@gendigital/sage-openclaw 0.13.0 → 0.14.0

package/dist/index.cjs

@@ -14500,6 +14500,84 @@ function buildContentSnapshot(toolType, toolInput, artifacts = [], signals = {})
   return content;
 }
 
+// ../core/dist/detection-names.js
+var PI_DETECTION_NAME = "Other:SagePromptInjectionML-A [Susp]";
+var REPORTING_ENGINE_SHORTHANDS = {
+  package: "sgpk",
+  amsi: "sgam",
+  heuristics: "sghe",
+  ml: "sgml",
+  skill: "skan"
+};
+var REPORTING_DETECTION_SUFFIX = "sage";
+function formatReportingDetectionName(canonicalName, engine, optionalData = "") {
+  const engineMetadata = optionalData ? `${REPORTING_ENGINE_SHORTHANDS[engine]}:${optionalData}` : REPORTING_ENGINE_SHORTHANDS[engine];
+  return `${canonicalName}|${engineMetadata}|${REPORTING_DETECTION_SUFFIX}`;
+}
+var PACKAGE_DETECTION_NAMES = {
+  not_found: "Other:SagePackageNotFound-A [Susp]",
+  suspicious_age: "Other:SagePackageNew-A [Susp]",
+  malicious: "Other:SagePackageMalicious-A [Trj]",
+  unknown: "Other:SagePackageUnknown-A [Susp]"
+};
+var AMSI_DETECTION_NAMES = {
+  detected: "Other:SageAmsiDetected-A [Heur]",
+  blocked_by_admin: "Other:SageAmsiBlockedByAdmin-A [Heur]",
+  unknown: "Other:SageAmsiUnknown-A [Susp]"
+};
+var AMSI_REPORTING_RULE_NAMES = {
+  detected: "AMSI_DETECTED",
+  blocked_by_admin: "AMSI_BLOCKED_BY_ADMIN",
+  unknown: "AMSI_UNKNOWN"
+};
+var SKILL_DETECTION_NAMES = {
+  HIGH: "Other:SageSuspiciousSkill-A [Susp]",
+  CRITICAL: "Other:SageMaliciousSkill-A [Trj]"
+};
+function isCanonicalDetectionName(name) {
+  return /^\w+:\w+-[A-Z]+ \[[^\]\r\n]+\]$/.test(name);
+}
+function packageDetectionName(verdict) {
+  return PACKAGE_DETECTION_NAMES[verdict];
+}
+function amsiDetectionClass(amsiResult) {
+  if (amsiResult >= 32768)
+    return "detected";
+  if (amsiResult >= 16384)
+    return "blocked_by_admin";
+  return "unknown";
+}
+function amsiDetectionName(amsiResult) {
+  return AMSI_DETECTION_NAMES[amsiDetectionClass(amsiResult)];
+}
+function amsiReportingData(amsiResult) {
+  const ruleName = AMSI_REPORTING_RULE_NAMES[amsiDetectionClass(amsiResult)];
+  return `${ruleName}:${Math.trunc(amsiResult).toString(16)}`;
+}
+function skillDetectionName(verdict) {
+  return SKILL_DETECTION_NAMES[verdict.toUpperCase()];
+}
+function isSkillId(value) {
+  return /^[0-9a-f]{64}$/i.test(value);
+}
+function skillReportingDetectionName(verdict, skillId) {
+  const canonicalName = skillDetectionName(verdict);
+  return canonicalName && isSkillId(skillId) ? formatReportingDetectionName(canonicalName, "skill", skillId.toLowerCase()) : void 0;
+}
+function buildSkillCheckSignal(skillId, analyzerVerdict, jobId) {
+  const normalizedSkillId = skillId.toLowerCase();
+  const normalizedVerdict = analyzerVerdict.toUpperCase();
+  const detectionName = skillReportingDetectionName(normalizedVerdict, normalizedSkillId);
+  if (!detectionName)
+    return void 0;
+  return {
+    detection_name: detectionName,
+    skill_id: normalizedSkillId,
+    ...jobId ? { job_id: jobId } : {},
+    analyzer_verdict: normalizedVerdict
+  };
+}
+
 // ../core/dist/audit-log.js
 init_file_utils();
 
@@ -14651,6 +14729,37 @@ async function logSkillQueued(config2, skillId, pluginKey, skillFolder) {
   } catch {
   }
 }
+async function logSkillVerdict(config2, skillId, status, verdict, summary, context = {}) {
+  if (!config2.enabled)
+    return false;
+  const entry = {
+    type: "skill_verdict",
+    entry_id: context.entryId ?? (0, import_node_crypto3.randomUUID)(),
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    skill_id: skillId,
+    status
+  };
+  if (context.jobId !== void 0)
+    entry.job_id = context.jobId;
