@agentvault/agentvault 0.18.0 → 0.19.1

package/dist/openclaw-plugin.d.ts

@@ -0,0 +1,102 @@
+/**
+ * AgentVault OpenClaw Channel Plugin
+ *
+ * Registers AgentVault as a first-class OpenClaw messaging channel.
+ * Messages from the AgentVault UI are decrypted and routed into the
+ * OpenClaw agent loop; agent replies are encrypted and sent back.
+ *
+ * Installation (one-time):
+ *   npx @agentvault/agentvault setup --token=av_tok_...
+ *
+ * After setup, restart OpenClaw — no further configuration needed.
+ */
+import { SecureChannel } from "./channel.js";
+import { listAccountIds, resolveAccount, type ResolvedAccount } from "./account-config.js";
+import type { PluginRuntime, ChannelGatewayContext, ChannelOutboundPayloadContext } from "./openclaw-types.js";
+export declare function setOcRuntime(runtime: PluginRuntime): void;
+export declare function getActiveChannel(accountId?: string): SecureChannel | undefined;
+export declare const agentVaultPlugin: {
+    id: string;
+    meta: {
+        id: string;
+        label: string;
+        selectionLabel: string;
+        docsPath: string;
+        blurb: string;
+        aliases: string[];
+    };
+    capabilities: {
+        chatTypes: string[];
+    };
+    config: {
+        listAccountIds: typeof listAccountIds;
+        resolveAccount: typeof resolveAccount;
+    };
+    gateway: {
+        /** Health probe for `openclaw channels status --probe` */
+        probe: (ctx: any) => Promise<{
+            ok: boolean;
+            status: string;
+            error: string;
+            deviceId?: undefined;
+            sessions?: undefined;
+        } | {
+            ok: boolean;
+            status: import("./types.js").ChannelState;
+            deviceId: string | undefined;
+            sessions: number;
+            error?: undefined;
+        }>;
+        /** Status for `openclaw health --json` per-channel summary */
+        status: (ctx: any) => {
+            connected: boolean;
+            status: string;
+            deviceId?: undefined;
+            sessions?: undefined;
+            encrypted?: undefined;
+        } | {
+            connected: boolean;
+            status: import("./types.js").ChannelState;
+            deviceId: string | undefined;
+            sessions: number;
+            encrypted: boolean;
+        };
+        startAccount: (ctx: ChannelGatewayContext<ResolvedAccount>) => Promise<{
+            stop: () => Promise<void>;
+        }>;
+    };
+    outbound: {
+        deliveryMode: "direct";
+        targets: {
+            id: string;
+            label: string;
+            accountId: string;
+        }[];
+        sendText: ({ text, accountId, targetId, }: {
+            text: string;
+            accountId?: string;
+            targetId?: string;
+        }) => Promise<{
+            ok: boolean;
+            error?: string;
+        }>;
+        sendMedia: ({ text, mediaUrl, accountId, }: {
+            to: string;
+            text?: string;
+            mediaUrl: string;
+            accountId?: string;
+        }) => Promise<{
+            ok: boolean;
+            error?: string;
+        }>;
+        /** Rich payload delivery — OpenClaw v2026.3.2+ */
+        sendPayload: (ctx: ChannelOutboundPayloadContext) => Promise<{
+            ok: boolean;
+            error: string;
+        } | {
+            ok: boolean;
+            error?: undefined;
+        }>;
+    };
+};
+//# sourceMappingURL=openclaw-plugin.d.ts.map

package/dist/openclaw-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-plugin.d.ts","sourceRoot":"","sources":["../src/openclaw-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI3F,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAS7B,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,SAAS,SAAY,GAAG,aAAa,GAAG,SAAS,CAEjF;AAMD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;QAkBzB,0DAA0D;qBACvC,GAAG;;;;;;;;;;;;;QAatB,8DAA8D;sBAChD,GAAG;;;;;;;;;;;;;4BAaS,qBAAqB,CAAC,eAAe,CAAC;;;;;;;;;;;mDA0F7D;YACD,IAAI,EAAE,MAAM,CAAC;YACb,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB,KAAG,OAAO,CAAC;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;oDAkBzC;YACD,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,KAAG,OAAO,CAAC;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAe5C,kDAAkD;2BACzB,6BAA6B;;;;;;;;CA8BzD,CAAC"}

