clawposture-core 0.1.0

package/dist/constants.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Severity order, categories, and score weights.
+ */
+import type { Severity } from "./types.js";
+export declare const SEVERITY_ORDER: Severity[];
+export declare const CATEGORIES: readonly ["auth", "exposure", "permissions", "tool-blast", "logging", "webhooks", "control-ui"];
+/** Points deducted from 100 per finding by severity */
+export declare const SCORE_DEDUCTIONS: Record<Severity, number>;
+export declare const SCORE_MAX = 100;
+export declare const SCORE_MIN = 0;
+/** Dimension ids for transparent score (optional) */
+export declare const SCORE_DIMENSION_IDS: readonly ["tool-breadth", "external-access", "data-sensitivity", "autonomy"];
+export declare const SCORE_DIMENSION_WEIGHTS: Record<string, number>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,cAAc,EAAE,QAAQ,EAA0C,CAAC;AAEhF,eAAO,MAAM,UAAU,iGAQb,CAAC;AAEX,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAKrD,CAAC;AAEF,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,qDAAqD;AACrD,eAAO,MAAM,mBAAmB,8EAKtB,CAAC;AAEX,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAK1D,CAAC"}

package/dist/constants.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * Severity order, categories, and score weights.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SCORE_DIMENSION_WEIGHTS = exports.SCORE_DIMENSION_IDS = exports.SCORE_MIN = exports.SCORE_MAX = exports.SCORE_DEDUCTIONS = exports.CATEGORIES = exports.SEVERITY_ORDER = void 0;
+exports.SEVERITY_ORDER = ["critical", "high", "medium", "low"];
+exports.CATEGORIES = [
+    "auth",
+    "exposure",
+    "permissions",
+    "tool-blast",
+    "logging",
+    "webhooks",
+    "control-ui",
+];
+/** Points deducted from 100 per finding by severity */
+exports.SCORE_DEDUCTIONS = {
+    critical: 15,
+    high: 8,
+    medium: 3,
+    low: 1,
+};
+exports.SCORE_MAX = 100;
+exports.SCORE_MIN = 0;
+/** Dimension ids for transparent score (optional) */
+exports.SCORE_DIMENSION_IDS = [
+    "tool-breadth",
+    "external-access",
+    "data-sensitivity",
+    "autonomy",
+];
+exports.SCORE_DIMENSION_WEIGHTS = {
+    "tool-breadth": 0.25,
+    "external-access": 0.25,
+    "data-sensitivity": 0.25,
+    autonomy: 0.25,
+};
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAIU,QAAA,cAAc,GAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAEnE,QAAA,UAAU,GAAG;IACxB,MAAM;IACN,UAAU;IACV,aAAa;IACb,YAAY;IACZ,SAAS;IACT,UAAU;IACV,YAAY;CACJ,CAAC;AAEX,uDAAuD;AAC1C,QAAA,gBAAgB,GAA6B;IACxD,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;CACP,CAAC;AAEW,QAAA,SAAS,GAAG,GAAG,CAAC;AAChB,QAAA,SAAS,GAAG,CAAC,CAAC;AAE3B,qDAAqD;AACxC,QAAA,mBAAmB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;CACF,CAAC;AAEE,QAAA,uBAAuB,GAA2B;IAC7D,cAAc,EAAE,IAAI;IACpB,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,IAAI;IACxB,QAAQ,EAAE,IAAI;CACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./types.js";
+export * from "./constants.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types.js"), exports);
+__exportStar(require("./constants.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,iDAA+B"}

package/dist/types.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Shared types for posture report and environment snapshot.
+ * Contract between CLI and UI.
+ */
+export type Severity = "critical" | "high" | "medium" | "low";
+export type Category = "auth" | "exposure" | "permissions" | "tool-blast" | "logging" | "webhooks" | "control-ui";
+export interface Attribution {
+    repo?: string;
+    file?: string;
+    lastModified?: string;
+    configPath?: string;
+}
+export interface Finding {
+    id: string;
+    severity: Severity;
+    category: Category;
+    message: string;
+    recommendation: string;
+    agentId?: string;
+    attribution?: Attribution;
+    metadata?: Record<string, unknown>;
+}
+export interface HighRiskAgent {
+    agentId: string;
+    label: string;
+    reason: string;
+    findingIds: string[];
+}
+export interface ScoreDimension {
+    id: string;
+    label: string;
+    score: number;
+    weight: number;
+    description?: string;
+}
+export interface PostureReport {
+    postureScore: number;
+    scoreDimensions?: ScoreDimension[];
+    summary: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+    };
+    findings: Finding[];
+    highRiskAgents: HighRiskAgent[];
+    discoveredAt: string;
+    environmentId?: string;
+    stateDir?: string;
+}
+export interface AgentInfo {
+    id: string;
+    tools: string[];
+    sandbox?: {
+        mode?: string;
+        scope?: string;
+    };
+    channels?: string[];
+}
+export interface EnvironmentSnapshot {
+    stateDir: string;
+    config: Record<string, unknown>;
+    agents: AgentInfo[];
+    bind?: string;
+    auth?: {
+        mode?: string;
+        token?: string;
+        password?: boolean;
+    };
+    permissions?: {
+        stateDirMode?: number;
+        configFileMode?: number;
+        credentialsDirMode?: number;
+        agentAuthPathsMode?: number;
+    };
+    logging?: {
+        redactSensitive?: string;
+    };
+    hooks?: {
+        enabled?: boolean;
+        token?: boolean;
+    };
+    controlUi?: {
+        allowInsecureAuth?: boolean;
+        dangerouslyDisableDeviceAuth?: boolean;
+    };
+    channels?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,UAAU,GACV,aAAa,GACb,YAAY,GACZ,SAAS,GACT,UAAU,GACV,YAAY,CAAC;AAEjB,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7D,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/C,SAAS,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAAC,4BAA4B,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACpF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Shared types for posture report and environment snapshot.
+ * Contract between CLI and UI.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "clawposture-core",
+  "version": "0.1.0",
+  "description": "Core types and constants for ClawPosture - security posture for OpenClaw",
+  "license": "MIT",
+  "files": ["dist"],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "prepublishOnly": "pnpm run build"
+  },
+  "devDependencies": {
+    "typescript": "^5.3.0",
+    "vitest": "^2.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentguard-works/clawposture.git"
+  },
+  "homepage": "https://github.com/agentguard-works/clawposture#readme",
+  "bugs": "https://github.com/agentguard-works/clawposture/issues"
+}