airlock-bot 0.0.1 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (334) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +336 -0
  3. package/airlock.service +27 -0
  4. package/dist/allowlist/engine.d.ts +9 -0
  5. package/dist/allowlist/engine.d.ts.map +1 -0
  6. package/dist/allowlist/engine.js +24 -0
  7. package/dist/allowlist/engine.js.map +1 -0
  8. package/dist/allowlist/pattern.d.ts +13 -0
  9. package/dist/allowlist/pattern.d.ts.map +1 -0
  10. package/dist/allowlist/pattern.js +33 -0
  11. package/dist/allowlist/pattern.js.map +1 -0
  12. package/dist/audit/api.d.ts +7 -0
  13. package/dist/audit/api.d.ts.map +1 -0
  14. package/dist/audit/api.js +31 -0
  15. package/dist/audit/api.js.map +1 -0
  16. package/dist/audit/db.d.ts +44 -0
  17. package/dist/audit/db.d.ts.map +1 -0
  18. package/dist/audit/db.js +121 -0
  19. package/dist/audit/db.js.map +1 -0
  20. package/dist/audit/logger.d.ts +25 -0
  21. package/dist/audit/logger.d.ts.map +1 -0
  22. package/dist/audit/logger.js +58 -0
  23. package/dist/audit/logger.js.map +1 -0
  24. package/dist/audit/redactor.d.ts +5 -0
  25. package/dist/audit/redactor.d.ts.map +1 -0
  26. package/dist/audit/redactor.js +27 -0
  27. package/dist/audit/redactor.js.map +1 -0
  28. package/dist/backend/cli/adapter.d.ts +23 -0
  29. package/dist/backend/cli/adapter.d.ts.map +1 -0
  30. package/dist/backend/cli/adapter.js +176 -0
  31. package/dist/backend/cli/adapter.js.map +1 -0
  32. package/dist/backend/cli/builder.d.ts +3 -0
  33. package/dist/backend/cli/builder.d.ts.map +1 -0
  34. package/dist/backend/cli/builder.js +52 -0
  35. package/dist/backend/cli/builder.js.map +1 -0
  36. package/dist/backend/cli/escaper.d.ts +2 -0
  37. package/dist/backend/cli/escaper.d.ts.map +1 -0
  38. package/dist/backend/cli/escaper.js +8 -0
  39. package/dist/backend/cli/escaper.js.map +1 -0
  40. package/dist/backend/exec-adapter.d.ts +13 -0
  41. package/dist/backend/exec-adapter.d.ts.map +1 -0
  42. package/dist/backend/exec-adapter.js +39 -0
  43. package/dist/backend/exec-adapter.js.map +1 -0
  44. package/dist/backend/factory.d.ts +9 -0
  45. package/dist/backend/factory.d.ts.map +1 -0
  46. package/dist/backend/factory.js +35 -0
  47. package/dist/backend/factory.js.map +1 -0
  48. package/dist/backend/http-adapter.d.ts +15 -0
  49. package/dist/backend/http-adapter.d.ts.map +1 -0
  50. package/dist/backend/http-adapter.js +39 -0
  51. package/dist/backend/http-adapter.js.map +1 -0
  52. package/dist/backend/mcp-adapter.d.ts +14 -0
  53. package/dist/backend/mcp-adapter.d.ts.map +1 -0
  54. package/dist/backend/mcp-adapter.js +38 -0
  55. package/dist/backend/mcp-adapter.js.map +1 -0
  56. package/dist/backend/openapi/adapter.d.ts +17 -0
  57. package/dist/backend/openapi/adapter.d.ts.map +1 -0
  58. package/dist/backend/openapi/adapter.js +144 -0
  59. package/dist/backend/openapi/adapter.js.map +1 -0
  60. package/dist/backend/openapi/parser.d.ts +21 -0
  61. package/dist/backend/openapi/parser.d.ts.map +1 -0
  62. package/dist/backend/openapi/parser.js +145 -0
  63. package/dist/backend/openapi/parser.js.map +1 -0
  64. package/dist/backend/types.d.ts +9 -0
  65. package/dist/backend/types.d.ts.map +1 -0
  66. package/dist/backend/types.js +2 -0
  67. package/dist/backend/types.js.map +1 -0
  68. package/dist/config/loader.d.ts +12 -0
  69. package/dist/config/loader.d.ts.map +1 -0
  70. package/dist/config/loader.js +178 -0
  71. package/dist/config/loader.js.map +1 -0
  72. package/dist/config/profiles.d.ts +12 -0
  73. package/dist/config/profiles.d.ts.map +1 -0
  74. package/dist/config/profiles.js +34 -0
  75. package/dist/config/profiles.js.map +1 -0
  76. package/dist/config/schema.d.ts +2034 -0
  77. package/dist/config/schema.d.ts.map +1 -0
  78. package/dist/config/schema.js +257 -0
  79. package/dist/config/schema.js.map +1 -0
  80. package/dist/config/watcher.d.ts +11 -0
  81. package/dist/config/watcher.d.ts.map +1 -0
  82. package/dist/config/watcher.js +39 -0
  83. package/dist/config/watcher.js.map +1 -0
  84. package/dist/discover/cli.d.ts +2 -0
  85. package/dist/discover/cli.d.ts.map +1 -0
  86. package/dist/discover/cli.js +97 -0
  87. package/dist/discover/cli.js.map +1 -0
  88. package/dist/discover/index.d.ts +19 -0