package/dist/openclaw-plugin.js

@@ -0,0 +1,222 @@
+/**
+ * AgentVault OpenClaw Channel Plugin
+ *
+ * Registers AgentVault as a first-class OpenClaw messaging channel.
+ * Messages from the AgentVault UI are decrypted and routed into the
+ * OpenClaw agent loop; agent replies are encrypted and sent back.
+ *
+ * Installation (one-time):
+ *   npx @agentvault/agentvault setup --token=av_tok_...
+ *
+ * After setup, restart OpenClaw — no further configuration needed.
+ */
+import { resolve } from "node:path";
+import { SecureChannel } from "./channel.js";
+// Runtime injected by register() — used in inbound handler
+let _ocRuntime = null;
+// Active channel instances keyed by accountId
+const _channels = new Map();
+export function setOcRuntime(runtime) {
+    _ocRuntime = runtime;
+}
+export function getActiveChannel(accountId = "default") {
+    return _channels.get(accountId);
+}
+// ---------------------------------------------------------------------------
+// Channel plugin definition
+// ---------------------------------------------------------------------------
+export const agentVaultPlugin = {
+    id: "agentvault",
+    meta: {
+        id: "agentvault",
+        label: "AgentVault",
+        selectionLabel: "AgentVault (E2E Encrypted)",
+        docsPath: "https://agentvault.chat/docs",
+        blurb: "Zero-knowledge, end-to-end encrypted messaging between owners and their AI agents.",
+        aliases: ["av", "agent-vault"],
+    },
+    capabilities: {
+        chatTypes: ["direct"],
+    },
+    config: {
+        listAccountIds: (cfg) => {
+            const av = cfg?.channels?.agentvault;
+            return av?.dataDir ? ["default"] : [];
+        },
+        resolveAccount: (cfg, accountId) => {
+            const av = cfg?.channels?.agentvault ?? {};
+            return {
+                accountId: accountId ?? "default",
+                dataDir: av.dataDir ?? "~/.openclaw/agentvault",
+                apiUrl: av.apiUrl ?? "https://api.agentvault.chat",
+                agentName: av.agentName ?? "OpenClaw Agent",
+                httpPort: av.httpPort ?? 18790,
+                configured: Boolean(av.dataDir),
+            };
+        },
+    },
+    gateway: {
+        startAccount: async (ctx) => {
+            const { account, cfg, log, abortSignal } = ctx;
+            if (!account.configured) {
+                throw new Error("AgentVault channel is not configured.\n" +
+                    "Run the one-time setup: npx @agentvault/agentvault setup --token=av_tok_...\n" +
+                    "Then restart OpenClaw: openclaw gateway restart");
+            }
+            const dataDir = resolve(account.dataDir.replace(/^~/, process.env.HOME ?? "~"));
+            log?.(`[AgentVault] starting channel (dataDir=${dataDir})`);
+            const channel = new SecureChannel({
+                // No invite token needed — resuming from persisted enrolled state
+                inviteToken: "",
+                dataDir,
+                apiUrl: account.apiUrl,
+                agentName: account.agentName,
+                onMessage: async (plaintext, metadata) => {
+                    if (!_ocRuntime) {
+                        log?.("[AgentVault] runtime not ready — dropping inbound message");
+                        return;
+                    }
+                    try {
+                        await _handleInbound({ plaintext, metadata, channel, account, cfg });
+                    }
+                    catch (err) {
+                        log?.(`[AgentVault] inbound dispatch error: ${String(err)}`);
+                    }
+                },
+                onStateChange: (state) => {
+                    log?.(`[AgentVault] state → ${state}`);
+                },
+            });
+            _channels.set(account.accountId, channel);
+            // Start local HTTP server for proactive sends when channel is ready
+            const httpPort = account.httpPort;
+            channel.on("ready", () => {
+                channel.startHttpServer(httpPort);
+                log?.(`[AgentVault] HTTP send server listening on http://127.0.0.1:${httpPort}`);
+            });
+            // Respect gateway abort signal (OpenClaw gateway shutdown)
+            abortSignal?.addEventListener("abort", () => {
+                _channels.delete(account.accountId);
+            });
+            await channel.start();
+            return {
+                stop: async () => {
+                    await channel.stop();
