Rampart sits in the execution path. Install it, run rampart quickstart, and it wires the right protection path for Claude Code, Codex, Cline, or OpenClaw before risky tool calls run.
diff --git a/docs-site/index.md b/docs-site/index.md
index a4739b3c..1a511693 100644
--- a/docs-site/index.md
+++ b/docs-site/index.md
@@ -78,7 +78,7 @@ Rampart also scans tool **responses** — if your agent reads a file containing
```bash
# Install
-brew tap peg/rampart && brew install rampart
+brew install peg/tap/rampart
# Claude Code
rampart setup claude-code
@@ -131,19 +131,19 @@ intercept: {
mcp: "MCP Proxy"
}
-engine: "YAML Policy Engine\n<10μs" {
+engine: "YAML Policy Engine\\n<10μs" {
style.fill: "#1d3320"
style.stroke: "#2ea043"
style.font-color: "#3fb950"
style.border-radius: 8
}
-verify: "rampart-verify\n(optional sidecar)" {
+verify: "rampart-verify\\n(optional sidecar)" {
style.stroke-dash: 4
style.border-radius: 8
}
-audit: "Audit Trail\nhash-chained" {
+audit: "Audit Trail\\nhash-chained" {
style.border-radius: 8
}
@@ -205,13 +205,13 @@ verify -> outcomes.approval
[:octicons-arrow-right-24: See all integration guides](integrations/index.md)
-## What's New in v1.0.0-rc.2
+## What's New in v1.0
-- **Prerelease update checks are sane** — `rampart doctor` no longer suggests downgrading from the 1.0 RC line to the older stable `v0.9.22` release.
-- **OpenClaw 2026.5.2 is the RC baseline** — Rampart now uses OpenClaw's first-class plugin approval path as the single human-approval owner, with Rampart handling policy, audit, and durable allow-always persistence. [Details →](integrations/openclaw.md)
+- **Update checks are sane** — `rampart doctor` understands the 1.0 release line and no longer suggests downgrading release candidates to the older stable `v0.9.22` release.
+- **OpenClaw 2026.5.6 verified for launch** — Rampart uses OpenClaw's first-class plugin approval path as the single human-approval owner, with Rampart handling policy, audit, and durable allow-always persistence. [Details →](integrations/openclaw.md)
- **Degraded mode is explicit** — sensitive OpenClaw tools block when `rampart serve` is unavailable, while only configured lower-risk `failOpenTools` may proceed.
-- **Setup and doctor are release-candidate strict** — `rampart setup openclaw` installs the native plugin cleanly, repairs approval-hardening drift, and `rampart doctor` checks plugin state, serve reachability, approval timeout alignment, and version coherence.
-- **Matching and bypass regressions are tighter** — shell-wrapper normalization, URL/domain handling, path matching, and OpenClaw plugin approval/degraded-mode tests now cover the hard edges found during the RC pass.
+- **Setup and doctor are launch-strict** — `rampart setup openclaw` installs the native plugin cleanly, repairs approval-hardening drift, and `rampart doctor` checks plugin state, serve reachability, approval timeout alignment, and version coherence.
+- **Matching and bypass regressions are tighter** — shell-wrapper normalization, URL/domain handling, path matching, and OpenClaw plugin approval/degraded-mode tests now cover the hard edges found during the 1.0 RC pass.
### v0.9.22
diff --git a/docs-site/integrations/index.md b/docs-site/integrations/index.md
index 0e48c7cf..4a7db350 100644
--- a/docs-site/integrations/index.md
+++ b/docs-site/integrations/index.md
@@ -58,12 +58,10 @@ start: "Your agent" {shape: oval}
q: "Integration method?" {shape: diamond}
-hooks: "rampart setup claude-code
-rampart setup cline" {
+hooks: "rampart setup claude-code\\nrampart setup cline" {
style.fill: "#1d3320"; style.stroke: "#2ea043"; style.font-color: "#3fb950"; style.border-radius: 6
}
-shim: "rampart setup openclaw
-native plugin on current builds" {
+shim: "rampart setup openclaw\\nnative plugin on current builds" {
style.fill: "#1d3320"; style.stroke: "#2ea043"; style.font-color: "#3fb950"; style.border-radius: 6
}
mcp: "rampart mcp --" {
@@ -75,25 +73,18 @@ wrap: "rampart wrap --" {
preload: "rampart preload --" {
style.fill: "#1d3320"; style.stroke: "#2ea043"; style.font-color: "#3fb950"; style.border-radius: 6
}
-api: "HTTP API / SDK
-localhost:9090" {
+api: "HTTP API / SDK\\nlocalhost:9090" {
style.fill: "#1d3320"; style.stroke: "#2ea043"; style.font-color: "#3fb950"; style.border-radius: 6
}
start -> q
-q -> hooks: "Claude Code or Cline
-(native hooks, lowest overhead)"
-q -> shim: "OpenClaw
-(native plugin on supported builds)"
-q -> mcp: "Cursor, Claude Desktop
-or any MCP-compatible client"
-q -> wrap: "Any CLI agent
-with \$SHELL support"
-q -> preload: "Any CLI agent
-without \$SHELL or native hooks"
-q -> api: "Custom / Python agent
-or CI pipeline"
+q -> hooks: "Claude Code or Cline\\n(native hooks, lowest overhead)"
+q -> shim: "OpenClaw\\n(native plugin on supported builds)"
+q -> mcp: "Cursor, Claude Desktop\\nor any MCP-compatible client"
+q -> wrap: "Any CLI agent\\nwith \$SHELL support"
+q -> preload: "Any CLI agent\\nwithout \$SHELL or native hooks"
+q -> api: "Custom / Python agent\\nor CI pipeline"
```
!!! tip "Start with the simplest method"
diff --git a/docs-site/integrations/openclaw.md b/docs-site/integrations/openclaw.md
index e0c0695e..0a66ab26 100644
--- a/docs-site/integrations/openclaw.md
+++ b/docs-site/integrations/openclaw.md
@@ -12,11 +12,11 @@ When `rampart serve` is healthy, every supported tool call — exec, read, write
For sensitive tools, the recommended operating assumption is simple: if Rampart policy service is unavailable, treat that as a broken state and fix it before trusting approval-path tests. By default the plugin blocks sensitive tools such as `exec` and `write` when `rampart serve` is unavailable; lower-risk tools (`read`, `web_fetch`, `web_search`, `image`) are explicitly configured fail-open and can be tightened with `plugins.entries.rampart.config.failOpenTools`.
!!! info "Version requirements"
- - **OpenClaw >= 2026.5.2**: Preferred RC baseline. Supports explicit plugin startup activation plus first-class plugin approvals on the shared `/approve` / native approval path.
- - **OpenClaw 2026.4.29 - 2026.5.1**: Supported for native plugin startup/interception; plugin approval delivery was not the RC baseline.
+ - **OpenClaw >= 2026.5.2**: Recommended 1.0 path. Supports explicit plugin startup activation plus first-class plugin approvals on the shared `/approve` / native approval path.
+ - **OpenClaw 2026.4.29 - 2026.5.1**: Supported for native plugin startup/interception; plugin approval delivery was not the launch baseline.
- **OpenClaw 2026.3.28 - 2026.4.28**: Native plugin works for tool enforcement, but Rampart's polished approval path is supported on newer OpenClaw builds.
- **OpenClaw < 2026.3.28**: Legacy shim + bridge — exec-only coverage, requires re-patching after upgrades.
- - **Verified RC baseline on**: OpenClaw 2026.5.2
+ - **Verified 1.0 launch dogfood on**: OpenClaw 2026.5.6
`rampart setup openclaw` auto-detects your version and uses the right method.
