openclaw-event-server-plugin 1.0.0

package/dist/runtime/hook-bridge-tool-guard.js

@@ -0,0 +1,236 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildToolGuardEvent = buildToolGuardEvent;
+exports.matchesRule = matchesRule;
+exports.buildToolGuardScopeKey = buildToolGuardScopeKey;
+exports.resolveDecisionTemplates = resolveDecisionTemplates;
+exports.renderGuardTemplate = renderGuardTemplate;
+const hook_bridge_utils_1 = require("./hook-bridge-utils");
+function buildToolGuardEvent(params) {
+    return {
+        eventId: `tool-guard-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
+        schemaVersion: '1.1.0',
+        pluginVersion: '1.0.0',
+        timestamp: new Date().toISOString(),
+        type: 'tool.called',
+        eventCategory: 'tool',
+        eventName: 'before_tool_call',
+        source: 'plugin-hook',
+        agentId: params.agentId,
+        sessionId: params.sessionId,
+        sessionKey: params.sessionKey,
+        runId: params.runId,
+        toolCallId: params.toolCallId,
+        data: {
+            toolName: params.toolName,
+            params: params.params,
+        },
+    };
+}
+function matchesRule(event, rule, parentStatusByAgent) {
+    const when = rule.when;
+    if (!(0, hook_bridge_utils_1.matchesScalarOrList)(when.eventType, event.type)) {
+        return false;
+    }
+    const toolName = (0, hook_bridge_utils_1.readPath)(event, 'data.toolName');
+    if (!(0, hook_bridge_utils_1.matchesScalarOrList)(when.toolName, typeof toolName === 'string' ? toolName : undefined)) {
+        return false;
+    }
+    if (!(0, hook_bridge_utils_1.matchesScalarOrList)(when.agentId, event.agentId)) {
+        return false;
+    }
+    if (!(0, hook_bridge_utils_1.matchesScalarOrList)(when.sessionId, event.sessionId)) {
+        return false;
+    }
+    if (!(0, hook_bridge_utils_1.matchesScalarOrList)(when.sessionKey, event.sessionKey)) {
+        return false;
+    }
+    if (when.contains) {
+        for (const [path, expectedSubstring] of Object.entries(when.contains)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (typeof value !== 'string' || !value.includes(expectedSubstring)) {
+                return false;
+            }
+        }
+    }
+    if (when.equals) {
+        for (const [path, expected] of Object.entries(when.equals)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (value !== expected) {
+                return false;
+            }
+        }
+    }
+    if (when.requiredPaths) {
+        for (const path of when.requiredPaths) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (value === undefined || value === null) {
+                return false;
+            }
+        }
+    }
+    if (when.typeChecks) {
+        for (const [path, expectedType] of Object.entries(when.typeChecks)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (expectedType === 'array') {
+                if (!Array.isArray(value)) {
+                    return false;
+                }
+                continue;
+            }
+            if (expectedType === 'object') {
+                if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+                    return false;
+                }
+                continue;
+            }
+            if (typeof value !== expectedType) {
+                return false;
+            }
+        }
+    }
+    if (when.inList) {
+        for (const [path, values] of Object.entries(when.inList)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (!values.includes(value)) {
+                return false;
+            }
+        }
+    }
+    if (when.notInList) {
+        for (const [path, values] of Object.entries(when.notInList)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (values.includes(value)) {
+                return false;
+            }
+        }
+    }
+    if (when.matchesRegex) {
+        for (const [path, pattern] of Object.entries(when.matchesRegex)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (typeof value !== 'string') {
+                return false;
+            }
+            try {
+                const regex = new RegExp(pattern);
+                if (!regex.test(value)) {
+                    return false;
+                }
+            }
+            catch {
+                return false;
+            }
+        }
+    }
+    if (when.notMatchesRegex) {
+        for (const [path, pattern] of Object.entries(when.notMatchesRegex)) {
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            if (typeof value !== 'string') {
+                continue;
+            }
+            try {
+                const regex = new RegExp(pattern);
+                if (regex.test(value)) {
+                    return false;
+                }
+            }
+            catch {
+                return false;
+            }
+        }
+    }
+    const domainPath = when.domainPath ?? 'data.params.url';
+    if (when.domainAllowlist && when.domainAllowlist.length > 0) {
+        const host = extractHostFromPath(event, domainPath);
+        if (!host || !(0, hook_bridge_utils_1.matchesDomainList)(host, when.domainAllowlist)) {
+            return false;
+        }
+    }
+    if (when.domainBlocklist && when.domainBlocklist.length > 0) {
+        const host = extractHostFromPath(event, domainPath);
+        if (!host || !(0, hook_bridge_utils_1.matchesDomainList)(host, when.domainBlocklist)) {
+            return false;
+        }
+    }
+    if (typeof when.idleForMsGte === 'number') {
+        const idleForMsValue = (0, hook_bridge_utils_1.readPath)(event, 'data.idleForMs');
+        if (typeof idleForMsValue !== 'number' || idleForMsValue < when.idleForMsGte) {
+            return false;
+        }
+    }
+    if (when.parentStatus) {
+        const parentAgentId = (0, hook_bridge_utils_1.readPath)(event, 'data.parentAgentId');
+        if (typeof parentAgentId !== 'string') {
+            return false;
+        }
+        const status = parentStatusByAgent.get(parentAgentId);
+        if (status !== when.parentStatus) {
+            return false;
+        }
+    }
+    return true;
+}
+function buildToolGuardScopeKey(toolName, params, mode) {
+    if (mode === 'tool') {
+        return toolName;
+    }
+    return `${toolName}:${(0, hook_bridge_utils_1.stableJsonStringify)(params)}`;
+}
+function resolveDecisionTemplates(decision, event) {
+    const reasonTemplate = decision.blockReasonTemplate ?? decision.blockReason;
+    if (!reasonTemplate) {
+        return decision;
+    }
+    return {
+        ...decision,
+        blockReason: renderGuardTemplate(reasonTemplate, event),
+    };
+}
+function renderGuardTemplate(template, event) {
+    return template.replace(/\{\{\s*([^}]+)\s*\}\}/g, (_, rawToken) => {
+        const token = rawToken.trim();
+        if (token === 'toolName') {
+            const toolName = (0, hook_bridge_utils_1.readPath)(event, 'data.toolName');
+            return typeof toolName === 'string' ? toolName : '';
+        }
+        if (token === 'eventType') {
+            return event.type;
+        }
+        if (token === 'agentId') {
+            return event.agentId ?? '';
+        }
+        if (token === 'sessionId') {
+            return event.sessionId ?? '';
+        }
+        if (token === 'sessionKey') {
+            return event.sessionKey ?? '';
+        }
+        if (token === 'runId') {
+            return event.runId ?? '';
+        }
+        if (token === 'toolCallId') {
+            return event.toolCallId ?? '';
+        }
+        const pathPrefix = 'path:';
+        if (token.startsWith(pathPrefix)) {
+            const path = token.slice(pathPrefix.length).trim();
+            const value = (0, hook_bridge_utils_1.readPath)(event, path);
+            return value === undefined || value === null ? '' : String(value);
+        }
+        return '';
+    });
+}
+function extractHostFromPath(event, path) {
+    const raw = (0, hook_bridge_utils_1.readPath)(event, path);
+    if (typeof raw !== 'string' || raw.trim() === '') {
+        return undefined;
+    }
+    try {
+        const parsed = new URL(raw);
+        return parsed.hostname.toLowerCase();
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=hook-bridge-tool-guard.js.map

