@1claw/cli 0.36.6 → 0.37.1

package/dist/src/templates/mastra/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "esModuleInterop": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "outDir": "dist"
+  },
+  "include": ["*.ts"]
+}

package/dist/src/templates/openai-agents/Dockerfile

@@ -0,0 +1,34 @@
+FROM python:3.12-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl tini && \
+    rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+RUN pip install --no-cache-dir 1claw-mcp 2>/dev/null || \
+    (apt-get update && apt-get install -y --no-install-recommends nodejs npm && \
+     npm install -g @1claw/mcp@latest && \
+     rm -rf /var/lib/apt/lists/*) || \
+    echo "WARN: 1claw-mcp install deferred to runtime"
+
+COPY agent.py .
+COPY entrypoint.sh .
+RUN chmod +x entrypoint.sh
+
+RUN mkdir -p /run/1claw
+
+ENV NODE_ENV=production
+ENV ONECLAW_DAEMON_SOCKET=/run/1claw/daemon.sock
+ENV ONECLAW_FRAMEWORK=openai-agents
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=10s --timeout=3s --start-period=10s --retries=5 \
+    CMD curl -sf http://localhost:3000/health || exit 1
+
+ENTRYPOINT ["tini", "--"]
+CMD ["./entrypoint.sh"]

package/dist/src/templates/openai-agents/README.md

@@ -0,0 +1,29 @@
+# OpenAI Agents SDK Template
+
+A Python agent using the [OpenAI Agents SDK](https://openai.github.io/openai-agents-python/)
+with 1Claw MCP for secrets management and on-chain signing.
+
+## Quick start
+
+```bash
+1claw spawn openai-agents
+```
+
+Or with your own API key:
+
+```bash
+1claw spawn openai-agents --llm-api-key sk-...
+```
+
+## What's included
+
+- **agent.py** — Starter agent with function tools (hello_world, list_env_vars)
+- **Flask server** on port 3000 with `/chat` and `/health` endpoints
+- **Shroud integration** — LLM calls are routed through Shroud for inspection
+- **MCP server** — started automatically for tool access to 1Claw vault
+
+## Customizing
+
+Edit `agent.py` to add your own `@function_tool` tools, change the agent
+instructions, or add handoffs between agents. The agent uses the OpenAI
+Agents SDK with the base URL pointed at Shroud.

