openclaw-event-server-plugin 1.0.0

package/dist/runtime/hook-bridge-actions.js

@@ -0,0 +1,248 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeBridgeAction = executeBridgeAction;
+exports.executeBridgeGuardAction = executeBridgeGuardAction;
+const node_child_process_1 = require("node:child_process");
+const node_path_1 = require("node:path");
+const hook_bridge_utils_1 = require("./hook-bridge-utils");
+const TOOL_GUARD_TRACE = process.env.EVENT_PLUGIN_TOOL_GUARD_TRACE === '1' ||
+    process.env.EVENT_PLUGIN_TOOL_GUARD_TRACE === 'true';
+function trace(...args) {
+    if (!TOOL_GUARD_TRACE) {
+        return;
+    }
+    // Keep trace independent from plugin logger to simplify action-path debugging.
+    // eslint-disable-next-line no-console
+    console.log('[event-plugin:trace]', ...args);
+}
+async function executeBridgeAction(context, action, event, ruleId) {
+    if (action.type === 'webhook') {
+        trace('hookBridge.action.dispatch', { kind: 'webhook', ruleId, url: action.url });
+        await executeWebhookAction(action, event, ruleId);
+        return;
+    }
+    trace('hookBridge.action.dispatch', { kind: 'local_script', ruleId, path: action.path });
+    await executeLocalScriptAction(context.config, action, event, ruleId);
+}
+async function executeBridgeGuardAction(context, action, event, ruleId, defaultTimeoutMs) {
+    if (action.type === 'webhook') {
+        trace('toolGuard.action.dispatch', {
+            kind: 'webhook',
+            ruleId,
+            url: action.url,
+            timeoutMs: action.timeoutMs ?? defaultTimeoutMs ?? 10000,
+        });
+        const responseBody = await executeWebhookAction(action, event, ruleId, defaultTimeoutMs);
+        const parsed = parseHookBridgeDecision(responseBody);
+        trace('toolGuard.action.result', {
+            kind: 'webhook',
+            ruleId,
+            rawPreview: (0, hook_bridge_utils_1.trimPreview)(responseBody, 300),
+            parsed: parsed ?? null,
+        });
+        return parsed;
+    }
+    trace('toolGuard.action.dispatch', {
+        kind: 'local_script',
+        ruleId,
+        path: action.path,
+        timeoutMs: action.timeoutMs ?? defaultTimeoutMs ?? context.config.localScriptDefaults.timeoutMs,
+    });
+    const stdout = await executeLocalScriptAction(context.config, action, event, ruleId, defaultTimeoutMs);
+    const parsed = parseHookBridgeDecision(stdout);
+    trace('toolGuard.action.result', {
+        kind: 'local_script',
+        ruleId,
+        path: action.path,
+        rawPreview: (0, hook_bridge_utils_1.trimPreview)(stdout, 300),
+        parsed: parsed ?? null,
+    });
+    return parsed;
+}
+async function executeWebhookAction(action, event, ruleId, defaultTimeoutMs) {
+    const headers = {
+        'content-type': 'application/json',
+        ...(action.headers ?? {}),
+    };
+    if (action.authToken) {
+        headers.authorization = `Bearer ${action.authToken}`;
+    }
+    const timeoutMs = action.timeoutMs ?? defaultTimeoutMs ?? 10000;
+    const controller = new AbortController();
+    const timeoutHandle = setTimeout(() => {
+        controller.abort();
+    }, timeoutMs);
+    try {
+        trace('hookBridge.webhook.request', {
+            ruleId,
+            url: action.url,
+            method: action.method ?? 'POST',
+            timeoutMs,
+        });
+        const response = await fetch(action.url, {
+            method: action.method ?? 'POST',
+            headers,
+            body: JSON.stringify({ ruleId, event }),
+            signal: controller.signal,
+        });
+        if (!response.ok) {
+            throw new Error(`Webhook action failed with status ${response.status}`);
+        }
+        const text = await response.text();
+        trace('hookBridge.webhook.response', {
+            ruleId,
+            status: response.status,
+            bodyPreview: (0, hook_bridge_utils_1.trimPreview)(text, 300),
+        });
+        return text;
+    }
+    finally {
+        clearTimeout(timeoutHandle);
+    }
+}
+async function executeLocalScriptAction(config, action, event, ruleId, defaultTimeoutMs) {
+    const absolutePath = (0, node_path_1.resolve)(action.path);
+    const canonicalPath = (0, hook_bridge_utils_1.toCanonicalPath)(absolutePath);
+    if (!canonicalPath) {
+        throw new Error(`Script path could not be resolved: ${absolutePath}`);
+    }
+    if (!isAllowedLocalScriptPath(config, canonicalPath)) {
