@goplus/agentguard 1.1.10 → 1.1.13

package/dist/config.js

@@ -63,6 +63,7 @@ function loadConfig() {
             version: 1,
             level: normalizeLevel(parsed.level) ?? fallback.level,
             agentHost: normalizeAgentHost(parsed.agentHost),
+            agentHosts: normalizeAgentHosts(parsed.agentHosts),
             cloudUrl: parsed.cloudUrl || fallback.cloudUrl,
             policyCachePath: parsed.policyCachePath || fallback.policyCachePath,
             auditPath: parsed.auditPath || fallback.auditPath,
@@ -139,6 +140,17 @@ function normalizeAgentHost(value) {
         ? value
         : undefined;
 }
+function normalizeAgentHosts(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const seen = new Set();
+    for (const item of value) {
+        const host = normalizeAgentHost(item);
+        if (host)
+            seen.add(host);
+    }
+    return seen.size > 0 ? [...seen] : undefined;
+}
 function chmodBestEffort(path, mode) {
     try {
         (0, node_fs_1.chmodSync)(path, mode);

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;AA2BA,gDASC;AAED,sCAUC;AAED,oDAKC;AAED,oCAQC;AAED,gCAmBC;AAED,gCAKC;AAED,oCAWC;AAED,0CASC;AAED,gCAIC;AAED,wCAIC;AAID,8CAeC;AApJD,qCAAgG;AAChG,yCAA0C;AAC1C,qCAAkC;AAsBlC,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAC7D,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,SAAgB,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC;QACrC,eAAe,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,mBAAmB,CAAC;QAChD,SAAS,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC;QACpC,cAAc,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,oBAAoB,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa;IAC3B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAA,mBAAS,EAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,YAAY;IAC1B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC;QAC/F,OAAO;YACL,GAAG,QAAQ;YACX,GAAG,MAAM;YACT,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK;YACrD,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;YAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAC9C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;YACnE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YACjD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;SACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CAAC,MAAwB;IACjD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAA,uBAAa,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,YAAY,CAAC,OAA8C;IACzE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAqB;QAC7B,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACtF,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,eAAe;IAC7B,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAqB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC;IACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IACxB,IAAA,gBAAM,EAAC,OAAO,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAA,gBAAM,EAAC,OAAO,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,UAAU,CAAC,MAAe;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,gBAAgB,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;IACzD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAE7E,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,YAAY;QACzE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO;QACpH,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;AA8BA,gDASC;AAED,sCAUC;AAED,oDAKC;AAED,oCAQC;AAED,gCAoBC;AAED,gCAKC;AAED,oCAWC;AAED,0CASC;AAED,gCAIC;AAED,wCAIC;AAID,8CAeC;AAxJD,qCAAgG;AAChG,yCAA0C;AAC1C,qCAAkC;AAyBlC,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAC7D,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,SAAgB,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC;QACrC,eAAe,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,mBAAmB,CAAC;QAChD,SAAS,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC;QACpC,cAAc,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,oBAAoB,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa;IAC3B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAA,mBAAS,EAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,YAAY;IAC1B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC;QAC/F,OAAO;YACL,GAAG,QAAQ;YACX,GAAG,MAAM;YACT,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK;YACrD,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;YAC/C,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC;YAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAC9C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;YACnE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;YACjD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;SACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CAAC,MAAwB;IACjD,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAA,uBAAa,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,YAAY,CAAC,OAA8C;IACzE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAqB;QAC7B,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACtF,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,eAAe;IAC7B,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAqB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC;IACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IACxB,IAAA,gBAAM,EAAC,OAAO,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAA,gBAAM,EAAC,OAAO,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,UAAU,CAAC,MAAe;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,gBAAgB,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;IACzD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAE7E,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,YAAY;QACzE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO;QACpH,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC"}

package/dist/feed/cron.d.ts

@@ -13,6 +13,7 @@ export interface OpenClawCronInstallResult {
 export interface OpenClawGatewayOptions {
     host?: string;
     port?: number;
+    url?: string;
     label?: string;
     timeoutMs?: number;
     request?: (method: string, params: unknown) => Promise<unknown>;

package/dist/feed/cron.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../src/feed/cron.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,kBAAkB,GAAG,eAAe,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC1G,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtF,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAExG,UAAU,eAAe;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU5D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,QAAQ,GAAE;IACR,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,UAAU,CAAC,EAAE,aAAa,CAAC;CACvB,GACL,OAAO,CAAC,yBAAyB,CAAC,CAkDpC;AAED,wBAAsB,6BAA6B,CACjD,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CA6DpC;AAmYD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,EAAE,CAczE;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,OAAO,CAAC,CA+ElB"}
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../src/feed/cron.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,kBAAkB,GAAG,eAAe,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC1G,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtF,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAExG,UAAU,eAAe;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU5D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,QAAQ,GAAE;IACR,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,UAAU,CAAC,EAAE,aAAa,CAAC;CACvB,GACL,OAAO,CAAC,yBAAyB,CAAC,CAkDpC;AAED,wBAAsB,6BAA6B,CACjD,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,EACD,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CA4DpC;AAuYD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,EAAE,CAczE;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,OAAO,CAAC,CAmBlB"}

package/dist/feed/cron.js

@@ -9,11 +9,15 @@ exports.installThreatFeedCron = installThreatFeedCron;
 exports.installOpenClawThreatFeedCron = installOpenClawThreatFeedCron;
 exports.extractOpenClawCronJobs = extractOpenClawCronJobs;
 exports.openClawGatewayRequest = openClawGatewayRequest;
-const node_http_1 = __importDefault(require("node:http"));
 const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
+const node_http_1 = __importDefault(require("node:http"));
+const node_net_1 = __importDefault(require("node:net"));
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
+class GatewayHttpFallbackError extends Error {
+}
 function validateCronExpression(value) {
     const expr = value.trim();
     const fields = expr.split(/\s+/);
@@ -72,7 +76,7 @@ async function installThreatFeedCron(options, adapters = {}) {
 async function installOpenClawThreatFeedCron(options, gateway = {}) {
     const schedule = validateCronExpression(options.cronExpression);
     const timezone = options.timezone ?? localTimeZone();
-    const command = threatFeedCommand(options.quiet);
+    const command = threatFeedCommand(options.quiet, { notifyRun: true });
     const existing = await findOpenClawCronJobsByName(options.name, gateway);
     if (existing.length > 0 && !options.force) {
         return {
@@ -90,31 +94,30 @@ async function installOpenClawThreatFeedCron(options, gateway = {}) {
     if (existing.length > 0) {
         await removeOpenClawCronJobs(existing, gateway);
     }
-    await openClawGatewayRequest('cron.add', [
-        {
-            name: options.name,
-            description,
-            enabled: true,
-            schedule: {
-                kind: 'cron',
-                expr: schedule,
-                tz: timezone,
-            },
-            sessionTarget: 'isolated',
