@stanchat/clawguard 2.1.0

package/dist/hooks.js

@@ -0,0 +1,351 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.approveAction = approveAction;
+exports.denyAction = denyAction;
+exports.listPendingApprovals = listPendingApprovals;
+exports.beforeToolCall = beforeToolCall;
+exports.afterToolCall = afterToolCall;
+const consent_1 = require("./consent");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const LOG_DIR = path.join(os.homedir(), ".clawguard", "logs");
+const POLICY_FILE = path.join(os.homedir(), ".clawguard", "policy.json");
+const PENDING_DIR = path.join(os.homedir(), ".clawguard", "pending");
+const DEFAULT_POLICY = [
+    { tool: "shell.exec", decision: "review", reason: "Terminal commands can modify your system" },
+    { tool: "fs.write", decision: "review", reason: "File writes can overwrite important data" },
+    { tool: "fs.delete", decision: "blocked", reason: "File deletion is high-risk" },
+    { tool: "fs.unlink", decision: "blocked", reason: "File deletion is high-risk" },
+    { tool: "http.request", decision: "approved", reason: "Network requests allowed by default" },
+    { tool: "env.read", decision: "blocked", reason: "Credential access is restricted" },
+    { tool: "env.get", decision: "blocked", reason: "Credential access is restricted" }
+];
+const DANGEROUS_PATTERNS = [
+    /rm\s+(-rf?|--recursive|--force)\s+[\/~]/i,
+    /rm\s+-[rf]{2}\s+/i,
+    /mkfs\./i,
+    /dd\s+if=.*of=\/dev/i,
+    />\s*\/dev\/sd[a-z]/i,
+    /chmod\s+777\s+\//i,
+    /curl.*\|\s*(ba)?sh/i,
+    /wget.*\|\s*(ba)?sh/i,
+    /eval\s*\(/i,
+    /:(){.*}:/i,
+    /fork\s*bomb/i
+];
+const INJECTION_PATTERNS = [
+    /ignore\s+(previous|all|prior)\s+(instructions?|prompts?)/i,
+    /disregard\s+(your|the|all)\s+(instructions?|rules?|guidelines?)/i,
+    /you\s+are\s+now\s+(a|in|acting)/i,
+    /new\s+instructions?:/i,
+    /system\s*:\s*you/i,
+    /\[INST\]/i,
+    /<\|im_start\|>/i,
+    /jailbreak/i,
+    /bypass\s+(security|filter|restriction)/i
+];
+function loadPolicy() {
+    try {
+        if (fs.existsSync(POLICY_FILE)) {
+            return JSON.parse(fs.readFileSync(POLICY_FILE, "utf-8"));
+        }
+    }
+    catch { }
+    return DEFAULT_POLICY;
+}
+function classifyTool(tool) {
+    const policy = loadPolicy();
+    return policy.find(r => tool.startsWith(r.tool) || tool === r.tool) || null;
+}
+function checkDangerousCommand(args) {
+    const argsStr = JSON.stringify(args);
+    for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(argsStr)) {
+            return `Dangerous command pattern detected: ${pattern.source}`;
+        }
+    }
+    return null;
+}
+function checkInjection(args) {
+    const argsStr = JSON.stringify(args);
+    for (const pattern of INJECTION_PATTERNS) {
+        if (pattern.test(argsStr)) {
+            return `Possible prompt injection: ${pattern.source}`;
+        }
+    }
+    return null;
+}
+function logAction(context, result) {
+    if (!fs.existsSync(LOG_DIR)) {
+        fs.mkdirSync(LOG_DIR, { recursive: true });
+    }
+    const logEntry = {
+        ts: new Date().toISOString(),
+        tool: context.tool,
+        args: context.args,
+        allowed: result.allowed,
+        reason: result.reason,
+        sessionId: context.sessionId,
+        agentId: context.agentId
+    };
+    const logFile = path.join(LOG_DIR, `${new Date().toISOString().split("T")[0]}.jsonl`);
+    fs.appendFileSync(logFile, JSON.stringify(logEntry) + "\n");
+}
+function generateApprovalId() {
