@claw-link/gateway-host 0.2.11 → 0.2.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/scripts/install.js

@@ -22,6 +22,29 @@ function ask(rl, q, def) {
 }
 function execSafe(cmd) { try { return execSync(cmd, { stdio: ['ignore', 'pipe', 'ignore'] }).toString(); } catch { return null; } }
 
+// `npx` runs the package from a cache and NEVER puts the `clhost` bin on PATH — only a
+// global install does. So during setup we make `clhost` available (best-effort, non-fatal):
+// probe PATH, and if it's missing, do a quiet global install of the same version.
+function clhostOnPath() {
+  const probe = process.platform === 'win32' ? 'where clhost' : 'command -v clhost';
+  return execSafe(probe) != null;
+}
+function ensureGlobalCli() {
+  if (clhostOnPath()) return true;
+  try { execSync(`npm install -g @claw-link/gateway-host@${VERSION}`, { stdio: 'ignore', timeout: 120000 }); }
+  catch { /* no permission / offline — reportCli() prints the manual fallback */ }
+  return clhostOnPath();
+}
+function reportCli() {
+  if (ensureGlobalCli()) {
+    console.log('  ✓ The `clhost` command is ready — try:  clhost status');
+  } else {
+    console.log('  ℹ To get the short `clhost` command, install it once (you may need sudo):');
+    console.log('       npm i -g @claw-link/gateway-host');
+    console.log('     Until then, run commands as:  npx @claw-link/gateway-host <command>');
+  }
+}
+
 // The bridge URL is baked in (config.DEFAULT_BRIDGE_URL / CLAWLINK_BRIDGE_URL env)
 // — operators never type it. We just ensure it's populated.
 function ensureBridgeUrl(cfg) {
@@ -110,6 +133,7 @@ async function run() {
     console.log(installed
       ? '  ✓ Service refreshed to the latest version.'
       : '  ⚠ Could not refresh the service automatically — run:  clhost restart');
+    reportCli();
     console.log('\n  Commands:  clhost status · clhost agents · clhost add-agent · clhost transport-test\n');
     return;
   }
@@ -133,6 +157,7 @@ async function run() {
   console.log(installed
     ? '  ✓ Installed + started the background service.'
     : '  ⚠ Could not install a background service automatically.\n    Run it yourself with:  clhost run');
+  reportCli();
   console.log('\n  Check status in ClawLink → Agents → Host Gateway (connection badge).\n');
 }
 
@@ -143,7 +168,8 @@ async function installOnly() {
   config.save(cfg);
   const installed = installService();
   console.log(installed ? '  ✓ Service installed.' : '  ⚠ Could not install the service automatically.');
-  console.log('  Next: npx @claw-link/gateway-host add-agent\n');
+  reportCli();
+  console.log('  Next: clhost add-agent  (or npx @claw-link/gateway-host add-agent)\n');
 }
 
 // `add-agent` — add one agent by token, then restart the service to pick it up.

package/src/adapters/cli.js

@@ -116,8 +116,13 @@ function makeCliAdapter(cfg) {
       // edit or run shell. permArgs is handed to defaultArgs so each adapter can place
       // it correctly (e.g. Codex must put flags BEFORE its `--` end-of-options).
       // Operator args_template overrides take full control.
-      const scope = job.scope || 'customer';
-      const permArgs = (!Array.isArray(agent.args_template) && cfg.permissions) ? cfg.permissions(scope) : [];
+      // Harness nodes do collaborative work (write code/files, run commands), so they get
+      // workspace-write like an admin "configure" turn — even though they're carried on the
+      // 'customer' scope. Real customer chats stay read-only.
+      const writable = !!job.harness || job.scope === 'configure' || job.scope === 'sub_configure';
+      const permArgs = (!Array.isArray(agent.args_template) && cfg.permissions)
+        ? cfg.permissions(writable ? 'configure' : (job.scope || 'customer'))
+        : [];
       const argvFor = (rid) => Array.isArray(agent.args_template)
         ? buildArgv(agent.args_template, { prompt: fullPrompt, sessionId: rid || '', systemPrompt })
         : cfg.defaultArgs(fullPrompt, rid, cfg.promptViaStdin, permArgs);