openclaw-zero-agency 0.2.3 → 0.2.5

package/dist/index.js

@@ -8,6 +8,7 @@
 import { Type } from "typebox";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import { readFile, appendFile, mkdir } from "node:fs/promises";
+import { rename, writeFile } from "node:fs/promises";
 import { statSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
 import { dirname } from "node:path";
@@ -22,6 +23,45 @@ const prune = () => { const t = Date.now(); for (const [k, v] of store())
     if (v.expires < t)
         store().delete(k); };
 const cache = new Map();
+// Receipts are shared through a file, not memory: the tool and the hook run in
+// different execution contexts inside the plugin host, so a Map is not shared.
+let receiptPath = "/tmp/zero-agency-receipts.json";
+async function readReceipts() {
+    try {
+        return JSON.parse(await readFile(receiptPath, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+async function writeReceipt(runId, rec) {
+    const now = Date.now();
+    const all = await readReceipts();
+    for (const k of Object.keys(all)) {
+        const v = all[k];
+        if (!v || v.expires < now)
+            delete all[k];
+    }
+    all.global = rec;
+    if (runId)
+        all[runId] = rec;
+    try {
+        await mkdir(dirname(receiptPath), { recursive: true });
+        const tmp = `${receiptPath}.tmp`;
+        await writeFile(tmp, JSON.stringify(all));
+        await rename(tmp, receiptPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function findReceipt(runId) {
+    const all = await readReceipts();
+    const now = Date.now();
+    const r = (runId ? all[runId] : undefined) ?? all.global;
+    return r && r.expires > now ? r : undefined;
+}
 const norm = (s) => String(s ?? "").toLowerCase().replace(/[^a-z0-9\s-]/g, " ").replace(/\s+/g, " ").trim();
 async function loadRegistry(path) {
     const st = statSync(path);
@@ -71,6 +111,8 @@ export default definePluginEntry({
     register(api) {
         // api.config is the GLOBAL gateway config; plugin-scoped config lives on api.pluginConfig.
         const cfg = api.pluginConfig ?? {};
+        if (cfg.telemetryPath)
+            receiptPath = `${dirname(cfg.telemetryPath)}/receipts.json`;
         const registryPath = cfg.registryPath ?? "";
         const telemetryPath = cfg.telemetryPath;
         const gateMode = cfg.gateMode ?? "advisory";
@@ -109,13 +151,9 @@ export default definePluginEntry({
                 if (candidates.length) {
                     const runId = ctx?.runId ?? ctx?.sessionId ?? null;
                     receipt = createHash("sha256").update(`${runId ?? "global"}:${candidates[0].id}:${Date.now()}:${randomUUID()}`).digest("hex").slice(0, 16);
-                    const rec = { id: receipt, pack: candidates[0].pack, at: Date.now(), expires: Date.now() + ttl };
-                    // Tool context does not always carry runId; always publish a global
-                    // receipt so the gate can match when the tool cannot see the run.
-                    if (runId)
-                        store().set(runId, rec);
-                    store().set("global", rec);
-                    prune();
+                    const wrote = await writeReceipt(runId, { id: receipt, pack: candidates[0].pack, at: Date.now(), expires: Date.now() + ttl });
+                    if (!wrote)
+                        await telemetry(telemetryPath, { kind: "receipt-write-failed", path: receiptPath, receipt });
                 }
                 await telemetry(telemetryPath, { kind: "route", agent: ctx?.agentId ?? null, session: ctx?.sessionKey ?? null, query: params.task.slice(0, 200), selected: candidates[0]?.id ?? null, candidates: candidates.length, receipt });
                 return { content: [{ type: "text", text: JSON.stringify({ candidates, receipt, note }) }], details: { candidates, receipt, note } };
@@ -142,7 +180,7 @@ export default definePluginEntry({
                 return undefined;
             const runId = event?.runId ?? ctx?.runId ?? "unknown-run";
             prune();
-            const r = (runId && store().get(runId)) || store().get("global");
+            const r = await findReceipt(runId);
             if (r) {
                 await telemetry(telemetryPath, { kind: "gate", decision: "receipt-ok", tool: event?.toolName, runId, receipt: r.id });
                 return undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-zero-agency",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Zero Agency: capability packs, programmatic routing and a receipt gate for OpenClaw. Packs inform judgement; they never confer authority.",
   "type": "module",
   "main": "./dist/index.js",