moltyjacs 0.3.0

package/dist/gateway/wellknown.js

@@ -0,0 +1,206 @@
+"use strict";
+/**
+ * JACS Gateway Methods
+ *
+ * Serves .well-known endpoints for JACS agent discovery.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerGatewayMethods = registerGatewayMethods;
+const jacs_1 = require("@hai.ai/jacs");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const tools_1 = require("../tools");
+const hai_1 = require("../tools/hai");
+/**
+ * Register gateway methods for well-known endpoints
+ */
+function registerGatewayMethods(api) {
+    const homeDir = api.runtime.homeDir;
+    const keysDir = path.join(homeDir, ".openclaw", "jacs_keys");
+    // Serve /.well-known/jacs-pubkey.json
+    api.registerGatewayMethod({
+        method: "GET",
+        path: "/.well-known/jacs-pubkey.json",
+        handler: async (req, res) => {
+            if (!api.runtime.jacs?.isInitialized()) {
+                res.status(503).json({
+                    error: "JACS not initialized",
+                    message: "Run 'openclaw jacs init' to configure JACS",
+                });
+                return;
+            }
+            try {
+                const config = api.config;
+                const publicKeyPath = path.join(keysDir, "agent.public.pem");
+                if (!fs.existsSync(publicKeyPath)) {
+                    res.status(404).json({ error: "Public key not found" });
+                    return;
+                }
+                const publicKey = fs.readFileSync(publicKeyPath, "utf-8");
+                const publicKeyHash = (0, jacs_1.hashString)(publicKey);
+                res.setHeader("Content-Type", "application/json");
+                res.setHeader("Cache-Control", "public, max-age=3600");
+                res.json({
+                    publicKey,
+                    publicKeyHash,
+                    algorithm: config.keyAlgorithm || "pq2025",
+                    agentId: config.agentId,
+                    agentName: config.agentName,
+                    agentDomain: config.agentDomain,
+                    verificationClaim: config.verificationClaim || "unverified",
+                    timestamp: new Date().toISOString(),
+                });
+            }
+            catch (err) {
+                api.logger.error(`Failed to serve public key: ${err.message}`);
+                res.status(500).json({ error: err.message });
+            }
+        },
+    });
+    // POST /jacs/verify - Public verification endpoint
+    api.registerGatewayMethod({
+        method: "POST",
+        path: "/jacs/verify",
+        handler: async (req, res) => {
+            if (!api.runtime.jacs?.isInitialized()) {
+                res.status(503).json({ error: "JACS not initialized" });
+                return;
+            }
+            try {
+                if (!req.body) {
+                    res.status(400).json({ error: "Request body required" });
+                    return;
+                }
+                const agent = api.runtime.jacs?.getAgent();
+                if (!agent) {
+                    res.status(503).json({ error: "JACS not initialized" });
+                    return;
+                }
+                const result = agent.verifyResponse(JSON.stringify(req.body));
+                res.json(result);
+            }
+            catch (err) {
+                res.status(400).json({ error: err.message });
+            }
+        },
+    });
+    // NOTE: No external signing endpoint is exposed.
+    // Signing MUST only happen internally by the agent itself.
+    // External signing would compromise the agent's identity.