package/dist/src/templates/openai-agents/agent.py

@@ -0,0 +1,98 @@
+"""
+OpenAI Agents SDK agent pre-wired with 1Claw MCP for secrets and signing.
+
+LLM calls are routed through Shroud when ONECLAW_LLM_VIA_SHROUD is set.
+The container never sees raw API keys — they are injected by the host daemon.
+"""
+
+import os
+import asyncio
+from flask import Flask, request, jsonify
+from agents import Agent, Runner, function_tool, ModelSettings
+
+app = Flask(__name__)
+
+SHROUD_URL = os.environ.get("ONECLAW_SHROUD_URL", "https://shroud.1claw.xyz")
+LLM_VIA_SHROUD = os.environ.get("ONECLAW_LLM_VIA_SHROUD", "").lower() == "true"
+MODEL = os.environ.get("ONECLAW_SHROUD_MODEL", "gpt-4o-mini")
+
+
+@function_tool
+def hello_world(name: str) -> str:
+    """Say hello to someone."""
+    return f"Hello, {name}! I'm an OpenAI Agents SDK agent running inside 1Claw."
+
+
+@function_tool
+def list_env_vars() -> str:
+    """List 1Claw-related environment variables (values redacted)."""
+    prefix = "ONECLAW_"
+    vars_list = [k for k in sorted(os.environ) if k.startswith(prefix)]
+    return "\n".join(f"  {k}=***" for k in vars_list) if vars_list else "No ONECLAW_* vars set."
+
+
+def create_agent() -> Agent | None:
+    """Build the OpenAI agent. Returns None if no LLM is configured."""
+    if not LLM_VIA_SHROUD:
+        return None
+
+    os.environ["OPENAI_BASE_URL"] = f"{SHROUD_URL}/v1"
+    os.environ["OPENAI_API_KEY"] = "shroud-injected"
+
+    return Agent(
+        name="1Claw Agent",
+        instructions=(
+            "You are a helpful AI agent running inside a secure 1Claw container. "
+            "You have access to tools for greeting and inspecting the environment."
+        ),
+        tools=[hello_world, list_env_vars],
+        model=MODEL,
+    )
+
+
+agent = create_agent()
+
+
+@app.route("/health")
+def health():
+    return jsonify({"status": "ok", "framework": "openai-agents", "llm_wired": LLM_VIA_SHROUD})
+
+
+@app.route("/chat", methods=["POST"])
+def chat():
+    data = request.get_json(silent=True) or {}
+    message = data.get("message", "").strip()
+    if not message:
+        return jsonify({"error": "No message provided"}), 400
+
+    if not agent:
+        return jsonify({
+            "response": "No LLM configured. Use --llm-api-key or enable Token Billing.",
+            "framework": "openai-agents",
+        })
+
+    try:
+        result = asyncio.run(Runner.run(agent, message))
+        output = result.final_output
+        return jsonify({"response": output, "framework": "openai-agents"})
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+
+
+@app.route("/")
+def index():
+    return """<!DOCTYPE html>
+<html><head><title>1Claw OpenAI Agent</title></head>
+<body style="font-family:system-ui;max-width:600px;margin:40px auto;padding:0 20px">
+<h1>1Claw OpenAI Agents SDK</h1>
+<p>Send messages via <code>POST /chat</code> with <code>{"message": "..."}</code></p>
+<p>Health: <a href="/health">/health</a></p>
+<p style="color:#666;font-size:0.9em">
+Credentials stay in the host daemon — this container never sees secret values.
+</p></body></html>"""
+
+
+if __name__ == "__main__":
+    port = int(os.environ.get("CHAT_UI_PORT", "3000"))
+    print(f"OpenAI Agents SDK agent listening on http://0.0.0.0:{port}")
+    app.run(host="0.0.0.0", port=port)

package/dist/src/templates/openai-agents/entrypoint.sh

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -e
+
+DAEMON_SOCKET="${ONECLAW_DAEMON_SOCKET:-/run/1claw/daemon.sock}"
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+
+echo "─────────────────────────────────────────────"
+echo " 1Claw OpenAI Agents SDK"
+echo "   Framework: openai-agents"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+
+if [ -S "$DAEMON_SOCKET" ]; then
+    echo "   Mode:      ${ONECLAW_MODE:-cloud} (daemon socket)"
+    echo "   Socket:    $DAEMON_SOCKET"
+else
+    echo "   Mode:      standalone (no daemon socket)"
+fi
+echo "─────────────────────────────────────────────"
+
+if [ "$ONECLAW_LLM_VIA_SHROUD" = "true" ]; then
+    export OPENAI_BASE_URL="${ONECLAW_SHROUD_URL}/v1"
+    echo "LLM routed through Shroud: ${ONECLAW_SHROUD_PROVIDER}/${ONECLAW_SHROUD_MODEL}"
+fi
+
+if [ -S "$DAEMON_SOCKET" ]; then
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true ONECLAW_DAEMON_SOCKET="$DAEMON_SOCKET" \
+            1claw-mcp --local 2>/tmp/mcp.log &
+        echo "MCP server started in background."
+    fi
+fi
+
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec python agent.py

