Service claw agent service

claw-agent-service

Rendered from .ai/manifests/ on every publish. Rules for this service: CLAUDE.md · guide: service guide.

Property	Value
Directory	apps/claw-agent-service
Port	4015
Database	postgresql
Test files	65 (vitest)
Internal packages	@claw/shared-auth, @claw/shared-constants, @claw/shared-rabbitmq, @claw/shared-types, @claw/shared-utilities

Persistence models

• AccessPolicy
• ActivityMemoryEntry
• AgentSession
• AgentSuggestion
• CapabilityInvocation
• Device
• DeviceCodeRequest
• FileWatchEvent
• LocalRepo
• MarketplaceInstall
• MarketplaceListing
• Organization
• OrganizationMember
• OrganizationPolicy
• PairingRequest
• Recipe
• RecipeRun
• RecipeRunStep
• RefreshToken
• RoutineSecret
• RunnerCredential
• ScheduledCommand
• TerminalCommand

HTTP API (123)

Method	Route	Source
GET	/agent/activity-memory	activity-memory.controller.ts
POST	/agent/activity-memory	activity-memory.controller.ts
POST	/agent/auth/device-code/approve	agent-auth.controller.ts
POST	/agent/auth/device-code/create	agent-auth.controller.ts
POST	/agent/auth/device-code/deny	agent-auth.controller.ts
POST	/agent/auth/device-code/token	agent-auth.controller.ts
POST	/agent/auth/pair/approve	agent-auth.controller.ts
POST	/agent/auth/pair/deny	agent-auth.controller.ts
POST	/agent/auth/pair/init	agent-auth.controller.ts
POST	/agent/auth/pair/poll	agent-auth.controller.ts
POST	/agent/auth/refresh	agent-auth.controller.ts
GET	/agent/capabilities	capability.controller.ts
POST	/agent/capabilities	capability.controller.ts
GET	/agent/capabilities/:id	capability.controller.ts
POST	/agent/capabilities/:id/approve	capability.controller.ts
POST	/agent/capabilities/:id/approve	capability.controller.ts
POST	/agent/capabilities/:id/cancel	capability.controller.ts
POST	/agent/capabilities/:id/reject	capability.controller.ts
POST	/agent/capabilities/:id/rollback	capability.controller.ts
POST	/agent/capabilities/bulk-approve	capability.controller.ts
GET	/agent/capabilities/dual-write-status	capability.controller.ts
POST	/agent/channels/inbound/:userId	channel-webhook.controller.ts
GET	/agent/channels/inbox	channel-inbox.controller.ts
DELETE	/agent/channels/inbox/:id	channel-inbox.controller.ts
GET	/agent/channels/webhook	channel-inbox.controller.ts
POST	/agent/cli-capabilities/:id/complete	capability-cli.controller.ts
GET	/agent/cli-capabilities/pending	capability-cli.controller.ts
GET	/agent/commands	agent-command.controller.ts
POST	/agent/commands	agent-command.controller.ts
GET	/agent/commands/:id	agent-command.controller.ts
POST	/agent/commands/:id/approve	agent-command.controller.ts
POST	/agent/commands/:id/cancel	agent-command-stream.controller.ts
POST	/agent/commands/:id/chunks	agent-command-stream.controller.ts
POST	/agent/commands/:id/complete	agent-command.controller.ts
POST	/agent/commands/:id/reject	agent-command.controller.ts
POST	/agent/commands/:id/stream	agent-command-stream.controller.ts
GET	/agent/commands/pending	agent-command.controller.ts
GET	/agent/devices	agent-device.controller.ts
GET	/agent/devices/:id	agent-device.controller.ts
PATCH	/agent/devices/:id	agent-device.controller.ts
POST	/agent/devices/:id/revoke	agent-device.controller.ts
GET	/agent/events	agent-event.controller.ts
POST	/agent/events	agent-event.controller.ts
GET	/agent/marketplace/listings	marketplace.controller.ts
POST	/agent/marketplace/listings	marketplace.controller.ts
GET	/agent/marketplace/listings/:id	marketplace.controller.ts
GET	/agent/marketplace/listings/:id	marketplace.controller.ts
GET	/agent/marketplace/listings/:id/analyse	marketplace.controller.ts
POST	/agent/marketplace/listings/:id/install	marketplace.controller.ts
POST	/agent/marketplace/listings/:id/republish	marketplace.controller.ts
POST	/agent/marketplace/listings/:id/unpublish	marketplace.controller.ts
GET	/agent/marketplace/listings/mine	marketplace.controller.ts
GET	/agent/mobile/capabilities	agent-mobile.controller.ts
GET	/agent/mobile/capabilities/:id	agent-mobile.controller.ts
POST	/agent/mobile/capabilities/:id/approve	agent-mobile.controller.ts
POST	/agent/mobile/capabilities/:id/cancel	agent-mobile.controller.ts
POST	/agent/mobile/capabilities/:id/reject	agent-mobile.controller.ts
GET	/agent/mobile/commands	agent-mobile.controller.ts
GET	/agent/mobile/commands/:id	agent-mobile.controller.ts
POST	/agent/mobile/commands/:id/approve	agent-mobile.controller.ts
