@reefclaw/openclaw-plugin 0.1.0 → 0.1.1

package/config/plugin-config-io.d.ts

@@ -1,4 +1,17 @@
 import type { TradingMode, ExchangeConfig } from '../types.js';
+/** The connection the AGENT saves during onboarding lives in OpenClaw's own
+ *  config (`skills.entries.reefclaw.config` in ~/.openclaw/openclaw.json) —
+ *  the connector reads it there, and since the chat-install flow never writes
+ *  ~/.reefclaw/plugin-config.json, the PLUGIN must fall back to it too or
+ *  every fresh install has working dashboards but token-starved intel tools,
+ *  journaling ingest, and config polling (hit live on the first real user,
+ *  2026-07-06). Nested `.config.*` is the schema-valid shape; legacy flat
+ *  fields are read as a fallback. Fail-soft: {} on any problem. */
+export declare function readOpenClawConnection(): {
+    token?: string;
+    userId?: string;
+    relayUrl?: string;
+};
 /** Full on-disk schema. Unknown keys are preserved on round-trip. */
 export interface PluginConfigFile {
     connectionToken?: string;

package/config/plugin-config-io.js

@@ -8,6 +8,33 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
+/** The connection the AGENT saves during onboarding lives in OpenClaw's own
+ *  config (`skills.entries.reefclaw.config` in ~/.openclaw/openclaw.json) —
+ *  the connector reads it there, and since the chat-install flow never writes
+ *  ~/.reefclaw/plugin-config.json, the PLUGIN must fall back to it too or
+ *  every fresh install has working dashboards but token-starved intel tools,
+ *  journaling ingest, and config polling (hit live on the first real user,
+ *  2026-07-06). Nested `.config.*` is the schema-valid shape; legacy flat
+ *  fields are read as a fallback. Fail-soft: {} on any problem. */
+export function readOpenClawConnection() {
+    try {
+        const path = process.env.OPENCLAW_CONFIG_PATH ?? join(homedir(), '.openclaw', 'openclaw.json');
+        if (!existsSync(path))
+            return {};
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        const entry = parsed?.skills?.entries?.reefclaw;
+        if (!entry)
+            return {};
+        return {
+            token: entry.config?.token ?? entry.token,
+            userId: entry.config?.userId ?? entry.userId,
+            relayUrl: entry.config?.relayUrl ?? entry.relayUrl,
+        };
+    }
+    catch {
+        return {};
+    }
+}
 export function defaultConfigPath() {
     return join(homedir(), '.reefclaw', 'plugin-config.json');
 }

package/config/user-data-stream-config.d.ts

@@ -64,6 +64,10 @@ export declare function getUserDataStreamIngestBaseUrl(config?: PluginConfigFile
  *
  *  Both ingest paths (position-decisions journal + WS audit-trail) use this. */
 export declare function resolveIngestToken(config?: PluginConfigFile): string;
+/** Resolve the trader's ReefClaw userId: env (legacy prod deployments) →
+ *  the connection the agent saved in OpenClaw's config. Ingest paths need it
+ *  alongside the token; fresh installs only ever have the latter source. */
+export declare function resolveReefclawUserId(): string;
 /** Is the WS authoritative for reads (observe or enforce)? In shadow it's
  *  only observed — REST remains the source of truth for getPositions etc. */
 export declare function userDataStreamAuthoritative(mode: UserDataStreamMode): boolean;

