@1claw/mcp 0.61.0 → 0.63.1

package/dist/index.js

@@ -1,762 +1,19 @@
 #!/usr/bin/env node
+// 1claw MCP server — umbrella entrypoint: every toolset, the full client.
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
-import { FastMCP, UserError } from "fastmcp";
-import { z } from "zod";
-import { OneClawClient, OneClawApiError } from "./client.js";
-import { listSecretsTool } from "./tools/list_secrets.js";
-import { getSecretTool } from "./tools/get_secret.js";
-import { putSecretTool } from "./tools/put_secret.js";
-import { deleteSecretTool } from "./tools/delete_secret.js";
-import { describeSecretTool } from "./tools/describe_secret.js";
-import { createVaultTool } from "./tools/create_vault.js";
-import { listVaultsTool } from "./tools/list_vaults.js";
-import { grantAccessTool } from "./tools/grant_access.js";
-import { shareSecretTool } from "./tools/share_secret.js";
-import { simulateTransactionTool } from "./tools/simulate_transaction.js";
-import { simulateBundleTool } from "./tools/simulate_bundle.js";
-import { submitTransactionTool } from "./tools/submit_transaction.js";
-import { signTransactionTool } from "./tools/sign_transaction.js";
-import { listTransactionsTool } from "./tools/list_transactions.js";
-import { getTransactionTool } from "./tools/get_transaction.js";
-import { provisionSigningKeyTool } from "./tools/provision_signing_key.js";
-import { listSigningKeysTool } from "./tools/list_signing_keys.js";
-import { signMessageTool } from "./tools/sign_message.js";
-import { signTypedDataTool } from "./tools/sign_typed_data.js";
-import { signDigestTool } from "./tools/sign_digest.js";
-import { leaseBankrKeyTool } from "./tools/lease_bankr_key.js";
-import { orderCardTool, orderGiftCardTool } from "./tools/order_card.js";
-import { listCardsTool, getCardStatusTool, searchGiftCardsTool, } from "./tools/list_cards.js";
-import { getSigningKeyBalanceTool } from "./tools/get_signing_key_balance.js";
-import { inspectContentTool } from "./tools/inspect_content.js";
-import { platformListAppsTool } from "./tools/platform_list_apps.js";
-import { platformCreateAppTool } from "./tools/platform_create_app.js";
-import { platformBootstrapUserTool } from "./tools/platform_bootstrap_user.js";
-import { platformReissueClaimTool } from "./tools/platform_reissue_claim.js";
-import { platformRotateKeyTool } from "./tools/platform_rotate_key.js";
-import { platformListTemplatesTool } from "./tools/platform_list_templates.js";
-import { listDirectoryJobsTool, getDirectoryJobTool, submitDirectoryJobBidTool, } from "./tools/directory_jobs.js";
-import { platformGetFleetTool, platformListFleetAgentsTool, platformPlanFleetRolloutTool, } from "./tools/platform_fleet.js";
-import { platformCreateTemplateTool } from "./tools/platform_create_template.js";
-import { platformListUsersTool } from "./tools/platform_list_users.js";
-import { platformGrantAccessTool } from "./tools/platform_grant_access.js";
-import { platformListGrantsTool } from "./tools/platform_list_grants.js";
-import { listApprovalsTool } from "./tools/list_approvals.js";
-import { getApprovalTool } from "./tools/get_approval.js";
-import { getApprovalStatusTool } from "./tools/get_approval_status.js";
-import { requestApprovalTool } from "./tools/request_approval.js";
-import { treasuryProposeTool } from "./tools/treasury_propose.js";
-import { treasurySignProposalTool } from "./tools/treasury_sign_proposal.js";
-import { treasuryListProposalsTool } from "./tools/treasury_list_proposals.js";
-import { executeHttpTool } from "./tools/execute_http.js";
-import { executeIntentTool } from "./tools/execute_intent.js";
-import { listBindingsTool } from "./tools/list_bindings.js";
-import { createBindingTool } from "./tools/create_binding.js";
-import { testBindingTool } from "./tools/test_binding.js";
-import { listExecutionsTool } from "./tools/list_executions.js";
-import { putMemoryTool } from "./tools/put_memory.js";
-import { getMemoryTool } from "./tools/get_memory.js";
-import { listMemoryTool } from "./tools/list_memory.js";
-import { deleteMemoryTool } from "./tools/delete_memory.js";
-import { listAutomationsTool } from "./tools/list_automations.js";
-import { createAgentAutomationTool } from "./tools/create_agent_automation.js";
-import { listAutomationPresetsTool } from "./tools/list_automation_presets.js";
-import { triggerAutomationTool } from "./tools/trigger_automation.js";
-import { cancelAutomationRunTool } from "./tools/cancel_automation_run.js";
-import { listRuntimesTool } from "./tools/list_runtimes.js";
