@aerostack/gateway 0.15.25 → 0.15.27
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +26 -19
- package/dist/openclaw-connector.js +1 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1,28 +1,28 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
2
|
|
|
3
|
-
import{Server as
|
|
3
|
+
import{Server as me}from"@modelcontextprotocol/sdk/server/index.js";import{StdioServerTransport as he}from"@modelcontextprotocol/sdk/server/stdio.js";import{ListToolsRequestSchema as fe,CallToolRequestSchema as ge,ListResourcesRequestSchema as ye,ReadResourceRequestSchema as _e,ListPromptsRequestSchema as we,GetPromptRequestSchema as Ae}from"@modelcontextprotocol/sdk/types.js";import{readFile as Ee,writeFile as Te}from"node:fs/promises";import{join as Se}from"node:path";import{homedir as ke}from"node:os";import{resolveApproval as J}from"./resolution.js";import{startHookServer as Re,installClaudeHook as Oe,stopHookServer as Ce}from"./hook-server.js";import{OpenClawConnector as ve,resolveOpenClawToken as $e}from"./openclaw-connector.js";import{info as u,warn as h,error as be}from"./logger.js";const se=Se(ke(),".openclaw","pre-authorized.json");async function Ne(e){try{let s={};try{s=JSON.parse(await Ee(se,"utf-8"))}catch{}s[e]=Date.now(),await Te(se,JSON.stringify(s))}catch{}}const Y=process.env.AEROSTACK_WORKSPACE_URL,l=process.env.AEROSTACK_TOKEN;function L(e,s,o){const t=parseInt(e??String(s),10);return Number.isFinite(t)&&t>=o?t:s}const X=L(process.env.AEROSTACK_APPROVAL_POLL_MS,3e3,500),Q=L(process.env.AEROSTACK_APPROVAL_TIMEOUT_MS,864e5,5e3),oe=L(process.env.AEROSTACK_REQUEST_TIMEOUT_MS,3e4,1e3),Pe=process.env.AEROSTACK_HOOK_SERVER!=="false",xe=L(process.env.AEROSTACK_HOOK_PORT,18321,1024),Ie=process.env.AEROSTACK_HOOK_AUTO_INSTALL!=="false",Ue=process.env.AEROSTACK_OPENCLAW_ENABLED!=="false",ne=L(process.env.AEROSTACK_OPENCLAW_PORT,18789,1024),Le=process.env.AEROSTACK_OPENCLAW_TOKEN;Y||(process.stderr.write(`ERROR: AEROSTACK_WORKSPACE_URL is required
|
|
4
4
|
`),process.exit(1)),l||(process.stderr.write(`ERROR: AEROSTACK_TOKEN is required
|
|
5
|
-
`),process.exit(1));let
|
|
6
|
-
`),process.exit(1)}
|
|
7
|
-
`);const
|
|
8
|
-
`);let t=null;for(const r of o)if(r.startsWith("data: "))try{t=JSON.parse(r.slice(6))}catch{}return t??{jsonrpc:"2.0",id:s,error:{code:-32603,message:"Empty SSE response"}}}const
|
|
9
|
-
${s.slice(-
|
|
5
|
+
`),process.exit(1));let D;try{if(D=new URL(Y),D.protocol!=="https:"&&D.protocol!=="http:")throw new Error("must be http or https")}catch{process.stderr.write(`ERROR: AEROSTACK_WORKSPACE_URL must be a valid HTTP(S) URL
|
|
6
|
+
`),process.exit(1)}D.protocol==="http:"&&!D.hostname.match(/^(localhost|127\.0\.0\.1)$/)&&process.stderr.write(`WARNING: Using HTTP (not HTTPS) \u2014 token will be sent in plaintext
|
|
7
|
+
`);const d=Y.replace(/\/+$/,""),re=crypto.randomUUID();function De(){return process.env.AEROSTACK_AGENT_TYPE?process.env.AEROSTACK_AGENT_TYPE:process.env.CLAUDECODE||process.env.CLAUDE_CODE?"claude-code":process.env.MCP_TRANSPORT==="stdio"?"mcp-stdio":"unknown"}const ae=De();let C=null,v=Date.now();const je=3e4;async function E(e,s){const o={jsonrpc:"2.0",id:Date.now(),method:e,params:s??{}},t=new AbortController,r=setTimeout(()=>t.abort(),oe);try{const n=await fetch(d,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${l}`,"User-Agent":"aerostack-gateway/0.15.14","X-Agent-Id":"aerostack-gateway","X-Bridge-Id":re,"X-Agent-Type":ae},body:JSON.stringify(o),signal:t.signal});if(clearTimeout(r),(n.headers.get("content-type")??"").includes("text/event-stream")){const p=await n.text();return Ke(p,o.id)}return await n.json()}catch(n){clearTimeout(r);const a=n instanceof Error?n.message:"Unknown error";return n instanceof Error&&n.name==="AbortError"?{jsonrpc:"2.0",id:o.id,error:{code:-32603,message:"Request timed out"}}:{jsonrpc:"2.0",id:o.id,error:{code:-32603,message:`HTTP error: ${a}`}}}}function Ke(e,s){const o=e.split(`
|
|
8
|
+
`);let t=null;for(const r of o)if(r.startsWith("data: "))try{t=JSON.parse(r.slice(6))}catch{}return t??{jsonrpc:"2.0",id:s,error:{code:-32603,message:"Empty SSE response"}}}const He=new Set(["aerostack__guardian_report","aerostack__check_approval","aerostack__guardian_check"]);function Me(e,s){if(He.has(e))return;let o="other";const t=e.toLowerCase();t.includes("exec")||t.includes("bash")||t.includes("shell")||t.includes("command")||t.includes("run")?o="exec_command":t.includes("write")||t.includes("edit")||t.includes("create")||t.includes("patch")?o="file_write":t.includes("delete")||t.includes("remove")||t.includes("trash")||t.includes("unlink")?o="file_delete":t.includes("fetch")||t.includes("http")||t.includes("request")||t.includes("api")||t.includes("get")||t.includes("post")?o="api_call":t.includes("install")||t.includes("package")||t.includes("npm")||t.includes("pip")?o="package_install":t.includes("config")||t.includes("setting")||t.includes("env")?o="config_change":t.includes("deploy")||t.includes("publish")||t.includes("release")?o="deploy":t.includes("send")||t.includes("message")||t.includes("email")||t.includes("notify")||t.includes("slack")||t.includes("telegram")?o="message_send":(t.includes("read")||t.includes("query")||t.includes("search")||t.includes("list")||t.includes("get"))&&(o="data_access");let