manifest 5.33.16 → 5.33.18

package/README.md

@@ -54,6 +54,11 @@ openclaw plugins install manifest
 openclaw gateway restart
 ```
 
+> **OpenClaw 2026.3.22+:** If you see `"manifest" is a skill`, install from npm directly:
+> ```bash
+> openclaw plugins install "/tmp/$(npm pack manifest --pack-destination /tmp | tail -1)"
+> ```
+
 Dashboard opens at **http://127.0.0.1:2099**. The plugin starts an embedded server, runs the dashboard locally, and registers itself as a provider automatically. No account or API key needed.
 
 ### Cloud vs local

package/dist/backend/config/app.config.js

@@ -3,11 +3,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.appConfig = void 0;
 const config_1 = require("@nestjs/config");
 const path_1 = require("path");
+const os_1 = require("os");
 function sanitizeDbPath(raw) {
     if (!raw)
         return '';
     return (0, path_1.resolve)(raw);
 }
+function resolveLocalDbPath() {
+    const explicit = process.env['MANIFEST_DB_PATH'];
+    if (explicit)
+        return sanitizeDbPath(explicit);
+    if (process.env['MANIFEST_MODE'] !== 'local')
+        return '';
+    return (0, path_1.join)((0, os_1.homedir)(), '.openclaw', 'manifest', 'manifest.db');
+}
 function resolveDatabaseUrl() {
     const url = process.env['DATABASE_URL'];
     if (url)
@@ -23,7 +32,7 @@ exports.appConfig = (0, config_1.registerAs)('app', () => ({
     nodeEnv: process.env['NODE_ENV'] ?? 'development',
     databaseUrl: resolveDatabaseUrl(),
     manifestMode: process.env['MANIFEST_MODE'] ?? 'cloud',
-    dbPath: sanitizeDbPath(process.env['MANIFEST_DB_PATH'] ?? ''),
+    dbPath: resolveLocalDbPath(),
     corsOrigin: process.env['CORS_ORIGIN'] ?? 'http://localhost:3000',
     betterAuthUrl: process.env['BETTER_AUTH_URL'] ?? '',
     throttleTtl: Number(process.env['THROTTLE_TTL'] ?? 60000),

package/dist/backend/database/database.module.js

@@ -11,6 +11,8 @@ const common_1 = require("@nestjs/common");
 const typeorm_1 = require("@nestjs/typeorm");
 const schedule_1 = require("@nestjs/schedule");
 const config_1 = require("@nestjs/config");
+const fs_1 = require("fs");
+const path_1 = require("path");
 const agent_message_entity_1 = require("../entities/agent-message.entity");
 const llm_call_entity_1 = require("../entities/llm-call.entity");
 const tool_execution_entity_1 = require("../entities/tool-execution.entity");
@@ -69,6 +71,7 @@ const _1773650000000_AddProviderRegion_1 = require("./migrations/1773650000000-A
 const _1773700000000_DropSecurityEventTable_1 = require("./migrations/1773700000000-DropSecurityEventTable");
 const _1773800000000_FixNegativeCosts_1 = require("./migrations/1773800000000-FixNegativeCosts");
 const _1773900000000_AddKeyPrefixIndex_1 = require("./migrations/1773900000000-AddKeyPrefixIndex");
+const _1774000000000_WidenKeyHashColumn_1 = require("./migrations/1774000000000-WidenKeyHashColumn");
 const entities = [
     agent_message_entity_1.AgentMessage,
     llm_call_entity_1.LlmCall,
@@ -127,6 +130,7 @@ const migrations = [
     _1773700000000_DropSecurityEventTable_1.DropSecurityEventTable1773700000000,
     _1773800000000_FixNegativeCosts_1.FixNegativeCosts1773800000000,
     _1773900000000_AddKeyPrefixIndex_1.AddKeyPrefixIndex1773900000000,
+    _1774000000000_WidenKeyHashColumn_1.WidenKeyHashColumn1774000000000,
 ];
 const isLocalMode = process.env['MANIFEST_MODE'] === 'local';
 function buildModeServices() {
@@ -145,6 +149,9 @@ exports.DatabaseModule = DatabaseModule = __decorate([
                 useFactory: (config) => {
                     if (isLocalMode) {
                         const dbPath = config.get('app.dbPath') || ':memory:';
+                        if (dbPath !== ':memory:') {
+                            (0, fs_1.mkdirSync)((0, path_1.dirname)(dbPath), { recursive: true, mode: 0o700 });
+                        }
                         return {
                             type: 'sqljs',
                             location: dbPath === ':memory:' ? undefined : dbPath,

package/dist/backend/database/migrations/1774000000000-WidenKeyHashColumn.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WidenKeyHashColumn1774000000000 = void 0;
+class WidenKeyHashColumn1774000000000 {
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "agent_api_keys" ALTER COLUMN "key_hash" TYPE varchar(128)`);
