npm - @1claw/cli - Versions diffs - 0.37.0 → 0.37.2 - Mend

@1claw/cli 0.37.0 → 0.37.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (173) hide show

package/dist/src/templates/pydantic-ai/agent.py ADDED Viewed

@@ -0,0 +1,110 @@
+"""
+Pydantic AI agent pre-wired with 1Claw MCP for secrets and signing.
+LLM calls are routed through Shroud when ONECLAW_LLM_VIA_SHROUD is set.
+The container never sees raw API keys — they are injected by the host daemon.
+"""
+import os
+import asyncio
+from dataclasses import dataclass
+from flask import Flask, request, jsonify
+from pydantic_ai import Agent, RunContext
+from pydantic_ai.models.openai import OpenAIModel
+from pydantic_ai.providers.openai import OpenAIProvider
+app = Flask(__name__)
+SHROUD_URL = os.environ.get("ONECLAW_SHROUD_URL", "https://shroud.1claw.xyz")
+LLM_VIA_SHROUD = os.environ.get("ONECLAW_LLM_VIA_SHROUD", "").lower() == "true"
+MODEL = os.environ.get("ONECLAW_SHROUD_MODEL", "gpt-4o-mini")
+@dataclass
+class AgentDeps:
+    agent_id: str
+def create_agent() -> Agent | None:
+    """Build the Pydantic AI agent. Returns None if no LLM."""
+    if not LLM_VIA_SHROUD:
+        return None
+    model = OpenAIModel(
+        MODEL,
+        provider=OpenAIProvider(
+            base_url=f"{SHROUD_URL}/v1",
+            api_key="shroud-injected",
+        ),
+    )
+    pydantic_agent = Agent(
+        model,
+        system_prompt=(
+            "You are a helpful AI agent running inside a secure 1Claw container. "
+            "You have access to tools for greeting and inspecting the environment."
+        ),
+        deps_type=AgentDeps,
+    )
+    @pydantic_agent.tool
+    async def hello_world(ctx: RunContext[AgentDeps], name: str) -> str:
+        """Say hello to someone."""
+        return f"Hello, {name}! I'm a Pydantic AI agent (agent: {ctx.deps.agent_id})."
+    @pydantic_agent.tool
+    async def list_env_vars(ctx: RunContext[AgentDeps]) -> str:
+        """List 1Claw-related environment variables (values redacted)."""
+        prefix = "ONECLAW_"
+        vars_list = [k for k in sorted(os.environ) if k.startswith(prefix)]
+        return "\n".join(f"  {k}=***" for k in vars_list) if vars_list else "No ONECLAW_* vars set."
+    return pydantic_agent
+agent = create_agent()
+@app.route("/health")
+def health():
+    return jsonify({"status": "ok", "framework": "pydantic-ai", "llm_wired": LLM_VIA_SHROUD})
+@app.route("/chat", methods=["POST"])
+def chat():
+    data = request.get_json(silent=True) or {}
+    message = data.get("message", "").strip()
+    if not message:
+        return jsonify({"error": "No message provided"}), 400
+    if not agent:
+        return jsonify({
+            "response": "No LLM configured. Use --llm-api-key or enable Token Billing.",
+            "framework": "pydantic-ai",
+        })
+    try:
+        deps = AgentDeps(agent_id=os.environ.get("ONECLAW_AGENT_ID", "unknown"))
+        result = asyncio.run(agent.run(message, deps=deps))
+        return jsonify({"response": result.output, "framework": "pydantic-ai"})
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+@app.route("/")
+def index():
+    return """<!DOCTYPE html>
+<html><head><title>1Claw Pydantic AI Agent</title></head>
+<body style="font-family:system-ui;max-width:600px;margin:40px auto;padding:0 20px">
+<h1>1Claw Pydantic AI Agent</h1>
+<p>Send messages via <code>POST /chat</code> with <code>{"message": "..."}</code></p>
+<p>Health: <a href="/health">/health</a></p>
+<p style="color:#666;font-size:0.9em">
+Credentials stay in the host daemon — this container never sees secret values.
+</p></body></html>"""
+if __name__ == "__main__":
+    port = int(os.environ.get("CHAT_UI_PORT", "3000"))
+    print(f"Pydantic AI agent listening on http://0.0.0.0:{port}")
+    app.run(host="0.0.0.0", port=port)

