@atbash/atbash-openclaw 0.1.16-dev.3 → 0.1.17-dev.0

package/dist/context-mapper.js

@@ -114,9 +114,12 @@ export function mapEventToInput(event, ctx) {
         ctx.name ??
         "unknown";
     const args = ev.params ?? ctx.params ?? ev.args ?? ctx.args ?? ev.arguments ?? ctx.arguments;
+    // sessionKey is an auth credential (not a correlation ID) — never include it
+    // in signed bytes the server inspects. The remaining fields are redacted
+    // defensively in case the installed SDK binary has older patterns than the
+    // server's TypeScript containsSecret gate.
     const context = JSON.stringify({
         tool_name: toolName,
-        session_id: redactValue(ctx.sessionKey ?? ""),
         run_id: redactValue(ctx.runId ?? ""),
         agent_id: redactValue(ctx.agentId ?? ""),
         channel_id: redactValue(ctx.channelId ?? ""),

package/dist/index.js

@@ -1,2 +1,2 @@
-"use strict";var h=Object.defineProperty;var S=Object.getOwnPropertyDescriptor;var T=Object.getOwnPropertyNames;var z=Object.prototype.hasOwnProperty;var P=(r,e)=>{for(var o in e)h(r,o,{get:e[o],enumerable:!0})},Z=(r,e,o,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let a of T(e))!z.call(r,a)&&a!==o&&h(r,a,{get:()=>e[a],enumerable:!(n=S(e,a))||n.enumerable});return r};var v=r=>Z(h({},"__esModule",{value:!0}),r);var M={};P(M,{default:()=>R});module.exports=v(M);var k=require("os"),c=require("@atbash/sdk");var b="atbash-openclaw",D=["openclaw","atbash-plugin"];function w(r){return r.config?.plugins?.entries?.[b]?.config??{}}function y(r){let e=r.config?.plugins,o=e?.entries??{},n=Array.isArray(e?.allow)?e.allow:[],a=D.filter(t=>o[t]!==void 0||n.includes(t));if(a.length===0)return;let d=o[b]?.config!==void 0;r.logger?.warn?.(`[atbash] found config under former plugin id${a.length>1?"s":""} ${a.map(t=>`"${t}"`).join(", ")} \u2014 this plugin's id is "${b}" and those entries are ignored`+(d?". Remove them to avoid confusion.":`. No "${b}" config found, so the plugin is running on defaults \u2014 move your settings under "${b}".`),{formerIds:a,configured:d})}var x=[/\bsk-ant-[A-Za-z0-9_-]{20,}/g,/\bsk-proj-[A-Za-z0-9_-]{20,}/g,/\bsk-[A-Za-z0-9]{20,}/g,/\b(?:gh[pousr]|github_pat)_[A-Za-z0-9_]{30,}/g,/\bAIza[0-9A-Za-z_-]{35}/g,/\bya29\.[0-9A-Za-z_-]{20,}/g,/\b(?:AKIA|ASIA|AGPA|AROA|ANPA|ANVA|ASCA|AIDA|AIPA)[0-9A-Z]{16}\b/g,/\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{20,}/g,/\bxox[abprseo]-[A-Za-z0-9-]{10,}/g,/\bSG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g,/\bnpm_[A-Za-z0-9]{36,}\b/g,/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,/\b(?!0x[0-9a-fA-F])(?![0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\b)(?=[A-Za-z0-9_-]*[0-9])(?=[A-Za-z0-9_-]*[A-Za-z])(?![0-9a-fA-F]+$)[A-Za-z0-9_-]{32,}\b/g,/(?<![A-Za-z0-9+/])(?=[A-Za-z0-9+/]*[+/])(?=[A-Za-z0-9+/]*[0-9])(?