@t0ken.ai/memoryx-openclaw-plugin 2.2.60 → 2.2.62

package/dist/logger.d.ts

@@ -0,0 +1,9 @@
+export declare const LOG_FILE: string;
+/**
+ * Layered logging: all logs go to file (stream when ready, else sync append so nothing is lost).
+ * When console=true, also log to console (for important/guidance messages).
+ */
+export declare function log(message: string, options?: {
+    console?: boolean;
+}): void;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,QAAQ,QAAsC,CAAC;AA4B5D;;;GAGG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,IAAI,CAiD9E"}

package/dist/logger.js

@@ -0,0 +1,97 @@
+/**
+ * Layered logging: file always, optional console for important messages.
+ * Log file size is capped: when plugin.log exceeds MAX_LOG_FILE_BYTES it is rotated to plugin.log.old and a new file is started.
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { PLUGIN_DIR, MAX_LOG_FILE_BYTES } from "./constants.js";
+let logStream = null;
+let logStreamReady = false;
+let writeCount = 0;
+const CHECK_ROTATE_EVERY = 500;
+export const LOG_FILE = path.join(PLUGIN_DIR, "plugin.log");
+const LOG_FILE_OLD = path.join(PLUGIN_DIR, "plugin.log.old");
+function ensureDir() {
+    if (!fs.existsSync(PLUGIN_DIR)) {
+        fs.mkdirSync(PLUGIN_DIR, { recursive: true });
+    }
+}
+function rotateIfNeeded() {
+    try {
+        if (!fs.existsSync(LOG_FILE))
+            return;
+        const stat = fs.statSync(LOG_FILE);
+        if (stat.size < MAX_LOG_FILE_BYTES)
+            return;
+        if (logStream) {
+            try {
+                logStream.end();
+            }
+            catch (_) { }
+            logStream = null;
+            logStreamReady = false;
+        }
+        if (fs.existsSync(LOG_FILE_OLD))
+            fs.unlinkSync(LOG_FILE_OLD);
+        fs.renameSync(LOG_FILE, LOG_FILE_OLD);
+    }
+    catch (_) {
+        /* ignore */
+    }
+}
+/**
+ * Layered logging: all logs go to file (stream when ready, else sync append so nothing is lost).
+ * When console=true, also log to console (for important/guidance messages).
+ */
+export function log(message, options = {}) {
+    const { console: toConsole = false } = options;
+    const line = `[${new Date().toISOString()}] ${message}\n`;
+    if (toConsole) {
+        console.log(`[MemoryX] ${message}`);
+    }
+    const writeToFile = () => {
+        try {
+            if (!logStreamReady) {
+                ensureDir();
+                rotateIfNeeded();
+                logStream = fs.createWriteStream(LOG_FILE, { flags: "a" });
+                logStreamReady = true;
+                writeCount = 0;
+            }
+            writeCount++;
+            if (writeCount >= CHECK_ROTATE_EVERY) {
+                writeCount = 0;
+                try {
+                    if (fs.existsSync(LOG_FILE)) {
+                        const stat = fs.statSync(LOG_FILE);
+                        if (stat.size >= MAX_LOG_FILE_BYTES) {
+                            rotateIfNeeded();
+                            if (!logStreamReady) {
+                                ensureDir();
+                                logStream = fs.createWriteStream(LOG_FILE, { flags: "a" });
+                                logStreamReady = true;
+                            }
+                        }
+                    }
+                }
+                catch (_) { }
+            }
+            logStream?.write(line, (err) => {
+                if (err) {
+                    try {
+                        fs.appendFileSync(LOG_FILE, line);
+                    }
+                    catch (_) { }
+                }
+            });
+        }
+        catch (e) {
+            try {
+                ensureDir();
+                fs.appendFileSync(LOG_FILE, line);
+            }
+            catch (_) { }
+        }
+    };
+    setImmediate(writeToFile);
+}

