@intutic/sync-daemon 2.2.0 → 2.3.0

package/dist/harness/openclawHooks.js

@@ -1,57 +1,96 @@
 /**
- * openclawHooks.ts — Openclaw governance hook injection.
+ * openclawHooks.ts — OpenClaw plugin gate.
  *
- * Openclaw uses `~/.openclaw/openclaw.json` (JSON5 format — may have comments
- * and trailing commas). The hook entry is registered under
- * `hooks.internal.entries["intutic-governance"]`. This module:
+ * OpenClaw has two hook systems, and only one of them can stop a tool call.
+ * Its *internal* hooks (`hooks.internal.entries` in `~/.openclaw/openclaw.json`,
+ * `HOOK.md` handlers) react to command, session and Gateway events; the
+ * dispatcher catches a handler's error and carries on, and tool calls are not
+ * among their events at all. Earlier versions of this writer registered the
+ * gate there, as `{ event: 'PreToolUse', command }`, a shape OpenClaw keeps
+ * (hook entries are open-ended) and never runs. Tool calls are intercepted by
+ * a *plugin* hook, `before_tool_call`, registered with `api.on(...)`:
+ * https://github.com/openclaw/openclaw/blob/59309cc7777e07d52ca1be94bf8c25fd685919bc/docs/automation/hooks.md
+ * ("Choose the right surface": intercepting tools is a plugin hook).
  *
- * 1. JSON5-safe-merges `~/.openclaw/openclaw.json` with the hook entry.
- * 2. Writes `~/.intutic/hooks/openclaw-check.js` — dual-path Node.js hook.
- * 3. Writes `.intutic/env/openclaw.env` — env snippet.
- * 4. Optionally validates with `openclaw hooks check` (non-fatal).
+ * ## The plugin
  *
- * Hook protocol: stdin JSON `{tool_name, tool_input, transcript_path}`,
- * exit 0 = allow, exit 2 = block (stderr shown to agent).
+ * A standalone plugin file needs no manifest when it is listed in
+ * `plugins.load.paths`; its id is the file's basename, so the file is
+ * `intutic-governance.cjs` and exports `{ id: 'intutic-governance', register }`
+ * (`docs/plugins/hooks/tool-policy.md` "Sender-aware policy in one file";
+ * `src/plugins/discovery.ts` `discoverFromPath`; the loader test "loads
+ * multiple manifestless standalone files"). `.cjs`, so the module format does
+ * not depend on any `package.json` above it. A plugin from a configured path
+ * is enabled by default unless a non-empty `plugins.allow` leaves it out
+ * (`src/plugins/config-activation-shared.ts`), so the id is added to an
+ * existing allowlist and nothing is written when there is none.
  *
- * WS-C2 — Openclaw harness (Phase 3 cross-harness defence)
- * LLD #14 — Phase 3 cross-harness defence (Gap 3)
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
+ * `before_tool_call` receives `{ toolName, params, toolCallId?, runId?,
+ * derivedPaths? }` and `ctx.sessionId`, and refuses with `{ block: true,
+ * blockReason }`, which is terminal (`docs/plugins/hooks/tool-policy.md`,
+ * `src/plugins/hook-types.ts`). The global hook runner runs it fail-closed: a
+ * handler that throws or outlives its timeout blocks the call
+ * (`src/plugins/hook-runner-global.ts`: `before_tool_call: "fail-closed"`;
+ * default 15 s, `docs/plugins/hooks/reference.md`). That timeout cannot stop
+ * synchronous code, so the hook registers `timeoutMs: HOOK_TIMEOUT_SECONDS *
+ * 1000` and the gate runs under its own deadline inside it
+ * (`gateDeadlineMs('openclaw')`).
+ *
+ * The plugin embeds the shared `emitJsGate` body (`'throw'` contract) and
+ * returns OpenClaw's block result for the refusal it throws. Any other fault
+ * is a block too. MCP tools reach the hook as `<server>__<tool>`
+ * (`src/agents/agent-bundle-mcp-names.ts`, `TOOL_NAME_SEPARATOR`), which the
+ * plugin composes into `mcp__<server>__<tool>` for the allowlist.
+ *
+ * The file lives under `~/.intutic/hooks/`, a governance-protected path, so an
+ * agent cannot edit it under any gated harness.
