@gendigital/sage-openclaw 0.5.4 → 0.6.0

package/README.md

@@ -33,9 +33,9 @@ Sage works out of the box with no configuration. Optional config file at `~/.sag
 
 ## Links
 
-- [Source & documentation](https://github.com/avast/sage)
-- [OpenClaw platform guide](https://github.com/avast/sage/blob/main/docs/platform-guides/openclaw.md)
-- [Privacy policy](https://github.com/avast/sage/blob/main/docs/privacy.md)
+- [Source & documentation](https://github.com/gendigitalinc/sage)
+- [OpenClaw platform guide](https://github.com/gendigitalinc/sage/blob/main/docs/platform-guides/openclaw.md)
+- [Privacy policy](https://github.com/gendigitalinc/sage/blob/main/docs/privacy.md)
 
 ## License
 

package/dist/index.cjs

@@ -6868,14 +6868,14 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs = this.flowScalar(this.type);
+              const fs2 = this.flowScalar(this.type);
               if (atNextItem || it.value) {
-                map.items.push({ start, key: fs, sep: [] });
+                map.items.push({ start, key: fs2, sep: [] });
                 this.onKeyLine = true;
               } else if (it.sep) {
-                this.stack.push(fs);
+                this.stack.push(fs2);
               } else {
-                Object.assign(it, { key: fs, sep: [] });
+                Object.assign(it, { key: fs2, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -7003,13 +7003,13 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs = this.flowScalar(this.type);
+              const fs2 = this.flowScalar(this.type);
               if (!it || it.value)
-                fc.items.push({ start: [], key: fs, sep: [] });
+                fc.items.push({ start: [], key: fs2, sep: [] });
               else if (it.sep)
-                this.stack.push(fs);
+                this.stack.push(fs2);
               else
-                Object.assign(it, { key: fs, sep: [] });
+                Object.assign(it, { key: fs2, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -7330,6 +7330,7 @@ var import_node_path2 = require("node:path");
 
 // ../core/dist/file-utils.js
 var import_node_crypto = require("node:crypto");
+var fs = __toESM(require("node:fs"), 1);
 var fsPromises = __toESM(require("node:fs/promises"), 1);
 var import_node_path = require("node:path");
 var name1 = "read";
@@ -7337,6 +7338,9 @@ var name2 = "File";
 function getFileContent(path, encoding = "utf-8") {
   return fsPromises[name1 + name2](path, encoding);
 }
+function getFileContentSync(path, encoding = "utf-8") {
+  return fs[`${name1 + name2}Sync`](path, encoding);
+}
 function getFileContentRaw(path) {
   return fsPromises[name1 + name2](path);
 }
@@ -11500,10 +11504,6 @@ var ConfigSchema = external_exports.object({
 