+    // GET /jacs/status - Health check endpoint
+    api.registerGatewayMethod({
+        method: "GET",
+        path: "/jacs/status",
+        handler: async (req, res) => {
+            const config = api.config;
+            const initialized = api.runtime.jacs?.isInitialized() || false;
+            res.json({
+                initialized,
+                agentId: config.agentId || null,
+                algorithm: config.keyAlgorithm || null,
+                verificationClaim: config.verificationClaim || "unverified",
+                timestamp: new Date().toISOString(),
+            });
+        },
+    });
+    // GET /jacs/attestation - Full attestation status endpoint
+    api.registerGatewayMethod({
+        method: "GET",
+        path: "/jacs/attestation",
+        handler: async (req, res) => {
+            if (!api.runtime.jacs?.isInitialized()) {
+                res.status(503).json({
+                    error: "JACS not initialized",
+                    message: "Run 'openclaw jacs init' to configure JACS",
+                });
+                return;
+            }
+            try {
+                const config = api.config;
+                const publicKeyPath = path.join(keysDir, "agent.public.pem");
+                if (!fs.existsSync(publicKeyPath)) {
+                    res.status(404).json({ error: "Public key not found" });
+                    return;
+                }
+                const publicKey = fs.readFileSync(publicKeyPath, "utf-8");
+                const publicKeyHash = (0, jacs_1.hashString)(publicKey);
+                // Check DNS verification
+                let dnsVerified = false;
+                if (config.agentDomain) {
+                    try {
+                        const dnsResult = await (0, tools_1.resolveDnsRecord)(config.agentDomain);
+                        if (dnsResult) {
+                            dnsVerified = dnsResult.parsed.publicKeyHash === publicKeyHash;
+                        }
+                    }
+                    catch {
+                        // DNS check failed
+                    }
+                }
+                // Check HAI.ai registration
+                let haiRegistered = false;
+                let haiRegistration = null;
+                if (config.agentId) {
+                    try {
+                        haiRegistration = await (0, hai_1.checkHaiStatus)(config.agentId);
+                        haiRegistered = haiRegistration?.verified ?? false;
+                    }
+                    catch {
+                        // HAI.ai check failed
+                    }
+                }
+                const trustLevel = (0, hai_1.determineTrustLevel)(!!config.agentDomain, dnsVerified, haiRegistered);
+                const status = {
+                    agentId: config.agentId || "",
+                    trustLevel,
+                    verificationClaim: config.verificationClaim || "unverified",
+                    domain: config.agentDomain,
+                    haiRegistration,
+                    dnsVerified,
+                    timestamp: new Date().toISOString(),
+                };
+                res.setHeader("Content-Type", "application/json");
+                res.setHeader("Cache-Control", "public, max-age=60");
+                res.json(status);
+            }
+            catch (err) {
+                api.logger.error(`Failed to get attestation status: ${err.message}`);
+                res.status(500).json({ error: err.message });
+            }
+        },
+    });
+}
+//# sourceMappingURL=wellknown.js.map

package/dist/gateway/wellknown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellknown.js","sourceRoot":"","sources":["../../src/gateway/wellknown.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BH,wDA+KC;AAxMD,uCAA0C;AAC1C,uCAAyB;AACzB,2CAA6B;AAE7B,oCAA4C;AAC5C,sCAAmE;AAiBnE;;GAEG;AACH,SAAgB,sBAAsB,CAAC,GAAsB;IAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAE7D,sCAAsC;IACtC,GAAG,CAAC,qBAAqB,CAAC;QACxB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;gBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,sBAAsB;oBAC7B,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;gBAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,aAAa,GAAG,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC;gBAE5C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC;oBACP,SAAS;oBACT,aAAa;oBACb,SAAS,EAAE,MAAM,CAAC,YAAY,IAAI,QAAQ;oBAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,YAAY;oBAC3D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,qBAAqB,CAAC;QACxB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;gBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEL,iDAAiD;IAC/C,2DAA2D;IAC3D,0DAA0D;IAE1D,2CAA2C;IAC3C,GAAG,CAAC,qBAAqB,CAAC;QACxB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,KAAK,CAAC;YAE/D,GAAG,CAAC,IAAI,CAAC;gBACP,WAAW;gBACX,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,SAAS,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;gBACtC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,YAAY;gBAC3D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,2DAA2D;IAC3D,GAAG,CAAC,qBAAqB,CAAC;QACxB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;gBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,sBAAsB;oBAC7B,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;gBAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,aAAa,GAAG,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC;gBAE5C,yBAAyB;gBACzB,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,IAAA,wBAAgB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;wBAC7D,IAAI,SAAS,EAAE,CAAC;4BACd,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,aAAa,KAAK,aAAa,CAAC;wBACjE,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,mBAAmB;oBACrB,CAAC;gBACH,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;gBAC1B,IAAI,eAAe,GAAG,IAAI,CAAC;gBAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,IAAI,CAAC;wBACH,eAAe,GAAG,MAAM,IAAA,oBAAc,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBACvD,aAAa,GAAG,eAAe,EAAE,QAAQ,IAAI,KAAK,CAAC;oBACrD,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;gBAED,MAAM,UAAU,GAAG,IAAA,yBAAmB,EACpC,CAAC,CAAC,MAAM,CAAC,WAAW,EACpB,WAAW,EACX,aAAa,CACd,CAAC;gBAEF,MAAM,MAAM,GAAsB;oBAChC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;oBAC7B,UAAU;oBACV,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,YAAY;oBAC3D,MAAM,EAAE,MAAM,CAAC,WAAW;oBAC1B,eAAe;oBACf,WAAW;oBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBAEF,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;gBACrD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,80 @@
+/**
+ * JACS OpenClaw Plugin
+ *
+ * Provides post-quantum cryptographic signatures for agent communications.
