@clawdstrike/openclaw 0.1.3 → 0.2.2

package/dist/policy/engine.js

@@ -1,12 +1,12 @@
-import { homedir } from 'node:os';
-import path from 'node:path';
-import { parseNetworkTarget } from '@clawdstrike/adapter-core';
-import { createPolicyEngineFromPolicy } from '@clawdstrike/policy';
-import { mergeConfig } from '../config.js';
-import { EgressGuard, ForbiddenPathGuard, PatchIntegrityGuard, SecretLeakGuard } from '../guards/index.js';
-import { sanitizeOutputText } from '../sanitizer/output-sanitizer.js';
-import { loadPolicy } from './loader.js';
-import { validatePolicy } from './validator.js';
+import { homedir } from "node:os";
+import path from "node:path";
+import { parseNetworkTarget } from "@clawdstrike/adapter-core";
+import { createPolicyEngineFromPolicy } from "@clawdstrike/policy";
+import { mergeConfig } from "../config.js";
+import { EgressGuard, ForbiddenPathGuard, PatchIntegrityGuard, SecretLeakGuard, } from "../guards/index.js";
+import { sanitizeOutputText } from "../sanitizer/output-sanitizer.js";
+import { loadPolicy } from "./loader.js";
+import { validatePolicy } from "./validator.js";
 function expandHome(p) {
     return p.replace(/^~(?=\/|$)/, homedir());
 }
@@ -14,10 +14,20 @@ function normalizePathForPrefix(p) {
     return path.resolve(expandHome(p));
 }
 function cleanPathToken(t) {
-    return t.trim().replace(/^[("'`]+/, '').replace(/[)"'`;,\]}]+$/, '');
+    return t
+        .trim()
+        .replace(/^[("'`]+/, "")
+        .replace(/[)"'`;,\]}]+$/, "");
 }
 function isRedirectionOp(t) {
-    return t === '>' || t === '>>' || t === '1>' || t === '1>>' || t === '2>' || t === '2>>' || t === '<' || t === '<<';
+    return (t === ">" ||
+        t === ">>" ||
+        t === "1>" ||
+        t === "1>>" ||
+        t === "2>" ||
+        t === "2>>" ||
+        t === "<" ||
+        t === "<<");
 }
 function splitInlineRedirection(t) {
     // Support forms like ">/path", "2>>/path", "<input".
@@ -32,39 +42,42 @@ function splitInlineRedirection(t) {
 function looksLikePathToken(t) {
     if (!t)
         return false;
-    if (t.includes('://'))
+    if (t.includes("://"))
         return false;
-    if (t.startsWith('/') || t.startsWith('~') || t.startsWith('./') || t.startsWith('../'))
+    if (t.startsWith("/") || t.startsWith("~") || t.startsWith("./") || t.startsWith("../"))
         return true;
-    if (t === '.env' || t.startsWith('.env.'))
+    if (t === ".env" || t.startsWith(".env."))
         return true;
-    if (t.includes('/.ssh/') || t.includes('/.aws/') || t.includes('/.gnupg/') || t.includes('/.kube/'))
+    if (t.includes("/.ssh/") ||
+        t.includes("/.aws/") ||
+        t.includes("/.gnupg/") ||
+        t.includes("/.kube/"))
         return true;
     return false;
 }
 const WRITE_PATH_FLAG_NAMES = new Set([
     // Common output flags
-    'o',
-    'out',
-    'output',
-    'outfile',
-    'output-file',
+    "o",
+    "out",
+    "output",
+    "outfile",
+    "output-file",
     // Common log file flags
-    'log-file',
-    'logfile',
-    'log-path',
-    'logpath',
+    "log-file",
+    "logfile",
+    "log-path",
+    "logpath",
 ]);
 function isWritePathFlagToken(t) {
     if (!t)
         return false;
-    if (!t.startsWith('-'))
+    if (!t.startsWith("-"))
         return false;
-    const normalized = t.replace(/^-+/, '').toLowerCase().replace(/_/g, '-');
+    const normalized = t.replace(/^-+/, "").toLowerCase().replace(/_/g, "-");
     return WRITE_PATH_FLAG_NAMES.has(normalized);
 }
 function extractCommandPathCandidates(command, args) {
-    const tokens = [command, ...args].map((t) => String(t ?? '')).filter(Boolean);
+    const tokens = [command, ...args].map((t) => String(t ?? "")).filter(Boolean);
     const reads = [];
     const writes = [];
     for (let i = 0; i < tokens.length; i++) {
@@ -72,10 +85,16 @@ function extractCommandPathCandidates(command, args) {
         // Redirection operators: treat as write/read targets.