 // ../core/dist/config.js
 var SAGE_DIR = "~/.sage";
-function currentHomeDir() {
-  const envHome = process.env.HOME?.trim();
-  return envHome && envHome.length > 0 ? envHome : (0, import_node_os.homedir)();
-}
 function resolvedSageDir() {
   return resolvePath(SAGE_DIR);
 }
@@ -11521,7 +11521,7 @@ function defaultAuditPath() {
 }
 function resolvePath(pathStr) {
   if (pathStr.startsWith("~/") || pathStr === "~") {
-    return (0, import_node_path2.join)(currentHomeDir(), pathStr.slice(1));
+    return (0, import_node_path2.join)((0, import_node_os.homedir)(), pathStr.slice(1));
   }
   return pathStr;
 }
@@ -11951,10 +11951,12 @@ var VerdictCache = class {
   path;
   config;
   logger;
-  constructor(config, logger = nullLogger) {
+  version;
+  constructor(config, logger = nullLogger, version) {
     this.config = config;
     this.logger = logger;
     this.path = resolvePath(config.path);
+    this.version = version;
   }
   async load() {
     if (!this.config.enabled)
@@ -11976,12 +11978,8 @@ var VerdictCache = class {
       return null;
     const key = normalizeUrl(url);
     const entry = this.store.urls[key];
-    if (!entry)
+    if (!entry || this.isStale(entry))
       return null;
-    if (new Date(entry.expiresAt).getTime() <= Date.now()) {
-      delete this.store.urls[key];
-      return null;
-    }
     return {
       verdict: entry.verdict,
       severity: entry.severity,
@@ -11999,19 +11997,16 @@ var VerdictCache = class {
     this.store.urls[key] = {
       ...verdict,
       checkedAt: now.toISOString(),
-      expiresAt: expiresAt.toISOString()
+      expiresAt: expiresAt.toISOString(),
+      sageVersion: this.version
     };
   }
   getCommand(commandHash) {
     if (!this.config.enabled)
       return null;
     const entry = this.store.commands[commandHash];
-    if (!entry)
+    if (!entry || this.isStale(entry))
       return null;
-    if (new Date(entry.expiresAt).getTime() <= Date.now()) {
-      delete this.store.commands[commandHash];
-      return null;
-    }
     return {
       verdict: entry.verdict,
       severity: entry.severity,
@@ -12026,19 +12021,16 @@ var VerdictCache = class {
     this.store.commands[commandHash] = {
       ...verdict,
       checkedAt: now.toISOString(),
-      expiresAt: FAR_FUTURE
+      expiresAt: FAR_FUTURE,
+      sageVersion: this.version
     };
   }
   getPackage(key) {
     if (!this.config.enabled)
       return null;
     const entry = this.store.packages[key];
-    if (!entry)
+    if (!entry || this.isStale(entry))
       return null;
-    if (new Date(entry.expiresAt).getTime() <= Date.now()) {
-      delete this.store.packages[key];
-      return null;
-    }
     return {
       verdict: entry.verdict,
       severity: entry.severity,
@@ -12055,9 +12047,17 @@ var VerdictCache = class {
     this.store.packages[key] = {
       ...verdict,
       checkedAt: now.toISOString(),
-      expiresAt: expiresAt.toISOString()
+      expiresAt: expiresAt.toISOString(),
+      sageVersion: this.version
     };
   }
+  isStale(entry) {
+    if (new Date(entry.expiresAt).getTime() <= Date.now())
+      return true;
+    if (this.version && this.version !== "dev" && entry.sageVersion !== this.version)
+      return true;
+    return false;
+  }
   computePackageTtl(verdict, packageAgeDays) {
     const isFresh = packageAgeDays !== null && packageAgeDays < 7;
     switch (verdict) {
@@ -12073,15 +12073,37 @@ var VerdictCache = class {
     if (!this.config.enabled)
       return;
     try {
+      this.pruneStaleEntries();
       await atomicWriteJson(this.path, this.store);
     } catch (e) {
       this.logger.warn(`Failed to save cache to ${this.path}`, { error: String(e) });
     }
   }
+  pruneStaleEntries() {
+    for (const [key, entry] of Object.entries(this.store.urls)) {
+      if (this.isStale(entry))
+        delete this.store.urls[key];
+    }
+    for (const [key, entry] of Object.entries(this.store.commands)) {
+      if (this.isStale(entry))
+        delete this.store.commands[key];
+    }
+    for (const [key, entry] of Object.entries(this.store.packages)) {
+      if (this.isStale(entry))
+        delete this.store.packages[key];
+    }
+  }
 };
 
+// ../core/dist/clients/amsi-spawn.js
+var chldproc1 = "node:child_";
+var chldproc2 = "process";
+var chldproc = require(chldproc1 + chldproc2);
+function spawn(command, args, options) {
+  return chldproc.spawn(command, args, options);
+}
+
 // ../core/dist/clients/amsi.js
-var import_node_child_process = require("node:child_process");
 var AMSI_RESULT_DETECTED = 32768;
 var AMSI_RESULT_BLOCKED_BY_ADMIN_START = 16384;
 var MAX_SCAN_LENGTH = 1048576;
@@ -12089,7 +12111,7 @@ var PS_TIMEOUT = 15e3;
 function isWSL() {
   if (process.platform !== "linux")
     return false;
-  return !!process.env.WSL_DISTRO_NAME;
+  return !!process["env"]["WSL_DISTRO_NAME"];
 }
 function isAmsiSupported() {
   return process.platform === "win32" || isWSL();
@@ -12340,7 +12362,7 @@ var PersistentPowershellAmsiBackend = class {
   }
   async init() {
     try {
-      this.process = (0, import_node_child_process.spawn)("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", PS_PERSISTENT_SCRIPT], {
+      this.process = spawn("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", PS_PERSISTENT_SCRIPT], {
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true
       });
@@ -12464,7 +12486,7 @@ var WslPowershellAmsiBackend = class {
     const truncated = content.length > MAX_SCAN_LENGTH ? content.slice(0, MAX_SCAN_LENGTH) : content;
     return new Promise((resolve3) => {
       try {
-        const ps = (0, import_node_child_process.spawn)("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", PS_ONESHOT_SCRIPT], { stdio: ["pipe", "pipe", "pipe"] });
+        const ps = spawn("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", PS_ONESHOT_SCRIPT], { stdio: ["pipe", "pipe", "pipe"] });
         let stdout = "";
         const timer = setTimeout(() => {
           this.logger.warn("AMSI: PowerShell one-shot timeout", { contentName });
@@ -12556,7 +12578,23 @@ var AmsiClient = class {
 };
 
