@t0ken.ai/memoryx-openclaw-plugin 2.2.62 → 2.2.64

package/dist/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const PLUGIN_VERSION = "2.2.62";
+export declare const PLUGIN_VERSION = "2.2.64";
 export declare const DEFAULT_API_BASE = "https://t0ken.ai/api";
 export declare const PLUGIN_DIR: string;
 /** 真实上游 baseUrl 缓存文件：重启后若配置已被改成 localhost，从此文件恢复各厂商真实地址。 */

package/dist/constants.js

@@ -4,7 +4,7 @@
 import * as path from "path";
 import * as os from "os";
 // Plugin version - synced from package.json by prebuild script
-export const PLUGIN_VERSION = "2.2.62";
+export const PLUGIN_VERSION = "2.2.64";
 export const DEFAULT_API_BASE = "https://t0ken.ai/api";
 export const PLUGIN_DIR = path.join(os.homedir(), ".openclaw", "extensions", "memoryx-openclaw-plugin");
 /** 真实上游 baseUrl 缓存文件：重启后若配置已被改成 localhost，从此文件恢复各厂商真实地址。 */

package/dist/hooks.d.ts

@@ -4,5 +4,5 @@
 import type { MemoryXPlugin } from "./plugin-core.js";
 export declare function registerHooks(api: any, plugin: MemoryXPlugin, wrapProvidersWithProxy: () => void, applySidecarRedirect: (opts?: {
     quiet?: boolean;
-}) => void, shouldApplyProxy: () => boolean): void;
+}) => void, shouldApplyProxy: () => boolean, syncRealUpstreamBaseUrlCache?: () => Promise<void>): void;
 //# sourceMappingURL=hooks.d.ts.map

package/dist/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,wBAAgB,aAAa,CACzB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,aAAa,EACrB,sBAAsB,EAAE,MAAM,IAAI,EAClC,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,EAC1D,gBAAgB,EAAE,MAAM,OAAO,GAChC,IAAI,CAsCN"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,wBAAgB,aAAa,CACzB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,aAAa,EACrB,sBAAsB,EAAE,MAAM,IAAI,EAClC,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,EAC1D,gBAAgB,EAAE,MAAM,OAAO,EAC/B,4BAA4B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GACnD,IAAI,CAuCN"}

package/dist/hooks.js

@@ -1,4 +1,4 @@
-export function registerHooks(api, plugin, wrapProvidersWithProxy, applySidecarRedirect, shouldApplyProxy) {
+export function registerHooks(api, plugin, wrapProvidersWithProxy, applySidecarRedirect, shouldApplyProxy, syncRealUpstreamBaseUrlCache) {
     let useVirtualProviderInLastRun = false;
     api.on("message_received", async (event) => {
         const { content } = event;
@@ -18,6 +18,7 @@ export function registerHooks(api, plugin, wrapProvidersWithProxy, applySidecarR
     });
     api.on("before_agent_start", async (event) => {
         if (shouldApplyProxy()) {
+            await syncRealUpstreamBaseUrlCache?.();
             wrapProvidersWithProxy();
             applySidecarRedirect({ quiet: true });
         }

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,aAAa,EAAU,MAAM,kBAAkB,CAAC;;;;;;kBAyBvC,GAAG,iBAAiB,YAAY,GAAG,IAAI;;AARzD,wBAqGE;AAEF,OAAO,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,aAAa,EAAU,MAAM,kBAAkB,CAAC;;;;;;kBAsBvC,GAAG,iBAAiB,YAAY,GAAG,IAAI;;AARzD,wBA6FE;AAEF,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/index.js

