robot-resources 1.2.6 → 1.2.7

package/lib/detect.js

@@ -1,5 +1,5 @@
 import { execSync, execFileSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 
@@ -88,6 +88,61 @@ export function isOpenClawPluginInstalled() {
   return existsSync(join(home, '.openclaw', 'extensions', 'robot-resources-router'));
 }
 
+/**
+ * Detect OpenClaw auth mode: 'subscription' (OAuth token) or 'apikey'.
+ *
+ * Subscription users authenticate via Anthropic OAuth tokens.
+ * Anthropic rejects these tokens from third-party clients, so the
+ * only viable routing path is the OpenClaw plugin (not HTTP proxy).
+ *
+ * Detection order:
+ * 1. ANTHROPIC_AUTH_TOKEN env var → subscription
+ * 2. openclaw.json → auth.type or providers.anthropic.authToken
+ * 3. providers.anthropic.apiKey → apikey
+ * 4. Default → apikey (conservative — proxy works fine)
+ */
+export function getOpenClawAuthMode() {
+  // Env var is the strongest signal
+  if (process.env.ANTHROPIC_AUTH_TOKEN) return 'subscription';
+  if (process.env.ANTHROPIC_API_KEY) return 'apikey';
+
+  // Try reading openclaw.json
+  const home = homedir();
+  const candidates = [
+    join(home, '.openclaw', 'openclaw.json'),
+    join(home, 'openclaw.json'),
+  ];
+
+  for (const configPath of candidates) {
+    if (!existsSync(configPath)) continue;
+
+    try {
+      const raw = readFileSync(configPath, 'utf-8');
+      // Strip JSON5 features inline (comments + trailing commas)
+      const clean = raw
+        .replace(/"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|\/\/.*$|\/\*[\s\S]*?\*\//gm,
+          (m) => (m.startsWith('"') || m.startsWith("'") ? m : ''))
+        .replace(/,\s*([\]}])/g, '$1');
+      const config = JSON.parse(clean);
+
+      // Check explicit auth type
+      if (config.auth?.type === 'oauth' || config.auth?.type === 'subscription') {
+        return 'subscription';
+      }
+
+      // Check for authToken in providers
+      const anthropic = config.models?.providers?.anthropic
+        || config.providers?.anthropic;
+      if (anthropic?.authToken) return 'subscription';
+      if (anthropic?.apiKey) return 'apikey';
+    } catch {
+      // Config unreadable — fall through
+    }
+  }
+
+  return 'apikey';
+}
+
 /**
  * Check if the router service is already registered.
  */

package/lib/tool-config.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { isOpenClawInstalled, isOpenClawPluginInstalled } from './detect.js';
+import { isOpenClawInstalled, isOpenClawPluginInstalled, getOpenClawAuthMode } from './detect.js';
 
 /**
  * Strip JSON5 features (comments + trailing commas) to produce valid JSON.
@@ -25,12 +25,20 @@ function stripJson5(text) {
  * native plugin system. The plugin uses before_model_resolve to
  * override the provider — survives gateway restarts because it
  * lives in ~/.openclaw/extensions/, not in openclaw.json.
+ *
+ * Auth mode detection:
+ * - subscription (OAuth token): Plugin is REQUIRED. Anthropic rejects
+ *   OAuth tokens from third-party clients, so HTTP proxy won't work.
+ * - apikey: Plugin is preferred (survives restarts) but proxy also works.
  */
 function configureOpenClaw() {
+  const authMode = getOpenClawAuthMode();
+
   if (isOpenClawPluginInstalled()) {
     return {
       name: 'OpenClaw',
       action: 'already_configured',
+      authMode,
     };
   }
 
@@ -42,17 +50,33 @@ function configureOpenClaw() {
     return {
       name: 'OpenClaw',
       action: 'installed',
+      authMode,
+      note: authMode === 'subscription'
+        ? 'Plugin required — subscription OAuth tokens are rejected by Anthropic when proxied via third-party clients.'
+        : undefined,
     };
   } catch {
     // Plugin install failed — fall back to instructions
+    const instructions = [
+      'Could not auto-install plugin. Install manually:',
+      '  openclaw plugins install @robot-resources/openclaw-plugin',
+    ];
+
+    if (authMode === 'subscription') {
+      instructions.push(
+        'IMPORTANT: Subscription mode detected (OAuth token).',
+        'The plugin is required — HTTP proxy cannot forward OAuth tokens.',
+        'Anthropic rejects OAuth tokens from third-party clients.',
+      );
+    }
+
+    instructions.push('Docs: https://github.com/robot-resources/robot-resources');
+
     return {
       name: 'OpenClaw',
       action: 'instructions',
-      instructions: [
-        'Could not auto-install plugin. Install manually:',
-        '  openclaw plugins install @robot-resources/openclaw-plugin',
-        'Docs: https://github.com/robot-resources/robot-resources',
-      ],
+      authMode,
+      instructions,
     };
   }
 }

package/lib/wizard.js

@@ -185,8 +185,11 @@ export async function runWizard({ nonInteractive = false } = {}) {
           success(`${r.name}: routing through localhost:3838`);
         } else if (r.action === 'already_configured') {
           success(`${r.name}: already configured`);
+        } else if (r.action === 'installed') {
+          success(`${r.name}: plugin installed`);
+          if (r.note) info(`  ${r.note}`);
         } else if (r.action === 'instructions') {
-          info(`${r.name}: manual configuration needed:`);
+          warn(`${r.name}: manual configuration needed:`);
           for (const instruction of r.instructions) {
             info(`  ${instruction}`);
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "robot-resources",
-  "version": "1.2.6",
+  "version": "1.2.7",
   "description": "Robot Resources — AI agent runtime tools. One command to install everything.",
   "type": "module",
   "bin": {