@atbash/atbash-openclaw 0.0.9 → 0.0.11

package/README.md

@@ -102,6 +102,12 @@ The `kinds` field shows which patterns matched. `anthropic` / `openai` / `aws_ac
 
 The agent's own tool execution is unaffected — only the data sent to the judge is scrubbed. Full kind list and behaviour reference: see the [SDK README](https://www.npmjs.com/package/@atbash/sdk).
 
+## Environment variables
+
+| Variable | Default | What it does |
+|---|---|---|
+| `ATBASH_TELEMETRY` | `"true"` | Set to `"false"` to disable usage telemetry. Telemetry is opt-out — it's on unless you explicitly turn it off. |
+
 ## Troubleshooting
 
 **Tool calls aren't being audited.**

package/dist/config.js

@@ -1,4 +1,4 @@
-const PLUGIN_ID = "openclaw";
+const PLUGIN_ID = "atbash-openclaw";
 /** @internal */
 export function readPluginConfig(api) {
     return api.config?.plugins?.entries?.[PLUGIN_ID]?.config ?? {};

package/dist/index.js

@@ -1 +1,2 @@
-"use strict";var u=Object.defineProperty;var p=Object.getOwnPropertyDescriptor;var b=Object.getOwnPropertyNames;var m=Object.prototype.hasOwnProperty;var h=(o,e)=>{for(var n in e)u(o,n,{get:e[n],enumerable:!0})},w=(o,e,n,t)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of b(e))!m.call(o,r)&&r!==n&&u(o,r,{get:()=>e[r],enumerable:!(t=p(e,r))||t.enumerable});return o};var y=o=>w(u({},"__esModule",{value:!0}),o);var P={};h(P,{default:()=>d});module.exports=y(P);var l=require("@atbash/sdk");var E="openclaw";function g(o){return o.config?.plugins?.entries?.[E]?.config??{}}function f(o,e){let n=o??{},t=n.toolName??e.tool?.name??e.toolName??e.name??"unknown",r=n.params??e.params??n.args??e.args??n.arguments??e.arguments;return{toolName:t,args:r,context:t}}function L(o){if(o.judgeEndpoint)return o.judgeEndpointPolicy==="self-hosted"?{policy:"self-hosted",endpoint:o.judgeEndpoint,verifyPubKey:o.judgeVerifyPubKey??""}:{policy:"default",endpoint:o.judgeEndpoint}}function d(o){let e=o,n=g(e);if(n.enabled===!1){e.logger?.info?.("[atbash] plugin disabled via config");return}(0,l.setupTelemetry)({enabled:!0,source:"plugin:openclaw"}),process.once("beforeExit",()=>(0,l.shutdownTelemetry)()),process.once("SIGINT",()=>(0,l.shutdownTelemetry)().finally(()=>process.exit(0))),process.once("SIGTERM",()=>(0,l.shutdownTelemetry)().finally(()=>process.exit(0)));let t;try{t=(0,l.createAtbashClient)({judge:L(n),keyPath:n.chromiaSecretPath,failClosed:!0,logger:e.logger})}catch(i){let s=i instanceof Error?i.message:String(i);throw e.logger?.warn?.("[atbash] init failed",{error:s}),i}let r=n.enforceDecision!==!1;if(e.logger?.info?.("[atbash] plugin loaded",{enforceDecision:r}),!e.on){e.logger?.warn?.("[atbash] on() API not available");return}e.on("before_tool_call",async(i,s)=>{let c=await t.auditToolCall(f(i,s)),a=c.reason??"";switch(c.verdict){case"BLOCK":return e.logger?.warn?.("[atbash] BLOCK",{reason:a}),r?{block:!0,blockReason:a,allow:!1,reason:a}:{allow:!0};case"HOLD":return e.logger?.info?.("[atbash] ALLOW",{reason:a}),{allow:!0};case"ERROR":return e.logger?.warn?.("[atbash] ERROR",{reason:a}),r?{block:!0,blockReason:a,allow:!1,reason:a}:{allow:!0};case"ALLOW":default:return e.logger?.info?.("[atbash] ALLOW",{reason:a}),{allow:!0}}})}
+"use strict";var u=Object.defineProperty;var b=Object.getOwnPropertyDescriptor;var h=Object.getOwnPropertyNames;var m=Object.prototype.hasOwnProperty;var w=(o,e)=>{for(var n in e)u(o,n,{get:e[n],enumerable:!0})},y=(o,e,n,a)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of h(e))!m.call(o,r)&&r!==n&&u(o,r,{get:()=>e[r],enumerable:!(a=b(e,r))||a.enumerable});return o};var E=o=>y(u({},"__esModule",{value:!0}),o);var v={};w(v,{default:()=>p});module.exports=E(v);var l=require("@atbash/sdk");var R="atbash-openclaw";function f(o){return o.config?.plugins?.entries?.[R]?.config??{}}function d(o,e){let n=o??{},a=n.toolName??e.tool?.name??e.toolName??e.name??"unknown",r=n.params??e.params??n.args??e.args??n.arguments??e.arguments;return{toolName:a,args:r,context:a}}function k(o){if(o.judgeEndpoint)return o.judgeEndpointPolicy==="self-hosted"?{policy:"self-hosted",endpoint:o.judgeEndpoint,verifyPubKey:o.judgeVerifyPubKey??""}:{policy:"default",endpoint:o.judgeEndpoint}}function p(o){let e=o,n=f(e);if(n.enabled===!1){e.logger?.info?.("[atbash] plugin disabled via config");return}(0,l.setupTelemetry)({enabled:!0,source:"plugin:openclaw"}),process.once("beforeExit",()=>(0,l.shutdownTelemetry)()),process.once("SIGINT",()=>(0,l.shutdownTelemetry)().finally(()=>process.exit(0))),process.once("SIGTERM",()=>(0,l.shutdownTelemetry)().finally(()=>process.exit(0)));let a;try{a=(0,l.createAtbashClient)({judge:k(n),keyPath:n.chromiaSecretPath,orgName:n.orgName,failClosed:!0,logger:e.logger})}catch(s){let i=s instanceof Error?s.message:String(s);throw e.logger?.warn?.("[atbash] init failed",{error:i}),s}let r=n.enforceDecision!==!1;if(e.logger?.info?.("[atbash] plugin loaded",{enforceDecision:r}),!e.on){e.logger?.warn?.("[atbash] on() API not available");return}e.on("before_tool_call",async(s,i)=>{let c=await a.auditToolCall(d(s,i)),t=c.reason??"";switch(c.verdict){case"BLOCK":return e.logger?.warn?.("[atbash] BLOCK",{reason:t}),r?{block:!0,blockReason:t,allow:!1,reason:t}:{allow:!0};case"HOLD":{let g=`Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.
+Reason: ${t}`;return e.logger?.warn?.("[atbash] HOLD",{reason:t}),r?{block:!0,blockReason:g,allow:!1,reason:g}:{allow:!0}}case"ERROR":return e.logger?.warn?.("[atbash] ERROR",{reason:t}),r?{block:!0,blockReason:t,allow:!1,reason:t}:{allow:!0};case"ALLOW":default:return e.logger?.info?.("[atbash] ALLOW",{reason:t}),{allow:!0}}})}