-            payload: {
-                kind: 'agentTurn',
-                message,
-                timeoutSeconds: 300,
-                agentguard: {
-                    mode,
-                    command,
-                },
-            },
-            delivery: {
-                mode: 'none',
+    await openClawGatewayRequest('cron.add', {
+        name: options.name,
+        description,
+        enabled: true,
+        schedule: {
+            kind: 'cron',
+            expr: schedule,
+            tz: timezone,
+        },
+        sessionTarget: 'isolated',
+        payload: {
+            kind: 'agentTurn',
+            message,
+            timeoutSeconds: 300,
+            agentguard: {
+                mode,
+                command,
             },
         },
-    ], gateway);
+        delivery: {
+            mode: 'announce',
+            channel: 'last',
+        },
+    }, gateway);
     return {
         name: options.name,
         schedule,
@@ -131,7 +134,7 @@ async function findOpenClawCronJobsByName(name, gateway) {
 async function installOpenClawNativeThreatFeedCron(options, runCommand = execCommand) {
     const schedule = validateCronExpression(options.cronExpression);
     const timezone = options.timezone ?? localTimeZone();
-    const command = threatFeedCommand(options.quiet);
+    const command = threatFeedCommand(options.quiet, { notifyRun: true });
     const message = openClawCronMessage(options.quiet);
     let existing;
     try {
@@ -167,6 +170,9 @@ async function installOpenClawNativeThreatFeedCron(options, runCommand = execCom
         message,
         '--timeout-seconds',
         '300',
+        '--announce',
+        '--channel',
+        'last',
         '--thinking',
         'off',
     ];
@@ -301,8 +307,9 @@ async function installSystemThreatFeedCron(options, runCommand = execCommand) {
         script,
     };
 }
-function threatFeedCommand(quiet) {
-    return `agentguard subscribe${quiet ? ' --quiet' : ''} --json --cron-run`;
+function threatFeedCommand(quiet, options = {}) {
+    const modeFlag = options.notifyRun ? '--cron-notify-run' : '--json --cron-run';
+    return `agentguard subscribe${quiet ? ' --quiet' : ''} ${modeFlag}`;
 }
 function qclawGatewayOptions(gateway = {}) {
     return {
@@ -367,17 +374,17 @@ function shellQuote(value) {
 }
 function openClawCronMessage(quiet) {
     const mode = quiet ? 'quiet' : 'manual';
-    const command = threatFeedCommand(quiet);
+    const command = threatFeedCommand(quiet, { notifyRun: true });
     return [
         `Mode: ${mode}.`,
         `Command: \`${command}\`.`,
         `Run exactly the command above.`,
         '',
         'Rules:',
-        '- If the JSON field `hardFailures` is greater than 0, output a short error summary and do not send a notification.',
-        '- If the JSON field `shouldNotify` is true, send `notification.body` exactly as-is using the current session notification context.',
-        '- If `shouldNotify` is false, output "skipped" and finish without sending any message.',
-        '- If the command fails or the JSON cannot be parsed, output a short error summary and do not send a notification.',
+        '- The command prints either the exact notification body or `NO_REPLY`.',
+        '- Output the command stdout exactly as your final response.',
+        '- Do not summarize, transform, add labels, or send a separate message.',
+        '- If the command fails or prints no stdout, output `NO_REPLY`.',
         '',
         'Follow these rules exactly.',
     ].join('\n');
@@ -464,16 +471,27 @@ function openClawGatewayRequest(method, params, options = {}) {
     if (options.request) {
         return options.request(method, params);
     }
-    const payload = JSON.stringify({
-        jsonrpc: '2.0',
-        method,
-        params,
-        id: 1,
-    });
     const host = options.host ?? '127.0.0.1';
     const port = options.port ?? 18789;
     const label = options.label ?? 'OpenClaw Gateway';
     const timeoutMs = options.timeoutMs ?? 5000;
+    if (options.url) {
+        return openClawGatewayWebSocketRequest({ url: options.url, method, params, label, timeoutMs });
+    }
+    return openClawGatewayHttpRequest({ host, port, method, params, label, timeoutMs }).catch((err) => {
+        if (err instanceof GatewayHttpFallbackError) {
+            return openClawGatewayWebSocketRequest({ url: `ws://${host}:${port}`, method, params, label, timeoutMs });
+        }
+        throw err;
+    });
+}
+function openClawGatewayHttpRequest(options) {
+    const payload = JSON.stringify({
+        jsonrpc: '2.0',
+        method: options.method,
+        params: legacyGatewayParams(options.method, options.params),