+  if (context.agentRuntime !== void 0)
+    entry.agent_runtime = context.agentRuntime;
+  if (verdict !== void 0)
+    entry.verdict = verdict;
+  if (summary !== void 0)
+    entry.summary = summary.slice(0, MAX_SUMMARY_LEN);
+  const skillSignal = status === "analyzed" && verdict !== void 0 ? buildSkillCheckSignal(skillId, verdict, context.jobId) : void 0;
+  if (skillSignal) {
+    entry.signals = {
+      skill_checks: [skillSignal]
+    };
+  }
+  try {
+    await appendEntry(config2, entry);
+    return true;
+  } catch {
+    return false;
+  }
+}
 
 // ../core/dist/cache.js
 init_config();
@@ -15445,7 +15554,7 @@ init_file_utils();
 var import_meta = {};
 function resolveVersion() {
   if (true)
-    return "0.13.0";
+    return "0.14.0";
   try {
     const pkgPath = (0, import_node_path5.join)((0, import_node_path5.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "..", "package.json");
     const pkg = JSON.parse(getFileContentSync(pkgPath));
@@ -16303,6 +16412,7 @@ var SkillCheckClient = class {
   parseResult(skillId, raw) {
     return {
       skillId,
+      jobId: typeof raw.job_id === "string" ? raw.job_id : void 0,
       verdict: typeof raw.verdict === "string" ? raw.verdict : void 0,
       summary: typeof raw.summary === "string" ? raw.summary : void 0
     };
@@ -16512,56 +16622,6 @@ function isScannableContent(content) {
   return SNIFF_HTML.test(head) || SNIFF_HTML_TAGS.test(head) || SNIFF_JSON.test(head) || SNIFF_XML.test(head) || SNIFF_YAML.test(head) || SNIFF_SHEBANG_SHELL.test(head) || SNIFF_SHEBANG_PYTHON.test(head) || SNIFF_PYTHON.test(head) || SNIFF_JS_TS.test(head) || SNIFF_C_CPP.test(head) || SNIFF_KOTLIN.test(head) || SNIFF_CSV.test(head);
 }
 
-// ../core/dist/detection-names.js
-var PI_DETECTION_NAME = "Other:SagePromptInjectionML-A [Susp]";
-var REPORTING_ENGINE_SHORTHANDS = {
-  package: "sgpk",
-  amsi: "sgam",
-  heuristics: "sghe",
-  ml: "sgml"
-};
-var REPORTING_DETECTION_SUFFIX = "sage";
-function formatReportingDetectionName(canonicalName, engine, optionalData = "") {
-  const engineMetadata = optionalData ? `${REPORTING_ENGINE_SHORTHANDS[engine]}:${optionalData}` : REPORTING_ENGINE_SHORTHANDS[engine];
-  return `${canonicalName}|${engineMetadata}|${REPORTING_DETECTION_SUFFIX}`;
-}
-var PACKAGE_DETECTION_NAMES = {
-  not_found: "Other:SagePackageNotFound-A [Susp]",
-  suspicious_age: "Other:SagePackageNew-A [Susp]",
-  malicious: "Other:SagePackageMalicious-A [Trj]",
-  unknown: "Other:SagePackageUnknown-A [Susp]"
-};
-var AMSI_DETECTION_NAMES = {
-  detected: "Other:SageAmsiDetected-A [Heur]",
-  blocked_by_admin: "Other:SageAmsiBlockedByAdmin-A [Heur]",
-  unknown: "Other:SageAmsiUnknown-A [Susp]"
-};
-var AMSI_REPORTING_RULE_NAMES = {
-  detected: "AMSI_DETECTED",
-  blocked_by_admin: "AMSI_BLOCKED_BY_ADMIN",
-  unknown: "AMSI_UNKNOWN"
-};
-function isCanonicalDetectionName(name) {
-  return /^\w+:\w+-[A-Z]+ \[[^\]\r\n]+\]$/.test(name);
-}
-function packageDetectionName(verdict) {
-  return PACKAGE_DETECTION_NAMES[verdict];
-}
-function amsiDetectionClass(amsiResult) {
-  if (amsiResult >= 32768)
-    return "detected";
-  if (amsiResult >= 16384)
-    return "blocked_by_admin";
-  return "unknown";
-}
-function amsiDetectionName(amsiResult) {
-  return AMSI_DETECTION_NAMES[amsiDetectionClass(amsiResult)];
-}
-function amsiReportingData(amsiResult) {
-  const ruleName = AMSI_REPORTING_RULE_NAMES[amsiDetectionClass(amsiResult)];
-  return `${ruleName}:${Math.trunc(amsiResult).toString(16)}`;
-}
-
 // ../core/dist/extended-info.js
 var import_promises4 = require("node:fs/promises");
 var import_node_os3 = require("node:os");