  *
  * @module
  */
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
 import * as os from 'node:os';
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
 import { createLogger } from '@intutic/logger';
-import { keepOriginal } from '../disconnect/originals.js';
+import { keepOriginal, writeOwnedFile } from '../disconnect/originals.js';
 import { newIso } from '@intutic/id';
-import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
+import { HOOK_TIMEOUT_SECONDS } from '@intutic/shared-types';
+import { emitJsGate, REVIEW_REQUESTS_BASENAME } from './gateBody.js';
 const log = createLogger('sync-openclaw-hooks');
-const execAsync = promisify(exec);
-/** Path to the Openclaw global config file. */
-const OPENCLAW_CONFIG = path.join(os.homedir(), '.openclaw', 'openclaw.json');
-/** Governance-sensitive paths that the hook gate protects. */
-// ─── Node.js hook script template ────────────────────────────────────────────
-function buildOpenclawCheckScript(hookEventsLog, workspaceId, proxyUrl) {
-    return `#!/usr/bin/env node
-/**
- * Intutic Openclaw PreToolUse execution gate.
+/** The plugin id, which OpenClaw takes from the standalone file's basename. */
+export const OPENCLAW_PLUGIN_ID = 'intutic-governance';
+/** The plugin file, relative to the home directory. */
+export const OPENCLAW_PLUGIN_FILE = path.join('.intutic', 'hooks', 'openclaw', `${OPENCLAW_PLUGIN_ID}.cjs`);
+/** The first line of the plugin's header, which disconnect recognises it by. */
+export const OPENCLAW_PLUGIN_MARKER = 'Intutic OpenClaw governance plugin.';
+function openclawConfigPath() {
+    return path.join(os.homedir(), '.openclaw', 'openclaw.json');
+}
+/** The absolute path of the plugin file for the current home directory. */
+export function openclawPluginPath() {
+    return path.join(os.homedir(), OPENCLAW_PLUGIN_FILE);
+}
+// ─── The plugin ──────────────────────────────────────────────────────────────
+export function buildOpenclawPlugin(proxyUrl, workspaceRoot, workspaceId) {
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    return `/**
+ * ${OPENCLAW_PLUGIN_MARKER}
  * Auto-generated by intutic sync-daemon. DO NOT EDIT.
  * Proxy: ${proxyUrl}
  * Generated: ${newIso()}
- * Workspace: ${workspaceId}
+ *
+ * A before_tool_call plugin hook, loaded through plugins.load.paths in
+ * ~/.openclaw/openclaw.json. Refuses a tool call by returning
+ * { block: true, blockReason }. See
+ * services/sync-daemon/src/harness/openclawHooks.ts.
  */
 'use strict';
-${emitJsFailClosedPrelude({ harness: 'openclaw', contract: 'exit2' })}
 const path = require('path');
 const os = require('os');
 const fs = require('fs');
 const crypto = require('crypto');
 const https = require('https');
 
-// ── Runtime credentials (sourced from ~/.intutic/env/runtime.env at invocation time) ──
+// Runtime credentials, read when OpenClaw loads the plugin.
 const _runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
 let _intuticHost = 'https://api.intutic.ai', _intuticKey = '', _intuticWsId = ${JSON.stringify(workspaceId)};
 try {
@@ -62,96 +101,98 @@ try {
     if (k === 'INTUTIC_API_KEY' && v) _intuticKey = v;
     if (k === 'INTUTIC_WORKSPACE_ID' && v) _intuticWsId = v;
   });
-} catch { /* runtime.env not yet written — use defaults */ }
+} catch {}
 
-${emitJsGate({ harness: 'openclaw', contract: 'exit2' })}
+${emitJsGate({ harness: 'openclaw', contract: 'throw', reviewRequestFile: path.join(workspaceRoot, '.intutic', 'events', REVIEW_REQUESTS_BASENAME) })}
 
-/**
- * Appends a governance event to the local hook-events log (Path B)
- * and fires a non-blocking HTTP POST to the control plane (Path A).
