{"_id":"@dexgate/openclaw-trusted-mode","_rev":"15-93d811893b05cd9495d8eb0c9e1dba9b","name":"@dexgate/openclaw-trusted-mode","dist-tags":{"latest":"1.0.18"},"versions":{"1.0.7":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.7","keywords":["openclaw","adapter","local-hardening","policy-checks","workflow-controls","dexgate"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.7","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"970df50894e1623b6d7e85d1499c6e2f52a86a69","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.7.tgz","fileCount":25,"integrity":"sha512-/lT1DWH8+QWhbDQbqJr+F526DKhTDf1cYE+n2S1PsEo/s0qRB9LTm4hcnyD9AaV8DiFdi2+HY5KC3tX3llFn9Q==","signatures":[{"sig":"MEYCIQDYzu50ClX5ttV1FLiVuyehwQdvTVC21h4S8vyn0nbgdAIhAO/TT/dr1gWIX4jG/wSFymYBg2sYou7I6rVgsZldKCjQ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":105327},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"a811dbfbc9b2d661b153451a48a7d18a7a965840","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"npm run build -- --pretty false && node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/darkelogix/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.8.2","description":"Free local hard gate for OpenClaw (developer-free edit + constrained shell) + optional paid DexGate PDP/Passport path","directories":{},"_nodeVersion":"20.20.2","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.7_1784467234622_0.5699622447788903","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.8","keywords":["openclaw","adapter","local-hardening","policy-checks","workflow-controls","dexgate"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.8","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"79e083b711945a6f541c936d9b0c3e44c495c34b","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.8.tgz","fileCount":28,"integrity":"sha512-Jmj1KfVPYaVQPc31SGKl+ddwmqu2I/16naHf1ettrSoT9AJxY7iX1FeQ3vKGHKd2B1gqauIIgWNhjoomp0a9Wg==","signatures":[{"sig":"MEUCIECaHBuFMqnPd0LTN1aGnvuq9qRXCl11nLV1VO188lDeAiEAzXM65t9ZFlaphb+lPGEJWFIYEDZs4TJj1rX0hsPBbAw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":108128},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"a811dbfbc9b2d661b153451a48a7d18a7a965840","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","postinstall":"node scripts/postinstall.js","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"npm run build -- --pretty false && node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"tmdarke","email":"mike@darkelogix.com"},"openclaw":{"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/darkelogix/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.8.2","description":"Free local hard gate for OpenClaw (developer-free edit + constrained shell) + optional paid DexGate PDP/Passport path","directories":{},"_nodeVersion":"20.20.2","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.8_1784477440771_0.11953639063164578","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.9","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.9","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"b538d482bddf811dfd5a3215bdc8cd50c5a655f0","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.9.tgz","fileCount":26,"integrity":"sha512-3bhfDft2lVfWDEiExkiueH6xBklNekl6Eln0ya0AFFO0rLcEggNAwBWfj4R141ujZc9zzEkoBCKFOHvdg99GWQ==","signatures":[{"sig":"MEYCIQD9hAxn4V7HhrrsAtXyDrg5IuU/t/0uksK8SHznw+Jq0QIhANPUormA4wyhQ1AucCm1GvgzP/wPtufcwFHY+WZH7WfW","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84516},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"5ff05e8b18c65e0090580100960d87fd98d6b7cf","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.8.2","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"20.20.2","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.9_1784573945512_0.7567664986882252","host":"s3://npm-registry-packages-npm-production"}},"1.0.10":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.10","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.10","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"bfe7745b49a783051a2d6f6ee48292ddf3c40525","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.10.tgz","fileCount":26,"integrity":"sha512-+7nbRDCOuxE1MnLQ/q7YK6RXiBm3OzrRCVh+EbhbDQQRAkOM4PLk7lY5PxpejfDS4yJUQmxBQFhiyElI9feIyw==","signatures":[{"sig":"MEUCIFQyOMzFQaVGlVKa2QJSNU3Yw7O1YVUA0LAhkiFG1WW8AiEArDc4gMSqWCguLbR7KZdAPSxBt31BaBS+qu3z48e6sKM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":86579},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"dff0c1c7bfbfa7145672ac930eb49459af25fbad","