@openviking/openclaw-plugin 2026.8.6 → 2026.8.7

package/INSTALL-ZH.md

@@ -238,7 +238,7 @@ openclaw openviking setup --base-url <OPENVIKING_URL> --api-key <API_KEY> --peer
   | --- | --- | --- |
   | `env` | `{ "source": "env", "id": "OPENVIKING_API_KEY" }` | 启动时读取同名环境变量。 |
   | `file` | `{ "source": "file", "id": "/etc/secrets/openviking.key" }` | 以 UTF-8 读取并去除首尾空白；`~` 可展开，适配 Kubernetes `secretKeyRef` 卷挂载、0600 权限文件。 |
-  | `exec` | `{ "source": "exec", "provider": "op", "id": "op://vault/openviking/credential" }` | 运行 `<provider> <id>`，去除 stdout 首尾空白（1Password `op`、Vault、gopass 等均符合此形态）。 |
+  | `exec` | 打包版插件不支持（应用市场安装扫描会拦截子进程执行） | 改用命令包一层环境变量：`OPENVIKING_API_KEY=$(op read op://vault/openviking/credential)`，然后配 `env`。 |
 
   仍可使用纯字符串形式（含 `${ENV_VAR}` 插值）作为向后兼容路径；此时请限制文件权限或通过受控 Secret 卷提供，并在修改后重启 Gateway、容器或 Pod。
 

package/INSTALL.md

@@ -182,7 +182,7 @@ If the `openclaw` CLI cannot run inside the container, merge the following field
   | --- | --- | --- |
   | `env` | `{ "source": "env", "id": "OPENVIKING_API_KEY" }` | Reads the named env var at plugin load time. |
   | `file` | `{ "source": "file", "id": "/etc/secrets/openviking.key" }` | Reads UTF-8, trims whitespace. `~` is expanded; ideal for Kubernetes `secretKeyRef` volumes and 0600-managed files. |
-  | `exec` | `{ "source": "exec", "provider": "op", "id": "op://vault/openviking/credential" }` | Runs `<provider> <id>` and trims stdout (1Password `op`, Vault, gopass, etc. all match this shape). |
+  | `exec` | not supported in the packaged plugin (marketplace install scanners block subprocess execution) | Wrap the CLI instead: `OPENVIKING_API_KEY=$(op read op://vault/openviking/credential)` and use `env`. |
 
   A plain `string` (including `${ENV_VAR}` interpolation) is still accepted, but only as a backward-compatibility path; in that case, restrict file permissions or provide the file through a managed Secret volume, then restart the Gateway, container, or Pod.
 