-import { manageRuntimeTool } from "./tools/manage_runtime.js";
-import { searchDirectoryTool } from "./tools/search_directory.js";
-import { searchMemoryTool } from "./tools/search_memory.js";
-import { runtimeStatusTool } from "./tools/runtime_status.js";
-import { runtimeLogsTool } from "./tools/runtime_logs.js";
-import { sendChatMessageTool } from "./tools/send_chat_message.js";
-import { listChatConversationsTool } from "./tools/list_chat_conversations.js";
-import { createChannelTool } from "./tools/create_channel.js";
-import { listChannelsTool } from "./tools/list_channels.js";
-import { sendChannelMessageTool } from "./tools/send_channel_message.js";
-import { listConnectorPresetsTool } from "./tools/list_connector_presets.js";
-import { listNotificationTargetsTool } from "./tools/list_notification_targets.js";
-import { getPeerContextTool } from "./tools/get_peer_context.js";
-import { listInstalledConnectorsTool } from "./tools/list_installed_connectors.js";
-import { listOAuthProvidersTool } from "./tools/list_oauth_providers.js";
-import { listOAuthConnectionsTool } from "./tools/list_oauth_connections.js";
-import { oauthRevokeTokenTool } from "./tools/oauth_revoke_token.js";
-import { oauthRevokeConsentTool } from "./tools/oauth_revoke_consent.js";
-import { orgDirectoryTool } from "./tools/org_directory.js";
-import { delegateTaskTool } from "./tools/delegate_task.js";
-import { listDelegationsTool, createDelegationTool, getEffectiveDelegationsTool } from "./tools/delegation.js";
-import { platformMarketplaceTool } from "./tools/platform_marketplace.js";
-import { platformAppStatsTool } from "./tools/platform_app_stats.js";
-import { platformRotateWebhookSecretTool } from "./tools/platform_rotate_webhook_secret.js";
-import { platformSiweChallengeTool, platformGetConnectionTool, platformConnectionUsageTool, platformListEntitlementsTool, platformPreviewTemplateTool, platformTransferOwnershipTool, platformDeleteAppTool, platformGetSpendPolicyTool, platformGetConnectionSpendPolicyTool, platformListConnectionApprovalsTool, platformGetConnectionApprovalTool, platformListConnectionPendingApprovalsTool, platformGetTemplateTool, platformSetConnectionSpendPolicyTool, platformCreateConnectionRuntimeTool, platformGetConnectionRuntimeTool, platformConnectionPasskeyEnrollBeginTool, platformConnectionPasskeyEnrollCompleteTool, platformConnectionAgentChatTool, platformDecideConnectionPendingApprovalTool, platformDecideConnectionApprovalTool, platformListConnectionSigningKeysTool, platformGetConnectionSigningKeyTool, platformDeactivateConnectionSigningKeyTool, platformPatchConnectionAgentTool, platformCreateConnectionPendingApprovalTool, platformGetConnectionPortfolioTool, platformListConnectionAutomationsTool, } from "./tools/platform_expansion.js";
-import { importSigningKeyTool } from "./tools/import_signing_key.js";
-import { listCedarPoliciesTool } from "./tools/list_cedar_policies.js";
-import { testCedarPolicyTool } from "./tools/test_cedar_policy.js";
-import { listOpaPoliciesTool } from "./tools/list_opa_policies.js";
-import { testOpaPolicyTool } from "./tools/test_opa_policy.js";
-import { listSubOrgsTool } from "./tools/list_sub_orgs.js";
-import { createSubOrgTool } from "./tools/create_sub_org.js";
-import { getPortfolioTool } from "./tools/get_portfolio.js";
-import { importSmartAccountTool } from "./tools/import_smart_account.js";
-import { getPolicyBackendSettingsTool, updatePolicyBackendSettingsTool, getShadowReportTool } from "./tools/policy_backend.js";
-import { getGuardrailShadowReportTool, listGuardrailRevisionsTool, replayAgentGuardrailsTool, } from "./tools/guardrail_governance.js";
-import { uploadContractAbiTool, listContractAbisTool } from "./tools/contract_abis.js";
-import { listPendingApprovalsTool, approvePendingApprovalTool, executePendingApprovalTool } from "./tools/pending_approvals.js";
-import { listAgentAccountsTool, migrateAgentToSafeTool, deprecateAgentEoaTool, getSafeModuleRegistryTool, syncOrgSafeAllowancesTool, } from "./tools/safe_accounts.js";
-import { inspectInput, inspectOutput, isSecurityEnabled, registerSecret, isSecretRedactionEnabled } from "./security/index.js";
-import { isLocalDaemonMode, createLocalClient } from "./local-client.js";
-import { proxyRequestTool } from "./tools/proxy_request.js";
-const baseUrl = process.env.ONECLAW_BASE_URL ?? "https://api.1claw.co";
-const transport = process.env.MCP_TRANSPORT ?? "stdio";
-const port = parseInt(process.env.PORT ?? "8080", 10);
-// When true, only security-inspection tools are registered (no vault credentials needed).