r;try{const n=JSON.stringify(s);r=n.length>500?n.slice(0,500)+"...":n}catch{r="(unable to serialize)"}E("tools/call",{name:"aerostack__guardian_report",arguments:{action:`${e}(${Object.keys(s).join(", ")})`,category:o,risk_level:"low",details:r}}).catch(()=>{})}const We=new Set(["aerostack__check_approval"]),ie=[{name:"aerostack__chat_check",description:"Check for new messages from the workspace owner. Call this periodically or when asked to check for instructions.",inputSchema:{type:"object",properties:{},required:[]}},{name:"aerostack__chat_reply",description:"Send a reply message to the workspace owner via Agent Chat.",inputSchema:{type:"object",properties:{message:{type:"string",description:"Your reply message to the workspace owner"}},required:["message"]}}],ze=new Set(ie.map(e=>e.name));function T(e){return e.replace(/[\r\n]+/g," ").replace(/\[/g,"(").replace(/\]/g,")").replace(/---/g,"\u2014")}const j=[],qe=100,k=new Map,ce=50,Be=100,le=10;let P=null;const ue=new Set,z=new Map;let x=null;function K(e,s,o){let t=k.get(e);if(!t){if(k.size>=Be){const r=k.keys().next().value;r&&k.delete(r)}t=[],k.set(e,t)}t.push({role:s,content:o,ts:Date.now()}),t.length>ce&&t.splice(0,t.length-ce)}async function Fe(e){if(!ue.has(e))try{const s=await S(`${d}/chat/history?limit=${le}`,{headers:{Authorization:`Bearer ${l}`}});if(!s.ok)return;const o=await s.json();o.session_id&&(P=o.session_id);for(const t of o.messages??[]){const r=t.sender_type==="agent"?"agent":"user",n=o.session_id||e;let a=k.get(n);a||(a=[],k.set(n,a)),a.push({role:r,content:t.content,ts:t.created_at})}ue.add(e),u("Thread history seeded from D1",{sessionId:o.session_id,count:o.messages?.length??0})}catch{}}function Z(e){const s=k.get(e);return!s||s.length===0?"":`Previous conversation:
|
|
9
|
+
${s.slice(-le).map(r=>`[${r.role==="user"?"Admin":"You (Agent)"}] ${r.content}`).join(`
|
|
10
10
|
`)}
|
|
11
11
|
|
|
12
|
-
`}async function
|
|
12
|
+
`}async function S(e,s){const o=new AbortController,t=setTimeout(()=>o.abort(),oe);try{return await fetch(e,{...s,signal:o.signal})}finally{clearTimeout(t)}}async function Ge(){const e=P||"_default";if(await Fe(e),j.length>0){const s=j.splice(0);v=Date.now();const o=Z(e),t=s.map(r=>`${T(r.sender_name)}: ${T(r.content)}`).join(`
|
|
13
13
|
|
|
14
14
|
`);return[{type:"text",text:`${o}New messages from workspace owner:
|
|
15
15
|
|
|
16
|
-
${t}`}]}try{const o=await
|
|
16
|
+
${t}`}]}try{const o=await S(`${d}/chat/pending?since=${v}`,{headers:{Authorization:`Bearer ${l}`}});if(!o.ok)return[{type:"text",text:"No new messages."}];const r=(await o.json()).messages??[];if(v=Date.now(),r.length===0)return[{type:"text",text:"No new messages from the workspace owner."}];for(const i of r)K(e,"user",i.content);const n=Z(e),a=r.map(i=>`${T(i.sender_name)}: ${T(i.content)}`).join(`
|
|
17
17
|
|
|
18
18
|
`);return[{type:"text",text:`${n}New messages from workspace owner:
|
|
19
19
|
|
|
20
|
-
${a}`}]}catch{return[{type:"text",text:"Failed to check messages."}]}}async function
|
|
20
|
+
${a}`}]}catch{return[{type:"text",text:"Failed to check messages."}]}}async function Ve(e){const s=typeof e.message=="string"?e.message.trim().slice(0,1e4):"";if(!s)return[{type:"text",text:"Error: message is required."}];try{const o=await S(`${d}/chat/messages`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({content:s,session_id:P})});return o.ok?(K(P||"_default","agent",s),[{type:"text",text:"Reply sent to workspace owner."}]):[{type:"text",text:`Failed to send reply (HTTP ${o.status}).`}]}catch{return[{type:"text",text:"Failed to send reply."}]}}async function Je(e,s){Me(e,s);const o=await E("tools/call",{name:e,arguments:s});if(o.error?.code===-32050){const n=o.error.data,a=n?.approval_id;if(!a||!/^[a-zA-Z0-9_-]{4,128}$/.test(a))return{jsonrpc:"2.0",id:o.id,error:{code:-32603,message:"Approval required but no approval_id returned"}};u("Tool gate: blocking until approval resolves",{tool:e,approvalId:a});const i=await J({approvalId:a,wsUrl:n?.ws_url,pollUrl:n?.polling_url??`${d}/approval-status/${a}`,pollIntervalMs:X,timeoutMs:Q,token:l});u("Tool gate resolved",{tool:e,status:i.status}),H({approvalId:a,toolName:e,toolArgs:s,sessionKey:null,gate:"tool_gate",pollUrl:"",authToken:l},i.status,!0);const p=ee({approvalId:a,toolName:e,toolArgs:s,sessionKey:null,gate:"tool_gate",pollUrl:"",authToken:l},i);return{jsonrpc:"2.0",id:o.id,result:{content:[{type:"text",text:p}]}}}const r=o.result?._meta;if(r?.approval_id&&r?.status==="pending"){const n=r.approval_id;if(!