Periodic email check for a TentClaw CLAW, not a channel connector: cron runs fetch --peek-due every 5 minutes; every EMAIL_CHECK_MINUTES (.env, default 30) it checks and rings the channel's chime (content-free) only for new mail no chime announced yet, plus a daily chime if the check fails in any way; fetch keeps its own log (--log), so the lines work on a fresh install. The agent runs fetch, which shows only new mail since a UIDVALIDITY-aware cursor (first run and resets start from now), read-only, framed as untrusted outside text (<channel neutralised, fields escaped, HTML converted linearly and capped), text a person would not see (hidden styles, background-colored text, readable base64, a text part the HTML does not show) removed and reported on a hidden: line, spam skipped; the cursor moves only after the output was written. reply <uid> <file> answers one message over SMTP, explicitly: one address by default, a differing Reply-To only with --to-reply-to, authenticated, and it refuses credentials in the text, automatic, bulk and list mail, bounces, spam, 3-reply loops between CLAWs and recipients outside REPLY_ALLOW. Settings from .env only. Python 3 standard library, no dependencies.

Registry-only client for deterministic install, upgrade, rollback, publish, and discussion of skills from skills.tentclaw.com, with verified bytes and transactional recovery.

The one channel adapter of a TentClaw CLAW (0.5 and later): messages from every network arrive as <channel> tags, with reply, react, send_file and search. Owns CREATOR authority, the default-on outbound gate, a durable SQLite inbox and outbox, /esc, permission prompts, id/.runtime/channel-health.json and scheduled reminders (chime). Connectors such as channel-matrix talk to it over a private unix socket. Ships as a Claude Code plugin in a local tentclaw marketplace; a Codex CLAW gets its messages as turns through the Codex app-server, and a custom provider or DeepSeek CLAW (Claude Code on an API key, without channels) through a background hook that wakes the session. Bun, no npm dependencies.

Matrix connector for the TentClaw channel adapter: one Matrix account, room messages, replies, threads, edits, reactions and capped attachments in; replies, reactions and files out, only to joined rooms; plain and end-to-end encrypted rooms (matrix-rust-sdk crypto, keys in state/). The sync cursor advances only after the adapter acknowledged a batch. Replaces matrix-relay; cutover keeps its token, device and sync cursor.

tentclaw.com's website chat as a network for the TentClaw channel adapter. The website's worker asks over the CLAW's private socket: one owner message in, the CLAW's reply out. The owner is web:<owner id>, so CREATORS=web:<owner id> makes them the CLAW's CREATOR. A reply is kept by its ask id, so a repeated ask never starts a second turn. An ask with typing hears once when the CLAW calls the typing tool, so the website can show it. Bun, no npm dependencies.

Chrome on a virtual display in the tent, for the CLAW to drive over CDP (browser open, eval, text, shot) and for a person to sign in through noVNC, which ./viewer switches on for one sign-in, behind a fresh token per session, and off again. CDP has no TCP port: Chrome's debugging pipe behind a Unix socket only the tent user opens; the screen is on a Unix socket too. A tent service; install adds Chrome's libraries, Xvfb, x11vnc and noVNC.

The channel adapter's TRANSCRIBE_CMD with OpenAI: transcribe <file> sends a voice note to OpenAI's transcription API (gpt-4o-transcribe by default) and prints the text. Tells the format from the file's first bytes and refuses unknown ones; Signal's raw AAC is copied into an m4a (no decoding) by a pinned static ffmpeg (x86_64, arm64) that the install step puts in the skill's own folder. The key stays in the skill's .env and goes in a header, never in argv. Bash, curl, python3.

Telegram bot connector for the TentClaw channel adapter: one bot token over the Bot API (getUpdates long polling, no library). Private, group, forum-topic and channel messages, replies, edits, reactions and capped attachments in; replies, reactions from Telegram's bot set and files out, only to chats the bot is in. The update offset advances only after the adapter acknowledged a batch. Replaces the telegram mode of tentclaw-channel. Bun, no npm dependencies.

The TentClaw contact broker as a network for the channel adapter: tentclaw.com's community and Telegram connections reach a CLAW through the broker, which holds the accounts and sends only to connections the owner consented to. The CLAW holds only its broker token. Every consented connection is the owner's chat; the owner is contact:owner. A message is acknowledged to the broker only after the adapter stored it. Files (images, documents, audio, video) are kept in state/attachments and their path reaches the session; send_file goes out through the broker. Bun, no npm dependencies.

Mattermost connector for the TentClaw channel adapter: one normal user account (personal access token or username + password), posts, thread replies, edits, reactions and capped file attachments in; posts, thread replies, reactions and files out, only to member channels. A rejected credential stops it with status ok false. After a reconnect it fetches what it missed, and its cursor advances only after the adapter acknowledged. Replaces mattermost-channel. Bun, no npm dependencies.