- */
 let _intuticSessionId = '';
 function logEvent(verdict, toolName, reason) {
   try {
     const ts = new Date().toISOString();
-    // incidentId = sha1(timestamp + toolName + workspaceId).slice(0,16)
     const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
+    // The event's id: random, made once here, and resent with the line it is
+    // written into, so the control plane processes the event once.
+    const eventId = crypto.randomBytes(16).toString('hex');
     const entry = JSON.stringify({
-      // Passed through, not collapsed to two values: the advisory tier emits
-      // 'tool_flagged', and a ternary here silently recorded it as an allow.
       event: verdict,
-      toolName,
-      reason: reason || '',
+      toolName, reason: reason || '',
       workspaceId: _intuticWsId,
       harnessType: 'openclaw',
       timestamp: ts,
       incidentId,
+      eventId,
       ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
     }) + '\\n';
-    // Path B: reliable file append (sync-daemon drains on FSEvents change)
-    fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
-    // Path A: fire-and-forget HTTP POST (near-real-time dashboard, non-blocking)
+    const logPath = ${JSON.stringify(hookEventsLog)};
+    try { fs.mkdirSync(path.dirname(logPath), { recursive: true }); } catch {}
+    fs.appendFileSync(logPath, entry, { flag: 'a' });
     if (_intuticKey) {
       try {
         const body = JSON.stringify({ events: [JSON.parse(entry)] });
         const urlObj = new URL('/api/v1/hook-events', _intuticHost);
         const isHttps = urlObj.protocol === 'https:';
         const mod = isHttps ? https : require('http');
-        const req = mod.request({
-          hostname: urlObj.hostname,
-          port: urlObj.port || (isHttps ? 443 : 80),
-          path: urlObj.pathname,
-          method: 'POST',
-          headers: {
-            'Content-Type': 'application/json',
-            'Content-Length': Buffer.byteLength(body),
-            'Authorization': 'Bearer ' + _intuticKey,
-          },
-        });
-        req.on('error', () => { /* fire-and-forget — ignore errors */ });
-        req.write(body);
-        req.end();
+        const req = mod.request({ hostname: urlObj.hostname, port: urlObj.port || (isHttps ? 443 : 80), path: urlObj.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body), 'Authorization': 'Bearer ' + _intuticKey } });
+        req.on('error', () => { /* fire-and-forget */ });
+        req.write(body); req.end();
       } catch { /* never crash the hook */ }
     }
   } catch { /* never crash the hook */ }
 }
 
-// Read stdin containing Openclaw's tool context
-let inputData = '';
-process.stdin.on('data', (chunk) => { inputData += chunk; });
-process.stdin.on('end', () => {
-  try {
-    const ctx = JSON.parse(inputData);
-    _intuticSessionId = ctx.session_id || ctx.sessionId || ctx.conversation_id || ctx.conversationId || ctx.task_id || ctx.taskId || '';
-    // An envelope carrying none of the tool fields extracts to empty strings,
-    // which match no rule — an allow. Refused instead; see the guard itself.
-    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'], logEvent);
-    const toolName = (ctx.tool_name || ctx.toolName || '').toLowerCase()
-    // Case preserved for the gate. A BLOCK: SOP compiles to a tool-name
-    // pattern the operator wrote as they see it (Bash, Write) and this
-    // harness lowercases the tool for its own matching. Handing the gate the
-    // lowercased form means every SOP tool rule silently matches nothing here
-    // while appearing active everywhere else.
-    const rawToolName = ctx.tool_name || ctx.toolName || '';
-    const toolInput = ctx.tool_input || ctx.toolInput || {};
-
-    const targetPath = toolInput.path || toolInput.file_path || toolInput.filePath ||
-      toolInput.new_path || toolInput.target || toolInput.notebook_path || '';
-    const command = toolInput.command || toolInput.cmd || toolInput.script || '';
-    intuticGate(rawToolName, targetPath, command, logEvent, _intuticWsId, toolInput);
+/**
+ * One tool call. Returns to allow; throws '[Intutic Governance] …' to refuse.
+ * Params that are not an object are refused outright: the gate reads paths
+ * and commands out of them, and a shape it cannot read is not one it can
+ * allow. apply_patch names its files in derivedPaths, and each is checked.