POST	/agent/mobile/commands/:id/cancel	agent-mobile.controller.ts
POST	/agent/mobile/commands/:id/reject	agent-mobile.controller.ts
GET	/agent/organizations	fleet.controller.ts
POST	/agent/organizations	fleet.controller.ts
GET	/agent/organizations/:id/devices	fleet.controller.ts
GET	/agent/organizations/:id/members	fleet.controller.ts
POST	/agent/organizations/:id/members	fleet.controller.ts
GET	/agent/organizations/:id/policy	fleet.controller.ts
PUT	/agent/organizations/:id/policy	fleet.controller.ts
GET	/agent/organizations/:id/runner-policy	fleet.controller.ts
POST	/agent/organizations/:slug/sso/callback	saml.controller.ts
POST	/agent/organizations/:slug/sso/metadata	saml.controller.ts
GET	/agent/organizations/policy/effective	fleet.controller.ts
GET	/agent/recipes	recipe.controller.ts
POST	/agent/recipes	recipe.controller.ts
DELETE	/agent/recipes/:id	recipe.controller.ts
GET	/agent/recipes/:id	recipe-run.controller.ts
GET	/agent/recipes/:id	recipe.controller.ts
PATCH	/agent/recipes/:id	recipe.controller.ts
POST	/agent/recipes/:id/cancel	recipe-run.controller.ts
GET	/agent/recipes/:id/runs	recipe-run.controller.ts
POST	/agent/recipes/:id/runs	recipe-run.controller.ts
GET	/agent/repos	agent-repo.controller.ts
POST	/agent/repos	agent-repo.controller.ts
DELETE	/agent/repos/:id	agent-repo.controller.ts
GET	/agent/repos/:id	agent-repo.controller.ts
PATCH	/agent/repos/:id	agent-repo.controller.ts
POST	/agent/routines/webhook/:routineId	routine-webhook.controller.ts
GET	/agent/runners	agent-runner.controller.ts
POST	/agent/runners	agent-runner.controller.ts
DELETE	/agent/runners/:id	agent-runner.controller.ts
POST	/agent/runners/:id/credential/rotate	agent-runner.controller.ts
POST	/agent/runners/:id/jobs	agent-runner.controller.ts
GET	/agent/runners/:id/resume	agent-runner.controller.ts
POST	/agent/runners/claim	agent-runner.controller.ts
POST	/agent/runners/heartbeat	agent-runner.controller.ts
POST	/agent/runners/jobs	agent-runner.controller.ts
POST	/agent/runners/jobs/:commandId/complete	agent-runner.controller.ts
GET	/agent/runtime/protocol	runtime-protocol.controller.ts
GET	/agent/scheduled-commands	agent-scheduled-command.controller.ts
POST	/agent/scheduled-commands	agent-scheduled-command.controller.ts
DELETE	/agent/scheduled-commands/:id	agent-scheduled-command.controller.ts
GET	/agent/scheduled-commands/:id/secrets	routine-secret.controller.ts
POST	/agent/scheduled-commands/:id/secrets	routine-secret.controller.ts
PUT	/agent/scheduled-commands/:id/secrets-policy	routine-secret.controller.ts
DELETE	/agent/scheduled-commands/:id/secrets/:name	routine-secret.controller.ts
PUT	/agent/scheduled-commands/:id/secrets/:name	routine-secret.controller.ts
PATCH	/agent/scheduled-commands/:id/status	agent-scheduled-command.controller.ts
POST	/agent/scheduled-commands/:id/trigger	agent-scheduled-command.controller.ts
GET	/agent/scheduled-commands/:id/webhook	routine-webhook.controller.ts
PUT	/agent/scheduled-commands/:id/webhook	routine-webhook.controller.ts
POST	/agent/scheduled-commands/:id/webhook/rotate	routine-webhook.controller.ts
GET	/agent/sessions	agent-session.controller.ts
POST	/agent/sessions	agent-session.controller.ts
DELETE	/agent/sessions/:id	agent-session.controller.ts
GET	/agent/sessions/:id	agent-session.controller.ts
POST	/agent/sessions/:id/heartbeat	agent-session.controller.ts
POST	/agent/sessions/attach	agent-session.controller.ts
GET	/agent/suggestions	agent-suggestion.controller.ts
POST	/agent/suggestions/:id/review	agent-suggestion.controller.ts
GET	/health	health.controller.ts
GET	/internal/agent/organizations/:id/usage-scope	fleet-internal.controller.ts
POST	/internal/agent/terminal/seed-command	agent-terminal-internal.controller.ts

Events (inferred from source; verify before a critical change)

• Publishes: agent.capability.approved, agent.capability.auto_approved, agent.capability.cancelled, agent.capability.denied, agent.capability.executed, agent.capability.expired, agent.capability.failed, agent.capability.policy_matched, agent.capability.proposed, agent.capability.rejected, agent.capability.rolled_back, agent.command_approved, agent.command_cancelled, agent.command_completed, agent.command_rejected, agent.command_requested, agent.device_paired, agent.device_revoked, agent.mobile_action, agent.policy_violated, agent.session_connected, agent.session_disconnected, agent.token_reuse_detected, agent.token_rotated, log.server
• Consumes: agent.capability.executing