=[A-Za-z0-9+/]*[A-Za-z])[A-Za-z0-9+/]{40,}={0,2}(?![A-Za-z0-9+/=])/g];function m(r){let e=r;for(let o of x)o.lastIndex=0,e=e.replace(o,"[REDACTED]");return e}var F={"0xdac17f958d2ee523a2206206994597c13d831ec7":"USDT","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC","0x6b175474e89094c44da98b954eedeac495271d0f":"DAI","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2":"WETH","0x2260fac5e5542a773aa44fbcfedf7c193bc2c599":"WBTC","0x1f9840a85d5af5bf1d1762f925bdaddc4201f984":"UNI","0x514910771af9ca656af840dff83e8264ecf986ca":"LINK","0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9":"AAVE","0xb0df6379ba1692841965a0745ac1bd3046d79ba3":"ATBASH","0xe9c094187219d9a29382c1a36fc43619c9257777":"ATBASH","0xf8b071428558c657a7a9aa1c43e152e75dd77777":"ATBASH"},_=/\b(0x[a-fA-F0-9]{40})\b/,N=/(0x[a-fA-F0-9]{40})/,E=/\b(transfer|send|swap|approve|erc20)\b/i;function j(r){if(!r)return"ETH";let e=r.toLowerCase(),o=N.exec(e);return o?F[o[1].toLowerCase()]??"other":e==="c60"||e==="eth"?"ETH":e==="atbash"?"ATBASH":e==="usdt"||e==="tether"?"USDT":e==="usdc"?"USDC":"other"}function p(r,...e){for(let o of e){let n=r[o];if(typeof n=="string"&&n.trim())return n.trim()}}function $(r,e){let o=e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0,n=o?p(o,"command","cmd","shell_command"):void 0,a=E.test(r),d=n?E.test(n):!1,t=n?_.test(n):!1;if(!a&&!d&&!t)return;let f=A=>n?new RegExp(`--${A}[= ]+(\\S+)`).exec(n)?.[1]:void 0,g=(o?p(o,"token","token_address","asset","currency"):void 0)??f("token");if(!g&&n){let A=_.exec(n);A&&(g=A[1])}let u=(o?p(o,"to","recipient","destination"):void 0)??f("to")??f("recipient"),l=(o?p(o,"amount","value","qty"):void 0)??f("amount"),s=j(g??""),i=n??r;return{operation:/\bswap\b/i.test(i)?"swap":/\b(approve|erc20)\b/i.test(i)?"approve":"transfer",asset:s,amount:l,recipient_status:u?"external":"unspecified",note:"canonicalized pre-judge; raw 0x addresses omitted (redacted upstream)"}}function I(r,e){let o=r??{},n=o.toolName??e.tool?.name??e.toolName??e.name??"unknown",a=o.params??e.params??o.args??e.args??o.arguments??e.arguments,d=JSON.stringify({tool_name:n,session_id:m(e.sessionKey??""),run_id:m(e.runId??""),agent_id:m(e.agentId??""),channel_id:m(e.channelId??""),account_id:m(e.accountId??"")});return{toolName:n,args:a,context:d,resolved:$(n,a)}}function C(r){return r.replace(/^~(?=\/|$)/,(0,k.homedir)())}function L(r){return r.memoryWorkspaceDir?C(r.memoryWorkspaceDir):process.cwd()}function O(r){if(r.judgeEndpoint)return r.judgeEndpointPolicy==="self-hosted"?{policy:"self-hosted",endpoint:r.judgeEndpoint,verifyPubKey:r.judgeVerifyPubKey??""}:{policy:"default",endpoint:r.judgeEndpoint}}function R(r){let e=r,o=w(e);if(y(e),o.enabled===!1){e.logger?.info?.("[atbash] plugin disabled via config");return}(0,c.setupTelemetry)({enabled:!0,source:"plugin:openclaw"}),process.once("beforeExit",()=>(0,c.shutdownTelemetry)()),process.once("SIGINT",()=>(0,c.shutdownTelemetry)().finally(()=>process.exit(0))),process.once("SIGTERM",()=>(0,c.shutdownTelemetry)().finally(()=>process.exit(0)));let n;try{n=c.Atbash.fromConfig({judge:O(o),keyPath:o.chromiaSecretPath,orgName:o.orgName,failClosed:o.enforceDecision!==!1,logger:e.logger})}catch(t){let f=t instanceof Error?t.message:String(t);throw e.logger?.warn?.("[atbash] init failed",{error:f}),t}let a=o.enforceDecision!==!1;e.logger?.info?.