+                    _channels.delete(account.accountId);
+                },
+            };
+        },
+    },
+    outbound: {
+        deliveryMode: "direct",
+        targets: [
+            {
+                id: "owner",
+                label: "AgentVault Owner",
+                accountId: "default",
+            },
+            {
+                id: "default",
+                label: "AgentVault Owner (default)",
+                accountId: "default",
+            },
+        ],
+        sendText: async ({ text, accountId, targetId, }) => {
+            const resolvedId = accountId ?? (targetId === "owner" ? "default" : (targetId ?? "default"));
+            const channel = _channels.get(resolvedId);
+            if (!channel) {
+                return { ok: false, error: "AgentVault channel is not connected" };
+            }
+            try {
+                await channel.send(text);
+                return { ok: true };
+            }
+            catch (err) {
+                return { ok: false, error: String(err) };
+            }
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Inbound message handler — routes decrypted messages into the agent loop
+// ---------------------------------------------------------------------------
+async function _handleInbound(params) {
+    const { plaintext, metadata, channel, account, cfg } = params;
+    const core = _ocRuntime;
+    // Stable session key scoped to this AgentVault conversation
+    const sessionKey = `agentvault:${account.accountId}:${(metadata.conversationId ?? "default").slice(0, 8)}`;
+    const senderId = `agentvault:owner`;
+    // Resolve agent routing (respects agents.list routing rules if configured)
+    const route = core.channel.routing.resolveAgentRoute({
+        cfg,
+        channel: "agentvault",
+        accountId: account.accountId,
+        peer: { kind: "direct", id: senderId },
+    });
+    const storePath = core.channel.session.resolveStorePath(cfg?.session?.store, {
+        agentId: route.agentId,
+    });
+    const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);
+    const previousTimestamp = core.channel.session.readSessionUpdatedAt({
+        storePath,
+        sessionKey: route.sessionKey,
+    });
+    // Format the message body with standard OpenClaw envelope (channel label, timestamps, etc.)
+    const body = core.channel.reply.formatAgentEnvelope({
+        channel: "AgentVault",
+        from: "Owner",
+        timestamp: new Date(metadata.timestamp).getTime(),
+        previousTimestamp,
+        envelope: envelopeOptions,
+        body: plaintext,
+    });
+    // Build the inbound context payload OpenClaw expects
+    const ctxPayload = core.channel.reply.finalizeInboundContext({
+        Body: body,
+        RawBody: plaintext,
+        CommandBody: plaintext,
+        From: senderId,
+        To: `agentvault:agent:${account.accountId}`,
+        SessionKey: route.sessionKey,
+        AccountId: account.accountId,
+        ChatType: "direct",
+        ConversationLabel: "AgentVault",
+        SenderName: "Owner",
+        SenderId: senderId,
+        Provider: "agentvault",
+        Surface: "agentvault",
+        MessageSid: metadata.messageId,
+        Timestamp: new Date(metadata.timestamp).getTime(),
+        OriginatingChannel: "agentvault",
+        OriginatingTo: `agentvault:agent:${account.accountId}`,
+        // Owner is cryptographically verified via X3DH + Double Ratchet enrollment
+        CommandAuthorized: true,
+    });
+    // Record session metadata for context continuity
+    await core.channel.session.recordInboundSession({
+        storePath,
+        sessionKey: ctxPayload.SessionKey ?? route.sessionKey,
+        ctx: ctxPayload,
+        onRecordError: (err) => {
+            core.error?.(`[AgentVault] session record failed: ${String(err)}`);
+        },
+    });
+    // Dispatch to the OpenClaw agent loop; deliver replies back through the channel
+    await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+        ctx: ctxPayload,
+        cfg,
+        dispatcherOptions: {
+            deliver: async (payload) => {
+                const text = (payload.text ?? "").trim();
+                if (text) {
+                    await channel.send(text);
+                }
+            },
+            onError: (err, info) => {
+                core.error?.(`[AgentVault] ${info?.kind ?? "reply"} error: ${String(err)}`);
+            },
+        },
+        replyOptions: {},
+    });
+}
+//# sourceMappingURL=openclaw-plugin.js.map