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.8.2","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"20.20.2","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.10_1784581614785_0.9599261749652201","host":"s3://npm-registry-packages-npm-production"}},"1.0.11":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.11","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.11","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"a29669db6ddaff04d906b10e7e92cf729a116e0a","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.11.tgz","fileCount":26,"integrity":"sha512-IzgsLMZ5Rm1DbLdPXWr+x1cQPfQdv/YN7Jk5D+z0Ztjo88eT68JXbeo8azzc5EHI5cP8inRRtu1aoeoklEEp+A==","signatures":[{"sig":"MEYCIQDa+TlbwsXMcoGhL7wZM2x9o0SUlL8RyuGGjt63ST8TxgIhAIBKsqWHTfY90KhrGwVwrJGbaievXqhyR1e/s4pZFTWZ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":87373},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"dff0c1c7bfbfa7145672ac930eb49459af25fbad","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.11_1784839132759_0.32184521922947407","host":"s3://npm-registry-packages-npm-production"}},"1.0.12":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.12","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.12","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"061cc0330fe7bab8eb91daa0d34f12e818731c03","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.12.tgz","fileCount":29,"integrity":"sha512-KLg2OVvG9EfkyXailcXP646zGIfqHmY+0jHEhyDB29aEA/aqWqXNmqNjjSB2UmioFOMvMpBXHxY5jFLNfaXhNg==","signatures":[{"sig":"MEUCIFNAVt9QqX59Pe4GezTg/fOiqhGuiSBmQXnVTaWAnyF+AiEAkN1Ve57NBOTJ33tXwSrlsdwnNzbIg5TBrZzHFpP7wNk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":107022},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"288d1350895a15a5b71b6d2a3bf7463946b7ed50","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.12_1785081860515_0.682903149899698","host":"s3://npm-registry-packages-npm-production"}},"1.0.13":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.13","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.13","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"9ebecb1b0680f903a94f9301d843264b9ab3e747","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.13.tgz","fileCount":29,"integrity":"sha512-Y2Nh2lNOubu45MUwpw/i/LWvtBEb5CY/B8pY0JGBlw5UQJUzdrIkz1DcIVIeekCvgUroHusVXJnlgLmLSnmYww==","signatures":[{"sig":"MEQCIFX/OMYJ3kl07ZgR7d3WXVEoF/9Irm88sEmTxGg07BjUAiB6D417RAW+mkeC+Ttgfcpu5zqV/Jo3xVZpS0oeHARXPw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":116058},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"f6188933426d19d13ad84a31b6e287eee4a082b4","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.13_1785102044508_0.1592849910772829","host":"s3://npm-registry-packages-npm-production"}},"1.0.14":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.14","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.14","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"dac8d35e9df0d119a5cd6451db3e45dc6a8b6584","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.14.tgz","fileCount":29,"integrity":"sha512-2PFIloGs0o+nytpKIm8odDVNppf0dFsBsR7hdcNeHbFBv41CWXrIS8fddjJAvOEx7cfh70ccvGGYm5oSkubiAA==","signatures":[{"sig":"MEUCIBf1ClCBO50FEY4ZWlagrTUDpW6jJixloecF2HV+1DYaAiEAhj4lsbk613EnkpcgisjwghTaAIDYARBBOLFzTL0b9rg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":117463},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"19f0c559be1a254a71f38cc57310d2d26fa1e726","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.14_1785119287488_0.15573862290501617","host":"s3://npm-registry-packages-npm-production"}},"1.0.15":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.15","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.15","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"554c80c4957077170f50005c0b35038cdb135f3e","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.15.tgz","fileCount":30,"integrity":"sha512-BZEyEOx5rJiXhKRC8+YFCksXROYwanRZSDHGRnMvaXKcUdm8LCfwIEY4Tr2xiupAY396biVH4LGrLyDOYP5J7A==","signatures":[{"sig":"MEUCIQDXWcigDTnJfLkeA25eXHMZu2/RMKwzLQow1m2d4lc3dwIgB0EW3HIrr1ZyrLSGC0KIkvRhgPseuwekeDBYDc+grWc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":122150},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"e264bdee17e72628f090c0630a08bc22082bdaf5","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.15_1785153211200_0.44092369867525316","host":"s3://npm-registry-packages-npm-production"}},"1.0.16":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.16","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.16","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"27ae58e3ac5417b3908db5086a8089b4fa026e8d","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.16.tgz","fileCount":30,"integrity":"sha512-3+OGMScKiwtbSJxUyJTNI0TWiiGgCMkUzkCSI/ptUaxh7qQliTFO5Vt9GrqJWmjOg4a7wsPmHNtW0+RDwkuK1g==","signatures":[{"sig":"MEYCIQDi0XUP3foRiyrJXC+50tq7kPx1flJ8ArnAig4wncAZegIhALlioOvyF/XQo35+9ZCYsJCyAzqXtLd7fa7MOhy/eRbc","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":129481},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"0f9e4b2a181a975f7e2dc9fb83e1287486ad8a21","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode plugin with standalone hardening and optional dexgate-backed governance","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.16_1785156894009_0.029042579091556275","host":"s3://npm-registry-packages-npm-production"}},"1.0.17":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.17","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"license":"MIT","_id":"@dexgate/openclaw-trusted-mode@1.0.17","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"homepage":"https://dexgate.ai/openclaw/","bugs":{"url":"https://dexgate.ai/contact/"},"bin":{"dexgate-assess":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-check":"dist/cli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","openclaw-trusted-mode-configure":"dist/configureCli.js"},"dist":{"shasum":"9cfa1d257ac63911fe23149090591b1b74980c5a","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.17.tgz","fileCount":31,"integrity":"sha512-LDUJCdDuBqVBHE5XJvSqwLnc5zF1v05c6xYHX07TyB2dVaeps6WWOXkQVLjNQKabJ9LN6HOz3fuvLEQaFuEKbA==","signatures":[{"sig":"MEUCIQDdjC03SuLP7tUBhiDNNFjoVpqDElL7YSsvfOQyFohzVAIgXojD4bHS6q+unHHshft8gErjLDTZN7/Ybzcf4OnNlAg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":154696},"main":"dist/index.js","exports":{".":"./dist/index.js"},"gitHead":"1b9889ec74001133d0c8e33f8d96c31aab87412f","scripts":{"test":"vitest run","build":"tsc","watch":"tsc --watch","dexgate-assess":"node dist/localHardeningCheckCli.js","clawhub:validate":"clawhub package validate .","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","test-pack-matrix":"python scripts/run_test_pack_matrix.py","adversarial-check":"node scripts/run_adversarial_checks.js","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","startup-health-check":"node scripts/verify_startup_health.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","local-hardening-check":"node dist/localHardeningCheckCli.js","performance-benchmark":"node scripts/run_performance_benchmark.js","verify-security-gates":"node scripts/verify_security_gates.js","trusted-mode-configure":"node dist/configureCli.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-changelog-version":"node scripts/verify_changelog_version.js","verify-release-artifacts":"node scripts/verify_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","verify-live-governed-path":"node scripts/verify_live_governed_path.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","verify-decision-middleware":"node scripts/verify_decision_middleware_path.js","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","generate-third-party-notices":"node scripts/generate_third_party_notices.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","generate-security-release-index":"node scripts/generate_security_release_index.js"},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"openclaw":{"build":{"openclawVersion":"2026.4.8"},"compat":{"pluginApi":">=2026.3.24"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"},"extensions":["dist/index.js"]},"repository":{"url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git","type":"git"},"_npmVersion":"10.9.8","description":"MIT-licensed OpenClaw Trusted Mode: free local allowlist by default; opt-in MIDDLEWARE path to @dexgate/decision-middleware + SDE PDP","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.4","typescript":"^5.0.0","@types/node":"^20.0.0"},"_npmOperationalInternal":{"tmp":"tmp/openclaw-trusted-mode_1.0.17_1785360731930_0.2843903494306652","host":"s3://npm-registry-packages-npm-production"}},"1.0.18":{"name":"@dexgate/openclaw-trusted-mode","version":"1.0.18","description":"MIT-licensed OpenClaw Trusted Mode: free local allowlist by default; opt-in MIDDLEWARE path to @dexgate/decision-middleware + SDE