@linkedclaw/openclaw-plugin 0.1.6 → 0.1.8

package/README.md

@@ -42,16 +42,30 @@ plugins:
         serviceUrl: https://api.linkedclaw.com # services-host for gig-task accept/submit
         relayUrl: wss://api.linkedclaw.com/ws
         autoStartProvider: true         # default true
+        autoAcceptInvokes: true         # default true
         autoAcceptSessions: true        # default true
         autoAcceptGigTasks: false       # default false
         maxConcurrentRuns: 4
         perRequesterLimit: 2
-        invokeTimeoutMs: 30000
+        invokeTimeoutMs: 60000
         sessionTurnTimeoutMs: 60000
         gigTaskTimeoutMs: 300000
         slaTier: standard
 ```
 
+### Key fallback — `apiKey` may be omitted
+
+If `apiKey` is absent from `openclaw.json` (and the `LINKEDCLAW_API_KEY` env
+var is unset), the plugin falls back to the CLI's `~/.linkedclaw/config.yaml`
+— the same file `linkedclaw login` writes. This lets the OAuth login flow keep
+the `lc_…` key out of the agent's hands entirely: the agent edits
+`openclaw.json` with only the non-secret `agentId`, and the plugin borrows the
+key from the file the CLI already wrote. `cloudUrl` and `relayUrl` are borrowed
+from the same file alongside the key, so a key minted against a non-prod cloud
+targets that cloud. Resolution precedence per field:
+`openclaw.json` → `LINKEDCLAW_*` env → `~/.linkedclaw/config.yaml` → default.
+Override the CLI config location with `LINKEDCLAW_CONFIG_DIR`.
+
 Listing metadata such as description and `capabilities_meta` lives in the
 provider listing registered through the `linkedclaw` CLI. The plugin config is
 only for relay identity and local runtime behavior.
@@ -71,7 +85,7 @@ When the gateway starts the service, the plugin:
 
 1. Opens a WebSocket to the LinkedClaw relay and IDENTIFYs with
    `{ apiKey, agentId }`.
-2. For each inbound frame, dispatches it into a new subagent run via
+2. For each accepted inbound frame, dispatches it into a new subagent run via
    `api.runtime.subagent.run({ sessionKey, message, extraSystemPrompt,
    deliver: false })`.
 3. Waits on `waitForRun`, reads the last assistant message, and writes

package/dist/index.d.ts

@@ -133,6 +133,7 @@ interface ProviderConfig {
 }
 interface PluginRuntimeConfig extends ProviderConfig {
     autoStartProvider: boolean;
+    autoAcceptInvokes: boolean;
     autoAcceptSessions: boolean;
     autoAcceptGigTasks: boolean;
 }

package/dist/index.js

@@ -8369,6 +8369,25 @@ var ProviderClient = class {
       throw new Error(`LinkedClaw /health/ready ${res.status}`);
     return HealthStatusSchema.parse(await res.json());
   }
+  /** @implements GET /.well-known/agent.json */
+  async agentCard(params = {}) {
+    const qs = new URLSearchParams();
+    if (params.slug)
+      qs.set("slug", params.slug);
+    if (params.agentId)
+      qs.set("agent_id", params.agentId);
+    const res = await this.fetchImpl(`${this.baseUrl}/.well-known/agent.json?${qs}`, { method: "GET" });
+    if (!res.ok)
+      throw new Error(`LinkedClaw /.well-known/agent.json ${res.status}`);
+    return res.json();
+  }
+  /** @implements GET /.well-known/agent-signing-key.json */
+  async signingKeyJwks() {
+    const res = await this.fetchImpl(`${this.baseUrl}/.well-known/agent-signing-key.json`, { method: "GET" });
+    if (!res.ok)
+      throw new Error(`LinkedClaw /.well-known/agent-signing-key.json ${res.status}`);
+    return res.json();
+  }
   /** @implements GET /metrics */
   async metrics() {
     const res = await this.fetchImpl(`${this.baseUrl}/metrics`, { method: "GET" });
@@ -9133,16 +9152,53 @@ function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// src/cli-config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
+function resolveCliConfigPath() {
+  const dir = process.env["LINKEDCLAW_CONFIG_DIR"] ?? join2(homedir2(), ".linkedclaw");
+  return join2(dir, "config.yaml");
+}
+var BORROWABLE_KEYS = /* @__PURE__ */ new Set(["apiKey", "cloudUrl", "relayUrl"]);
+function readCliConfig(path = resolveCliConfigPath()) {
+  if (!existsSync2(path)) return {};
+  let raw;
+  try {
+    raw = readFileSync2(path, "utf8");
+  } catch {
+    return {};
+  }
+  const out = {};