+        throw new Error(`Script path is not allowed: ${absolutePath}`);
+    }
+    const timeoutMs = action.timeoutMs ?? defaultTimeoutMs ?? config.localScriptDefaults.timeoutMs;
+    const maxPayloadBytes = action.maxPayloadBytes ?? config.localScriptDefaults.maxPayloadBytes;
+    const payload = JSON.stringify({ ruleId, event });
+    const payloadBytes = Buffer.byteLength(payload, 'utf8');
+    if (payloadBytes > maxPayloadBytes) {
+        throw new Error(`Script payload exceeds maxPayloadBytes (${payloadBytes} > ${maxPayloadBytes})`);
+    }
+    const result = await runLocalScript({
+        scriptPath: canonicalPath,
+        args: action.args ?? [],
+        payload,
+        timeoutMs,
+    });
+    if (result.timedOut) {
+        throw new Error(`Script timed out after ${timeoutMs}ms (${(0, node_path_1.basename)(canonicalPath)})`);
+    }
+    if (result.exitCode !== 0) {
+        throw new Error(`Script exited with code ${String(result.exitCode)} (stderr: ${(0, hook_bridge_utils_1.trimPreview)(result.stderr)})`);
+    }
+    trace('hookBridge.local_script.result', {
+        ruleId,
+        script: canonicalPath,
+        exitCode: result.exitCode,
+        signal: result.signal,
+        stdoutPreview: (0, hook_bridge_utils_1.trimPreview)(result.stdout, 300),
+        stderrPreview: (0, hook_bridge_utils_1.trimPreview)(result.stderr, 300),
+    });
+    return result.stdout;
+}
+function isAllowedLocalScriptPath(config, scriptPath) {
+    if (config.allowedActionDirs.length === 0) {
+        return false;
+    }
+    return config.allowedActionDirs.some((dir) => {
+        const absoluteDir = (0, node_path_1.resolve)(dir);
+        const canonicalDir = (0, hook_bridge_utils_1.toCanonicalPath)(absoluteDir);
+        if (!canonicalDir) {
+            return false;
+        }
+        return scriptPath === canonicalDir || scriptPath.startsWith(`${canonicalDir}${node_path_1.sep}`);
+    });
+}
+async function runLocalScript(params) {
+    const { scriptPath, args, payload, timeoutMs } = params;
+    return new Promise((resolvePromise, rejectPromise) => {
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        let timedOut = false;
+        const child = (0, node_child_process_1.spawn)(scriptPath, args, {
+            shell: false,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: process.env,
+        });
+        const timeoutHandle = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+            setTimeout(() => {
+                if (!settled) {
+                    child.kill('SIGKILL');
+                }
+            }, 1000).unref();
+        }, timeoutMs);
+        child.on('error', (error) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timeoutHandle);
+            rejectPromise(error);
+        });
+        child.stdout.on('data', (chunk) => {
+            stdout += chunk.toString();
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.stdin.on('error', (error) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timeoutHandle);
+            rejectPromise(error);
+        });
+        child.on('close', (exitCode, signal) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timeoutHandle);
+            resolvePromise({
+                exitCode,
+                signal,
+                stdout,
+                stderr,
+                timedOut,
+            });
+        });
+        child.stdin.end(payload);
+    });
+}
+function parseHookBridgeDecision(raw) {
+    const trimmed = raw.trim();
+    if (trimmed === '') {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(trimmed);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        return undefined;
+    }
+    const value = parsed;
+    const hasBlockBoolean = typeof value.block === 'boolean';
+    const block = value.block === true;
+    const blockReason = typeof value.blockReason === 'string' ? value.blockReason : undefined;
+    const blockReasonTemplate = typeof value.blockReasonTemplate === 'string' ? value.blockReasonTemplate : undefined;
+    const params = typeof value.params === 'object' && value.params !== null
+        ? value.params
+        : undefined;
+    const hasParams = params !== undefined;
+    if (!hasBlockBoolean && !hasParams) {
+        return undefined;
+    }
+    return {
+        block: hasBlockBoolean ? block : undefined,
+        blockReason,
+        blockReasonTemplate,
+        params,
+    };
+}
+//# sourceMappingURL=hook-bridge-actions.js.map

