openclaw-plugin-onepassword 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,27 @@
+# Changelog
+
+All notable changes to this project are documented here. The format is based on
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
+adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-09-01
+
+### Added
+
+- Initial release.
+- **In-process store sync**: resolve `op://` references from 1Password using
+  `@1password/sdk` and write them into the OpenClaw shared store via the
+  `secrets.store.set` Gateway RPC, bypassing the exec secret sandbox introduced
+  in OpenClaw v2026.8.1. Runs at Gateway startup and on demand.
+- **`onepassword.sync`** and **`onepassword.status`** gateway methods.
+- **Optional agent tools**: `1password_list_vaults`, `1password_list_items`,
+  `1password_get_item`, `1password_read_field`, and (opt-in) `1password_create_item`,
+  `1password_update_item`, `1password_delete_item`. Concealed fields are redacted
+  by default.
+- **Optional exec resolver mode** via `secretProviderIntegrations` for setups
+  that allowlist 1Password egress and prefer `op://` ids on `SecretRef`s.
+
+[Unreleased]: https://github.com/ioleksiy/openclaw-plugin-onepassword/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/ioleksiy/openclaw-plugin-onepassword/releases/tag/v0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 openclaw-plugin-onepassword contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,298 @@
+# openclaw-plugin-onepassword
+
+[![CI](https://github.com/ioleksiy/openclaw-plugin-onepassword/actions/workflows/ci.yml/badge.svg)](https://github.com/ioleksiy/openclaw-plugin-onepassword/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/openclaw-plugin-onepassword.svg)](https://www.npmjs.com/package/openclaw-plugin-onepassword)
+[![license](https://img.shields.io/npm/l/openclaw-plugin-onepassword.svg)](./LICENSE)
+
+A native [OpenClaw](https://openclaw.ai) plugin that resolves **[1Password](https://1password.com) secrets in-process** inside the Gateway — no `op` CLI, no child process, no exec sandbox — and writes them into OpenClaw's shared secret store. It also exposes optional 1Password vault/item **agent tools**.
+
+> **Why this exists.** OpenClaw **v2026.8.1** introduced a security sandbox for `exec` secret providers that blocks **filesystem writes and network access** during provider execution. That breaks the common pattern of using `op read` as an exec provider (you'll see errors like `sh: cannot open /tmp/op_out.txt` and blocked network calls). This plugin runs **inside the Gateway process**, where the sandbox does not apply, and uses the official [`@1password/sdk`](https://github.com/1Password/onepassword-sdk-js) over HTTPS.
+
+---
+
+## Contents
+
+- [How it works](#how-it-works)
+- [Requirements](#requirements)
+- [Install](#install)
+- [Quick start (store sync — recommended)](#quick-start-store-sync--recommended)
+- [Configuration reference](#configuration-reference)
+- [Agent tools (optional)](#agent-tools-optional)
+- [Gateway methods](#gateway-methods)
+- [Refreshing secrets at runtime](#refreshing-secrets-at-runtime)
+- [Exec resolver mode (advanced)](#exec-resolver-mode-advanced)
+- [Security notes](#security-notes)
+- [Troubleshooting](#troubleshooting)
+- [Development](#development)
+- [Publishing](#publishing)
+- [License](#license)
+
+---
+
+## How it works
+
+There are two ways a plugin can feed secrets to OpenClaw. This plugin ships both, but **the in-process store sync is the recommended path** because it is the only one that reliably bypasses the exec sandbox.
+
+| Mode                         | Runs where             | Bypasses exec sandbox?           | `SecretRef` you write                  | Vault/item paths live in      |
+| ---------------------------- | ---------------------- | -------------------------------- | -------------------------------------- | ----------------------------- |
+| **Store sync** (default)     | In-process (Gateway)   | ✅ Yes                           | `source: "store"`                      | plugin `config.secrets` map   |
+| **Exec resolver** (advanced) | Sandboxed child `node` | ⚠️ Only with egress allowlisting | `source: "exec"` + `pluginIntegration` | the `SecretRef.id` (`op://…`) |
+
+**Store sync**, in one picture:
+
+```
+Gateway start / onepassword.sync
+        │
+        ▼
+ read OP_SERVICE_ACCOUNT_TOKEN (env)
+        │
+        ▼
+ @1password/sdk  ──HTTPS──▶  1Password API
+        │
+        ▼
+ secrets.store.set { name, value }   (in-process Gateway RPC)
+        │
+        ▼
+ OpenClaw shared store  ◀── resolved by SecretRefs with source:"store"
+```
+
+The plugin never writes secrets to `openclaw.json`, environment variables, or disk of its own. Values live only in OpenClaw's store (SQLite, `0600`/`0700` permissions, team scope).