@@ -18137,7 +18197,7 @@ function extractFromPackageJson(content) {
         continue;
       if (version === "" || version === "*")
         continue;
-      if (version.startsWith("file:") || version.startsWith("link:") || version.startsWith("git+") || version.startsWith("git:") || version.startsWith("http:") || version.startsWith("https:") || version.startsWith("workspace:") || version.startsWith("github:") || version.startsWith("bitbucket:") || version.startsWith("gitlab:") || version.startsWith("portal:") || version.startsWith("patch:"))
+      if (version.startsWith("catalog:") || version.startsWith("file:") || version.startsWith("link:") || version.startsWith("git+") || version.startsWith("git:") || version.startsWith("http:") || version.startsWith("https:") || version.startsWith("workspace:") || version.startsWith("github:") || version.startsWith("bitbucket:") || version.startsWith("gitlab:") || version.startsWith("portal:") || version.startsWith("patch:"))
         continue;
       if (version.startsWith("npm:")) {
         const aliasTarget = version.slice(4);
@@ -19652,7 +19712,7 @@ function storeResult(cache2, pluginKey, version, lastUpdated, findings) {
 }
 
 // ../core/dist/plugin-scanner.js
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto10 = require("node:crypto");
 var import_promises11 = require("node:fs/promises");
 var import_node_path23 = require("node:path");
 init_config();
@@ -20017,7 +20077,7 @@ function mergeSources(existing, incoming) {
 function defaultCachePath2() {
   return (0, import_node_path22.join)(resolvePath(SAGE_DIR), "skill_verdict_cache.json");
 }
-async function loadSkillVerdictCache(cachePath = defaultCachePath2(), ttlMs = DEFAULT_VERDICT_TTL_MS, logger = nullLogger) {
+async function loadSkillVerdictCacheInternal(cachePath, ttlMs, logger, pruneOnLoad) {
   let raw;
   try {
     raw = await getFileContent(cachePath);
@@ -20040,6 +20100,8 @@ async function loadSkillVerdictCache(cachePath = defaultCachePath2(), ttlMs = DE
         continue;
       }
       entries[skillId] = {
+        entryId: typeof entry.entry_id === "string" ? entry.entry_id : void 0,
+        jobId: typeof entry.job_id === "string" ? entry.job_id : void 0,
         verdict: typeof entry.verdict === "string" ? entry.verdict : void 0,
         summary: typeof entry.summary === "string" ? entry.summary : void 0,
         skillName: typeof entry.skill_name === "string" ? entry.skill_name : void 0,
@@ -20048,7 +20110,7 @@ async function loadSkillVerdictCache(cachePath = defaultCachePath2(), ttlMs = DE
       };
     }
     const cache2 = { entries };
-    if (pruned > 0) {
+    if (pruneOnLoad && pruned > 0) {
       logger.debug(`Pruned ${pruned} stale verdict(s) from cache`, { cachePath });
       await saveSkillVerdictCache(cache2, cachePath, logger);
     }
@@ -20058,6 +20120,9 @@ async function loadSkillVerdictCache(cachePath = defaultCachePath2(), ttlMs = DE
     return { entries: {} };
   }
 }
+async function loadSkillVerdictCache(cachePath = defaultCachePath2(), ttlMs = DEFAULT_VERDICT_TTL_MS, logger = nullLogger) {
+  return loadSkillVerdictCacheInternal(cachePath, ttlMs, logger, true);
+}
 async function saveSkillVerdictCache(cache2, cachePath = defaultCachePath2(), logger = nullLogger) {
   try {
     const data = {
@@ -20065,6 +20130,8 @@ async function saveSkillVerdictCache(cache2, cachePath = defaultCachePath2(), lo
       entries: Object.fromEntries(Object.entries(cache2.entries).map(([skillId, v]) => [
         skillId,
         {
+          entry_id: v.entryId,
+          job_id: v.jobId,
           verdict: v.verdict,
