Josh Avant
424521a3d3
* fix(file-transfer): bind standing approvals exactly * fix(file-transfer): keep validator error lint-safe * fix(file-transfer): bind directory listing target before I/O * fix(file-transfer): keep dir list preflight type stable * test(file-transfer): split directory listing policy coverage * fix(file-transfer): bind final node effects * fix(file-transfer): close migration and archive gaps * fix(file-transfer): bind standing grants before preflight * fix(file-transfer): bind directory listings to checked target * fix(file-transfer): bind final effects to filesystem identity * test(file-transfer): prove exact approval transport * fix(file-transfer): keep reapproval prompts path-scoped * chore(config): refresh generated baselines
1.9 KiB
summary, read_when, title
| summary | read_when | title | |
|---|---|---|---|
| Fetch, list, and write files on paired nodes via dedicated node commands. Bypasses bash stdout truncation by using base64 over node.invoke for binaries up to 16 MB. |
|
File Transfer plugin |
File Transfer plugin
Fetch, list, and write files on paired nodes via dedicated node commands. Bypasses bash stdout truncation by using base64 over node.invoke for binaries up to 16 MB.
Distribution
- Package:
@openclaw/file-transfer - Install route: included in OpenClaw
Surface
CLI commands: openclaw file-transfer; contracts: tools
Migrate existing permissions
After upgrading, older positive file-transfer permissions remain inactive until you review them. Deny rules, size limits, and symlink settings continue to apply. Run this command on the Gateway host in an interactive terminal:
openclaw file-transfer approvals migrate
For each older path, choose one outcome:
- Require exact reapproval removes the ambiguous permission. The next use prompts once and records the exact node, command, requested path, and canonical target.
- Keep as an intentional wildcard preserves the entry as an operator-authored glob.
- Remove this permission deletes the positive entry.
Use --dry-run to review the plan without writing. Non-interactive and --json
runs never guess; they list unresolved items and direct you back to the same
interactive command.
The migration writes the new format once after confirmation and reports whether
the adjacent config backup was verified. Older OpenClaw versions cannot read
the migrated format. To downgrade, restore that reported .bak file before
starting the older version; doing so also restores the older permission
semantics.