package/openclaw.plugin.json

@@ -1,5 +1,5 @@
 {
-  "id": "openclaw",
+  "id": "atbash-openclaw",
   "name": "ATBASH Plugin",
   "configSchema": {
     "type": "object",
@@ -15,7 +15,8 @@
         "enum": ["default", "self-hosted"],
         "default": "default"
       },
-      "judgeVerifyPubKey": { "type": "string" }
+      "judgeVerifyPubKey": { "type": "string" },
+      "orgName": { "type": "string" }
     }
   },
   "uiHints": {
@@ -36,6 +37,10 @@
     "judgeVerifyPubKey": {
       "label": "Judge Response Verify Pubkey (self-hosted only)",
       "placeholder": "66 hex chars — secp256k1 compressed pubkey"
+    },
+    "orgName": {
+      "label": "Organization Name",
+      "placeholder": "e.g. ATBASH — set so the SDK queries the right chain (public vs private)"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-openclaw",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "description": "OpenClaw ATBASH tool-audit plugin. Thin adapter that maps OpenClaw's before_tool_call hook onto @atbash/sdk.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -32,7 +32,7 @@
     ]
   },
   "dependencies": {
-    "@atbash/sdk": "^0.3.24"
+    "@atbash/sdk": "^0.3.25"
   },
   "devDependencies": {
     "@types/node": "^25.7.0",