+        await queryRunner.query(`ALTER TABLE "api_keys" ALTER COLUMN "key_hash" TYPE varchar(128)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "agent_api_keys" ALTER COLUMN "key_hash" TYPE varchar(64) USING left("key_hash", 64)`);
+        await queryRunner.query(`ALTER TABLE "api_keys" ALTER COLUMN "key_hash" TYPE varchar(64) USING left("key_hash", 64)`);
+    }
+}
+exports.WidenKeyHashColumn1774000000000 = WidenKeyHashColumn1774000000000;
+//# sourceMappingURL=1774000000000-WidenKeyHashColumn.js.map

package/dist/backend/entities/agent-api-key.entity.js

@@ -40,7 +40,7 @@ __decorate([
 ], AgentApiKey.prototype, "key", void 0);
 __decorate([
     (0, typeorm_1.Index)({ unique: true }),
-    (0, typeorm_1.Column)('varchar', { length: 64 }),
+    (0, typeorm_1.Column)('varchar', { length: 128 }),
     __metadata("design:type", String)
 ], AgentApiKey.prototype, "key_hash", void 0);
 __decorate([

package/dist/backend/entities/api-key.entity.js

@@ -33,7 +33,7 @@ __decorate([
 ], ApiKey.prototype, "key", void 0);
 __decorate([
     (0, typeorm_1.Index)({ unique: true }),
-    (0, typeorm_1.Column)('varchar', { length: 64 }),
+    (0, typeorm_1.Column)('varchar', { length: 128 }),
     __metadata("design:type", String)
 ], ApiKey.prototype, "key_hash", void 0);
 __decorate([

package/dist/backend/otlp/guards/agent-key-auth.guard.js

@@ -121,6 +121,30 @@ let AgentKeyAuthGuard = AgentKeyAuthGuard_1 = class AgentKeyAuthGuard {
             .getMany();
         const keyRecord = candidates.find((c) => (0, hash_util_1.verifyKey)(token, c.key_hash));
         if (!keyRecord) {
+            if (isLocal) {
+                if (candidates.length > 0) {
+                    const best = candidates[0];
+                    request.ingestionContext = {
+                        tenantId: best.tenant_id,
+                        agentId: best.agent_id,
+                        agentName: best.agent.name,
+                        userId: best.tenant.name,
+                    };
+                    return true;
+                }
+                const fallback = await this.resolveDevContext();
+                if (fallback) {
+                    request.ingestionContext = fallback;
+                    return true;
+                }
+                request.ingestionContext = {
+                    tenantId: local_mode_constants_1.LOCAL_TENANT_ID,
+                    agentId: local_mode_constants_1.LOCAL_AGENT_ID,
+                    agentName: local_mode_constants_1.LOCAL_AGENT_NAME,
+                    userId: local_mode_constants_1.LOCAL_USER_ID,
+                };
+                return true;
+            }
             this.logger.warn(`Rejected unknown agent key: ${token.substring(0, 8)}...`);
             throw new common_1.UnauthorizedException('Invalid API key');
         }

package/dist/index.js

@@ -1,11 +1,11 @@
 /* manifest-local — OpenClaw Self-Hosted LLM Router */
-"use strict";var f=require("fs"),l=require("path"),g=require("os"),u=(0,l.join)((0,g.homedir)(),".openclaw","manifest"),h=3e3;async function d(i,t){try{let n=await fetch(`http://${i}:${t}/api/v1/health`,{signal:AbortSignal.timeout(h)});if(!n.ok)return!1;let e=await n.json();return e!==null&&typeof e=="object"&&"status"in e&&e.status==="healthy"}catch{return!1}}function m(i,t,n,e){(0,f.existsSync)(u)||(0,f.mkdirSync)(u,{recursive:!0,mode:448});let a=(0,l.join)(u,"manifest.db");e.debug("[manifest] Starting embedded server...");let o;try{o=require("./server")}catch(r){let s=r instanceof Error?r.message:String(r);e.error(`[manifest] Failed to load embedded server.
+"use strict";var f=require("fs"),l=require("path"),m=require("os"),u=(0,l.join)((0,m.homedir)(),".openclaw","manifest"),h=3e3;async function d(i,t){try{let e=await fetch(`http://${i}:${t}/api/v1/health`,{signal:AbortSignal.timeout(h)});if(!e.ok)return!1;let n=await e.json();return n!==null&&typeof n=="object"&&"status"in n&&n.status==="healthy"}catch{return!1}}function g(i,t,e,n){(0,f.existsSync)(u)||(0,f.mkdirSync)(u,{recursive:!0,mode:448});let a=(0,l.join)(u,"manifest.db");n.debug("[manifest] Starting embedded server...");let o;try{o=require("./server")}catch(r){let s=r instanceof Error?r.message:String(r);n.error(`[manifest] Failed to load embedded server.
