthProfiles();
+
+  const initSteps = [
+    "mkdir -p /home/node/data/.openclaw/agents/main/agent",
+    "chown -R node:node /home/node/data",
+    `echo '${ocConfig}' > /home/node/data/.openclaw/openclaw.json`,
   ];
 
+  if (authProfiles) {
+    // Escape single quotes in JSON for shell embedding
+    const escaped = authProfiles.replace(/'/g, "'\\''");
+    initSteps.push(
+      `echo '${escaped}' > /home/node/data/.openclaw/agents/main/agent/auth-profiles.json`
+    );
+  }
+
+  initSteps.push(
+    `exec su -s /bin/sh node -c 'exec node dist/index.js gateway --allow-unconfigured --port ${inst.port} --bind lan'`
+  );
+
+  const entrypoint = ["sh", "-c", initSteps.join(" && ")];
+
   const args = [
     "run",
     "-d",
@@ -227,7 +252,7 @@ function buildRunArgs(config: Config, inst: Instance): string[] {
     "--user",
     "root",
     "-p",
-    `${inst.port}:${inst.port}`,
+    `127.0.0.1:${inst.port}:${inst.port}`,
     "-v",
     `${inst.volume}:/home/node/data`,
     "-e",
@@ -325,7 +350,8 @@ async function cmdCreate(config: Config, args: string[]) {
 
   const host = getLanIP();
   ok(`Instance '${name}' created (port: ${port}, container: ${cid.slice(0, 12)})`);
-  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, port, gatewayToken)}`);
+  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, port)}`);
+  console.log(`  ${c.bold("Token:")}     ${gatewayToken}`);
 }
 
 async function cmdList(config: Config, args: string[]) {
@@ -350,10 +376,10 @@ async function cmdList(config: Config, args: string[]) {
   const host = getLanIP();
 
   console.log(
-    `${"NAME".padEnd(16)} ${"STATUS".padEnd(10)} ${"PORT".padEnd(7)} DASHBOARD`
+    `${"NAME".padEnd(16)} ${"STATUS".padEnd(10)} ${"PORT".padEnd(7)} ${"TOKEN".padEnd(34)} URL`
   );
   console.log(
-    `${"----".padEnd(16)} ${"------".padEnd(10)} ${"----".padEnd(7)} ---------`
+    `${"----".padEnd(16)} ${"------".padEnd(10)} ${"----".padEnd(7)} ${"-----".padEnd(34)} ---`
   );
   for (const name of names) {
     const inst = config.instances[name];
@@ -365,10 +391,14 @@ async function cmdList(config: Config, args: string[]) {
           : c.yellow(inst.status);
     const url =
       inst.status === "running"
-        ? dashboardURL(host, inst.port, inst.gateway_token)
+        ? dashboardURL(host, inst.port)
+        : c.dim("—");
+    const token =
+      inst.status === "running"
+        ? inst.gateway_token
         : c.dim("—");
     console.log(
-      `${name.padEnd(16)} ${statusCol.padEnd(21)} ${String(inst.port).padEnd(7)} ${url}`
+      `${name.padEnd(16)} ${statusCol.padEnd(21)} ${String(inst.port).padEnd(7)} ${token.padEnd(34)} ${url}`
     );
   }
 }
@@ -383,7 +413,7 @@ async function cmdStart(config: Config, args: string[]) {
   const host = getLanIP();
   const inst = config.instances[name];
   ok(`Instance '${name}' started`);
-  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, inst.port, inst.gateway_token)}`);
+  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, inst.port)}`);
 }
 
 async function cmdStop(config: Config, args: string[]) {
@@ -406,7 +436,7 @@ async function cmdRestart(config: Config, args: string[]) {
   const host = getLanIP();
   const inst = config.instances[name];
   ok(`Instance '${name}' restarted`);
-  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, inst.port, inst.gateway_token)}`);
+  console.log(`  ${c.bold("Dashboard:")} ${dashboardURL(host, inst.port)}`);
 }
 
 async function cmdDelete(config: Config, args: string[]) {
@@ -543,7 +573,7 @@ async function cmdStatus(config: Config, args: string[]) {
   console.log(`${c.bold("Volume:")}   ${inst.volume}`);
   console.log(`${c.bold("Created:")}  ${inst.created_at}`);
   if (inst.status === "running") {
-    console.log(`${c.bold("Dashboard:")} ${dashboardURL(host, inst.port, inst.gateway_token)}`);
+    console.log(`${c.bold("Dashboard:")} ${dashboardURL(host, inst.port)}`);
   }
   if (inst.telegram_bot_token) {
     console.log(`${c.bold("Telegram:")} configured`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linkclaw/clawpool",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "type": "module",
   "bin": {
     "clawpool": "./clawpool.ts"