+    return `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+function createPendingApproval(context, reason) {
+    if (!fs.existsSync(PENDING_DIR)) {
+        fs.mkdirSync(PENDING_DIR, { recursive: true });
+    }
+    const approval = {
+        id: generateApprovalId(),
+        tool: context.tool,
+        args: context.args,
+        reason,
+        createdAt: new Date().toISOString(),
+        status: "pending"
+    };
+    const filePath = path.join(PENDING_DIR, `${approval.id}.json`);
+    fs.writeFileSync(filePath, JSON.stringify(approval, null, 2));
+    console.log(`\x1b[33m🦞 Action requires approval: ${context.tool}\x1b[0m`);
+    console.log(`   Reason: ${reason}`);
+    console.log(`   Approve via dashboard or: openclaw clawguard approve ${approval.id}`);
+    return approval;
+}
+function checkApprovalStatus(id) {
+    const filePath = path.join(PENDING_DIR, `${id}.json`);
+    try {
+        if (fs.existsSync(filePath)) {
+            return JSON.parse(fs.readFileSync(filePath, "utf-8"));
+        }
+    }
+    catch { }
+    return null;
+}
+async function waitForApproval(id, timeoutMs = 30000) {
+    const startTime = Date.now();
+    const pollInterval = 500;
+    while (Date.now() - startTime < timeoutMs) {
+        const approval = checkApprovalStatus(id);
+        if (approval && approval.status !== "pending") {
+            return approval.status === "approved";
+        }
+        await new Promise(resolve => setTimeout(resolve, pollInterval));
+    }
+    console.log(`\x1b[31m🦞 Approval timed out after ${timeoutMs / 1000}s - action denied\x1b[0m`);
+    return false;
+}
+function approveAction(id) {
+    const filePath = path.join(PENDING_DIR, `${id}.json`);
+    try {
+        if (fs.existsSync(filePath)) {
+            const approval = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+            approval.status = "approved";
+            approval.resolvedAt = new Date().toISOString();
+            fs.writeFileSync(filePath, JSON.stringify(approval, null, 2));
+            return true;
+        }
+    }
+    catch { }
+    return false;
+}
+function denyAction(id) {
+    const filePath = path.join(PENDING_DIR, `${id}.json`);
+    try {
+        if (fs.existsSync(filePath)) {
+            const approval = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+            approval.status = "denied";
+            approval.resolvedAt = new Date().toISOString();
+            fs.writeFileSync(filePath, JSON.stringify(approval, null, 2));
+            return true;
+        }
+    }
+    catch { }
+    return false;
+}
+function listPendingApprovals() {
+    if (!fs.existsSync(PENDING_DIR))
+        return [];
+    const files = fs.readdirSync(PENDING_DIR).filter(f => f.endsWith(".json"));
+    const approvals = [];
+    for (const file of files) {
+        try {
+            const approval = JSON.parse(fs.readFileSync(path.join(PENDING_DIR, file), "utf-8"));
+            if (approval.status === "pending") {
+                approvals.push(approval);
+            }
+        }
+        catch { }
+    }
+    return approvals.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+}
+async function beforeToolCall(context) {
+    const config = (0, consent_1.loadConfig)();
+    if (!config.enabled) {
+        return { allowed: true, reason: "Clawguard disabled" };
+    }
+    const injection = checkInjection(context.args);
+    if (injection) {
+        const result = {
+            allowed: false,
+            reason: injection
+        };
+        if (config.showMode) {
+            result.allowed = true;