+        id: 1,
+    });
     return new Promise((resolve, reject) => {
         let settled = false;
         const fail = (err) => {
@@ -489,8 +507,8 @@ function openClawGatewayRequest(method, params, options = {}) {
             resolve(value);
         };
         const req = node_http_1.default.request({
-            hostname: host,
-            port,
+            hostname: options.host,
+            port: options.port,
             path: '/',
             method: 'POST',
             headers: {
@@ -501,7 +519,7 @@ function openClawGatewayRequest(method, params, options = {}) {
             let data = '';
             res.setEncoding('utf8');
             res.on('error', (err) => {
-                fail(new Error(`${label} ${method} response failed: ${err.message}`));
+                fail(new Error(`${options.label} ${options.method} response failed: ${err.message}`));
             });
             res.on('data', (chunk) => {
                 data += chunk;
@@ -512,25 +530,25 @@ function openClawGatewayRequest(method, params, options = {}) {
                     parsed = data ? JSON.parse(data) : null;
                 }
                 catch {
-                    fail(new Error(`${label} returned non-JSON response: ${data}`));
+                    fail(new GatewayHttpFallbackError(`${options.label} returned non-JSON response: ${data}`));
                     return;
                 }
-                if (parsed?.error) {
-                    fail(new Error(`${label} ${method} failed: ${parsed.error.message ?? JSON.stringify(parsed.error)}`));
+                if (res.statusCode && res.statusCode >= 400) {
+                    fail(new GatewayHttpFallbackError(`${options.label} ${options.method} failed with HTTP ${res.statusCode}`));
                     return;
                 }
-                if (res.statusCode && res.statusCode >= 400) {
-                    fail(new Error(`${label} ${method} failed with HTTP ${res.statusCode}`));
+                if (parsed?.error) {
+                    fail(new Error(`${options.label} ${options.method} failed: ${parsed.error.message ?? JSON.stringify(parsed.error)}`));
                     return;
                 }
                 succeed(parsed?.result ?? parsed);
             });
         });
         req.on('error', (err) => {
-            fail(new Error(`Could not reach ${label} at ${host}:${port}: ${err.message}`));
+            fail(new GatewayHttpFallbackError(`Could not reach ${options.label} at ${options.host}:${options.port}: ${err.message}`));
         });
-        req.setTimeout(timeoutMs, () => {
-            const err = new Error(`${label} ${method} request timed out after ${timeoutMs}ms`);
+        req.setTimeout(options.timeoutMs, () => {
+            const err = new GatewayHttpFallbackError(`${options.label} ${options.method} request timed out after ${options.timeoutMs}ms`);
             fail(err);
             req.destroy(err);
         });
@@ -538,4 +556,302 @@ function openClawGatewayRequest(method, params, options = {}) {
         req.end();
     });
 }
+function legacyGatewayParams(method, params) {
+    if (method === 'cron.add' && !Array.isArray(params))
+        return [params];
+    return params;
+}
+function openClawGatewayWebSocketRequest(options) {
+    const endpoint = parseGatewayWebSocketUrl(options.url, options.label);
+    return new Promise((resolve, reject) => {
+        const connectRequestId = (0, node_crypto_1.randomUUID)();
+        const methodRequestId = (0, node_crypto_1.randomUUID)();
+        const websocketKey = (0, node_crypto_1.randomBytes)(16).toString('base64');
+        let handshakeComplete = false;
+        let connected = false;
+        let settled = false;
+        let buffer = Buffer.alloc(0);
+        let fragmentedText = null;
+        const fail = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            socket.destroy();
+            reject(err);
+        };
+        const succeed = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            socket.end();
+            resolve(value);
+        };
+        const socket = node_net_1.default.createConnection({ host: endpoint.hostname, port: endpoint.port }, () => {
+            socket.write(buildWebSocketHandshake(endpoint, websocketKey));
+        });
+        const timeout = setTimeout(() => {
+            fail(new Error(`${options.label} ${options.method} request timed out after ${options.timeoutMs}ms`));
+        }, options.timeoutMs);
+        socket.on('error', (err) => {
+            fail(new Error(`Could not reach ${options.label} at ${endpoint.hostname}:${endpoint.port}: ${err.message}`));
+        });
+        socket.on('data', (chunk) => {
+            buffer = Buffer.concat([buffer, chunk]);