package/dist/runtime/hook-bridge-tool-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-tool-guard.js","sourceRoot":"","sources":["../../src/runtime/hook-bridge-tool-guard.ts"],"names":[],"mappings":";;AAIA,kDA4BC;AAED,kCAiKC;AAED,wDASC;AAED,4DAYC;AAED,kDAmCC;AA/PD,2DAA4G;AAE5G,SAAgB,mBAAmB,CAAC,MAQnC;IACC,OAAO;QACL,OAAO,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC1F,aAAa,EAAE,OAAO;QACtB,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,kBAAkB;QAC7B,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE;YACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CACzB,KAAoB,EACpB,IAA8C,EAC9C,mBAAwC;IAExC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAEvB,IAAI,CAAC,IAAA,uCAAmB,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,IAAA,uCAAmB,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAA,uCAAmB,EAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAA,uCAAmB,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAA,uCAAmB,EAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxE,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,YAAY,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAA,qCAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAA,qCAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC5D,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,MAA+B,EAC/B,IAAgC;IAEhC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,IAAA,uCAAmB,EAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAgB,wBAAwB,CACtC,QAAiC,EACjC,KAAoB;IAEpB,MAAM,cAAc,GAAG,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,WAAW,CAAC;IAC5E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,WAAW,EAAE,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,KAAoB;IACxE,OAAO,QAAQ,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,QAAgB,EAAE,EAAE;QACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAClD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC;QAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,IAAA,4BAAQ,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/runtime/hook-bridge-utils.d.ts