         if (isRedirectionOp(t)) {
             const next = tokens[i + 1];
-            if (typeof next === 'string' && next.length > 0) {
+            if (typeof next === "string" && next.length > 0) {
                 const cleaned = cleanPathToken(next);
                 if (cleaned) {
-                    if (t.startsWith('>') || t === '>' || t === '>>' || t === '1>' || t === '1>>' || t === '2>' || t === '2>>') {
+                    if (t.startsWith(">") ||
+                        t === ">" ||
+                        t === ">>" ||
+                        t === "1>" ||
+                        t === "1>>" ||
+                        t === "2>" ||
+                        t === "2>>") {
                         writes.push(cleaned);
                     }
                     else {
@@ -89,7 +108,7 @@ function extractCommandPathCandidates(command, args) {
         if (inline) {
             const cleaned = cleanPathToken(inline);
             if (cleaned) {
-                if (t.includes('>'))
+                if (t.includes(">"))
                     writes.push(cleaned);
                 else
                     reads.push(cleaned);
@@ -99,7 +118,7 @@ function extractCommandPathCandidates(command, args) {
         // Flags like --output /path or -o /path (write targets)
         if (isWritePathFlagToken(t)) {
             const next = tokens[i + 1];
-            if (typeof next === 'string' && next.length > 0) {
+            if (typeof next === "string" && next.length > 0) {
                 const cleaned = cleanPathToken(next);
                 if (looksLikePathToken(cleaned)) {
                     writes.push(cleaned);
@@ -109,7 +128,7 @@ function extractCommandPathCandidates(command, args) {
             }
         }
         // Flags like --output=/path
-        const eq = t.indexOf('=');
+        const eq = t.indexOf("=");
         if (eq > 0) {
             const lhs = t.slice(0, eq);
             const rhs = cleanPathToken(t.slice(eq + 1));
@@ -129,33 +148,33 @@ function extractCommandPathCandidates(command, args) {
     return { reads: uniq(reads), writes: uniq(writes) };
 }
 const POLICY_REASON_CODES = {
-    POLICY_DENY: 'ADC_POLICY_DENY',
-    POLICY_WARN: 'ADC_POLICY_WARN',
-    GUARD_ERROR: 'ADC_GUARD_ERROR',
-    CUA_MALFORMED_EVENT: 'OCLAW_CUA_MALFORMED_EVENT',
-    CUA_COMPUTER_USE_CONFIG_MISSING: 'OCLAW_CUA_COMPUTER_USE_CONFIG_MISSING',
-    CUA_COMPUTER_USE_DISABLED: 'OCLAW_CUA_COMPUTER_USE_DISABLED',
-    CUA_ACTION_NOT_ALLOWED: 'OCLAW_CUA_ACTION_NOT_ALLOWED',
-    CUA_MODE_UNSUPPORTED: 'OCLAW_CUA_MODE_UNSUPPORTED',
-    CUA_CONNECT_METADATA_MISSING: 'OCLAW_CUA_CONNECT_METADATA_MISSING',
-    CUA_SIDE_CHANNEL_CONFIG_MISSING: 'OCLAW_CUA_SIDE_CHANNEL_CONFIG_MISSING',
-    CUA_SIDE_CHANNEL_DISABLED: 'OCLAW_CUA_SIDE_CHANNEL_DISABLED',
-    CUA_SIDE_CHANNEL_POLICY_DENY: 'OCLAW_CUA_SIDE_CHANNEL_POLICY_DENY',
-    CUA_TRANSFER_SIZE_CONFIG_INVALID: 'OCLAW_CUA_TRANSFER_SIZE_CONFIG_INVALID',
-    CUA_TRANSFER_SIZE_MISSING: 'OCLAW_CUA_TRANSFER_SIZE_MISSING',
-    CUA_TRANSFER_SIZE_EXCEEDED: 'OCLAW_CUA_TRANSFER_SIZE_EXCEEDED',
-    CUA_INPUT_CONFIG_MISSING: 'OCLAW_CUA_INPUT_CONFIG_MISSING',
-    CUA_INPUT_DISABLED: 'OCLAW_CUA_INPUT_DISABLED',
-    CUA_INPUT_TYPE_MISSING: 'OCLAW_CUA_INPUT_TYPE_MISSING',
-    CUA_INPUT_TYPE_NOT_ALLOWED: 'OCLAW_CUA_INPUT_TYPE_NOT_ALLOWED',
-    CUA_POSTCONDITION_PROBE_REQUIRED: 'OCLAW_CUA_POSTCONDITION_PROBE_REQUIRED',
-    FILESYSTEM_WRITE_ROOT_DENY: 'OCLAW_FILESYSTEM_WRITE_ROOT_DENY',
-    TOOL_DENIED: 'OCLAW_TOOL_DENIED',
-    TOOL_NOT_ALLOWLISTED: 'OCLAW_TOOL_NOT_ALLOWLISTED',
+    POLICY_DENY: "ADC_POLICY_DENY",
+    POLICY_WARN: "ADC_POLICY_WARN",
+    GUARD_ERROR: "ADC_GUARD_ERROR",
+    CUA_MALFORMED_EVENT: "OCLAW_CUA_MALFORMED_EVENT",
+    CUA_COMPUTER_USE_CONFIG_MISSING: "OCLAW_CUA_COMPUTER_USE_CONFIG_MISSING",
+    CUA_COMPUTER_USE_DISABLED: "OCLAW_CUA_COMPUTER_USE_DISABLED",
+    CUA_ACTION_NOT_ALLOWED: "OCLAW_CUA_ACTION_NOT_ALLOWED",
+    CUA_MODE_UNSUPPORTED: "OCLAW_CUA_MODE_UNSUPPORTED",
+    CUA_CONNECT_METADATA_MISSING: "OCLAW_CUA_CONNECT_METADATA_MISSING",
+    CUA_SIDE_CHANNEL_CONFIG_MISSING: "OCLAW_CUA_SIDE_CHANNEL_CONFIG_MISSING",
+    CUA_SIDE_CHANNEL_DISABLED: "OCLAW_CUA_SIDE_CHANNEL_DISABLED",
+    CUA_SIDE_CHANNEL_POLICY_DENY: "OCLAW_CUA_SIDE_CHANNEL_POLICY_DENY",
+    CUA_TRANSFER_SIZE_CONFIG_INVALID: "OCLAW_CUA_TRANSFER_SIZE_CONFIG_INVALID",
+    CUA_TRANSFER_SIZE_MISSING: "OCLAW_CUA_TRANSFER_SIZE_MISSING",
+    CUA_TRANSFER_SIZE_EXCEEDED: "OCLAW_CUA_TRANSFER_SIZE_EXCEEDED",
+    CUA_INPUT_CONFIG_MISSING: "OCLAW_CUA_INPUT_CONFIG_MISSING",
+    CUA_INPUT_DISABLED: "OCLAW_CUA_INPUT_DISABLED",
+    CUA_INPUT_TYPE_MISSING: "OCLAW_CUA_INPUT_TYPE_MISSING",
+    CUA_INPUT_TYPE_NOT_ALLOWED: "OCLAW_CUA_INPUT_TYPE_NOT_ALLOWED",
+    CUA_POSTCONDITION_PROBE_REQUIRED: "OCLAW_CUA_POSTCONDITION_PROBE_REQUIRED",
+    FILESYSTEM_WRITE_ROOT_DENY: "OCLAW_FILESYSTEM_WRITE_ROOT_DENY",
+    TOOL_DENIED: "OCLAW_TOOL_DENIED",
+    TOOL_NOT_ALLOWLISTED: "OCLAW_TOOL_NOT_ALLOWLISTED",
 };
-function denyDecision(reason_code, reason, guard, severity = 'high') {