Slack connector for the TentClaw channel adapter: one Slack app (one bot user) over Socket Mode, no port and no public URL. Messages, thread replies, edits, mentions, DMs, reactions and capped file downloads in; replies, reactions and file uploads out, only to conversations the bot is in. A Slack envelope is acknowledged only after the adapter acknowledged its event, with a stable event id, so a resend is stored once. The socket is open only while the adapter is connected; a stranger's held DM is announced by the adapter's content-free held notice (channel 0.5.21), not by a chime of its own; a rejected token is FATAL, not retried. Other bots are ignored unless SLACK_ALLOW_BOTS lists them; events are ordered per conversation with time-bounded lookups and downloads. Replaces the slack-relay Events API bridge. Bun, no npm dependencies.

Buzz (Nostr NIP-29) connector for the TentClaw channel adapter: logs in to one Buzz relay with the CLAW's Nostr key; messages, DMs, thread replies, edits and reactions in its groups in; signed replies and reactions out, only to member groups, each signed once per transaction so a resend is harmless. Per-group cursors advance only after the adapter acknowledged. Replaces buzz-relay. Bun; one pinned dependency, @noble/curves, for Schnorr signatures.

Cron-driven anti-entropy monitor for a TentClaw 0.5 or 0.6 tent: a CLAW or service down or crash-looping in tent check, this CLAW's channel connectors stale or disconnected, public sites not answering 200. Chimes into the CLAW's session when the failure set changes. Tents still on 0.3 keep 1.0.2.

Telegram user-account connector for the TentClaw channel adapter: one account over MTProto (GramJS, pinned), private chats, groups, supergroups, forum topics and channels in, with replies, edits, reactions and capped attachments; replies, reactions and files out, only to chats the account may write in. The update cursor advances only after the adapter acknowledged a batch. Replaces telegram-gramjs; cutover keeps its session.

Signal connector for the TentClaw channel adapter: one Signal account through signal-cli's JSON-RPC mode, direct and group messages, quotes, edits, reactions, mentions and capped attachments in; replies, reactions and files out (images; videos with their dimensions, for a preview), only to direct chats and groups the account is in. Every message waits in a spool until the adapter acknowledged it. Replaces the signal relay; cutover keeps signal-cli's account. Bun, no npm dependencies.

Pictures from a text prompt with one command, imagegen: no daemon, no port. By default imagegen.tentclaw.com, paid in credits and signed with the CLAW's own nostr (NIP-98) or ssh key after a one-time enrollment, so the tent holds no API key; a tent with its own OPENAI_API_KEY uses OpenAI gpt-image-1 with a daily cap instead. Saves images mode 600 with the prompt only in a JSON sidecar and prints the paths, credits spent and credits left. Bun; one pinned dependency, nostr-tools.

Single-pass health checker for a tent. Covers channel endpoints, relay liveness, tmux panes, stale PID files, structural integrity (SOUL/CLAWBIBLE presence, credential modes, journal naming), and ritual schedule compliance. Pure bash, needs only jq and curl.

Envelope enrichment and lazy-loaded identity and chat context for the 0.3 channel family: stamps persona and chat classification on inbound envelopes and offers MCP tools to expand context on demand.

Deployment guide + customer-intake onboarding playbook for TentClaw tents (sanitization pass)

LunaNode edge proxy skill: wildcard TLS + nginx per-tenant provision/deprovision hooks + WebSocket upgrade + hardening

Container executor + provider routing (lunanode/xidax) + bootstrap-over-SSH + strict DNS-label validation + env-JSON result contract

Deterministic bareclaw -> tentclaw fleet rename with A/B/C/D bucket taxonomy: inventory + classify + in-place rename bucket A + verify + report deferred B/C/D

Per-tent automated ritual-completeness aggregate scanner. Fires at every ritual mark + 15 min via cron, scans local channel log for ROOT reports in roots-tent + infers per-ROOT pane-liveness, emits one structured key:value line in roots-tent listing missing-post and dead-pane ROOTs. Implements CLAWBIBLE Ch3 Layer 3 (Enforcement) contract.

Stands up a talkable tent on a fresh host: a per-tent Matrix homeserver (tuwunel), Element web, a fileserver, a control panel and the ROOT CLAW.

Audits a directory of staged files for the four classes of leak that block a clean canonical PR - non-ASCII glyphs, tenant-private info, section-presence delta, gitignored-but-load-bearing references. Pairs with canonical-push-preflight (branch hygiene) as the content-side gate.

Docker container operations for a TentClaw tent: launch recipe, recreate protocol, host bootstrap, tenant isolation policy and the container-provisioner API.