Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
227 lines
8.2 KiB
TypeScript
227 lines
8.2 KiB
TypeScript
// ClawRouter plugin entrypoint registers credential-scoped model routing and quota reporting.
|
|
import {
|
|
definePluginEntry,
|
|
type ProviderAuthMethod,
|
|
type ProviderResolveDynamicModelContext,
|
|
type ProviderRuntimeModel,
|
|
} from "openclaw/plugin-sdk/plugin-entry";
|
|
import { createProviderApiKeyAuthMethod } from "openclaw/plugin-sdk/provider-auth-api-key";
|
|
import { buildProviderReplayFamilyHooks } from "openclaw/plugin-sdk/provider-model-shared";
|
|
import { buildProviderToolCompatFamilyHooks } from "openclaw/plugin-sdk/provider-tools";
|
|
import {
|
|
buildClawRouterProviderConfig,
|
|
normalizeClawRouterApiBaseUrl,
|
|
normalizeClawRouterRootUrl,
|
|
normalizeClawRouterResolvedModel,
|
|
} from "./provider-catalog.js";
|
|
import { wrapClawRouterProviderStream } from "./stream.js";
|
|
import { fetchClawRouterUsage } from "./usage.js";
|
|
|
|
const PROVIDER_ID = "clawrouter";
|
|
const ENV_VAR = "CLAWROUTER_API_KEY";
|
|
|
|
const openAiReplay = buildProviderReplayFamilyHooks({
|
|
family: "openai-compatible",
|
|
dropReasoningFromHistory: false,
|
|
});
|
|
const anthropicReplay = buildProviderReplayFamilyHooks({
|
|
family: "native-anthropic-by-model",
|
|
});
|
|
const googleReplay = buildProviderReplayFamilyHooks({ family: "google-gemini" });
|
|
const openAiTools = buildProviderToolCompatFamilyHooks("openai");
|
|
const deepSeekTools = buildProviderToolCompatFamilyHooks("deepseek");
|
|
const geminiTools = buildProviderToolCompatFamilyHooks("gemini");
|
|
|
|
function buildApiKeyAuth(): ProviderAuthMethod {
|
|
return createProviderApiKeyAuthMethod({
|
|
providerId: PROVIDER_ID,
|
|
methodId: "api-key",
|
|
label: "ClawRouter proxy key",
|
|
hint: "Credential-scoped access to approved models and budgets",
|
|
optionKey: "clawrouterApiKey",
|
|
flagName: "--clawrouter-api-key",
|
|
envVar: ENV_VAR,
|
|
promptMessage: "Enter ClawRouter proxy key",
|
|
noteTitle: "ClawRouter",
|
|
noteMessage: [
|
|
"Use the proxy key issued by your ClawRouter administrator.",
|
|
"OpenClaw discovers only the models granted to that key.",
|
|
].join("\n"),
|
|
wizard: {
|
|
choiceId: "clawrouter-api-key",
|
|
choiceLabel: "ClawRouter proxy key",
|
|
choiceHint: "Approved models through one managed key",
|
|
groupId: PROVIDER_ID,
|
|
groupLabel: "ClawRouter",
|
|
groupHint: "Managed model access and quotas",
|
|
},
|
|
});
|
|
}
|
|
|
|
function configuredBaseUrl(
|
|
config: { models?: { providers?: Record<string, { baseUrl?: unknown }> } } | null | undefined,
|
|
): string | undefined {
|
|
const value = config?.models?.providers?.[PROVIDER_ID]?.baseUrl;
|
|
return typeof value === "string" ? value : undefined;
|
|
}
|
|
|
|
function dynamicModelScope(ctx: ProviderResolveDynamicModelContext): string {
|
|
return JSON.stringify([
|
|
ctx.agentDir ?? "",
|
|
ctx.workspaceDir ?? "",
|
|
ctx.authProfileId ?? "",
|
|
normalizeClawRouterRootUrl(ctx.providerConfig?.baseUrl ?? configuredBaseUrl(ctx.config)),
|
|
]);
|
|
}
|
|
|
|
function buildRuntimeModels(
|
|
providerConfig: Awaited<ReturnType<typeof buildClawRouterProviderConfig>>,
|
|
): Map<string, ProviderRuntimeModel> {
|
|
const models = new Map<string, ProviderRuntimeModel>();
|
|
for (const model of providerConfig.models) {
|
|
const api = model.api ?? providerConfig.api;
|
|
const baseUrl = model.baseUrl ?? providerConfig.baseUrl;
|
|
if (!api || !baseUrl) {
|
|
continue;
|
|
}
|
|
models.set(model.id, {
|
|
...model,
|
|
api,
|
|
baseUrl,
|
|
provider: PROVIDER_ID,
|
|
input: model.input.filter(
|
|
(entry): entry is "text" | "image" => entry === "text" || entry === "image",
|
|
),
|
|
});
|
|
}
|
|
return models;
|
|
}
|
|
|
|
function resolveToolFamily(modelId: string) {
|
|
const normalized = modelId.toLowerCase();
|
|
if (normalized.startsWith("deepseek/")) {
|
|
return deepSeekTools;
|
|
}
|
|
if (normalized.startsWith("google/")) {
|
|
return geminiTools;
|
|
}
|
|
return openAiTools;