@@ -16,7 +16,7 @@
 import { PLUGIN_VERSION, DEFAULT_API_BASE, SIDECAR_PORT } from "./constants.js";
 import { log, LOG_FILE } from "./logger.js";
 import { MemoryXPlugin, getSDK } from "./plugin-core.js";
-import { extractProviderCredentials, getDefaultModelAndProvider, buildRealUpstreamBaseUrlMap, realUpstreamCredentialsForSidecar, loadRealUpstreamBaseUrlCache, saveRealUpstreamBaseUrlCache, isLocalhostBaseUrl, } from "./proxy-credentials.js";
+import { extractProviderCredentials, getDefaultModelAndProvider, realUpstreamCredentialsForSidecar, syncRealUpstreamBaseUrlCacheFromConfig, } from "./proxy-credentials.js";
 import { createProxyRedirect } from "./proxy-redirect.js";
 import { SidecarServer } from "./sidecar.js";
 import { registerHooks } from "./hooks.js";
@@ -43,8 +43,7 @@ export default {
         log(`[Proxy] Default: ${defaultConfig.provider}/${defaultConfig.model}`);
         const realProviderHeader = "X-MemoryX-Real-Provider";
         const sidecarBaseUrl = `http://localhost:${SIDECAR_PORT}`;
-        const realUpstreamBaseUrlMap = buildRealUpstreamBaseUrlMap(providerCredentials, sidecarBaseUrl);
-        const realUpstreamCredentials = realUpstreamCredentialsForSidecar(providerCredentials, realUpstreamBaseUrlMap);
+        const realUpstreamCredentials = realUpstreamCredentialsForSidecar(providerCredentials, new Map());
         const proxyUrl = (pluginConfig?.apiBaseUrl || DEFAULT_API_BASE) + "/llm/proxy/chat/completions";
         const sidecar = new SidecarServer(realUpstreamCredentials, { model: defaultConfig.model, provider: defaultConfig.provider }, defaultConfig.availableProviders, {
             proxyUrl,
@@ -56,7 +55,8 @@ export default {
         const { applySidecarRedirect, wrapProvidersWithProxy } = createProxyRedirect(api, getSidecarBase, realProviderHeader);
         /** 仅当用户当前默认使用的是 memoryx-gateway 时才做拦截/注入，否则不碰配置，避免装完插件就用不了 OpenClaw。 */
         const shouldApplyProxy = () => getDefaultModelAndProvider(extractProviderCredentials(api.config), api.config).provider === "memoryx-gateway";
-        registerHooks(api, plugin, wrapProvidersWithProxy, applySidecarRedirect, shouldApplyProxy);
+        const syncRealUpstreamBaseUrlCache = () => syncRealUpstreamBaseUrlCacheFromConfig(api.config, getSidecarBase());
+        registerHooks(api, plugin, wrapProvidersWithProxy, applySidecarRedirect, shouldApplyProxy, syncRealUpstreamBaseUrlCache);
         api.registerService({
             id: "memoryx-sidecar",
             start: async () => {
@@ -92,18 +92,8 @@ export default {
             catch (e) {
                 // ignore
             }
-            // 仅用「非 localhost」的 baseUrl 更新缓存，避免配置被改成 localhost 时覆盖掉真实地址
             try {
-                const cached = await loadRealUpstreamBaseUrlCache();
-                const merged = new Map(cached);
-                for (const [id, url] of realUpstreamBaseUrlMap) {
-                    if (id === "memoryx-gateway")
-                        continue;
-                    if (url && !isLocalhostBaseUrl(url, sidecarBaseUrl)) {
-                        merged.set(id, url);
-                    }
-                }
-                await saveRealUpstreamBaseUrlCache(merged);
+                await syncRealUpstreamBaseUrlCacheFromConfig(api.config, sidecarBaseUrl);
             }
             catch (e) {
                 // ignore

package/dist/proxy-credentials.d.ts

@@ -24,14 +24,24 @@ export declare function extractProviderCredentials(config: any, providerOverride
 export declare function buildRealUpstreamBaseUrlMap(credentials: Map<string, ProviderCredentials>, _sidecarBaseUrl: string): Map<string, string>;
 /**
  * 用 init 时缓存的「真实上游 baseUrl 映射表」生成供 Sidecar 使用的 credentials。
- * 发给 llm_proxy 的每个厂商的 targetUrl 均来自此映射表（初始化时的真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
+ * 发给 llm_proxy 的 base_url_map（各厂商 api_base）均来自此映射表（真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
  * 用户改配置后重启即可生效。
  */
 export declare function realUpstreamCredentialsForSidecar(credentials: Map<string, ProviderCredentials>, realUpstreamBaseUrlMap: Map<string, string>): Map<string, ProviderCredentials>;
 /**
  * 从缓存文件加载「厂商 -> 真实 baseUrl」映射。文件不存在或解析失败返回空 Map。
+ * 供插件 sync 时使用（先读已有缓存，没有则当空）。
  */
 export declare function loadRealUpstreamBaseUrlCache(): Promise<Map<string, string>>;
+/**
+ * 从缓存文件加载「厂商 -> 真实 baseUrl」映射；文件不存在、IO 或解析错误时 throw。
+ * 供 Sidecar 每次请求读盘使用，不缓存。
+ */
+export declare function loadRealUpstreamBaseUrlCacheStrict(): Promise<Map<string, string>>;
+/**
+ * 根据 OpenClaw 配置更新 real-upstream-baseurl.json：非 localhost 的 baseUrl 写入/覆盖，localhost 绝不覆盖。
+ */
+export declare function syncRealUpstreamBaseUrlCacheFromConfig(config: any, sidecarBaseUrl: string): Promise<void>;
 /**
  * 将「厂商 -> 真实 baseUrl」映射写入缓存文件，重启后若配置被改成 localhost 可从此恢复。
  */

