TypeClawBundled plugins
Plugins shipped with TypeClaw; auto-loaded, not listed in plugins[]
Nine plugins ship with TypeClaw and load automatically. You don't list them in plugins[]; they're always on. Their config blocks live at the top level of typeclaw.json, namespaced by plugin name.
| Plugin | Config key | Contributions |
|---|---|---|
security | none | tool.before hook gating every privileged action on a two-axis severity policy (/reference/permissions) |
tool-result-cap | toolResultCap | truncates oversized tool results so a single command can't blow the context window |
guard | none | managed-file guards — blocks accidental overwrites of typeclaw.json, cron.json, MEMORY.md outside the right subagent |
memory | memory | three subagents (memory-logger, dreaming, daily-stream rotator); writes daily memory streams and consolidates them into MEMORY.md and muscle-memory skills |
backup | backup | auto-commits sessions/ and memory/ on idle; LLM-generated commit subjects |
agent-browser | agentBrowser | headed Chrome under Xvfb for bot-resistant browsing; dashboard proxy |
explorer | none | workspace exploration tools — file tree, glob, grep tuned for agent ergonomics |
scout | none | web-research subagent that scrapes and summarizes |
operator | none | exposes the operator subagent — a focused worker that can write files and edit the workspace |
memory
{
"memory": {
"idleMs": 60000,
"dreaming": { "schedule": "0 4 * * *" }
}
}Both fields restart-required. The dreaming.schedule is a standard 5-field cron expression. See /concepts/memory-loop for the architecture, Teach the agent for the usage.
backup
{
"backup": {
"idleMs": 120000
}
}idleMs is how long after the last activity before the backup subagent runs (default 2 minutes). Restart-required.
agent-browser
{
"agentBrowser": {
"proxyPort": 4848,
"upstreamPort": 4849
}
}Both restart-required. proxyPort is the host-facing compatibility proxy; upstreamPort is the in-container dashboard server. Tunneling the agent-browser dashboard requires pointing the tunnel's upstreamPort at the upstream port, not the proxy (/reference/tunnel-providers).
tool-result-cap
{
"toolResultCap": {
"maxChars": 51200
}
}maxChars is the threshold above which tool results are truncated (default 50 KB). Truncated output is replaced with a tail summary plus the path to the full result on disk. Restart-required.
Plugin permissions
Each bundled plugin declares its own permissions[] on definePlugin. The runtime expands the owner role's wildcard sentinel into the union of all plugin-contributed permissions at boot. The full inventory lives in /reference/permissions.