package/dist/openclaw-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-plugin.js","sourceRoot":"","sources":["../src/openclaw-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,2DAA2D;AAC3D,IAAI,UAAU,GAAQ,IAAI,CAAC;AAC3B,8CAA8C;AAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnD,MAAM,UAAU,YAAY,CAAC,OAAY;IACvC,UAAU,GAAG,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAS,GAAG,SAAS;IACpD,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAeD,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE;QACJ,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,cAAc,EAAE,4BAA4B;QAC5C,QAAQ,EAAE,8BAA8B;QACxC,KAAK,EAAE,oFAAoF;QAC3F,OAAO,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC;KAC/B;IACD,YAAY,EAAE;QACZ,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD,MAAM,EAAE;QACN,cAAc,EAAE,CAAC,GAAQ,EAAY,EAAE;YACrC,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC;YACrC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,CAAC,GAAQ,EAAE,SAAkB,EAAqB,EAAE;YAClE,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,wBAAwB;gBAC/C,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,6BAA6B;gBAClD,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,gBAAgB;gBAC3C,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,KAAK;gBAC9B,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC;aAChC,CAAC;QACJ,CAAC;KACF;IACD,OAAO,EAAE;QACP,YAAY,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;YAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,GAK1C,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,yCAAyC;oBACvC,+EAA+E;oBAC/E,iDAAiD,CACpD,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;YAEhF,GAAG,EAAE,CAAC,0CAA0C,OAAO,GAAG,CAAC,CAAC;YAE5D,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,kEAAkE;gBAClE,WAAW,EAAE,EAAE;gBACf,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAE5B,SAAS,EAAE,KAAK,EAAE,SAAiB,EAAE,QAAyB,EAAE,EAAE;oBAChE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,GAAG,EAAE,CAAC,2DAA2D,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;oBACvE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,EAAE,CAAC,wCAAwC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBAED,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,GAAG,EAAE,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;gBACzC,CAAC;aACF,CAAC,CAAC;YAEH,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE1C,oEAAoE;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAClC,GAAG,EAAE,CAAC,+DAA+D,QAAQ,EAAE,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC;YAEH,2DAA2D;YAC3D,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC1C,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAEtB,OAAO;gBACL,IAAI,EAAE,KAAK,IAAI,EAAE;oBACf,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtC,CAAC;aACF,CAAC;QACJ,CAAC;KACF;IACD,QAAQ,EAAE;QACR,YAAY,EAAE,QAAiB;QAC/B,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,kBAAkB;gBACzB,SAAS,EAAE,SAAS;aACrB;YACD;gBACE,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,4BAA4B;gBACnC,SAAS,EAAE,SAAS;aACrB;SACF;QACD,QAAQ,EAAE,KAAK,EAAE,EACf,IAAI,EACJ,SAAS,EACT,QAAQ,GAKT,EAA4C,EAAE;YAC7C,MAAM,UAAU,GAAG,SAAS,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAAC,MAM7B;IACC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC9D,MAAM,IAAI,GAAG,UAAU,CAAC;IAExB,4DAA4D;IAC5D,MAAM,UAAU,GAAG,cAAc,OAAO,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAG,kBAAkB,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACnD,GAAG;QACH,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;KACvC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAClE,SAAS;QACT,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAClD,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjD,iBAAiB;QACjB,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAC3D,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE;QAC3C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,QAAQ;QAClB,iBAAiB,EAAE,YAAY;QAC/B,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjD,kBAAkB,EAAE,YAAY;QAChC,aAAa,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE;QACtD,2EAA2E;QAC3E,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC9C,SAAS;QACT,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;QACrD,GAAG,EAAE,UAAU;QACf,aAAa,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,uCAAuC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC;QAChE,GAAG,EAAE,UAAU;QACf,GAAG;QACH,iBAAiB,EAAE;YACjB,OAAO,EAAE,KAAK,EAAE,OAAgD,EAAE,EAAE;gBAClE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,GAAU,EAAE,IAAwB,EAAE,EAAE;gBAChD,IAAI,CAAC,KAAK,EAAE,CACV,gBAAgB,IAAI,EAAE,IAAI,IAAI,OAAO,WAAW,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;SACF;QACD,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/openclaw-types.d.ts

