@dp-pcs/ogp 0.2.0

package/dist/daemon/doorman.js

@@ -0,0 +1,203 @@
+/**
+ * OGP Doorman - Runtime scope enforcement and rate limiting
+ *
+ * The doorman sits at Layer 3 of the scope model:
+ * Layer 1: Gateway Capabilities - What I CAN support
+ * Layer 2: Peer Negotiation - What I WILL grant YOU
+ * Layer 3: Runtime Enforcement - Is THIS request within YOUR granted scope (doorman)
+ */
+import { getPeer } from './peers.js';
+import { DEFAULT_V1_SCOPES, DEFAULT_RATE_LIMIT, findScopeGrant, scopeCoversIntent } from './scopes.js';
+// In-memory rate limit tracking
+// Key format: "peerId:intent"
+const rateLimitStore = new Map();
+// Cleanup interval (5 minutes)
+const CLEANUP_INTERVAL_MS = 5 * 60 * 1000;
+let cleanupTimer = null;
+/**
+ * Start the periodic cleanup of expired rate limit entries
+ */
+export function startDoormanCleanup() {
+    if (cleanupTimer)
+        return;
+    cleanupTimer = setInterval(cleanupExpiredEntries, CLEANUP_INTERVAL_MS);
+}
+/**
+ * Stop the periodic cleanup
+ */
+export function stopDoormanCleanup() {
+    if (cleanupTimer) {
+        clearInterval(cleanupTimer);
+        cleanupTimer = null;
+    }
+}
+/**
+ * Clean up expired rate limit entries
+ */
+function cleanupExpiredEntries() {
+    const now = Date.now();
+    for (const [key, entry] of rateLimitStore.entries()) {
+        // Remove entries with no recent activity (> 1 hour old)
+        if (now - entry.windowStart > 3600 * 1000) {
+            rateLimitStore.delete(key);
+        }
+    }
+}
+/**
+ * Check if a request from a peer is allowed
+ *
+ * @param peerId - The peer making the request
+ * @param intent - The intent being requested
+ * @param payload - Optional payload with topic for agent-comms
+ * @returns DoormanResult indicating if request is allowed
+ */
+export function checkAccess(peerId, intent, payload) {
+    // 1. Get peer and verify approved
+    const peer = getPeer(peerId);
+    if (!peer) {
+        return {
+            allowed: false,
+            reason: 'Unknown peer',
+            statusCode: 403
+        };
+    }
+    if (peer.status !== 'approved') {
+        return {
+            allowed: false,
+            reason: 'Peer not approved',
+            statusCode: 403
+        };
+    }
+    // 2. Determine scope bundle to use
+    // Priority: grantedScopes takes precedence over protocolVersion
+    let scopeBundle;
+    let isV1Peer = false;
+    if (peer.grantedScopes) {
+        // Use negotiated scopes if they exist
+        scopeBundle = peer.grantedScopes;
+        isV1Peer = !peer.protocolVersion || peer.protocolVersion === '0.1.0';
+    }
+    else {
+        // No scope negotiation done - fall back to v0.1 defaults
+        isV1Peer = true;
+        scopeBundle = DEFAULT_V1_SCOPES;
+    }
+    // 3. Find scope grant for this intent
+    const grant = findScopeGrant(scopeBundle, intent);
+    if (!grant) {
+        return {
+            allowed: false,
+            reason: `Intent '${intent}' not in granted scope`,
+            statusCode: 403,
+            isV1Peer
+        };
+    }
+    // 4. Check if scope covers this specific request (including topic)
+    const topic = payload?.topic;
+    if (!scopeCoversIntent(grant, intent, topic)) {
+        if (topic && grant.topics && grant.topics.length > 0) {
+            return {
+                allowed: false,
+                reason: `Topic '${topic}' not allowed for intent '${intent}'`,
+                statusCode: 403,
+                isV1Peer
+            };
+        }
+        return {
+            allowed: false,
+            reason: `Intent '${intent}' scope check failed`,
+            statusCode: 403,
+            isV1Peer
+        };
+    }
+    // 5. Check rate limit
+    const rateLimit = grant.rateLimit || DEFAULT_RATE_LIMIT;
+    const rateLimitResult = checkRateLimit(peerId, intent, rateLimit);
+    if (!rateLimitResult.allowed) {
+        return {
+            allowed: false,
+            reason: `Rate limit exceeded for intent '${intent}'`,
+            statusCode: 429,
+            retryAfter: rateLimitResult.retryAfter,
+            isV1Peer
+        };
+    }
+    // 6. All checks passed
+    return {
+        allowed: true,
+        isV1Peer
+    };
+}
+/**
+ * Check and update rate limit for a peer+intent combination
+ */
+function checkRateLimit(peerId, intent, limit) {
+    const key = `${peerId}:${intent}`;
+    const now = Date.now();
+    const windowMs = limit.windowSeconds * 1000;
+    let entry = rateLimitStore.get(key);
+    if (!entry) {
+        // First request - create entry
+        entry = {
+            timestamps: [now],
+            windowStart: now
+        };
+        rateLimitStore.set(key, entry);
+        return { allowed: true };
+    }
+    // Filter out timestamps outside the sliding window
+    const windowStart = now - windowMs;
+    entry.timestamps = entry.timestamps.filter(ts => ts > windowStart);
+    entry.windowStart = windowStart;
+    // Check if we're at the limit
+    if (entry.timestamps.length >= limit.requests) {
+        // Calculate when the oldest request will expire
+        const oldestInWindow = Math.min(...entry.timestamps);
+        const retryAfter = Math.ceil((oldestInWindow + windowMs - now) / 1000);
+        return {
+            allowed: false,
+            retryAfter: Math.max(1, retryAfter)
+        };
+    }
+    // Record this request
+    entry.timestamps.push(now);
+    return { allowed: true };
+}
+/**
+ * Get current rate limit status for a peer+intent
+ */
+export function getRateLimitStatus(peerId, intent, limit) {
+    const key = `${peerId}:${intent}`;
+    const now = Date.now();
+    const windowMs = limit.windowSeconds * 1000;
+    const entry = rateLimitStore.get(key);
+    if (!entry) {
+        return {
+            used: 0,
+            remaining: limit.requests,
+            windowSeconds: limit.windowSeconds
+        };
+    }
+    // Filter to current window
+    const windowStart = now - windowMs;
+    const recentTimestamps = entry.timestamps.filter(ts => ts > windowStart);
+    return {
+        used: recentTimestamps.length,
+        remaining: Math.max(0, limit.requests - recentTimestamps.length),
+        windowSeconds: limit.windowSeconds
+    };
+}
+/**
+ * Reset rate limit for a specific peer+intent (for testing)
+ */
+export function resetRateLimit(peerId, intent) {
+    const key = `${peerId}:${intent}`;
+    rateLimitStore.delete(key);
+}
+/**
+ * Reset all rate limits (for testing)
+ */
+export function resetAllRateLimits() {
+    rateLimitStore.clear();
+}
+//# sourceMappingURL=doorman.js.map