 // ../core/dist/version.js
-var VERSION = true ? "0.5.2" : "dev";
+var import_node_fs = require("node:fs");
+var import_node_path5 = require("node:path");
+var import_node_url = require("node:url");
+var import_meta = {};
+function resolveVersion() {
+  if (true)
+    return "0.6.0";
+  try {
+    const pkgPath = (0, import_node_path5.join)((0, import_node_path5.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "..", "package.json");
+    const pkg = JSON.parse((0, import_node_fs.readFileSync)(pkgPath, "utf-8"));
+    if (typeof pkg.version === "string")
+      return pkg.version;
+  } catch {
+  }
+  return "dev";
+}
+var VERSION = resolveVersion();
 
 // ../core/dist/clients/file-check.js
 var DEFAULT_TIMEOUT = 5;
@@ -13234,7 +13272,7 @@ function extractFromEdit(toolInput) {
 
 // ../core/dist/trusted-domains.js
 var import_promises2 = require("node:fs/promises");
-var import_node_path5 = require("node:path");
+var import_node_path6 = require("node:path");
 var import_yaml = __toESM(require_dist(), 1);
 async function loadTrustedDomains(allowlistsDir, logger = nullLogger) {
   let files;
@@ -13246,7 +13284,7 @@ async function loadTrustedDomains(allowlistsDir, logger = nullLogger) {
   }
   const domains = [];
   for (const filename of files) {
-    const filePath = (0, import_node_path5.join)(allowlistsDir, filename);
+    const filePath = (0, import_node_path6.join)(allowlistsDir, filename);
     let content;
     try {
       content = await getFileContent(filePath);
@@ -13824,7 +13862,7 @@ function extractFromRequirementsTxt(content) {
 