package/config/user-data-stream-config.js

@@ -20,7 +20,7 @@
 // Transitions must progress forward only (no skipping). Deploy script enforces.
 // Reverse transitions to any earlier stage (including 'shadow' and 'off') are
 // always permitted as a safety-net rollback.
-import { readPluginConfig } from './plugin-config-io.js';
+import { readPluginConfig, readOpenClawConnection } from './plugin-config-io.js';
 const VALID = new Set(['off', 'shadow', 'observe', 'enforce']);
 /** Allowed forward transitions. Reverse transitions are always permitted so
  *  the operator can fall back to REST if WS misbehaves.
@@ -138,7 +138,22 @@ export function resolveIngestToken(config) {
     const fromConfig = config?.connectionToken;
     if (typeof fromConfig === 'string' && fromConfig.trim())
         return fromConfig.trim();
-    return process.env.WEBAPP_INGEST_TOKEN ?? '';
+    const fromEnv = process.env.WEBAPP_INGEST_TOKEN ?? '';
+    if (fromEnv.trim())
+        return fromEnv.trim();
+    // Chat/npx onboarding stores the token only where the AGENT saves it —
+    // OpenClaw's own config. Without this fallback every fresh install has a
+    // token-starved plugin (intel tools, ingest, config poller all dead).
+    return readOpenClawConnection().token?.trim() ?? '';
+}
+/** Resolve the trader's ReefClaw userId: env (legacy prod deployments) →
+ *  the connection the agent saved in OpenClaw's config. Ingest paths need it
+ *  alongside the token; fresh installs only ever have the latter source. */
+export function resolveReefclawUserId() {
+    const fromEnv = process.env.REEFCLAW_USER_ID ?? '';
+    if (fromEnv.trim())
+        return fromEnv.trim();
+    return readOpenClawConnection().userId?.trim() ?? '';
 }
 /** Is the WS authoritative for reads (observe or enforce)? In shadow it's
  *  only observed — REST remains the source of truth for getPositions etc. */

package/index.js

@@ -20,7 +20,7 @@ import { DEFAULT_CONFIG } from './types.js';
 import { PaperAdapter } from './paper-adapter.js';
 import { LiveAdapter } from './live/live-adapter.js';
 import { loadBracketMode } from './config/brackets-config.js';
-import { loadUserDataStreamMode, loadUserDataStreamTunables, loadUserDataStreamDbWrite, getUserDataStreamIngestBaseUrl, resolveIngestToken, } from './config/user-data-stream-config.js';
+import { loadUserDataStreamMode, loadUserDataStreamTunables, loadUserDataStreamDbWrite, getUserDataStreamIngestBaseUrl, resolveIngestToken, resolveReefclawUserId, } from './config/user-data-stream-config.js';
 import { TradeStoreClient } from './ingest/trade-store-client.js';
 import { ProposalManager } from './live/proposal-manager.js';
 import { ProposalDecisionListener } from './live/proposal-decision-listener.js';
@@ -39,7 +39,7 @@ import { proposeLearningTool } from './tools/propose-learning.js';
 import { queryReviewOutcomesTool } from './tools/query-review-outcomes.js';
 import { loadPositionReviewMode } from './config/position-review-config.js';
 import { installSignalHandlers } from './lifecycle/install-signal-handlers.js';
-import { readPluginConfig } from './config/plugin-config-io.js';
+import { readPluginConfig, readOpenClawConnection } from './config/plugin-config-io.js';
 import { startConnectorSupervisor, hasBundledBridge } from './connector-supervisor.js';
 import { ToolGate } from './config/tool-gate.js';
 import { gateStore } from './config/gate-store.js';
@@ -945,6 +945,17 @@ const paperTradingPlugin = {
         catch (err) {
             logger.warn(TAG, `Could not read ReefClaw config: ${formatError(err)}`);
         }
+        if (!connectionToken) {
+            // Chat/npx onboarding saves the connection ONLY in OpenClaw's config
+            // (skills.entries.reefclaw.config) — the agent writes it there and the
+            // connector reads it there. Fall back so a fresh install's intel tools,
+            // ingest, and config poller aren't token-starved (first-user bug).
+            const conn = readOpenClawConnection();
+            if (conn.token) {
+                connectionToken = conn.token;
+                logger.info(TAG, 'Connection token loaded from OpenClaw config (skills.entries.reefclaw)');
+            }
+        }
         if (connectionToken) {
             logger.info(TAG, `Connection token loaded (prefix: ${connectionToken.slice(0, 7)}...)`);
         }
@@ -1020,7 +1031,7 @@ const paperTradingPlugin = {
             // Ingest token: plugin-config.json `connectionToken` preferred, legacy
             // WEBAPP_INGEST_TOKEN env as fallback — see resolveIngestToken.
             const ingestToken = resolveIngestToken(cfgForIngest);
-            const reefclawUserId = process.env.REEFCLAW_USER_ID ?? '';
+            const reefclawUserId = resolveReefclawUserId();
             if (ingestToken && reefclawUserId) {
                 const ingestBaseUrl = getUserDataStreamIngestBaseUrl(cfgForIngest);
                 positionDecisionsClient = new PositionDecisionsClient({
@@ -1124,7 +1135,7 @@ const paperTradingPlugin = {
                     cfgForIngest = undefined;
                 }
                 const ingestToken = resolveIngestToken(cfgForIngest);
-                const reefclawUserId = process.env.REEFCLAW_USER_ID ?? '';
+                const reefclawUserId = resolveReefclawUserId();
                 if (userDataStreamMode !== 'off' &&
                     dbWriteMode === 'on' &&
                     ingestToken &&

