Fix plugin ID mismatch and enforce canonical opik-openclaw config (#12)

* chore(manifest): use opik-openclaw plugin id

* chore(plugin): align runtime plugin id with manifest

* feat(configure): migrate config writes to opik-openclaw entry

* feat(service): read canonical and legacy plugin entry config

* test(configure): cover canonical id and legacy entry migration

* test(smoke): assert opik-openclaw plugin id

* test(service): cover canonical and legacy plugins.entries config

* docs(readme): document opik-openclaw config key and trust allowlist

* refactor(configure): remove legacy opik entry fallback

* refactor(service): drop legacy config compatibility paths

* test(configure): keep canonical opik-openclaw expectations only

* test(service): remove legacy config scenario coverage

* test(e2e): use direct opik service config shape

* docs(readme): remove legacy config key note

* chore(release): bump package version to 0.1.6

* chore(release): sync lockfile version to 0.1.6

Author: vincentkoc

README.md

@@ -43,7 +43,7 @@ The plugin runs inside the OpenClaw Gateway process. If your gateway is remote,
 openclaw opik configure
 ```
 
-The setup wizard validates endpoint and credentials, then writes config under `plugins.entries.opik`.
+The setup wizard validates endpoint and credentials, then writes config under `plugins.entries.opik-openclaw`.
 
 ### 2. Check effective settings
 
@@ -68,7 +68,7 @@ Then confirm traces in your Opik project.
 {
   "plugins": {
     "entries": {
-      "opik": {
+      "opik-openclaw": {
         "enabled": true,
         "config": {
           "enabled": true,
@@ -89,6 +89,18 @@ Then confirm traces in your Opik project.
 }
 ```
 
+### Plugin trust allowlist
+
+OpenClaw warns when `plugins.allow` is empty and a community plugin is discovered. Pin trusted plugins explicitly:
+
+```json
+{
+  "plugins": {
+    "allow": ["opik-openclaw"]
+  }
+}
+```
+
 ### Environment fallbacks
 
 - `OPIK_API_KEY`

index.ts

@@ -9,7 +9,7 @@ import { parseOpikPluginConfig } from "./src/types.js";
 disableLogger();
 
 const plugin = {
-  id: "opik",
+  id: "opik-openclaw",
   name: "Opik",
   description: "Export LLM traces and spans to Opik for observability",
   configSchema: emptyPluginConfigSchema(),

openclaw.plugin.json

@@ -1,5 +1,5 @@
 {
-  "id": "opik",
+  "id": "opik-openclaw",
   "name": "Opik",
   "description": "Export OpenClaw LLM traces to Opik",
   "configSchema": {

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@opik/opik-openclaw",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "OpenClaw Opik exporter — sends LLM traces to Opik",
   "type": "module",
   "engines": {

package.json

@@ -8,7 +8,7 @@ import {
 } from "./configure.js";
 
 describe("configure helpers", () => {
-  test("setOpikPluginEntry writes plugins.entries.opik", () => {
+  test("setOpikPluginEntry writes plugins.entries.opik-openclaw", () => {
     const next = setOpikPluginEntry(
       {} as any,
       {
@@ -22,8 +22,8 @@ describe("configure helpers", () => {
       true,
     ) as any;
 
-    expect(next.plugins.entries.opik.enabled).toBe(true);
-    expect(next.plugins.entries.opik.config).toEqual({
+    expect(next.plugins.entries["opik-openclaw"].enabled).toBe(true);
+    expect(next.plugins.entries["opik-openclaw"].config).toEqual({
       enabled: true,
       apiKey: "test-key",
       apiUrl: "https://opik.example.com",
@@ -33,11 +33,11 @@ describe("configure helpers", () => {
     });
   });
 
