@reefclaw/connect 0.1.3 → 0.1.5

package/assets/plugin/config/plugin-config-io.d.ts

@@ -1,4 +1,17 @@
 import type { TradingMode, ExchangeConfig } from '../types.js';
+/** The connection the AGENT saves during onboarding lives in OpenClaw's own
+ *  config (`skills.entries.reefclaw.config` in ~/.openclaw/openclaw.json) —
+ *  the connector reads it there, and since the chat-install flow never writes
+ *  ~/.reefclaw/plugin-config.json, the PLUGIN must fall back to it too or
+ *  every fresh install has working dashboards but token-starved intel tools,
+ *  journaling ingest, and config polling (hit live on the first real user,
+ *  2026-07-06). Nested `.config.*` is the schema-valid shape; legacy flat
+ *  fields are read as a fallback. Fail-soft: {} on any problem. */
+export declare function readOpenClawConnection(): {
+    token?: string;
+    userId?: string;
+    relayUrl?: string;
+};
 /** Full on-disk schema. Unknown keys are preserved on round-trip. */
 export interface PluginConfigFile {
     connectionToken?: string;

package/assets/plugin/config/plugin-config-io.js

@@ -8,6 +8,33 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
+/** The connection the AGENT saves during onboarding lives in OpenClaw's own
+ *  config (`skills.entries.reefclaw.config` in ~/.openclaw/openclaw.json) —
+ *  the connector reads it there, and since the chat-install flow never writes
+ *  ~/.reefclaw/plugin-config.json, the PLUGIN must fall back to it too or
+ *  every fresh install has working dashboards but token-starved intel tools,
+ *  journaling ingest, and config polling (hit live on the first real user,
+ *  2026-07-06). Nested `.config.*` is the schema-valid shape; legacy flat
+ *  fields are read as a fallback. Fail-soft: {} on any problem. */
+export function readOpenClawConnection() {
+    try {
+        const path = process.env.OPENCLAW_CONFIG_PATH ?? join(homedir(), '.openclaw', 'openclaw.json');
+        if (!existsSync(path))
+            return {};
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        const entry = parsed?.skills?.entries?.reefclaw;
+        if (!entry)
+            return {};
+        return {
+            token: entry.config?.token ?? entry.token,
+            userId: entry.config?.userId ?? entry.userId,
+            relayUrl: entry.config?.relayUrl ?? entry.relayUrl,
+        };
+    }
+    catch {
+        return {};
+    }
+}
 export function defaultConfigPath() {
     return join(homedir(), '.reefclaw', 'plugin-config.json');
 }

package/assets/plugin/config/user-data-stream-config.d.ts

@@ -64,6 +64,10 @@ export declare function getUserDataStreamIngestBaseUrl(config?: PluginConfigFile
  *
  *  Both ingest paths (position-decisions journal + WS audit-trail) use this. */
 export declare function resolveIngestToken(config?: PluginConfigFile): string;
+/** Resolve the trader's ReefClaw userId: env (legacy prod deployments) →
+ *  the connection the agent saved in OpenClaw's config. Ingest paths need it
+ *  alongside the token; fresh installs only ever have the latter source. */
+export declare function resolveReefclawUserId(): string;
 /** Is the WS authoritative for reads (observe or enforce)? In shadow it's
  *  only observed — REST remains the source of truth for getPositions etc. */
 export declare function userDataStreamAuthoritative(mode: UserDataStreamMode): boolean;

