clawclamp 0.1.14 → 0.1.15

package/assets/app.js

@@ -324,7 +324,7 @@ policyCreateBtn.addEventListener("click", async () => {
     body: JSON.stringify(body),
   });
   policyStatusEl.textContent = "已新增策略。";
-  await refreshPolicies();
+  await refreshAll();
 });
 
 policyUpdateBtn.addEventListener("click", async () => {
@@ -343,7 +343,7 @@ policyUpdateBtn.addEventListener("click", async () => {
     body: JSON.stringify({ content }),
   });
   policyStatusEl.textContent = "已保存策略。";
-  await refreshPolicies();
+  await refreshAll();
 });
 
 policyDeleteBtn.addEventListener("click", async () => {
@@ -358,5 +358,5 @@ policyDeleteBtn.addEventListener("click", async () => {
   policyStatusEl.textContent = "已删除策略。";
   policyIdInput.value = "";
   policyContentInput.value = "";
-  await refreshPolicies();
+  await refreshAll();
 });

package/assets/index.html

@@ -21,6 +21,40 @@
         </div>
       </header>
 
+      <section class="card policy-shell">
+        <div class="policy-head">
+          <div>
+            <h2>Cedar 策略</h2>
+            <div class="note">查看与维护当前策略集（policyStoreUri 配置时为只读）。</div>
+          </div>
+          <div class="policy-badge">Policy Lab</div>
+        </div>
+        <div class="policy-grid">
+          <div class="policy-list-wrap">
+            <div class="label">策略列表</div>
+            <div class="policy-list" id="policy-list"></div>
+          </div>
+          <div class="policy-editor">
+            <div class="policy-form">
+              <label>
+                Policy ID
+                <input id="policy-id" placeholder="policy-id" />
+              </label>
+              <label>
+                Policy 内容
+                <textarea id="policy-content" rows="12" placeholder="permit(principal, action, resource) when { ... }"></textarea>
+              </label>
+              <div class="policy-actions">
+                <button id="policy-create" class="btn primary">新增</button>
+                <button id="policy-update" class="btn">保存</button>
+                <button id="policy-delete" class="btn warn">删除</button>
+              </div>
+              <div id="policy-status" class="note"></div>
+            </div>
+          </div>
+        </div>
+      </section>
+
       <section class="grid">
         <div class="card">
           <h2>模式</h2>
@@ -84,32 +118,6 @@
         </div>
         <div class="table" id="audit"></div>
       </section>
-
-      <section class="card">
-        <h2>Cedar 策略</h2>
-        <div class="note">查看与维护当前策略集（policyStoreUri 配置时为只读）。</div>
-        <div class="policy-grid">
-          <div class="policy-list" id="policy-list"></div>
-          <div class="policy-editor">
-            <div class="policy-form">
-              <label>
-                Policy ID
-                <input id="policy-id" placeholder="policy-id" />
-              </label>
-              <label>
-                Policy 内容
-                <textarea id="policy-content" rows="8" placeholder="permit(principal, action, resource) when { ... }"></textarea>
-              </label>
-              <div class="policy-actions">
-                <button id="policy-create" class="btn primary">新增</button>
-                <button id="policy-update" class="btn">保存</button>
-                <button id="policy-delete" class="btn warn">删除</button>
-              </div>
-              <div id="policy-status" class="note"></div>
-            </div>
-          </div>
-        </div>
-      </section>
     </div>
 
     <script type="module" src="/plugins/clawclamp/assets/app.js"></script>

package/assets/styles.css

@@ -84,6 +84,33 @@ h1 {
   box-shadow: var(--shadow);
 }
 
+.policy-shell {
+  margin-bottom: 16px;
+  background:
+    linear-gradient(135deg, rgba(0, 163, 255, 0.1), rgba(124, 140, 255, 0.06)),
+    var(--panel);
+  border-color: #b9d7ea;
+}
+
+.policy-head {
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 12px;
+  margin-bottom: 12px;
+}
+
+.policy-badge {
+  padding: 6px 10px;
+  border: 1px solid #a7d7ff;
+  border-radius: 999px;
+  font-size: 0.72rem;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: #03527d;
+  background: rgba(255, 255, 255, 0.8);
+}
+
 h2 {
   margin: 0 0 8px;
   font-size: 1rem;
@@ -280,40 +307,58 @@ select {
 
