hovclaw 0.1.2 → 0.1.4

package/README.md

@@ -1,7 +1,7 @@
 <h1 align="center">HOVClaw</h1>
 
 <p align="center">
-  <strong>Lean self-hosted AI agent gateway with OpenClaw-compatible control surface</strong>
+  <strong>Lean self-hosted AI agent gateway</strong>
 </p>
 
 <p align="center">
@@ -20,7 +20,6 @@ HOVClaw is built on a simple principle: **run your own AI agent infrastructure,
 
 - **Self-hosted first** - Everything runs on your machine, no cloud dependency
 - **Channel-native** - Talk to your agent via Telegram or Discord, not a custom app
-- **OpenClaw-compatible** - Mirror config to `~/.openclaw` for ClawHub discovery and tooling interop
 - **Gateway-first control** - WebSocket protocol v3 for programmatic access, with a built-in web UI for quick ops
 
 ## Features
@@ -34,15 +33,17 @@ HOVClaw is built on a simple principle: **run your own AI agent infrastructure,
 - **Policy layer** - `dmPolicy`, `groupPolicy`, per-group/per-topic overrides, pairing flow
 - **Native Telegram commands** - Auto-registered slash command menu (including skill aliases)
 - **Thinking controls** - `/think <level> <task>` plus persisted default via `commands.defaultThinkingLevel`
+- **Exec chat approvals** - `/bash <cmd>` requests approval and `/approve <id> allow-once|allow-always|deny` resolves
 
 ### Gateway & Control Plane
 
-- **WebSocket protocol v3** - Request/response/event frames with 21 methods
+- **WebSocket protocol v3** - Request/response/event frames with 25 methods
 - **Built-in web UI** - Connection, health, channels, sessions, and chat in one page
 - **Fail-closed auth defaults** - Gateway auth is required unless explicitly opting into insecure mode
 - **Origin-aware WS policy** - Browser `Origin` headers must be same-origin or allowlisted
 - **LaunchAgent integration** - `hovclaw gateway install/start/stop` for macOS background service
 - **Programmatic access** - `hovclaw gateway call <method>` for scripting
+- **Approval APIs** - `exec.approval.request|resolve` and `exec.approvals.get|set`
 
 ### Agent Runtime
 
@@ -50,7 +51,9 @@ HOVClaw is built on a simple principle: **run your own AI agent infrastructure,
 - **Multi-provider models** - Anthropic, Google, OpenAI, OpenRouter via `@mariozechner/pi-ai`
 - **Model routing** - Per-target model slots (interactive, discord, cron) with fallback policy
 - **Workspace-first tools** - Relative file tool paths resolve from agent workspace
-- **Least-privilege tools** - Bash tool disabled by default (`runtime.tools.bashEnabled=false`)
+- **Exec approvals model** - deny/allowlist/full + `off|on-miss|always` ask modes with persistent allowlists
+- **Least-privilege defaults** - exec disabled by default (`runtime.tools.exec.enabled=false`)
+- **Read-only diagnostics** - built-in `diagnose_device` tool (`profile=core`)
 - **Session persistence** - SQLite-backed sessions, messages, agent state, and usage tracking
 
 ### Scheduling & Automation
@@ -59,12 +62,6 @@ HOVClaw is built on a simple principle: **run your own AI agent infrastructure,
 - **Channel notifications** - Scheduled job results delivered to Telegram or Discord
 - **Concurrent execution** - Configurable max concurrent jobs
 
-### OpenClaw Compatibility
-
-- **Mirror strategy** - HOVClaw is source of truth; mirror files written to `~/.openclaw`
-- **ClawHub discovery** - `~/.openclaw/openclaw.json` + `~/.openclaw/skills` symlink
-- **Compat CLI** - `hovclaw compat status --sync` to verify mirror state
-
 ## Installation
 
 ### Prerequisites
@@ -113,7 +110,7 @@ and agent configuration. All settings are saved to `~/.hovclaw/config.json`.
 Security defaults in this release are intentionally strict:
 - gateway start fails if `gateway.enabled=true` and neither `gateway.auth.token` nor `gateway.auth.password` is set (unless `gateway.auth.allowUnauthenticated=true`)
 - Telegram webhook mode requires a non-empty webhook secret
-- bash runtime tool is opt-in only via `runtime.tools.bashEnabled=true`
+- exec runtime tool is opt-in via `runtime.tools.exec.enabled=true` (legacy `runtime.tools.bashEnabled=true` still maps to exec enabled)
 