package/assets/plugin/config/user-data-stream-config.js

@@ -20,7 +20,7 @@
 // Transitions must progress forward only (no skipping). Deploy script enforces.
 // Reverse transitions to any earlier stage (including 'shadow' and 'off') are
 // always permitted as a safety-net rollback.
-import { readPluginConfig } from './plugin-config-io.js';
+import { readPluginConfig, readOpenClawConnection } from './plugin-config-io.js';
 const VALID = new Set(['off', 'shadow', 'observe', 'enforce']);
 /** Allowed forward transitions. Reverse transitions are always permitted so
  *  the operator can fall back to REST if WS misbehaves.
@@ -138,7 +138,22 @@ export function resolveIngestToken(config) {
     const fromConfig = config?.connectionToken;
     if (typeof fromConfig === 'string' && fromConfig.trim())
         return fromConfig.trim();
-    return process.env.WEBAPP_INGEST_TOKEN ?? '';
+    const fromEnv = process.env.WEBAPP_INGEST_TOKEN ?? '';
+    if (fromEnv.trim())
+        return fromEnv.trim();
+    // Chat/npx onboarding stores the token only where the AGENT saves it —
+    // OpenClaw's own config. Without this fallback every fresh install has a
+    // token-starved plugin (intel tools, ingest, config poller all dead).
+    return readOpenClawConnection().token?.trim() ?? '';
+}
+/** Resolve the trader's ReefClaw userId: env (legacy prod deployments) →
+ *  the connection the agent saved in OpenClaw's config. Ingest paths need it
+ *  alongside the token; fresh installs only ever have the latter source. */
+export function resolveReefclawUserId() {
+    const fromEnv = process.env.REEFCLAW_USER_ID ?? '';
+    if (fromEnv.trim())
+        return fromEnv.trim();
+    return readOpenClawConnection().userId?.trim() ?? '';
 }
 /** Is the WS authoritative for reads (observe or enforce)? In shadow it's
  *  only observed — REST remains the source of truth for getPositions etc. */

package/assets/plugin/connector-supervisor.d.ts

@@ -1,4 +1,20 @@
 import { spawn } from 'node:child_process';
+/** Bridge bundled INSIDE the plugin package (the npm-channel distribution
+ *  `@reefclaw/openclaw-plugin` ships the connector at <pluginRoot>/bridge).
+ *  Compiled connector-supervisor.js sits at the plugin dist root, so the
+ *  bundled bridge is a sibling directory. */
+export declare function bundledBridgeDir(): string;
+/** Where the connector lives, in preference order: bundled-in-package first
+ *  (npm-channel install — self-contained), then the npx installer's
+ *  placement. Returns null when neither exists. */
+export declare function resolveBridgeDir(): string | null;
+/** True when the plugin should supervise the connector even WITHOUT an
+ *  explicit connectorSupervisor='on' in plugin-config: the connector is
+ *  bundled inside this plugin package, which only the npm-channel
+ *  distribution does. Prod's linked plugin dir and the npx installer's
+ *  ~/.reefclaw/plugin have no bridge/ subdir, so they stay opt-in — prod
+ *  keeps running the bridge under systemd and must never double-connect. */
+export declare function hasBundledBridge(): boolean;
 export interface ConnectorSupervisorOptions {
     /** Directory holding the placed bridge (default ~/.reefclaw/bridge). */
     bridgeDir?: string;

package/assets/plugin/connector-supervisor.js

@@ -16,9 +16,36 @@
 import { spawn } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { logger } from './logger.js';
 const TAG = 'connector-supervisor';
+/** Bridge bundled INSIDE the plugin package (the npm-channel distribution
+ *  `@reefclaw/openclaw-plugin` ships the connector at <pluginRoot>/bridge).
+ *  Compiled connector-supervisor.js sits at the plugin dist root, so the
+ *  bundled bridge is a sibling directory. */
+export function bundledBridgeDir() {
+    return join(dirname(fileURLToPath(import.meta.url)), 'bridge');
+}
+/** Where the connector lives, in preference order: bundled-in-package first
+ *  (npm-channel install — self-contained), then the npx installer's
+ *  placement. Returns null when neither exists. */
+export function resolveBridgeDir() {
+    for (const dir of [bundledBridgeDir(), join(homedir(), '.reefclaw', 'bridge')]) {
+        if (existsSync(join(dir, 'index.js')))
+            return dir;
+    }
+    return null;
+}
+/** True when the plugin should supervise the connector even WITHOUT an
+ *  explicit connectorSupervisor='on' in plugin-config: the connector is
+ *  bundled inside this plugin package, which only the npm-channel
+ *  distribution does. Prod's linked plugin dir and the npx installer's
+ *  ~/.reefclaw/plugin have no bridge/ subdir, so they stay opt-in — prod
+ *  keeps running the bridge under systemd and must never double-connect. */
+export function hasBundledBridge() {
+    return existsSync(join(bundledBridgeDir(), 'index.js'));
+}
 const MIN_BACKOFF_MS = 5_000;
 const MAX_BACKOFF_MS = 60_000;
 /** A child that survives this long resets the backoff (it was healthy). */
@@ -32,10 +59,14 @@ let singleton = null;
 export function startConnectorSupervisor(opts = {}) {
     if (singleton)
         return singleton;
-    const bridgeDir = opts.bridgeDir ?? join(homedir(), '.reefclaw', 'bridge');
+    const bridgeDir = opts.bridgeDir ?? resolveBridgeDir();
+    if (!bridgeDir) {
+        logger.warn(TAG, 'connector not found (no bundled bridge/ and no ~/.reefclaw/bridge) — supervisor idle');
+        return null;
+    }
     const indexJs = join(bridgeDir, 'index.js');
     if (!existsSync(indexJs)) {
-        logger.warn(TAG, `connector not found at ${indexJs} — supervisor idle (run the installer first)`);
+        logger.warn(TAG, `connector not found at ${indexJs} — supervisor idle`);
         return null;
     }
     const spawnFn = opts.spawnFn ?? spawn;