package/dist/proxy-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-credentials.d.ts","sourceRoot":"","sources":["../src/proxy-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAuCtD,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,GAAG,EACX,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CA0ClC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,eAAe,EAAE,MAAM,GACxB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC7C,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5C,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAWlC;AAED;;GAEG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjF;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1F;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAI/E;AAOD,wGAAwG;AACxG,wBAAgB,qBAAqB,CACjC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc5C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAU5C;AAoBD,+HAA+H;AAC/H,wBAAgB,0BAA0B,CACtC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,MAAM,CAAC,EAAE,GAAG,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CA8BrG"}
+{"version":3,"file":"proxy-credentials.d.ts","sourceRoot":"","sources":["../src/proxy-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAuCtD,wBAAgB,0BAA0B,CACtC,MAAM,EAAE,GAAG,EACX,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAiDlC;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,eAAe,EAAE,MAAM,GACxB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC7C,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5C,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAWlC;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjF;AAED;;;GAGG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUvF;AAED;;GAEG;AACH,wBAAsB,sCAAsC,CACxD,MAAM,EAAE,GAAG,EACX,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1F;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAI/E;AAOD,wGAAwG;AACxG,wBAAgB,qBAAqB,CACjC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc5C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAC9C,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAU5C;AAoBD,+HAA+H;AAC/H,wBAAgB,0BAA0B,CACtC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,MAAM,CAAC,EAAE,GAAG,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CA8BrG"}

