@openclawcity/openclawcity 1.0.14 → 1.0.15

package/dist/env-bridge.d.ts

@@ -1 +1,16 @@
-export declare function exposeAccountEnv(apiKey: string, botId: string): void;
+/**
+ * Expose account credentials as environment variables for shell commands
+ * (SKILL.md templates, tool calls, etc.).
+ *
+ * Multi-account safety: each account gets scoped vars
+ * (OPENBOTCITY_JWT__<accountId>, OPENBOTCITY_BOT_ID__<accountId>).
+ * For backward compatibility, unscoped vars are also set when there is
+ * exactly one account. When multiple accounts exist, unscoped vars are
+ * deleted to prevent silent identity confusion.
+ */
+export declare function exposeAccountEnv(apiKey: string, botId: string, accountId: string, accountCount: number): void;
+/**
+ * Remove environment variables for an account that is shutting down.
+ * Prevents stale credentials from lingering in the process environment.
+ */
+export declare function clearAccountEnv(accountId: string): void;

package/dist/env-bridge.js

@@ -1,7 +1,19 @@
-function exposeAccountEnv(apiKey, botId) {
-  process.env.OPENBOTCITY_JWT = apiKey;
-  process.env.OPENBOTCITY_BOT_ID = botId;
+function exposeAccountEnv(apiKey, botId, accountId, accountCount) {
+  process.env[`OPENBOTCITY_JWT__${accountId}`] = apiKey;
+  process.env[`OPENBOTCITY_BOT_ID__${accountId}`] = botId;
+  if (accountCount === 1) {
+    process.env.OPENBOTCITY_JWT = apiKey;
+    process.env.OPENBOTCITY_BOT_ID = botId;
+  } else {
+    delete process.env.OPENBOTCITY_JWT;
+    delete process.env.OPENBOTCITY_BOT_ID;
+  }
+}
+function clearAccountEnv(accountId) {
+  delete process.env[`OPENBOTCITY_JWT__${accountId}`];
+  delete process.env[`OPENBOTCITY_BOT_ID__${accountId}`];
 }
 export {
+  clearAccountEnv,
   exposeAccountEnv
 };

package/dist/index.js

@@ -4071,7 +4071,7 @@ var OpenClawCityAdapter = class {
 };
 
 // .tsc-out/index.js
-import { exposeAccountEnv } from "./env-bridge.js";
+import { exposeAccountEnv, clearAccountEnv } from "./env-bridge.js";
 var CHANNEL_ID = "openclawcity";
 var DEFAULT_API_BASE = "https://api.openbotcity.com";
 var HEARTBEAT_CACHE_MS = 5 * 60 * 1e3;
@@ -4181,7 +4181,8 @@ var occPlugin = {
       const rt = getRuntime();
       const { cfg, accountId, account, abortSignal, log } = ctx;
       log?.info?.(`[OCC] startAccount called for ${accountId}, abortSignal.aborted=${abortSignal.aborted}`);
-      exposeAccountEnv(account.apiKey, account.botId);
+      const accountCount = occPlugin.config.listAccountIds(cfg).length || 1;
+      exposeAccountEnv(account.apiKey, account.botId, accountId, accountCount);
       ctx.setStatus({ accountId, running: true, connected: false, lastStartAt: Date.now() });
       log?.info?.(`[OCC] setStatus: running=true, connected=false`);
       const adapter = new OpenClawCityAdapter({
@@ -4371,6 +4372,7 @@ ${envelope.content.text}`;
           log?.info?.(`[OCC] Abort signal received \u2014 shutting down account ${accountId}`);
           adapter.stop();
           adapters.delete(accountId);
+          clearAccountEnv(accountId);
           ctx.setStatus({
             accountId,
             running: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclawcity/openclawcity",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "description": "OpenClawCity channel plugin for OpenClaw — live city events for AI agents",
   "type": "module",
   "main": "./dist/index.js",