PDP","license":"MIT","main":"dist/index.js","exports":{".":"./dist/index.js"},"bin":{"openclaw-trusted-mode-check":"dist/cli.js","openclaw-trusted-mode-configure":"dist/configureCli.js","openclaw-local-hardening-check":"dist/localHardeningCheckCli.js","dexgate-assess":"dist/localHardeningCheckCli.js"},"homepage":"https://dexgate.ai/openclaw/","repository":{"type":"git","url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git"},"bugs":{"url":"https://dexgate.ai/contact/"},"keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"publishConfig":{"access":"public"},"openclaw":{"extensions":["dist/index.js"],"compat":{"pluginApi":">=2026.3.24"},"build":{"openclawVersion":"2026.4.8"},"install":{"npmSpec":"@dexgate/openclaw-trusted-mode","clawhubSpec":"@dexgate/openclaw-trusted-mode","defaultChoice":"npm","minHostVersion":">=2026.4.8"}},"scripts":{"build":"tsc","watch":"tsc --watch","test":"vitest run","verify-release-artifacts":"node scripts/verify_release_artifacts.js","verify-changelog-version":"node scripts/verify_changelog_version.js","generate-release-artifacts":"node scripts/generate_release_artifacts.js","collect-security-evidence":"node scripts/collect_security_evidence.js","generate-third-party-notices":"node scripts/generate_third_party_notices.js","generate-security-release-index":"node scripts/generate_security_release_index.js","verify-security-gates":"node scripts/verify_security_gates.js","verify-plugin-schema-contract":"node scripts/verify_plugin_schema_contract.js","bundle-release-evidence":"node scripts/bundle_release_evidence.js","adversarial-check":"node scripts/run_adversarial_checks.js","startup-health-check":"node scripts/verify_startup_health.js","clean-room-smoke":"powershell -ExecutionPolicy Bypass -File scripts/run_clean_room_smoke.ps1","performance-benchmark":"node scripts/run_performance_benchmark.js","test-pack-matrix":"python scripts/run_test_pack_matrix.py","update-compatibility-matrix":"node scripts/update_compatibility_matrix.js","verify-compatibility-matrix":"node scripts/update_compatibility_matrix.js --check","enforce-cert-quota":"node scripts/enforce_cert_quota.js","trusted-mode-check":"node dist/cli.js","trusted-mode-configure":"node dist/configureCli.js","local-hardening-check":"node dist/localHardeningCheckCli.js","dexgate-assess":"node dist/localHardeningCheckCli.js","trusted-mode-check:mock":"node scripts/mock_pdp.js","verify-live-governed-path":"node scripts/verify_live_governed_path.js","verify-decision-middleware":"node scripts/verify_decision_middleware_path.js","lint-docs-terminology":"python scripts/lint_docs_terminology.py","clawhub:validate":"clawhub package validate ."},"devDependencies":{"@types/node":"^20.0.0","typescript":"^5.0.0","vitest":"^4.1.4"},"_id":"@dexgate/openclaw-trusted-mode@1.0.18","gitHead":"20f3b09bc3bf67f10a69c02ed53ede8cde1068a1","_nodeVersion":"22.23.1","_npmVersion":"10.9.8","dist":{"integrity":"sha512-YRjApdNW9c9qBkSQOKCnxSAsQynwof/xXX6IaQyxBCb4/6ady3u4Y+54kv4SUoSTVbF/z1HQ0VxQBakH/H0BrQ==","shasum":"bc58ca2ed80020cd3aaccd458c6223105377dd61","tarball":"https://registry.npmjs.org/@dexgate/openclaw-trusted-mode/-/openclaw-trusted-mode-1.0.18.tgz","fileCount":33,"unpackedSize":180930,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIHmDPCQr3o4EZV6QKVq6UudCukQ/1bURncN4warCHXStAiBfzLHWuDe8eyBWXwu03NPuv+gUiCLGqaRJ8ziJjSRBrQ=="}]},"_npmUser":{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},"directories":{},"maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/openclaw-trusted-mode_1.0.18_1785427062367_0.5055429937914357"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-19T13:20:34.379Z","modified":"2026-07-30T15:57:42.987Z","1.0.7":"2026-07-19T13:20:34.766Z","1.0.8":"2026-07-19T16:10:40.915Z","1.0.9":"2026-07-20T18:59:05.635Z","1.0.10":"2026-07-20T21:06:54.937Z","1.0.11":"2026-07-23T20:38:52.898Z","1.0.12":"2026-07-26T16:04:20.644Z","1.0.13":"2026-07-26T21:40:44.665Z","1.0.14":"2026-07-27T02:28:07.627Z","1.0.15":"2026-07-27T11:53:31.368Z","1.0.16":"2026-07-27T12:54:54.165Z","1.0.17":"2026-07-29T21:32:12.078Z","1.0.18":"2026-07-30T15:57:42.519Z"},"bugs":{"url":"https://dexgate.ai/contact/"},"license":"MIT","homepage":"https://dexgate.ai/openclaw/","keywords":["openclaw","trusted-mode","policy-enforcement","governance","security","dexgate","clawhub","local-hardening"],"repository":{"type":"git","url":"git+https://github.com/dexgate-ai/openclaw-trusted-mode.git"},"description":"MIT-licensed OpenClaw Trusted Mode: free local allowlist by default; opt-in MIDDLEWARE path to @dexgate/decision-middleware + SDE PDP","maintainers":[{"name":"dexgateops","email":"dexgate.operations@dexgate.ai"},{"name":"tmdarke","email":"mike@darkelogix.com"}],"readme":"# @dexgate/openclaw-trusted-mode\n\n[![npm version](https://img.shields.io/npm/v/%40dexgate%2Fopenclaw-trusted-mode)](https://www.npmjs.com/package/@dexgate/openclaw-trusted-mode)\n[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](./LICENSE)\n[![CI](https://github.com/dexgate-ai/openclaw-trusted-mode/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/dexgate-ai/openclaw-trusted-mode/actions/workflows/ci.yml)\n\nOpenClaw plugin that enforces Trusted Mode policy checks on `before_tool_call`.