package/dist/proxy-credentials.js

@@ -35,9 +35,6 @@ function loadAuthProfilesKeys(profilesPath) {
 export function extractProviderCredentials(config, providerOverrides) {
     const credentials = new Map();
     const authKeys = loadAuthProfilesKeys(DEFAULT_AUTH_PROFILES_PATH);
-    if (authKeys.size > 0) {
-        log(`[Proxy] Loaded apiKey from auth-profiles for providers: ${[...authKeys.keys()].join(", ")}`);
-    }
     if (config?.models?.providers) {
         for (const [id, providerConfig] of Object.entries(config.models.providers)) {
             if (typeof providerConfig !== "object" ||
@@ -62,10 +59,17 @@ export function extractProviderCredentials(config, providerOverrides) {
                     apiKey,
                     models: pc.models,
                 });
-                log(`[Proxy] Extracted credentials for ${id}: models=${pc.models?.length || 0}`);
             }
         }
     }
+    if (credentials.size > 0) {
+        const parts = [...credentials.entries()].map(([id, c]) => `${id}(${c.models?.length ?? 0})`);
+        const authFromProfiles = [...credentials.keys()].filter((id) => authKeys.has(id));
+        const summary = authFromProfiles.length > 0
+            ? `[Proxy] Credentials: ${parts.join(", ")}; apiKey from auth-profiles: ${authFromProfiles.join(", ")}`
+            : `[Proxy] Credentials: ${parts.join(", ")}`;
+        log(summary);
+    }
     return credentials;
 }
 /**
@@ -86,7 +90,7 @@ export function buildRealUpstreamBaseUrlMap(credentials, _sidecarBaseUrl) {
 }
 /**
  * 用 init 时缓存的「真实上游 baseUrl 映射表」生成供 Sidecar 使用的 credentials。
- * 发给 llm_proxy 的每个厂商的 targetUrl 均来自此映射表（初始化时的真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
+ * 发给 llm_proxy 的 base_url_map（各厂商 api_base）均来自此映射表（真实 baseUrl），不会被 redirect 后的 localhost 覆盖。
  * 用户改配置后重启即可生效。
  */
 export function realUpstreamCredentialsForSidecar(credentials, realUpstreamBaseUrlMap) {
@@ -103,6 +107,7 @@ export function realUpstreamCredentialsForSidecar(credentials, realUpstreamBaseU
 }
 /**
  * 从缓存文件加载「厂商 -> 真实 baseUrl」映射。文件不存在或解析失败返回空 Map。
+ * 供插件 sync 时使用（先读已有缓存，没有则当空）。
  */
 export async function loadRealUpstreamBaseUrlCache() {
     try {
@@ -121,6 +126,45 @@ export async function loadRealUpstreamBaseUrlCache() {
         return new Map();
     }
 }
+/**
+ * 从缓存文件加载「厂商 -> 真实 baseUrl」映射；文件不存在、IO 或解析错误时 throw。
+ * 供 Sidecar 每次请求读盘使用，不缓存。
+ */
+export async function loadRealUpstreamBaseUrlCacheStrict() {
+    const raw = await fs.promises.readFile(REAL_UPSTREAM_BASEURL_CACHE_FILE, "utf8");
+    const obj = JSON.parse(raw);
+    const map = new Map();
+    if (obj && typeof obj === "object") {
+        for (const [id, url] of Object.entries(obj)) {
+            if (id && typeof url === "string" && url.trim())
+                map.set(id, url.trim());
+        }
+    }
+    return map;
+}
+/**
+ * 根据 OpenClaw 配置更新 real-upstream-baseurl.json：非 localhost 的 baseUrl 写入/覆盖，localhost 绝不覆盖。
+ */
+export async function syncRealUpstreamBaseUrlCacheFromConfig(config, sidecarBaseUrl) {
+    let cached;
+    try {
+        cached = await loadRealUpstreamBaseUrlCache();
+    }
+    catch {
+        cached = new Map();
+    }
+    const credentials = extractProviderCredentials(config);
+    const fromConfig = buildRealUpstreamBaseUrlMap(credentials, sidecarBaseUrl);
+    const merged = new Map(cached);
+    for (const [id, url] of fromConfig) {
+        if (id === "memoryx-gateway")
+            continue;
+        if (url && !isLocalhostBaseUrl(url, sidecarBaseUrl)) {
+            merged.set(id, url);
+        }
+    }
+    await saveRealUpstreamBaseUrlCache(merged);
+}
 /**
  * 将「厂商 -> 真实 baseUrl」映射写入缓存文件，重启后若配置被改成 localhost 可从此恢复。
  */

package/dist/sidecar.d.ts

@@ -1,5 +1,6 @@
 /**
- * Local HTTP Sidecar: 仅转发到服务端 proxy（记忆注入），无本地回落。
+ * Local HTTP Sidecar: 轻量化转发。只读 base_url_map + credentials，打包发给服务端；
+ * 服务端解析 provider、用 api_base 调 LiteLLM（不拼 URL），做记忆注入。无本地解析、无 target。
  */
 import type { ProviderCredentials } from "./types.js";
 import type { PluginConfig } from "./types.js";
@@ -26,15 +27,7 @@ export declare class SidecarServer {
     start(): Promise<void>;
     stop(): Promise<void>;
     getPort(): number;
-    /**
-     * 用持久化/合并后的真实上游 baseUrl 映射更新 credentials，避免重启后配置已是 localhost 时仍用旧缓存。
-     */
-    updateRealUpstreamBaseUrlMap(map: Map<string, string>): void;
-    /** For logging: redact headers (Authorization, x-api-key, etc. show as ***) */
-    private redactHeaders;
-    /** Build forward request headers from apiKey in OpenClaw style; does not overwrite user config */
-    private buildForwardHeaders;
-    /** 仅转发到服务端 proxy（记忆注入），无本地回落。 */
+    /** 轻量化：只读 base_url_map + credentials，打包发给服务端；不做 provider 解析、无 target。 */
     private handleRequest;
     private readBody;
 }

