ape-claw 0.1.6 → 0.1.8

package/src/lib/openclaw-paths.mjs

@@ -0,0 +1,65 @@
+import os from "node:os";
+import path from "node:path";
+
+function clean(v) {
+  return String(v || "").trim();
+}
+
+function uniq(list) {
+  const seen = new Set();
+  const out = [];
+  for (const item of list) {
+    const v = clean(item);
+    if (!v || seen.has(v)) continue;
+    seen.add(v);
+    out.push(v);
+  }
+  return out;
+}
+
+export function openClawHomeDir() {
+  return clean(process.env.OPENCLAW_HOME) || os.homedir();
+}
+
+export function openClawRootCandidates() {
+  const home = openClawHomeDir();
+  const stateDir = clean(process.env.OPENCLAW_STATE_DIR);
+  const configPath = clean(process.env.OPENCLAW_CONFIG_PATH);
+  const configDir = configPath ? path.dirname(configPath) : "";
+  return uniq([
+    path.join(home, ".openclaw"),
+    stateDir,
+    configDir,
+    "/data/.clawdbot",
+  ]);
+}
+
+export function openClawSkillsDirCandidates() {
+  const explicitSkillsDir = clean(process.env.OPENCLAW_SKILLS_DIR);
+  const roots = openClawRootCandidates();
+  return uniq([
+    explicitSkillsDir,
+    ...roots.map((r) => path.join(r, "skills")),
+  ]);
+}
+
+export function openClawWorkspaceSkillsDirCandidates() {
+  return uniq(openClawRootCandidates().map((r) => path.join(r, "workspace", "skills")));
+}
+
+export function openClawConfigCandidates() {
+  const explicit = clean(process.env.OPENCLAW_CONFIG_PATH);
+  const roots = openClawRootCandidates();
+  return uniq([
+    explicit,
+    ...roots.map((r) => path.join(r, "openclaw.json")),
+  ]);
+}
+
+export function openClawEnvFileCandidates() {
+  return uniq(openClawRootCandidates().map((r) => path.join(r, ".env")));
+}
+
+export function openClawControlUiIndexCandidates() {
+  return uniq(openClawRootCandidates().map((r) => path.join(r, "dist", "control-ui", "index.html")));
+}