package/dist/plugin-core.d.ts

@@ -0,0 +1,48 @@
+import type { PluginConfig, RecallResult } from "./types.js";
+export declare function getSDK(pluginConfig?: PluginConfig): Promise<any>;
+export declare class MemoryXPlugin {
+    private pluginConfig;
+    private initialized;
+    private timersStarted;
+    constructor(pluginConfig?: PluginConfig);
+    init(): Promise<void>;
+    startTimersIfNeeded(): Promise<void>;
+    onMessage(role: string, content: string): Promise<boolean>;
+    recall(query: string, limit?: number, options?: {
+        time_filter?: {
+            start?: string;
+            end?: string;
+        };
+        categories?: string[];
+        tags?: string[];
+        /** Expand graph from this entity (file, command, etc.); aligns with server prompt convention */
+        entity_name?: string;
+    }): Promise<RecallResult>;
+    endConversation(): Promise<void>;
+    forget(memoryId: string): Promise<boolean>;
+    store(content: string, metadata?: Record<string, unknown>): Promise<{
+        success: boolean;
+        task_id?: string;
+    }>;
+    list(limit?: number, offset?: number, options?: {
+        time_filter?: {
+            start?: string;
+            end?: string;
+        };
+        categories?: string[];
+        tags?: string[];
+    }): Promise<any[]>;
+    getAccountInfo(): Promise<{
+        apiKey: string | null;
+        agentId: string | null;
+        agentType: string | null;
+        initialized: boolean;
+        quota?: any;
+    }>;
+    getQueueStatus(): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+    }>;
+}
+//# sourceMappingURL=plugin-core.d.ts.map

package/dist/plugin-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-core.d.ts","sourceRoot":"","sources":["../src/plugin-core.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO7D,wBAAsB,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAqBtE;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;gBAElB,YAAY,CAAC,EAAE,YAAY;IAIjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IASpC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB1D,MAAM,CACR,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,MAAU,EACjB,OAAO,CAAC,EAAE;QACN,WAAW,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,gGAAgG;QAChG,WAAW,CAAC,EAAE,MAAM,CAAC;KACxB,GACF,OAAO,CAAC,YAAY,CAAC;IAoClB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAWhC,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa1C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAa3G,IAAI,CACN,KAAK,GAAE,MAAW,EAClB,MAAM,GAAE,MAAU,EAClB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,GAAG,EAAE,CAAC;IAgBX,cAAc,IAAI,OAAO,CAAC;QAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,KAAK,CAAC,EAAE,GAAG,CAAC;KACf,CAAC;IAkBI,cAAc,IAAI,OAAO,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CAUL"}