package/dist/sidecar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sidecar.d.ts","sourceRoot":"","sources":["../src/sidecar.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,eAAe,CAAsC;IAC7D,OAAO,CAAC,kBAAkB,CAA6C;IACvE,OAAO,CAAC,OAAO,CAAiB;gBAG5B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EACpD,kBAAkB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAC9D,OAAO,EAAE,cAAc;IAQrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,OAAO,IAAI,MAAM;IAMjB;;OAEG;IACH,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAU5D,+EAA+E;IAC/E,OAAO,CAAC,aAAa;IAUrB,kGAAkG;IAClG,OAAO,CAAC,mBAAmB;IAa3B,iCAAiC;YACnB,aAAa;IAmN3B,OAAO,CAAC,QAAQ;CAQnB"}
+{"version":3,"file":"sidecar.d.ts","sourceRoot":"","sources":["../src/sidecar.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAK/C,MAAM,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,eAAe,CAAsC;IAC7D,OAAO,CAAC,kBAAkB,CAA6C;IACvE,OAAO,CAAC,OAAO,CAAiB;gBAG5B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAC7C,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EACpD,kBAAkB,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAC9D,OAAO,EAAE,cAAc;IAQrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,OAAO,IAAI,MAAM;IAMjB,yEAAyE;YAC3D,aAAa;IAqK3B,OAAO,CAAC,QAAQ;CAQnB"}