package/dist/src/templates/pydantic-ai/entrypoint.sh ADDED Viewed

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -e
+DAEMON_SOCKET="${ONECLAW_DAEMON_SOCKET:-/run/1claw/daemon.sock}"
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+echo "─────────────────────────────────────────────"
+echo " 1Claw Pydantic AI Agent"
+echo "   Framework: pydantic-ai"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+if [ -S "$DAEMON_SOCKET" ]; then
+    echo "   Mode:      ${ONECLAW_MODE:-cloud} (daemon socket)"
+    echo "   Socket:    $DAEMON_SOCKET"
+else
+    echo "   Mode:      standalone (no daemon socket)"
+fi
+echo "─────────────────────────────────────────────"
+if [ "$ONECLAW_LLM_VIA_SHROUD" = "true" ]; then
+    export OPENAI_BASE_URL="${ONECLAW_SHROUD_URL}/v1"
+    echo "LLM routed through Shroud: ${ONECLAW_SHROUD_PROVIDER}/${ONECLAW_SHROUD_MODEL}"
+fi
+if [ -S "$DAEMON_SOCKET" ]; then
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true ONECLAW_DAEMON_SOCKET="$DAEMON_SOCKET" \
+            1claw-mcp --local 2>/tmp/mcp.log &
+        echo "MCP server started in background."
+    fi
+fi
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec python agent.py

package/dist/src/templates/pydantic-ai/requirements.txt ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ pydantic-ai>=0.2.0
2	+ flask>=3.0.0

package/dist/src/templates/pydantic-ai/template.yaml ADDED Viewed

@@ -0,0 +1,24 @@
+name: pydantic-ai
+display_name: "Pydantic AI"
+version: 1.0.0
+description: "Type-safe Python agent with structured output"
+author: 1Claw
+language: python
+homepage: https://ai.pydantic.dev
+docker:
+  base_image: python:3.12-slim
+  context_files:
+    - Dockerfile
+    - requirements.txt
+    - agent.py
+    - entrypoint.sh
+  env:
+    ONECLAW_FRAMEWORK: pydantic-ai
+  health_endpoint: /health
+  health_port: 3000
+post_spawn_message: |
+  Edit agent.py to define your typed tools and result models.
+  Your 1Claw MCP server is available at the daemon socket.
+  LLM calls are routed through Shroud for inspection and redaction.

package/dist/src/templates/smolagents/Dockerfile ADDED Viewed

@@ -0,0 +1,34 @@
+FROM python:3.12-slim
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl tini && \
+    rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+RUN pip install --no-cache-dir 1claw-mcp 2>/dev/null || \
+    (apt-get update && apt-get install -y --no-install-recommends nodejs npm && \
+     npm install -g @1claw/mcp@latest && \
+     rm -rf /var/lib/apt/lists/*) || \
+    echo "WARN: 1claw-mcp install deferred to runtime"
+COPY agent.py .
+COPY entrypoint.sh .
+RUN chmod +x entrypoint.sh
+RUN mkdir -p /run/1claw
+ENV NODE_ENV=production
+ENV ONECLAW_DAEMON_SOCKET=/run/1claw/daemon.sock
+ENV ONECLAW_FRAMEWORK=smolagents
+EXPOSE 3000
+HEALTHCHECK --interval=10s --timeout=3s --start-period=10s --retries=5 \
+    CMD curl -sf http://localhost:3000/health || exit 1
+ENTRYPOINT ["tini", "--"]
+CMD ["./entrypoint.sh"]