package/dist/plugin-core.js

@@ -0,0 +1,202 @@
+/**
+ * MemoryX SDK lazy init and MemoryXPlugin (recall, onMessage, store, etc.).
+ */
+import * as os from "os";
+import { DEFAULT_API_BASE } from "./constants.js";
+import { log } from "./logger.js";
+let sdkInstance = null;
+let sdkInitPromise = null;
+export async function getSDK(pluginConfig) {
+    if (sdkInstance)
+        return sdkInstance;
+    if (sdkInitPromise)
+        return sdkInitPromise;
+    sdkInitPromise = (async () => {
+        const { MemoryXSDK, VERSION } = await import("@t0ken.ai/memoryx-sdk");
+        const agentName = os.hostname();
+        sdkInstance = new MemoryXSDK({
+            preset: "conversation",
+            apiUrl: pluginConfig?.apiBaseUrl || DEFAULT_API_BASE,
+            autoRegister: true,
+            agentType: "openclaw",
+            agentName,
+            autoStartTimers: false,
+        });
+        await sdkInstance.init();
+        const { setDebug } = await import("@t0ken.ai/memoryx-sdk");
+        setDebug(true);
+        log(`SDK v${VERSION} initialized with conversation preset (30k tokens / 5min idle)`, { console: true });
+        return sdkInstance;
+    })();
+    return sdkInitPromise;
+}
+export class MemoryXPlugin {
+    pluginConfig;
+    initialized = false;
+    timersStarted = false;
+    constructor(pluginConfig) {
+        this.pluginConfig = pluginConfig;
+    }
+    async init() {
+        if (this.initialized)
+            return;
+        this.initialized = true;
+        log("Async init started");
+        try {
+            await getSDK(this.pluginConfig);
+            log("SDK ready");
+        }
+        catch (e) {
+            log(`Init failed: ${e}`);
+        }
+    }
+    async startTimersIfNeeded() {
+        if (this.timersStarted)
+            return;
+        await this.init();
+        const sdk = await getSDK(this.pluginConfig);
+        sdk.startTimers();
+        this.timersStarted = true;
+        log("Timers started");
+    }
+    async onMessage(role, content) {
+        await this.init();
+        if (!content || content.length < 2)
+            return false;
+        // Skip short acknowledgments (e.g. ok, thanks, hello, bye; includes common Chinese equivalents)
+        const skipPatterns = [
+            /^[好的ok谢谢嗯啊哈哈你好hihello拜拜再见]{1,5}$/i,
+            /^[？?！!。,，\s]{1,10}$/,
+        ];
+        for (const pattern of skipPatterns) {
+            if (pattern.test(content.trim()))
+                return false;
+        }
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            await sdk.addMessage(role, content);
+            return true;
+        }
+        catch (e) {
+            log(`onMessage failed: ${e}`);
+            return false;
+        }
+    }
+    async recall(query, limit = 5, options) {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            const result = await sdk.search?.(query, limit, options) ?? sdk.search(query, limit, options);
+            const isLimited = result.is_limited ??
+                (result.search_count !== undefined &&
+                    result.search_limit !== undefined &&
+                    result.search_count >= result.search_limit);
+            const upgradeHint = isLimited
+                ? `Search quota exceeded (${result.search_count}/${result.search_limit}). Upgrade to Pro for unlimited searches.`
+                : undefined;
+            return {
+                memories: (result.data || []).map((m) => ({
+                    id: m.id,
+                    content: m.content || m.memory,
+                    category: m.category || "other",
+                    score: m.score || 0.5,
+                })),
+                relatedMemories: (result.related_memories || []).map((m) => ({
+                    id: m.id,
+                    content: m.content || m.memory,
+                    category: m.category || "other",
+                    score: m.score || 0,
+                })),
+                isLimited,
+                remainingQuota: result.remaining_quota ?? -1,
+                upgradeHint,
+            };
+        }
+        catch (e) {
+            log(`Recall failed: ${e}`);
+            return { memories: [], relatedMemories: [], isLimited: false, remainingQuota: 0 };
+        }
+    }
+    async endConversation() {
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            await sdk.flush();
+            log("Conversation ended, flushed queue");
+            sdk.startNewConversation();
+        }
+        catch (e) {
+            log(`End conversation failed: ${e}`);
+        }
+    }
+    async forget(memoryId) {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            await sdk.delete(memoryId);
+            log(`Forgot memory ${memoryId}`);
+            return true;
+        }
+        catch (e) {
+            log(`Forget failed: ${e}`);
+            return false;
+        }
+    }
+    async store(content, metadata) {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            const result = await sdk.addMemory?.(content, metadata ?? {}) ?? sdk.addMemory(content);
+            log(`Stored memory, result: ${JSON.stringify(result)}`);
+            return { success: true, task_id: result?.task_id };
+        }
+        catch (e) {
+            log(`Store failed: ${e}`);
+            return { success: false };
+        }
+    }
+    async list(limit = 10, offset = 0, options) {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            const result = await sdk.list?.(limit, offset, options) ?? sdk.list(limit, offset);
+            return (result.data || result.memories || []).map((m) => ({
+                id: m.id,
+                content: m.content || m.memory,
+                category: m.category || "other",
+            }));
+        }
+        catch (e) {
+            log(`List failed: ${e}`);
+            return [];
+        }
+    }
+    async getAccountInfo() {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            const info = await sdk.getAccountInfo();
+            const agentType = sdk.getAgentType();
+            return {
+                apiKey: info.apiKey,
+                agentId: info.agentId,
+                agentType: agentType,
+                initialized: info.initialized,
+                quota: info.quota,
+            };
+        }
+        catch (e) {
+            return { apiKey: null, agentId: null, agentType: null, initialized: false };
+        }
+    }
+    async getQueueStatus() {
+        await this.init();
+        try {
+            const sdk = await getSDK(this.pluginConfig);
+            return await sdk.getQueueStatus();
+        }
+        catch (e) {
+            log(`GetQueueStatus failed: ${e}`);
+            return { success: false, error: String(e) };
+        }
+    }
+}

