@clawdstrike/openclaw 0.1.1 → 0.1.3

package/dist/hooks/tool-preflight/handler.js

@@ -0,0 +1,426 @@
+/**
+ * @clawdstrike/openclaw - Tool Pre-flight Hook Handler
+ *
+ * Intercepts tool calls BEFORE execution and enforces security policy
+ * on risky operations (filesystem access, command execution, patch apply, egress).
+ *
+ * Most read-only operations are skipped here and handled by the post-execution
+ * tool-guard hook for output sanitization, but we still preflight-check
+ * forbidden paths when a read targets a sensitive location.
+ */
+import { initializeEngine, getSharedEngine } from '../../engine-holder.js';
+import { peekApproval, recordApproval } from '../approval-state.js';
+import { extractPath, normalizeApprovalResource } from '../approval-utils.js';
+import { tokenize, classifyTool, NETWORK_TOKENS, DESTRUCTIVE_EVENT_MAP, } from '../../classification.js';
+/**
+ * Initialize the hook with configuration.
+ * Delegates to the shared engine holder so all hooks share one PolicyEngine.
+ */
+export function initialize(config) {
+    initializeEngine(config);
+}
+/**
+ * Get or create the policy engine.
+ * Delegates to the shared engine holder.
+ */
+export function getEngine(config) {
+    return getSharedEngine(config);
+}
+/**
+ * Infer the event type for a tool based on its name tokens and parameters.
+ *
+ * Returns null for confirmed read-only tools that do not appear to touch the filesystem.
+ * Unknown/unclassified tools are still evaluated (best-effort inference).
+ */
+function inferPolicyEventType(toolName, params) {
+    const tokens = tokenize(toolName);
+    const classification = classifyTool(tokens);
+    if (classification === 'read_only') {
+        // Read-only tools can still be risky if they touch forbidden paths OR perform network egress.
+        // Do not skip preflight egress checks (eg. web_search/http_get) just because the tool name
+        // contains a read-only token like "get" or "search".
+        if (tokens.some(t => NETWORK_TOKENS.has(t)) || looksLikeNetworkEgress(params)) {
+            return 'network_egress';
+        }
+        // If it looks like a filesystem read, evaluate it as file_read.
+        const p = extractPath(params);
+        if (p)
+            return 'file_read';
+        return null;
+    }
+    // Check specific destructive event types
+    for (const { tokens: matchTokens, eventType } of DESTRUCTIVE_EVENT_MAP) {
+        if (tokens.some(t => matchTokens.has(t))) {
+            return eventType;
+        }
+    }
+    // Check network tokens
+    if (tokens.some(t => NETWORK_TOKENS.has(t))) {
+        return 'network_egress';
+    }
+    // Unknown/unclassified tools: infer from parameters (do not skip).
+    if (looksLikePatchApply(params))
+        return 'patch_apply';
+    if (looksLikeCommandExec(params))
+        return 'command_exec';
+    if (looksLikeNetworkEgress(params))
+        return 'network_egress';
+    const p = extractPath(params);
+    if (p) {
+        return looksLikeFileWrite(params) ? 'file_write' : 'file_read';
+    }
+    // Fall back to tool_call so tool allow/deny lists and defense-in-depth checks can run.
+    return 'tool_call';
+}
+/**
+ * Build a PolicyEvent from pre-execution context
+ */
+function buildPolicyEvent(sessionId, toolName, params, eventType) {
+    const eventId = `preflight-${sessionId}-${Date.now()}-${crypto.randomUUID()}`;
+    const timestamp = new Date().toISOString();
+    switch (eventType) {
+        case 'file_read': {
+            const path = extractPath(params) ?? '';
+            return {
+                eventId,
+                eventType: 'file_read',
+                timestamp,
+                sessionId,
+                data: { type: 'file', path, operation: 'read' },
+                metadata: { toolName, preflight: true },
+            };
+        }
+        case 'file_write': {
+            const path = extractPath(params) ?? '';
+            return {
+                eventId,
+                eventType: 'file_write',
+                timestamp,
+                sessionId,
+                data: { type: 'file', path, operation: 'write', content: typeof params.content === 'string' ? params.content : undefined },
+                metadata: { toolName, preflight: true },
+            };
+        }
+        case 'command_exec': {
+            const cmdLine = typeof params.command === 'string'
+                ? params.command
+                : typeof params.cmd === 'string'
+                    ? params.cmd
+                    : '';
+            // Some tools pass argv-style params (args/argv) instead of a shell command line.
