@smilintux/skcapstone 0.4.6 → 0.5.0

package/scripts/proxy-monitor.sh

@@ -0,0 +1,89 @@
+#!/bin/bash
+# proxy-monitor.sh — Quick health check for nvidia-proxy tuning
+# Usage: ./proxy-monitor.sh [minutes]  (default: last 30 minutes)
+MINS=${1:-30}
+if [[ "$OSTYPE" == "darwin"* ]]; then
+    SINCE=$(date -v-${MINS}M '+%Y-%m-%d %H:%M:%S')
+else
+    SINCE=$(date -d "$MINS minutes ago" '+%Y-%m-%d %H:%M:%S')
+fi
+
+echo "=== NVIDIA Proxy Monitor (last ${MINS}m) ==="
+echo ""
+
+# Request count & model breakdown
+echo "--- Requests by Model ---"
+journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -oP 'model=\K[^ ]+' | sort | uniq -c | sort -rn
+echo ""
+
+# Body size stats
+echo "--- Body Sizes (bytes) ---"
+SIZES=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -oP 'bodyLen=\K[0-9]+' | sort -n)
+if [ -n "$SIZES" ]; then
+  COUNT=$(echo "$SIZES" | wc -l)
+  MIN=$(echo "$SIZES" | head -1)
+  MAX=$(echo "$SIZES" | tail -1)
+  AVG=$(echo "$SIZES" | awk '{s+=$1} END {printf "%.0f", s/NR}')
+  echo "  count=$COUNT  min=${MIN}  avg=${AVG}  max=${MAX}  limit=120000"
+  if [ "$MAX" -gt 100000 ]; then
+    echo "  ⚠️  Max approaching limit — consider bumping MAX_BODY_BYTES"
+  elif [ "$MAX" -lt 40000 ]; then
+    echo "  ✅ Plenty of headroom — no conversation trimming needed"
+  else
+    echo "  👀 Moderate usage — monitor for growth"
+  fi
+else
+  echo "  (no requests)"
+fi
+echo ""
+
+# Trimming events
+echo "--- Trimming Events ---"
+CONV_TRIM=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "trimmed history")
+AGGRESSIVE=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "AGGRESSIVE")
+SYS_TRIM=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "trimmed system prompt")
+TOOL_LIMIT=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "TOOL LIMIT")
+echo "  conversation trims: $CONV_TRIM"
+echo "  aggressive trims:   $AGGRESSIVE"
+echo "  system prompt trims: $SYS_TRIM"
+echo "  tool limit hits:    $TOOL_LIMIT"
+if [ "$AGGRESSIVE" -gt 0 ]; then
+  echo "  ⚠️  Aggressive trims happening — bump MAX_BODY_BYTES or keepEnd"
+elif [ "$CONV_TRIM" -gt 0 ]; then
+  echo "  👀 Some conversation trimming — watch if it increases"
+else
+  echo "  ✅ No conversation trimming — settings have headroom"
+fi
+echo ""
+
+# Error/retry stats
+echo "--- Errors & Retries ---"
+RETRIES=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "attempt=[2-4]")
+ERRORS=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -cE "4[0-9]{2}|5[0-9]{2}|error|Error")
+OK=$(journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -c "200 OK")
+echo "  200 OK:  $OK"
+echo "  retries: $RETRIES"
+echo "  errors:  $ERRORS"
+echo ""
+
+# Response times (rough — from consecutive timestamps)
+echo "--- Keyword Activations ---"
+journalctl --user -u nvidia-proxy --no-pager --since "$SINCE" 2>/dev/null \
+  | grep -oP 'keyword-activated tools: \[\K[^\]]+' \
+  | tr ',' '\n' | sort | uniq -c | sort -rn | head -10
+echo ""
+
+# Current settings
+echo "--- Current Proxy Settings ---"
+grep -E "MAX_BODY_BYTES|MAX_SYSTEM_BYTES|allTools.length >|counter >= |keepEnd.*Math" \
+  /home/cbrd21/clawd/skcapstone-repos/skcapstone/scripts/nvidia-proxy.mjs 2>/dev/null \
+  | sed 's/^[[:space:]]*/  /'