@@ -0,0 +1,11 @@
+import { OpenClawEvent } from '../events/types';
+import { HookBridgeRuleCoalesce } from '../config';
+export declare function matchesScalarOrList(matcher: string | string[] | undefined, value: string | undefined): boolean;
+export declare function matchesDomainList(host: string, domains: string[]): boolean;
+export declare function readPath(event: OpenClawEvent, dottedPath: string): unknown;
+export declare function buildCoalesceKey(ruleId: string, event: OpenClawEvent, coalesce: HookBridgeRuleCoalesce): string | undefined;
+export declare function trimPreview(value: string, limit?: number): string;
+export declare function toErrorMessage(error: unknown): string;
+export declare function stableJsonStringify(value: unknown): string;
+export declare function toCanonicalPath(path: string): string | undefined;
+//# sourceMappingURL=hook-bridge-utils.d.ts.map

package/dist/runtime/hook-bridge-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-utils.d.ts","sourceRoot":"","sources":["../../src/runtime/hook-bridge-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEnD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAaT;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAS1E;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CA6B1E;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,sBAAsB,GAC/B,MAAM,GAAG,SAAS,CAqBpB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAK9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKrD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAmBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMhE"}

package/dist/runtime/hook-bridge-utils.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchesScalarOrList = matchesScalarOrList;
+exports.matchesDomainList = matchesDomainList;
+exports.readPath = readPath;
+exports.buildCoalesceKey = buildCoalesceKey;
+exports.trimPreview = trimPreview;
+exports.toErrorMessage = toErrorMessage;
+exports.stableJsonStringify = stableJsonStringify;
+exports.toCanonicalPath = toCanonicalPath;
+const node_fs_1 = require("node:fs");
+function matchesScalarOrList(matcher, value) {
+    if (matcher === undefined) {
+        return true;
+    }
+    if (value === undefined) {
+        return false;
+    }
+    if (typeof matcher === 'string') {
+        return value === matcher;
+    }
+    return matcher.includes(value);
+}
+function matchesDomainList(host, domains) {
+    const normalizedHost = host.toLowerCase();
+    return domains.some((entry) => {
+        const normalizedEntry = entry.trim().toLowerCase();
+        if (normalizedEntry === '') {
+            return false;
+        }
+        return normalizedHost === normalizedEntry || normalizedHost.endsWith(`.${normalizedEntry}`);
+    });
+}
+function readPath(event, dottedPath) {
+    const segments = dottedPath
+        .split('.')
+        .map((segment) => segment.trim())
+        .filter(Boolean);
+    if (segments.length === 0) {
+        return undefined;
+    }
+    const eventRecord = event;
+    const first = segments[0];
+    let current;
+    if (first in eventRecord) {
+        current = eventRecord[first];
+    }
+    else {
+        const data = event.data;
+        current = data[first];
+    }
+    for (let index = 1; index < segments.length; index += 1) {
+        if (typeof current !== 'object' || current === null) {
+            return undefined;
+        }
+        current = current[segments[index]];
+    }
+    return current;
+}
+function buildCoalesceKey(ruleId, event, coalesce) {
+    const keyFields = coalesce.keyFields ?? ['sessionKey', 'agentId', 'data.toolName', 'event.type'];
+    const values = keyFields
+        .map((field) => {
+        if (field === 'ruleId') {
+            return ruleId;
+        }
+        if (field === 'event.type' || field === 'type') {
+            return event.type;
+        }
+        const value = readPath(event, field);
+        return value === undefined || value === null ? '' : String(value);
+    })
+        .filter((value) => value !== '');
+    if (values.length === 0) {
+        return undefined;
+    }
+    return `${ruleId}::${values.join('::')}`;
+}
+function trimPreview(value, limit = 240) {
+    if (value.length <= limit) {
+        return value;
+    }
+    return `${value.slice(0, limit)}...`;
+}
+function toErrorMessage(error) {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return String(error);
+}
+function stableJsonStringify(value) {
+    return JSON.stringify(normalizeForStableJson(value));
+}
+function normalizeForStableJson(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => normalizeForStableJson(item));
+    }
+    if (typeof value === 'object' && value !== null) {
+        const entries = Object.entries(value).sort(([a], [b]) => a.localeCompare(b));
+        const out = {};
+        for (const [key, nested] of entries) {
+            out[key] = normalizeForStableJson(nested);
+        }
+        return out;
+    }
+    return value;
+}
+function toCanonicalPath(path) {
+    try {
+        return (0, node_fs_1.realpathSync)(path);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=hook-bridge-utils.js.map