+function denyDecision(reason_code, reason, guard, severity = "high") {
     return {
-        status: 'deny',
+        status: "deny",
         reason_code,
         reason,
         message: reason,
@@ -163,9 +182,9 @@ function denyDecision(reason_code, reason, guard, severity = 'high') {
         ...(severity !== undefined && { severity }),
     };
 }
-function warnDecision(reason_code, reason, guard, severity = 'medium') {
+function warnDecision(reason_code, reason, guard, severity = "medium") {
     return {
-        status: 'warn',
+        status: "warn",
         reason_code,
         reason,
         message: reason,
@@ -174,13 +193,15 @@ function warnDecision(reason_code, reason, guard, severity = 'medium') {
     };
 }
 function ensureReasonCode(decision) {
-    if (decision.status === 'allow')
+    if (decision.status === "allow")
         return decision;
-    if (typeof decision.reason_code === 'string' && decision.reason_code.trim().length > 0)
+    if (typeof decision.reason_code === "string" && decision.reason_code.trim().length > 0)
         return decision;
     return {
         ...decision,
-        reason_code: decision.status === 'warn' ? POLICY_REASON_CODES.POLICY_WARN : POLICY_REASON_CODES.GUARD_ERROR,
+        reason_code: decision.status === "warn"
+            ? POLICY_REASON_CODES.POLICY_WARN
+            : POLICY_REASON_CODES.GUARD_ERROR,
     };
 }
 export class PolicyEngine {
@@ -204,15 +225,15 @@ export class PolicyEngine {
         const g = this.config.guards;
         const enabled = [];
         if (g.forbidden_path)
-            enabled.push('forbidden_path');
+            enabled.push("forbidden_path");
         if (g.egress)
-            enabled.push('egress');
+            enabled.push("egress");
         if (g.secret_leak)
-            enabled.push('secret_leak');
+            enabled.push("secret_leak");
         if (g.patch_integrity)
-            enabled.push('patch_integrity');
+            enabled.push("patch_integrity");
         if (g.mcp_tool)
-            enabled.push('mcp_tool');
+            enabled.push("mcp_tool");
         return enabled;
     }
     getPolicy() {
@@ -239,7 +260,7 @@ export class PolicyEngine {
     async evaluate(event) {
         const base = this.evaluateDeterministic(event);
         // Fail fast on deterministic violations to avoid unnecessary external calls.
-        if (base.status === 'deny' || base.status === 'warn') {
+        if (base.status === "deny" || base.status === "warn") {
             return this.applyMode(base, this.config.mode);
         }
         if (this.threatIntelEngine) {
@@ -251,143 +272,143 @@ export class PolicyEngine {
         return this.applyMode(base, this.config.mode);
     }
     applyMode(result, mode) {
-        if (mode === 'audit') {
+        if (mode === "audit") {
             return {
-                status: 'allow',
+                status: "allow",
                 reason_code: result.reason_code,
                 reason: result.reason,
-                message: `[audit] Original decision: ${result.status} — ${result.message ?? result.reason ?? 'no reason'}`,
+                message: `[audit] Original decision: ${result.status} — ${result.message ?? result.reason ?? "no reason"}`,
                 guard: result.guard,
                 severity: result.severity,
             };
         }
-        if (mode === 'advisory' && result.status === 'deny') {
-            return ensureReasonCode(warnDecision(result.reason_code, result.reason ?? result.message ?? 'policy deny converted to advisory warning', result.guard, result.severity ?? 'medium'));
+        if (mode === "advisory" && result.status === "deny") {
+            return ensureReasonCode(warnDecision(result.reason_code, result.reason ?? result.message ?? "policy deny converted to advisory warning", result.guard, result.severity ?? "medium"));
         }
         return ensureReasonCode(result);
     }
     getExpectedDataType(eventType) {
         switch (eventType) {
-            case 'file_read':
-            case 'file_write':
-                return 'file';
-            case 'command_exec':
-                return 'command';
-            case 'network_egress':
-                return 'network';
-            case 'tool_call':
-                return 'tool';
-            case 'patch_apply':
-                return 'patch';
-            case 'secret_access':
-                return 'secret';
-            case 'custom':
+            case "file_read":
+            case "file_write":
+                return "file";
+            case "command_exec":
+                return "command";
+            case "network_egress":
+                return "network";
+            case "tool_call":
+                return "tool";
+            case "patch_apply":
+                return "patch";
+            case "secret_access":
+                return "secret";
+            case "custom":
                 return undefined;
             default:
                 // CUA event types (starting with 'remote.' or 'input.')