+            const argv = Array.isArray(params.argv) && params.argv.every((a) => typeof a === 'string')
+                ? params.argv
+                : Array.isArray(params.args) && params.args.every((a) => typeof a === 'string')
+                    ? params.args
+                    : null;
+            let command = '';
+            let args = [];
+            if (cmdLine.trim()) {
+                const parts = cmdLine.trim().split(/\s+/).filter(Boolean);
+                command = parts[0] ?? '';
+                const inlineArgs = parts.slice(1);
+                if (inlineArgs.length > 0) {
+                    // Treat `command`/`cmd` as the full command line when it includes args.
+                    args = inlineArgs;
+                }
+                else if (argv && argv.length > 0) {
+                    // Otherwise, if args/argv is present, treat it as args unless it redundantly includes the command.
+                    args = argv[0] === command ? argv.slice(1) : argv;
+                }
+            }
+            else if (argv && argv.length > 0) {
+                [command, ...args] = argv;
+            }
+            return {
+                eventId,
+                eventType: 'command_exec',
+                timestamp,
+                sessionId,
+                data: { type: 'command', command, args },
+                metadata: { toolName, preflight: true },
+            };
+        }
+        case 'patch_apply': {
+            const filePath = typeof params.filePath === 'string' ? params.filePath : typeof params.path === 'string' ? params.path : '';
+            const patchContent = typeof params.patch === 'string' ? params.patch : typeof params.content === 'string' ? params.content : '';
+            return {
+                eventId,
+                eventType: 'patch_apply',
+                timestamp,
+                sessionId,
+                data: { type: 'patch', filePath, patchContent },
+                metadata: { toolName, preflight: true },
+            };
+        }
+        case 'network_egress': {
+            const { host, port, url } = extractNetworkInfo(params);
+            return {
+                eventId,
+                eventType: 'network_egress',
+                timestamp,
+                sessionId,
+                data: { type: 'network', host, port, url },
+                metadata: { toolName, preflight: true },
+            };
+        }
+        default: {
+            return {
+                eventId,
+                eventType: 'tool_call',
+                timestamp,
+                sessionId,
+                data: { type: 'tool', toolName, parameters: params },
+                metadata: { toolName, preflight: true },
+            };
+        }
+    }
+}
+function extractNetworkInfo(params) {
+    const url = typeof params.url === 'string' ? params.url
+        : typeof params.endpoint === 'string' ? params.endpoint
+            : typeof params.href === 'string' ? params.href
+                : undefined;
+    if (url) {
+        try {
+            const parsed = new URL(url);
+            return {
+                host: parsed.hostname,
+                port: parsed.port
+                    ? parseInt(parsed.port, 10)
+                    : (parsed.protocol === 'https:' || parsed.protocol === 'wss:' ? 443 : 80),
+                url,
+            };
+        }
+        catch {
+            // Not a valid URL
+        }
+    }
+    const host = typeof params.host === 'string'
+        ? params.host
+        : typeof params.hostname === 'string'
+            ? params.hostname
+            : 'unknown';
+    const port = typeof params.port === 'number' ? params.port : 80;
+    return { host, port, url };
+}
+function looksLikePatchApply(params) {
+    return typeof params.patch === 'string'
+        || typeof params.diff === 'string'
+        || typeof params.patchContent === 'string';
+}
+function looksLikeCommandExec(params) {
+    if (typeof params.command === 'string' || typeof params.cmd === 'string')
+        return true;
+    if (Array.isArray(params.args) && params.args.every((a) => typeof a === 'string'))
+        return true;
+    if (Array.isArray(params.argv) && params.argv.every((a) => typeof a === 'string'))
+        return true;
+    return false;
+}
+function looksLikeNetworkEgress(params) {
+    if (typeof params.url === 'string' || typeof params.endpoint === 'string' || typeof params.href === 'string')
+        return true;
+    if (typeof params.host === 'string' || typeof params.hostname === 'string')
+        return true;
+    return false;
+}
+function looksLikeFileWrite(params) {
+    // Common write payload keys used by various tool APIs.