package/dist/daemon/doorman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doorman.js","sourceRoot":"","sources":["../../src/daemon/doorman.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAa,MAAM,YAAY,CAAC;AAChD,OAAO,EAIL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAerB,gCAAgC;AAChC,8BAA8B;AAC9B,MAAM,cAAc,GAAgC,IAAI,GAAG,EAAE,CAAC;AAE9D,+BAA+B;AAC/B,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,IAAI,YAAY,GAA0B,IAAI,CAAC;AAE/C;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,YAAY;QAAE,OAAO;IACzB,YAAY,GAAG,WAAW,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5B,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,wDAAwD;QACxD,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAc,EACd,OAA4B;IAE5B,kCAAkC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,gEAAgE;IAChE,IAAI,WAAwB,CAAC;IAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,sCAAsC;QACtC,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC;QACjC,QAAQ,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,OAAO,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,yDAAyD;QACzD,QAAQ,GAAG,IAAI,CAAC;QAChB,WAAW,GAAG,iBAAiB,CAAC;IAClC,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,MAAM,wBAAwB;YACjD,UAAU,EAAE,GAAG;YACf,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,UAAU,KAAK,6BAA6B,MAAM,GAAG;gBAC7D,UAAU,EAAE,GAAG;gBACf,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,MAAM,sBAAsB;YAC/C,UAAU,EAAE,GAAG;YACf,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACxD,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mCAAmC,MAAM,GAAG;YACpD,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,MAAc,EACd,MAAc,EACd,KAAgB;IAEhB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;IAE5C,IAAI,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,+BAA+B;QAC/B,KAAK,GAAG;YACN,UAAU,EAAE,CAAC,GAAG,CAAC;YACjB,WAAW,EAAE,GAAG;SACjB,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,mDAAmD;IACnD,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC;IACnC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;IACnE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAEhC,8BAA8B;IAC9B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9C,gDAAgD;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,MAAc,EACd,KAAgB;IAEhB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;IAE5C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC;IACnC,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;IAEzE,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,MAAM;QAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAChE,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAc;IAC3D,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/dist/daemon/intent-registry.d.ts

