averecion-clawguard 2.7.0

package/dist/plugin.js

@@ -0,0 +1,219 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.name = exports.id = void 0;
+exports.register = register;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+exports.id = "clawguard";
+exports.name = "Clawguard";
+const CLAWGUARD_DIR = path.join(os.homedir(), ".clawguard");
+const CONFIG_FILE = path.join(CLAWGUARD_DIR, "config.json");
+const LOG_DIR = path.join(CLAWGUARD_DIR, "logs");
+const PENDING_DIR = path.join(CLAWGUARD_DIR, "pending");
+const POLICY_FILE = path.join(CLAWGUARD_DIR, "policy.json");
+const DEFAULT_POLICY = [
+    { tool: "exec", decision: "review", reason: "Terminal commands can modify your system" },
+    { tool: "bash", decision: "review", reason: "Terminal commands can modify your system" },
+    { tool: "shell", decision: "review", reason: "Terminal commands can modify your system" },
+    { tool: "write", decision: "review", reason: "File writes can overwrite important data" },
+    { tool: "delete", decision: "blocked", reason: "File deletion is high-risk" },
+    { tool: "unlink", decision: "blocked", reason: "File deletion is high-risk" },
+    { tool: "rm", decision: "blocked", reason: "File deletion is high-risk" },
+];
+const DANGEROUS_PATTERNS = [
+    /rm\s+(-rf?|--recursive|--force)\s+[\/~]/i,
+    /rm\s+-[rf]{2}\s+/i,
+    /mkfs\./i,
+    /dd\s+if=.*of=\/dev/i,
+    />\s*\/dev\/sd[a-z]/i,
+    /chmod\s+777\s+\//i,
+    /curl.*\|\s*(ba)?sh/i,
+    /wget.*\|\s*(ba)?sh/i,
+    /:(){.*}:/i,
+];
+const INJECTION_PATTERNS = [
+    /ignore\s+(previous|all|prior)\s+(instructions?|prompts?)/i,
+    /disregard\s+(your|the|all)\s+(instructions?|rules?|guidelines?)/i,
+    /you\s+are\s+now\s+(a|in|acting)/i,
+    /new\s+instructions?:/i,
+    /jailbreak/i,
+    /bypass\s+(security|filter|restriction)/i,
+];
+function ensureDir(dir) {
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+}
+function loadConfig() {
+    ensureDir(CLAWGUARD_DIR);
+    try {
+        if (fs.existsSync(CONFIG_FILE)) {
+            return JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+        }
+    }
+    catch { }
+    return { enabled: true, consented: true, showMode: false, showModeActionsRemaining: 10, protectionLevel: "balanced" };
+}
+function saveConfig(config) {
+    ensureDir(CLAWGUARD_DIR);
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+function loadPolicy() {
+    try {
+        if (fs.existsSync(POLICY_FILE)) {
+            return JSON.parse(fs.readFileSync(POLICY_FILE, "utf-8"));
+        }
+    }
+    catch { }
+    return DEFAULT_POLICY;
+}
+function classifyTool(tool) {
+    const policy = loadPolicy();
+    const normalized = tool.toLowerCase();
+    return policy.find(r => normalized.includes(r.tool.toLowerCase())) || null;
+}
+function checkDangerousCommand(params) {
+    const paramsStr = JSON.stringify(params);
+    for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(paramsStr)) {
+            return "Dangerous command pattern detected";
+        }
+    }
+    return null;
+}
+function checkInjection(params) {
+    const paramsStr = JSON.stringify(params);
+    for (const pattern of INJECTION_PATTERNS) {
+        if (pattern.test(paramsStr)) {
+            return "Possible prompt injection detected";
+        }
+    }
+    return null;
+}
+function logAction(tool, params, allowed, reason) {
+    ensureDir(LOG_DIR);
+    const logEntry = {
+        ts: new Date().toISOString(),
+        type: "tool",
+        tool,
+        params,
+        allowed,
+        reason
+    };
+    const logFile = path.join(LOG_DIR, `${new Date().toISOString().split("T")[0]}.jsonl`);
+    fs.appendFileSync(logFile, JSON.stringify(logEntry) + "\n");
+}
+function generateApprovalId() {
+    return `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+function createPendingApproval(tool, params, reason) {
+    ensureDir(PENDING_DIR);
+    const id = generateApprovalId();
+    const approval = {
+        id,
+        tool,
+        params,
+        reason,
+        createdAt: new Date().toISOString(),
+        status: "pending"
+    };
+    fs.writeFileSync(path.join(PENDING_DIR, `${id}.json`), JSON.stringify(approval, null, 2));
+    return id;
+}
+async function waitForApproval(id, timeoutMs = 30000) {
+    const filePath = path.join(PENDING_DIR, `${id}.json`);
+    const startTime = Date.now();
+    const pollInterval = 500;
+    while (Date.now() - startTime < timeoutMs) {
+        try {
+            if (fs.existsSync(filePath)) {
+                const approval = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+                if (approval.status !== "pending") {
+                    return approval.status === "approved";
+                }
+            }
+        }
+        catch { }
+        await new Promise(resolve => setTimeout(resolve, pollInterval));
+    }
+    return false;
+}
+function register(api) {
+    console.log("🛡️ Clawguard plugin registered (monitoring mode)");
+    console.log("   Note: before_tool_call not yet available in OpenClaw - using post-execution monitoring");
+    // Register for tool_result_persist (post-execution monitoring)
+    // This is synchronous and runs AFTER the tool executes
+    // We can log and analyze but cannot block execution
+    api.registerHook("tool_result_persist", (event) => {