+    if (typeof params.content === 'string')
+        return true;
+    if (typeof params.text === 'string')
+        return true;
+    if (typeof params.contentBase64 === 'string')
+        return true;
+    if (typeof params.base64 === 'string')
+        return true;
+    if (typeof params.patch === 'string' || typeof params.diff === 'string')
+        return true;
+    if (typeof params.operation === 'string') {
+        const op = params.operation.toLowerCase();
+        if (op === 'write' || op === 'append' || op === 'delete' || op === 'remove' || op === 'truncate')
+            return true;
+    }
+    return false;
+}
+// Approval flow:
+// 1. Pre-flight guard denies a non-critical action
+// 2. If the agent's approval API is configured (CLAWDSTRIKE_APPROVAL_URL env),
+//    submit an approval request and poll for resolution
+// 3. If no approval system configured or timeout, deny immediately
+//
+// The desktop agent's ApprovalQueue (/api/v1/approval/*) surfaces these
+// to users via OS notifications and tray menu. The OpenClaw gateway
+// exec_approval_queue is a separate system for gateway-specific flows.
+const APPROVAL_POLL_INTERVAL_MS = 1_000;
+const APPROVAL_POLL_TIMEOUT_MS = 60_000;
+/**
+ * Submit an approval request and poll until resolved or expired.
+ * Returns the resolved approval status if the user approved, null otherwise.
+ */
+async function requestApproval(details) {
+    const approvalUrl = process.env.CLAWDSTRIKE_APPROVAL_URL;
+    if (!approvalUrl) {
+        return null;
+    }
+    const token = process.env.CLAWDSTRIKE_AGENT_TOKEN;
+    if (!token) {
+        console.warn('[clawdstrike] CLAWDSTRIKE_APPROVAL_URL is set but CLAWDSTRIKE_AGENT_TOKEN is missing — skipping approval request');
+        return null;
+    }
+    const authHeaders = {
+        'Content-Type': 'application/json',
+        'Authorization': 'Bearer ' + token,
+    };
+    let id;
+    try {
+        const submitRes = await fetch(`${approvalUrl}/api/v1/approval/request`, {
+            method: 'POST',
+            headers: authHeaders,
+            signal: AbortSignal.timeout(10_000),
+            body: JSON.stringify({
+                tool: details.toolName,
+                resource: details.resource,
+                guard: details.guard,
+                reason: details.reason,
+                severity: details.severity,
+                session_id: details.sessionId,
+            }),
+        });
+        if (!submitRes.ok) {
+            return null;
+        }
+        const body = (await submitRes.json());
+        id = body.id;
+    }
+    catch {
+        return null;
+    }
+    const deadline = Date.now() + APPROVAL_POLL_TIMEOUT_MS;
+    while (Date.now() < deadline) {
+        await new Promise((resolve) => setTimeout(resolve, APPROVAL_POLL_INTERVAL_MS));
+        try {
+            const pollRes = await fetch(`${approvalUrl}/api/v1/approval/${id}/status`, {
+                headers: { 'Authorization': 'Bearer ' + token },
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (!pollRes.ok) {
+                return null;
+            }
+            const status = (await pollRes.json());
+            if (status.status === 'resolved') {
+                if (status.resolution !== null && status.resolution !== 'deny') {
+                    return status;
+                }
+                return null;
+            }
+            if (status.status === 'expired') {
+                return null;
+            }
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Hook handler for tool_call (pre-execution) events.
+ *
+ * If the tool is destructive, evaluates the policy engine.