-const localOnly = process.env.ONECLAW_LOCAL_ONLY === "true" ||
-    process.env.ONECLAW_LOCAL_ONLY === "1";
-/** Build client from current process.env (stdio). Re-read each invocation so vault ID is not frozen at startup (C-MPC-VAULT). */
-function createStdioClientFromEnv() {
-    const vaultId = process.env.ONECLAW_VAULT_ID;
-    const agentId = process.env.ONECLAW_AGENT_ID;
-    const agentApiKey = process.env.ONECLAW_AGENT_API_KEY;
-    const token = process.env.ONECLAW_AGENT_TOKEN;
-    if (agentApiKey) {
-        return new OneClawClient({
-            baseUrl,
-            agentId: agentId || undefined,
-            apiKey: agentApiKey,
-            vaultId: vaultId || undefined,
-        });
-    }
-    if (token) {
-        if (!vaultId) {
-            throw new UserError("ONECLAW_VAULT_ID is required when using ONECLAW_AGENT_TOKEN (static JWT).");
-        }
-        return new OneClawClient({ baseUrl, token, vaultId, runtimeId: process.env.ONECLAW_RUNTIME_ID || undefined });
-    }
-    throw new UserError("Authentication required. Set ONECLAW_AGENT_API_KEY or ONECLAW_AGENT_TOKEN + ONECLAW_VAULT_ID.");
-}
-if (transport === "stdio" && !localOnly && !isLocalDaemonMode()) {
-    const agentApiKey = process.env.ONECLAW_AGENT_API_KEY;
-    const token = process.env.ONECLAW_AGENT_TOKEN;
-    if (!agentApiKey && !token) {
-        console.error("Authentication required. Set one of:\n" +
-            "  ONECLAW_AGENT_API_KEY                      (simplest, auto-discovers agent ID and vault)\n" +
-            "  ONECLAW_AGENT_ID + ONECLAW_AGENT_API_KEY   (explicit agent ID)\n" +
-            "  ONECLAW_AGENT_TOKEN + ONECLAW_VAULT_ID     (static JWT, expires)\n" +
-            "  ONECLAW_LOCAL_ONLY=true                    (security tools only, no vault needed)\n" +
-            "  ONECLAW_LOCAL_VAULT=true                   (local daemon mode, no cloud auth needed)");
-        process.exit(1);
-    }
-    if (!agentApiKey && token && !process.env.ONECLAW_VAULT_ID) {
-        console.error("ONECLAW_VAULT_ID is required when using ONECLAW_AGENT_TOKEN (static JWT).");
-        process.exit(1);
-    }
-}
-function resolveClient(session) {
-    if (session) {
-        if ("agentApiKey" in session) {
-            return new OneClawClient({
-                baseUrl,
-                agentId: session.agentId,
-                apiKey: session.agentApiKey,
-                vaultId: session.vaultId,
-                runtimeId: session.runtimeId,
-            });
-        }
-        return new OneClawClient({
-            baseUrl,
-            token: session.token,
-            vaultId: session.vaultId,
-            runtimeId: session.runtimeId,
-        });
-    }
-    if (transport === "stdio" && !localOnly) {
-        return createStdioClientFromEnv();
-    }
-    throw new UserError("Not authenticated. Provide Authorization header (Bearer <ocv_api_key> or Bearer <jwt>).");
-}
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
+import { OneClawClient } from "./client.js";
+import { TOOLSET_MODULES } from "./toolsets/index.js";
+import { startServer } from "./core/server.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(join(__dirname, "../package.json"), "utf8"));
-const serverOpts = {
+/** Resolves once the server is listening. Also the handle the in-process test harness uses. */
+export const running = startServer({
     name: "1claw",
     version: pkg.version,
-    health: { enabled: true, path: "/health" },
-};
-if (transport === "httpStream") {
-    serverOpts.authenticate = async (request) => {
-        const auth = (request.headers["authorization"] ?? "");
-        const credential = auth.replace(/^Bearer\s+/i, "").trim();
-        const vaultIdHeader = (request.headers["x-vault-id"] ?? "");
-        const agentIdHeader = (request.headers["x-agent-id"] ?? "");
-        const runtimeIdHeader = (request.headers["x-1claw-runtime-id"] ??
-            request.headers["X-1Claw-Runtime-Id"] ??
-            "");
-        const runtimeIdFromJwtPayload = (token) => {
-            try {
-                const parts = token.split(".");
-                if (parts.length !== 3)
-                    return undefined;
-                const payload = JSON.parse(Buffer.from(parts[1].replace(/-/g, "+").replace(/_/g, "/"), "base64").toString());
-                return typeof payload.runtime_id === "string" &&
-                    payload.runtime_id.length > 0
-                    ? payload.runtime_id
-                    : undefined;
-            }
-            catch {
-                return undefined;
-            }
-        };
-        const vaultAuthHeaders = (token, runtimeId) => {
-            const headers = {
-                Authorization: `Bearer ${token}`,
-            };
-            if (runtimeId) {
-                headers["X-1Claw-Runtime-Id"] = runtimeId;
-            }
-            return headers;
-        };
-        if (!credential)
-            throw new Error("Missing Authorization header (Bearer <ocv_api_key> or Bearer <jwt>)");
-        // SEC-005: Only accept agent API keys (ocv_). Reject human and platform keys.
