@1claw/cli 0.59.4 → 0.59.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -9
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
# @1claw/cli (v0.59.4)
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
> ⭐ **Star [1clawAI/agent-templates](https://github.com/1clawAI/agent-templates)** — ready-to-run agent templates wired to 1Claw. It is our single starred repo.
|
|
4
|
+
|
|
5
|
+
Command-line interface for [1Claw](https://1claw.co).
|
|
4
6
|
|
|
5
7
|
Use the CLI when you want vault and agent operations from a terminal, a CI pipeline, or a shell script. Create vaults, rotate secrets, provision agents, set policies, submit transactions, and import `.env` files without opening the dashboard.
|
|
6
8
|
|
|
@@ -36,7 +38,7 @@ npx @1claw/cli login
|
|
|
36
38
|
1claw login
|
|
37
39
|
```
|
|
38
40
|
|
|
39
|
-
Opens your browser to `1claw.
|
|
41
|
+
Opens your browser to `1claw.co/cli/verify` where you confirm the login code. The CLI polls for approval and stores the token locally in `~/.config/1claw/`.
|
|
40
42
|
|
|
41
43
|
### Email/password login
|
|
42
44
|
|
|
@@ -130,7 +132,7 @@ Password reset only applies to **email/password** accounts (not Google/SSO-only)
|
|
|
130
132
|
|
|
131
133
|
`set-password` is for Platform API users provisioned via OIDC who don't have a password yet. `change-email` sends a 6-digit verification code to the new address and prompts you to enter it inline.
|
|
132
134
|
|
|
133
|
-
`auth federated-token` uses your current 1claw credential as the **subject_token** and asks 1claw (an OIDC issuer at `https://api.1claw.
|
|
135
|
+
`auth federated-token` uses your current 1claw credential as the **subject_token** and asks 1claw (an OIDC issuer at `https://api.1claw.co`) for a short-lived **RS256** JWT scoped to the `audience`. The acting agent must have `federation_enabled = true` and the audience must be on its `federation_audiences` allowlist (set in the dashboard or via `agents.update`). Pair with `--raw` for shell pipelines, e.g. Anthropic Workload Identity Federation:
|
|
134
136
|
|
|
135
137
|
```bash
|
|
136
138
|
ANTHROPIC_OIDC=$(1claw auth federated-token -a https://api.anthropic.com --raw)
|
|
@@ -280,8 +282,8 @@ When Intents API is enabled, configure graduated human-in-the-loop thresholds an
|
|
|
280
282
|
--clear-auto-suspended # Clear circuit-breaker suspension (owner/admin)
|
|
281
283
|
|
|
282
284
|
# Org emergency stop (owner/admin)
|
|
283
|
-
curl -X POST https://api.1claw.
|
|
284
|
-
curl -X POST https://api.1claw.
|
|
285
|
+
curl -X POST https://api.1claw.co/v1/org/freeze -H "Authorization: Bearer $ONECLAW_TOKEN"
|
|
286
|
+
curl -X POST https://api.1claw.co/v1/org/unfreeze -H "Authorization: Bearer $ONECLAW_TOKEN"
|
|
285
287
|
```
|
|
286
288
|
|
|
287
289
|
Matching transactions return **202** `awaiting_approval` with an `approval_id`. Approve via dashboard or `1claw approval decide <id> --decision approved`.
|
|
@@ -742,7 +744,7 @@ Supported events: `wallet.transfer.sent`, `wallet.transfer.received`, `proposal.
|
|
|
742
744
|
1claw proxy # Start a local OpenAI-compatible proxy → Shroud (default :11434)
|
|
743
745
|
1claw proxy --port 8080 # Use a specific port (auto-falls-forward if busy)
|
|
744
746
|
1claw proxy --provider anthropic # Force a provider instead of auto-detecting from model
|
|
745
|
-
1claw proxy --shroud-url https://shroud.1claw.
|
|
747
|
+
1claw proxy --shroud-url https://shroud.1claw.co # Override Shroud endpoint
|
|
746
748
|
1claw proxy -v # Verbose: log each proxied request
|
|
747
749
|
```
|
|
748
750
|
|
|
@@ -1012,7 +1014,7 @@ Configure AI clients to use the daemon instead of the cloud API:
|
|
|
1012
1014
|
1claw setup --local
|
|
1013
1015
|
```
|
|
1014
1016
|
|
|
1015
|
-
This sets `ONECLAW_LOCAL_VAULT=true` and `ONECLAW_DAEMON_SOCKET` in the MCP config, so the MCP server connects to the local daemon instead of `api.1claw.
|
|
1017
|
+
This sets `ONECLAW_LOCAL_VAULT=true` and `ONECLAW_DAEMON_SOCKET` in the MCP config, so the MCP server connects to the local daemon instead of `api.1claw.co`. The model uses `proxy_request` to make API calls with secrets injected — the secret value never enters the model's context.
|
|
1016
1018
|
|
|
1017
1019
|
### Architecture
|
|
1018
1020
|
|
|
@@ -1038,7 +1040,7 @@ AI Client (Claude, Cursor, etc.)
|
|
|
1038
1040
|
1claw init --docker --list-modules # List available modules
|
|
1039
1041
|
```
|
|
1040
1042
|
|
|
1041
|
-
When the cloud is reachable, `init` provisions an agent + vault + read policy and stores the agent key in your local vault (the daemon injects it toward `*.1claw.
|
|
1043
|
+
When the cloud is reachable, `init` provisions an agent + vault + read policy and stores the agent key in your local vault (the daemon injects it toward `*.1claw.co`). With `--local`, nothing touches the cloud. The base image is built from bundled assets if it isn't already present, so the flow works offline.
|
|
1042
1044
|
|
|
1043
1045
|
### Chat with an LLM through Shroud
|
|
1044
1046
|
|
|
@@ -1279,7 +1281,7 @@ Config is stored in `~/.config/1claw/config.json`. Keys:
|
|
|
1279
1281
|
|
|
1280
1282
|
| Key | Default | Description |
|
|
1281
1283
|
| --------------- | ----------------------- | ------------------------------------------- |
|
|
1282
|
-
| `api-url` | `https://api.1claw.
|
|
1284
|
+
| `api-url` | `https://api.1claw.co` | API base URL |
|
|
1283
1285
|
| `output-format` | `table` | Default output: `table`, `json`, or `plain` |
|
|
1284
1286
|
| `default-vault` | (none) | Default vault ID for commands |
|
|
1285
1287
|
|
package/package.json
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@1claw/cli",
|
|
3
|
-
"version": "0.59.
|
|
3
|
+
"version": "0.59.6",
|
|
4
4
|
"description": "CLI for 1Claw — secrets management for AI agents and humans",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
7
7
|
"type": "git",
|
|
8
8
|
"url": "https://github.com/1clawAI/1claw-cli"
|
|
9
9
|
},
|
|
10
|
-
"homepage": "https://1claw.
|
|
10
|
+
"homepage": "https://1claw.co",
|
|
11
11
|
"bin": {
|
|
12
12
|
"1claw": "./dist/bin/1claw.js"
|
|
13
13
|
},
|