@@ -157,7 +157,7 @@ Or check plugin status directly:
```bash
openclaw plugins list
-# rampart v0.9.18 active
+# rampart v1.0.0 active
```
## Troubleshooting
diff --git a/docs-site/reference/architecture.md b/docs-site/reference/architecture.md
index 855586eb..f268235e 100644
--- a/docs-site/reference/architecture.md
+++ b/docs-site/reference/architecture.md
@@ -29,19 +29,19 @@ intercept: {
mcp: "MCP Proxy"
}
-engine: "YAML Policy Engine\n<10μs" {
+engine: "YAML Policy Engine\\n<10μs" {
style.fill: "#1d3320"
style.stroke: "#2ea043"
style.font-color: "#3fb950"
style.border-radius: 8
}
-verify: "rampart-verify\n(optional sidecar)" {
+verify: "rampart-verify\\n(optional sidecar)" {
style.stroke-dash: 4
style.border-radius: 8
}
-audit: "Audit Trail\nhash-chained" {
+audit: "Audit Trail\\nhash-chained" {
style.border-radius: 8
}
diff --git a/docs-site/reference/owasp-mapping.md b/docs-site/reference/owasp-mapping.md
index 27eb905b..dc1bef2b 100644
--- a/docs-site/reference/owasp-mapping.md
+++ b/docs-site/reference/owasp-mapping.md
@@ -13,7 +13,7 @@ This page maps Rampart's capabilities to the [OWASP Top 10 for Agentic Applicati
| ASI02 | **Tool Misuse and Exploitation** | Every tool call (exec, read, write, fetch, MCP) is evaluated against YAML policies before execution. `default_action: deny` enforces least-privilege. Parameter validation, command pattern matching, and approval workflows for sensitive operations. This is Rampart's core function. | ✅ Covered |
| ASI03 | **Identity and Privilege Abuse** | `agent_depth` conditions limit sub-agent privilege escalation. Self-modification protection blocks agents from running `rampart allow`/`rampart block`. User separation prevents agents from accessing policies/audit. Does not manage agent credentials, OAuth tokens, or delegated permissions — over-scoped keys are outside Rampart's scope. | ⚠️ Partial |
| ASI04 | **Agentic Supply Chain Vulnerabilities** | Community policy SHA-256 verification detects tampering after registry publication. `rampart mcp scan` auto-generates policy from MCP server tool definitions. Project-local policies enforce deny-wins (a project policy can tighten but not loosen global policy). Does not verify tool provenance at source, inspect dependency trees, or provide SBOM/AIBOM. | ⚠️ Partial |
-| ASI05 | **Unexpected Code Execution (RCE)** | Shell command normalization, interpreter one-liner blocking (`python3 -c`, `node -e`, `perl -e`), LD_PRELOAD cascade for subprocess interception, and pattern matching catch common injected code patterns before they run. Does not inspect code executed inside allowed interpreters (e.g., `python3 script.py`), cannot handle all obfuscation variants, and LD_PRELOAD cascade does not apply in native-hook mode (Claude Code, Cline). See [Threat Model — Known Gaps](../threat-model/). | ⚠️ Partial |
+| ASI05 | **Unexpected Code Execution (RCE)** | Shell command normalization, interpreter one-liner blocking (`python3 -c`, `node -e`, `perl -e`), LD_PRELOAD cascade for subprocess interception, and pattern matching catch common injected code patterns before they run. Does not inspect code executed inside allowed interpreters (e.g., `python3 script.py`), cannot handle all obfuscation variants, and LD_PRELOAD cascade does not apply in native-hook mode (Claude Code, Cline). See [Threat Model — Known Gaps](threat-model.md). | ⚠️ Partial |
| ASI06 | **Memory & Context Poisoning** | Response scanning (`response_matches`) blocks credentials and known-bad patterns in tool responses before they enter the agent's context window. Does not protect persistent memory stores, RAG databases, embeddings, or conversation history — Rampart operates at the tool call layer, not the memory layer. | ⚠️ Partial |
| ASI07 | **Insecure Inter-Agent Communication** | Not addressed. Rampart operates at the agent-to-OS boundary; it has no visibility into messages passed between agents in a multi-agent system. Does not provide mutual authentication, message signing, anti-replay, or encryption for agent-to-agent channels. Note: *tool calls* from sub-agents are evaluated by the same policy engine, and `agent_depth` conditions limit sub-agent nesting depth — but these address sub-agent containment, not communication security. | ❌ Not covered |
| ASI08 | **Cascading Failures** | Fail-open design prevents Rampart from becoming a single point of failure (a crashed Rampart doesn't lock out the system). `call_count` rate limiting throttles runaway agents. Webhook notifications alert on anomalies in real time. Does not prevent agent-to-agent cascade in multi-agent systems. | ⚠️ Partial |
diff --git a/docs-site/reference/threat-model.md b/docs-site/reference/threat-model.md
index e298ef9b..d58bebfd 100644
--- a/docs-site/reference/threat-model.md
+++ b/docs-site/reference/threat-model.md
@@ -1,6 +1,6 @@
# Threat Model
-> Last reviewed: 2026-04-30 | Applies to: v1.0.0-rc.2+
+> Last reviewed: 2026-04-30 | Applies to: v1.0.0
Rampart is a policy engine for AI agents — not a sandbox, not a hypervisor, not a full isolation boundary. This document describes what Rampart protects against, what it doesn't, and why.
diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
index bb4835c4..cfdaeaff 100644
--- a/docs/ROADMAP.md
+++ b/docs/ROADMAP.md
@@ -45,15 +45,15 @@ What's coming next for Rampart. Priorities shift based on feedback — [open an
## Current Focus
-### `v1.0.0-rc.2`
+### `v1.0.0`
- Keep the integration support story boring and evidence-backed: hooks, plugins, preload/wrapper, MCP, and HTTP API should each say what is protected and what happens when policy evaluation is unavailable.
-- Treat OpenClaw `2026.5.2+` as the recommended RC baseline for native plugin approvals.
-- Keep `rampart doctor`, setup output, and docs aligned so users can answer "am I protected, how, and what breaks if serve is down?" without reading source.
+- Treat OpenClaw `2026.5.2+` as the recommended 1.0 path for native plugin approvals, with launch dogfood verified on OpenClaw `2026.5.6`.
+- Keep `rampart doctor`, setup output, plugin metadata, and docs aligned so users can answer "am I protected, how, and what breaks if serve is down?" without reading source.
-### After the RC
+### After 1.0
- Collect feedback from real OpenClaw, Claude Code, Cline, Codex, and MCP users.
-- Fix any RC integration bugs without widening the public API unless the tradeoff is explicit.
-- Promote to `v1.0.0` only when the support matrix and threat model still match real-world behavior.
+- Fix integration bugs without widening the public API unless the tradeoff is explicit.
+- Keep the support matrix and threat model honest as agent runtimes evolve.
## Future / v2.x
diff --git a/docs/index.html b/docs/index.html
index 8f37f3be..af37ba06 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -27,7 +27,7 @@
"url": "https://rampart.sh",
"applicationCategory": "SecurityApplication",
"operatingSystem": "Linux, macOS, Windows",
- "softwareVersion": "1.0.0-rc.2",
+ "softwareVersion": "1.0.0",
"offers": {
"@type": "Offer",
"price": "0",
@@ -1112,7 +1112,7 @@
-
v1.0.0-rc.2 · release candidate
+
v1.0.0 · launch-ready
Your agent has root.
That’s the problem.
Rampart sits in the execution path. Install it, run rampart quickstart, and it wires the right protection path for Claude Code, Codex, Cline, or OpenClaw before risky tool calls run.
diff --git a/docs/install b/docs/install
index c8dd02bc..86169596 100644
--- a/docs/install
+++ b/docs/install
@@ -1,151 +1,263 @@
#!/bin/sh
-# Rampart installer
-# Usage: curl -fsSL https://rampart.sh/install | bash
-# curl -fsSL https://rampart.sh/install | RAMPART_VERSION=v0.3.0 bash
+# Rampart install script.
#
-# Env vars:
-# RAMPART_VERSION — pin a version (default: latest)
-# RAMPART_INSTALL_DIR — install directory (default: ~/.local/bin)
-# RAMPART_INSTALL_DRY_RUN — set to 1 to print actions without running them
+# Canonical source for the website and legacy installer copies. Keep
+# docs/install, docs/install.sh, and scripts/install.sh byte-for-byte synced
+# with this file.