package/dist/runtime/hook-bridge-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-actions.js","sourceRoot":"","sources":["../../src/runtime/hook-bridge-actions.ts"],"names":[],"mappings":";;AA+BA,kDAcC;AAED,4DAyCC;AAxFD,2DAA2C;AAC3C,yCAAmD;AAGnD,2DAAmE;AAcnE,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,GAAG;IACjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,MAAM,CAAC;AAEvD,SAAS,KAAK,CAAC,GAAG,IAAe;IAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,+EAA+E;IAC/E,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,OAAsB,EACtB,MAAwB,EACxB,KAAoB,EACpB,MAAc;IAEd,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClF,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,MAAM,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,OAAsB,EACtB,MAAwB,EACxB,KAAoB,EACpB,MAAc,EACd,gBAAwB;IAExB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,2BAA2B,EAAE;YACjC,IAAI,EAAE,SAAS;YACf,MAAM;YACN,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,gBAAgB,IAAI,KAAK;SACzD,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QACrD,KAAK,CAAC,yBAAyB,EAAE;YAC/B,IAAI,EAAE,SAAS;YACf,MAAM;YACN,UAAU,EAAE,IAAA,+BAAW,EAAC,YAAY,EAAE,GAAG,CAAC;YAC1C,MAAM,EAAE,MAAM,IAAI,IAAI;SACvB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,2BAA2B,EAAE;QACjC,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS;KAChG,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,CAAC,yBAAyB,EAAE;QAC/B,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,IAAA,+BAAW,EAAC,MAAM,EAAE,GAAG,CAAC;QACpC,MAAM,EAAE,MAAM,IAAI,IAAI;KACvB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAAsD,EACtD,KAAoB,EACpB,MAAc,EACd,gBAAyB;IAEzB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;KAC1B,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,CAAC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,IAAI,KAAK,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,KAAK,CAAC,4BAA4B,EAAE;YAClC,MAAM;YACN,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;YAC/B,SAAS;SACV,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;YAC/B,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACvC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,CAAC,6BAA6B,EAAE;YACnC,MAAM;YACN,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,IAAA,+BAAW,EAAC,IAAI,EAAE,GAAG,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAwB,EACxB,MAA2D,EAC3D,KAAoB,EACpB,MAAc,EACd,gBAAyB;IAEzB,MAAM,YAAY,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,IAAI,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC;IAC/F,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,YAAY,GAAG,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2CAA2C,YAAY,MAAM,eAAe,GAAG,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,UAAU,EAAE,aAAa;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,OAAO;QACP,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,OAAO,IAAA,oBAAQ,EAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,IAAA,+BAAW,EAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAC7F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gCAAgC,EAAE;QACtC,MAAM;QACN,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,IAAA,+BAAW,EAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QAC9C,aAAa,EAAE,IAAA,+BAAW,EAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAwB,EAAE,UAAkB;IAC5E,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,IAAA,mCAAe,EAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,UAAU,KAAK,YAAY,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,eAAG,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAK7B;IACC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAExD,OAAO,IAAI,OAAO,CAAoB,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACtE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,UAAU,EAAE,IAAI,EAAE;YACpC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,cAAc,CAAC;gBACb,QAAQ;gBACR,MAAM;gBACN,MAAM;gBACN,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,MAAiC,CAAC;IAChD,MAAM,eAAe,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,MAAM,mBAAmB,GACvB,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QACvD,CAAC,CAAE,KAAK,CAAC,MAAkC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC;IAEvC,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC1C,WAAW;QACX,mBAAmB;QACnB,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/runtime/hook-bridge-dispatch-engine.d.ts

@@ -0,0 +1,42 @@
+import { HookBridgeAction, HookBridgeConfig, HookBridgeRule } from '../config';
+import { OpenClawEvent } from '../events/types';
+import type { RuntimeLogger } from './types';