 Agent and skill definitions are loaded from:
 - `~/.hovclaw/agents/<name>/agent.json` (`CLAUDE.md`, `cron.json`)
@@ -194,7 +191,7 @@ Environment overrides are supported for most fields. See [docs/config-reference.
 │                                                               │
 │  ┌────────────────────────────────────────────────────────┐   │
 │  │                    Gateway (ws + http)                  │   │
-│  │  WebSocket v3 protocol  •  Web UI  •  21 methods       │   │
+│  │  WebSocket v3 protocol  •  Web UI  •  25 methods       │   │
 │  └────────────────────────────────────────────────────────┘   │
 │                                                               │
 │  ┌────────────────────────────────────────────────────────┐   │
@@ -212,7 +209,7 @@ Environment overrides are supported for most fields. See [docs/config-reference.
 | **Agent Manager** | Per-session agent lifecycle, state persistence, model resolution |
 | **Router** | Binding-based inbound routing with peer/guild/account/channel cascade |
 | **Scheduler** | Cron job loading, execution, and channel notifications |
-| **Gateway** | WebSocket v3 server with 21 methods, 5 event types, built-in web UI |
+| **Gateway** | WebSocket v3 server with 25 methods, 7 event types, built-in web UI |
 | **Skill Loader** | SKILL.md frontmatter parsing and dependency checking |
 | **Channels** | Telegram (multi-account, policy, pairing) and Discord adapters |
 
@@ -252,8 +249,6 @@ hovclaw gateway open-ui
 # Daemon
 hovclaw daemon install|uninstall|start|stop|restart|status|logs
 
-# Compatibility
-hovclaw compat status [--sync] [--json]
 ```
 
 ## Gateway Methods (v3)
@@ -273,8 +268,10 @@ hovclaw compat status [--sync] [--json]
 | `chat.history` / `chat.send` / `chat.abort` | Chat session interaction |
 | `cron.list` / `cron.status` | Scheduled job listing and status |
 | `logs.tail` | Recent audit events |
+| `exec.approval.request` / `exec.approval.resolve` | Create and resolve pending exec approvals |
+| `exec.approvals.get` / `exec.approvals.set` | Read/write persisted exec defaults and per-agent allowlists |
 
-Events: `tick`, `health`, `agent`, `chat`, `shutdown`
+Events: `tick`, `health`, `agent`, `chat`, `shutdown`, `exec.approval.requested`, `exec.approval.resolved`
 
 ## Development
 

package/dist/{doctor-D52M80De.js → doctor-0iphhiTj.js}

@@ -1,4 +1,4 @@
-import { A as ensureConfigFromLegacyEnv, F as hasConfigFile, H as saveCredentials, I as hasCredentialsFile, L as loadConfig, M as getCredentialsPath, P as getHovclawHome, R as loadCredentials, V as saveConfigFile, j as getConfigPath, k as detectLegacyEnvConfig, z as loadFileConfig } from "./hovclaw.js";
+import { B as loadCredentials, I as getHovclawHome, L as hasConfigFile, M as ensureConfigFromLegacyEnv, N as getConfigPath, P as getCredentialsPath, R as hasCredentialsFile, U as saveConfigFile, V as loadFileConfig, W as saveCredentials, j as detectLegacyEnvConfig, z as loadConfig } from "./hovclaw.js";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -148,7 +148,7 @@ function runDoctorChecks(options, env = process.env) {
 			} else addFinding(findings, "telegram-webhook-secret", "fail", "Telegram webhook secret missing", `Accounts: ${webhookAccountsMissingSecret.join(", ")}`);
 			else addFinding(findings, "telegram-webhook-secret", "pass", "Telegram webhook secret policy", "OK");
 		}
-		if (!loadedConfig.gateway.enabled) addFinding(findings, "gateway-enabled", "warn", "Gateway is disabled", "Enable gateway for OpenClaw/ClawHub compatibility.");
+		if (!loadedConfig.gateway.enabled) addFinding(findings, "gateway-enabled", "warn", "Gateway is disabled", "Enable gateway for gateway RPC and built-in web UI access.");
 		else addFinding(findings, "gateway-enabled", "pass", "Gateway enabled", "OK");
 		if (loadedConfig.gateway.auth.allowUnauthenticated) addFinding(findings, "gateway-auth-mode", "warn", "Gateway unauthenticated mode is enabled", "Set gateway.auth.allowUnauthenticated=false for secure deployments.");
 		else if (!loadedConfig.gateway.auth.token.trim() && !loadedConfig.gateway.auth.password.trim()) if (options.repair) {