@@ -0,0 +1,11 @@
+export interface Intent {
+    name: string;
+    description: string;
+    schema?: Record<string, any>;
+    handler?: string;
+}
+export declare function loadIntents(): Intent[];
+export declare function saveIntents(intents: Intent[]): void;
+export declare function registerIntent(intent: Intent): void;
+export declare function getIntent(name: string): Intent | null;
+//# sourceMappingURL=intent-registry.d.ts.map

package/dist/daemon/intent-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-registry.d.ts","sourceRoot":"","sources":["../../src/daemon/intent-registry.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA0DD,wBAAgB,WAAW,IAAI,MAAM,EAAE,CA2BtC;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAGnD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CASnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrD"}

package/dist/daemon/intent-registry.js

@@ -0,0 +1,101 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { getConfigDir, ensureConfigDir } from '../shared/config.js';
+const INTENTS_FILE = path.join(getConfigDir(), 'intents.json');
+const DEFAULT_INTENTS = [
+    {
+        name: 'message',
+        description: 'Simple text message',
+        schema: {
+            type: 'object',
+            properties: {
+                text: { type: 'string' }
+            },
+            required: ['text']
+        }
+    },
+    {
+        name: 'task-request',
+        description: 'Request a peer to perform a task',
+        schema: {
+            type: 'object',
+            properties: {
+                taskType: { type: 'string' },
+                description: { type: 'string' },
+                parameters: { type: 'object' }
+            },
+            required: ['taskType', 'description']
+        }
+    },
+    {
+        name: 'status-update',
+        description: 'Status update from a peer',
+        schema: {
+            type: 'object',
+            properties: {
+                status: { type: 'string' },
+                message: { type: 'string' }
+            },
+            required: ['status']
+        }
+    },
+    {
+        name: 'agent-comms',
+        description: 'Agent-to-agent communication with topic routing',
+        schema: {
+            type: 'object',
+            properties: {
+                topic: { type: 'string', description: 'Topic category for routing (e.g., "memory-management")' },
+                message: { type: 'string', description: 'The message content' },
+                replyTo: { type: 'string', format: 'uri', description: 'Callback URL for async reply' },
+                conversationId: { type: 'string', description: 'Thread identifier for multi-turn conversations' },
+                priority: { type: 'string', enum: ['low', 'normal', 'high'], description: 'Message priority level' }
+            },
+            required: ['topic', 'message']
+        }
+    }
+];
+export function loadIntents() {
+    ensureConfigDir();
+    if (!fs.existsSync(INTENTS_FILE)) {
+        saveIntents(DEFAULT_INTENTS);
+        return DEFAULT_INTENTS;
+    }
+    const data = fs.readFileSync(INTENTS_FILE, 'utf-8');
+    const existingIntents = JSON.parse(data);
+    // Merge new default intents that don't exist in the file (upgrade path)
+    let updated = false;
+    for (const defaultIntent of DEFAULT_INTENTS) {
+        const exists = existingIntents.some(i => i.name === defaultIntent.name);
+        if (!exists) {
+            existingIntents.push(defaultIntent);
+            updated = true;
+            console.log(`[OGP] Added new default intent: ${defaultIntent.name}`);
+        }
+    }
+    // Save if we added new intents
+    if (updated) {
+        saveIntents(existingIntents);
+    }
+    return existingIntents;
+}
+export function saveIntents(intents) {
+    ensureConfigDir();
+    fs.writeFileSync(INTENTS_FILE, JSON.stringify(intents, null, 2), 'utf-8');
+}
+export function registerIntent(intent) {
+    const intents = loadIntents();
+    const existing = intents.findIndex(i => i.name === intent.name);
+    if (existing >= 0) {
+        intents[existing] = intent;
+    }
+    else {
+        intents.push(intent);
+    }
+    saveIntents(intents);
+}
+export function getIntent(name) {
+    const intents = loadIntents();
+    return intents.find(i => i.name === name) || null;
+}
+//# sourceMappingURL=intent-registry.js.map

