@alfe.ai/openclaw-secrets 0.2.24 → 0.2.25

package/dist/input-validation.js

@@ -0,0 +1,166 @@
+export const VALID_SCOPES = ["org", "team", "project", "agent"];
+export const VALID_CATEGORIES = [
+    "login", "api_key", "database", "ssh_key", "certificate",
+    "secure_note", "credit_card", "identity", "wifi", "other",
+];
+export const VALID_FORMATS = [
+    "text", "email", "url", "phone", "date", "number", "json",
+];
+export const VALID_SENSITIVITIES = ["plaintext", "encrypted"];
+const FIELD_KEY_REGEX = /^[a-zA-Z0-9_./-]{1,64}$/;
+const UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const CURSOR_REGEX = /^[A-Za-z0-9+/_=-]+$/;
+const SUSPICIOUS_PLAINTEXT_KEYS = [
+    "password", "token", "secret", "apikey", "api_key", "pwd",
+];
+function parseRequiredString(raw, field, max) {
+    if (typeof raw !== "string" || raw.length === 0) {
+        throw new Error(`${field} is required`);
+    }
+    if (raw.length > max) {
+        throw new Error(`${field} must be ${String(max)} characters or fewer`);
+    }
+    return raw;
+}
+export function parseOptionalString(raw, field, max) {
+    if (raw === undefined)
+        return undefined;
+    return parseRequiredString(raw, field, max);
+}
+export function parseScope(raw, field = "scope") {
+    if (typeof raw !== "string" || !VALID_SCOPES.includes(raw)) {
+        throw new Error(`${field} must be one of ${VALID_SCOPES.join(", ")}`);
+    }
+    return raw;
+}
+export function parseSecretName(raw) {
+    return parseRequiredString(raw, "name", 128);
+}
+export function parseFieldKey(raw) {
+    const value = parseRequiredString(raw, "field key", 64);
+    if (!FIELD_KEY_REGEX.test(value)) {
+        throw new Error("field key must match ^[a-zA-Z0-9_./-]{1,64}$");
+    }
+    return value;
+}
+export function parseSecretId(raw) {
+    const value = parseRequiredString(raw, "secretId", 64);
+    if (!UUID_V4.test(value))
+        throw new Error("secretId must be a UUID v4");
+    return value;
+}
+export function parseCategory(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "string" || !VALID_CATEGORIES.includes(raw)) {
+        throw new Error(`category must be one of ${VALID_CATEGORIES.join(", ")}`);
+    }
+    return raw;
+}
+export function parseFormat(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "string" || !VALID_FORMATS.includes(raw)) {
+        throw new Error(`format must be one of ${VALID_FORMATS.join(", ")}`);
+    }
+    return raw;
+}
+export function parseSensitivity(raw, field = "sensitivity") {
+    if (typeof raw !== "string" || !VALID_SENSITIVITIES.includes(raw)) {
+        throw new Error(`${field} must be one of ${VALID_SENSITIVITIES.join(", ")}`);
+    }
+    return raw;
+}
+export function parseFieldValue(args) {
+    const { raw, key, sensitivity, format, field = "value" } = args;
+    if (typeof raw !== "string")
+        throw new Error(`${field} must be a string`);
+    const max = sensitivity === "encrypted" ? 16_384 : format === "json" ? 8_192 : 1_024;
+    if (raw.length > max)
+        throw new Error(`${field} must be ${String(max)} characters or fewer`);
+    if (sensitivity === "plaintext") {
+        const normalizedKey = key.toLowerCase();
+        if (SUSPICIOUS_PLAINTEXT_KEYS.some((fragment) => normalizedKey.includes(fragment))) {
+            throw new Error(`field '${key}' looks sensitive — use encrypted sensitivity`);
+        }
+    }
+    if (format === "json") {
+        try {
+            JSON.parse(raw);
+        }
+        catch {
+            throw new Error(`${field} must contain valid JSON`);
+        }
+    }
+    return raw;
+}
+export function parseFields(raw) {
+    if (!Array.isArray(raw) || raw.length === 0) {
+        throw new Error("fields must be a non-empty array");
+    }
+    if (raw.length > 32)
+        throw new Error("fields cannot exceed 32 entries");
+    const keys = new Set();
+    return raw.map((candidate, index) => {
+        if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate)) {
+            throw new Error(`fields[${String(index)}] must be an object`);
+        }
+        const value = candidate;
+        const key = parseFieldKey(value.key);
+        if (keys.has(key))
+            throw new Error(`duplicate field key: ${key}`);
+        keys.add(key);
+        const sensitivity = parseSensitivity(value.sensitivity, `fields[${String(index)}].sensitivity`);
+        const format = parseFormat(value.format);
+        return {
+            key,
+            sensitivity,
+            format,
+            value: parseFieldValue({
+                raw: value.value,
+                key,
+                sensitivity,
+                format,
+                field: `fields[${String(index)}].value`,
+            }),
+        };
+    });
+}
+export function parseTags(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw))
+        throw new Error("tags must be an array");
+    if (raw.length > 16)
+        throw new Error("tags cannot exceed 16 entries");
+    const tags = raw.map((tag, index) => parseRequiredString(tag, `tags[${String(index)}]`, 64));
+    if (new Set(tags).size !== tags.length)
+        throw new Error("tags must be unique");
+    return tags;
+}
+export function parseSecretFilters(params) {
+    const category = parseCategory(params.category);
+    const tag = parseOptionalString(params.tag, "tag", 64);
+    const fieldKey = params.fieldKey === undefined ? undefined : parseFieldKey(params.fieldKey);
+    if ([category, tag, fieldKey].filter((value) => value !== undefined).length > 1) {
+        throw new Error("at most one of category, tag, or fieldKey may be supplied");
+    }
+    return { category, tag, fieldKey };
+}
+export function parseHistoryLimit(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "number" || !Number.isInteger(raw) || raw < 1 || raw > 100) {
+        throw new Error("limit must be an integer between 1 and 100");
+    }
+    return raw;
+}
+export function parseHistoryCursor(raw) {
+    if (raw === undefined)
+        return undefined;
+    const cursor = parseRequiredString(raw, "cursor", 4_096);
+    if (!CURSOR_REGEX.test(cursor))
+        throw new Error("cursor has an invalid format");
+    return cursor;
+}
+//# sourceMappingURL=input-validation.js.map