  89. package/dist/discover/index.d.ts.map +1 -0
  90. package/dist/discover/index.js +70 -0
  91. package/dist/discover/index.js.map +1 -0
  92. package/dist/discover/openapi.d.ts +9 -0
  93. package/dist/discover/openapi.d.ts.map +1 -0
  94. package/dist/discover/openapi.js +47 -0
  95. package/dist/discover/openapi.js.map +1 -0
  96. package/dist/discover/strategies/fig.d.ts +29 -0
  97. package/dist/discover/strategies/fig.d.ts.map +1 -0
  98. package/dist/discover/strategies/fig.js +82 -0
  99. package/dist/discover/strategies/fig.js.map +1 -0
  100. package/dist/discover/strategies/help-parser.d.ts +21 -0
  101. package/dist/discover/strategies/help-parser.d.ts.map +1 -0
  102. package/dist/discover/strategies/help-parser.js +121 -0
  103. package/dist/discover/strategies/help-parser.js.map +1 -0
  104. package/dist/discover/writer.d.ts +5 -0
  105. package/dist/discover/writer.d.ts.map +1 -0
  106. package/dist/discover/writer.js +14 -0
  107. package/dist/discover/writer.js.map +1 -0
  108. package/dist/gateway.d.ts +20 -0
  109. package/dist/gateway.d.ts.map +1 -0
  110. package/dist/gateway.js +125 -0
  111. package/dist/gateway.js.map +1 -0
  112. package/dist/hitl/api.d.ts +7 -0
  113. package/dist/hitl/api.d.ts.map +1 -0
  114. package/dist/hitl/api.js +35 -0
  115. package/dist/hitl/api.js.map +1 -0
  116. package/dist/hitl/batcher.d.ts +11 -0
  117. package/dist/hitl/batcher.d.ts.map +1 -0
  118. package/dist/hitl/batcher.js +37 -0
  119. package/dist/hitl/batcher.js.map +1 -0
  120. package/dist/hitl/engine.d.ts +36 -0
  121. package/dist/hitl/engine.d.ts.map +1 -0
  122. package/dist/hitl/engine.js +150 -0
  123. package/dist/hitl/engine.js.map +1 -0
  124. package/dist/hitl/formatter.d.ts +4 -0
  125. package/dist/hitl/formatter.d.ts.map +1 -0
  126. package/dist/hitl/formatter.js +31 -0
  127. package/dist/hitl/formatter.js.map +1 -0
  128. package/dist/hitl/parser.d.ts +7 -0
  129. package/dist/hitl/parser.d.ts.map +1 -0
  130. package/dist/hitl/parser.js +17 -0
  131. package/dist/hitl/parser.js.map +1 -0
  132. package/dist/hitl/provider-factory.d.ts +4 -0
  133. package/dist/hitl/provider-factory.d.ts.map +1 -0
  134. package/dist/hitl/provider-factory.js +42 -0
  135. package/dist/hitl/provider-factory.js.map +1 -0
  136. package/dist/hitl/providers/composite.d.ts +9 -0
  137. package/dist/hitl/providers/composite.d.ts.map +1 -0
  138. package/dist/hitl/providers/composite.js +23 -0
  139. package/dist/hitl/providers/composite.js.map +1 -0
  140. package/dist/hitl/providers/dashboard.d.ts +17 -0
  141. package/dist/hitl/providers/dashboard.d.ts.map +1 -0
  142. package/dist/hitl/providers/dashboard.js +210 -0
  143. package/dist/hitl/providers/dashboard.js.map +1 -0
  144. package/dist/hitl/providers/macos.d.ts +10 -0
  145. package/dist/hitl/providers/macos.d.ts.map +1 -0
  146. package/dist/hitl/providers/macos.js +65 -0
  147. package/dist/hitl/providers/macos.js.map +1 -0
  148. package/dist/hitl/providers/openclaw.d.ts +21 -0
  149. package/dist/hitl/providers/openclaw.d.ts.map +1 -0
  150. package/dist/hitl/providers/openclaw.js +106 -0
  151. package/dist/hitl/providers/openclaw.js.map +1 -0
  152. package/dist/hitl/providers/slack.d.ts +12 -0
  153. package/dist/hitl/providers/slack.d.ts.map +1 -0
  154. package/dist/hitl/providers/slack.js +24 -0
  155. package/dist/hitl/providers/slack.js.map +1 -0
  156. package/dist/hitl/providers/stdio.d.ts +12 -0
  157. package/dist/hitl/providers/stdio.d.ts.map +1 -0
  158. package/dist/hitl/providers/stdio.js +41 -0
  159. package/dist/hitl/providers/stdio.js.map +1 -0
  160. package/dist/hitl/providers/telegram.d.ts +22 -0
  161. package/dist/hitl/providers/telegram.d.ts.map +1 -0
  162. package/dist/hitl/providers/telegram.js +87 -0
  163. package/dist/hitl/providers/telegram.js.map +1 -0
  164. package/dist/hitl/providers/tui.d.ts +16 -0
  165. package/dist/hitl/providers/tui.d.ts.map +1 -0
  166. package/dist/hitl/providers/tui.js +169 -0
  167. package/dist/hitl/providers/tui.js.map +1 -0
  168. package/dist/hitl/providers/types.d.ts +18 -0
  169. package/dist/hitl/providers/types.d.ts.map +1 -0
  170. package/dist/hitl/providers/types.js +2 -0
  171. package/dist/hitl/providers/types.js.map +1 -0
  172. package/dist/hitl/providers/webhook.d.ts +13 -0
