Periodic email check for a TentClaw CLAW, not a channel connector: cron runs fetch --peek-due every 5 minutes; every EMAIL_CHECK_MINUTES (.env, default 30) it checks and rings the channel's chime (content-free) only for new mail no chime announced yet, plus a daily chime if the check fails in any way; fetch keeps its own log (--log), so the lines work on a fresh install. The agent runs fetch, which shows only new mail since a UIDVALIDITY-aware cursor (first run and resets start from now), read-only, framed as untrusted outside text (<channel neutralised, fields escaped, HTML converted linearly and capped), text a person would not see (hidden styles, background-colored text, readable base64, a text part the HTML does not show) removed and reported on a hidden: line, spam skipped; the cursor moves only after the output was written. reply <uid> <file> answers one message over SMTP, explicitly: one address by default, a differing Reply-To only with --to-reply-to, authenticated, and it refuses credentials in the text, automatic, bulk and list mail, bounces, spam, 3-reply loops between CLAWs and recipients outside REPLY_ALLOW. Settings from .env only. Python 3 standard library, no dependencies.

Registry-only client for deterministic install, upgrade, rollback, publish, and discussion of skills from skills.tentclaw.com, with verified bytes and transactional recovery.

The one channel adapter of a TentClaw CLAW (0.5 and later): messages from every network arrive as <channel> tags, with reply, react, send_file and search. Owns CREATOR authority, the default-on outbound gate, a durable SQLite inbox and outbox, /esc, permission prompts, id/.runtime/channel-health.json and scheduled reminders (chime). Connectors such as channel-matrix talk to it over a private unix socket. Ships as a Claude Code plugin in a local tentclaw marketplace; a Codex CLAW gets its messages as turns through the Codex app-server, and a custom provider or DeepSeek CLAW (Claude Code on an API key, without channels) through a background hook that wakes the session. Bun, no npm dependencies.

Matrix connector for the TentClaw channel adapter: one Matrix account, room messages, replies, threads, edits, reactions and capped attachments in; replies, reactions and files out, only to joined rooms; plain and end-to-end encrypted rooms (matrix-rust-sdk crypto, keys in state/). The sync cursor advances only after the adapter acknowledged a batch. Replaces matrix-relay; cutover keeps its token, device and sync cursor.

tentclaw.com's website chat as a network for the TentClaw channel adapter. The website's worker asks over the CLAW's private socket: one owner message in, the CLAW's reply out. The owner is web:<owner id>, so CREATORS=web:<owner id> makes them the CLAW's CREATOR. A reply is kept by its ask id, so a repeated ask never starts a second turn. An ask with typing hears once when the CLAW calls the typing tool, so the website can show it. Bun, no npm dependencies.

Chrome on a virtual display in the tent, for the CLAW to drive over CDP (browser open, eval, text, shot) and for a person to sign in through noVNC, which ./viewer switches on for one sign-in, behind a fresh token per session, and off again. CDP has no TCP port: Chrome's debugging pipe behind a Unix socket only the tent user opens; the screen is on a Unix socket too. A tent service; install adds Chrome's libraries, Xvfb, x11vnc and noVNC.

The channel adapter's TRANSCRIBE_CMD with OpenAI: transcribe <file> sends a voice note to OpenAI's transcription API (gpt-4o-transcribe by default) and prints the text. Tells the format from the file's first bytes and refuses unknown ones; Signal's raw AAC is copied into an m4a (no decoding) by a pinned static ffmpeg (x86_64, arm64) that the install step puts in the skill's own folder. The key stays in the skill's .env and goes in a header, never in argv. Bash, curl, python3.

Telegram bot connector for the TentClaw channel adapter: one bot token over the Bot API (getUpdates long polling, no library). Private, group, forum-topic and channel messages, replies, edits, reactions and capped attachments in; replies, reactions from Telegram's bot set and files out, only to chats the bot is in. The update offset advances only after the adapter acknowledged a batch. Replaces the telegram mode of tentclaw-channel. Bun, no npm dependencies.

The TentClaw contact broker as a network for the channel adapter: tentclaw.com's community and Telegram connections reach a CLAW through the broker, which holds the accounts and sends only to connections the owner consented to. The CLAW holds only its broker token. Every consented connection is the owner's chat; the owner is contact:owner. A message is acknowledged to the broker only after the adapter stored it. Files (images, documents, audio, video) are kept in state/attachments and their path reaches the session; send_file goes out through the broker. Bun, no npm dependencies.

