@agentvault/agentvault 0.19.47 → 0.19.48

package/dist/openclaw-entry.js

@@ -49291,6 +49291,15 @@ async function handleInbound(params) {
     }
   }
   const plaintext = isRoomMessage ? _stripMentions(rawPlaintext, account.agentName ?? "", account.accountId ?? "") : rawPlaintext;
+  if (isRoomMessage || isA2AMessage) {
+    try {
+      const woke = await requestHeartbeatNow({ reason: `AgentVault ${isRoomMessage ? "room" : "A2A"} message received` });
+      if (woke) {
+        console.log(`[AgentVault] Heartbeat triggered for ${isRoomMessage ? "room" : "A2A"} message`);
+      }
+    } catch {
+    }
+  }
   const startTime = Date.now();
   const traceId = randomBytes(16).toString("hex");
   const rootSpanId = randomBytes(8).toString("hex");
@@ -50351,6 +50360,59 @@ var openclaw_entry_default = {
         } catch {
         }
       });
+      api.on("before_tool_call", async (event) => {
+        try {
+          const toolName = event?.toolName;
+          const agentId = event?.agentId;
+          if (!toolName || !_channels.size) return {};
+          for (const [, ch] of _channels) {
+            const enforcer = ch?._policyEnforcer;
+            if (!enforcer) continue;
+            for (const [skillName] of enforcer.skills ?? []) {
+              const result = enforcer.evaluate({ skillName, toolName, agentId });
+              if (result && !result.allowed) {
+                console.log(`[AgentVault] Tool "${toolName}" denied by policy \u2014 requesting approval`);
+                const reason = result.violations?.[0]?.message ?? "";
+                return {
+                  requireApproval: true,
+                  approvalReason: `AgentVault policy: tool "${toolName}" requires owner approval. ${reason}`.trim()
+                };
+              }
+            }
+          }
+          return {};
+        } catch {
+          return {};
+        }
+      });
+      api.on("before_dispatch", async (event) => {
+        try {
+          const senderHub = event?.inbound?.metadata?.senderHubAddress;
+          if (!senderHub || !_channels.size) return;
+          for (const [, ch] of _channels) {
+            const apiUrl = ch?.config?.apiUrl;
+            if (!apiUrl) continue;
+            try {
+              const res = await fetch(`${apiUrl}/api/v1/hub/verify/${senderHub}`);
+              if (res.ok) {
+                const trust = await res.json();
+                if (event.inbound.metadata) {
+                  event.inbound.metadata._avTrustContext = {
+                    senderHub,
+                    trustTier: trust.trust_tier,
+                    verified: trust.verified,
+                    certificationStatus: trust.certification_status
+                  };
+                }
+                console.log(`[AgentVault] Injected trust context for ${senderHub}: ${trust.trust_tier}`);
+              }
+            } catch {
+            }
+            break;
+          }
+        } catch {
+        }
+      });
     }
     Promise.resolve().then(() => (init_openclaw_compat(), openclaw_compat_exports)).then(async ({ onAgentEvent: onAgentEvent2, onSessionTranscriptUpdate: onSessionTranscriptUpdate2 }) => {
       onAgentEvent2((event) => {