package/dist/input-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.js","sourceRoot":"","sources":["../src/input-validation.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa;IACxD,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO;CAC1D,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAC1D,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAuB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAElF,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,MAAM,OAAO,GAAG,wEAAwE,CAAC;AACzF,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,yBAAyB,GAAG;IAChC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK;CACjD,CAAC;AAEX,SAAS,mBAAmB,CAAC,GAAY,EAAE,KAAa,EAAE,GAAW;IACnE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,KAAa,EACb,GAAW;IAEX,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAY,EAAE,KAAK,GAAG,OAAO;IACtD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAkB,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAqB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,2BAA2B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAkB,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yBAAyB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,KAAK,GAAG,aAAa;IAClE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAuB,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACrF,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7F,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,+CAA+C,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,SAAoC,CAAC;QACnD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,GAAG;YACH,WAAW;YACX,MAAM;YACN,KAAK,EAAE,eAAe,CAAC;gBACrB,GAAG,EAAE,KAAK,CAAC,KAAK;gBAChB,GAAG;gBACH,WAAW;gBACX,MAAM;gBACN,KAAK,EAAE,UAAU,MAAM,CAAC,KAAK,CAAC,SAAS;aACxC,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,QAAQ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA+B;IAKhE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/scope-resolve.d.ts

@@ -12,7 +12,7 @@ export interface ToolContextLike {
  *
  *   - omitted or empty                 → fill from ctx.agentId
  *   - the literal string "agent"        → fill from ctx.agentId (LLM mistake)
- *   - a real ID (e.g. "agt_…")          → use as-is
+ *   - the current agent ID (e.g. "agt_…") → normalize to runtime casing
  *
  * Other scopes (org/team/project) require an explicit scopeId from the
  * `secret_list_scopes` tool — they have no sensible default.

