solana-traderclaw 1.0.27 → 1.0.30

package/README.md

@@ -73,7 +73,7 @@ openclaw gateway restart
 traderclaw install --wizard
 ```
 
-This opens a localhost UI that runs prechecks, lane-aware setup, gateway validation, optional Telegram setup, and final verification. It also installs **`HEARTBEAT.md` into your OpenClaw agent workspace root** (default `~/.openclaw/workspace/HEARTBEAT.md`) from the packaged skill so heartbeats load the TraderClaw checklist without manual `cp`. `traderclaw setup` does the same.
+This opens a localhost UI that runs prechecks, lane-aware setup, gateway validation, optional Telegram setup, and final verification. **X (Twitter) OAuth fields in the wizard are optional** — leave all four blank to run without X; you can add credentials later in `openclaw.json` or via env (`X_CONSUMER_KEY`, `X_CONSUMER_SECRET`, per-agent `X_ACCESS_TOKEN_*`). It also installs **`HEARTBEAT.md` into your OpenClaw agent workspace root** (default `~/.openclaw/workspace/HEARTBEAT.md`) from the packaged skill so heartbeats load the TraderClaw checklist without manual `cp`. `traderclaw setup` does the same.
 
 ### Optional: Run CLI prechecks directly
 

package/bin/installer-step-engine.mjs

@@ -436,6 +436,7 @@ function seedPluginConfig(modeConfig, orchestratorUrl, configPath = CONFIG_FILE)
   // Do not set plugins.allow here: OpenClaw validates allow[] against the plugin registry, and
   // the id is not registered until after `openclaw plugins install`. Pre-seeding allow caused:
   // "plugins.allow: plugin not found: <id>".
+  ensureAgentsDefaultsSchemaCompat(config);
 
   mkdirSync(CONFIG_DIR, { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
@@ -576,6 +577,7 @@ function mergePluginsAllowlist(modeConfig, configPath = CONFIG_FILE) {
   );
   allowSet.add(modeConfig.pluginId);
   config.plugins.allow = [...allowSet];
+  ensureAgentsDefaultsSchemaCompat(config);
   mkdirSync(CONFIG_DIR, { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
 }
@@ -985,6 +987,43 @@ async function verifyXCredentials(consumerKey, consumerSecret, accessToken, acce
   return { ok: true, userId: data?.data?.id, username: data?.data?.username };
 }
 
+/** After OAuth verify, persist X user id + handle from GET /2/users/me into plugin config (no user typing). */
+function persistXProfileIdentities(configPath, modeConfig, identities) {
+  if (!Array.isArray(identities) || identities.length === 0) return { written: 0 };
+  let config = {};
+  try {
+    config = JSON.parse(readFileSync(configPath, "utf-8"));
+  } catch {
+    return { written: 0 };
+  }
+  const entry = config?.plugins?.entries?.[modeConfig.pluginId];
+  if (!entry?.config?.x?.profiles || typeof entry.config.x.profiles !== "object") return { written: 0 };
+
+  let profilesTouched = 0;
+  for (const row of identities) {
+    const agentId = row?.agentId;
+    const userId = row?.userId;
+    const username = row?.username;
+    if (typeof agentId !== "string" || !agentId.length) continue;
+    const p = entry.config.x.profiles[agentId];
+    if (!p || typeof p !== "object") continue;
+    let touched = false;
+    if (userId != null && String(userId).length > 0) {
+      p.userId = String(userId);
+      touched = true;
+    }
+    if (username != null && String(username).length > 0) {
+      p.username = String(username);
+      touched = true;
+    }
+    if (touched) profilesTouched++;
+  }
+  if (profilesTouched === 0) return { written: 0 };
+  mkdirSync(CONFIG_DIR, { recursive: true });
+  writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  return { written: profilesTouched };
+}
+
 function listProviderModels(provider) {
   const cmd = `openclaw models list --all --provider ${shellQuote(provider)} --json`;
   const raw = getCommandOutput(cmd);
@@ -1045,6 +1084,40 @@ function resolveLlmModelSelection(provider, requestedModel) {
   return { model: fallbackModelForProvider(provider), source: "fallback_guess", availableModels, warnings };
 }
 
+/**
+ * OpenClaw 2026+ validates `agents.defaults` with Zod/Ajv: if `defaults` exists it must include
+ * `heartbeat` and `model` objects. `openclaw plugins install/enable` can merge config and drop
+ * these keys, which surfaces as obscure stack errors (e.g. "ajv implementation error") on the next CLI call.
