{"ok":true,"source":"agenturos_telegram_command_registry","policy":"allowed_chat_read_only_first_no_secrets_no_shell","public_url":"https://os.saschahauser.de","updated_at":null,"generated_at":"2026-09-01T11:53:28.104Z","gateway":{"mode":"interactive_prepared","webhook":"not_enabled","botToken":"missing","allowedChat":"missing","requiredEnv":["TELEGRAM_BOT_TOKEN","TELEGRAM_ALLOWED_CHAT_ID"]},"rules":["Nur TELEGRAM_ALLOWED_CHAT_ID darf später Kommandos ausführen.","Antworten enthalten Status und Links, aber keine Secrets, Tokens oder Rohlogs.","Erste Welle ist read-only: /help, /status, /health, /apis, /deploy-status.","Keine Shell-, DNS-, Outreach- oder E-Mail-Aktionen über Telegram.","Riskante Kommandos bleiben blockiert, bis Approval- und Audit-Regeln entschieden sind."],"summary":{"safe_now":5,"approval_required":2,"blocked":5,"later":0},"commands":[{"command":"/help","label":"Hilfe anzeigen","status":"safe_now","risk":"low","description":"Zeigt erlaubte Kommandos und Sicherheitsregeln.","response":"Liste der sicheren AgenturOS-Kommandos, ohne Secrets oder interne Logs.","requiresApproval":false,"writeEnabled":false},{"command":"/status","label":"AgenturOS Status","status":"safe_now","risk":"low","description":"Kurzstatus für Dashboard, Runtime-Grenze und Datenquellen.","response":"AgenturOS up/down, Hermes-Auth-Status, Datenquellen-Zusammenfassung.","requiresApproval":false,"writeEnabled":false},{"command":"/health","label":"Healthcheck","status":"safe_now","risk":"low","description":"Liest Health-Endpunkte und Container-Grundstatus.","response":"HTTP-/Container-Health als kurze Ampel, keine Runtime-Logs.","requiresApproval":false,"writeEnabled":false},{"command":"/apis","label":"API-Register","status":"safe_now","risk":"low","description":"Zeigt den Section-C-Datenquellenstatus.","response":"Setup/Credentials/manuell/später-Zählung und Link zu /__data_sources.","requiresApproval":false,"writeEnabled":false},{"command":"/deploy-status","label":"Deployment Status","status":"safe_now","risk":"low","description":"Zeigt letzten bekannten AgenturOS-Deploy-/Build-Status.","response":"Aktueller Container-Health und letzte bekannte Version/Route-Checks, sobald angebunden.","requiresApproval":false,"writeEnabled":false},{"command":"/restart-dashboard","label":"Dashboard neu starten","status":"approval_required","risk":"medium","description":"Würde später nur den AgenturOS-Dashboard-Container neu starten.","response":"Noch nicht aktiv; braucht explizite Approval-Regel und Audit-Log.","requiresApproval":true,"writeEnabled":false},{"command":"/deploy","label":"Deploy auslösen","status":"approval_required","risk":"high","description":"Würde später Build/Deploy starten.","response":"Blockiert bis Freigabe-, Rollback- und Audit-Modell definiert sind.","requiresApproval":true,"writeEnabled":false},{"command":"/send-email","label":"E-Mail senden","status":"blocked","risk":"high","description":"Outbound-Kommunikation ist aktuell nicht erlaubt.","response":"Blockiert: Resend ist nur intern, keine Lead-/Kundenmails.","requiresApproval":true,"writeEnabled":false},{"command":"/contact-lead","label":"Lead kontaktieren","status":"blocked","risk":"high","description":"Outreach-/Lead-Aktionen bleiben manuell.","response":"Blockiert bis Outreach-Regeln, Freigaben und Audit-Logs entschieden sind.","requiresApproval":true,"writeEnabled":false},{"command":"/shell","label":"Shell ausführen","status":"blocked","risk":"high","description":"Shell-/Terminalzugriff über Telegram ist nicht erlaubt.","response":"Blockiert dauerhaft für das öffentliche AgenturOS-Gateway.","requiresApproval":true,"writeEnabled":false},{"command":"/secrets","label":"Secrets anzeigen","status":"blocked","risk":"high","description":"Secrets dürfen nie per Telegram oder Public API ausgegeben werden.","response":"Blockiert dauerhaft; nur Key-Namen/Status, nie Werte.","requiresApproval":true,"writeEnabled":false},{"command":"/dns-write","label":"DNS ändern","status":"blocked","risk":"high","description":"DNS-Änderungen bleiben bei GoDaddy aktuell manuell.","response":"Blockiert; GoDaddy ist manual-only.","requiresApproval":true,"writeEnabled":false}]}