+ *
+ * Core Features:
+ * - Key generation and secure storage
+ * - Document signing and verification
+ * - Public key endpoint for discovery
+ */
+import { JacsAgent } from "@hai.ai/jacs";
+import * as fs from "fs";
+export type TrustLevel = "basic" | "domain" | "attested";
+export type VerificationClaim = "unverified" | "verified" | "verified-hai.ai";
+export interface HaiRegistration {
+    verified: boolean;
+    verified_at?: string;
+    registration_type: string;
+    agent_id: string;
+    public_key_hash: string;
+}
+export interface AttestationStatus {
+    agentId: string;
+    trustLevel: TrustLevel;
+    verificationClaim: VerificationClaim;
+    domain?: string;
+    haiRegistration?: HaiRegistration | null;
+    dnsVerified?: boolean;
+    timestamp: string;
+}
+export interface JACSPluginConfig {
+    keyAlgorithm: string;
+    autoSign: boolean;
+    autoVerify: boolean;
+    agentName?: string;
+    agentDescription?: string;
+    agentDomain?: string;
+    agentId?: string;
+    verificationClaim?: VerificationClaim;
+    haiApiUrl?: string;
+}
+export interface OpenClawPluginAPI {
+    config: JACSPluginConfig;
+    logger: {
+        info: (msg: string) => void;
+        warn: (msg: string) => void;
+        error: (msg: string) => void;
+        debug: (msg: string) => void;
+    };
+    runtime: {
+        homeDir: string;
+        fs: typeof fs;
+        jacs?: JACSRuntime;
+    };
+    registerCli: (opts: any) => void;
+    registerCommand: (opts: any) => void;
+    registerTool: (opts: any) => void;
+    registerGatewayMethod: (opts: any) => void;
+    updateConfig: (update: Partial<JACSPluginConfig>) => void;
+    invoke: (command: string, args: any) => Promise<any>;
+}
+export interface JACSRuntime {
+    isInitialized: () => boolean;
+    getAgent: () => JacsAgent | null;
+    signDocument: (doc: any) => string;
+    verifyDocument: (doc: string) => any;
+    getAgentId: () => string | undefined;
+    getPublicKey: () => string;
+}
+/**
+ * Main plugin registration function called by OpenClaw
+ */
+export default function register(api: OpenClawPluginAPI): void;
+export { JacsAgent, hashString, verifyString, createConfig } from "@hai.ai/jacs";
+export declare function setAgentInstance(agent: JacsAgent, agentId: string, publicKey: string): void;
+export { setupCommand } from "./setup";
+export { cliCommands } from "./cli";
+export { registerTools } from "./tools";
+export { registerGatewayMethods } from "./gateway/wellknown";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAA0C,MAAM,cAAc,CAAC;AAMjF,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAGzB,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAGzD,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,GAAG,iBAAiB,CAAC;AAG9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE;QACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC7B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;KAC9B,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,OAAO,EAAE,CAAC;QACd,IAAI,CAAC,EAAE,WAAW,CAAC;KACpB,CAAC;IACF,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACjC,eAAe,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACrC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IAClC,qBAAqB,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC;IAC1D,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B,QAAQ,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;IACnC,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC;IACrC,UAAU,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACrC,YAAY,EAAE,MAAM,MAAM,CAAC;CAC5B;AAQD;;GAEG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAsE7D;AAGD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAK3F;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,150 @@
+"use strict";
+/**
+ * JACS OpenClaw Plugin
+ *
+ * Provides post-quantum cryptographic signatures for agent communications.