\n\n## Links\n\n| | |\n|---|---|\n| **Product** | [dexgate.ai](https://dexgate.ai) |\n| **OpenClaw quickstart** | [dexgate.ai/docs/openclaw/quickstart](https://dexgate.ai/docs/openclaw/quickstart/) |\n| **Pricing** | [dexgate.ai/pricing](https://dexgate.ai/pricing/) |\n| **Customer console** | [dexgate.ai/console](https://dexgate.ai/console/) |\n| **GitHub** | [github.com/dexgate-ai/openclaw-trusted-mode](https://github.com/dexgate-ai/openclaw-trusted-mode) |\n| **npm** | [@dexgate/openclaw-trusted-mode](https://www.npmjs.com/package/@dexgate/openclaw-trusted-mode) |\n| **X** | [@dexgateAI](https://x.com/dexgateAI) |\n| **Contact** | [dexgate.ai/contact](https://dexgate.ai/contact/) |\n\nFirst-time setup in this repo: [`START_HERE.md`](./START_HERE.md).  \nTerminology: [`GLOSSARY.md`](./GLOSSARY.md). Docs index: [`docs/README.md`](./docs/README.md).\n\n## Acronym Expansions\n\n- `SDE`: Strategic Decision Engine\n- `PDP`: Policy Decision Point\n- `PEP`: Policy Enforcement Point\n- `WSL`: Windows Subsystem for Linux\n- `CI`: Continuous Integration\n\n## Quick start (free)\n\n```bash\nnpm install @dexgate/openclaw-trusted-mode\n# or\nopenclaw plugins install npm:@dexgate/openclaw-trusted-mode\n```\n\nThen follow the hosted guide: [OpenClaw quickstart](https://dexgate.ai/docs/openclaw/quickstart/).  \nRepo walkthrough: [`START_HERE.md`](./START_HERE.md).\n\nInstall uses the **`latest`** dist-tag only (no separate `pilot` channel).\n\n**What you get immediately (free / default):** a local hard gate on tool calls—safer defaults, **no network**, no account required.  \n**When you are ready:** the same plugin can switch to the full **governed** path (Decision Middleware + SDE PDP) for real policy decisions, evidence, and multi-environment control. See [Free vs governed](#free-vs-governed-authorization-modes) below.\n\n---\n\n## Free vs governed (authorization modes)\n\nDexgate Trusted Mode is designed as a **smooth upgrade**, not a rewrite. You install once; you choose how strict authorization is.\n\n| Mode | Default? | What you get | Network |\n|------|----------|--------------|---------|\n| **ALLOWLIST_ONLY** | **Yes (free)** | Local hard gate: only tools you list may run. Everything else is blocked in-process. | None |\n| **MIDDLEWARE** | Opt-in | Full governed path: OpenClaw → **Decision Middleware** → **SDE PDP**. Allow / deny / constrain with `trace_id` + reconstructible evidence. Fail-closed if the stack is unreachable. | Local or private services only |\n| **PDP** | Opt-in (legacy) | Direct call to SDE PDP `/v1/authorize` (still supported). Prefer **MIDDLEWARE** for new setups. | Direct to PDP |\n\n### What free mode gives you today\n\nWith **`toolPolicyMode: \"ALLOWLIST_ONLY\"`** (the default):\n\n- Safer out-of-box defaults (e.g. `read_file`, `list_files`, `search_files`)\n- High-risk tools (shell, writes, deletes, …) stay off unless you deliberately expand the list\n- Works offline; nothing leaves the machine\n- Same plugin surface you will use when you turn on governance later\n\nThis is the right place to start for local agents, demos, and “just make OpenClaw less reckless.”\n\n### What you gain on the full governed path\n\nWhen you enable **`MIDDLEWARE`** and run Decision Middleware + SDE PDP:\n\n| Capability | Free (allowlist) | Governed (middleware + PDP) |\n|------------|------------------|-----------------------------|\n| Block unknown tools | Yes (static list) | Yes (policy decision) |\n| Context-aware allow / deny | No | Yes (tool + args + environment + trust signals) |\n| **`trace_id` + evidence** per call | No | Yes (reconstructible proposal, policy version, risk signals) |\n| Fail-closed if decision path is down | N/A (local only) | Yes (default) |\n| Dev / staging / production profiles | Manual list only | Environment-aware policy via SDE |\n| **Action Passports** | No | Middleware `/v1/decide` returns `passport: null` (field reserved in the v0.1 envelope). Entitled SDE runtime workflows issue, verify, expire, and revoke Passports separately (protected-executor