("[atbash] plugin loaded",{enforceDecision:a});let d=(0,c.createMemoryGuardManager)({auth:n.auth,workspaceDir:L(o),memoryFilePath:o.memoryFilePath?C(o.memoryFilePath):void 0,ttlMs:o.memorySyncTTLMs,rollbackMinScore:o.memoryRollbackMinScore,memoryPathPatterns:o.memoryPathPatterns,judgeEndpoint:o.judgeEndpoint,judgeVerifyPubKey:o.judgeVerifyPubKey,orgName:o.orgName,enforce:a,debug:!!o.debug,hostLogger:e.logger});if(d.runBootProbe().catch(t=>{e.logger?.warn?.("[atbash] boot probe failed",{error:t instanceof Error?t.message:String(t)})}),!e.on){e.logger?.warn?.("[atbash] on() API not available");return}e.on("before_tool_call",async(t,f)=>{let g;try{g=await d.handleBeforeToolCall(t,f)}catch(s){let i=s instanceof Error?s.message:String(s);return e.logger?.warn?.("[atbash] memory guard error",{error:i}),s instanceof c.MemoryIntegrityError||a?{block:!0,blockReason:`Memory guard error: ${i}`,allow:!1,reason:`Memory guard error: ${i}`}:{allow:!0}}if(g)return g;let u;try{u=await n.auditToolCall(I(t,f))}catch(s){let i=s instanceof Error?s.message:String(s);return e.logger?.warn?.("[atbash] unexpected error",{error:i}),a?{block:!0,blockReason:`Atbash unavailable: ${i}`,allow:!1,reason:`Atbash unavailable: ${i}`}:{allow:!0}}let l=u.reason??"";switch(u.verdict){case"BLOCK":return e.logger?.warn?.("[atbash] BLOCK",{reason:l}),a?{block:!0,blockReason:l,allow:!1,reason:l}:{allow:!0};case"HOLD":{let s=["Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",`Reason: ${l}`];u.toolCallId&&s.push(`Tool Call ID: ${u.toolCallId}`);let i=s.join(`
-`);return e.logger?.warn?.("[atbash] HOLD",{reason:l,toolCallId:u.toolCallId}),a?{block:!0,blockReason:i,allow:!1,reason:i}:{allow:!0}}case"ERROR":return e.logger?.warn?.("[atbash] ERROR",{reason:l}),a?{block:!0,blockReason:l,allow:!1,reason:l}:{allow:!0};case"ALLOW":if(u.allow===!0)return e.logger?.info?.("[atbash] ALLOW",{reason:l}),{allow:!0};break}{let s=String(u.verdict);if(e.logger?.warn?.("[atbash] unusable decision",{verdict:s,allow:u.allow,reason:l}),!a)return{allow:!0};let i=`Blocked (unusable Atbash decision ${s}): ${l}`;return{block:!0,blockReason:i,allow:!1,reason:i}}})}
+"use strict";var h=Object.defineProperty;var S=Object.getOwnPropertyDescriptor;var T=Object.getOwnPropertyNames;var z=Object.prototype.hasOwnProperty;var P=(r,e)=>{for(var o in e)h(r,o,{get:e[o],enumerable:!0})},Z=(r,e,o,a)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of T(e))!z.call(r,n)&&n!==o&&h(r,n,{get:()=>e[n],enumerable:!(a=S(e,n))||a.enumerable});return r};var v=r=>Z(h({},"__esModule",{value:!0}),r);var M={};P(M,{default:()=>R});module.exports=v(M);var k=require("os"),c=require("@atbash/sdk");var b="atbash-openclaw",x=["openclaw","atbash-plugin"];function w(r){return r.config?.plugins?.entries?.[b]?.config??{}}function y(r){let e=r.config?.plugins,o=e?.entries??{},a=Array.isArray(e?.allow)?e.allow:[],n=x.filter(t=>o[t]!==void 0||a.includes(t));if(n.length===0)return;let d=o[b]?.config!==void 0;r.logger?.warn?.(`[atbash] found config under former plugin id${n.length>1?"s":""} ${n.map(t=>`"${t}"`).join(", ")} \u2014 this plugin's id is "${b}" and those entries are ignored`+(d?". Remove them to avoid confusion.":`. No "${b}" config found, so the plugin is running on defaults \u2014 move your settings under "${b}".`),{formerIds:n,configured:d})}var D=[/\bsk-ant-[A-Za-z0-9_-]{20,}/g,/\bsk-proj-[A-Za-z0-9_-]{20,}/g,/\bsk-[A-Za-z0-9]{20,}/g,/\b(?:gh[pousr]|github_pat)_[A-Za-z0-9_]{30,}/g,/\bAIza[0-9A-Za-z_-]{35}/g,/\bya29\.