clawdi 0.13.0 → 0.13.2

package/dist/skills/hosted/clawdi/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: clawdi
+description: "Find and read the user's past agent sessions across Claude Code, Codex, OpenClaw, and Hermes; use connected-service tools such as Gmail, GitHub, Notion, Drive, and Calendar; and read Clawdi share URLs (https://cloud.clawdi.ai/s/...) the user pastes."
+---
+
+# Clawdi Cloud
+
+Use Clawdi Cloud tools through the `clawdi` MCP server.
+
+## Sessions
+
+- Use `session_search` to find past agent conversations by keyword and obtain session UUIDs.
+- Use `session_read` to read a session by UUID or Clawdi share URL.
+
+Call `session_read` when the user provides a Clawdi share URL. When the user refers to a
+past conversation without a UUID, call `session_search` first and then read the matching
+session. Do not use a generic web fetcher for Clawdi share URLs.
+
+## Connectors
+
+Connected-service tools are registered dynamically from the user's Clawdi Cloud account.
+They can include Gmail, GitHub, Notion, Drive, Calendar, and other services.
+
+- Treat the tools as already authenticated for this runtime.
+- If a call reports that no account is connected, ask the user to connect that service in
+  the Clawdi Cloud dashboard.
+- Download files returned as signed URLs before processing them.
+- Confirm with the user before side-effecting actions such as sending mail or creating an
+  issue.

package/egress-addon/clawdi_egress_addon.py

@@ -12,7 +12,7 @@ import os
 import re
 from pathlib import Path
 from typing import Any
-from urllib.parse import parse_qs, quote, unquote, urlsplit
+from urllib.parse import parse_qs, urlsplit
 
 try:  # pragma: no cover - exercised only under mitmdump.
     from mitmproxy import ctx, http
@@ -114,6 +114,7 @@ class ClawdiEgressAddon:
         self.secret_file_path = Path(secret_file) if secret_file else None
         self.profiles = load_profiles(self.profile_bundle_path)
         self.secrets = load_secrets(self.secret_file_path)
+        validate_profile_secrets(self.profiles, self.secrets)
         self.profile_hosts = profile_host_set(self.profiles)
 
     def should_intercept_sni(self, server_name: str) -> bool:
@@ -205,6 +206,30 @@ def load_secrets(path: Path | None) -> dict[str, str]:
     return {str(key): str(value) for key, value in raw.items() if isinstance(value, str)}
 
 
+def validate_profile_secrets(
+    profiles: list[dict[str, Any]], secrets: dict[str, str]
+) -> None:
+    required: set[str] = set()
+    for profile in profiles:
+        collect_secret_refs(profile, required)
+    missing = sorted(ref for ref in required if not secrets.get(ref))
+    if missing:
+        raise ConfigError(f"egress profile secrets are missing: {', '.join(missing)}")
+
+
+def collect_secret_refs(value: Any, refs: set[str]) -> None:
+    if isinstance(value, list):
+        for item in value:
+            collect_secret_refs(item, refs)
+        return
+    if not isinstance(value, dict):
+        return
+    for key, entry in value.items():
+        if isinstance(entry, str) and (key == "secretRef" or key.endswith("SecretRef")):
+            refs.add(entry)
+        collect_secret_refs(entry, refs)
+
+
 def profile_host_set(profiles: list[dict[str, Any]]) -> set[str]:
     hosts: set[str] = set()
     for profile in profiles:
@@ -297,9 +322,13 @@ def host_matches(flow: Any, profile: dict[str, Any]) -> bool:
     match = profile.get("match")
     if not isinstance(match, dict):
         return False
-    expected = normalize_host(str(match.get("host", "")))
+    expected_authority = str(match.get("host", "")).strip().lower()
+    expected_host, expected_port = split_authority(expected_authority)
+    expected = normalize_host(expected_host)
     if not expected:
         return False
+    if expected_port is not None and getattr(flow.request, "port", None) != expected_port:
+        return False
     return expected in request_host_candidates(flow)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "clawdi",
-	"version": "0.13.0",
+	"version": "0.13.2",
 	"description": "iCloud for AI Agents — cross-agent sessions, skills, memory, and vault.",
 	"license": "MIT",
 	"type": "module",