package/dist/src/templates/openai-agents/requirements.txt

@@ -0,0 +1,3 @@
+openai-agents>=0.1.0
+openai>=1.50.0
+flask>=3.0.0

package/dist/src/templates/openai-agents/template.yaml

@@ -0,0 +1,24 @@
+name: openai-agents
+display_name: "OpenAI Agents SDK"
+version: 1.0.0
+description: "OpenAI Agents SDK with tool calling and 1Claw MCP integration"
+author: 1Claw
+language: python
+homepage: https://openai.github.io/openai-agents-python/
+
+docker:
+  base_image: python:3.12-slim
+  context_files:
+    - Dockerfile
+    - requirements.txt
+    - agent.py
+    - entrypoint.sh
+  env:
+    ONECLAW_FRAMEWORK: openai-agents
+  health_endpoint: /health
+  health_port: 3000
+
+post_spawn_message: |
+  Edit agent.py to customize your OpenAI agent's tools and instructions.
+  Your 1Claw MCP server is available at the daemon socket.
+  LLM calls are routed through Shroud for inspection and redaction.

package/dist/src/templates/pydantic-ai/Dockerfile

@@ -0,0 +1,34 @@
+FROM python:3.12-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl tini && \
+    rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+RUN pip install --no-cache-dir 1claw-mcp 2>/dev/null || \
+    (apt-get update && apt-get install -y --no-install-recommends nodejs npm && \
+     npm install -g @1claw/mcp@latest && \
+     rm -rf /var/lib/apt/lists/*) || \
+    echo "WARN: 1claw-mcp install deferred to runtime"
+
+COPY agent.py .
+COPY entrypoint.sh .
+RUN chmod +x entrypoint.sh
+
+RUN mkdir -p /run/1claw
+
+ENV NODE_ENV=production
+ENV ONECLAW_DAEMON_SOCKET=/run/1claw/daemon.sock
+ENV ONECLAW_FRAMEWORK=pydantic-ai
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=10s --timeout=3s --start-period=10s --retries=5 \
+    CMD curl -sf http://localhost:3000/health || exit 1
+
+ENTRYPOINT ["tini", "--"]
+CMD ["./entrypoint.sh"]

package/dist/src/templates/pydantic-ai/README.md

@@ -0,0 +1,36 @@
+# Pydantic AI Template
+
+A Python agent using [Pydantic AI](https://ai.pydantic.dev) for type-safe, structured agent interactions with 1Claw MCP.
+
+## Quick start
+
+```bash
+1claw spawn pydantic-ai
+```
+
+Or with your own API key:
+
+```bash
+1claw spawn pydantic-ai --llm-api-key sk-...
+```
+
+## What's included
+
+- **agent.py** — Pydantic AI agent with typed tools and dependency injection
+- **Flask server** on port 3000 with `/chat` and `/health` endpoints
+- **Shroud integration** — LLM calls are routed through Shroud for inspection
+- **MCP server** — started automatically for tool access to 1Claw vault
+
+## Customizing
+
+Edit `agent.py` to define typed result models, add tools with
+`RunContext` dependency injection, or use structured output validation.
+Pydantic AI enforces type safety on tool inputs/outputs and agent results.
+
+## LLM authentication
+
+The template supports three methods (configured at spawn time):
+
+1. **BYOK** — `1claw spawn pydantic-ai --llm-api-key sk-...`
+2. **Token Billing** — enable in Dashboard, no key needed
+3. **Anthropic WIF** — OIDC federation for Anthropic models