+ */
+function intuticEvaluate(event, ctx) {
+  _intuticSessionId = String((ctx && (ctx.sessionId || ctx.sessionKey)) || '');
+  let tool = String((event && event.toolName) || 'tool');
+  // OpenClaw names an MCP tool <server>__<tool>; the allowlist reads
+  // mcp__<server>__<tool>. No built-in tool id has a double underscore.
+  if (tool.indexOf('__') > 0 && tool.indexOf('mcp__') !== 0) tool = 'mcp__' + tool;
+  const params = event && event.params;
+  if (!params || typeof params !== 'object' || Array.isArray(params)) {
+    const reason = '[Intutic Governance] BLOCKED: tool "' + tool + '" was called with parameters the gate cannot read (' +
+      (params === null ? 'null' : typeof params) + '); refusing rather than allowing a call it cannot evaluate.';
+    try { logEvent('tool_blocked', tool, reason); } catch (e) {}
+    throw new Error(reason);
+  }
+  const command = params.command || params.cmd || params.script || '';
+  const direct = params.path || params.file_path || params.filePath || params.target || '';
+  const derived = event && Array.isArray(event.derivedPaths) ? event.derivedPaths.filter((p) => typeof p === 'string' && p) : [];
+  const targets = derived.length > 0 ? (direct ? [direct].concat(derived) : derived) : [direct];
+  for (const target of targets) intuticGate(tool, target, command, logEvent, _intuticWsId, params, _intuticSessionId);
+  logEvent('tool_allowed', tool, '');
+}
 
-    logEvent('tool_allowed', toolName, '');
-    process.exit(0);
+/** Fail closed: a fault inside the gate is a refusal, never an allow. */
+function beforeToolCall(event, ctx) {
+  try {
+    intuticEvaluate(event, ctx);
+    return undefined;
   } catch (err) {
-    // Fail CLOSED — any hook execution error blocks the tool call.
-    console.error('[Intutic Governance] Hook error (blocking for safety):', err);
-    logEvent('tool_blocked', 'unknown', String(err));
-    process.exit(2);
+    let reason = String((err && err.message) || err);
+    if (reason.indexOf('[Intutic Governance]') !== 0) {
+      reason = '[Intutic Governance] BLOCKED: gate fault (failing closed): ' + reason;
+      try { logEvent('tool_blocked', String((event && event.toolName) || 'unknown'), reason); } catch (e) {}
+    }
+    return { block: true, blockReason: reason };
   }
-});
+}
+
+module.exports = {
+  id: ${JSON.stringify(OPENCLAW_PLUGIN_ID)},
+  name: 'Intutic governance',
+  description: 'Refuses tool calls that break the workspace policy before they run.',
+  register(api) {
+    api.on('before_tool_call', beforeToolCall, { timeoutMs: ${HOOK_TIMEOUT_SECONDS * 1000} });
+  },
+};
 `;
 }
-// ─── JSON5 merge helpers ──────────────────────────────────────────────────────
+// ─── ~/.openclaw/openclaw.json ───────────────────────────────────────────────
 /**
  * Attempt to parse a JSON5-like string by progressively stripping
  * non-standard syntax. Returns a plain JS object or throws if unparseable.
@@ -176,99 +217,110 @@ export function parseJson5Like(raw) {
     stripped = stripped.replace(/,(\s*[}\]])/g, '$1');
     return JSON.parse(stripped);
 }
+const asObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v) ? v : {};
 /**
- * Deep-merge `hooks.internal.entries["intutic-governance"]` into the parsed
- * openclaw config object and return the merged result.
+ * Adds the plugin to `plugins.load.paths`, and its id to `plugins.allow` when
+ * that list is non-empty (an empty or absent one allows every plugin).
+ * Everything else is kept, and a second run adds nothing.