[0-9A-Za-z_-]{20,}/g,/\b(?:AKIA|ASIA|AGPA|AROA|ANPA|ANVA|ASCA|AIDA|AIPA)[0-9A-Z]{16}\b/g,/\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{20,}/g,/\bxox[abprseo]-[A-Za-z0-9-]{10,}/g,/\bSG\.[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g,/\bnpm_[A-Za-z0-9]{36,}\b/g,/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,/\b(?!0x[0-9a-fA-F])(?![0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\b)(?=[A-Za-z0-9_-]*[0-9])(?=[A-Za-z0-9_-]*[A-Za-z])(?![0-9a-fA-F]+$)[A-Za-z0-9_-]{32,}\b/g,/(?<![A-Za-z0-9+/])(?=[A-Za-z0-9+/]*[+/])(?=[A-Za-z0-9+/]*[0-9])(?=[A-Za-z0-9+/]*[A-Za-z])[A-Za-z0-9+/]{40,}={0,2}(?![A-Za-z0-9+/=])/g];function A(r){let e=r;for(let o of D)o.lastIndex=0,e=e.replace(o,"[REDACTED]");return e}var F={"0xdac17f958d2ee523a2206206994597c13d831ec7":"USDT","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC","0x6b175474e89094c44da98b954eedeac495271d0f":"DAI","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2":"WETH","0x2260fac5e5542a773aa44fbcfedf7c193bc2c599":"WBTC","0x1f9840a85d5af5bf1d1762f925bdaddc4201f984":"UNI","0x514910771af9ca656af840dff83e8264ecf986ca":"LINK","0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9":"AAVE","0xb0df6379ba1692841965a0745ac1bd3046d79ba3":"ATBASH","0xe9c094187219d9a29382c1a36fc43619c9257777":"ATBASH","0xf8b071428558c657a7a9aa1c43e152e75dd77777":"ATBASH"},_=/\b(0x[a-fA-F0-9]{40})\b/,N=/(0x[a-fA-F0-9]{40})/,E=/\b(transfer|send|swap|approve|erc20)\b/i;function j(r){if(!r)return"ETH";let e=r.toLowerCase(),o=N.exec(e);return o?F[o[1].toLowerCase()]??"other":e==="c60"||e==="eth"?"ETH":e==="atbash"?"ATBASH":e==="usdt"||e==="tether"?"USDT":e==="usdc"?"USDC":"other"}function p(r,...e){for(let o of e){let a=r[o];if(typeof a=="string"&&a.trim())return a.trim()}}function $(r,e){let o=e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0,a=o?p(o,"command","cmd","shell_command"):void 0,n=E.test(r),d=a?E.test(a):!1,t=a?_.test(a):!1;if(!n&&!d&&!t)return;let f=m=>a?new RegExp(`--${m}[= ]+(\\S+)`).exec(a)?.[1]:void 0,g=(o?p(o,"token","token_address","asset","currency"):void 0)??f("token");if(!g&&a){let m=_.exec(a);m&&(g=m[1])}let u=(o?p(o,"to","recipient","destination"):void 0)??f("to")??f("recipient"),l=(o?p(o,"amount","value","qty"):void 0)??f("amount"),s=j(g??""),i=a??r;return{operation:/\bswap\b/i.test(i)?"swap":/\b(approve|erc20)\b/i.test(i)?"approve":"transfer",asset:s,amount:l,recipient_status:u?"external":"unspecified",note:"canonicalized pre-judge; raw 0x addresses omitted (redacted upstream)"}}function I(r,e){let o=r??{},a=o.toolName??e.tool?.name??e.toolName??e.name??"unknown",n=o.params??e.params??o.args??e.args??o.arguments??e.arguments,d=JSON.stringify({tool_name:a,run_id:A(e.runId??""),agent_id:A(e.agentId??""),channel_id:A(e.channelId??""),account_id:A(e.accountId??"")});return{toolName:a,args:n,context:d,resolved:$(a,n)}}function C(r){return r.replace(/^~(?=\/|$)/,(0,k.homedir)())}function L(r){return r.memoryWorkspaceDir?C(r.memoryWorkspaceDir):process.cwd()}function O(r){if(r.judgeEndpoint)return r.judgeEndpointPolicy==="self-hosted"?{policy:"self-hosted",endpoint:r.judgeEndpoint,verifyPubKey:r.judgeVerifyPubKey??""