  173. package/dist/hitl/providers/webhook.d.ts.map +1 -0
  174. package/dist/hitl/providers/webhook.js +27 -0
  175. package/dist/hitl/providers/webhook.js.map +1 -0
  176. package/dist/index.d.ts +3 -0
  177. package/dist/index.d.ts.map +1 -0
  178. package/dist/index.js +103 -0
  179. package/dist/index.js.map +1 -0
  180. package/dist/middleware/chain-builder.d.ts +16 -0
  181. package/dist/middleware/chain-builder.d.ts.map +1 -0
  182. package/dist/middleware/chain-builder.js +139 -0
  183. package/dist/middleware/chain-builder.js.map +1 -0
  184. package/dist/middleware/compose.d.ts +3 -0
  185. package/dist/middleware/compose.d.ts.map +1 -0
  186. package/dist/middleware/compose.js +15 -0
  187. package/dist/middleware/compose.js.map +1 -0
  188. package/dist/middleware/core/allowlist.d.ts +3 -0
  189. package/dist/middleware/core/allowlist.d.ts.map +1 -0
  190. package/dist/middleware/core/allowlist.js +23 -0
  191. package/dist/middleware/core/allowlist.js.map +1 -0
  192. package/dist/middleware/core/exec-policy.d.ts +3 -0
  193. package/dist/middleware/core/exec-policy.d.ts.map +1 -0
  194. package/dist/middleware/core/exec-policy.js +30 -0
  195. package/dist/middleware/core/exec-policy.js.map +1 -0
  196. package/dist/middleware/core/execute.d.ts +3 -0
  197. package/dist/middleware/core/execute.d.ts.map +1 -0
  198. package/dist/middleware/core/execute.js +35 -0
  199. package/dist/middleware/core/execute.js.map +1 -0
  200. package/dist/middleware/core/hitl-gate.d.ts +3 -0
  201. package/dist/middleware/core/hitl-gate.d.ts.map +1 -0
  202. package/dist/middleware/core/hitl-gate.js +38 -0
  203. package/dist/middleware/core/hitl-gate.js.map +1 -0
  204. package/dist/middleware/core/rate-limiter.d.ts +10 -0
  205. package/dist/middleware/core/rate-limiter.d.ts.map +1 -0
  206. package/dist/middleware/core/rate-limiter.js +32 -0
  207. package/dist/middleware/core/rate-limiter.js.map +1 -0
  208. package/dist/middleware/core/schema-validator.d.ts +3 -0
  209. package/dist/middleware/core/schema-validator.d.ts.map +1 -0
  210. package/dist/middleware/core/schema-validator.js +31 -0
  211. package/dist/middleware/core/schema-validator.js.map +1 -0
  212. package/dist/middleware/detectors/injection-detector.d.ts +12 -0
  213. package/dist/middleware/detectors/injection-detector.d.ts.map +1 -0
  214. package/dist/middleware/detectors/injection-detector.js +129 -0
  215. package/dist/middleware/detectors/injection-detector.js.map +1 -0
  216. package/dist/middleware/detectors/sensitivity-classifier.d.ts +12 -0
  217. package/dist/middleware/detectors/sensitivity-classifier.d.ts.map +1 -0
  218. package/dist/middleware/detectors/sensitivity-classifier.js +125 -0
  219. package/dist/middleware/detectors/sensitivity-classifier.js.map +1 -0
  220. package/dist/middleware/post/canary-token-injector.d.ts +10 -0
  221. package/dist/middleware/post/canary-token-injector.d.ts.map +1 -0
  222. package/dist/middleware/post/canary-token-injector.js +53 -0
  223. package/dist/middleware/post/canary-token-injector.js.map +1 -0
  224. package/dist/middleware/post/output-injection-detector.d.ts +7 -0
  225. package/dist/middleware/post/output-injection-detector.d.ts.map +1 -0
  226. package/dist/middleware/post/output-injection-detector.js +46 -0
  227. package/dist/middleware/post/output-injection-detector.js.map +1 -0
  228. package/dist/middleware/post/output-size-limiter.d.ts +7 -0
  229. package/dist/middleware/post/output-size-limiter.d.ts.map +1 -0
  230. package/dist/middleware/post/output-size-limiter.js +47 -0
  231. package/dist/middleware/post/output-size-limiter.js.map +1 -0
  232. package/dist/middleware/post/output-summarizer.d.ts +15 -0
  233. package/dist/middleware/post/output-summarizer.d.ts.map +1 -0
  234. package/dist/middleware/post/output-summarizer.js +38 -0
  235. package/dist/middleware/post/output-summarizer.js.map +1 -0
  236. package/dist/middleware/post/strip-query-params.d.ts +3 -0
  237. package/dist/middleware/post/strip-query-params.d.ts.map +1 -0
  238. package/dist/middleware/post/strip-query-params.js +22 -0
  239. package/dist/middleware/post/strip-query-params.js.map +1 -0
  240. package/dist/middleware/post/untrusted-envelope.d.ts +3 -0
