{ "report_info": { "version": "9.0.1", "generated_at": "2026-04-11T17:16:24Z", "binary_name": "kodachi-claw" }, "binary": { "name": "kodachi-claw", "path": "/home/kodachi/k900/dashboard/hooks/kodachi-claw", "timestamp": "2026-04-11T17:16:24Z", "file_info": { "size": 39199736, "sha256": "f6e9e06a61e9e0e84a2657387359f68794c12d73e4aee6372ebd63b24f3398cf" }, "flag_n": { "command": "info", "data": { "author": "theonlyhennygod", "copyright": "Copyright (c) 2026 theonlyhennygod", "description": "Kodachi hardened AI runtime with embedded anonymity controls", "features": [ "Embedded Arti-first Tor anonymity runtime", "Multi-circuit load balancing across Tor instances", "Isolated per-request circuit assignment", "Single-circuit mode for consistent identity", "Automatic MAC address randomization", "Hostname and timezone randomization", "IP and DNS leak verification", "OPSEC filter (outbound identity leak redaction)", "HMAC-SHA256 tamper-evident audit logging", "Authentication via online-auth integration", "Integrity checking via integrity-check integration", "Permission monitoring via permission-guard integration", "Centralized logging via logs-hook integration", "12+ AI providers (OpenAI, Anthropic, Gemini, Ollama, OpenRouter, etc.)", "14 communication channels (Telegram, Discord, Slack, Matrix, etc.)", "Hybrid memory (SQLite FTS5 + vector cosine similarity)", "ChaCha20-Poly1305 encrypted secret store", "Sandbox backends (Landlock, Bubblewrap, Firejail, Docker)", "Cron job scheduler with security allowlists", "Gateway server with rate limiting and idempotency", "Hardware peripherals (STM32, RPi GPIO, robotics)", "Configurable circuit assignment strategies", "Identity restoration on shutdown", "Retry and timeout controls for network operations", "JSON output mode for automation" ], "license": "Proprietary - Kodachi OS", "name": "kodachi-claw", "securityFeatures": { "authentication": "In-process Kodachi auth with auto-recovery, device ID verification", "encryption": "ChaCha20-Poly1305 AEAD, TLS 1.3 via Arti, HMAC-SHA256 webhooks", "inputValidation": "Command allowlists, path sanitization, SSRF protection", "rateLimiting": "Sliding-window rate limiting with configurable thresholds" }, "systemRequirements": { "dependencies": [ "macchanger (MAC randomization)", "ip (network interface control)", "hostnamectl or hostname (hostname management)", "timedatectl (timezone management)", "online-auth (authentication service)", "integrity-check (file integrity verification)", "permission-guard (permission monitoring)", "logs-hook (centralized logging)" ], "os": "Linux (Kodachi OS, Debian-based distributions)", "privileges": "Root/sudo required for MAC/hostname/timezone randomization" }, "version": "9.0.1", "website": "https://github.com/WMAL/Linux-Kodachi" }, "errors": [], "metadata": { "executionTime": 0, "hostname": "Boardroom-System", "user": "kodachi" }, "status": "success", "timestamp": "2026-04-11T17:16:24.054347139Z", "version": "9.0.1", "warnings": [] }, "flag_v": { "command": "version", "data": { "buildDate": "2026-04-11T17:16:24.214295453Z", "gitCommit": "unknown", "name": "kodachi-claw", "rustVersion": "1.82.0", "version": "9.0.1" }, "errors": [], "metadata": { "executionTime": 0, "hostname": "Boardroom-System", "user": "kodachi" }, "status": "success", "timestamp": "2026-04-11T17:16:24.214310318Z", "version": "9.0.1", "warnings": [] }, "flag_h": { "command": "help", "data": { "commandCategories": [ { "category": "Commands", "commands": [ { "description": "Initialize your workspace and configuration", "name": "onboard", "options": [], "requires_sudo": false, "usage": "kodachi-claw onboard" }, { "description": "Start the AI agent loop", "name": "agent", "options": [], "requires_sudo": false, "usage": "kodachi-claw agent" }, { "description": "Start the gateway server (webhooks, websockets)", "name": "gateway", "options": [], "requires_sudo": false, "usage": "kodachi-claw gateway" }, { "description": "Start long-running autonomous runtime (gateway + channels + heartbeat + scheduler)", "name": "daemon", "options": [], "requires_sudo": false, "usage": "kodachi-claw daemon" }, { "description": "Manage OS service lifecycle (launchd/systemd user service)", "name": "service", "options": [], "requires_sudo": true, "usage": "kodachi-claw service" }, { "description": "Control Tor instances via tor-switch", "name": "tor", "options": [], "requires_sudo": false, "usage": "kodachi-claw tor" }, { "description": "Run diagnostics for daemon/scheduler/channel freshness", "name": "doctor", "options": [], "requires_sudo": false, "usage": "kodachi-claw doctor" }, { "description": "Show system status (full details)", "name": "status", "options": [], "requires_sudo": false, "usage": "kodachi-claw status" }, { "description": "Configure and manage scheduled tasks", "name": "cron", "options": [], "requires_sudo": false, "usage": "kodachi-claw cron" }, { "description": "Manage provider model catalogs", "name": "models", "options": [], "requires_sudo": false, "usage": "kodachi-claw models" }, { "description": "List supported AI providers (includes kodachi-ai local provider when built with --features kodachi-ai)", "name": "providers", "options": [], "requires_sudo": false, "usage": "kodachi-claw providers" }, { "description": "Manage channels (telegram, discord, slack)", "name": "channel", "options": [], "requires_sudo": false, "usage": "kodachi-claw channel" }, { "description": "Browse 50+ integrations", "name": "integrations", "options": [], "requires_sudo": false, "usage": "kodachi-claw integrations" }, { "description": "Manage skills (user-defined capabilities)", "name": "skills", "options": [], "requires_sudo": false, "usage": "kodachi-claw skills" }, { "description": "Migrate data from other agent runtimes", "name": "migrate", "options": [], "requires_sudo": false, "usage": "kodachi-claw migrate" }, { "description": "Manage provider subscription authentication profiles", "name": "auth", "options": [], "requires_sudo": false, "usage": "kodachi-claw auth" }, { "description": "Discover and introspect USB hardware", "name": "hardware", "options": [], "requires_sudo": false, "usage": "kodachi-claw hardware" }, { "description": "Manage hardware peripherals (STM32, RPi GPIO, etc.)", "name": "peripheral", "options": [], "requires_sudo": true, "usage": "kodachi-claw peripheral" }, { "description": "Check internet connectivity and recover if broken (invokes health-control)", "name": "recover-internet", "options": [], "requires_sudo": true, "usage": "kodachi-claw