package/dist/sidecar.js

@@ -1,9 +1,11 @@
 /**
- * Local HTTP Sidecar: 仅转发到服务端 proxy（记忆注入），无本地回落。
+ * Local HTTP Sidecar: 轻量化转发。只读 base_url_map + credentials，打包发给服务端；
+ * 服务端解析 provider、用 api_base 调 LiteLLM（不拼 URL），做记忆注入。无本地解析、无 target。
  */
 import * as http from "http";
 import { SIDECAR_PORT } from "./constants.js";
 import { log, LOG_FILE } from "./logger.js";
+import { loadRealUpstreamBaseUrlCache } from "./proxy-credentials.js";
 export class SidecarServer {
     server = null;
     credentials;
@@ -58,44 +60,7 @@ export class SidecarServer {
             ? this.server.address().port
             : SIDECAR_PORT;
     }
-    /**
-     * 用持久化/合并后的真实上游 baseUrl 映射更新 credentials，避免重启后配置已是 localhost 时仍用旧缓存。
-     */
-    updateRealUpstreamBaseUrlMap(map) {
-        for (const [id, baseUrl] of map) {
-            const creds = this.credentials.get(id);
-            if (creds && baseUrl) {
-                this.credentials.set(id, { ...creds, baseUrl });
-            }
-        }
-        log(`[Sidecar] Updated real upstream baseUrl map for ${map.size} provider(s)`);
-    }
-    /** For logging: redact headers (Authorization, x-api-key, etc. show as ***) */
-    redactHeaders(h) {
-        const out = {};
-        const secretKeys = ["authorization", "x-api-key", "cookie"];
-        for (const [k, v] of Object.entries(h)) {
-            const lower = k.toLowerCase();
-            out[k] = secretKeys.some((s) => lower === s || lower.includes("api-key")) ? "***" : v;
-        }
-        return out;
-    }
-    /** Build forward request headers from apiKey in OpenClaw style; does not overwrite user config */
-    buildForwardHeaders(provider, apiKey) {
-        const h = { "Content-Type": "application/json" };
-        const key = (apiKey || "").trim();
-        if (!key)
-            return h;
-        if (provider === "anthropic") {
-            h["x-api-key"] = key;
-            h["anthropic-version"] = "2023-06-01";
-        }
-        else {
-            h["Authorization"] = `Bearer ${key}`;
-        }
-        return h;
-    }
-    /** 仅转发到服务端 proxy（记忆注入），无本地回落。 */
+    /** 轻量化：只读 base_url_map + credentials，打包发给服务端；不做 provider 解析、无 target。 */
     async handleRequest(req, res) {
         const url = req.url || "/";
         const method = req.method?.toUpperCase();
@@ -106,12 +71,12 @@ export class SidecarServer {
             return;
         }
         const reqId = `req-${Date.now()}`;
-        log(`[Sidecar] ${reqId} Incoming ${method} ${url}`);
         let body;
         try {
             body = await this.readBody(req);
         }
         catch (e) {
+            log(`[Sidecar] ${reqId} err read body: ${e?.message ?? "Read body failed"}`, { console: true });
             res.writeHead(502, { "Content-Type": "application/json" });
             res.end(JSON.stringify({ error: e?.message || "Read body failed" }));
             return;
@@ -123,61 +88,32 @@ export class SidecarServer {
         catch {
             openaiRequest = {};
         }
-        const messages = openaiRequest.messages || [];
-        const roleSeq = messages.map((m) => (m?.role || "?").slice(0, 1)).join("");
-        const lastMsg = messages.length ? messages[messages.length - 1] : null;
-        const lastRole = lastMsg ? (lastMsg.role || "?") : "-";
-        const lastContentLen = lastMsg && lastMsg.content != null
-            ? typeof lastMsg.content === "string"
-                ? lastMsg.content.length
-                : JSON.stringify(lastMsg.content).length
-            : 0;
-        const topKeys = Object.keys(openaiRequest).filter((k) => !["messages", "model"].includes(k) && openaiRequest[k] != null);
-        log(`[Sidecar] ${reqId} request detail: bodyLen=${(body || "").length} messages=${messages.length} roles=${roleSeq} lastRole=${lastRole} lastContentLen=${lastContentLen} model=${openaiRequest.model ?? "-"} stream=${!!openaiRequest.stream} extraKeys=[${topKeys.join(",")}]`);
-        const rawProvider = req.headers["x-memoryx-real-provider"]?.trim() || "";
-        const modelStr = openaiRequest.model || "";
-        let provider = rawProvider || (modelStr.includes("/") ? modelStr.split("/")[0] : "") || "";
-        if (provider === "memoryx-gateway") {
-            const real = this.availableProviders.find((p) => p.provider !== "memoryx-gateway");
-            provider = real ? real.provider : "";
-        }
-        if (!provider || !this.credentials.has(provider)) {
-            provider = this.defaultProvider?.provider || "";
-        }
-        if (!provider || !this.credentials.has(provider)) {
-            for (const [id] of this.credentials) {
-                if (id !== "memoryx-gateway") {
-                    provider = id;
-                    break;
-                }
-            }
-        }
-        let creds = provider ? this.credentials.get(provider) : undefined;
-        if (!creds?.baseUrl?.trim() || !(creds.apiKey ?? "").trim()) {
-            for (const [id, c] of this.credentials) {
-                if (id !== "memoryx-gateway" && (c.baseUrl || "").trim() && (c.apiKey ?? "").trim()) {
-                    provider = id;
-                    creds = c;
-                    break;
-                }
-            }
-        }
-        const baseUrl = (creds?.baseUrl || "").trim();
-        const apiKey = (creds?.apiKey ?? "").trim();
-        if (!baseUrl || !apiKey) {
-            res.writeHead(502, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ error: "No upstream" }));
-            return;
+        const stream = !!openaiRequest.stream;
+        let baseUrlMap;
+        try {
+            baseUrlMap = await loadRealUpstreamBaseUrlCache();
         }
-        const base = baseUrl.replace(/\/$/, "");
-        const pathFromOpenClaw = (url.split("?")[0] || "/").trim() || "/";
-        const targetUrl = base + (pathFromOpenClaw.startsWith("/") ? pathFromOpenClaw : "/" + pathFromOpenClaw);
-        const currentModel = openaiRequest.model || "";