+# Usage: curl -fsSL https://rampart.sh/install | sh
+# curl -fsSL https://rampart.sh/install | sh -s -- --version v0.1.0
+# curl -fsSL https://rampart.sh/install | sh -s -- --auto-setup
+# RAMPART_INSTALL_DRY_RUN=1 sh install.sh --version v1.0.0
+# RAMPART_VERSION=v1.0.0 RAMPART_INSTALL_DIR=$HOME/.local/bin sh install.sh
set -e
REPO="peg/rampart"
-INSTALL_DIR="${RAMPART_INSTALL_DIR:-$HOME/.local/bin}"
+INSTALL_DIR="${RAMPART_INSTALL_DIR:-}"
+BINARY="rampart"
VERSION="${RAMPART_VERSION:-}"
+AUTO_SETUP="${RAMPART_AUTO_SETUP:-0}"
DRY_RUN="${RAMPART_INSTALL_DRY_RUN:-0}"
-# ── Colors ────────────────────────────────────────────────────────────────────
+# Colors (if terminal supports them).
if [ -t 1 ]; then
- BOLD="\033[1m"; GREEN="\033[32m"; YELLOW="\033[33m"; RED="\033[31m"; RESET="\033[0m"
+ BOLD="\033[1m"
+ GREEN="\033[32m"
+ RED="\033[31m"
+ YELLOW="\033[33m"
+ RESET="\033[0m"
else
- BOLD=""; GREEN=""; YELLOW=""; RED=""; RESET=""
+ BOLD="" GREEN="" RED="" YELLOW="" RESET=""
fi
info() { printf "${GREEN}▸${RESET} %s\n" "$1"; }
-warn() { printf "${YELLOW}▸${RESET} %s\n" "$1" >&2; }
+warn() { printf "${YELLOW}▸${RESET} %s\n" "$1"; }
error() { printf "${RED}✗${RESET} %s\n" "$1" >&2; exit 1; }
-step() { printf "\n${BOLD}%s${RESET}\n" "$1"; }
-dry() { printf "${YELLOW}[dry-run]${RESET} %s\n" "$1"; }
-# ── Downloader ─────────────────────────────────────────────────────────────────
-fetch() { # fetch [dest]
- URL="$1"; DEST="$2"
+fetch() { # fetch [dest]
+ URL="$1"
+ DEST="${2:-}"
if command -v curl >/dev/null 2>&1; then
- if [ -n "$DEST" ]; then curl -fsSL -o "$DEST" "$URL"
- else curl -fsSL "$URL"; fi
+ if [ -n "$DEST" ]; then
+ curl -fsSL -o "$DEST" "$URL"
+ else
+ curl -fsSL "$URL"
+ fi
elif command -v wget >/dev/null 2>&1; then
- if [ -n "$DEST" ]; then wget -qO "$DEST" "$URL"
- else wget -qO- "$URL"; fi
+ if [ -n "$DEST" ]; then
+ wget -qO "$DEST" "$URL"
+ else
+ wget -qO- "$URL"
+ fi
else
error "Neither curl nor wget found. Install one and retry."
fi
}
-# ── OS / Arch ──────────────────────────────────────────────────────────────────
+# Parse args.
+while [ $# -gt 0 ]; do
+ case "$1" in
+ --version) VERSION="$2"; shift 2 ;;
+ --version=*) VERSION="${1#--version=}"; shift ;;
+ --auto-setup) AUTO_SETUP=1; shift ;;
+ --dry-run) DRY_RUN=1; shift ;;
+ *) error "Unknown option: $1" ;;
+ esac
+done
+
+# Detect OS.
OS="$(uname -s | tr '[:upper:]' '[:lower:]')"
case "$OS" in
- linux) OS="linux" ;;
+ linux) OS="linux" ;;
darwin) OS="darwin" ;;
- *) error "Unsupported OS: $(uname -s). Only linux and darwin are supported." ;;
+ *) error "Unsupported OS: $OS (need linux or darwin)" ;;
esac
+# Detect architecture.
ARCH="$(uname -m)"
case "$ARCH" in
- x86_64|amd64) ARCH="amd64" ;;
- aarch64|arm64) ARCH="arm64" ;;
- *) error "Unsupported architecture: $(uname -m). Only amd64 and arm64 are supported." ;;
+ x86_64|amd64) ARCH="amd64" ;;
+ aarch64|arm64) ARCH="arm64" ;;
+ *) error "Unsupported architecture: $ARCH (need amd64 or arm64)" ;;
esac
-info "Platform: ${BOLD}${OS}/${ARCH}${RESET}"
+info "Detected ${BOLD}${OS}/${ARCH}${RESET}"
-# ── Resolve version ────────────────────────────────────────────────────────────
+# Determine version.
if [ -z "$VERSION" ]; then
- info "Fetching latest release..."
- VERSION="$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
- | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')"
- [ -n "$VERSION" ] || error "Could not determine latest version. Set RAMPART_VERSION=vX.Y.Z and retry."
+ info "Fetching latest version..."
+ VERSION=$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
+ | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
+ if [ -z "$VERSION" ]; then
+ error "Could not determine latest version. Try: --version v0.1.0"
+ fi
fi
-# Normalise: ensure leading 'v'
+# Normalise version: release tags include a leading "v".
case "$VERSION" in
v*) ;;
*) VERSION="v${VERSION}" ;;
esac
-info "Version: ${BOLD}${VERSION}${RESET}"
+info "Installing ${BOLD}rampart ${VERSION}${RESET}"
-# ── Build URLs ─────────────────────────────────────────────────────────────────
-TARBALL="rampart_${VERSION#v}_${OS}_${ARCH}.tar.gz"
+if [ -z "$INSTALL_DIR" ]; then
+ if [ "$(id -u)" -eq 0 ]; then
+ INSTALL_DIR="/usr/local/bin"
+ elif [ -d "$HOME/.local/bin" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif [ "$DRY_RUN" = "1" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif mkdir -p "$HOME/.local/bin" 2>/dev/null; then
+ INSTALL_DIR="$HOME/.local/bin"
+ else
+ INSTALL_DIR="/usr/local/bin"
+ fi
+fi
+
+# Build download URLs.
BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
+TARBALL="rampart_${VERSION#v}_${OS}_${ARCH}.tar.gz"
TARBALL_URL="${BASE_URL}/${TARBALL}"
CHECKSUM_URL="${BASE_URL}/checksums.txt"
if [ "$DRY_RUN" = "1" ]; then
- step "Dry-run — no changes will be made"
- dry "Would download: ${TARBALL_URL}"
- dry "Would install: ${INSTALL_DIR}/rampart"
- dry "Would run: rampart quickstart"
- if ! echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
- dry "Would hint to add ${INSTALL_DIR} to PATH"
- fi
+ info "Dry-run — no changes will be made"
+ info "Would download: ${TARBALL_URL}"
+ info "Would verify: ${CHECKSUM_URL}"
+ info "Would install: ${INSTALL_DIR}/${BINARY}"
exit 0
fi
-# ── Download & extract ─────────────────────────────────────────────────────────
-step "Downloading rampart ${VERSION}..."
-
+# Create temp directory.
TMP_DIR="$(mktemp -d)"
trap 'rm -rf "$TMP_DIR"' EXIT
-fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}" \
- || error "Download failed.\nURL: ${TARBALL_URL}\nCheck that ${VERSION} exists: https://github.com/${REPO}/releases"
+# Download archive.
+info "Downloading archive..."
+if ! fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}"; then
+ error "Download failed. Check that ${VERSION} exists at:\n ${TARBALL_URL}"
+fi
-# Optional checksum verification
+# Download and verify checksum.