package/config.ts

@@ -16,11 +16,11 @@ import { getEnv } from "./runtime-utils.js";
  *                     leading/trailing whitespace trimmed — convenient for
  *                     Kubernetes `secretKeyRef` mount volumes and
  *                     file-permission-only deployments.
- *   source: "exec" -> delegate to host `openclaw` secret resolver when the
- *                     runtime exposes it; today the plugin performs a
- *                     best-effort `provider + id` CLI exec call so that
- *                     1Password / Vault / gopass users can share OpenViking
- *                     credentials with their other providers.
+ *   source: "exec" -> NOT supported in the packaged plugin. Marketplace
+ *                     install scanners (OpenClaw/ArkClaw) block any plugin
+ *                     whose shipped code can spawn subprocesses, so the exec
+ *                     resolver was removed from this build; configuring it
+ *                     fails with a clear error pointing at env/file instead.
  */
 export type OpenVikingSecretRef =
   | { source: "env"; id: string }
@@ -232,13 +232,10 @@ function resolvePeerPrefix(configured: unknown): string {
  *     Missing / unreadable files propagate the original node error with an
  *     error prefix that names the OpenViking field, so the user knows which
  *     secretRef failed to load.
- *   * `exec`: shells out `<provider> <id>`. Providers commonly expose this
- *     shape (1Password CLI, gopass, HashiCorp Vault), which matches how
- *     OpenClaw's own `@transmitt0r/openclaw-plugin-onepassword` provider
- *     resolves `{source:"exec", provider:"onepassword", id:"..."}`. Exec is
- *     best-effort; failures surface with an error prefix so users can
- *     distinguish `provider not installed` from `provider configured but id
- *     missing`.
+ *   * `exec`: rejected with a "not supported" error. The subprocess-based
+ *     resolver was removed because marketplace install scanners block plugins
+ *     whose shipped code can spawn processes; wrap the secret-manager CLI
+ *     output into an env var or file instead (`OPENVIKING_API_KEY=$(op ...)`).
  */
 function resolveSecret(
   value: string | OpenVikingSecretRef | undefined | null,
@@ -249,7 +246,7 @@ function resolveSecret(
   if (!value || typeof value !== "object") {
     throw new Error(
       `OpenViking ${label} must be a plain string or a SecretRef object ` +
-        `({source:"env"|"file"|"exec", id})`,
+        `({source:"env"|"file", id})`,
     );
   }
   const obj = value as Record<string, unknown>;
@@ -280,39 +277,18 @@ function resolveSecret(
       }
     }
     case "exec": {
-      const provider = typeof (obj as Record<string, unknown>).provider === "string"
-        ? (obj as Record<string, unknown>).provider as string
-        : "";
-      if (!provider) {
-        throw new Error(
-          `OpenViking ${label} SecretRef exec source requires a "provider" field naming the secret-manager CLI on PATH`,
-        );
-      }
-      try {
-        // Avoid top-level `import "node:child_process"` — this branch is rare
-        // and keeping the require lazy makes startup marginally faster for
-        // the 95% of users who pick env/file.
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const { execFileSync } = require("node:child_process") as typeof import("node:child_process");
-        const out = execFileSync(provider, [id], {
-          encoding: "utf8",
-          stdio: ["ignore", "pipe", "pipe"],
-          timeout: 15_000,
-          env: process.env,
-        }) as string;
-        return out.trim();
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        throw new Error(
-          `OpenViking ${label} SecretRef exec source: provider "${provider}" failed for id "${id}" (${msg})`,
-        );
-      }
+      throw new Error(
+        `OpenViking ${label} SecretRef exec source is not supported in the packaged plugin ` +
+          `(marketplace install scanners block subprocess execution). Export the secret to an ` +
+          `environment variable ({source:"env"}) or a file ({source:"file"}) instead, e.g. ` +
+          `OPENVIKING_API_KEY=$(op read ${id}).`,
+      );
     }
     default:
       throw new Error(
         `OpenViking ${label} SecretRef has unknown source "${String(
           (obj as Record<string, unknown>).source,
-        )}". Supported: "env" | "file" | "exec".`,
+        )}". Supported: "env" | "file".`,
       );
   }
 }
@@ -816,7 +792,7 @@ export const memoryOpenVikingConfigSchema = {
       placeholder: "${OPENVIKING_API_KEY}",
       help:
         "Optional API key for OpenViking server. Accepts a plain string, " +
-        "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). " +
+        "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). " +
         "Prefer the SecretRef shapes so the key never sits as plaintext in openclaw.json.",
     },
     headers: {