package/assets/plugin/index.js

@@ -20,7 +20,7 @@ import { DEFAULT_CONFIG } from './types.js';
 import { PaperAdapter } from './paper-adapter.js';
 import { LiveAdapter } from './live/live-adapter.js';
 import { loadBracketMode } from './config/brackets-config.js';
-import { loadUserDataStreamMode, loadUserDataStreamTunables, loadUserDataStreamDbWrite, getUserDataStreamIngestBaseUrl, resolveIngestToken, } from './config/user-data-stream-config.js';
+import { loadUserDataStreamMode, loadUserDataStreamTunables, loadUserDataStreamDbWrite, getUserDataStreamIngestBaseUrl, resolveIngestToken, resolveReefclawUserId, } from './config/user-data-stream-config.js';
 import { TradeStoreClient } from './ingest/trade-store-client.js';
 import { ProposalManager } from './live/proposal-manager.js';
 import { ProposalDecisionListener } from './live/proposal-decision-listener.js';
@@ -39,8 +39,8 @@ import { proposeLearningTool } from './tools/propose-learning.js';
 import { queryReviewOutcomesTool } from './tools/query-review-outcomes.js';
 import { loadPositionReviewMode } from './config/position-review-config.js';
 import { installSignalHandlers } from './lifecycle/install-signal-handlers.js';
-import { readPluginConfig } from './config/plugin-config-io.js';
-import { startConnectorSupervisor } from './connector-supervisor.js';
+import { readPluginConfig, readOpenClawConnection } from './config/plugin-config-io.js';
+import { startConnectorSupervisor, hasBundledBridge } from './connector-supervisor.js';
 import { ToolGate } from './config/tool-gate.js';
 import { gateStore } from './config/gate-store.js';
 import { startAgentConfigPoller } from './config/agent-config-poller.js';
@@ -945,6 +945,17 @@ const paperTradingPlugin = {
         catch (err) {
             logger.warn(TAG, `Could not read ReefClaw config: ${formatError(err)}`);
         }
+        if (!connectionToken) {
+            // Chat/npx onboarding saves the connection ONLY in OpenClaw's config
+            // (skills.entries.reefclaw.config) — the agent writes it there and the
+            // connector reads it there. Fall back so a fresh install's intel tools,
+            // ingest, and config poller aren't token-starved (first-user bug).
+            const conn = readOpenClawConnection();
+            if (conn.token) {
+                connectionToken = conn.token;
+                logger.info(TAG, 'Connection token loaded from OpenClaw config (skills.entries.reefclaw)');
+            }
+        }
         if (connectionToken) {
             logger.info(TAG, `Connection token loaded (prefix: ${connectionToken.slice(0, 7)}...)`);
         }
@@ -1020,7 +1031,7 @@ const paperTradingPlugin = {
             // Ingest token: plugin-config.json `connectionToken` preferred, legacy
             // WEBAPP_INGEST_TOKEN env as fallback — see resolveIngestToken.
             const ingestToken = resolveIngestToken(cfgForIngest);
-            const reefclawUserId = process.env.REEFCLAW_USER_ID ?? '';
+            const reefclawUserId = resolveReefclawUserId();
             if (ingestToken && reefclawUserId) {
                 const ingestBaseUrl = getUserDataStreamIngestBaseUrl(cfgForIngest);
                 positionDecisionsClient = new PositionDecisionsClient({
@@ -1124,7 +1135,7 @@ const paperTradingPlugin = {
                     cfgForIngest = undefined;
                 }
                 const ingestToken = resolveIngestToken(cfgForIngest);
-                const reefclawUserId = process.env.REEFCLAW_USER_ID ?? '';
+                const reefclawUserId = resolveReefclawUserId();
                 if (userDataStreamMode !== 'off' &&
                     dbWriteMode === 'on' &&
                     ingestToken &&
@@ -2010,8 +2021,16 @@ function maybeStartConnectorSupervisor() {
         if (process.env.RC_CONNECTOR_SUPERVISOR === 'off') {
             if (supervisorMode === 'on')
                 logger.warn(TAG, 'connector supervisor disabled by RC_CONNECTOR_SUPERVISOR=off');
+            return;
         }
-        else if (supervisorMode === 'on') {
+        if (supervisorMode === 'off')
+            return;
+        // 'on' → explicit opt-in (the npx installer writes this).
+        // undefined → auto-start ONLY when the connector is bundled inside this
+        // plugin package (the npm-channel @reefclaw/openclaw-plugin distribution
+        // is self-contained by design). Prod's linked plugin dir has no bundled
+        // bridge and no flag → stays off; systemd keeps owning prod's bridge.
+        if (supervisorMode === 'on' || hasBundledBridge()) {
             startConnectorSupervisor();
         }
     }