+export interface HookTask {
+    taskId: string;
+    ruleId: string;
+    actionId: string;
+    action: HookBridgeAction;
+    rule: HookBridgeRule;
+    event: OpenClawEvent;
+    enqueuedAt: number;
+    coalesceKey?: string;
+    mergedCount: number;
+}
+export declare class HookBridgeDispatchEngine {
+    private readonly config;
+    private readonly logger;
+    private readonly queue;
+    private readonly queuedTaskById;
+    private readonly queuedTaskIdByCoalesceKey;
+    private readonly highWatermarkActive;
+    private readonly outcomes;
+    private runningWorkers;
+    private drainResolvers;
+    private queueFullSinceMs?;
+    private backpressureActive;
+    private failureRateAlertActive;
+    constructor(config: HookBridgeConfig, logger: RuntimeLogger);
+    enqueueTask(task: HookTask): void;
+    stop(): Promise<void>;
+    private tryCoalesceTask;
+    private pumpWorkers;
+    private runWorker;
+    private executeTask;
+    private evaluateQueuePressure;
+    private emitDropTelemetry;
+    private recordOutcome;
+    private evaluateFailureRate;
+    private waitForDrain;
+    private resolveDrainIfIdle;
+}
+//# sourceMappingURL=hook-bridge-dispatch-engine.d.ts.map

package/dist/runtime/hook-bridge-dispatch-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-dispatch-engine.d.ts","sourceRoot":"","sources":["../../src/runtime/hook-bridge-dispatch-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AASD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAkC;IAC5E,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0B;IAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAEhD,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAClC,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,sBAAsB,CAAS;gBAE3B,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa;IAK3D,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAkC3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B,OAAO,CAAC,eAAe;IAiDvB,OAAO,CAAC,WAAW;YAQL,SAAS;YAwBT,WAAW;IA+BzB,OAAO,CAAC,qBAAqB;IAiD7B,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,kBAAkB;CAW3B"}

package/dist/runtime/hook-bridge-dispatch-engine.js

@@ -0,0 +1,233 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HookBridgeDispatchEngine = void 0;
+const hook_bridge_actions_1 = require("./hook-bridge-actions");
+const hook_bridge_utils_1 = require("./hook-bridge-utils");
+const DEFAULT_COALESCE_WINDOW_MS = 10000;
+class HookBridgeDispatchEngine {
+    config;
+    logger;
+    queue = [];
+    queuedTaskById = new Map();
+    queuedTaskIdByCoalesceKey = new Map();
+    highWatermarkActive = new Set();
+    outcomes = [];
+    runningWorkers = 0;
+    drainResolvers = [];
+    queueFullSinceMs;
+    backpressureActive = false;
+    failureRateAlertActive = false;
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+    }
+    enqueueTask(task) {
+        const coalesced = this.tryCoalesceTask(task);
+        if (coalesced) {
+            return;
+        }
+        const runtime = this.config.runtime;
+        if (this.queue.length >= runtime.maxPendingEvents) {
+            if (runtime.dropPolicy === 'drop_newest') {
+                this.emitDropTelemetry(task, 'drop_newest');
+                this.evaluateQueuePressure();
+                return;
+            }
+            const dropped = this.queue.shift();
+            if (dropped) {
+                this.queuedTaskById.delete(dropped.taskId);
+                if (dropped.coalesceKey && this.queuedTaskIdByCoalesceKey.get(dropped.coalesceKey) === dropped.taskId) {
+                    this.queuedTaskIdByCoalesceKey.delete(dropped.coalesceKey);
+                }
+                this.emitDropTelemetry(dropped, 'drop_oldest');
+            }
+        }
+        this.queue.push(task);
+        this.queuedTaskById.set(task.taskId, task);
+        if (task.coalesceKey) {
+            this.queuedTaskIdByCoalesceKey.set(task.coalesceKey, task.taskId);
+        }
+        this.evaluateQueuePressure();
+        this.pumpWorkers();
+    }
+    async stop() {
+        this.pumpWorkers();
+        await this.waitForDrain();
+    }
+    tryCoalesceTask(task) {
+        const coalesce = task.rule.coalesce;
+        if (!coalesce?.enabled) {
+            return false;
+        }
+        const coalesceKey = (0, hook_bridge_utils_1.buildCoalesceKey)(task.ruleId, task.event, coalesce);
+        if (!coalesceKey) {
+            return false;
+        }
+        const queuedTaskId = this.queuedTaskIdByCoalesceKey.get(coalesceKey);