  241. package/dist/middleware/post/untrusted-envelope.d.ts.map +1 -0
  242. package/dist/middleware/post/untrusted-envelope.js +10 -0
  243. package/dist/middleware/post/untrusted-envelope.js.map +1 -0
  244. package/dist/middleware/types.d.ts +32 -0
  245. package/dist/middleware/types.d.ts.map +1 -0
  246. package/dist/middleware/types.js +2 -0
  247. package/dist/middleware/types.js.map +1 -0
  248. package/dist/pool/http-client.d.ts +26 -0
  249. package/dist/pool/http-client.d.ts.map +1 -0
  250. package/dist/pool/http-client.js +108 -0
  251. package/dist/pool/http-client.js.map +1 -0
  252. package/dist/pool/oauth-provider.d.ts +34 -0
  253. package/dist/pool/oauth-provider.d.ts.map +1 -0
  254. package/dist/pool/oauth-provider.js +135 -0
  255. package/dist/pool/oauth-provider.js.map +1 -0
  256. package/dist/pool/pool.d.ts +30 -0
  257. package/dist/pool/pool.d.ts.map +1 -0
  258. package/dist/pool/pool.js +119 -0
  259. package/dist/pool/pool.js.map +1 -0
  260. package/dist/pool/required-mcps.d.ts +7 -0
  261. package/dist/pool/required-mcps.d.ts.map +1 -0
  262. package/dist/pool/required-mcps.js +18 -0
  263. package/dist/pool/required-mcps.js.map +1 -0
  264. package/dist/pool/sse-client.d.ts +22 -0
  265. package/dist/pool/sse-client.d.ts.map +1 -0
  266. package/dist/pool/sse-client.js +69 -0
  267. package/dist/pool/sse-client.js.map +1 -0
  268. package/dist/pool/stdio-client.d.ts +24 -0
  269. package/dist/pool/stdio-client.d.ts.map +1 -0
  270. package/dist/pool/stdio-client.js +76 -0
  271. package/dist/pool/stdio-client.js.map +1 -0
  272. package/dist/registry/registry.d.ts +19 -0
  273. package/dist/registry/registry.d.ts.map +1 -0
  274. package/dist/registry/registry.js +85 -0
  275. package/dist/registry/registry.js.map +1 -0
  276. package/dist/registry/sanitizer.d.ts +2 -0
  277. package/dist/registry/sanitizer.d.ts.map +1 -0
  278. package/dist/registry/sanitizer.js +31 -0
  279. package/dist/registry/sanitizer.js.map +1 -0
  280. package/dist/security/blocked-hosts.d.ts +6 -0
  281. package/dist/security/blocked-hosts.d.ts.map +1 -0
  282. package/dist/security/blocked-hosts.js +26 -0
  283. package/dist/security/blocked-hosts.js.map +1 -0
  284. package/dist/security/domain-allowlist.d.ts +7 -0
  285. package/dist/security/domain-allowlist.d.ts.map +1 -0
  286. package/dist/security/domain-allowlist.js +19 -0
  287. package/dist/security/domain-allowlist.js.map +1 -0
  288. package/dist/stdio-mode.d.ts +3 -0
  289. package/dist/stdio-mode.d.ts.map +1 -0
  290. package/dist/stdio-mode.js +130 -0
  291. package/dist/stdio-mode.js.map +1 -0
  292. package/dist/tools/exec.d.ts +20 -0
  293. package/dist/tools/exec.d.ts.map +1 -0
  294. package/dist/tools/exec.js +105 -0
  295. package/dist/tools/exec.js.map +1 -0
  296. package/dist/tools/http.d.ts +13 -0
  297. package/dist/tools/http.d.ts.map +1 -0
  298. package/dist/tools/http.js +99 -0
  299. package/dist/tools/http.js.map +1 -0
  300. package/dist/transport/agent-server.d.ts +26 -0
  301. package/dist/transport/agent-server.d.ts.map +1 -0
  302. package/dist/transport/agent-server.js +54 -0
  303. package/dist/transport/agent-server.js.map +1 -0
  304. package/dist/transport/mcp-normalizer.d.ts +9 -0
  305. package/dist/transport/mcp-normalizer.d.ts.map +1 -0
  306. package/dist/transport/mcp-normalizer.js +12 -0
  307. package/dist/transport/mcp-normalizer.js.map +1 -0
  308. package/dist/transport/sse-server.d.ts +7 -0
  309. package/dist/transport/sse-server.d.ts.map +1 -0
  310. package/dist/transport/sse-server.js +94 -0
  311. package/dist/transport/sse-server.js.map +1 -0
  312. package/dist/transport/stdio-server.d.ts +3 -0
  313. package/dist/transport/stdio-server.d.ts.map +1 -0
  314. package/dist/transport/stdio-server.js +12 -0
  315. package/dist/transport/stdio-server.js.map +1 -0
  316. package/dist/types.d.ts +15 -0
  317. package/dist/types.d.ts.map +1 -0
  318. package/dist/types.js +2 -0
  319. package/dist/types.js.map +1 -0
  320. package/dist/util/id.d.ts +5 -0
  321. package/dist/util/id.d.ts.map +1 -0
  322. package/dist/util/id.js +16 -0
  323. package/dist/util/id.js.map +1 -0
  324. package/dist/util/logger.d.ts +4 -0
  325. package/dist/util/logger.d.ts.map +1 -0
  326. package/dist/util/logger.js +24 -0
