@claw-link/gateway-host 0.2.1 → 0.2.3

package/README.md

@@ -61,6 +61,17 @@ Change the Claude model by editing `.claude/settings.json` (e.g. `"model": "opus
 For Codex/Cursor, set the model via their CLI (`args_template` in the config, or the
 tool's own settings).
 
+**Permissions by scope** — each job carries a scope, and the Claude adapter runs with
+matching permissions automatically:
+
+| Trigger | Scope | Claude permissions |
+|---------|-------|--------------------|
+| Admin **Setup via Chat** / apply skill | `configure` | `--permission-mode acceptEdits` — may write workspace files (GUARDRAILS/SOUL/BOOTSTRAP/TOOLS/AGENTS) |
+| Customer chat + discovery | `customer` | `--disallowedTools "Write Edit MultiEdit NotebookEdit Bash"` — **read-only**, cannot edit config or run shell |
+
+So an agent's files are editable from the admin panel but never from customer/discovery
+chat. (Operator `args_template` overrides this for advanced setups.)
+
 ## Commands
 
 After install the `clhost` command is available (aliases: `gateway-host`, `claw-host`):

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/scripts/install.js

@@ -54,8 +54,10 @@ async function addAgentInteractive(cfg, rl) {
     agent.local_gateway_token = await ask(rl, '  Local OpenClaw gateway token (optional)', '');
     agent.work_dir = defaultWs;
   } else {
+    // Store the ABSOLUTE binary path so the background service (minimal PATH) can
+    // always find it — `spawn('claude')` fails under launchd/systemd otherwise.
     if (!detected[runtime]) agent.binary = await ask(rl, `  '${runtime}' not found on PATH — full path to the binary`, runtime);
-    else console.log(`    using ${runtime}: ${detected[runtime]}`);
+    else { agent.binary = detected[runtime]; console.log(`    using ${runtime}: ${detected[runtime]}`); }
 
     // Coding runtimes run inside a project workspace. Default to the managed
     // workspace/<runtime>/agents/<id> folder; an explicit project path is also fine.

package/src/adapters/base.js

@@ -9,6 +9,7 @@
 
 const { spawn } = require('child_process');
 const logger = require('../logger');
+const { enrichedEnv } = require('../paths');
 
 // A small set of flags we refuse to pass through (auto-approve / no-safety modes).
 const FORBIDDEN_FLAGS = [
@@ -45,7 +46,8 @@ async function* spawnStreaming({ binary, argv, cwd, env, timeoutMs = 600000, std
 
   const child = spawn(binary, argv, {
     cwd: cwd || undefined,
-    env: { ...process.env, ...(env || {}) },
+    // Enriched PATH so a CLI in ~/.local/bin etc. resolves under a service's minimal env.
+    env: enrichedEnv(env),
     shell: false, // CRITICAL: never use a shell
     stdio: ['pipe', 'pipe', 'pipe'],
   });

package/src/adapters/claude.js

@@ -16,4 +16,11 @@ module.exports = makeCliAdapter({
     '--verbose',
     ...(resumeId ? ['--resume', resumeId] : []),
   ],
+  // Admin "configure" turns may write workspace files (auto-accept edits, no shell
+  // prompt); customer/discovery turns are strictly read-only (no Write/Edit/Bash) so
+  // they can never modify the agent's config or hang on a permission prompt.
+  permissions: (scope) =>
+    (scope === 'configure' || scope === 'sub_configure')
+      ? ['--permission-mode', 'acceptEdits']
+      : ['--disallowedTools', 'Write Edit MultiEdit NotebookEdit Bash'],
 });

package/src/adapters/cli.js

@@ -76,9 +76,14 @@ function makeCliAdapter(cfg) {
       // spawn never fails with ENOENT (coding workspaces are validated at setup).
       try { fs.mkdirSync(agent.work_dir, { recursive: true }); } catch { /* ignore */ }
 
+      // Scope-based permissions: admin "configure" turns may write workspace files
+      // (GUARDRAILS/SOUL/etc.); customer/discovery turns are read-only and cannot
+      // edit or run shell. Operator args_template overrides take full control.
+      const scope = job.scope || 'customer';
+      const permArgs = (!Array.isArray(agent.args_template) && cfg.permissions) ? cfg.permissions(scope) : [];
       const argvFor = (rid) => Array.isArray(agent.args_template)
         ? buildArgv(agent.args_template, { prompt: fullPrompt, sessionId: rid || '', systemPrompt })
-        : cfg.defaultArgs(fullPrompt, rid, cfg.promptViaStdin);
+        : [...cfg.defaultArgs(fullPrompt, rid, cfg.promptViaStdin), ...permArgs];
 
       let emittedAny = false;
       const runOnce = async function* (rid) {

package/src/detect.js

@@ -2,11 +2,13 @@
 // Detect which runtime CLIs are installed, to pre-fill the setup wizard.
 
 const { execSync } = require('child_process');
+const { enrichedEnv } = require('./paths');
 
 function which(cmd) {
   const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
   try {
-    const out = execSync(probe, { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+    // Use an enriched PATH so detection works under a service's minimal environment.
+    const out = execSync(probe, { stdio: ['ignore', 'pipe', 'ignore'], env: enrichedEnv() }).toString().trim();
     return out.split(/\r?\n/)[0] || null;
   } catch { return null; }
 }

package/src/paths.js

@@ -0,0 +1,35 @@
+'use strict';
+// Background services (launchd/systemd) run with a MINIMAL PATH that usually omits
+// ~/.local/bin, /opt/homebrew/bin, npm-global, etc. — so a CLI installed there
+// (e.g. claude at ~/.local/bin) fails with `spawn <cmd> ENOENT`. We enrich PATH for
+// both runtime detection and CLI spawning so agents resolve regardless of how the
+// service was launched.
+
+const os = require('os');
+const path = require('path');
+
+function enrichedPath() {
+  const home = os.homedir();
+  const extras = [
+    path.dirname(process.execPath),            // dir of the running node (npm-global CLIs)
+    path.join(home, '.local', 'bin'),
+    path.join(home, 'bin'),
+    path.join(home, '.npm-global', 'bin'),
+    path.join(home, '.bun', 'bin'),
+    path.join(home, '.cargo', 'bin'),
+    '/opt/homebrew/bin',
+    '/usr/local/bin',
+    '/usr/bin', '/bin', '/usr/sbin', '/sbin',
+  ];
+  const seen = new Set();
+  const parts = [...extras, ...String(process.env.PATH || '').split(path.delimiter)]
+    .filter((p) => p && !seen.has(p) && seen.add(p));
+  return parts.join(path.delimiter);
+}
+
+// An env with the enriched PATH, suitable for spawn/exec.
+function enrichedEnv(extra) {
+  return { ...process.env, ...(extra || {}), PATH: enrichedPath() };
+}
+
+module.exports = { enrichedPath, enrichedEnv };