openclaw.plugin.json

{
  "id": "openclaw-agent-receipts",
  "name": "Agent Receipts",
  "description": "Cryptographically signed audit trail for agent actions",
  "contracts": {
    "tools": ["ar_query_receipts", "ar_verify_chain"]
  },
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "properties": {
      "dbPath": {
        "type": "string",
        "description": "Path to SQLite receipt database"
      },
      "keyPath": {
        "type": "string",
        "description": "Path to Ed25519 key pair JSON file"
      },
      "taxonomyPath": {
        "type": "string",
        "description": "Path to custom taxonomy mapping JSON"
      },
      "enabled": {
        "type": "boolean",
        "default": true
      },
      "parameterPreview": {
        "oneOf": [
          { "type": "boolean" },
          { "type": "string", "enum": ["high"] },
          { "type": "array", "items": { "type": "string" } }
        ],
        "description": "Selectively disclose action parameters in receipts"
      }
    }
  },
  "uiHints": {
    "dbPath": {
      "label": "Database Path",
      "placeholder": "~/.openclaw/agent-receipts/receipts.db",
      "advanced": true
    },
    "keyPath": {
      "label": "Key Path",
      "placeholder": "~/.openclaw/agent-receipts/keys.json",
      "advanced": true
    },
    "taxonomyPath": {
      "label": "Custom Taxonomy",
      "placeholder": "path/to/taxonomy.json",
      "advanced": true
    },
    "enabled": {
      "label": "Enable Attestations",
      "help": "Generate signed receipts for every tool call"
    },
    "parameterPreview": {
      "label": "Parameter Preview",
      "help": "Disclose specific action parameters in receipts. false = hashes only (default), true = all, \"high\" = high-risk only, or an array of action type strings. Listed fields are stored verbatim — do not list fields that may contain secrets."
    }
  }
}