@agentapprove/openclaw 0.1.7 → 0.1.9

package/README.md

@@ -10,6 +10,13 @@
 
 You decide the rules. Agent Approve enforces them.
 
+## Important
+
+- A valid Agent Approve subscription is required to use this plugin.
+- You must download the iOS app, run `npx agentapprove`, and pair your device.
+- This plugin is currently pre-launch software. Public App Store availability is not open yet.
+- If a valid token is not configured, tool calls are blocked with setup guidance.
+
 ## How it works
 
 This plugin hooks into OpenClaw's agent loop to enforce your approval policy:
@@ -67,6 +74,11 @@ Plugin settings in `~/.openclaw/openclaw.json`:
 | `privacyTier` | `full` | What tool data is stored in event logs: `minimal`, `summary`, or `full` |
 | `debug` | `false` | Write debug logs to `~/.agentapprove/hook-debug.log` |
 
+## Requirements
+
+- OpenClaw runtime
+- Agent Approve iOS app and active subscription ($9.99/month or $99/year, 7-day free trial)
+
 ## Supported agents
 
 Agent Approve works with OpenClaw, Claude Code, Cursor, Gemini CLI, VS Code Agent, Copilot CLI, OpenAI Codex (coming soon), and more. Run `npx agentapprove` to configure multiple agents at once.

package/dist/index.js

@@ -9,7 +9,7 @@ import { homedir as homedir3 } from "os";
 import { execSync } from "child_process";
 
