@darkelogix/openclaw-trusted-mode 1.0.5 → 1.0.6

package/CHANGELOG.md

@@ -12,6 +12,11 @@ Terminology and acronyms: [`GLOSSARY.md`](./GLOSSARY.md).
 ## Unreleased
 - No unreleased changes recorded.
 
+## v1.0.6
+- Add a runtime fallback that reads `plugins.entries.openclaw-trusted-mode.config` from `OPENCLAW_CONFIG_PATH` or `~/.openclaw/openclaw.json` when OpenClaw does not populate `api.config` on the hook-only plugin path.
+- Preserve governed-mode settings written by `openclaw-trusted-mode-configure` even on OpenClaw builds that load the plugin with incomplete in-memory config injection.
+- Publish the runtime fallback module in the npm tarball and cover it with adapter tests.
+
 ## v1.0.5
 - Add `openclaw-trusted-mode-configure`, a dedicated guided config writer for governed OpenClaw hosts that updates `~/.openclaw/openclaw.json` with `plugins.allow`, tenant, gateway, environment, PDP URL, and fail-closed settings.
 - Remove the remaining manual-JSON ambiguity from the package docs by documenting the new configure command for governed mode.

package/dist/index.js

@@ -5,9 +5,10 @@ const constraints_1 = require("./constraints");
 const contextCurator_1 = require("./contextCurator");
 const runtimeCertification_1 = require("./runtimeCertification");
 const hardening_1 = require("./hardening");
+const runtimePluginConfig_1 = require("./runtimePluginConfig");
 const sdeGuidance_1 = require("./sdeGuidance");
 function register(api) {
-    const config = api.config;
+    const config = (0, runtimePluginConfig_1.mergeDefinedConfig)((0, runtimePluginConfig_1.readRuntimePluginConfig)(), (api.config || {}));
     const pdpUrl = config.pdpUrl || 'http://localhost:8001/v1/authorize';
     const policyVariant = config.policyVariant || 'guard-pro.v2026.02';
     const pdpTimeoutMs = typeof config.pdpTimeoutMs === 'number' ? config.pdpTimeoutMs : 5000;

package/dist/runtimePluginConfig.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOpenClawConfigPath = resolveOpenClawConfigPath;
+exports.readRuntimePluginConfig = readRuntimePluginConfig;
+exports.mergeDefinedConfig = mergeDefinedConfig;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const PLUGIN_ID = "openclaw-trusted-mode";
+function ensureObject(value) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+        return value;
+    }
+    return {};
+}
+function resolveOpenClawConfigPath(env = process.env) {
+    if (env.OPENCLAW_CONFIG_PATH)
+        return env.OPENCLAW_CONFIG_PATH;
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), ".openclaw", "openclaw.json");
+}
+function readRuntimePluginConfig(env = process.env) {
+    const configPath = resolveOpenClawConfigPath(env);
+    if (!(0, node_fs_1.existsSync)(configPath)) {
+        return {};
+    }
+    try {
+        const root = ensureObject(JSON.parse((0, node_fs_1.readFileSync)(configPath, "utf8")));
+        const plugins = ensureObject(root.plugins);
+        const entries = ensureObject(plugins.entries);
+        const entry = ensureObject(entries[PLUGIN_ID]);
+        return ensureObject(entry.config);
+    }
+    catch {
+        return {};
+    }
+}
+function mergeDefinedConfig(base, override) {
+    const merged = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+        if (value !== undefined) {
+            merged[key] = value;
+        }
+    }
+    return merged;
+}

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "openclaw-trusted-mode",
   "name": "Trusted Mode Governance",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "Provable enforcement using SDE-PDP + signed policy packs",
   "author": "Darkelogix",
   "hooks": ["before_tool_call"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkelogix/openclaw-trusted-mode",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional SDE-backed governance",
   "license": "MIT",
   "main": "dist/index.js",
@@ -47,6 +47,7 @@
     "dist/index.js",
     "dist/openclawConfig.js",
     "dist/packageVersion.js",
+    "dist/runtimePluginConfig.js",
     "dist/runtimeCertification.js",
     "dist/sdeGuidance.js",
     "openclaw.plugin.json",