+        const e = event;
+        const tool = (e.tool || e.toolName || "unknown");
+        const params = (e.args || e.params || {});
+        const result = e.result;
+        const config = loadConfig();
+        console.log(`🛡️ Clawguard: tool executed - ${tool}`);
+        if (!config.enabled || !config.consented) {
+            logAction(tool, params, true, "Clawguard not enabled");
+            return undefined; // Don't modify result
+        }
+        // Check for dangerous patterns (post-execution alert)
+        const injection = checkInjection(params);
+        if (injection) {
+            logAction(tool, params, false, `POST-EXEC ALERT: ${injection}`);
+            console.log(`🛡️ [ALERT] Detected after execution: ${injection}`);
+        }
+        const dangerous = checkDangerousCommand(params);
+        if (dangerous) {
+            logAction(tool, params, false, `POST-EXEC ALERT: ${dangerous}`);
+            console.log(`🛡️ [ALERT] Dangerous command detected: ${dangerous}`);
+        }
+        // Log the tool activity
+        const rule = classifyTool(tool);
+        if (rule) {
+            logAction(tool, params, true, `${rule.decision}: ${rule.reason}`);
+        }
+        else {
+            logAction(tool, params, true, "Executed (no policy match)");
+        }
+        // Update show mode counter
+        if (config.showMode) {
+            config.showModeActionsRemaining--;
+            if (config.showModeActionsRemaining <= 0)
+                config.showMode = false;
+            saveConfig(config);
+        }
+        return undefined; // Don't modify the result
+    }, { name: "clawguard-tool-monitor" });
+    // Also register for command events which ARE working
+    api.registerHook("command", (event) => {
+        const e = event;
+        const action = e.action;
+        const sessionKey = e.sessionKey;
+        console.log(`🛡️ Clawguard: command - ${action}`);
+        logAction(`command:${action}`, { sessionKey }, true, "Command event");
+    }, { name: "clawguard-command" });
+}
+exports.default = { id: exports.id, name: exports.name, register };
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA8LA,4BAsEC;AApQD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEZ,QAAA,EAAE,GAAG,WAAW,CAAC;AACjB,QAAA,IAAI,GAAG,WAAW,CAAC;AAEhC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AACxD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAyC5D,MAAM,cAAc,GAAiB;IACnC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACxF,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACxF,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACzF,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACzF,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC7E,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC7E,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE;CAC1E,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,0CAA0C;IAC1C,mBAAmB;IACnB,SAAS;IACT,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,WAAW;CACZ,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,2DAA2D;IAC3D,kEAAkE;IAClE,kCAAkC;IAClC,uBAAuB;IACvB,YAAY;IACZ,yCAAyC;CAC1C,CAAC;AAEF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,UAAU;IACjB,SAAS,CAAC,aAAa,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AACxH,CAAC;AAED,SAAS,UAAU,CAAC,MAAuB;IACzC,SAAS,CAAC,aAAa,CAAC,CAAC;IACzB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA+B;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,oCAAoC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,oCAAoC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,MAA+B,EAAE,OAAgB,EAAE,MAAc;IAChG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,MAAM;QACN,OAAO;QACP,MAAM;KACP,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,MAA+B,EAAE,MAAc;IAC1F,SAAS,CAAC,WAAW,CAAC,CAAC;IACvB,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG;QACf,EAAE;QACF,IAAI;QACJ,MAAM;QACN,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,SAAS;KAClB,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,SAAS,GAAG,KAAK;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,GAAG,CAAC;IAEzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,QAAQ,CAAC,GAAc;IACrC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC;IAEzG,+DAA+D;IAC/D,uDAAuD;IACvD,oDAAoD;IACpD,GAAG,CAAC,YAAY,CACd,qBAAqB,EACrB,CAAC,KAAc,EAAW,EAAE;QAC1B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAW,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;QACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAExB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;YACvD,OAAO,SAAS,CAAC,CAAC,sBAAsB;QAC1C,CAAC;QAED,sDAAsD;QACtD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,wBAAwB,IAAI,CAAC;gBAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;YAClE,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,0BAA0B;IAC9C,CAAC,EACD,EAAE,IAAI,EAAE,wBAAwB,EAAE,CACnC,CAAC;IAEF,qDAAqD;IACrD,GAAG,CAAC,YAAY,CACd,SAAS,EACT,CAAC,KAAc,EAAQ,EAAE;QACvB,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAgB,CAAC;QAClC,MAAM,UAAU,GAAG,CAAC,CAAC,UAAoB,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAClD,SAAS,CAAC,WAAW,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACxE,CAAC,EACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED,kBAAe,EAAE,EAAE,EAAF,UAAE,EAAE,IAAI,EAAJ,YAAI,EAAE,QAAQ,EAAE,CAAC"}