+
+## Requirements
+
+- **OpenClaw** `>= 2026.8.0` (Gateway runs on Node `>= 22.22.3`).
+- A **1Password service account** token — see [1Password service accounts](https://developer.1password.com/docs/service-accounts). The service account must have access to the vaults/items you reference.
+
+## Install
+
+From npm (recommended):
+
+```bash
+openclaw plugins install openclaw-plugin-onepassword
+```
+
+Or from a local checkout:
+
+```bash
+openclaw plugins install ./openclaw-plugin-onepassword
+```
+
+Then provide the service account token to the **Gateway process** via the environment variable (default `OP_SERVICE_ACCOUNT_TOKEN`). Keep it out of `openclaw.json`, docker-compose files, and shell history — use your process manager's secret mechanism (systemd `LoadCredential`, Docker/Kubernetes secrets, etc.).
+
+```bash
+export OP_SERVICE_ACCOUNT_TOKEN="ops_..."
+```
+
+## Quick start (store sync — recommended)
+
+1. **Enable the plugin and map store keys to 1Password references** in `openclaw.json`:
+
+```json
+{
+  "plugins": {
+    "entries": {
+      "onepassword": {
+        "enabled": true,
+        "config": {
+          "serviceAccountTokenEnvVar": "OP_SERVICE_ACCOUNT_TOKEN",
+          "secrets": {
+            "SLACK_BOT_TOKEN": "op://MyVault/SlackBot/bot_token",
+            "SLACK_APP_TOKEN": "op://MyVault/SlackBot/app_token",
+            "OPENAI_API_KEY": "op://MyVault/OpenAI/credential"
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+Store keys must match `^[A-Z][A-Z0-9_]{0,127}$` (OpenClaw store-id grammar). Values are standard [1Password secret references](https://developer.1password.com/docs/cli/secret-references/): `op://Vault/Item[/Section]/Field`.
+
+2. **Reference those store keys** anywhere OpenClaw accepts a `SecretRef`, using `source: "store"`:
+
+```json
+{
+  "channels": {
+    "slack": {
+      "accounts": {
+        "myworkspace": {
+          "botToken": { "source": "store", "id": "SLACK_BOT_TOKEN" },
+          "appToken": { "source": "store", "id": "SLACK_APP_TOKEN" }
+        }
+      }
+    }
+  },
+  "agents": {
+    "defaults": {
+      "model": {
+        "providers": {
+          "openai": {
+            "apiKey": { "source": "store", "id": "OPENAI_API_KEY" }
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+3. **Start the Gateway.** On startup the plugin fetches each reference from 1Password and writes it into the store; the referencing channels/providers then initialize with resolved credentials. Because store values persist, subsequent restarts are covered even before the first sync completes.
+
+See [`examples/`](./examples) for complete config files.
+
+## Configuration reference
+
+All keys live under `plugins.entries.onepassword.config`.