-        if (credential.startsWith("1ck_")) {
-            throw new Error("MCP server only accepts agent API keys (ocv_). Human API keys (1ck_) should use the SDK or dashboard.");
-        }
-        if (credential.startsWith("plt_")) {
-            throw new Error("MCP server only accepts agent API keys (ocv_). Platform API keys (plt_) should use the SDK.");
-        }
-        // ── API key path: exchange for JWT, auto-discover vault ──
-        if (credential.startsWith("ocv_")) {
-            const body = { api_key: credential };
-            if (agentIdHeader)
-                body.agent_id = agentIdHeader;
-            const tokenRes = await fetch(`${baseUrl}/v1/auth/agent-token`, {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify(body),
-            });
-            if (!tokenRes.ok) {
-                const status = tokenRes.status;
-                let detail = `HTTP ${status}`;
-                try {
-                    const errBody = await tokenRes.json();
-                    if (errBody.detail)
-                        detail = errBody.detail;
-                }
-                catch { /* use default */ }
-                throw new Error(`Agent API key auth failed: ${detail}`);
-            }
-            const data = await tokenRes.json();
-            const resolvedVaultId = vaultIdHeader ||
-                (data.vault_ids && data.vault_ids.length === 1
-                    ? data.vault_ids[0]
-                    : "");
-            if (resolvedVaultId && data.access_token) {
-                const checkRes = await fetch(`${baseUrl}/v1/vaults/${resolvedVaultId}`, {
-                    headers: vaultAuthHeaders(data.access_token, runtimeIdHeader || undefined),
-                });
-                if (!checkRes.ok && checkRes.status === 404) {
-                    throw new Error(`Vault ${resolvedVaultId} not found`);
-                }
-            }
-            return {
-                agentApiKey: credential,
-                agentId: data.agent_id || agentIdHeader || undefined,
-                vaultId: resolvedVaultId || undefined,
-                runtimeId: runtimeIdHeader || undefined,
-            };
-        }
-        // ── JWT path (legacy): static token, requires X-Vault-ID ──
-        if (!vaultIdHeader)
-            throw new Error("Missing X-Vault-ID header (required when using a JWT; use an ocv_ API key instead for auto-discovery)");
-        // SEC-005: Verify the JWT belongs to an agent (sub starts with "agent:")
-        try {
-            const parts = credential.split(".");
-            if (parts.length === 3) {
-                const payload = JSON.parse(Buffer.from(parts[1].replace(/-/g, "+").replace(/_/g, "/"), "base64").toString());
-                if (payload.sub && typeof payload.sub === "string" && !payload.sub.startsWith("agent:")) {
-                    throw new Error("MCP server only accepts agent JWTs. This token belongs to a non-agent principal.");
-                }
-            }
-        }
-        catch (e) {
-            if (e instanceof Error && e.message.includes("MCP server only accepts"))
-                throw e;
-        }
-        // H-9: Validate token against the vault API (not just pass-through).
-        const runtimeId = runtimeIdHeader || runtimeIdFromJwtPayload(credential) || undefined;
-        const validationRes = await fetch(`${baseUrl}/v1/vaults/${vaultIdHeader}`, {
-            headers: vaultAuthHeaders(credential, runtimeId),
-        });
-        if (!validationRes.ok) {
-            const status = validationRes.status;
-            if (status === 401) {
-                throw new Error("Invalid or expired Bearer token");
-            }
-            if (status === 403) {
-                throw new Error("X-Vault-ID is not accessible with this token (vault binding mismatch)");
-            }
-            if (status === 404) {
-                throw new Error(`Vault ${vaultIdHeader} not found`);
-            }
-            throw new Error(`Token validation failed (HTTP ${status})`);
-        }
-        return { token: credential, vaultId: vaultIdHeader, runtimeId };
-    };
-}
-const server = new FastMCP(serverOpts);
-function registerTool(factory) {
-    const proto = factory(new OneClawClient({ baseUrl, token: "", vaultId: "" }));
-    server.addTool({
-        name: proto.name,
-        description: proto.description,
-        parameters: proto.parameters,
-        execute: async (args, context) => {
-            // SEC-004: Resolve session scope for tenant-isolated secret matching
-            const sessionScope = context.session
-                ? ("agentId" in context.session && context.session.agentId)
-                    ? context.session.agentId
-                    : ("vaultId" in context.session ? context.session.vaultId : undefined)
-                : undefined;
-            // Security inspection of input
-            if (isSecurityEnabled()) {
-                const inputCheck = inspectInput(proto.name, args, sessionScope);
-                if (!inputCheck.passed) {
-                    const threat = inputCheck.threats[0];