package/dist/scope-resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-resolve.d.ts","sourceRoot":"","sources":["../src/scope-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,eAAe,GACnB,MAAM,CAiCR;AAED,eAAO,MAAM,oBAAoB,0OACmM,CAAC"}
+{"version":3,"file":"scope-resolve.d.ts","sourceRoot":"","sources":["../src/scope-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,eAAe,GACnB,MAAM,CAuCR;AAED,eAAO,MAAM,oBAAoB,0OACmM,CAAC"}

package/dist/scope-resolve.js

@@ -8,7 +8,7 @@
  *
  *   - omitted or empty                 → fill from ctx.agentId
  *   - the literal string "agent"        → fill from ctx.agentId (LLM mistake)
- *   - a real ID (e.g. "agt_…")          → use as-is
+ *   - the current agent ID (e.g. "agt_…") → normalize to runtime casing
  *
  * Other scopes (org/team/project) require an explicit scopeId from the
  * `secret_list_scopes` tool — they have no sensible default.
@@ -28,10 +28,16 @@ export function resolveScopeId(scope, params, ctx) {
             (!explicit || explicit.toLowerCase() === fallback.toLowerCase())) {
             return fallback;
         }
+        if (fallback && explicit) {
+            throw new Error("agent scopeId must match the current runtime agentId");
+        }
         const resolved = explicit ?? fallback ?? "";
         if (!resolved) {
             throw new Error("agent scope requires either ctx.agentId from the runtime or an explicit agent scopeId from secret_list_scopes");
         }
+        if (resolved.length > 256) {
+            throw new Error("scopeId must be 256 characters or fewer");
+        }
         return resolved;
     }
     if (typeof params.scopeId !== "string" || params.scopeId.length === 0) {

package/dist/scope-resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-resolve.js","sourceRoot":"","sources":["../src/scope-resolve.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAkB,EAClB,MAA+B,EAC/B,GAAoB;IAEpB,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,KAAK,OAAO;YAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;QAC7B,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,IACE,QAAQ;YACR,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,EAChE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAC/B,kOAAkO,CAAC"}
+{"version":3,"file":"scope-resolve.js","sourceRoot":"","sources":["../src/scope-resolve.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAkB,EAClB,MAA+B,EAC/B,GAAoB;IAEpB,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,KAAK,OAAO;YAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,OAAO;YAChB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;QAC7B,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,IACE,QAAQ;YACR,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,EAChE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAC/B,kOAAkO,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-secrets",
-  "version": "0.2.24",
+  "version": "0.2.25",
   "description": "OpenClaw plugin — per-scope (org/team/project/agent) encrypted secret store. Agents encrypt/decrypt locally with AES-256-GCM; KMS data keys are fetched via the Alfe secrets service.",
   "type": "module",
   "main": "dist/index.js",
@@ -10,10 +10,14 @@
       "./dist/index.js"
     ]
   },
+  "files": [
+    "dist",
+    "openclaw.plugin.json"
+  ],
   "license": "UNLICENSED",
   "dependencies": {
-    "@alfe.ai/agent-api-client": "0.14.0",
-    "@alfe.ai/config": "0.4.0"
+    "@alfe.ai/agent-api-client": "0.15.0",
+    "@alfe.ai/config": "0.4.1"
   },
   "devDependencies": {
     "@types/node": "^25.4.0",
@@ -30,7 +34,7 @@
     "plugin"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
     "typecheck": "tsc --noEmit",
     "lint": "eslint .",
     "test": "vitest run --passWithNoTests"

package/.turbo/turbo-build.log

@@ -1,4 +0,0 @@
-
-> @alfe.ai/openclaw-secrets@0.2.24 build /home/runner/work/alfe/alfe/packages/openclaw-secrets
-> tsc
-