package/dist/src/templates/pydantic-ai/agent.py

@@ -0,0 +1,110 @@
+"""
+Pydantic AI agent pre-wired with 1Claw MCP for secrets and signing.
+
+LLM calls are routed through Shroud when ONECLAW_LLM_VIA_SHROUD is set.
+The container never sees raw API keys — they are injected by the host daemon.
+"""
+
+import os
+import asyncio
+from dataclasses import dataclass
+from flask import Flask, request, jsonify
+from pydantic_ai import Agent, RunContext
+from pydantic_ai.models.openai import OpenAIModel
+from pydantic_ai.providers.openai import OpenAIProvider
+
+app = Flask(__name__)
+
+SHROUD_URL = os.environ.get("ONECLAW_SHROUD_URL", "https://shroud.1claw.xyz")
+LLM_VIA_SHROUD = os.environ.get("ONECLAW_LLM_VIA_SHROUD", "").lower() == "true"
+MODEL = os.environ.get("ONECLAW_SHROUD_MODEL", "gpt-4o-mini")
+
+
+@dataclass
+class AgentDeps:
+    agent_id: str
+
+
+def create_agent() -> Agent | None:
+    """Build the Pydantic AI agent. Returns None if no LLM."""
+    if not LLM_VIA_SHROUD:
+        return None
+
+    model = OpenAIModel(
+        MODEL,
+        provider=OpenAIProvider(
+            base_url=f"{SHROUD_URL}/v1",
+            api_key="shroud-injected",
+        ),
+    )
+
+    pydantic_agent = Agent(
+        model,
+        system_prompt=(
+            "You are a helpful AI agent running inside a secure 1Claw container. "
+            "You have access to tools for greeting and inspecting the environment."
+        ),
+        deps_type=AgentDeps,
+    )
+
+    @pydantic_agent.tool
+    async def hello_world(ctx: RunContext[AgentDeps], name: str) -> str:
+        """Say hello to someone."""
+        return f"Hello, {name}! I'm a Pydantic AI agent (agent: {ctx.deps.agent_id})."
+
+    @pydantic_agent.tool
+    async def list_env_vars(ctx: RunContext[AgentDeps]) -> str:
+        """List 1Claw-related environment variables (values redacted)."""
+        prefix = "ONECLAW_"
+        vars_list = [k for k in sorted(os.environ) if k.startswith(prefix)]
+        return "\n".join(f"  {k}=***" for k in vars_list) if vars_list else "No ONECLAW_* vars set."
+
+    return pydantic_agent
+
+
+agent = create_agent()
+
+
+@app.route("/health")
+def health():
+    return jsonify({"status": "ok", "framework": "pydantic-ai", "llm_wired": LLM_VIA_SHROUD})
+
+
+@app.route("/chat", methods=["POST"])
+def chat():
+    data = request.get_json(silent=True) or {}
+    message = data.get("message", "").strip()
+    if not message:
+        return jsonify({"error": "No message provided"}), 400
+
+    if not agent:
+        return jsonify({
+            "response": "No LLM configured. Use --llm-api-key or enable Token Billing.",
+            "framework": "pydantic-ai",
+        })
+
+    try:
+        deps = AgentDeps(agent_id=os.environ.get("ONECLAW_AGENT_ID", "unknown"))
+        result = asyncio.run(agent.run(message, deps=deps))
+        return jsonify({"response": result.output, "framework": "pydantic-ai"})
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+
+
+@app.route("/")
+def index():
+    return """<!DOCTYPE html>
+<html><head><title>1Claw Pydantic AI Agent</title></head>
+<body style="font-family:system-ui;max-width:600px;margin:40px auto;padding:0 20px">
+<h1>1Claw Pydantic AI Agent</h1>
+<p>Send messages via <code>POST /chat</code> with <code>{"message": "..."}</code></p>
+<p>Health: <a href="/health">/health</a></p>
+<p style="color:#666;font-size:0.9em">
+Credentials stay in the host daemon — this container never sees secret values.
+</p></body></html>"""
+
+
+if __name__ == "__main__":
+    port = int(os.environ.get("CHAT_UI_PORT", "3000"))
+    print(f"Pydantic AI agent listening on http://0.0.0.0:{port}")
+    app.run(host="0.0.0.0", port=port)