  */
-function mergeOpenclawConfig(existing, hookScriptPath) {
-    const hooks = existing.hooks ?? {};
-    const internal = hooks.internal ?? {};
-    const entries = internal.entries ?? {};
+export function mergeOpenclawConfig(existing, pluginPath) {
+    const plugins = asObject(existing.plugins);
+    const load = asObject(plugins.load);
+    const paths = Array.isArray(load.paths) ? load.paths : [];
+    const allow = Array.isArray(plugins.allow) ? plugins.allow : undefined;
     return {
         ...existing,
-        hooks: {
-            ...hooks,
-            internal: {
-                ...internal,
-                entries: {
-                    ...entries,
-                    'intutic-governance': {
-                        enabled: true,
-                        event: 'PreToolUse',
-                        command: hookScriptPath,
-                    },
-                },
-            },
+        plugins: {
+            ...plugins,
+            ...(allow && allow.length > 0 && !allow.includes(OPENCLAW_PLUGIN_ID) ? { allow: [...allow, OPENCLAW_PLUGIN_ID] } : {}),
+            load: { ...load, paths: paths.includes(pluginPath) ? paths : [...paths, pluginPath] },
         },
     };
 }
+/** Why the plugin will not load even once it is listed, when the config says so. */
+function configBlocksPlugin(config) {
+    const plugins = asObject(config.plugins);
+    if (plugins.enabled === false)
+        return 'plugins.enabled is false';
+    if (Array.isArray(plugins.deny) && plugins.deny.includes(OPENCLAW_PLUGIN_ID))
+        return `plugins.deny lists ${OPENCLAW_PLUGIN_ID}`;
+    if (asObject(asObject(plugins.entries)[OPENCLAW_PLUGIN_ID]).enabled === false)
+        return `plugins.entries.${OPENCLAW_PLUGIN_ID}.enabled is false`;
+    return null;
+}
 // ─── Main export ──────────────────────────────────────────────────────────────
 /**
- * Write the Openclaw governance hook script and merge hook configuration
- * into `~/.openclaw/openclaw.json`.
+ * Write the OpenClaw governance plugin and list it in
+ * `~/.openclaw/openclaw.json`.
  *
- * Safe to call repeatedly — uses atomic rename so partial writes never
- * leave a corrupt state.
+ * Safe to call repeatedly: the plugin is replaced by atomic rename and the
+ * config merge is idempotent. A config file that does not parse is left as
+ * it is, and reported.
  *
  * @param workspaceRoot - Absolute workspace root path.
- * @param proxyUrl      - Intutic proxy URL written into hook headers.
+ * @param proxyUrl      - Intutic proxy URL written into the plugin header.
  * @param workspaceId   - Workspace ID embedded in every hook event payload.
  */
 export async function writeOpenclawHooks(workspaceRoot, proxyUrl, workspaceId = '') {
-    // ── 1. Ensure directories ──────────────────────────────────────────────────
-    const globalHookDir = path.join(os.homedir(), '.intutic', 'hooks');
-    const hookEventsDir = path.join(workspaceRoot, '.intutic', 'events');
-    const envDir = path.join(workspaceRoot, '.intutic', 'env');
-    const openclawDir = path.join(os.homedir(), '.openclaw');
-    await keepOriginal(OPENCLAW_CONFIG, workspaceRoot);
-    await Promise.all([
-        fs.mkdir(globalHookDir, { recursive: true }),
-        fs.mkdir(hookEventsDir, { recursive: true }),
-        fs.mkdir(envDir, { recursive: true }),
-        fs.mkdir(openclawDir, { recursive: true }),
-    ]);
-    // ── 2. Write Node.js hook script ──────────────────────────────────────────
-    const hookScriptPath = path.join(globalHookDir, 'openclaw-check.js');
-    const hookEventsLog = path.join(hookEventsDir, 'hook-events.jsonl');
-    const tmpScript = hookScriptPath + '.intutic-tmp';
-    await fs.writeFile(tmpScript, buildOpenclawCheckScript(hookEventsLog, workspaceId, proxyUrl), 'utf-8');
-    await fs.rename(tmpScript, hookScriptPath);
-    await fs.chmod(hookScriptPath, 0o755);
-    log.info({ action: 'openclaw_hook_script_written', path: hookScriptPath }, 'Openclaw hook script written');
-    // ── 3. JSON5-safe merge into ~/.openclaw/openclaw.json ────────────────────
-    let existingConfig = {};
+    await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
+    const pluginPath = openclawPluginPath();
+    await writeOwnedFile(pluginPath, workspaceRoot, buildOpenclawPlugin(proxyUrl, workspaceRoot, workspaceId));