package/dist/daemon/intent-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-registry.js","sourceRoot":"","sources":["../../src/daemon/intent-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AASpE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;AAE/D,MAAM,eAAe,GAAa;IAChC;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qBAAqB;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzB;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;gBAChG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;gBAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,8BAA8B,EAAE;gBACvF,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;gBACjG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE;aACrG;YACD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;SAC/B;KACF;CACF,CAAC;AAEF,MAAM,UAAU,WAAW;IACzB,eAAe,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;IAErD,wEAAwE;IACxE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpC,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAiB;IAC3C,eAAe,EAAE,CAAC;IAClB,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACpD,CAAC"}

package/dist/daemon/keypair.d.ts

@@ -0,0 +1,5 @@
+import { type KeyPair } from '../shared/signing.js';
+export declare function loadOrGenerateKeyPair(): KeyPair;
+export declare function getPublicKey(): string;
+export declare function getPrivateKey(): string;
+//# sourceMappingURL=keypair.d.ts.map

package/dist/daemon/keypair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.d.ts","sourceRoot":"","sources":["../../src/daemon/keypair.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAKrE,wBAAgB,qBAAqB,IAAI,OAAO,CAY/C;AAED,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAGtC"}

package/dist/daemon/keypair.js

@@ -0,0 +1,25 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { generateKeyPair } from '../shared/signing.js';
+import { getConfigDir, ensureConfigDir } from '../shared/config.js';
+const KEYPAIR_FILE = path.join(getConfigDir(), 'keypair.json');
+export function loadOrGenerateKeyPair() {
+    ensureConfigDir();
+    if (fs.existsSync(KEYPAIR_FILE)) {
+        const data = fs.readFileSync(KEYPAIR_FILE, 'utf-8');
+        return JSON.parse(data);
+    }
+    const keypair = generateKeyPair();
+    fs.writeFileSync(KEYPAIR_FILE, JSON.stringify(keypair, null, 2), 'utf-8');
+    console.log('[OGP] Generated new Ed25519 keypair');
+    return keypair;
+}
+export function getPublicKey() {
+    const keypair = loadOrGenerateKeyPair();
+    return keypair.publicKey;
+}
+export function getPrivateKey() {
+    const keypair = loadOrGenerateKeyPair();
+    return keypair.privateKey;
+}
+//# sourceMappingURL=keypair.js.map

package/dist/daemon/keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.js","sourceRoot":"","sources":["../../src/daemon/keypair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAgB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,cAAc,CAAC,CAAC;AAE/D,MAAM,UAAU,qBAAqB;IACnC,eAAe,EAAE,CAAC;IAElB,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC,SAAS,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC,UAAU,CAAC;AAC5B,CAAC"}

package/dist/daemon/message-handler.d.ts

@@ -0,0 +1,20 @@
+export interface FederationMessage {
+    intent: string;
+    from: string;
+    to: string;
+    nonce: string;
+    timestamp: string;
+    payload: any;
+    replyTo?: string;
+    conversationId?: string;
+}
+export interface MessageResponse {
+    success: boolean;
+    nonce: string;
+    response?: any;
+    error?: string;
+    statusCode?: number;
+    retryAfter?: number;
+}
+export declare function handleMessage(message: FederationMessage, signature: string): Promise<MessageResponse>;
+//# sourceMappingURL=message-handler.d.ts.map

package/dist/daemon/message-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-handler.d.ts","sourceRoot":"","sources":["../../src/daemon/message-handler.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,GAAG,CAAC;IAEb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAyF1B"}