package/dist/src/templates/smolagents/README.md ADDED Viewed

@@ -0,0 +1,36 @@
+# HuggingFace smolagents Template
+A Python agent using [smolagents](https://huggingface.co/docs/smolagents) — HuggingFace's lightweight agent framework — with 1Claw MCP for secrets management.
+## Quick start
+```bash
+1claw spawn smolagents
+```
+Or with your own API key:
+```bash
+1claw spawn smolagents --llm-api-key sk-...
+```
+## What's included
+- **agent.py** — CodeAgent with example tools (hello_world, list_env_vars)
+- **Flask server** on port 3000 with `/chat` and `/health` endpoints
+- **Shroud integration** — LLM calls are routed through Shroud for inspection
+- **MCP server** — started automatically for tool access to 1Claw vault
+## Customizing
+Edit `agent.py` to add custom tools, switch to `ToolCallingAgent`, or
+use HuggingFace Hub models directly. smolagents supports both code-based
+and tool-calling agent patterns.
+## LLM authentication
+The template supports three methods (configured at spawn time):
+1. **BYOK** — `1claw spawn smolagents --llm-api-key sk-...`
+2. **Token Billing** — enable in Dashboard, no key needed
+3. **Anthropic WIF** — OIDC federation for Anthropic models

package/dist/src/templates/smolagents/agent.py ADDED Viewed

@@ -0,0 +1,97 @@
+"""
+HuggingFace smolagents agent pre-wired with 1Claw MCP for secrets and signing.
+LLM calls are routed through Shroud when ONECLAW_LLM_VIA_SHROUD is set.
+The container never sees raw API keys — they are injected by the host daemon.
+"""
+import os
+from flask import Flask, request, jsonify
+from smolagents import CodeAgent, tool, OpenAIServerModel
+app = Flask(__name__)
+SHROUD_URL = os.environ.get("ONECLAW_SHROUD_URL", "https://shroud.1claw.xyz")
+LLM_VIA_SHROUD = os.environ.get("ONECLAW_LLM_VIA_SHROUD", "").lower() == "true"
+MODEL = os.environ.get("ONECLAW_SHROUD_MODEL", "gpt-4o-mini")
+@tool
+def hello_world(name: str) -> str:
+    """Say hello to someone.
+    Args:
+        name: the person to greet
+    """
+    return f"Hello, {name}! I'm a smolagents agent running inside 1Claw."
+@tool
+def list_env_vars() -> str:
+    """List 1Claw-related environment variables (values redacted)."""
+    prefix = "ONECLAW_"
+    vars_list = [k for k in sorted(os.environ) if k.startswith(prefix)]
+    return "\n".join(f"  {k}=***" for k in vars_list) if vars_list else "No ONECLAW_* vars set."
+def create_agent():
+    """Build the smolagents CodeAgent. Returns None if no LLM."""
+    if not LLM_VIA_SHROUD:
+        return None
+    model = OpenAIServerModel(
+        model_id=MODEL,
+        api_base=f"{SHROUD_URL}/v1",
+        api_key="shroud-injected",
+    )
+    return CodeAgent(
+        tools=[hello_world, list_env_vars],
+        model=model,
+    )
+agent = create_agent()
+@app.route("/health")
+def health():
+    return jsonify({"status": "ok", "framework": "smolagents", "llm_wired": LLM_VIA_SHROUD})
+@app.route("/chat", methods=["POST"])
+def chat():
+    data = request.get_json(silent=True) or {}
+    message = data.get("message", "").strip()
+    if not message:
+        return jsonify({"error": "No message provided"}), 400
+    if not agent:
+        return jsonify({
+            "response": "No LLM configured. Use --llm-api-key or enable Token Billing.",
+            "framework": "smolagents",
+        })
+    try:
+        result = agent.run(message)
+        return jsonify({"response": str(result), "framework": "smolagents"})
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+@app.route("/")
+def index():
+    return """<!DOCTYPE html>
+<html><head><title>1Claw smolagents Agent</title></head>
+<body style="font-family:system-ui;max-width:600px;margin:40px auto;padding:0 20px">
+<h1>1Claw HuggingFace smolagents</h1>
+<p>Send messages via <code>POST /chat</code> with <code>{"message": "..."}</code></p>
+<p>Health: <a href="/health">/health</a></p>
+<p style="color:#666;font-size:0.9em">
+Credentials stay in the host daemon — this container never sees secret values.
+</p></body></html>"""
+if __name__ == "__main__":
+    port = int(os.environ.get("CHAT_UI_PORT", "3000"))
+    print(f"smolagents agent listening on http://0.0.0.0:{port}")
+    app.run(host="0.0.0.0", port=port)