package/dist/proxy-credentials.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Extract and resolve provider credentials from OpenClaw config; default model/provider and available list for fallback.
+ *
+ * API key sources:
+ * - OpenClaw may store keys in auth-profiles.json (e.g. openclaw models auth paste-token);
+ *   the gateway does auth lookup at runtime and does not merge back into api.config.
+ * - The plugin only receives api.config (from openclaw.json), so it can read:
+ *   config.models.providers[id].apiKey, env vars, and auth-profiles.json (this module).
+ * - If the user configured key only via auth-profiles and not in config/env, we try to
+ *   fill apiKey from ~/.openclaw/agents/main/agent/auth-profiles.json by provider.
+ */
+import type { ProviderCredentials } from "./types.js";
+export declare function extractProviderCredentials(config: any, providerOverrides?: Record<string, {
+    baseUrl?: string;
+    apiKeyEnv?: string;
+    apiKey?: string;
+}>): Map<string, ProviderCredentials>;
+/**
+ * 在 init 时从 OpenClaw 配置（api.config）读到的「所有厂商 -> baseUrl」做一次快照，不写死任何厂商地址。
+ * - 来源唯一：插件启动时通过 api 读到的 openclaw 配置文件（openclaw.json 等）里的 models.providers[id].baseUrl。
+ * - 若某条已是 localhost（例如上次 redirect 被持久化），本次仍写入 localhost；恢复依赖 setImmediate 里从缓存文件合并（首次正常时已落盘）。
+ * 返回 Map<providerId, baseUrl>，memoryx-gateway 不写入。
+ */
+export declare function buildRealUpstreamBaseUrlMap(credentials: Map<string, ProviderCredentials>, _sidecarBaseUrl: string): Map<string, string>;
+/**
+ * 用 init 时缓存的「真实上游 baseUrl 映射表」生成供 Sidecar 使用的 credentials。
+ * 发给 llm_proxy 的每个厂商的 targetUrl 均来自此映射表（初始化时的真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
+ * 用户改配置后重启即可生效。
+ */
+export declare function realUpstreamCredentialsForSidecar(credentials: Map<string, ProviderCredentials>, realUpstreamBaseUrlMap: Map<string, string>): Map<string, ProviderCredentials>;
+/**
+ * 从缓存文件加载「厂商 -> 真实 baseUrl」映射。文件不存在或解析失败返回空 Map。
+ */
+export declare function loadRealUpstreamBaseUrlCache(): Promise<Map<string, string>>;
+/**
+ * 将「厂商 -> 真实 baseUrl」映射写入缓存文件，重启后若配置被改成 localhost 可从此恢复。
+ */
+export declare function saveRealUpstreamBaseUrlCache(map: Map<string, string>): Promise<void>;
+/** 判断是否为 localhost（或等于 sidecarBaseUrl），用于合并缓存时决定是否用缓存值覆盖。 */
+export declare function isLocalhostBaseUrl(url: string, sidecarBaseUrl: string): boolean;
+/** Get all available provider/model list (for server fallback/retry); only providers with apiKey set */
+export declare function getAvailableProviders(credentials: Map<string, ProviderCredentials>): Array<{
+    provider: string;
+    model: string;
+}>;
+/**
+ * Default primary: one model per provider (first listed); only providers with apiKey set.
+ * Order follows config.models.providers key order (Map insertion order).
+ */
+export declare function getDefaultProviderModelList(credentials: Map<string, ProviderCredentials>): Array<{
+    provider: string;
+    model: string;
+}>;
+/** Get default model/provider and full availableProviders; prefer config.agents.defaults.model.primary, else first in list. */
+export declare function getDefaultModelAndProvider(credentials: Map<string, ProviderCredentials>, config?: any): {
+    model: string;
+    provider: string;
+    availableProviders: Array<{
+        provider: string;
+        model: string;
+    }>;
+};
+//# sourceMappingURL=proxy-credentials.d.ts.map