+ * On deny: submits an approval request if the approval API is configured,
+ *          and blocks unless the user approves.
+ * On warn: adds a warning message but allows execution.
+ * On allow / read-only: no-op.
+ */
+const handler = async (event, hookCtx) => {
+    const isModernBeforeToolCallEvent = (value) => {
+        if (value && typeof value === 'object' && 'type' in value)
+            return false;
+        return Boolean(value &&
+            typeof value === 'object' &&
+            typeof value.toolName === 'string' &&
+            typeof value.params === 'object' &&
+            value.params !== null);
+    };
+    const isModern = isModernBeforeToolCallEvent(event);
+    if (!isModern) {
+        if (event.type !== 'tool_call' && event.type !== 'before_tool_call') {
+            return;
+        }
+    }
+    const legacyToolEvent = isModern ? null : event;
+    // Skip if already handled by another hook registration (e.g. before_tool_call + tool_call dual registration)
+    if (!isModern && legacyToolEvent.preventDefault)
+        return;
+    // Skip if the CUA bridge handler already evaluated this tool call.
+    // CUA tools receive specialized policy evaluation via the bridge; running
+    // the general preflight handler as well would cause double evaluation.
+    if (event.__cuaBridgeEvaluated)
+        return;
+    const toolName = isModern ? event.toolName : legacyToolEvent.context.toolCall.toolName;
+    const params = isModern ? event.params : legacyToolEvent.context.toolCall.params;
+    const sessionId = isModern
+        ? (hookCtx?.sessionKey ?? hookCtx?.agentId ?? 'openclaw-runtime')
+        : legacyToolEvent.context.sessionId;
+    // Determine if this tool is destructive
+    const eventType = inferPolicyEventType(toolName, params);
+    if (eventType === null) {
+        // Confirmed read-only tool: skip pre-flight, let post-execution handle it
+        return;
+    }
+    const policyEngine = getEngine();
+    const policyEvent = buildPolicyEvent(sessionId, toolName, params, eventType);
+    const decision = await policyEngine.evaluate(policyEvent);
+    if (decision.status === 'deny') {
+        const resource = normalizeApprovalResource(policyEngine, toolName, params);
+        const guard = decision.guard ?? 'unknown';
+        const severity = decision.severity ?? 'high';
+        // If the user previously approved this exact action for this session (or globally),
+        // honor it and avoid re-prompting.
+        if (severity !== 'critical') {
+            const prior = peekApproval(sessionId, toolName, resource);
+            if (prior) {
+                if (!isModern) {
+                    legacyToolEvent.messages.push(`[clawdstrike] Pre-flight check: using prior ${prior.resolution} approval for ${toolName} on ${resource}`);
+                }
+                return;
+            }
+        }
+        // If the denial is non-critical and the approval API is configured,
+        // submit an approval request and wait for user resolution.