+            result.showModeNotice = `[SHOW MODE] Would have BLOCKED: ${injection}`;
+            console.log(`\x1b[33m🦞 ${result.showModeNotice}\x1b[0m`);
+            decrementShowMode(config);
+        }
+        logAction(context, result);
+        return result;
+    }
+    const dangerous = checkDangerousCommand(context.args);
+    if (dangerous) {
+        const result = {
+            allowed: false,
+            reason: dangerous
+        };
+        if (config.showMode) {
+            result.allowed = true;
+            result.showModeNotice = `[SHOW MODE] Would have BLOCKED: ${dangerous}`;
+            console.log(`\x1b[33m🦞 ${result.showModeNotice}\x1b[0m`);
+            decrementShowMode(config);
+        }
+        logAction(context, result);
+        return result;
+    }
+    const rule = classifyTool(context.tool);
+    if (!rule) {
+        const result = { allowed: true, reason: "No policy match - allowed" };
+        logAction(context, result);
+        if (config.showMode)
+            decrementShowMode(config);
+        return result;
+    }
+    if (rule.decision === "approved") {
+        const result = { allowed: true, reason: rule.reason };
+        logAction(context, result);
+        if (config.showMode)
+            decrementShowMode(config);
+        return result;
+    }
+    if (rule.decision === "blocked") {
+        const result = {
+            allowed: false,
+            reason: rule.reason
+        };
+        if (config.showMode) {
+            result.allowed = true;
+            result.showModeNotice = `[SHOW MODE] Would have BLOCKED: ${context.tool} - ${rule.reason}`;
+            console.log(`\x1b[33m🦞 ${result.showModeNotice}\x1b[0m`);
+            decrementShowMode(config);
+        }
+        logAction(context, result);
+        return result;
+    }
+    if (rule.decision === "review") {
+        if (config.protectionLevel === "relaxed") {
+            const result = { allowed: true, reason: "Relaxed mode - auto-approved" };
+            logAction(context, result);
+            if (config.showMode)
+                decrementShowMode(config);
+            return result;
+        }
+        if (config.showMode) {
+            const result = {
+                allowed: true,
+                reason: rule.reason,
+                showModeNotice: `[SHOW MODE] Would REQUIRE APPROVAL: ${context.tool} - ${rule.reason}`
+            };
+            console.log(`\x1b[33m🦞 ${result.showModeNotice}\x1b[0m`);
+            decrementShowMode(config);
+            logAction(context, result);
+            return result;
+        }
+        const pending = createPendingApproval(context, rule.reason);
+        const approved = await waitForApproval(pending.id);
+        const result = {
+            allowed: approved,
+            reason: approved ? "Manually approved" : "Approval denied or timed out",
+            pendingApprovalId: pending.id
+        };
+        logAction(context, result);
+        return result;
+    }
+    const defaultResult = { allowed: true, reason: "Default allow" };
+    logAction(context, defaultResult);
+    return defaultResult;
+}
+function decrementShowMode(config) {
+    if (!config.showMode)
+        return;
+    config.showModeActionsRemaining--;
+    if (config.showModeActionsRemaining <= 0) {
+        console.log(`
+\x1b[32m━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+🦞 Show Mode Complete!
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\x1b[0m
+
+You've seen how Clawguard works. Ready to enable protection?