package/package.json

@@ -1,11 +1,19 @@
 {
   "name": "@reefclaw/openclaw-plugin",
-  "version": "0.1.0",
-  "description": "ReefClaw trading plugin for OpenClaw — paper trading with real Binance market data, plus the ReefClaw dashboard connector (supervised by OpenClaw, no service manager needed). Install: /plugins install npm:@reefclaw/openclaw-plugin",
+  "version": "0.1.1",
+  "description": "ReefClaw trading plugin for OpenClaw \u2014 paper trading with real Binance market data, plus the ReefClaw dashboard connector (supervised by OpenClaw, no service manager needed). Install: /plugins install clawhub:@reefclaw/openclaw-plugin",
   "type": "module",
   "main": "index.js",
   "openclaw": {
-    "extensions": ["./index.js"]
+    "extensions": [
+      "./index.js"
+    ],
+    "compat": {
+      "pluginApi": ">=2026.6.0"
+    },
+    "build": {
+      "openclawVersion": "2026.6.11"
+    }
   },
   "files": [
     "**/*"

package/skills/reefclaw/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: reefclaw
-version: 0.0.3
+version: 0.0.5
 description: ReefClaw trading control room — bootstrap (connects your agent; full trading instructions arrive automatically after first connect)
 author: ReefClaw
 homepage: https://reefclaw.com
@@ -72,7 +72,7 @@ OpenClaw can install the ReefClaw plugin through its own owner chat command —
 
 1. In `~/.openclaw/openclaw.json` set `commands.plugins: true` and add the user's **sender id** (visible in this session) to `commands.ownerAllowFrom`.
 2. Tell the user to type `/restart` in this chat.
-3. Then the user types: `/plugins install npm:@reefclaw/openclaw-plugin` — the install restarts OpenClaw automatically; the bundled connector starts by itself and the dashboard flips to Connected.
+3. Then the user types: `/plugins install clawhub:@reefclaw/openclaw-plugin` — the install restarts OpenClaw automatically; the bundled connector starts by itself and the dashboard flips to Connected.
 
 Only fall back to `npx @reefclaw/connect` (below) when the chat install is unavailable.
 

package/strategy/builtin-strategies.js

@@ -1,6 +1,10 @@
-// 6 built-in strategy definitions for the Strategy Box.
-// Seeded into the strategies table on first run with is_builtin: true.
-// Users can toggle them on/off but cannot delete or modify them.
+// LEGACY strategy configs — used ONLY as fixtures by the local-evaluator
+// tests (strategy/__tests__/evaluator.test.ts). NOT seeded anywhere and NOT
+// part of the product catalog: the shipped catalog lives in
+// intelligence/src/signals/strategy-store.ts (exactly two template
+// strategies since the 2026-07-06 trim — see CLAUDE.md), and the plugin's
+// local evaluator (signals.evaluator, default 'central') receives its
+// strategy set from the intel service, not from this file.
 export const BUILTIN_STRATEGIES = [
     {
         name: 'trend_continuation',