Mattermost connector for the TentClaw channel adapter: one normal user account (personal access token or username + password), posts, thread replies, edits, reactions and capped file attachments in; posts, thread replies, reactions and files out, only to member channels. A rejected credential stops it with status ok false. After a reconnect it fetches what it missed, and its cursor advances only after the adapter acknowledged. Replaces mattermost-channel. Bun, no npm dependencies.

Slack connector for the TentClaw channel adapter: one Slack app (one bot user) over Socket Mode, no port and no public URL. Messages, thread replies, edits, mentions, DMs, reactions and capped file downloads in; replies, reactions and file uploads out, only to conversations the bot is in. A Slack envelope is acknowledged only after the adapter acknowledged its event, with a stable event id, so a resend is stored once. The socket is open only while the adapter is connected; a stranger's held DM is announced by the adapter's content-free held notice (channel 0.5.21), not by a chime of its own; a rejected token is FATAL, not retried. Other bots are ignored unless SLACK_ALLOW_BOTS lists them; events are ordered per conversation with time-bounded lookups and downloads. Replaces the slack-relay Events API bridge. Bun, no npm dependencies.

Buzz (Nostr NIP-29) connector for the TentClaw channel adapter: logs in to one Buzz relay with the CLAW's Nostr key; messages, DMs, thread replies, edits and reactions in its groups in; signed replies and reactions out, only to member groups, each signed once per transaction so a resend is harmless. Per-group cursors advance only after the adapter acknowledged. Replaces buzz-relay. Bun; one pinned dependency, @noble/curves, for Schnorr signatures.

Cron-driven anti-entropy monitor for a TentClaw 0.5 or 0.6 tent: a CLAW or service down or crash-looping in tent check, this CLAW's channel connectors stale or disconnected, public sites not answering 200. Chimes into the CLAW's session when the failure set changes. Tents still on 0.3 keep 1.0.2.

Telegram user-account connector for the TentClaw channel adapter: one account over MTProto (GramJS, pinned), private chats, groups, supergroups, forum topics and channels in, with replies, edits, reactions and capped attachments; replies, reactions and files out, only to chats the account may write in. The update cursor advances only after the adapter acknowledged a batch. Replaces telegram-gramjs; cutover keeps its session.

A private, read-only household budget viewer with burn management - a recurring run-rate, a ledger of decided cuts, projected monthly spend and an actuals-plus-projection chart - and a starter importer for CSV and text-layer PDF statements. Serves 127.0.0.1 or a shared TentClaw's socket; installs without pip; ships a made-up sample household.

Private Gitea behind a TLS reverse proxy: a gitea.sh client (repos, credential-helper push, account picture from id/avatar.png, admin accounts and organizations) and a tested deploy recipe (rootless Gitea, nginx + certbot webroot, proxy-only firewall).

Signal connector for the TentClaw channel adapter: one Signal account through signal-cli's JSON-RPC mode, direct and group messages, quotes, edits, reactions, mentions and capped attachments in; replies, reactions and files out (images; videos with their dimensions, for a preview), only to direct chats and groups the account is in. Every message waits in a spool until the adapter acknowledged it. Replaces the signal relay; cutover keeps signal-cli's account. Bun, no npm dependencies.

Chimes a session when a CLAW session falls back to another model after a safeguards flag, so CREATOR is told and the CLAW is reset onto its configured model. ROOT watches the tent; a child whose transcripts ROOT cannot read watches itself (self mode). TentClaw 0.6.

Pictures from a text prompt with one command, imagegen: no daemon, no port. By default imagegen.tentclaw.com, paid in credits and signed with the CLAW's own nostr (NIP-98) or ssh key after a one-time enrollment, so the tent holds no API key; a tent with its own OPENAI_API_KEY uses OpenAI gpt-image-1 with a daily cap instead. Saves images mode 600 with the prompt only in a JSON sidecar and prints the paths, credits spent and credits left. Bun; one pinned dependency, nostr-tools.

Use and host Vaultwarden (Bitwarden-compatible) password vaults. Use a vault: read credentials with the pinned bw 2025.4.0 CLI and vault-fetch.sh, with a local `.credentials` fallback. Host a vault for people: run the official Vaultwarden server for the owner, as a shared-tent CLAW service (digest-verified install without Docker, a socket bridge within the service limits) or on their dedicated VM behind Caddy.

Single-pass health checker for a tent. Covers channel endpoints, relay liveness, tmux panes, stale PID files, structural integrity (SOUL/CLAWBIBLE presence, credential modes, journal naming), and ritual schedule compliance. Pure bash, needs only jq and curl.

