clawvault 3.5.0 → 3.5.2

package/dist/{chunk-JI7VUQV7.js → chunk-IFUHSHN3.js}

@@ -4,18 +4,8 @@ import * as path from "path";
 import matter from "gray-matter";
 import { spawnSync } from "child_process";
 import { fileURLToPath } from "url";
-var REQUIRED_OPENCLAW_PLUGIN_PATH = "./openclaw.plugin.json";
-var REQUIRED_OPENCLAW_EXTENSION = "./dist/openclaw-plugin.js";
-var LEGACY_HOOK_DIR = "hooks/clawvault";
-var FORBIDDEN_PACKAGE_FILE_ENTRIES = [
-  "hooks",
-  "src",
-  "tests",
-  "testdata",
-  "benchmarks",
-  "eval",
-  "autoresearch"
-];
+var REQUIRED_HOOK_EVENTS = ["gateway:startup", "command:new", "session:start"];
+var REQUIRED_HOOK_BIN = "clawvault";
 function readOptionalFile(filePath) {
   try {
     if (!fs.existsSync(filePath)) return null;
@@ -44,17 +34,6 @@ function resolveProjectFile(relativePath, baseDir) {
   }
   return path.resolve(findPackageRoot(), relativePath);
 }
-function loadPackageJson(options) {
-  const packageRaw = readOptionalFile(resolveProjectFile("package.json", options.baseDir));
-  if (!packageRaw) {
-    return { parsed: null, error: "package.json not found" };
-  }
-  try {
-    return { parsed: JSON.parse(packageRaw) };
-  } catch (err) {
-    return { parsed: null, error: err?.message || "Unable to parse package.json" };
-  }
-}
 function checkOpenClawCli() {
   const result = spawnSync("openclaw", ["--version"], { stdio: "ignore" });
   if (result.error) {
@@ -62,7 +41,7 @@ function checkOpenClawCli() {
       label: "openclaw CLI available",
       status: "warn",
       detail: "openclaw binary not found",
-      hint: "Install OpenClaw CLI to enable runtime validation."
+      hint: "Install OpenClaw CLI to enable hook runtime validation."
     };
   }
   if (typeof result.status === "number" && result.status !== 0) {
@@ -83,69 +62,166 @@ function checkOpenClawCli() {
   }
   return { label: "openclaw CLI available", status: "ok" };
 }
-function checkPackagePluginRegistration(options) {
-  const packageJson = loadPackageJson(options);
-  if (!packageJson.parsed) {
+function checkPackageHookRegistration(options) {
+  const packageRaw = readOptionalFile(resolveProjectFile("package.json", options.baseDir));
+  if (!packageRaw) {
     return {
-      label: "package plugin registration",
+      label: "package hook registration",
       status: "error",
-      detail: packageJson.error
+      detail: "package.json not found"
     };
   }
-  const openclaw = packageJson.parsed.openclaw;
-  const pluginPath = typeof openclaw?.plugin === "string" ? openclaw.plugin : "";
-  if (pluginPath === REQUIRED_OPENCLAW_PLUGIN_PATH) {
+  try {
+    const parsed = JSON.parse(packageRaw);
+    const registeredHooks = parsed.openclaw?.hooks ?? [];
+    if (registeredHooks.includes("./hooks/clawvault")) {
+      return {
+        label: "package hook registration",
+        status: "ok",
+        detail: "./hooks/clawvault"
+      };
+    }
     return {
-      label: "package plugin registration",
-      status: "ok",
-      detail: pluginPath
+      label: "package hook registration",
+      status: "error",
+      detail: "Missing ./hooks/clawvault in package openclaw.hooks"
+    };
+  } catch (err) {
+    return {
+      label: "package hook registration",
+      status: "error",
+      detail: err?.message || "Unable to parse package.json"
     };
   }
-  return {
-    label: "package plugin registration",
-    status: "error",
-    detail: `Missing openclaw.plugin=${REQUIRED_OPENCLAW_PLUGIN_PATH}`,
-    hint: `Set package.json openclaw.plugin to "${REQUIRED_OPENCLAW_PLUGIN_PATH}".`
-  };
 }
-function checkPackageExtensionRegistration(options) {
-  const packageJson = loadPackageJson(options);
-  if (!packageJson.parsed) {
+function checkHookManifest(options) {
+  const hookRaw = readOptionalFile(resolveProjectFile("hooks/clawvault/HOOK.md", options.baseDir));
+  if (!hookRaw) {
+    return {
+      label: "hook manifest",
+      status: "error",
+      detail: "HOOK.md not found"
+    };
+  }
+  try {
+    const parsed = matter(hookRaw);
+    const openclaw = parsed.data?.metadata?.openclaw;
+    const events = Array.isArray(openclaw?.events) ? openclaw?.events ?? [] : [];
+    const missingEvents = REQUIRED_HOOK_EVENTS.filter((event) => !events.includes(event));
+    if (missingEvents.length === 0) {