+info "Verifying checksum..."
if fetch "$CHECKSUM_URL" "${TMP_DIR}/checksums.txt" 2>/dev/null; then
+ EXPECTED=$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')
if command -v sha256sum >/dev/null 2>&1; then
- HASH_CMD="sha256sum"
+ ACTUAL=$(sha256sum "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
elif command -v shasum >/dev/null 2>&1; then
- HASH_CMD="shasum -a 256"
+ ACTUAL=$(shasum -a 256 "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
else
- HASH_CMD=""
+ warn "No sha256sum or shasum found — skipping verification"
+ ACTUAL="$EXPECTED"
fi
- if [ -n "$HASH_CMD" ]; then
- EXPECTED="$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')"
- ACTUAL="$($HASH_CMD "${TMP_DIR}/${TARBALL}" | awk '{print $1}')"
- if [ -n "$EXPECTED" ] && [ "$EXPECTED" != "$ACTUAL" ]; then
- error "Checksum mismatch!\n Expected: ${EXPECTED}\n Got: ${ACTUAL}"
- fi
+
+ if [ -z "$EXPECTED" ]; then
+ warn "No checksum entry found for ${TARBALL} — skipping verification"
+ elif [ "$EXPECTED" != "$ACTUAL" ]; then
+ error "Checksum mismatch!\n Expected: ${EXPECTED}\n Got: ${ACTUAL}"
+ else
info "Checksum verified ✓"
fi
+else
+ warn "No checksums.txt found — skipping verification"
fi
tar -xzf "${TMP_DIR}/${TARBALL}" -C "$TMP_DIR"
-# ── Install ────────────────────────────────────────────────────────────────────
-step "Installing to ${INSTALL_DIR}..."
+if [ ! -f "${TMP_DIR}/${BINARY}" ]; then
+ error "Archive did not contain ${BINARY}"
+fi
-mkdir -p "$INSTALL_DIR"
-mv "${TMP_DIR}/rampart" "${INSTALL_DIR}/rampart"
-chmod +x "${INSTALL_DIR}/rampart"
+# Install.
+chmod +x "${TMP_DIR}/${BINARY}"
-info "Installed: ${BOLD}${INSTALL_DIR}/rampart${RESET}"
+if [ ! -d "$INSTALL_DIR" ]; then
+ if ! mkdir -p "$INSTALL_DIR" 2>/dev/null; then
+ info "Need sudo to create ${INSTALL_DIR}"
+ sudo mkdir -p "$INSTALL_DIR"
+ fi
+fi
-# PATH hint
-if ! echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
- warn "${INSTALL_DIR} is not in your PATH."
- warn "Add this to your shell profile (~/.bashrc, ~/.zshrc, etc.):"
- printf " ${BOLD}export PATH=\"\$HOME/.local/bin:\$PATH\"${RESET}\n" >&2
- export PATH="${INSTALL_DIR}:${PATH}"
+if [ -w "$INSTALL_DIR" ]; then
+ mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
+else
+ info "Need sudo to install to ${INSTALL_DIR}"
+ sudo mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
fi
-# ── Quickstart ─────────────────────────────────────────────────────────────────
-step "Running quickstart..."
+info "Installed to ${BOLD}${INSTALL_DIR}/${BINARY}${RESET}"
-if [ -t 0 ] && [ -t 1 ]; then
- rampart quickstart
+# Verify.
+RAMPART_BIN="${INSTALL_DIR}/${BINARY}"
+if [ -x "$RAMPART_BIN" ]; then
+ printf "\n"
+ "$RAMPART_BIN" version 2>/dev/null || true
+
+ if echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
+ printf "\n${GREEN}${BOLD}Ready!${RESET} Run ${BOLD}rampart quickstart${RESET} to get started.\n"
+ else
+ printf "\n${YELLOW}Note:${RESET} ${INSTALL_DIR} may not be in your PATH.\n"
+ printf "Add it: ${BOLD}export PATH=\"${INSTALL_DIR}:\$PATH\"${RESET}\n"
+ printf "Then run: ${BOLD}rampart quickstart${RESET}\n"
+ fi
else
- rampart quickstart --env none 2>/dev/null || true
+ warn "Could not verify installed binary at ${INSTALL_DIR}/${BINARY}"
fi
-printf "\n${GREEN}${BOLD}Done!${RESET} rampart ${VERSION} is installed.\n"
-printf "Docs: ${BOLD}https://docs.rampart.sh${RESET}\n\n"
+# Detect AI agents and suggest setup commands.
+detect_agents_and_suggest() {
+ printf "\n"
+
+ # Detect OpenClaw
+ OPENCLAW_FOUND=0
+ if command -v openclaw >/dev/null 2>&1; then
+ OPENCLAW_FOUND=1
+ elif [ -f "$HOME/.local/bin/openclaw" ] || [ -f "/usr/local/bin/openclaw" ] || [ -f "/usr/bin/openclaw" ]; then
+ OPENCLAW_FOUND=1
+ fi
+
+ # Detect Claude Code (claude CLI)
+ CLAUDE_FOUND=0
+ if command -v claude >/dev/null 2>&1; then
+ CLAUDE_FOUND=1
+ elif [ -f "$HOME/.claude/settings.json" ]; then
+ CLAUDE_FOUND=1
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ] || [ "$CLAUDE_FOUND" -eq 1 ]; then
+ printf "${GREEN}${BOLD}✓ AI agent(s) detected!${RESET}\n\n"
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting OpenClaw...\n"
+ "$RAMPART_BIN" setup openclaw 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup openclaw${RESET}\n"
+ else
+ printf " Run this to protect your OpenClaw agent:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$CLAUDE_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting Claude Code...\n"
+ "$RAMPART_BIN" setup claude-code 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup claude-code${RESET}\n"
+ else
+ printf " Run this to protect Claude Code:\n"
+ printf " ${BOLD}rampart setup claude-code${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 0 ] && [ "$CLAUDE_FOUND" -eq 0 ]; then
+ printf " To protect an AI agent, run:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET} — for OpenClaw\n"
+ printf " ${BOLD}rampart setup claude-code${RESET} — for Claude Code\n"
+ printf "\n"
+ fi
+}
+
+if [ -x "$RAMPART_BIN" ]; then
+ detect_agents_and_suggest
+fi
diff --git a/docs/install.sh b/docs/install.sh
new file mode 100755
index 00000000..86169596
--- /dev/null
+++ b/docs/install.sh
@@ -0,0 +1,263 @@
+#!/bin/sh
+# Rampart install script.
+#
+# Canonical source for the website and legacy installer copies. Keep
+# docs/install, docs/install.sh, and scripts/install.sh byte-for-byte synced
+# with this file.
+# Usage: curl -fsSL https://rampart.sh/install | sh
+# curl -fsSL https://rampart.sh/install | sh -s -- --version v0.1.0
+# curl -fsSL https://rampart.sh/install | sh -s -- --auto-setup
+# RAMPART_INSTALL_DRY_RUN=1 sh install.sh --version v1.0.0
+# RAMPART_VERSION=v1.0.0 RAMPART_INSTALL_DIR=$HOME/.local/bin sh install.sh
+set -e
+
+REPO="peg/rampart"
+INSTALL_DIR="${RAMPART_INSTALL_DIR:-}"
+BINARY="rampart"
+VERSION="${RAMPART_VERSION:-}"
+AUTO_SETUP="${RAMPART_AUTO_SETUP:-0}"
+DRY_RUN="${RAMPART_INSTALL_DRY_RUN:-0}"
+
+# Colors (if terminal supports them).
+if [ -t 1 ]; then
+ BOLD="\033[1m"
+ GREEN="\033[32m"
+ RED="\033[31m"
+ YELLOW="\033[33m"
+ RESET="\033[0m"
+else
+ BOLD="" GREEN="" RED="" YELLOW="" RESET=""
+fi
+
+info() { printf "${GREEN}▸${RESET} %s\n" "$1"; }
+warn() { printf "${YELLOW}▸${RESET} %s\n" "$1"; }
+error() { printf "${RED}✗${RESET} %s\n" "$1" >&2; exit 1; }
+
+fetch() { # fetch [dest]
+ URL="$1"
+ DEST="${2:-}"
+ if command -v curl >/dev/null 2>&1; then
+ if [ -n "$DEST" ]; then
+ curl -fsSL -o "$DEST" "$URL"
+ else
+ curl -fsSL "$URL"
+ fi
+ elif command -v wget >/dev/null 2>&1; then
+ if [ -n "$DEST" ]; then
+ wget -qO "$DEST" "$URL"
+ else
+ wget -qO- "$URL"
+ fi
+ else
+ error "Neither curl nor wget found. Install one and retry."