}:{policy:"default",endpoint:r.judgeEndpoint}}function R(r){let e=r,o=w(e);if(y(e),o.enabled===!1){e.logger?.info?.("[atbash] plugin disabled via config");return}(0,c.setupTelemetry)({enabled:!0,source:"plugin:openclaw"}),process.once("beforeExit",()=>(0,c.shutdownTelemetry)()),process.once("SIGINT",()=>(0,c.shutdownTelemetry)().finally(()=>process.exit(0))),process.once("SIGTERM",()=>(0,c.shutdownTelemetry)().finally(()=>process.exit(0)));let a;try{a=c.Atbash.fromConfig({judge:O(o),keyPath:o.chromiaSecretPath,orgName:o.orgName,failClosed:o.enforceDecision!==!1,logger:e.logger})}catch(t){let f=t instanceof Error?t.message:String(t);throw e.logger?.warn?.("[atbash] init failed",{error:f}),t}let n=o.enforceDecision!==!1;e.logger?.info?.("[atbash] plugin loaded",{enforceDecision:n});let d=(0,c.createMemoryGuardManager)({auth:a.auth,workspaceDir:L(o),memoryFilePath:o.memoryFilePath?C(o.memoryFilePath):void 0,ttlMs:o.memorySyncTTLMs,rollbackMinScore:o.memoryRollbackMinScore,memoryPathPatterns:o.memoryPathPatterns,judgeEndpoint:o.judgeEndpoint,judgeVerifyPubKey:o.judgeVerifyPubKey,orgName:o.orgName,enforce:n,debug:!!o.debug,hostLogger:e.logger});if(d.runBootProbe().catch(t=>{e.logger?.warn?.("[atbash] boot probe failed",{error:t instanceof Error?t.message:String(t)})}),!e.on){e.logger?.warn?.("[atbash] on() API not available");return}e.on("before_tool_call",async(t,f)=>{let g;try{g=await d.handleBeforeToolCall(t,f)}catch(s){let i=s instanceof Error?s.message:String(s);return e.logger?.warn?.("[atbash] memory guard error",{error:i}),s instanceof c.MemoryIntegrityError||n?{block:!0,blockReason:`Memory guard error: ${i}`,allow:!1,reason:`Memory guard error: ${i}`}:{allow:!0}}if(g)return g;let u;try{u=await a.auditToolCall(I(t,f))}catch(s){let i=s instanceof Error?s.message:String(s);return e.logger?.warn?.("[atbash] unexpected error",{error:i}),n?{block:!0,blockReason:`Atbash unavailable: ${i}`,allow:!1,reason:`Atbash unavailable: ${i}`}:{allow:!0}}let l=u.reason??"";switch(u.verdict){case"BLOCK":return e.logger?.warn?.("[atbash] BLOCK",{reason:l}),n?{block:!0,blockReason:l,allow:!1,reason:l}:{allow:!0};case"HOLD":{let s=["Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",`Reason: ${l}`];u.toolCallId&&s.push(`Tool Call ID: ${u.toolCallId}`);let i=s.join(`
+`);return e.logger?.warn?.("[atbash] HOLD",{reason:l,toolCallId:u.toolCallId}),n?{block:!0,blockReason:i,allow:!1,reason:i}:{allow:!0}}case"ERROR":return e.logger?.warn?.("[atbash] ERROR",{reason:l}),n?{block:!0,blockReason:l,allow:!1,reason:l}:{allow:!0};case"ALLOW":if(u.allow===!0)return e.logger?.info?.("[atbash] ALLOW",{reason:l}),{allow:!0};break}{let s=String(u.verdict);if(e.logger?.warn?.("[atbash] unusable decision",{verdict:s,allow:u.allow,reason:l}),!n)return{allow:!0};let i=`Blocked (unusable Atbash decision ${s}): ${l}`;return{block:!0,blockReason:i,allow:!1,reason:i}}})}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-openclaw",
-  "version": "0.1.16-dev.3",
+  "version": "0.1.17-dev.0",
   "description": "OpenClaw ATBASH tool-audit plugin. Thin adapter that maps OpenClaw's before_tool_call hook onto @atbash/sdk.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",