package/dist/src/templates/smolagents/entrypoint.sh ADDED Viewed

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -e
+DAEMON_SOCKET="${ONECLAW_DAEMON_SOCKET:-/run/1claw/daemon.sock}"
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+echo "─────────────────────────────────────────────"
+echo " 1Claw smolagents Agent"
+echo "   Framework: smolagents"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+if [ -S "$DAEMON_SOCKET" ]; then
+    echo "   Mode:      ${ONECLAW_MODE:-cloud} (daemon socket)"
+    echo "   Socket:    $DAEMON_SOCKET"
+else
+    echo "   Mode:      standalone (no daemon socket)"
+fi
+echo "─────────────────────────────────────────────"
+if [ "$ONECLAW_LLM_VIA_SHROUD" = "true" ]; then
+    export OPENAI_BASE_URL="${ONECLAW_SHROUD_URL}/v1"
+    echo "LLM routed through Shroud: ${ONECLAW_SHROUD_PROVIDER}/${ONECLAW_SHROUD_MODEL}"
+fi
+if [ -S "$DAEMON_SOCKET" ]; then
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true ONECLAW_DAEMON_SOCKET="$DAEMON_SOCKET" \
+            1claw-mcp --local 2>/tmp/mcp.log &
+        echo "MCP server started in background."
+    fi
+fi
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec python agent.py

package/dist/src/templates/smolagents/requirements.txt ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ smolagents>=1.0.0
2	+ flask>=3.0.0

package/dist/src/templates/smolagents/template.yaml ADDED Viewed

@@ -0,0 +1,24 @@
+name: smolagents
+display_name: "HuggingFace smolagents"
+version: 1.0.0
+description: "HuggingFace lightweight agents with 1Claw secrets"
+author: 1Claw
+language: python
+homepage: https://huggingface.co/docs/smolagents
+docker:
+  base_image: python:3.12-slim
+  context_files:
+    - Dockerfile
+    - requirements.txt
+    - agent.py
+    - entrypoint.sh
+  env:
+    ONECLAW_FRAMEWORK: smolagents
+  health_endpoint: /health
+  health_port: 3000
+post_spawn_message: |
+  Edit agent.py to add custom tools and change the agent type.
+  Your 1Claw MCP server is available at the daemon socket.
+  LLM calls are routed through Shroud for inspection and redaction.

package/dist/src/templates/typescript-sdk/Dockerfile ADDED Viewed

@@ -0,0 +1,31 @@
+FROM node:22-slim
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl tini && \
+    rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY package.json tsconfig.json ./
+RUN npm install --omit=dev 2>/dev/null || npm install
+RUN npm install -g @1claw/mcp@latest 2>/dev/null || \
+    echo "WARN: @1claw/mcp install deferred to runtime"
+COPY agent.ts .
+COPY entrypoint.sh .
+RUN chmod +x entrypoint.sh
+RUN mkdir -p /run/1claw
+ENV NODE_ENV=production
+ENV ONECLAW_DAEMON_SOCKET=/run/1claw/daemon.sock
+ENV ONECLAW_FRAMEWORK=typescript-sdk
+EXPOSE 3000
+HEALTHCHECK --interval=10s --timeout=3s --start-period=10s --retries=5 \
+    CMD curl -sf http://localhost:3000/health || exit 1
+ENTRYPOINT ["tini", "--"]
+CMD ["./entrypoint.sh"]

package/dist/src/templates/typescript-sdk/README.md ADDED Viewed

@@ -0,0 +1,29 @@
+# 1Claw TypeScript SDK Agent Template
+Plain TypeScript agent using [@1claw/sdk](https://www.npmjs.com/package/@1claw/sdk) for vault access, multi-chain signing, and Vercel AI SDK for LLM interaction through Shroud.
+## Quick start
+```bash
+1claw spawn typescript-sdk --agent-key ocv_YOUR_KEY
+```
+## What's included
+- `agent.ts` — TypeScript agent with `@1claw/sdk` client, AI SDK tool calling, and `/chat` + `/health` endpoints
+- `Dockerfile` — Node 22 slim image with `@1claw/mcp` for vault access
+- `entrypoint.sh` — Daemon socket detection, Shroud wiring, MCP server startup
+## LLM authentication
+```bash
+# Bring your own key (stored in vault, routed through Shroud)
+1claw spawn typescript-sdk --agent-key ocv_YOUR_KEY --llm-api-key sk-...
+# Use 1Claw Token Billing (no provider key needed)
+1claw spawn typescript-sdk --agent-key ocv_YOUR_KEY
+```
+## Customization
+Edit `agent.ts` to add tools, integrate with your own services, or use additional @1claw/sdk features like `signIntent()`, `submitTransaction()`, or `leaseBankrKey()`.