package/dist/postinstall.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=postinstall.d.ts.map

package/dist/postinstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postinstall.d.ts","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":""}

package/dist/postinstall.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const child_process_1 = require("child_process");
+const CLAWGUARD_DIR = path.join(os.homedir(), ".clawguard");
+function ensureDir(dir) {
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+function main() {
+    console.log("\n🛡️ Clawguard - AI Safety for OpenClaw\n");
+    ensureDir(CLAWGUARD_DIR);
+    ensureDir(path.join(CLAWGUARD_DIR, "logs"));
+    ensureDir(path.join(CLAWGUARD_DIR, "pending"));
+    const configPath = path.join(CLAWGUARD_DIR, "config.json");
+    if (!fs.existsSync(configPath)) {
+        const defaultConfig = {
+            enabled: false,
+            consented: false,
+            showMode: false,
+            showModeActionsRemaining: 10,
+            protectionLevel: "balanced",
+            installedAt: new Date().toISOString()
+        };
+        fs.writeFileSync(configPath, JSON.stringify(defaultConfig, null, 2));
+    }
+    try {
+        (0, child_process_1.execSync)("which clawdbot", { stdio: "ignore" });
+        console.log("To complete setup, run:");
+        console.log("  clawdbot hooks install <path-to-this-package>");
+        console.log("  clawdbot hooks enable clawguard");
+        console.log("");
+    }
+    catch {
+        console.log("Clawguard installed. When using with ClawdBot:");
+        console.log("  clawdbot hooks install @clawguard/openclaw-skill");
+        console.log("  clawdbot hooks enable clawguard");
+        console.log("");
+    }
+    console.log("Or start the dashboard directly:");
+    console.log("  npx averecion-lite start");
+    console.log("");
+}
+main();
+//# sourceMappingURL=postinstall.js.map

package/dist/postinstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postinstall.js","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,iDAAyC;AAEzC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAE5D,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAE1D,SAAS,CAAC,aAAa,CAAC,CAAC;IACzB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG;YACpB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,wBAAwB,EAAE,EAAE;YAC5B,eAAe,EAAE,UAAU;YAC3B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC"}

