@pushary/openclaw 0.0.0-stage → 0.1.1

package/dist/settings.js

@@ -0,0 +1,103 @@
+import { FILE_WRITING_TOOLS, SESSIONS_SPAWN_TOOL } from './protected-writes.js';
+export const PLUGIN_ID = 'pushary';
+export const PLUGIN_NAME = 'Pushary';
+export const PLUGIN_DESCRIPTION = 'Asks you on your phone before OpenClaw runs a gated tool call, and blocks the call unless you approve it.';
+export const AGENT_LABEL = 'OpenClaw';
+export const DEFAULT_OPENCLAW_AGENT_ID = 'main';
+export const EXEC_TOOL = 'exec';
+export const PROCESS_TOOL = 'process';
+export const PLUGINS_TOOL = 'plugins';
+export const GATEWAY_TOOL = 'gateway';
+export const OPENCLAW_SYSTEM_TOOL = 'openclaw';
+export const AUTOMATIONS_TOOL = 'automations';
+export const TERMINAL_TOOL = 'terminal';
+export const TOOL_ACTION_PARAMETER = 'action';
+const TOOL_ID_PATTERN = /^[a-z0-9][a-z0-9_.:-]{0,99}$/;
+const AGENT_NAME_SEPARATOR = ' - ';
+const AGENT_ID_MAX_LENGTH = 40;
+const HOST_TOOL_ALIASES = new Map([
+    ['bash', EXEC_TOOL],
+    ['exec_command', EXEC_TOOL],
+    ['shell', EXEC_TOOL],
+    ['shell_command', EXEC_TOOL],
+    ['apply-patch', 'apply_patch'],
+    ['tool_call', 'dispatch_action'],
+    ['cron', AUTOMATIONS_TOOL],
+    ['agent', 'spawn_agent'],
+]);
+const HOST_SPELLINGS_OF_EXEC = [EXEC_TOOL, 'shell', 'shell_command'];
+const PROCESS_ACTIONS_WITHOUT_APPROVAL = new Set(['list', 'poll', 'log', 'kill', 'clear', 'remove']);
+const PLUGINS_ACTIONS_WITHOUT_APPROVAL = new Set(['list', 'inspect', 'search']);
+const GATEWAY_ACTIONS_WITHOUT_APPROVAL = new Set(['config.get', 'config.schema.lookup']);
+const OPENCLAW_SYSTEM_ACTIONS_WITHOUT_APPROVAL = new Set([
+    'status', 'models', 'agents', 'channels', 'channel_info', 'audit', 'validate_config', 'doctor',
+    'config_get', 'config_schema', 'gateway_status', 'plugin_list', 'plugin_search', 'open_agent', 'open_setup',
+]);
+const AUTOMATIONS_ACTIONS_WITHOUT_APPROVAL = new Set(['status', 'list', 'get', 'runs', 'next_check']);
+const TERMINAL_ACTIONS_WITHOUT_APPROVAL = new Set(['read', 'list']);
+const ACTIONS_WITHOUT_APPROVAL_BY_TOOL = new Map([
+    [PROCESS_TOOL, PROCESS_ACTIONS_WITHOUT_APPROVAL],
+    [PLUGINS_TOOL, PLUGINS_ACTIONS_WITHOUT_APPROVAL],
+    [GATEWAY_TOOL, GATEWAY_ACTIONS_WITHOUT_APPROVAL],
+    [OPENCLAW_SYSTEM_TOOL, OPENCLAW_SYSTEM_ACTIONS_WITHOUT_APPROVAL],
+    [AUTOMATIONS_TOOL, AUTOMATIONS_ACTIONS_WITHOUT_APPROVAL],
+    [TERMINAL_TOOL, TERMINAL_ACTIONS_WITHOUT_APPROVAL],
+]);
+export const DEFAULT_GATED_TOOLS = [EXEC_TOOL, PROCESS_TOOL, PLUGINS_TOOL, GATEWAY_TOOL, OPENCLAW_SYSTEM_TOOL, AUTOMATIONS_TOOL, TERMINAL_TOOL];
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+export const hostToolId = (name) => {
+    const lowered = name.trim().toLowerCase();
+    return HOST_TOOL_ALIASES.get(lowered) ?? lowered;
+};
+const configuredToolId = (value) => {
+    if (typeof value !== 'string')
+        return null;
+    const id = hostToolId(value);
+    return TOOL_ID_PATTERN.test(id) ? id : null;
+};
+const withDefaults = (extra) => [...new Set([...DEFAULT_GATED_TOOLS, ...extra])];
+const DEFAULT_SETTINGS = { gatedTools: DEFAULT_GATED_TOOLS };
+const rejectedEntry = (value) => (typeof value === 'string' ? value : JSON.stringify(value) ?? String(value));
+export const readGateSettings = (pluginConfig) => {
+    if (pluginConfig === undefined)
+        return { kind: 'defaulted', settings: DEFAULT_SETTINGS };
+    if (!isRecord(pluginConfig))
+        return { kind: 'invalid', settings: DEFAULT_SETTINGS };
+    const configured = pluginConfig.gatedTools;
+    if (configured === undefined)
+        return { kind: 'defaulted', settings: DEFAULT_SETTINGS };
+    if (!Array.isArray(configured))
+        return { kind: 'invalid', settings: DEFAULT_SETTINGS };
+    const accepted = configured.flatMap(entry => {
+        const id = configuredToolId(entry);
+        return id === null ? [] : [id];
+    });
+    const rejected = configured.filter(entry => configuredToolId(entry) === null).map(rejectedEntry);
+    return { kind: 'configured', settings: { gatedTools: withDefaults(accepted) }, rejected };
+};
+const hostSpellingsOf = (toolId) => (toolId === EXEC_TOOL ? HOST_SPELLINGS_OF_EXEC : [toolId]);
+export const hookMatcherFor = (settings) => {
+    const [first, ...rest] = [...new Set([...settings.gatedTools.flatMap(hostSpellingsOf), ...FILE_WRITING_TOOLS, SESSIONS_SPAWN_TOOL])];
+    return [first ?? EXEC_TOOL, ...rest];
+};
+const toolActionOf = (event) => {
+    const action = event.params[TOOL_ACTION_PARAMETER];
+    return typeof action === 'string' ? action.trim() : null;
+};
+const actionNeedsApproval = (actionsWithoutApproval, event) => {
+    const action = toolActionOf(event);
+    return action === null || !actionsWithoutApproval.has(action);
+};
+export const needsApproval = (settings, event) => {
+    const toolId = hostToolId(event.toolName);
+    if (!settings.gatedTools.includes(toolId))
+        return false;
+    const actionsWithoutApproval = ACTIONS_WITHOUT_APPROVAL_BY_TOOL.get(toolId);
+    return actionsWithoutApproval === undefined || actionNeedsApproval(actionsWithoutApproval, event);
+};
+export const askingAgentName = (openClawAgentId) => {
+    const agentId = openClawAgentId?.trim().slice(0, AGENT_ID_MAX_LENGTH);
+    return agentId && agentId !== DEFAULT_OPENCLAW_AGENT_ID
+        ? `${AGENT_LABEL}${AGENT_NAME_SEPARATOR}${agentId}`
+        : AGENT_LABEL;
+};

