fix: stop overriding OpenClaw provider config — pass all env vars through

sync_hf.py was hardcoding a provider registry and overwriting
models.providers on every startup, blocking OpenClaw's native env var
support. Users setting NVIDIA_API_KEY or other provider keys got no
effect because the code didn't know about them.

Now HuggingClaw acts as a transparent deployment layer:
- Removed PROVIDER_REGISTRY and all per-provider if/else blocks
- Removed redundant env var pass-through (os.environ.copy() already
includes everything)
- Only clean up stale providers from dataset backup (keys no longer
in environment)
- Let OpenClaw handle provider discovery from env vars natively

Fixes #2

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.env.example

@@ -71,30 +71,20 @@ OPENCLAW_DATASET_REPO=your-username/HuggingClaw-data
 # SYNC_INTERVAL=60
 
 
-# ─── LLM / OPENAI-COMPATIBLE API ───────────────────────────────────────────
+# ─── LLM PROVIDERS ────────────────────────────────────────────────────────
 #
-# OpenClaw supports any OpenAI-compatible API. Set the API key for the
-# provider(s) you use. See OpenClaw docs: https://openclawdoc.com/docs/reference/environment-variables
+# HuggingClaw passes ALL environment variables directly to OpenClaw.
+# Any provider that OpenClaw supports works out of the box — just set the
+# API key as a Secret in your HF Space settings.
 #
-# OpenAI (or any OpenAI-compatible endpoint)
-# Use OPENAI_API_KEY alone for api.openai.com, or set OPENAI_BASE_URL for
-# compatible endpoints (e.g. OpenRouter, local LLM servers, Azure OpenAI).
+# See OpenClaw docs: https://openclawdoc.com/docs/reference/environment-variables
 #
 # [RECOMMENDED] At least one of the following for AI conversations
 #
 OPENAI_API_KEY=sk-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-
-# Optional: base URL for OpenAI-compatible API (default: https://api.openai.com/v1)
-# Examples: https://openrouter.ai/api/v1, http://localhost:11434/v1 (Ollama), etc.
-#
 # OPENAI_BASE_URL=https://api.openai.com/v1
-
-# OpenRouter — one key, 200+ models, free tier: https://openrouter.ai/keys
-#
-OPENROUTER_API_KEY=sk-or-v1-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-
-# Other providers (OpenClaw reads these from the environment)
-#
+# OPENROUTER_API_KEY=sk-or-v1-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+# NVIDIA_API_KEY=nvapi-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 # ANTHROPIC_API_KEY=sk-ant-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 # GOOGLE_API_KEY=AIza...
 # MISTRAL_API_KEY=mis-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
@@ -185,14 +175,10 @@ OPENROUTER_API_KEY=sk-or-v1-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 #   HF_HUB_UPLOAD_TIMEOUT     [可选] 上传超时（秒），默认 600
 #
 # ─── LLM / 对话 API（至少配置其一以启用 AI 对话）────────────────────────
-#   OPENAI_API_KEY            [推荐] OpenAI 或兼容端点 API Key
-#   OPENAI_BASE_URL           [可选] 兼容 API 基地址，默认 https://api.openai.com/v1
-#   OPENROUTER_API_KEY        [可选] OpenRouter，200+ 模型、免费额度
-#   ANTHROPIC_API_KEY         [可选] Anthropic Claude
-#   GOOGLE_API_KEY            [可选] Google / Gemini
-#   MISTRAL_API_KEY           [可选] Mistral
-#   COHERE_API_KEY            [可选] Cohere
-#   OPENCLAW_DEFAULT_MODEL    [可选] 默认模型 ID
+#   所有 OpenClaw 支持的 API Key 环境变量均可直接使用，无需额外配置。
+#   完整列表见 OpenClaw 官方文档。常见：
+#   OPENAI_API_KEY, OPENROUTER_API_KEY, NVIDIA_API_KEY, ANTHROPIC_API_KEY,
+#   GOOGLE_API_KEY, MISTRAL_API_KEY, COHERE_API_KEY, OPENCLAW_DEFAULT_MODEL
 #
 # ─── 消息渠道 ─────────────────────────────────────────────────────────
 #   Telegram、WhatsApp 等消息渠道均可在 Control UI 中配置，无需环境变量。

scripts/sync_hf.py

@@ -66,16 +66,6 @@ APP_DIR       = Path("/app/openclaw")
 # Use ".openclaw" - directly read/write the .openclaw folder in dataset
 DATASET_PATH = ".openclaw"
 
-# OpenAI-compatible API (OpenAI, OpenRouter, or any compatible endpoint)
-OPENAI_API_KEY = os.environ.get("OPENAI_API_KEY", "")
-OPENAI_BASE_URL = os.environ.get("OPENAI_BASE_URL", "https://api.openai.com/v1").rstrip("/")
-
-# OpenRouter API key (optional; alternative to OPENAI_API_KEY + OPENAI_BASE_URL)
-OPENROUTER_API_KEY = os.environ.get("OPENROUTER_API_KEY", "")
-
-# Zhipu AI (z.ai) API key (optional; GLM-4 series, Anthropic-compatible endpoint)
-ZHIPU_API_KEY = os.environ.get("ZHIPU_API_KEY", "")
-
 # Z.AI API key (optional; used by Claude Code backend via api.z.ai)
 ZAI_API_KEY = os.environ.get("ZAI_API_KEY", "")
 