+      return {
+        label: "hook manifest events",
+        status: "ok",
+        detail: events.join(", ")
+      };
+    }
+    return {
+      label: "hook manifest events",
+      status: "error",
+      detail: `Missing events: ${missingEvents.join(", ")}`
+    };
+  } catch (err) {
     return {
-      label: "package extension registration",
+      label: "hook manifest events",
       status: "error",
-      detail: packageJson.error
+      detail: err?.message || "Unable to parse HOOK.md frontmatter"
     };
   }
-  const openclaw = packageJson.parsed.openclaw;
-  const extensions = Array.isArray(openclaw?.extensions) ? openclaw.extensions : [];
-  if (extensions.includes(REQUIRED_OPENCLAW_EXTENSION)) {
+}
+function checkHookManifestRequirements(options) {
+  const hookRaw = readOptionalFile(resolveProjectFile("hooks/clawvault/HOOK.md", options.baseDir));
+  if (!hookRaw) {
     return {
-      label: "package extension registration",
-      status: "ok",
-      detail: REQUIRED_OPENCLAW_EXTENSION
+      label: "hook manifest requirements",
+      status: "error",
+      detail: "HOOK.md not found"
     };
   }
-  return {
-    label: "package extension registration",
-    status: "error",
-    detail: `Missing ${REQUIRED_OPENCLAW_EXTENSION} in package openclaw.extensions`,
-    hint: `Add "${REQUIRED_OPENCLAW_EXTENSION}" to package.json openclaw.extensions.`
-  };
+  try {
+    const parsed = matter(hookRaw);
+    const requiresBins = parsed.data?.metadata?.openclaw?.requires?.bins;
+    const bins = Array.isArray(requiresBins) ? requiresBins : [];
+    if (bins.includes(REQUIRED_HOOK_BIN)) {
+      return {
+        label: "hook manifest requirements",
+        status: "ok",
+        detail: `bins: ${bins.join(", ")}`
+      };
+    }
+    return {
+      label: "hook manifest requirements",
+      status: "warn",
+      detail: `Missing required hook bin "${REQUIRED_HOOK_BIN}"`,
+      hint: 'Add metadata.openclaw.requires.bins: ["clawvault"] to hooks/clawvault/HOOK.md.'
+    };
+  } catch (err) {
+    return {
+      label: "hook manifest requirements",
+      status: "error",
+      detail: err?.message || "Unable to parse HOOK.md frontmatter"
+    };
+  }
+}
+function checkHookHandlerSafety(options) {
+  const handlerRaw = readOptionalFile(resolveProjectFile("hooks/clawvault/handler.js", options.baseDir));
+  if (!handlerRaw) {
+    return {
+      label: "hook handler script",
+      status: "error",
+      detail: "handler.js not found"
+    };
+  }
+  const usesExecFileSync = handlerRaw.includes("execFileSync");
+  const usesExecSync = /\bexecSync\b/.test(handlerRaw);
+  const enablesShell = /\bshell\s*:\s*true\b/.test(handlerRaw);
+  const delegatesAutoProfile = /['"]--profile['"]\s*,\s*['"]auto['"]/.test(handlerRaw);
+  const violations = [];
+  if (!usesExecFileSync || usesExecSync) {
+    violations.push("execFileSync-only execution path");
+  }
+  if (enablesShell) {
+    violations.push("shell:false execution option");
+  }
+  if (!delegatesAutoProfile) {
+    violations.push("shared context profile delegation (--profile auto)");
+  }
+  if (violations.length > 0) {
+    return {
+      label: "hook handler safety",
+      status: "warn",
+      detail: `Missing conventions: ${violations.join(", ")}`,
+      hint: "Use execFileSync (no shell), avoid execSync, and delegate profile inference via --profile auto."
+    };
+  }
+  return { label: "hook handler safety", status: "ok" };
+}
+function resolvePluginManifestPath(options) {
+  const packageRaw = readOptionalFile(resolveProjectFile("package.json", options.baseDir));
+  if (packageRaw) {
+    try {
+      const parsed = JSON.parse(packageRaw);
+      if (typeof parsed.openclaw?.plugin === "string") {
+        return parsed.openclaw.plugin.replace(/^\.\//, "");
+      }
+    } catch {
+    }
+  }
+  return "openclaw.plugin.json";
 }
 function checkPluginManifest(options) {
-  const manifestRaw = readOptionalFile(resolveProjectFile("openclaw.plugin.json", options.baseDir));
+  const manifestRelPath = resolvePluginManifestPath(options);
+  const manifestRaw = readOptionalFile(resolveProjectFile(manifestRelPath, options.baseDir));
   if (!manifestRaw) {
     return {
       label: "plugin manifest",
       status: "error",
-      detail: "openclaw.plugin.json not found",