+ fi
+}
+
+# Parse args.
+while [ $# -gt 0 ]; do
+ case "$1" in
+ --version) VERSION="$2"; shift 2 ;;
+ --version=*) VERSION="${1#--version=}"; shift ;;
+ --auto-setup) AUTO_SETUP=1; shift ;;
+ --dry-run) DRY_RUN=1; shift ;;
+ *) error "Unknown option: $1" ;;
+ esac
+done
+
+# Detect OS.
+OS="$(uname -s | tr '[:upper:]' '[:lower:]')"
+case "$OS" in
+ linux) OS="linux" ;;
+ darwin) OS="darwin" ;;
+ *) error "Unsupported OS: $OS (need linux or darwin)" ;;
+esac
+
+# Detect architecture.
+ARCH="$(uname -m)"
+case "$ARCH" in
+ x86_64|amd64) ARCH="amd64" ;;
+ aarch64|arm64) ARCH="arm64" ;;
+ *) error "Unsupported architecture: $ARCH (need amd64 or arm64)" ;;
+esac
+
+info "Detected ${BOLD}${OS}/${ARCH}${RESET}"
+
+# Determine version.
+if [ -z "$VERSION" ]; then
+ info "Fetching latest version..."
+ VERSION=$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
+ | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
+ if [ -z "$VERSION" ]; then
+ error "Could not determine latest version. Try: --version v0.1.0"
+ fi
+fi
+
+# Normalise version: release tags include a leading "v".
+case "$VERSION" in
+ v*) ;;
+ *) VERSION="v${VERSION}" ;;
+esac
+
+info "Installing ${BOLD}rampart ${VERSION}${RESET}"
+
+if [ -z "$INSTALL_DIR" ]; then
+ if [ "$(id -u)" -eq 0 ]; then
+ INSTALL_DIR="/usr/local/bin"
+ elif [ -d "$HOME/.local/bin" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif [ "$DRY_RUN" = "1" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif mkdir -p "$HOME/.local/bin" 2>/dev/null; then
+ INSTALL_DIR="$HOME/.local/bin"
+ else
+ INSTALL_DIR="/usr/local/bin"
+ fi
+fi
+
+# Build download URLs.
+BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
+TARBALL="rampart_${VERSION#v}_${OS}_${ARCH}.tar.gz"
+TARBALL_URL="${BASE_URL}/${TARBALL}"
+CHECKSUM_URL="${BASE_URL}/checksums.txt"
+
+if [ "$DRY_RUN" = "1" ]; then
+ info "Dry-run — no changes will be made"
+ info "Would download: ${TARBALL_URL}"
+ info "Would verify: ${CHECKSUM_URL}"
+ info "Would install: ${INSTALL_DIR}/${BINARY}"
+ exit 0
+fi
+
+# Create temp directory.
+TMP_DIR="$(mktemp -d)"
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Download archive.
+info "Downloading archive..."
+if ! fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}"; then
+ error "Download failed. Check that ${VERSION} exists at:\n ${TARBALL_URL}"
+fi
+
+# Download and verify checksum.
+info "Verifying checksum..."
+if fetch "$CHECKSUM_URL" "${TMP_DIR}/checksums.txt" 2>/dev/null; then
+ EXPECTED=$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')
+ if command -v sha256sum >/dev/null 2>&1; then
+ ACTUAL=$(sha256sum "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
+ elif command -v shasum >/dev/null 2>&1; then
+ ACTUAL=$(shasum -a 256 "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
+ else
+ warn "No sha256sum or shasum found — skipping verification"
+ ACTUAL="$EXPECTED"
+ fi
+
+ if [ -z "$EXPECTED" ]; then
+ warn "No checksum entry found for ${TARBALL} — skipping verification"
+ elif [ "$EXPECTED" != "$ACTUAL" ]; then
+ error "Checksum mismatch!\n Expected: ${EXPECTED}\n Got: ${ACTUAL}"
+ else
+ info "Checksum verified ✓"
+ fi
+else
+ warn "No checksums.txt found — skipping verification"
+fi
+
+tar -xzf "${TMP_DIR}/${TARBALL}" -C "$TMP_DIR"
+
+if [ ! -f "${TMP_DIR}/${BINARY}" ]; then
+ error "Archive did not contain ${BINARY}"
+fi
+
+# Install.
+chmod +x "${TMP_DIR}/${BINARY}"
+
+if [ ! -d "$INSTALL_DIR" ]; then
+ if ! mkdir -p "$INSTALL_DIR" 2>/dev/null; then
+ info "Need sudo to create ${INSTALL_DIR}"
+ sudo mkdir -p "$INSTALL_DIR"
+ fi
+fi
+
+if [ -w "$INSTALL_DIR" ]; then
+ mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
+else
+ info "Need sudo to install to ${INSTALL_DIR}"
+ sudo mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
+fi
+
+info "Installed to ${BOLD}${INSTALL_DIR}/${BINARY}${RESET}"
+
+# Verify.
+RAMPART_BIN="${INSTALL_DIR}/${BINARY}"
+if [ -x "$RAMPART_BIN" ]; then
+ printf "\n"
+ "$RAMPART_BIN" version 2>/dev/null || true
+
+ if echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
+ printf "\n${GREEN}${BOLD}Ready!${RESET} Run ${BOLD}rampart quickstart${RESET} to get started.\n"
+ else
+ printf "\n${YELLOW}Note:${RESET} ${INSTALL_DIR} may not be in your PATH.\n"
+ printf "Add it: ${BOLD}export PATH=\"${INSTALL_DIR}:\$PATH\"${RESET}\n"
+ printf "Then run: ${BOLD}rampart quickstart${RESET}\n"
+ fi
+else
+ warn "Could not verify installed binary at ${INSTALL_DIR}/${BINARY}"
+fi
+
+# Detect AI agents and suggest setup commands.
+detect_agents_and_suggest() {
+ printf "\n"
+
+ # Detect OpenClaw
+ OPENCLAW_FOUND=0
+ if command -v openclaw >/dev/null 2>&1; then
+ OPENCLAW_FOUND=1
+ elif [ -f "$HOME/.local/bin/openclaw" ] || [ -f "/usr/local/bin/openclaw" ] || [ -f "/usr/bin/openclaw" ]; then
+ OPENCLAW_FOUND=1
+ fi
+
+ # Detect Claude Code (claude CLI)
+ CLAUDE_FOUND=0
+ if command -v claude >/dev/null 2>&1; then
+ CLAUDE_FOUND=1
+ elif [ -f "$HOME/.claude/settings.json" ]; then
+ CLAUDE_FOUND=1
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ] || [ "$CLAUDE_FOUND" -eq 1 ]; then
+ printf "${GREEN}${BOLD}✓ AI agent(s) detected!${RESET}\n\n"
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting OpenClaw...\n"
+ "$RAMPART_BIN" setup openclaw 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup openclaw${RESET}\n"
+ else
+ printf " Run this to protect your OpenClaw agent:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$CLAUDE_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting Claude Code...\n"
+ "$RAMPART_BIN" setup claude-code 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup claude-code${RESET}\n"
+ else
+ printf " Run this to protect Claude Code:\n"
+ printf " ${BOLD}rampart setup claude-code${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 0 ] && [ "$CLAUDE_FOUND" -eq 0 ]; then
+ printf " To protect an AI agent, run:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET} — for OpenClaw\n"
+ printf " ${BOLD}rampart setup claude-code${RESET} — for Claude Code\n"
+ printf "\n"
+ fi
+}
+
+if [ -x "$RAMPART_BIN" ]; then
+ detect_agents_and_suggest
+fi
diff --git a/install.sh b/install.sh
index 1e1fd9da..86169596 100755
--- a/install.sh
+++ b/install.sh
@@ -1,15 +1,20 @@
#!/bin/sh
-# Rampart install script
+# Rampart install script.
+#
+# Canonical source for the website and legacy installer copies. Keep
+# docs/install, docs/install.sh, and scripts/install.sh byte-for-byte synced
+# with this file.