package/dist/src/templates/typescript-sdk/agent.ts ADDED Viewed

@@ -0,0 +1,130 @@
+/**
+ * Plain TypeScript agent using @1claw/sdk for vault access and signing,
+ * with Vercel AI SDK for LLM interaction through Shroud.
+ *
+ * LLM calls are routed through Shroud when ONECLAW_LLM_VIA_SHROUD is set.
+ * The container never sees raw API keys — they are injected by the host daemon.
+ */
+import { createServer } from "node:http";
+import { OneclawClient } from "@1claw/sdk";
+import { createOpenAI } from "@ai-sdk/openai";
+import { generateText, tool } from "ai";
+import { z } from "zod";
+const SHROUD_URL = process.env.ONECLAW_SHROUD_URL ?? "https://shroud.1claw.xyz";
+const LLM_VIA_SHROUD = process.env.ONECLAW_LLM_VIA_SHROUD === "true";
+const MODEL = process.env.ONECLAW_SHROUD_MODEL ?? "gpt-4o-mini";
+const PORT = parseInt(process.env.CHAT_UI_PORT ?? "3000", 10);
+const conversationHistory: { role: "user" | "assistant"; content: string }[] = [];
+const claw = new OneclawClient({
+  apiKey: process.env.ONECLAW_AGENT_API_KEY,
+  agentId: process.env.ONECLAW_AGENT_ID,
+  baseUrl: process.env.ONECLAW_BASE_URL ?? "https://api.1claw.xyz",
+});
+const openai = LLM_VIA_SHROUD
+  ? createOpenAI({ baseURL: `${SHROUD_URL}/v1`, apiKey: "shroud-injected" })
+  : null;
+const listSecretsTool = tool({
+  description: "List secrets in the 1Claw vault (names only, no values)",
+  parameters: z.object({ prefix: z.string().optional().describe("Path prefix filter") }),
+  execute: async ({ prefix }) => {
+    try {
+      const vaultId = process.env.ONECLAW_VAULT_ID;
+      if (!vaultId) return "No vault configured.";
+      const resp = await claw.secrets.list(vaultId, prefix);
+      const secrets = (resp as any).data?.secrets ?? [];
+      return secrets.length
+        ? secrets.map((s: any) => `  ${s.path} (${s.type ?? "generic"})`).join("\n")
+        : "No secrets found.";
+    } catch (e: any) {
+      return `Error: ${e.message}`;
+    }
+  },
+});
+const envTool = tool({
+  description: "List 1Claw-related environment variables (values redacted)",
+  parameters: z.object({}),
+  execute: async () => {
+    const vars = Object.keys(process.env)
+      .filter((k) => k.startsWith("ONECLAW_"))
+      .sort()
+      .map((k) => `  ${k}=***`);
+    return vars.length ? vars.join("\n") : "No ONECLAW_* vars set.";
+  },
+});
+async function handleChat(message: string): Promise<string> {
+  if (!openai) {
+    return "No LLM configured. Use --llm-api-key or enable Token Billing.";
+  }
+  conversationHistory.push({ role: "user", content: message });
+  const { text } = await generateText({
+    model: openai(MODEL),
+    system:
+      "You are a helpful AI agent running inside a secure 1Claw container. " +
+      "You have access to the 1Claw SDK for vault secrets and multi-chain signing. " +
+      "Be helpful and concise.",
+    messages: conversationHistory,
+    tools: { listSecrets: listSecretsTool, env: envTool },
+  });
+  conversationHistory.push({ role: "assistant", content: text });
+  return text;
+}
+const server = createServer(async (req, res) => {
+  if (req.url === "/health" && req.method === "GET") {
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(
+      JSON.stringify({ status: "ok", framework: "typescript-sdk", llm_wired: LLM_VIA_SHROUD }),
+    );
+    return;
+  }
+  if (req.url === "/chat" && req.method === "POST") {
+    const chunks: Buffer[] = [];
+    for await (const chunk of req) chunks.push(chunk as Buffer);
+    const body = JSON.parse(Buffer.concat(chunks).toString());
+    const message = (body.message ?? "").trim();
+    if (!message) {
+      res.writeHead(400, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "No message provided" }));
+      return;
+    }
+    try {
+      const response = await handleChat(message);
+      res.writeHead(200, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ response, framework: "typescript-sdk" }));
+    } catch (e: any) {
+      res.writeHead(500, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: e.message }));
+    }
+    return;
+  }
+  res.writeHead(200, { "Content-Type": "text/html" });
+  res.end(`<!DOCTYPE html>
+<html><head><title>1Claw TypeScript Agent</title></head>
+<body style="font-family:system-ui;max-width:600px;margin:40px auto;padding:0 20px">
+<h1>1Claw TypeScript Agent</h1>
+<p>Send messages via <code>POST /chat</code> with <code>{"message": "..."}</code></p>
+<p>Health: <a href="/health">/health</a></p>
+<p style="color:#666;font-size:0.9em">
+Uses @1claw/sdk for vault access and multi-chain signing.
+Credentials stay in the host daemon — this container never sees secret values.
+</p></body></html>`);
+});
+server.listen(PORT, "0.0.0.0", () => {
+  console.log(`TypeScript SDK agent listening on http://0.0.0.0:${PORT}`);
+});