+    log.info({ action: 'openclaw_plugin_written', path: pluginPath }, 'OpenClaw governance plugin written');
+    const configPath = openclawConfigPath();
+    let raw = null;
     try {
-        const raw = await fs.readFile(OPENCLAW_CONFIG, 'utf-8');
-        existingConfig = parseJson5Like(raw);
+        raw = await fs.readFile(configPath, 'utf-8');
     }
-    catch {
-        // File doesn't exist or is unparseable — start fresh
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            log.warn({ action: 'config_merge_skipped', path: configPath, error: String(err) }, `Could not read ${configPath} — left untouched`);
+            return;
+        }
     }
-    const mergedConfig = mergeOpenclawConfig(existingConfig, hookScriptPath);
-    const tmpConfig = OPENCLAW_CONFIG + '.intutic-tmp';
-    await fs.writeFile(tmpConfig, JSON.stringify(mergedConfig, null, 2) + '\n', 'utf-8');
-    await fs.rename(tmpConfig, OPENCLAW_CONFIG);
-    log.info({ action: 'openclaw_config_merged', path: OPENCLAW_CONFIG }, 'Merged Intutic hook into ~/.openclaw/openclaw.json');
-    // ── 4. Write env snippet ───────────────────────────────────────────────────
-    const envSnippet = [
-        `# Intutic openclaw governance env`,
-        `INTUTIC_OPENCLAW_HOOK=~/.intutic/hooks/openclaw-check.js`,
-        `INTUTIC_OPENCLAW_CONFIG=~/.openclaw/openclaw.json`,
-        `# Validate: openclaw hooks check`,
-    ].join('\n') + '\n';
-    const envFilePath = path.join(envDir, 'openclaw.env');
-    const tmpEnv = envFilePath + '.intutic-tmp';
-    await fs.writeFile(tmpEnv, envSnippet, 'utf-8');
-    await fs.rename(tmpEnv, envFilePath);
-    log.info({ action: 'openclaw_env_written', path: envFilePath }, 'Openclaw env snippet written');
-    // ── 5. Optional validation (non-fatal) ────────────────────────────────────
+    let existing = {};
+    if (raw !== null && raw.trim() !== '') {
+        try {
+            existing = asObject(parseJson5Like(raw));
+        }
+        catch {
+            log.warn({ action: 'config_merge_skipped', path: configPath }, `${configPath} does not parse — left untouched; fix it and the next sync will list the Intutic plugin`);
+            return;
+        }
+    }
+    const blocked = configBlocksPlugin(existing);
+    if (blocked) {
+        log.warn({ action: 'openclaw_plugin_disabled', path: configPath, reason: blocked }, `OpenClaw will not load the Intutic plugin: ${blocked}`);
+    }
+    await keepOriginal(configPath, workspaceRoot);
+    await fs.mkdir(path.dirname(configPath), { recursive: true });
+    const tmp = configPath + '.intutic-tmp';
+    await fs.writeFile(tmp, JSON.stringify(mergeOpenclawConfig(existing, pluginPath), null, 2) + '\n', 'utf-8');
+    await fs.rename(tmp, configPath);
+    log.info({ action: 'openclaw_config_merged', path: configPath }, 'Listed the Intutic plugin in ~/.openclaw/openclaw.json');
+}
+/**
+ * OpenClaw's agent workspace, where it loads `AGENTS.md` and its other
+ * bootstrap files every session — never from a project:
+ * `agents.defaults.workspace` in `~/.openclaw/openclaw.json`, else
+ * `OPENCLAW_WORKSPACE_DIR`, else `~/.openclaw/workspace`
+ * (https://github.com/openclaw/openclaw/blob/98457908cf3e4fbbd0354b530e0aa0d15b560158/docs/gateway/config-agents/workspace-and-bootstrap.md).
+ */
+export async function openclawAgentWorkspace() {
+    const home = os.homedir();
+    const expand = (p) => (p === '~' || p.startsWith('~/') ? path.join(home, p.slice(1)) : path.resolve(p));
     try {
-        const { stdout, stderr } = await execAsync('openclaw hooks check', { timeout: 5000 });
-        log.info({ action: 'openclaw_hooks_check', stdout: stdout.trim(), stderr: stderr.trim() }, 'openclaw hooks check passed');
+        const doc = parseJson5Like(await fs.readFile(path.join(home, '.openclaw', 'openclaw.json'), 'utf-8'));
+        const agents = doc.agents;
+        const configured = agents?.defaults?.workspace;
+        if (typeof configured === 'string' && configured.trim() !== '')
+            return expand(configured.trim());
     }
-    catch (err) {
-        // Not installed or check failed — non-fatal
-        log.debug({ action: 'openclaw_hooks_check_skipped', err }, 'openclaw hooks check skipped (binary not in PATH or check failed)');
+    catch {
+        // No config, or one that does not parse: the defaults apply.