-                if (eventType.startsWith('remote.') || eventType.startsWith('input.')) {
-                    return 'cua';
+                if (eventType.startsWith("remote.") || eventType.startsWith("input.")) {
+                    return "cua";
                 }
                 return undefined;
         }
     }
     evaluateDeterministic(event) {
-        const allowed = { status: 'allow' };
+        const allowed = { status: "allow" };
         // Validate eventType/data.type consistency to prevent guard bypass
         const expectedDataType = this.getExpectedDataType(event.eventType);
         if (expectedDataType && event.data.type !== expectedDataType) {
             return {
-                status: 'deny',
-                reason_code: 'event_type_mismatch',
+                status: "deny",
+                reason_code: "event_type_mismatch",
                 reason: `Event type "${event.eventType}" requires data.type "${expectedDataType}" but got "${event.data.type}"`,
-                guard: 'policy_engine',
-                severity: 'critical',
+                guard: "policy_engine",
+                severity: "critical",
             };
         }
         switch (event.eventType) {
-            case 'file_read':
-            case 'file_write':
+            case "file_read":
+            case "file_write":
                 return this.checkFilesystem(event);
-            case 'network_egress':
+            case "network_egress":
                 return this.checkEgress(event);
-            case 'command_exec':
+            case "command_exec":
                 return this.checkExecution(event);
-            case 'tool_call':
+            case "tool_call":
                 return this.checkToolCall(event);
-            case 'patch_apply':
+            case "patch_apply":
                 return this.checkPatch(event);
-            case 'remote.session.connect':
-            case 'remote.session.disconnect':
-            case 'remote.session.reconnect':
-            case 'input.inject':
-            case 'remote.clipboard':
-            case 'remote.file_transfer':
-            case 'remote.audio':
-            case 'remote.drive_mapping':
-            case 'remote.printing':
-            case 'remote.session_share':
+            case "remote.session.connect":
+            case "remote.session.disconnect":
+            case "remote.session.reconnect":
+            case "input.inject":
+            case "remote.clipboard":
+            case "remote.file_transfer":
+            case "remote.audio":
+            case "remote.drive_mapping":
+            case "remote.printing":
+            case "remote.session_share":
                 return this.checkCua(event);
             default:
                 return allowed;
         }
     }
     checkCua(event) {
-        if (event.data.type !== 'cua') {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_MALFORMED_EVENT, `Malformed CUA event payload for ${event.eventType}: data.type must be 'cua'`, 'computer_use', 'high'));
+        if (event.data.type !== "cua") {
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_MALFORMED_EVENT, `Malformed CUA event payload for ${event.eventType}: data.type must be 'cua'`, "computer_use", "high"));
         }
         const cuaData = event.data;
         const connectEgressDecision = this.checkCuaConnectEgress(event, cuaData);
-        if (connectEgressDecision.status === 'deny' || connectEgressDecision.status === 'warn') {
+        if (connectEgressDecision.status === "deny" || connectEgressDecision.status === "warn") {
             return connectEgressDecision;
         }
         const computerUse = this.policy.guards?.computer_use;
         if (!computerUse) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_COMPUTER_USE_CONFIG_MISSING, `CUA action '${event.eventType}' denied: missing guards.computer_use policy config`, 'computer_use', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_COMPUTER_USE_CONFIG_MISSING, `CUA action '${event.eventType}' denied: missing guards.computer_use policy config`, "computer_use", "high"));
         }
         if (computerUse.enabled === false) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_COMPUTER_USE_DISABLED, `CUA action '${event.eventType}' denied: computer_use guard is disabled`, 'computer_use', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_COMPUTER_USE_DISABLED, `CUA action '${event.eventType}' denied: computer_use guard is disabled`, "computer_use", "high"));
         }
-        const mode = computerUse.mode ?? 'guardrail';
+        const mode = computerUse.mode ?? "guardrail";
         const allowedActions = normalizeStringList(computerUse.allowed_actions);
         const actionAllowed = allowedActions.length === 0 || allowedActions.includes(event.eventType);
         if (!actionAllowed) {
             const reason = `CUA action '${event.eventType}' is not listed in guards.computer_use.allowed_actions`;
-            if (mode === 'observe' || mode === 'guardrail') {
-                return warnDecision(POLICY_REASON_CODES.CUA_ACTION_NOT_ALLOWED, reason, 'computer_use', 'medium');
+            if (mode === "observe" || mode === "guardrail") {
+                return warnDecision(POLICY_REASON_CODES.CUA_ACTION_NOT_ALLOWED, reason, "computer_use", "medium");
             }
-            if (mode !== 'fail_closed') {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_MODE_UNSUPPORTED, `CUA action '${event.eventType}' denied: unsupported computer_use mode '${mode}'`, 'computer_use', 'high'));
+            if (mode !== "fail_closed") {
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_MODE_UNSUPPORTED, `CUA action '${event.eventType}' denied: unsupported computer_use mode '${mode}'`, "computer_use", "high"));
             }
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_ACTION_NOT_ALLOWED, reason, 'computer_use', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_ACTION_NOT_ALLOWED, reason, "computer_use", "high"));
         }
         const sideChannelDecision = this.checkRemoteDesktopSideChannel(event, cuaData);
-        if (sideChannelDecision.status === 'deny' || sideChannelDecision.status === 'warn') {
+        if (sideChannelDecision.status === "deny" || sideChannelDecision.status === "warn") {
             return sideChannelDecision;
         }
         const inputDecision = this.checkInputInjectionCapability(event, cuaData);
-        if (inputDecision.status === 'deny' || inputDecision.status === 'warn') {