# Usage: curl -fsSL https://rampart.sh/install | sh
# curl -fsSL https://rampart.sh/install | sh -s -- --version v0.1.0
# curl -fsSL https://rampart.sh/install | sh -s -- --auto-setup
-# RAMPART_INSTALL_DRY_RUN=1 sh install.sh --version v1.0.0-rc.2
+# RAMPART_INSTALL_DRY_RUN=1 sh install.sh --version v1.0.0
+# RAMPART_VERSION=v1.0.0 RAMPART_INSTALL_DIR=$HOME/.local/bin sh install.sh
set -e
REPO="peg/rampart"
-INSTALL_DIR="/usr/local/bin"
+INSTALL_DIR="${RAMPART_INSTALL_DIR:-}"
BINARY="rampart"
-VERSION=""
+VERSION="${RAMPART_VERSION:-}"
AUTO_SETUP="${RAMPART_AUTO_SETUP:-0}"
DRY_RUN="${RAMPART_INSTALL_DRY_RUN:-0}"
@@ -28,6 +33,26 @@ info() { printf "${GREEN}▸${RESET} %s\n" "$1"; }
warn() { printf "${YELLOW}▸${RESET} %s\n" "$1"; }
error() { printf "${RED}✗${RESET} %s\n" "$1" >&2; exit 1; }
+fetch() { # fetch [dest]
+ URL="$1"
+ DEST="${2:-}"
+ if command -v curl >/dev/null 2>&1; then
+ if [ -n "$DEST" ]; then
+ curl -fsSL -o "$DEST" "$URL"
+ else
+ curl -fsSL "$URL"
+ fi
+ elif command -v wget >/dev/null 2>&1; then
+ if [ -n "$DEST" ]; then
+ wget -qO "$DEST" "$URL"
+ else
+ wget -qO- "$URL"
+ fi
+ else
+ error "Neither curl nor wget found. Install one and retry."
+ fi
+}
+
# Parse args.
while [ $# -gt 0 ]; do
case "$1" in
@@ -60,7 +85,7 @@ info "Detected ${BOLD}${OS}/${ARCH}${RESET}"
# Determine version.
if [ -z "$VERSION" ]; then
info "Fetching latest version..."
- VERSION=$(curl -fsSL "https://api.github.com/repos/${REPO}/releases/latest" \
+ VERSION=$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
| grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
if [ -z "$VERSION" ]; then
error "Could not determine latest version. Try: --version v0.1.0"
@@ -75,16 +100,18 @@ esac
info "Installing ${BOLD}rampart ${VERSION}${RESET}"
-if [ "$(id -u)" -eq 0 ]; then
- INSTALL_DIR="/usr/local/bin"
-elif [ -d "$HOME/.local/bin" ]; then
- INSTALL_DIR="$HOME/.local/bin"
-elif [ "$DRY_RUN" = "1" ]; then
- INSTALL_DIR="$HOME/.local/bin"
-elif mkdir -p "$HOME/.local/bin" 2>/dev/null; then
- INSTALL_DIR="$HOME/.local/bin"
-else
- INSTALL_DIR="/usr/local/bin"
+if [ -z "$INSTALL_DIR" ]; then
+ if [ "$(id -u)" -eq 0 ]; then
+ INSTALL_DIR="/usr/local/bin"
+ elif [ -d "$HOME/.local/bin" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif [ "$DRY_RUN" = "1" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif mkdir -p "$HOME/.local/bin" 2>/dev/null; then
+ INSTALL_DIR="$HOME/.local/bin"
+ else
+ INSTALL_DIR="/usr/local/bin"
+ fi
fi
# Build download URLs.
@@ -107,13 +134,13 @@ trap 'rm -rf "$TMP_DIR"' EXIT
# Download archive.
info "Downloading archive..."
-if ! curl -fsSL -o "${TMP_DIR}/${TARBALL}" "$TARBALL_URL"; then
+if ! fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}"; then
error "Download failed. Check that ${VERSION} exists at:\n ${TARBALL_URL}"
fi
# Download and verify checksum.
info "Verifying checksum..."
-if curl -fsSL -o "${TMP_DIR}/checksums.txt" "$CHECKSUM_URL" 2>/dev/null; then
+if fetch "$CHECKSUM_URL" "${TMP_DIR}/checksums.txt" 2>/dev/null; then
EXPECTED=$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')
if command -v sha256sum >/dev/null 2>&1; then
ACTUAL=$(sha256sum "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
@@ -144,6 +171,13 @@ fi
# Install.
chmod +x "${TMP_DIR}/${BINARY}"
+if [ ! -d "$INSTALL_DIR" ]; then
+ if ! mkdir -p "$INSTALL_DIR" 2>/dev/null; then
+ info "Need sudo to create ${INSTALL_DIR}"
+ sudo mkdir -p "$INSTALL_DIR"
+ fi
+fi
+
if [ -w "$INSTALL_DIR" ]; then
mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
else
diff --git a/internal/plugin/openclaw/embed_test.go b/internal/plugin/openclaw/embed_test.go
index b681f8d6..981a20ed 100644
--- a/internal/plugin/openclaw/embed_test.go
+++ b/internal/plugin/openclaw/embed_test.go
@@ -40,6 +40,7 @@ func TestPackageDeclaresInstallHostFloor(t *testing.T) {
}
var pkg struct {
Version string `json:"version"`
+ License string `json:"license"`
OpenClaw struct {
Install struct {
MinHostVersion string `json:"minHostVersion"`
@@ -55,6 +56,9 @@ func TestPackageDeclaresInstallHostFloor(t *testing.T) {
if got, want := pkg.Version, Version(); got != want {
t.Fatalf("package.json version = %q, want Version() %q", got, want)
}
+ if got, want := pkg.License, "Apache-2.0"; got != want {
+ t.Fatalf("package.json license = %q, want %q", got, want)
+ }
}
func TestManifestDeclaresDegradedModeConfig(t *testing.T) {
diff --git a/internal/plugin/openclaw/index.js b/internal/plugin/openclaw/index.js
index 3b92d31b..1d2a53d8 100644
--- a/internal/plugin/openclaw/index.js
+++ b/internal/plugin/openclaw/index.js
@@ -5,7 +5,7 @@
* Replaces brittle dist-file patching with the official OpenClaw plugin API.
*
* @see https://github.com/peg/rampart
- * @version 0.1.0
+ * @version 1.0.0
*/
import { readFile } from "fs/promises";
@@ -212,7 +212,7 @@ async function auditLog(toolName, params, ctx, outcome, config) {
export const id = "rampart";
export const name = "Rampart";
export const description = "AI agent firewall — YAML policy-as-code for every tool call";
-export const version = "1.0.0-rc.2";
+export const version = "1.0.0";
// OpenClaw runs higher-priority before_tool_call hooks first. Rampart should
// act as the final normal plugin gate so it evaluates the params that will
diff --git a/internal/plugin/openclaw/openclaw.plugin.json b/internal/plugin/openclaw/openclaw.plugin.json
index b56b1b7b..2e92ae30 100644
--- a/internal/plugin/openclaw/openclaw.plugin.json
+++ b/internal/plugin/openclaw/openclaw.plugin.json
@@ -8,7 +8,7 @@
"hook"
]
},
- "version": "1.0.0-rc.2",
+ "version": "1.0.0",
"author": "peg",
"homepage": "https://rampart.sh",
"repository": "https://github.com/peg/rampart",
diff --git a/internal/plugin/openclaw/package.json b/internal/plugin/openclaw/package.json
index d6c22f61..5676b55b 100644
--- a/internal/plugin/openclaw/package.json
+++ b/internal/plugin/openclaw/package.json
@@ -1,6 +1,6 @@
{
"name": "rampart",
- "version": "1.0.0-rc.2",
+ "version": "1.0.0",
"description": "Rampart AI agent firewall — OpenClaw native plugin (before_tool_call hook)",
"type": "module",
"main": "index.js",
@@ -11,7 +11,7 @@
"security",
"plugin"
],
- "license": "MIT",
+ "license": "Apache-2.0",
"openclaw": {
"extensions": [
"./index.js"
diff --git a/mkdocs.yml b/mkdocs.yml
index c1db0cf3..86e37f02 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -8,6 +8,12 @@ edit_uri: edit/main/docs-site/
docs_dir: docs-site
+# docs-site/index.html is the standalone rampart.sh landing page source, not a
+# MkDocs page. Exclude it explicitly so docs builds don't warn about the
+# intentional index.md/index.html collision.
