@cyberdyne-systems/agent-safety 2026.3.12 → 2026.3.14

package/index.ts

@@ -46,6 +46,14 @@ export default function register(api: OpenClawPluginApi) {
   const telegramApproval = pluginConfig.telegramApproval ?? false;
   const telegramOwnerId = pluginConfig.telegramOwnerId;
 
+  // Update owner's UID to match Telegram owner ID if configured
+  if (telegramOwnerId) {
+    const owner = store.getOwner();
+    if (owner && owner.uid !== telegramOwnerId) {
+      store.update(owner.id, { uid: telegramOwnerId });
+    }
+  }
+
   // Register the agent-facing safety tool
   api.registerTool(
     ((_ctx) => {
@@ -64,10 +72,13 @@ export default function register(api: OpenClawPluginApi) {
       if (toolName === "agent_safety") return;
 
       const actionCategory = toolNameToCategory(toolName);
-      const requester = store.resolveRequester(
-        ctx.requesterSenderId ?? undefined,
-        (ctx as Record<string, unknown>).senderIsOwner as boolean | undefined,
-      );
+      const senderId = ctx.requesterSenderId ?? undefined;
+      // If sender matches configured Telegram owner ID, treat as owner
+      const senderIsOwner =
+        ((ctx as Record<string, unknown>).senderIsOwner as boolean | undefined) ||
+        (telegramOwnerId && senderId === telegramOwnerId) ||
+        undefined;
+      const requester = store.resolveRequester(senderId, senderIsOwner || undefined);
       const owner = store.getOwner();
       const stakeholders = store.list();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyberdyne-systems/agent-safety",
-  "version": "2026.3.12",
+  "version": "2026.3.14",
   "description": "Agent safety system: stakeholder model, action validator, and safety dashboard — based on arXiv:2602.20021",
   "type": "module",
   "dependencies": {

package/src/approval.ts

@@ -43,11 +43,11 @@ export class ApprovalManager {
 
   /** Check if there's a cached decision for a similar request */
   getCachedDecision(
-    toolName: string,
+    _toolName: string,
     actionCategory: ActionCategory,
     requesterName: string,
   ): "approved" | "denied" | null {
-    const key = `${toolName}:${actionCategory}:${requesterName}`;
+    const key = `${actionCategory}:${requesterName}`;
     return this.decisions.get(key) ?? null;
   }
 
@@ -58,8 +58,8 @@ export class ApprovalManager {
     approval.decision = decision;
     approval.decidedAt = Date.now();
 
-    // Cache the decision for future similar requests
-    const key = `${approval.toolName}:${approval.actionCategory}:${approval.requesterName}`;
+    // Cache the decision for future similar requests (by category, not tool name)
+    const key = `${approval.actionCategory}:${approval.requesterName}`;
     this.decisions.set(key, decision);
 
     this.pending.delete(id);

package/src/integration.test.ts

@@ -106,10 +106,10 @@ describe("Integration: full hook pipeline", () => {
 
   // Requester resolution
   it("resolves owner, known user, unknown sender", () => {
-    // Owner running dangerous command → blocked (requires Telegram approval)
+    // Owner running dangerous command → warned but NOT blocked (owner is trusted)
     expect(
       simulateHook(store, auditLog, "bash", { command: "rm -rf /tmp/test" }, undefined, true).block,
-    ).toBe(true);
+    ).toBe(false);
     // Owner running safe command → allowed
     expect(
       simulateHook(store, auditLog, "bash", { command: "ls -la" }, undefined, true).block,

package/src/validator.ts

@@ -179,9 +179,11 @@ export function quickCheck(input: {
             : isPrivEsc
               ? "privilege escalation"
               : "shell injection";
+      // Owner gets WARN (logged but not blocked); non-owner gets BLOCK
+      const isOwner = requester.role === "owner" || requester.trust >= 4;
       return {
-        verdict: "BLOCK",
-        riskScore: 95,
+        verdict: isOwner ? "WARN" : "BLOCK",
+        riskScore: isOwner ? 60 : 95,
         risks: [
           {
             type: "reversibility",
@@ -204,9 +206,10 @@ export function quickCheck(input: {
       /while\s+true|for\s*\(\s*;\s*;\s*\)|watch\s+-n|tail\s+-f/i.test(command) &&
       !/(timeout|sleep\s+\d+.*&&\s*exit|--timeout)/i.test(command);
     if (hasInfiniteLoop) {
+      const isOwner = requester.role === "owner" || requester.trust >= 4;
       return {
-        verdict: "BLOCK",
-        riskScore: 80,
+        verdict: isOwner ? "WARN" : "BLOCK",
+        riskScore: isOwner ? 50 : 80,
         risks: [
           {
             type: "resource",