@omnixal/openclaw-nats-plugin 0.2.8 → 0.2.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnixal/openclaw-nats-plugin",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "NATS JetStream event-driven plugin for OpenClaw",
   "license": "MIT",
   "type": "module",

package/sidecar/src/config.ts

@@ -17,7 +17,7 @@ export const envSchema = {
   },
   gateway: {
     wsUrl: Env.string({ default: 'ws://localhost:18789', env: 'OPENCLAW_WS_URL' }),
-    token: Env.string({ default: '', env: 'OPENCLAW_DEVICE_TOKEN' }),
+    token: Env.string({ default: '', env: 'OPENCLAW_SIDECAR_DEVICE_TOKEN' }),
   },
   consumer: {
     name: Env.string({ default: 'openclaw-main', env: 'NATS_CONSUMER_NAME' }),

package/sidecar/src/consumer/consumer.controller.ts

@@ -1,6 +1,6 @@
 import { Controller, BaseController, Subscribe, OnQueueReady, type Message } from '@onebun/core';
 import { PipelineService } from '../pre-handlers/pipeline.service';
-import { GatewayClientService } from '../gateway/gateway-client.service';
+import { GatewayClientService, GatewayRpcError } from '../gateway/gateway-client.service';
 import { PendingService } from '../pending/pending.service';
 import { RouterService } from '../router/router.service';
 import { MetricsService } from '../metrics/metrics.service';
@@ -73,6 +73,13 @@ export class ConsumerController extends BaseController {
             await this.logService.logDelivery(route.id, envelope.subject, JSON.stringify({ eventId: envelope.id, target: route.target }));
           } catch (routeErr) {
             await this.logService.logError('route', route.id, envelope.subject, routeErr);
+            // Gateway rejected the request (e.g. missing scope) — store in pending, don't nack
+            if (routeErr instanceof GatewayRpcError) {
+              this.logger.error(`Gateway rejected event ${envelope.id}: ${routeErr.errorCode} — ${routeErr.errorMessage}`);
+              await this.pendingService.addPending(envelope);
+              await message.ack();
+              return;
+            }
             throw routeErr;
           }
         }

package/sidecar/src/gateway/gateway-client.service.ts

@@ -117,7 +117,20 @@ export class GatewayClientService extends BaseService implements OnModuleInit, O
       if (payload?.type === 'hello-ok') {
         if (!this.connected) {
           this.connected = true;
-          this.logger.info('OpenClaw handshake complete — connected');
+          const grantedScopes = payload.auth?.scopes ?? [];
+          const serverVersion = payload.server?.version ?? 'unknown';
+          this.logger.info('OpenClaw handshake complete', {
+            protocol: payload.protocol,
+            serverVersion,
+            grantedScopes,
+            connId: payload.server?.connId,
+          });
+          if (grantedScopes.length > 0 && !grantedScopes.includes('operator.write')) {
+            this.logger.error(
+              `Gateway did NOT grant operator.write scope! Granted: [${grantedScopes.join(', ')}]. ` +
+              'Message delivery will fail. Rotate the device token with --scope operator.write',
+            );
+          }
         }
         return;
       }