+exclude_docs: |
+ index.html
+
theme:
name: material
custom_dir: docs-site/overrides
diff --git a/scripts/install.sh b/scripts/install.sh
index c8dd02bc..86169596 100644
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -1,151 +1,263 @@
#!/bin/sh
-# Rampart installer
-# Usage: curl -fsSL https://rampart.sh/install | bash
-# curl -fsSL https://rampart.sh/install | RAMPART_VERSION=v0.3.0 bash
+# Rampart install script.
#
-# Env vars:
-# RAMPART_VERSION — pin a version (default: latest)
-# RAMPART_INSTALL_DIR — install directory (default: ~/.local/bin)
-# RAMPART_INSTALL_DRY_RUN — set to 1 to print actions without running them
+# Canonical source for the website and legacy installer copies. Keep
+# docs/install, docs/install.sh, and scripts/install.sh byte-for-byte synced
+# with this file.
+# Usage: curl -fsSL https://rampart.sh/install | sh
+# curl -fsSL https://rampart.sh/install | sh -s -- --version v0.1.0
+# curl -fsSL https://rampart.sh/install | sh -s -- --auto-setup
+# RAMPART_INSTALL_DRY_RUN=1 sh install.sh --version v1.0.0
+# RAMPART_VERSION=v1.0.0 RAMPART_INSTALL_DIR=$HOME/.local/bin sh install.sh
set -e
REPO="peg/rampart"
-INSTALL_DIR="${RAMPART_INSTALL_DIR:-$HOME/.local/bin}"
+INSTALL_DIR="${RAMPART_INSTALL_DIR:-}"
+BINARY="rampart"
VERSION="${RAMPART_VERSION:-}"
+AUTO_SETUP="${RAMPART_AUTO_SETUP:-0}"
DRY_RUN="${RAMPART_INSTALL_DRY_RUN:-0}"
-# ── Colors ────────────────────────────────────────────────────────────────────
+# Colors (if terminal supports them).
if [ -t 1 ]; then
- BOLD="\033[1m"; GREEN="\033[32m"; YELLOW="\033[33m"; RED="\033[31m"; RESET="\033[0m"
+ BOLD="\033[1m"
+ GREEN="\033[32m"
+ RED="\033[31m"
+ YELLOW="\033[33m"
+ RESET="\033[0m"
else
- BOLD=""; GREEN=""; YELLOW=""; RED=""; RESET=""
+ BOLD="" GREEN="" RED="" YELLOW="" RESET=""
fi
info() { printf "${GREEN}▸${RESET} %s\n" "$1"; }
-warn() { printf "${YELLOW}▸${RESET} %s\n" "$1" >&2; }
+warn() { printf "${YELLOW}▸${RESET} %s\n" "$1"; }
error() { printf "${RED}✗${RESET} %s\n" "$1" >&2; exit 1; }
-step() { printf "\n${BOLD}%s${RESET}\n" "$1"; }
-dry() { printf "${YELLOW}[dry-run]${RESET} %s\n" "$1"; }
-# ── Downloader ─────────────────────────────────────────────────────────────────
-fetch() { # fetch [dest]
- URL="$1"; DEST="$2"
+fetch() { # fetch [dest]
+ URL="$1"
+ DEST="${2:-}"
if command -v curl >/dev/null 2>&1; then
- if [ -n "$DEST" ]; then curl -fsSL -o "$DEST" "$URL"
- else curl -fsSL "$URL"; fi
+ if [ -n "$DEST" ]; then
+ curl -fsSL -o "$DEST" "$URL"
+ else
+ curl -fsSL "$URL"
+ fi
elif command -v wget >/dev/null 2>&1; then
- if [ -n "$DEST" ]; then wget -qO "$DEST" "$URL"
- else wget -qO- "$URL"; fi
+ if [ -n "$DEST" ]; then
+ wget -qO "$DEST" "$URL"
+ else
+ wget -qO- "$URL"
+ fi
else
error "Neither curl nor wget found. Install one and retry."
fi
}
-# ── OS / Arch ──────────────────────────────────────────────────────────────────
+# Parse args.
+while [ $# -gt 0 ]; do
+ case "$1" in
+ --version) VERSION="$2"; shift 2 ;;
+ --version=*) VERSION="${1#--version=}"; shift ;;
+ --auto-setup) AUTO_SETUP=1; shift ;;
+ --dry-run) DRY_RUN=1; shift ;;
+ *) error "Unknown option: $1" ;;
+ esac
+done
+
+# Detect OS.
OS="$(uname -s | tr '[:upper:]' '[:lower:]')"
case "$OS" in
- linux) OS="linux" ;;
+ linux) OS="linux" ;;
darwin) OS="darwin" ;;
- *) error "Unsupported OS: $(uname -s). Only linux and darwin are supported." ;;
+ *) error "Unsupported OS: $OS (need linux or darwin)" ;;
esac
+# Detect architecture.
ARCH="$(uname -m)"
case "$ARCH" in
- x86_64|amd64) ARCH="amd64" ;;
- aarch64|arm64) ARCH="arm64" ;;
- *) error "Unsupported architecture: $(uname -m). Only amd64 and arm64 are supported." ;;
+ x86_64|amd64) ARCH="amd64" ;;
+ aarch64|arm64) ARCH="arm64" ;;
+ *) error "Unsupported architecture: $ARCH (need amd64 or arm64)" ;;
esac
-info "Platform: ${BOLD}${OS}/${ARCH}${RESET}"
+info "Detected ${BOLD}${OS}/${ARCH}${RESET}"
-# ── Resolve version ────────────────────────────────────────────────────────────
+# Determine version.
if [ -z "$VERSION" ]; then
- info "Fetching latest release..."
- VERSION="$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
- | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')"
- [ -n "$VERSION" ] || error "Could not determine latest version. Set RAMPART_VERSION=vX.Y.Z and retry."
+ info "Fetching latest version..."
+ VERSION=$(fetch "https://api.github.com/repos/${REPO}/releases/latest" \
+ | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
+ if [ -z "$VERSION" ]; then
+ error "Could not determine latest version. Try: --version v0.1.0"
+ fi
fi
-# Normalise: ensure leading 'v'
+# Normalise version: release tags include a leading "v".
case "$VERSION" in
v*) ;;
*) VERSION="v${VERSION}" ;;
esac
-info "Version: ${BOLD}${VERSION}${RESET}"
+info "Installing ${BOLD}rampart ${VERSION}${RESET}"
-# ── Build URLs ─────────────────────────────────────────────────────────────────
-TARBALL="rampart_${VERSION#v}_${OS}_${ARCH}.tar.gz"
+if [ -z "$INSTALL_DIR" ]; then
+ if [ "$(id -u)" -eq 0 ]; then
+ INSTALL_DIR="/usr/local/bin"
+ elif [ -d "$HOME/.local/bin" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif [ "$DRY_RUN" = "1" ]; then
+ INSTALL_DIR="$HOME/.local/bin"
+ elif mkdir -p "$HOME/.local/bin" 2>/dev/null; then
+ INSTALL_DIR="$HOME/.local/bin"
+ else
+ INSTALL_DIR="/usr/local/bin"
+ fi
+fi
+
+# Build download URLs.
BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
+TARBALL="rampart_${VERSION#v}_${OS}_${ARCH}.tar.gz"
TARBALL_URL="${BASE_URL}/${TARBALL}"
CHECKSUM_URL="${BASE_URL}/checksums.txt"
if [ "$DRY_RUN" = "1" ]; then
- step "Dry-run — no changes will be made"
- dry "Would download: ${TARBALL_URL}"
- dry "Would install: ${INSTALL_DIR}/rampart"
- dry "Would run: rampart quickstart"
- if ! echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
- dry "Would hint to add ${INSTALL_DIR} to PATH"
- fi
+ info "Dry-run — no changes will be made"
+ info "Would download: ${TARBALL_URL}"
+ info "Would verify: ${CHECKSUM_URL}"
+ info "Would install: ${INSTALL_DIR}/${BINARY}"
exit 0
fi
-# ── Download & extract ─────────────────────────────────────────────────────────
-step "Downloading rampart ${VERSION}..."