package/dist/proxy-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-credentials.d.ts","sourceRoot":"","sources":["../src/proxy-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAuCtD,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,GAAG,EACX,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CA0ClC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,eAAe,EAAE,MAAM,GACxB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC7C,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5C,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAWlC;AAED;;GAEG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjF;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1F;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAI/E;AAOD,wGAAwG;AACxG,wBAAgB,qBAAqB,CACjC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc5C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAU5C;AAoBD,+HAA+H;AAC/H,wBAAgB,0BAA0B,CACtC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,MAAM,CAAC,EAAE,GAAG,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CA8BrG"}

package/dist/proxy-credentials.js

@@ -0,0 +1,234 @@
+import { log } from "./logger.js";
+import { PLUGIN_DIR, REAL_UPSTREAM_BASEURL_CACHE_FILE } from "./constants.js";
+import * as fs from "fs";
+import * as path from "path";
+import * as os from "os";
+const DEFAULT_AUTH_PROFILES_PATH = path.join(os.homedir(), ".openclaw", "agents", "main", "agent", "auth-profiles.json");
+/** Parse apiKey by provider from auth-profiles.json. Profile keys are often "providerId" or "providerId:name", matching models.providers id. */
+function loadAuthProfilesKeys(profilesPath) {
+    const out = new Map();
+    try {
+        if (!fs.existsSync(profilesPath))
+            return out;
+        const raw = fs.readFileSync(profilesPath, "utf8");
+        const data = JSON.parse(raw);
+        const profiles = data?.profiles ?? {};
+        for (const [profileId, p] of Object.entries(profiles)) {
+            if (!p || typeof p !== "object")
+                continue;
+            const isApiKey = (p.type === "api_key" || p.mode === "api_key");
+            const value = (p.key ?? p.token ?? "")?.trim();
+            if (!isApiKey || !value)
+                continue;
+            const providerId = profileId.includes(":") ? profileId.split(":")[0] : profileId;
+            if (!out.has(providerId))
+                out.set(providerId, value);
+            if (p.provider && p.provider !== providerId && !out.has(p.provider))
+                out.set(p.provider, value);
+        }
+    }
+    catch (_) {
+        // ignore
+    }
+    return out;
+}
+export function extractProviderCredentials(config, providerOverrides) {
+    const credentials = new Map();
+    const authKeys = loadAuthProfilesKeys(DEFAULT_AUTH_PROFILES_PATH);
+    if (authKeys.size > 0) {
+        log(`[Proxy] Loaded apiKey from auth-profiles for providers: ${[...authKeys.keys()].join(", ")}`);
+    }
+    if (config?.models?.providers) {
+        for (const [id, providerConfig] of Object.entries(config.models.providers)) {
+            if (typeof providerConfig !== "object" ||
+                providerConfig === null ||
+                !("baseUrl" in providerConfig)) {
+                continue;
+            }
+            const pc = providerConfig;
+            if (pc.baseUrl) {
+                const override = providerOverrides?.[id];
+                const customEnvName = override?.apiKeyEnv;
+                const customApiKey = override?.apiKey;
+                const apiKey = customApiKey ||
+                    (typeof pc.apiKey === "string" ? pc.apiKey.trim() : "") ||
+                    (customEnvName ? process.env[customEnvName] : undefined) ||
+                    process.env[`${id.toUpperCase()}_API_KEY`] ||
+                    authKeys.get(id) ||
+                    "";
+                const isMemoryxGateway = (id === "memoryx-gateway");