+        if (severity !== 'critical' && process.env.CLAWDSTRIKE_APPROVAL_URL) {
+            const approvalResult = await requestApproval({
+                toolName,
+                resource,
+                guard,
+                reason: decision.reason ?? 'Policy denied',
+                severity,
+                sessionId,
+            });
+            if (approvalResult) {
+                const resolution = approvalResult.resolution;
+                recordApproval(sessionId, toolName, resource, resolution);
+                if (!isModern) {
+                    legacyToolEvent.messages.push(`[clawdstrike] Pre-flight check: ${toolName} on ${resource} was approved by user`);
+                }
+                return;
+            }
+        }
+        const blockReason = `blocked ${toolName} on ${resource}${decision.reason ? ` — ${decision.reason}` : ''}`;
+        if (isModern) {
+            return { block: true, blockReason, params };
+        }
+        legacyToolEvent.preventDefault = true;
+        legacyToolEvent.messages.push(`[clawdstrike] Pre-flight check: ${blockReason}`);
+        if (legacyToolEvent.type === 'before_tool_call') {
+            return { block: true, blockReason, params };
+        }
+        return;
+    }
+    if (!isModern && decision.status === 'warn') {
+        legacyToolEvent.messages.push(`[clawdstrike] Pre-flight warning: ${decision.message ?? decision.reason ?? 'Policy warning'} (${toolName})`);
+    }
+};
+export default handler;
+//# sourceMappingURL=handler.js.map

package/dist/hooks/tool-preflight/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../src/hooks/tool-preflight/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,cAAc,EAA+B,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB;IAClD,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAA0B;IAClD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAKD;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,MAA+B;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,8FAA8F;QAC9F,2FAA2F;QAC3F,qDAAqD;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9E,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,gEAAgE;QAChE,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,KAAK,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,qBAAqB,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,mEAAmE;IACnE,IAAI,mBAAmB,CAAC,MAAM,CAAC;QAAE,OAAO,aAAa,CAAC;IACtD,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IACxD,IAAI,sBAAsB,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAE5D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC;QACN,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACjE,CAAC;IAED,uFAAuF;IACvF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,SAAiB,EACjB,QAAgB,EAChB,MAA+B,EAC/B,SAAoB;IAEpB,MAAM,OAAO,GAAG,aAAa,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,WAAW;gBACtB,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC/C,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,YAAY;gBACvB,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;gBAC1H,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,CAAC,CAAC,MAAM,CAAC,GAAG;oBACZ,CAAC,CAAC,EAAE,CAAC;YAEX,iFAAiF;YACjF,MAAM,IAAI,GACR,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAC3E,CAAC,CAAE,MAAM,CAAC,IAAiB;gBAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAC7E,CAAC,CAAE,MAAM,CAAC,IAAiB;oBAC3B,CAAC,CAAC,IAAI,CAAC;YAEb,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,IAAI,GAAa,EAAE,CAAC;YAExB,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC1D,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAElC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,wEAAwE;oBACxE,IAAI,GAAG,UAAU,CAAC;gBACpB,CAAC;qBAAM,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,mGAAmG;oBACnG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpD,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,cAAc;gBACzB,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5H,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAChI,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,aAAa;gBACxB,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE;gBAC/C,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,gBAAgB;gBAC3B,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC1C,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,WAAW;gBACtB,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE;gBACpD,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+B;IACzD,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG;QACrD,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACvD,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBAC/C,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACf,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG;aACJ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+B;IAC1D,OAAO,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;WAClC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;WAC/B,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA+B;IAC3D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA+B;IAC7D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1H,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+B;IACzD,uDAAuD;IACvD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iBAAiB;AACjB,mDAAmD;AACnD,+EAA+E;AAC/E,wDAAwD;AACxD,mEAAmE;AACnE,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AAEvE,