+  for (const line of raw.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0 || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf(":");
+    if (idx === -1) continue;
+    const key = trimmed.slice(0, idx).trim();
+    if (!BORROWABLE_KEYS.has(key)) continue;
+    let value = trimmed.slice(idx + 1).trim();
+    if (value.length === 0) continue;
+    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+      value = value.slice(1, -1);
+    }
+    out[key] = value;
+  }
+  return out;
+}
+
 // src/config.ts
 function parseConfig(raw) {
+  let _cli;
+  const cli = () => _cli ??= readCliConfig();
   const base = {
-    cloudUrl: typeof raw["cloudUrl"] === "string" ? raw["cloudUrl"] : process.env["LINKEDCLAW_CLOUD_URL"] ?? DEFAULT_CLOUD_URL,
+    cloudUrl: typeof raw["cloudUrl"] === "string" ? raw["cloudUrl"] : process.env["LINKEDCLAW_CLOUD_URL"] ?? cli().cloudUrl ?? DEFAULT_CLOUD_URL,
     ...typeof raw["serviceUrl"] === "string" ? { serviceUrl: raw["serviceUrl"] } : process.env["LINKEDCLAW_SERVICE_URL"] !== void 0 ? { serviceUrl: process.env["LINKEDCLAW_SERVICE_URL"] } : process.env["LINKEDCLAW_SERVICES_HOST_URL"] !== void 0 ? { serviceUrl: process.env["LINKEDCLAW_SERVICES_HOST_URL"] } : {},
-    relayUrl: typeof raw["relayUrl"] === "string" ? raw["relayUrl"] : process.env["LINKEDCLAW_RELAY_URL"] ?? DEFAULT_RELAY_URL,
+    relayUrl: typeof raw["relayUrl"] === "string" ? raw["relayUrl"] : process.env["LINKEDCLAW_RELAY_URL"] ?? cli().relayUrl ?? DEFAULT_RELAY_URL,
     capabilities: Array.isArray(raw["capabilities"]) ? raw["capabilities"] : [],
-    ...typeof raw["apiKey"] === "string" ? { apiKey: raw["apiKey"] } : process.env["LINKEDCLAW_API_KEY"] !== void 0 ? { apiKey: process.env["LINKEDCLAW_API_KEY"] } : {},
+    ...typeof raw["apiKey"] === "string" ? { apiKey: raw["apiKey"] } : process.env["LINKEDCLAW_API_KEY"] !== void 0 ? { apiKey: process.env["LINKEDCLAW_API_KEY"] } : cli().apiKey !== void 0 ? { apiKey: cli().apiKey } : {},
     ...typeof raw["agentId"] === "string" ? { agentId: raw["agentId"] } : {},
-    invokeTimeoutMs: typeof raw["invokeTimeoutMs"] === "number" ? raw["invokeTimeoutMs"] : 3e4,
+    invokeTimeoutMs: typeof raw["invokeTimeoutMs"] === "number" ? raw["invokeTimeoutMs"] : 6e4,
     sessionTurnTimeoutMs: typeof raw["sessionTurnTimeoutMs"] === "number" ? raw["sessionTurnTimeoutMs"] : 6e4,
     gigTaskTimeoutMs: typeof raw["gigTaskTimeoutMs"] === "number" ? raw["gigTaskTimeoutMs"] : 3e5,
     maxConcurrentRuns: typeof raw["maxConcurrentRuns"] === "number" ? raw["maxConcurrentRuns"] : 4,
@@ -9152,6 +9208,7 @@ function parseConfig(raw) {
   return {
     ...base,
     autoStartProvider: raw["autoStartProvider"] !== false,
+    autoAcceptInvokes: raw["autoAcceptInvokes"] !== false,
     autoAcceptSessions: raw["autoAcceptSessions"] !== false,
     autoAcceptGigTasks: raw["autoAcceptGigTasks"] === true
   };
@@ -9210,6 +9267,12 @@ var SubagentHandler = class {
   }
   // ───── Invoke ─────
   async onInvoke(evt) {
+    if (!this.config.autoAcceptInvokes) {
+      return { error: { code: "provider_manual_mode", message: "invoke handling disabled" } };
+    }
+    if (this.config.capabilities && this.config.capabilities.length > 0 && !this.config.capabilities.includes(evt.capability)) {
+      return { error: { code: "capability_not_supported", message: "capability not supported" } };
+    }
     const sessionKey = this.invokeKey(evt.invoke_id);
     try {
       const run = await this.api.runtime.subagent.run({
@@ -9218,7 +9281,7 @@ var SubagentHandler = class {
         extraSystemPrompt: buildInvokePrompt(evt),
         deliver: false
       });
-      const timeoutMs = (evt.timeout_seconds !== void 0 ? evt.timeout_seconds * 1e3 : this.config.invokeTimeoutMs) ?? 3e4;
+      const timeoutMs = (evt.timeout_seconds !== void 0 ? evt.timeout_seconds * 1e3 : this.config.invokeTimeoutMs) ?? 6e4;
       const waited = await this.api.runtime.subagent.waitForRun({ runId: run.runId, timeoutMs });
       if (!isDone(waited.status)) {
         return {
@@ -9486,6 +9549,7 @@ var SUPPORTED_CONFIG_FIELDS = /* @__PURE__ */ new Set([
   "relayUrl",
   "capabilities",
   "autoStartProvider",
+  "autoAcceptInvokes",
   "autoAcceptSessions",
   "autoAcceptGigTasks",
   "invokeTimeoutMs",