package/CHANGELOG.md

@@ -1,322 +0,0 @@
-# @alfe.ai/openclaw-secrets
-
-## 0.2.24
-
-### Patch Changes
-
-- Updated dependencies [0b8d3f5]
-- Updated dependencies [0b8d3f5]
-- Updated dependencies [0b8d3f5]
-- Updated dependencies [0b8d3f5]
-  - @alfe.ai/agent-api-client@0.14.0
-  - @alfe.ai/config@0.4.0
-
-## 0.2.23
-
-### Patch Changes
-
-- Updated dependencies [84bd15e]
-  - @alfe.ai/agent-api-client@0.13.0
-
-## 0.2.22
-
-### Patch Changes
-
-- Updated dependencies [c8c8166]
-  - @alfe.ai/agent-api-client@0.12.0
-
-## 0.2.21
-
-### Patch Changes
-
-- Updated dependencies [fb19a43]
-- Updated dependencies [c38f020]
-  - @alfe.ai/agent-api-client@0.11.2
-
-## 0.2.20
-
-### Patch Changes
-
-- Updated dependencies [3dd0528]
-  - @alfe.ai/agent-api-client@0.11.1
-
-## 0.2.19
-
-### Patch Changes
-
-- Updated dependencies [0cb83b6]
-- Updated dependencies [194e0b1]
-- Updated dependencies [09cb229]
-- Updated dependencies [d392820]
-  - @alfe.ai/agent-api-client@0.11.0
-
-## 0.2.18
-
-### Patch Changes
-
-- bb910e1: Allow free-form secret names. A secret's `name` is a user-friendly display label — not an identifier — so the slug-only regex (`^[a-zA-Z0-9_./-]$`) is dropped; any non-empty string up to 128 chars is accepted. The unique identifier remains `secretId`. Also normalise a case-mangled own-agent `scopeId` back to the runtime's canonical `ctx.agentId` so the server's exact-match self-scope check passes.
-- Updated dependencies [4f11322]
-  - @alfe.ai/agent-api-client@0.10.0
-
-## 0.2.17
-
-### Patch Changes
-
-- Updated dependencies [41faec4]
-  - @alfe.ai/agent-api-client@0.9.0
-
-## 0.2.16
-
-### Patch Changes
-
-- 30c06d6: Capture tool failures for Sentry: wrap tool registration with installToolErrorCapture so thrown and silently-returned tool errors emit a detector-matched [ERROR] line the Alfe daemon reports to Sentry.
-- Updated dependencies [30c06d6]
-  - @alfe.ai/agent-api-client@0.8.0
-
-## 0.2.15
-
-### Patch Changes
-
-- Updated dependencies [019c5e5]
-  - @alfe.ai/agent-api-client@0.7.1
-
-## 0.2.14
-
-### Patch Changes
-
-- Updated dependencies [930e47b]
-  - @alfe.ai/agent-api-client@0.7.0
-
-## 0.2.13
-
-### Patch Changes
-
-- Updated dependencies [3cb626d]
-  - @alfe.ai/agent-api-client@0.6.1
-
-## 0.2.12
-
-### Patch Changes
-
-- Updated dependencies [0f90085]
-  - @alfe.ai/agent-api-client@0.6.0
-
-## 0.2.11
-
-### Patch Changes
-
-- Updated dependencies [4f07d4a]
-  - @alfe.ai/agent-api-client@0.5.0
-
-## 0.2.10
-
-### Patch Changes
-
-- Updated dependencies [cf857c6]
-  - @alfe.ai/config@0.3.0
-
-## 0.2.9
-
-### Patch Changes
-
-- a7fcb13: Add npm package metadata (homepage, keywords, author) and README backlinks to alfe.ai and docs.alfe.ai for discoverability + SEO. Metadata/docs only — no code or API changes.
-- Updated dependencies [73aaddb]
-- Updated dependencies [156618e]
-- Updated dependencies [61ade51]
-- Updated dependencies [a7fcb13]
-- Updated dependencies [156618e]
-  - @alfe.ai/agent-api-client@0.4.0
-  - @alfe.ai/config@0.2.0
-
-## 0.2.8
-
-### Patch Changes
-
-- Updated dependencies [c6e316f]
-- Updated dependencies [4da52e5]
-  - @alfe.ai/config@0.1.0
-  - @alfe.ai/agent-api-client@0.3.0
-
-## 0.2.7
-
-### Patch Changes
-
-- Updated dependencies [2c81c60]
-  - @alfe.ai/agent-api-client@0.2.3
-
-## 0.2.6
-
-### Patch Changes
-
-- Updated dependencies [62c3f05]
-  - @alfe.ai/agent-api-client@0.2.2
-
-## 0.2.5
-
-### Patch Changes
-
-- Updated dependencies [6927804]
-  - @alfe.ai/agent-api-client@0.2.1
-
-## 0.2.4
-
-### Patch Changes
-
-- Updated dependencies [9beffcc]
-- Updated dependencies [4a4cd3e]
-- Updated dependencies [4a4cd3e]
-- Updated dependencies [48e58c5]
-- Updated dependencies [6cbd063]
-  - @alfe.ai/agent-api-client@0.2.0
-
-## 0.2.3
-
-### Patch Changes
-
-- Updated dependencies [aa889fe]