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAaxC;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,OAO9B;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,kHAAkH,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,cAAc,EAAE,kBAAkB;QAClC,eAAe,EAAE,SAAS,GAAG,KAAK;KACnC,CAAC;IAEF,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,0BAA0B,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,SAAS;aAC9B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA2B,CAAC;QAChE,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,CAAC;IACvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAE/E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,oBAAoB,EAAE,SAAS,EAAE;gBACzE,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,GAAG,KAAK,EAAE;gBAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA2B,CAAC;YAEhE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;oBAC/D,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAgB,KAAK,EAChC,KAA0C,EAC1C,OAA6B,EACa,EAAE;IAC5C,MAAM,2BAA2B,GAAG,CAAC,KAA0C,EAAoC,EAAE;QACnH,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxE,OAAO,OAAO,CACZ,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAQ,KAAgC,CAAC,QAAQ,KAAK,QAAQ;YAC9D,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;YACzD,KAA8B,CAAC,MAAM,KAAK,IAAI,CAChD,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAsB,CAAC;IAEjE,6GAA6G;IAC7G,IAAI,CAAC,QAAQ,IAAI,eAAgB,CAAC,cAAc;QAAE,OAAO;IAEzD,mEAAmE;IACnE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAK,KAAa,CAAC,oBAAoB;QAAE,OAAO;IAEhD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClF,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,OAAO,IAAI,kBAAkB,CAAC;QACjE,CAAC,CAAC,eAAgB,CAAC,OAAO,CAAC,SAAS,CAAC;IAEvC,wCAAwC;IACxC,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,0EAA0E;QAC1E,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE1D,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;QAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC;QAE7C,oFAAoF;QACpF,mCAAmC;QACnC,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,eAAgB,CAAC,QAAQ,CAAC,IAAI,CAC5B,+CAA+C,KAAK,CAAC,UAAU,iBAAiB,QAAQ,OAAO,QAAQ,EAAE,CAC1G,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YACpE,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;gBAC3C,QAAQ;gBACR,QAAQ;gBACR,KAAK;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,eAAe;gBAC1C,QAAQ;gBACR,SAAS;aACV,CAAC,CAAC;YACH,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,cAAc,CAAC,UAAoC,CAAC;gBACvE,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,eAAgB,CAAC,QAAQ,CAAC,IAAI,CAC5B,mCAAmC,QAAQ,OAAO,QAAQ,uBAAuB,CAClF,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GACf,WAAW,QAAQ,OAAO,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC9C,CAAC;QACD,eAAgB,CAAC,cAAc,GAAG,IAAI,CAAC;QACvC,eAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QACjF,IAAI,eAAgB,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,eAAgB,CAAC,QAAQ,CAAC,IAAI,CAC5B,qCAAqC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB,KAAK,QAAQ,GAAG,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,OAAO,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,17 @@
 export { PolicyEngine } from './policy/engine.js';
 export { validatePolicy } from './policy/validator.js';
 export { loadPolicy, loadPolicyFromString, PolicyLoadError } from './policy/loader.js';
-export type { Decision, EvaluationMode, ClawdstrikeConfig, Policy, PolicyEvent, PolicyLintResult, } from './types.js';
+export type { Decision, EvaluationMode, ClawdstrikeConfig, Policy, PolicyEvent, PolicyLintResult, ToolCallEvent, } from './types.js';
 export { generateSecurityPrompt } from './security-prompt.js';
 export { checkPolicy, policyCheckTool } from './tools/policy-check.js';
 export { default as agentBootstrapHandler } from './hooks/agent-bootstrap/handler.js';
+export { default as toolPreflightHandler } from './hooks/tool-preflight/handler.js';
+export { default as cuaBridgeHandler, isCuaToolCall, CUA_ERROR_CODES } from './hooks/cua-bridge/handler.js';
 export { AuditStore, type AuditEvent } from './audit/store.js';
+export { OpenClawAuditLogger, type OpenClawAuditLoggerOptions } from './audit/adapter-logger.js';
 export { registerCli, createCli } from './cli/index.js';
+export { ReceiptSigner } from './receipt/signer.js';
+export type { DecisionReceipt, ReceiptSignerConfig } from './receipt/types.js';
+export { openclawTranslator, composeOpenClawConfig } from './translator/openclaw-translator.js';
+export { OpenClawAdapter, type OpenClawAdapterOptions } from './openclaw-adapter.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvF,YAAY,EACV,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGvE,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAGtF,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvF,YAAY,EACV,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,WAAW,EACX,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGvE,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAG5G,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,KAAK,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAGjG,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAGhG,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -8,8 +8,17 @@ export { generateSecurityPrompt } from './security-prompt.js';
 export { checkPolicy, policyCheckTool } from './tools/policy-check.js';
 // Hooks