@@ -0,0 +1,155 @@
+/**
+ * OpenClaw SDK type re-exports with inline fallback declarations.
+ *
+ * If `openclaw` is installed, we re-export the actual SDK types for full
+ * type-safety. Otherwise, we declare compatible fallback types so the
+ * plugin compiles standalone (e.g., during npm publish or in older envs).
+ *
+ * IMPORTANT: All runtime usage of OpenClaw APIs must still use feature
+ * detection (typeof checks, try/catch dynamic imports) — these types
+ * are purely for compile-time correctness.
+ */
+/** OpenClaw plugin API passed to register(). */
+export interface OpenClawPluginApi {
+    runtime: PluginRuntime;
+    registerChannel(opts: {
+        plugin: unknown;
+    }): void;
+    registerTool?(opts: unknown, flags?: {
+        optional?: boolean;
+    }): void;
+    registerCommand?(opts: unknown): void;
+    registerHttpRoute?(opts: HttpRouteRegistration): void;
+    on?(event: string, handler: (...args: any[]) => void | Promise<void>): void;
+}
+/** OpenClaw runtime object — exposes channel, error, and other subsystems. */
+export interface PluginRuntime {
+    channel: {
+        routing: {
+            resolveAgentRoute(opts: unknown): {
+                agentId: string;
+                sessionKey: string;
+            };
+        };
+        session: {
+            resolveStorePath(store: unknown, opts: {
+                agentId: string;
+            }): string;
+            readSessionUpdatedAt(opts: {
+                storePath: string;
+                sessionKey: string;
+            }): number | undefined;
+            recordInboundSession(opts: unknown): Promise<void>;
+        };
+        reply: {
+            resolveEnvelopeFormatOptions(cfg: unknown): unknown;
+            formatAgentEnvelope(opts: unknown): string;
+            finalizeInboundContext(payload: Record<string, unknown>): Record<string, unknown>;
+            dispatchReplyWithBufferedBlockDispatcher(opts: unknown): Promise<void>;
+        };
+    };
+    error?(...args: unknown[]): void;
+}
+/** Context passed to gateway.startAccount(). */
+export interface ChannelGatewayContext<TAccount = ResolvedAccountBase> {
+    account: TAccount;
+    cfg: unknown;
+    log?: {
+        info(msg: string): void;
+        warn?(msg: string): void;
+        error?(msg: string): void;
+    } | ((msg: string) => void);
+    abortSignal?: AbortSignal;
+}
+/** Minimal resolved account shape from OpenClaw config resolution. */
+export interface ResolvedAccountBase {
+    accountId: string;
+    configured: boolean;
+    dataDir: string;
+    apiUrl: string;
+    agentName: string;
+    httpPort: number;
+}
+/** Context passed to outbound.sendPayload(). */
+export interface ChannelOutboundPayloadContext {
+    payload: ReplyPayload;
+    sessionKey: string;
+    accountId?: string;
+    targetId?: string;
+}
+/** Structured reply payload from OpenClaw v2026.3.2+. */
+export interface ReplyPayload {
+    text?: string;
+    mediaUrls?: string[];
+    isReasoning?: boolean;
+    suggestedActions?: SuggestedAction[];
+    metadata?: Record<string, unknown>;
+}
+/** Suggested action attached to a reply payload. */
+export interface SuggestedAction {
+    label: string;
+    action: string;
+    payload?: Record<string, unknown>;
+}
+/** Registration options for registerHttpRoute(). */
+export interface HttpRouteRegistration {
+    path: string;
+    method?: "GET" | "POST" | "PUT" | "DELETE";
+    handler: (req: HttpRouteRequest) => Promise<HttpRouteResponse> | HttpRouteResponse;
+}
+/** Simplified request object from OpenClaw managed HTTP routes. */
+export interface HttpRouteRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    body?: unknown;
+    remoteAddress?: string;
+}
+/** Response object for OpenClaw managed HTTP routes. */
+export interface HttpRouteResponse {
+    status: number;
+    headers?: Record<string, string>;
+    body: unknown;
+}
+/** Hook event for message_sent. */
+export interface MessageSentEvent {
+    messageId: string;
+    channelId: string;
+    sessionKey: string;
+    timestamp: number;
+    deliveryStatus: "delivered" | "failed" | "pending";
+}
+/** Hook event for session_start. */
+export interface SessionStartEvent {
+    sessionKey: string;
+    agentId: string;
+    timestamp: number;
+}
+/** Hook event for session_end. */
+export interface SessionEndEvent {
+    sessionKey: string;
+    agentId: string;
+    timestamp: number;
+    reason?: string;
+}
+/** Agent event payload from openclaw/dist/plugin-sdk/infra/agent-events.js. */
+export interface AgentEventPayload {
+    type: string;
+    agentId: string;
+    timestamp: number;
+    data?: Record<string, unknown>;
+}
+/** Transcript update payload from openclaw/dist/plugin-sdk/sessions/transcript-events.js. */
+export interface TranscriptUpdatePayload {
+    sessionKey: string;
+    delta: string;
+    timestamp: number;
+    role?: "assistant" | "user" | "system";
+}
+/** Hook handler map type. */
+export type PluginHookHandlerMap = {
+    message_sent?: (event: MessageSentEvent) => void | Promise<void>;
+    session_start?: (event: SessionStartEvent) => void | Promise<void>;
+    session_end?: (event: SessionEndEvent) => void | Promise<void>;
+};
+//# sourceMappingURL=openclaw-types.d.ts.map

