failproofai 1.0.5-beta.1 → 1.0.5-beta.2

package/openclaw-plugin/workspace-context.js

@@ -0,0 +1,93 @@
+/**
+ * Resolve the workspace for OpenClaw tool hooks.
+ *
+ * OpenClaw's agent hooks expose `ctx.workspaceDir`, but its tool hooks expose
+ * only agent/session identity. Policies still need the real workspace at tool
+ * time, so derive it from the profile config and retain agent-hook observations
+ * as a compatibility fallback.
+ */
+
+function nonEmptyString(value) {
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+
+function agentIdFromContext(payload, ctx) {
+  const direct = nonEmptyString(ctx?.agentId) ?? nonEmptyString(payload?.agentId);
+  if (direct) return direct;
+
+  const sessionKey = nonEmptyString(ctx?.sessionKey) ?? nonEmptyString(payload?.sessionKey);
+  const match = sessionKey?.match(/^agent:([^:]+):/);
+  return match?.[1];
+}
+
+/** Resolve both current (`agents.entries`) and legacy (`agents.list`) shapes. */
+export function workspaceFromConfig(config, agentId) {
+  if (!config || typeof config !== "object" || !agentId) return undefined;
+  const agents = config.agents;
+  if (!agents || typeof agents !== "object") return undefined;
+
+  const entries = agents.entries;
+  if (entries && typeof entries === "object" && !Array.isArray(entries)) {
+    const exact = entries[agentId];
+    if (exact && typeof exact === "object") {
+      const workspace = nonEmptyString(exact.workspace);
+      if (workspace) return workspace;
+    }
+  }
+
+  if (Array.isArray(agents.list)) {
+    const entry = agents.list.find((candidate) =>
+      candidate && typeof candidate === "object" &&
+      (candidate.id === agentId || candidate.name === agentId),
+    );
+    const workspace = nonEmptyString(entry?.workspace);
+    if (workspace) return workspace;
+  }
+
+  const defaults = agents.defaults;
+  if (defaults && typeof defaults === "object") {
+    return nonEmptyString(defaults.workspace);
+  }
+  return undefined;
+}
+
+function cacheKeys(payload, ctx) {
+  const values = [
+    ["run", ctx?.runId ?? payload?.runId],
+    ["session-id", ctx?.sessionId ?? payload?.sessionId],
+    ["session-key", ctx?.sessionKey ?? payload?.sessionKey],
+    ["agent", agentIdFromContext(payload, ctx)],
+  ];
+  return values
+    .filter(([, value]) => nonEmptyString(value))
+    .map(([kind, value]) => `${kind}:${value}`);
+}
+
+export function createWorkspaceContext() {
+  const cache = new Map();
+
+  function remember(payload, ctx) {
+    const workspace = nonEmptyString(payload?.cwd) ?? nonEmptyString(ctx?.workspaceDir);
+    if (!workspace) return undefined;
+    for (const key of cacheKeys(payload, ctx)) cache.set(key, workspace);
+    return workspace;
+  }
+
+  function resolveWorkspace(payload, ctx, config) {
+    const direct = remember(payload, ctx);
+    if (direct) return direct;
+
+    for (const key of cacheKeys(payload, ctx)) {
+      const cached = cache.get(key);
+      if (cached) return cached;
+    }
+
+    return workspaceFromConfig(config, agentIdFromContext(payload, ctx));
+  }
+
+  function clear(payload, ctx) {
+    for (const key of cacheKeys(payload, ctx)) cache.delete(key);
+  }
+
+  return { remember, resolveWorkspace, clear };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.5-beta.1",
+  "version": "1.0.5-beta.2",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -121,15 +121,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.5-beta.1",
-    "@failproofai/failproofaid-linux-arm64": "1.0.5-beta.1",
-    "@failproofai/failproofaid-darwin-x64": "1.0.5-beta.1",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.5-beta.1"
+    "@failproofai/failproofaid-linux-x64": "1.0.5-beta.2",
+    "@failproofai/failproofaid-linux-arm64": "1.0.5-beta.2",
+    "@failproofai/failproofaid-darwin-x64": "1.0.5-beta.2",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.5-beta.2"
   },
   "failproofaidBinaries": {
-    "linux-x64": "c782c8d7c8522bf8af6f776640cae80fa671affa5b92d8c09e646c8f381d7fd4",
-    "linux-arm64": "6e9717ef40872a530501ad17cc6bc9743546968e11acf45f87f35488d1563e28",
-    "darwin-x64": "b47adb286e2cf08370ec2e1293ea3ed42891c7d2a8a1bece3da8e3e2b0d72f7a",
-    "darwin-arm64": "a5095522dc3f2518fc8177e9e2a3048062540958e3b623b198b401a7d6a2ddd5"
+    "linux-x64": "cce0b612f53a28591a0eb6f3e1abe7cadfc490afedff85c8f55772e76c7be566",
+    "linux-arm64": "20ead289387082e38e456cef27271ff74df368ec90389ce4f818af73af24cfa1",
+    "darwin-x64": "9a6fc5c2aa250224aea7fa7b945230636d34e7aea454177c131d40a5f56e17a1",
+    "darwin-arm64": "fb26aa5ffbbc971b9923593dc6f5a05f1d20b7d5e9953172b81318038252a240"
   }
 }

