openclaw.plugin.json

{
  "id": "openclaw-agent-receipts",
  "name": "Agent Receipts",
  "description": "Cryptographically signed audit trail for agent actions",
  "contracts": {
    "tools": ["ar_query_receipts", "ar_verify_chain"]
  },
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "properties": {
      "daemonDbPath": {
        "type": "string",
        "description": "Path to the agent-receipts daemon's SQLite receipt database. Defaults to the daemon's platform default (AGENTRECEIPTS_DB env var or ~/.local/share/agent-receipts/receipts.db)."
      },
      "daemonPublicKeyPath": {
        "type": "string",
        "description": "Path to the agent-receipts daemon's Ed25519 public key (PEM). Used by ar_verify_chain to verify receipt signatures. Defaults to the daemon's platform default (AGENTRECEIPTS_KEY env var + .pub, or ~/.local/share/agent-receipts/signing.key.pub)."
      },
      "taxonomyPath": {
        "type": "string",
        "description": "Path to custom taxonomy mapping JSON"
      },
      "enabled": {
        "type": "boolean",
        "default": true
      },
      "parameterDisclosure": {
        "oneOf": [
          { "type": "boolean" },
          { "type": "string", "enum": ["high"] },
          { "type": "array", "items": { "type": "string" } }
        ],
        "description": "Deprecated under daemon mode — parameter disclosure is now controlled by the daemon's --parameter-disclosure flag. Setting this emits a startup warning and has no effect."
      },
      "dbPath": {
        "type": "string",
        "description": "Deprecated (Flavor A). Ignored in daemon mode — use daemonDbPath instead."
      },
      "keyPath": {
        "type": "string",
        "description": "Deprecated (Flavor A). Ignored in daemon mode — use daemonPublicKeyPath instead."
      },
      "daemonForwarding": {
        "oneOf": [
          { "type": "boolean" },
          {
            "type": "object",
            "additionalProperties": false,
            "properties": {
              "enabled": { "type": "boolean" }
            }
          }
        ],
        "description": "Deprecated (Flavor A). Ignored — forwarding is always enabled in daemon mode."
      }
    }
  },
  "uiHints": {
    "daemonDbPath": {
      "label": "Daemon Database Path",
      "placeholder": "~/.local/share/agent-receipts/receipts.db",
      "advanced": true
    },
    "daemonPublicKeyPath": {
      "label": "Daemon Public Key Path",
      "placeholder": "~/.local/share/agent-receipts/signing.key.pub",
      "advanced": true
    },
    "taxonomyPath": {
      "label": "Custom Taxonomy",
      "placeholder": "path/to/taxonomy.json",
      "advanced": true
    },
    "enabled": {
      "label": "Enable Attestations",
      "help": "Forward tool calls to the agent-receipts daemon for signing and storage"
    },
    "parameterDisclosure": {
      "label": "Parameter Disclosure (deprecated)",
      "help": "No effect in daemon mode. Use --parameter-disclosure on the daemon instead.",
      "advanced": true
    }
  }
}