-                    context.log.info(`[SECURITY] Blocked ${proto.name}: ${threat?.type} (${threat?.pattern})`);
-                    throw new UserError(`Security check failed: ${threat?.type} detected`);
-                }
-                if (inputCheck.threats.length > 0) {
-                    context.log.info(`[SECURITY] Warnings for ${proto.name}: ${inputCheck.threats.map(t => t.pattern).join(", ")}`);
-                }
-            }
-            const client = resolveClient(context.session);
-            const tool = factory(client);
-            const result = await tool.execute(args, context);
-            // Track secret values for redaction and exfiltration protection
-            if (isSecretRedactionEnabled()) {
-                if (proto.name === "get_secret") {
-                    try {
-                        const parsed = JSON.parse(result);
-                        if (parsed.value && parsed.path)
-                            registerSecret(parsed.path, parsed.value, sessionScope);
-                    }
-                    catch { /* not JSON — skip */ }
-                }
-                if (proto.name === "get_env_bundle") {
-                    try {
-                        const env = JSON.parse(result);
-                        for (const [key, val] of Object.entries(env)) {
-                            if (typeof val === "string")
-                                registerSecret(`env:${key}`, val, sessionScope);
-                        }
-                    }
-                    catch { /* not JSON — skip */ }
-                }
-            }
-            // Security inspection of output (redacts secrets, detects PII, logs threats)
-            if (isSecurityEnabled()) {
-                const outputCheck = inspectOutput(proto.name, result, sessionScope);
-                if (outputCheck.threats.length > 0) {
-                    context.log.info(`[SECURITY] Output warnings for ${proto.name}: ${outputCheck.threats.map(t => t.pattern).join(", ")}`);
-                }
-                if (outputCheck.redacted) {
-                    context.log.info(`[SECURITY] Redacted secret values from ${proto.name} output`);
-                    return outputCheck.redacted;
-                }
-            }
-            return result;
-        },
-    });
-}
-// ── Security-only tools (always available, including local-only mode) ─
-{
-    const tool = inspectContentTool();
-    server.addTool({
-        name: tool.name,
-        description: tool.description,
-        parameters: tool.parameters,
-        execute: async (args, context) => {
-            return tool.execute(args, context);
-        },
-    });
-}
-// ── Local daemon tools (available when ONECLAW_LOCAL_VAULT=true) ──
-if (isLocalDaemonMode()) {
-    const localClient = createLocalClient();
-    const proxyTool = proxyRequestTool(localClient);
-    server.addTool({
-        name: proxyTool.name,
-        description: proxyTool.description,
-        parameters: proxyTool.parameters,
-        execute: async (args, context) => {
-            return proxyTool.execute(args, context);
-        },
-    });
-    // In local mode, list_secrets uses the daemon (shows names only, no values)
-    server.addTool({
-        name: "list_secrets",
-        description: "List secret names in the local vault. Values are never exposed. " +
-            "Use proxy_request to make API calls with secrets injected.",
-        parameters: z.object({}),
-        execute: async (_args, { log }) => {
-            const result = await localClient.listSecrets();
-            log.info(`Listed ${result.secrets.length} local secrets`);
-            return JSON.stringify(result.secrets);
-        },
-    });
-}
-// ── Vault tools (require credentials — skipped in local-only mode) ─
-if (!localOnly && !isLocalDaemonMode()) {
-    registerTool(listSecretsTool);
-    registerTool(getSecretTool);
-    registerTool(putSecretTool);
-    registerTool(deleteSecretTool);
-    registerTool(describeSecretTool);
-    registerTool(createVaultTool);
-    registerTool(listVaultsTool);
-    registerTool(grantAccessTool);
-    registerTool(shareSecretTool);
-    registerTool(simulateTransactionTool);
-    registerTool(simulateBundleTool);
-    registerTool(submitTransactionTool);
-    registerTool(signTransactionTool);
-    registerTool(listTransactionsTool);
-    registerTool(getTransactionTool);
-    registerTool(provisionSigningKeyTool);
-    registerTool(listSigningKeysTool);
-    registerTool(signMessageTool);
-    registerTool(signTypedDataTool);
-    registerTool(signDigestTool);
-    registerTool(leaseBankrKeyTool);
-    registerTool(getSigningKeyBalanceTool);
-    registerTool(platformListAppsTool);
-    registerTool(platformCreateAppTool);
-    registerTool(platformBootstrapUserTool);
-    registerTool(platformReissueClaimTool);
-    registerTool(platformRotateKeyTool);
-    registerTool(platformListTemplatesTool);
-    registerTool(platformGetFleetTool);
-    registerTool(platformListFleetAgentsTool);
-    registerTool(platformPlanFleetRolloutTool);