@@ -86,12 +76,8 @@ GATEWAY_TOKEN = os.environ.get("GATEWAY_TOKEN", "huggingclaw")
 AGENT_NAME = os.environ.get("AGENT_NAME", "HuggingClaw")
 A2A_PEERS = os.environ.get("A2A_PEERS", "")  # comma-separated peer URLs
 
-# Default model for new conversations (infer from provider if not set)
-OPENCLAW_DEFAULT_MODEL = os.environ.get("OPENCLAW_DEFAULT_MODEL") or (
-    "openai/gpt-5-nano" if OPENAI_API_KEY
-    else "zhipu/glm-4.5-air" if ZHIPU_API_KEY
-    else "openrouter/openai/gpt-oss-20b:free"
-)
+# Default model — only set if user explicitly provides it; otherwise let OpenClaw decide.
+OPENCLAW_DEFAULT_MODEL = os.environ.get("OPENCLAW_DEFAULT_MODEL", "")
 
 # HF Spaces built-in env vars (auto-set by HF runtime)
 SPACE_HOST = os.environ.get("SPACE_HOST", "")   # e.g. "tao-shen-huggingclaw.hf.space"
@@ -363,20 +349,13 @@ class OpenClawFullSync:
                 # Set gateway token
                 if "gateway" in cfg:
                     cfg["gateway"]["auth"] = {"token": GATEWAY_TOKEN}
-                if OPENAI_API_KEY and "models" in cfg and "providers" in cfg["models"] and "openai" in cfg["models"]["providers"]:
-                    cfg["models"]["providers"]["openai"]["apiKey"] = OPENAI_API_KEY
-                    if OPENAI_BASE_URL:
-                        cfg["models"]["providers"]["openai"]["baseUrl"] = OPENAI_BASE_URL
-                elif "models" in cfg and "providers" in cfg["models"]:
-                    if not OPENAI_API_KEY:
-                        cfg["models"]["providers"].pop("openai", None)
-                if OPENROUTER_API_KEY:
-                    if "models" in cfg and "providers" in cfg["models"] and "openrouter" in cfg["models"]["providers"]:
-                        cfg["models"]["providers"]["openrouter"]["apiKey"] = OPENROUTER_API_KEY
-                else:
-                    if "models" in cfg and "providers" in cfg["models"]:
-                        cfg["models"]["providers"].pop("openrouter", None)
-                    print("[SYNC] No OPENROUTER_API_KEY — removed openrouter provider from config")
+                # Don't manage providers — leave them for OpenClaw to handle.
+                # Just remove template entries with unresolved ${...} placeholders
+                # so OpenClaw starts clean and discovers providers from env vars.
+                providers = cfg.get("models", {}).get("providers", {})
+                for pid in list(providers.keys()):
+                    if str(providers[pid].get("apiKey", "")).startswith("${"):
+                        providers.pop(pid, None)
                 with open(config_path, "w") as f:
                     json.dump(cfg, f, indent=2)
             except Exception as e:
@@ -396,7 +375,6 @@ class OpenClawFullSync:
                         }
                     },
                     "session": {"scope": "global"},
-                    "models": {"mode": "merge", "providers": {}},
                     "agents": {"defaults": {"workspace": "~/.openclaw/workspace"}}
                 }, f)
             print("[SYNC] Created minimal openclaw.json")
@@ -469,44 +447,30 @@ class OpenClawFullSync:
             data.setdefault("agents", {}).setdefault("defaults", {}).setdefault("model", {})
             data.setdefault("session", {})["scope"] = "global"
 