   Error: ${s}
-  This is a packaging error \u2014 please reinstall the manifest plugin.`);return}i.registerService({id:"manifest",start:async()=>{if(e.debug("[manifest] Service start callback invoked"),await d(n,t)){e.info(`[manifest] Reusing existing server at http://${n}:${t}`);return}try{await o.start({port:t,host:n,dbPath:a,quiet:!0}),await d(n,t)?(e.info(`[manifest] Dashboard -> http://${n}:${t}`),e.info(`[manifest]   DB: ${a}`)):(e.warn??e.info)(`[manifest] Server started but health check failed.
-  The dashboard may not be accessible at http://${n}:${t}`)}catch(s){let c=s instanceof Error?s.message:String(s);c.includes("EADDRINUSE")||c.includes("address already in use")?await d(n,t)?e.info(`[manifest] Reusing existing server at http://${n}:${t}`):e.error(`[manifest] Port ${t} is already in use by another process.
+  This is a packaging error \u2014 please reinstall the manifest plugin.`);return}i.registerService({id:"manifest",start:async()=>{if(n.debug("[manifest] Service start callback invoked"),await d(e,t)){n.info(`[manifest] Reusing existing server at http://${e}:${t}`);return}try{await o.start({port:t,host:e,dbPath:a,quiet:!0}),await d(e,t)?(n.info(`[manifest] Dashboard -> http://${e}:${t}`),n.info(`[manifest]   DB: ${a}`)):(n.warn??n.info)(`[manifest] Server started but health check failed.
+  The dashboard may not be accessible at http://${e}:${t}`)}catch(s){let c=s instanceof Error?s.message:String(s);c.includes("EADDRINUSE")||c.includes("address already in use")?await d(e,t)?n.info(`[manifest] Reusing existing server at http://${e}:${t}`):n.error(`[manifest] Port ${t} is already in use by another process.
   Change it with: openclaw config set plugins.entries.manifest.config.port ${t+1}
-  Then restart the gateway.`):e.error(`[manifest] Failed to start local server: ${c}
+  Then restart the gateway.`):n.error(`[manifest] Failed to start local server: ${c}
   Try reinstalling: openclaw plugins install manifest
-  Then restart: openclaw gateway restart`)}}})}module.exports={id:"manifest",name:"Manifest \u2014 Self-Hosted LLM Router",register(i){let t=i.logger||{info:(...r)=>console.log(...r),debug:()=>{},error:(...r)=>console.error(...r),warn:(...r)=>console.warn(...r)},n=i.pluginConfig||{},e=n&&typeof n=="object"&&"config"in n&&n.config!=null&&typeof n.config=="object"?n.config:n,a=typeof e.port=="number"&&e.port>0?e.port:2099,o=typeof e.host=="string"&&e.host.length>0?e.host:"127.0.0.1";t.info(`[manifest] Dashboard: http://${o}:${a}
-  The plugin starts an embedded server and registers manifest/auto as a model.
-  Open the dashboard to connect a provider and start routing.`),m(i,a,o,t)}};
+  Then restart: openclaw gateway restart`)}}})}module.exports={id:"manifest",name:"Manifest \u2014 Self-Hosted LLM Router",register(i){let t=i.logger||{info:(...r)=>console.log(...r),debug:()=>{},error:(...r)=>console.error(...r),warn:(...r)=>console.warn(...r)},e=i.pluginConfig||{},n=e&&typeof e=="object"&&"config"in e&&e.config!=null&&typeof e.config=="object"?e.config:e,a=typeof n.port=="number"&&n.port>0?n.port:2099,o=typeof n.host=="string"&&n.host.length>0?n.host:"127.0.0.1";t.info(`[manifest] \u{1F99A} Dashboard: http://${o}:${a}
+[manifest] \u{1F99A} The plugin starts an embedded server.
+[manifest] \u{1F99A} Open the dashboard to connect a provider and start routing.`),g(i,a,o,t)}};

package/dist/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "manifest",
   "name": "Manifest — Self-Hosted LLM Router",
-  "version": "5.33.16",
+  "version": "5.33.18",
   "description": "Run the Manifest LLM router locally with SQLite. Zero-config dashboard included.",
   "author": "MNFST Inc.",
   "homepage": "https://manifest.build",

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "manifest",
   "name": "Manifest — Self-Hosted LLM Router",
-  "version": "5.33.16",
+  "version": "5.33.18",
   "description": "Run the Manifest LLM router locally with SQLite. Zero-config dashboard included.",
   "author": "MNFST Inc.",
   "homepage": "https://manifest.build",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "manifest",
-  "version": "5.33.16",
+  "version": "5.33.18",
   "description": "Self-hosted Manifest LLM router with embedded server, SQLite database, and dashboard",
   "main": "dist/index.js",
   "license": "MIT",