package/dist/openclaw-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-types.d.ts","sourceRoot":"","sources":["../src/openclaw-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,YAAY,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACnE,eAAe,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,iBAAiB,CAAC,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtD,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7E;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE;QACP,OAAO,EAAE;YAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACvF,OAAO,EAAE;YACP,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAA;aAAE,GAAG,MAAM,CAAC;YACpE,oBAAoB,CAAC,IAAI,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,GAAG,MAAM,GAAG,SAAS,CAAC;YAC1F,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SACpD,CAAC;QACF,KAAK,EAAE;YACL,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;YACpD,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;YAC3C,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClF,wCAAwC,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SACxE,CAAC;KACH,CAAC;IACF,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClC;AAED,gDAAgD;AAChD,MAAM,WAAW,qBAAqB,CAAC,QAAQ,GAAG,mBAAmB;IACnE,OAAO,EAAE,QAAQ,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC;IACjH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;CACpF;AAED,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;CACpD;AAED,oCAAoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,6FAA6F;AAC7F,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;CACxC;AAED,6BAA6B;AAC7B,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE,CAAC"}

package/dist/policy-enforcer.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Policy Enforcer — validates skill invocations against the 5-stage policy pipeline.
+ *
+ * Pipeline stages:
+ *   1. Parse    — extract action intent from request
+ *   2. Validate — schema validation of policy rules
+ *   3. Enforce  — apply tool, model, and rate policies
+ *   4. Log      — emit av.policy.evaluate telemetry span
+ *   5. Report   — aggregate policy metrics
+ *
+ * Integration points:
+ *   - AgentVaultMcpServer wraps tool handlers with enforce()
+ *   - Channel.deliver() checks before forwarding sensitive messages
+ *   - agentvault_check_policy MCP tool calls evaluate()
+ */
+import type { SkillDefinition } from "./mcp-server.js";
+import { type TelemetrySpan } from "@agentvault/crypto";
+export interface PolicyContext {
+    skillName: string;
+    toolName?: string;
+    model?: string;
+    args?: Record<string, unknown>;
+    agentId?: string;
+}
+export interface PolicyResult {
+    allowed: boolean;
+    violations: PolicyViolation[];
+    stage: "parse" | "validate" | "enforce" | "log" | "report";
+}
+export interface PolicyViolation {
+    ruleId: string;
+    scope: "tool" | "model" | "rate" | "network" | "custom";
+    action: "block" | "warn" | "log";
+    type: string;
+    message: string;
+    details?: Record<string, unknown>;
+}
+export interface PolicyMetrics {
+    totalEvaluations: number;