 // ../core/dist/threat-loader.js
 var import_promises3 = require("node:fs/promises");
-var import_node_path6 = require("node:path");
+var import_node_path7 = require("node:path");
 var import_yaml2 = __toESM(require_dist(), 1);
 var REQUIRED_FIELDS = /* @__PURE__ */ new Set([
   "id",
@@ -13862,7 +13900,7 @@ async function loadThreats(threatDir, logger = nullLogger) {
     return threats;
   }
   for (const filename of files) {
-    const filePath = (0, import_node_path6.join)(threatDir, filename);
+    const filePath = (0, import_node_path7.join)(threatDir, filename);
     let content;
     try {
       content = await getFileContent(filePath);
@@ -13958,7 +13996,7 @@ async function evaluateToolCall(request, context) {
   }
   let cache = null;
   try {
-    cache = new VerdictCache(config.cache, logger);
+    cache = new VerdictCache(config.cache, logger, VERSION);
     await cache.load();
   } catch {
     cache = null;
@@ -14189,7 +14227,7 @@ function separatorLine(headerLength) {
   return "\u2501".repeat(headerLength);
 }
 function formatUpdateNotice(result) {
-  return `\u2B06\uFE0F  Update available: v${result.currentVersion} \u2192 v${result.latestVersion} (https://github.com/avast/sage)`;
+  return `\u2B06\uFE0F  Update available: v${result.currentVersion} \u2192 v${result.latestVersion} (https://github.com/gendigitalinc/sage)`;
 }
 function formatStartupClean(version, versionCheck) {
   const base = `\u{1F6E1}\uFE0F Sage v${version} by Gen Digital \u2705 No threats found`;
@@ -14377,13 +14415,13 @@ async function removeFromAllowlist(type, value, configPath, logger = nullLogger)
 // ../core/dist/installation-id.js
 var import_node_crypto4 = require("node:crypto");
 var import_promises4 = require("node:fs/promises");
-var import_node_path7 = require("node:path");
+var import_node_path8 = require("node:path");
 async function getInstallationId(sageDirPath) {
   const sageDir = sageDirPath ?? resolvePath("~/.sage");
-  const idPath = (0, import_node_path7.join)(sageDir, "installation-id");
+  const idPath = (0, import_node_path8.join)(sageDir, "installation-id");
   let fileExists = false;
   try {
-    const existing = await (0, import_promises4.readFile)(idPath, "utf-8");
+    const existing = await getFileContent(idPath, "utf-8");
     const trimmed = existing.trim();
     if (trimmed.length > 0)
       return trimmed;
@@ -14398,7 +14436,7 @@ async function getInstallationId(sageDirPath) {
   } catch (err) {
     if (err.code === "EEXIST") {
       try {
-        const existing = await (0, import_promises4.readFile)(idPath, "utf-8");
+        const existing = await getFileContent(idPath, "utf-8");
         return existing.trim() || void 0;
       } catch {
         return void 0;
@@ -14412,8 +14450,8 @@ async function getInstallationId(sageDirPath) {
 var import_node_crypto5 = require("node:crypto");
 var import_promises5 = require("node:fs/promises");
 var import_node_os3 = require("node:os");
-var import_node_path8 = require("node:path");
-var DEFAULT_CACHE_PATH = (0, import_node_path8.join)((0, import_node_os3.homedir)(), ".sage", "plugin_scan_cache.json");
+var import_node_path9 = require("node:path");
+var DEFAULT_CACHE_PATH = (0, import_node_path9.join)((0, import_node_os3.homedir)(), ".sage", "plugin_scan_cache.json");
 var CACHE_TTL_DAYS = 7;
 function cacheKey(pluginKey, version, lastUpdated) {
   return `${pluginKey}:${version}:${lastUpdated}`;
@@ -14431,7 +14469,7 @@ async function computeConfigHash(sageVersion, ...dirs) {
     }
     for (const file of files) {
       try {
-        const content = await getFileContent((0, import_node_path8.join)(dir, file));
+        const content = await getFileContent((0, import_node_path9.join)(dir, file));
         h.update(content);
       } catch {
       }
@@ -14524,12 +14562,14 @@ function storeResult(cache, pluginKey, version, lastUpdated, findings) {
 var import_node_crypto6 = require("node:crypto");
 var import_promises6 = require("node:fs/promises");
 var import_node_os4 = require("node:os");
-var import_node_path9 = require("node:path");
-var DEFAULT_PLUGINS_REGISTRY = (0, import_node_path9.join)((0, import_node_os4.homedir)(), ".claude", "plugins", "installed_plugins.json");
+var import_node_path10 = require("node:path");
+var DEFAULT_PLUGINS_REGISTRY = (0, import_node_path10.join)((0, import_node_os4.homedir)(), ".claude", "plugins", "installed_plugins.json");
 var SCANNABLE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".py",
   ".js",
   ".ts",
+  ".mjs",
+  ".mts",
   ".sh",
   ".bash",
   ".zsh",
@@ -14555,7 +14595,7 @@ async function walkPluginFiles(installPath, logger) {
       return;
     }
     if (stats.isFile()) {
-      if (SCANNABLE_EXTENSIONS.has((0, import_node_path9.extname)(dirOrFile).toLowerCase()) && stats.size <= MAX_FILE_SIZE) {
+      if (SCANNABLE_EXTENSIONS.has((0, import_node_path10.extname)(dirOrFile).toLowerCase()) && stats.size <= MAX_FILE_SIZE) {
         files.push(dirOrFile);
       }
       return;
@@ -14570,7 +14610,7 @@ async function walkPluginFiles(installPath, logger) {