-  - @alfe.ai/config@0.0.9
-
-## 0.2.2
-
-### Patch Changes
-
-- Updated dependencies [89723a9]
-  - @alfe.ai/agent-api-client@0.1.4
-
-## 0.2.1
-
-### Patch Changes
-
-- Updated dependencies [893a67a]
-  - @alfe.ai/agent-api-client@0.1.3
-
-## 0.2.0
-
-### Minor Changes
-
-- 28b68cd: Auto-fill `scopeId` from `ctx.agentId` for `scope === "agent"` and tighten every tool's schema description so an LLM can't pick the literal word `"agent"` as the ID. Previously, the plugin's tool schemas required `scopeId` with no description, which led to LLMs writing the literal string `"agent"` and stranding secret rows at `scopeId="agent"` instead of the real agent ID. The corresponding server-side enforcement (`requireAgentSelfScope`) now rejects that same mistake, but the plugin should make the happy path discoverable rather than fail-closed.
-
-  Behaviour:
-
-  - `scope: "agent"` with `scopeId` omitted, empty, or the literal `"agent"` → falls back to `ctx.agentId` from the OpenClaw runtime.
-  - `scope: "agent"` with a real agent ID → passed through (server-side enforces it must equal the calling agent).
-  - `scope: "org" | "team" | "project"` → `scopeId` is still required and validated as before.
-
-  `scopeId` is now optional in the JSON schema for `scope: "agent"`. Agents on older runtimes that don't populate `ctx.agentId` will see a clear error pointing them at `secret_list_scopes` for the canonical ID.
-
-## 0.1.15
-
-### Patch Changes
-
-- Updated dependencies [47b38af]
-  - @alfe.ai/agent-api-client@0.1.2
-
-## 0.1.14
-
-### Patch Changes
-
-- 0ebc784: Use `registerMemoryPromptSupplement` instead of `registerMemoryPromptSection`.
-
-  OpenClaw 2026.5+ added a runtime gate that rejects `registerMemoryPromptSection` calls from plugins whose `kind` is not `"memory"` (the secrets plugin is `kind: "secrets"`). The thrown error caused the entire plugin to fail during `register()`, so all 12 `secret_*` tools never reached the agent's tool inventory — agents reported they had "no API access to store secrets" even though the plugin was listed as enabled.
-
-  `registerMemoryPromptSupplement` is the correct API for non-memory plugins to add guidance text to the active memory plugin's prompt section. Same builder signature, no behavioural change otherwise.
-
-## 0.1.13
-
-### Patch Changes
-
-- 9147ccc: Declare manifest contracts (`activation.onStartup`, `contracts.tools`) so OpenClaw 2026.5+'s effective-plugin-set loader imports these plugins. Without these declarations, the new runtime silently skips the plugin entirely — never imports it, never calls `activate(api)`, never establishes its connections. Backwards-compatible with OpenClaw 2026.4.x (already supports the same fields). No source-code or public-API changes — manifest-only patches.
-
-  - `memory-cloud`, `metrics`, `mcp-bundler`, `openclaw` (alfe-core), `google-chat`, `voice`, `webhooks` set `activation.onStartup: true` because they need to load at boot to maintain persistent connections, attach hooks, or run service polls.
-  - `secrets`, `search`, `database`, `google`, `mobile`, `teams`, `whatsapp` set `activation.onStartup: false` — they're tool-only and load on demand once a tool is invoked.
-  - `mcp-bundler` omits `contracts.tools` because it registers tools dynamically via the factory form of `api.registerTool(...)`; `onStartup: true` forces import without static tool names.
-
-## 0.1.12
-
-### Patch Changes
-
-- 229045a: Fix plugin id mismatch — set the runtime `plugin.id` (and the manifest `id` for memory-cloud) to the fully qualified package name. OpenClaw 2026.5.x validates that the plugin module's exported id matches the package name; the previous short ids (`"secrets"`, `"memory-cloud"`) caused the plugins to fail validation and not load on agents running newer OpenClaw runtimes.