-        if (!currentModel || currentModel === "auto" || currentModel.startsWith("memoryx-gateway/")) {
-            const firstId = creds?.models?.[0]?.id || creds?.models?.[0]?.name;
-            if (firstId)
-                openaiRequest.model = firstId;
+        catch {
+            baseUrlMap = new Map();
+        }
+        const baseUrlMapObj = {};
+        for (const [id, u] of baseUrlMap) {
+            if (id && u?.trim())
+                baseUrlMapObj[id] = u.trim();
+        }
+        const credentialsObj = {};
+        for (const [id, c] of this.credentials) {
+            if (!c)
+                continue;
+            credentialsObj[id] = {
+                apiKey: (c.apiKey ?? "").trim(),
+                models: c.models,
+            };
         }
+        const rawProvider = req.headers["x-memoryx-real-provider"]?.trim() || "";
+        const messages = openaiRequest.messages || [];
+        const lastUserMsg = [...messages].reverse().find((m) => m.role === "user");
+        const searchQuery = typeof lastUserMsg?.content === "string" ? lastUserMsg.content : "";
         let memoryxApiKey = "";
         let agentId = "";
         try {
@@ -187,25 +123,19 @@ export class SidecarServer {
             agentId = accountInfo.agentId || "";
         }
         catch (_e) {
-            /* Do not block; proxy may still accept request */
+            /* do not block */
         }
-        const headers = this.buildForwardHeaders(provider, apiKey);
-        const lastUserMsg = [...messages].reverse().find((m) => m.role === "user");
-        const searchQuery = typeof lastUserMsg?.content === "string" ? lastUserMsg.content : "";
         const proxyRequestBody = {
-            targetUrl,
-            api_base: base,
-            headers,
+            base_url_map: baseUrlMapObj,
+            credentials: credentialsObj,
             body: openaiRequest,
-            searchQuery,
+            request_headers: { "x-memoryx-real-provider": rawProvider },
+            search_query: searchQuery,
             agent_id: agentId,
             available_models: this.availableProviders.map((p) => `${p.provider}/${p.model}`),
         };
-        const proxyReqHeaders = { "Content-Type": "application/json", "X-API-Key": memoryxApiKey ? "***" : "" };
-        log(`[Sidecar] ${reqId} → Proxy POST ${proxyUrl}`);
-        log(`[Sidecar] ${reqId} Proxy request headers: ${JSON.stringify(proxyReqHeaders)}`);
-        log(`[Sidecar] ${reqId} Proxy body: targetUrl=${targetUrl} model=${openaiRequest.model} stream=${!!openaiRequest.stream} searchQuery.length=${searchQuery.length} agent_id=${agentId || "(empty)"}`);
-        log(`[Sidecar] ${reqId} Forward headers (to upstream): ${JSON.stringify(this.redactHeaders(headers))}`);
+        const pathLog = (req.url || "/").split("?")[0] || "/";
+        log(`[Sidecar] ${reqId} ${method} ${pathLog} model=${openaiRequest.model ?? "-"} stream=${stream} → proxy`);
         let proxyResponse = null;
         try {
             proxyResponse = await fetch(proxyUrl, {
@@ -216,10 +146,7 @@ export class SidecarServer {
         }
         catch (e) {
             proxyResponse = null;
-            log(`[Sidecar] ${reqId} Proxy fetch error: ${e?.message ?? String(e)}`, { console: true });
-        }
-        if (proxyResponse) {
-            log(`[Sidecar] ${reqId} Proxy response status=${proxyResponse.status} ${proxyResponse.statusText}`);
+            log(`[Sidecar] ${reqId} err proxy fetch: ${e?.message ?? String(e)}`, { console: true });
         }
         const proxyFailed = !proxyResponse || proxyResponse.status >= 500;
         if (proxyFailed) {
@@ -233,12 +160,12 @@ export class SidecarServer {
                     }
                 }
                 catch (_) {
-                    /* drain failed, ignore */
+                    /* drain */
                 }
             }
-            log(`[Sidecar] ${reqId} Proxy failed, returning error (no local fallback)`, { console: true });
             const status = proxyResponse?.status ?? 502;
             const detail = proxyResponse?.statusText || "MemoryX proxy unavailable";
+            log(`[Sidecar] ${reqId} ← ${status} proxy failed: ${detail}`, { console: true });
             res.writeHead(status, { "Content-Type": "application/json" });
             res.end(JSON.stringify({ error: detail }));
             return;
@@ -255,9 +182,7 @@ export class SidecarServer {
             }
             catch (firstErr) {
                 reader.releaseLock();
-                log(`[Sidecar] ${reqId} Proxy stream first chunk failed: ${firstErr?.message ?? "timeout"}`, {
-                    console: true,
-                });
+                log(`[Sidecar] ${reqId} err stream first chunk: ${firstErr?.message ?? "timeout"}`, { console: true });
                 res.writeHead(502, { "Content-Type": "application/json" });
                 res.end(JSON.stringify({ error: "MemoryX proxy stream failed" }));
                 return;
@@ -279,7 +204,7 @@ export class SidecarServer {
                 reader.releaseLock();
             }
             res.end();
-            log(`[Sidecar] ${reqId} Proxy stream done, status=${proxy.status}`);
+            log(`[Sidecar] ${reqId} ← ${proxy.status} stream`);
             return;
         }
         if (!proxy.body) {
@@ -287,10 +212,11 @@ export class SidecarServer {
                 "Content-Type": proxy.headers.get("content-type") || "application/json",
             });
             res.end();
+            log(`[Sidecar] ${reqId} ← ${proxy.status} (no body)`);
             return;
         }
         const text = await proxy.text();
-        log(`[Sidecar] ${reqId} Proxy done, status=${proxy.status} body.length=${text.length}`);
+        log(`[Sidecar] ${reqId} ← ${proxy.status} body=${text.length}`);
         res.writeHead(proxy.status, {
             "Content-Type": proxy.headers.get("content-type") || "application/json",
         });