+        if (inputDecision.status === "deny" || inputDecision.status === "warn") {
             return inputDecision;
         }
-        return { status: 'allow' };
+        return { status: "allow" };
     }
     checkCuaConnectEgress(event, data) {
-        if (event.eventType !== 'remote.session.connect') {
-            return { status: 'allow' };
+        if (event.eventType !== "remote.session.connect") {
+            return { status: "allow" };
         }
         if (!this.config.guards.egress) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         const target = extractCuaNetworkTarget(data);
         if (!target) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_CONNECT_METADATA_MISSING, "CUA connect action denied: missing destination host/url metadata required for egress evaluation", 'egress', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_CONNECT_METADATA_MISSING, "CUA connect action denied: missing destination host/url metadata required for egress evaluation", "egress", "high"));
         }
         const egressEvent = {
             eventId: `${event.eventId}:cua-connect-egress`,
-            eventType: 'network_egress',
+            eventType: "network_egress",
             timestamp: event.timestamp,
             sessionId: event.sessionId,
             data: {
-                type: 'network',
+                type: "network",
                 host: target.host,
                 port: target.port,
                 ...(target.protocol ? { protocol: target.protocol } : {}),
@@ -403,76 +424,76 @@ export class PolicyEngine {
     checkRemoteDesktopSideChannel(event, data) {
         const sideChannelFlag = eventTypeToSideChannelFlag(event.eventType);
         if (!sideChannelFlag) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         const cfg = this.policy.guards?.remote_desktop_side_channel;
         if (!cfg) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_CONFIG_MISSING, `CUA side-channel action '${event.eventType}' denied: missing guards.remote_desktop_side_channel policy config`, 'remote_desktop_side_channel', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_CONFIG_MISSING, `CUA side-channel action '${event.eventType}' denied: missing guards.remote_desktop_side_channel policy config`, "remote_desktop_side_channel", "high"));
         }
         if (cfg.enabled === false) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_DISABLED, `CUA side-channel action '${event.eventType}' denied: remote_desktop_side_channel guard is disabled`, 'remote_desktop_side_channel', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_DISABLED, `CUA side-channel action '${event.eventType}' denied: remote_desktop_side_channel guard is disabled`, "remote_desktop_side_channel", "high"));
         }
         if (cfg[sideChannelFlag] === false) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_POLICY_DENY, `CUA side-channel action '${event.eventType}' denied by policy`, 'remote_desktop_side_channel', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_SIDE_CHANNEL_POLICY_DENY, `CUA side-channel action '${event.eventType}' denied by policy`, "remote_desktop_side_channel", "high"));
         }
-        if (event.eventType === 'remote.file_transfer') {
+        if (event.eventType === "remote.file_transfer") {
             const maxBytes = cfg.max_transfer_size_bytes;
             if (maxBytes !== undefined) {
-                if (typeof maxBytes !== 'number' || !Number.isFinite(maxBytes) || maxBytes < 0) {
-                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_CONFIG_INVALID, `CUA file transfer denied: invalid max_transfer_size_bytes '${String(maxBytes)}'`, 'remote_desktop_side_channel', 'high'));
+                if (typeof maxBytes !== "number" || !Number.isFinite(maxBytes) || maxBytes < 0) {
+                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_CONFIG_INVALID, `CUA file transfer denied: invalid max_transfer_size_bytes '${String(maxBytes)}'`, "remote_desktop_side_channel", "high"));
                 }
                 const transferSize = extractTransferSize(data);
                 if (transferSize === null) {
-                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_MISSING, 'CUA file transfer denied: missing required transfer_size metadata', 'remote_desktop_side_channel', 'high'));
+                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_MISSING, "CUA file transfer denied: missing required transfer_size metadata", "remote_desktop_side_channel", "high"));
                 }
                 if (transferSize > maxBytes) {
-                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_EXCEEDED, `CUA file transfer size ${transferSize} exceeds max_transfer_size_bytes ${maxBytes}`, 'remote_desktop_side_channel', 'high'));
+                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_TRANSFER_SIZE_EXCEEDED, `CUA file transfer size ${transferSize} exceeds max_transfer_size_bytes ${maxBytes}`, "remote_desktop_side_channel", "high"));
                 }
             }
         }
-        return { status: 'allow' };
+        return { status: "allow" };
     }
     checkInputInjectionCapability(event, data) {
-        if (event.eventType !== 'input.inject') {
-            return { status: 'allow' };
+        if (event.eventType !== "input.inject") {
+            return { status: "allow" };
         }
         const cfg = this.policy.guards?.input_injection_capability;
         if (!cfg) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_CONFIG_MISSING, `CUA input action '${event.eventType}' denied: missing guards.input_injection_capability policy config`, 'input_injection_capability', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_CONFIG_MISSING, `CUA input action '${event.eventType}' denied: missing guards.input_injection_capability policy config`, "input_injection_capability", "high"));
         }
         if (cfg.enabled === false) {
-            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_DISABLED, `CUA input action '${event.eventType}' denied: input_injection_capability guard is disabled`, 'input_injection_capability', 'high'));
+            return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_DISABLED, `CUA input action '${event.eventType}' denied: input_injection_capability guard is disabled`, "input_injection_capability", "high"));
         }
         const allowedInputTypes = normalizeStringList(cfg.allowed_input_types);