+
+| Key                         | Type    | Default                         | Description                                                                                                                   |
+| --------------------------- | ------- | ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
+| `serviceAccountTokenEnvVar` | string  | `"OP_SERVICE_ACCOUNT_TOKEN"`    | Name of the environment variable holding the service account token.                                                           |
+| `secrets`                   | object  | `{}`                            | Map of **store key → `op://…` reference**. Store keys must match `^[A-Z][A-Z0-9_]{0,127}$`.                                   |
+| `syncOnStartup`             | boolean | `true`                          | Fetch `secrets` from 1Password and write to the store at Gateway startup.                                                     |
+| `failFastOnStartup`         | boolean | `false`                         | If `true`, a startup sync failure throws and prevents startup. If `false`, log and fall back to last-known-good store values. |
+| `integrationName`           | string  | `"openclaw-plugin-onepassword"` | Integration name reported to 1Password audit logs.                                                                            |
+| `requestTimeoutMs`          | number  | `15000`                         | Per-operation timeout for 1Password SDK calls.                                                                                |
+| `tools.enabled`             | boolean | `false`                         | Register the read-only 1Password agent tools.                                                                                 |
+| `tools.allowWrite`          | boolean | `false`                         | Also register create/update/delete tools. Requires `tools.enabled`.                                                           |
+
+The plugin **hardcodes no vault names, item paths, or field names**. The only 1Password-specific configuration is the env var name and the `secrets` map you provide.
+
+## Agent tools (optional)
+
+Set `tools.enabled: true` to expose in-process tools to the agent. Read tools redact concealed field values by default.
+
+| Tool                    | Requires `allowWrite` | Description                                                                |
+| ----------------------- | --------------------- | -------------------------------------------------------------------------- |
+| `1password_list_vaults` |                       | List vaults accessible to the service account.                             |
+| `1password_list_items`  |                       | List item overviews in a vault.                                            |
+| `1password_get_item`    |                       | Get a full item (concealed fields redacted unless `includeSecrets: true`). |
+| `1password_read_field`  |                       | Resolve a single `op://…` reference to its value.                          |
+| `1password_create_item` | ✅                    | Create a new item.                                                         |
+| `1password_update_item` | ✅                    | Update an existing item.                                                   |
+| `1password_delete_item` | ✅                    | Delete an item.                                                            |
+
+```json
+{
+  "plugins": {
+    "entries": {
+      "onepassword": {
+        "enabled": true,
+        "config": { "tools": { "enabled": true, "allowWrite": false } }
+      }
+    }
+  }
+}
+```
+
+## Gateway methods
+
+Both require the `operator.admin` scope.
+
+- **`onepassword.sync`** — re-fetch every configured secret from 1Password and write it into the store. Returns `{ written, total, resolveErrors, storeErrors }`.
+- **`onepassword.status`** — non-secret health/config summary: `{ version, serviceAccountTokenEnvVar, tokenPresent, syncOnStartup, managedStoreKeys, toolsEnabled, toolsWriteEnabled }`.
+
+## Refreshing secrets at runtime
+
+- **Rotate a value in 1Password**, then call **`onepassword.sync`** (or restart the Gateway). The plugin re-fetches and writes fresh values; `secrets.store.set` triggers a live runtime refresh so dependent channels/providers pick up the new value without a full restart.
+- `openclaw secrets reload` re-reads the **store**; run `onepassword.sync` first if you need the store repopulated from 1Password.
+
+> Prefer native `openclaw secrets reload` to re-fetch directly from 1Password? Use the [exec resolver mode](#exec-resolver-mode-advanced), which OpenClaw re-invokes on reload — at the cost of requiring egress allowlisting.
+
+## Exec resolver mode (advanced)
+
+The plugin also declares a `secretProviderIntegrations` entry so it can act as a plugin-managed **exec** secret provider using standard `op://` ids:
+
+```json
+{
+  "secrets": {
+    "providers": {
+      "op": {
+        "source": "exec",
+        "pluginIntegration": { "pluginId": "onepassword", "integrationId": "op" }
+      }
+    }
+  },
+  "channels": {
+    "slack": {
+      "accounts": {
+        "myworkspace": {
+          "botToken": {
+            "source": "exec",
+            "provider": "op",
+            "id": "op://MyVault/SlackBot/bot_token"
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+**Caveat:** this runs OpenClaw's resolver as a **sandboxed child `node` process** (`command: "${node}"`). Under the v2026.8.1 sandbox its network is blocked, so it can only reach the 1Password API if you allowlist egress for secret resolution:
+
+```json
+{
+  "secrets": {
+    "egressProxy": {
+      "enabled": true,
+      "allowedHosts": ["my.1password.com", "my.1password.eu", "my.1password.ca"]
+    }
+  }
+}
+```
+
+Use the host that matches your 1Password account region. If your environment cannot allow this egress, use the [store sync](#quick-start-store-sync--recommended) mode instead. The exec resolver reads the token from `OP_SERVICE_ACCOUNT_TOKEN` (override the env var name with `OP_RESOLVER_TOKEN_ENV_VAR`).