  327. package/dist/util/logger.js.map +1 -0
  328. package/examples/claude-code-setup.md +77 -0
  329. package/examples/gateway.yaml +118 -0
  330. package/examples/local-dev.yaml +41 -0
  331. package/examples/openclaw-setup.md +51 -0
  332. package/examples/profiles.yaml +103 -0
  333. package/package.json +80 -3
  334. package/schema.json +943 -0
package/schema.json ADDED
@@ -0,0 +1,943 @@
1
+ {
2
+ "$ref": "#/definitions/AirlockConfig",
3
+ "definitions": {
4
+ "AirlockConfig": {
5
+ "type": "object",
6
+ "properties": {
7
+ "providers": {
8
+ "type": "object",
9
+ "additionalProperties": {
10
+ "anyOf": [
11
+ {
12
+ "type": "string",
13
+ "const": "builtin"
14
+ },
15
+ {
16
+ "anyOf": [
17
+ {
18
+ "type": "object",
19
+ "properties": {
20
+ "type": {
21
+ "type": "string",
22
+ "const": "stdio"
23
+ },
24
+ "command": {
25
+ "type": "string"
26
+ },
27
+ "args": {
28
+ "type": "array",
29
+ "items": {
30
+ "type": "string"
31
+ },
32
+ "default": []
33
+ },
34
+ "env": {
35
+ "type": "object",
36
+ "additionalProperties": {
37
+ "type": "string"
38
+ }
39
+ }
40
+ },
41
+ "required": [
42
+ "type",
43
+ "command"
44
+ ],
45
+ "additionalProperties": false
46
+ },
47
+ {
48
+ "type": "object",
49
+ "properties": {
50
+ "type": {
51
+ "type": "string",
52
+ "const": "sse"
53
+ },
54
+ "url": {
55
+ "type": "string",
56
+ "format": "uri"
57
+ },
58
+ "headers": {
59
+ "type": "object",
60
+ "additionalProperties": {
61
+ "type": "string"
62
+ }
63
+ }
64
+ },
65
+ "required": [
66
+ "type",
67
+ "url"
68
+ ],
69
+ "additionalProperties": false
70
+ },
71
+ {
72
+ "type": "object",
73
+ "properties": {
74
+ "type": {
75
+ "type": "string",
76
+ "const": "http"
77
+ },
78
+ "url": {
79
+ "type": "string",
80
+ "format": "uri"
81
+ },
82
+ "headers": {
83
+ "type": "object",
84
+ "additionalProperties": {
85
+ "type": "string"
86
+ }
87
+ },
88
+ "oauth": {
89
+ "type": "boolean",
90
+ "default": false
91
+ },
92
+ "oauth_callback_port": {
93
+ "type": "integer",
94
+ "minimum": 1,
95
+ "maximum": 65535,
96
+ "default": 18432
97
+ }
98
+ },
99
+ "required": [
100
+ "type",
101
+ "url"
102
+ ],
103
+ "additionalProperties": false
104
+ }
105
+ ]
106
+ }
107
+ ]
108
+ },
109
+ "default": {}
110
+ },
111
+ "profiles": {
112
+ "type": "object",
113
+ "additionalProperties": {
114
+ "type": "object",
115
+ "properties": {
116
+ "allow": {
117
+ "type": "array",
118
+ "items": {
119
+ "type": "string"
120
+ },
121
+ "default": []
122
+ },
123
+ "ask": {
124
+ "type": "array",
125
+ "items": {
126
+ "type": "string"
127
+ },
128
+ "default": []
129
+ }
130
+ },
131
+ "additionalProperties": false
132
+ },
133
+ "default": {}
134
+ },
135
+ "clis": {
136
+ "type": "object",
137
+ "additionalProperties": {
138
+ "type": "object",
139
+ "properties": {
140
+ "discovered": {
141
+ "type": "string"
142
+ },
143
+ "shell": {
144
+ "type": "string"
145
+ },
146
+ "cwd": {
147
+ "type": "string"
148
+ },
149
+ "max_output_bytes": {
150
+ "type": "number",
151
+ "default": 30000
152
+ },
153
+ "commands": {
154
+ "type": "object",
155
+ "additionalProperties": {
156
+ "type": "object",
157
+ "properties": {
158
+ "exec": {
159
+ "type": "string"
160
+ },
161
+ "description": {
162
+ "type": "string"
163
+ },
164
+ "params": {
165
+ "type": "object",
166
+ "additionalProperties": {
167
+ "type": "object",
168
+ "properties": {
169
+ "type": {
170
+ "type": "string",
171
+ "enum": [
172
+ "string",
173
+ "number",
174
+ "boolean"
175
+ ]
176
+ },
177
+ "flag": {
178
+ "type": "string",
179
+ "pattern": "^-"
180
+ },
181
+ "positional": {
182
+ "type": "boolean",
183
+ "default": false
184
+ },
185
+ "required": {
186
+ "type": "boolean",
187
+ "default": false
188
+ },
189
+ "default": {
190
+ "type": [
191
+ "string",
192
+ "number",
193
+ "boolean"
194
+ ]
195
+ },
196
+ "description": {
197
+ "type": "string"
198
+ }
199
+ },
200
+ "required": [
201
+ "type"
202
+ ],
203
+ "additionalProperties": false
204
+ },
205
+ "default": {}
206
+ },
207
+ "cwd": {
208
+ "type": "string"
209
+ },
210
+ "timeout": {
211
+ "type": "number",
212
+ "default": 30
213
+ }
214
+ },
215
+ "required": [
216
+ "exec"
217
+ ],
218
+ "additionalProperties": false
219
+ },
220
+ "default": {}
221
+ }
222
+ },
223