       for (const entry of entries) {
         if (SKIP_DIRS.has(entry))
           continue;
-        const fullPath = (0, import_node_path9.join)(dirOrFile, entry);
+        const fullPath = (0, import_node_path10.join)(dirOrFile, entry);
         await walk(fullPath);
       }
     }
@@ -14588,6 +14628,82 @@ function isHarmlessEcho(line) {
   const withoutQuotes = line.replace(/"(?:[^"\\]|\\.)*"|'[^']*'/g, "");
   return !withoutQuotes.includes("|");
 }
+var JS_TS_EXTENSIONS = /* @__PURE__ */ new Set([".js", ".ts", ".mjs", ".mts"]);
+var STRING_OR_COMMENT_RE = /"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|`(?:[^`\\]|\\.)*`|\/\/.*$|\/\*[\s\S]*?\*\//gm;
+function stripJsComments(src) {
+  return src.replace(STRING_OR_COMMENT_RE, (match) => {
+    if (match.startsWith("//") || match.startsWith("/*"))
+      return "";
+    return match;
+  });
+}
+var STR_ARG = `(?:"((?:[^"\\\\]|\\\\.)*)"|'((?:[^'\\\\]|\\\\.)*)'|\`([^\`]*)\`)`;
+var JS_EXEC_RE = new RegExp(`\\bexec(?:File)?(?:Sync)?\\s*\\(\\s*${STR_ARG}`, "g");
+var JS_SPAWN_RE = new RegExp(`\\bspawn(?:Sync)?\\s*\\(\\s*${STR_ARG}`, "g");
+var JS_SPAWN_ARGS_RE = /\bspawn(?:Sync)?\s*\(\s*(?:"((?:[^"\\]|\\.)*)"|'((?:[^'\\]|\\.)*)'|`([^`]*)`)\s*,\s*\[([^\]]*)\]/g;
+var SHELL_EXECUTABLES = /* @__PURE__ */ new Set([
+  "bash",
+  "sh",
+  "zsh",
+  "dash",
+  "ksh",
+  "csh",
+  "fish",
+  "cmd",
+  "cmd.exe",
+  "powershell",
+  "powershell.exe",
+  "pwsh"
+]);
+function isShellExecutable(exe) {
+  const basename = exe.split("/").pop()?.split("\\").pop() ?? exe;
+  return SHELL_EXECUTABLES.has(basename);
+}
+var JS_EXECA_RE = new RegExp(`\\bexeca\\s*\\(\\s*${STR_ARG}`, "g");
+var JS_EXECA_ARGS_RE = /\bexeca\s*\(\s*(?:"((?:[^"\\]|\\.)*)"|'((?:[^'\\]|\\.)*)'|`([^`]*)`)\s*,\s*\[([^\]]*)\]/g;
+var JS_BUN_SHELL_RE = new RegExp(`\\bBun\\.shell\\s*\\(\\s*${STR_ARG}`, "g");
+var JS_BUN_DOLLAR_RE = /\bBun\.\$`([^`]+)`/g;
+var JS_ZX_RE = /(?<!\w)\$`([^`]+)`/g;
+function extractCommandsFromJsTs(content, fileName) {
+  const commands = /* @__PURE__ */ new Set();
+  const stripped = stripJsComments(content);
+  const collapsed = stripped.replace(/\n/g, " ");
+  function addMatch(m) {
+    const val = m[1] ?? m[2] ?? m[3];
+    if (val)
+      commands.add(val.trim());
+  }
+  for (const re of [JS_EXEC_RE, JS_SPAWN_RE, JS_EXECA_RE, JS_BUN_SHELL_RE]) {
+    for (const m of collapsed.matchAll(re)) {
+      addMatch(m);
+    }
+  }
+  for (const re of [JS_BUN_DOLLAR_RE, JS_ZX_RE]) {
+    for (const m of collapsed.matchAll(re)) {
+      if (m[1])
+        commands.add(m[1].trim());
+    }
+  }
+  for (const re of [JS_SPAWN_ARGS_RE, JS_EXECA_ARGS_RE]) {
+    for (const arrMatch of collapsed.matchAll(re)) {
+      const exe = (arrMatch[1] ?? arrMatch[2] ?? arrMatch[3] ?? "").trim();
+      if (!isShellExecutable(exe))
+        continue;
+      const arrayContent = arrMatch[4] ?? "";
+      const strLitRe = new RegExp(STR_ARG, "g");
+      for (const strMatch of arrayContent.matchAll(strLitRe)) {
+        const val = strMatch[1] ?? strMatch[2] ?? strMatch[3];
+        if (val)
+          commands.add(val.trim());
+      }
+    }
+  }
+  return [...commands].map((value) => ({
+    type: "command",
+    value,
+    context: `plugin_file:${fileName}`
+  }));
+}
 function extractArtifactsFromFile(filePath, content) {
   const artifacts = [];
   const fileName = filePath.split("/").pop() ?? filePath;
@@ -14596,7 +14712,7 @@ function extractArtifactsFromFile(filePath, content) {
       continue;
     artifacts.push({ type: "url", value: url, context: `plugin_file:${fileName}` });
   }
-  const ext = (0, import_node_path9.extname)(filePath).toLowerCase();
+  const ext = (0, import_node_path10.extname)(filePath).toLowerCase();
   if ([".sh", ".bash", ".zsh", ".py"].includes(ext)) {
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
@@ -14609,6 +14725,9 @@ function extractArtifactsFromFile(filePath, content) {
       }
     }
   }
+  if (JS_TS_EXTENSIONS.has(ext)) {
+    artifacts.push(...extractCommandsFromJsTs(content, fileName));
+  }
   return artifacts;
 }
 async function scanPlugin(plugin, threats, options = {}) {
@@ -14641,7 +14760,7 @@ async function scanPlugin(plugin, threats, options = {}) {
           confidence: match.threat.confidence,
           action: match.threat.action,
           artifact: match.artifact.slice(0, 200),
-          sourceFile: (0, import_node_path9.relative)(plugin.installPath, filePath)
+          sourceFile: (0, import_node_path10.relative)(plugin.installPath, filePath)
         });
       }
     }
@@ -14696,7 +14815,7 @@ async function scanPlugin(plugin, threats, options = {}) {
               confidence: 1,
               action: "block",
               artifact: fr.sha256,
-              sourceFile: (0, import_node_path9.relative)(plugin.installPath, filePath)
+              sourceFile: (0, import_node_path10.relative)(plugin.installPath, filePath)
             });
           }
         }
@@ -14969,20 +15088,19 @@ function createAllowlistRemoveTool(logger) {
 }
 