+ *
+ * Core Features:
+ * - Key generation and secure storage
+ * - Document signing and verification
+ * - Public key endpoint for discovery
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerGatewayMethods = exports.registerTools = exports.cliCommands = exports.setupCommand = exports.createConfig = exports.verifyString = exports.hashString = exports.JacsAgent = void 0;
+exports.default = register;
+exports.setAgentInstance = setAgentInstance;
+const jacs_1 = require("@hai.ai/jacs");
+const setup_1 = require("./setup");
+const cli_1 = require("./cli");
+const wellknown_1 = require("./gateway/wellknown");
+const tools_1 = require("./tools");
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+// Agent instance (replaces deprecated global singleton)
+let agentInstance = null;
+let isInitialized = false;
+let currentAgentId;
+let publicKeyContent;
+/**
+ * Main plugin registration function called by OpenClaw
+ */
+function register(api) {
+    const config = api.config;
+    const logger = api.logger;
+    // Determine JACS directories
+    const jacsDir = path.join(api.runtime.homeDir, ".openclaw", "jacs");
+    const keysDir = path.join(api.runtime.homeDir, ".openclaw", "jacs_keys");
+    const configPath = path.join(jacsDir, "jacs.config.json");
+    // Try to initialize JACS if config exists
+    if (fs.existsSync(configPath)) {
+        try {
+            // Use JacsAgent class instead of deprecated global load()
+            agentInstance = new jacs_1.JacsAgent();
+            agentInstance.load(configPath);
+            currentAgentId = config.agentId;
+            // Load public key
+            const pubKeyPath = path.join(keysDir, "agent.public.pem");
+            if (fs.existsSync(pubKeyPath)) {
+                publicKeyContent = fs.readFileSync(pubKeyPath, "utf-8");
+            }
+            isInitialized = true;
+            logger.info("JACS initialized successfully");
+        }
+        catch (err) {
+            logger.warn(`JACS not initialized - run 'openclaw jacs init': ${err.message}`);
+            agentInstance = null;
+        }
+    }
+    else {
+        logger.info("JACS not configured - run 'openclaw jacs init' to set up");
+    }
+    // Register CLI commands
+    api.registerCli({
+        name: "jacs",
+        description: "JACS cryptographic provenance commands",
+        subcommands: (0, cli_1.cliCommands)(api),
+    });
+    // Register setup/init command
+    api.registerCommand({
+        name: "jacs-init",
+        description: "Initialize JACS with key generation and agent creation",
+        handler: (0, setup_1.setupCommand)(api),
+    });
+    // Register agent tools for AI use
+    (0, tools_1.registerTools)(api);
+    // Register gateway methods for well-known endpoints
+    (0, wellknown_1.registerGatewayMethods)(api);
+    // Expose JACS runtime for other plugins
+    api.runtime.jacs = {
+        isInitialized: () => isInitialized,
+        getAgent: () => agentInstance,
+        signDocument: (doc) => {
+            if (!agentInstance)
+                throw new Error("JACS not initialized");
+            return agentInstance.signRequest(doc);
+        },
+        verifyDocument: (doc) => {
+            if (!agentInstance)
+                throw new Error("JACS not initialized");
+            return agentInstance.verifyResponse(doc);
+        },
+        getAgentId: () => currentAgentId,
+        getPublicKey: () => publicKeyContent || "",
+    };
+    logger.debug("JACS plugin registered");
+}
+// Re-export for use by other modules
+var jacs_2 = require("@hai.ai/jacs");
+Object.defineProperty(exports, "JacsAgent", { enumerable: true, get: function () { return jacs_2.JacsAgent; } });
+Object.defineProperty(exports, "hashString", { enumerable: true, get: function () { return jacs_2.hashString; } });
+Object.defineProperty(exports, "verifyString", { enumerable: true, get: function () { return jacs_2.verifyString; } });
+Object.defineProperty(exports, "createConfig", { enumerable: true, get: function () { return jacs_2.createConfig; } });