+
+Run: \x1b[1mopenclaw clawguard enable\x1b[0m
+
+Or view the dashboard: \x1b[1mopenclaw clawguard dashboard\x1b[0m
+`);
+        config.showMode = false;
+    }
+    else if (config.showModeActionsRemaining === 5) {
+        console.log(`\x1b[36m🦞 Show Mode: ${config.showModeActionsRemaining} actions remaining before full protection available\x1b[0m`);
+    }
+    (0, consent_1.saveConfig)(config);
+}
+async function afterToolCall(context, result) {
+    // Log successful completions for audit trail
+    const logEntry = {
+        ts: new Date().toISOString(),
+        tool: context.tool,
+        phase: "after",
+        success: true
+    };
+    if (!fs.existsSync(LOG_DIR)) {
+        fs.mkdirSync(LOG_DIR, { recursive: true });
+    }
+    const logFile = path.join(LOG_DIR, `${new Date().toISOString().split("T")[0]}.jsonl`);
+    fs.appendFileSync(logFile, JSON.stringify(logEntry) + "\n");
+}
+//# sourceMappingURL=hooks.js.map

package/dist/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuLA,sCAYC;AAED,gCAYC;AAED,oDAgBC;AAED,wCAgHC;AA2BD,sCAeC;AA/XD,uCAAmD;AACnD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAGzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACzE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAgCrE,MAAM,cAAc,GAAiB;IACnC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IAC9F,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IAC5F,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAChF,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAChF,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC7F,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,EAAE;IACpF,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,EAAE;CACpF,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,0CAA0C;IAC1C,mBAAmB;IACnB,SAAS;IACT,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,YAAY;IACZ,WAAW;IACX,cAAc;CACf,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,2DAA2D;IAC3D,kEAAkE;IAClE,kCAAkC;IAClC,uBAAuB;IACvB,mBAAmB;IACnB,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,yCAAyC;CAC1C,CAAC;AAEF,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,IAA6B;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,uCAAuC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,8BAA8B,OAAO,CAAC,MAAM,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB,EAAE,MAAsB;IACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB,EAAE,MAAc;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,kBAAkB,EAAE;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,wCAAwC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,2DAA2D,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEtF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,SAAS,GAAG,KAAK;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,GAAG,CAAC;IAEzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uCAAuC,SAAS,GAAG,IAAI,0BAA0B,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,EAAU;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAoB,CAAC;YACnF,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,UAAU,CAAC,EAAU;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAoB,CAAC;YACnF,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,oBAAoB;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAsB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;YACvG,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,OAAwB;IAC3D,MAAM,MAAM,GAAG,IAAA,oBAAU,GAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAmB;YAC7B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,cAAc,GAAG,mCAAmC,SAAS,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAmB;YAC7B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,cAAc,GAAG,mCAAmC,SAAS,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACtE,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ;YAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACtD,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ;YAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAmB;YAC7B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,cAAc,GAAG,mCAAmC,OAAO,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;YACzE,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,IAAI,MAAM,CAAC,QAAQ;gBAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,MAAM,GAAmB;gBAC7B,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,uCAAuC,OAAO,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE;aACvF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1B,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAmB;YAC7B,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,8BAA8B;YACvE,iBAAiB,EAAE,OAAO,CAAC,EAAE;SAC9B,CAAC;QAEF,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACjE,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAqC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO;IAE7B,MAAM,CAAC,wBAAwB,EAAE,CAAC;IAElC,IAAI,MAAM,CAAC,wBAAwB,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUf,CAAC,CAAC;QACC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,CAAC,wBAAwB,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,wBAAwB,4DAA4D,CAAC,CAAC;IACpI,CAAC;IAED,IAAA,oBAAU,EAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,OAAwB,EAAE,MAAe;IAC3E,6CAA6C;IAC7C,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { beforeToolCall, afterToolCall, approveAction, denyAction, listPendingApprovals } from "./hooks";