recover-internet" }, { "description": "Engage, inspect, and resume emergency-stop states", "name": "estop", "options": [], "requires_sudo": false, "usage": "kodachi-claw estop" }, { "description": "Run diagnostic self-tests", "name": "self-test", "options": [], "requires_sudo": false, "usage": "kodachi-claw self-test" }, { "description": "Generate shell completion script to stdout", "name": "completions", "options": [], "requires_sudo": false, "usage": "kodachi-claw completions " }, { "description": "Launch or install the companion desktop app", "name": "desktop", "options": [], "requires_sudo": false, "usage": "kodachi-claw desktop" }, { "description": "Manage agent memory (list, get, stats, clear)", "name": "memory", "options": [], "requires_sudo": false, "usage": "kodachi-claw memory" }, { "description": "Manage configuration", "name": "config", "options": [], "requires_sudo": false, "usage": "kodachi-claw config" }, { "description": "Check for and apply updates", "name": "update", "options": [], "requires_sudo": false, "usage": "kodachi-claw update" }, { "description": "Standard operating procedures and emergency protocols", "name": "sop", "options": [], "requires_sudo": false, "usage": "kodachi-claw sop" }, { "description": "Print this message or the help of the given subcommand(s)", "name": "help", "options": [], "requires_sudo": false, "usage": "kodachi-claw help" } ] } ], "description": "The fastest, smallest AI assistant.", "environmentVariables": [ { "default": "info", "description": "Set logging level", "name": "RUST_LOG", "values": "trace, debug, info, warn, error" } ], "exitCodes": { "0": "Success", "1": "General error", "2": "Invalid arguments", "3": "Permission denied" }, "globalOptions": [ { "description": "Print help and exit", "flag": "-h, --help" }, { "description": "Print version and exit", "flag": "-v, --version" }, { "description": "Show detailed program information and exit", "flag": "-n, --info" }, { "description": "Show comprehensive command examples and exit", "flag": "-e, --examples" }, { "description": "Output startup status as compact JSON", "flag": "--json" }, { "description": "Output startup status as pretty JSON", "flag": "--json-pretty" }, { "description": "Output startup status as human-readable JSON", "flag": "--json-human" }, { "description": "Anonymity runtime mode [default: multi-circuit] [possible values: multi-circuit, isolated, single]", "flag": "--mode " }, { "description": "Tor pool size (ignored in single mode) [default: 10]", "flag": "--tor-instances " }, { "description": "Instance reuse policy [default: reuse] [possible values: reuse, new, mixed]", "flag": "--instance-policy " }, { "description": "Instance name prefix [default: kodachi-claw-instance]", "flag": "--instance-prefix " }, { "description": "Access mode for execution path [default: system] [possible values: system, gateway]", "flag": "--access-mode " }, { "description": "Authentication mode [default: auto] [possible values: auto, required]", "flag": "--auth-mode " }, { "description": "Skip MAC randomization", "flag": "--skip-mac" }, { "description": "Skip hostname randomization", "flag": "--skip-hostname" }, { "description": "Skip timezone randomization", "flag": "--skip-timezone" }, { "description": "Skip all identity randomization", "flag": "--skip-identity" }, { "description": "Skip embedded Tor startup", "flag": "--skip-tor" }, { "description": "Skip IP/Tor verification checks [aliases: --skip-verify]", "flag": "--skip-ip-check" }, { "description": "Skip DNS verification checks", "flag": "--skip-dns-check" }, { "description": "Skip all anonymity bootstrap behavior", "flag": "--skip-anonymity" }, { "description": "Skip integrity check during preflight", "flag": "--skip-integrity-check" }, { "description": "Skip permission check during preflight", "flag": "--skip-permission-check" }, { "description": "Restore MAC/hostname/timezone state on shutdown", "flag": "--restore-on-exit" }, { "description": "Auto-check and recover internet after identity changes and on exit", "flag": "--auto-recover-internet" }, { "description": "Disable auto-recover-internet (overrides --auto-recover-internet)", "flag": "--skip-auto-recover-internet" }, { "description": "Enable verbose logging output", "flag": "-V, --verbose" }, { "description": "Suppress all non-error output", "flag": "-q, --quiet" }, { "description": "Disable colored output", "flag": "--no-color" }, { "description": "Timeout in seconds for network operations [default: 30]", "flag": "--timeout " }, { "description": "Number of retries for network operations [default: 3]", "flag": "--retry " }, { "description": "Circuit assignment strategy for multi-circuit mode [default: round-robin] [possible values: round-robin, random, least-used, sticky]", "flag": "--circuit-strategy " }, { "description": "Skip all anonymity startup phases except OS authentication", "flag": "--skip-all" } ], "name": "kodachi-claw", "usage": "kodachi-claw [OPTIONS] [COMMAND]" }, "errors": [], "metadata": { "executionTime": 0, "hostname": "Boardroom-System", "user": "kodachi" }, "status": "success", "timestamp": "2026-04-11T17:16:24.316055672Z", "version": "9.0.1", "warnings": [] }, "flag_e": { "command": "examples", "data": { "categories": [ { "description": "Start and interact with the AI agent", "examples": [ { "command": "sudo kodachi-claw agent", "description": "Interactive session with full anonymity", "expectedOutput": "Tor bootstrapped, identity randomized, agent ready", "notes": "Requires onboarding first: kodachi-claw onboard" }, { "command": "sudo kodachi-claw agent --message \"What is my IP?\"", "description": "Single message mode", "expectedOutput": "Response through Tor-routed connection" }, { "command": "sudo kodachi-claw agent --provider anthropic --model claude-sonnet-4-5-20250929", "description": "Specific provider/model", "expectedOutput": "Agent session using Anthropic Claude" }, { "command": "sudo kodachi-claw agent --message \"scan ports\" --provider ollama --model llama3", "description": "Local offline model", "expectedOutput": "Agent runs with local model, Tor still active for tools" }, { "command": "sudo kodachi-claw agent --temperature 0.2 --message \"write secure code\"", "description": "Low temperature for deterministic output", "expectedOutput": "Agent runs with temperature 0.2" }, { "command": "sudo kodachi-claw agent --peripheral nucleo-f401re:/dev/ttyACM0 --message \"blink LED\"", "description": "Hardware peripheral attached", "expectedOutput": "Agent with STM32 board attached" }, { "command": "sudo kodachi-claw agent --provider claude-code --message \"What is my IP?