-    registerTool(listDirectoryJobsTool);
-    registerTool(getDirectoryJobTool);
-    registerTool(submitDirectoryJobBidTool);
-    registerTool(platformCreateTemplateTool);
-    registerTool(platformListUsersTool);
-    registerTool(platformGrantAccessTool);
-    registerTool(platformListGrantsTool);
-    registerTool(platformSiweChallengeTool);
-    registerTool(platformGetConnectionTool);
-    registerTool(platformConnectionUsageTool);
-    registerTool(platformListEntitlementsTool);
-    registerTool(platformPreviewTemplateTool);
-    registerTool(platformTransferOwnershipTool);
-    registerTool(platformDeleteAppTool);
-    registerTool(platformGetSpendPolicyTool);
-    registerTool(platformGetConnectionSpendPolicyTool);
-    registerTool(platformListConnectionApprovalsTool);
-    registerTool(platformGetConnectionApprovalTool);
-    registerTool(platformListConnectionPendingApprovalsTool);
-    registerTool(platformGetTemplateTool);
-    registerTool(platformSetConnectionSpendPolicyTool);
-    registerTool(platformCreateConnectionRuntimeTool);
-    registerTool(platformGetConnectionRuntimeTool);
-    registerTool(platformConnectionPasskeyEnrollBeginTool);
-    registerTool(platformConnectionPasskeyEnrollCompleteTool);
-    registerTool(platformConnectionAgentChatTool);
-    registerTool(platformDecideConnectionPendingApprovalTool);
-    registerTool(platformDecideConnectionApprovalTool);
-    registerTool(platformListConnectionSigningKeysTool);
-    registerTool(platformGetConnectionSigningKeyTool);
-    registerTool(platformDeactivateConnectionSigningKeyTool);
-    registerTool(platformPatchConnectionAgentTool);
-    registerTool(platformCreateConnectionPendingApprovalTool);
-    registerTool(platformGetConnectionPortfolioTool);
-    registerTool(platformListConnectionAutomationsTool);
-    registerTool(listApprovalsTool);
-    registerTool(getApprovalTool);
-    registerTool(getApprovalStatusTool);
-    registerTool(requestApprovalTool);
-    registerTool(treasuryProposeTool);
-    registerTool(treasurySignProposalTool);
-    registerTool(treasuryListProposalsTool);
-    registerTool(executeHttpTool);
-    registerTool(executeIntentTool);
-    registerTool(listBindingsTool);
-    registerTool(createBindingTool);
-    registerTool(testBindingTool);
-    registerTool(listExecutionsTool);
-    registerTool(orderCardTool);
-    registerTool(orderGiftCardTool);
-    registerTool(searchGiftCardsTool);
-    registerTool(listCardsTool);
-    registerTool(getCardStatusTool);
-    registerTool(putMemoryTool);
-    registerTool(getMemoryTool);
-    registerTool(listMemoryTool);
-    registerTool(deleteMemoryTool);
-    registerTool(listAutomationsTool);
-    registerTool(createAgentAutomationTool);
-    registerTool(listAutomationPresetsTool);
-    registerTool(triggerAutomationTool);
-    registerTool(cancelAutomationRunTool);
-    registerTool(listRuntimesTool);
-    registerTool(manageRuntimeTool);
-    registerTool(searchDirectoryTool);
-    registerTool(searchMemoryTool);
-    registerTool(runtimeStatusTool);
-    registerTool(runtimeLogsTool);
-    registerTool(sendChatMessageTool);
-    registerTool(listChatConversationsTool);
-    registerTool(createChannelTool);
-    registerTool(listChannelsTool);
-    registerTool(sendChannelMessageTool);
-    registerTool(listOAuthProvidersTool);
-    registerTool(listConnectorPresetsTool);
-    registerTool(listNotificationTargetsTool);
-    registerTool(getPeerContextTool);
-    registerTool(listInstalledConnectorsTool);
-    registerTool(listOAuthConnectionsTool);
-    registerTool(oauthRevokeTokenTool);
-    registerTool(oauthRevokeConsentTool);
-    registerTool(orgDirectoryTool);
-    registerTool(delegateTaskTool);
-    registerTool(listDelegationsTool);
-    registerTool(createDelegationTool);
-    registerTool(getEffectiveDelegationsTool);
-    registerTool(platformMarketplaceTool);
-    registerTool(platformAppStatsTool);
-    registerTool(platformRotateWebhookSecretTool);
-    registerTool(importSigningKeyTool);
-    registerTool(listCedarPoliciesTool);
-    registerTool(testCedarPolicyTool);
-    registerTool(listOpaPoliciesTool);
-    registerTool(testOpaPolicyTool);
-    registerTool(listSubOrgsTool);
-    registerTool(createSubOrgTool);
-    registerTool(getPortfolioTool);
-    registerTool(importSmartAccountTool);
-    registerTool(getPolicyBackendSettingsTool);
-    registerTool(updatePolicyBackendSettingsTool);
-    registerTool(getShadowReportTool);
-    registerTool(getGuardrailShadowReportTool);
-    registerTool(listGuardrailRevisionsTool);
-    registerTool(replayAgentGuardrailsTool);
-    registerTool(uploadContractAbiTool);
-    registerTool(listContractAbisTool);
-    registerTool(listPendingApprovalsTool);
-    registerTool(approvePendingApprovalTool);
-    registerTool(executePendingApprovalTool);
-    registerTool(listAgentAccountsTool);
-    registerTool(migrateAgentToSafeTool);
-    registerTool(deprecateAgentEoaTool);
-    registerTool(getSafeModuleRegistryTool);
-    registerTool(syncOrgSafeAllowancesTool);
-}