package/assets/plugin/strategy/builtin-strategies.js

@@ -1,6 +1,10 @@
-// 6 built-in strategy definitions for the Strategy Box.
-// Seeded into the strategies table on first run with is_builtin: true.
-// Users can toggle them on/off but cannot delete or modify them.
+// LEGACY strategy configs — used ONLY as fixtures by the local-evaluator
+// tests (strategy/__tests__/evaluator.test.ts). NOT seeded anywhere and NOT
+// part of the product catalog: the shipped catalog lives in
+// intelligence/src/signals/strategy-store.ts (exactly two template
+// strategies since the 2026-07-06 trim — see CLAUDE.md), and the plugin's
+// local evaluator (signals.evaluator, default 'central') receives its
+// strategy set from the intel service, not from this file.
 export const BUILTIN_STRATEGIES = [
     {
         name: 'trend_continuation',

package/assets/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: reefclaw
-version: 0.0.2
+version: 0.0.5
 description: ReefClaw trading control room — bootstrap (connects your agent; full trading instructions arrive automatically after first connect)
 author: ReefClaw
 homepage: https://reefclaw.com
@@ -66,6 +66,16 @@ When a user gives you this message (or just a bare `Here's my ReefClaw token: rc
 - After saving, the connector picks the config up within seconds (it restarts until a token appears). The user does not need to run any command.
 - If you cannot write the config yourself (e.g. exec or file access is restricted in this session), show the user this exact JSON snippet and where it goes, and offer to verify it after they save it.
 
+## Installing without any terminal (preferred)
+
+OpenClaw can install the ReefClaw plugin through its own owner chat command — no exec, no terminal:
+
+1. In `~/.openclaw/openclaw.json` set `commands.plugins: true` and add the user's **sender id** (visible in this session) to `commands.ownerAllowFrom`.
+2. Tell the user to type `/restart` in this chat.
+3. Then the user types: `/plugins install clawhub:@reefclaw/openclaw-plugin` — the install restarts OpenClaw automatically; the bundled connector starts by itself and the dashboard flips to Connected.
+
+Only fall back to `npx @reefclaw/connect` (below) when the chat install is unavailable.
+
 ## If you cannot run the installer (elevated exec disabled)
 
 Fresh OpenClaw installs deny elevated (host) exec from chat sessions. If `npx @reefclaw/connect` is blocked, do NOT dead-end — offer the user this choice:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reefclaw/connect",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "One-command installer that connects your OpenClaw agent to ReefClaw (paper trading, no exchange keys).",
   "type": "module",
   "bin": {