+        if (!queuedTaskId) {
+            task.coalesceKey = coalesceKey;
+            return false;
+        }
+        const existing = this.queuedTaskById.get(queuedTaskId);
+        if (!existing) {
+            this.queuedTaskIdByCoalesceKey.delete(coalesceKey);
+            task.coalesceKey = coalesceKey;
+            return false;
+        }
+        const windowMs = coalesce.windowMs ?? DEFAULT_COALESCE_WINDOW_MS;
+        if (Date.now() - existing.enqueuedAt > windowMs) {
+            this.queuedTaskIdByCoalesceKey.delete(coalesceKey);
+            task.coalesceKey = coalesceKey;
+            return false;
+        }
+        const strategy = coalesce.strategy ?? 'latest';
+        if (strategy === 'latest') {
+            existing.event = task.event;
+            existing.enqueuedAt = task.enqueuedAt;
+        }
+        existing.mergedCount += 1;
+        this.logger.info('[HookBridge] hookbridge.rule.coalesced', existing.ruleId, `key=${coalesceKey}`, `merged=${existing.mergedCount}`, `strategy=${strategy}`);
+        return true;
+    }
+    pumpWorkers() {
+        while (this.runningWorkers < this.config.runtime.concurrency && this.queue.length > 0) {
+            void this.runWorker();
+        }
+        this.resolveDrainIfIdle();
+    }
+    async runWorker() {
+        this.runningWorkers += 1;
+        try {
+            while (this.queue.length > 0) {
+                const task = this.queue.shift();
+                if (!task) {
+                    continue;
+                }
+                this.queuedTaskById.delete(task.taskId);
+                if (task.coalesceKey && this.queuedTaskIdByCoalesceKey.get(task.coalesceKey) === task.taskId) {
+                    this.queuedTaskIdByCoalesceKey.delete(task.coalesceKey);
+                }
+                this.evaluateQueuePressure();
+                await this.executeTask(task);
+            }
+        }
+        finally {
+            this.runningWorkers -= 1;
+            this.pumpWorkers();
+        }
+    }
+    async executeTask(task) {
+        const startMs = Date.now();
+        let success = false;
+        try {
+            await (0, hook_bridge_actions_1.executeBridgeAction)({ config: this.config }, task.action, task.event, task.ruleId);
+            success = true;
+            this.logger.info('[HookBridge] action succeeded', task.ruleId, task.actionId, task.event.type);
+        }
+        catch (error) {
+            const errorMessage = (0, hook_bridge_utils_1.toErrorMessage)(error);
+            this.logger.error('[HookBridge] action failed', task.ruleId, task.actionId, task.event.type, errorMessage);
+            if (errorMessage.toLowerCase().includes('timed out')) {
+                this.logger.warn('[HookBridge] hookbridge.action.timeout', task.ruleId, task.actionId, task.event.type);
+            }
+        }
+        const durationMs = Date.now() - startMs;
+        if (durationMs >= this.config.telemetry.slowActionMs) {
+            this.logger.warn('[HookBridge] hookbridge.action.slow', task.ruleId, task.actionId, task.action.type, `durationMs=${durationMs}`);
+        }
+        this.recordOutcome(success);
+        this.evaluateFailureRate();
+    }
+    evaluateQueuePressure() {
+        const max = this.config.runtime.maxPendingEvents;
+        const queuePct = max === 0 ? 0 : Math.floor((this.queue.length / max) * 100);
+        const thresholds = [...this.config.telemetry.highWatermarks].sort((a, b) => a - b);
+        for (const threshold of thresholds) {
+            if (queuePct >= threshold) {
+                if (!this.highWatermarkActive.has(threshold)) {
+                    this.highWatermarkActive.add(threshold);
+                    this.logger.warn('[HookBridge] hookbridge.queue.high_watermark', `thresholdPct=${threshold}`, `queueSize=${this.queue.length}`, `maxPending=${max}`);
+                }
+            }
+            else {
+                this.highWatermarkActive.delete(threshold);
+            }
+        }
+        const queueAtCapacity = this.queue.length >= max;
+        if (queueAtCapacity) {
+            if (!this.queueFullSinceMs) {
+                this.queueFullSinceMs = Date.now();
+            }
+            if (!this.backpressureActive && Date.now() - this.queueFullSinceMs >= this.config.telemetry.saturationWindowMs) {
+                this.backpressureActive = true;
+                this.logger.warn('[HookBridge] hookbridge.backpressure.active', `queueSize=${this.queue.length}`, `maxPending=${max}`);