package/hooks/before-tool-call/HOOK.md

@@ -0,0 +1,22 @@
+---
+name: before-tool-call
+description: "Clawguard AI safety guardrails - intercepts tool calls before execution"
+emoji: "🛡️"
+events:
+  - tool:before
+---
+
+# Clawguard Before Tool Call Hook
+
+This hook intercepts all tool calls before execution to enforce safety policies:
+
+- Blocks dangerous shell commands (rm -rf, curl|bash, etc.)
+- Detects and blocks prompt injection attempts
+- Requires approval for risky operations in balanced/strict mode
+- Logs all actions for auditing
+
+## Protection Levels
+
+- **Relaxed**: Minimal blocking, auto-approve reviews
+- **Balanced**: Approval required for risky operations (default)
+- **Strict**: Approval required for all potentially dangerous operations

package/hooks/before-tool-call/handler.ts

@@ -0,0 +1,285 @@
+import * as fs from "fs";
+import * as path from "path";
+import * as os from "os";
+
+const CLAWGUARD_DIR = path.join(os.homedir(), ".clawguard");
+const CONFIG_FILE = path.join(CLAWGUARD_DIR, "config.json");
+const LOG_DIR = path.join(CLAWGUARD_DIR, "logs");
+const PENDING_DIR = path.join(CLAWGUARD_DIR, "pending");
+const POLICY_FILE = path.join(CLAWGUARD_DIR, "policy.json");
+
+interface ClawguardConfig {
+  enabled: boolean;
+  consented: boolean;
+  showMode: boolean;
+  showModeActionsRemaining: number;
+  protectionLevel: "relaxed" | "balanced" | "strict";
+}
+
+interface PolicyRule {
+  tool: string;
+  decision: "approved" | "blocked" | "review";
+  reason: string;
+}
+
+const DEFAULT_POLICY: PolicyRule[] = [
+  { tool: "shell", decision: "review", reason: "Terminal commands can modify your system" },
+  { tool: "exec", decision: "review", reason: "Terminal commands can modify your system" },
+  { tool: "fs.write", decision: "review", reason: "File writes can overwrite important data" },
+  { tool: "fs.delete", decision: "blocked", reason: "File deletion is high-risk" },
+  { tool: "fs.unlink", decision: "blocked", reason: "File deletion is high-risk" },
+  { tool: "http", decision: "approved", reason: "Network requests allowed by default" },
+  { tool: "env.read", decision: "blocked", reason: "Credential access is restricted" },
+  { tool: "env.get", decision: "blocked", reason: "Credential access is restricted" },
+  { tool: "process", decision: "review", reason: "Process management requires review" }
+];
+
+const DANGEROUS_PATTERNS = [
+  /rm\s+(-rf?|--recursive|--force)\s+[\/~]/i,
+  /rm\s+-[rf]{2}\s+/i,
+  /mkfs\./i,
+  /dd\s+if=.*of=\/dev/i,
+  />\s*\/dev\/sd[a-z]/i,
+  /chmod\s+777\s+\//i,
+  /curl.*\|\s*(ba)?sh/i,
+  /wget.*\|\s*(ba)?sh/i,
+  /eval\s*\(/i,
+  /:(){.*}:/i
+];
+
+const INJECTION_PATTERNS = [
+  /ignore\s+(previous|all|prior)\s+(instructions?|prompts?)/i,
+  /disregard\s+(your|the|all)\s+(instructions?|rules?|guidelines?)/i,
+  /you\s+are\s+now\s+(a|in|acting)/i,
+  /new\s+instructions?:/i,
+  /system\s*:\s*you/i,
+  /\[INST\]/i,
+  /<\|im_start\|>/i,
+  /jailbreak/i,
+  /bypass\s+(security|filter|restriction)/i
+];
+
+function ensureDir(dir: string): void {
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+}
+
+function loadConfig(): ClawguardConfig {
+  ensureDir(CLAWGUARD_DIR);
+  try {
+    if (fs.existsSync(CONFIG_FILE)) {
+      return JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+    }
+  } catch {}
+  return { enabled: false, consented: false, showMode: false, showModeActionsRemaining: 10, protectionLevel: "balanced" };
+}
+
+function saveConfig(config: ClawguardConfig): void {
+  ensureDir(CLAWGUARD_DIR);
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+
+function loadPolicy(): PolicyRule[] {
+  try {
+    if (fs.existsSync(POLICY_FILE)) {
+      return JSON.parse(fs.readFileSync(POLICY_FILE, "utf-8"));
+    }
+  } catch {}
+  return DEFAULT_POLICY;
+}
+
+function classifyTool(tool: string): PolicyRule | null {
+  const policy = loadPolicy();
+  return policy.find(r => tool.startsWith(r.tool) || tool === r.tool) || null;
+}
+
+function checkDangerousCommand(args: Record<string, unknown>): string | null {
+  const argsStr = JSON.stringify(args);
+  for (const pattern of DANGEROUS_PATTERNS) {
+    if (pattern.test(argsStr)) {
+      return `Dangerous command pattern detected`;
+    }
+  }
+  return null;
+}
+
+function checkInjection(args: Record<string, unknown>): string | null {
+  const argsStr = JSON.stringify(args);
+  for (const pattern of INJECTION_PATTERNS) {
+    if (pattern.test(argsStr)) {
+      return `Prompt injection detected`;
+    }
+  }
+  return null;
+}
+
+function logAction(tool: string, args: Record<string, unknown>, allowed: boolean, reason: string): void {
+  ensureDir(LOG_DIR);
+  const logEntry = {
+    ts: new Date().toISOString(),
