fix: separate arcee auth envs from openrouter

extensions/arcee/index.test.ts

@@ -1,5 +1,6 @@
 import { describe, expect, it } from "vitest";
 import { resolveProviderPluginChoice } from "../../src/plugins/provider-auth-choice.runtime.js";
+import { resolveProviderAuthEnvVarCandidates } from "../../src/secrets/provider-env-vars.js";
 import { registerSingleProviderPlugin } from "../../test/helpers/plugins/plugin-registration.js";
 import arceePlugin from "./index.js";
 
@@ -67,6 +68,13 @@ describe("arcee provider plugin", () => {
     ]);
   });
 
+  it("keeps direct Arcee auth env candidates separate from OpenRouter", () => {
+    const candidates = resolveProviderAuthEnvVarCandidates();
+
+    expect(candidates.arcee).toEqual(["ARCEEAI_API_KEY"]);
+    expect(candidates.openrouter).toEqual(["OPENROUTER_API_KEY"]);
+  });
+
   it("builds the direct Arcee AI model catalog", async () => {
     const provider = await registerSingleProviderPlugin(arceePlugin);
     expect(provider.catalog).toBeDefined();

extensions/arcee/openclaw.plugin.json

@@ -3,7 +3,7 @@
   "enabledByDefault": true,
   "providers": ["arcee"],
   "providerAuthEnvVars": {
-    "arcee": ["ARCEEAI_API_KEY", "OPENROUTER_API_KEY"]
+    "arcee": ["ARCEEAI_API_KEY"]
   },
   "providerAuthChoices": [
     {