 // src/e2e-crypto.ts
-import { createHash, createHmac, createCipheriv, randomBytes } from "crypto";
+import { createHash, createHmac, createCipheriv, createDecipheriv, randomBytes, timingSafeEqual } from "crypto";
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, copyFileSync } from "fs";
 import { join as join2 } from "path";
 import { homedir as homedir2 } from "os";
@@ -135,6 +135,35 @@ function e2eEncrypt(keyHex, plaintext) {
   const hmac = createHmac("sha256", macKey).update(Buffer.concat([iv, ciphertext])).digest("hex");
   return `E2E:v1:${kid}:${ivHex}:${ciphertextBase64}:${hmac}`;
 }
+function isE2EEncrypted(value) {
+  return value.startsWith("E2E:v1:");
+}
+function e2eDecrypt(keyHex, encrypted) {
+  try {
+    if (!isE2EEncrypted(encrypted)) return null;
+    const parts = encrypted.split(":");
+    if (parts.length !== 6) return null;
+    const kid = parts[2];
+    if (kid !== keyId(keyHex)) return null;
+    const ivHex = parts[3];
+    const ciphertextBase64 = parts[4];
+    const hmacHex = parts[5];
+    const encKey = deriveEncKey(keyHex);
+    const macKey = deriveMacKey(keyHex);
+    const iv = Buffer.from(ivHex, "hex");
+    const ciphertext = Buffer.from(ciphertextBase64, "base64");
+    const expectedHmac = createHmac("sha256", macKey).update(Buffer.concat([iv, ciphertext])).digest();
+    const actualHmac = Buffer.from(hmacHex, "hex");
+    if (expectedHmac.length !== actualHmac.length || !timingSafeEqual(expectedHmac, actualHmac)) {
+      return null;
+    }
+    const decipher = createDecipheriv("aes-256-ctr", encKey, iv);
+    const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return plaintext.toString("utf-8");
+  } catch {
+    return null;
+  }
+}
 function applyApprovalE2E(payload, userKey, serverKey) {
   const sensitiveFields = {};
   for (const field of ["command", "toolInput", "cwd"]) {
@@ -339,7 +368,7 @@ function loadConfig(openclawConfig, logger) {
   }
   let token = process.env.AGENTAPPROVE_TOKEN || getKeychainToken() || parseConfigValue(fileContent, "AGENTAPPROVE_TOKEN") || "";
   if (!token) {
-    logger?.warn("No Agent Approve token found. Run the Agent Approve installer to set up.");
+    logger?.warn("Missing token. Download the iOS app, run npx agentapprove, and pair your device. Subscription required.");
   }
   const rawApiUrl = openclawConfig?.apiUrl || process.env.AGENTAPPROVE_API || parseConfigValue(fileContent, "AGENTAPPROVE_API") || "https://api.agentapprove.com";
   const rawApiVersion = process.env.AGENTAPPROVE_API_VERSION || parseConfigValue(fileContent, "AGENTAPPROVE_API_VERSION") || "v001";
@@ -386,7 +415,8 @@ function loadConfig(openclawConfig, logger) {
     failBehavior,
     privacyTier,
     debug,
-    hookVersion: "1.1.4",
+    hookVersion: "1.1.5",
+    agentType: "openclaw",
     agentName,
     e2eEnabled,
     e2eUserKey,
@@ -473,6 +503,7 @@ var CONTENT_FIELDS = [
   "command",
   "toolInput",
   "response",
+  "responsePreview",
   "text",
   "textPreview",
   "prompt",
@@ -688,7 +719,7 @@ function httpPost(url, body, headers, timeoutMs) {
 }
 async function sendApprovalRequest(request, config, pluginPath, hookName = "openclaw-plugin") {
   if (!config.token) {
-    throw new Error("No Agent Approve token configured");
+    throw new Error("Missing token. Download the iOS app, run npx agentapprove, and pair your device. Subscription required.");
   }
   let payload;
   if (config.e2eEnabled && config.e2eUserKey) {
@@ -729,6 +760,51 @@ async function sendApprovalRequest(request, config, pluginPath, hookName = "open
   processConfigSync(parsed, config);
   return parsed;
 }
+async function sendStopRequest(request, config, pluginPath, hookName = "openclaw-plugin") {
+  if (!config.token) {
+    throw new Error("Missing token. Download the iOS app, run npx agentapprove, and pair your device. Subscription required.");
+  }
+  let payload = applyEventPrivacyFilter(
+    { ...request },
+    config.privacyTier
+  );
+  if (config.e2eEnabled && config.e2eUserKey) {
+    payload = applyEventE2E(payload, config.e2eUserKey);
+    if (config.debug) {
+      debugLog("E2E encryption applied to stop request", hookName);
+    }
+  }
+  const bodyStr = JSON.stringify(payload);
+  const pluginHash = getPluginHash(pluginPath, config.debug, hookName);
+  const hmacHeaders = buildHMACHeaders(bodyStr, config.token, config.hookVersion, pluginHash);
+  const headers = {
+    "Authorization": `Bearer ${config.token}`,
+    ...hmacHeaders
+  };
+  const url = `${config.apiUrl}/${config.apiVersion}/stop`;
+  const stopTimeoutMs = 3e5;
+  if (config.debug) {
+    debugLog(`Sending stop request to ${url}`, hookName);
+    debugLog(`=== SENT TO ${url} ===`, hookName);
+    debugLogRawInline(bodyStr);
+    debugLog("=== END SENT ===", hookName);
+  }