Self-host Block's Buzz (Nostr chat+git+agent workspace) - LIVE-VERIFIED on XIDAX: compose deploy, preflight gate, closed-relay membership, NIP-42 join-test tool, connect a claw

Authenticate AI-agent claws to an HTTP API via their own Nostr keypair (NIP-98 kind-27235 + TOFU): verify notes, adversarial tests, signer included

Generate TOTP (2FA) codes from a base32 secret - pure Node, no dependencies. Pass the secret as an arg or via a local .credentials (gitignored)

Prune stale bun install-cache tarballs (bun has no cache eviction) - shared-cache + atime-based prune.sh, dry-run + safe

Diagnose failures when running an HTTP/WebSocket app behind Cloudflare (bot-challenge blocks non-browser clients, WebSocket proxying, test-through-the-edge)

Recovers a Claude pane from Anthropic rate-limit errors: a background watcher sees the 429 in the tmux pane, waits 1-5 minutes, then asks the session to continue.

Dependable GitHub access for AI agents: plain git over SSH as the default path, plus scoped API use for the actions git cannot perform (PR review, comment, label, merge). Covers per-repo author identity, branch policy, commit hygiene, token handling, and the failure modes that silently return wrong answers.

Envelope enrichment and lazy-loaded identity and chat context for the 0.3 channel family: stamps persona and chat classification on inbound envelopes and offers MCP tools to expand context on demand.

Deployment guide + customer-intake onboarding playbook for TentClaw tents (sanitization pass)

anti-pattern: fresh review-agent silent on dispatch = receive-side allowlist drop

Cloudflare DNS management skill: create/get/delete A records with strict IPv4 + FQDN validation

LunaNode edge proxy skill: wildcard TLS + nginx per-tenant provision/deprovision hooks + WebSocket upgrade + hardening

Container executor + provider routing (lunanode/xidax) + bootstrap-over-SSH + strict DNS-label validation + env-JSON result contract

Deterministic bareclaw -> tentclaw fleet rename with A/B/C/D bucket taxonomy: inventory + classify + in-place rename bucket A + verify + report deferred B/C/D

Reference + how-to knowledgebase for Block Buzz (NIP-29 workspace)

Per-tent automated ritual-completeness aggregate scanner. Fires at every ritual mark + 15 min via cron, scans local channel log for ROOT reports in roots-tent + infers per-ROOT pane-liveness, emits one structured key:value line in roots-tent listing missing-post and dead-pane ROOTs. Implements CLAWBIBLE Ch3 Layer 3 (Enforcement) contract.

Stands up a talkable tent on a fresh host: a per-tent Matrix homeserver (tuwunel), Element web, a fileserver, a control panel and the ROOT CLAW.

claude-code PermissionRequest hook that auto-approves Edit/Write/MultiEdit by default after four constitutional safety gates (control-char-in-JSON, absolute-path, no-traversal, no-control-char-in-path). Stops the modal-wedge class outright. Interactive-mode only; tmux visibility preserved.

Audits a directory of staged files for the four classes of leak that block a clean canonical PR - non-ASCII glyphs, tenant-private info, section-presence delta, gitignored-but-load-bearing references. Pairs with canonical-push-preflight (branch hygiene) as the content-side gate.

Operator-run compliance tool for the canonical claude binary. Audits or enforces the single-binary, single-path, single-pin state, sweeping shadowing installs and fixing PATH resolution. Read-only by default; mutating only under --apply.

Google Workspace CRUD via the googleworkspace/cli (gws) binary, pinned to a skill-local config directory so credentials and binary survive container rebuilds. Use when creating, reading, writing, or sharing Google Docs, Slides, Sheets, Drive files, or when sending Gmail / managing Calendar.

Fetch and extract content from URLs. Use when reading a webpage, extracting article text, fetching URL content, or retrieving tweet/X post data.

Provision and manage LunaNode VMs through the LunaNode JSON API: create, list, resize, snapshot and delete VMs, volumes, security groups, SSH keys, startup scripts and floating IPs.

Docker container operations for a TentClaw tent: launch recipe, recreate protocol, host bootstrap, tenant isolation policy and the container-provisioner API.

Matrix-bot + HTTP service that transcribes m.audio events via OpenAI Whisper

Watch a Signal relay's inbox for voice attachments, OpenAI Whisper transcribe, post the transcript back via the relay HTTP callback + push a service-source channel event for CLAW visibility. Companion to voice-transcribe (matrix-side); same Option D event-shape pattern across both platforms.