@agenshield/daemon 0.4.1 → 0.4.3

package/index.js

@@ -4986,7 +4986,7 @@ async function agencoRoutes(app) {
 // libs/shield-daemon/src/routes/skills.ts
 import * as fs13 from "node:fs";
 import * as path12 from "node:path";
-import { execSync as execSync7 } from "node:child_process";
+import { execSync as execSync8 } from "node:child_process";
 import { parseSkillMd } from "@agenshield/sandbox";
 
 // libs/shield-daemon/src/services/skill-analyzer.ts
@@ -5269,6 +5269,7 @@ function removeSkillPolicy(name) {
 // libs/shield-daemon/src/services/openclaw-config.ts
 import * as fs11 from "node:fs";
 import * as path10 from "node:path";
+import { execSync as execSync7 } from "node:child_process";
 function getOpenClawConfigPath() {
   const agentHome = process.env["AGENSHIELD_AGENT_HOME"] || "/Users/ash_default_agent";
   return path10.join(agentHome, ".openclaw", "openclaw.json");
@@ -5288,6 +5289,14 @@ function writeConfig(config) {
   const configPath = getOpenClawConfigPath();
   fs11.mkdirSync(path10.dirname(configPath), { recursive: true });
   fs11.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+  const agentHome = process.env["AGENSHIELD_AGENT_HOME"] || "/Users/ash_default_agent";
+  const brokerUser = path10.basename(agentHome) + "_broker";
+  const socketGroup = process.env["AGENSHIELD_SOCKET_GROUP"] || "clawshield";
+  try {
+    execSync7(`chown ${brokerUser}:${socketGroup} "${configPath}"`, { stdio: "pipe" });
+    execSync7(`chmod 664 "${configPath}"`, { stdio: "pipe" });
+  } catch {
+  }
 }
 function addSkillEntry(slug, env) {
   const config = readConfig();
@@ -5917,8 +5926,8 @@ async function skillsRoutes(app) {
             fs13.writeFileSync(filePath, file.content, "utf-8");
           }
           try {
-            execSync7(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
-            execSync7(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
+            execSync8(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
+            execSync8(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
           } catch {
           }
           createSkillWrapper(name, binDir);
@@ -5979,8 +5988,8 @@ async function skillsRoutes(app) {
           fs13.writeFileSync(filePath, file.content, "utf-8");
         }
         try {
-          execSync7(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
-          execSync7(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
+          execSync8(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
+          execSync8(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
         } catch {
         }
         createSkillWrapper(name, binDir);
@@ -7016,8 +7025,6 @@ async function marketplaceRoutes(app) {
         if (brokerResult.wrapperPath) {
           logs.push(`Wrapper created: ${brokerResult.wrapperPath}`);
         }
-        addSkillEntry(slug);
-        logs.push("Config entry added");
         addSkillPolicy(slug);
         logs.push("Policy rule added");
         emitSkillInstallProgress(slug, "local_analysis", "Running local analysis");

package/main.js

@@ -4950,7 +4950,7 @@ async function agencoRoutes(app) {
 // libs/shield-daemon/src/routes/skills.ts
 import * as fs13 from "node:fs";
 import * as path12 from "node:path";
-import { execSync as execSync7 } from "node:child_process";
+import { execSync as execSync8 } from "node:child_process";
 import { parseSkillMd } from "@agenshield/sandbox";
 
 // libs/shield-daemon/src/services/skill-analyzer.ts
@@ -5233,6 +5233,7 @@ function removeSkillPolicy(name) {
 // libs/shield-daemon/src/services/openclaw-config.ts
 import * as fs11 from "node:fs";
 import * as path10 from "node:path";
+import { execSync as execSync7 } from "node:child_process";
 function getOpenClawConfigPath() {
   const agentHome = process.env["AGENSHIELD_AGENT_HOME"] || "/Users/ash_default_agent";
   return path10.join(agentHome, ".openclaw", "openclaw.json");
@@ -5252,6 +5253,14 @@ function writeConfig(config) {
   const configPath = getOpenClawConfigPath();
   fs11.mkdirSync(path10.dirname(configPath), { recursive: true });
   fs11.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+  const agentHome = process.env["AGENSHIELD_AGENT_HOME"] || "/Users/ash_default_agent";
+  const brokerUser = path10.basename(agentHome) + "_broker";
+  const socketGroup = process.env["AGENSHIELD_SOCKET_GROUP"] || "clawshield";
+  try {
+    execSync7(`chown ${brokerUser}:${socketGroup} "${configPath}"`, { stdio: "pipe" });
+    execSync7(`chmod 664 "${configPath}"`, { stdio: "pipe" });
+  } catch {
+  }
 }
 function addSkillEntry(slug, env) {
   const config = readConfig();
@@ -5881,8 +5890,8 @@ async function skillsRoutes(app) {
             fs13.writeFileSync(filePath, file.content, "utf-8");
           }
           try {
-            execSync7(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
-            execSync7(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
+            execSync8(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
+            execSync8(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
           } catch {
           }
           createSkillWrapper(name, binDir);
@@ -5943,8 +5952,8 @@ async function skillsRoutes(app) {
           fs13.writeFileSync(filePath, file.content, "utf-8");
         }
         try {
-          execSync7(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
-          execSync7(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
+          execSync8(`chown -R root:${socketGroup} "${skillDir}"`, { stdio: "pipe" });
+          execSync8(`chmod -R a+rX,go-w "${skillDir}"`, { stdio: "pipe" });
         } catch {
         }
         createSkillWrapper(name, binDir);
@@ -6980,8 +6989,6 @@ async function marketplaceRoutes(app) {
         if (brokerResult.wrapperPath) {
           logs.push(`Wrapper created: ${brokerResult.wrapperPath}`);
         }
-        addSkillEntry(slug);
-        logs.push("Config entry added");
         addSkillPolicy(slug);
         logs.push("Policy rule added");
         emitSkillInstallProgress(slug, "local_analysis", "Running local analysis");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenshield/daemon",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "type": "module",
   "description": "AgenShield HTTP daemon server with embedded UI",
   "main": "./index.js",
@@ -24,9 +24,9 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@agenshield/ipc": "0.4.1",
-    "@agenshield/broker": "0.4.1",
-    "@agenshield/sandbox": "0.4.1",
+    "@agenshield/ipc": "0.4.3",
+    "@agenshield/broker": "0.4.3",
+    "@agenshield/sandbox": "0.4.3",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "fastify": "^5.7.0",
     "zod": "^4.3.6",

package/routes/marketplace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace.d.ts","sourceRoot":"","sources":["../../src/routes/marketplace.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAmC7E,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAsX3E"}
+{"version":3,"file":"marketplace.d.ts","sourceRoot":"","sources":["../../src/routes/marketplace.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAkC7E,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAoX3E"}

package/services/openclaw-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-config.d.ts","sourceRoot":"","sources":["../../src/services/openclaw-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoCH;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAiB9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQnD"}
+{"version":3,"file":"openclaw-config.d.ts","sourceRoot":"","sources":["../../src/services/openclaw-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiDH;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAiB9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQnD"}