-      hint: "Add root openclaw.plugin.json for OpenClaw plugin config schema."
+      detail: `${manifestRelPath} not found`,
+      hint: "Ensure openclaw.plugin.json exists at the path declared in package.json openclaw.plugin."
     };
   }
   try {
     const parsed = JSON.parse(manifestRaw);
-    if (parsed.id !== "clawvault") {
+    if (!parsed.id || parsed.id !== "clawvault") {
       return {
         label: "plugin manifest",
         status: "error",
@@ -156,10 +232,12 @@ function checkPluginManifest(options) {
       return {
         label: "plugin manifest",
         status: "error",
-        detail: "Missing configSchema in plugin manifest"
+        detail: "Missing configSchema in plugin manifest",
+        hint: "Add configSchema to openclaw.plugin.json for config validation."
       };
     }
-    if (!parsed.configSchema.properties?.vaultPath) {
+    const hasVaultPath = Boolean(parsed.configSchema.properties?.vaultPath);
+    if (!hasVaultPath) {
       return {
         label: "plugin manifest",
         status: "warn",
@@ -180,56 +258,6 @@ function checkPluginManifest(options) {
     };
   }
 }
-function checkPackageFilesHygiene(options) {
-  const packageJson = loadPackageJson(options);
-  if (!packageJson.parsed) {
-    return {
-      label: "package files hygiene",
-      status: "error",
-      detail: packageJson.error
-    };
-  }
-  const files = Array.isArray(packageJson.parsed.files) ? packageJson.parsed.files : [];
-  if (files.length === 0) {
-    return {
-      label: "package files hygiene",
-      status: "warn",
-      detail: "package.json files allowlist is missing",
-      hint: "Define package.json files to avoid publishing non-runtime directories."
-    };
-  }
-  const normalized = files.map((entry) => String(entry).replace(/\\/g, "/").replace(/\/+$/, ""));
-  const forbidden = normalized.filter(
-    (entry) => FORBIDDEN_PACKAGE_FILE_ENTRIES.some((name) => entry === name || entry.startsWith(`${name}/`))
-  );
-  if (forbidden.length > 0) {
-    return {
-      label: "package files hygiene",
-      status: "warn",
-      detail: `Forbidden publish entries: ${forbidden.join(", ")}`,
-      hint: "Remove legacy/test/research directories from package.json files."
-    };
-  }
-  return {
-    label: "package files hygiene",
-    status: "ok"
-  };
-}
-function checkLegacyHooksRemoved(options) {
-  const hooksPath = resolveProjectFile(LEGACY_HOOK_DIR, options.baseDir);
-  if (fs.existsSync(hooksPath)) {
-    return {
-      label: "legacy hooks removed",
-      status: "warn",
-      detail: `${LEGACY_HOOK_DIR} still exists`,
-      hint: "Remove hooks/clawvault legacy handler artifacts in plugin-first architecture."
-    };
-  }
-  return {
-    label: "legacy hooks removed",
-    status: "ok"
-  };
-}
 function checkSkillMetadata(options) {
   const skillRaw = readOptionalFile(resolveProjectFile("SKILL.md", options.baseDir));
   if (!skillRaw) {
@@ -270,11 +298,11 @@ function checkSkillMetadata(options) {
 function checkOpenClawCompatibility(options = {}) {
   const checks = [
     checkOpenClawCli(),
-    checkPackagePluginRegistration(options),
-    checkPackageExtensionRegistration(options),
+    checkPackageHookRegistration(options),
     checkPluginManifest(options),
-    checkPackageFilesHygiene(options),
-    checkLegacyHooksRemoved(options),
+    checkHookManifest(options),
+    checkHookManifestRequirements(options),
+    checkHookHandlerSafety(options),
     checkSkillMetadata(options)
   ];
   const warnings = checks.filter((check) => check.status === "warn").length;

package/dist/{chunk-QFWERBDP.js → chunk-J6DW6HBX.js}

@@ -1,6 +1,6 @@
 import {
   Observer
-} from "./chunk-7SWP5FKU.js";
+} from "./chunk-FSYISBTU.js";
 import {
   resolveVaultPath
 } from "./chunk-GJO3CFUN.js";

package/dist/{chunk-VXAGOLDP.js → chunk-LCBHM3D6.js}

@@ -1,6 +1,6 @@
 import {
   Observer
-} from "./chunk-7SWP5FKU.js";
+} from "./chunk-FSYISBTU.js";
 import {
   getSessionsDir
 } from "./chunk-HRLWZGMA.js";

package/dist/{chunk-HGDDW24U.js → chunk-NTQD55S3.js}

@@ -1,9 +1,9 @@
+import {
+  Observer
+} from "./chunk-FSYISBTU.js";
 import {
   runReflection
 } from "./chunk-TWMI3SNN.js";
-import {
-  Observer
-} from "./chunk-7SWP5FKU.js";
 import {
   resolveVaultPath
 } from "./chunk-GJO3CFUN.js";