         const inputType = extractInputType(data);
         if (allowedInputTypes.length > 0) {
             if (!inputType) {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_TYPE_MISSING, "CUA input action denied: missing required 'input_type'", 'input_injection_capability', 'high'));
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_TYPE_MISSING, "CUA input action denied: missing required 'input_type'", "input_injection_capability", "high"));
             }
             if (!allowedInputTypes.includes(inputType)) {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_TYPE_NOT_ALLOWED, `CUA input action denied: input_type '${inputType}' is not allowed`, 'input_injection_capability', 'high'));
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_INPUT_TYPE_NOT_ALLOWED, `CUA input action denied: input_type '${inputType}' is not allowed`, "input_injection_capability", "high"));
             }
         }
         if (cfg.require_postcondition_probe === true) {
             const probeHash = data.postconditionProbeHash;
-            if (typeof probeHash !== 'string' || probeHash.trim().length === 0) {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_POSTCONDITION_PROBE_REQUIRED, 'CUA input action denied: postcondition probe hash is required', 'input_injection_capability', 'high'));
+            if (typeof probeHash !== "string" || probeHash.trim().length === 0) {
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.CUA_POSTCONDITION_PROBE_REQUIRED, "CUA input action denied: postcondition probe hash is required", "input_injection_capability", "high"));
             }
         }
-        return { status: 'allow' };
+        return { status: "allow" };
     }
     checkFilesystem(event) {
         if (!this.config.guards.forbidden_path) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         // First, enforce forbidden path patterns.
         const forbidden = this.forbiddenPathGuard.checkSync(event, this.policy);
         const mapped = this.guardResultToDecision(forbidden);
-        if (mapped.status === 'deny' || mapped.status === 'warn') {
+        if (mapped.status === "deny" || mapped.status === "warn") {
             return this.applyOnViolation(mapped);
         }
         // Then, enforce write roots if configured.
-        if (event.eventType === 'file_write' && event.data.type === 'file') {
+        if (event.eventType === "file_write" && event.data.type === "file") {
             const allowedWriteRoots = this.policy.filesystem?.allowed_write_roots;
             if (allowedWriteRoots && allowedWriteRoots.length > 0) {
                 const filePath = normalizePathForPrefix(event.data.path);
@@ -481,15 +502,15 @@ export class PolicyEngine {
                     return filePath === rootPath || filePath.startsWith(rootPath + path.sep);
                 });
                 if (!ok) {
-                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.FILESYSTEM_WRITE_ROOT_DENY, 'Write path not in allowed roots', 'forbidden_path', 'high'));
+                    return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.FILESYSTEM_WRITE_ROOT_DENY, "Write path not in allowed roots", "forbidden_path", "high"));
                 }
             }
         }
-        return { status: 'allow' };
+        return { status: "allow" };
     }
     checkEgress(event) {
         if (!this.config.guards.egress) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         const res = this.egressGuard.checkSync(event, this.policy);
         const mapped = this.guardResultToDecision(res);
@@ -499,7 +520,7 @@ export class PolicyEngine {
         // Defense in depth: shell/command execution can still touch the filesystem.
         // Best-effort extract path-like tokens (including redirections) and run them through the
         // filesystem policy checks (forbidden paths + allowed write roots).
-        if (this.config.guards.forbidden_path && event.data.type === 'command') {
+        if (this.config.guards.forbidden_path && event.data.type === "command") {
             const { reads, writes } = extractCommandPathCandidates(event.data.command, event.data.args);
             const maxChecks = 64;
             let checks = 0;
@@ -509,14 +530,14 @@ export class PolicyEngine {
                     break;
                 const synthetic = {
                     eventId: `${event.eventId}:cmdwrite:${checks}`,
-                    eventType: 'file_write',
+                    eventType: "file_write",
                     timestamp: event.timestamp,
                     sessionId: event.sessionId,
-                    data: { type: 'file', path: p, operation: 'write' },
-                    metadata: { ...event.metadata, derivedFrom: 'command_exec' },
+                    data: { type: "file", path: p, operation: "write" },
+                    metadata: { ...event.metadata, derivedFrom: "command_exec" },
                 };
                 const d = this.checkFilesystem(synthetic);
-                if (d.status === 'deny' || d.status === 'warn')
+                if (d.status === "deny" || d.status === "warn")
                     return d;
             }
             for (const p of reads) {
@@ -524,19 +545,19 @@ export class PolicyEngine {
                     break;
                 const synthetic = {
                     eventId: `${event.eventId}:cmdread:${checks}`,
-                    eventType: 'file_read',
+                    eventType: "file_read",
                     timestamp: event.timestamp,
                     sessionId: event.sessionId,
-                    data: { type: 'file', path: p, operation: 'read' },
-                    metadata: { ...event.metadata, derivedFrom: 'command_exec' },
+                    data: { type: "file", path: p, operation: "read" },
+                    metadata: { ...event.metadata, derivedFrom: "command_exec" },
                 };
                 const d = this.checkFilesystem(synthetic);
-                if (d.status === 'deny' || d.status === 'warn')
+                if (d.status === "deny" || d.status === "warn")
                     return d;
             }
         }
         if (!this.config.guards.patch_integrity) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         const res = this.patchIntegrityGuard.checkSync(event, this.policy);
         const mapped = this.guardResultToDecision(res);
@@ -544,40 +565,40 @@ export class PolicyEngine {
     }
     checkToolCall(event) {
         // Optional tool allow/deny list.