package/dist/daemon/message-handler.js

@@ -0,0 +1,159 @@
+import { verifyObject } from '../shared/signing.js';
+import { getPeer } from './peers.js';
+import { getIntent } from './intent-registry.js';
+import { notifyOpenClaw } from './notify.js';
+import { checkAccess } from './doorman.js';
+import { logActivity, getEffectivePolicy } from './agent-comms.js';
+export async function handleMessage(message, signature) {
+    // 1. Verify sender exists and is approved
+    const peer = getPeer(message.from);
+    if (!peer) {
+        return {
+            success: false,
+            nonce: message.nonce,
+            error: 'Unknown peer',
+            statusCode: 403
+        };
+    }
+    if (peer.status !== 'approved') {
+        return {
+            success: false,
+            nonce: message.nonce,
+            error: 'Peer not approved',
+            statusCode: 403
+        };
+    }
+    // 2. Verify signature
+    if (!verifyObject(message, signature, peer.publicKey)) {
+        return {
+            success: false,
+            nonce: message.nonce,
+            error: 'Invalid signature',
+            statusCode: 401
+        };
+    }
+    // 3. Doorman scope check (v0.2.0)
+    const accessResult = checkAccess(message.from, message.intent, message.payload);
+    if (!accessResult.allowed) {
+        console.log(`[OGP] Access denied for ${message.from}: ${accessResult.reason}`);
+        return {
+            success: false,
+            nonce: message.nonce,
+            error: accessResult.reason,
+            statusCode: accessResult.statusCode,
+            retryAfter: accessResult.retryAfter
+        };
+    }
+    if (accessResult.isV1Peer) {
+        console.log(`[OGP] Processing message from v0.1 peer ${message.from} (legacy mode)`);
+    }
+    // 4. Check intent exists
+    const intent = getIntent(message.intent);
+    if (!intent) {
+        return {
+            success: false,
+            nonce: message.nonce,
+            error: `Unknown intent: ${message.intent}`,
+            statusCode: 400
+        };
+    }
+    // 5. Handle agent-comms specially (includes replyTo support)
+    if (message.intent === 'agent-comms') {
+        return handleAgentComms(message, peer.displayName);
+    }
+    // 6. Standard intent handling: Notify OpenClaw
+    const notificationText = formatNotification(message, peer.displayName);
+    await notifyOpenClaw({
+        text: notificationText,
+        metadata: {
+            ogp: {
+                from: message.from,
+                intent: message.intent,
+                nonce: message.nonce,
+                payload: message.payload,
+                replyTo: message.replyTo,
+                conversationId: message.conversationId
+            }
+        }
+    });
+    // 7. Return success
+    return {
+        success: true,
+        nonce: message.nonce,
+        response: {
+            received: true,
+            timestamp: new Date().toISOString()
+        }
+    };
+}
+/**
+ * Handle agent-comms intent with topic routing and reply support
+ */
+async function handleAgentComms(message, displayName) {
+    const payload = message.payload || {};
+    const topic = payload.topic || 'general';
+    const messageText = payload.message || '';
+    const priority = payload.priority || 'normal';
+    // Get effective response policy for this peer and topic
+    const policy = getEffectivePolicy(message.from, topic);
+    // Log incoming activity
+    logActivity({
+        direction: 'in',
+        peerId: message.from,
+        peerName: displayName,
+        topic,
+        message: messageText,
+        level: policy.level
+    });
+    // Build enhanced notification with policy info
+    const priorityIndicator = priority === 'high' ? '[HIGH] ' : priority === 'low' ? '[low] ' : '';
+    const policyTag = `[${policy.level.toUpperCase()}]`;
+    const notificationText = `[OGP Agent-Comms] ${priorityIndicator}${displayName} → ${topic} ${policyTag}: ${messageText}`;
+    await notifyOpenClaw({
+        text: notificationText,
+        metadata: {
+            ogp: {
+                from: message.from,
+                intent: 'agent-comms',
+                nonce: message.nonce,
+                topic,
+                message: messageText,
+                priority,
+                replyTo: message.replyTo,
+                conversationId: message.conversationId,
+                payload: message.payload,
+                // Include policy info for agent to use
+                responsePolicy: {
+                    level: policy.level,
+                    notes: policy.notes
+                }
+            }
+        }
+    });
+    return {
+        success: true,
+        nonce: message.nonce,
+        response: {
+            received: true,
+            topic,
+            timestamp: new Date().toISOString(),
+            // Tell sender how to get replies if they didn't provide callback
+            replyEndpoint: message.replyTo ? undefined : `/federation/reply/${message.nonce}`
+        }
+    };
+}
+function formatNotification(message, displayName) {
+    const intent = message.intent;
+    const payload = message.payload;
+    switch (intent) {
+        case 'message':
+            return `[OGP] Message from ${displayName}: ${payload.text}`;
+        case 'task-request':
+            return `[OGP] Task request from ${displayName}: ${payload.description}`;
+        case 'status-update':
+            return `[OGP] Status update from ${displayName}: ${payload.message || payload.status}`;
+        default:
+            return `[OGP] ${intent} from ${displayName}`;
+    }
+}
+//# sourceMappingURL=message-handler.js.map