+    tool,
+    args,
+    allowed,
+    reason
+  };
+  const logFile = path.join(LOG_DIR, `${new Date().toISOString().split("T")[0]}.jsonl`);
+  fs.appendFileSync(logFile, JSON.stringify(logEntry) + "\n");
+}
+
+function generateApprovalId(): string {
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+
+function createPendingApproval(tool: string, args: Record<string, unknown>, reason: string): string {
+  ensureDir(PENDING_DIR);
+  const id = generateApprovalId();
+  const approval = {
+    id,
+    tool,
+    args,
+    reason,
+    createdAt: new Date().toISOString(),
+    status: "pending"
+  };
+  fs.writeFileSync(path.join(PENDING_DIR, `${id}.json`), JSON.stringify(approval, null, 2));
+  console.log(`\x1b[33m🛡️ Clawguard: Action requires approval: ${tool}\x1b[0m`);
+  console.log(`   Reason: ${reason}`);
+  console.log(`   Approve: clawdbot clawguard approve ${id}`);
+  return id;
+}
+
+async function waitForApproval(id: string, timeoutMs = 30000): Promise<boolean> {
+  const filePath = path.join(PENDING_DIR, `${id}.json`);
+  const startTime = Date.now();
+  const pollInterval = 500;
+  
+  while (Date.now() - startTime < timeoutMs) {
+    try {
+      if (fs.existsSync(filePath)) {
+        const approval = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+        if (approval.status !== "pending") {
+          return approval.status === "approved";
+        }
+      }
+    } catch {}
+    await new Promise(resolve => setTimeout(resolve, pollInterval));
+  }
+  
+  console.log(`\x1b[31m🛡️ Approval timed out - action blocked\x1b[0m`);
+  return false;
+}
+
+interface HookEvent {
+  type: string;
+  toolName: string;
+  args: Record<string, unknown>;
+  session?: unknown;
+}
+
+const handler = async (event: HookEvent): Promise<HookEvent | void> => {
+  if (event.type !== "before_tool_call") return;
+
+  const config = loadConfig();
+  
+  if (!config.enabled || !config.consented) {
+    return;
+  }
+
+  const tool = event.toolName;
+  const args = event.args || {};
+
+  const injection = checkInjection(args);
+  if (injection) {
+    if (config.showMode) {
+      console.log(`\x1b[33m🛡️ [SHOW MODE] Would block: ${injection}\x1b[0m`);
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+      logAction(tool, args, true, `showMode:${injection}`);
+      return;
+    }
+    logAction(tool, args, false, injection);
+    throw new Error(`🛡️ Blocked: ${injection}`);
+  }
+
+  const dangerous = checkDangerousCommand(args);
+  if (dangerous) {
+    if (config.showMode) {
+      console.log(`\x1b[33m🛡️ [SHOW MODE] Would block: ${dangerous}\x1b[0m`);
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+      logAction(tool, args, true, `showMode:${dangerous}`);
+      return;
+    }
+    logAction(tool, args, false, dangerous);
+    throw new Error(`🛡️ Blocked: ${dangerous}`);
+  }
+
+  const rule = classifyTool(tool);
+  
+  if (!rule) {
+    logAction(tool, args, true, "No policy match");
+    if (config.showMode) {
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+    }
+    return;
+  }
+
+  if (rule.decision === "approved") {
+    logAction(tool, args, true, rule.reason);
+    if (config.showMode) {
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+    }
+    return;
+  }
+
+  if (rule.decision === "blocked") {
+    if (config.showMode) {
+      console.log(`\x1b[33m🛡️ [SHOW MODE] Would block: ${tool} - ${rule.reason}\x1b[0m`);
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+      logAction(tool, args, true, `showMode:blocked`);
+      return;
+    }
+    logAction(tool, args, false, rule.reason);
+    throw new Error(`🛡️ Blocked: ${rule.reason}`);
+  }
+
+  if (rule.decision === "review") {
+    if (config.protectionLevel === "relaxed") {
+      logAction(tool, args, true, "Relaxed mode - auto-approved");
+      if (config.showMode) {
+        config.showModeActionsRemaining--;
+        if (config.showModeActionsRemaining <= 0) config.showMode = false;
+        saveConfig(config);
+      }
+      return;
+    }
+
+    if (config.showMode) {
+      console.log(`\x1b[33m🛡️ [SHOW MODE] Would require approval: ${tool}\x1b[0m`);
+      config.showModeActionsRemaining--;
+      if (config.showModeActionsRemaining <= 0) config.showMode = false;
+      saveConfig(config);
+      logAction(tool, args, true, `showMode:review`);
+      return;
+    }
+
+    const approvalId = createPendingApproval(tool, args, rule.reason);
+    const approved = await waitForApproval(approvalId);
+    logAction(tool, args, approved, approved ? "manualApproval" : "denied/timeout");
+    
+    if (!approved) {
+      throw new Error(`🛡️ Action denied or timed out`);
+    }
+  }
+
+  return;
+};
+
+export default handler;