+                credentials.set(id, {
+                    baseUrl: isMemoryxGateway ? "" : (override?.baseUrl || pc.baseUrl),
+                    apiKey,
+                    models: pc.models,
+                });
+                log(`[Proxy] Extracted credentials for ${id}: models=${pc.models?.length || 0}`);
+            }
+        }
+    }
+    return credentials;
+}
+/**
+ * 在 init 时从 OpenClaw 配置（api.config）读到的「所有厂商 -> baseUrl」做一次快照，不写死任何厂商地址。
+ * - 来源唯一：插件启动时通过 api 读到的 openclaw 配置文件（openclaw.json 等）里的 models.providers[id].baseUrl。
+ * - 若某条已是 localhost（例如上次 redirect 被持久化），本次仍写入 localhost；恢复依赖 setImmediate 里从缓存文件合并（首次正常时已落盘）。
+ * 返回 Map<providerId, baseUrl>，memoryx-gateway 不写入。
+ */
+export function buildRealUpstreamBaseUrlMap(credentials, _sidecarBaseUrl) {
+    const map = new Map();
+    for (const [id, creds] of credentials) {
+        if (id === "memoryx-gateway")
+            continue;
+        const base = (creds.baseUrl ?? "").trim();
+        map.set(id, base);
+    }
+    return map;
+}
+/**
+ * 用 init 时缓存的「真实上游 baseUrl 映射表」生成供 Sidecar 使用的 credentials。
+ * 发给 llm_proxy 的每个厂商的 targetUrl 均来自此映射表（初始化时的真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
+ * 用户改配置后重启即可生效。
+ */
+export function realUpstreamCredentialsForSidecar(credentials, realUpstreamBaseUrlMap) {
+    const out = new Map();
+    for (const [id, creds] of credentials) {
+        if (id === "memoryx-gateway") {
+            out.set(id, creds);
+            continue;
+        }
+        const baseUrl = realUpstreamBaseUrlMap.get(id) ?? creds.baseUrl ?? "";
+        out.set(id, { ...creds, baseUrl });
+    }
+    return out;
+}
+/**
+ * 从缓存文件加载「厂商 -> 真实 baseUrl」映射。文件不存在或解析失败返回空 Map。
+ */
+export async function loadRealUpstreamBaseUrlCache() {
+    try {
+        const raw = await fs.promises.readFile(REAL_UPSTREAM_BASEURL_CACHE_FILE, "utf8");
+        const obj = JSON.parse(raw);
+        const map = new Map();
+        if (obj && typeof obj === "object") {
+            for (const [id, url] of Object.entries(obj)) {
+                if (id && typeof url === "string" && url.trim())
+                    map.set(id, url.trim());
+            }
+        }
+        return map;
+    }
+    catch {
+        return new Map();
+    }
+}
+/**
+ * 将「厂商 -> 真实 baseUrl」映射写入缓存文件，重启后若配置被改成 localhost 可从此恢复。
+ */
+export async function saveRealUpstreamBaseUrlCache(map) {
+    try {
+        await fs.promises.mkdir(PLUGIN_DIR, { recursive: true });
+        const obj = {};
+        for (const [id, url] of map) {
+            if (id !== "memoryx-gateway" && url)
+                obj[id] = url;
+        }
+        await fs.promises.writeFile(REAL_UPSTREAM_BASEURL_CACHE_FILE, JSON.stringify(obj, null, 2), "utf8");
+        log(`[Proxy] Saved real upstream baseUrl cache to ${REAL_UPSTREAM_BASEURL_CACHE_FILE}`);
+    }
+    catch (e) {
+        log(`[Proxy] Failed to save real upstream cache: ${e?.message ?? e}`);
+    }
+}
+/** 判断是否为 localhost（或等于 sidecarBaseUrl），用于合并缓存时决定是否用缓存值覆盖。 */
+export function isLocalhostBaseUrl(url, sidecarBaseUrl) {
+    const u = (url || "").trim().toLowerCase().replace(/\/$/, "");
+    const sidecarNorm = (sidecarBaseUrl || "").toLowerCase().replace(/\/$/, "");
+    return !u || u.includes("localhost") || (!!sidecarNorm && u === sidecarNorm);
+}
+/** Only include providers with non-empty apiKey to avoid invalid Bearer header */
+function hasApiKey(creds) {
+    return ((creds.apiKey ?? "").trim().length > 0);
+}
+/** Get all available provider/model list (for server fallback/retry); only providers with apiKey set */
+export function getAvailableProviders(credentials) {
+    const result = [];
+    for (const [providerId, creds] of credentials) {
+        if (!hasApiKey(creds))
+            continue;
+        if (creds.models && creds.models.length > 0) {
+            for (const m of creds.models) {
+                const id = m.id || m.name;