+  const response = await httpPost(url, bodyStr, headers, stopTimeoutMs);
+  if (config.debug) {
+    debugLog(`Stop response: ${response.body || "<empty>"}`, hookName);
+  }
+  if (response.status !== 200) {
+    throw new Error(`Stop API returned status ${response.status}: ${response.body.slice(0, 200)}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(response.body);
+  } catch {
+    parsed = {};
+  }
+  processConfigSync(parsed, config);
+  return parsed;
+}
 async function sendEvent(event, config, pluginPath, hookName = "openclaw-plugin") {
   if (!config.token) return;
   const eventType = event.eventType;
@@ -915,13 +991,13 @@ function handleFailBehavior(config, error, toolName, logger, hookName = HOOK_PLU
 }
 function register(api) {
   const config = loadConfig(api.pluginConfig, api.logger);
-  if (!config.token) {
-    api.logger.warn(
-      "Agent Approve: No token found. Run the Agent Approve installer to pair with your account."
-    );
-    return;
+  const missingTokenMessage = "Missing token. Download the iOS app, run npx agentapprove, and pair your device. Subscription required.";
+  const noTokenConfigured = !config.token;
+  if (noTokenConfigured) {
+    api.logger.warn(`Agent Approve: ${missingTokenMessage}`);
+  } else {
+    api.logger.info(`Agent Approve: Plugin loaded (privacy: ${config.privacyTier}, fail: ${config.failBehavior})`);
   }
-  api.logger.info(`Agent Approve: Plugin loaded (privacy: ${config.privacyTier}, fail: ${config.failBehavior})`);
   if (config.debug) {
     const e2eStatus = !config.e2eEnabled ? "disabled" : !config.e2eUserKey ? "enabled (key missing)" : "enabled";
     debugLog(
@@ -941,16 +1017,24 @@ function register(api) {
     if (config.debug) {
       debugLog(`Tool: ${displayName} (${toolType}) [agent: ${config.agentName}]`, HOOK_BEFORE_TOOL);
     }
+    if (noTokenConfigured) {
+      return {
+        block: true,
+        blockReason: missingTokenMessage
+      };
+    }
     const request = {
       toolName: displayName,
       toolType,
       command,
       toolInput: event.params,
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "before_tool_call",
       sessionId: conversationId,
       conversationId,
       cwd: event.params.workdir || void 0,
+      projectPath: process.cwd(),
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     };
     try {
@@ -994,18 +1078,24 @@ function register(api) {
     }
     const { toolType } = classifyTool(event.toolName, event.params);
     const resultPreview = extractResultPreview(event.toolName, event.params, event.result);
+    const resultStr = event.result != null ? typeof event.result === "string" ? event.result : JSON.stringify(event.result) : void 0;
+    const longPreview = resultStr && resultStr.length > 1e3 ? resultStr.slice(0, 1e3) + "..." : resultStr;
     void sendEvent({
       toolName: event.toolName,
       toolType,
       eventType: "tool_complete",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "after_tool_call",
       sessionId: conversationId,
       conversationId,
       command: extractCommand(event.toolName, event.params),
+      toolInput: event.params,
       status: event.error ? "error" : "success",
       response: event.error || resultPreview || void 0,
+      responsePreview: longPreview,
       durationMs: event.durationMs,
+      cwd: event.params?.workdir || void 0,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     }, config, pluginFilePath, HOOK_AFTER_TOOL);
   });
@@ -1017,7 +1107,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "session_start",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "session_start",
       sessionId: conversationId,
       conversationId,
@@ -1032,7 +1123,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "session_end",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "session_end",
       sessionId: conversationId,
       conversationId,
@@ -1049,7 +1141,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "user_prompt",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "llm_input",
       sessionId: conversationId,
       conversationId,
@@ -1069,7 +1162,8 @@ function register(api) {
     }
     void sendEvent({
       eventType: "response",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "llm_output",
       sessionId: conversationId,
       conversationId,
@@ -1086,17 +1180,67 @@ function register(api) {
       debugLog(`Agent ended: success=${event.success}${event.durationMs ? `, duration=${event.durationMs}ms` : ""}${event.error ? `, error=${event.error}` : ""}`, HOOK_AGENT_END);
     }
     const conversationId = resolveConversationId();
-    void sendEvent({
+    const stopRequest = {
+      agent: config.agentType,
+      agentName: config.agentName,
       eventType: "stop",
-      agent: config.agentName,
-      hookType: "agent_end",
