Implement Postgres-backed claw approval flow and integrate gateway methods for create/list/get/approve/reject/execute/audit. Add a minimal systemd-run privileged broker with bearer auth, strict scope and exact-command validation, dangerous-shell blocking, atomic once-grant consumption, and execution audit updates.
12 lines
240 B
Plaintext
12 lines
240 B
Plaintext
CLAW_BROKER_BIND=127.0.0.1
|
|
CLAW_BROKER_PORT=8787
|
|
CLAW_BROKER_TOKEN=change-me
|
|
CLAW_BROKER_CMD_TIMEOUT_MS=120000
|
|
CLAW_BROKER_MAX_SUMMARY_CHARS=2000
|
|
|
|
PGHOST=147.45.189.234
|
|
PGPORT=5432
|
|
PGDATABASE=default_db
|
|
PGUSER=gen_user
|
|
PGPASSWORD=change-me
|