-// ── Vault-dependent stretch tools + resource ─────────
-if (!localOnly && !isLocalDaemonMode()) {
-    const rotateAndStoreTool = (client) => ({
-        name: "rotate_and_store",
-        description: "Store a new value for an existing secret (creating a new version) and return the version number. Useful when an agent has regenerated an API key and needs to persist it.",
-        parameters: z.object({
-            path: z.string().min(1).describe("Secret path to rotate"),
-            value: z.string().min(1).describe("The new secret value"),
-            type: z.string().optional().describe("Secret type (api_key, password, etc.). Uses existing type if omitted."),
-        }),
-        execute: async (args, context) => {
-            const result = await client.putSecret(args.path, {
-                value: args.value,
-                type: args.type ?? "api_key",
-            });
-            context.log.info(`secret rotated: ${args.path}`);
-            return `Rotated secret at '${args.path}'. New version: ${result.version}.`;
-        },
-    });
-    registerTool(rotateAndStoreTool);
-    const rotateGenerateTool = (client) => ({
-        name: "rotate_generate",
-        description: "Server-side secret rotation: generates a cryptographically random value and stores it as a new version. The secret value never leaves the server. Returns the new version number.",
-        parameters: z.object({
-            path: z.string().min(1).describe("Secret path to rotate"),
-            length: z.number().min(8).max(1024).optional().describe("Length of generated value (default 32)"),
-            charset: z.enum(["hex", "base64", "alphanumeric", "ascii"]).optional().describe("Character set (default hex)"),
-        }),
-        execute: async (args, context) => {
-            const result = await client.rotateGenerate(args.path, {
-                length: args.length,
-                charset: args.charset,
-            });
-            context.log.info(`secret rotated (server-generated): ${args.path}`);
-            return `Rotated secret at '${args.path}' with server-generated value. New version: ${result.version}.`;
-        },
-    });
-    registerTool(rotateGenerateTool);
-    const listVersionsTool = (client) => ({
-        name: "list_versions",
-        description: "List all versions of a secret at the given path. Returns version numbers, creation dates, and disabled status.",
-        parameters: z.object({
-            path: z.string().min(1).describe("Secret path"),
-        }),
-        execute: async (args, context) => {
-            const result = await client.listVersions(args.path);
-            context.log.info(`listed versions: ${args.path}`);
-            const versions = result.versions ?? [];
-            if (versions.length === 0)
-                return `No versions found for '${args.path}'.`;
-            const lines = versions.map((v) => `v${v.version} (${v.created_at})${v.is_disabled ? " [disabled]" : ""}`);
-            return `Versions for '${args.path}' (${versions.length} total):\n${lines.join("\n")}`;
-        },
-    });
-    registerTool(listVersionsTool);
-    // ── Stretch: get_env_bundle ──────────────────────────
-    // Registered via registerTool so input/output go through security inspection.
-    const getEnvBundleTool = (client) => ({
-        name: "get_env_bundle",
-        description: "Fetch a secret of type env_bundle, parse its KEY=VALUE lines, and return a structured JSON object. Useful for injecting environment variables into subprocesses.",
-        parameters: z.object({
-            path: z.string().min(1).describe("Path to an env_bundle secret"),
-        }),
-        execute: async (args, context) => {
-            try {
-                const secret = await client.getSecret(args.path);
-                context.log.info(`env_bundle accessed: ${args.path}`);
-                if (secret.type !== "env_bundle") {
-                    throw new UserError(`Secret at '${args.path}' is type '${secret.type}', not 'env_bundle'.`);
-                }
-                const env = {};
-                for (const line of secret.value.split("\n")) {
-                    const trimmed = line.trim();
-                    if (!trimmed || trimmed.startsWith("#"))
-                        continue;
-                    const eqIdx = trimmed.indexOf("=");
-                    if (eqIdx === -1)
-                        continue;
-                    env[trimmed.slice(0, eqIdx)] = trimmed.slice(eqIdx + 1);
-                }
-                return JSON.stringify(env, null, 2);
-            }
-            catch (err) {
-                if (err instanceof OneClawApiError) {
-                    if (err.status === 410) {
-                        throw new UserError(`Secret at path '${args.path}' is expired or has exceeded its maximum access count.`);
-                    }
-                    if (err.status === 404) {
-                        throw new UserError(`No secret found at path '${args.path}'.`);
-                    }
-                }
-                throw err;