 export { default as agentBootstrapHandler } from './hooks/agent-bootstrap/handler.js';
+export { default as toolPreflightHandler } from './hooks/tool-preflight/handler.js';
+export { default as cuaBridgeHandler, isCuaToolCall, CUA_ERROR_CODES } from './hooks/cua-bridge/handler.js';
 // Audit
 export { AuditStore } from './audit/store.js';
+export { OpenClawAuditLogger } from './audit/adapter-logger.js';
 // CLI
 export { registerCli, createCli } from './cli/index.js';
+// Receipt/Attestation
+export { ReceiptSigner } from './receipt/signer.js';
+// Translator
+export { openclawTranslator, composeOpenClawConfig } from './translator/openclaw-translator.js';
+// Adapter (FrameworkAdapter interface from @clawdstrike/adapter-core)
+export { OpenClawAdapter } from './openclaw-adapter.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAUvF,kBAAkB;AAClB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,QAAQ;AACR,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEvE,QAAQ;AACR,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEtF,QAAQ;AACR,OAAO,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAE/D,MAAM;AACN,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAWvF,kBAAkB;AAClB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,QAAQ;AACR,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEvE,QAAQ;AACR,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE5G,QAAQ;AACR,OAAO,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAmC,MAAM,2BAA2B,CAAC;AAEjG,MAAM;AACN,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAExD,sBAAsB;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,aAAa;AACb,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEhG,sEAAsE;AACtE,OAAO,EAAE,eAAe,EAA+B,MAAM,uBAAuB,CAAC"}

package/dist/openclaw-adapter.d.ts

@@ -0,0 +1,48 @@
+import type { AdapterConfig, AuditLogger, FrameworkAdapter, FrameworkHooks, GenericToolCall, InterceptResult, PolicyEngineLike, ProcessedOutput, SecurityContext, SessionSummary } from '@clawdstrike/adapter-core';
+import { PolicyEngine } from './policy/engine.js';
+export interface OpenClawAdapterOptions extends AdapterConfig {
+    auditLogger?: AuditLogger;
+}
+/**
+ * OpenClawAdapter implements the standard `FrameworkAdapter` interface from
+ * `@clawdstrike/adapter-core`, providing a unified entry point that follows
+ * the same pattern as the Claude, Vercel AI, LangChain, and other adapters.
+ *
+ * It delegates to the existing openclaw `PolicyEngine` for all security
+ * evaluation while layering on the adapter-core interceptor, audit, and
+ * context-management infrastructure.
+ *
+ * Audit logging is enabled by default. Pass `auditLogger` to supply a custom
+ * logger, or rely on the built-in `OpenClawAuditLogger`.
+ *
+ * This is purely additive and does not change the existing hook-based
+ * integration path.
+ *
+ * @example
+ * ```ts
+ * import { OpenClawAdapter, PolicyEngine } from '@clawdstrike/openclaw';
+ *
+ * const engine = new PolicyEngine({ policy: 'strict' });
+ * const adapter = new OpenClawAdapter(engine);
+ *
+ * const ctx = adapter.createContext({ userId: 'user-1' });
+ * const result = await adapter.interceptToolCall(ctx, toolCall);
+ * ```
+ */
+export declare class OpenClawAdapter implements FrameworkAdapter {
+    private readonly delegate;
+    private readonly engine;
+    private readonly auditLogger;
+    constructor(engine: PolicyEngine, config?: OpenClawAdapterOptions);
+    get name(): string;
+    get version(): string;
+    initialize(config: AdapterConfig): Promise<void>;
+    createContext(metadata?: Record<string, unknown>): SecurityContext;
+    interceptToolCall(context: SecurityContext, toolCall: GenericToolCall): Promise<InterceptResult>;
+    processOutput(context: SecurityContext, toolCall: GenericToolCall, output: unknown): Promise<ProcessedOutput>;
+    finalizeContext(context: SecurityContext): Promise<SessionSummary>;
+    getEngine(): PolicyEngineLike;
+    getHooks(): FrameworkHooks;
+    getAuditLogger(): AuditLogger;
+}
+//# sourceMappingURL=openclaw-adapter.d.ts.map

package/dist/openclaw-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-adapter.d.ts","sourceRoot":"","sources":["../src/openclaw-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,EACf,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,WAAW,sBAAuB,SAAQ,aAAa;IAC3D,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,eAAgB,YAAW,gBAAgB;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;gBAE9B,MAAM,EAAE,YAAY,EAAE,MAAM,GAAE,sBAA2B;IAmBrE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAEK,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe;IAI5D,iBAAiB,CACrB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,eAAe,CAAC;IAIrB,aAAa,CACjB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,eAAe,CAAC;IAIrB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAIxE,SAAS,IAAI,gBAAgB;IAI7B,QAAQ,IAAI,cAAc;IAI1B,cAAc,IAAI,WAAW;CAG9B"}

package/dist/openclaw-adapter.js

@@ -0,0 +1,81 @@
+import { createFrameworkAdapter } from '@clawdstrike/adapter-core';
+import { OpenClawAuditLogger } from './audit/adapter-logger.js';
+import { composeOpenClawConfig } from './translator/openclaw-translator.js';
+/**
+ * OpenClawAdapter implements the standard `FrameworkAdapter` interface from
+ * `@clawdstrike/adapter-core`, providing a unified entry point that follows
+ * the same pattern as the Claude, Vercel AI, LangChain, and other adapters.