\" --skip-anonymity", "description": "Use installed Claude Code CLI (no API key)", "expectedOutput": "Agent uses local Claude Code CLI for inference", "notes": "Requires claude CLI installed. No API key needed" } ], "id": "agent", "title": "AI Agent" }, { "description": "Long-running services and webhook endpoints", "examples": [ { "command": "sudo kodachi-claw daemon", "description": "Full daemon with all channels", "expectedOutput": "Daemon running: all configured channels active", "notes": "Listens on all configured channels simultaneously" }, { "command": "sudo kodachi-claw daemon --port 8080", "description": "Custom gateway port", "expectedOutput": "Gateway + channels + heartbeat + scheduler running" }, { "command": "sudo kodachi-claw daemon --host 0.0.0.0 --port 9090", "description": "Bind to all interfaces", "expectedOutput": "Daemon bound to 0.0.0.0:9090" }, { "command": "sudo kodachi-claw gateway --port 9090", "description": "Gateway-only (webhook/WebSocket)", "expectedOutput": "Gateway accepting webhook requests on :9090" }, { "command": "sudo kodachi-claw service install && sudo kodachi-claw service start", "description": "Install as systemd service", "expectedOutput": "Service installed with auto-restart on failure" } ], "id": "daemon", "title": "Daemon & Gateway" }, { "description": "First-time configuration and channel management", "examples": [ { "command": "kodachi-claw onboard --interactive", "description": "Full wizard (9 steps)", "expectedOutput": "Guided 9-step setup wizard", "notes": "Run this first before using agent or daemon" }, { "command": "kodachi-claw onboard --api-key sk-... --provider openrouter", "description": "Quick setup", "expectedOutput": "Config created with OpenRouter provider" }, { "command": "kodachi-claw onboard --api-key sk-... --provider anthropic --memory sqlite", "description": "Quick setup with memory backend", "expectedOutput": "Config created with Anthropic + SQLite memory" }, { "command": "kodachi-claw onboard --provider claude-code", "description": "Quick setup with Claude Code CLI (no API key)", "expectedOutput": "Config created with claude-code provider", "notes": "No API key needed -- Claude Code handles auth internally" }, { "command": "kodachi-claw onboard --channels-only", "description": "Reconfigure channels only", "expectedOutput": "Channel configuration updated" }, { "command": "kodachi-claw channel bind-telegram myusername", "description": "Bind Telegram identity", "expectedOutput": "Telegram user bound to allowlist" } ], "id": "setup", "title": "Setup & Onboarding" }, { "description": "System status, health checks, and diagnostics", "examples": [ { "command": "sudo kodachi-claw status", "description": "Full status including MAC, hostname, timezone, IP, auth", "expectedOutput": "Complete system status with identity info" }, { "command": "kodachi-claw status --skip", "description": "Basic status without security/identity info", "expectedOutput": "Config and channel status only" }, { "command": "sudo kodachi-claw --json-pretty status", "description": "JSON status for automation", "expectedOutput": "Pretty-printed JSON envelope with status data" }, { "command": "kodachi-claw doctor", "description": "Run health diagnostics", "expectedOutput": "Diagnostic report for daemon/scheduler/channels" }, { "command": "sudo kodachi-claw doctor models --provider openai", "description": "Probe model availability", "expectedOutput": "Available models for the specified provider" } ], "id": "status", "title": "Status & Diagnostics" }, { "description": "Configure and manage cron-style scheduled tasks", "examples": [ { "command": "kodachi-claw cron list", "description": "List all scheduled tasks", "expectedOutput": "Table of scheduled tasks with status" }, { "command": "kodachi-claw cron add \"0 */6 * * *\" \"check disk space\"", "description": "Run every 6 hours", "expectedOutput": "Task added with cron schedule" }, { "command": "kodachi-claw cron add \"0 9 * * 1\" \"weekly report\" --tz America/New_York", "description": "Weekly with timezone", "expectedOutput": "Task scheduled for Monday 9AM ET" }, { "command": "kodachi-claw cron add-at \"2026-03-01T09:00:00Z\" \"deploy update\"", "description": "One-shot at specific time", "expectedOutput": "One-time task scheduled" }, { "command": "kodachi-claw cron add-every 300000 \"heartbeat check\"", "description": "Every 5 minutes", "expectedOutput": "Interval task added (300s)" }, { "command": "kodachi-claw cron once 30m \"backup workspace\"", "description": "One-shot after 30 minutes", "expectedOutput": "One-time delayed task scheduled" }, { "command": "kodachi-claw cron pause && kodachi-claw cron resume ", "description": "Pause/resume tasks", "expectedOutput": "Task paused/resumed" } ], "id": "cron", "title": "Scheduled Tasks" }, { "description": "Manage AI model catalogs and providers", "examples": [ { "command": "kodachi-claw models refresh", "description": "Refresh model catalog from default provider", "expectedOutput": "Model catalog updated" }, { "command": "sudo kodachi-claw models refresh --provider openai --force", "description": "Force refresh from specific provider", "expectedOutput": "OpenAI model catalog force-refreshed" }, { "command": "kodachi-claw providers", "description": "List all 12+ supported AI providers", "expectedOutput": "Provider table with active marker" }, { "command": "kodachi-claw doctor models --use-cache", "description": "Check cached model availability", "expectedOutput": "Model availability from cache" } ], "id": "models", "title": "Models & Providers" }, { "description": "Configure and manage communication channels", "examples": [ { "command": "kodachi-claw channel list", "description": "List configured channels", "expectedOutput": "Channel status table" }, { "command": "sudo kodachi-claw channel start", "description": "Start all configured channels", "expectedOutput": "All channels listening" }, { "command": "sudo kodachi-claw channel doctor", "description": "Health check all channels", "expectedOutput": "Channel health report" }, { "command": "kodachi-claw channel add telegram '{\"bot_token\":\"...