+            }
+            return;
+        }
+        this.queueFullSinceMs = undefined;
+        if (this.backpressureActive) {
+            this.backpressureActive = false;
+            this.logger.info('[HookBridge] hookbridge.backpressure.recovered', `queueSize=${this.queue.length}`, `maxPending=${max}`);
+        }
+    }
+    emitDropTelemetry(task, policy) {
+        this.logger.warn('[HookBridge] hookbridge.queue.drop', `policy=${policy}`, `ruleId=${task.ruleId}`, `actionId=${task.actionId}`, `eventType=${task.event.type}`, `queueSize=${this.queue.length}`, `maxPending=${this.config.runtime.maxPendingEvents}`);
+    }
+    recordOutcome(success) {
+        const nowMs = Date.now();
+        this.outcomes.push({ atMs: nowMs, success });
+        const minTimestamp = nowMs - this.config.telemetry.failureRateWindowMs;
+        while (this.outcomes.length > 0 && this.outcomes[0].atMs < minTimestamp) {
+            this.outcomes.shift();
+        }
+    }
+    evaluateFailureRate() {
+        const samples = this.outcomes.length;
+        const minSamples = this.config.telemetry.failureRateMinSamples;
+        if (samples < minSamples) {
+            if (this.failureRateAlertActive) {
+                this.failureRateAlertActive = false;
+                this.logger.info('[HookBridge] hookbridge.action.failure_rate_recovered', `samples=${samples}`);
+            }
+            return;
+        }
+        let failures = 0;
+        for (const outcome of this.outcomes) {
+            if (!outcome.success) {
+                failures += 1;
+            }
+        }
+        const failurePct = (failures / samples) * 100;
+        if (failurePct >= this.config.telemetry.failureRateThresholdPct) {
+            if (!this.failureRateAlertActive) {
+                this.failureRateAlertActive = true;
+                this.logger.warn('[HookBridge] hookbridge.action.failure_rate', `samples=${samples}`, `failures=${failures}`, `failurePct=${failurePct.toFixed(2)}`);
+            }
+            return;
+        }
+        if (this.failureRateAlertActive) {
+            this.failureRateAlertActive = false;
+            this.logger.info('[HookBridge] hookbridge.action.failure_rate_recovered', `samples=${samples}`, `failurePct=${failurePct.toFixed(2)}`);
+        }
+    }
+    waitForDrain() {
+        if (this.runningWorkers === 0 && this.queue.length === 0) {
+            return Promise.resolve();
+        }
+        return new Promise((resolve) => {
+            this.drainResolvers.push(resolve);
+        });
+    }
+    resolveDrainIfIdle() {
+        if (this.runningWorkers !== 0 || this.queue.length !== 0) {
+            return;
+        }
+        const resolvers = this.drainResolvers;
+        this.drainResolvers = [];
+        for (const resolve of resolvers) {
+            resolve();
+        }
+    }
+}
+exports.HookBridgeDispatchEngine = HookBridgeDispatchEngine;
+//# sourceMappingURL=hook-bridge-dispatch-engine.js.map

package/dist/runtime/hook-bridge-dispatch-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-dispatch-engine.js","sourceRoot":"","sources":["../../src/runtime/hook-bridge-dispatch-engine.ts"],"names":[],"mappings":";;;AAEA,+DAA4D;AAC5D,2DAAuE;AAoBvE,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEzC,MAAa,wBAAwB;IAClB,MAAM,CAAmB;IACzB,MAAM,CAAgB;IACtB,KAAK,GAAe,EAAE,CAAC;IACvB,cAAc,GAA0B,IAAI,GAAG,EAAE,CAAC;IAClD,yBAAyB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC3D,mBAAmB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC7C,QAAQ,GAAoB,EAAE,CAAC;IAExC,cAAc,GAAG,CAAC,CAAC;IACnB,cAAc,GAAsB,EAAE,CAAC;IACvC,gBAAgB,CAAU;IAC1B,kBAAkB,GAAG,KAAK,CAAC;IAC3B,sBAAsB,GAAG,KAAK,CAAC;IAEvC,YAAY,MAAwB,EAAE,MAAqB;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,IAAc;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClD,IAAI,OAAO,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;gBACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5C,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;oBACtG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAEO,eAAe,CAAC,IAAc;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,oCAAgB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,0BAA0B,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YAChD,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC/C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAC5B,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACxC,CAAC;