@aerostack/openclaw-bridge 0.11.1 → 0.12.1

package/README.md

@@ -14,6 +14,7 @@ Instead of configuring 50 separate MCP servers in OpenClaw, point at one Aerosta
 - **All tools in one place** — composed from multiple MCP servers
 - **Centralized OAuth** — 27+ providers managed by Aerostack, not your agent
 - **Human approval gates** — sensitive tools require workspace owner approval before executing
+- **Local Guardian** — approval gates for local operations (file delete, shell, git push, deploy)
 - **Per-tool permissions** — workspace tokens scope exactly which tools are accessible
 - **Usage tracking & audit** — every tool call logged and metered
 - **Rate limiting** — per-token, plan-tiered
@@ -94,13 +95,74 @@ When a workspace owner configures approval requirements on sensitive tools, the
 OpenClaw calls dangerous_tool
   → Bridge forwards to workspace
   → Workspace returns "needs approval" (-32050)
-  → Bridge polls for approval status (logs to stderr)
-  → Workspace owner approves/rejects in admin dashboard
+  → Bridge waits via WebSocket (instant) or polls as fallback
+  → Workspace owner approves/rejects in dashboard or mobile
   → Bridge retries on approval, returns error on rejection
 ```
 
 Your OpenClaw agent sees either a successful result or a clear error — no special handling needed.
 
+## Local Guardian
+
+Approval gates for **local operations** — file deletion, destructive shell commands, git push, deploys, and more. The agent asks for approval before acting on your machine.
+
+### How it works
+
+The bridge injects an `aerostack__local_guardian` tool alongside your workspace tools. When the LLM is about to perform a risky local operation, it calls this tool first. The bridge sends an approval request to your workspace — you get a push notification and can approve or reject from the dashboard or your phone.
+
+```
+Agent wants to: rm -rf ./old-config/
+  → Agent calls aerostack__local_guardian (action: "delete old-config directory")
+  → Bridge sends approval request to workspace
+  → You get push notification: "[LOCAL] delete old-config directory"
+  → You tap Approve or Reject
+  → Agent proceeds or stops
+```
+
+### Default rules
+
+The guardian covers these categories out of the box:
+
+| Category | What it covers |
+|----------|---------------|
+| `file_delete` | Deleting, removing, or overwriting files |
+| `shell_destructive` | `rm -rf`, `DROP TABLE`, `TRUNCATE`, etc. |
+| `git_push` | `git push`, force push, `git reset --hard` |
+| `config_modify` | `.env`, credentials, secrets, production configs |
+| `deploy` | Deploy, publish, release to any environment |
+| `database` | Direct database mutations outside of migrations |
+
+### Custom rules (from your dashboard)
+
+Configure custom rules in your workspace settings via the Aerostack Admin Dashboard or API:
+
+```bash
+# Example: add a custom "email" rule via API
+curl -X PATCH "https://api.aerostack.dev/api/community/workspaces/{id}" \
+  -H "Authorization: Bearer YOUR_JWT" \
+  -d '{
+    "settings": {
+      "local_guardian_rules": [
+        { "category": "email", "description": "Sending any email", "examples": ["send email", "compose", "reply"] },
+        { "category": "payments", "description": "Any payment or billing operation", "examples": ["charge", "refund", "invoice"] },
+        { "category": "file_delete", "description": "Deleting files", "examples": ["rm", "unlink"] }
+      ]
+    }
+  }'
+```
+
+When workspace rules are configured, they **replace** the defaults. The bridge fetches rules automatically during initialization — no env vars needed.
+
+### Disable Local Guardian
+
+**From the dashboard:** Set `local_guardian_enabled: false` in workspace settings.
+
+**From the agent side:** Set `AEROSTACK_LOCAL_GUARDIAN=false` in env to force-disable regardless of workspace config.
+
+### Requires workspace approval rules
+
+Local Guardian uses your workspace's approval system. You need at least one approval rule configured in your workspace settings. If no rules are configured, the guardian allows all actions with a warning.
+
 ## Configuration
 
 All configuration is via environment variables:
@@ -112,6 +174,8 @@ All configuration is via environment variables:
 | `AEROSTACK_APPROVAL_POLL_MS` | No | `3000` | Approval polling interval (ms) |
 | `AEROSTACK_APPROVAL_TIMEOUT_MS` | No | `300000` | Max approval wait time (5 min) |
 | `AEROSTACK_REQUEST_TIMEOUT_MS` | No | `30000` | HTTP request timeout (30s) |
+| `AEROSTACK_LOCAL_GUARDIAN` | No | `true` | Force-disable Local Guardian (`false` to disable) |
+| `AEROSTACK_LOG_LEVEL` | No | `info` | Log level (debug, info, warn, error) |
 
 ## Supported MCP Methods
 

package/dist/index.js

@@ -75,7 +75,7 @@ async function rpcCall(method, params) {
             headers: {
                 'Content-Type': 'application/json',
                 'Authorization': `Bearer ${TOKEN}`,
-                'User-Agent': 'aerostack-openclaw-bridge/0.11.0',
+                'User-Agent': 'aerostack-openclaw-bridge/0.12.0',
                 'X-Agent-Id': 'openclaw',
             },
             body: JSON.stringify(body),
@@ -193,7 +193,7 @@ async function ensureInitialized() {
     const res = await rpcCall('initialize', {
         protocolVersion: '2024-11-05',
         capabilities: {},
-        clientInfo: { name: 'aerostack-openclaw-bridge', version: '0.10.1' },
+        clientInfo: { name: 'aerostack-openclaw-bridge', version: '0.12.0' },
     });
     if (res.result) {
         const r = res.result;
@@ -203,7 +203,7 @@ async function ensureInitialized() {
         };
     }
 }
-const server = new Server({ name: 'aerostack-openclaw-bridge', version: '0.10.1' }, { capabilities: { tools: {}, resources: {}, prompts: {} } });
+const server = new Server({ name: 'aerostack-openclaw-bridge', version: '0.12.0' }, { capabilities: { tools: {}, resources: {}, prompts: {} } });
 // ── tools/list ─────────────────────────────────────────────────────
 server.setRequestHandler(ListToolsRequestSchema, async () => {
     await ensureInitialized();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aerostack/openclaw-bridge",
-  "version": "0.11.1",
+  "version": "0.12.1",
   "description": "stdio-to-HTTP bridge connecting OpenClaw to Aerostack Workspaces via MCP",
   "author": "Aerostack",
   "license": "MIT",