-        if (event.data.type === 'tool') {
+        if (event.data.type === "tool") {
             const tools = this.policy.tools;
             const toolName = event.data.toolName.toLowerCase();
             const deniedTools = tools?.denied?.map((x) => x.toLowerCase()) ?? [];
             if (deniedTools.includes(toolName)) {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.TOOL_DENIED, `Tool '${event.data.toolName}' is denied by policy`, 'mcp_tool', 'high'));
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.TOOL_DENIED, `Tool '${event.data.toolName}' is denied by policy`, "mcp_tool", "high"));
             }
             const allowedTools = tools?.allowed?.map((x) => x.toLowerCase()) ?? [];
             if (allowedTools.length > 0 && !allowedTools.includes(toolName)) {
-                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.TOOL_NOT_ALLOWLISTED, `Tool '${event.data.toolName}' is not in allowed tool list`, 'mcp_tool', 'high'));
+                return this.applyOnViolation(denyDecision(POLICY_REASON_CODES.TOOL_NOT_ALLOWLISTED, `Tool '${event.data.toolName}' is not in allowed tool list`, "mcp_tool", "high"));
             }
         }
         // Also check forbidden paths in tool parameters (defense in depth).
-        if (this.config.guards.forbidden_path && event.data.type === 'tool') {
+        if (this.config.guards.forbidden_path && event.data.type === "tool") {
             const params = event.data.parameters ?? {};
-            const pathKeys = ['path', 'file', 'file_path', 'filepath', 'filename', 'target'];
+            const pathKeys = ["path", "file", "file_path", "filepath", "filename", "target"];
             for (const key of pathKeys) {
                 const val = params[key];
-                if (typeof val === 'string' && val.length > 0) {
+                if (typeof val === "string" && val.length > 0) {
                     const pathEvent = {
                         ...event,
-                        eventType: 'file_write',
-                        data: { type: 'file', path: val, operation: 'write' },
+                        eventType: "file_write",
+                        data: { type: "file", path: val, operation: "write" },
                     };
                     const pathCheck = this.forbiddenPathGuard.checkSync(pathEvent, this.policy);
                     const pathDecision = this.guardResultToDecision(pathCheck);
-                    if (pathDecision.status === 'deny' || pathDecision.status === 'warn') {
+                    if (pathDecision.status === "deny" || pathDecision.status === "warn") {
                         return this.applyOnViolation(pathDecision);
                     }
                 }
             }
         }
         if (!this.config.guards.secret_leak) {
-            return { status: 'allow' };
+            return { status: "allow" };
         }
         const res = this.secretLeakGuard.checkSync(event, this.policy);
         const mapped = this.guardResultToDecision(res);
@@ -588,37 +609,37 @@ export class PolicyEngine {
             const r1 = this.patchIntegrityGuard.checkSync(event, this.policy);
             const mapped1 = this.guardResultToDecision(r1);
             const applied1 = this.applyOnViolation(mapped1);
-            if (applied1.status === 'deny' || applied1.status === 'warn')
+            if (applied1.status === "deny" || applied1.status === "warn")
                 return applied1;
         }
         if (this.config.guards.secret_leak) {
             const r2 = this.secretLeakGuard.checkSync(event, this.policy);
             const mapped2 = this.guardResultToDecision(r2);
             const applied2 = this.applyOnViolation(mapped2);
-            if (applied2.status === 'deny' || applied2.status === 'warn')
+            if (applied2.status === "deny" || applied2.status === "warn")
                 return applied2;
         }
-        return { status: 'allow' };
+        return { status: "allow" };
     }
     applyOnViolation(decision) {
         const action = this.policy.on_violation;
-        if (decision.status !== 'deny')
+        if (decision.status !== "deny")
             return decision;
-        if (action === 'warn') {
-            return warnDecision(decision.reason_code, decision.reason ?? decision.message ?? 'Policy violation downgraded to warning', decision.guard, decision.severity ?? 'medium');
+        if (action === "warn") {
+            return warnDecision(decision.reason_code, decision.reason ?? decision.message ?? "Policy violation downgraded to warning", decision.guard, decision.severity ?? "medium");
         }
-        if (action && action !== 'cancel') {
+        if (action && action !== "cancel") {
             console.warn(`[clawdstrike] Unhandled on_violation action: "${action}" — treating as deny`);
         }
         return decision;
     }
     guardResultToDecision(result) {
-        if (result.status === 'allow')
-            return { status: 'allow' };
-        if (result.status === 'warn') {
-            return warnDecision(POLICY_REASON_CODES.POLICY_WARN, result.reason ?? `${result.guard} returned warning`, result.guard, 'medium');
+        if (result.status === "allow")
+            return { status: "allow" };
+        if (result.status === "warn") {
+            return warnDecision(POLICY_REASON_CODES.POLICY_WARN, result.reason ?? `${result.guard} returned warning`, result.guard, "medium");
         }
-        return denyDecision(POLICY_REASON_CODES.GUARD_ERROR, result.reason ?? `${result.guard} denied request`, result.guard, result.severity ?? 'high');
+        return denyDecision(POLICY_REASON_CODES.GUARD_ERROR, result.reason ?? `${result.guard} denied request`, result.guard, result.severity ?? "high");
     }
 }
 function buildThreatIntelEngine(policy) {
@@ -630,7 +651,7 @@ function buildThreatIntelEngine(policy) {
     // expects `CustomGuardSpec[]`. We've validated it's an array above.
