feat(gatekeeper): thin pre-tool hook adapter, integration tests, and architecture alignment #4

Merged

clawdie merged 4 commits from feat/gatekeeper-hook-adapter into main 2026-09-23 19:21:23 +02:00

Conversation 0 Commits 4 Files changed 3 +457 -195

clawdie commented 2026-09-23 15:02:03 +02:00

Owner

Copy link

Summary

Implements the thin Hermes pre_tool_call adapter and aligns documentation with Colibri canonical ownership:

1. Translation-Only Hook Adapter (scripts/clawdie-gatekeeper-hook.py):

   • Pure translation layer: zero duplicated threshold math, zero regex matchers, zero token parsers.
   • Translates Hermes pre_tool_call JSON to Colibri clawdie.gatekeeper-eval.v1 request.
   • Invokes colibri-gatekeeper eval via stdin/stdout IPC.
   • Translates verdicts: allow -> {} (proceed); require_token and block -> {"decision": "block", "reason": "..."}.
   • Fail-closed on evaluator timeout, missing binary, or malformed input/output.

2. Integration Test Suite (tests/test_clawdie_gatekeeper_hook.py):

   • 7 unit/integration tests verifying non-sensitive tool bypass, fail-closed handling on missing/malformed evaluator, and live integration against colibri-gatekeeper binary (safe commands allowed, destructive commands blocked without token, unknown commands blocked fail-closed, valid bound grants allowed, and grant action mismatch attacks blocked).

3. Documentation Realignment (docs/security/clawdie-gatekeeper.md):

   • Establishes Colibri as the canonical owner of contracts, deterministic policies, token verification, and offline allowlist.
   • Positions Hermes strictly as an edge client/adapter.
   • Preserves FreeBSD-specific Vaultwarden deployment lifecycle (sentinel, nullfs, readiness probing).

### Summary Implements the thin Hermes pre_tool_call adapter and aligns documentation with Colibri canonical ownership: 1. **Translation-Only Hook Adapter (`scripts/clawdie-gatekeeper-hook.py`)**: - Pure translation layer: zero duplicated threshold math, zero regex matchers, zero token parsers. - Translates Hermes `pre_tool_call` JSON to Colibri `clawdie.gatekeeper-eval.v1` request. - Invokes `colibri-gatekeeper eval` via stdin/stdout IPC. - Translates verdicts: `allow` -> `{}` (proceed); `require_token` and `block` -> `{"decision": "block", "reason": "..."}`. - Fail-closed on evaluator timeout, missing binary, or malformed input/output. 2. **Integration Test Suite (`tests/test_clawdie_gatekeeper_hook.py`)**: - 7 unit/integration tests verifying non-sensitive tool bypass, fail-closed handling on missing/malformed evaluator, and live integration against `colibri-gatekeeper` binary (safe commands allowed, destructive commands blocked without token, unknown commands blocked fail-closed, valid bound grants allowed, and grant action mismatch attacks blocked). 3. **Documentation Realignment (`docs/security/clawdie-gatekeeper.md`)**: - Establishes Colibri as the canonical owner of contracts, deterministic policies, token verification, and offline allowlist. - Positions Hermes strictly as an edge client/adapter. - Preserves FreeBSD-specific Vaultwarden deployment lifecycle (sentinel, nullfs, readiness probing).

clawdie added 1 commit 2026-09-23 15:02:03 +02:00

feat(gatekeeper): thin pre-tool hook adapter, integration tests, and architecture alignment 8e3768348f

clawdie added 1 commit 2026-09-23 16:40:14 +02:00

test(gatekeeper): align integration test with v2 bound grants and isolated runtime secret f58ec6567d

clawdie added 1 commit 2026-09-23 17:23:11 +02:00

docs(gatekeeper): document v2 bound grants, replay protection, and UID separation model 3da53ed41d

clawdie added 1 commit 2026-09-23 17:41:24 +02:00

fix(gatekeeper): resolve COLIBRI_BIN dynamically and inject CLAWDIE_RUNTIME_DIR for FreeBSD non-root tests cc549ba84d

clawdie merged commit 1d0782559f into main 2026-09-23 19:21:23 +02:00

clawdie deleted branch feat/gatekeeper-hook-adapter 2026-09-23 19:21:23 +02:00

clawdie referenced this pull request from a commit 2026-09-23 19:21:23 +02:00

Merge pull request 'feat(gatekeeper): thin pre-tool hook adapter, integration tests, and architecture alignment' (#4) from feat/gatekeeper-hook-adapter into main

clawdie referenced this pull request from a commit 2026-10-20 12:29:44 +02:00

Merge pull request #4 from NousResearch/fix-terminal

clawdie referenced this pull request from a commit 2026-10-20 12:29:47 +02:00

tui: make URLs clickable + hover-highlight in any terminal (#25071)

clawdie referenced this pull request from a commit 2026-10-20 12:29:47 +02:00

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

clawdie referenced this pull request from a commit 2026-10-20 12:29:48 +02:00

fix(anthropic): skip mcp_ prefix on outgoing tool schemas when already prefixed

clawdie referenced this pull request from a commit 2026-10-20 12:29:48 +02:00

fix(docker): add /usr/bin/tini compatibility shim for legacy wrappers (#34192) (#34382)

clawdie referenced this pull request from a commit 2026-10-20 12:29:49 +02:00

fix(desktop): deduplicate sidebar rows by compression lineage in mergeSessionPage (#43487)

clawdie referenced this pull request from a commit 2026-10-20 12:29:53 +02:00

fix(agent): clear archived parent's activity labels after rotation (re-review #4)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/hermes-bsd!4

No description provided.