package/src/hooks/integrations.ts

@@ -13,6 +13,7 @@ import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";
 import { parseDocument, type Document } from "yaml";
 import { listHermesProfiles, hermesRoot } from "../../lib/hermes-profiles";
+import { listOpenClawProfiles } from "../../lib/openclaw-profiles";
 import {
   CLAUDE_INSTALL_EVENT_TYPES,
   HOOK_SCOPES,
@@ -1534,7 +1535,7 @@ export function unhookedHermesProfiles(): string[] {
 // PLUGIN hooks (file-based "internal hooks" are observation-only), so failproofai
 // ships a static plugin package (`openclaw-plugin/`, like Pi's pi-extension) that
 // async-spawns the binary and maps verdicts back. Install registers the plugin in
-// `~/.openclaw/openclaw.json` (JSON):
+// every profile's `openclaw.json` (JSON):
 //   • plugins.load.paths[]  → the shipped openclaw-plugin dir (absolute path)
 //   • plugins.entries.failproofai = { enabled: true, hooks: { allowConversationAccess: true } }
 //     (allowConversationAccess is required for the raw-conversation hooks
@@ -1577,9 +1578,14 @@ export const openclaw: Integration = {
   scopes: OPENCLAW_HOOK_SCOPES,
   eventTypes: OPENCLAW_HOOK_EVENT_TYPES,
 
-  // USER scope only (~/.openclaw/openclaw.json); OpenClaw has no project config.
+  // USER scope only; this is the default profile. Named profiles are returned
+  // by getSettingsPaths so one config pass cannot leave gateways unenforced.
   getSettingsPath() {
-    return resolve(homedir(), ".openclaw", "openclaw.json");
+    return resolve(listOpenClawProfiles()[0].home, "openclaw.json");
+  },
+
+  getSettingsPaths() {
+    return listOpenClawProfiles().map((profile) => resolve(profile.home, "openclaw.json"));
   },
 
   readSettings(settingsPath) {
@@ -1657,17 +1663,19 @@ export const openclaw: Integration = {
   },
 
   hooksInstalledInSettings(scope, cwd) {
-    const settingsPath = this.getSettingsPath(scope, cwd);
-    if (!existsSync(settingsPath)) return false;
-    try {
-      const settings = this.readSettings(settingsPath) as OpenClawSettingsFile;
-      const paths = settings.plugins?.load?.paths;
-      const pathPresent = Array.isArray(paths) && paths.some((p) => isFailproofaiOpenClawPath(p));
-      const entryEnabled = settings.plugins?.entries?.[OPENCLAW_PLUGIN_ID]?.enabled === true;
-      return pathPresent && entryEnabled;
-    } catch {
-      return false;
-    }
+    const settingsPaths = settingsPathsFor(this, scope, cwd);
+    return settingsPaths.length > 0 && settingsPaths.every((settingsPath) => {
+      if (!existsSync(settingsPath)) return false;
+      try {
+        const settings = this.readSettings(settingsPath) as OpenClawSettingsFile;
+        const paths = settings.plugins?.load?.paths;
+        const pathPresent = Array.isArray(paths) && paths.some((p) => isFailproofaiOpenClawPath(p));
+        const entryEnabled = settings.plugins?.entries?.[OPENCLAW_PLUGIN_ID]?.enabled === true;
+        return pathPresent && entryEnabled;
+      } catch {
+        return false;
+      }
+    });
   },
 
   detectInstalled() {