+            if (!handshakeComplete) {
+                const headerEnd = buffer.indexOf('\r\n\r\n');
+                if (headerEnd === -1)
+                    return;
+                const header = buffer.subarray(0, headerEnd + 4).toString('utf8');
+                buffer = buffer.subarray(headerEnd + 4);
+                try {
+                    validateWebSocketHandshake(header, websocketKey, options.label);
+                }
+                catch (err) {
+                    fail(err);
+                    return;
+                }
+                handshakeComplete = true;
+            }
+            while (true) {
+                let parsed;
+                try {
+                    parsed = readWebSocketFrame(buffer);
+                }
+                catch (err) {
+                    fail(err);
+                    return;
+                }
+                if (!parsed)
+                    break;
+                buffer = parsed.rest;
+                if (parsed.opcode === 0x8) {
+                    fail(new Error(`${options.label} closed the WebSocket before ${options.method} completed`));
+                    return;
+                }
+                if (parsed.opcode === 0x9) {
+                    socket.write(encodeWebSocketFrame(parsed.payload.toString('utf8'), 0xA));
+                    continue;
+                }
+                if (parsed.opcode === 0xA)
+                    continue;
+                if (parsed.opcode === 0x1) {
+                    if (fragmentedText) {
+                        fail(new Error(`${options.label} started a new WebSocket text message before completing the previous one`));
+                        return;
+                    }
+                    if (parsed.fin) {
+                        handleGatewayFrame(parsed.payload.toString('utf8'));
+                    }
+                    else {
+                        fragmentedText = [parsed.payload];
+                    }
+                    continue;
+                }
+                if (parsed.opcode === 0x0) {
+                    if (!fragmentedText) {
+                        fail(new Error(`${options.label} returned an unexpected WebSocket continuation frame`));
+                        return;
+                    }
+                    fragmentedText.push(parsed.payload);
+                    if (parsed.fin) {
+                        const complete = Buffer.concat(fragmentedText);
+                        fragmentedText = null;
+                        handleGatewayFrame(complete.toString('utf8'));
+                    }
+                }
+            }
+        });
+        function handleGatewayFrame(raw) {
+            let frame;
+            try {
+                frame = JSON.parse(raw);
+            }
+            catch {
+                fail(new Error(`${options.label} returned non-JSON WebSocket frame: ${raw}`));
+                return;
+            }
+            if (frame?.type === 'event' && frame.event === 'connect.challenge') {
+                socket.write(encodeWebSocketFrame(JSON.stringify({
+                    type: 'req',
+                    id: connectRequestId,
+                    method: 'connect',
+                    params: openClawConnectParams(),
+                })));
+                return;
+            }
+            if (frame?.type !== 'res')
+                return;
+            if (frame.id === connectRequestId) {
+                if (!frame.ok) {
+                    fail(new Error(`${options.label} connect failed: ${gatewayFrameErrorMessage(frame)}`));
+                    return;
+                }
+                connected = true;
+                socket.write(encodeWebSocketFrame(JSON.stringify({
+                    type: 'req',
+                    id: methodRequestId,
+                    method: options.method,
+                    params: options.params,
+                })));
+                return;
+            }
+            if (connected && frame.id === methodRequestId) {
+                if (!frame.ok) {
+                    fail(new Error(`${options.label} ${options.method} failed: ${gatewayFrameErrorMessage(frame)}`));
+                    return;
+                }
+                succeed(frame.payload);
+            }
+        }
+    });
+}
+function parseGatewayWebSocketUrl(raw, label) {
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new Error(`${label} URL is invalid: ${raw}`);
+    }
+    if (parsed.protocol !== 'ws:') {
+        throw new Error(`${label} URL must use ws:// for Gateway WebSocket RPC.`);
+    }
+    const port = parsed.port ? Number(parsed.port) : 80;
+    if (!Number.isInteger(port) || port <= 0 || port > 65535) {