+ *
+ * It delegates to the existing openclaw `PolicyEngine` for all security
+ * evaluation while layering on the adapter-core interceptor, audit, and
+ * context-management infrastructure.
+ *
+ * Audit logging is enabled by default. Pass `auditLogger` to supply a custom
+ * logger, or rely on the built-in `OpenClawAuditLogger`.
+ *
+ * This is purely additive and does not change the existing hook-based
+ * integration path.
+ *
+ * @example
+ * ```ts
+ * import { OpenClawAdapter, PolicyEngine } from '@clawdstrike/openclaw';
+ *
+ * const engine = new PolicyEngine({ policy: 'strict' });
+ * const adapter = new OpenClawAdapter(engine);
+ *
+ * const ctx = adapter.createContext({ userId: 'user-1' });
+ * const result = await adapter.interceptToolCall(ctx, toolCall);
+ * ```
+ */
+export class OpenClawAdapter {
+    delegate;
+    engine;
+    auditLogger;
+    constructor(engine, config = {}) {
+        this.engine = engine;
+        this.auditLogger = config.auditLogger ?? new OpenClawAuditLogger();
+        const adapterConfig = {
+            ...config,
+            audit: {
+                enabled: true,
+                logger: this.auditLogger,
+                logParameters: true,
+                logOutputs: false,
+                redactPII: true,
+                ...config.audit,
+            },
+        };
+        this.delegate = createFrameworkAdapter('openclaw', engine, composeOpenClawConfig(adapterConfig));
+    }
+    get name() {
+        return this.delegate.name;
+    }
+    get version() {
+        return this.delegate.version;
+    }
+    async initialize(config) {
+        return this.delegate.initialize(config);
+    }
+    createContext(metadata) {
+        return this.delegate.createContext(metadata);
+    }
+    async interceptToolCall(context, toolCall) {
+        return this.delegate.interceptToolCall(context, toolCall);
+    }
+    async processOutput(context, toolCall, output) {
+        return this.delegate.processOutput(context, toolCall, output);
+    }
+    async finalizeContext(context) {
+        return this.delegate.finalizeContext(context);
+    }
+    getEngine() {
+        return this.engine;
+    }
+    getHooks() {
+        return this.delegate.getHooks();
+    }
+    getAuditLogger() {
+        return this.auditLogger;
+    }
+}
+//# sourceMappingURL=openclaw-adapter.js.map

package/dist/openclaw-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-adapter.js","sourceRoot":"","sources":["../src/openclaw-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAcnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAM5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,eAAe;IACT,QAAQ,CAAmB;IAC3B,MAAM,CAAe;IACrB,WAAW,CAAc;IAE1C,YAAY,MAAoB,EAAE,SAAiC,EAAE;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,mBAAmB,EAAE,CAAC;QAEnE,MAAM,aAAa,GAAkB;YACnC,GAAG,MAAM;YACT,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,IAAI;gBACf,GAAG,MAAM,CAAC,KAAK;aAChB;SACF,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,MAA0B,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IACvH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAqB;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,QAAkC;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAAwB,EACxB,QAAyB;QAEzB,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAwB,EACxB,QAAyB,EACzB,MAAe;QAEf,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAwB;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF"}