+                if (id)
+                    result.push({ provider: providerId, model: id });
+            }
+        }
+        else {
+            result.push({ provider: providerId, model: "" });
+        }
+    }
+    return result;
+}
+/**
+ * Default primary: one model per provider (first listed); only providers with apiKey set.
+ * Order follows config.models.providers key order (Map insertion order).
+ */
+export function getDefaultProviderModelList(credentials) {
+    const result = [];
+    for (const [providerId, creds] of credentials) {
+        if (!hasApiKey(creds))
+            continue;
+        if (creds.models?.length) {
+            const id = creds.models[0].id || creds.models[0].name;
+            if (id)
+                result.push({ provider: providerId, model: id });
+        }
+    }
+    return result;
+}
+/** Find provider/model in available list matching primary (primary format: "provider/modelId") */
+function resolvePrimaryInAvailable(primary, available) {
+    if (!primary || typeof primary !== "string")
+        return null;
+    const trimmed = primary.trim();
+    const slash = trimmed.indexOf("/");
+    const wantProvider = slash > 0 ? trimmed.slice(0, slash) : trimmed;
+    const wantModel = slash > 0 ? trimmed.slice(slash + 1) : "";
+    for (const a of available) {
+        if (a.provider !== wantProvider)
+            continue;
+        if (!wantModel || a.model === wantModel || a.model.endsWith("/" + wantModel))
+            return a;
+    }
+    if (wantProvider && wantModel)
+        return { provider: wantProvider, model: wantModel };
+    return null;
+}
+/** Get default model/provider and full availableProviders; prefer config.agents.defaults.model.primary, else first in list. */
+export function getDefaultModelAndProvider(credentials, config) {
+    const defaultList = getDefaultProviderModelList(credentials);
+    const availableAll = getAvailableProviders(credentials);
+    const primaryFromConfig = config?.agents?.defaults?.model?.primary ?? config?.agents?.defaults?.model?.default;
+    const resolved = resolvePrimaryInAvailable(typeof primaryFromConfig === "string" ? primaryFromConfig : "", availableAll.length > 0 ? availableAll : defaultList);
+    if (resolved) {
+        return { model: resolved.model, provider: resolved.provider, availableProviders: availableAll.length > 0 ? availableAll : defaultList };
+    }
+    if (defaultList.length > 0) {
+        return {
+            model: defaultList[0].model,
+            provider: defaultList[0].provider,
+            availableProviders: availableAll,
+        };
+    }
+    const agentsDefaults = config?.agents?.defaults;
+    let model = "claude-sonnet-4-20250514";
+    let provider = "anthropic";
+    if (agentsDefaults?.model) {
+        const m = agentsDefaults.model;
+        model = typeof m === "string" ? m : (m.default ? String(m.default) : model);
+    }
+    if (agentsDefaults?.provider) {
+        const p = agentsDefaults.provider;
+        provider = typeof p === "string" ? p : (p.default ? String(p.default) : provider);
+    }
+    return { model, provider, availableProviders: [{ provider, model }] };
+}

package/dist/proxy-redirect.d.ts

@@ -0,0 +1,7 @@
+export declare function createProxyRedirect(api: any, getSidecarBase: () => string, realProviderHeader: string): {
+    applySidecarRedirect: (opts?: {
+        quiet?: boolean;
+    }) => void;
+    wrapProvidersWithProxy: () => void;
+};
+//# sourceMappingURL=proxy-redirect.d.ts.map

package/dist/proxy-redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-redirect.d.ts","sourceRoot":"","sources":["../src/proxy-redirect.ts"],"names":[],"mappings":"AAMA,wBAAgB,mBAAmB,CAC/B,GAAG,EAAE,GAAG,EACR,cAAc,EAAE,MAAM,MAAM,EAC5B,kBAAkB,EAAE,MAAM,GAC3B;IACC,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3D,sBAAsB,EAAE,MAAM,IAAI,CAAC;CACtC,CAoEA"}