@gendigital/sage-openclaw 0.10.0 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/dist/index.cjs +396 -468
- package/dist/index.cjs.map +4 -4
- package/dist/mcp-server.cjs +31776 -0
- package/dist/mcp-server.cjs.map +7 -0
- package/dist/model-download-worker.cjs +5 -19
- package/dist/model-download-worker.cjs.map +2 -2
- package/openclaw.plugin.json +1 -1
- package/package.json +4 -3
- package/resources/skills/security-awareness/SKILL.md +5 -1
- package/resources/threats/agent-layer.yaml +186 -0
- package/resources/threats/commands.yaml +24 -53
- package/resources/threats/credentials.yaml +12 -20
- package/resources/threats/dummy.yaml +22 -33
- package/resources/threats/files.yaml +34 -53
- package/resources/threats/mac-commands.yaml +20 -47
- package/resources/threats/mac-credentials.yaml +4 -12
- package/resources/threats/mac-files.yaml +5 -15
- package/resources/threats/mac-obfuscation.yaml +6 -13
- package/resources/threats/mac-persistence.yaml +11 -20
- package/resources/threats/mac-supply-chain.yaml +5 -8
- package/resources/threats/mitre.yaml +105 -167
- package/resources/threats/obfuscation.yaml +7 -15
- package/resources/threats/persistence.yaml +10 -17
- package/resources/threats/prompt-injection.yaml +92 -43
- package/resources/threats/self-defense.yaml +8 -12
- package/resources/threats/supply_chain.yaml +1 -2
- package/resources/threats/urls.yaml +9 -14
- package/resources/threats/win-commands.yaml +46 -106
- package/resources/threats/win-credentials.yaml +14 -24
- package/resources/threats/win-files.yaml +10 -20
- package/resources/threats/win-obfuscation.yaml +21 -37
- package/resources/threats/win-persistence.yaml +8 -16
- package/resources/threats/win-supply-chain.yaml +2 -3
- /package/resources/{allowlists → trusted-domains}/trusted-installer-domains.yaml +0 -0
|
@@ -7043,23 +7043,21 @@ var ArtifactSchema = external_exports.object({
|
|
|
7043
7043
|
value: external_exports.string(),
|
|
7044
7044
|
context: external_exports.string().optional()
|
|
7045
7045
|
});
|
|
7046
|
-
var
|
|
7047
|
-
var ActionSchema = external_exports.enum(["block", "require_approval", "log"]);
|
|
7046
|
+
var VerdictSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
|
|
7048
7047
|
var ThreatSchema = external_exports.object({
|
|
7049
7048
|
id: external_exports.string(),
|
|
7050
7049
|
version: external_exports.number().int().optional(),
|
|
7051
7050
|
category: external_exports.string(),
|
|
7052
|
-
severity:
|
|
7051
|
+
severity: VerdictSeveritySchema,
|
|
7053
7052
|
confidence: external_exports.number(),
|
|
7054
|
-
action: ActionSchema,
|
|
7055
7053
|
pattern: external_exports.string(),
|
|
7056
7054
|
match_on: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]),
|
|
7057
7055
|
title: external_exports.string(),
|
|
7058
7056
|
expires_at: external_exports.string().nullable().optional(),
|
|
7059
|
-
revoked: external_exports.boolean().optional().default(false)
|
|
7057
|
+
revoked: external_exports.boolean().optional().default(false),
|
|
7058
|
+
flags: external_exports.array(external_exports.string()).optional().default([])
|
|
7060
7059
|
});
|
|
7061
7060
|
var DecisionSchema = external_exports.enum(["allow", "deny", "ask"]);
|
|
7062
|
-
var VerdictSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
|
|
7063
7061
|
var SensitivitySchema = external_exports.enum(["paranoid", "balanced", "relaxed"]);
