mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-22 08:24:03 +00:00
cbf72e5e26
Summary:
- Add the bundled Policy plugin with policy-backed doctor checks for channel conformance.
- Add `openclaw policy check` attestations, accepted-attestation drift checks, and opt-in doctor repair.
- Add policy CLI docs, generated plugin inventory/reference docs, and changelog credit.
Verification:
- node --import tsx scripts/sync-plugin-versions.ts --check
- pnpm plugins:inventory:check
- pnpm docs:list
- git diff --check origin/main..HEAD
- node scripts/run-vitest.mjs extensions/policy/src/policy-state.test.ts extensions/policy/src/cli.test.ts extensions/policy/src/doctor/register.test.ts src/flows/bundled-health-checks.test.ts src/cli/program/register.maintenance.test.ts
- codex review --uncommitted; accepted finding fixed, reran clean
- codex review --commit HEAD
- GitHub CI for 4e09b067f4: CI, Workflow Sanity, CodeQL, CodeQL Critical Quality, OpenGrep PR Diff, Real behavior proof, Dependency Change Awareness all green; reran failed Windows Node setup job successfully
Co-authored-by: Gio Della-Libera <giodl73@gmail.com>
Co-authored-by: Gio Della-Libera <giodl@microsoft.com>
42 lines
1.1 KiB
JSON
42 lines
1.1 KiB
JSON
{
|
|
"id": "policy",
|
|
"name": "Policy",
|
|
"description": "Adds policy-backed doctor checks for workspace conformance.",
|
|
"activation": {
|
|
"onStartup": true,
|
|
"onCommands": ["doctor", "policy"]
|
|
},
|
|
"commandAliases": [
|
|
{
|
|
"name": "policy",
|
|
"kind": "cli"
|
|
}
|
|
],
|
|
"configSchema": {
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"enabled": {
|
|
"type": "boolean",
|
|
"description": "Enable policy doctor checks even before policy.jsonc exists."
|
|
},
|
|
"workspaceRepairs": {
|
|
"type": "boolean",
|
|
"description": "Allow doctor --fix to repair policy-managed workspace settings."
|
|
},
|
|
"expectedHash": {
|
|
"type": "string",
|
|
"description": "Optional sha256 hash for hash-locking the approved policy artifact."
|
|
},
|
|
"expectedAttestationHash": {
|
|
"type": "string",
|
|
"description": "Optional sha256 hash for the last accepted clean policy check."
|
|
},
|
|
"path": {
|
|
"type": "string",
|
|
"description": "Optional policy.jsonc path. Relative paths resolve from the active workspace."
|
|
}
|
|
}
|
|
}
|
|
}
|