path)—not via the middleware decide response itself. |\n\nStack:\n\n```text\nOpenClaw  →  Decision Middleware (:8787 /v1/decide)  →  SDE PDP (:8001 /v1/authorize)\n```\n\n| Component | Role | Package / location |\n|-----------|------|--------------------|\n| **This plugin** | OpenClaw PEP (`before_tool_call`) | `@dexgate/openclaw-trusted-mode` (you are here) |\n| **Decision Middleware** | Contract + evidence + fail-closed client to PDP | `@dexgate/decision-middleware` (`c:\\dev\\dexgate-decision-middleware`) |\n| **SDE PDP** | Authoritative policy (signed packs, entitlements) | Licensed `sde-enterprise` runtime |\n\n**Important:** Free mode does **not** require the decision middleware package or the SDE PDP. Those are only for **opt-in** `MIDDLEWARE` (or legacy `PDP`) mode. This adapter talks to the middleware over **HTTP** (no hard npm dependency), so free installs stay lightweight and offline-safe.\n\nLive verification runbook: [`docs/LIVE_GOVERNED_PATH_VERIFICATION.md`](./docs/LIVE_GOVERNED_PATH_VERIFICATION.md).  \nProduct messaging draft for the site: [`docs/FREE_TO_GOVERNED_MESSAGING.md`](./docs/FREE_TO_GOVERNED_MESSAGING.md).  \nQA website copy blocks: [`docs/QA_SITE_COPY_FREE_TO_GOVERNED.md`](./docs/QA_SITE_COPY_FREE_TO_GOVERNED.md).  \nControlled release checklist: [`RELEASE_CHECKLIST.md`](./RELEASE_CHECKLIST.md).\n\n### Quick upgrade (minimal config change)\n\n**Before (free):**\n\n```json\n{\n  \"toolPolicyMode\": \"ALLOWLIST_ONLY\",\n  \"allowedTools\": [\"read_file\", \"list_files\", \"search_files\"]\n}\n```\n\n**After (governed via middleware):**\n\n```json\n{\n  \"toolPolicyMode\": \"MIDDLEWARE\",\n  \"decisionMiddlewareUrl\": \"http://127.0.0.1:8787/v1/decide\",\n  \"environment\": \"dev\",\n  \"failClosed\": true,\n  \"enforcementPosture\": \"fail-closed\",\n  \"policyVariant\": \"guard-pro.v2026.02\",\n  \"decisionSku\": \"openclaw.trusted_mode.authorize.v1\",\n  \"tenantId\": \"trial-tenant\",\n  \"gatewayId\": \"gw-dev\"\n}\n```\n\nThat is the essential switch: **`ALLOWLIST_ONLY` → `MIDDLEWARE`**, plus the decide URL and environment.  \nEnv equivalent: `DEXGATE_TOOL_POLICY_MODE=MIDDLEWARE` and optional `DEXGATE_DECISION_MIDDLEWARE_URL`.\n\n**Startup order for governed mode:**\n\n1. Start **SDE PDP** (e.g. `http://127.0.0.1:8001`)  \n2. Start **Decision Middleware** with `SDE_PDP_URL=http://127.0.0.1:8001/v1/authorize` (port **8787**)  \n3. Point this plugin at the middleware as above  \n4. Confirm: logs show `decision=…` and `trace_id=…`\n\n```text\n[Trusted Mode] middleware tool=read_file decision=allow trace_id=… reason=…\n[Trusted Mode] middleware tool=shell decision=deny trace_id=… reason=…\n```\n\n```bash\n# After middleware + PDP are up:\nnpm run build\nnpm run verify-live-governed-path\n```\n\nOffline shape check (mock middleware, no PDP): `npm run verify-decision-middleware`\n\n### Free vs governed at a glance\n\n```text\nFREE (default)                         GOVERNED (upgrade)\n─────────────────                      ──────────────────────────────\nPlugin only                            Plugin + Decision Middleware + SDE PDP\nStatic allowlist                       Real policy evaluation\nNo trace / evidence                    trace_id + evidence per tool call\nNo network                             Private/local decision services\nGood for day-one safety                Good for teams, prod controls, audit trail\n```\n\nYou keep the same OpenClaw plugin either way. Upgrade is a **mode change**, not a new product install for the adapter itself. Licensed SDE runtime / commercial terms apply to the governed control plane—see [Licensing](#licensing) and the [customer console](https://dexgate.ai/console).\n\n---\n\n## npm Package\n\nInstall the public MIT adapter/plugin package with:\n\n```bash\nnpm install @dexgate/openclaw-trusted-mode\n```\n\n## ClawHub discovery\n\nClawHub is OpenClaw's plugin discovery surface. See [CLAWHUB.md](./CLAWHUB.md).\n\n```bash\nopenclaw plugins search \"dexgate\"\nopenclaw plugins install clawhub:@dexgate/openclaw-trusted-mode\n# or npm:\nopenclaw plugins install npm:@dexgate/openclaw-trusted-mode\n```\n\n## What `npm install` gives you\n\n`npm install @dexgate/openclaw-trusted-mode` gives you the MIT adapter/plugin layer and standalone hardening flow only. It does not grant access to the proprietary SDE runtime, enterprise deployment packs, or governed tenant entitlements.