\",\"allowed_users\":[\"user1\"]}'", "description": "Add Telegram channel", "expectedOutput": "Telegram channel configured" }, { "command": "kodachi-claw channel remove discord", "description": "Remove a channel", "expectedOutput": "Discord channel removed" }, { "command": "kodachi-claw channel bind-telegram 123456789", "description": "Bind Telegram user ID to allowlist", "expectedOutput": "Telegram user ID bound" } ], "id": "channel", "title": "Channel Management" }, { "description": "Manage provider authentication profiles", "examples": [ { "command": "kodachi-claw auth login --provider openai-codex", "description": "OAuth login", "expectedOutput": "Browser-based OAuth flow started" }, { "command": "kodachi-claw auth login --provider openai-codex --device-code", "description": "Device code flow", "expectedOutput": "Device code displayed for authorization" }, { "command": "kodachi-claw auth paste-token --provider anthropic --auth-kind api-key", "description": "Paste API key", "expectedOutput": "API key stored securely" }, { "command": "kodachi-claw auth setup-token --provider anthropic", "description": "Interactive token entry", "expectedOutput": "Token stored in encrypted secret store" }, { "command": "kodachi-claw auth refresh --provider openai-codex", "description": "Refresh access token", "expectedOutput": "Token refreshed successfully" }, { "command": "kodachi-claw auth list", "description": "List all auth profiles", "expectedOutput": "Auth profile table with active markers" }, { "command": "kodachi-claw auth status", "description": "Show active profile and token expiry", "expectedOutput": "Profile status with expiration info" }, { "command": "kodachi-claw auth logout --provider openai-codex", "description": "Remove auth profile", "expectedOutput": "Auth profile removed" } ], "id": "auth", "title": "Authentication" }, { "description": "Manage user-defined capabilities", "examples": [ { "command": "kodachi-claw skills list", "description": "List installed skills", "expectedOutput": "Installed skills table" }, { "command": "kodachi-claw skills install https://github.com/user/skill-repo", "description": "Install from GitHub", "expectedOutput": "Skill installed and registered" }, { "command": "kodachi-claw skills remove my-skill", "description": "Remove installed skill", "expectedOutput": "Skill removed" } ], "id": "skills", "title": "Skills Management" }, { "description": "Browse and manage service integrations", "examples": [ { "command": "kodachi-claw integrations info github", "description": "Show GitHub integration details", "expectedOutput": "GitHub integration configuration and status" }, { "command": "kodachi-claw integrations info jira", "description": "Show Jira integration details", "expectedOutput": "Jira integration configuration and status" } ], "id": "integrations", "title": "Integrations" }, { "description": "Import data from other agent runtimes", "examples": [ { "command": "kodachi-claw migrate openclaw --dry-run", "description": "Preview migration without writing", "expectedOutput": "Migration preview with changes listed" }, { "command": "kodachi-claw migrate openclaw --source /path/to/openclaw/workspace", "description": "Import from OpenClaw", "expectedOutput": "Data imported from OpenClaw workspace" } ], "id": "migrate", "title": "Migration" }, { "description": "Discover and manage hardware devices", "examples": [ { "command": "kodachi-claw hardware discover", "description": "Enumerate USB devices and known boards", "expectedOutput": "Detected hardware devices" }, { "command": "kodachi-claw hardware introspect /dev/ttyACM0", "description": "Introspect specific device", "expectedOutput": "Device capabilities and firmware info" }, { "command": "kodachi-claw hardware info --chip stm32f401re", "description": "Get chip info", "expectedOutput": "Chip specifications and pinout" }, { "command": "kodachi-claw peripheral list", "description": "List configured peripherals", "expectedOutput": "Configured peripheral boards" }, { "command": "kodachi-claw peripheral add nucleo-f401re /dev/ttyACM0", "description": "Add STM32 board", "expectedOutput": "Peripheral added to config" }, { "command": "kodachi-claw peripheral flash --port /dev/ttyACM0", "description": "Flash firmware", "expectedOutput": "Firmware flashed to device" } ], "id": "hardware", "title": "Hardware & Peripherals" }, { "description": "Install and manage as a system service", "examples": [ { "command": "sudo kodachi-claw service install", "description": "Install as systemd/launchd service", "expectedOutput": "Service unit installed" }, { "command": "sudo kodachi-claw service start", "description": "Start the service", "expectedOutput": "Service started" }, { "command": "sudo kodachi-claw service stop", "description": "Stop the service", "expectedOutput": "Service stopped" }, { "command": "kodachi-claw service status", "description": "Check service status", "expectedOutput": "Service running/stopped status" }, { "command": "sudo kodachi-claw service uninstall", "description": "Uninstall the service", "expectedOutput": "Service unit removed" } ], "id": "service", "title": "Service Lifecycle" }, { "description": "Control all Tor instances directly from kodachi-claw", "examples": [ { "command": "sudo kodachi-claw tor list-instances", "description": "List all known Tor instances", "expectedOutput": "Table of instance tags and status" }, { "command": "sudo kodachi-claw tor list-instances-with-ip", "description": "List instances with current Tor exit IP", "expectedOutput": "Instance table with live Tor IP addresses" }, { "command": "sudo kodachi-claw tor start-all-instances", "description": "Start every Tor instance", "expectedOutput": "All configured Tor instances started" }, { "command": "sudo kodachi-claw tor stop-all-instances", "description": "Stop every Tor instance", "expectedOutput": "All configured Tor instances stopped" }, { "command": "sudo kodachi-claw tor delete-all-instances", "description": "Delete all non-default Tor instances", "expectedOutput": "Custom Tor instances deleted" }, { "command": "sudo kodachi-claw tor delete-all-instances-with-default", "description": "Delete all instances including default", "expectedOutput": "All Tor instances deleted, including default", "notes": "Use when you want a full Tor instance reset" }, { "command": "sudo kodachi-claw --json-pretty tor list-instances-with-ip", "description": "Automation-friendly Tor instance inventory", "expectedOutput": "JSON envelope with instance and IP details" } ], "id": "tor-control", "title": "Tor Instance Control" }, { "description": "Control Tor instances, circuits, and identity randomization", "examples": [ { "command": "sudo kodachi-claw --mode multi-circuit --tor-instances 10 agent", "description": "10 parallel circuits", "expectedOutput": "10 Arti instances bootstrapped, traffic distributed across circuits", "notes": "Default mode. Each