-
-## 0.1.11
-
-### Patch Changes
-
-- 4de07e1: Multi-field secrets. New tools: `secret_get_full`, `secret_get_field`, `secret_set_field`, `secret_remove_field`, `secret_update_metadata`, `secret_search`, `secret_get_history`. `secret_set` now accepts an array of fields with `sensitivity: "plaintext" | "encrypted"` and `format: "text" | "email" | "url" | "phone" | "date" | "number" | "json"`. Existing `{ value: "..." }` shorthand on `secret_set` and `secret_get` keep working — they map to a single field with key `"value"`. Per-field encryption context binds each encrypted field to its key.
-- Updated dependencies [229b827]
-- Updated dependencies [4de07e1]
-  - @alfe.ai/agent-api-client@0.1.1
-
-## 0.1.10
-
-### Patch Changes
-
-- Updated dependencies [a86024c]
-  - @alfe.ai/agent-api-client@0.1.0
-
-## 0.1.9
-
-### Patch Changes
-
-- Updated dependencies [f0a9368]
-  - @alfe.ai/agent-api-client@0.0.13
-
-## 0.1.8
-
-### Patch Changes
-
-- Remove required apiUrl/agentApiKey from openclaw.plugin.json config schema — OpenClaw was rejecting the plugin before code ran because no config was provided. Plugin now uses resolveConfig() internally.
-
-## 0.1.7
-
-### Patch Changes
-
-- Updated dependencies [4f3b54a]
-  - @alfe.ai/agent-api-client@0.0.12
-
-## 0.1.6
-
-### Patch Changes
-
-- eadf368: Use resolveConfig() from @alfe.ai/config instead of requiring apiUrl/agentApiKey in plugin config
-
-## 0.1.5
-
-### Patch Changes
-
-- 6921672: Fix plugin install and activation issues
-
-  - openclaw-memory-cloud: Add `openclaw.extensions`, refactor to use AgentApiClient instead of raw MemoryClient
-  - openclaw-secrets: Add missing `openclaw.extensions` field
-  - openclaw-google-chat: Fix poller not starting — registrationMode guard was blocking registerService
-  - agent-api-client: Add memory API methods, include Atlassian OAuth clientId/clientSecret in credentials
-  - All plugins: Remove registrationMode guard from activate() — OpenClaw handles mode filtering via registerService lifecycle
-
-- Updated dependencies [6921672]
-  - @alfe.ai/agent-api-client@0.0.11
-
-## 0.1.4
-
-### Patch Changes
-
-- c6b4fb3: Read plugin version from package.json instead of hardcoding, remove stale version field from openclaw.plugin.json
-
-## 0.1.3
-
-### Patch Changes
-
-- Updated dependencies
-  - @alfe.ai/agent-api-client@0.0.10
-
-## 0.1.2
-
-### Patch Changes
-
-- Updated dependencies [21c2a8f]
-  - @alfe.ai/agent-api-client@0.0.9
-
-## 0.1.1
-
-### Patch Changes
-
-- Updated dependencies [bb1cde2]
-  - @alfe.ai/agent-api-client@0.0.8

package/dist/types.d.ts

@@ -1,18 +0,0 @@
-/**
- * Plugin-local types. Shared contract types (SecretScope, EncryptedEnvelopeV1,
- * SecretMetadata, etc.) live in `@alfe/types` and are re-exported by
- * `@alfe.ai/agent-api-client`; import from there so we have one canonical
- * source of truth across every agent HTTP surface.
- */
-export interface SecretsConfig {
-    /**
-     * Base URL of the Alfe API host — the same value `@alfe.ai/agent-api-client`
-     * expects (normally read from `ALFE_API_URL`), e.g. `https://api.alfe.ai`.
-     * The client prepends `/agent/secrets/*` automatically (the `/agent` segment
-     * is the agent-gateway api-mapping key; `/secrets` is the service
-     * pathPrefix). Do NOT include either segment in `apiUrl`.
-     */
-    apiUrl: string;
-    agentApiKey: string;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -1,8 +0,0 @@
-/**
- * Plugin-local types. Shared contract types (SecretScope, EncryptedEnvelopeV1,
- * SecretMetadata, etc.) live in `@alfe/types` and are re-exported by
- * `@alfe.ai/agent-api-client`; import from there so we have one canonical
- * source of truth across every agent HTTP surface.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}