+
+## Security notes
+
+- **The token is the crown jewel.** Anyone with the service account token has the service account's access. Scope the service account to the minimum vaults required, and inject the token via your platform's secret mechanism — never commit it.
+- **No plaintext secrets in config.** The plugin only reads an env var name and `op://` references; resolved values live only in OpenClaw's store.
+- **Plugin code runs in your Gateway process** with full Gateway privileges (this is true of every OpenClaw plugin). Review the source before installing.
+- **Write tools are opt-in** (`tools.allowWrite`) and **concealed fields are redacted** by read tools unless `includeSecrets: true`.
+- Report vulnerabilities per [SECURITY.md](./SECURITY.md).
+
+## Troubleshooting
+
+| Symptom                                     | Likely cause / fix                                                                                                    |
+| ------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| `... token not found` at startup            | The env var named by `serviceAccountTokenEnvVar` is unset on the Gateway process.                                     |
+| `SECRETS_PROVIDER_DEGRADED` for a store ref | The store key hasn't been populated yet — run `onepassword.sync`, or check the startup logs for resolve errors.       |
+| Resolve error `NOT_FOUND`                   | The `op://` reference is wrong or the service account can't access that vault/item/field.                             |
+| Exec resolver returns nothing               | Sandbox is blocking network — add your 1Password host to `secrets.egressProxy.allowedHosts`, or switch to store sync. |
+
+## Development
+
+```bash
+npm install --ignore-scripts   # openclaw's preinstall gate is skipped here
+npm run build                  # tsc -> dist/
+npm run typecheck
+npm run lint
+npm test
+```
+
+> `--ignore-scripts` is used because the `openclaw` dev dependency runs a Node-version preinstall check; the plugin itself only needs its type definitions to build and test.
+
+## Releasing
+
+Releases are **automated on push to `main`**. The `Release` workflow publishes to
+npm (with [provenance](https://docs.npmjs.com/generating-provenance-statements))
+and creates a GitHub release **only when the version in `package.json` is not yet
+on npm** — ordinary commits are a no-op.
+
+To cut a release:
+
+```bash
+npm run release:prepare -- <x.y.z>   # bumps the 3 version files + rolls CHANGELOG
+# edit CHANGELOG.md for the new section, then:
+npm run verify
+git commit -am "chore(release): v<x.y.z>" && git push origin main
+```
+
+The workflow publishes the package and tags `v<x.y.z>`. It requires an `NPM_TOKEN`
+repository secret (an npm **automation** token). See [CONTRIBUTING.md → Releasing](./CONTRIBUTING.md#releasing)
+and [AGENTS.md](./AGENTS.md) for details and the semver policy.
+
+## License
+
+[MIT](./LICENSE)

package/dist/config.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Plugin configuration parsing and validation.
+ *
+ * The plugin intentionally hardcodes no vault names, item paths, or field
+ * names. Everything 1Password-specific is supplied by the operator: the
+ * service-account token comes from an environment variable, and the
+ * `op://Vault/Item/Field` references live in the operator's `openclaw.json`.