tool/channel gets a different circuit" }, { "command": "sudo kodachi-claw --mode isolated agent", "description": "Process namespace isolation (mount/uts/ipc)", "expectedOutput": "Namespace isolation applied while keeping the live network namespace", "notes": "In-process isolated mode keeps net=false because full oniux TUN/onion-tunnel plumbing is not established here" }, { "command": "sudo kodachi-claw --mode single --tor-instances 1 agent", "description": "Single circuit (low-resource)", "expectedOutput": "Single Arti instance, minimal memory usage" }, { "command": "sudo kodachi-claw --circuit-strategy sticky daemon", "description": "Sticky circuit assignment", "expectedOutput": "Sticky circuit assignment per tool/channel", "notes": "Strategies: round-robin (default), random, least-used, sticky" }, { "command": "sudo kodachi-claw --circuit-strategy random --tor-instances 5 agent", "description": "Random assignment across 5 circuits", "expectedOutput": "Random circuit selection per request" }, { "command": "sudo kodachi-claw --restore-on-exit agent", "description": "Restore identity on exit", "expectedOutput": "Identity restored after session ends", "notes": "Without this flag, spoofed identity persists after exit" }, { "command": "sudo kodachi-claw --skip-mac --skip-hostname agent", "description": "Selective identity spoofing", "expectedOutput": "Only timezone randomized, Tor still active" }, { "command": "sudo kodachi-claw --access-mode gateway --auth-mode required daemon", "description": "Gateway access with required auth", "expectedOutput": "Gateway mode with mandatory authentication" }, { "command": "sudo kodachi-claw recover-internet", "description": "Check and recover internet connectivity", "expectedOutput": "Internet connectivity is working / Internet recovered successfully", "notes": "Invokes health-control recover-internet if connectivity is lost" }, { "command": "sudo kodachi-claw recover-internet --force", "description": "Force recovery even if internet appears working", "expectedOutput": "Internet recovered successfully", "notes": "Skips initial check, goes straight to health-control recovery" }, { "command": "sudo kodachi-claw --json recover-internet", "description": "Check/recover with JSON output", "expectedOutput": "{status: connected, recovery_needed: false, ...}", "notes": "Returns JSON envelope with connectivity status and recovery details" }, { "command": "sudo kodachi-claw --auto-recover-internet --restore-on-exit agent", "description": "Auto-recover internet after identity changes", "expectedOutput": "Net check after MAC change, recovery on exit", "notes": "Checks connectivity after MAC randomization and during shutdown" }, { "command": "sudo kodachi-claw --auto-recover-internet --skip-auto-recover-internet agent", "description": "Skip flag overrides auto-recover", "expectedOutput": "Agent runs without auto-recovery (skip wins)", "notes": "--skip-auto-recover-internet takes precedence over --auto-recover-internet" } ], "id": "anonymity", "title": "Anonymity & Tor Modes" }, { "description": "Disable specific startup phases for debugging or testing", "examples": [ { "command": "sudo kodachi-claw --skip-anonymity agent", "description": "No Tor, no identity changes", "expectedOutput": "Agent runs without Tor, no identity changes", "notes": "WARNING: No privacy protection. Local testing only" }, { "command": "sudo kodachi-claw --skip-all status", "description": "Skip all startup phases", "expectedOutput": "Status with no anonymity bootstrap" }, { "command": "sudo kodachi-claw --skip-tor --skip-identity status", "description": "Quick status without Tor", "expectedOutput": "Status report with auth check only" }, { "command": "sudo kodachi-claw --skip-dns-check --skip-ip-check agent", "description": "Skip verification checks", "expectedOutput": "Tor starts but IP/DNS not verified" }, { "command": "sudo kodachi-claw --skip-integrity-check --skip-permission-check agent", "description": "Skip preflight checks", "expectedOutput": "Agent starts without preflight verification" } ], "id": "skip", "title": "Skip Controls" }, { "description": "JSON output modes for scripting and CI/CD", "examples": [ { "command": "sudo kodachi-claw --json status", "description": "Compact JSON for scripting", "expectedOutput": "{\"status\":\"success\",...}" }, { "command": "sudo kodachi-claw --json-pretty status", "description": "Pretty-printed JSON", "expectedOutput": "Formatted JSON with indentation" }, { "command": "sudo kodachi-claw --json-human status", "description": "Human-annotated JSON", "expectedOutput": "JSON with human-readable annotations", "notes": "Also: --json (compact), --json-pretty (indented)" }, { "command": "sudo kodachi-claw -V --verbose agent --message \"debug this\"", "description": "Verbose logging", "expectedOutput": "Debug-level log output" }, { "command": "sudo kodachi-claw -q --quiet daemon", "description": "Suppress non-error output", "expectedOutput": "Only error messages shown" }, { "command": "sudo kodachi-claw --timeout 60 --retry 5 --instance-policy new daemon", "description": "Custom network settings", "expectedOutput": "60s timeout, 5 retries, fresh instances", "notes": "Policies: reuse (default), new, mixed" } ], "id": "output", "title": "Output & Automation" }, { "description": "Route requests through AI gateway proxies (Cloudflare, Vercel, custom OpenAI-compatible endpoints)", "examples": [ { "command": "sudo kodachi-claw agent --provider cloudflare --message \"summarize this\"", "description": "Use Cloudflare AI Gateway", "expectedOutput": "Request routed through gateway.ai.cloudflare.com/v1 over Tor", "notes": "Set CLOUDFLARE_API_KEY env var or api_key in config. Supports all Cloudflare-hosted models" }, { "command": "sudo kodachi-claw agent --provider vercel --message \"explain this code\"", "description": "Use Vercel AI Gateway", "expectedOutput": "Request routed through api.vercel.ai over Tor", "notes": "Set VERCEL_API_KEY env var or api_key in config" }, { "command": "sudo kodachi-claw agent --provider \"custom:https://your-gateway.example.com\" --message \"hello\"", "description": "Any OpenAI-compatible gateway via custom URL", "expectedOutput": "Request sent to your-gateway.example.com/v1/chat/completions over Tor", "notes": "Works with vLLM, LiteLLM, Azure OpenAI, any /v1/chat/completions endpoint" }, { "command": "sudo kodachi-claw agent --provider \"anthropic-custom:https://llm-proxy.corp.example.com\" --message \"review PR\"", "description": "Anthropic-compatible proxy (corporate/self-hosted)", "expectedOutput": "Request