package/dist/src/templates/pydantic-ai/entrypoint.sh

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -e
+
+DAEMON_SOCKET="${ONECLAW_DAEMON_SOCKET:-/run/1claw/daemon.sock}"
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+
+echo "─────────────────────────────────────────────"
+echo " 1Claw Pydantic AI Agent"
+echo "   Framework: pydantic-ai"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+
+if [ -S "$DAEMON_SOCKET" ]; then
+    echo "   Mode:      ${ONECLAW_MODE:-cloud} (daemon socket)"
+    echo "   Socket:    $DAEMON_SOCKET"
+else
+    echo "   Mode:      standalone (no daemon socket)"
+fi
+echo "─────────────────────────────────────────────"
+
+if [ "$ONECLAW_LLM_VIA_SHROUD" = "true" ]; then
+    export OPENAI_BASE_URL="${ONECLAW_SHROUD_URL}/v1"
+    echo "LLM routed through Shroud: ${ONECLAW_SHROUD_PROVIDER}/${ONECLAW_SHROUD_MODEL}"
+fi
+
+if [ -S "$DAEMON_SOCKET" ]; then
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true ONECLAW_DAEMON_SOCKET="$DAEMON_SOCKET" \
+            1claw-mcp --local 2>/tmp/mcp.log &
+        echo "MCP server started in background."
+    fi
+fi
+
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec python agent.py

package/dist/src/templates/pydantic-ai/requirements.txt

@@ -0,0 +1,2 @@
+pydantic-ai>=0.2.0
+flask>=3.0.0

package/dist/src/templates/pydantic-ai/template.yaml

@@ -0,0 +1,24 @@
+name: pydantic-ai
+display_name: "Pydantic AI"
+version: 1.0.0
+description: "Type-safe Python agent with structured output"
+author: 1Claw
+language: python
+homepage: https://ai.pydantic.dev
+
+docker:
+  base_image: python:3.12-slim
+  context_files:
+    - Dockerfile
+    - requirements.txt
+    - agent.py
+    - entrypoint.sh
+  env:
+    ONECLAW_FRAMEWORK: pydantic-ai
+  health_endpoint: /health
+  health_port: 3000
+
+post_spawn_message: |
+  Edit agent.py to define your typed tools and result models.
+  Your 1Claw MCP server is available at the daemon socket.
+  LLM calls are routed through Shroud for inspection and redaction.

package/dist/src/templates/registry.d.ts

@@ -0,0 +1,48 @@
+export interface TemplateDocker {
+    base_image: string;
+    context_files: string[];
+    env: Record<string, string>;
+    health_endpoint: string;
+    health_port: number;
+}
+export interface TemplateManifest {
+    name: string;
+    display_name: string;
+    version: string;
+    description: string;
+    author: string;
+    language: "python" | "node";
+    homepage?: string;
+    docker: TemplateDocker;
+    post_spawn_message?: string;
+}
+export interface RegistryEntry {
+    name: string;
+    display_name: string;
+    version: string;
+    language: string;
+    description: string;
+}
+export interface RegistryIndex {
+    version: number;
+    templates: RegistryEntry[];
+}
+/**
+ * Try to find a template directory, checking (in order):
+ *   1. Local cache (~/.config/1claw/templates/<name>/)
+ *   2. Bundled templates (packages/agent-templates/templates/<name>/ via submodule)
+ */
+export declare function findTemplateDir(name: string): string | null;
+/** Load and validate a single template manifest by name. */
+export declare function loadTemplate(name: string): TemplateManifest;
+/** Get the resolved directory path for a template. */
+export declare function getTemplateDir(name: string): string;
+/** List all available template names (cached + bundled, deduplicated). */
+export declare function listTemplateNames(): string[];
+/** List all available templates as manifests. */
+export declare function listTemplates(): TemplateManifest[];
+/** Parse the registry.yaml index (from bundled or fetched). */
+export declare function parseRegistryIndex(content: string): RegistryIndex;
+/** Load the bundled registry.yaml if available. */
+export declare function loadBundledRegistry(): RegistryIndex | null;
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/templates/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/templates/registry.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,aAAa,EAAE,CAAC;CAC9B;AAkED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3D;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAkB3D;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMnD;AAsBD,0EAA0E;AAC1E,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAQ5C;AAED,iDAAiD;AACjD,wBAAgB,aAAa,IAAI,gBAAgB,EAAE,CAElD;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAgBjE;AAED,mDAAmD;AACnD,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,IAAI,CAU1D"}