package/dist/config.js

@@ -94,13 +94,10 @@ function resolvePeerPrefix(configured) {
  *     Missing / unreadable files propagate the original node error with an
  *     error prefix that names the OpenViking field, so the user knows which
  *     secretRef failed to load.
- *   * `exec`: shells out `<provider> <id>`. Providers commonly expose this
- *     shape (1Password CLI, gopass, HashiCorp Vault), which matches how
- *     OpenClaw's own `@transmitt0r/openclaw-plugin-onepassword` provider
- *     resolves `{source:"exec", provider:"onepassword", id:"..."}`. Exec is
- *     best-effort; failures surface with an error prefix so users can
- *     distinguish `provider not installed` from `provider configured but id
- *     missing`.
+ *   * `exec`: rejected with a "not supported" error. The subprocess-based
+ *     resolver was removed because marketplace install scanners block plugins
+ *     whose shipped code can spawn processes; wrap the secret-manager CLI
+ *     output into an env var or file instead (`OPENVIKING_API_KEY=$(op ...)`).
  */
 function resolveSecret(value, label) {
     if (value === undefined || value === null)
@@ -109,7 +106,7 @@ function resolveSecret(value, label) {
         return value;
     if (!value || typeof value !== "object") {
         throw new Error(`OpenViking ${label} must be a plain string or a SecretRef object ` +
-            `({source:"env"|"file"|"exec", id})`);
+            `({source:"env"|"file", id})`);
     }
     const obj = value;
     if (typeof obj.id !== "string" || !obj.id) {
@@ -136,33 +133,13 @@ function resolveSecret(value, label) {
             }
         }
         case "exec": {
-            const provider = typeof obj.provider === "string"
-                ? obj.provider
-                : "";
-            if (!provider) {
-                throw new Error(`OpenViking ${label} SecretRef exec source requires a "provider" field naming the secret-manager CLI on PATH`);
-            }
-            try {
-                // Avoid top-level `import "node:child_process"` — this branch is rare
-                // and keeping the require lazy makes startup marginally faster for
-                // the 95% of users who pick env/file.
-                // eslint-disable-next-line @typescript-eslint/no-var-requires
-                const { execFileSync } = require("node:child_process");
-                const out = execFileSync(provider, [id], {
-                    encoding: "utf8",
-                    stdio: ["ignore", "pipe", "pipe"],
-                    timeout: 15_000,
-                    env: process.env,
-                });
-                return out.trim();
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                throw new Error(`OpenViking ${label} SecretRef exec source: provider "${provider}" failed for id "${id}" (${msg})`);
-            }
+            throw new Error(`OpenViking ${label} SecretRef exec source is not supported in the packaged plugin ` +
+                `(marketplace install scanners block subprocess execution). Export the secret to an ` +
+                `environment variable ({source:"env"}) or a file ({source:"file"}) instead, e.g. ` +
+                `OPENVIKING_API_KEY=$(op read ${id}).`);
         }
         default:
-            throw new Error(`OpenViking ${label} SecretRef has unknown source "${String(obj.source)}". Supported: "env" | "file" | "exec".`);
+            throw new Error(`OpenViking ${label} SecretRef has unknown source "${String(obj.source)}". Supported: "env" | "file".`);
     }
 }
 function resolvePeerRole(configured) {
@@ -519,7 +496,7 @@ export const memoryOpenVikingConfigSchema = {
             sensitive: true,
             placeholder: "${OPENVIKING_API_KEY}",
             help: "Optional API key for OpenViking server. Accepts a plain string, " +
-                "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). " +
+                "${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). " +
                 "Prefer the SecretRef shapes so the key never sits as plaintext in openclaw.json.",
         },
         headers: {

package/openclaw.plugin.json

@@ -100,7 +100,7 @@
       "label": "OpenViking API Key",
       "sensitive": true,
       "placeholder": "${OPENVIKING_API_KEY}",
-      "help": "Optional API key for OpenViking server. Accepts a plain string, ${ENV_VAR} interpolation, or a SecretRef object ({source: env/file/exec, id}). Prefer a SecretRef so the key is never stored as plaintext in openclaw.json."
+      "help": "Optional API key for OpenViking server. Accepts a plain string, ${ENV_VAR} interpolation, or a SecretRef object ({source: env/file, id}). Prefer a SecretRef so the key is never stored as plaintext in openclaw.json."
     },
     "headers": {
       "label": "Headers",
@@ -320,18 +320,6 @@
               "source": { "type": "string", "const": "file" },
               "id": { "type": "string", "description": "Absolute file path or ~/relative path. Example: /etc/secrets/openviking.key." }
             }
-          },
-          {
-            "type": "object",
-            "title": "SecretRef (exec)",
-            "description": "Read the API key by shelling out to a secret-manager CLI. Matches the shape used by OpenClaw's core provider configs so 1Password, HashiCorp Vault, gopass, etc. can manage the OpenViking key alongside LLM/TTS/MCP credentials.",
-            "additionalProperties": false,
-            "required": ["source", "provider", "id"],
-            "properties": {
-              "source": { "type": "string", "const": "exec" },
-              "provider": { "type": "string", "description": "CLI binary name on PATH. Examples: op, vault, gopass." },
-              "id": { "type": "string", "description": "Argument passed to the provider CLI to select the specific secret, e.g. 'vault kv get -field=key secret/openviking' in plain-arg form; this implementation passes id as a single arg." }
-            }
           }
         ]
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openviking/openclaw-plugin",
-  "version": "2026.8.6",
+  "version": "2026.8.7",
   "displayName": "OpenViking",
   "description": "OpenClaw context-engine plugin — OpenViking AI memory, long-term memory, knowledge base, semantic search, RAG, context engine. 长期记忆 · 知识库 · 语义检索 · 上下文引擎",
   "type": "module",