sent to llm-proxy.corp.example.com using Anthropic API format", "notes": "For proxies that speak the Anthropic Messages API instead of OpenAI format" }, { "command": "sudo kodachi-claw agent --provider groq --message \"summarize this\"", "description": "Groq ultra-fast inference gateway", "expectedOutput": "Agent response generated with Groq LPU inference", "notes": "Set GROQ_API_KEY. Ultra-low latency for supported models" }, { "command": "sudo kodachi-claw agent --provider together --model meta-llama/Llama-3-70b-chat-hf --message \"analyze\"", "description": "Together AI inference gateway", "expectedOutput": "Request routed through Together AI over Tor", "notes": "Set TOGETHER_API_KEY. Supports 100+ open models" }, { "command": "sudo kodachi-claw agent --provider fireworks --model accounts/fireworks/models/llama-v3-70b-instruct --message \"write tests\"", "description": "Fireworks AI inference gateway", "expectedOutput": "Request routed through Fireworks AI over Tor", "notes": "Set FIREWORKS_API_KEY. Optimized for fast open-model inference" }, { "command": "kodachi-claw onboard --api-key sk-... --provider \"custom:https://gateway.example.com\"", "description": "Onboard with a custom AI gateway", "expectedOutput": "Config created with custom gateway as default provider", "notes": "The custom URL is stored in config.toml as default_provider" }, { "command": "kodachi-claw providers", "description": "List all supported AI gateway providers", "expectedOutput": "Table showing 30+ providers including Cloudflare, Vercel, Groq, Together, Fireworks, Mistral, xAI, and more", "notes": "Use custom: prefix for unlisted OpenAI-compatible gateways" } ], "id": "ai-gateway", "title": "AI Gateway Providers" }, { "description": "Run with local AI models — no API key required. Build with: cargo build --features kodachi-ai", "examples": [ { "command": "sudo kodachi-claw agent --provider kodachi-ai", "description": "Local AI agent (auto-detects ONNX/GGUF models)", "expectedOutput": "🦀 Kodachi Claw Interactive Mode (local: ONNX + Qwen 3B)", "notes": "No API key needed. Auto-detects: Claude CLI > Mistral.rs > Local LLM > ONNX > TF-IDF" }, { "command": "sudo kodachi-claw agent --provider kodachi-ai --message \"switch to Tor\"", "description": "NLP-routed command execution", "expectedOutput": "NLP classifies intent, matches kodachi service commands, executes via gateway-core", "notes": "High-confidence NLP matches bypass the AI model for instant command routing" }, { "command": "kodachi-claw onboard --provider kodachi-ai", "description": "Onboard with local AI (zero API keys)", "expectedOutput": "Config created with kodachi-ai provider — fully offline capable", "notes": "No network needed for AI inference. Tor still used for anonymity" }, { "command": "/models", "description": "List available local AI models (interactive command)", "expectedOutput": "Model list: all-MiniLM-L6-v2.onnx (90MB), kodachi-intent-classifier.onnx (67MB), Qwen2.5-3B (2.1GB)", "notes": "Run inside agent interactive mode. Calls ai-trainer subprocess" }, { "command": "/models download Qwen2.5-3B", "description": "Download a GGUF model for local inference (interactive command)", "expectedOutput": "Downloading Qwen2.5-3B... done", "notes": "Run inside agent interactive mode. Downloads to models directory" }, { "command": "/train", "description": "Retrain NLP embeddings from latest command data (interactive command)", "expectedOutput": "Training embeddings... 458 commands processed, model saved", "notes": "Run inside agent interactive mode. Calls ai-trainer subprocess" }, { "command": "sudo kodachi-claw agent --provider kodachi-ai --tier onnx", "description": "Force specific AI tier (ONNX)", "expectedOutput": "Agent using ONNX classifier model only", "notes": "Available tiers: onnx, mistral, genai, tfidf. Auto-fallback if unavailable" }, { "command": "sudo kodachi-claw agent --provider kodachi-ai --tier tfidf", "description": "Force TF-IDF fallback (no neural models)", "expectedOutput": "Agent using TF-IDF keyword matching only", "notes": "Fastest but lowest accuracy. Useful for low-resource environments" } ], "id": "local-ai", "title": "Local AI (kodachi-ai)" }, { "description": "Slash commands available inside agent interactive mode", "examples": [ { "command": "/help", "description": "Show available interactive commands", "expectedOutput": "List of all slash commands with descriptions", "notes": "Run inside agent mode prompt" }, { "command": "/clear", "description": "Clear conversation history", "expectedOutput": "Conversation history cleared", "notes": "Resets context for new conversation thread" }, { "command": "/quit", "description": "Exit agent mode (alias: /exit)", "expectedOutput": "Agent shutdown initiated", "notes": "Gracefully stops Tor and restores identity if --restore-on-exit was used" }, { "command": "/exit", "description": "Exit agent mode (alias: /quit)", "expectedOutput": "Agent shutdown initiated", "notes": "Same as /quit" }, { "command": "/models", "description": "List local AI models (kodachi-ai feature)", "expectedOutput": "Local model inventory with sizes and status", "notes": "Requires --features kodachi-ai build" }, { "command": "/models download ", "description": "Download AI model (kodachi-ai feature)", "expectedOutput": "Model download progress and completion", "notes": "Downloads ONNX or GGUF models to local cache" }, { "command": "/train", "description": "Retrain NLP embeddings (kodachi-ai feature)", "expectedOutput": "Training progress and completion", "notes": "Retrains intent classifier from latest command data" } ], "id": "interactive", "title": "Interactive Mode Commands" }, { "description": "Execute Kodachi system services via AI agent (kodachi-ai feature)", "examples": [ { "command": "\"switch to VPN\" (in agent mode)", "description": "NLP command routing to routing-switch", "expectedOutput": "NLP detects routing intent, executes routing-switch service via gateway-core", "notes": "Natural language commands auto-route to appropriate Kodachi services" }, { "command": "\"check DNS leaks\" (in agent mode)", "description": "NLP command routing to dns-leak", "expectedOutput": "Executes dns-leak service and returns results", "notes": "Service execution includes policy checks and risk validation" }, { "command": "\"panic mode\" (in agent mode)", "description": "Profile execution via profile-registry", "expectedOutput": "Finds emergency profile, shows steps, executes panic sequence", "notes": "Workflow profiles available: panic, recovery, security-scan, network-test" }, { "command": "\"check my IP\" (in agent mode)", "description": "NLP routing to ip-fetch service", "expectedOutput": "Fetches IP via ip-fetch and displays geolocation", "notes": "All service calls use recovery-engine for automatic retry on failure" }, { "command": "\"scan network\" (in agent mode)", "description": "NLP routing to health-control network scan", "expectedOutput": "Executes health-control net-check and returns diagnostics", "notes": "Supports 18+ Kodachi services via kodachi-gateway-core" } ], "id": "kodachi-gateway", "title": "Kodachi Gateway Integration" }, { "description": "AI model training and management (kodachi-ai feature)", "examples": [ { "command": "sudo kodachi-claw agent --provider kodachi-ai", "description": "Start agent with auto-learning enabled", "expectedOutput": "Agent learns from user patterns and command sequences", "notes": "Learning-engine tracks patterns, sequences, and user preferences" }, { "command": "/train (in agent mode)", "description": "Manually trigger NLP retraining", "expectedOutput": "Retrains intent classifier from accumulated interaction data", "notes": "Calls ai-trainer subprocess to rebuild embeddings" }, { "command": "/models (in agent mode)", "description": "View local model inventory", "expectedOutput": "Lists ONNX classifiers, GGUF models, embeddings with sizes", "notes": "Shows model status: available, downloading, missing" }, { "command": "/models refresh (in agent mode)", "description": "Refresh model catalog from sources", "expectedOutput": "Updates available model list from Hugging Face and local sources", "notes": "Checks for model updates and new releases" } ], "id": "training", "title": "Training & Model Management" }, { "description": "Discover and execute workflow profiles (kodachi-ai feature)", "examples": [ { "command": "\"run security scan\" (in agent mode)", "description": "Profile-based workflow execution", "expectedOutput": "Finds security-scan profile (92+ profiles available), shows steps, executes sequence", "notes": "Profiles include: security-scan, network-test, panic-mode, recovery-workflow" }, { "command": "\"emergency shutdown\" (in agent mode)", "description": "Emergency profile execution", "expectedOutput": "Executes panic-mode profile: kill network, wipe RAM, shutdown", "notes": "High-risk profiles require confirmation before execution" }, { "command": "\"network recovery\" (in agent mode)", "description": "Recovery profile execution", "expectedOutput": "Executes recovery-workflow: check connectivity, reset interfaces, restore DNS", "notes": "Recovery profiles use recovery-engine for smart retry and correlation" } ], "id": "profiles", "title": "Profile & Workflow Discovery" }, { "description": "Fine-grained control over startup phase skipping", "examples": [ { "command": "sudo kodachi-claw --skip-mac agent", "description": "Skip MAC randomization only", "expectedOutput": "Agent starts with original MAC, hostname and timezone still randomized", "notes": "Useful when MAC change breaks network connectivity" }, { "command": "sudo kodachi-claw --skip-hostname agent", "description": "Skip hostname randomization only", "expectedOutput": "Agent starts with original hostname, MAC and timezone still randomized", "notes": "Useful for preserving network identifiers" }, { "command": "sudo kodachi-claw --skip-identity agent", "description": "Skip all identity randomization (MAC, hostname, timezone)", "expectedOutput": "Agent starts with original identity, Tor still active", "notes": "Tor routing active but no identity spoofing" }, { "command": "sudo kodachi-claw --skip-tor agent", "description": "Skip Tor bootstrap only", "expectedOutput": "Agent starts without Tor, identity still randomized", "notes": "Identity spoofing active but no Tor routing (local testing)" }, { "command": "sudo kodachi-claw --skip-all agent", "description": "Skip all anonymity and security phases", "expectedOutput": "Agent starts immediately with no protection", "notes": "WARNING: No anonymity, no Tor, no identity changes. Local testing ONLY" }, { "command": "sudo kodachi-claw --skip-mac --skip-hostname --skip-tor status", "description": "Combine multiple skip flags", "expectedOutput": "Status with only timezone changed and no Tor", "notes": "Skip flags are composable for precise control" }, { "command": "sudo kodachi-claw --skip-dns-check --skip-ip-check --skip-integrity-check agent", "description": "Skip verification checks", "expectedOutput": "Agent starts without post-bootstrap verification", "notes": "Faster startup but no connectivity/integrity validation" } ], "id": "advanced-skip", "title": "Advanced Skip Controls" }, { "description": "Tor circuit assignment and load balancing strategies", "examples": [ { "command": "sudo kodachi-claw --circuit-strategy round-robin --tor-instances 10 agent", "description": "Round-robin circuit assignment (default)", "expectedOutput": "Each request uses next circuit in sequence (balanced load)", "notes": "Best for even load distribution across circuits" }, { "command": "sudo kodachi-claw --circuit-strategy random --tor-instances 8 daemon", "description": "Random circuit assignment", "expectedOutput": "Each request randomly selects a circuit", "notes": "Best for unpredictable traffic patterns" }, { "command": "sudo kodachi-claw --circuit-strategy least-used --tor-instances 12 daemon", "description": "Least-used circuit assignment", "expectedOutput": "Each request uses circuit with lowest current load", "notes": "Best for uneven request sizes or long-running requests" }, { "command": "sudo kodachi-claw --circuit-strategy sticky --tor-instances 6 agent", "description": "Sticky circuit assignment (per tool/channel)", "expectedOutput": "Each tool/channel always uses same dedicated circuit", "notes": "Best for maintaining consistent exit IPs per service" } ], "id": "circuit-strategy", "title": "Circuit Strategy Examples" }, { "description": "Different Tor runtime modes and instance configurations", "examples": [ { "command": "sudo kodachi-claw --mode multi-circuit --tor-instances 1 agent", "description": "Multi-circuit mode with single instance", "expectedOutput": "Single Arti instance, all requests through one circuit", "notes": "Minimum resource mode, no circuit isolation" }, { "command": "sudo kodachi-claw --mode multi-circuit --tor-instances 20 daemon", "description": "Multi-circuit mode with 20 instances", "expectedOutput": "20 parallel Arti instances, maximum circuit diversity", "notes": "Maximum anonymity but high memory