package/dist/daemon.js

@@ -1,104 +0,0 @@
-// Keep the bridge running across reboots. Linux/systemd-user is implemented
-// fully; macOS and Windows fall back to printing the manual run command (a
-// launchd/Task-Scheduler unit is a follow-up). The bridge reads its config from
-// ~/.openclaw/openclaw.json, so until the user pastes their connect message the
-// service will start, find no token, and restart — harmless; it connects within
-// seconds of the agent writing the config.
-import { writeFileSync, mkdirSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir, userInfo } from 'node:os';
-import { BRIDGE_DIR } from './paths.js';
-import { run, which } from './exec.js';
-import { step, ok, info, warn } from './ui.js';
-const SERVICE_NAME = 'reefclaw-bridge';
-const NODE = process.execPath; // absolute path to the node running the installer
-/**
- * Build the systemd user-unit text. Pure + exported so the path-quoting is
- * unit-testable. Both `node` (process.execPath) and `bridgeDir` (under the
- * user's home) can contain spaces. Quoting rules differ per directive:
- *  - ExecStart= is parsed with shell-like word splitting, so an unquoted
- *    `ExecStart=/home/a b/node …` reads the binary as `/home/a` — QUOTE both
- *    the binary and the script path.
- *  - WorkingDirectory= takes the raw value after `=` as a single path (no word
- *    splitting) — spaces are safe UNQUOTED, and quotes are treated as literal
- *    characters, failing the unit with "path is not absolute" (verified live
- *    on systemd 255 / Ubuntu 24.04). Do NOT quote it.
- */
-export function buildSystemdUnit(node, bridgeDir) {
-    const indexJs = join(bridgeDir, 'index.js');
-    return `[Unit]
-Description=ReefClaw connector - bridges OpenClaw to the ReefClaw dashboard
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-WorkingDirectory=${bridgeDir}
-ExecStart="${node}" "${indexJs}" --provider gateway --log-level info
-Restart=always
-RestartSec=5s
-
-[Install]
-WantedBy=default.target
-`;
-}
-function manualHint() {
-    warn('Could not set up an auto-start service on this OS yet.');
-    info('Keep the connector running with this command (leave it open / use your own service manager):');
-    info(`  "${NODE}" "${join(BRIDGE_DIR, 'index.js')}" --provider gateway`);
-}
-function installSystemd() {
-    if (!which('systemctl'))
-        return false;
-    const unitDir = join(homedir(), '.config', 'systemd', 'user');
-    mkdirSync(unitDir, { recursive: true });
-    const unit = buildSystemdUnit(NODE, BRIDGE_DIR);
-    writeFileSync(join(unitDir, `${SERVICE_NAME}.service`), unit, 'utf-8');
-    run('systemctl', ['--user', 'daemon-reload']);
-    const enabled = run('systemctl', ['--user', 'enable', '--now', `${SERVICE_NAME}.service`]);
-    if (!enabled.ok) {
-        warn('systemd --user enable/start did not succeed:');
-        if (enabled.stderr.trim())
-            info(enabled.stderr.trim().split('\n').slice(-2).join('\n'));
-        info(`Try:  systemctl --user enable --now ${SERVICE_NAME}.service`);
-        return false;
-    }
-    // `enable --now` can exit 0 while the unit failed to load (e.g. a bad unit
-    // file setting) — verify the unit actually came up before claiming ✓.
-    // 'active' = running; 'activating' = the expected pre-token restart loop
-    // (the bridge exits until the user pastes their connect message, and
-    // Restart=always re-launches it). Anything else (inactive/failed) means the
-    // unit never loaded.
-    const active = run('systemctl', ['--user', 'is-active', `${SERVICE_NAME}.service`]);
-    const state = active.stdout.trim();
-    if (state !== 'active' && state !== 'activating') {
-        warn(`the service did not come up (state: ${state || 'unknown'}).`);
-        info(`Inspect:  systemctl --user status ${SERVICE_NAME}.service`);
-        return false;
-    }
-    // Linger lets the user service run without an active login session (servers).
-    // Best-effort: needs privileges; non-fatal if it fails.
-    const linger = run('loginctl', ['enable-linger', userInfo().username]);
-    if (linger.ok) {
-        info('enabled linger (service survives logout / reboot)');
-    }
-    else {
-        info('note: run `sudo loginctl enable-linger $USER` so the connector survives logout.');
-    }
-    return true;
-}
-export function installDaemon() {
-    step('Starting the connector as a background service');
-    if (process.platform === 'linux') {
-        if (installSystemd()) {
-            ok(`connector running as a systemd user service (${SERVICE_NAME})`);
-            info(`logs:  journalctl --user -u ${SERVICE_NAME} -f`);
-            return true;
-        }
-        manualHint();
-        return false;
-    }
-    // macOS / Windows: manual for now (launchd / Task Scheduler unit is a follow-up).
-    manualHint();
-    return false;
-}