     }
+    const fromEnv = process.env.OPENCLAW_WORKSPACE_DIR;
+    if (fromEnv)
+        return expand(fromEnv);
+    return path.join(home, '.openclaw', 'workspace');
 }
 //# sourceMappingURL=openclawHooks.js.map

package/dist/harness/openclawHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclawHooks.js","sourceRoot":"","sources":["../../src/harness/openclawHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;AAEjC,+CAA+C;AAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;AAE7E,8DAA8D;AAE9D,gFAAgF;AAEhF,SAAS,wBAAwB,CAC/B,aAAqB,EACrB,WAAmB,EACnB,QAAgB;IAEhB,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;gBACR,WAAW;;;EAGzB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;wBAyBhC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4DpD,CAAA;AACD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,0BAA0B;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,QAAiC,EACjC,cAAsB;IAEtB,MAAM,KAAK,GAAI,QAAQ,CAAC,KAA6C,IAAI,EAAE,CAAA;IAC3E,MAAM,QAAQ,GAAI,KAAK,CAAC,QAAgD,IAAI,EAAE,CAAA;IAC9E,MAAM,OAAO,GAAI,QAAQ,CAAC,OAA+C,IAAI,EAAE,CAAA;IAE/E,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE;YACL,GAAG,KAAK;YACR,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,oBAAoB,EAAE;wBACpB,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,YAAY;wBACnB,OAAO,EAAE,cAAc;qBACxB;iBACF;aACF;SACF;KACF,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IAExD,MAAM,YAAY,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IAClD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IAEnE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,wBAAwB,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;IACtG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAE1G,6EAA6E;IAE7E,IAAI,cAAc,GAA4B,EAAE,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QACvD,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IAExE,MAAM,SAAS,GAAG,eAAe,GAAG,cAAc,CAAA;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACpF,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAE3C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,eAAe,EAAE,EAC3D,oDAAoD,CACrD,CAAA;IAED,8EAA8E;IAE9E,MAAM,UAAU,GAAG;QACjB,mCAAmC;QACnC,0DAA0D;QAC1D,mDAAmD;QACnD,kCAAkC;KACnC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrD,8BAA8B,CAC/B,CAAA;IAED,6EAA6E;IAE7E,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACrF,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAChF,6BAA6B,CAC9B,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4CAA4C;QAC5C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,GAAG,EAAE,EAAE,mEAAmE,CAAC,CAAA;IACjI,CAAC;AACH,CAAC"}
+{"version":3,"file":"openclawHooks.js","sourceRoot":"","sources":["../../src/harness/openclawHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAA;AAEpE,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAEtD,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,kBAAkB,MAAM,CAAC,CAAA;AAE3G,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,qCAAqC,CAAA;AAE3E,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;AAC9D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAA;AACtD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IAC9F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;KACJ,sBAAsB;;YAEf,QAAQ;gBACJ,MAAM,EAAE;;;;;;;;;;;;;;;;gFAgBwD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,wBAAwB,CAAC,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;sBAoB/H,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4D3C,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;;;;8DAIoB,oBAAoB,GAAG,IAAI;;;CAGxF,CAAA;AACD,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,0BAA0B;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAA;AACxD,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CACvD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;AAEhG;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiC,EAAE,UAAkB;IACvF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACtE,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE;YACP,GAAG,OAAO;YACV,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtH,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC,EAAE;SACtF;KACF,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,MAA+B;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,0BAA0B,CAAA;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,sBAAsB,kBAAkB,EAAE,CAAA;IAC/H,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,mBAAmB,kBAAkB,mBAAmB,CAAA;IAC9I,OAAO,IAAI,CAAA;AACb,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAA;IACvC,MAAM,cAAc,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;IAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAEvG,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAA;IACvC,IAAI,GAAG,GAAkB,IAAI,CAAA;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,UAAU,mBAAmB,CAAC,CAAA;YACnI,OAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,EACpD,GAAG,UAAU,yFAAyF,CACvG,CAAA;YACD,OAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,8CAA8C,OAAO,EAAE,CAAC,CAAA;IAC9I,CAAC;IAED,MAAM,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,UAAU,GAAG,cAAc,CAAA;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC3G,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,wDAAwD,CAAC,CAAA;AAC5H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IACzB,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,GAAG,CAAC,MAA4D,CAAA;QAC/E,MAAM,UAAU,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAA;QAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IAClD,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;AAClD,CAAC"}

package/dist/harness/openhandsHooks.d.ts

@@ -7,11 +7,21 @@
  * The hooks file lives within the agent's sandbox working directory,
  * so we also register it with the drift watcher.