package/dist/vendor-normalize.d.ts

@@ -1,14 +1,14 @@
 /**
  * 与服务端 llm_proxy 一致的厂商请求体规范化。
- * 部分 LLM 厂商非标准 OpenAI 格式，需在此做兼容后再转发；服务端用 LiteLLM，Sidecar 直连时用本模块保证同一套逻辑。
+ * 当前插件内无调用方，规范化由服务端 llm_proxy 完成；保留本模块供将来如需在插件侧做兼容时复用。
  */
 /**
- * 判断是否为 Z.AI GLM-5：按 provider 或 targetUrl 与 model 判断。
+ * 判断是否为 Z.AI GLM-5：按 provider 与 model 判断（不再依赖 targetUrl）。
  */
-export declare function isZaiGlm5(provider: string, targetUrl: string, model: string): boolean;
+export declare function isZaiGlm5(provider: string, model: string): boolean;
 /**
- * 按厂商与 URL/model 规范化请求体；与服务端逻辑一致，供 Sidecar 直连时使用。
+ * 按厂商与 model 规范化请求体；与服务端逻辑一致。当前插件内无调用，规范化在服务端完成。
  * 返回规范化后的 body（不修改入参）。
  */
-export declare function normalizeBodyForVendor(provider: string, targetUrl: string, body: Record<string, unknown>): Record<string, unknown>;
+export declare function normalizeBodyForVendor(provider: string, body: Record<string, unknown>): Record<string, unknown>;
 //# sourceMappingURL=vendor-normalize.d.ts.map

package/dist/vendor-normalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vendor-normalize.d.ts","sourceRoot":"","sources":["../src/vendor-normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQrF;AA4DD;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB"}
+{"version":3,"file":"vendor-normalize.d.ts","sourceRoot":"","sources":["../src/vendor-normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIlE;AA4DD;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB"}

package/dist/vendor-normalize.js

@@ -1,19 +1,14 @@
 /**
  * 与服务端 llm_proxy 一致的厂商请求体规范化。
- * 部分 LLM 厂商非标准 OpenAI 格式，需在此做兼容后再转发；服务端用 LiteLLM，Sidecar 直连时用本模块保证同一套逻辑。
+ * 当前插件内无调用方，规范化由服务端 llm_proxy 完成；保留本模块供将来如需在插件侧做兼容时复用。
  */
 /**
- * 判断是否为 Z.AI GLM-5：按 provider 或 targetUrl 与 model 判断。
+ * 判断是否为 Z.AI GLM-5：按 provider 与 model 判断（不再依赖 targetUrl）。
  */
-export function isZaiGlm5(provider, targetUrl, model) {
+export function isZaiGlm5(provider, model) {
     const prov = (provider || "").toLowerCase();
-    const url = (targetUrl || "").toLowerCase();
     const m = (model || "").toLowerCase();
-    if (prov === "zai" && (m === "glm-5" || m.endsWith("/glm-5")))
-        return true;
-    if ((url.includes("open.bigmodel.cn") || url.includes("api.z.ai")) && (m === "glm-5" || m.endsWith("/glm-5")))
-        return true;
-    return false;
+    return prov === "zai" && (m === "glm-5" || m.endsWith("/glm-5"));
 }
 /**
  * Z.AI GLM-5 兼容：与 api/app/routers/llm_proxy.py _normalize_body_for_zai_glm5 保持一致。
@@ -70,12 +65,12 @@ function normalizeBodyForZaiGlm5(body) {
     return out;
 }
 /**
- * 按厂商与 URL/model 规范化请求体；与服务端逻辑一致，供 Sidecar 直连时使用。
+ * 按厂商与 model 规范化请求体；与服务端逻辑一致。当前插件内无调用，规范化在服务端完成。
  * 返回规范化后的 body（不修改入参）。
  */
-export function normalizeBodyForVendor(provider, targetUrl, body) {
+export function normalizeBodyForVendor(provider, body) {
     const model = String(body?.model || "").trim();
-    if (isZaiGlm5(provider, targetUrl, model)) {
+    if (isZaiGlm5(provider, model)) {
         return normalizeBodyForZaiGlm5(body);
     }
     return body;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@t0ken.ai/memoryx-openclaw-plugin",
-  "version": "2.2.62",
+  "version": "2.2.64",
   "description": "MemoryX real-time memory capture and recall plugin for OpenClaw (powered by @t0ken.ai/memoryx-sdk)",
   "type": "module",
   "author": "MemoryX Team",