claude-connect

# claude-connect

**Connect your Claude subscription to Clawdbot in one step.**

Automatically:
- ✅ Reads Claude OAuth tokens from Keychain
- ✅ Writes them to Clawdbot in proper OAuth format
- ✅ Auto-refreshes every 2 hours (before expiry)
- ✅ Notifies you on success/failure
- ✅ Works with `clawdbot onboard` (fixes OAuth auth-profiles bug)

---

## Quick Start

**1. Install the skill:**
```bash
clawdhub install claude-connect
cd ~/clawd/skills/claude-connect
```

**2. Ensure Claude CLI is logged in:**
```bash
claude auth
# Follow the browser login flow
```

**3. Run installer:**
```bash
./install.sh
```

That's it! Tokens will refresh automatically every 2 hours.

---

## What It Does

### Fixes `clawdbot onboard` OAuth Bug

When you run `clawdbot onboard --auth-choice claude-cli`, it sometimes doesn't properly write OAuth tokens to `auth-profiles.json`.

This skill:
1. Reads OAuth tokens from macOS Keychain (where Claude CLI stores them)
2. Writes them to `~/.clawdbot/agents/main/agent/auth-profiles.json` in **proper OAuth format**:
   ```json
   {
     "profiles": {
       "anthropic:claude-cli": {
         "type": "oauth",
         "provider": "anthropic",
         "access": "sk-ant-...",
         "refresh": "sk-ant-ort...",
         "expires": 1234567890
       }
     }
   }
   ```
3. Sets up auto-refresh (runs every 2 hours via launchd)
4. Keeps your connection alive 24/7

---

## Installation

### Automatic (Recommended)

```bash
cd ~/clawd/skills/claude-connect
./install.sh
```

The installer will:
- ✅ Verify Claude CLI is set up
- ✅ Create config file
- ✅ Set up auto-refresh job (launchd)
- ✅ Run first refresh to test

### Manual

1. Copy example config:
   ```bash
   cp claude-oauth-refresh-config.example.json claude-oauth-refresh-config.json
   ```

2. Edit config (optional):
   ```bash
   nano claude-oauth-refresh-config.json
   ```

3. Test refresh:
   ```bash
   ./refresh-token.sh --force
   ```

4. Install launchd job (optional - for auto-refresh):
   ```bash
   cp com.clawdbot.claude-oauth-refresher.plist ~/Library/LaunchAgents/
   launchctl load ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist
   ```

---

## Configuration

Edit `claude-oauth-refresh-config.json`:

```json
{
  "refresh_buffer_minutes": 30,
  "log_file": "~/clawd/logs/claude-oauth-refresh.log",
  "notifications": {
    "on_success": true,
    "on_failure": true
  },
  "notification_target": "YOUR_CHAT_ID"
}
```

**Options:**
- `refresh_buffer_minutes`: Refresh when token has this many minutes left (default: 30)
- `log_file`: Where to log refresh activity
- `notifications.on_success`: Notify on successful refresh (default: true)
- `notifications.on_failure`: Notify on failure (default: true)
- `notification_target`: Your Telegram chat ID (or leave empty to disable)

---

## Usage

### Manual Refresh

```bash
# Refresh now (even if not expired)
./refresh-token.sh --force

# Refresh only if needed
./refresh-token.sh
```

### Check Status

```bash
# View recent logs
tail ~/clawd/logs/claude-oauth-refresh.log

# Check auth profile
cat ~/.clawdbot/agents/main/agent/auth-profiles.json | jq '.profiles."anthropic:claude-cli"'

# Check Clawdbot status
clawdbot models status
```

### Disable Notifications

Ask Clawdbot:
```
Disable Claude refresh success notifications
```

Or edit config:
```json
{
  "notifications": {
    "on_success": false,
    "on_failure": true
  }
}
```

---

## How It Works

### Refresh Process

1. **Read from Keychain:** Gets OAuth tokens from `Claude Code-credentials`
2. **Check Expiry:** Only refreshes if < 30 minutes left (or `--force`)
3. **Call OAuth API:** Gets new access + refresh tokens
4. **Update auth-profiles.json:** Writes proper OAuth format
5. **Update Keychain:** Syncs new tokens back
6. **Restart Gateway:** Picks up new tokens
7. **Notify:** Sends success/failure message (optional)

### Auto-Refresh (launchd)

Runs every 2 hours via `~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist`

**Controls:**
```bash
# Stop auto-refresh
launchctl unload ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Start auto-refresh
launchctl load ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Check if running
launchctl list | grep claude
```

---

## Troubleshooting

### OAuth not working after onboard

**Symptom:** `clawdbot onboard --auth-choice claude-cli` completes but Clawdbot can't use tokens

**Fix:**
```bash
cd ~/clawd/skills/claude-connect
./refresh-token.sh --force
```

This will write tokens in proper OAuth format.

### Tokens keep expiring

**Symptom:** Auth keeps failing after 8 hours

**Fix:** Ensure launchd job is running:
```bash
launchctl load ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist
launchctl list | grep claude
```

### No tokens in Keychain

**Symptom:** `No 'Claude Code-credentials' entries found`

**Fix:** Log in with Claude CLI:
```bash
claude auth
# Follow browser flow
```

Then run refresh again:
```bash
./refresh-token.sh --force
```

---

## Uninstall

```bash
cd ~/clawd/skills/claude-connect
./uninstall.sh
```

Or manually:
```bash
# Stop auto-refresh
launchctl unload ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist
rm ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Remove skill
rm -rf ~/clawd/skills/claude-connect
```

---

## Upgrade

If you previously installed an older version:

```bash
cd ~/clawd/skills/claude-connect
./validate-update.sh  # Check what changed
clawdhub update claude-connect  # Update to latest
./install.sh  # Re-run installer if needed
```

---

## See Also

- [QUICKSTART.md](QUICKSTART.md) - 60-second setup guide
- [UPGRADE.md](UPGRADE.md) - Upgrading from older versions
- [Clawdbot docs](https://docs.clawd.bot) - Model authentication

---

**Version:** 1.1.0  
**Author:** TunaIssaCoding  
**License:** MIT  
**Repo:** https://github.com/TunaIssaCoding/claude-connect