 // src/bundled-dirs.ts
-var import_node_fs = require("node:fs");
-var import_node_path10 = require("node:path");
-var packageRoot = (0, import_node_path10.resolve)(__dirname, "..");
+var import_node_path11 = require("node:path");
+var packageRoot = (0, import_node_path11.resolve)(__dirname, "..");
 function getBundledDataDirs() {
   return {
-    threatsDir: (0, import_node_path10.join)(packageRoot, "resources", "threats"),
-    allowlistsDir: (0, import_node_path10.join)(packageRoot, "resources", "allowlists")
+    threatsDir: (0, import_node_path11.join)(packageRoot, "resources", "threats"),
+    allowlistsDir: (0, import_node_path11.join)(packageRoot, "resources", "allowlists")
   };
 }
 var cachedVersion;
 function getSageVersion() {
   if (cachedVersion) return cachedVersion;
   try {
-    const pkg = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path10.join)(packageRoot, "package.json"), "utf-8"));
+    const pkg = JSON.parse(getFileContentSync((0, import_node_path11.join)(packageRoot, "package.json"), "utf-8"));
     cachedVersion = pkg.version ?? "0.0.0";
   } catch {
     cachedVersion = "0.0.0";
@@ -15048,8 +15166,8 @@ function createLogger(pluginLogger) {
 // src/plugin-discovery.ts
 var import_promises7 = require("node:fs/promises");
 var import_node_os6 = require("node:os");
-var import_node_path11 = require("node:path");
-var DEFAULT_EXTENSIONS_DIR = (0, import_node_path11.join)((0, import_node_os6.homedir)(), ".openclaw", "extensions");
+var import_node_path12 = require("node:path");
+var DEFAULT_EXTENSIONS_DIR = (0, import_node_path12.join)((0, import_node_os6.homedir)(), ".openclaw", "extensions");
 async function discoverOpenClawPlugins(logger, extensionsDir = DEFAULT_EXTENSIONS_DIR) {
   logger.info("Sage plugin discovery: scanning extensions directory", { path: extensionsDir });
   let entries;
@@ -15061,7 +15179,7 @@ async function discoverOpenClawPlugins(logger, extensionsDir = DEFAULT_EXTENSION
   }
   const plugins = [];
   for (const entry of entries) {
-    const extDir = (0, import_node_path11.join)(extensionsDir, entry);
+    const extDir = (0, import_node_path12.join)(extensionsDir, entry);
     let stats;
     try {
       stats = await (0, import_promises7.stat)(extDir);
@@ -15071,7 +15189,7 @@ async function discoverOpenClawPlugins(logger, extensionsDir = DEFAULT_EXTENSION
     }
     let pkg;
     try {
-      const pkgPath = (0, import_node_path11.join)(extDir, "package.json");
+      const pkgPath = (0, import_node_path12.join)(extDir, "package.json");
       const raw = await getFileContent(pkgPath);
       pkg = JSON.parse(raw);
     } catch {
@@ -15101,7 +15219,7 @@ function createOpenClawScanHandler(logger, context, onResult) {
     logger,
     context,
     discoverPlugins: () => discoverOpenClawPlugins(logger),
-    selfPrefix: "sage-openclaw@",
+    selfPrefix: "@gendigital/sage-openclaw@",
     threatsDir,
     allowlistsDir,
     version,