+        throw new Error(`${label} URL has an invalid port: ${raw}`);
+    }
+    const path = `${parsed.pathname || '/'}${parsed.search}`;
+    const hostname = parsed.hostname;
+    const hostHeader = parsed.port ? parsed.host : `${parsed.hostname}:${port}`;
+    return { hostname, port, path, hostHeader };
+}
+function buildWebSocketHandshake(endpoint, key) {
+    return [
+        `GET ${endpoint.path || '/'} HTTP/1.1`,
+        `Host: ${endpoint.hostHeader}`,
+        'Upgrade: websocket',
+        'Connection: Upgrade',
+        `Sec-WebSocket-Key: ${key}`,
+        'Sec-WebSocket-Version: 13',
+        '',
+        '',
+    ].join('\r\n');
+}
+function validateWebSocketHandshake(header, key, label) {
+    const [statusLine, ...lines] = header.split(/\r\n/);
+    if (!/^HTTP\/1\.[01] 101\b/.test(statusLine ?? '')) {
+        throw new Error(`${label} WebSocket upgrade failed: ${statusLine || 'empty response'}`);
+    }
+    const headers = new Map();
+    for (const line of lines) {
+        const index = line.indexOf(':');
+        if (index === -1)
+            continue;
+        headers.set(line.slice(0, index).trim().toLowerCase(), line.slice(index + 1).trim());
+    }
+    const expected = (0, node_crypto_1.createHash)('sha1')
+        .update(`${key}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`)
+        .digest('base64');
+    if (headers.get('sec-websocket-accept') !== expected) {
+        throw new Error(`${label} WebSocket upgrade returned an invalid accept key.`);
+    }
+}
+function readWebSocketFrame(buffer) {
+    if (buffer.length < 2)
+        return null;
+    const first = buffer[0];
+    const second = buffer[1];
+    const fin = (first & 0x80) !== 0;
+    const opcode = first & 0x0f;
+    const masked = (second & 0x80) !== 0;
+    if (masked) {
+        throw new Error('WebSocket server frames must not be masked.');
+    }
+    if (opcode >= 0x8 && !fin) {
+        throw new Error('WebSocket control frames must not be fragmented.');
+    }
+    let length = second & 0x7f;
+    let offset = 2;
+    if (length === 126) {
+        if (buffer.length < offset + 2)
+            return null;
+        length = buffer.readUInt16BE(offset);
+        offset += 2;
+    }
+    else if (length === 127) {
+        if (buffer.length < offset + 8)
+            return null;
+        const longLength = buffer.readBigUInt64BE(offset);
+        if (longLength > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error('WebSocket frame is too large.');
+        }
+        length = Number(longLength);
+        offset += 8;
+    }
+    if (opcode >= 0x8 && length > 125) {
+        throw new Error('WebSocket control frames must not exceed 125 bytes.');
+    }
+    const mask = masked ? buffer.subarray(offset, offset + 4) : null;
+    if (masked)
+        offset += 4;
+    if (buffer.length < offset + length)
+        return null;
+    const payload = Buffer.from(buffer.subarray(offset, offset + length));
+    if (mask) {
+        for (let i = 0; i < payload.length; i += 1) {
+            payload[i] = payload[i] ^ mask[i % 4];
+        }
+    }
+    return { fin, opcode, payload, rest: buffer.subarray(offset + length) };
+}
+function encodeWebSocketFrame(text, opcode = 0x1) {
+    const payload = Buffer.from(text, 'utf8');
+    const mask = (0, node_crypto_1.randomBytes)(4);
+    const headerLength = payload.length < 126 ? 2 : payload.length <= 0xffff ? 4 : 10;
+    const header = Buffer.alloc(headerLength);
+    header[0] = 0x80 | opcode;
+    if (payload.length < 126) {
+        header[1] = 0x80 | payload.length;
+    }
+    else if (payload.length <= 0xffff) {
+        header[1] = 0x80 | 126;
+        header.writeUInt16BE(payload.length, 2);
+    }
+    else {
+        header[1] = 0x80 | 127;
+        header.writeBigUInt64BE(BigInt(payload.length), 2);
+    }
+    const masked = Buffer.from(payload);
+    for (let i = 0; i < masked.length; i += 1) {
+        masked[i] = masked[i] ^ mask[i % 4];
+    }
+    return Buffer.concat([header, mask, masked]);
+}
+function openClawConnectParams() {
+    return {
+        minProtocol: 3,
+        maxProtocol: 3,
+        client: {
+            id: 'cli',
+            version: 'agentguard',
+            platform: process.platform,
+            mode: 'cli',
+        },
+        caps: [],
+        role: 'operator',
+        scopes: [
+            'operator.admin',
+            'operator.read',
+            'operator.write',
+            'operator.approvals',
+            'operator.pairing',
+            'operator.talk.secrets',
+        ],
+    };
+}
+function gatewayFrameErrorMessage(frame) {
+    return frame?.error?.message ?? JSON.stringify(frame?.error ?? frame);
+}
 //# sourceMappingURL=cron.js.map