Skill: getlighty/getlighty-clawvault (version 3.0.0)

--- name: clawvault description: > Portable identity vault for OpenClaw. Syncs knowledge, packages, and memory across machines like iCloud — automatic, invisible, encrypted. Bring your own storage (Google Drive, Dropbox, FTP, Git) or use ClawVault Cloud. version: 2.0.0 author: clawvault license: MIT tags: - sync - identity - migration - packages - backup - roaming triggers: - vault - sync - migrate - packages - roam - backup - restore - cloud tools: - exec - file --- # ClawVault — Portable Agent Environment You are an OpenClaw agent with the **clawvault** skill installed. This skill gives you automatic, continuous sync of the user's knowledge and environment across all their machines — like iCloud for AI agents. ## Architecture ClawVault works like a combination of iCloud and Git: - **Auto-sync**: file changes are detected, auto-committed, and pushed - **Versioned**: every change is a commit — full history, rollback anytime - **Encrypted**: Ed25519 keypair per installation — private key never leaves the machine - **Multi-provider**: user picks where their vault lives ## Providers | Provider | Type | Setup | |----------|------|-------| | ClawVault Cloud | Managed (paid per MB) | One command — `clawvault cloud signup` | | Google Drive | BYOS (free) | OAuth flow via `clawvault provider gdrive` | | Dropbox | BYOS (free) | OAuth flow via `clawvault provider dropbox` | | FTP/SFTP | BYOS (free) | Host + credentials via `clawvault provider ftp` | | Git | BYOS (free) | Any git remote via `clawvault provider git` | | S3 | BYOS (free) | Any S3-compatible via `clawvault provider s3` | | WebDAV | BYOS (free) | Nextcloud etc via `clawvault provider webdav` | | Local | BYOS (free) | USB/NAS mount via `clawvault provider local` | "BYOS" = Bring Your Own Storage. Free forever. ClawVault Cloud is the convenience option for people who don't want to manage storage. ## What Syncs ``` ALWAYS SYNCED (shared knowledge pool): identity/USER.md Who you are knowledge/MEMORY.md Long-term memory knowledge/projects/ Project context requirements.yaml System packages skills-manifest.yaml Installed skills list NEVER AUTO-SYNCED (per-instance): local/SOUL.md This agent's personality local/IDENTITY.md This agent's identity local/config-override Local config tweaks OPT-IN SYNC: openclaw config.json Gateway/model config credentials/ Channel auth (encrypted separately) ``` ## Commands When the user asks about vault operations, use these: ### First-Time Setup - **"set up clawvault"** → `clawvault.sh init` — creates vault, generates Ed25519 keypair, scans packages - **"use clawvault cloud"** → `clawvault.sh cloud signup` — creates cloud account, auto-configures provider - **"use google drive for vault"** → `clawvault.sh provider gdrive` — OAuth flow for Google Drive - **"use dropbox for vault"** → `clawvault.sh provider dropbox` - **"use FTP for vault"** → `clawvault.sh provider ftp` — asks for host, port, credentials ### Daily Use (mostly invisible) - **"sync status"** → `clawvault.sh status` — show sync state, last push/pull, provider info - **"sync now"** → `sync-engine.sh push` — force immediate sync - **"show vault history"** → `sync-engine.sh log` — show commit history (like `git log`) - **"rollback vault"** → `sync-engine.sh rollback` — revert to previous state - **"what changed"** → `sync-engine.sh diff` — show pending changes ### Packages - **"scan packages"** → `track-packages.sh scan` - **"what's different from vault"** → `track-packages.sh diff` - **"install missing packages"** → `track-packages.sh install` — shows commands, asks before running ### Migration - **"migrate to this machine"** / **"pull from vault"** → `migrate.sh pull` — interactive restore wizard - **"push my soul to vault"** → `migrate.sh push-identity` — explicit opt-in only ### Profiles Each machine backs up to its own named profile (default: hostname). Profiles are separate — different machines can have different knowledge, memory, and packages without interfering with each other. - **"show profile"** / **"what profile am I on"** → `clawvault.sh profile show` — displays current profile name - **"list profiles"** / **"what profiles exist"** → `clawvault.sh profile list` — lists all profiles in the remote storage - **"rename profile"** → `clawvault.sh profile rename <new-name>` — renames this machine's profile - **"restore from another machine"** / **"pull profile X"** → `clawvault.sh profile pull <name>` — restores a specific profile to this machine (overwrites local vault with that profile's data, does NOT affect the source) ### Key Management - **"show my vault key"** → `keypair.sh show-public` — display public key (for adding to providers) - **"regenerate vault key"** → `keypair.sh rotate` — generates new keypair, re-registers with provider ## Behavior Rules 1. **Auto-sync is ON by default** after setup — like iCloud. The user should not have to think about syncing. Changes are pushed within 30 seconds. 2. **Never sync SOUL.md or IDENTITY.md without explicit permission.** 3. **Always confirm before installing packages.** Show the diff, let them pick. 4. **Private key never leaves the machine.** It's stored in `~/.clawvault/keys/` with 600 permissions. The public key is registered with the vault provider. 5. **Conflicts:** If remote has changes the user hasn't seen, show a diff and let them choose. Auto-merge for non-conflicting changes (like git). 6. **Be transparent about costs.** If using ClawVault Cloud, show current usage and estimated cost when asked. Never surprise the user with charges. 7. **Offline-first.** Everything works locally. Sync happens when connectivity is available. Queue changes and push when back online. 8. **Profiles are separate by default.** Each machine pushes to its own named profile (default: hostname). Profiles never merge automatically. If the user wants data from another machine, they must explicitly pull that profile with `clawvault.sh profile pull <name>`. ## ClawVault Cloud Pricing When users ask about pricing: - **First 50 MB free** — enough for most single-user vaults - **$0.005/MB/month** after that (~$0.50/month for 100 MB extra) - **No per-instance fees** — connect unlimited machines - **No bandwidth fees** — sync as often as you want - Example: typical vault is 10-30 MB → completely free - Example: power user with 200 MB → $0.75/month - Example: team vault with 2 GB → ~$10/month

path: cloud-api/tsconfig.json
content: {
  "compilerOptions": {
    "target": "ES2022",
    "module": "ES2022",
    "moduleResolution": "bundler",
    "outDir": "dist",
    "rootDir": "src",
    "strict": true,
    "esModuleInterop": true,
    "skipLibCheck": true,
    "declaration": true
  },
  "include": ["src/**/*"]
}


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)