\n\n## Authorization paths (reference)\n\n| Mode | Who | Network | Config keys |\n|------|-----|---------|-------------|\n| **ALLOWLIST_ONLY** (default) | Free / local | None | `allowedTools` |\n| **MIDDLEWARE** (preferred governed) | Teams running Decision Middleware + SDE | `POST …/v1/decide` | `decisionMiddlewareUrl`, `environment`, … |\n| **PDP** (legacy governed) | Direct SDE | `POST …/v1/authorize` | `pdpUrl`, `tenantId`, `gatewayId`, `environment` |\n\n### Free / local path\n\n```json\n{\n  \"toolPolicyMode\": \"ALLOWLIST_ONLY\",\n  \"allowedTools\": [\"read_file\", \"list_files\", \"search_files\"]\n}\n```\n\nNo PDP, no middleware, no network. Tools not on the allowlist are blocked.\n\n### Governed path via decision middleware (preferred)\n\n1. Run SDE PDP (e.g. `http://127.0.0.1:8001`).  \n2. Run Decision Middleware (port **8787**, `SDE_PDP_URL` → PDP authorize).  \n3. Set `toolPolicyMode` to **`MIDDLEWARE`** (see [Quick upgrade](#quick-upgrade-minimal-config-change)).\n\nEnv overrides:\n\n| Variable | Purpose |\n|----------|---------|\n| `DEXGATE_TOOL_POLICY_MODE` | `ALLOWLIST_ONLY` \\| `MIDDLEWARE` \\| `PDP` |\n| `DEXGATE_DECISION_MIDDLEWARE_URL` / `DEXGATE_MIDDLEWARE_URL` | Decide endpoint (default `http://127.0.0.1:8787/v1/decide`) |\n| `PDP_AUTH_TOKEN` | Only for legacy direct PDP path |\n\nFail-closed: if the middleware is down or returns an error, the tool call is **blocked** when `failClosed` is true (default).\n\nFull live checklist: [`docs/LIVE_GOVERNED_PATH_VERIFICATION.md`](./docs/LIVE_GOVERNED_PATH_VERIFICATION.md).\n\n### Need licensed SDE / enterprise?\n\nObtain your licensed SDE runtime from the [dexgate customer console](https://dexgate.ai/console). Use this npm package as the OpenClaw adapter, then connect Decision Middleware + SDE for governed authorization and evidence.\n\nThe npm package contains the MIT plugin files and standalone hardening logic only.  \nIt does not include the proprietary `sde-enterprise` runtime.\n\n## Licensing\n\n`openclaw-trusted-mode` is licensed under the MIT License.\n\n`sde-enterprise`, including the SDE PDP runtime and related enterprise deployment assets, is proprietary software and is not covered by the plugin's MIT license. Use, copying, modification, distribution, or deployment of the SDE runtime requires a separate commercial license or written permission from Automated Decision Systems, LLC.\n\nFirst-time setup (download/install/configure/test/run): [`START_HERE.md`](./START_HERE.md).\nTroubleshooting decision tree: [`SELF_SERVICE_FAQ.md`](./SELF_SERVICE_FAQ.md).\nOrg defaults and support metadata are delivered through the customer console and the licensed runtime-secrets package.\nOne-command setup is generated per customer in the console Downloads page alongside the licensed runtime bundle.\nFor full install/reinstall/uninstall/startup/config/troubleshooting guidance across both plugin and SDE-PDP, see [`OPERATIONS_GUIDE.md`](./OPERATIONS_GUIDE.md).\nFor a simpler operator runbook, see [`RUNBOOK_NON_TECHNICAL.md`](./RUNBOOK_NON_TECHNICAL.md).\nFor go-live gating, use [`PRODUCTION_READINESS_CHECKLIST.md`](./PRODUCTION_READINESS_CHECKLIST.md).\nFor a pre-filled starting point, use [`PRODUCTION_READINESS_CHECKLIST_EXAMPLE.md`](./PRODUCTION_READINESS_CHECKLIST_EXAMPLE.md).\nFor alternate port deployments, use [`PRODUCTION_READINESS_CHECKLIST_EXAMPLE_ALT_PORTS.md`](./PRODUCTION_READINESS_CHECKLIST_EXAMPLE_ALT_PORTS.md).\nFor public launch readiness, use [`PUBLIC_RELEASE_READINESS_CHECKLIST.md`](./PUBLIC_RELEASE_READINESS_CHECKLIST.md).\nFor end-to-end public release execution steps (what/where/how), use [`PUBLIC_RELEASE_PROCESS_RUNBOOK.md`](./PUBLIC_RELEASE_PROCESS_RUNBOOK.md).\nFor certified runtime support status, see [`COMPATIBILITY_MATRIX.md`](./COMPATIBILITY_MATRIX.md).\nFor vulnerability reporting and security posture, see [`SECURITY.md`](./SECURITY.md).\nFor release hardening process, see [`RELEASE_OPERATIONS.md`](./RELEASE_OPERATIONS.md).\nFor security evidence indexing, see [`SECURITY_EVIDENCE_BUNDLE.md`](./SECURITY_EVIDENCE_BUNDLE.md).\nFor performance baseline evidence, see [`PERFORMANCE_BASELINE.md`](./PERFORMANCE_BASELINE.md).\nFor governed release declaration, see [`RELEASE_v1.0.0.md`](./RELEASE_v1.0.0.md).\n\n## What it does\n\n- Free standalone mode defaults to local hardening with a minimal allowlist:\n  - `read_file`\n  - `list_files`\n  - `search_files`\n- Blocks high-risk tools such as `exec`, file writes/edits, and deletes unless you deliberately widen the policy.\n- Sends tool call context to a Policy Decision Point (PDP) endpoint.\n- Denies execution when PDP returns a deny decision.