+// Export internal state accessor for reinit after setup
+function setAgentInstance(agent, agentId, publicKey) {
+    agentInstance = agent;
+    currentAgentId = agentId;
+    publicKeyContent = publicKey;
+    isInitialized = true;
+}
+var setup_2 = require("./setup");
+Object.defineProperty(exports, "setupCommand", { enumerable: true, get: function () { return setup_2.setupCommand; } });
+var cli_2 = require("./cli");
+Object.defineProperty(exports, "cliCommands", { enumerable: true, get: function () { return cli_2.cliCommands; } });
+var tools_2 = require("./tools");
+Object.defineProperty(exports, "registerTools", { enumerable: true, get: function () { return tools_2.registerTools; } });
+var wellknown_2 = require("./gateway/wellknown");
+Object.defineProperty(exports, "registerGatewayMethods", { enumerable: true, get: function () { return wellknown_2.registerGatewayMethods; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFH,2BAsEC;AAMD,4CAKC;AAtKD,uCAAiF;AACjF,mCAAuC;AACvC,+BAAoC;AACpC,mDAA6D;AAC7D,mCAAwC;AACxC,2CAA6B;AAC7B,uCAAyB;AAsEzB,wDAAwD;AACxD,IAAI,aAAa,GAAqB,IAAI,CAAC;AAC3C,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,cAAkC,CAAC;AACvC,IAAI,gBAAoC,CAAC;AAEzC;;GAEG;AACH,SAAwB,QAAQ,CAAC,GAAsB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,6BAA6B;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAE1D,0CAA0C;IAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,0DAA0D;YAC1D,aAAa,GAAG,IAAI,gBAAS,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC;YAEhC,kBAAkB;YAClB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YAED,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,oDAAoD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/E,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;IAED,wBAAwB;IACxB,GAAG,CAAC,WAAW,CAAC;QACd,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,wCAAwC;QACrD,WAAW,EAAE,IAAA,iBAAW,EAAC,GAAG,CAAC;KAC9B,CAAC,CAAC;IAEH,8BAA8B;IAC9B,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,wDAAwD;QACrE,OAAO,EAAE,IAAA,oBAAY,EAAC,GAAG,CAAC;KAC3B,CAAC,CAAC;IAEH,kCAAkC;IAClC,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAEnB,oDAAoD;IACpD,IAAA,kCAAsB,EAAC,GAAG,CAAC,CAAC;IAE5B,wCAAwC;IACxC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG;QACjB,aAAa,EAAE,GAAG,EAAE,CAAC,aAAa;QAClC,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa;QAC7B,YAAY,EAAE,CAAC,GAAQ,EAAE,EAAE;YACzB,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5D,OAAO,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,CAAC,GAAW,EAAE,EAAE;YAC9B,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5D,OAAO,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc;QAChC,YAAY,EAAE,GAAG,EAAE,CAAC,gBAAgB,IAAI,EAAE;KAC3C,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACzC,CAAC;AAED,qCAAqC;AACrC,qCAAiF;AAAxE,iGAAA,SAAS,OAAA;AAAE,kGAAA,UAAU,OAAA;AAAE,oGAAA,YAAY,OAAA;AAAE,oGAAA,YAAY,OAAA;AAE1D,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,KAAgB,EAAE,OAAe,EAAE,SAAiB;IACnF,aAAa,GAAG,KAAK,CAAC;IACtB,cAAc,GAAG,OAAO,CAAC;IACzB,gBAAgB,GAAG,SAAS,CAAC;IAC7B,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AACrB,6BAAoC;AAA3B,kGAAA,WAAW,OAAA;AACpB,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AACtB,iDAA6D;AAApD,mHAAA,sBAAsB,OAAA"}

package/dist/setup.d.ts

@@ -0,0 +1,25 @@
+/**
+ * JACS Setup Wizard
+ *
+ * Interactive setup for generating keys and creating agent identity.
+ */
+import type { OpenClawPluginAPI } from "./index";
+export interface SetupOptions {
+    keyAlgorithm: string;
+    agentName: string;
+    agentDescription: string;
+    agentDomain?: string;
+    keyPassword: string;
+    generatedPassword: boolean;
+}
+export interface SetupResult {
+    text: string;
+    agentId?: string;
+    configPath?: string;
+    error?: string;
+}
+/**
+ * Creates the setup command handler
+ */
+export declare function setupCommand(api: OpenClawPluginAPI): (ctx: any) => Promise<SetupResult>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGjD,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,iBAAiB,IACnC,KAAK,GAAG,KAAG,OAAO,CAAC,WAAW,CAAC,CAyI9C"}