+ "additionalProperties": false
224
+ },
225
+ "default": {}
226
+ },
227
+ "apis": {
228
+ "type": "object",
229
+ "additionalProperties": {
230
+ "type": "object",
231
+ "properties": {
232
+ "spec": {
233
+ "type": "string"
234
+ },
235
+ "base_url": {
236
+ "type": "string"
237
+ },
238
+ "auth": {
239
+ "anyOf": [
240
+ {
241
+ "type": "object",
242
+ "properties": {
243
+ "type": {
244
+ "type": "string",
245
+ "const": "bearer"
246
+ },
247
+ "token": {
248
+ "type": "string"
249
+ }
250
+ },
251
+ "required": [
252
+ "type",
253
+ "token"
254
+ ],
255
+ "additionalProperties": false
256
+ },
257
+ {
258
+ "type": "object",
259
+ "properties": {
260
+ "type": {
261
+ "type": "string",
262
+ "const": "header"
263
+ },
264
+ "name": {
265
+ "type": "string"
266
+ },
267
+ "value": {
268
+ "type": "string"
269
+ }
270
+ },
271
+ "required": [
272
+ "type",
273
+ "name",
274
+ "value"
275
+ ],
276
+ "additionalProperties": false
277
+ }
278
+ ]
279
+ },
280
+ "include": {
281
+ "type": "array",
282
+ "items": {
283
+ "type": "string"
284
+ }
285
+ },
286
+ "exclude": {
287
+ "type": "array",
288
+ "items": {
289
+ "type": "string"
290
+ }
291
+ },
292
+ "timeout_ms": {
293
+ "type": "number",
294
+ "default": 30000
295
+ },
296
+ "max_response_bytes": {
297
+ "type": "number",
298
+ "default": 1048576
299
+ }
300
+ },
301
+ "required": [
302
+ "spec"
303
+ ],
304
+ "additionalProperties": false
305
+ },
306
+ "default": {}
307
+ },
308
+ "agents": {
309
+ "type": "object",
310
+ "additionalProperties": {
311
+ "type": "object",
312
+ "properties": {
313
+ "token": {
314
+ "type": "string"
315
+ },
316
+ "extends": {
317
+ "type": "array",
318
+ "items": {
319
+ "type": "string"
320
+ },
321
+ "default": []
322
+ },
323
+ "allow": {
324
+ "type": "array",
325
+ "items": {
326
+ "type": "string"
327
+ },
328
+ "default": []
329
+ },
330
+ "ask": {
331
+ "type": "array",
332
+ "items": {
333
+ "type": "string"
334
+ },
335
+ "default": []
336
+ },
337
+ "deny": {
338
+ "type": "array",
339
+ "items": {
340
+ "type": "string"
341
+ },
342
+ "default": []
343
+ },
344
+ "tool_overrides": {
345
+ "type": "object",
346
+ "additionalProperties": {
347
+ "type": "object",
348
+ "properties": {
349
+ "description": {
350
+ "type": "string"
351
+ }
352
+ },
353
+ "additionalProperties": false
354
+ },
355
+ "default": {}
356
+ },
357
+ "exec": {
358
+ "type": "object",
359
+ "properties": {
360
+ "allow": {
361
+ "type": "array",
362
+ "items": {
363
+ "type": "string"
364
+ },
365
+ "default": []
366
+ },
367
+ "ask": {
368
+ "type": "array",
369
+ "items": {
370
+ "type": "string"
371
+ },
372
+ "default": []
373
+ },
374
+ "deny": {
375
+ "type": "array",
376
+ "items": {
377
+ "type": "string"
378
+ },
379
+ "default": []
380
+ },
381
+ "env": {
382
+ "type": "object",
383
+ "additionalProperties": {
384
+ "type": "string"
385
+ },
386
+ "default": {}
387
+ },
388
+ "default_timeout_ms": {
389
+ "type": "number",
390
+ "default": 30000
391
+ }
392
+ },
393
+ "additionalProperties": false,
394
+ "default": {}
395
+ },
396
+ "http": {
397
+ "type": "object",
398
+ "properties": {
399
+ "domain_allowlist": {
400
+ "type": "array",
401
+ "items": {
402
+ "type": "string"
403
+ },
404
+ "default": []
405
+ },
406
+ "max_response_bytes": {
407
+ "type": "number",
408
+ "default": 1048576
409
+ },
410
+ "timeout_ms": {
411
+ "type": "number",
412
+ "default": 30000
413
+ }
414
+ },
415
+ "additionalProperties": false,
416
+ "default": {}
417
+ },
418
+ "middleware": {
419
+ "type": "array",
420
+ "items": {
421
+ "type": "object",
422
+ "properties": {
423
+ "name": {
424
+ "type": "string",
425
+ "enum": [
426
+ "schema-validator",
427
+ "rate-limiter",
428
+ "untrusted-envelope",
429
+ "strip-query-params",
430
+ "output-injection-detector",
431
+ "canary-token-injector",
432
+ "output-size-limiter",
433
+ "output-summarizer",
434
+ "injection-detector",
435
+ "sensitivity-classifier"
436
+ ]
437
+ },
438
+ "enabled": {
439
+ "type": "boolean",
440
+ "default": true
441
+ },
442
+ "tools": {
443
+ "type": "array",
444
+ "items": {
445
+ "type": "string"
446
+ }
447
+ },
448
+ "exclude": {
449
+ "type": "array",
450
+ "items": {
451
+ "type": "string"
452
+ }
453
+ },
454
+ "max_requests": {
455
+ "type": "number"