     // GuardConfigs has an index signature so `unknown[]` is assignable.
     const canonicalPolicy = {
-        version: '1.1.0',
+        version: "1.1.0",
         guards: { custom },
     };
     return createPolicyEngineFromPolicy(canonicalPolicy);
@@ -647,7 +668,7 @@ function combineDecisions(base, next) {
             ...base,
             message: base.message
                 ? `${base.message}; ${next.message ?? next.reason}`
-                : next.message ?? next.reason,
+                : (next.message ?? next.reason),
         };
     }
     return base;
@@ -657,7 +678,7 @@ function normalizeStringList(values) {
         return [];
     const out = [];
     for (const value of values) {
-        if (typeof value !== 'string')
+        if (typeof value !== "string")
             continue;
         const normalized = value.trim();
         if (normalized.length > 0)
@@ -668,7 +689,7 @@ function normalizeStringList(values) {
 function extractInputType(data) {
     const candidates = [data.input_type, data.inputType];
     for (const candidate of candidates) {
-        if (typeof candidate === 'string') {
+        if (typeof candidate === "string") {
             const normalized = candidate.trim().toLowerCase();
             if (normalized.length > 0)
                 return normalized;
@@ -677,17 +698,12 @@ function extractInputType(data) {
     return null;
 }
 function extractTransferSize(data) {
-    const candidates = [
-        data.transfer_size,
-        data.transferSize,
-        data.size_bytes,
-        data.sizeBytes,
-    ];
+    const candidates = [data.transfer_size, data.transferSize, data.size_bytes, data.sizeBytes];
     for (const candidate of candidates) {
-        if (typeof candidate === 'number' && Number.isFinite(candidate) && candidate >= 0) {
+        if (typeof candidate === "number" && Number.isFinite(candidate) && candidate >= 0) {
             return candidate;
         }
-        if (typeof candidate === 'string') {
+        if (typeof candidate === "string") {
             const parsed = Number.parseInt(candidate, 10);
             if (Number.isFinite(parsed) && parsed >= 0) {
                 return parsed;
@@ -697,12 +713,12 @@ function extractTransferSize(data) {
     return null;
 }
 function parsePort(value) {
-    if (typeof value === 'number' && Number.isFinite(value)) {
+    if (typeof value === "number" && Number.isFinite(value)) {
         const port = Math.trunc(value);
         if (port > 0 && port <= 65535)
             return port;
     }
-    if (typeof value === 'string') {
+    if (typeof value === "string") {
         const trimmed = value.trim();
         if (/^[0-9]+$/.test(trimmed)) {
             const parsed = Number.parseInt(trimmed, 10);
@@ -714,7 +730,7 @@ function parsePort(value) {
 }
 function firstNonEmptyString(values) {
     for (const value of values) {
-        if (typeof value !== 'string')
+        if (typeof value !== "string")
             continue;
         const trimmed = value.trim();
         if (trimmed.length > 0)
@@ -730,7 +746,7 @@ function extractCuaNetworkTarget(data) {
         data.target_url,
         data.targetUrl,
     ]);
-    const parsed = parseNetworkTarget(url ?? '', { emptyPort: 'default' });
+    const parsed = parseNetworkTarget(url ?? "", { emptyPort: "default" });
     const host = firstNonEmptyString([
         data.host,
         data.hostname,
@@ -744,12 +760,12 @@ function extractCuaNetworkTarget(data) {
         return null;
     }
     const protocol = firstNonEmptyString([data.protocol, data.scheme])?.toLowerCase();
-    const explicitPort = parsePort(data.port
-        ?? data.remote_port
-        ?? data.remotePort
-        ?? data.destination_port
-        ?? data.destinationPort);
-    const port = explicitPort ?? (parsed.host ? parsed.port : protocol === 'http' ? 80 : 443);
+    const explicitPort = parsePort(data.port ??
+        data.remote_port ??
+        data.remotePort ??
+        data.destination_port ??
+        data.destinationPort);
+    const port = explicitPort ?? (parsed.host ? parsed.port : protocol === "http" ? 80 : 443);
     return {
         host,
         port,
@@ -759,18 +775,18 @@ function extractCuaNetworkTarget(data) {
 }
 function eventTypeToSideChannelFlag(eventType) {
     switch (eventType) {
-        case 'remote.clipboard':
-            return 'clipboard_enabled';
-        case 'remote.file_transfer':
-            return 'file_transfer_enabled';
-        case 'remote.audio':
-            return 'audio_enabled';
-        case 'remote.drive_mapping':
-            return 'drive_mapping_enabled';
-        case 'remote.printing':
-            return 'printing_enabled';
-        case 'remote.session_share':
-            return 'session_share_enabled';
+        case "remote.clipboard":
+            return "clipboard_enabled";
+        case "remote.file_transfer":
+            return "file_transfer_enabled";
+        case "remote.audio":
+            return "audio_enabled";
+        case "remote.drive_mapping":
+            return "drive_mapping_enabled";
+        case "remote.printing":
+            return "printing_enabled";
+        case "remote.session_share":
+            return "session_share_enabled";
         default:
             return null;
     }