usage (each instance ~50MB)" }, { "command": "sudo kodachi-claw --mode single --tor-instances 1 agent", "description": "Single mode (explicit)", "expectedOutput": "Single Arti instance, optimized for low-resource", "notes": "Equivalent to --mode multi-circuit --tor-instances 1" }, { "command": "sudo kodachi-claw --mode isolated --restore-on-exit agent", "description": "Namespace isolation with restore-on-exit", "expectedOutput": "Mount/UTS/IPC namespaces applied; identity state restored on shutdown", "notes": "Network namespace remains shared so Tor connectivity is preserved" } ], "id": "tor-modes", "title": "Tor Mode Examples" }, { "description": "Internet connectivity recovery and troubleshooting", "examples": [ { "command": "sudo kodachi-claw recover-internet", "description": "Check and auto-recover internet", "expectedOutput": "Connectivity check, recovery if needed via health-control", "notes": "Non-destructive check first, recovery only if needed" }, { "command": "sudo kodachi-claw recover-internet --force", "description": "Force immediate recovery", "expectedOutput": "Skips check, immediately runs health-control recover-internet", "notes": "Use when connectivity check itself is failing" }, { "command": "sudo kodachi-claw --json recover-internet", "description": "Recovery with JSON output", "expectedOutput": "JSON envelope with connectivity status, recovery actions, results", "notes": "Parseable output for automation and monitoring" }, { "command": "sudo kodachi-claw --auto-recover-internet agent", "description": "Agent with automatic recovery", "expectedOutput": "Agent checks connectivity after MAC change and during shutdown", "notes": "Auto-recovers network if broken by identity changes" }, { "command": "sudo kodachi-claw --auto-recover-internet --restore-on-exit agent", "description": "Auto-recovery with identity restoration", "expectedOutput": "Recovery after MAC change and during shutdown + identity restore", "notes": "Ensures connectivity restored before and after session" } ], "id": "recovery", "title": "Recovery Examples" } ], "description": "Usage examples for kodachi-claw AI runtime", "name": "kodachi-claw", "quickReference": [ "sudo kodachi-claw agent Start interactive AI agent", "sudo kodachi-claw agent -m \"query\" Single message mode", "sudo kodachi-claw daemon Start long-running service", "sudo kodachi-claw gateway --port 8080 Start webhook gateway", "kodachi-claw onboard --interactive First-time setup wizard", "sudo kodachi-claw status Full system + identity status", "kodachi-claw status --skip Basic status only", "sudo kodachi-claw --json-pretty status JSON output for automation", "kodachi-claw cron list List scheduled tasks", "kodachi-claw cron add \"0 */6 * * *\" \"task\" Add cron task (every 6 hours)", "kodachi-claw cron once 30m \"task\" One-shot task after 30 minutes", "kodachi-claw channel list List configured channels", "sudo kodachi-claw channel start Start all channels", "kodachi-claw channel bind-telegram ID Bind Telegram user to allowlist", "kodachi-claw models refresh Refresh model catalog", "kodachi-claw providers List 30+ AI gateway providers", "kodachi-claw auth login --provider X OAuth login", "kodachi-claw auth paste-token --provider X Paste API key", "kodachi-claw auth list List auth profiles", "kodachi-claw auth status Auth status and token expiry", "kodachi-claw auth logout --provider X Remove auth profile", "kodachi-claw skills list List installed skills", "kodachi-claw skills install Install skill from GitHub", "kodachi-claw hardware discover Enumerate USB devices", "kodachi-claw peripheral add board /dev/X Add hardware peripheral", "kodachi-claw integrations info github Show integration details", "kodachi-claw migrate openclaw --dry-run Preview OpenClaw migration", "sudo kodachi-claw service install Install as system service", "sudo kodachi-claw service start Start service", "kodachi-claw service status Check service status", "sudo kodachi-claw tor list-instances List all Tor instances", "sudo kodachi-claw tor list-instances-with-ip List instances with Tor IP", "sudo kodachi-claw tor start-all-instances Start every Tor instance", "sudo kodachi-claw tor stop-all-instances Stop every Tor instance", "sudo kodachi-claw tor delete-all-instances Delete all custom instances", "sudo kodachi-claw tor delete-all-instances-with-default Delete all instances", "kodachi-claw doctor Run health diagnostics", "sudo kodachi-claw doctor models --provider X Probe model availability", "sudo kodachi-claw --mode multi-circuit --tor-instances 5 agent 5 Tor circuits", "sudo kodachi-claw --mode isolated agent Mount/UTS/IPC namespace isolation", "sudo kodachi-claw --mode single agent Single Tor circuit (low-resource)", "sudo kodachi-claw --circuit-strategy round-robin agent Round-robin circuits", "sudo kodachi-claw --circuit-strategy sticky agent Sticky circuit per tool", "sudo kodachi-claw --skip-mac agent Skip MAC randomization", "sudo kodachi-claw --skip-hostname agent Skip hostname change", "sudo kodachi-claw --skip-identity agent Skip all identity changes", "sudo kodachi-claw --skip-anonymity agent No Tor, no identity changes", "sudo kodachi-claw --restore-on-exit agent Restore identity on exit", "sudo kodachi-claw recover-internet Check/recover connectivity", "sudo kodachi-claw --auto-recover-internet agent Auto-recover after MAC change", "sudo kodachi-claw agent --provider claude-code -m \"query\" Claude Code CLI (no API key)", "sudo kodachi-claw agent --provider cloudflare Use Cloudflare AI Gateway", "sudo kodachi-claw agent --provider custom:URL Custom OpenAI-compatible gateway", "sudo kodachi-claw agent --provider kodachi-ai Local AI (no API key, ONNX/GGUF)", "/help Interactive mode help", "/clear Clear conversation history", "/quit or /exit Exit agent mode", "/models List local AI models (in agent mode)", "/models download Download model (in agent mode)", "/train Retrain NLP embeddings (in agent mode)", "kodachi-claw -v Version", "kodachi-claw -n Program info", "kodachi-claw -e This examples list", "kodachi-claw -h Help with all flags", "", "--- API KEY TIPS ---", "sudo -E kodachi-claw agent -m \"query\" Preserve env vars (API keys) with sudo", "sudo kodachi-claw onboard Store API key permanently in config.toml", "# NOTE: 'export KEY=...' is lost with plain sudo. Use sudo -E or store in config." ] }, "errors": [], "metadata": { "executionTime": 0, "hostname": "Boardroom-System", "user": "kodachi" }, "status": "success", "timestamp": "2026-04-11T17:16:24.568529168Z", "version": "9.0.1", "warnings": [] } } }