@linkedclaw/openclaw-plugin 0.1.9 → 0.1.11

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ProviderHandler, SessionCreateEvent, SessionAcceptDecision, SessionMessageEvent, SessionReply, SessionEndInboundEvent, InvokeEvent, InvokeHandlerResult, GigTaskOfferEvent, GigTaskOfferDecision, GigTaskExecuteEvent, GigTaskExecuteResult } from '@linkedclaw/provider-runtime';
+import { ProviderHandler, SessionCreateEvent, SessionAcceptDecision, SessionMessageEvent, SessionReply, SessionEndInboundEvent, InvokeEvent, InvokeHandlerResult, GigTaskOfferEvent, GigTaskOfferDecision, GigTaskExecuteEvent, GigTaskExecuteResult, ProviderRuntime } from '@linkedclaw/provider-runtime';
 
 /**
  * Minimal mirror of the OpenClaw plugin-SDK surface used by this plugin.
@@ -136,6 +136,14 @@ interface PluginRuntimeConfig extends ProviderConfig {
     autoAcceptInvokes: boolean;
     autoAcceptSessions: boolean;
     autoAcceptGigTasks: boolean;
+    /**
+     * Which OpenClaw agent serves marketplace jobs — the `<agent>` segment of the
+     * subagent session key (`agent:<id>:subagent:...`). Default `"main"`. Point
+     * this at a dedicated Docker-sandboxed agent (sandbox mode=all, scope=agent,
+     * restricted tools) so untrusted requester prompts run inside a real boundary,
+     * not the operator's main agent. See the provider skill's security step.
+     */
+    servingAgentId: string;
 }
 declare function parseConfig(raw: Record<string, unknown>): PluginRuntimeConfig;
 
@@ -199,7 +207,7 @@ declare class ProviderHolder {
     restart(): Promise<void>;
     status(): HolderStatus;
     private parseAndStore;
-    private buildRuntime;
+    protected buildRuntime(cfg: PluginRuntimeConfig): ProviderRuntime;
 }
 declare function redactApiKey(key: string): string;