@contextfort-ai/openclaw-secure 0.1.2 → 0.1.3

package/bin/openclaw-secure.js

@@ -31,7 +31,7 @@ if (args[0] === 'set-key') {
   const key = args[1];
   if (!key) {
     console.error('Usage: openclaw-secure set-key <your-api-key>');
-    console.error('Get your key at https://contextfort.ai');
+    console.error('Get your key at https://contextfort.ai/login');
     process.exit(1);
   }
   fs.mkdirSync(CONFIG_DIR, { recursive: true });
@@ -45,7 +45,7 @@ if (args[0] === 'enable') {
   let hasKey = false;
   try { hasKey = fs.readFileSync(CONFIG_FILE, 'utf8').trim().length > 0; } catch {}
   if (!hasKey) {
-    console.error('No API key found. Get your key at https://contextfort.ai and run:');
+    console.error('No API key found. Get your key at https://contextfort.ai/login and run:');
     console.error('  openclaw-secure set-key <your-key>');
     process.exit(1);
   }
@@ -57,6 +57,17 @@ if (args[0] === 'enable') {
     console.error('openclaw not found. Install it first: npm install -g openclaw');
     process.exit(1);
   }
+  // Handle --no-skill-deliver flag
+  const noSkillDeliver = args.includes('--no-skill-deliver');
+  const prefsFile = path.join(CONFIG_DIR, 'preferences.json');
+  let prefs = {};
+  try { prefs = JSON.parse(fs.readFileSync(prefsFile, 'utf8')); } catch {}
+  prefs.skillDeliver = !noSkillDeliver;
+  fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  fs.writeFileSync(prefsFile, JSON.stringify(prefs, null, 2) + '\n', { mode: 0o600 });
+  if (noSkillDeliver) {
+    console.log('Skill file scanning disabled. Only local checks will run.');
+  }
   try {
     const original = fs.readlinkSync(openclawLink);
     fs.writeFileSync(backupLink, original);
@@ -65,6 +76,7 @@ if (args[0] === 'enable') {
   fs.unlinkSync(openclawLink);
   fs.symlinkSync(wrapper, openclawLink);
   console.log('openclaw-secure enabled. `openclaw` is now guarded.');
+  console.log('Restart your openclaw gateway for the guard to take effect.');
   process.exit(0);
 }
 

package/monitor/skills_guard/index.js

@@ -8,7 +8,17 @@ const os = require('os');
 const SKILL_SCAN_API = 'https://lschqndjjwtyrlcojvly.supabase.co/functions/v1/scan-skill';
 const HOME = os.homedir();
 
-module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDir, apiKey, analytics }) {
+module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDir, apiKey, analytics, enabled = true }) {
+  // If skill delivery is disabled, return a no-op guard
+  if (!enabled) {
+    return {
+      checkFlaggedSkills() { return null; },
+      formatSkillBlockError() { return ''; },
+      init() {},
+      cleanup() {},
+    };
+  }
+
   const track = analytics ? analytics.track.bind(analytics) : () => {};
   const SKILL_CACHE_FILE = path.join(baseDir, 'monitor', '.skill_scan_cache.json');
   const INSTALL_ID_FILE = path.join(baseDir, 'monitor', '.install_id');

package/openclaw-secure.js

@@ -9,7 +9,15 @@ const _originalHttpsRequest = require('https').request;
 const os = require('os');
 const MONITOR_PY = path.join(__dirname, 'monitor', 'monitor.py');
 const MONITOR_CWD = path.join(__dirname, 'monitor');
-const CONFIG_FILE = path.join(os.homedir(), '.contextfort', 'config');
+const CONFIG_DIR = path.join(os.homedir(), '.contextfort');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config');
+const PREFS_FILE = path.join(CONFIG_DIR, 'preferences.json');
+
+function loadPreferences() {
+  try { return JSON.parse(_originalReadFileSync(PREFS_FILE, 'utf8')); } catch { return {}; }
+}
+const PREFS = loadPreferences();
+const SKILL_DELIVER = PREFS.skillDeliver !== false; // default true
 
 // === Analytics ===
 const analytics = require('./monitor/analytics')({
@@ -32,7 +40,7 @@ function loadApiKey() {
 const API_KEY = loadApiKey();
 
 const NO_KEY_MESSAGE = `SECURITY FIREWALL -- No API key configured. ALL agent actions are blocked.
-Get your API key at https://contextfort.ai and run:
+Get your API key at https://contextfort.ai/login and run:
   openclaw-secure set-key <your-key>
 Then restart your openclaw session.`;
 
@@ -48,6 +56,7 @@ const skillsGuard = require('./monitor/skills_guard')({
   baseDir: __dirname,
   apiKey: API_KEY,
   analytics,
+  enabled: SKILL_DELIVER,
 });
 
 // === Prompt Injection Guard (PostToolUse) ===

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "@contextfort-ai/openclaw-secure",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Runtime security guard for OpenClaw — blocks malicious commands before they execute",
   "bin": {
     "openclaw-secure": "./bin/openclaw-secure.js"
   },
+  "scripts": {
+    "postinstall": "node -e \"console.log('\\n\\x1b[32m✓ openclaw-secure installed!\\x1b[0m\\n\\nGet your API key at https://contextfort.ai/login and run:\\n\\n  openclaw-secure set-key <your-key>\\n  openclaw-secure enable\\n')\""
+  },
   "keywords": [
     "openclaw",
     "security",