+ */
+function ensureAgentsDefaultsSchemaCompat(config) {
+  if (!config || typeof config !== "object") return;
+  if (!config.agents || typeof config.agents !== "object") return;
+  if (!config.agents.defaults || typeof config.agents.defaults !== "object") return;
+  if (!config.agents.defaults.heartbeat || typeof config.agents.defaults.heartbeat !== "object") {
+    config.agents.defaults.heartbeat = {};
+  }
+  if (!config.agents.defaults.model || typeof config.agents.defaults.model !== "object") {
+    config.agents.defaults.model = {};
+  }
+}
+
+/** Re-read config from disk and re-apply defaults shape before gateway/plugin commands that validate the file. */
+function normalizeOpenClawConfigFileShape(configPath = CONFIG_FILE) {
+  let config = {};
+  try {
+    config = JSON.parse(readFileSync(configPath, "utf-8"));
+  } catch {
+    return;
+  }
+  ensureAgentsDefaultsSchemaCompat(config);
+  try {
+    mkdirSync(dirname(configPath), { recursive: true });
+    writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  } catch {
+    // best effort
+  }
+}
+
 function configureOpenClawLlmProvider({ provider, model, credential }, configPath = CONFIG_FILE) {
   if (!provider || !credential) {
     throw new Error("LLM provider and credential are required.");
@@ -1086,15 +1159,7 @@ function configureOpenClawLlmProvider({ provider, model, credential }, configPat
 
   if (!config.agents) config.agents = {};
   if (!config.agents.defaults) config.agents.defaults = {};
-  // OpenClaw 2026+ Zod schema requires agents.defaults.heartbeat whenever defaults exists
-  // (see OpenClaw AgentDefaultsSchema). Omitting it makes openclaw plugins install fail at
-  // writeConfigFile → validateConfigObjectRaw with a stack-only error in the UI.
-  if (!config.agents.defaults.heartbeat || typeof config.agents.defaults.heartbeat !== "object") {
-    config.agents.defaults.heartbeat = {};
-  }
-  if (!config.agents.defaults.model || typeof config.agents.defaults.model !== "object") {
-    config.agents.defaults.model = {};
-  }
+  ensureAgentsDefaultsSchemaCompat(config);
   config.agents.defaults.model.primary = model;
 
   mkdirSync(CONFIG_DIR, { recursive: true });
@@ -1550,6 +1615,7 @@ export class InstallerStepEngine {
       if (!this.options.skipGatewayBootstrap) {
         await this.runStep("gateway_bootstrap", "Starting OpenClaw gateway and Funnel", async () => {
           try {
+            normalizeOpenClawConfigFileShape(CONFIG_FILE);
             await this.runWithPrivilegeGuidance("gateway_bootstrap", "openclaw", ["gateway", "install"]);
             await this.runWithPrivilegeGuidance("gateway_bootstrap", "openclaw", ["gateway", "restart"]);
             return this.runFunnel();
@@ -1672,6 +1738,7 @@ export class InstallerStepEngine {
         }
         const { consumerKey, consumerSecret } = getConsumerKeysFromWizard(this.options);
         const verified = [];
+        const identitiesToPersist = [];
         for (const agentId of result.agentIds) {
           const { at, ats } = getAccessPairForAgent(this.options, agentId);
           if (at && ats) {
@@ -1680,6 +1747,7 @@ export class InstallerStepEngine {
               if (check.ok) {
                 this.emitLog("x_credentials", "info", `Verified X profile '${agentId}': @${check.username} (${check.userId})`);
                 verified.push({ agentId, username: check.username, userId: check.userId });
+                identitiesToPersist.push({ agentId, userId: check.userId, username: check.username });
               } else {
                 this.emitLog("x_credentials", "warn", `X credential verification failed for '${agentId}': HTTP ${check.status}`);
               }
@@ -1688,6 +1756,12 @@ export class InstallerStepEngine {
             }
           }
         }
+        if (identitiesToPersist.length > 0) {
+          const persisted = persistXProfileIdentities(CONFIG_FILE, this.modeConfig, identitiesToPersist);
+          if (persisted.written > 0) {
+            this.emitLog("x_credentials", "info", `Saved X user id and username to openclaw.json for ${persisted.written} profile(s) (from API, not manual entry).`);
+          }
+        }
         return { ...result, verified };
       });
 
@@ -1713,18 +1787,14 @@ export class InstallerStepEngine {
 export function assertWizardXCredentials(modeConfig, options = {}) {
   const t = (s) => (typeof s === "string" ? s.trim() : "");
   const o = options || {};
-  if (modeConfig.pluginId === "solana-trader-v2") {
-    const need = ["xConsumerKey", "xConsumerSecret", "xAccessTokenCto", "xAccessTokenCtoSecret", "xAccessTokenIntern", "xAccessTokenInternSecret"];
-    for (const k of need) {
-      if (!t(o[k])) return `Missing required X/Twitter field: ${k}`;
-    }
-    return null;
-  }
-  const need = ["xConsumerKey", "xConsumerSecret", "xAccessTokenMain", "xAccessTokenMainSecret"];
-  for (const k of need) {
-    if (!t(o[k])) return `Missing required X/Twitter field: ${k}`;
-  }
-  return null;
+  const need =
+    modeConfig.pluginId === "solana-trader-v2"
+      ? ["xConsumerKey", "xConsumerSecret", "xAccessTokenCto", "xAccessTokenCtoSecret", "xAccessTokenIntern", "xAccessTokenInternSecret"]
+      : ["xConsumerKey", "xConsumerSecret", "xAccessTokenMain", "xAccessTokenMainSecret"];
+  const filled = need.filter((k) => t(o[k])).length;
+  if (filled === 0) return null;