 .policy-grid {
   display: grid;
-  grid-template-columns: 220px 1fr;
+  grid-template-columns: 260px 1fr;
   gap: 12px;
   margin-top: 10px;
 }
 
+.policy-list-wrap {
+  display: grid;
+  gap: 8px;
+}
+
 .policy-list {
   display: grid;
   gap: 6px;
   align-content: start;
-  max-height: 360px;
+  max-height: 420px;
   overflow: auto;
-  padding-right: 4px;
+  padding: 8px;
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: rgba(255, 255, 255, 0.7);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.8);
 }
 
 .policy-item {
-  padding: 6px 8px;
-  border-radius: 6px;
-  border: 1px solid var(--border);
-  background: #f7f8fb;
+  padding: 8px 10px;
+  border-radius: 8px;
+  border: 1px solid #d6e3f0;
+  background: linear-gradient(180deg, #ffffff, #f5f9fd);
   font-family: var(--mono);
   font-size: 0.75rem;
   text-align: left;
   cursor: pointer;
+  transition: transform 120ms ease, border-color 120ms ease, background 120ms ease;
+}
+
+.policy-item:hover {
+  transform: translateY(-1px);
+  border-color: #8ecdf6;
+  background: linear-gradient(180deg, #ffffff, #eef8ff);
 }
 
 .policy-editor {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 12px;
+  display: block;
 }
 
 .policy-form {
   display: grid;
-  gap: 8px;
+  gap: 10px;
+  padding: 12px;
+  border: 1px solid #d6e3f0;
+  border-radius: 12px;
+  background: rgba(255, 255, 255, 0.86);
 }
 
 .policy-form label {
@@ -329,8 +374,9 @@ select {
   padding: 8px 10px;
   font-size: 0.8rem;
   font-family: var(--mono);
-  min-height: 160px;
+  min-height: 260px;
   resize: vertical;
+  background: #fbfdff;
 }
 
 .policy-actions {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawclamp",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "OpenClaw Cedar authorization guard with audit UI",
   "type": "module",
   "dependencies": {

package/src/guard.ts

@@ -106,6 +106,7 @@ function parseCedarDecision(raw: unknown): CedarEvaluation {
 }
 
 async function evaluateCedar(params: {
+  api: OpenClawPluginApi;
   cedarling: CedarlingInstance;
   config: ClawClampConfig;
   toolName: string;
@@ -133,10 +134,16 @@ async function evaluateCedar(params: {
       risk: params.risk,
     },
   };
+  params.api.logger.info(
+    `[clawclamp] cedar request ${JSON.stringify(request)}`,
+  );
 
   try {
     const result = await params.cedarling.authorize_unsigned(request);
     const jsonString = result.json_string();
+    params.api.logger.info(
+      `[clawclamp] cedar response ${JSON.stringify({ request, result: jsonString })}`,
+    );
     const parsed = JSON.parse(jsonString) as unknown;
     return parseCedarDecision(parsed);
   } catch (error) {
@@ -172,6 +179,7 @@ export class ClawClampService {
       try {
         const cedarling = await this.getCedarlingInstance();
         cedarDecision = await evaluateCedar({
+          api: this.api,
           cedarling,
           config: this.config,
           toolName,

package/src/http.ts

@@ -402,6 +402,9 @@ export function createClawClampHttpHandler(params: {
           ttlSeconds,
           note,
         });
+        if (params.onPolicyUpdate) {
+          await params.onPolicyUpdate();
+        }
         sendJson(res, 200, { grant });
         return true;
       } catch (error) {
@@ -417,6 +420,9 @@ export function createClawClampHttpHandler(params: {
         return true;
       }
       const removed = await revokeGrant(params.stateDir, grantId);
+      if (params.onPolicyUpdate) {
+        await params.onPolicyUpdate();
+      }
       sendJson(res, 200, { ok: removed });
       return true;
     }