\n- Optionally enforces returned constraints.\n- Supports fail-closed (default) or fail-open behavior.\n\n## Free vs Paid\n\nThe product boundary should be explicit at install time:\n\n- `npm install` gets you the adapter/plugin and standalone hardening path\n- governed mode requires a separately licensed SDE deployment\n- the customer console is the supported way to obtain governed runtime artifacts and deployment instructions\n\n\n- Free standalone use:\n  - useful as a local hardening layer\n  - works without `sde-enterprise`\n  - best for \"read/search only\" OpenClaw sessions\n- Paid / enterprise use:\n  - PDP-backed authorization and deny decisions\n  - local integrity-checked policy packs\n  - tenant entitlements and governed rollout\n  - local integrity evidence and compatibility certification\n\n## Build and test\n\n```powershell\nnpm run build\nnpm test\nnpm run adversarial-check\nnpm run performance-benchmark\nnpm run test-pack-matrix\n```\n\n## Trusted Mode Check\n\n```bash\nnpm run trusted-mode-check\nnpm run trusted-mode-check -- --json\n```\n\n`trusted-mode-check` is a PDP-backed validation path. It is useful for SDE-integrated deployments, not for standalone free-mode validation.\n\nJSON output status values:\n- `ENFORCED_OK`\n- `LOCKDOWN_ONLY`\n- `UNSAFE`\n\nThe JSON output also includes the exact governed context it checked:\n- `pdp_url`\n- `tenant_id`\n- `gateway_id`\n- `environment`\n\nUse those fields first when a governed check fails. If dexgate is reachable but denies the request, confirm the workspace is licensed and the tenant, gateway, and environment values match the dexgate runtime you installed.\n\nLocal integrity check inputs:\n- `attestation/trusted_mode_attest_v1.json`\n- `attestation/trusted_mode_attest_v1.sig` (SHA-256 checksum file; retained filename for compatibility)\n\nRuntime/certification env vars:\n- `CERTIFICATION_STATUS` (`CERTIFIED_ENFORCED` | `LOCKDOWN_ONLY` | `UNSUPPORTED`)\n- `OPENCLAW_VERSION`\n- `EXPECTED_STATUS` (optional CI assertion override)\n- `PDP_AUTH_TOKEN` or `DEXGATE_PDP_AUTH_TOKEN` (optional bearer token for licensed PDP authentication)\n\n## Local install in OpenClaw (WSL)\n\n```bash\nopenclaw plugins install /mnt/c/path/to/openclaw-trusted-mode\nopenclaw plugins info openclaw-trusted-mode\n```\n\nFor a standalone free-mode config, start from [`openclaw.user-config.entry.example.json`](./openclaw.user-config.entry.example.json).\n\nFor governed mode, install/register the plugin first, then write the OpenClaw host config with:\n\n```bash\nopenclaw-trusted-mode-configure \\\n  --tenantId dexgate \\\n  --gatewayId gw-dev \\\n  --environment dev \\\n  --pdpUrl http://10.90.0.6:8001/v1/authorize \\\n  --pdpAuthToken <runtime-token> \\\n  --certificationStatus LOCKDOWN_ONLY\n```\n\nThis command updates `~/.openclaw/openclaw.json`, adds `openclaw-trusted-mode` to `plugins.allow`, and writes the governed plugin settings under `plugins.entries.openclaw-trusted-mode`.\n\n## Plugin config\n\nSee [`openclaw.plugin.json`](./openclaw.plugin.json) for config schema and defaults, including:\n\n- `pdpUrl`\n- `pdpAuthToken`\n- `policyVariant`\n- `pdpTimeoutMs`\n- `failClosed`\n- `tenantId`\n- `certificationStatus`\n- `openclawVersion`\n- `certifiedOpenClawVersions`\n- `highRiskTools`\n- `toolPolicyMode`\n- `allowedTools`\n- `requireTenantId`\n- `allowedTenantIds`\n- `contextCurator`\n\nRecommended standalone free-mode baseline:\n\n```json\n{\n  \"toolPolicyMode\": \"ALLOWLIST_ONLY\",\n  \"allowedTools\": [\"read_file\", \"list_files\", \"search_files\"],\n  \"failClosed\": true,\n  \"certificationStatus\": \"LOCKDOWN_ONLY\"\n}\n```\n\nRecommended paid / PDP-backed baseline:\n\n```json\n{\n  \"toolPolicyMode\": \"PDP\",\n  \"pdpUrl\": \"http://localhost:8001/v1/authorize\",\n  \"pdpAuthToken\": \"<runtime-token>\",\n  \"tenantId\": \"trial-tenant\",\n  \"gatewayId\": \"gw-smoke-1\",\n  \"environment\": \"prod\",\n  \"failClosed\": true,\n  \"certificationStatus\": \"LOCKDOWN_ONLY\"\n}\n```\n\n## Compatibility Matrix Automation\n\n```bash\nnpm run update-compatibility-matrix\nnpm run verify-compatibility-matrix\n```\n\n## Security Gates\n\n```bash\nnpm run collect-security-evidence\nnpm run generate-security-release-index\nnpm run verify-security-gates\n```\n\n## Schema Contract and Evidence Bundle\n\n```bash\nnpm run verify-plugin-schema-contract\nnpm run bundle-release-evidence\n```\n\n## Startup Health Verification\n\n```bash\nnpm run startup-health-check -- --skip-plugin-check\n```\n","readmeFilename":"README.md"}