@axonflow/openclaw 1.3.2 → 2.0.0

package/dist/telemetry.js

@@ -1,24 +1,37 @@
 /**
- * Anonymous usage telemetry for the OpenClaw plugin.
+ * Anonymous usage telemetry — 7-day heartbeat (TypeScript).
  *
- * Sends a single fire-and-forget ping on plugin initialization to
- * checkpoint.getaxonflow.com. Collects SDK version, platform info,
- * and OpenClaw version. No PII, no tool arguments, no policy data.
+ * Sends an anonymous POST to checkpoint.getaxonflow.com on plugin
+ * initialization, at most once every 7 days per machine.
  *
- * Opt out: AXONFLOW_TELEMETRY=off (canonical)
- * Also honored for backward compatibility: DO_NOT_TRACK=1 (deprecated — removed
- * after 2026-05-05 in the next major release; a one-time warning emits when
- * it's the active opt-out so operators can migrate).
+ * Design rules (per feedback_telemetry_heartbeat_design_rules.md):
+ *   1. Stamp-on-delivery, not stamp-on-attempt. Stamp file mtime
+ *      advances ONLY after the HTTP POST returns 2xx. A transient
+ *      network failure does not silence telemetry for 7 days.
+ *   2. In-flight gate via a per-process Promise. Concurrent plugin
+ *      loads do not race to send duplicate pings.
+ *   3. Opt-out check FIRST, before any rate-limit or filesystem ops.
+ *      AXONFLOW_TELEMETRY=off is re-evaluated every call.
+ *   4. mtime as the freshness source; stamp body holds instance_id.
+ *   5. Atomic stamp write: tmp + rename.
+ *   6. Persistent instance_id across heartbeats.
+ *   7. Defensive against future-dated stamps (clock skew → treat absent).
+ *   8. Cross-platform cache dir resolution (cache-dir.ts).
  *
  * Configuration resolution (opt-out flags and checkpoint URL) lives in
- * telemetry-config.ts so this file only handles the network-sending side.
+ * telemetry-config.ts so this module only handles the network-sending side.
  */
+import * as fs from "fs";
+import * as path from "path";
+import { axonflowCacheDir } from "./cache-dir.js";
 import { loadTelemetryConfig } from "./telemetry-config.js";
 const TELEMETRY_TIMEOUT_MS = 3000;
+const HEARTBEAT_INTERVAL_MS = 7 * 24 * 60 * 60 * 1000;
+const STAMP_FILE_NAME = "openclaw-plugin-telemetry-sent";
+let inFlight = null;
 function generateInstanceId() {
     try {
-        if (typeof crypto !== "undefined" &&
-            typeof crypto.randomUUID === "function") {
+        if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
             return crypto.randomUUID();
         }
     }
@@ -31,9 +44,6 @@ function generateInstanceId() {
         return v.toString(16);
     });
 }
-/**
- * Detect the AxonFlow platform version via /health endpoint.
- */
 async function detectPlatformVersion(endpoint) {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), 2000);
@@ -46,9 +56,7 @@ async function detectPlatformVersion(endpoint) {
         if (!resp.ok)
             return null;
         const body = (await resp.json());
-        return typeof body.version === "string" && body.version
-            ? body.version
-            : null;
+        return typeof body.version === "string" && body.version ? body.version : null;
     }
     catch {
         clearTimeout(timeoutId);
@@ -56,63 +64,152 @@ async function detectPlatformVersion(endpoint) {
     }
 }
 /**
- * Send an anonymous telemetry ping on plugin initialization.
+ * Send an anonymous telemetry heartbeat. Concurrent calls are de-duplicated
+ * via a per-process in-flight gate; the second concurrent caller awaits the
+ * first's promise rather than firing a duplicate.
  *
- * Fire-and-forget: errors are silently swallowed, 3-second timeout
- * prevents blocking. Never affects plugin behavior.
+ * Returns a promise that resolves when the heartbeat completes (success,
+ * skip, or failure). Production callers should treat as fire-and-forget;
+ * tests can await for assertions.
  */
 export function sendTelemetryPing(options) {
+    if (inFlight) {
+        return inFlight;
+    }
+    inFlight = sendInner(options).finally(() => {
+        inFlight = null;
+    });
+    return inFlight;
+}
+async function sendInner(options) {
+    // 1. Opt-out check FIRST.
     const config = loadTelemetryConfig();
     if (config.optedOut) {
         return;
     }
-    if (typeof console !== "undefined") {
-        console.log("[AxonFlow] Anonymous telemetry enabled for local and self-hosted use. Opt out: AXONFLOW_TELEMETRY=off | https://docs.getaxonflow.com/docs/telemetry");
+    // 2. Resolve stamp file location.