-            }
-        },
-    });
-    registerTool(getEnvBundleTool);
-    // ── resolve_env: Resolve env vars for a vault (Phase 4) ──────────────────────────
-    const resolveEnvTool = (client) => ({
-        name: "resolve_env",
-        description: "Resolve environment variables for a vault, returning the final KEY=VALUE set with precedence applied (shared < vault < branch override). If environment is omitted, the agent's tagged environment is used automatically.",
-        parameters: z.object({
-            environment: z
-                .string()
-                .optional()
-                .describe("Target environment (production, preview, development, or custom). Omit to use the agent's tagged environment."),
-            git_branch: z
-                .string()
-                .optional()
-                .describe("Optional git branch for preview overrides"),
-        }),
-        execute: async (args, context) => {
-            const result = await client.resolveEnvVars(args.environment, args.git_branch);
-            const envLabel = args.environment ?? "(agent default)";
-            context.log.info(`Resolved env vars for ${envLabel}${args.git_branch ? ` (branch: ${args.git_branch})` : ""}: ${Object.keys(result.vars ?? {}).length} variables`);
-            return JSON.stringify(result, null, 2);
-        },
-    });
-    registerTool(resolveEnvTool);
-} // end if (!localOnly) — stretch tools
-// ── Resource: browsable secret listing ───────────────
-if (!localOnly) {
-    server.addResource({
-        uri: "vault://secrets",
-        name: "Vault secrets",
-        description: "Browsable listing of all secret paths in the configured vault (metadata only, no values).",
-        mimeType: "application/json",
-        async load(auth) {
-            const client = resolveClient(auth);
-            const data = await client.listSecrets();
-            return {
-                text: JSON.stringify(data.secrets.map((s) => ({
-                    path: s.path,
-                    type: s.type,
-                    version: s.version,
-                    expires_at: s.expires_at,
-                })), null, 2),
-            };
-        },
-    });
-} // end if (!localOnly) — resource
-// ── Rate limiting (httpStream only) ──────────────────
-if (transport === "httpStream") {
-    const RATE_LIMIT_WINDOW_MS = 60_000;
-    const RATE_LIMIT_MAX = 60;
-    const hits = new Map();
-    // Periodic sweep to prevent unbounded growth
-    const sweepTimer = setInterval(() => {
-        const now = Date.now();
-        for (const [ip, bucket] of hits) {
-            if (now >= bucket.resetAt)
-                hits.delete(ip);
-        }
-    }, RATE_LIMIT_WINDOW_MS);
-    if (typeof sweepTimer === "object" && "unref" in sweepTimer) {
-        sweepTimer.unref();
-    }
-    const app = server.getApp();
-    app.get("/.well-known/oauth-protected-resource", (c) => {
-        const resource = process.env.ONECLAW_MCP_RESOURCE_URL ??
-            `${process.env.ONECLAW_PUBLIC_MCP_URL ?? "https://mcp.1claw.co"}/mcp`;
-        return c.json({
-            resource,
-            authorization_servers: [
-                process.env.ONECLAW_BASE_URL ?? "https://api.1claw.co",
-            ],
-            bearer_methods_supported: ["header"],
-            scopes_supported: ["openid", "profile", "email"],
-        });
-    });
-    app.use("*", async (c, next) => {
-        // L2: Use rightmost XFF entry (closest to the trusted edge proxy)
-        const xff = c.req.header("x-forwarded-for");
-        const ip = (xff ? xff.split(",").pop()?.trim() : undefined) ||
-            c.req.header("x-real-ip") ||
-            "unknown";
-        const now = Date.now();
-        let bucket = hits.get(ip);
-        if (!bucket || now >= bucket.resetAt) {
-            bucket = { count: 0, resetAt: now + RATE_LIMIT_WINDOW_MS };
-            hits.set(ip, bucket);
-        }
-        bucket.count++;
-        c.header("RateLimit-Limit", String(RATE_LIMIT_MAX));
-        c.header("RateLimit-Remaining", String(Math.max(0, RATE_LIMIT_MAX - bucket.count)));
-        c.header("RateLimit-Reset", String(Math.ceil(bucket.resetAt / 1000)));
-        if (bucket.count > RATE_LIMIT_MAX) {
-            return c.json({ error: "Too many requests, please try again later." }, 429);
-        }
-        await next();
-    });
-}
-// ── Start ────────────────────────────────────────────
-if (transport === "httpStream") {
-    server.start({
-        transportType: "httpStream",
-        httpStream: { port, host: "0.0.0.0" },
-    });
-    console.log(`1claw MCP server listening on port ${port} (HTTP streaming)${localOnly ? " [local-only mode]" : ""}`);
-}
-else {
-    server.start({ transportType: "stdio" });
-    if (localOnly) {
-        console.error("1claw MCP server started in local-only mode (security tools only, no vault credentials required)");
-    }
-}
+    modules: TOOLSET_MODULES,
+    createClient: (config) => new OneClawClient(config),
+});
+export const started = running.then(() => undefined);
 //# sourceMappingURL=index.js.map