/^[a-zA-Z0-9_-]{4,128}$/.test(n))return o;u("Permission gate: blocking until approval resolves",{tool:e,approvalId:n});const a=await J({approvalId:n,wsUrl:r.ws_url,pollUrl:r.polling_url??`${d}/approval-status/${n}`,pollIntervalMs:X,timeoutMs:Q,token:l});u("Permission gate resolved",{tool:e,status:a.status}),H({approvalId:n,toolName:e,toolArgs:s,sessionKey:null,gate:"permission_gate",pollUrl:"",authToken:l},a.status,!0);const i=ee({approvalId:n,toolName:e,toolArgs:s,sessionKey:null,gate:"permission_gate",pollUrl:"",authToken:l},a);return{jsonrpc:"2.0",id:o.id,result:{content:[{type:"text",text:i}]}}}return o}function ft(e){J({approvalId:e.approvalId,wsUrl:e.wsUrl,pollUrl:e.pollUrl,pollIntervalMs:X,timeoutMs:Q,token:e.authToken}).then(async s=>{u("Approval resolved",{tool:e.toolName,status:s.status,session:e.sessionKey});const o=ee(e,s),t=e.sessionKey??C?.getLastActiveSession()??null;if((s.status==="approved"||s.status==="executed")&&t&&Ne(t).catch(()=>{}),t&&C){if(await C.sendToSession(t,o)){u("Agent resumed via sessions.send",{session:t,status:s.status}),H(e,s.status,!0);return}h("sessions.send failed, falling back to channel notification",{session:t})}try{await R.notification({method:"notifications/claude/channel",params:{content:o,meta:{tool_name:e.toolName,approval_id:e.approvalId,status:s.status,gate:e.gate}}}),u("Agent resumed via channel notification",{tool:e.toolName,status:s.status}),H(e,s.status,!0)}catch(r){h("Channel notification failed",{error:r instanceof Error?r.message:String(r)}),H(e,s.status,!1)}}).catch(s=>{h("Background approval resolver error",{error:s instanceof Error?s.message:String(s)})})}function H(e,s,o){const t=typeof e.toolArgs.action=="string"?e.toolArgs.action:null,r=t??e.toolName.replace(/^(?:\w+__)*aerostack__/,"")??e.toolName,n=t?`${r}`:`${r}(${Object.keys(e.toolArgs).join(", ")})`,a=o?"resume sent to agent":"session unavailable \u2014 resume not delivered";let i;s==="approved"||s==="executed"?i=o?`[RESUMED] ${n} \u2014 ${a}`:`[RESUME FAILED] ${n} \u2014 ${a}`:s==="rejected"?i=`[REJECTED] ${n} \u2014 rejection sent to agent`:s==="changes_requested"?i=`[CHANGES REQUESTED] ${n} \u2014 feedback sent to agent`:i=`[EXPIRED] ${n} \u2014 approval timed out, expiry sent to agent`,E("tools/call",{name:"aerostack__guardian_report",arguments:{action:i.slice(0,500),category:"approval",risk_level:"low",details:JSON.stringify({tool:e.toolName,approvalId:e.approvalId,status:s,delivered:o,session:e.sessionKey}).slice(0,500)}}).catch(()=>{})}function ee(e,s){const o=s.reviewer_note?.trim()||null,t=`${e.toolName}(${Object.keys(e.toolArgs).join(", ")})`;switch(s.status){case"approved":case"executed":return e.gate==="tool_gate"?["[APPROVAL RECEIVED] Your pending action has been approved.","",`Action: ${t}`,o?`Reviewer note: "${o}"`:null,"",`Please now execute this action: call ${e.toolName} with the same parameters as before.`].filter(r=>r!==null).join(`
|
|
21
21
|
`):["[APPROVAL RECEIVED] Your request has been approved by the workspace owner.",o?`Reviewer note: "${o}"`:null,"","You may now proceed with the action you requested approval for."].filter(r=>r!==null).join(`
|
|
22
22
|
`);case"changes_requested":return["[CHANGES REQUESTED] The workspace owner reviewed your action and requested changes.","",`Original action: ${t}`,`Reviewer feedback: "${o??"No details provided"}"`,"","Please revise your approach based on this feedback and try again.","Do NOT proceed with the original plan."].join(`
|
|
23
23
|
`);case"rejected":return["[REJECTED] The workspace owner denied this action.","",`Action: ${t}`,o?`Reason: "${o}"`:"No reason provided.","","Do not retry this action. If you believe this was a mistake, inform the user."].join(`
|
|
24
24
|
`);case"expired":return[`[EXPIRED] The approval request for "${t}" timed out \u2014 no decision was made.`,"","You may resubmit the request if the action is still needed."].join(`
|
|
25
|
-
`);default:return`[APPROVAL UPDATE] Status for "${t}": ${s.status}.`}}const
|
|
25
|
+
`);default:return`[APPROVAL UPDATE] Status for "${t}": ${s.status}.`}}const q=`
|
|
26
26
|
=== AEROSTACK GUARDIAN POLICY (MANDATORY) ===
|
|
27
27
|
|
|
28
28
|
You are operating under Aerostack workspace monitoring. These rules apply to ALL actions:
|
|
@@ -50,25 +50,32 @@ or before starting a new one, call aerostack__chat_check to see if the owner sen
|
|
|
50
50
|
If there are messages, read them carefully and respond using aerostack__chat_reply. This keeps
|
|
51
51
|
the owner informed and allows them to steer your work in real time.