+    const cacheDir = axonflowCacheDir();
+    let stampFile = "";
+    if (cacheDir) {
+        stampFile = path.join(cacheDir, STAMP_FILE_NAME);
+        try {
+            fs.mkdirSync(cacheDir, { recursive: true, mode: 0o700 });
+            if (process.platform !== "win32") {
+                try {
+                    fs.chmodSync(cacheDir, 0o700);
+                }
+                catch { /* best effort */ }
+            }
+        }
+        catch {
+            stampFile = ""; // continue without stamping
+        }
+    }
+    const now = options.now ?? (() => new Date());
+    const nowMs = now().getTime();
+    // 3. mtime check, defensive against future-dated stamps.
+    let priorInstanceId = "";
+    if (stampFile) {
+        try {
+            const stat = fs.statSync(stampFile);
+            const stampMtime = stat.mtimeMs;
+            if (stampMtime > 0 && stampMtime <= nowMs) {
+                const age = nowMs - stampMtime;
+                if (age < HEARTBEAT_INTERVAL_MS) {
+                    return; // fresh — skip
+                }
+            }
+            try {
+                priorInstanceId = fs.readFileSync(stampFile, "utf8").trim();
+            }
+            catch {
+                priorInstanceId = "";
+            }
+        }
+        catch {
+            // No stamp → fall through to send
+        }
+    }
+    const instanceId = priorInstanceId && /^[a-f0-9-]{8,64}$/i.test(priorInstanceId)
+        ? priorInstanceId
+        : generateInstanceId();
+    // 4. Detect platform version (best-effort). The harness override targets
+    // a localhost fake when AXONFLOW_HARNESS=1; production callers see no
+    // change since AXONFLOW_HARNESS is unset.
+    const probeEndpoint = process.env.AXONFLOW_HARNESS === "1" && process.env.AXONFLOW_HARNESS_AGENT_ENDPOINT
+        ? process.env.AXONFLOW_HARNESS_AGENT_ENDPOINT
+        : options.endpoint;
+    let platformVersion = null;
+    try {
+        platformVersion = await detectPlatformVersion(probeEndpoint);
+    }
+    catch {
+        platformVersion = null;
     }
-    // Runtime metadata (platform, arch, runtime version) for the payload.
     const proc = typeof process !== "undefined" ? process : null;
+    // Community-SaaS users are first-class for analytics; classifying them as
+    // "production" (because plugin-generated auth is present) hides them inside
+    // the self-hosted bucket. Surface them explicitly here.
+    const deploymentMode = options.mode === "community-saas"
+        ? "community-saas"
+        : options.onError === "block"
+            ? "production"
+            : "development";
     const payload = {
         sdk: "openclaw-plugin",
         sdk_version: options.pluginVersion,
-        platform_version: null,
+        platform_version: platformVersion,
         os: proc ? proc.platform : "unknown",
         arch: proc ? proc.arch : "unknown",
         runtime_version: proc ? proc.version.replace(/^v/, "") : "unknown",
-        deployment_mode: options.onError === "block" ? "production" : "development",
+        deployment_mode: deploymentMode,
         features: [
             `hooks:${options.hookCount}`,
             `high_risk_tools:${options.highRiskToolCount}`,
             `on_error:${options.onError}`,
+            `mode:${options.mode}`,
         ],
-        instance_id: generateInstanceId(),
+        instance_id: instanceId,
     };
+    // 5. Fire the heartbeat.
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), TELEMETRY_TIMEOUT_MS);
+    let delivered = false;
     try {
-        void (async () => {
-            try {
-                payload.platform_version = await detectPlatformVersion(options.endpoint);
-            }
-            catch {
-                // Silent — platform version remains null
-            }
-            const controller = new AbortController();
-            const timeoutId = setTimeout(() => controller.abort(), TELEMETRY_TIMEOUT_MS);
-            try {
-                await fetch(config.checkpointUrl, {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify(payload),
-                    signal: controller.signal,
-                });
-            }
-            finally {
-                clearTimeout(timeoutId);
-            }
-        })().catch(() => {
-            // Silent failure — telemetry should never affect plugin behavior
+        const resp = await fetch(config.checkpointUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(payload),
+            signal: controller.signal,
         });
+        delivered = resp.ok;
     }
     catch {
-        // Silent failure
+        delivered = false;
     }
+    finally {
+        clearTimeout(timeoutId);
+    }
+    // 6. Stamp-on-delivery.
+    if (delivered && stampFile) {
+        try {
+            const tmp = `${stampFile}.tmp.${process.pid ?? "x"}`;
+            fs.writeFileSync(tmp, instanceId, { mode: 0o600 });
+            try {
+                fs.chmodSync(tmp, 0o600);
+            }
+            catch { /* best effort */ }
+            fs.renameSync(tmp, stampFile);
+        }
+        catch {
+            // We delivered but couldn't stamp. Next plugin init retries.
+        }
+    }
+}
+/**
+ * Test-only: clear the in-flight gate between tests.