-
+# Create temp directory.
TMP_DIR="$(mktemp -d)"
trap 'rm -rf "$TMP_DIR"' EXIT
-fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}" \
- || error "Download failed.\nURL: ${TARBALL_URL}\nCheck that ${VERSION} exists: https://github.com/${REPO}/releases"
+# Download archive.
+info "Downloading archive..."
+if ! fetch "$TARBALL_URL" "${TMP_DIR}/${TARBALL}"; then
+ error "Download failed. Check that ${VERSION} exists at:\n ${TARBALL_URL}"
+fi
-# Optional checksum verification
+# Download and verify checksum.
+info "Verifying checksum..."
if fetch "$CHECKSUM_URL" "${TMP_DIR}/checksums.txt" 2>/dev/null; then
+ EXPECTED=$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')
if command -v sha256sum >/dev/null 2>&1; then
- HASH_CMD="sha256sum"
+ ACTUAL=$(sha256sum "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
elif command -v shasum >/dev/null 2>&1; then
- HASH_CMD="shasum -a 256"
+ ACTUAL=$(shasum -a 256 "${TMP_DIR}/${TARBALL}" | awk '{print $1}')
else
- HASH_CMD=""
+ warn "No sha256sum or shasum found — skipping verification"
+ ACTUAL="$EXPECTED"
fi
- if [ -n "$HASH_CMD" ]; then
- EXPECTED="$(grep "${TARBALL}" "${TMP_DIR}/checksums.txt" | awk '{print $1}')"
- ACTUAL="$($HASH_CMD "${TMP_DIR}/${TARBALL}" | awk '{print $1}')"
- if [ -n "$EXPECTED" ] && [ "$EXPECTED" != "$ACTUAL" ]; then
- error "Checksum mismatch!\n Expected: ${EXPECTED}\n Got: ${ACTUAL}"
- fi
+
+ if [ -z "$EXPECTED" ]; then
+ warn "No checksum entry found for ${TARBALL} — skipping verification"
+ elif [ "$EXPECTED" != "$ACTUAL" ]; then
+ error "Checksum mismatch!\n Expected: ${EXPECTED}\n Got: ${ACTUAL}"
+ else
info "Checksum verified ✓"
fi
+else
+ warn "No checksums.txt found — skipping verification"
fi
tar -xzf "${TMP_DIR}/${TARBALL}" -C "$TMP_DIR"
-# ── Install ────────────────────────────────────────────────────────────────────
-step "Installing to ${INSTALL_DIR}..."
+if [ ! -f "${TMP_DIR}/${BINARY}" ]; then
+ error "Archive did not contain ${BINARY}"
+fi
-mkdir -p "$INSTALL_DIR"
-mv "${TMP_DIR}/rampart" "${INSTALL_DIR}/rampart"
-chmod +x "${INSTALL_DIR}/rampart"
+# Install.
+chmod +x "${TMP_DIR}/${BINARY}"
-info "Installed: ${BOLD}${INSTALL_DIR}/rampart${RESET}"
+if [ ! -d "$INSTALL_DIR" ]; then
+ if ! mkdir -p "$INSTALL_DIR" 2>/dev/null; then
+ info "Need sudo to create ${INSTALL_DIR}"
+ sudo mkdir -p "$INSTALL_DIR"
+ fi
+fi
-# PATH hint
-if ! echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
- warn "${INSTALL_DIR} is not in your PATH."
- warn "Add this to your shell profile (~/.bashrc, ~/.zshrc, etc.):"
- printf " ${BOLD}export PATH=\"\$HOME/.local/bin:\$PATH\"${RESET}\n" >&2
- export PATH="${INSTALL_DIR}:${PATH}"
+if [ -w "$INSTALL_DIR" ]; then
+ mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
+else
+ info "Need sudo to install to ${INSTALL_DIR}"
+ sudo mv "${TMP_DIR}/${BINARY}" "${INSTALL_DIR}/${BINARY}"
fi
-# ── Quickstart ─────────────────────────────────────────────────────────────────
-step "Running quickstart..."
+info "Installed to ${BOLD}${INSTALL_DIR}/${BINARY}${RESET}"
-if [ -t 0 ] && [ -t 1 ]; then
- rampart quickstart
+# Verify.
+RAMPART_BIN="${INSTALL_DIR}/${BINARY}"
+if [ -x "$RAMPART_BIN" ]; then
+ printf "\n"
+ "$RAMPART_BIN" version 2>/dev/null || true
+
+ if echo ":${PATH}:" | grep -q ":${INSTALL_DIR}:"; then
+ printf "\n${GREEN}${BOLD}Ready!${RESET} Run ${BOLD}rampart quickstart${RESET} to get started.\n"
+ else
+ printf "\n${YELLOW}Note:${RESET} ${INSTALL_DIR} may not be in your PATH.\n"
+ printf "Add it: ${BOLD}export PATH=\"${INSTALL_DIR}:\$PATH\"${RESET}\n"
+ printf "Then run: ${BOLD}rampart quickstart${RESET}\n"
+ fi
else
- rampart quickstart --env none 2>/dev/null || true
+ warn "Could not verify installed binary at ${INSTALL_DIR}/${BINARY}"
fi
-printf "\n${GREEN}${BOLD}Done!${RESET} rampart ${VERSION} is installed.\n"
-printf "Docs: ${BOLD}https://docs.rampart.sh${RESET}\n\n"
+# Detect AI agents and suggest setup commands.
+detect_agents_and_suggest() {
+ printf "\n"
+
+ # Detect OpenClaw
+ OPENCLAW_FOUND=0
+ if command -v openclaw >/dev/null 2>&1; then
+ OPENCLAW_FOUND=1
+ elif [ -f "$HOME/.local/bin/openclaw" ] || [ -f "/usr/local/bin/openclaw" ] || [ -f "/usr/bin/openclaw" ]; then
+ OPENCLAW_FOUND=1
+ fi
+
+ # Detect Claude Code (claude CLI)
+ CLAUDE_FOUND=0
+ if command -v claude >/dev/null 2>&1; then
+ CLAUDE_FOUND=1
+ elif [ -f "$HOME/.claude/settings.json" ]; then
+ CLAUDE_FOUND=1
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ] || [ "$CLAUDE_FOUND" -eq 1 ]; then
+ printf "${GREEN}${BOLD}✓ AI agent(s) detected!${RESET}\n\n"
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting OpenClaw...\n"
+ "$RAMPART_BIN" setup openclaw 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup openclaw${RESET}\n"
+ else
+ printf " Run this to protect your OpenClaw agent:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$CLAUDE_FOUND" -eq 1 ]; then
+ if [ "$AUTO_SETUP" = "1" ]; then
+ printf "${GREEN}▸${RESET} Auto-setup: protecting Claude Code...\n"
+ "$RAMPART_BIN" setup claude-code 2>&1 || printf "${YELLOW} ↳ Auto-setup failed — run manually: rampart setup claude-code${RESET}\n"
+ else
+ printf " Run this to protect Claude Code:\n"
+ printf " ${BOLD}rampart setup claude-code${RESET}\n"
+ printf "\n"
+ fi
+ fi
+
+ if [ "$OPENCLAW_FOUND" -eq 0 ] && [ "$CLAUDE_FOUND" -eq 0 ]; then
+ printf " To protect an AI agent, run:\n"
+ printf " ${BOLD}rampart setup openclaw${RESET} — for OpenClaw\n"
+ printf " ${BOLD}rampart setup claude-code${RESET} — for Claude Code\n"
+ printf "\n"
+ fi
+}
+
+if [ -x "$RAMPART_BIN" ]; then
+ detect_agents_and_suggest
+fi