package/dist/src/templates/typescript-sdk/entrypoint.sh ADDED Viewed

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -e
+DAEMON_SOCKET="${ONECLAW_DAEMON_SOCKET:-/run/1claw/daemon.sock}"
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+echo "─────────────────────────────────────────────"
+echo " 1Claw TypeScript SDK Agent"
+echo "   Framework: @1claw/sdk (TypeScript)"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+if [ -S "$DAEMON_SOCKET" ]; then
+    echo "   Mode:      ${ONECLAW_MODE:-cloud} (daemon socket)"
+    echo "   Socket:    $DAEMON_SOCKET"
+else
+    echo "   Mode:      standalone (no daemon socket)"
+fi
+echo "─────────────────────────────────────────────"
+if [ "$ONECLAW_LLM_VIA_SHROUD" = "true" ]; then
+    export OPENAI_BASE_URL="${ONECLAW_SHROUD_URL}/v1"
+    echo "LLM routed through Shroud: ${ONECLAW_SHROUD_PROVIDER}/${ONECLAW_SHROUD_MODEL}"
+fi
+if [ -S "$DAEMON_SOCKET" ]; then
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true ONECLAW_DAEMON_SOCKET="$DAEMON_SOCKET" \
+            1claw-mcp --local 2>/tmp/mcp.log &
+        echo "MCP server started in background."
+    fi
+fi
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec npx tsx agent.ts

package/dist/src/templates/typescript-sdk/package.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "name": "1claw-typescript-agent",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "tsx agent.ts",
+    "dev": "tsx watch agent.ts"
+  },
+  "dependencies": {
+    "@1claw/sdk": "latest",
+    "@ai-sdk/openai": "^1.0.0",
+    "ai": "^4.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+  }
+}

package/dist/src/templates/typescript-sdk/template.yaml ADDED Viewed

@@ -0,0 +1,25 @@
+name: typescript-sdk
+display_name: "TypeScript SDK"
+version: 1.0.0
+description: "Plain TypeScript agent using @1claw/sdk with Shroud LLM routing"
+author: 1Claw
+language: node
+homepage: https://docs.1claw.xyz
+docker:
+  base_image: node:22-slim
+  context_files:
+    - Dockerfile
+    - package.json
+    - tsconfig.json
+    - agent.ts
+    - entrypoint.sh
+  env:
+    ONECLAW_FRAMEWORK: typescript-sdk
+  health_endpoint: /health
+  health_port: 3000
+post_spawn_message: |
+  Edit agent.ts to customize your TypeScript agent.
+  The @1claw/sdk client is pre-configured for vault access and signing.
+  LLM calls are routed through Shroud for inspection and redaction.