+ */
+export function _resetTelemetryInFlightForTests() {
+    inFlight = null;
 }
 //# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,IACE,OAAO,MAAM,KAAK,WAAW;YAC7B,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EACvC,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;QAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAcD;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,SAAS,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO;YACrD,CAAC,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAMjC;IACC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CACT,qJAAqJ,CACtJ,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,MAAM,OAAO,GAAqB;QAChC,GAAG,EAAE,iBAAiB;QACtB,WAAW,EAAE,OAAO,CAAC,aAAa;QAClC,gBAAgB,EAAE,IAAI;QACtB,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAClC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,eAAe,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;QAC3E,QAAQ,EAAE;YACR,SAAS,OAAO,CAAC,SAAS,EAAE;YAC5B,mBAAmB,OAAO,CAAC,iBAAiB,EAAE;YAC9C,YAAY,OAAO,CAAC,OAAO,EAAE;SAC9B;QACD,WAAW,EAAE,kBAAkB,EAAE;KAClC,CAAC;IAEF,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,OAAO,CAAC,gBAAgB,GAAG,MAAM,qBAAqB,CACpD,OAAO,CAAC,QAAQ,CACjB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;YAE7E,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,iEAAiE;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtD,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAczD,IAAI,QAAQ,GAAyB,IAAI,CAAC;AAE1C,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YAC7E,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;QAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,SAAS,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAaD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACzC,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAoB;IAC3C,0BAA0B;IAC1B,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,kCAAkC;IAClC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,QAAQ,EAAE,CAAC;QACb,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,EAAE,CAAC,CAAC,4BAA4B;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAE9B,yDAAyD;IACzD,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,KAAK,GAAG,UAAU,CAAC;gBAC/B,IAAI,GAAG,GAAG,qBAAqB,EAAE,CAAC;oBAChC,OAAO,CAAC,eAAe;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GACd,eAAe,IAAI,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC;QAC3D,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAE3B,yEAAyE;IACzE,sEAAsE;IACtE,0CAA0C;IAC1C,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B;QACjF,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B;QAC7C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,0EAA0E;IAC1E,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,cAAc,GAClB,OAAO,CAAC,IAAI,KAAK,gBAAgB;QAC/B,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO;YAC7B,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,aAAa,CAAC;IAEpB,MAAM,OAAO,GAAqB;QAChC,GAAG,EAAE,iBAAiB;QACtB,WAAW,EAAE,OAAO,CAAC,aAAa;QAClC,gBAAgB,EAAE,eAAe;QACjC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACpC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAClC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,eAAe,EAAE,cAAc;QAC/B,QAAQ,EAAE;YACR,SAAS,OAAO,CAAC,SAAS,EAAE;YAC5B,mBAAmB,OAAO,CAAC,iBAAiB,EAAE;YAC9C,YAAY,OAAO,CAAC,OAAO,EAAE;YAC7B,QAAQ,OAAO,CAAC,IAAI,EAAE;SACvB;QACD,WAAW,EAAE,UAAU;KACxB,CAAC;IAEF,yBAAyB;IACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC7E,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,SAAS,QAAQ,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7D,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B;IAC7C,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/openclaw.plugin.json

@@ -52,16 +52,13 @@
     "additionalProperties": false,
     "properties": {
       "endpoint": {
-        "type": "string",
-        "default": "http://localhost:8080"
+        "type": "string"
       },
       "clientId": {
-        "type": "string",
-        "default": "community"
+        "type": "string"
       },
       "clientSecret": {
-        "type": "string",
-        "default": "community"
+        "type": "string"
       },
       "highRiskTools": {
         "type": "array",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axonflow/openclaw",
-  "version": "1.3.2",
+  "version": "2.0.0",
   "description": "Policy enforcement, approval gates, and audit trails for OpenClaw — govern tool inputs before execution, scan outbound messages for PII/secrets, and record agent activity for review and compliance",
   "type": "module",
   "main": "dist/index.js",
@@ -62,7 +62,10 @@
   },
   "peerDependencies": {
     "@axonflow/sdk": ">=4.3.0",
-    "openclaw": ">=1.0.0"
+    "openclaw": ">=2026.4.15"
+  },
+  "overrides": {
+    "openclaw": ">=2026.4.15"
   },
   "devDependencies": {
     "@types/jest": "^29.5.0",
@@ -71,7 +74,8 @@
     "jest": "^29.7.0",
     "ts-jest": "^29.1.0",
     "typescript": "^5.4.0",
-    "typescript-eslint": "^8.58.0"
+    "typescript-eslint": "^8.58.0",
+    "yaml": "^2.8.3"
   },
   "publishConfig": {
     "access": "public",
@@ -88,10 +92,10 @@
     ],
     "compat": {
       "pluginApi": ">=2026.3.22",
-      "minGatewayVersion": "2026.3.22"
+      "minGatewayVersion": "2026.4.15"
     },
     "build": {
-      "openclawVersion": "2026.3.22",
+      "openclawVersion": "2026.4.15",
       "pluginSdkVersion": "2026.3.22"
     }
   }