+export { runConsentFlow, loadConfig, saveConfig } from "./consent";
+export declare function isEnabled(): boolean;
+export declare function isShowMode(): boolean;
+export declare function getProtectionLevel(): "relaxed" | "balanced" | "strict";
+export declare const skillInfo: {
+    name: string;
+    version: string;
+    description: string;
+    author: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACzG,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAInE,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,kBAAkB,IAAI,SAAS,GAAG,UAAU,GAAG,QAAQ,CAEtE;AAED,eAAO,MAAM,SAAS;;;;;CAKrB,CAAC"}

package/dist/index.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillInfo = exports.saveConfig = exports.loadConfig = exports.runConsentFlow = exports.listPendingApprovals = exports.denyAction = exports.approveAction = exports.afterToolCall = exports.beforeToolCall = void 0;
+exports.isEnabled = isEnabled;
+exports.isShowMode = isShowMode;
+exports.getProtectionLevel = getProtectionLevel;
+var hooks_1 = require("./hooks");
+Object.defineProperty(exports, "beforeToolCall", { enumerable: true, get: function () { return hooks_1.beforeToolCall; } });
+Object.defineProperty(exports, "afterToolCall", { enumerable: true, get: function () { return hooks_1.afterToolCall; } });
+Object.defineProperty(exports, "approveAction", { enumerable: true, get: function () { return hooks_1.approveAction; } });
+Object.defineProperty(exports, "denyAction", { enumerable: true, get: function () { return hooks_1.denyAction; } });
+Object.defineProperty(exports, "listPendingApprovals", { enumerable: true, get: function () { return hooks_1.listPendingApprovals; } });
+var consent_1 = require("./consent");
+Object.defineProperty(exports, "runConsentFlow", { enumerable: true, get: function () { return consent_1.runConsentFlow; } });
+Object.defineProperty(exports, "loadConfig", { enumerable: true, get: function () { return consent_1.loadConfig; } });
+Object.defineProperty(exports, "saveConfig", { enumerable: true, get: function () { return consent_1.saveConfig; } });
+const consent_2 = require("./consent");
+function isEnabled() {
+    return (0, consent_2.loadConfig)().enabled;
+}
+function isShowMode() {
+    return (0, consent_2.loadConfig)().showMode;
+}
+function getProtectionLevel() {
+    return (0, consent_2.loadConfig)().protectionLevel;
+}
+exports.skillInfo = {
+    name: "clawguard",
+    version: "1.0.0",
+    description: "AI Safety for OpenClaw - monitors actions, blocks dangers, requires approval",
+    author: "Averecion"
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAKA,8BAEC;AAED,gCAEC;AAED,gDAEC;AAfD,iCAAyG;AAAhG,uGAAA,cAAc,OAAA;AAAE,sGAAA,aAAa,OAAA;AAAE,sGAAA,aAAa,OAAA;AAAE,mGAAA,UAAU,OAAA;AAAE,6GAAA,oBAAoB,OAAA;AACvF,qCAAmE;AAA1D,yGAAA,cAAc,OAAA;AAAE,qGAAA,UAAU,OAAA;AAAE,qGAAA,UAAU,OAAA;AAE/C,uCAAuC;AAEvC,SAAgB,SAAS;IACvB,OAAO,IAAA,oBAAU,GAAE,CAAC,OAAO,CAAC;AAC9B,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,IAAA,oBAAU,GAAE,CAAC,QAAQ,CAAC;AAC/B,CAAC;AAED,SAAgB,kBAAkB;IAChC,OAAO,IAAA,oBAAU,GAAE,CAAC,eAAe,CAAC;AACtC,CAAC;AAEY,QAAA,SAAS,GAAG;IACvB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,8EAA8E;IAC3F,MAAM,EAAE,WAAW;CACpB,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,24 @@
+export declare const id = "clawguard";
+export declare const name = "Clawguard";
+interface PluginApi {
+    id: string;
+    config: Record<string, unknown>;
+    logger: {
+        info: (msg: string) => void;
+        warn: (msg: string) => void;
+        error: (msg: string) => void;
+        debug: (msg: string) => void;
+    };
+    registerHook: (events: string | string[], handler: (event: unknown, ctx?: unknown) => unknown | Promise<unknown>, opts?: {
+        name?: string;
+    }) => void;
+    registerHooksFromDir?(dir: string): void;
+}
+export declare function register(api: PluginApi): void;
+declare const _default: {
+    id: string;
+    name: string;
+    register: typeof register;
+};
+export default _default;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,EAAE,cAAc,CAAC;AAC9B,eAAO,MAAM,IAAI,cAAc,CAAC;AAkChC,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC7B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;KAC9B,CAAC;IACF,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpJ,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AA4ID,wBAAgB,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAsE7C;;;;;;AAED,wBAAsC"}