  *
- * LLD #14 — Phase 3 cross-harness defence
  * HLD §3.14 — Three-Tier Defense Cascade
  *
  * @module
  */
+/**
+ * `.openhands/hooks.json` in the OpenHands SDK's schema (\`HookConfig\`): each
+ * event a list of matchers, each with its hook definitions. Earlier versions
+ * wrote a flat list of \`{type: 'PreToolUse', command, failClosed}\`, which the
+ * SDK cannot load, and had extra top-level keys beside \`hooks\`, which it
+ * drops with a warning; the marker that tells disconnect the file is ours is
+ * now each hook's \`name\`. OpenHands runs a call whose hook times out, and
+ * has no setting to refuse instead, so the gate refuses at its own deadline,
+ * inside the \`timeout\` set here (default 60 s).
+ */
+export declare function openHandsHooksConfig(hookScriptPath: string): Record<string, unknown>;
 /**
  * Write .openhands/hooks.json and the pre-tool-check shell script.
  * Also points `[llm] base_url` in ~/.openhands/config.toml at the proxy when
@@ -34,16 +44,20 @@ export declare function isOpenHandsConfig(raw: string): boolean;
  */
 export declare function mergeOpenHandsBaseUrl(raw: string, proxyUrl: string): string | null;
 /**
- * Merge Intutic's keys into an OpenHands `config.toml`:
- * - `[llm] base_url` — the proxy, in the form the configured model's SDK
- *   expects (LiteLLM appends `/v1/messages` to an Anthropic base and
- *   `/chat/completions` to an OpenAI-style one);
- * - an `[intutic]` table carrying the SOP text, replaced whole each sync.
+ * Point `[llm] base_url` in the workspace's OpenHands `config.toml` at the
+ * proxy, in the form the configured model's SDK expects (LiteLLM appends
+ * `/v1/messages` to an Anthropic base and `/chat/completions` to an
+ * OpenAI-style one), and keep the rest of the file.
+ *
+ * Earlier versions also wrote the rule sets into an `[intutic]` table, which
+ * OpenHands never reads (the rules now go into a microagent, see the
+ * adapter); that table is dropped. Earlier still, versions replaced the
+ * whole file, so a file starting with their header holds nothing of the
+ * user's and is regenerated.
  *
  * Edited line by line so the user's own settings and comments survive; the
- * result is parsed before it is returned. Earlier versions replaced the whole
- * file, so a file starting with their header holds nothing of the user's and
- * is regenerated. Returns `null` when the existing file is not valid TOML.
+ * result is parsed before it is returned. Returns `null` when the existing
+ * file is not valid TOML.
  */
-export declare function mergeOpenHandsToml(raw: string, proxyUrl: string, instructions: string): string | null;
+export declare function mergeOpenHandsToml(raw: string, proxyUrl: string): string | null;
 //# sourceMappingURL=openhandsHooks.d.ts.map

package/dist/harness/openhandsHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openhandsHooks.d.ts","sourceRoot":"","sources":["../../src/harness/openhandsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAqHf;AAqDD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAItD;AAuCD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsBrG"}
+{"version":3,"file":"openhandsHooks.d.ts","sourceRoot":"","sources":["../../src/harness/openhandsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQpF;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAwGf;AAqDD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAItD;AAuCD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU/E"}