456
+ },
457
+ "window_ms": {
458
+ "type": "number"
459
+ },
460
+ "per": {
461
+ "type": "string",
462
+ "enum": [
463
+ "agent",
464
+ "tool"
465
+ ]
466
+ },
467
+ "mode": {
468
+ "type": "string",
469
+ "enum": [
470
+ "detect",
471
+ "mangle",
472
+ "escalate"
473
+ ]
474
+ },
475
+ "backend": {
476
+ "type": "string",
477
+ "enum": [
478
+ "regex",
479
+ "deberta",
480
+ "heuristic",
481
+ "llm"
482
+ ]
483
+ },
484
+ "inference_url": {
485
+ "type": "string"
486
+ },
487
+ "threshold": {
488
+ "type": "number"
489
+ },
490
+ "max_lines": {
491
+ "type": "number"
492
+ },
493
+ "max_chars": {
494
+ "type": "number"
495
+ },
496
+ "model": {
497
+ "type": "string"
498
+ },
499
+ "threshold_chars": {
500
+ "type": "number"
501
+ }
502
+ },
503
+ "required": [
504
+ "name"
505
+ ],
506
+ "additionalProperties": false
507
+ }
508
+ }
509
+ },
510
+ "additionalProperties": false
511
+ },
512
+ "default": {}
513
+ },
514
+ "approvals": {
515
+ "type": "object",
516
+ "properties": {
517
+ "provider": {
518
+ "anyOf": [
519
+ {
520
+ "anyOf": [
521
+ {
522
+ "type": "object",
523
+ "properties": {
524
+ "type": {
525
+ "type": "string",
526
+ "const": "telegram"
527
+ },
528
+ "bot_token": {
529
+ "type": "string"
530
+ },
531
+ "chat_id": {
532
+ "type": "string"
533
+ }
534
+ },
535
+ "required": [
536
+ "type",
537
+ "bot_token",
538
+ "chat_id"
539
+ ],
540
+ "additionalProperties": false
541
+ },
542
+ {
543
+ "type": "object",
544
+ "properties": {
545
+ "type": {
546
+ "type": "string",
547
+ "const": "openclaw"
548
+ },
549
+ "gateway_url": {
550
+ "type": "string",
551
+ "default": "ws://localhost:18789"
552
+ },
553
+ "token": {
554
+ "type": "string"
555
+ },
556
+ "session_key": {
557
+ "type": "string",
558
+ "default": "main"
559
+ }
560
+ },
561
+ "required": [
562
+ "type",
563
+ "token"
564
+ ],
565
+ "additionalProperties": false
566
+ },
567
+ {
568
+ "type": "object",
569
+ "properties": {
570
+ "type": {
571
+ "type": "string",
572
+ "const": "slack"
573
+ },
574
+ "webhook_url": {
575
+ "type": "string"
576
+ }
577
+ },
578
+ "required": [
579
+ "type",
580
+ "webhook_url"
581
+ ],
582
+ "additionalProperties": false
583
+ },
584
+ {
585
+ "type": "object",
586
+ "properties": {
587
+ "type": {
588
+ "type": "string",
589
+ "const": "webhook"
590
+ },
591
+ "url": {
592
+ "type": "string"
593
+ },
594
+ "headers": {
595
+ "type": "object",
596
+ "additionalProperties": {
597
+ "type": "string"
598
+ },
599
+ "default": {}
600
+ }
601
+ },
602
+ "required": [
603
+ "type",
604
+ "url"
605
+ ],
606
+ "additionalProperties": false
607
+ },
608
+ {
609
+ "type": "object",
610
+ "properties": {
611
+ "type": {
612
+ "type": "string",
613
+ "const": "tui"
614
+ }
615
+ },
616
+ "required": [
617
+ "type"
618
+ ],
619
+ "additionalProperties": false
620
+ },
621
+ {
622
+ "type": "object",
623
+ "properties": {
624
+ "type": {
625
+ "type": "string",
626
+ "const": "macos"
627
+ }
628
+ },
629
+ "required": [
630
+ "type"
631
+ ],
632
+ "additionalProperties": false
633
+ },
634
+ {
635
+ "type": "object",
636
+ "properties": {
637
+ "type": {
638
+ "type": "string",
639
+ "const": "dashboard"
640
+ },
641
+ "port": {
642
+ "type": "integer",
643
+ "minimum": 1,
644
+ "maximum": 65535,
645
+ "default": 4112
646
+ }
647
+ },
648
+ "required": [
649
+ "type"
650
+ ],
651
+ "additionalProperties": false
652
+ },
653
+ {
654
+ "type": "object",
655
+ "properties": {
656
+ "type": {
657
+ "type": "string",
658
+ "const": "stdio"
659
+ }
660
+ },
661
+ "required": [
662
+ "type"
663
+ ],
664
+ "additionalProperties": false
665
+ }
666
+ ]
667
+ },
668
+ {
669
+ "type": "array",
670
+ "items": {
671
+ "anyOf": [
672
+ {
673
+ "type": "object",
674
+ "properties": {
675
+ "type": {
676
+ "type": "string",
677
+ "const": "telegram"
678
+ },
679
+ "bot_token": {
680
+ "type": "string"
681
+ },
682
+ "chat_id": {
683
+ "type": "string"
684
+ }
685
+ },
686
+ "required": [
687
+ "type",
688
+ "bot_token",
689
+ "chat_id"
690
+ ],
691
+ "additionalProperties": false
692
+ },
693
+ {
694
+ "type": "object",
695
+ "properties": {
696
+ "type": {
697
+ "type": "string",
698
+ "const": "openclaw"
699
+ },
700
+ "gateway_url": {
701
+ "type": "string",
702
+ "default": "ws://localhost:18789"
703