+ */
+/** Store keys use OpenClaw's env-var grammar. */
+export declare const STORE_KEY_PATTERN: RegExp;
+/** 1Password secret reference grammar, e.g. `op://Vault/Item/field`. */
+export declare const OP_REFERENCE_PATTERN: RegExp;
+export declare const DEFAULT_TOKEN_ENV_VAR = "OP_SERVICE_ACCOUNT_TOKEN";
+export declare const DEFAULT_INTEGRATION_NAME = "openclaw-plugin-onepassword";
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 15000;
+export interface OnePasswordToolsConfig {
+    enabled: boolean;
+    allowWrite: boolean;
+}
+export interface OnePasswordPluginConfig {
+    serviceAccountTokenEnvVar: string;
+    integrationName: string;
+    requestTimeoutMs: number;
+    syncOnStartup: boolean;
+    failFastOnStartup: boolean;
+    /** Map of OpenClaw store key -> 1Password secret reference. */
+    secrets: Record<string, string>;
+    tools: OnePasswordToolsConfig;
+}
+export declare class ConfigError extends Error {
+    readonly name = "ConfigError";
+}
+/** Validate a single `storeKey -> op://...` secrets mapping. */
+export declare function parseSecretsMap(value: unknown): Record<string, string>;
+/**
+ * Parse and validate the plugin config, applying defaults. Throws
+ * {@link ConfigError} on any invalid input so misconfiguration surfaces at
+ * startup instead of at first secret resolution.
+ */
+export declare function parsePluginConfig(input: unknown): OnePasswordPluginConfig;
+/**
+ * Read the service account token from the configured environment variable.
+ * Returns `undefined` when the variable is unset or empty so callers can
+ * decide whether that is fatal (startup sync) or merely degrading (tools).
+ */
+export declare function readServiceAccountToken(config: Pick<OnePasswordPluginConfig, "serviceAccountTokenEnvVar">, env?: NodeJS.ProcessEnv): string | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,QAA4B,CAAC;AAE3D,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,QAAsB,CAAC;AAExD,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAChE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,yBAAyB,EAAE,MAAM,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,sBAAsB,CAAC;CAC/B;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,SAAyB,IAAI,iBAAiB;CAC/C;AAiCD,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBtE;AAYD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAgBzE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,EAClE,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAMpB"}

package/dist/config.js

@@ -0,0 +1,104 @@
+/**
+ * Plugin configuration parsing and validation.
+ *
+ * The plugin intentionally hardcodes no vault names, item paths, or field
+ * names. Everything 1Password-specific is supplied by the operator: the
+ * service-account token comes from an environment variable, and the
+ * `op://Vault/Item/Field` references live in the operator's `openclaw.json`.
+ */
+/** Store keys use OpenClaw's env-var grammar. */
+export const STORE_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;
+/** 1Password secret reference grammar, e.g. `op://Vault/Item/field`. */
+export const OP_REFERENCE_PATTERN = /^op:\/\/[^/]+\/.+/;
+export const DEFAULT_TOKEN_ENV_VAR = "OP_SERVICE_ACCOUNT_TOKEN";
+export const DEFAULT_INTEGRATION_NAME = "openclaw-plugin-onepassword";
+export const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
+export class ConfigError extends Error {
+    name = "ConfigError";
+}
+function asRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return {};
+    }
+    return value;
+}
+function optionalString(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new ConfigError(`"${field}" must be a non-empty string.`);
+    }
+    return value.trim();
+}
+function optionalBoolean(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "boolean") {
+        throw new ConfigError(`"${field}" must be a boolean.`);
+    }
+    return value;
+}
+function optionalPositiveNumber(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+        throw new ConfigError(`"${field}" must be a positive number.`);
+    }
+    return value;
+}
+/** Validate a single `storeKey -> op://...` secrets mapping. */
+export function parseSecretsMap(value) {
+    const raw = asRecord(value);
+    const out = {};
+    for (const [key, ref] of Object.entries(raw)) {
+        if (!STORE_KEY_PATTERN.test(key)) {
+            throw new ConfigError(`secrets store key "${key}" is invalid; keys must match ${STORE_KEY_PATTERN.source} (uppercase env-var grammar).`);
+        }
+        if (typeof ref !== "string" || !OP_REFERENCE_PATTERN.test(ref)) {
+            throw new ConfigError(`secrets["${key}"] must be a 1Password reference like "op://Vault/Item/field"; got ${JSON.stringify(ref)}.`);
+        }
+        out[key] = ref;
+    }
+    return out;
+}
+function parseTools(value) {
+    const raw = asRecord(value);
+    const enabled = optionalBoolean(raw.enabled, "tools.enabled") ?? false;
+    const allowWrite = optionalBoolean(raw.allowWrite, "tools.allowWrite") ?? false;
+    if (allowWrite && !enabled) {
+        throw new ConfigError('"tools.allowWrite" requires "tools.enabled" to be true.');
+    }
+    return { enabled, allowWrite };
+}
+/**
+ * Parse and validate the plugin config, applying defaults. Throws
+ * {@link ConfigError} on any invalid input so misconfiguration surfaces at
+ * startup instead of at first secret resolution.
