@linkedclaw/openclaw-plugin 0.1.7 → 0.1.9

package/README.md

@@ -53,6 +53,19 @@ plugins:
         slaTier: standard
 ```
 
+### Key fallback — `apiKey` may be omitted
+
+If `apiKey` is absent from `openclaw.json` (and the `LINKEDCLAW_API_KEY` env
+var is unset), the plugin falls back to the CLI's `~/.linkedclaw/config.yaml`
+— the same file `linkedclaw login` writes. This lets the OAuth login flow keep
+the `lc_…` key out of the agent's hands entirely: the agent edits
+`openclaw.json` with only the non-secret `agentId`, and the plugin borrows the
+key from the file the CLI already wrote. `cloudUrl` and `relayUrl` are borrowed
+from the same file alongside the key, so a key minted against a non-prod cloud
+targets that cloud. Resolution precedence per field:
+`openclaw.json` → `LINKEDCLAW_*` env → `~/.linkedclaw/config.yaml` → default.
+Override the CLI config location with `LINKEDCLAW_CONFIG_DIR`.
+
 Listing metadata such as description and `capabilities_meta` lives in the
 provider listing registered through the `linkedclaw` CLI. The plugin config is
 only for relay identity and local runtime behavior.

package/dist/index.js

@@ -8369,6 +8369,25 @@ var ProviderClient = class {
       throw new Error(`LinkedClaw /health/ready ${res.status}`);
     return HealthStatusSchema.parse(await res.json());
   }
+  /** @implements GET /.well-known/agent.json */
+  async agentCard(params = {}) {
+    const qs = new URLSearchParams();
+    if (params.slug)
+      qs.set("slug", params.slug);
+    if (params.agentId)
+      qs.set("agent_id", params.agentId);
+    const res = await this.fetchImpl(`${this.baseUrl}/.well-known/agent.json?${qs}`, { method: "GET" });
+    if (!res.ok)
+      throw new Error(`LinkedClaw /.well-known/agent.json ${res.status}`);
+    return res.json();
+  }
+  /** @implements GET /.well-known/agent-signing-key.json */
+  async signingKeyJwks() {
+    const res = await this.fetchImpl(`${this.baseUrl}/.well-known/agent-signing-key.json`, { method: "GET" });
+    if (!res.ok)
+      throw new Error(`LinkedClaw /.well-known/agent-signing-key.json ${res.status}`);
+    return res.json();
+  }
   /** @implements GET /metrics */
   async metrics() {
     const res = await this.fetchImpl(`${this.baseUrl}/metrics`, { method: "GET" });
@@ -9133,14 +9152,51 @@ function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// src/cli-config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
+function resolveCliConfigPath() {
+  const dir = process.env["LINKEDCLAW_CONFIG_DIR"] ?? join2(homedir2(), ".linkedclaw");
+  return join2(dir, "config.yaml");
+}
+var BORROWABLE_KEYS = /* @__PURE__ */ new Set(["apiKey", "cloudUrl", "relayUrl"]);
+function readCliConfig(path = resolveCliConfigPath()) {
+  if (!existsSync2(path)) return {};
+  let raw;
+  try {
+    raw = readFileSync2(path, "utf8");
+  } catch {
+    return {};
+  }
+  const out = {};
+  for (const line of raw.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0 || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf(":");
+    if (idx === -1) continue;
+    const key = trimmed.slice(0, idx).trim();
+    if (!BORROWABLE_KEYS.has(key)) continue;
+    let value = trimmed.slice(idx + 1).trim();
+    if (value.length === 0) continue;
+    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+      value = value.slice(1, -1);
+    }
+    out[key] = value;
+  }
+  return out;
+}
+
 // src/config.ts
 function parseConfig(raw) {
+  let _cli;
+  const cli = () => _cli ??= readCliConfig();
   const base = {
-    cloudUrl: typeof raw["cloudUrl"] === "string" ? raw["cloudUrl"] : process.env["LINKEDCLAW_CLOUD_URL"] ?? DEFAULT_CLOUD_URL,
+    cloudUrl: typeof raw["cloudUrl"] === "string" ? raw["cloudUrl"] : process.env["LINKEDCLAW_CLOUD_URL"] ?? cli().cloudUrl ?? DEFAULT_CLOUD_URL,
     ...typeof raw["serviceUrl"] === "string" ? { serviceUrl: raw["serviceUrl"] } : process.env["LINKEDCLAW_SERVICE_URL"] !== void 0 ? { serviceUrl: process.env["LINKEDCLAW_SERVICE_URL"] } : process.env["LINKEDCLAW_SERVICES_HOST_URL"] !== void 0 ? { serviceUrl: process.env["LINKEDCLAW_SERVICES_HOST_URL"] } : {},
-    relayUrl: typeof raw["relayUrl"] === "string" ? raw["relayUrl"] : process.env["LINKEDCLAW_RELAY_URL"] ?? DEFAULT_RELAY_URL,
+    relayUrl: typeof raw["relayUrl"] === "string" ? raw["relayUrl"] : process.env["LINKEDCLAW_RELAY_URL"] ?? cli().relayUrl ?? DEFAULT_RELAY_URL,
     capabilities: Array.isArray(raw["capabilities"]) ? raw["capabilities"] : [],
-    ...typeof raw["apiKey"] === "string" ? { apiKey: raw["apiKey"] } : process.env["LINKEDCLAW_API_KEY"] !== void 0 ? { apiKey: process.env["LINKEDCLAW_API_KEY"] } : {},
+    ...typeof raw["apiKey"] === "string" ? { apiKey: raw["apiKey"] } : process.env["LINKEDCLAW_API_KEY"] !== void 0 ? { apiKey: process.env["LINKEDCLAW_API_KEY"] } : cli().apiKey !== void 0 ? { apiKey: cli().apiKey } : {},
     ...typeof raw["agentId"] === "string" ? { agentId: raw["agentId"] } : {},
     invokeTimeoutMs: typeof raw["invokeTimeoutMs"] === "number" ? raw["invokeTimeoutMs"] : 6e4,
     sessionTurnTimeoutMs: typeof raw["sessionTurnTimeoutMs"] === "number" ? raw["sessionTurnTimeoutMs"] : 6e4,