@randromeda/arbiter-openclaw 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `@randromeda/arbiter-openclaw` will be documented in this file.
 
+## [0.1.2] - 2026-04-11
+
+- Documented the safe canary-path smoke test for OpenClaw using `/tmp/arbiter-deny-test`.
+
+## [0.1.1] - 2026-04-03
+
+- Added local runtime auto-discovery from `~/.arbiter/config.json`.
+- Added optional `localConfigPath` override in plugin config.
+- Removed environment-variable fallback wiring from plugin runtime setup.
+
 ## [0.1.0] - 2026-04-02
 
 - Initial native OpenClaw plugin implementation.

package/README.md

@@ -29,7 +29,9 @@ openclaw plugins install ./integrations/openclaw-plugin
 
 ## Config
 
-Add plugin config under `plugins.entries.arbiter-openclaw.config` in your OpenClaw config:
+The plugin auto-discovers local runtime settings from `~/.arbiter/config.json` by default.
+
+Minimal local config:
 
 ```json
 {
@@ -38,10 +40,6 @@ Add plugin config under `plugins.entries.arbiter-openclaw.config` in your OpenCl
       "arbiter-openclaw": {
         "enabled": true,
         "config": {
-          "arbiterUrl": "http://localhost:8080",
-          "tenantId": "tenant-demo",
-          "gatewayKey": "gw-key",
-          "serviceKey": "svc-key",
           "protectTools": ["exec", "process", "write", "edit", "apply_patch"],
           "recordState": true,
           "failClosed": true
@@ -52,10 +50,31 @@ Add plugin config under `plugins.entries.arbiter-openclaw.config` in your OpenCl
 }
 ```
 
+Optional explicit config (for non-local or customized setups):
+
+```json
+{
+  "plugins": {
+    "entries": {
+      "arbiter-openclaw": {
+        "enabled": true,
+        "config": {
+          "arbiterUrl": "http://localhost:8080",
+          "tenantId": "tenant-demo",
+          "gatewayKey": "gw-key",
+          "serviceKey": "svc-key"
+        }
+      }
+    }
+  }
+}
+```
+
 Config options:
 
-- `arbiterUrl`: Arbiter base URL.
-- `tenantId`: Tenant ID for canonical requests and state records.
+- `arbiterUrl`: Arbiter base URL. Defaults from local runtime config when available.
+- `localConfigPath`: Optional override path for local runtime config. Defaults to `~/.arbiter/config.json`.
+- `tenantId`: Tenant ID for canonical requests and state records. Defaults from local runtime config when available.
 - `gatewayKey`: Optional key for intercept routes.
 - `serviceKey`: Optional key for verify/state routes.
 - `actorIdMode`: `agent-id` (default) or `config`.
@@ -65,6 +84,13 @@ Config options:
 - `failClosed`: Block on Arbiter errors (default `true`).
 - `timeoutMs`: Per-request timeout (default `5000`).
 
+Local runtime quick setup:
+
+```bash
+go run ./cmd/arbiter local init
+go run ./cmd/arbiter local start
+```
+
 ## Stock OpenClaw Tool Mapping
 
 The default protected tools are:
@@ -77,6 +103,8 @@ The default protected tools are:
 
 Use Arbiter policy to allow or deny these tools. The included Arbiter filesystem policy denies destructive delete commands and `apply_patch` file-deletion directives.
 
+For a safer OpenClaw smoke test, the default policy also denies writes and shell commands that target the canary prefix `/tmp/arbiter-deny-test`. A normal chat prompt such as `Use the exec tool exactly once to run: mkdir -p /tmp/arbiter-deny-test/nested` should trigger an Arbiter block without relying on `rm -rf`.
+
 ## Development
 
 Run plugin tests:

package/index.js

@@ -9,8 +9,7 @@ export default definePluginEntry({
     const guardrail = createArbiterGuardrail({
       pluginConfig: api.pluginConfig,
       logger: api.logger,
-      fetchImpl: globalThis.fetch,
-      env: process.env
+      fetchImpl: globalThis.fetch
     });
 
     api.on("before_tool_call", guardrail.beforeToolCall);

