@opentrust/dashboard 7.3.32 → 7.3.33

package/dist/routes/hosts.js

@@ -1,10 +1,9 @@
 import { Router } from "express";
-import { db, hostQueries, hostCommandQueries, agentQueries, settingsQueries } from "@opentrust/db";
-import { ensureSystemApiKey } from "./settings.js";
+import { db, hostQueries, hostCommandQueries, agentQueries } from "@opentrust/db";
+import { renderOpenclawConfig } from "./settings.js";
 const hosts = hostQueries(db);
 const cmds = hostCommandQueries(db);
 const agentsDb = agentQueries(db);
-const settingsDb = settingsQueries(db);
 export const hostsRouter = Router();
 const VALID_COMMAND_TYPES = [
     "start_service",
@@ -89,33 +88,11 @@ hostsRouter.post("/commands", async (req, res, next) => {
         }
         let finalPayload = payload ?? {};
         if (type === "install_openclaw") {
-            const raw = await settingsDb.get("openclaw_config");
-            if (!raw) {
+            const rendered = await renderOpenclawConfig();
+            if (!rendered) {
                 res.status(400).json({ success: false, error: "No OpenClaw config template. Configure it in Settings first." });
                 return;
             }
-            const template = JSON.parse(raw);
-            const apiKey = await ensureSystemApiKey();
-            const dashboardUrl = (await settingsDb.get("og_dashboard_url")) || "http://localhost:53667";
-            const coreUrl = (await settingsDb.get("og_core_url")) || "http://localhost:53666";
-            const rendered = {
-                ...template,
-                plugins: {
-                    ...template.plugins,
-                    entries: {
-                        ...template.plugins?.entries,
-                        "opentrust-guard": {
-                            enabled: true,
-                            config: {
-                                apiKey,
-                                coreUrl,
-                                dashboardUrl,
-                                ...(template.plugins?.entries?.["opentrust-guard"]?.config ?? {}),
-                            },
-                        },
-                    },
-                },
-            };
             finalPayload = { ...finalPayload, config: rendered };
         }
         await cmds.create({ hostId, type, payload: finalPayload, tenantId });

package/dist/routes/settings.js

@@ -109,36 +109,64 @@ settingsRouter.put("/openclaw-config", async (req, res, next) => {
         next(err);
     }
 });
+/**
+ * Render a full openclaw.json from the stored template, injecting runtime fields:
+ * meta, wizard, gateway.auth.token, plugins.entries.opentrust-guard
+ */
+export async function renderOpenclawConfig() {
+    const raw = await settings.get("openclaw_config");
+    if (!raw)
+        return null;
+    const template = JSON.parse(raw);
+    const apiKey = await ensureSystemApiKey();
+    const dashboardUrl = (await settings.get("og_dashboard_url")) || "http://localhost:53667";
+    const coreUrl = (await settings.get("og_core_url")) || "http://localhost:53666";
+    const now = new Date().toISOString();
+    const rendered = {
+        meta: {
+            lastTouchedVersion: "2026.3.1",
+            lastTouchedAt: now,
+        },
+        wizard: {
+            lastRunAt: now,
+            lastRunVersion: "2026.3.1",
+            lastRunCommand: "opentrust-install",
+            lastRunMode: "remote",
+        },
+        ...template,
+    };
+    if (!rendered.gateway)
+        rendered.gateway = {};
+    if (!rendered.gateway.auth)
+        rendered.gateway.auth = { mode: "token" };
+    if (!rendered.gateway.auth.token) {
+        rendered.gateway.auth.token = randomBytes(24).toString("hex");
+    }
+    rendered.plugins = {
+        ...template.plugins,
+        entries: {
+            ...template.plugins?.entries,
+            "opentrust-guard": {
+                enabled: true,
+                config: {
+                    coreUrl,
+                    dashboardUrl,
+                    apiKey,
+                    ...(template.plugins?.entries?.["opentrust-guard"]?.config ?? {}),
+                },
+            },
+        },
+    };
+    return rendered;
+}
 // GET /api/settings/openclaw-config/rendered — full openclaw.json with secrets injected
 settingsRouter.get("/openclaw-config/rendered", async (_req, res, next) => {
     try {
-        const raw = await settings.get("openclaw_config");
-        if (!raw) {
+        const rendered = await renderOpenclawConfig();
+        if (!rendered) {
             res.status(404).json({ success: false, error: "No OpenClaw config template configured. Go to Settings to set one up." });
             return;
         }
-        const template = JSON.parse(raw);
-        const apiKey = await ensureSystemApiKey();
-        const dashboardUrl = await settings.get("og_dashboard_url") || "http://localhost:53667";
-        const coreUrl = await settings.get("og_core_url") || "http://localhost:53666";
-        const rendered = {
-            ...template,
-            plugins: {
-                ...template.plugins,
-                entries: {
-                    ...template.plugins?.entries,
-                    "opentrust-guard": {
-                        enabled: true,
-                        config: {
-                            apiKey,
-                            coreUrl,
-                            dashboardUrl,
-                            ...(template.plugins?.entries?.["opentrust-guard"]?.config ?? {}),
-                        },
-                    },
-                },
-            },
-        };
         res.json({ success: true, data: rendered });
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentrust/dashboard",
-  "version": "7.3.32",
+  "version": "7.3.33",
   "type": "module",
   "description": "OpenTrust Dashboard — management panel for AI Agent security (API + embedded web)",
   "main": "dist/index.js",
@@ -19,8 +19,8 @@
     "morgan": "^1.10.0",
     "nodemailer": "^8.0.1",
     "zod": "^3.23.0",
-    "@opentrust/db": "7.3.32",
-    "@opentrust/shared": "7.3.32"
+    "@opentrust/db": "7.3.33",
+    "@opentrust/shared": "7.3.33"
   },
   "devDependencies": {
     "@types/cors": "^2.8.17",