QAED,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wCAAwC,EACxC,QAAQ,CAAC,MAAM,EACf,OAAO,WAAW,EAAE,EACpB,UAAU,QAAQ,CAAC,WAAW,EAAE,EAChC,YAAY,QAAQ,EAAE,CACvB,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW;QACjB,OAAO,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtF,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QAEzB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC7F,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1D,CAAC;gBAED,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAc;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,IAAA,yCAAmB,EAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAA,kCAAc,EAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC3G,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACxC,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qCAAqC,EACrC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,MAAM,CAAC,IAAI,EAChB,cAAc,UAAU,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAEO,qBAAqB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CAA8C,EAC9C,gBAAgB,SAAS,EAAE,EAC3B,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAChC,cAAc,GAAG,EAAE,CACpB,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;QACjD,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBAC/G,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,EAC7C,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAChC,cAAc,GAAG,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,EAChD,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAChC,cAAc,GAAG,EAAE,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAc,EAAE,MAAqC;QAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,EACpC,UAAU,MAAM,EAAE,EAClB,UAAU,IAAI,CAAC,MAAM,EAAE,EACvB,YAAY,IAAI,CAAC,QAAQ,EAAE,EAC3B,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAC9B,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAChC,cAAc,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CACrD,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAgB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7C,MAAM,YAAY,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC;QACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YACxE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC;QAC/D,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAChC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE,WAAW,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC;QAC9C,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACjC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,EAC7C,WAAW,OAAO,EAAE,EACpB,YAAY,QAAQ,EAAE,EACtB,cAAc,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACtC,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uDAAuD,EACvD,WAAW,OAAO,EAAE,EACpB,cAAc,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB;QACxB,IAAI,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAjTD,4DAiTC"}

package/dist/runtime/hook-bridge-tool-guard.d.ts

@@ -0,0 +1,16 @@
+import { HookBridgeGuardDecision, HookBridgeRule, HookBridgeToolGuardRule } from '../config';
+import { OpenClawEvent } from '../events/types';
+export declare function buildToolGuardEvent(params: {
+    toolName: string;
+    params: Record<string, unknown>;
+    agentId?: string;
+    sessionId?: string;
+    sessionKey?: string;
+    runId?: string;
+    toolCallId?: string;
+}): OpenClawEvent;
+export declare function matchesRule(event: OpenClawEvent, rule: HookBridgeRule | HookBridgeToolGuardRule, parentStatusByAgent: Map<string, string>): boolean;
+export declare function buildToolGuardScopeKey(toolName: string, params: Record<string, unknown>, mode: 'tool' | 'tool_and_params'): string;
+export declare function resolveDecisionTemplates(decision: HookBridgeGuardDecision, event: OpenClawEvent): HookBridgeGuardDecision;
+export declare function renderGuardTemplate(template: string, event: OpenClawEvent): string;
+//# sourceMappingURL=hook-bridge-tool-guard.d.ts.map

package/dist/runtime/hook-bridge-tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-tool-guard.d.ts","sourceRoot":"","sources":["../../src/runtime/hook-bridge-tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,aAAa,CAoBhB;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,cAAc,GAAG,uBAAuB,EAC9C,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACvC,OAAO,CA6JT;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,MAAM,CAKR;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,KAAK,EAAE,aAAa,GACnB,uBAAuB,CASzB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,CAmClF"}