package/dist/runtime/hook-bridge-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-utils.js","sourceRoot":"","sources":["../../src/runtime/hook-bridge-utils.ts"],"names":[],"mappings":";;AAIA,kDAgBC;AAED,8CASC;AAED,4BA6BC;AAED,4CAyBC;AAED,kCAKC;AAED,wCAKC;AAED,kDAEC;AAmBD,0CAMC;AApID,qCAAuC;AAIvC,SAAgB,mBAAmB,CACjC,OAAsC,EACtC,KAAyB;IAEzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,KAAK,OAAO,CAAC;IAC3B,CAAC;IAED,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAY,EAAE,OAAiB;IAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,cAAc,KAAK,eAAe,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAoB,EAAE,UAAkB;IAC/D,MAAM,QAAQ,GAAG,UAAU;SACxB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,KAA2C,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,OAAgB,CAAC;IAErB,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;QACzB,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,MAAc,EACd,KAAoB,EACpB,QAAgC;IAEhC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAG,SAAS;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAgB,WAAW,CAAC,KAAa,EAAE,KAAK,GAAG,GAAG;IACpD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;AACvC,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAc;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;QACF,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/runtime/hook-bridge.d.ts

@@ -0,0 +1,33 @@
+import { HookBridgeConfig, PluginConfig } from '../config';
+import { OpenClawEvent } from '../events/types';
+import type { HookBridgeGuardDecisionOutcome, HookBridgeRunner, RuntimeLogger } from './types';
+export declare class HookBridge implements HookBridgeRunner {
+    private readonly config;
+    private readonly logger;
+    private readonly dispatchEngine;
+    private readonly parentStatusByAgent;
+    private readonly lastTriggerByRule;
+    private readonly blockedRetryStateByScope;
+    private readonly approvalCacheByScope;
+    private acceptingEvents;
+    private nextTaskId;
+    private trace;
+    constructor(config: HookBridgeConfig, logger: RuntimeLogger);
+    onEvent(event: OpenClawEvent): void;
+    stop(): Promise<void>;
+    evaluateBeforeToolCall(params: {
+        toolName: string;
+        params: Record<string, unknown>;
+        agentId?: string;
+        sessionId?: string;
+        sessionKey?: string;
+        runId?: string;
+        toolCallId?: string;
+    }): Promise<HookBridgeGuardDecisionOutcome | undefined>;
+    private observeAgentStatus;
+    private canTrigger;
+    private cleanupToolGuardState;
+    private recordToolGuardDecision;
+}
+export declare function createHookBridge(config: PluginConfig, logger: RuntimeLogger): HookBridgeRunner | undefined;
+//# sourceMappingURL=hook-bridge.d.ts.map

package/dist/runtime/hook-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge.d.ts","sourceRoot":"","sources":["../../src/runtime/hook-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAIhB,YAAY,EACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAWhD,OAAO,KAAK,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAM/F,qBAAa,UAAW,YAAW,gBAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;IACtE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAkC;IACpE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoE;IAC7G,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAGvB;IAEd,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,UAAU,CAAK;IAEvB,OAAO,CAAC,KAAK;gBAOD,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa;IAM3D,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IA2C7B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,sBAAsB,CAAC,MAAM,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC;IAmQvD,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,uBAAuB;CA4BhC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,GAAG,gBAAgB,GAAG,SAAS,CAM1G"}