package/openclaw.plugin.json

@@ -0,0 +1,32 @@
+{
+  "id": "pushary",
+  "name": "Pushary",
+  "description": "Asks you on your phone before OpenClaw runs a gated tool call, and blocks the call unless you approve it.",
+  "categories": [
+    "security"
+  ],
+  "activation": {
+    "onStartup": true
+  },
+  "uiHints": {
+    "gatedTools": {
+      "label": "More tools that need your approval",
+      "help": "OpenClaw tool ids to gate on top of the defaults (exec, process input, and the plugins, gateway and openclaw actions that change OpenClaw), for example message or browser."
+    }
+  },
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "gatedTools": {
+        "type": "array",
+        "minItems": 1,
+        "uniqueItems": true,
+        "items": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,99}$"
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,76 @@
 {
   "name": "@pushary/openclaw",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Phone approvals for OpenClaw. Pushary asks you before your AI agent runs a gated tool call, and blocks the call unless you approve it.",
+  "author": "Pushary <business@pushary.com>",
+  "homepage": "https://pushary.com/human-in-the-loop-openclaw",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Pushary/pushary-openclaw.git"
+  },
+  "bugs": {
+    "url": "https://pushary.com/support"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./openclaw.plugin.json": "./openclaw.plugin.json"
+  },
+  "files": [
+    "dist",
+    "assets",
+    "openclaw.plugin.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=24.16.0"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "node ../../scripts/ci/run-tests.mjs src",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build && npm run typecheck"
+  },
+  "openclaw": {
+    "extensions": [
+      "./dist/index.js"
+    ],
+    "compat": {
+      "pluginApi": ">=2026.11.3"
+    },
+    "build": {
+      "openclawVersion": "2026.11.3"
+    },
+    "install": {
+      "npmSpec": "@pushary/openclaw",
+      "minHostVersion": ">=2026.11.3"
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "typescript": "^5"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "pushary",
+    "openclaw",
+    "openclaw-plugin",
+    "human-in-the-loop",
+    "approval",
+    "tool-approval",
+    "push-notifications",
+    "ai-agents"
+  ]
+}