-            # Build providers from scratch — only include providers with active API keys.
-            # This ensures removed secrets don't leave stale providers from backup.
-            providers = {}
-            if OPENAI_API_KEY:
-                providers["openai"] = {
-                    "baseUrl": OPENAI_BASE_URL,
-                    "apiKey": OPENAI_API_KEY,
-                    "api": "openai-completions",
-                }
-                print(f"[SYNC] Set OpenAI-compatible provider (baseUrl={OPENAI_BASE_URL})")
-            if OPENROUTER_API_KEY:
-                providers["openrouter"] = {
-                    "baseUrl": "https://openrouter.ai/api/v1",
-                    "apiKey": OPENROUTER_API_KEY,
-                    "api": "openai-completions",
-                    "models": [
-                        {"id": "openai/gpt-oss-20b:free", "name": "GPT-OSS-20B (Free)"},
-                        {"id": "deepseek/deepseek-chat:free", "name": "DeepSeek V3 (Free)"}
-                    ]
-                }
-                print("[SYNC] Set OpenRouter provider")
-            if ZHIPU_API_KEY:
-                providers["zhipu"] = {
-                    "baseUrl": "https://open.bigmodel.cn/api/anthropic",
-                    "apiKey": ZHIPU_API_KEY,
-                    "api": "anthropic-messages",
-                    "models": [
-                        {"id": "glm-4.5-air", "name": "GLM-4.5 Air"},
-                        {"id": "glm-4.5", "name": "GLM-4.5"},
-                        {"id": "glm-4.6", "name": "GLM-4.6"},
-                        {"id": "glm-4.7", "name": "GLM-4.7"},
-                    ]
-                }
-                print("[SYNC] Set Zhipu AI provider")
-            if not providers:
-                print("[SYNC] WARNING: No API key set (OPENAI/OPENROUTER/ZHIPU), LLM features may not work")
-            data.setdefault("models", {})["providers"] = providers
-            data["agents"]["defaults"]["model"]["primary"] = OPENCLAW_DEFAULT_MODEL
+            # ── Provider cleanup ─────────────────────────────────────────────
+            # Don't manage providers — let OpenClaw handle them natively from
+            # its own env var support. We only clean up stale providers that
+            # were restored from the dataset backup with hardcoded API keys
+            # that no longer exist in the current environment.
+            restored_providers = data.get("models", {}).get("providers", {})
+            if restored_providers:
+                stale = []
+                for pid, pcfg in list(restored_providers.items()):
+                    api_key = pcfg.get("apiKey", "")
+                    # Skip placeholder-style keys (${VAR}) — OpenClaw resolves these
+                    if not api_key or str(api_key).startswith("${"):
+                        continue
+                    # Hardcoded key from backup — check if it's still in env
+                    # We can't know which env var it came from, so check if
+                    # the exact key value exists in any current env var
+                    if api_key not in os.environ.values():
+                        stale.append(pid)
+                for pid in stale:
+                    del restored_providers[pid]
+                    print(f"[SYNC] Removed stale provider '{pid}' (API key no longer in environment)")
+
+            if OPENCLAW_DEFAULT_MODEL:
+                data["agents"]["defaults"]["model"]["primary"] = OPENCLAW_DEFAULT_MODEL
 
             # ── ACP (Agent Client Protocol) — native Claude Code integration ──
             data["acp"] = {
@@ -545,10 +509,10 @@ class OpenClawFullSync:
                         "targetSpace": CODING_TARGET_SPACE,
                         "targetDataset": CODING_TARGET_DATASET,
                         "hfToken": HF_TOKEN or "",
-                        "zaiApiKey": ZAI_API_KEY or ZHIPU_API_KEY or "",
+                        "zaiApiKey": ZAI_API_KEY or os.environ.get("ZHIPU_API_KEY", ""),
                     }
                 }
-                print(f"[SYNC] Coding agent configured: space={CODING_TARGET_SPACE}, dataset={CODING_TARGET_DATASET}, zaiKey={'set' if (ZAI_API_KEY or ZHIPU_API_KEY) else 'missing'}")
+                print(f"[SYNC] Coding agent configured: space={CODING_TARGET_SPACE}, dataset={CODING_TARGET_DATASET}, zaiKey={'set' if (ZAI_API_KEY or os.environ.get('ZHIPU_API_KEY')) else 'missing'}")
             if "telegram" not in data["plugins"]["entries"]:
                 data["plugins"]["entries"]["telegram"] = {"enabled": True}
             elif isinstance(data["plugins"]["entries"]["telegram"], dict):
@@ -689,19 +653,8 @@ class OpenClawFullSync:
         # Open log file
         log_fh = open(log_file, "a")
 
-        # Prepare environment (all API keys passed through for OpenClaw)
+        # Pass entire environment to OpenClaw (all API keys are already in os.environ)
         env = os.environ.copy()
-        if OPENAI_API_KEY:
-            env["OPENAI_API_KEY"] = OPENAI_API_KEY
-            env["OPENAI_BASE_URL"] = OPENAI_BASE_URL
-        if OPENROUTER_API_KEY:
-            env["OPENROUTER_API_KEY"] = OPENROUTER_API_KEY
-        if ZHIPU_API_KEY:
-            env["ZHIPU_API_KEY"] = ZHIPU_API_KEY
-        if ZAI_API_KEY:
-            env["ZAI_API_KEY"] = ZAI_API_KEY
-        if not OPENAI_API_KEY and not OPENROUTER_API_KEY and not ZHIPU_API_KEY:
-            print(f"[SYNC] WARNING: No API key set (OPENAI/OPENROUTER/ZHIPU), LLM features may not work")
 
         # ── Telegram API base probe ──────────────────────────────────────
         # Determine working Telegram API endpoint and set env var for
@@ -731,7 +684,7 @@ class OpenClawFullSync:
                 stderr=subprocess.STDOUT,
                 text=True,
                 bufsize=1,  # Line buffered
-                env=env  # Pass environment with OPENROUTER_API_KEY
+                env=env  # Pass full environment (all API keys)
             )
 
             # Create a thread to copy output to log file; only print key lines to console