|
|
7064
7062
|
var UrlCheckConfigSchema = external_exports.object({
|
|
7065
7063
|
endpoint: external_exports.string().optional(),
|
|
@@ -7072,9 +7070,6 @@ var CacheConfigSchema = external_exports.object({
|
|
|
7072
7070
|
ttl_clean_seconds: external_exports.number().default(86400),
|
|
7073
7071
|
path: external_exports.string().default("~/.sage/cache.json")
|
|
7074
7072
|
});
|
|
7075
|
-
var AllowlistConfigSchema = external_exports.object({
|
|
7076
|
-
path: external_exports.string().default("~/.sage/allowlist.json")
|
|
7077
|
-
});
|
|
7078
7073
|
var LoggingConfigSchema = external_exports.object({
|
|
7079
7074
|
enabled: external_exports.boolean().default(true),
|
|
7080
7075
|
log_clean: external_exports.boolean().default(false),
|
|
@@ -7136,7 +7131,6 @@ var ConfigSchema = external_exports.object({
|
|
|
7136
7131
|
pi_check: PiCheckConfigSchema.default({}),
|
|
7137
7132
|
heuristics_enabled: external_exports.boolean().default(true),
|
|
7138
7133
|
cache: CacheConfigSchema.default({}),
|
|
7139
|
-
allowlist: AllowlistConfigSchema.default({}),
|
|
7140
7134
|
exceptions: ExceptionsConfigSchema.default({}),
|
|
7141
7135
|
logging: LoggingConfigSchema.default({}),
|
|
7142
7136
|
operational_logging: OperationalLoggingConfigSchema.default({}),
|
|
@@ -7165,9 +7159,6 @@ function defaultConfigPath() {
|
|
|
7165
7159
|
function defaultCachePath() {
|
|
7166
7160
|
return (0, import_node_path.join)(resolvedSageDir(), "cache.json");
|
|
7167
7161
|
}
|
|
7168
|
-
function defaultAllowlistPath() {
|
|
7169
|
-
return (0, import_node_path.join)(resolvedSageDir(), "allowlist.json");
|
|
7170
|
-
}
|
|
7171
7162
|
function defaultExceptionsPath() {
|
|
7172
7163
|
return (0, import_node_path.join)(resolvedSageDir(), "exceptions.json");
|
|
7173
7164
|
}
|
|
@@ -7231,7 +7222,6 @@ function sanitizeBrandKey(data, logger) {
|
|
|
7231
7222
|
}
|
|
7232
7223
|
function sanitizeConfigPaths(config, logger) {
|
|
7233
7224
|
const cachePath = defaultCachePath();
|
|
7234
|
-
const allowlistPath = defaultAllowlistPath();
|
|
7235
7225
|
const exceptionsPath = defaultExceptionsPath();
|
|
7236
7226
|
const auditPath = defaultAuditPath();
|
|
7237
7227
|
const operationalLogPath = defaultOperationalLogPath();
|
|
@@ -7241,10 +7231,6 @@ function sanitizeConfigPaths(config, logger) {
|
|
|
7241
7231
|
...config.cache,
|
|
7242
7232
|
path: normalizeStateFilePath(config.cache.path, cachePath, "cache", logger)
|
|
7243
7233
|
},
|
|
7244
|
-
allowlist: {
|
|
7245
|
-
...config.allowlist,
|
|
7246
|
-
path: normalizeStateFilePath(config.allowlist.path, allowlistPath, "allowlist", logger)
|
|
7247
|
-
},
|
|
7248
7234
|
exceptions: {
|
|
7249
7235
|
...config.exceptions,
|
|
7250
7236
|
path: normalizeStateFilePath(config.exceptions.path, exceptionsPath, "exceptions", logger)
|
|
@@ -7582,7 +7568,7 @@ var import_node_path14 = require("node:path");
|
|
|
7582
7568
|
var import_node_url = require("node:url");
|
|
7583
7569
|
var import_meta = {};
|
|
7584
7570
|
function resolveVersion() {
|
|
7585
|
-
if (true) return "0.
|
|
7571
|
+
if (true) return "0.11.0";
|
|
7586
7572
|
try {
|
|
7587
7573
|
const pkgPath = (0, import_node_path14.join)((0, import_node_path14.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "..", "package.json");
|
|
7588
7574
|
const pkg = JSON.parse(getFileContentSync(pkgPath));
|