package/dist/daemon/message-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-handler.js","sourceRoot":"","sources":["../../src/daemon/message-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAuBnE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA0B,EAC1B,SAAiB;IAEjB,0CAA0C;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,YAAY,CAAC,MAAM;YAC1B,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,UAAU,EAAE,YAAY,CAAC,UAAU;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,2CAA2C,OAAO,CAAC,IAAI,gBAAgB,CAAC,CAAC;IACvF,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,mBAAmB,OAAO,CAAC,MAAM,EAAE;YAC1C,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,cAAc,CAAC;QACnB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC;SACF;KACF,CAAC,CAAC;IAEH,oBAAoB;IACpB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,WAAmB;IAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAE9C,wDAAwD;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEvD,wBAAwB;IACxB,WAAW,CAAC;QACV,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,OAAO,CAAC,IAAI;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK;QACL,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,iBAAiB,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;IACpD,MAAM,gBAAgB,GAAG,qBAAqB,iBAAiB,GAAG,WAAW,MAAM,KAAK,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;IAExH,MAAM,cAAc,CAAC;QACnB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK;gBACL,OAAO,EAAE,WAAW;gBACpB,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,uCAAuC;gBACvC,cAAc,EAAE;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB;aACF;SACF;KACF,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE;YACR,QAAQ,EAAE,IAAI;YACd,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,iEAAiE;YACjE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,OAAO,CAAC,KAAK,EAAE;SAClF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA0B,EAAE,WAAmB;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,sBAAsB,WAAW,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9D,KAAK,cAAc;YACjB,OAAO,2BAA2B,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1E,KAAK,eAAe;YAClB,OAAO,4BAA4B,WAAW,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzF;YACE,OAAO,SAAS,MAAM,SAAS,WAAW,EAAE,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/daemon/notify.d.ts

@@ -0,0 +1,7 @@
+export interface NotificationPayload {
+    text: string;
+    sessionKey?: string;
+    metadata?: Record<string, any>;
+}
+export declare function notifyOpenClaw(payload: NotificationPayload): Promise<boolean>;
+//# sourceMappingURL=notify.d.ts.map

package/dist/daemon/notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../src/daemon/notify.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuDnF"}

package/dist/daemon/notify.js

@@ -0,0 +1,54 @@
+import { requireConfig } from '../shared/config.js';
+import { execSync } from 'node:child_process';
+export async function notifyOpenClaw(payload) {
+    const config = requireConfig();
+    // Method 1: Use openclaw CLI if available (most reliable, handles TLS)
+    try {
+        const escaped = payload.text.replace(/'/g, "'\\''");
+        execSync(`openclaw system event --text '${escaped}' --mode now 2>/dev/null`, {
+            timeout: 5000,
+            env: { ...process.env }
+        });
+        console.log('[OGP] Notified OpenClaw via CLI:', payload.text);
+        return true;
+    }
+    catch {
+        // CLI not available or failed — try HTTP
+    }
+    // Method 2: HTTP with token (for non-localhost or when CLI unavailable)
+    if (!config.openclawToken) {
+        console.log('[OGP] No OpenClaw token configured — skipping notification');
+        return false;
+    }
+    const openclawUrl = config.openclawUrl.replace(/\/$/, '');
+    try {
+        // Disable TLS verification for localhost
+        const env = { ...process.env };
+        if (openclawUrl.includes('localhost') || openclawUrl.includes('127.0.0.1')) {
+            env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+        }
+        const response = await fetch(`${openclawUrl}/tools/invoke`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${config.openclawToken}`
+            },
+            body: JSON.stringify({
+                tool: 'sessions_send',
+                args: {
+                    sessionKey: payload.sessionKey || 'agent:main:main',
+                    message: payload.text
+                }
+            })
+        });
+        if (response.ok) {
+            console.log('[OGP] Notified OpenClaw via HTTP:', payload.text);
+            return true;
+        }
+    }
+    catch (error) {
+        console.error('[OGP] Error notifying OpenClaw:', error);
+    }
+    return false;
+}
+//# sourceMappingURL=notify.js.map

package/dist/daemon/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/daemon/notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAQ9C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA4B;IAC/D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,uEAAuE;IACvE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,QAAQ,CAAC,iCAAiC,OAAO,0BAA0B,EAAE;YAC3E,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,yCAAyC;QACzC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,eAAe,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,aAAa,EAAE;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE;oBACJ,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,iBAAiB;oBACnD,OAAO,EAAE,OAAO,CAAC,IAAI;iBACtB;aACF,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}