|
|
52
52
|
=== END WORKSPACE CHAT ===
|
|
53
|
-
`.trim(),
|
|
53
|
+
`.trim(),Ye=["delete","remove","drop","truncate","destroy","wipe","reset","deploy","publish","release","push","exec","shell","bash","run","command","terminal","install","uninstall","send","email","notify","webhook"];function Xe(e,s){const o=e.toLowerCase(),t=Ye.some(n=>o.includes(n)),r=s??"";return t?`[REQUIRES GUARDIAN APPROVAL] ${r}`.trim():r}let de=null;async function I(){if(de)return;const e=await E("initialize",{protocolVersion:"2024-11-05",capabilities:{},clientInfo:{name:"aerostack-gateway",version:"0.15.14"}});if(e.result){const s=e.result,o=s.instructions??"";de={protocolVersion:s.protocolVersion??"2024-11-05",instructions:o?`${o}
|
|
54
54
|
|
|
55
|
-
${
|
|
55
|
+
${q}`:q}}}const R=new me({name:"aerostack-gateway",version:"0.15.14"},{capabilities:{tools:{},resources:{},prompts:{},experimental:{"claude/channel":{}}},instructions:q});R.setRequestHandler(fe,async()=>{await I();const e=await E("tools/list");if(e.error)throw new Error(e.error.message);const o=(e.result.tools??[]).filter(t=>!We.has(t.name)).map(t=>({...t,description:Xe(t.name,t.description)}));return o.push(...ie),{tools:o}}),R.setRequestHandler(ge,async e=>{await I();const{name:s,arguments:o}=e.params;if(ze.has(s))return{content:(s==="aerostack__chat_check"?await Ge():await Ve(o??{})).map(i=>({...i,type:"text"}))};const t=await Je(s,o??{});if(t.error)return{content:[{type:"text",text:`Error: ${t.error.message}`}],isError:!0};const n=t.result.content??[{type:"text",text:JSON.stringify(t.result)}];if(Date.now()-v>je)try{const i=await S(`${d}/chat/pending?since=${v}`,{headers:{Authorization:`Bearer ${l}`}});if(i.ok){const w=(await i.json()).messages??[];if(v=Date.now(),w.length>0){const A=w.map(y=>`${T(y.sender_name)}: ${T(y.content)}`).join(`
|
|
56
56
|
`);n.unshift({type:"text",text:`--- WORKSPACE OWNER MESSAGE ---
|
|
57
|
-
${
|
|
58
|
-
--- END MESSAGE \u2014 please acknowledge ---`})}}}catch{}return{content:n}});const
|
|
57
|
+
${A}
|
|
58
|
+
--- END MESSAGE \u2014 please acknowledge ---`})}}}catch{}return{content:n}});const Qe={uri:"aerostack://guardian/policy",name:"Aerostack Guardian Policy",description:"Mandatory workspace monitoring policy. Read this to understand required approval workflows.",mimeType:"text/plain"};R.setRequestHandler(ye,async()=>{await I();const e=await E("resources/list");if(e.error)throw new Error(e.error.message);const s=e.result;return{resources:[Qe,...s.resources??[]]}}),R.setRequestHandler(_e,async e=>{if(await I(),e.params.uri==="aerostack://guardian/policy")return{contents:[{uri:e.params.uri,text:q,mimeType:"text/plain"}]};const s=await E("resources/read",{uri:e.params.uri});if(s.error)throw new Error(s.error.message);return{contents:s.result.contents??[]}}),R.setRequestHandler(we,async()=>{await I();const e=await E("prompts/list");if(e.error)throw new Error(e.error.message);return{prompts:e.result.prompts??[]}}),R.setRequestHandler(Ae,async e=>{await I();const s=await E("prompts/get",{name:e.params.name,arguments:e.params.arguments});if(s.error)throw new Error(s.error.message);return{messages:s.result.messages??[]}});async function Ze(){const e=s=>process.stderr.write(s+`
|
|
59
59
|
`);e(`
|
|
60
60
|
Aerostack Connection Check
|
|
61
|
-
`);try{const s=await fetch(`${
|
|
61
|
+
`);try{const s=await fetch(`${d}/chat/connection-test`,{headers:{Authorization:`Bearer ${l}`},signal:AbortSignal.timeout(1e4)});s.ok||(s.status===401&&(e(" \u2705 Workspace URL reachable"),e(" \u274C Token invalid (HTTP 401)"),e(`
|
|
62
62
|
Fix: Regenerate token at your dashboard \u2192 Workspace \u2192 Tokens
|
|
63
63
|
`),process.exit(1)),e(` \u274C Workspace unreachable (HTTP ${s.status})`),e(`
|
|
64
64
|
Fix: Check AEROSTACK_WORKSPACE_URL is correct
|
|
65
|
-
`),process.exit(1));const o=await s.json();e(` \u2705 Workspace URL reachable (${
|
|
65
|
+