           summary: v.summary,
           skill_name: v.skillName,
@@ -20077,8 +20144,10 @@ async function saveSkillVerdictCache(cache2, cachePath = defaultCachePath2(), lo
       ]))
     };
     await atomicWriteJson(cachePath, data);
+    return true;
   } catch (e) {
     logger.warn(`Failed to save verdict cache to ${cachePath}`, { error: String(e) });
+    return false;
   }
 }
 function getVerdict(cache2, skillId, ttlMs = DEFAULT_VERDICT_TTL_MS) {
@@ -20099,6 +20168,34 @@ function putVerdict(cache2, skillId, verdict) {
   };
 }
 
+// ../core/dist/skill-verdict-record.js
+var import_node_crypto9 = require("node:crypto");
+function recordAnalyzedSkillVerdict(cache2, skillId, result, origin) {
+  const entryId = (0, import_node_crypto9.randomUUID)();
+  putVerdict(cache2, skillId, {
+    entryId,
+    jobId: result.jobId,
+    verdict: result.verdict,
+    summary: result.summary,
+    skillName: origin.skillName,
+    sources: [{ agentRuntime: origin.agentRuntime, containerKey: origin.containerKey }]
+  });
+  const { loggingConfig } = origin;
+  return {
+    entryId,
+    writeAuditEntry: async () => {
+      if (!loggingConfig)
+        return;
+      await logSkillVerdict(loggingConfig, skillId, "analyzed", result.verdict, result.summary, {
+        entryId,
+        jobId: result.jobId,
+        agentRuntime: origin.agentRuntime
+      });
+    }
+  };
+}
+var SKILL_ENTRY_ID_NAMESPACE = Buffer.from("75bba79a376142a7bacbf95d791126d3", "hex");
+
 // ../core/dist/plugin-scanner.js
 init_types2();
 var SCANNABLE_EXTENSIONS2 = /* @__PURE__ */ new Set([
@@ -20226,7 +20323,7 @@ async function scanPlugin(plugin, options = {}) {
       allUrls.push(...extractUrls(content));
     }
     if (checkFileHashes) {
-      const sha256 = (0, import_node_crypto9.createHash)("sha256").update(rawBytes).digest("hex");
+      const sha256 = (0, import_node_crypto10.createHash)("sha256").update(rawBytes).digest("hex");
       const existing = hashToFiles.get(sha256);
       if (existing) {
         existing.push(filePath);
@@ -20323,6 +20420,8 @@ async function runSkillCheck(plugin, findings, logger, paths = {}) {
     let markerModified = false;
     let lookupFailed = false;
     let graceDeferred = false;
+    const resolvedPendingSkillIds = /* @__PURE__ */ new Set();
+    const recordedVerdicts = /* @__PURE__ */ new Map();
     for (const { folder, skillId } of uncached) {
       if (!verdicts.has(skillId)) {
         lookupFailed = true;
@@ -20330,17 +20429,18 @@ async function runSkillCheck(plugin, findings, logger, paths = {}) {
       }
       const verdict = verdicts.get(skillId) ?? null;
       if (verdict) {
-        putVerdict(verdictCache, skillId, {
-          verdict: verdict.verdict,
-          summary: verdict.summary,
-          skillName: (0, import_node_path23.basename)(folder),
-          sources: [{ agentRuntime: paths.agentRuntime, containerKey: plugin.key }]
-        });
-        cacheModified = true;
+        if (!recordedVerdicts.has(skillId)) {
+          recordedVerdicts.set(skillId, recordAnalyzedSkillVerdict(verdictCache, skillId, verdict, {
+            skillName: (0, import_node_path23.basename)(folder),
+            agentRuntime: paths.agentRuntime,
+            containerKey: plugin.key,
+            loggingConfig: paths.loggingConfig
+          }));
+          cacheModified = true;
+        }
         pushSkillFindingIfRisky(findings, plugin, skillId, folder, verdict);
         if (isPending(marker, skillId)) {
-          removePending(marker, skillId);
-          markerModified = true;
+          resolvedPendingSkillIds.add(skillId);
         }