+    totalBlocks: number;
+    totalWarnings: number;
+    bySkill: Record<string, {
+        evaluations: number;
+        blocks: number;
+    }>;
+    byRule: Record<string, number>;
+}
+export declare class PolicyEnforcer {
+    private skills;
+    private metrics;
+    private spanBuffer;
+    /**
+     * Register a skill definition for policy evaluation.
+     */
+    registerSkill(skill: SkillDefinition): void;
+    /**
+     * Full 5-stage policy pipeline evaluation.
+     */
+    evaluate(ctx: PolicyContext): PolicyResult;
+    /**
+     * Wrap an MCP tool handler with policy enforcement.
+     * Returns a function that checks policy before calling the original handler.
+     */
+    wrapHandler(skillName: string, handler: (args: Record<string, unknown>) => Promise<unknown>): (args: Record<string, unknown>) => Promise<unknown>;
+    /**
+     * Get accumulated policy metrics.
+     */
+    getMetrics(): PolicyMetrics;
+    /**
+     * Drain buffered telemetry spans.
+     */
+    drainSpans(): TelemetrySpan[];
+    /**
+     * Reset all metrics (for testing).
+     */
+    resetMetrics(): void;
+}
+//# sourceMappingURL=policy-enforcer.d.ts.map

package/dist/policy-enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-enforcer.d.ts","sourceRoot":"","sources":["../src/policy-enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAM5B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;CAC5D;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxD,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAA2C;IACzD,OAAO,CAAC,OAAO,CAMb;IACF,OAAO,CAAC,UAAU,CAAuB;IAEzC;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAI3C;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY;IAyF1C;;;OAGG;IACH,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC3D,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;IAsBtD;;OAEG;IACH,UAAU,IAAI,aAAa;IAI3B;;OAEG;IACH,UAAU,IAAI,aAAa,EAAE;IAM7B;;OAEG;IACH,YAAY,IAAI,IAAI;CASrB"}

package/dist/setup.d.ts

@@ -0,0 +1,27 @@
+/**
+ * AgentVault one-time setup command.
+ *
+ * Runs enrollment + waits for owner approval + persists state,
+ * then auto-registers the agentvault channel in openclaw config.
+ *
+ * Usage: npx @agentvault/agentvault setup --token=av_tok_...
+ */
+export declare function runSetupCommand(options: {
+    token: string;
+    name: string;
+    apiUrl: string;
+    dataDir: string;
+    accountId?: string;
+    force?: boolean;
+}): Promise<void>;
+/**
+ * Install/update the plugin in OpenClaw's extensions directory.
+ * Returns true if the plugin is installed (or was already up-to-date).
+ */
+export declare function installPlugin(env: NodeJS.ProcessEnv): boolean;
+/**
+ * Configure pm2 to manage the OpenClaw gateway process.
+ * Returns true if pm2 was configured (or already configured).
+ */
+export declare function configurePm2(env: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=setup.d.ts.map

package/dist/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ShB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAqC7D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CA4D5D"}