package/openclaw.plugin.json

@@ -11,6 +11,9 @@
         "format": "uri",
         "pattern": "^[Hh][Tt][Tt][Pp][Ss]?://"
       },
+      "localConfigPath": {
+        "type": "string"
+      },
       "tenantId": {
         "type": "string",
         "minLength": 1
@@ -67,6 +70,11 @@
       "label": "Arbiter Base URL",
       "help": "Base URL for the Arbiter interceptor, for example http://localhost:8080."
     },
+    "localConfigPath": {
+      "label": "Local Runtime Config Path",
+      "help": "Optional path to local Arbiter config (defaults to ~/.arbiter/config.json).",
+      "advanced": true
+    },
     "tenantId": {
       "label": "Tenant ID",
       "help": "Tenant identifier included in canonical requests and state records."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@randromeda/arbiter-openclaw",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "OpenClaw native plugin that enforces Arbiter guardrails before tool execution.",
   "license": "Apache-2.0",
   "type": "module",

package/src/config.js

@@ -1,3 +1,7 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
 export const DEFAULT_PROTECT_TOOLS = ["exec", "process", "write", "edit", "apply_patch"];
 export const DEFAULT_TIMEOUT_MS = 5000;
 
@@ -36,15 +40,38 @@ function normalizeToolList(value) {
   return tools.length > 0 ? Array.from(new Set(tools)) : DEFAULT_PROTECT_TOOLS.slice();
 }
 
-export function resolvePluginConfig(pluginConfig, env = process.env) {
+function readLocalRuntimeConfig(customPath) {
+  const location = customPath || path.join(os.homedir(), ".arbiter", "config.json");
+  try {
+    const raw = fs.readFileSync(location, "utf8");
+    const parsed = JSON.parse(raw);
+    return asRecord(parsed);
+  } catch {
+    return {};
+  }
+}
+
+function baseURLFromAddress(address) {
+  if (!address) {
+    return "";
+  }
+  if (address.startsWith("http://") || address.startsWith("https://")) {
+    return address;
+  }
+  return `http://${address}`;
+}
+
+export function resolvePluginConfig(pluginConfig) {
   const cfg = asRecord(pluginConfig);
-  const runtimeEnv = asRecord(env);
+  const localConfigPath = asString(cfg.localConfigPath);
+  const localConfig = readLocalRuntimeConfig(localConfigPath);
+  const localURL = asString(localConfig.base_url) || baseURLFromAddress(asString(localConfig.address));
 
-  const arbiterUrl = asString(cfg.arbiterUrl) || asString(runtimeEnv.ARBITER_URL);
-  const tenantId = asString(cfg.tenantId) || asString(runtimeEnv.ARBITER_TENANT_ID);
-  const gatewayKey = asString(cfg.gatewayKey) || asString(runtimeEnv.ARBITER_GATEWAY_SHARED_KEY);
-  const serviceKey = asString(cfg.serviceKey) || asString(runtimeEnv.ARBITER_SERVICE_SHARED_KEY);
-  const actorId = asString(cfg.actorId) || asString(runtimeEnv.ARBITER_ACTOR_ID);
+  const arbiterUrl = asString(cfg.arbiterUrl) || localURL;
+  const tenantId = asString(cfg.tenantId) || asString(localConfig.tenant_id);
+  const gatewayKey = asString(cfg.gatewayKey);
+  const serviceKey = asString(cfg.serviceKey);
+  const actorId = asString(cfg.actorId);
 
   const actorIdMode = asString(cfg.actorIdMode) === "config" ? "config" : "agent-id";
   const protectTools = normalizeToolList(cfg.protectTools);
@@ -74,6 +101,7 @@ export function resolvePluginConfig(pluginConfig, env = process.env) {
     recordState,
     failClosed,
     timeoutMs,
+    localConfigPath,
     missing
   };
 }

package/src/guardrail.js

@@ -31,7 +31,11 @@ function configError(config) {
   if (!config.missing.length) {
     return "";
   }
-  return `arbiter plugin misconfigured: missing ${config.missing.join(", ")}`;
+  let hint = "";
+  if (config.missing.includes("arbiterUrl") || config.missing.includes("tenantId")) {
+    hint = " (run `go run ./cmd/arbiter local init` and `go run ./cmd/arbiter local start`, or set arbiterUrl/tenantId explicitly)";
+  }
+  return `arbiter plugin misconfigured: missing ${config.missing.join(", ")}${hint}`;
 }
 
 function serviceHeaders(config) {
@@ -45,10 +49,9 @@ function gatewayHeaders(config) {
 export function createArbiterGuardrail({
   pluginConfig,
   logger,
-  fetchImpl = globalThis.fetch,
-  env = process.env
+  fetchImpl = globalThis.fetch
 }) {
-  const config = resolvePluginConfig(pluginConfig, env);
+  const config = resolvePluginConfig(pluginConfig);
   const protectedTools = new Set(config.protectTools);
 
   async function beforeToolCall(event, ctx) {