package/scripts/refresh-anthropic-token.sh

@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+# Sync Anthropic OAuth token from Claude Code credentials to OpenClaw gateway
+#
+# Claude Code manages its own token refresh internally (writing to .credentials.json).
+# This script simply reads the current token and syncs it to:
+#   1. ~/.openclaw/openclaw.json (anthropic provider apiKey)
+#   2. ~/.openclaw/.env (ANTHROPIC_API_KEY)
+#   3. systemd override (ANTHROPIC_API_KEY env var)
+# Then restarts the gateway if the token changed.
+#
+# Run via systemd timer every 2 hours.
+set -euo pipefail
+
+_sed_i() { if [[ "$OSTYPE" == "darwin"* ]]; then sed -i '' "$@"; else sed -i "$@"; fi; }
+
+CREDS="$HOME/.claude/.credentials.json"
+OPENCLAW_JSON="$HOME/.openclaw/openclaw.json"
+OPENCLAW_ENV="$HOME/.openclaw/.env"
+OVERRIDE_CONF="$HOME/.config/systemd/user/openclaw-gateway.service.d/override.conf"
+
+if [ ! -f "$CREDS" ]; then
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Claude credentials not found at $CREDS"
+    exit 1
+fi
+
+# Read current token and expiry from Claude Code credentials
+ACCESS_TOKEN=$(python3 -c "import json; print(json.load(open('$CREDS'))['claudeAiOauth']['accessToken'])")
+EXPIRES_AT=$(python3 -c "import json; print(json.load(open('$CREDS'))['claudeAiOauth']['expiresAt'])")
+
+REMAINING=$(python3 -c "import time; print(f'{($EXPIRES_AT/1000 - time.time())/3600:.1f}h')")
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Current token: ${ACCESS_TOKEN:0:20}... (expires in $REMAINING)"
+
+# Check what's currently in the systemd override
+OLD_TOKEN=""
+if [ -f "$OVERRIDE_CONF" ]; then
+    OLD_TOKEN=$(grep "ANTHROPIC_API_KEY=" "$OVERRIDE_CONF" 2>/dev/null | sed 's/.*ANTHROPIC_API_KEY=//' || true)
+fi
+
+if [ "$OLD_TOKEN" = "$ACCESS_TOKEN" ]; then
+    echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Token already synced, no changes needed"
+    exit 0
+fi
+
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Token mismatch detected, syncing..."
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Old: ${OLD_TOKEN:0:20}..."
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] New: ${ACCESS_TOKEN:0:20}..."
+
+# 1. Update openclaw.json
+if [ -f "$OPENCLAW_JSON" ]; then
+    python3 -c "
+import json
+with open('$OPENCLAW_JSON') as f:
+    cfg = json.load(f)
+if 'providers' in cfg.get('models', {}):
+    if 'anthropic' in cfg['models']['providers']:
+        cfg['models']['providers']['anthropic']['apiKey'] = '$ACCESS_TOKEN'
+        with open('$OPENCLAW_JSON', 'w') as f:
+            json.dump(cfg, f, indent=2)
+            f.write('\n')
+        print('[sync] Updated openclaw.json')
+    else:
+        print('[sync] No anthropic provider in openclaw.json')
+else:
+    print('[sync] No providers section in openclaw.json')
+"
+fi
+
+# 2. Update .env
+if grep -q "^ANTHROPIC_API_KEY=" "$OPENCLAW_ENV" 2>/dev/null; then
+    _sed_i "s|^ANTHROPIC_API_KEY=.*|ANTHROPIC_API_KEY=$ACCESS_TOKEN|" "$OPENCLAW_ENV"
+else
+    echo "ANTHROPIC_API_KEY=$ACCESS_TOKEN" >> "$OPENCLAW_ENV"
+fi
+echo "[sync] Updated .env"
+
+# 3. Update systemd override
+NVIDIA_KEY=$(grep "NVIDIA_API_KEY=" "$OVERRIDE_CONF" 2>/dev/null | sed 's/.*NVIDIA_API_KEY=//' || true)
+cat > "$OVERRIDE_CONF" << EOF
+[Unit]
+StartLimitIntervalSec=60
+StartLimitBurst=10
+
+[Service]
+RestartSec=10
+Environment=NVIDIA_API_KEY=${NVIDIA_KEY}
+Environment=ANTHROPIC_API_KEY=${ACCESS_TOKEN}
+EOF
+echo "[sync] Updated systemd override"
+
+# 4. Reload and restart gateway
+systemctl --user daemon-reload
+systemctl --user restart openclaw-gateway
+
+echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Gateway restarted with synced token (expires in $REMAINING)"