@gendigital/sage-openclaw 0.5.4 → 0.6.0

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "sage-openclaw",
   "name": "Sage",
-  "version": "0.5.3",
+  "version": "0.6.0",
   "description": "Safety for Agents — ADR layer that guards commands, files, and web requests",
   "skills": [
     "resources/skills/security-awareness"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gendigital/sage-openclaw",
   "license": "Apache-2.0",
-  "version": "0.5.4",
+  "version": "0.6.0",
   "type": "module",
   "description": "Safety for Agents — ADR layer for OpenClaw",
   "main": "./dist/index.cjs",
@@ -13,21 +13,15 @@
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "pnpm -C ../core build && pnpm run clean && pnpm run sync:assets && node esbuild.config.js",
-    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true});require('node:fs').rmSync('resources',{recursive:true,force:true})\"",
-    "sync:assets": "node scripts/sync-assets.mjs",
-    "test": "vitest run"
-  },
   "optionalDependencies": {
     "koffi": "^2.9.0"
   },
   "devDependencies": {
-    "@sage/core": "workspace:*",
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "typescript": "^5.9.0",
-    "vitest": "^4.0.0"
+    "vitest": "^4.0.0",
+    "@gendigital/sage-core": "0.6.0"
   },
   "openclaw": {
     "extensions": [
@@ -50,5 +44,11 @@
   ],
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "pnpm -C ../core build && pnpm run clean && pnpm run sync:assets && node esbuild.config.js",
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true});require('node:fs').rmSync('resources',{recursive:true,force:true})\"",
+    "sync:assets": "node scripts/sync-assets.mjs",
+    "test": "vitest run"
   }
-}
+}

package/resources/threats/commands.yaml

@@ -250,7 +250,7 @@
   severity: high
   confidence: 0.80
   action: block
-  pattern: "\\b(while|for)\\b[^;]*;\\s*do[^;]*\\b(bash|sh|curl|wget)\\b"
+  pattern: "\\b(while|for)\\b[^;]*;\\s*do[^;]*(\\b(bash|sh)\\s+-c\\b|\\b(curl|wget)\\b[^;]*\\|\\s*(?:sudo\\s+)?(?:env\\s+)?(?:[^\\s\"']*[\\\\/])?(bash|sh|zsh|ksh|dash)\\b|\\b(curl|wget)\\b[^;]*(?:(-d|--data|--data-binary)\\s+['\\\"]?@\\S+|(--upload-file|-T)\\s+['\\\"]?\\S+))"
   match_on: command
   title: "Loop executing shell or download commands"
   expires_at: null

package/resources/threats/mitre.yaml

@@ -100,7 +100,7 @@
   severity: high
   confidence: 0.80
   action: require_approval
-  pattern: "(rar(\\.exe)?.*[afu].*(-dw|-tb|-ta)|7z(\\.exe)?.*[au].*-sdel|Add-Exfiltration\\.ps1|Do-Exfiltration\\.ps1|Invoke-PostExfil\\.ps1)"
+  pattern: "(rar(\\.exe)?.*[afu].*\\s(-dw|-tb|-ta)|7z(\\.exe)?.*[au].*-sdel|Add-Exfiltration\\.ps1|Do-Exfiltration\\.ps1|Invoke-PostExfil\\.ps1)"
   case_insensitive: true
   match_on: command
   title: "MITRE ATT&CK T1020 - Automated Exfiltration"
@@ -737,7 +737,7 @@
   severity: high
   confidence: 0.80
   action: require_approval
-  pattern: "tscon(\\.exe)?.*$"
+  pattern: "(^|\\s|[;&|])(?:\"[^\"]*\\btscon(?:\\.exe)?\\b\"|'[^']*\\btscon(?:\\.exe)?\\b'|(?:[^\\s\"']*[\\\\/])?\\btscon(?:\\.exe)?\\b)\\s+\\S+(\\s+/dest:[^\\s]+)?"
   case_insensitive: true
   match_on: command
   title: "MITRE ATT&CK T1563.002 - RDP Hijacking"

package/resources/threats/self-defense.yaml

@@ -48,7 +48,7 @@
   severity: high
   confidence: 0.85
   action: require_approval
-  pattern: "heuristics_enabled.*false|url_check.*enabled.*false"
+  pattern: "\"heuristics_enabled\"\\s*:\\s*false|\"url_check\"\\s*:\\s*\\{[^}]*\"enabled\"\\s*:\\s*false"
   match_on: content
   title: "Attempt to disable Sage security features via config"
   expires_at: null