package/hooks/clawguard/HOOK.md

@@ -0,0 +1,53 @@
+---
+name: clawguard
+description: "AI safety guardrails - monitors actions, blocks dangerous commands, requires approval for risky operations"
+homepage: https://github.com/averecion/clawguard
+metadata:
+  {
+    "clawdbot":
+      {
+        "emoji": "🛡️",
+        "events": ["command"],
+        "install": [{ "id": "community", "kind": "community", "label": "Community Hook" }],
+      },
+  }
+---
+
+# Clawguard
+
+AI Safety for OpenClaw - monitors actions, blocks dangers, requires approval for risky operations.
+
+## What It Does
+
+- **Prompt Injection Detection**: Blocks attempts to hijack your agent via malicious prompts
+- **Dangerous Command Blocking**: Prevents rm -rf, fork bombs, curl|bash, and other destructive operations
+- **Approval Workflow**: Risky actions require your explicit approval via CLI or dashboard
+- **Activity Logging**: Full audit trail at `~/.clawguard/logs/`
+
+## Protection Levels
+
+- **Relaxed**: Minimal blocking, auto-approves most actions
+- **Balanced**: Asks before risky actions (recommended)
+- **Strict**: Requires approval for everything
+
+## Dashboard
+
+Visual monitoring at `http://localhost:4321/clawguard`
+
+## CLI Commands
+
+```bash
+clawdbot clawguard status    # Protection status
+clawdbot clawguard pending   # Pending approvals
+clawdbot clawguard approve   # Approve an action
+clawdbot clawguard deny      # Deny an action
+clawdbot clawguard dashboard # Open visual dashboard
+```
+
+## First Run
+
+On first use, Clawguard runs in **Show Mode** - observing 10 actions without blocking to demonstrate how it works. After Show Mode completes, full protection activates.
+
+## Configuration
+
+Config stored at `~/.clawguard/config.json`