`),process.exit(1));const o=await s.json();e(` \u2705 Workspace URL reachable (${d})`),e(` \u2705 Token valid (${o.token_name}, role: ${o.token_role})`),e(` \u2705 Workspace connected ("${o.workspace}")`),e(` \u2705 Tools available (${o.mcp_servers} tools)`);try{const t=await fetch(`${d}/chat/heartbeat`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({agent_type:"check",user_agent:"aerostack-gateway/check",bridge_id:"check"}),signal:AbortSignal.timeout(1e4)});e(t.ok?" \u2705 Dashboard registration (bridge visible in admin)":` \u26A0\uFE0F Dashboard registration (returned ${t.status})`)}catch{e(" \u26A0\uFE0F Dashboard registration (heartbeat failed \u2014 non-fatal)")}e(`
|
|
66
66
|
All checks passed. Your agent is connected.`),e(` Dashboard: ${o.dashboard_url||"https://app.aerostack.dev"}
|
|
67
67
|
`),o.mcp_servers===0&&e(` Note: 0 tools found. Add MCP servers or functions to your workspace first.
|
|
68
68
|
`),process.exit(0)}catch(s){s?.name==="TimeoutError"||s?.name==="AbortError"?(e(" \u274C Workspace unreachable (timeout after 10s)"),e(`
|
|
69
69
|
Fix: Check AEROSTACK_WORKSPACE_URL and your network connection
|
|
70
70
|
`)):(e(` \u274C Connection failed (${s?.message??"unknown error"})`),e(`
|
|
71
71
|
Fix: Check AEROSTACK_WORKSPACE_URL is correct
|
|
72
|
-
`)),process.exit(1)}}async function
|
|
73
|
-
`);a=
|
|
74
|
-
|
|
72
|
+
`)),process.exit(1)}}async function et(){try{const e=await fetch(`${d}/chat/connection-test`,{headers:{Authorization:`Bearer ${l}`},signal:AbortSignal.timeout(5e3)});if(e.ok){const s=await e.json();u(`Connected to "${s.workspace}" (${s.mcp_servers} tools)`,{dashboard:"https://app.aerostack.dev"})}else e.status===401?h("Token invalid \u2014 regenerate at dashboard \u2192 Workspace \u2192 Tokens"):h("Connection check failed",{status:e.status})}catch{h("Could not verify connection (non-fatal)")}}async function tt(){u("Connecting to workspace",{url:d});const e=new he;await R.connect(e),u("Ready",{url:d}),et().catch(()=>{});const s=()=>{S(`${d}/chat/heartbeat`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({agent_type:ae,user_agent:"aerostack-gateway/0.15.14",bridge_id:re})}).catch(()=>{})};s();const o=setInterval(s,12e4);if(process.on("exit",()=>clearInterval(o)),Pe)try{const r=await Re(async n=>{try{const a=await fetch(`${d}/guardian-batch`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${l}`,"User-Agent":"aerostack-gateway/0.15.14","X-Agent-Id":"aerostack-gateway"},body:JSON.stringify({events:n})});return a.ok?(await a.json()).config?.hook_tracking??null:null}catch{return null}},xe);Ie&&await Oe(r)&&u("Claude Code hook auto-installed",{port:r})}catch(t){h("Hook server failed to start (non-fatal)",{error:t instanceof Error?t.message:String(t)})}if(Ue)try{const t=Le??await $e();t?(C=new ve({port:ne,token:t,rpcCall:E,onToolEvent:n=>{const a=x;if(!a)return;const i=z.get(a);if(i){if(n.phase==="start")i.push({name:n.toolName,category:n.category,started_at:Date.now(),ended_at:null,duration_ms:null,status:"running",args_summary:n.summary});else if(n.phase==="end"){const p=[...i].reverse().find(w=>w.name===n.toolName&&w.status==="running");p&&(p.ended_at=Date.now(),p.duration_ms=p.ended_at-p.started_at,p.status=n.error?"error":"success",n.error&&(p.error=n.error))}S(`${d}/chat/tool-status`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({tool_name:n.toolName,phase:n.phase,category:n.category})}).catch(()=>{})}}}),await C.connect()?u("OpenClaw connector started",{port:ne}):(u("OpenClaw gateway not reachable, skipping connector"),C=null)):u("OpenClaw integration skipped (no token found)")}catch(t){h("OpenClaw connector failed (non-fatal)",{error:t instanceof Error?t.message:String(t)})}st()}let M=null;function st(){M&&M.abort(),M=new AbortController;const e=async()=>{try{const t=await fetch(d,{method:"GET",headers:{Authorization:`Bearer ${l}`,Accept:"text/event-stream"},signal:M.signal});if(!t.ok||!t.body){h("Chat event listener: failed to connect",{status:t.status}),o();return}u("Chat event listener connected");const r=t.body.getReader(),n=new TextDecoder;let a="";for(;;){const{done:i,value:p}=await r.read();if(i)break;a+=n.decode(p,{stream:!0});const w=a.split(`
|
|
73
|
+