+  if (filled === need.length) return null;
+  return `X/Twitter credentials are optional: leave all ${need.length} fields blank, or fill every field (OAuth app key/secret plus user access token and secret for each profile).`;
 }
 
 export function createInstallerStepEngine(modeConfig, options = {}, hooks = {}) {

package/bin/openclaw-trader.mjs

@@ -1791,29 +1791,29 @@ function wizardHtml(defaults) {
         </div>
       </div>
       <div class="card" id="xCard">
-        <h3>Required: X (Twitter) OAuth 1.0a</h3>
-        <p class="muted">App keys plus user access token for the <code>main</code> agent profile (journal &amp; engagement tools).</p>
+        <h3>Optional: X (Twitter) OAuth 1.0a</h3>
+        <p class="muted">Skip this section to use trading and Telegram without X. When set, app keys plus user access token enable the <code>main</code> agent profile (journal &amp; engagement tools).</p>
         <div class="grid">
           <div>
-            <label>X consumer key (required)</label>
+            <label>X consumer key (optional)</label>
             <input id="xConsumerKey" type="password" autocomplete="off" placeholder="From your X Developer App" />
           </div>
           <div>
-            <label>X consumer secret (required)</label>
+            <label>X consumer secret (optional)</label>
             <input id="xConsumerSecret" type="password" autocomplete="off" />
           </div>
         </div>
         <div class="grid" style="margin-top:12px;">
           <div>
-            <label>X access token — main profile (required)</label>
+            <label>X access token — main profile (optional)</label>
             <input id="xAccessTokenMain" type="password" autocomplete="off" placeholder="User access token for the posting account" />
           </div>
           <div>
-            <label>X access token secret — main profile (required)</label>
+            <label>X access token secret — main profile (optional)</label>
             <input id="xAccessTokenMainSecret" type="password" autocomplete="off" />
           </div>
         </div>
-        <p class="muted">Create an app at <a href="https://developer.x.com" target="_blank" rel="noopener noreferrer">developer.x.com</a> with OAuth 1.0a Read and Write. Values are written to <code>openclaw.json</code> under the plugin <code>x</code> block.</p>
+        <p class="muted">If you use X: create an app at <a href="https://developer.x.com" target="_blank" rel="noopener noreferrer">developer.x.com</a> with OAuth 1.0a Read and Write, and fill all four fields above (or leave all blank). Values are written to <code>openclaw.json</code> under the plugin <code>x</code> block.</p>
       </div>
       <div class="card" id="startCard">
         <div class="grid">
@@ -1946,13 +1946,21 @@ function wizardHtml(defaults) {
           && Boolean(llmProviderEl.value.trim())
           && Boolean(llmCredentialEl.value.trim())
           && Boolean(telegramTokenEl.value.trim())
-          && Boolean(xConsumerKeyEl.value.trim())
-          && Boolean(xConsumerSecretEl.value.trim())
-          && Boolean(xAccessTokenMainEl.value.trim())
-          && Boolean(xAccessTokenMainSecretEl.value.trim())
         );
       }
 
+      /** All-or-nothing: 0 or 4 non-empty X fields; partial is invalid. */
+      function xWizardFieldsStatus() {
+        const fields = [
+          xConsumerKeyEl.value.trim(),
+          xConsumerSecretEl.value.trim(),
+          xAccessTokenMainEl.value.trim(),
+          xAccessTokenMainSecretEl.value.trim(),
+        ];
+        const filled = fields.filter(Boolean).length;
+        return { filled, total: 4, ok: filled === 0 || filled === 4 };
+      }
+
       function updateStartButtonState() {
         if (installLocked) {
           startBtn.disabled = true;
@@ -1963,7 +1971,7 @@ function wizardHtml(defaults) {
           return;
         }
         startBtn.removeAttribute("aria-busy");
-        startBtn.disabled = llmCatalogLoading || !hasRequiredInputs();
+        startBtn.disabled = llmCatalogLoading || !hasRequiredInputs() || !xWizardFieldsStatus().ok;
         if (!llmCatalogLoading) {
           startBtn.textContent = "Start Installation";
         }
@@ -2132,10 +2140,12 @@ function wizardHtml(defaults) {
           manualEl.textContent = "Telegram bot token is required before starting installation.";
           return;
         }
-        if (!payload.xConsumerKey || !payload.xConsumerSecret || !payload.xAccessTokenMain || !payload.xAccessTokenMainSecret) {
+        const xStatus = xWizardFieldsStatus();
+        if (!xStatus.ok) {
           stateEl.textContent = "blocked";
           readyEl.textContent = "";
-          manualEl.textContent = "X (Twitter) consumer key, consumer secret, access token, and access token secret are required before starting installation.";
+          manualEl.textContent =
+            "X (Twitter) credentials are optional: leave all four fields blank, or fill consumer key, consumer secret, access token, and access token secret.";
           return;
         }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solana-traderclaw",
-  "version": "1.0.27",
+  "version": "1.0.30",
   "description": "TraderClaw V1 — autonomous Solana memecoin trading for OpenClaw (team edition: X/Twitter journal and engagement tools)",
   "type": "module",
   "main": "./dist/index.js",