package/src/server/index.mjs

@@ -18,6 +18,7 @@ import { handleHealth } from "./routes/health.mjs";
 import { handleEventsSse, handleEventsBacklog, handlePostEvent } from "./routes/events.mjs";
 import {
   handleSkillsSearch, handleSkillsGet, handleSkillsStats,
+  handleOpenClawInstalledSkills,
   handleSkillcardsUserGet, handleSkillcardsAuthCheck,
   handleSkillcardsUserAdd, handleSkillcardsUserDelete,
   handleSkillcardsUserMarkOnchain, handleSkillcardFile,
@@ -30,7 +31,8 @@ import {
   handleChatStream, handleChatGet, handleChatRooms,
   handleChatPost, handleChatReact,
 } from "./routes/chat.mjs";
-import { handleForgeChat, handleForgeStatus, initForgeAgent } from "./routes/forge-agent.mjs";
+import { handleForgeChat, handleForgeStatus, handleForgeGatewayControl, initForgeAgent } from "./routes/forge-agent.mjs";
+import { handleOpenClawEnvGet, handleOpenClawEnvSet } from "./routes/openclaw-env.mjs";
 import { handleV2ReceiptGet, handleV2Config } from "./routes/v2.mjs";
 import { handlePodStatus, handlePodStop, handlePodFiles, handleStarterPack } from "./routes/pod.mjs";
 import {
@@ -114,6 +116,7 @@ const server = http.createServer((req, res) => {
   if (pathname === "/api/skills/search" && req.method === "GET") return safeHandler(handleSkillsSearch)(req, res, reqUrl);
   if (pathname === "/api/skills/get" && req.method === "GET") return safeHandler(handleSkillsGet)(req, res, reqUrl);
   if (pathname === "/api/skills/stats" && req.method === "GET") return safeHandler(handleSkillsStats)(req, res);
+  if (pathname === "/api/skills/openclaw-installed" && req.method === "GET") return safeHandler(handleOpenClawInstalledSkills)(req, res, reqUrl);
   if (pathname === "/api/skillcards/user/auth-check" && req.method === "GET") return safeHandler(handleSkillcardsAuthCheck)(req, res);
   if (pathname === "/api/skillcards/user/add" && req.method === "POST") return safeHandler(handleSkillcardsUserAdd)(req, res);
   if (pathname === "/api/skillcards/user/delete" && req.method === "POST") return safeHandler(handleSkillcardsUserDelete)(req, res);
@@ -126,6 +129,9 @@ const server = http.createServer((req, res) => {
   if (pathname === "/api/events" && req.method === "POST") return safeHandler(handlePostEvent)(req, res);
   if (pathname === "/api/forge/status" && req.method === "GET") return safeHandler(handleForgeStatus)(req, res);
   if (pathname === "/api/forge/chat" && req.method === "POST") return safeHandler(handleForgeChat)(req, res);
+  if (pathname === "/api/forge/gateway/control" && req.method === "POST") return safeHandler(handleForgeGatewayControl)(req, res);
+  if (pathname === "/api/openclaw/env" && req.method === "GET") return safeHandler(handleOpenClawEnvGet)(req, res);
+  if (pathname === "/api/openclaw/env" && req.method === "POST") return safeHandler(handleOpenClawEnvSet)(req, res);
   if (pathname === "/api/chat/stream") return safeHandler(handleChatStream)(req, res, reqUrl);
   if (pathname === "/api/chat" && req.method === "GET") return safeHandler(handleChatGet)(req, res, reqUrl);
   if (pathname === "/api/chat/rooms" && req.method === "GET") return safeHandler(handleChatRooms)(req, res, reqUrl);
@@ -173,7 +179,7 @@ function shutdown(signal) {
 process.on("SIGTERM", () => shutdown("SIGTERM"));
 process.on("SIGINT", () => shutdown("SIGINT"));
 
-server.listen(PORT, BIND_HOST || undefined, () => {
+server.listen(PORT, BIND_HOST || "0.0.0.0", () => {
   logger.info({ port: PORT, bind: BIND_HOST || "0.0.0.0", corsOrigins: process.env.APE_CLAW_CORS_ORIGINS || "(default)" }, "Server listening");
   console.log(`ape-claw telemetry server listening on http://localhost:${PORT}`);
   console.log(`SSE stream: http://localhost:${PORT}/events`);

package/src/server/middleware/auth.mjs

@@ -16,6 +16,11 @@ export function getRegistrationKey() { return REGISTRATION_KEY; }
 export function getMoltbookAppKey() { return MOLTBOOK_APP_KEY; }
 export function getMoltbookApiBase() { return MOLTBOOK_API_BASE; }
 
+function isLocalRequest(req) {
+  const ip = String(req?.socket?.remoteAddress || "");
+  return ip === "127.0.0.1" || ip === "::1" || ip === "::ffff:127.0.0.1";
+}
+
 export function requireSkillWriteAuth(req) {
   const adminKey = String(req.headers["x-registration-key"] || "").trim();
   if (adminKey && REGISTRATION_KEY && adminKey === REGISTRATION_KEY) {
@@ -29,6 +34,11 @@ export function requireSkillWriteAuth(req) {
       if (v?.verified) return { ok: true, mode: "agent", agentId };
     } catch {}
   }
+  // Local Forge installs are allowed without clawbot credentials.
+  // Credentials remain optional for users who want global telemetry/dashboard posting.
+  if (isLocalRequest(req)) {
+    return { ok: true, mode: "local", agentId: "local-forge" };
+  }
   return { ok: false, mode: "none", agentId: null };
 }