`);a=w.pop()??"";let A="",y="";for(const _ of w)_.startsWith("event: ")?A=_.slice(7).trim():_.startsWith("data: ")?y=_.slice(6):_===""&&A&&y&&(A==="aerostack_event"&&ot(y),A="",y="")}u("Chat event listener: stream ended, reconnecting"),o()}catch(t){if(t?.name==="AbortError")return;h("Chat event listener error",{error:t?.message}),o()}};let s=null;const o=()=>{s||(s=setTimeout(()=>{s=null,e()},5e3))};e()}async function ot(e){try{const s=JSON.parse(e);if(s.type!=="chat_message")return;let o=[];if(s.metadata_json)try{const f=JSON.parse(s.metadata_json);f?.v===1&&Array.isArray(f.attachments)&&(o=f.attachments)}catch{}const t=!!s.content&&s.content_type!=="media",r=o.length>0;if(!t&&!r)return;const n=s.session_id;u("Chat message received from admin",{sender:s.sender_name,sessionId:n,contentType:s.content_type,attachments:o.length});const a=/^[a-zA-Z0-9_-]{1,128}$/.test(s.message_id??"")?s.message_id:null,i=o.map(f=>{const U=Math.round(f.size/1024),B=U>=1024?`${(U/1024).toFixed(1)} MB`:`${U} KB`,F=T((f.filename||"file").slice(0,200)),G=T((f.mime_type||"application/octet-stream").slice(0,100)),V=a?`${d}/chat/media/${a}/${encodeURIComponent(f.filename)}`:"(unavailable)";return`[Attached: ${F} (${G}, ${B}) \u2014 ${V}]`}),p=i.length>0?`
|
|
74
|
+
`+i.join(`
|
|
75
|
+
`):"",w=t?s.content+(p?`
|
|
76
|
+
`+i.map(f=>f).join(`
|
|
77
|
+
`):""):i.join(`
|
|
78
|
+
`);n&&(P=n,K(n,"user",w)),j.length>=qe&&j.shift(),j.push({sender_name:s.sender_name??"Admin",content:t?s.content:i.join(", "),created_at:Date.now(),session_id:n}),v=Date.now();const A=T(s.sender_name??"Admin"),y=t?T(s.content):"",_=n||P||"_default",te=`aerostack-chat-${/^[a-zA-Z0-9_-]{1,64}$/.test(_)?_:"_default"}`,$=`turn-${Date.now()}-${Math.random().toString(36).slice(2,8)}`,b=[];z.set($,b),x=$;try{const{execFile:f}=await import("child_process");u("Spawning full agent turn for chat",{sender:A,session:te});const U=y?y+p:p.trim(),B=Z(_),F=`You are chatting with ${A} via the Aerostack admin dashboard. Address them by name and be helpful.
|
|
79
|
+
|
|
80
|
+
`,G=`${B}${F}[${A}]: ${U}`;f("openclaw",["agent","--agent","main","--json","--session-id",te,"-m",G],{timeout:12e4},async(V,W)=>{let N=[];if(!V&&W)try{const c=JSON.parse(W.trim()),g=c?.result?.payloads;Array.isArray(g)&&g.length>0?N=g:(c.text||c.reply||c.message)&&(N=[{text:c.text||c.reply||c.message}])}catch{const c=W.trim().split(`
|
|
81
|
+
`).pop()||W.trim();c&&(N=[{text:c}])}N.length===0&&(N=[{text:`Message received. I'll process "${y.slice(0,100)}" shortly.`}]),await new Promise(c=>setTimeout(c,500));for(const c of b)c.status==="running"&&(c.status="timeout",c.ended_at=Date.now(),c.duration_ms=c.ended_at-c.started_at);if(b.length>0){const c=b.reduce((m,O)=>m+(O.duration_ms||0),0),g=b.length;try{await S(`${d}/chat/messages`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({content:`Used ${g} tool${g>1?"s":""}`,content_type:"tool_activity",session_id:n,metadata:JSON.stringify({v:1,tools:b.map(m=>({name:m.name,category:m.category,duration_ms:m.duration_ms,status:m.status,args_summary:m.args_summary?.slice(0,500),error:m.error?.slice(0,500)})),total_duration_ms:c})})})}catch{}}z.delete($),x===$&&(x=null);for(const c of N){const g=c.text?.trim()||"";if(c.mediaUrl){let m=!1;try{m=new URL(c.mediaUrl).protocol==="https:"}catch{}if(m)try{const O=await S(`${d}/chat/media`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({media_url:c.mediaUrl,content:g||void 0,session_id:n})});O.ok?u("Chat media sent to workspace",{mediaUrl:c.mediaUrl}):h("Chat media upload failed",{status:O.status})}catch(O){h("Failed to send chat media",{error:O?.message})}else h("Skipping invalid media URL",{mediaUrl:c.mediaUrl});K(_,"agent",g||`[media: ${c.mediaUrl}]`)}else if(g&&g.length>=2){K(_,"agent",g);try{const m=await S(`${d}/chat/messages`,{method:"POST",headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},body:JSON.stringify({content:g.slice(0,1e4),session_id:n})});m.ok?u("Chat reply sent to workspace"):h("Chat reply failed",{status:m.status})}catch(m){h("Failed to send chat reply",{error:m?.message})}}}})}catch(f){h("Failed to spawn agent turn",{error:f?.message}),z.delete($),x===$&&(x=null)}}catch{}}function pe(){M?.abort(),C?.stop(),Ce(),process.exit(0)}process.on("SIGTERM",()=>{pe()}),process.on("SIGINT",()=>{pe()}),process.argv.includes("--check")?Ze():tt().catch(e=>{be("Fatal error",{error:e instanceof Error?e.message:String(e)}),process.exit(1)});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