-  test("getOpikPluginEntry reads plugin-scoped config", () => {
+  test("getOpikPluginEntry reads canonical plugin-scoped config", () => {
     const parsed = getOpikPluginEntry({
       plugins: {
         entries: {
-          opik: {
+          "opik-openclaw": {
             enabled: false,
             config: {
               projectName: "project-x",
@@ -59,7 +59,7 @@ describe("opik status command", () => {
       ({
         plugins: {
           entries: {
-            opik: {
+            "opik-openclaw": {
               enabled: true,
               config: {
                 enabled: true,
@@ -100,7 +100,7 @@ describe("opik status command", () => {
         ({
           plugins: {
             entries: {
-              opik: {
+              "opik-openclaw": {
                 enabled: true,
                 config: {
                   enabled: true,

src/configure.test.ts

@@ -17,7 +17,7 @@ const OPIK_CLOUD_HOST = "https://www.comet.com/";
 const DEFAULT_LOCAL_URL = "http://localhost:5173/";
 /** Max URL validation retries (matches SDK's MAX_URL_VALIDATION_RETRIES). */
 const MAX_URL_RETRIES = 3;
-const OPIK_PLUGIN_ID = "opik";
+const OPIK_PLUGIN_ID = "opik-openclaw";
 
 function asObject(value: unknown): Record<string, unknown> {
   if (!value || typeof value !== "object" || Array.isArray(value)) {

src/configure.ts

@@ -33,7 +33,7 @@ describe("plugin smoke", () => {
     } as any);
 
     expect(registerService).toHaveBeenCalledTimes(1);
-    expect(registerService.mock.calls[0]?.[0]?.id).toBe("opik");
+    expect(registerService.mock.calls[0]?.[0]?.id).toBe("opik-openclaw");
 
     expect(registerCli).toHaveBeenCalledTimes(1);
     expect(registerCli.mock.calls[0]?.[1]).toEqual({ commands: ["opik"] });
@@ -53,7 +53,7 @@ describe("plugin smoke", () => {
     const manifestPath = new URL("../openclaw.plugin.json", import.meta.url);
     const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
 
-    expect(manifest.id).toBe("opik");
+    expect(manifest.id).toBe("opik-openclaw");
     expect(manifest.configSchema?.properties?.apiKey?.type).toBe("string");
     expect(manifest.configSchema?.properties?.projectName?.type).toBe("string");
     expect(manifest.uiHints?.apiKey?.sensitive).toBe(true);

src/plugin.smoke.test.ts

@@ -198,7 +198,7 @@ function createApi() {
 
 function createServiceContext() {
   return {
-    config: { opik: { enabled: true } },
+    config: { enabled: true },
     logger: {
       info: () => undefined,
       warn: () => undefined,

src/service.e2e.test.ts

@@ -100,9 +100,7 @@ function createServiceContext(
   opikCfg: OpikCfg = { enabled: true, apiKey: "test-key" },
 ) {
   return {
-    config: {
-      opik: opikEnabled ? opikCfg : { ...opikCfg, enabled: false },
-    },
+    config: opikEnabled ? opikCfg : { ...opikCfg, enabled: false },
     logger: createLogger(),
     stateDir: "/tmp/opik-test",
   };
@@ -178,7 +176,7 @@ describe("opik service", () => {
       });
     });
 
-    test("prefers pluginConfig over legacy top-level config", async () => {
+    test("prefers pluginConfig over runtime service config", async () => {
       const { api } = createApi();
       const service = createOpikService(api as any, {
         enabled: true,
@@ -191,10 +189,10 @@ describe("opik service", () => {
       await service.start(
         createServiceContext(true, {
           enabled: false,
-          apiKey: "legacy-key",
-          apiUrl: "https://legacy-opik.example.com",
-          projectName: "legacy-project",
-          workspaceName: "legacy-workspace",
+          apiKey: "runtime-key",
+          apiUrl: "https://runtime-opik.example.com",
+          projectName: "runtime-project",
+          workspaceName: "runtime-workspace",
         }) as any,
       );