+      status: event.success ? "completed" : "error",
+      loopCount: Array.isArray(event.messages) ? event.messages.length : 0,
       sessionId: conversationId,
       conversationId,
-      status: event.success ? "completed" : "error",
-      durationMs: event.durationMs,
-      response: event.error || void 0,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    }, config, pluginFilePath, HOOK_AGENT_END);
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      ...config.e2eEnabled && config.e2eUserKey ? { e2eKeyId: keyId(config.e2eUserKey) } : {}
+    };
+    try {
+      const response = await sendStopRequest(stopRequest, config, pluginFilePath, HOOK_AGENT_END);
+      if (config.debug) {
+        debugLog(`Stop response: followup=${response.followup_message ? "yes" : "no"}`, HOOK_AGENT_END);
+      }
+      if (response.followup_message) {
+        let followupText = response.followup_message;
+        if (config.e2eEnabled && config.e2eUserKey && isE2EEncrypted(followupText)) {
+          const decrypted = e2eDecrypt(config.e2eUserKey, followupText);
+          if (!decrypted) {
+            api.logger.warn("Agent Approve: failed to decrypt follow-up message");
+            return;
+          }
+          if (config.debug) {
+            debugLog(`Decrypted follow-up: ${decrypted.slice(0, 50)}...`, HOOK_AGENT_END);
+          }
+          followupText = decrypted;
+        }
+        if (!api.runtime?.system?.enqueueSystemEvent) {
+          api.logger.warn(
+            "Agent Approve: follow-up received but runtime.system API unavailable (OpenClaw version may be too old)"
+          );
+          return;
+        }
+        try {
+          const sessionKey = ctx.sessionKey || conversationId;
+          api.runtime.system.enqueueSystemEvent(
+            `Agent Approve follow-up from user: ${followupText}`,
+            { sessionKey }
+          );
+          api.runtime.system.requestHeartbeatNow({
+            sessionKey,
+            reason: "agentapprove-followup"
+          });
+          if (config.debug) {
+            debugLog(`Follow-up injected via system event, heartbeat requested`, HOOK_AGENT_END);
+          }
+          api.logger.info(`Agent Approve: follow-up injected, heartbeat requested`);
+        } catch (injectionError) {
+          const injMsg = injectionError instanceof Error ? injectionError.message : String(injectionError);
+          api.logger.warn(`Agent Approve: follow-up injection failed \u2014 ${injMsg}`);
+        }
+      }
+    } catch (error) {
+      const msg = error instanceof Error ? error.message : String(error);
+      if (config.debug) {
+        debugLog(`Stop request error: ${msg}`, HOOK_AGENT_END);
+      }
+      api.logger.warn(`Agent Approve: stop request failed \u2014 ${msg}`);
+    }
   });
   api.on("before_compaction", async (event, ctx) => {
     if (config.debug) {
@@ -1106,7 +1250,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "context_compact",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "before_compaction",
       sessionId: conversationId,
       conversationId,
@@ -1122,7 +1267,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "subagent_start",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "subagent_spawned",
       sessionId: conversationId,
       conversationId,
@@ -1140,7 +1286,8 @@ function register(api) {
     const conversationId = resolveConversationId();
     void sendEvent({
       eventType: "subagent_stop",
-      agent: config.agentName,
+      agent: config.agentType,
+      agentName: config.agentName,
       hookType: "subagent_ended",
       sessionId: conversationId,
       conversationId,
@@ -1166,7 +1313,8 @@ function register(api) {
         toolName: `command:${event.action}`,
         toolType: "command",
         eventType: eventTypeMap[event.action] || "command_event",
-        agent: config.agentName,
+        agent: config.agentType,
+        agentName: config.agentName,
         hookType: "command_event",
         sessionId: resolveConversationId(),
         conversationId: resolveConversationId(),
@@ -1190,7 +1338,8 @@ function register(api) {
         toolName: `message:${event.action}`,
         toolType: "message_event",
         eventType: isInbound ? "user_prompt" : "response",
-        agent: config.agentName,
+        agent: config.agentType,
+        agentName: config.agentName,
         hookType: "session_event",
         sessionId: resolveConversationId(),
         conversationId: resolveConversationId(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentapprove/openclaw",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Agent Approve plugin for OpenClaw - approve or deny AI agent tool calls from your iPhone and Apple Watch",
   "main": "dist/index.js",
   "scripts": {