import{readFile as m}from"node:fs/promises";import{join as
|
|
1
|
+
import{readFile as m}from"node:fs/promises";import{join as f}from"node:path";import{homedir as b}from"node:os";import{info as p,warn as c,debug as l}from"./logger.js";import{addToBatch as u,detectCategory as w,summarizeToolInput as y}from"./hook-server.js";function S(a){return a.replace(/^(?:\w+__)*aerostack__/,"").replace(/__/g,":")||a}async function R(){try{const a=f(b(),".openclaw","openclaw.json"),e=await m(a,"utf-8");return JSON.parse(e)?.gateway?.auth?.token??null}catch{return null}}async function E(){try{const a=f(b(),".openclaw","exec-approvals.json"),e=await m(a,"utf-8");return JSON.parse(e)?.socket?.token??null}catch{return null}}const k=1e3,T=3e4;class A{opts;ws=null;destroyed=!1;reconnectMs=k;reconnectTimer=null;requestId=0;seenSessions=new Set;pendingRequests=new Map;lastActiveSession=null;constructor(e){this.opts=e}async connect(){if(this.destroyed)return!1;const e=await this.getWebSocket(),s=`ws://127.0.0.1:${this.opts.port}`;return new Promise(t=>{try{const n=new e(s);this.ws=n;const o=setTimeout(()=>{l("OpenClaw connect timeout");try{n.close()}catch{}t(!1)},1e4);n.onopen=()=>{clearTimeout(o),l("OpenClaw WS connected, sending handshake"),this.sendHandshake()},n.onmessage=i=>{try{const r=JSON.parse(String(i.data));this.handleFrame(r,t)}catch{}},n.onerror=()=>{clearTimeout(o),t(!1)},n.onclose=()=>{clearTimeout(o),this.ws=null,this.destroyed||this.scheduleReconnect()}}catch{t(!1)}})}getLastActiveSession(){return this.lastActiveSession}async sendToSession(e,s){if(!this.ws||!this.connected)return!1;const t=await this.sendRequest("sessions.send",{key:e,message:s,idempotencyKey:`aerostack-${Date.now()}`});return t.ok||c("sendToSession failed",{key:e,error:t.error?.message}),t.ok??!1}stop(){if(this.destroyed=!0,this.reconnectTimer&&(clearTimeout(this.reconnectTimer),this.reconnectTimer=null),this.ws){try{this.ws.close(1e3)}catch{}this.ws=null}this.pendingRequests.clear()}sendHandshake(){this.send({type:"req",id:String(++this.requestId),method:"connect",params:{minProtocol:3,maxProtocol:3,client:{id:"openclaw-tui",displayName:"Aerostack Guardian",version:"0.15.8",platform:process.platform,mode:"cli"},auth:{token:this.opts.token},scopes:["operator.read","operator.write"],caps:["tool-events"]}})}connected=!1;subscribedSessions=new Set;handleFrame(e,s){if(e.type==="res"&&!this.connected){e.ok?(this.connected=!0,this.reconnectMs=k,p("OpenClaw connector connected",{port:this.opts.port}),s?.(!0),this.subscribeAllSessions().catch(t=>c("subscribeAllSessions failed",{error:t?.message}))):(c("OpenClaw connect rejected",{error:e.error?.message}),s?.(!1));return}if(e.type==="res"&&e.id&&this.pendingRequests.has(e.id)){const t=this.pendingRequests.get(e.id);this.pendingRequests.delete(e.id),t(e);return}if(e.type==="res"&&e.ok===!1&&e.error){c("OpenClaw RPC error",{error:e.error.message,code:e.error.code});return}e.type==="event"&&this.handleEvent(e)}subscribeToSessionMessages(e){if(this.subscribedSessions.has(e))return;this.subscribedSessions.add(e);const s=String(++this.requestId);this.pendingRequests.set(s,t=>{t.ok?l("OpenClaw subscribed to session messages",{key:e}):c("OpenClaw messages.subscribe failed",{key:e,error:t.error?.message})}),this.send({type:"req",id:s,method:"sessions.messages.subscribe",params:{key:e}}),setTimeout(()=>this.pendingRequests.delete(s),1e4)}async subscribeAllSessions(){const e=await this.sendRequest("sessions.subscribe");e.ok?p("OpenClaw subscribed to all session events (tool + lifecycle)"):c("OpenClaw sessions.subscribe failed",{error:e.error?.message});const s=await