@remnic/plugin-openclaw 9.25.5 → 9.25.6

package/dist/index.js

@@ -5614,6 +5614,15 @@ function daemonUrl(target, pathname) {
   const host = target.host.includes(":") && !target.host.startsWith("[") ? `[${target.host}]` : target.host;
   return `http://${host}:${target.port}${pathname}`;
 }
+var daemonAuthFailureLogKeys = /* @__PURE__ */ new Set();
+function reportDaemonAuthorizationFailure(serviceId, pathname, status, tokenSource) {
+  const key = `${serviceId}:${pathname}:${status}:${tokenSource}`;
+  if (daemonAuthFailureLogKeys.has(key)) return;
+  daemonAuthFailureLogKeys.add(key);
+  log2.error(
+    `delegate ${pathname} authorization failed (${status}; token source: ${tokenSource})`
+  );
+}
 async function probeDelegateAuthorization(target, namespace = "", operations = DEFAULT_DELEGATE_AUTHORIZATION_OPERATIONS) {
   const auth = target.resolveAuthToken();
   const headers = auth.token ? { Authorization: `Bearer ${auth.token}` } : void 0;
@@ -5637,7 +5646,7 @@ async function probeDelegateAuthorization(target, namespace = "", operations = D
   }
   return { state: "unavailable", tokenSource: auth.source };
 }
-async function postJson(target, pathname, body, timeoutMs) {
+async function postJson(target, serviceId, pathname, body, timeoutMs) {
   const headers = { "Content-Type": "application/json" };
   const auth = target.resolveAuthToken();
   if (auth.token) headers.Authorization = `Bearer ${auth.token}`;
@@ -5648,6 +5657,12 @@ async function postJson(target, pathname, body, timeoutMs) {
     signal: AbortSignal.timeout(timeoutMs)
   });
   if (!res.ok) {
+    if (res.status === 401 || res.status === 403) {
+      const status = res.status === 401 ? 401 : 403;
+      await res.body?.cancel();
+      reportDaemonAuthorizationFailure(serviceId, pathname, status, auth.source);
+      return null;
+    }
     throw new Error(`daemon ${pathname} responded ${res.status}`);
   }
   const parsed = await res.json().catch(() => null);
@@ -5716,6 +5731,7 @@ function registerDelegateRuntime(api, options) {
         const cwd = cwdFrom(event, ctx, options.cwd);
         const response = await postJson(
           target,
+          options.serviceId,
           "/engram/v1/recall",
           withNamespace(namespace, {
             query,
@@ -5789,6 +5805,7 @@ ${context}`;
       const cwd = cwdFrom(event, ctx, options.cwd);
       await postJson(
         target,
+        options.serviceId,
         "/engram/v1/observe",
         withNamespace(namespace, {
           sessionKey,
@@ -5808,6 +5825,7 @@ ${context}`;
     try {
       await postJson(
         target,
+        options.serviceId,
         "/engram/v1/lcm/compaction/flush",
         withNamespace(namespace, { sessionKey }),
         options.flushTimeoutMs