       } else if (!isPending(marker, skillId)) {
         if (paths.uploadEnabled === false) {
@@ -20359,8 +20459,17 @@ async function runSkillCheck(plugin, findings, logger, paths = {}) {
         }
       }
     }
-    if (cacheModified)
-      await saveSkillVerdictCache(verdictCache, paths.verdictCachePath, logger);
+    const cacheSaved = cacheModified ? await saveSkillVerdictCache(verdictCache, paths.verdictCachePath, logger) : true;
+    if (cacheSaved) {
+      await Promise.all([...recordedVerdicts.values()].map((entry) => entry.writeAuditEntry().catch(() => {
+      })));
+      for (const skillId of resolvedPendingSkillIds) {
+        removePending(marker, skillId);
+        markerModified = true;
+      }
+    } else {
+      lookupFailed = true;
+    }
     if (markerModified)
       await savePendingMarker(marker, paths.pendingPath, logger);
     const anyStillPending = uncached.some(({ skillId }) => isPending(marker, skillId));
@@ -21050,7 +21159,7 @@ function createOpenClawScanHandler(logger, context, branding2 = defaultBranding,
     branding: branding2,
     onResult,
     // No onNotices: OpenClaw delivers the one-time notice from
-    // `before_agent_start` (a different process/turn than this scan) via
+    // `before_prompt_build` (a different process/turn than this scan) via
     // takePendingNotices, so the scan-time callback would never fire.
     modelDownloadWorkerPath: (0, import_node_path28.resolve)(__dirname, "model-download-worker.cjs"),
     skillUploadWorkerPath: (0, import_node_path28.resolve)(__dirname, "skill-upload-worker.cjs"),
@@ -21065,15 +21174,15 @@ function createStartupScanHandler(logger, branding2 = defaultBranding, onResult,
 function createSessionScanHandler(logger, branding2 = defaultBranding, onResult, announceCleanScans = true) {
   return createOpenClawScanHandler(logger, "session", branding2, onResult, announceCleanScans);
 }
-function createBeforeAgentStartHandler(getSecurityFindings, clearFindings, logger, branding2 = defaultBranding) {
+function createPromptContextHandler(getSecurityFindings, clearFindings, logger, branding2 = defaultBranding) {
   return (notices) => {
     const findings = getSecurityFindings();
     if (!notices && !findings) {
-      logger.debug(`${branding2.name}: before_agent_start - nothing pending to surface`);
+      logger.debug(`${branding2.name}: before_prompt_build - nothing pending to surface`);
       return void 0;
     }
     if (findings) clearFindings();
-    logger.debug(`${branding2.name}: surfacing context via before_agent_start`, {
+    logger.debug(`${branding2.name}: surfacing context via before_prompt_build`, {
       hasNotices: Boolean(notices),
       hasFindings: Boolean(findings)
     });
@@ -21326,7 +21435,7 @@ ${notice}` : notice;
       pendingScanFindings = msg;
     };
     const getPendingSecurityFindings = () => [pendingConfigurationWarnings, pendingScanFindings].filter(Boolean).join("\n\n") || null;
-    const beforeAgentStartHandler = createBeforeAgentStartHandler(
+    const promptContextHandler = createPromptContextHandler(
       getPendingSecurityFindings,
       () => {
         pendingConfigurationWarnings = null;
@@ -21362,10 +21471,10 @@ ${notice}` : notice;
       "session_start",
       createSessionScanHandler(scanLogger, branding, onFindings, config.announce_clean_scans)
     );
-    api.on("before_agent_start", async () => {
+    api.on("before_prompt_build", async () => {
       await migrationCheckPromise;
       const notices = await resolveNoticeText();
-      return beforeAgentStartHandler(notices);
+      return promptContextHandler(notices);
     });
   }
 };