this.sendRequest("sessions.list",{limit:50});if(!s.ok){c("OpenClaw sessions.list failed",{error:s.error?.message});return}const t=s.payload?.sessions,n=Array.isArray(t)?t:[];p("OpenClaw active sessions",{count:n.length});for(const o of n)o.key&&this.subscribeToSessionMessages(o.key)}sendRequest(e,s){return new Promise(t=>{const n=String(++this.requestId),o=setTimeout(()=>{this.pendingRequests.delete(n),t({type:"res",id:n,ok:!1,error:{code:"TIMEOUT",message:"request timeout"}})},1e4);this.pendingRequests.set(n,i=>{clearTimeout(o),t(i)}),this.send({type:"req",id:n,method:e,params:s})})}handleEvent(e){const s=e.event,t=e.payload??{};s==="agent"?this.handleAgentEvent(t):s==="session.tool"?this.handleToolEvent(t):s==="session.message"?this.handleMessageEvent(t):s==="sessions.changed"?this.handleSessionChanged(t):(s==="exec.approval"||s==="exec.request"||s==="tool.approval")&&this.handleExecApprovalEvent(t)}handleAgentEvent(e){const s=e.stream,t=e.data,n=e.sessionKey??"";if(n&&this.seenSessions.add(n),s==="tool"){const o=t?.name??t?.toolName??e.toolName??"unknown",i=t?.phase??"",r=t?.args??e.args??{};if(i==="start"){const{category:d,risk:h}=w(o,r),g=y(o,r);u({action:`OpenClaw ${S(o)}: ${g}`.slice(0,500),category:d,risk_level:h,details:JSON.stringify({tool:o,session:n,...r}).slice(0,500),agent_name:"OpenClaw"}),l("OpenClaw agent tool event",{tool:o,category:d,risk:h})}}if(s==="lifecycle"&&t){const o=t.phase??"";(o==="start"||o==="end")&&l("OpenClaw agent lifecycle",{phase:o,session:n})}}handleToolEvent(e){const s=e.data,t=s?.name??s?.toolName??e.toolName??"unknown",n=s?.phase??"",o=s?.args??e.args??{},i=e.sessionKey??"";if(n!=="start"&&n!=="end")return;const{category:r,risk:d}=w(t,o),h=y(t,o);if(n==="start"&&u({action:`OpenClaw ${S(t)}: ${h}`.slice(0,500),category:r,risk_level:d,details:JSON.stringify({tool:t,session:i,...o}).slice(0,500),agent_name:"OpenClaw"}),l("OpenClaw tool event",{tool:t,phase:n,category:r,risk:d,session:i}),!new Set(["aerostack__guardian_report","aerostack__chat_check","aerostack__chat_reply","aerostack__check_approval","aerostack__local_guardian","aerostack__guardian_check"]).has(t)){const _=s?.error??e.error??void 0;this.opts.onToolEvent?.({toolName:t,phase:n,category:r,summary:h,error:_})}i&&(this.seenSessions.add(i),this.lastActiveSession=i)}handleExecApprovalEvent(e){const s=e.command??e.cmd??"",t=e.sessionKey??"",n=e.agentId??"";if(!s)return;const o=s.toLowerCase();let i="medium",r="exec_command";/\brm\s+-rf?\b|\bdrop\b|\bdelete\b|\btruncate\b/.test(o)?(i="critical",r="file_delete"):/\brm\b|\bgit\s+push\b|\bgit\s+reset\b|\bdeploy\b|\bkill\b/.test(o)?(i="high",r="deploy"):/\binstall\b|\bpip\b|\bnpm\b|\bcurl\b|\bwget\b/.test(o)&&(i="medium",r="package_install"),u({action:`[approval requested] exec: ${s}`.slice(0,500),category:r,risk_level:i,details:JSON.stringify({command:s,agent:n,session:t,source:"exec.approval"}).slice(0,500),agent_name:"OpenClaw"}),this.opts.rpcCall("tools/call",{name:"aerostack__guardian_report",arguments:{action:`OpenClaw exec approval: ${s}`.slice(0,500),category:r,risk_level:i,details:JSON.stringify({command:s,agent:n,session:t}).slice(0,500)}}).catch(()=>{}),p("OpenClaw exec approval event",{command:s.slice(0,100),risk:i})}handleMessageEvent(e){const s=e.sessionKey??"";s&&(this.seenSessions.add(s),this.lastActiveSession=s)}handleSessionChanged(e){const s=e.sessionKey??"";s&&(this.seenSessions.add(s),this.subscribeToSessionMessages(s))}send(e){if(this.ws)try{this.ws.send(JSON.stringify(e))}catch{}}scheduleReconnect(){this.destroyed||this.reconnectTimer||(l("OpenClaw reconnecting in",{ms:this.reconnectMs}),this.reconnectTimer=setTimeout(async()=>{this.reconnectTimer=null,this.connected=!1,this.seenSessions.clear(),this.subscribedSessions.clear(),this.pendingRequests.clear(),await this.connect()},this.reconnectMs),this.reconnectMs=Math.min(this.reconnectMs*2,T))}async getWebSocket(){return typeof globalThis.WebSocket<"u"?globalThis.WebSocket:(await import("ws")).default}}export{A as OpenClawConnector,E as resolveExecApprovalToken,R as resolveOpenClawToken};
|