|
|
}
|
|
|
|
export default definePluginEntry({
|
|
id: PROVIDER_ID,
|
|
name: "ClawRouter",
|
|
description: "Managed multi-provider model routing and quotas",
|
|
register(api) {
|
|
const dynamicModels = new Map<string, Map<string, ProviderRuntimeModel>>();
|
|
|
|
api.registerProvider({
|
|
id: PROVIDER_ID,
|
|
label: "ClawRouter",
|
|
docsPath: "/providers/clawrouter",
|
|
envVars: [ENV_VAR],
|
|
auth: [buildApiKeyAuth()],
|
|
catalog: {
|
|
order: "simple",
|
|
run: async (ctx) => {
|
|
const auth = ctx.resolveProviderAuth(PROVIDER_ID);
|
|
let discoveryApiKey = auth.discoveryApiKey;
|
|
if (!discoveryApiKey) {
|
|
try {
|
|
const { resolveApiKeyForProvider } =
|
|
await import("openclaw/plugin-sdk/provider-auth-runtime");
|
|
discoveryApiKey = (
|
|
await resolveApiKeyForProvider({
|
|
provider: PROVIDER_ID,
|
|
cfg: ctx.config,
|
|
...(ctx.agentDir ? { agentDir: ctx.agentDir } : {}),
|
|
...(ctx.workspaceDir ? { workspaceDir: ctx.workspaceDir } : {}),
|
|
...(auth.profileId ? { profileId: auth.profileId, lockedProfile: true } : {}),
|
|
})
|
|
)?.apiKey;
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|
|
const apiKey = auth.apiKey ?? discoveryApiKey;
|
|
if (!apiKey || !discoveryApiKey) {
|
|
return null;
|
|
}
|
|
return {
|
|
provider: await buildClawRouterProviderConfig({
|
|
apiKey,
|
|
discoveryApiKey,
|
|
baseUrl: configuredBaseUrl(ctx.config),
|
|
}),
|
|
};
|
|
},
|
|
},
|
|
resolveDynamicModel: (ctx) => dynamicModels.get(dynamicModelScope(ctx))?.get(ctx.modelId),
|
|
prepareDynamicModel: async (ctx) => {
|
|
const scope = dynamicModelScope(ctx);
|
|
dynamicModels.delete(scope);
|
|
const { resolveApiKeyForProvider } =
|
|
await import("openclaw/plugin-sdk/provider-auth-runtime");
|
|
const apiKey = (
|
|
await resolveApiKeyForProvider({
|
|
provider: PROVIDER_ID,
|
|
cfg: ctx.config,
|
|
...(ctx.agentDir ? { agentDir: ctx.agentDir } : {}),
|
|
...(ctx.workspaceDir ? { workspaceDir: ctx.workspaceDir } : {}),
|
|
...(ctx.authProfileId ? { profileId: ctx.authProfileId, lockedProfile: true } : {}),
|
|
})
|
|
)?.apiKey;
|
|
if (!apiKey) {
|
|
return;
|
|
}
|
|
const providerConfig = await buildClawRouterProviderConfig({
|
|
apiKey,
|
|
discoveryApiKey: apiKey,
|
|
baseUrl: ctx.providerConfig?.baseUrl ?? configuredBaseUrl(ctx.config),
|
|
});
|
|
dynamicModels.set(scope, buildRuntimeModels(providerConfig));
|
|
},
|
|
normalizeConfig: ({ providerConfig }) => {
|
|
const baseUrl = normalizeClawRouterApiBaseUrl(providerConfig.baseUrl);
|
|
return baseUrl !== providerConfig.baseUrl ? { ...providerConfig, baseUrl } : undefined;
|
|
},
|
|
normalizeResolvedModel: ({ model }) => normalizeClawRouterResolvedModel(model),
|
|
wrapSimpleCompletionStreamFn: wrapClawRouterProviderStream,
|
|
wrapStreamFn: wrapClawRouterProviderStream,
|
|
buildReplayPolicy: (ctx) => {
|
|
if (ctx.modelApi === "anthropic-messages") {
|
|
return anthropicReplay.buildReplayPolicy?.(ctx);
|
|
}
|
|
if (ctx.modelApi === "google-generative-ai") {
|
|
return googleReplay.buildReplayPolicy?.(ctx);
|
|
}
|
|
return openAiReplay.buildReplayPolicy?.(ctx);
|
|
},
|
|
sanitizeReplayHistory: (ctx) =>
|
|
ctx.modelApi === "google-generative-ai"
|
|
? googleReplay.sanitizeReplayHistory?.(ctx)
|
|
: undefined,
|
|
resolveReasoningOutputMode: (ctx) =>
|
|
ctx.modelApi === "google-generative-ai"
|
|
? googleReplay.resolveReasoningOutputMode?.(ctx)
|
|
: undefined,
|
|
normalizeToolSchemas: (ctx) => resolveToolFamily(ctx.modelId ?? "").normalizeToolSchemas(ctx),
|
|
inspectToolSchemas: (ctx) => resolveToolFamily(ctx.modelId ?? "").inspectToolSchemas(ctx),
|
|
isModernModelRef: () => true,
|
|
resolveUsageAuth: async (ctx) => {
|
|
const apiKey = ctx.resolveApiKeyFromConfigAndStore({
|
|
envDirect: [ctx.env[ENV_VAR]],
|
|
});
|
|
return apiKey ? { token: apiKey } : null;
|
|
},
|
|
fetchUsageSnapshot: async (ctx) =>
|
|
await fetchClawRouterUsage({
|
|
token: ctx.token,
|
|
baseUrl: configuredBaseUrl(ctx.config),
|
|
timeoutMs: ctx.timeoutMs,
|
|
fetchFn: ctx.fetchFn,
|
|
}),
|
|
});
|
|
},
|
|
});
|