+ },
704
+ "token": {
705
+ "type": "string"
706
+ },
707
+ "session_key": {
708
+ "type": "string",
709
+ "default": "main"
710
+ }
711
+ },
712
+ "required": [
713
+ "type",
714
+ "token"
715
+ ],
716
+ "additionalProperties": false
717
+ },
718
+ {
719
+ "type": "object",
720
+ "properties": {
721
+ "type": {
722
+ "type": "string",
723
+ "const": "slack"
724
+ },
725
+ "webhook_url": {
726
+ "type": "string"
727
+ }
728
+ },
729
+ "required": [
730
+ "type",
731
+ "webhook_url"
732
+ ],
733
+ "additionalProperties": false
734
+ },
735
+ {
736
+ "type": "object",
737
+ "properties": {
738
+ "type": {
739
+ "type": "string",
740
+ "const": "webhook"
741
+ },
742
+ "url": {
743
+ "type": "string"
744
+ },
745
+ "headers": {
746
+ "type": "object",
747
+ "additionalProperties": {
748
+ "type": "string"
749
+ },
750
+ "default": {}
751
+ }
752
+ },
753
+ "required": [
754
+ "type",
755
+ "url"
756
+ ],
757
+ "additionalProperties": false
758
+ },
759
+ {
760
+ "type": "object",
761
+ "properties": {
762
+ "type": {
763
+ "type": "string",
764
+ "const": "tui"
765
+ }
766
+ },
767
+ "required": [
768
+ "type"
769
+ ],
770
+ "additionalProperties": false
771
+ },
772
+ {
773
+ "type": "object",
774
+ "properties": {
775
+ "type": {
776
+ "type": "string",
777
+ "const": "macos"
778
+ }
779
+ },
780
+ "required": [
781
+ "type"
782
+ ],
783
+ "additionalProperties": false
784
+ },
785
+ {
786
+ "type": "object",
787
+ "properties": {
788
+ "type": {
789
+ "type": "string",
790
+ "const": "dashboard"
791
+ },
792
+ "port": {
793
+ "type": "integer",
794
+ "minimum": 1,
795
+ "maximum": 65535,
796
+ "default": 4112
797
+ }
798
+ },
799
+ "required": [
800
+ "type"
801
+ ],
802
+ "additionalProperties": false
803
+ },
804
+ {
805
+ "type": "object",
806
+ "properties": {
807
+ "type": {
808
+ "type": "string",
809
+ "const": "stdio"
810
+ }
811
+ },
812
+ "required": [
813
+ "type"
814
+ ],
815
+ "additionalProperties": false
816
+ }
817
+ ]
818
+ },
819
+ "minItems": 1
820
+ }
821
+ ],
822
+ "default": {
823
+ "type": "stdio"
824
+ }
825
+ },
826
+ "timeout_ms": {
827
+ "type": "integer",
828
+ "minimum": 1000,
829
+ "default": 300000
830
+ },
831
+ "batch_window_ms": {
832
+ "type": "integer",
833
+ "minimum": 0,
834
+ "default": 10000
835
+ }
836
+ },
837
+ "additionalProperties": false,
838
+ "default": {}
839
+ },
840
+ "security": {
841
+ "type": "object",
842
+ "properties": {
843
+ "blocked_hosts": {
844
+ "type": "array",
845
+ "items": {
846
+ "type": "string"
847
+ },
848
+ "default": [
849
+ "localhost",
850
+ "127.0.0.1",
851
+ "0.0.0.0",
852
+ "::1",
853
+ "::ffff:127.0.0.1",
854
+ "*.local",
855
+ "10.*",
856
+ "172.16.*",
857
+ "172.17.*",
858
+ "172.18.*",
859
+ "172.19.*",
860
+ "172.20.*",
861
+ "172.21.*",
862
+ "172.22.*",
863
+ "172.23.*",
864
+ "172.24.*",
865
+ "172.25.*",
866
+ "172.26.*",
867
+ "172.27.*",
868
+ "172.28.*",
869
+ "172.29.*",
870
+ "172.30.*",
871
+ "172.31.*",
872
+ "192.168.*",
873
+ "169.254.*",
874
+ "fc00:*",
875
+ "fd00:*",
876
+ "fe80:*"
877
+ ]
878
+ },
879
+ "allowed_local": {
880
+ "type": "array",
881
+ "items": {
882
+ "type": "string"
883
+ },
884
+ "default": []
885
+ }
886
+ },
887
+ "additionalProperties": false,
888
+ "default": {}
889
+ },
890
+ "audit": {
891
+ "type": "object",
892
+ "properties": {
893
+ "db_path": {
894
+ "type": "string",
895
+ "default": "./audit.db"
896
+ },
897
+ "retention_days": {
898
+ "type": "number",
899
+ "default": 90
900
+ },
901
+ "redact_fields": {
902
+ "type": "array",
903
+ "items": {
904
+ "type": "string"
905
+ },
906
+ "default": [
907
+ "password",
908
+ "token",
909
+ "secret",
910
+ "key",
911
+ "authorization"
912
+ ]
913
+ }
914
+ },
915
+ "additionalProperties": false,
916
+ "default": {}
917
+ },
918
+ "server": {
919
+ "type": "object",
920
+ "properties": {
921
+ "port": {
922
+ "type": "integer",
923
+ "minimum": 1,
924
+ "maximum": 65535,
925
+ "default": 4111
926
+ },
927
+ "host": {
928
+ "type": "string",
929
+ "default": "127.0.0.1"
930
+ },
931
+ "api_secret": {
932
+ "type": "string"
933
+ }
934
+ },
935
+ "additionalProperties": false,
936
+ "default": {}
937
+ }
938
+ },
939
+ "additionalProperties": false
940
+ }
941
+ },
942
+ "$schema": "http://json-schema.org/draft-07/schema#"
943
+ }