+ */
+export function parsePluginConfig(input) {
+    const raw = asRecord(input);
+    return {
+        serviceAccountTokenEnvVar: optionalString(raw.serviceAccountTokenEnvVar, "serviceAccountTokenEnvVar") ??
+            DEFAULT_TOKEN_ENV_VAR,
+        integrationName: optionalString(raw.integrationName, "integrationName") ?? DEFAULT_INTEGRATION_NAME,
+        requestTimeoutMs: optionalPositiveNumber(raw.requestTimeoutMs, "requestTimeoutMs") ??
+            DEFAULT_REQUEST_TIMEOUT_MS,
+        syncOnStartup: optionalBoolean(raw.syncOnStartup, "syncOnStartup") ?? true,
+        failFastOnStartup: optionalBoolean(raw.failFastOnStartup, "failFastOnStartup") ?? false,
+        secrets: parseSecretsMap(raw.secrets),
+        tools: parseTools(raw.tools),
+    };
+}
+/**
+ * Read the service account token from the configured environment variable.
+ * Returns `undefined` when the variable is unset or empty so callers can
+ * decide whether that is fatal (startup sync) or merely degrading (tools).
+ */
+export function readServiceAccountToken(config, env = process.env) {
+    const token = env[config.serviceAccountTokenEnvVar];
+    if (typeof token !== "string" || token.trim().length === 0) {
+        return undefined;
+    }
+    return token.trim();
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,iDAAiD;AACjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAkBjD,MAAM,OAAO,WAAY,SAAQ,KAAK;IACX,IAAI,GAAG,aAAa,CAAC;CAC/C;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,WAAW,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,WAAW,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,WAAW,CAAC,IAAI,KAAK,8BAA8B,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,sBAAsB,GAAG,iCAAiC,iBAAiB,CAAC,MAAM,+BAA+B,CAClH,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,WAAW,CACnB,YAAY,GAAG,sEAAsE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,KAAK,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,IAAI,KAAK,CAAC;IAChF,IAAI,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CAAC,yDAAyD,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO;QACL,yBAAyB,EACvB,cAAc,CAAC,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;YAC1E,qBAAqB;QACvB,eAAe,EACb,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,IAAI,wBAAwB;QACpF,gBAAgB,EACd,sBAAsB,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;YAChE,0BAA0B;QAC5B,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,IAAI;QAC1E,iBAAiB,EAAE,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,IAAI,KAAK;QACvF,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAkE,EAClE,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * openclaw-plugin-onepassword
+ *
+ * Native OpenClaw plugin that resolves 1Password secrets *in-process* (inside
+ * the Gateway, not as a sandboxed child) and writes them into OpenClaw's shared
+ * secret store, plus optional agent tools for vault/item operations.
+ *
+ * Why in-process: OpenClaw v2026.8.1 sandboxes exec secret providers, blocking
+ * filesystem writes and network access — which breaks `op read` and any other
+ * network-dependent exec resolver. Running inside the Gateway process avoids the
+ * sandbox entirely, so the official `@1password/sdk` can reach the 1Password API
+ * over HTTPS normally.
+ */
+declare const _default: Omit<{
+    id: string;
+    name: string;
+    description: string;
+    kind?: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginDefinition["kind"];
+    configSchema?: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginConfigSchema | (() => import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginConfigSchema);
+    reload?: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginDefinition["reload"];
+    nodeHostCommands?: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginDefinition["nodeHostCommands"];
+    securityAuditCollectors?: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginDefinition["securityAuditCollectors"];
+    register: NonNullable<import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginDefinition["register"]>;
+}, "configSchema"> & {
+    configSchema: import("openclaw/plugin-sdk/plugin-entry").OpenClawPluginConfigSchema;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;AAwFH,wBAqHG"}