@gendigital/sage-openclaw 0.5.4 → 0.7.0

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "sage-openclaw",
   "name": "Sage",
-  "version": "0.5.3",
+  "version": "0.7.0",
   "description": "Safety for Agents — ADR layer that guards commands, files, and web requests",
   "skills": [
     "resources/skills/security-awareness"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gendigital/sage-openclaw",
   "license": "Apache-2.0",
-  "version": "0.5.4",
+  "version": "0.7.0",
   "type": "module",
   "description": "Safety for Agents — ADR layer for OpenClaw",
   "main": "./dist/index.cjs",
@@ -13,26 +13,23 @@
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "pnpm -C ../core build && pnpm run clean && pnpm run sync:assets && node esbuild.config.js",
-    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true});require('node:fs').rmSync('resources',{recursive:true,force:true})\"",
-    "sync:assets": "node scripts/sync-assets.mjs",
-    "test": "vitest run"
-  },
   "optionalDependencies": {
     "koffi": "^2.9.0"
   },
   "devDependencies": {
-    "@sage/core": "workspace:*",
     "@types/node": "^22.0.0",
     "esbuild": "^0.25.0",
     "typescript": "^5.9.0",
-    "vitest": "^4.0.0"
+    "vitest": "^4.0.0",
+    "@gendigital/sage-core": "0.7.0"
   },
   "openclaw": {
     "extensions": [
       "./dist/index.cjs"
-    ]
+    ],
+    "compat": {
+      "pluginApi": ">=2026.3.22"
+    }
   },
   "engines": {
     "node": ">=18"
@@ -50,5 +47,11 @@
   ],
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "pnpm -C ../core build && pnpm run clean && pnpm run sync:assets && node esbuild.config.js",
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true});require('node:fs').rmSync('resources',{recursive:true,force:true})\"",
+    "sync:assets": "node scripts/sync-assets.mjs",
+    "test": "vitest run"
   }
-}
+}

package/resources/skills/security-awareness/SKILL.md

@@ -57,3 +57,12 @@ You are working in an environment protected by Sage, a security plugin. Be mindf
 ## Sage Flagged Actions
 
 When Sage flags a tool call (as opposed to blocking it outright), you **must** present the details to the user and wait for their explicit approval before calling `sage_approve`. Never auto-approve a flagged action on your own — the user must decide.
+
+## False Positive Reporting
+
+If the user believes a Sage detection is incorrect (a wrong block, mistaken flag, or false alarm), you can report it using the MCP tools provided by Sage:
+
+1. **`sage_list_audit_entries`** — Lists recent Sage audit log entries for the current conversation. Use this to find the `entry_id`s of the detections the user considers incorrect.
+2. **`sage_report_false_positive`** — Submits a false positive report to the Sage backend. Requires a `description` (what was wrongly detected) and `reasoning` (why it is a false positive). Optionally accepts `entry_ids` to scope the report to specific entries.
+
+When the user says a detection was wrong, a false positive, or asks to report/dispute a Sage verdict, use these tools to help them.

package/resources/threats/commands.yaml

@@ -111,7 +111,7 @@
   severity: critical
   confidence: 0.90
   action: block
-  pattern: "(curl|wget)\\s[^&]*&&\\s*chmod\\s+\\+x"
+  pattern: "(curl|wget)\\s[\\s\\S]*?(&&|;)\\s*chmod\\s+\\+x"
   match_on: command
   title: "Download and execute chain"
   expires_at: null
@@ -250,7 +250,7 @@
   severity: high
   confidence: 0.80
   action: block
-  pattern: "\\b(while|for)\\b[^;]*;\\s*do[^;]*\\b(bash|sh|curl|wget)\\b"
+  pattern: "\\b(while|for)\\b[^;]*;\\s*do[^;]*(\\b(bash|sh)\\s+-c\\b|\\b(curl|wget)\\b[^;]*\\|\\s*(?:sudo\\s+)?(?:env\\s+)?(?:[^\\s\"']*[\\\\/])?(bash|sh|zsh|ksh|dash)\\b|\\b(curl|wget)\\b[^;]*(?:(-d|--data|--data-binary)\\s+['\\\"]?@\\S+|(--upload-file|-T)\\s+['\\\"]?\\S+))"
   match_on: command
   title: "Loop executing shell or download commands"
   expires_at: null

package/resources/threats/mitre.yaml

@@ -100,7 +100,7 @@
   severity: high
   confidence: 0.80
   action: require_approval
-  pattern: "(rar(\\.exe)?.*[afu].*(-dw|-tb|-ta)|7z(\\.exe)?.*[au].*-sdel|Add-Exfiltration\\.ps1|Do-Exfiltration\\.ps1|Invoke-PostExfil\\.ps1)"
+  pattern: "(rar(\\.exe)?.*[afu].*\\s(-dw|-tb|-ta)|7z(\\.exe)?.*[au].*-sdel|Add-Exfiltration\\.ps1|Do-Exfiltration\\.ps1|Invoke-PostExfil\\.ps1)"
   case_insensitive: true
   match_on: command
   title: "MITRE ATT&CK T1020 - Automated Exfiltration"
@@ -737,7 +737,7 @@
   severity: high
   confidence: 0.80
   action: require_approval
-  pattern: "tscon(\\.exe)?.*$"
+  pattern: "(^|\\s|[;&|])(?:\"[^\"]*\\btscon(?:\\.exe)?\\b\"|'[^']*\\btscon(?:\\.exe)?\\b'|(?:[^\\s\"']*[\\\\/])?\\btscon(?:\\.exe)?\\b)\\s+\\S+(\\s+/dest:[^\\s]+)?"
   case_insensitive: true
   match_on: command
   title: "MITRE ATT&CK T1563.002 - RDP Hijacking"

package/resources/threats/self-defense.yaml

@@ -23,7 +23,7 @@
   severity: high
   confidence: 0.85
   action: require_approval
-  pattern: "\\.sage[\\\\/](allowlist|config)\\.json"
+  pattern: "\\.sage[\\\\/](allowlist|config|exceptions|pending-exceptions)\\.json"
   match_on: file_path
   title: "Access Sage configuration files"
   expires_at: null
@@ -48,7 +48,7 @@
   severity: high
   confidence: 0.85
   action: require_approval
-  pattern: "heuristics_enabled.*false|url_check.*enabled.*false"
+  pattern: "\"heuristics_enabled\"\\s*:\\s*false|\"url_check\"\\s*:\\s*\\{[^}]*\"enabled\"\\s*:\\s*false"
   match_on: content
   title: "Attempt to disable Sage security features via config"
   expires_at: null